4.20.0-0.ci-2026-09-09-000333

Download the installer for your operating system or run

oc adm release extract --tools quay-proxy.ci.openshift.org/openshift/ci:rc_payload__4.20.0-0.ci-2026-09-09-000333

Qualifiers (status api): None

Tests:

Blocking jobs
- aws-ovn-upgrade-4.20-minor Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.20-upgrade-from-stable-4.19-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- azure-ovn-upgrade-4.20-minor Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.20-upgrade-from-stable-4.19-e2e-azure-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- gcp-ovn-upgrade-4.20-micro Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.20-e2e-gcp-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- hypershift-e2e-aks Succeeded periodic-ci-openshift-hypershift-release-4.20-periodics-e2e-aks
- hypershift-e2e-aws Succeeded periodic-ci-openshift-hypershift-release-4.20-periodics-e2e-aws-ovn

Upgrades from:

4.20.0-0.ci-2026-09-02-204158 - S S F S
4.19.0-0.ci-2026-09-03-072913 (changes) - F S F S

Upgrades to:

4.20.0-0.ci-2026-09-09-062639 (changes) - F F F F S

Loading changelog, this may take a while ...

Changes from 4.20.0-0.ci-2026-09-02-204158

Created: 2026-09-09 00:03:39 +0000 UTC

Image Digest: sha256:cf4854fdad9a5b0944b2eedb355dbe0f7551997b0c17e301d8f919a9ef481814

Components

Kubectl 1.33.3
Kubernetes 1.33.13
Kubernetes Tests 1.33.4
Red Hat Enterprise Linux CoreOS upgraded from 9.6.20260901-0 to 9.6.20260903-0

The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

Rebuilt images without code change

rhel-coreos git 847b7d8c sha256:4ed36163589af0e26c893e20cb6282e24ea48d4686af72448a9fff821a7f1bb3
rhel-coreos-extensions git 847b7d8c sha256:a831340ad1c9f69843e09b8e0f6c0823fc378654f8ca241cbe3ef39516c22a05

agent-installer-api-server

OCPBUGS-89951: patching golang.org/x/crypto with sustaining/crypto@v0.33.0-sec.2 #10798
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-103794: Bump x/net to v0.35.0-sec.4 #2291
Full changelog

agent-installer-ui

OCPBUGS-104550: Bump tmp to ^0.2.6 to address CVE-2026-44705 (#4016) #4016
Full changelog

azure-disk-csi-driver

UPSTREAM: 3635: OCPBUGS-96365: Bump golang.org/x/net to v0.50.0-sec.4 #167
Full changelog

azure-file-csi-driver

OCPBUGS-103813: Bump golang.org/x/net to v0.50.0-sec.4 #156
Full changelog

azure-kms-encryption-provider

OCPBUGS-103785: [release-4.20] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #59
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-112324: [release-4.20]: Enrich IBI config image proxy NoProxy with cluster networks #10779
Full changelog

cluster-autoscaler-operator

OCPBUGS-103824: Bump x/net package in release-4.20 #384
Full changelog

cluster-monitoring-operator

OCPBUGS-103845: [release-4.20] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #3072
Full changelog

cluster-node-tuning-operator

OCPBUGS-115719: Update PPC help description #1627
Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

OCPBUGS-105592: backport kubernetes/conformance umbrella suite #2741
OCPBUGS-117657: Fix performance related issues when selinux metrics are emitted #2768
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-103886: Replace golang.org/x/net with openshift-sustaining/net #174
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-95400, OCPBUGS-95403: bumping containerd to v1.7.33 #1352
Full changelog

tests

OCPBUGS-117011: Raise status polling timeout and write bound #31596
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-96458: Bump golang.org/x/net to v0.50.0-sec.4 #197
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Unable to show node image info: failed to fetch RPM list for stream rhel-coreos: failed to query RPM list for quay-proxy.ci.openshift.org/openshift/ci@sha256:cf4854fdad9a5b0944b2eedb355dbe0f7551997b0c17e301d8f919a9ef481814 (rpmdb-image rhel-coreos): could not run oc command: error: unable to parse image quay-proxy.ci.openshift.org/openshift/ci@sha256:cf4854fdad9a5b0944b2eedb355dbe0f7551997b0c17e301d8f919a9ef481814: cannot retrieve image configuration for manifest sha256:cf4854fdad9a5b0944b2eedb355dbe0f7551997b0c17e301d8f919a9ef481814: received unexpected HTTP status: 502 Bad Gateway

View changelog in Markdown or change previous release:

Source code for this page located on github