4.20.32

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.20.32-x86_64

Qualifiers (status api):

Tests:

Blocking jobs
- upgrade Succeeded (2 retries) periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial-1of2 Succeeded periodic-ci-openshift-release-main-nightly-4.20-e2e-aws-ovn-serial-1of2
- aws-ovn-serial-2of2 Succeeded periodic-ci-openshift-release-main-nightly-4.20-e2e-aws-ovn-serial-2of2
- aws-ovn-single-node-upgrade-4.20-micro Succeeded periodic-ci-openshift-release-main-ci-4.20-e2e-aws-upgrade-ovn-single-node
- aws-ovn-upgrade-4.20-micro-fips Succeeded periodic-ci-openshift-release-main-nightly-4.20-e2e-aws-ovn-upgrade-fips
- azure-ovn-upgrade-4.20-micro Failed (1 retry) periodic-ci-openshift-release-main-ci-4.20-e2e-azure-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Failed
- driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.20-e2e-aws-driver-toolkit
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.20-fips-payload-scan
- gcp-ovn-rt-upgrade-4.20-minor Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.20-upgrade-from-stable-4.19-e2e-gcp-ovn-rt-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- hypershift-ovn-conformance-4.20 Succeeded periodic-ci-openshift-hypershift-release-4.20-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-ipv4 Succeeded periodic-ci-openshift-release-main-nightly-4.20-e2e-metal-ipi-ovn-ipv4
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.20-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.20-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.20-periodics-e2e-aws-ovn-ocp-conformance-serial

Upgrades from:

Untested upgrades: 4.19.18, 4.19.20, 4.19.21, 4.19.22, 4.19.23, 4.19.24, 4.19.25, 4.19.26, 4.19.27, 4.19.30, 4.19.31, 4.19.32, 4.19.33, 4.19.34, 4.19.35, 4.19.36, 4.19.37, 4.20.10, 4.20.11, 4.20.13, 4.20.14, 4.20.15, 4.20.16, 4.20.17, 4.20.18, 4.20.19, 4.20.20, 4.20.21, 4.20.22, 4.20.23, 4.20.24, 4.20.25, 4.20.27, 4.20.28, 4.20.3, 4.20.4, 4.20.5, 4.20.6, 4.20.8

4.20.31 (changes) - S F F S S F F S
4.20.30 (changes) - Failed
4.20.29 (changes) - Success
4.20.26 - Failed
4.20.12 (changes) - Failed
4.20.9 (changes) - Success
4.20.2 (changes) - Failed
4.20.1 (changes) - Failed
4.20.0 (changes) - Failed
4.19.40 (changes) - Failed Success
4.19.39 (changes) - Failed
4.19.38 (changes) - Failed
4.19.29 (changes) - Failed
4.19.28 (changes) - Failed
4.19.19 (changes) - Success
4.19.17 (changes) - Success
4.19.16 (changes) - Failed
4.19.15 (changes) - Success
4.19.0-0.nightly-2026-07-29-190934 (changes) - Failed Success

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.20.26

Created: 2026-07-30 12:45:59 +0000 UTC

Image Digest: sha256:d03909e954e9a6d24900809750bd39f5f69d8a9e480eec97d481b9977c430d4d

Components

Kubectl 1.33.3
Kubernetes upgraded from 1.33.12 to 1.33.13
Kubernetes Tests 1.33.4
Red Hat Enterprise Linux CoreOS upgraded from 9.6.20260616-0 to 9.6.20260727-0

The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
GatewayAPIWithoutOLM (5 tests)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)

Rebuilt images without code change

agent-installer-csr-approver git a26df06f sha256:0d86fbf2c7964ce6bfa97dc0f2dab54917bdf001f10d512176b2787798299ce1
agent-installer-node-agent git 637327ec sha256:f185198fa2780e018d0272ae3fed11000f096aab358b1a0c3c4754858b4db81c
agent-installer-orchestrator git a26df06f sha256:a564ac4b77199a8a1d744326bc750fd103f042d4e51204a4cd5f0716fb5f5f60
agent-installer-utils git e3e997d9 sha256:fddad96bc1701c02160ece45ef4b88bd61fef182fa910540b1b9778fdb916806
apiserver-network-proxy git 11b24a2c sha256:0c590854637caad852854cf4b6787d1a6d87224a49672913cf8774a28d14dedb
aws-cloud-controller-manager git bb88da16 sha256:803e6cfcf8a27be8cfeb8b3ba48ef48ce89f6d52eb025276491fb24f73a091aa
aws-cluster-api-controllers git 300439ea sha256:8d57c5beed06dfe560ae38fd6bb907d7308a3baae5896e0bc4ea86e127962fd6
aws-ebs-csi-driver git 6c99b973 sha256:d004e993cb972953be36d2553cd978e6a41ee358a79ee7eb395dfefbf54f8b26
aws-ebs-csi-driver-operator git 91042479 sha256:f2d3376405301ee31ac2725ccad3c6b4880a6ddb83c632d155994ebc0b11e8d8
aws-karpenter-provider-aws git b37141b0 sha256:8bb80b133d81de77a8a2fd8a01efb472473e94da606589ff6a88017992ab008b
aws-kms-encryption-provider git 0000b76a sha256:c41b95a352197647ea5c140af6a2cb4561df161238606f9781a5a1c02c409ef9
aws-machine-controllers git 999f4f76 sha256:50ae9f3a43148e1c28eb327837eb14fca22548c5c3b464a3c9bc8fd8f1dd107e
aws-pod-identity-webhook git 8e83772a sha256:3908bf65151cd3ed14147c97522cfee946afac380583f8fce498909960224c9f
azure-cloud-controller-manager git fbf11126 sha256:c66401b1e29deb0dfb5fceb6435ff8bedaa442dadcb40f0e328f5a48c7c10e84
azure-cloud-node-manager git fbf11126 sha256:aa45b0bd82ba47e3086d3a86766898801eeda68c3d2d11e92623bccf5b78631d
azure-cluster-api-controllers git c29c68dd sha256:6f470da80a77a17c82a454ac31c953de7437805ad6db9df91fcee3b3f2025d21
azure-disk-csi-driver git e1ea4e92 sha256:c3e606b1a66850379079b7d610cc80151cb398692694cce5dda45a0b3709cfc6
azure-disk-csi-driver-operator git 91042479 sha256:15c0f820eef34ca1ed9e1fbc8b92b37737235ee9a30f852c74666673b1350b19
azure-file-csi-driver git c7bce6e9 sha256:3a919e1f72d6cfd68af6abf4d8885350a02d441c52510d59494ecbda8ccf4fbe
azure-file-csi-driver-operator git 91042479 sha256:de2378d36176a95bfeee48c610559ea05347dce4bf433349e115cd42e23c8786
azure-kms-encryption-provider git 1d6fb879 sha256:a0a0c539f87bf1f2881e26e9fb8a151d9997d271f5931a7cd89d59210eff4bb8
azure-machine-controllers git 68db9150 sha256:21ffb7c164b1022196858af9b674241933cc4a04b1231f76972474d1a0a33639
azure-service-operator git d957de42 sha256:147f7e4c504355e3db58d6d478c5bc56c7dbdf47509e02e2d942af1c34e98dcb
baremetal-cluster-api-controllers git f782ba74 sha256:e550650f36217edfacc47e7a0112ad7a658a0d0b021b90642d15f62d91a0a820
baremetal-machine-controllers git fb678fec sha256:ceca92090f554a02a396b8c700ba2b6f5a600c5aa7acb90ce342cbc5dfa0380e
baremetal-runtimecfg git 5e602ba7 sha256:14c4a06539b898cf8a6f6421ea5c5a98b6311263de1b8212b385d12b45cd839d
cli git 02b0b2d9 sha256:921f4dd629d72aed3018aec9c7d9259eb4737e00ff0090c0e65c36072dceebed
cli-artifacts git 02b0b2d9 sha256:7f53b8a4761499ca07918d96168798c7e6bbe98e54c2b1ba12a51cde786ba0b4
cloud-network-config-controller git d22915bc sha256:745f3e98fd82600edeb9d3eba6443886808ae775ac02bbc1002ee27c6ecd1f1e
cluster-authentication-operator git 569ae680 sha256:b7f15b0ecaffaaa898d8b129ef657cf18d246a406dc0e8dc982aca91fbfe5bf5
cluster-autoscaler git 6b1d2ef8 sha256:3d365d17c185b4d0f43bd39fdfc7c41a770a0c61eaa5145708c7dd0c9ac7d97d
cluster-autoscaler-operator git 147e5a7f sha256:feb45b9e91eaba1aad8c56c92deeca31735b79566bb8c372ff56453f7a4b1fb7
cluster-baremetal-operator git 17181f99 sha256:eabbb119b6b82c6677720a01f8a66f0a155555afa33f027a3e62496f9dc674b7
cluster-bootstrap git 74abc555 sha256:197cf73cc2550c8c5469cec454323eaf98d407c97c68fda215374e200cf69083
cluster-capi-controllers git dfeecf96 sha256:06532b136ebaf1092f9fec51632bd13f24d07fc9f6c6ba37d21c8ff25ab39f70
cluster-capi-operator git 4bd6d82d sha256:96ba314d1e187c137c9fbe1626288a09d946aead94b42d33d9913776573503b9
cluster-cloud-controller-manager-operator git 276696cc sha256:2eedfe2b958a8caf8da9af964aadc4cd7491c5ca0e7fa4917221e94204b112f1
cluster-config-operator git 657754e2 sha256:50fdaaf3e690e8ef5a6cfe560a399ae1d389217bd91a59a1f14d85dddb01f706
cluster-control-plane-machine-set-operator git 0bbafe24 sha256:c744dda9ece8f2b0e54718b6b7ed52d12069a2bc50faf5bc37449b5c80be2cc0
cluster-csi-snapshot-controller-operator git a99bd8ff sha256:76f74116983275ca7e7d62734c772746ca4b0a13713745f3e9e32d1f4e8c3f2c
cluster-dns-operator git 82578923 sha256:d2b9ddd7173ac391b84bd8339e38be36c6f03b495083c2253d21f5ed1995c399
cluster-etcd-operator git 9acf049b sha256:dd25544cc118f46712c3b382d2b832bf41f99426e34ee3b03e4ea6273d55f58e
cluster-image-registry-operator git b04c7c12 sha256:11085ad0c6d1dc19ddb699f194479250c17b1be0692cb1f602e9507bc6e533cc
cluster-kube-apiserver-operator git 00259384 sha256:0d179126369eaf56dd0d0786a8eb70c28d7fa39e7f2435edf93185f8723adc0e
cluster-kube-cluster-api-operator git adaae0d4 sha256:6481bc58c7f7a86ec3842eb4241d3c416d9352de7936f918904cb52291bd49c0
cluster-kube-controller-manager-operator git 438c9dba sha256:792167a45501c593aff3ca4ec18231a539f60e084be28bf02d83d9af688624af
cluster-kube-scheduler-operator git 84eb8c5a sha256:c4762c55bf43e089257190f74e30ed3ee5cf8b1cbf79133cdd273dec96e99e2f
cluster-kube-storage-version-migrator-operator git 5adc1429 sha256:0dd569e1007e74685db4411dfe29ed687486a9b2acd02cc1870ebdfa33a47021
cluster-machine-approver git b3c82b2e sha256:a65ebef0fd851487d6b42f7b95a385291f270efacf3c340411599d10a5e537c0
cluster-olm-operator git d01cc083 sha256:dc002adadf14146d23d6ee2215ccabf8dc5a1fa770255146bd8f04dd5d86449a
cluster-openshift-apiserver-operator git 9cfa5679 sha256:c4fb2a577554a76cf7c5bc7d068e003dab8d3fb01ff8466185d0824f1028ca4d
cluster-openshift-controller-manager-operator git aa455c04 sha256:b827067ae23d69cd2a1c078147b08af195615d6aca1bb4b58ff9af4b7e1d3abc
cluster-samples-operator git b343f70f sha256:438d5a008dfa339cbabd45e52e7eb9917a96722f9196b57864e46514251d2767
cluster-storage-operator git e8e9de43 sha256:a45a5149d9adaea5698b9f71317b5b8f6583653df870491b1e0ccba2709bac13
cluster-update-keys git c40e7b9b sha256:944cdec95e8e939a065343451201f38063b7e187b32e71fee095c52e7ef3f760
cluster-version-operator git ea3fa769 sha256:57fa4a4891fae282695dd96333a8153606e9f94bacf177333c25d2c84ee3668f
configmap-reloader git 2438d7c8 sha256:9b9a35fada5b87b420475ae98c8ff37c1344b46afe556f16ef068de98eea5c18
container-networking-plugins git 184a9601 sha256:46eeb0072421916ebaba6bdfe86aa58478f67d0ea80ac0baa5a475d776752d54
containernetworking-plugins-microshift git 184a9601 sha256:c67e1e294fde7b39776a00fcd34914e80e4dcfdedbd0ca78ac3d9c66c1af5fe1
coredns git 6f39336e sha256:4efae16a12581e158990dafa3aafa190c21e3a2c82de931300a0db1bdcc1ca49
csi-driver-manila git 649398c2 sha256:bd240fd781b34adda2412ca8e590962be30c176a1cc27199e7cdd741f1fa3a41
csi-driver-manila-operator git 91042479 sha256:cd7b9efb45cb6c0a118f8ff98ca8d15f347992d135fe331600ff4e9129e98232
csi-driver-nfs git 20609066 sha256:76bf43c70ef6db87a4ba2aa999ad2be41136d3b4c3c4025e5c5c0d36a23cac05
csi-external-attacher git 935f1e1f sha256:1aadc38b6ac8e9f0f8f5e0d7fcdef27761178943155612ec5294a0d1f8db1f68
csi-external-resizer git c674bea9 sha256:4bcf2e69f516c65fc674729d15d50d371afeb8970b2f5a9ad899717e0a15eb00
csi-external-snapshot-metadata git 693a8264 sha256:70e60288f96e117e40e589795c02db70773f1bb7f96fc01d82b8b9efc0d32e46
csi-external-snapshotter git 433cf89b sha256:649255ffc871b0a11d85fef41041905e6b16790366f099a6a9a1ef382d5aae7d
csi-livenessprobe git 1d6d6b27 sha256:3d07c40ecb7f0e172c0c3f6b4a4ad754e86b2e62341da3710a602ccca813cdbc
csi-node-driver-registrar git 6ce4713c sha256:15424b9a60532b01acb42abed90f6c3e2e0feab26a227c0323b083e0105d8bb6
csi-snapshot-controller git 433cf89b sha256:b92ea5ae540653186f38ff268079528850b3140873d7a40b0d03503cb0d652d8
deployer git 02b0b2d9 sha256:4a4a5009e6a6dbe397af367381e5195e0d4f804a7790e45da02025a560d0ff70
docker-builder git 35afa308 sha256:977423f424edbf5c2067d2f15cf18a8c64eebd5907b2c441ae5623aab2e8de65
docker-registry git 0e96a084 sha256:065d00f29e36e581cefab2b46fb8683ef40b0236f2d531415fd72918d20f7c5f
driver-toolkit git 62e1f604 sha256:dee2eb2753706989921e15fc186b717ecd39c9f9f51a7b7ceae689f5d8fecb9f
etcd git 05bca977 sha256:bdf881899946befbb1661ef01dff5d4025f7d4244c4d24e73476b3ddca33a6f5
gcp-cloud-controller-manager git d5a55414 sha256:ae755d9f6f2a43234f7dcd12fd734aae2c22d970cbb3cf8cc2d61a6a4a7a5074
gcp-cluster-api-controllers git 74e23890 sha256:bdf68b818a25faf4b7e426176070264ba06569ccee48a3ebc5c13d58082d72a6
gcp-machine-controllers git b998cf25 sha256:82a1f6a20159c16ff42b313ad6f2fe10dece97016b9f9119ab8bbed04719396e
gcp-pd-csi-driver git 49e54581 sha256:9c12afb3234537fb99b02381fe47504c7b488b39f0d4b716ab49709e347e5595
gcp-workload-identity-federation-webhook git b36788ed sha256:ea5c00b205023b02d5d7e3296ccd5f405e05f0f8a7a68a972d772adf41c417bf
haproxy-router git 40c34581 sha256:af3047232b27f39dfdc79a7c95c2cdcd94b8e96c5c65ae89e089ab8ff875df92
ibm-cloud-controller-manager git 36ab30f9 sha256:14b489c7dcee186494bef093c8053b4cc78c90227b8635408d059e76c0252123
ibm-vpc-block-csi-driver git 0d2143b7 sha256:5cc054342737ce6e5cb259d7c244a5be64e941eefd4aa350648e84a939c303fa
ibm-vpc-block-csi-driver-operator git 21f405cc sha256:71c4e89f8b90f95478d6deb1b84fe478f86ff63a723e4d990e237ff4e55bb338
ibmcloud-cluster-api-controllers git 8b6396a4 sha256:ef8f26f53ba3491585164b51711fdbc70dceb42944c93cee0d0cd5222caffa22
ibmcloud-machine-controllers git e63e7a19 sha256:d696dc6236ee85aca017b1f6f82ae3709d0748886272573f537a4e4561796b56
insights-runtime-exporter git 39e71471 sha256:ca25a1fa7fdb3f449097f31bd12b205a4673d82c1274f3ad93eaabe7a00f2381
insights-runtime-extractor git 39e71471 sha256:959b77ce837e5a51661635e5147a3765f54cb59ccbb26a6af80edb9fef7b9df0
ironic-machine-os-downloader git 6c92e542 sha256:80da3cd5a49d8d9b804f11274a557216e74d6a523dc6588cfb62f1b818efea3c
ironic-static-ip-manager git fa5b8b8b sha256:ab457863d9130ee642286b0c5501d2866df77df78cb3a470e6a5433dfb06bf6d
kube-metrics-server git e7379b30 sha256:983d7d5a38d50a6e6c35ebb723ff1801827deecfbe747435a4dd10ad47288d0d
kube-rbac-proxy git b9134351 sha256:8d90ad1a288f986ba671864084887e01395d273c801235ba4115291de5cb9fd2
kube-storage-version-migrator git 0f8a4eb8 sha256:21681956dd29d5b459f9ed7a62c19f68af0bb191b43a8b4c5ba0ebebcffa2d3b
machine-api-operator git de0171b9 sha256:e4fada8d26b5b11b5fec5524ca6b04fc132cfa9f77ff57c23ffa6335885e35a8
machine-image-customization-controller git fe4360da sha256:84c8bbdf8f2e8f6828f4e5b6e95892a122d0cd7be6314c29c47d667a07757bf9
metallb-frr git 3ca45c51 sha256:8c0bd098c0a29c0309e34aa05844a0da71a7c1028d999f3daac4ccd2a4296e69
multus-admission-controller git fc73c803 sha256:4a79bc1b2dcf5dac920f8de5f1f4dd07a33bc50020db061d61adad349d7ae2f7
multus-cni git b2a2f457 sha256:178bb940d65bc2514de9883573633b8bca2e63758cd7396acdf4d37170aed232
multus-cni-microshift git b2a2f457 sha256:30e3a136876ab3b688ebeb27616075b34edf129030cd5c1296f7fc215ec5b0c0
multus-networkpolicy git afbdf825 sha256:1b48a51810d9ffcd197fe8c47a24a2d1493124211830f6e2ff94f78b3a7d00d3
multus-route-override-cni git 391c1b03 sha256:641716a49e862323adbe3bf263dc8b9acefd172e1cf6c80e9549bf7cae9b16cd
multus-whereabouts-ipam-cni git 43c89591 sha256:4905ff3755eef6ff7b12b87ee659277efab75bfa4fdbbf9d8fa006f037782557
network-interface-bond-cni git dd3c4d0b sha256:6204a15faf4773130296782a6f7d3bf1d86ce0f8c2d1eb38bdfa088f0b6a6243
network-metrics-daemon git b81340a9 sha256:d84bcdfc9624f070be39f691a898e1cf6f07d8baffadd140183ec92528d39370
network-tools git 26d09174 sha256:3d03474544436506f55b3fb8acf7e896b44ce5a0d59465f06544cdda76feb4ab
nutanix-cloud-controller-manager git b575ef15 sha256:7d55491720488e9c14da5a38c4871080012579708ffe6fa2a2aaee2e9ee54437
nutanix-machine-controllers git 3200ddef sha256:94bef7d87ff65902cbf733b4e279248ad64976ba8b05d745346904284690b767
oauth-apiserver git 99f27d25 sha256:79884ae7b17479d95812abf4ce51339d21a211d3fa3f027dbab87068a237790b
oauth-server git 715ae668 sha256:bf87d2013800fae980fc0b2dded43bc0ca2eb10de5b819209211dfa0a766bc35
oc-mirror git 9b186403 sha256:2419a02dcfdf79b501301fa32fdaded6ed2316d53aeb7a13312f3a9467e1185f
olm-catalogd git 66f77132 sha256:fa289c791b4e56f549c1b6617df1b62f5d9e91731bf8e081a4fcd7a9d8c3de33
olm-operator-controller git 66f77132 sha256:14fb92722b8d3ee8a430cd3bc409233a064c53ad12f1a17bf7c6900084733cd0
openshift-apiserver git eda815e0 sha256:cfd3361f88e7373799b4d27deca9fd95f4398b80f536ac3821ffd51d1fcb7d2e
openshift-controller-manager git d9e543dd sha256:e36ae111c933658abb2c9512a7da699747c8591c428fc1844a48279a172c27ab
openshift-state-metrics git b04e2ef0 sha256:ac66c8dd484b25728ea90e7ac499b22c303331b37711b98cca0298c7425a9fbb
openstack-cinder-csi-driver git 649398c2 sha256:c41acf2f080afd738c26b3e2d8ab3136519e89a1f1911b4ce0d8157ef294d85e
openstack-cinder-csi-driver-operator git 91042479 sha256:35a12612949771c3ba112a9438dc186772e3b94f31c81d96ceb580c3e7ed1909
openstack-cloud-controller-manager git 649398c2 sha256:448b250f618a26f01cddde35290fe04fc224575aee539590526e213b44d6c1b2
openstack-cluster-api-controllers git c91265ed sha256:e6759049d401cdb0c5ad27a08c16d738d07717f2d961c528505ee7a1a600025b
openstack-resource-controller git bf0d2c88 sha256:d7ea01b82bc68b064fea735a14865e8198128da04771c140c04a6c5aafd3c5c8
operator-framework-tools git 1628e537 sha256:f6c2efe128cf2e23e05e8cda9cdcb41c2871890ccf99a574379a0b6571411642
operator-lifecycle-manager git 1628e537 sha256:38aae90c85d2b6786bc085594823810f9a939214976a0176d15081c0e30dbdd9
operator-marketplace git 4ccd56c9 sha256:e277bb1898c2fe1c5f201209870cf6229c9df8167f5c860a88e8c2c3241fd652
operator-registry git 1628e537 sha256:d2f920f821e6e1d9bbc5beffabf47f638a0951a978a088b8cd748ad328ea5585
ovn-kubernetes git e02cc756 sha256:e62bba29847f5d432449a7f634bcfc7be05cf9455cdbf27f7a9ceb83175e6542
ovn-kubernetes-microshift git e02cc756 sha256:6e3943c9716ccb84a493e64e08a516d54eb70f65ccad7bca2252e0b37a2dcc3d
powervs-block-csi-driver git 8faa079f sha256:35b050957510ac992c59ea3006ee87f021b1e7d04a3b68901e4d73c533c2cb2d
powervs-block-csi-driver-operator git 4036cd3b sha256:ffcf10a792eda8044c8e450b6872a8e958abefdce510d2999f2ee4a3041c5adf
powervs-cloud-controller-manager git d634e80b sha256:d8658d67d39afcf2206eac667ec68f11ac93b360b1d5730a858851db89586377
powervs-machine-controllers git f011b3c7 sha256:f2e6e11e40887b375a1d2605e96dfb45dc7409726bfc4c789ced965dfdd7cabb
prom-label-proxy git 3bc94eed sha256:ee0b85d40ca1db9181ca607e6e303b0aa36fd186ad1ea80d80d846b2fd69e09b
prometheus-config-reloader git 425294dd sha256:f594ac204db145e7665e3640bbaf040e9bc90513dd74338fc51f4b862ca51e20
prometheus-node-exporter git fa749d65 sha256:bc80db76d4c679ee880ad3506611cf4a80bc47b60fb7ee92d4995ac21c577b91
prometheus-operator git 425294dd sha256:49c960345b45dbc08bb4a93156ef5b4ce78f51b163b30255fba88b3d18120a3e
prometheus-operator-admission-webhook git 425294dd sha256:137929dcd783196bbd4cb10daa2e3a98f89997a1074519094fbb8ef408e40e1e
rhel-coreos git ee943c37 sha256:b7624e4bb4f07e6f1865df583c330b941a42eb46e80e1014e3757799296611eb
rhel-coreos-extensions git ee943c37 sha256:63288a8970363a1c355726164ce217335e49bdaccef0dee5eb0f2ebce7a705dd
route-controller-manager git 1a0229e4 sha256:e5e8e75e81f386ae065a27991f900f827b3c210e48eda2a69fcb1496da0d16cd
service-ca-operator git 37e0c317 sha256:181c79d0ac23170964062a6a4e53a182ef1b9724e0dc5a69eaa9233bc4481dce
telemeter git d07a8330 sha256:38e2b23ce9f4724882a8ef9fc9484292d352a35fea2f50ca94c42e0347ff2a1e
thanos git e09de117 sha256:b5291f8f75342435af626a6d0787a56e69418c39bae2f6ce00c6334c804cda1b
tools git 02b0b2d9 sha256:ec869ec1c5987b4f3aae6fbca85b91b1534b21fb29ba355e9d6395fdd701d89f
volume-data-source-validator git 0e61642f sha256:d0b359dcb050404567698900de479b429ae64d95d7560998603e1c1440b31be0
vsphere-cloud-controller-manager git b93eb64f sha256:48c0696f1c62719a2f8755d8a1046593f49984b69dbb8657812e3ba6c9a6bb09
vsphere-cluster-api-controllers git 769d0fb7 sha256:9f50a4c1aac294e5965e906302e23424f6450db617dda3728d39c43cd215d432
vsphere-csi-driver git 0363addf sha256:940ee0ebc517bd25f6e8ed30ec116d2c5cd67336a207cfdfb20da86c10630718
vsphere-csi-driver-operator git 13b68a91 sha256:9eb132b1be5d1f3d5b50647366c27ea2e07c2e892df1e08c1616dbdce119daac
vsphere-csi-driver-syncer git 0363addf sha256:3729bf45356c814444a048f5ffb36db6a981b71fb1de0bf10aa9341c475feb59
vsphere-problem-detector git 65d066ab sha256:ac0cfcf6e29d939eef6e5d4734aae410c432161d5585ab039fc040504a2d8cac

agent-installer-api-server

OCPBUGS-93748: Add sourcedir /run/chrony-dhcp to generated chrony.conf #10537
Full changelog

agent-installer-ui

OCPBUGS-91623: Bump ws to 8.21.0 for CVE-2026-45736 (#3907) #3907
OCPBUGS-98265: Bump tar to 7.5.19 in 4.20 (#3892) #3892
Apply patches (#3876) #3876
Update OWNERS file (#3881) #3881
OCPBUGS-98429: Bump js-yaml to 4.3.0 in 4.20 (#3864) #3864
OCPBUGS-89699: bump form-data to 2.5.6 and 4.0.6 via yarn.lock patch and scoped resolution to address CVE-2026-12143 (#3879) #3879
patch CVE-2026-9277 and CVE-2026-42338 via yarn resolutions (#3854) #3854
OCPBUGS-88394, OCPBUGS-88407: Bump axios to 1.18.1 (#3859) #3859
Full changelog

azure-workload-identity-webhook

OCPBUGS-81944: Bump go-jose/go-jose/v4@v4.1.4 #51
OCPBUGS-86846: [release-4.20] filter out “remove” patches #49
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-89242: Update RHCOS-release-4.20 data/data/coreos/rhcos.json to 9.6.20260616-0 #10650
OCPBUGS-86552: azure: Add field in installconfig to disallow shared access key #10575
Full changelog

baremetal-operator

OCPBUGS-98095: Add BMH finalizer on PreprovisioningImage #507
OCPBUGS-87965: Fix preprovisioning network Secret lifecycle during BMH deletion #493
Full changelog

cloud-credential-operator

NO-JIRA: Revert “OCPBUGS-87109 Scope minted AWS IAM policies to cluster-owned resources” #1061
OCPBUGS-87109: Scope minted AWS IAM policies to cluster-owned resources #1047
Full changelog

cluster-config-api

OCPBUGS-82147, OCPBUGS-92038, OCPBUGS-92039, OCPBUGS-92041, OCPBUGS-92042: Promote GatewayAPIWithoutOLM feature gate to Default #2869
OCPBUGS-98332: add new serviceAccountToken fs type #2925
OCPBUGS-82147, OCPBUGS-92038, OCPBUGS-92039, OCPBUGS-92041, OCPBUGS-92042: Promote GatewayAPIWithoutOLM feature gate to TechPreview #2874
Full changelog

cluster-ingress-operator

OCPBUGS-99910: E2E test for internal LoadBalancer Annotations #1526
OCPBUGS-99484: Add e2e test for Gateway API infrastructure annotations #1521
OCPBUGS-98968: Bump Istio version from v1.26.2 to v1.26.8 #1510
OCPBUGS-85155: Fix e2e tests to work on platforms with unmanaged DNS #1514
OCPBUGS-99225: Fix logic on gatewayapi test cleanup #1512
OCPBUGS-88353, OCPBUGS-88354: Ensure canary cert matches the default ingress controller’s cert #1469
OCPBUGS-82147, OCPBUGS-92038, OCPBUGS-92039, OCPBUGS-92041, OCPBUGS-92042: Remove feature-set annotations from Sail Library RBAC Manifests #1497
OCPBUGS-82147, OCPBUGS-92038, OCPBUGS-92039, OCPBUGS-92041, OCPBUGS-92042: Replace OLM-based Istio install with Sail Library #1459
OCPBUGS-85523: Remove restriction of unmanaged x-k8s.io #1488
Full changelog

cluster-monitoring-operator

OCPBUGS-92195: set Prometheus shards value explicitly #2973
OCPBUGS-94078: ship collector:node_scrape_collector_success:avg to Telemetry #2990
Full changelog

cluster-network-operator

OCPBUGS-98796: Bump github.com/containernetworking/cni v0.8.0 -> v1.3.0 #3071
Full changelog

cluster-node-tuning-operator

OCPBUGS-90598: perf: latency: compute memory resources dynamically #1553
Full changelog

cluster-policy-controller

OCPBUGS-98332: [4.20] add serviceAccountToken volume type to psalabelsyncer #194
Full changelog

console

OCPBUGS-99312: Disable Knative e2e Cypress tests in CI #16795
OCPBUGS-99167: fixing severity not showing number of issues #16620
OCPBUGS-84286: Bump follow-redirects to 1.16.0 to fix CVE-2026-40895 #16671
Fix for OCPBUGS-81613: CVE-2026-4800 #16561
OCPBUGS-86746, OCPBUGS-87089, OCPBUGS-88753: [release-4.20] bump package: webpack-dev-server, protobufjs, fast-uri #16674
OCPBUGS-86455: [release-4.20] shell-quote: Arbitrary code execution via command injection due to unescaped line terminators #16509
OCPBUGS-89235: Allow VolumeSnapshot restore when parent PVC is deleted #16635
OCPBUGS-87835: Prevent binary secret data corruption when editing #16571
Full changelog

console-operator

OCPBUGS-98986: [4.20] Stabilize telemetry config to prevent continuous console pod rollouts #1191
Full changelog

csi-external-provisioner

OCPBUGS-82854: Address CVE-2026-35469 #141
Full changelog

egress-router-cni

OCPBUGS-98796: Bump containernetworking/cni to v1.3.0 github.com/containernetworking/plugins to 1.4.0 #107
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-97961: no-op OWNERS change to trigger postsubmit jobs #198
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-93896: Rebase v1.33.13 in release-4.20 #2706
Full changelog

hypershift

OCPBUGS-99143: fix(backport): konnectivity agent auth #9092
OCPBUGS-98574: [release-4.20] fix(cpo): deduplicate VPC endpoint subnets by AZ to prevent DuplicateSubnetsInSameZone #8994
OCPBUGS-78400: remove resource limits from Agent CAPI provider #7947
OCPBUGS-94175: fix(cpo): prevent informer creation for inaccessible resource types #8876
OCPBUGS-89354: build(operator): drop hypershift-no-cgo from operator container images #8758
OCPBUGS-86020: OCPBUGS-62177: [release 4-20] verify cert revocation against all KAS pods #8536
Full changelog

insights-operator

OCPBUGS-99788: update HyperShift deployment manifest #1326
Full changelog

ironic

OCPBUGS-90559: [4.20] Fix parallel power concurrency #857
Full changelog

ironic-agent

OCPBUGS-95063: Replace individual package removal with a single rpm -e loop #284
OCPBUGS-95063: Replace dnf remove with rpm -e to prevent dependency removal #272
Full changelog

keepalived-ipfailover

OCPBUGS-99902: Reinstall tzdata if /usr/share/zoneinfo is missing #249
Full changelog

kube-state-metrics

OCPBUGS-99402: fix CronJob timezone panic and embed tzdata in kube-state-metrics #152
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-95086: OWNERS: Update component to Cloud Compute / KubeVirt Provider #80
Full changelog

kubevirt-csi-driver

OCPBUGS-80543: Bump google.golang.org/grpc to v1.79.3 #99
Full changelog

machine-config-operator

OCPBUGS-99650: Delete stale auto-sizing MachineConfigs for non-default (custom) pools 4.20 #6335
[release:4.20] OCPBUGS-98096: In OCB to check when a image is removed the old build is triggered again and the MC should start updating directly and no new MOSB should be triggred #6285
OCPBUGS-92029, OCPBUGS-98746: [release-4.20] Backport ocl test fixes and shard the test suite #6305
OCPBUGS-93807: move cleanUpDuplicatedMC to avoid double reboot on first updated Master node #6242
OCPBUGS-97906: Inject proxy into MCC deployment #6277
OCPBUGS-98214: fix: update arbiter crio config #6288
OCPBUGS-97824: Make vsphere template updates atomic #6272
OCPBUGS-97844: Remove sensitive ControllerConfig logging #6273
OCPBUGS-97586: Fix kubelet certificate wait loop in criometricsproxy.yaml #6267
OCPBUGS-96160: Update AMI Whitelist #6262
OCPBUGS-94227: Bootstrap MCS logging entire ignition #6251
OCPBUGS-91732: Update custom containerfile OCB test to work in a disconnected environment #6222
OCPBUGS-90969: Process rebuild annotation on machine-os-builder restart #6215
OCPBUGS-91635: daemon: don’t pull/extract extensions for all OS updates #6214
OCPBUGS-88689: Skip chrony-wait on first node join #6191
OCPBUGS-90133: vSphere boot image hot loop detection is non-functional due to stable template names #6207
OCPBUGS-88360: configure-ovs: copy lldp mode to br-ex port #6181
Full changelog

machine-os-images

OCPBUGS-87874: Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs #98
Full changelog

monitoring-plugin

OCPBUGS-99027: Fix CVE-2026-49978 - bump DOMPurify to >= 3.4.7 #1087
OU-1240: Makefile and package.json to enable test-frontend-ci #1096
OU-1240: Dockerfile.test permission #1079
OCPBUGS-99297: graph redirect query parameter #1074
OU-651: Fix AlertRules page to display user defined loki alerts #1058
Fix for OCPBUGS-91621: CVE-2026-45736 #1025
NO-JIRA: fix incidents unit test #1039
Fix for OCPBUGS-94012: CVE-2026-13676 #1030
OCPBUGS-87091: [release-4.20] fast-uri: URI authority bypass due to improper delimiter handling #974
Full changelog

must-gather

OCPBUGS-87215: Add Istio/Gateway API gather scripts to OCP 4.20.z #555
Full changelog

networking-console-plugin

OCPBUGS-92706: Updated doc links based on release #440
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

openstack-machine-api-provider

OCPBUGS-94016: Revendor CAPO #172
Full changelog

prometheus

OCPBUGS-88682: remote: validate snappy decoded length before allocation in read endpoint #342
Full changelog

prometheus-alertmanager

OCPBUGS-99449: embed tzdata in the alertmanager binary #143
Full changelog

tests

OCPBUGS-99301: admit and extract non-payload 4.20 #31387
OCPBUGS-85523: Remove restriction of unmanaged x-k8s.io #31351
OCPBUGS-91996: Add openshift/disruptive-longrunning testsuite in release-4.20 branch #31334
OCPBUGS-82147, OCPBUGS-92038, OCPBUGS-92039, OCPBUGS-92041, OCPBUGS-92042, OCPBUGS-92043, OCPBUGS-92044, OCPBUGS-92045: Backport noOLM Gateway API test coverage and upgrade tests #31322
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Unable to show node image info: too many concurrent oc adm release info --rpmdb/--rpmdb-diff operations (limit 32)

View changelog in Markdown or change previous release:

Source code for this page located on github