# 4.19.0-rc.3

Created: 2025-05-20 18:52:13 +0000 UTC

Image Digest: `sha256:8970801dee5031571f971bdf922d351f884065ceb3e441c173c8350b3956a229`


## Changes from 4.19.0-rc.1

### Components

* Kubectl 1.32.1
* Kubernetes 1.32.4
* Kubernetes Tests 1.32.4
* Red Hat Enterprise Linux CoreOS upgraded from 9.6.20250512-0 to 9.6.20250514-0


### Rebuilt images without code change

* [agent-installer-api-server](https://github.com/openshift/assisted-service) git [5b1d4660](https://github.com/openshift/assisted-service/commit/5b1d46609e5fc58a83fdc2ea2159ae652d156a9d) `sha256:12f7d2013ee86be43be0819fe953a882049517b9537fd10ea02b5ba26f19821f`
* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [0de29205](https://github.com/openshift/assisted-installer/commit/0de29205c8b99bdfdc12271281d5830f185d8f8c) `sha256:000ba9fa2d4e4f0390901bc3efd752cae81d5c6a48610bfdcf8b36cdfe32b359`
* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [7172669c](https://github.com/openshift/cluster-node-tuning-operator/commit/7172669c93307a2474c48911fd95f04a40aa4ea7) `sha256:573f862d14a34f4704d381e6741c3ad4d4f57f3cd3e960e6a76e1b0af391dcee`
* [docker-builder](https://github.com/openshift/builder) git [f2e5d601](https://github.com/openshift/builder/commit/f2e5d60196778fd5452b345d93fc821218e3d2f3) `sha256:a35e2549109e9f6a239690f28767a73ad861162f7fbfdf5762b8857ce77f13e7`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [686fdac5](https://github.com/openshift/driver-toolkit/commit/686fdac595884ade83fef7b2b9c41169bf3fcb21) `sha256:7f39049d6eead0d1d64e0e9cceda1e6f614b2813e46168fcfaf8273483fd6dbe`
* [ironic](https://github.com/openshift/ironic-image) git [8a2091a6](https://github.com/openshift/ironic-image/commit/8a2091a6cfd25a6bc91b0714de25af904cc733ee) `sha256:a6a757c491fd712b0fee1f38181323031b077cdfd58dd3b2bb9d8ffdea2b7554`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [dbe19772](https://github.com/openshift/ironic-rhcos-downloader/commit/dbe197724c9e2e5f7279665e5bcb16ff3bc8d97b) `sha256:8cabad26d3212552fd752e988f461957c615accf1998a0681b978a58f4e23732`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [32b5f16c](https://github.com/openshift/machine-os-images/commit/32b5f16c7f59698b40cc2a23116804d9067824d2) `sha256:fd437f117e59af8decaaae1802bd07e6660ef1068c0e6ab8380cb6f19f9a9494`
* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [36276526](https://github.com/openshift/monitoring-plugin/commit/362765260b5b4cbfe29e85aa6e82532ba509f300) `sha256:7d93047413c6500e2d9ffe5eb4ac1f994855c3f9dc07402a8b8dd4458ed96416`
* [must-gather](https://github.com/openshift/must-gather) git [463c03ca](https://github.com/openshift/must-gather/commit/463c03ca559bb00f324b11273763aa64543f9006) `sha256:283eb73fb4d4aed696eec5636f7926a0e47e4bd1020db35811373f10381ff87c`
* [network-tools](https://github.com/openshift/network-tools) git [ebd18d14](https://github.com/openshift/network-tools/commit/ebd18d146a6f06df7e403e771d16bd960b3d891f) `sha256:e0d00cd7d349f57f038c72cc9f4d76cdde1c78f1fa38b1077ba9ef2a7c4df52c`
* [networking-console-plugin](https://github.com/openshift/networking-console-plugin) git [581812ac](https://github.com/openshift/networking-console-plugin/commit/581812ac48f8f2e414050bff933f6b07fe98bb28) `sha256:7407bf8a75a280a23e6eaacc9005225f1c2654d8b7ed3c291d9fa8693cd3631a`
* [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes) git [bfd593c2](https://github.com/openshift/ovn-kubernetes/commit/bfd593c2783b8ab720f19e62e4dcfa9b8b2881fb) `sha256:621ccf2b988a20ef99d7d0737b23494a97973194859220b0e9e3c759137354d1`
* rhel-coreos `sha256:bb63b13cb9cd0b8c4398f17498f004aff2e7ad770f28c84dc532069ae3a76526`
* rhel-coreos-extensions `sha256:5b9b71ea93be07698cd3b681745ef94371b3e431b276a23986df038d84b0cfe4`


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/766df82081a65c57df4a0a5d19cea6635a31314c)

* [OCPBUGS-56216](https://issues.redhat.com/browse/OCPBUGS-56216): OVE builder: Remove RHEL9 image from additionalImages [#92](https://github.com/openshift/agent-installer-utils/pull/92)
* [OCPBUGS-56116](https://issues.redhat.com/browse/OCPBUGS-56116): configure the channel for each OLM operators [#90](https://github.com/openshift/agent-installer-utils/pull/90)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/d7d4c451dfc2dc4365847ab2007390844c630d5d...766df82081a65c57df4a0a5d19cea6635a31314c)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/802452086a937fc7ac01e26542a05c697b363933)

* [OCPBUGS-55998](https://issues.redhat.com/browse/OCPBUGS-55998): Update manifests to remove reliance on v1beta1 admission registration [#552](https://github.com/openshift/cluster-api-provider-aws/pull/552)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/005a7656f03fa9b993bceffdc85ff5918e16111a...802452086a937fc7ac01e26542a05c697b363933)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/180d12f3c63388fb71150e8ce67dfb1e8e881c70)

* [OCPBUGS-55068](https://issues.redhat.com/browse/OCPBUGS-55068): Update RHCOS 4.19 bootimage metadata to 9.6.20250513-0 [#9721](https://github.com/openshift/installer/pull/9721)
* [OCPBUGS-56006](https://issues.redhat.com/browse/OCPBUGS-56006): [release-4.19] CORS-3634, CORS-3771, CORS-3772: Azure doc: add support for Lsv4, Lasv4, Dxv6, NDs and NV series [#9702](https://github.com/openshift/installer/pull/9702)
* [OKD-251](https://issues.redhat.com/browse/OKD-251): Update SCOS 4.19 bootimage metadata to 9.0.20250510-0 [#9714](https://github.com/openshift/installer/pull/9714)
* [OCPBUGS-56061](https://issues.redhat.com/browse/OCPBUGS-56061): fixes to get shellcheck to pass [#9705](https://github.com/openshift/installer/pull/9705)
* [OCPBUGS-56140](https://issues.redhat.com/browse/OCPBUGS-56140): apply fixes for yaml-lint errors [#9710](https://github.com/openshift/installer/pull/9710)
* [OCPBUGS-56075](https://issues.redhat.com/browse/OCPBUGS-56075): Pre-create password files for agent installer OVE [#9707](https://github.com/openshift/installer/pull/9707)
* [Full changelog](https://github.com/openshift/installer/compare/ac4fce322037a5894cd07ee7304a89f80e54739b...180d12f3c63388fb71150e8ce67dfb1e8e881c70)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/c88fd60ed9c4a349d52770884b3aad828432d01d)

* [OCPBUGS-56203](https://issues.redhat.com/browse/OCPBUGS-56203): Adding sos.conf file for default sos config into the tools image [#2020](https://github.com/openshift/oc/pull/2020)
* [Full changelog](https://github.com/openshift/oc/compare/e468aa68e754e22997f526fcdbbd470387ff5e33...c88fd60ed9c4a349d52770884b3aad828432d01d)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/409aa6893af94d8de67d07b03293676b5523412a)

* [OCPBUGS-56054](https://issues.redhat.com/browse/OCPBUGS-56054): golang.org/x/net v0.38.0 [#858](https://github.com/openshift/cloud-credential-operator/pull/858)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/9c3346aea5a7f9a38713c09d11605b8ee825446c...409aa6893af94d8de67d07b03293676b5523412a)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/479f0c4edcfc5bc5706600070e8b8c142e59a5d4)

* [OCPBUGS-55998](https://issues.redhat.com/browse/OCPBUGS-55998): Regenerate manifests to drop usage of v1beta1 admissionregistration [#237](https://github.com/openshift/cluster-api/pull/237)
* [Full changelog](https://github.com/openshift/cluster-api/compare/7e2de8d31922c9e9a1bf93dba1816b2d65a2df3d...479f0c4edcfc5bc5706600070e8b8c142e59a5d4)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/321712b12b7a71240a49efa83e0bb5a1d6ada3d7)

* [OCPBUGS-56105](https://issues.redhat.com/browse/OCPBUGS-56105), [OCPCLOUD-2893](https://issues.redhat.com/browse/OCPCLOUD-2893): Add related objects to must-gather config [#296](https://github.com/openshift/cluster-capi-operator/pull/296)
* [OCPBUGS-56055](https://issues.redhat.com/browse/OCPBUGS-56055): fix: machine: propagate non-authoritative deletion [#294](https://github.com/openshift/cluster-capi-operator/pull/294)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/72ad6eb01a1ffd8deb49e83f74caa7aed8ae1eff...321712b12b7a71240a49efa83e0bb5a1d6ada3d7)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/fdefa0ae9d888d5a76d23508de8e1a58a1872d54)

* [OCPBUGS-56109](https://issues.redhat.com/browse/OCPBUGS-56109): adjust alerts according to platform [#1423](https://github.com/openshift/cluster-etcd-operator/pull/1423)
* [OCPBUGS-55691](https://issues.redhat.com/browse/OCPBUGS-55691): Remove 'meta' keyword from pcs resource create command [#1420](https://github.com/openshift/cluster-etcd-operator/pull/1420)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/145959693ebe5a4412c468f4ec5cd4163cb68acc...fdefa0ae9d888d5a76d23508de8e1a58a1872d54)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/6d54169d4c6643ae9b6ff81b3a21b929934062fa)

* [OCPBUGS-56213](https://issues.redhat.com/browse/OCPBUGS-56213): Check capabilities before watching OLM resource [#1233](https://github.com/openshift/cluster-ingress-operator/pull/1233)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/2e6bd66d4ad11f58b8dea2677a94751bb372dca5...6d54169d4c6643ae9b6ff81b3a21b929934062fa)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/446153e4e3cec78da777fef34c51a40ba6e8006b)

* [OCPBUGS-56266](https://issues.redhat.com/browse/OCPBUGS-56266): SCC: add hostmount-anyuid-v2 [#1844](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1844)
* [OCPBUGS-55709](https://issues.redhat.com/browse/OCPBUGS-55709): bump library-go to bring in updated audit policies [#1840](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1840)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/23b5175aa2d5b8f7364ef4aed1966745d6735c2a...446153e4e3cec78da777fef34c51a40ba6e8006b)


### [console](https://github.com/openshift/console/tree/2df0bb9fd97692256585a3ac033d375deb1fb246)

* [OCPBUGS-56077](https://issues.redhat.com/browse/OCPBUGS-56077): remove 60 day alert from cluster update modal [#15047](https://github.com/openshift/console/pull/15047)
* [Full changelog](https://github.com/openshift/console/compare/95ac1dc4492962bfd9db2e73a0e9dae33cc420b2...2df0bb9fd97692256585a3ac033d375deb1fb246)


### [console-operator](https://github.com/openshift/console-operator/tree/9af3e5fd7bbcb72975c7316bba38ea13c4937320)

* [OCPBUGS-55842](https://issues.redhat.com/browse/OCPBUGS-55842): Lift FeatureGate by bumping openshift/api [#986](https://github.com/openshift/console-operator/pull/986)
* [Full changelog](https://github.com/openshift/console-operator/compare/b6949a5f482005f25095b0c0dc68460e3873dffd...9af3e5fd7bbcb72975c7316bba38ea13c4937320)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/c736cbfdc99bd2f3ed955fa6ebd3568984e57c87)

* [OCPBUGS-56027](https://issues.redhat.com/browse/OCPBUGS-56027): [cinder-csi-plugin] Don't report topology capability when --with-topology=False [#323](https://github.com/openshift/cloud-provider-openstack/pull/323)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/68986f5ba00648402ec4ca9da7303ff509689ab1...c736cbfdc99bd2f3ed955fa6ebd3568984e57c87)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/9fe7dfdeb6714effef45be12ec451a0f06893660)

* [OCPBUGS-56193](https://issues.redhat.com/browse/OCPBUGS-56193): UPSTREAM: 131236: RWX tests should create RWX volumes [#2301](https://github.com/openshift/kubernetes/pull/2301)
* [OCPBUGS-55895](https://issues.redhat.com/browse/OCPBUGS-55895): Fix node expansion on older kubelets [#2289](https://github.com/openshift/kubernetes/pull/2289)
* [Full changelog](https://github.com/openshift/kubernetes/compare/f6cfe0c54a1fa9314c65e30c613df641c7226ed0...9fe7dfdeb6714effef45be12ec451a0f06893660)


### [hypershift](https://github.com/openshift/hypershift/tree/d42b1a3da546e231ee6f8dd7162cca433fa2e444)

* [OCPBUGS-56036](https://issues.redhat.com/browse/OCPBUGS-56036): add multi-arch build for MCE 2.9 [#6145](https://github.com/openshift/hypershift/pull/6145)
* [OCPBUGS-55693](https://issues.redhat.com/browse/OCPBUGS-55693): Add support for registry root entry only in the IDMS/ICSP [#6131](https://github.com/openshift/hypershift/pull/6131)
* [Full changelog](https://github.com/openshift/hypershift/compare/bf350e52e7b5e1e65ed29feb0640c6f82f876561...d42b1a3da546e231ee6f8dd7162cca433fa2e444)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/5b5afbd42650dacfc34d03f599ebd980d55e10e6)

* [OCPBUGS-56042](https://issues.redhat.com/browse/OCPBUGS-56042): collect the entire journal from the host [#188](https://github.com/openshift/ironic-agent-image/pull/188)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/670323f3bb7d01a681a4c583d9540006ec8b871e...5b5afbd42650dacfc34d03f599ebd980d55e10e6)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/5eb6a3610eed1f873926eaf4db17669cdb308a1c)

* [OCPBUGS-56227](https://issues.redhat.com/browse/OCPBUGS-56227): correct aws kms permissions [#1371](https://github.com/openshift/machine-api-operator/pull/1371)
* [OCPBUGS-55715](https://issues.redhat.com/browse/OCPBUGS-55715): Revert "Added skip for when config not multi nic" [#1366](https://github.com/openshift/machine-api-operator/pull/1366)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/79a98238fc57ef28a122a8a3b838759de81b9a09...5eb6a3610eed1f873926eaf4db17669cdb308a1c)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/aae92b4dbfe9b66e29f0c0fe7551173f10e04b61)

* [OCPBUGS-56180](https://issues.redhat.com/browse/OCPBUGS-56180): Add hot loop detection in the boot image controller [#5050](https://github.com/openshift/machine-config-operator/pull/5050)
* [OCPBUGS-56263](https://issues.redhat.com/browse/OCPBUGS-56263): scope MCD node listers to current node [#5058](https://github.com/openshift/machine-config-operator/pull/5058)
* [OCPBUGS-56121](https://issues.redhat.com/browse/OCPBUGS-56121): Adapt MCC to use LayeredNodeState and remove LayeredPoolState [#5045](https://github.com/openshift/machine-config-operator/pull/5045)
* [OCPBUGS-56136](https://issues.redhat.com/browse/OCPBUGS-56136): Compare the osImageURLs for OS validation check [#5048](https://github.com/openshift/machine-config-operator/pull/5048)
* [OCPBUGS-56119](https://issues.redhat.com/browse/OCPBUGS-56119): error from generateAndValidateRenderedMachineConfig function can be misleading [#5044](https://github.com/openshift/machine-config-operator/pull/5044)
* [OCPBUGS-56038](https://issues.redhat.com/browse/OCPBUGS-56038): OWNERS: update owners file with current MCO team members [#5040](https://github.com/openshift/machine-config-operator/pull/5040)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/a9859b62f67382ee2042209f5e98b91cb5c45dff...aae92b4dbfe9b66e29f0c0fe7551173f10e04b61)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/85c1426f7cf9f3a943468ff88bc6e8264cca5dd2)

* changes the signature mirroring default to disabled (#1149) [#1149](https://github.com/openshift/oc-mirror/pull/1149)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/c58d7a3565b1446aa5b99509309af4aae5eefa0a...85c1426f7cf9f3a943468ff88bc6e8264cca5dd2)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/358b7053a231876cda29cf4d822e3e702389b117)

* [OCPBUGS-56034](https://issues.redhat.com/browse/OCPBUGS-56034): fix(olm): improve error logging for missing olm.managed label (#3558) [#999](https://github.com/openshift/operator-framework-olm/pull/999)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/ec31de865be0c822d967ec8fe563c6eb8c4757e5...358b7053a231876cda29cf4d822e3e702389b117)


### [tests](https://github.com/openshift/origin/tree/65422c86f13fbdccca00adf5cfc570b37a2aebb3)

* [CORENET-5875](https://issues.redhat.com/browse/CORENET-5875), [CORENET-5876](https://issues.redhat.com/browse/CORENET-5876), [OCPBUGS-56000](https://issues.redhat.com/browse/OCPBUGS-56000): Add EgressIP and L2 UDN route advertisements tests [#29777](https://github.com/openshift/origin/pull/29777)
* [OCPBUGS-55897](https://issues.redhat.com/browse/OCPBUGS-55897): bump limits [#29783](https://github.com/openshift/origin/pull/29783)
* [Full changelog](https://github.com/openshift/origin/compare/fca6932b03dca2ea0873ad3946d01b87d3f16760...65422c86f13fbdccca00adf5cfc570b37a2aebb3)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/32b15d87f5fd387dd5d04b96b7250a353240bf92)

* [OCPBUGS-56230](https://issues.redhat.com/browse/OCPBUGS-56230): replace operator client [#183](https://github.com/openshift/vsphere-problem-detector/pull/183)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/a32d32242d23ac22c1c8a5419d7de8583db3fcb9...32b15d87f5fd387dd5d04b96b7250a353240bf92)