4.20.0-0.ci-2025-04-03-023700

Download the installer for your operating system or run

oc adm release extract --tools registry.ci.openshift.org/ocp/release:4.20.0-0.ci-2025-04-03-023700

Team Approvals:

Tests:

Blocking jobs
- aggregated-aws-ovn-upgrade-4.20-minor Succeeded periodic-ci-openshift-release-master-ci-4.20-upgrade-from-stable-4.19-e2e-aws-ovn-upgrade
- aggregated-azure-ovn-upgrade-4.20-minor Succeeded periodic-ci-openshift-release-master-ci-4.20-upgrade-from-stable-4.19-e2e-azure-ovn-upgrade
- aggregated-gcp-ovn-upgrade-4.20-micro Failed (2 retries) periodic-ci-openshift-release-master-ci-4.20-e2e-gcp-ovn-upgrade
- hypershift-e2e Failed (3 retries) periodic-ci-openshift-hypershift-release-4.20-periodics-e2e-aws-ovn

Upgrades from:

4.20.0-0.ci-2025-04-02-143700 - F F F F F F F
4.19.0-0.ci-2025-04-02-173804 (changes) - Success Success

Loading changelog, this may take a while ...

Changes from 4.20.0-0.ci-2025-04-02-143700

Created: 2025-04-03 02:39:51 +0000 UTC

Image Digest: sha256:187280559f689afed1f2d2c915f7110322a3a3490838745572a27eb6b606f5d2

Components

Kubectl 1.32.1
Kubernetes 1.32.3
Kubernetes Tests 1.32.3
Red Hat Enterprise Linux CoreOS 419.96.202504020643-0

Rebuilt images without code change

cluster-network-operator git c96b2584 sha256:e4308143bfec45eeeef0f302737c90d934f104038c9e6ab4a0a9d0e3f0aacfea

agent-installer-api-server

MGMT-20181: cleanup platform_oci and platform_external capabilities (#7464) #7464
Improve ostree cleanup service (#7490) #7490
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

STOR-2126: Enable readOnlyFileSystem #370
Full changelog

baremetal-installer, installer

NO-JIRA: Add jcapiitao to CoreOS approvers and reviewers #9631
OCPBUGS-53067: Updating the file names in generic.ins file for s390x ABI for pxe Artifacts #9586
NO-JIRA: OWNERS_ALIASES - Add user as coreos-approvers / coreos-reviewers #9628
CORS-3883: Remove user-assigned identity from ARM template #9625
OCPBUGS-53303: Revert: Power VS: Disallow platform.powervs.clusterOSImage in install-config #9577
OCPBUGS-42241: Update to cluster-api-provider-azure release-v1.17.5 #9596
OCPBUGS-53140: Validation for API and Ingress VIPs when using user-managed load balancer #9571
no-jira: Add Johan-Liebert1 to coreos-reviewers and coreos-approvers #9556
CORS-3923, CORS-3927: Support confidential cluster installation on SEV-SNP and TDX nodes on GCP #9395
AGENT-587: Support Nutanix in Agent-based Installer #9537
SPLAT-2000: Added vSphere provisioning mode support for data disks #9439
OCPEDGE-1496: [TNF] Collect pacemaker, pcsd, and corosync logs and journals in installer-masters-gather.sh #9546
OCPBUGS-52356: IBMCloud: Fix CAPI endpoint overrides #9540
OCPEDGE-1505: Enhance Platform none with Fencing Credentials #9521
OSASINFRA-3730: Add support for storing OpenStack CA bundles #9194
OCPBUGS-53258: IBMCloud: Bump TF provider for CIS fix #9589
NO-JIRA: update OWNER_ALIASES for azure and aws #9598
OCPBUGS-53106: Create ConfigMap to reference baremetal-installer image #9563
NO-JIRA: CVE-2025-22868 bump oauth2 pkg to v0.27.0 #9569
CORS-3918: Send service endpoint overrides to CAPG through cluster spec #9528
OCPBUGS-53465: Update RHCOS 4.19 bootimage metadata to 9.6.20250321-0 #9593
OCPEDGE-1513: Fixed topology logic for 2-node installs and added unit tests #9579
OCPBUGS-53379: Update RHCOS 4.19 bootimage metadata to 9.6.20250319-0 #9582
AGENT-467: show the agent ui url when available #9584
CORS-3861, CORS-3883, CORS-3937: Azure Machine Identity API #9538
AGENT-537: Run agent installer command to create certificates #9574
OCPBUGS-52959: Issue short lived certificates if ShortCertRotation featuregate is enabled #8784
OCPBUGS-53173: PowerVS: remove TF code #9568
no-jira: add dev docs for bumping CAPI provider version #9567
OCPBUGS-53183: Avoid adding duplicate entries to NO_PROXY #9573
SPLAT-2078: Removed VSphereStaticIPs feature gate #9560
OCPBUGS-53280: PowerVS: Re-enable disconnected installs #9551
AGENT-537: Add agent command to generate certificates #9557
OCPBUGS-39146: Validate sgdisk partition start in image based installer config #9541
AGENT-1113: additional refinement for loading the agent UI #9565
SPLAT-2072: Removed VSphereMultiVCenters feature gate #9553
OCPEDGE-1513: feat(topologies): add DualReplica topology mode #9534
OCPBUGS-45692: Modified ova template name to use failure domain name #9300
OCPBUGS-50552: Power VS: Disallow clusterOSImage install-configuration parameter #9417
NO-JIRA: OWNERS: add thuan #9555
OCPBUGS-51209: Changed kernelFileType name from kernel.img to vmlinuz for s390x #9533
OCPBUGS-6271: Adding VIPs Validation for agent based vsphere installation #9532
AGENT-1113: enhance the unconfigured-ignition command to support the interactive workflow #9529
OCPBUGS-33370: Improve baremetal gather error message #9120
OCPBUGS-36553: VSphere: add vips to machinenetwork #9526
OCPBUGS-49737: Custom-DNS: Update master and worker user data secrets #9451
CORS-2508: aws: remove unused autoscaling:DescribeAutoScalingGroups perm #9223
OCPBUGS-51378: Change vsphere conversion govmomi err to be clear #9524
CORS-3278: Bump IBM Cloud CAPI to v0.10.0 #9523
OCPBUGS-44840: Mount the user-ca-bundle into ICC #9227
OCPBUGS-50637: Remove error logging when determining image arch #9531
OCPBUGS-51171: aws: add ec2:ReplaceRoute permission #9525
OCPBUGS-47724: AWS: Copy static MCO resources needed for custom-dns #9489
OCPBUGS-49623: IBMCloud: Missing ca-mon region due to static region list #9421
OCPBUGS-47681: Support regions only available in v2 of the aws sdk #9383
OKD-235: Add stream metadata for scos to be used by OKD #9520
OCPEDGE-1635: Set default values for arbiter #9530
OCPBUGS-39583: Remove tmp directory used for agent pxe files #9527
No-ISSUE: (dep) Bump openshift/api #9522
CORS-3917: Add install config validation for service endpoints #9517
NO-ISSUE: Deduplicate shared IDS to IDMS conversion in installer manifests and imagebased installer #9515
OCPBUGS-51350: PowerVS: Extra network routes for disconnected install #9510
NO-JIRA: bootstrap: add CLUSTER_PROFILE_ANNOTATION variable to auth-api bootstrapping stage #9508
OCPBUGS-50961: Power VS: Log accurate error when deploying Internal with no vpcName #9497
SPLAT-1995: vsphere on destroy remove cns volumes #9425
OCPBUGS-47459: IBMCloud: CAPI add permitted network #9397
OCPBUGS-47652: IBMCloud: Set CAPI boot volumes #9385
CORS-3869: static validation for new vpc.subnets field #9505
OSASINFRA-3695: openstack: Create security group rules in batches #9042
OCPBUGS-46051: IBMCloud: Fix CAPI AZ handling #9415
OCPBUGS-50534: Fix error messages in available IP code #9503
OCPBUGS-51204: bootstrap/node-image-pull.sh: handle PXE boots as well #9516
OCPEDGE-1310: feat: add arbiter node support to installer #9159
CORS-3919: Add GCP service endpoints to the infrastructure manifest #9518
OCPBUGS-51084: PowerVS: Specify chrony config for Disconnected deploy #9500
no-jira: Bump cluster-api to v1.9.4 #9411
OCPBUGS-49351: Add vSphere logic to check for max network count #9419
CORS-3843: Add Tech Preview Feature gate to Installer for GCP Custom API Endpoints #9501
OCPBUGS-50919: Fixes panic during GCP tags fetch due to unstable network #9495
OCPBUGS-49940: PowerVS: datacenter supported systems #9442
OCPBUGS-49953: PowerVS: support destroy tag 1 #9403
OCPBUGS-50574: Check for vmgroup when create capv machine fd name #9453
CNTRLPLANE-194: add auth-api-bootstrap stage to bootkube.sh template #9424
CORS-3867, CORS-3868: deprecate platform.subnets and introduce platform.vpc.subnets field in install-config #9443
OCPBUGS-50899: PowerVS: COS eu-es hack #9490
OCPBUGS-50920: Rely on path declaration of base image #9491
OCPBUGS-45429: Set the right resource group in bootstrap destroy #9487
CORS-3835: Add gcp endpoints to the installer config #9363
OCPBUGS-46488: Validate Encryption Keys for GCP #9328
OCPBUGS-44507: Check public zone for stray record set #9365
OCPBUGS-50839: correct typo #9480
OCPBUGS-50657: PowerVS: destroy dhcp hack #9458
OCPBUGS-50534: Fix panic when there are no available IPs #9444
OCPBUGS-50649: vsphere - check if host is powered down or on standby before uploading template #9456
no-jira: Switch to go.uber.org/mock/gomock #9422
OCPBUGS-49319: IBMCloud: Drop CAPI metrics-bind-addr #9401
no-jira: Relax serviceEndpoint URL validation for IBMCloud platform #9416
OCPBUGS-50004: Add cluster:master_nodes metric retrieval in docs #9447
CORS-3825: pkg/infrastructure/azure: support nvme #9232
OCPBUGS-49737: Custom-DNS: GCP, AWS: Update worker pointer Ignition #9431
OCPBUGS-46656: validate configured networks to not overlap with OVNKubernetes default subnets #9428
MGMT-19545: add optional release registry field to the IBI installation config #9394
OCPBUGS-48044: [Nutanix] Install multi-NICs cluster failed with failureDomains #9376
OCPBUGS-49784: handle runtime panic when validating ovnKubernetesConfig #9432
OCPBUGS-48827: aws/edge/byovpc: subnets tag kube cluster tag to shared #9413
OCPBUGS-49594: aws/byo-ip added required permission ec2:ReleaseAddress #9420
OCPBUGS-46549: Update RHCOS 4.19 bootimage metadata to 9.6.20250121-0 #9392
OCPBUGS-48089: validate hostPrefix to be the same when multiple clusternetwork CIDRs are present #9398
SPLAT-1809: Added vSphere multi disk support #9035
OSASINFRA-2571: Add quota validation for server group #9326
OCPBUGS-48228: Envtest: Configure IPv6 service network for API Service #9361
CORS-3724: bump go v1.23 and k8s dependencies #9396
CORS-3637: OWNERS files for platform provider subdirectories #9407
OCPBUGS-47489: pkg/gcp/destroy: add waits to prevent leaks during heavy load #9384
MGMT-19771: Convert IDS to proper IDMS manifest #9391
OCPBUGS-47477: aws: skip dead zones on us-east-1 when discovering AZs #9333
OCPBUGS-48570: [Nutanix] Installation failed with timeout when uploading images to PC #9377
OCPBUGS-45551: Updating ose-installer-altinfra-container image to be consistent with ART for 4.19 #9275
no-jira: docs(user): fix grammer in upi install step #9292
OCPBUGS-48719: Add new tested azure arm instance type to doc #9387
OCPBUGS-46596: aws/permissions - defaults ec2:DescribeInstanceTypeOfferings #9341
COS-3013: overlay node image before bootstrapping if necessary #8742
OCPBUGS-48256: Run iscsiadm for agent-based iSCSI installations #9356
SPLAT-1742: vSphere - enable host group based zonal #8873
CORS-3722: bump default channel to stable-4.19 #9375
CORS-3721: bump default release image to 4.19 #9374
OCPBUGS-48437: PowerVS: limit by resourceGroupID #9359
OCPBUGS-46010: wait for at least 3 kube-apiserver instances #9302
no-jira: Remove myself from reviewers list #9358
no-jira: images: UPI: use ART repo dir #9360
OCPBUGS-47156: Bump golang.org/x/net to 0.33.0 #9343
NO-ISSUE: Fix owning component name in machine config templates #9353
NO-JIRA: remove the types which failed by RHEL-59521 and add the new gpu vm type #9337
OCPBUGS-29067: Update MCS Cert and Key files within bootstrap Ignition with UserProvisionedDNS #9238
NO-ISSUE: Deprecate node-joiner scripts #9304
MCO-1457: Clean up MCS CA & TLS cert objects for management #9309
OCPBUGS-45995: Always set AllowCrossTenantReplication parameter to false #9322
OCPBUGS-46571: Disable IP Forwarding for CAPG Machines #9332
OCPBUGS-46260: CVE-2024-45337 bump crypto pkg to v0.31.0 #9314
OCPBUGS-46605: Find instances by label GCP #9336
OCPBUGS-47504: Power VS: Private DNS service endpoint URL must end with /v1 #9335
METAL-1137: Enable TLS for ironic API in the bootstrap VM #9189
OCPBUGS-46144: azure: use separate /var to avoid growfs timeouts #9310
OCPBUGS-45218: aws: fix perm requirement for edge nodes #9256
OCPBUGS-46470: Power VS: ResourceManager also to override for Internal deploy #9317
OCPBUGS-46035: fix skew support for node-joiner #9307
OCPBUGS-44560: Add note about additional networks using IPv6 #9323
OCPBUGS-45280: Allow more time for Service Account Creation #9299
OCPBUGS-46363: Remove narrow timeout from etcd bootstrap member removal gate. #9295
OCPBUGS-44834: aws: include permissions for edge compute #9230
OCPBUGS-45984: IBMCloud Fix VPC-COS IAM Auth #9301
OCPBUGS-45317: node-joiner PXE artifacts should be prefixed “node” #9280
OCPBUGS-45727: Updating ose-installer-artifacts-container image to be consistent with ART for 4.19 #9284
OCPBUGS-44641: GCP placing *.apps record in wrong managed zone #9216
OCPBUGS-45855: If vCenter cluster has no esxi hosts fail with sane msg #9291
OCPBUGS-45807: aws: fix sts:AssumeRole perm requirement #9287
OCPBUGS-43779: Destroy all private cluster backend service resources #9270
OCPBUGS-45162: Delete tagged disks #9274
OCPBUGS-45482: Wait for etcd bootstrap member removal #9261
OCPBUGS-45685: Power VS: Create region-zone-sysType hierarchy #9245
OCPBUGS-45289: capi/aws: use LB name when finding Hosted Zone ID #9263
OCPBUGS-45678: Updating ose-baremetal-installer-container image to be consistent with ART for 4.19 #9282
OCPBUGS-45656: Updating ose-installer-container image to be consistent with ART for 4.19 #9279
OCPBUGS-44925: aws: add ec2:AllocateAddress perm requirement. #9234
OCPBUGS-44523: Remove unused variable from ASH arm template 06_workers.json #9204
OCPBUGS-45491: Align vSphere UPI haproxy config with IPI #9273
OCPBUGS-44938: Handle multiple mirror entries for source #9266
OCPBUGS-45286: PowerVS: Listen to machineNetwork #9254
ARO-12457: Include bootstrap docker config file in go module #9248
OCPBUGS-45175: Ironic external url port should change based on protocol #9249
NO-ISSUE: imagebasedinstaller: support json files in extramanifests directory #9136
OCPBUGS-44924: aws: add missing ec2:GetConsoleOutput perm requirement #9233
Full changelog

cluster-config-api

NO-ISSUE: tools: bump openshift controller-tools to latest commit #2260
Full changelog

cluster-node-tuning-operator

Remove pinning of all dependencies (#1309) #1309
e2e: arm: Add kernel page size e2e testing suite (#1307) #1307
e2e: skip RHEL-79032 jira issue in irqbalance (#1312) #1312
Full changelog

cluster-samples-operator

OCPBUGS-54471: Periodic sync of supported OCP samples #622
OCPBUGS-54479: Periodic sync of OKD samples #621
Full changelog

cluster-storage-operator

STOR-1878: Run operators without root user control #570
Full changelog

console

OCPBUGS-47723: always show ‘Plugin available’ button on CSV list no matter plugin enabled or not #14655
NO-JIRA: adding new reference plugin: kuadrant #14361
Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

OCPBUGS-54339: UPSTREAM: 129808: e2e: bump port-forward timeout #2257
Full changelog

installer-altinfra, installer-artifacts

NO-JIRA: Add jcapiitao to CoreOS approvers and reviewers #9631
OCPBUGS-53067: Updating the file names in generic.ins file for s390x ABI for pxe Artifacts #9586
Full changelog

machine-config-operator

OCPBUGS-49894: Ensure proxy config exists when reverting from OCL to non-OCL #4833
OCPNODE-3020: Remove cgroupv1 references #4964
Full changelog

monitoring-plugin

OU-724: remove dependency on deleted image #375
OU-660: Remove console CSS and Align with Patternfly components #362
Full changelog

tests

MCO-1631: Remove “[sig-arch][Early] CRDs for openshift.io should have a status in the CRD schema” #29643
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github