Back to index
Download the installer for your operating system or run
oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.19.0-ec.1-x86_64 Team Approvals:
Tests:
Upgrades from:
Loading changelog, this may take a while ...
Created: 2025-01-24 06:21:39 +0000 UTC
Image Digest: sha256:aa3e0a3a94babd90535f8298ab274b51a9bce6045dda8c3c8cd742bc59f0e2d9
Components
FeatureGate Changes
FeatureGate
Default
Default
DevPreviewNoUpgrade
DevPreviewNoUpgrade
TechPreviewNoUpgrade
TechPreviewNoUpgrade
PersistentIPsForVirtualization
Enabled
Enabled
Enabled
Enabled
Enabled
Enabled
ClusterVersionOperatorConfiguration
Enabled
Enabled
HighlyAvailableArbiter
Enabled
Enabled
Enabled
Enabled
KMSEncryptionProvider
Enabled
Enabled
Enabled
Enabled
VSphereMultiDisk
Enabled
Enabled
Enabled
Enabled
New images
Rebuilt images without code change
MGMT-19529 : Implement a directory usage prometheus collector (#7178) #7178 MGMT-19748 : Configure snyk ignore (#7202) #7202 MGMT-19120 : Use service net to connect to hosted API server (#7090) #7090 NO-ISSUE: Update Konflux references (#7175) #7175
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.15, 4.16 (#7194) #7194
NO-ISSUE: Fix typos (#7195) #7195
MGMT-19590 : Enable user managed load balancer with hosts in the same subnet but load balancer outside this subnet on baremetal (#7187) #7187 NO-ISSUE: [master] Bump OCP versions: 4.14, 4.18, 4.16, 4.17 (#7191) #7191
OCPBUGS-43578 : Log disk info if rootDeviceHint not found (#7181) #7181 MGMT-19645 : Configure the following things for releasing in konflux: (#7179) #7179 MGMT-19573 : Track release stats in installercache (#7156) #7156 NO-ISSUE: [master] Bump OCP versions: 4.12, 4.17 (#7171) #7171
MGMT-19381 : Change downstream base image to rhel9.4 instead of ubi9 (#7147) #7147 MGMT-19631 : Enable FC on x86_64 (#7163) #7163 MGMT-19258 : Split KubeAPI and non KubeAPI subsystem tests (#7154) #7154 skip mtu validation for day2 (#7160) #7160
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.15, 4.16 (#7159) #7159
NO-ISSUE: Update Konflux references (#7157) #7157
Enable static networking with nmstate flow in 4.18 (#7155) #7155
Add tests for static networking in inventory_test (#7152) #7152
MGMT-19523 : Fix validation looping in ODF (#7151) #7151 Use old static network flow when MAC identifier exists (#7148) #7148
MGMT-19500 : Enable installation of baremetal cluster with user managed load balacer and nodes are part of the same subnet, and load balancer IP is part of the machine networks (#7096) #7096 NO-ISSUE: Update Konflux references to 9e33cbc (#7149) #7149
NO-ISSUE: [master] Bump OCP versions: 4.18 (#7138) #7138
MGMT-18501 : Configure sast-snyk-check in konflux pipelines (#7105) #7105 NO-ISSUE: Update Konflux references (#7132) #7132
Add 4.19 release and os images (#7131) #7131
MGMT-19537 : Bump golang.org/x/net to 0.33.0 (#7121) #7121 MGMT-19537 : Bump golang.org/x/net to 0.33.0 (#7116) #7116 NO-ISSUE: [master] Bump OCP versions: 4.16, 4.17, 4.14 (#7115) #7115
NO-ISSUE: Allow use of ‘envtest’ (#7100) #7100
MGMT-18288 : Approve CSRs for agents with baremetal platform without MAPI (#7076) #7076 NO-ISSUE: [master] Bump OCP versions: 4.18 (#7113) #7113
NO-ISSUE: Simplify spoke client factory (#7081) #7081
MGMT-19239 : Add an option to install OSC operator (#6990) #6990 NO-ISSUE: Update to gomega 1.34.1 (#7088) #7088
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.16, 4.18, 4.15, 4.13 (#7095) #7095
NO-ISSUE: Update Konflux references (#7094) #7094
MGMT-19506 : Bump golang.org/x/crypto from 0.25.0 to 0.31.0 (#7079) #7079 Implement MTU validations for CMN and UMN (#7012) #7012
MGMT-19414 : Add default requeue time when Hosts are created from Agents (#7063) #7063 NO-ISSUE: Remove unused method from spoke client factory (#7078) #7078
MGMT-19507 : Stop using multi-arch builds in konflux (#7080) #7080 MGMT-19362 : Explicitly add OpenShift AI incompatibilities (#7052) #7052 NO-ISSUE: Update Konflux references (#7072) #7072
Full changelog
MGMT-19748 : Configure snyk ignore (#1010) #1010 NO-ISSUE: Update Konflux references (#991) #991
MGMT-19734 : Add renovate config to limit number of PRs (#1009) #1009 NO-ISSUE: Make konflux builds for downstream images to be multi-arch (#1008) #1008
MGMT-19645 : Configure the following things for releasing in konflux: (#1004) #1004 MGMT-19381 : Change downstream base images to rhel9.4 instead of ubi9 (#1002) #1002 MGMT-19595 : Push latest tag for downstream images after merge to konflux int repo (#1001) #1001 Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.19 (#956) #956
OCPBUGS-13612 : update gin version (#997) #997 MGMT-19537 : Bump golang.org/x/net to 0.33.0 (#981) #981 MGMT-19506 : Bump golang.org/x/crypto from 0.25.0 to 0.31.0 (#976) #976 chore(deps): update konflux references (#972) #972
MGMT-19507 : Stop using multi-arch builds in konflux (#971) #971 chore(deps): update konflux references (#958) #958
NO-ISSUE: Red Hat Konflux update assisted-installer-controller-downstream-main (#965) #965
NO-ISSUE: Red Hat Konflux update assisted-installer-downstream-main (#966) #966
Full changelog
Update Konflux references (#875) #875
MGMT-19734 : Add renovate config to limit number of PRs (#896) #896 NO-ISSUE: Stop removing stuff from the downstream image that are needed for preflight-check to succeed (#893) #893
NO-ISSUE: Make konflux builds for downstream images to be multi-arch (#892) #892
MGMT-19645 : Configure the following things for releasing in konflux: (#889) #889 OCPBUGS_45910: s390x: Fix cpu clockspeed and use Maschine Type for Model Name (#857) #857
MGMT-19381 : Change downstream base images to rhel9.4 instead of ubi9 (#883) #883 MGMT-19595 : Push latest tag for downstream image after merge to konflux int repo (#882) #882 OCPBUGS-43352 : calculate outgoing interface for arping (#877) #877 MGMT-19537 : Bump golang.org/x/net to 0.33.0 (#868) #868 MGMT-19537 : Bump golang.org/x/net to 0.33.0 (#862) #862 MGMT-19506 : Bump golang.org/x/crypto from 0.25.0 to 0.31.0 (#856) #856 Update Konflux references (#852) #852
added another unkown motherboard id (#850) #850
MGMT-19507 : Stop using multi-arch builds in konflux (#851) #851 Update Konflux references (#839) #839
NO-ISSUE: Red Hat Konflux update assisted-installer-agent-downstream-main (#846) #846
Full changelog
NO-JIRA: docs: rotate oidc key to use less opinionated CLUSTER_NAME #816
CCO-631 : Upgrade to k8s v0.32.0 #814 CCO-626 : pkg/operator/utils: Log diff on CredentialsRequest status change #811 OCPBUGS-47466 : golang.org/x/net v0.33.0 #803 OCPBUGS-45699 : Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.19 #796 OCPBUGS-41727 : Add AWS region to aws-pod-identity-webhook #789 NO-JIRA: docs: rotate azure key to use more accurate variable commands #797
Full changelog
NO-JIRA: [bot] Synchronize versions of the downstream components #2531
OCPBUGS-48074 : Fixing telemetry rule for accelerators #2551 MON-4107 : chore: add logs (at v=3 level) regarding the deactivation of components #2546 OCPBUGS-31356 : chore(client): DeleteXXX short-circuit if the resource doesn’t exist as a GET is less expensive than a no-op DELETE #2547 MON-4118 : chore: use alertmanager v2 in tests as v1 is not longer supported in Prometheus 3 #2544 NO-JIRA: fix TestPrometheusRemoteWrite to align the image used for th… #2543
NO-JIRA: Bump prometheus-operator to 0.79.2 #2542
MGMT-19498 : Fixing the configmap data fields #2540 NO-JIRA: Bump prometheus-operator to v0.79.1 #2538
MGMT-19498 : Adding accelerators configuration file to the node-exporter #2530 OCPBUGS-35095 : unpin kubernetes-mixin #2422 OCPBUGS-45389 : update image to be consistent with ART for 4.19 #2533 Full changelog
Add missing Polarion test case id (#1280) #1280
use ROLE_WORKER_CNF environment variable to determine mcp name (#1261) #1261
CNF-16267 : Add kernel page size field (#1262) #1262 OCPBUGS-46584 : Adjust Workload Hints test cases based on Intel or AMD (#1258) #1258 PPC: correct EnableHardwareTuning flag value (#1269) #1269
E2E: Tuned deferred test automation (#1230) #1230
hypershift: Refined mixed_cpus suite for Hosted Clusters (#1173) #1173
Update OWNERS file (#1260) #1260
E2E: Add hypershift support to container runtime config tests (#1229) #1229
NO-JIRA: e2e: common way to fetch poolName (#1255) #1255
e2e:labels: fix typo and adding type (#1256) #1256
e2e: add irdma to module_blacklist kernel args (#1249) #1249
OCPBUGS-45421 : Linter fixes (#1253) #1253 e2e: tuned degraded test fix (#1246) #1246
Full changelog
OCPBUGS-45425 : Updating ose-cluster-olm-operator-container image to be consistent with ART for 4.19 #94 NO-ISSUE: Fixing some nitpicks #98
OCPBUGS-45098 : Add infomer for proxy.config.openshift.io #93 NO-ISSUE: bump all bingo build dependencies #96
NO-ISSUE: Remove m1kola from owners #97
Full changelog
Getting the kernel version from the kernel-rt-core-* file. (#165) #165
Adding pull-secrets to the oc adm release info... command. (#164) #164
Pulling the DTK image from the CI registry instead of quay.io. (#163) #163
OCPBUGS-48156 : Assert right rt version at build time (#161) #161 Using jq instead of yq in the e2e job. (#162) #162
Extending the e2e job to validate the kernel-rt versions matches. (#160) #160
Full changelog
HOSTEDCP-1971 : HyperShift operator upgrade test for rollout validation #4999 NO-JIRA: Update Konflux references #5423
Revert “Revert “CNTRLPLANE-26: Disable building HO for s390x platform on PR”” #5422
OCPBUGS-48510 : Allow ARM64 arch deployment on None platform type #5403 NO-JIRA: Fix dev docs for managed azure #5411
NO-JIRA: Drop openstack create rejection validation #5410
HOSTEDCP-1542 : Implement Workload Identity in Azure for Data Plane Components Part 3 #4587 NO-JIRA: Add GOWORK=off to clients in Makefile #5421
OCPBUGS-45511 : Compare contents of user-ca-bundle-config.yaml to the correct configmap #5420 NO-JIRA: doc/openstack: improve index layout #5412
AUTH-482 : set required-scc for openshift workloads #5310 OCPBUGS-48506 : Set ownership annotations for TLS artifacts #5355 NO-JIRA: add information about checking HO and e2e are from main on latest release branch #5419
CNTRLPLANE-129 : Move Microsoft Repo to CI dir in e2e dockerfile #5416 Revert “CNTRLPLANE-26: Disable building HO for s390x platform on PR” #5406
NO-JIRA: chore(deps): update konflux references (main) #5383
OCPBUGS-44960 : (OSASINFRA-3643) bump k8s and dependencies #4927 NO-JIRA: Bump github.com/go-git/go-git/v5 from 5.12.0 to 5.13.0 in /hack/tools #5400
NO-JIRA: Bump golang.org/x/net from 0.31.0 to 0.33.0 in /hack/tools #5399
NO-JIRA: test/e2e: move pre-removal metrics validation out teardown path #5234
NO-JIRA: Add make lint-fix to pre-commit hook #5387
NO-JIRA: Enforce EnsurePSANotPrivileged for 4.19 and later #5362
NO-JIRA: Update Create Azure HC document #5396
OCPBUGS-48216 : use rm -f in all CVO cmds for idempotency #5390 NO-JIRA: Bump the golang-dependencies and github.com/Azure/azure-sdk-for-go/sdk/azcore #5373
HOSTEDCP-2233 : [CPO Refactor] Refactor cluster-storage-operator #5312 NO-JIRA: docs/nit: fix missing spaces in md breaking rendered html #5392
OSASINFRA-3670 : doc/openstack: etcd on LVM #5391 NO-JIRA: cmd: dump: include ValidatingAdmissionPolicies in guest cluster dump #5165
HOSTEDCP-1542 : Introduce e2e flags for Workload Identity #5363 NO-JIRA: e2e: don’t check the KV’s LiveMigratable condition for <4.17 #5389
OCPBUGS-48152 : Fix mirror reference image name when ID is set #5353 OSASINFRA-3681 : improve the doc on OpenStack #5243 Revert “OCPBUGS-45265: Use /livez/ping endpoint rather than /version” #5381
NO-JIRA: test/e2e: improve VAP test assertions #5375
OCPBUGS-45265 : Use /livez/ping endpoint rather than /version #5211 NO-JIRA: Reoncile karpenter aws creds before running the operator #5360
NO-JIRA: Bump golang.org/x/crypto and golang.org/x/net #5357
HOSTEDCP-2176 : Introduce golangci-lint to make verify and only turn on gci linter #5322 CNTRLPLANE-68 : add flags for setting azure marketplace images in e2e #5356 HOSTEDCP-2234 : Karpenter auto machine approver #5349 OCPBUGS-47715 : fix disconnected via CLI #5341 chore(deps): update dependency mkdocs-material to v9.5.49 #5247
NO-JIRA: Move oauth kubeadminsecret hash annotation logic from HCCO to CPO #5286
HOSTEDCP-2199 : [CPO Refactor] Refactor cloud-credential-operator #5203 NO-JIRA: Update Konflux references (main) #5325
OCPBUGS-46354 : fix(ho): Add all supported config schemas for NodePool NTO reconcile #5280 NO-JIRA: Revert E2E test change which validates the CVO Image propagation #5323
NO-JIRA: Fix oauth-v2 and kcm-v2 #5306
CNTRLPLANE-26 : Disable building HO for s390x platform on PR #5314 OCPBUGS-46529 : kubevirt, Don’t break on hostname NodePort.Address #5313 CNTRLPLANE-25 : Fix valid release image update issue #5316 OCPBUGS-46483 : Correctly Reconcile CSO CSI Secrets for Managed Azure Deployments #5311 OCPBUGS-43083 , OCPBUGS-44655 : Fix IPv6 Disconnected HCP deployments #5168 HOSTEDCP-2220 : Autonode karpenter #5279 CNTRLPLANE-10 : Konflux build CPO only when needed #5287 NO-JIRA: Only use public IPs for 4.16 and above #5304
OSASINFRA-3685 : openstack: tag CAPI resources with InfraID #5262 STOR-2136 : Give delete permissions to snapshot-operator role #5277 NO-JIRA: chore(deps): update konflux references (main) #5288
NO-JIRA: set diskStorageAccountType in aks e2e #5273
CNTRLPLANE-9 : Red Hat Konflux update control-plane-operator-main #5282 OCPBUGS-44314 : Consistently look up and dial cloud API hostnames #5281 OCPBUGS-45595 : Updating ose-hypershift-container image to be consistent with ART for 4.19 #5272 NO-JIRA: test/e2e: detect rapidly updating deployments #5229
OCPBUGS-45322 : consolidating upgradingConfig/Version nodepool status update from CAPI controller to Conditions controller #5222 OCPBUGS-46342 : Allow ARM64 arch deployment on Agent platform #5276 OCPBUGS-44438 : Remove non-matching feature-gated CVO manifests from payload #5093 NO-JIRA: Fix expected AWS HC conditions during e2e tests #5266
NO-JIRA: Allow multiple yaml def in a file for pre-commit #5271
HOSTEDCP-2203 : Create e2e clusters with public IP instances only #5269 NO-JIRA: Fix spelling mistakes from PR #5265 #5270
HOSTEDCP-2215 : Expand pre-commit hooks to check on commit and push #5245 HOSTEDCP-2203 : Add support for public only AWS clusters #5242 NO-JIRA: contrib: update route53 zone cleaning utility #5265
NO-JIRA: Fix pre-commit hook issues #5264
HOSTEDCP-2193 : documenting –managed-identities-file flag #5199 NO-JIRA: Update Konflux References and Perform Migration #5260
HOSTEDCP-2206 : Improve Unit Test Runtime #5257 Full changelog
Updating ose-network-metrics-daemon-container image to be consistent with ART for 4.19 (#104) #104
Full changelog
fixes CVEs upgrading go-git dependency (#1028) #1028
OCPBUGS-47688 : Fix ITMS and IDMS generated when mirror dest contains release namespace (#1002) #1002 OCPBUGS-48513 : e2e: use same version of crane as in go.mod (#1016) #1016 ocpbugs-44799: new concurrent worker using channels (#960) #960
OWNERS: add myself to reviewers. (#1007) #1007
OCPBUGS-44714 : don’t clear cluster-resources dir on delete --generate (#1004) #1004 OCPBUGS-47453 : Use one of the newer sha256 keys to verify release signatures (#997) #997 make: also fmt/vet the v2 module (#996) #996
OCPBUGS-45215 : cli: fix log-level values checking (#995) #995 OCPBUGS-43489 : Fix for deleting of local cache using –force-cache-de… (#988) #988 OCPBUGS-45580 : Fix Mirror2Disk not including the rebuilt catalog in the archive (#990) #990 update ci file to the latest go version (#986) #986
pull request template update (#987) #987
OCPBUGS-44901 : Align tag format for additionalImages and operators (#981) #981 OCPBUGS-42849 : Assign a static name to the release signature configmap (#979) #979 OCPBUGS-43825 : Fix graph image not deletable if mirrored by m2m (#982) #982 Updating oc-mirror-plugin-container image to be consistent with ART for 4.19 (#980) #980
Full changelog
NO-ISSUE: (Manual) Synchronize From Upstream Repositories #216
NO-ISSUE: (Manual) Synchronize From Upstream Repositories #214
NO-ISSUE: Synchronize From Upstream Repositories #212
NO-ISSUE: Synchronize From Upstream Repositories #210
NO-ISSUE: Synchronize From Upstream Repositories #209
Full changelog
NO-ISSUE: Synchronize From Upstream Repositories #937
OCPBUGS-48486 : Fix concurrent namespace resolution #936 NO-ISSUE: Manual Synchronize From Upstream Repositories #933
NO-ISSUE: Synchronize From Upstream Repositories #928
NO-ISSUE: Synchronize From Upstream Repositories #927
NO-ISSUE: Synchronize From Upstream Repositories #919
NO-ISSUE: Synchronize From Upstream Repositories #915
NO-ISSUE: Remove m1kola from owners #914
OCPBUGS-45420 : Updating operator-registry-container image to be consistent with ART for 4.19 #909 OCPBUGS-45396 : Updating operator-lifecycle-manager-container image to be consistent with ART for 4.19 #908 OCPBUGS-42815 : Synchronize From Upstream Repositories #910 Full changelog
OCPBUGS-29354 : Added error event for failed ingress to route conversion #48 OCPBUGS-45441 : Updating ose-route-controller-manager-container image to be consistent with ART for 4.19 #52 NO-JIRA: Updated OWNERS file to reflect current team #54
Full changelog
SDN-4930 : Fix CUDN manifest to account for IPV6 singlestack #29451 SDN-4930 : Make UserDefinedNetwork status backwards compatible #29446 OCPBUGS-48569 , SDN-4930 : ovn-k,net-seg: Use the right IP family according to env #29445 SDN-4930 : Fix pods cleanup in ClusterUserDefinedNetwork test #29448 OCPBUGS-48569 , SDN-4930 : e2e,ovn-k,net-seg: Wait for UDN condition populate #29436 OCPBUGS-48238 , OCPBUGS-48449 , OCPBUGS-48450 : Set the poll timeout and poll interval in eventually directly for the tests #29428 SDN-5473 : OVN-K: Port e2e tests for CUDN functionality, connectivity and isolation #29274 OCPBUGS-43777 : apiserver: add tests to verify kube-apiserver is accessible via different endpoints #29339 SDN-5579 : virt, feat gates: the UDN CRD depends on the NetSeg feat gate #29407 SDN-4930 : Verify that a UDN pod can reach the kapi service in the default network #29253 SDN-4930 : networksegmentation, udn: Wait for NetworkCreated or NetworkReady condition #29381 SDN-5017 : Fix subnet check for assigned pod IPs #29394 OCPBUGS-47529 : Add team members to the OWNERS file for PR approvals #29384 OCPBUGS-43478 : generalize the RHEL8 and RHEL9 subscription_content.go test #29315 OCPBUGS-39315 : remove ingress operator exclusion #29093 OCPBUGS-48076 : external binary: in-line registry auth file fetching #29396 OCPBUGS-47700 : images: Fix layers test to work with manifestlisted imagestreams #29392 OCPBUGS-47796 : fix year for string compare #29398 NO-ISSUE: Automated - Update synthetic test data #29332
Revert “TRT-1803: Wait for operators to become stable before test” #29399
OCPBUGS-44257 : Fixing build s2i ruby test data inline with latest ruby version(>=3.0) #29355 SDN-5031 : e2e,networking: add UDN open-default-ports annotation test. #29346 SDN-4168 : Optimize timing for IPsec tests #28797 SDN-5567 : virt: add GA placeholder test #29375 SDN-5566 : virt, udn: primary UDN requires the net seg FG #29374 TRT-1803 : Wait for operators to become stable before test #29367 TRT-1575 : Use catchall card for operator degraded exceptions for major operators #29354 OCPBUGS-45756 : Updating openshift-enterprise-tests-container image to be consistent with ART for 4.19 #29349 SDN-5568 : only provision workloads when network creation has started #29348 SDN-5017 : Add UDN Network Policy e2e tests #29195 STOR-2136 : Remove CSI snapshot webhook tests #29383 CNTRLPLANE-1 : Update etcd test data for 1.32 release #29376 STOR-2136 : Remove CSI snapshot webhook conditions checks #29365 CNTRLPLANE-1 : Add incoming images k8s 1.32 #29362 NO-JIRA: managed services: bump series limit #29369
NO-ISSUE: Remove m1kola from owners #29368
trt-1892: check for pod security audit violations #29320
NE-1870 : Fix the Network Ingress & DNS OWNERS files and add aliases to OWNERS_ALIASES #29247 OCPBUGS-45994 : managed services: allow KubeDaemonSetMisScheduled alert #29357 OCPBUGS-45838 : managed services: add more missing namespaces #29356 OCPBUGS-42618 : Replace RunHostCmd with Exec function to censor bearer token being ex… #29176 Full changelog
Source code for this page located on github