# 4.19.0-rc.5

Created: 2025-06-04 05:48:18 +0000 UTC

Image Digest: `sha256:6fbf12e60c001586c93f9b69d7d24c899503ef401ead5988f82f45cd2d10cba9`


## Changes from 4.19.0-rc.4

### Components

* Kubectl 1.32.1
* Kubernetes upgraded from 1.32.4 to 1.32.5
* Kubernetes Tests upgraded from 1.32.4 to 1.32.5
* Red Hat Enterprise Linux CoreOS upgraded from 9.6.20250526-0 to 9.6.20250530-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| OpenShiftPodSecurityAdmission <br/> (0 tests)| Disabled<br/>(Changed)| Disabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |


### Rebuilt images without code change

* [agent-installer-api-server](https://github.com/openshift/assisted-service) git [5b1d4660](https://github.com/openshift/assisted-service/commit/5b1d46609e5fc58a83fdc2ea2159ae652d156a9d) `sha256:dce313fda87d91567c2ee914d7b383a44b2ea595a6e8ee3f1306f9b31b0c9383`
* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [7172669c](https://github.com/openshift/cluster-node-tuning-operator/commit/7172669c93307a2474c48911fd95f04a40aa4ea7) `sha256:de91fc373d0cf8ecdad9f2a478e96486e98a604ee59fbf97a33a8ae244cbc9c8`
* [docker-builder](https://github.com/openshift/builder) git [f2e5d601](https://github.com/openshift/builder/commit/f2e5d60196778fd5452b345d93fc821218e3d2f3) `sha256:56d3260eecf82b3d954ee5be8626f6c84ff7b218c11f2ec1fb9198b5f9051c5d`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [686fdac5](https://github.com/openshift/driver-toolkit/commit/686fdac595884ade83fef7b2b9c41169bf3fcb21) `sha256:fe0322730440f1cbe6fffaaa8cac131b56574bec8abe3ec5b462e17557fecb32`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [dbe19772](https://github.com/openshift/ironic-rhcos-downloader/commit/dbe197724c9e2e5f7279665e5bcb16ff3bc8d97b) `sha256:10d29ce9fc372f8e7689c36cd762ec15a496c6d2f4e47dddc5adddc298f21875`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [32b5f16c](https://github.com/openshift/machine-os-images/commit/32b5f16c7f59698b40cc2a23116804d9067824d2) `sha256:88ae51e7678eeb86c043c166c5e6610fca5fa2b41d40b797b59a552dffc9046e`
* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [73a8e79b](https://github.com/openshift/monitoring-plugin/commit/73a8e79b19fd6f89ff13b760e00d010ffae4c065) `sha256:4fda1d97a13e7d43287fa07998f73627d63786af4792ad274e1e42582aa63746`
* [network-tools](https://github.com/openshift/network-tools) git [ebd18d14](https://github.com/openshift/network-tools/commit/ebd18d146a6f06df7e403e771d16bd960b3d891f) `sha256:0e23955f00af541b17329c5a83ac1b708b8cf5bac2603d8b714fac6028f1f3b8`
* [networking-console-plugin](https://github.com/openshift/networking-console-plugin) git [581812ac](https://github.com/openshift/networking-console-plugin/commit/581812ac48f8f2e414050bff933f6b07fe98bb28) `sha256:183be2dd687286d6b6dd93484d571dd77fdc1a5ab314702d0da9c51ba1324445`
* rhel-coreos `sha256:ec16622a2758c7aacfd04679980848dd0ae7511be027cab590c10cd5bc02eae2`
* rhel-coreos-extensions `sha256:72a056652dbcfeb75e08909b501e2efd12b4298bba4e158396a49fc316ce99e5`
* [tools](https://github.com/openshift/oc) git [8f1c8b57](https://github.com/openshift/oc/commit/8f1c8b5768cdff8885ddef28e10de2c1928daf92) `sha256:0e4965f3a16e0386fa98144a03a4f3de23625d1958028a47525a81b2acc22c15`


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/0c4ca57fb2b169525ac58e7020883b1a9b70b023)

* [OCPBUGS-56810](https://issues.redhat.com/browse/OCPBUGS-56810): bump appliance to 936210 [#99](https://github.com/openshift/agent-installer-utils/pull/99)
* [OCPBUGS-56759](https://issues.redhat.com/browse/OCPBUGS-56759): ISOBuilder- Remove default password for nodes [#100](https://github.com/openshift/agent-installer-utils/pull/100)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/268c19fe22d95a829c0cd964cfae99826db57e28...0c4ca57fb2b169525ac58e7020883b1a9b70b023)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/b61e357915000a5f6dc50aad2cabeb1ac55e2e3c)

* [OCPBUGS-56527](https://issues.redhat.com/browse/OCPBUGS-56527): openstack-cinder: Set --with-topology flag for node driver also [#384](https://github.com/openshift/csi-operator/pull/384)
* [Full changelog](https://github.com/openshift/csi-operator/compare/6bb12490780bbabc88b82bfe51197a961e4e722a...b61e357915000a5f6dc50aad2cabeb1ac55e2e3c)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/741cd11fa65540a4ec7ef046afdc1e77c1439c75)

* [OCPBUGS-56826](https://issues.redhat.com/browse/OCPBUGS-56826): update the punctuation [#9755](https://github.com/openshift/installer/pull/9755)
* [OCPBUGS-56372](https://issues.redhat.com/browse/OCPBUGS-56372): Added better logging for vSphere destroy [#9719](https://github.com/openshift/installer/pull/9719)
* [OCPBUGS-56832](https://issues.redhat.com/browse/OCPBUGS-56832): add unit tests for vsphere VIPS/machinenetworks population [#9757](https://github.com/openshift/installer/pull/9757)
* [OCPBUGS-56811](https://issues.redhat.com/browse/OCPBUGS-56811): Update Control Plane replica validation for Single Node OpenShift [#9756](https://github.com/openshift/installer/pull/9756)
* [MGMT-20702](https://issues.redhat.com/browse/MGMT-20702), [OCPBUGS-56762](https://issues.redhat.com/browse/OCPBUGS-56762): Avoid duplicate machine networks [#9745](https://github.com/openshift/installer/pull/9745)
* [Full changelog](https://github.com/openshift/installer/compare/51dbc707b97484af596b5aa805136f8c9b86b633...741cd11fa65540a4ec7ef046afdc1e77c1439c75)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/20af0c3e9e089573e9528c0a4d41d5f26255c3f6)

* [OCPBUGS-55903](https://issues.redhat.com/browse/OCPBUGS-55903): Render: configure proxy on bootstrap static pod [#857](https://github.com/openshift/cloud-credential-operator/pull/857)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/409aa6893af94d8de67d07b03293676b5523412a...20af0c3e9e089573e9528c0a4d41d5f26255c3f6)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/ee69183571b592073a7163c5aef34d1a970a8c19)

* [OCPBUGS-56776](https://issues.redhat.com/browse/OCPBUGS-56776): fix: ensure CAPI machineset is created not paused when authoritative [#304](https://github.com/openshift/cluster-capi-operator/pull/304)
* [OCPBUGS-56714](https://issues.redhat.com/browse/OCPBUGS-56714): fix: bump openshift/library-go to fix ValidatingAdmissionPolicyV1 apply in capiinstaller [#305](https://github.com/openshift/cluster-capi-operator/pull/305)
* [OCPBUGS-56633](https://issues.redhat.com/browse/OCPBUGS-56633): fix: watch CAPI resources in the migration controllers [#303](https://github.com/openshift/cluster-capi-operator/pull/303)
* [OCPBUGS-56722](https://issues.redhat.com/browse/OCPBUGS-56722): MachineSet deletion logic [#302](https://github.com/openshift/cluster-capi-operator/pull/302)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/321712b12b7a71240a49efa83e0bb5a1d6ada3d7...ee69183571b592073a7163c5aef34d1a970a8c19)


### [cluster-config-api](https://github.com/openshift/api/tree/97812373b6b447ff6b55d3e2625b4f62aff1a16f)

* [OCPBUGS-56773](https://issues.redhat.com/browse/OCPBUGS-56773): disable psa for 4.19 [#2346](https://github.com/openshift/api/pull/2346)
* [OCPBUGS-56761](https://issues.redhat.com/browse/OCPBUGS-56761): Revert v1alpha1 removal [#2345](https://github.com/openshift/api/pull/2345)
* [Full changelog](https://github.com/openshift/api/compare/3c189e99e0db0277314560deb420e3cb7f8bee5c...97812373b6b447ff6b55d3e2625b4f62aff1a16f)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/328419e7a2aba288a3405e76449f84d42b1952b3)

* [OCPBUGS-53872](https://issues.redhat.com/browse/OCPBUGS-53872): bump github.com/golang-jwt/jwt [#1214](https://github.com/openshift/cluster-image-registry-operator/pull/1214)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/3d4746a8fbeafc69c7f1b0cd1c0f781d44f961d3...328419e7a2aba288a3405e76449f84d42b1952b3)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/06f6aa6e22eadcc38d57f5786c50ceef38bb4d5e)

* [OCPBUGS-56771](https://issues.redhat.com/browse/OCPBUGS-56771): Fix ImplicitlyEnabledCapabilities [#1199](https://github.com/openshift/cluster-version-operator/pull/1199)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/09edded491b9b591445a3502cb719403eb5f52e4...06f6aa6e22eadcc38d57f5786c50ceef38bb4d5e)


### [console](https://github.com/openshift/console/tree/37987a3a88861df93c1ff053f35364d34dd25e82)

* [OCPBUGS-56775](https://issues.redhat.com/browse/OCPBUGS-56775): Layout of Welcome to the new OpenShift experience! buttons is wonky on mobile [#15096](https://github.com/openshift/console/pull/15096)
* [OCPBUGS-56149](https://issues.redhat.com/browse/OCPBUGS-56149): Refactor Kebab+ActionsMenu to use PF [#15051](https://github.com/openshift/console/pull/15051)
* [Full changelog](https://github.com/openshift/console/compare/589a05b062c57260ee07405b7925af83c0f46553...37987a3a88861df93c1ff053f35364d34dd25e82)


### [console-operator](https://github.com/openshift/console-operator/tree/0cb29273c8b1efec6ca591d5259a69d34e5ce51f)

* [OCPBUGS-56761](https://issues.redhat.com/browse/OCPBUGS-56761): Revert v1alpha1 removal [#991](https://github.com/openshift/console-operator/pull/991)
* [OCPBUGS-55716](https://issues.redhat.com/browse/OCPBUGS-55716): Fix issue where console operator orphans custom logo configmaps in openshift-console namespace [#985](https://github.com/openshift/console-operator/pull/985)
* [Full changelog](https://github.com/openshift/console-operator/compare/9af3e5fd7bbcb72975c7316bba38ea13c4937320...0cb29273c8b1efec6ca591d5259a69d34e5ce51f)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/fadb78e720779ed1b29f32170f3e9dd32584a7e6)

* [OCPBUGS-56082](https://issues.redhat.com/browse/OCPBUGS-56082): UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver [#2297](https://github.com/openshift/kubernetes/pull/2297)
* [OCPBUGS-56437](https://issues.redhat.com/browse/OCPBUGS-56437): Bump 4.19 1.32.5 [#2304](https://github.com/openshift/kubernetes/pull/2304)
* [Full changelog](https://github.com/openshift/kubernetes/compare/375cd1b6bcb524243cee2e80eff593e2131906da...fadb78e720779ed1b29f32170f3e9dd32584a7e6)


### [hypershift](https://github.com/openshift/hypershift/tree/dec319950a1f662305191f981ff087097312fe33)

* [OCPBUGS-56792](https://issues.redhat.com/browse/OCPBUGS-56792): Fix CatalogSource image check when unauthorized [#6198](https://github.com/openshift/hypershift/pull/6198)
* [OCPBUGS-56910](https://issues.redhat.com/browse/OCPBUGS-56910): util/version: Add Version420 [#6215](https://github.com/openshift/hypershift/pull/6215)
* [OCPBUGS-56910](https://issues.redhat.com/browse/OCPBUGS-56910): Move EnsurePSANotPrivileged to AtLeast(t, Version420) [#6212](https://github.com/openshift/hypershift/pull/6212)
* [CNTRLPLANE-831](https://issues.redhat.com/browse/CNTRLPLANE-831): feat(konflux): add arm64 builds to cpo pipeline [#6182](https://github.com/openshift/hypershift/pull/6182)
* [OCPBUGS-56777](https://issues.redhat.com/browse/OCPBUGS-56777): Disable PSA enforcement in 4.19 hosted cluster [#6201](https://github.com/openshift/hypershift/pull/6201)
* [Full changelog](https://github.com/openshift/hypershift/compare/4f0d404373f065bb2fdd265a4ee43217a26d1da9...dec319950a1f662305191f981ff087097312fe33)


### [insights-operator](https://github.com/openshift/insights-operator/tree/fa84a57ac4c8c47cb70dc07c4e9c812aaee98e49)

* feat: ensure the etc-entitlement-pki secret exists (#1087) [#1087](https://github.com/openshift/insights-operator/pull/1087)
* [Full changelog](https://github.com/openshift/insights-operator/compare/b1e0f8fce485de56a28f27793fa2bcec87a72771...fa84a57ac4c8c47cb70dc07c4e9c812aaee98e49)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/bccdc7e7382c5958f040769d7ff20ab27ece5bdf)

* [OCPBUGS-56829](https://issues.redhat.com/browse/OCPBUGS-56829): Only update boot disks during GCP boot image updates [#5088](https://github.com/openshift/machine-config-operator/pull/5088)
* [OCPBUGS-56445](https://issues.redhat.com/browse/OCPBUGS-56445): Boot Image Controller should not degrade when golden configmap is slow to update [#5063](https://github.com/openshift/machine-config-operator/pull/5063)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/5c50f179ccc2e09abe2689827c95e9504ed015cf...bccdc7e7382c5958f040769d7ff20ab27ece5bdf)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/e69a044ba8849095880303dee620b62958912e36)

* [OCPBUGS-56185](https://issues.redhat.com/browse/OCPBUGS-56185): [release-4.19] v2: bump containers/common dep to 0.63.0 (#1148) [#1148](https://github.com/openshift/oc-mirror/pull/1148)
* disables the signature verification on operator catalog collection (#1157) [#1157](https://github.com/openshift/oc-mirror/pull/1157)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/c2b5dabfb3bc0c6eddfbf86edb6e19cdb56f56c1...e69a044ba8849095880303dee620b62958912e36)


### [tests](https://github.com/openshift/origin/tree/33fe530740e17ef0332e874544a0f0d153be7e53)

* [OCPBUGS-56886](https://issues.redhat.com/browse/OCPBUGS-56886): Fix bearer token exposure in exit condition as well [#29841](https://github.com/openshift/origin/pull/29841)
* [OCPBUGS-56437](https://issues.redhat.com/browse/OCPBUGS-56437): Update to kubernetes 1.32.5 [#29875](https://github.com/openshift/origin/pull/29875)
* [OCPBUGS-56796](https://issues.redhat.com/browse/OCPBUGS-56796): Skip failing test [release-4.19] [#29865](https://github.com/openshift/origin/pull/29865)
* [OCPBUGS-56045](https://issues.redhat.com/browse/OCPBUGS-56045): OLMv1: Update test bundles [release-4.19] [#29836](https://github.com/openshift/origin/pull/29836)
* [Full changelog](https://github.com/openshift/origin/compare/828598b96347c41b563c86df0c35f72b76a2b768...33fe530740e17ef0332e874544a0f0d153be7e53)