4.22.0-rc.0

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.22.0-rc.0-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial-1of2 Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-aws-ovn-serial-1of2
- aws-ovn-serial-2of2 Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-aws-ovn-serial-2of2
- aws-ovn-techpreview Succeeded periodic-ci-openshift-release-main-ci-4.22-e2e-aws-ovn-techpreview
- aws-ovn-techpreview-serial-1of3 Succeeded periodic-ci-openshift-release-main-ci-4.22-e2e-aws-ovn-techpreview-serial-1of3
- aws-ovn-techpreview-serial-2of3 Succeeded periodic-ci-openshift-release-main-ci-4.22-e2e-aws-ovn-techpreview-serial-2of3
- aws-ovn-techpreview-serial-3of3 Succeeded periodic-ci-openshift-release-main-ci-4.22-e2e-aws-ovn-techpreview-serial-3of3
- driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-aws-driver-toolkit
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.22-fips-payload-scan
- metal-ipi-ovn-ipv4 Failed (1 retry) periodic-ci-openshift-release-main-nightly-4.22-e2e-metal-ipi-ovn-ipv4
  - Attempt 1 Failed
  - Attempt 2 Failed
- metal-ipi-ovn-ipv6 Succeeded (1 retry) periodic-ci-openshift-release-main-nightly-4.22-e2e-metal-ipi-ovn-ipv6
  - Attempt 1 Failed
  - Attempt 2 Succeeded

Upgrades from:

Loading changelog, this may take a while ...

Changes from 4.22.0-ec.5

Created: 2026-04-20 12:00:19 +0000 UTC

Image Digest: sha256:dee09d5d42e9be248e3b94a46814219b8c167e47b944bcbe818a3756fdc551dc

Components

Kubectl 1.35.2
Kubernetes 1.35.3
Kubernetes Tests 1.35.1
Red Hat Enterprise Linux CoreOS upgraded from 10.2.20260405-0 to 10.2.20260408-0

The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	OKD Hypershift	OKD SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
DualReplica (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
GatewayAPIWithoutOLM (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
OpenShiftPodSecurityAdmission (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled

Rebuilt images without code change

agent-installer-node-agent git 008935c3 sha256:ce880de9887ea39ca1382ef5e745164d01f8206e09214a30898e84b772b47470
apiserver-network-proxy git 5e33c228 sha256:05dae48ac58ed0a66009f44eceed8b196a737ca051bedf2e80ff1723d1b73663
aws-cloud-controller-manager git e73d6a38 sha256:0ac1ed9df60037e836e9488283e71223e0d21dfddd27ce59a826a7b0caacdfcc
aws-cluster-api-controllers git 2d7aa679 sha256:7e6c9750679d3f8941f2929477feddeabfebdf92aec862c1555e7af4fe60298e
aws-ebs-csi-driver git 0927af1c sha256:c34b3a04c654fa1b10226e2dc89589712674ef055c00825d0d79a2b0a72898e9
aws-ebs-csi-driver-operator git 8253452c sha256:b4786d3427aeee25ab0b11c3508043574e41da7789308d733131879b93cf63ff
aws-karpenter-provider-aws git f0be9c72 sha256:d86b677d46fcc4189089b239a5652aefb4844494c84ee19d4e02a50a849cdfbf
aws-kms-encryption-provider git 19e7b623 sha256:bf8c05ed1902d0ff94570cda0a99064cef9ace3f3af322b323f5e1533adc55de
aws-machine-controllers git 37a06723 sha256:96f3ae2faca6624b0abb21207e44f1bdc71a2d6a6d5de2ee37a6be8ef4234310
aws-node-termination-handler git 341ed3a0 sha256:684717e03d222988c63836624483dab10be3c1637ba9515391f782d026c6e67c
aws-pod-identity-webhook git 82088287 sha256:9482ce861f3b13fbabf97f6790fdd2bb22f7e905da66b64a2cca0bf1940afa9a
azure-cloud-controller-manager git 4c7a7646 sha256:ba28073ed3f582c893c06cd962a8c515ef7d1976166f5883c975cadfffc8fa8a
azure-cloud-node-manager git 4c7a7646 sha256:3fb7c7319038c6d5e003d138270e78613223be4f4e252a6327d599e4182d01d3
azure-cluster-api-controllers git de16e884 sha256:d1bf72cc6d5e60a8a35df4da4595a327a0d377c8b938ec5a28952f90b1ffbb04
azure-disk-csi-driver-operator git 8253452c sha256:533e3d811d203811fd54f86038ff639d2a2f8dc4f0278513cdc1bc946a2b5a02
azure-file-csi-driver git c481e92b sha256:eb3908bbc1eaa4f598590b3ca29e5dcbd5f9797ab2c92bb54d001c30fc6daa7c
azure-file-csi-driver-operator git 8253452c sha256:e056840db14085c679083372dbb0cc81e52320c7a32d5e74c146a9a09ed09a1f
azure-kms-encryption-provider git 99b9a3a3 sha256:1238742a80e5a7ca0b73aecc9eaaf1de137ef0c9313b914ccae8a6f54a62967a
azure-machine-controllers git 69d04909 sha256:1bae917244dfdaf1a62acf884eabf34385416bfed3024c0d4c65d3ac2ab6401d
azure-service-operator git 17e57462 sha256:66ae41d1e9407dc6f55e6d517838f9fa5183418be2344dc1e1d034cd71a3b393
azure-workload-identity-webhook git 81a256e6 sha256:2ec3a9cbe56c2b2f1b087bf7666d895ac0258064110cbcb23b429fa0dcee1312
baremetal-cluster-api-controllers git ad4eb8a5 sha256:bf16fc65f66f355fcac9d5750146e41492e8442a832acab90d3066e6084b6ccb
baremetal-machine-controllers git 8d863b95 sha256:50c9c7dcbd7d627075412970c18735caf988778dcb4bae6a9370776787f5742f
baremetal-operator git c5e50489 sha256:e8cdbbed1bdce8026945c7c5cf5340f130a714ae8dbdc4c49cbab800edac820c
baremetal-runtimecfg git dca8cb1b sha256:b555422ca1ee57b745f648f5d63fe429fdd590abab9135530393fd7f26887772
cloud-network-config-controller git 2d69ad95 sha256:db469af8830942c3bf5fb1e966419b3dc8462a3448793227c1c0afcb415fefa0
cluster-autoscaler git 05bcec5a sha256:f0bc8b6c9ec5951fac832a5f6dc0973f638473d7cc8fd2f2a6c7008841e685bf
cluster-bootstrap git e6be0fdf sha256:11a2ace46e83bd4cde56d6d14cc4257b35a07c61fada01ffb1205a3a1a7549d5
cluster-capi-controllers git c11cf5d4 sha256:fd97b5fb3ad9a1ebdf3792250b4dbb9e0f9502f89eb737724cc48c4c7f33c2a2
cluster-control-plane-machine-set-operator git b2e26b93 sha256:d9156043bd716eac905a57af02a5e4f4e359e7d8d24871c199c4054f481a537a
cluster-dns-operator git 3d214118 sha256:ac0ef36a927e345d50ac0f65effb1b6ecb2b868c3b966ae92b9cb85609babbd9
cluster-machine-approver git a9edd695 sha256:2d2005fd9c080c2902d5c95501d155ceac5129b25887fd1dbfb4fd231e5ce166
cluster-policy-controller git 44985a13 sha256:daf6d970f8ed0e9f40f9a4a045f67b5286996f4dd4f28b22a027758744fe21a8
cluster-samples-operator git eeac6ba8 sha256:cbe626d4cd5883e32a0a3ba15ee45542d7f3045d82886538e4e829997035ecc9
cluster-storage-operator git 8dfdf2ef sha256:f2e6c521e2ba725ad8b34749b68010c2ab82f30108a601ac0648f42608fb4344
cluster-update-keys git 3b5c59cc sha256:0b040bf99b01a1d7c8a9f7561d2b627ba3eb9b7f20693f2071e80b84ae5d5e28
configmap-reloader git 94e41c4c sha256:3552325226ce62921da6d3bac83fe689dde4b9b96253eca4ab22497369b68170
container-networking-plugins git 747ad66c sha256:3cc959735303e09911d931a8ffd4b475987cca954b882596c271699adc2ad6a6
containernetworking-plugins-microshift git 747ad66c sha256:1550eb3b786dbbf351ac68ba8deea15880c8e3dad2b507866fa09b7d87bbded7
coredns git 0dded2d2 sha256:ba63800d7599664c73936321042e2787aafecddbe607843ae8c91f7f5faf7497
csi-driver-manila git fd31b5da sha256:975ead22a706a311a36f7c4fa8a7158dc5ca248945d8e2624137457e20b2c4f5
csi-driver-manila-operator git 8253452c sha256:f2fd63537f7fccef8f59b67e67ab7847b7e7d50ffd38b2809af9f49cd2fa5d25
csi-driver-nfs git e9f24940 sha256:f2fe574d2ef21c19632848c89cba5a5ccf13d07cff34fb79e8cf7c1744e929cb
csi-external-attacher git 98b1f4ac sha256:eb680e8194feb95ca037afafd98f34f73b01ac789fe68adb2a351878159c3716
csi-external-provisioner git f90c06a3 sha256:3c3f124ebdfe33f24d367a92c1324ac7854a133c07db8b6bf3ac31e2fb112149
csi-external-resizer git 4e74a4aa sha256:0c418ddd1bbd4272c12c7a25538834cb350de2a1863f90082e902ae9f0c3a7ce
csi-external-snapshot-metadata git 76523185 sha256:3b770280e63f60a1d3114c6c05bad4f0dffc22cbbe025e9ff9c9fa48e6dc54f7
csi-external-snapshotter git d1bc3ffa sha256:54a39e78a2ff17b974adf0ceb3cd29afb31a28d60556fb486410cef42b2d061c
csi-livenessprobe git 4d5e959a sha256:69035a0d0e216794443170cdb7ec31f96d1aa5de9ea4533dff57c229ee5d5052
csi-node-driver-registrar git cf174b30 sha256:ffdb03f74c9d687fb793566a6b76b2dd8f39c547aeb807b88a5d1cba52f533ac
csi-snapshot-controller git d1bc3ffa sha256:f55030cd4d9367e0c0e41d6dc25c30dc8f637d054e91ddb31be4b465402af075
docker-registry git c3fa7db0 sha256:3d4a4008021db07716a52b450080ab771ef8f333f091ce6cbf3bbe222a86b74f
driver-toolkit git 7aa4007a sha256:b89b86b2be547040f5c1cc0444e0ee8f830ee6bd3895313f4d8df18d39b8ee19
egress-router-cni git 5e0f8d1b sha256:cb16569394fa384ed1e6b3b62d1f3f7908ca5a4b1f93deac575ff3c2bce200bf
etcd git d8d67b8c sha256:1dd1be92e96e2aeba0f3102441199d69d355983084b4f6f093736cfcfb3b78f6
gcp-cluster-api-controllers git 37085d52 sha256:e8e884f6fdc795d8d0a91132e848539de6ae83650676d28a982a74750a9a4529
gcp-machine-controllers git 0073bd11 sha256:0a5df014adc836560cb6cfe89c1104f343d31c16c9de5be680144dba9722729f
gcp-pd-csi-driver git 2ba11740 sha256:d1bf0ea3e87f8d1b311a7287c8db9387e5311f9797289dcb1a67bec1b2900588
gcp-pd-csi-driver-operator git 6b00096f sha256:c0d03205d57ca7e0051e2133e114688e539c8ee28a3270dccd6be245b7afb884
gcp-workload-identity-federation-webhook git d7675f31 sha256:1ea10039f86994514a903d2fea59a1be0da8406b1c08e9a57b69a1b387055bf2
haproxy-router git 89639077 sha256:1512b7dc1aadec4125ff383c8376bcd6939862e3519db2ae1b0879ebf661369e
hyperkube git 9193b12a sha256:cbe069b77924bb5f3f1cafce0fa23e9c129b20929c223ff16058c3cbf1bc3399
ibm-cloud-controller-manager git d9222a1c sha256:3ad9f1ede05cff88c69cc55d062968418c19d3bb5c12e30a2ad9e566aa89cfcf
ibm-vpc-block-csi-driver git aa40cd7e sha256:d6ecc7da7432225153620ba20a372a1f32880a2371a2d9816a2264ff16bbae0a
ibm-vpc-block-csi-driver-operator git f859eac9 sha256:7fee4790f867c361e52decf94efc70aa08220d9d744f09f246e67b6671ce51c3
ibmcloud-cluster-api-controllers git 03b143d5 sha256:2aae1f44c332c00e809b029b463bb61d838aa3578789353d51282f92d488e352
ibmcloud-machine-controllers git 46b8c72c sha256:cfd9c91b9b5e3cf55068a6e70d08d394f42e3e2a5fffbc547bb0972d9bb03a9a
insights-operator git d7b9c77e sha256:4ea5588e04ceb0ff7db158ad2d0a886aeb3770b3814a86c44f7ce60cc22ed7dd
insights-runtime-exporter git 70256457 sha256:6592f41fdaa2b0ef2f3f10e23e4f2f41f029be31279ba63b749d956d68d023d2
insights-runtime-extractor git 70256457 sha256:78863b6ff0d3f8e522075c80e7fba2df4a305eaaa3da8a3304d00bd4c35996a4
ironic-agent git 0336e638 sha256:15c689815e53e6217a2baadbe36f53d6efc1bc181c257bb609fa64aa42c4e95f
ironic-machine-os-downloader git 9953d2b7 sha256:47a4e1cc6711e6ce2d3e4e9b31e73e2f337c31e926f994ff2c2a9b275f34f24e
ironic-static-ip-manager git a379d09f sha256:a549fdf626957bdb63a2109540eb0a07f491375d98fa8759e715089e9648880d
keepalived-ipfailover git edb8b1e6 sha256:ed3e903f311ede134ef27c9a7be27b1da32f5ddd3f7f0b83bd4c82364fc9e5f7
kube-metrics-server git 38c16c46 sha256:750c280b98fe46362d9c10767cf97e80e15b1950efb0b7cb3b81781e5e3c1236
kube-proxy git 9193b12a sha256:67c5f62ad9fcd5b170d32b96109f18a8d52d4d5f00d7bbf6f04e8e35c4b0b24e
kube-rbac-proxy git d12e2746 sha256:dee202ae1d67cdcf9771d0dbdf552d2306d8964fca12316966966a5e3da5f76d
kube-state-metrics git 6fa06eac sha256:d1b69e5ef8eb309f9be7f3705fcee62087b78cdcc0275b3ddf1e6321975e421b
kube-storage-version-migrator git 72835e43 sha256:b1327178e3bdb3380c99bb0cdfa843c6f618e9d3d2534261ef439bd8fc100122
kubevirt-cloud-controller-manager git 76dd5a6f sha256:aff5e5a6146d58542c0db46fe9dec25eafd71dc3e96168618d0bf4e2ea3d3bc8
kubevirt-csi-driver git 771b562d sha256:ccc56463edc3bca0be4c1768d9f2c6fa394d955b8296b96dc0e2e1a1ddb59ffd
machine-image-customization-controller git a43d9c97 sha256:2b6a27c3a0128a43d5d451a70165fbf9a99357d41206c9b3b9e6175eb4780cdb
machine-os-images git df9a652c sha256:eed8b635e04fa28745bd517ac0301f71d644a4cec7f64c226203a10fdb970240
metallb-frr git 5ccdd521 sha256:a849d994c179da2b1505738c91dad2864112f8857141cc7e884ffbc453578290
multus-admission-controller git 16ba7ef8 sha256:8dc6bc19567efd4be58efb3499a4a003bb17b820b7c571c8b150057964ddfbad
multus-cni git b4ec7d82 sha256:047bc67c8325087d83a4cceac5a816d4cae0f451326d3d93f6ed95d5b4f1e66e
multus-cni-microshift git b4ec7d82 sha256:620e86eea28e099908f35345f5e8293abc223c4eb3a84d108eeb9e41e8f5b897
multus-networkpolicy git 834a093f sha256:55f4c50e849f6896f813cacb951bb7bb0a8c866e2d7a5076ef93f9bdc8d34be3
multus-route-override-cni git 08af4127 sha256:ca1c538f9a91ceb512229fd6f3b292551046ec05910edee4fac8637ff4938b3c
multus-whereabouts-ipam-cni git d691040e sha256:808495766f26fc3f2c2b6b836c4139da7e9559f9ee01017d3de2a90ae4b97089
network-interface-bond-cni git 297eeb43 sha256:fa12ccf2f6ca4022358f3ea68ae1ba47adfeea2b514f5c5c3a39f0cbb2264f5b
network-metrics-daemon git 5b233ea1 sha256:c49102b83ab6e24123d2af4bb19a4fc2f573400a120cf382eee593860d0f8309
nutanix-cloud-controller-manager git 8e75679a sha256:d2f2982af21936367df8a31d6fa11311c56515cf493f45bd4766afe9919042d1
nutanix-machine-controllers git 60559fdd sha256:5d5bf97c252924f0298b1edd126bdb2031d3da46c2df0206c715d1033d811a4d
oauth-apiserver git 29215ddd sha256:19a05693872fb3f4552026b0dd388ddff47befc5a531679c2fa275b0b01eea7d
oauth-proxy git 714292f5 sha256:4aec03aa44e1a9ecb950a31834f9caba092e1534003b13f80357f28f8cd61788
oauth-server git 69bdf8bc sha256:37846f72548d2a0ce1ee096ba806d896e901292baa192596977f6f8fd970605f
openshift-apiserver git 56aa2d96 sha256:b32277093ea172c17b2877de32b655b00b528d838559e4a3332288143f561033
openshift-controller-manager git 26d20fea sha256:a3d6de5ad21ba52550aeacd5693d922300d9cc18cae78cba791f9ac46a4504c3
openshift-state-metrics git e71e0996 sha256:575815dc66ed19280e4117c8352e9931f47e625e5a76aea1173c18584de74b5e
openstack-cinder-csi-driver git fd31b5da sha256:db579f22c28455110bb99f9c47008e18d5f2fde1286be49a682aff73d6c464e2
openstack-cinder-csi-driver-operator git 8253452c sha256:6eb7f8e61fef495e78339bb494c81cc922d7647a81b0feda49b432cd2666db8b
openstack-cloud-controller-manager git fd31b5da sha256:468090270c2feb5eec578eb9655c48f6c8ae0702c4b8d276406a5adb2ce357ab
openstack-cluster-api-controllers git 74cb5b08 sha256:26e301c176d3ffa86a1ad4ce1811d6e936537b9317045b0de60d66251dda2294
openstack-machine-api-provider git 8a8c354b sha256:5f4f0edfb0ad98845710c2873d034bcecb587075def9288bc289a00ad602dd81
openstack-resource-controller git cbea7a9c sha256:f578d71868054064ac0838141e694baae428fce32f73f07fe607e6de5da562b9
operator-marketplace git 38da2ef7 sha256:ee1ad2738f8557633045801ea4fee1578ce733678b0675a7fc0337919ae80472
pod git 9193b12a sha256:c244a9c834031b2eabb0986540fc97dc7ec5ec1a19d0e655b99c9cafca146ad8
powervs-block-csi-driver git c208095b sha256:3391df4d13ea21a3d0306d5cd24f76bf401221e6042c9c0ed8688eb1c42f42ff
powervs-block-csi-driver-operator git a56f9e95 sha256:f4afccfd8b0ac7a46fddc0e6f3397b1f427b9a37b7afb23c0d7ddf5e4a00d0e5
powervs-machine-controllers git e88cf81d sha256:4b9c507a50bbab35c014fe324e83d0b941b610b783ed7feeb940d6937bf7c74e
prom-label-proxy git c4c99a30 sha256:b4fc4f619e8d17357c16a6a95416a69f6a5c70336b552f4febba18491359e933
prometheus git e1e35591 sha256:6bd8cd05af32187804c3f69c473d5f5d9b5cb1693cde9a702d17ed85a8d65c04
prometheus-alertmanager git 02dc3e9e sha256:a1dac23b71aac07a030550d1f61dd112889c476f0c4a777abee8f32c71774ce4
prometheus-config-reloader git 70e38466 sha256:585fac14decfe1f504684a67587bdca14cf322ac950c2b1831c970f656760dc6
prometheus-node-exporter git 6c4fc012 sha256:cc84f1cd2c13ffb488ff8f8b7d00eaf846f9f69d0211119c9bca8765f94eb249
prometheus-operator git 70e38466 sha256:b1e741653703b43055a4a6727753b7fcec25e188ed9d540d3fdd024811b99ebf
prometheus-operator-admission-webhook git 70e38466 sha256:317634b8a23163e46fe13514b5ba7d9fb062b2630a19b1d833a4589e2b989a0d
route-controller-manager git 624742d9 sha256:2cb46491b659a292dfcef154999846c5929a1c9fe9440ebb7b39ed9f532a3b47
telemeter git d6c7dd49 sha256:af56bff44faf87b05fa27f65fb072205c36c17ebe739dbf0a070a2e1d372e63c
thanos git 5d9d0f38 sha256:fa40b15f905b9d2f8e141e02ffa20867ebacbb03ee68a694c32bd554e409cea8
volume-data-source-validator git 8e176cec sha256:e77f0ce228f3752029a0bbcfd7977c841689710d8515c6f9ced0d040daa90eb7
vsphere-cluster-api-controllers git f12e5051 sha256:394861ea3a1d05f27ed8970ebfea0f94925390c20f6ce0fdc4533f5333e976c8
vsphere-csi-driver-operator git d3668c9a sha256:fb53850d37d912dd74eb59f812d7c0f41dedcd8fb8500693da78980f6c62eb07
vsphere-problem-detector git 842aed3d sha256:cf3cfc92fc4db755c9df88f16f7ec527aae06f7fa67463e9cfebc3f2e115dbe8

agent-installer-api-server

MGMT-23548: Ensure tests w/ gomock controllers call Finish() #10024
MGMT-22849: Remove the nmconnection that the openshift-installer writes for the bootstrap. #10086
NO-ISSUE: Detect missing PostgreSQL client in development #10119
NO-ISSUE: Add assisted-service-writing-unit-tests agent skill #10123
MGMT-23451: Lower SNO vCPU min to 4 instead of 8 for assisted for OCP 4.22 and above #10040
MGMT-23141: Cluster creation returns SQL error rather than API error #10113
NO-ISSUE: [master] Bump OCP versions: 4.20, 4.18, 4.21, 4.14, 4.17, 4.19, 4.16 #10120
MGMT-23340: upgrade assisted-service postgresql from 13 to 15 #10096
NO-ISSUE: Replace github.com/golang/mock with go.uber.org/mock #10082
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

NO-ISSUE: Refresh RPM lockfiles #2069
MGMT-23545: Mount pull secret token as a file #2053
Full changelog

agent-installer-ui

chore(deps): update dependency rimraf to v6 (#3564) #3564
chore(deps): update konflux references (#3562) #3562
chore(deps): update konflux references (#3561) #3561
chore(deps): update module golang.org/x/sys to v0.43.0 (#3492) #3492
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.8-1775724628 (#3560) #3560
chore(deps): update dependency qs to v6.15.1 (#3559) #3559
chore(deps): update dependency @redhat-cloud-services/eslint-config-redhat-cloud-services to v3 (#3539) #3539
chore(deps): update dependency msw to v2 (#3557) #3557
chore(deps): update dependency concurrently to v9 (#3554) #3554
chore(deps): update dependency @openapitools/openapi-generator-cli to v2.31.1 (#3534) #3534
chore(deps): update dependency typescript to v5.9.3 (#3489) #3489
chore(deps): update dependency @types/node to v24 (#3543) #3543
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.8-1775651161 (#3548) #3548
chore(deps): update dependency i18next-parser to v9 (#3556) #3556
Bump basic-ftp from 5.2.0 to 5.2.1 (#3552) #3552
chore(deps): update dependency axios to v1.15.0 (#3551) #3551
chore(deps): update dependency @redhat-cloud-services/frontend-components to v7.3.0 (#3550) #3550
MGMT-23313: long text breaks table layout (#3545) #3545
Bump vite from 5.4.21 to 6.4.2 (#3547) #3547
chore(deps): update dependency eslint-plugin-import to v2.32.0 (#3475) #3475
fix(deps): update dependency monaco-editor to v0.55.1 (#3505) #3505
fix(deps): update dependency cypress to v13.17.0 (#3500) #3500
fix(deps): update dependency react-monaco-editor to v0.59.0 (#3537) #3537
chore(deps): update dependency dpdm to v3.15.1 (#3473) #3473
chore(deps): update dependency @redhat-cloud-services/frontend-components-config to v6.8.3 (#3471) #3471
chore(deps): update dependency axios to v1.14.0 (#3536) #3536
chore(deps): update dependency @types/eslint to v9 (#3541) #3541
Full changelog

agent-installer-utils

OCPBUGS-83734: Red Hat Konflux kflux-prd-rh02 update ove-ui-iso-4-22 #291
OCPBUGS-82537: update konflux references #274
Full changelog

azure-disk-csi-driver

UPSTREAM: 3569: OCPBUGS-83425: Bump grpc to v1.79.3 #136
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-83611: PowerVS: update release 4.22 CAPI to v0.12.2 #10509
MULTIARCH-5854: implements retry-after logic to limit failures #10421
OCPBUGS-78151: Add provisioningNetworkGateway field to install-config #10387
OCPBUGS-77965: Update RHCOS-release-4.22 bootimage metadata to 10.2.20260405-0 / 9.8.20260403-0 #10482
OCPBUGS-77917: PowerVS: Use short regions and provide a default resource group in survey #10369
CORS-3900: Add IPv6 frontend IP configurations for dual-stack #10328
MCO-2135: Label Machines, MachineSets, and ControlPaneMachineSets with OSStream labels #10426
OCPBUGS-81509: fix ASO CRD duplication #10451
OCPBUGS-76468: PowerVS:: SSH key must be RSA #10289
no-jira: PowerVS: add mjturek and hamzy to approvers list #10483
OCPEDGE-2072: bump(ocp/api): pull in latest for DualReplica promotion #10471
OCPBUGS-77830: skip redirect when validating endpoint accessibility #10360
OCPBUGS-81622: Collect bootstrap service records in agent-gather #10457
AGENT-1448: Add IRI registry authentication support #10389
Full changelog

cli, cli-artifacts, deployer, tools

NO-JIRA: claude: Split tester agent away from code-reviewer #2250
OCPBUGS-77845: Fix extraction of gated manifests using –install-config #2249
Full changelog

cloud-credential-operator

CCO-738, CCO-739, CCO-740: Overhaul status logic to correctly match spec #1008
CCO-787: use apiserver tls config #965
CCO-824: feat(gcp): add key-storage-method flag for workload identity providers #1004
CCO-779: e2e for removing kube-rbac-proxy container (CCO-779) #991
Full changelog

cluster-authentication-operator

CNTRLPLANE-2625: Add Auth network policy e2e cases #831
Full changelog

cluster-autoscaler-operator

OCPBUGS-65578: report Progressing=True on version upgrade #366
Full changelog

cluster-baremetal-operator

OCPBUGS-78151: Add provisioningNetworkGateway field to CBO #575
Full changelog

cluster-capi-operator

NO-JIRA: Optimize envtest CRD loading by specifying necessary files explicitly #520
OCPCLOUD-3319: Remove capiinstaller controller #507
OCPCLOUD-3419: Add adopt-existing annotation #514
Full changelog

cluster-cloud-controller-manager-operator

NO-JIRA: fix: report all degraded controller conditions instead of first only#444 #444
OCPCLOUD-3348: Honor TLSAdherence #440
Full changelog

cluster-config-api

OCPBUGS-68358: Disable PSA for 4.22 #2802
MON-4035: Add ThanosQuerierConfig to ClusterMonitoring API #2769
NE-2520: Promote GatewayAPIWithoutOLM to GA #2772
OCPEDGE-2197: Promote TNF (Dual Replica) to default #2723
OCPBUGS-81627: Load ClusterResourceQuota CRD before CVO manifests #2796
OCPEDGE-2492: feat: promote pacemaker to v1 in prep for tnf #2792
Update verify-feature-promotion HTML output to sort entries and fix overflow #2793
Full changelog

cluster-config-operator

OCPEDGE-2071: bump(ocp/api): pull in latest for DualReplica promotion #480
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-82535: Fix PDB unhealthyPodEvictionPolicy field name #271
Full changelog

cluster-etcd-operator

NO-JIRA: Apply go fix changes #1589
NO-JIRA: Remove unused lib/resourcemerge package #1590
OCPEDGE-2495: upkeep: bump ocp/api ocp/client-go #1591
OCPBUGS-81340: pacemaker CronJob: tune history limit and Job TTL #1581
OCPEDGE-2495: feat: update pacemaker in preparation for DualReplica promotion #1587
Full changelog

cluster-image-registry-operator

CNTRLPLANE-3184: Create network policies for image-registry components #1301
OCPBUGS-81750: Use deterministic S3 bucket naming to prevent orphaned buckets #1317
Full changelog

cluster-ingress-operator

OCPBUGS-81550: AWS, Azure and GCP ClusterHostedDNS: Add Ingress LB IPs to Infra CR after masters up #1411
OCPBUGS-76609: Do not take over OSSM subscription #1398
NE-2332: Implement ROUTER_CURVES environment variable #1409
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-68365: revert dev cert rotation #2017
CNTRLPLANE-2698: add network policies for apiserver operator and operands #2029
OCPBUGS-23366: bindata/bootkube: Remove configmap-csr-controller-ca.yaml #2076
Full changelog

cluster-kube-controller-manager-operator

CNTRLPLANE-3211: enable configurable PKI for managed certificate rotation #925
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-kube-scheduler-operator

CNTRLPLANE-3219: vendor: bump library-go, api, client-go for configurable PKI #636
CNTRLPLANE-2756: Add operator and operand network policies #629
Full changelog

cluster-kube-storage-version-migrator-operator

CNTRLPLANE-3055: Migrate go standard casee to ote #156
Full changelog

cluster-monitoring-operator

MON-4543, OPNET-765: Add kubernetes-nmstate telemetry metrics to allowlist #2855
OCPBUGS-74645: delay alert dispatch in Alertmanager #2848
Full changelog

cluster-network-operator

CORENET-6543: Align VTEP CRD additionalPrinterColumns with upstream #2957
CNF-21001: multus: MultiNetworkPolicy nftables #2883
CORENET-6816: Add NetworkPolicies for CNO and its operands #2892
Full changelog

cluster-node-tuning-operator

NO-JIRA: Bump ghw dependency #1492
Full changelog

cluster-olm-operator

OPRUN-4521: handle OCP 4.²³⁄₅.0 upgrade boundary #184
OCPBUGS-77899: Fix wait logic to handle NewOLM enabled on Default Feature #193
NO-ISSUE: remove no-op os.Remove call in TestRenderHelmTemplate #192
Full changelog

cluster-openshift-apiserver-operator

CNTRLPLANE-2699: adding network policies for operator and operands (#645) #645
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-81472: Prevent possibility of running controllers against empty informer caches #426
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-version-operator

OTA-1933: pkg/risk: Refactor alerts into a generic update-risk interface #1367
NO-JIRA: All CVO manifests in payload should be included #1337
Full changelog

console

CONSOLE-4809: Extend RTL Test Coverage for Components Migrated from Enzyme #16249
CONSOLE-4512, OCPBUGS-82473: Switch from legacy render to createRoot #16202
OCPBUGS-77113: remove dev to admin links as dev monitoring views are enabled #16163
NO-JIRA: Update Dockerfile.dev to use latest base images #16264
CONSOLE-5065: Refactor dynamic module import transform code #16224
OCPBUGS-76556: fix Developer Sandbox telemetry #16020
NO-JIRA: Add stefanonardo to frontend reviewers#16267 #16267
OCPBUGS-78904: Mark notification drawer title for translation #16229
CONSOLE-3955: Migrate LogSnippet to PatternFly component #16190
OCPBUGS-81654: Filter out isActionCell prop to fix React warning #16247
CONSOLE-5152: bump cypress to latest #16244
OCPBUGS-81744: Convert cluster update status integration test to unit test #16260
Full changelog

console-operator

OCPBUGS-79068: Fix HelmChartRepository YAML format #1129
Full changelog

docker-builder

OKD-322: Update Dockerfile to work on CentOS/RHEL 10 #500
Full changelog

gcp-cloud-controller-manager

OCPBUGS-78471: Fix OSD ILB bug #103
OCPCLOUD-3274: Merge https://github.com/kubernetes/cloud-provider-gcp:master (378730f) into main #99
Full changelog

hypershift

NO-JIRA: revert: remove .git/ from .dockerignore #8234
OCPBUGS-83285: revert 5.0 supported version from release-4.22 #8216
CNTRLPLANE-3233: ci(gha): add release-4.22 branch to GitHub Actions workflows #8218
CNTRLPLANE-3197: update latest supported version from 4.22 to 4.23 #8193
CNTRLPLANE-3174: Add unit tests for CPO controller packages #8184
CNTRLPLANE-3215: fix envtest GHA workflow path filters for CRD test suites #8200
CNTRLPLANE-2078: add unit tests for AWS Route53 and IAM #8079
OCPBUGS-82301: fix(catalogs): use semver comparison for catalog version cap to handle OCP 5.0 #8195
NO-JIRA: control-plane-pki-operator: fix Event emission logic, format #8190
OCPBUGS-82192: fix(webhookcerts): handle upgrade from service-ca managed certs #8189
OCPBUGS-82159: fix(ignition-server): use major+minor version comparison for OCP 5.0 payloads #8182
CNTRLPLANE-2511: refactor(cpo): move OAuth internal LB annotation into ReconcileService #8185
CNTRLPLANE-2511: Support OAuth LoadBalancer with Azure Private Link Service #8149
OCPBUGS-81644: fix(cli): fix Azure destroy cluster leaving vnet/nsg resource groups for private topology #8151
OCPBUGS-33097: Remove deprecated OVNSbDb service type from default strategy mappings #8164
CNTRLPLANE-3174: test: Add unit tests for product-cli, token-minter, and sync-fg-configmap #8178
CNTRLPLANE-3050: feat(ci): use Konflux-built image for GitHub Actions runners #8092
CNTRLPLANE-2841: test(e2e): add metrics-forwarder e2e test verifying data-plane scraping #8147
CNTRLPLANE-3037: Create separate assets package specifically for CRD management #8150
GCP-462: Add GCP hosted cluster documentation #8027
NO-JIRA: docs(ci): add sync-community-fork token rotation guide #8173
CNTRLPLANE-2841: feat(HCCO): reintroduce guest cluster metrics forwarder for control plane metrics #8146
NO-JIRA: fix(e2e): handle rate limiter context deadline error during cleanup #8137
NO-JIRA: fix(ci): remove catch-all pattern from codecov ignore list #8171
CNTRLPLANE-2511: Allow LoadBalancer publishing strategy for OAuthServer on self-managed Azure #8148
NO-JIRA: chore(ci): add client/ to codecov ignore list #8167
NO-JIRA: feat(e2e): add Azure platform support for backup/restore tests #8144
And 5 elided commits (e.g. from squash or rebase merges)
Full changelog

ironic

OCPBUGS-82540: Bump pyasn1 to 0.5.1-5 #822
Full changelog

machine-api-operator

OCPCLOUD-3346: tls: use centralized TLS #1456
Full changelog

machine-config-operator

OCPBUGS-83559: Update AMI Whitelist #5853
OCPBUGS-83540: order corosync after OVS configuration on TNF clusters] #5852
Revert “OCPBUGS-69936: ovs: increase CPU priority for Open vSwitch Forwarding Unit” #5850
MCO-2135: Add test for OSStream labeling of Machines, MachineSets, and ControlPaneMachineSets #5814
AGENT-1307: add MCD IRI manager #5807
MCO-2202: separate duplicate PinnedImageSet validation into OCP-88562 #5839
MCO-2163: adds machine-config-osimagestream installer helper #5770
OCPBUGS-69936: ovs: increase CPU priority for Open vSwitch Forwarding Unit #5797
MCO-1972: Removes OSImageURLConfig from the build controller #5424
Reapply “MCO-2120: Rework OS Image Stream label classification” #5767
Full changelog

monitoring-plugin

OU-1307: [release-4.22] don’t fight console to setActiveNamespace #881
NO-JIRA: re-enable get CSRF token #876
OU-1264: mcpToolUI basic implementation for OpenShift Lightpseed + obs-mcp + Perses #797
NO-JIRA: breaking changes follow up #875
OU-1175: OCP 4.22 Breaking Changes #863
OCPBUGS-81567: fix: re encode params when redirecting from graph to query-browser #869
OU-1184: lint enabled against cypress files and changes post coo #862
Full changelog

must-gather

MG-241: Adding support for skipping rotated logs #536
Full changelog

network-tools

NO-JIRA: Image slimming #154
Full changelog

networking-console-plugin

Bump lodash from 4.17.23 to 4.18.1 #366
OCPBUGS-70285: Upgrade cypress to v15 to fix CVEs #345
Full changelog

oc-mirror

CLID-532: Separate Image struct into AdditionalImage, BlockedImage, SampleImage #1372
OCPBUGS-62603: Fix printing collection messages with 0 collection items #1385
OCPBUGS-61136: Only print catalog rebuild message if there are catalo… #1386
CLID-524: additionalImages collector error handling #1343
CLID-535: api: use OCI definitions from opencontainers spec #1341
Full changelog

olm-catalogd, olm-operator-controller

OPRUN-4546: Fix boxcutter finalizer ResourceNames in preflight test #695
NO-ISSUE: Synchronize From Upstream Repositories #694
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-77984: test(olm): skip ppc64le/s390x for tests using single-arch images #1276
NO-ISSUE: Synchronize From Upstream Repositories #1278
NO-ISSUE: Synchronize From Upstream Repositories #1277
NO-ISSUE: retry transient registry errors in opm QE #1272
NO-ISSUE: Synchronize From Upstream Repositories #1275
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-83535: CARRY: skip ote tests 4.22 #3139
NO-JIRA: DownStream Merge [2026-04-09] #3126
NO-JIRA: DownStream Merge [04-02-2026] #3114
NO-JIRA: Disable informing tests for the time being #3118
Full changelog

powervs-cloud-controller-manager

OCPBUGS-83398: Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.35 (e48649f) into release-4.22 #95
Full changelog

rhel-coreos, rhel-coreos-10, rhel-coreos-10-extensions, rhel-coreos-extensions

NO-JIRA: Revert “OCPBUGS-77244: 9.8: override runc package to pull in newer fixes” #1925
OCPBUGS-64841: post-process: Remove workaround for openvswitch additional group #1918
OCPBUGS-77244: 9.8: override runc package to pull in newer fixes #1923
Full changelog

service-ca-operator

OCPBUGS-82110: fix service-ca-controller CrashLoop on MicroShift #344
CNTRLPLANE-2845: add service-ca operator and workload network policies #324
CNTRLPLANE-2947: Enable configurable PKI for signing CA and serving certificates #327
Full changelog

tests

OCPBUGS-78997: Revert “NO-ISSUE: test/e2e/upgrade: Raise default update-ack timeout to 10m” #30919
OCPBUGS-82557: DCM tests need to be backward compatible #30999
OCPBUGS-77948, OCPBUGS-77949, OCPBUGS-78298, OCPEDGE-2443: TNF node replacement test updates #30846
NO-JIRA: Update OWNERS #30996
OCPBUGS-82046: Revert “remove some duplicate ovnk test cases” #30975
OCPBUGS-78090: Avoid copy of the oc binary, to support heterogeneous environments #30992
OCPBUGS-81340: fix pacemaker CronJob duplicate-event namespace #30985
OCPEDGE-2491: Log pcs status and etcd member list after every recovery #30949
NE-2561: Add Gateway API OLM to NO-OLM migration upgrade test #30897
OCPBUGS-81716: Add retry logic for transient network errors in restartKubeletOnNode #30966
CORENET-6168: Add ovn tests extension #30560
OCPBUGS-81640: test/ccm: upgrade ccm healthz test to use aws sdk v2 #30954
TRT-2084: terminationmessagepolicy: relax for 5.0 #30979
OCPBUGS-81340: openshift-tests: allow duplicate pacemaker status collector CronJob events #30953
OCPBUGS-81737: Dynamically find worker-generated-kubelet MC name to support different platforms #30967
OCPBUGS-81742: Add exception for the newly added kas-bootstrap-container #30963
OCPNODE-4224: Migrating test case OCP-70987 from OTP to origin #30948
OCPBUGS-82039: Fix DCM ingress tests to support IPv6-only clusters #30972
OCPBUGS-81685: OVNK BGP: fix curl arguments not properly tokenized #30961
OCPBUGS-81751: Fix GatewayClass update conflict in markTestDone #30964
NO-JIRA: Ignore extra fields #30939
NO-JIRA: fix CUDN status condition tests for new TransportAccepted condition #30958
Full changelog

vsphere-cloud-controller-manager

NO-JIRA: Merge https://github.com/kubernetes/cloud-provider-vsphere:release-1.35 (93af0f7) into main #113
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-81525: Bump google.golang.org/grpc to 1.79.3 #170
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Unable to show node image info: too many concurrent oc adm release info --rpmdb/--rpmdb-diff operations (limit 16)

View changelog in Markdown or change previous release:

Source code for this page located on github