# 4.21.21
Created: 2026-06-18 13:16:24 +0000 UTC
Image Digest: `sha256:7224f77afb20aedaf82bfc13ca11699689bd5b06795d6d1740dbd4c265150c44`
## Changes from 4.21.20
### Components
* Kubectl 1.34.1
* Kubernetes 1.34.8
* Kubernetes Tests 1.34.1
* Red Hat Enterprise Linux CoreOS 10.2.20260521-0
### FeatureGate Changes
| FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: |
| GatewayAPIWithoutOLM
(0 tests)| Disabled| Disabled| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed) |
### Rebuilt images without code change
* [agent-installer-api-server](https://github.com/openshift/assisted-service) git [f32dfdad](https://github.com/openshift/assisted-service/commit/f32dfdad38c833c22168710bf7814dc7e8cb4c2f) `sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd`
* [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui) git [0b264c7f](https://github.com/openshift-assisted/assisted-installer-ui/commit/0b264c7f6c227a2ea4d1392879bce555d087dac0) `sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd`
* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [dc0bd090](https://github.com/openshift/agent-installer-utils/commit/dc0bd0906fc9868a65cc9488a7dbdd0f35ca4a23) `sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [45061e97](https://github.com/openshift/azure-file-csi-driver/commit/45061e97a5e2b20b01cd55fee97e5dac43fd79e4) `sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f`
* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [898663be](https://github.com/openshift/cluster-node-tuning-operator/commit/898663be14bcd0bc62287636409e19c4048a01cd) `sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [f0ae9d12](https://github.com/openshift/driver-toolkit/commit/f0ae9d12ca7e3adf594ae34e394b1ea003daa4ad) `sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f`
* [ironic](https://github.com/openshift/ironic-image) git [438aadfd](https://github.com/openshift/ironic-image/commit/438aadfd7cae61a6c21b3c07aa8bfa55194834a3) `sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d`
* [ironic-agent](https://github.com/openshift/ironic-agent-image) git [ff276c00](https://github.com/openshift/ironic-agent-image/commit/ff276c00e345b9cb9298ce9dbdd7f19a8b14dbce) `sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [707c2262](https://github.com/openshift/ironic-rhcos-downloader/commit/707c226243ac401f2994952fe0e55823511111b0) `sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [7d29b155](https://github.com/openshift/machine-os-images/commit/7d29b155d3374427a69fa2ebfa4884d55ff76e0f) `sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee`
* [network-tools](https://github.com/openshift/network-tools) git [d6717e45](https://github.com/openshift/network-tools/commit/d6717e453a098d551c9e2d2868e1f5317c41e688) `sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5`
* [rhel-coreos](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:1db750ec3985ae348407fcbaa137b58100fccb43647032abe63cc0df2c719a88`
* [rhel-coreos-10](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:1221ac96778474fcb25cabf55ef84c997d59d76b2dcd16e8aec5f0cb8e8890de`
* [rhel-coreos-10-extensions](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:b169f85293b1945c4a06895b774891558339d6b6866ec65f068d75012b57d5d5`
* [rhel-coreos-extensions](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:3c847b74674676e67ca5b8d01bb334ce9d048b377a384ac13fbe472d65cd9c5e`
* [tools](https://github.com/openshift/oc) git [fdf8daba](https://github.com/openshift/oc/commit/fdf8dabaedf6cf89f60547f57cc5f5f3e8d8798b) `sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4`
### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/1d5163811da9ec9eaeea69c252c9495889f624a9)
* [OCPBUGS-85041](https://issues.redhat.com/browse/OCPBUGS-85041): add --copy-network when manual network config is detected [#1446](https://github.com/openshift/assisted-installer-agent/pull/1446)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/e57138265957c81b33d3ac13078d35f6ca07069d...1d5163811da9ec9eaeea69c252c9495889f624a9)
### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/3f37185a7aca5332edd421081fbea98af8b1a527)
* [OCPBUGS-81986](https://issues.redhat.com/browse/OCPBUGS-81986): Bump go-jose/v4 to 4.1.4 [#10598](https://github.com/openshift/installer/pull/10598)
* [Full changelog](https://github.com/openshift/installer/compare/00ea78b6eb2bb53dd279bcbe7723ff84767685d5...3f37185a7aca5332edd421081fbea98af8b1a527)
### [cluster-config-api](https://github.com/openshift/api/tree/253fff21f708fa7efd5ee65a4c30d6bde1e61cc8)
* [OCPBUGS-78330](https://issues.redhat.com/browse/OCPBUGS-78330), [OCPBUGS-82146](https://issues.redhat.com/browse/OCPBUGS-82146), [OCPBUGS-85550](https://issues.redhat.com/browse/OCPBUGS-85550), [OCPBUGS-88295](https://issues.redhat.com/browse/OCPBUGS-88295), [OCPBUGS-88297](https://issues.redhat.com/browse/OCPBUGS-88297): Promote GatewayAPIWithoutOLM feature gate to TechPreview [#2873](https://github.com/openshift/api/pull/2873)
* [Full changelog](https://github.com/openshift/api/compare/1d79f30d4668393dc34e9b423ec6904645503c58...253fff21f708fa7efd5ee65a4c30d6bde1e61cc8)
### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/356e3777400d549d9b3194c74c716eb2290baefc)
* [OCPBUGS-78330](https://issues.redhat.com/browse/OCPBUGS-78330), [OCPBUGS-82146](https://issues.redhat.com/browse/OCPBUGS-82146), [OCPBUGS-85550](https://issues.redhat.com/browse/OCPBUGS-85550), [OCPBUGS-88295](https://issues.redhat.com/browse/OCPBUGS-88295), [OCPBUGS-88297](https://issues.redhat.com/browse/OCPBUGS-88297): Replace OLM-based Istio install with Sail Library [#1442](https://github.com/openshift/cluster-ingress-operator/pull/1442)
* [OCPBUGS-86718](https://issues.redhat.com/browse/OCPBUGS-86718): Add configuration override for X-SSL strip [#1471](https://github.com/openshift/cluster-ingress-operator/pull/1471)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/f7a3395618f0925fbe626b18cc8173d19ab30dac...356e3777400d549d9b3194c74c716eb2290baefc)
### [console](https://github.com/openshift/console/tree/c09a410a1301c74a489d3771df7174e5ea6c734f)
* [OCPBUGS-88358](https://issues.redhat.com/browse/OCPBUGS-88358): Allow VolumeSnapshot restore when parent PVC is deleted [#16602](https://github.com/openshift/console/pull/16602)
* [Full changelog](https://github.com/openshift/console/compare/aa0cc6404fb385d57ad596e7f01f9a40472c3134...c09a410a1301c74a489d3771df7174e5ea6c734f)
### [haproxy-router](https://github.com/openshift/router/tree/dc4c01d494f572773a05e82bffd19c2cdaf8dce9)
* [OCPBUGS-86718](https://issues.redhat.com/browse/OCPBUGS-86718): Strip X-SSL-* headers for plain HTTP [#795](https://github.com/openshift/router/pull/795)
* [Full changelog](https://github.com/openshift/router/compare/f4c2ba80abb1fb3694a6b2ae0be2e5c898572632...dc4c01d494f572773a05e82bffd19c2cdaf8dce9)
### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/59524130bbc7ffc63b1c2f7dbd1cd24882e447d3)
* [OCPBUGS-88334](https://issues.redhat.com/browse/OCPBUGS-88334): Skip chrony-wait on first node join [#6178](https://github.com/openshift/machine-config-operator/pull/6178)
* [OCPBUGS-88335](https://issues.redhat.com/browse/OCPBUGS-88335): daemon: don't pull/extract extensions for all OS updates [#6179](https://github.com/openshift/machine-config-operator/pull/6179)
* [OCPBUGS-86998](https://issues.redhat.com/browse/OCPBUGS-86998): configure-ovs: copy lldp mode to br-ex port [#6134](https://github.com/openshift/machine-config-operator/pull/6134)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/507538ada4b9261a9260aef93be7518993dfdcf1...59524130bbc7ffc63b1c2f7dbd1cd24882e447d3)
### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/f47b7a53457d81d4ecf7e862819454054bb4216d)
* [OCPBUGS-88396](https://issues.redhat.com/browse/OCPBUGS-88396): CVE-2026-44487 bump axios to 1.16.0 [#999](https://github.com/openshift/monitoring-plugin/pull/999)
* [OCPBUGS-84290](https://issues.redhat.com/browse/OCPBUGS-84290): bump follow-redirects to 1.16.0 [#987](https://github.com/openshift/monitoring-plugin/pull/987)
* [OCPBUGS-84828](https://issues.redhat.com/browse/OCPBUGS-84828), [OCPBUGS-84991](https://issues.redhat.com/browse/OCPBUGS-84991), [OCPBUGS-85007](https://issues.redhat.com/browse/OCPBUGS-85007), [OCPBUGS-85037](https://issues.redhat.com/browse/OCPBUGS-85037): Update Axios to v1.15.2 [#982](https://github.com/openshift/monitoring-plugin/pull/982)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/462c78890ffb636e05d91d41ca718bb3c81da4cf...f47b7a53457d81d4ecf7e862819454054bb4216d)
### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/76483af58590e3e73cc713a477b506ff404b604b)
* [OCPBUGS-88313](https://issues.redhat.com/browse/OCPBUGS-88313): Trim subnet input in UDN creation form [#430](https://github.com/openshift/networking-console-plugin/pull/430)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/268037d76fd97d29f39eae2f25f0a2b2910cb30e...76483af58590e3e73cc713a477b506ff404b604b)
### [tests](https://github.com/openshift/origin/tree/9a35db21312438c6097d6bb8110e077cc159d629)
* [OCPBUGS-78330](https://issues.redhat.com/browse/OCPBUGS-78330), [OCPBUGS-82146](https://issues.redhat.com/browse/OCPBUGS-82146), [OCPBUGS-85550](https://issues.redhat.com/browse/OCPBUGS-85550), [OCPBUGS-88295](https://issues.redhat.com/browse/OCPBUGS-88295), [OCPBUGS-88297](https://issues.redhat.com/browse/OCPBUGS-88297), [OCPBUGS-88320](https://issues.redhat.com/browse/OCPBUGS-88320), [OCPBUGS-88322](https://issues.redhat.com/browse/OCPBUGS-88322), [OCPBUGS-88324](https://issues.redhat.com/browse/OCPBUGS-88324): Backport noOLM Gateway API test coverage and upgrade tests [#31232](https://github.com/openshift/origin/pull/31232)
* [OCPBUGS-88328](https://issues.redhat.com/browse/OCPBUGS-88328): Fix Pod.Create() to use --local flag for template proc… [#31269](https://github.com/openshift/origin/pull/31269)
* [Full changelog](https://github.com/openshift/origin/compare/4cc131780d8ec7338e12105477a46b137b670bcb...9a35db21312438c6097d6bb8110e077cc159d629)
### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/e4130b0a049c0ced1600ff7c296bf505e5446ddb)
* [OCPBUGS-87097](https://issues.redhat.com/browse/OCPBUGS-87097): Fixed compute cluster permission logic for single fd with read-only custom resourcepool [#222](https://github.com/openshift/vsphere-problem-detector/pull/222)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/a35d685a88aca94ed1d805c1079ebf14dfb81c9d...e4130b0a049c0ced1600ff7c296bf505e5446ddb)