5.0.0-0.ci-2026-06-29-213641

Download the installer for your operating system or run

oc adm release extract --tools registry.ci.openshift.org/ocp/release-5:5.0.0-0.ci-2026-06-29-213641

Team Approvals:

Tests:

Blocking jobs
- aggregated-aws-ovn-upgrade-5.0-major Pending periodic-ci-openshift-release-main-ci-5.0-upgrade-from-stable-4.22-e2e-aws-ovn-upgrade
- aggregated-azure-ovn-upgrade-5.0-major Pending periodic-ci-openshift-release-main-ci-5.0-upgrade-from-stable-4.22-e2e-azure-ovn-upgrade
- aggregated-gcp-ovn-upgrade-5.0-micro Pending periodic-ci-openshift-release-main-ci-5.0-e2e-gcp-ovn-upgrade
- hypershift-e2e-aks Pending (1 retry) periodic-ci-openshift-hypershift-release-5.0-periodics-e2e-aks
  - Attempt 1 Failed
  - Attempt 2 Pending
- hypershift-e2e-aws Pending (1 retry) periodic-ci-openshift-hypershift-release-5.0-periodics-e2e-aws-ovn
  - Attempt 1 Failed
  - Attempt 2 Pending
Async jobs
- claude-payload-agent Pending periodic-ci-openshift-release-main-claude-payload-agent

Upgrades from:

5.0.0-0.ci-2026-06-28-091656 - P F P F P
4.22.0-0.ci-2026-06-28-193126 (changes) - Pending Pending

Changes from 5.0.0-0.ci-2026-06-28-091656

Created: 2026-06-29 21:37:10 +0000 UTC

Image Digest: sha256:b84c67d4a2d72754ca069c5aa8555d4151bd4b981dc2183a51a142b41bef6c8a

Components

Kubectl 1.35.2
Kubernetes 1.35.3
Kubernetes Tests 1.35.1
Red Hat Enterprise Linux CoreOS 10.2.20260627-0

The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	OKD Hypershift	OKD SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
VSphereMixedNodeEnv (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled

agent-installer-api-server

APPSRE-14691: add monitoring.rhobs/v1 ServiceMonitors for COO compatibility #10540
OCPBUGS-93368: Simplify IRI api dependency #10528
Full changelog

agent-installer-ui

Fix dependency ordering (#3812) #3812
Fix machine network autoselect to work with IPv6 only clusters (#3813) #3813
Upgrade shell-quote to ^1.8.4 (#3800) #3800
ACM-35000: Update @openshift-assisted/ui-lib for dynamic plugin SDK 4.22 and react-router 7 compatibility (#3804) #3804
Reflect selected operators correctly (#3805) #3805
chore(deps): update dependency qs to ^6.15.3 (#3809) #3809
MGMT-24431: Add inventory truncation validation handling to Assisted Installer UI (#3807) #3807
chore(deps): update konflux references (#3794) #3794
chore(deps): update dependency ip-address to ^10.2.0 (#3808) #3808
Upgrade ip-address to ^10.1.1 (#3802) #3802
Upgrade ws to ^8.21.0 (#3803) #3803
Upgade tar to ^7.5.11 (#3801) #3801
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-85106: Add required-scc annotation to EFS and SMB operator deployments #569
Full changelog

aws-pod-identity-webhook

OCPBUGS-87337: Updating ose-aws-pod-identity-webhook-container image to be consistent with ART for 5.0 #218
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-87841: gather: redact pull-secret auth tokens from machineconfigs.json #10660
Full changelog

cli, cli-artifacts, deployer, tools

NO-JIRA: Fix tar slip path traversal in codesign archive extraction #2291
Full changelog

cloud-credential-operator

OCPBUGS-87829: Scope minted AWS IAM policies to cluster-owned resources #1043
Full changelog

cluster-authentication-operator

NO-JIRA: Bump library-go for sync #936
Full changelog

cluster-baremetal-operator

METAL-1833: Fix hermetic build compatibility for go-bindata #623
Bug OCPBUGS-90496: Remove metadata.namespace from cluster-scoped ClusterRoleBinding #616
Full changelog

cluster-capi-operator

OCPBUGS-87268: Updating ose-cluster-capi-operator-container image to be consistent with ART for 5.0 #582
NO-JIRA: fix machine sync e2e test flake #612
OCPCLOUD-3569: Initial import of rough provider tooling documentation #609
OCPCLOUD-3570: e2e skip Cluster API authoritative MachineSets in GetFirstMAPIMachineSet #610
Full changelog

cluster-config-api

SPLAT-2718: Promote VSphereMixedNodeEnv to GA #2798
Full changelog

cluster-kube-apiserver-operator

NO-JIRA: Bump library-go for sync #2214
Full changelog

cluster-kube-controller-manager-operator

NO-JIRA: Use %w for error wrapping consistently #946
Full changelog

cluster-kube-storage-version-migrator-operator

STOR-2954: feat: have CVO inject the centralized TLS configuration into the operator’s config #176
Full changelog

cluster-openshift-apiserver-operator

NO-JIRA: Bump library-go for sync #725
Full changelog

cluster-version-operator

CNTRLPLANE-3429: Respect configured cipher order for inject-tls #1386
Full changelog

console

OCPBUGS-87353: Updating openshift-enterprise-console-container image to be consistent with ART for 5.0 #16558
Full changelog

csi-node-driver-registrar

NO-ISSUE: Bump github.com/moby/spdystream to v0.5.1 #107
Full changelog

driver-toolkit, driver-toolkit-10

OCPBUGS-69851: Fix e2e test failure caused by TTY carriage returns in oc run output #196
Full changelog

gcp-machine-controllers

OCPBUGS-91738: golang.org/x/net bumped from v0.51.0 to v0.55.0 #172
Full changelog

hypershift

OCPBUGS-92791: fix(configrefs): exclude componentRoutes secrets from management cluster sync #8838
CNTRLPLANE-3624: add tls security profile configuration for the control-plane-pki-operator #8768
CNTRLPLANE-3686: feat(api,cpo): add observedGeneration to ControlPlaneComponentStatus #8819
OCPBUGS-86025: Close HTTP response bodies to prevent goroutine and connection leaks #8560
OCPBUGS-92206: bump catalog image version cap from 4.21 to 4.22 #8836
OCPBUGS-86648: move IP addresses from dnsNames to ips in etcd peer cert #8847
Full changelog

insights-operator

CCXDEV-16450: document disableRuntimeExtractor config option #1312
Full changelog

machine-config-operator

MCO-2393: Use /proc/sys/crypto/fips_enabled for FIPS check in tests #6233
OCPBUGS-59958: move cleanUpDuplicatedMC to avoid double reboot on first updated Master node #6201
Full changelog

monitoring-plugin

NO-JIRA: fix: update vulnerable dependencies #1015
Full changelog

oc-mirror

OCPBUGS-90096: Make dry-run also generate cluster-resources #1394
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

TRT-2761: Revert #1330 “NO-ISSUE: Synchronize From Upstream Repositories” #1334
Full changelog

service-ca-operator

CNTRLPLANE-3423: feat: have CVO inject the centralized TLS configuration into the operator’s config #359
Full changelog

tests

OCPCLOUD-3010: Enable OTE for Cluster CAPI Operator #31307
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Unable to show node image info: too many concurrent oc adm release info --rpmdb/--rpmdb-diff operations (limit 32)

View changelog in Markdown or change previous release:

Source code for this page located on github