# 4.19.21

Created: 2025-12-05 06:38:08 +0000 UTC

Image Digest: `sha256:610e8308b3cd8d620ed726098e834b123856760d84677f0e0a77b2da8802a3e7`


## Changes from 4.19.20

### Components

* Kubectl 1.32.1
* Kubernetes upgraded from 1.32.9 to 1.32.10
* Kubernetes Tests 1.32.8
* Red Hat Enterprise Linux CoreOS upgraded from 9.6.20251125-1 to 9.6.20251203-0


### Rebuilt images without code change

* [agent-installer-api-server](https://github.com/openshift/assisted-service) git [f56d2b03](https://github.com/openshift/assisted-service/commit/f56d2b039a7a924ae51be9475ebe11d6709878c4) `sha256:5b72c6036df3da1a7397cb38157324e5e36537bbc299a593e7d070a6003a1c7e`
* [baremetal-installer](https://github.com/openshift/installer) git [0ecc3bd5](https://github.com/openshift/installer/commit/0ecc3bd57d75b578bfdbdb4955f69109827fed14) `sha256:590f46b5a5f70d03cd2dc1a5c05896f65d35b35bd9f9b04ea0359d9769966972`
* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [1928af1d](https://github.com/openshift/cluster-node-tuning-operator/commit/1928af1d0912b55cfb57c5c86b1f2c7d6159a7d8) `sha256:009707ce4b043fcf85a2a7c454aa4dcc2eb3e5e00af1aeac5a5b48f9de388f07`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [686fdac5](https://github.com/openshift/driver-toolkit/commit/686fdac595884ade83fef7b2b9c41169bf3fcb21) `sha256:522cdcd46c5fd6bacdb7e1b00b82a9c9834e46707828e33ef80c6fea91498d3e`
* [installer](https://github.com/openshift/installer) git [0ecc3bd5](https://github.com/openshift/installer/commit/0ecc3bd57d75b578bfdbdb4955f69109827fed14) `sha256:73dccfe1886131ef174873847dcf376feef51d9c2925b56119e04bde7e393f86`
* [installer-artifacts](https://github.com/openshift/installer) git [0ecc3bd5](https://github.com/openshift/installer/commit/0ecc3bd57d75b578bfdbdb4955f69109827fed14) `sha256:9699456a37318db8e97f15e6c9031e656bbf9d5e99ef2259e609559db4aa48be`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [32b5f16c](https://github.com/openshift/machine-os-images/commit/32b5f16c7f59698b40cc2a23116804d9067824d2) `sha256:634f8366c521b27ca57eea8244fae2ab3c3620390881d93cc1cbe2c41844c750`
* [network-tools](https://github.com/openshift/network-tools) git [633767b2](https://github.com/openshift/network-tools/commit/633767b26eb0d7c69e370599d40458e72e7d1a69) `sha256:4d33d06653d37abdc6769df99bcd4f345fa083ba71aa229565a84ce3b5918149`
* [rhel-coreos](https://github.com/openshift/os) git [e97898c8](https://github.com/openshift/os/commit/e97898c8af9cad8e5375e4860a7d79c39a1c79fa) `sha256:418ff6794ca228385f6bb509a3249e1ec002db6f634d30d1898b93017b8ddfcc`
* [rhel-coreos-extensions](https://github.com/openshift/os) git [e97898c8](https://github.com/openshift/os/commit/e97898c8af9cad8e5375e4860a7d79c39a1c79fa) `sha256:156eb52d57a4ad73eae04cc338d8ac0839b9d019e1518ca9619fc7ec1019f284`
* [tests](https://github.com/openshift/origin) git [f1d2e3cc](https://github.com/openshift/origin/commit/f1d2e3ccff0df4c901864d33b3635bc1a96ba1ae) `sha256:bedcd39b2950402a7d2db96f9faa26bdb7a075d28b17f71de02e3a6d6bb790da`
* [tools](https://github.com/openshift/oc) git [581d48a2](https://github.com/openshift/oc/commit/581d48a297ae8c89a7dbefedd6694b1ab300c082) `sha256:e3f667c68edc0339c3723c7fc22c1830d9f7041ff722cfe4850589581c1ba58f`


### [aws-cloud-controller-manager, aws-cluster-api-controllers, aws-ebs-csi-driver, aws-ebs-csi-driver-operator, aws-machine-controllers, aws-pod-identity-webhook, azure-cloud-controller-manager, azure-cloud-node-manager, azure-cluster-api-controllers, azure-disk-csi-driver, azure-disk-csi-driver-operator, azure-file-csi-driver, azure-file-csi-driver-operator, azure-machine-controllers, azure-workload-identity-webhook, hyperkube, ibm-cloud-controller-manager, ibm-vpc-block-csi-driver, ibm-vpc-block-csi-driver-operator, ibmcloud-machine-controllers, ironic, ironic-agent, ironic-machine-os-downloader, ironic-static-ip-manager, kube-proxy, machine-image-customization-controller, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, vsphere-cloud-controller-manager, vsphere-cluster-api-controllers, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector](https://github.com/openshift/kubernetes/tree/9d45edc58ca6d5240fc84d3d50eb7490aa683c16)

* [OCPBUGS-65552](https://issues.redhat.com/browse/OCPBUGS-65552): Rebase v1.32.10 [#2515](https://github.com/openshift/kubernetes/pull/2515)
* [Full changelog](https://github.com/openshift/kubernetes/compare/b67dfb0bd2ce5bc18e84bab0d0fd54b0de21644f...9d45edc58ca6d5240fc84d3d50eb7490aa683c16)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/d0a5db481b4aef8f7304a069f6a94430230a0ca6)

* [OCPBUGS-65799](https://issues.redhat.com/browse/OCPBUGS-65799): ccoctl azure: retry custom role creation on consistency errors [#949](https://github.com/openshift/cloud-credential-operator/pull/949)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/7f59646602355e54de3a0db884534873cca05615...d0a5db481b4aef8f7304a069f6a94430230a0ca6)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/5c941156e712ec383b19df14a702710a04da487b)

* [OCPBUGS-63603](https://issues.redhat.com/browse/OCPBUGS-63603): refactor cloud provider options [#388](https://github.com/openshift/kubernetes-autoscaler/pull/388)
* [OCPBUGS-63455](https://issues.redhat.com/browse/OCPBUGS-63455): Fixes histograms becoming empty after loaded from checkpoints [#395](https://github.com/openshift/kubernetes-autoscaler/pull/395)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/c53c7153b62ff36cc725707297a4bbb7ea4f62e5...5c941156e712ec383b19df14a702710a04da487b)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/3e2d6cd307bbf3345f0a321537bba19e16af10a3)

* [OCPBUGS-62830](https://issues.redhat.com/browse/OCPBUGS-62830): Remove cluster from non-multicluster dashboards [#2760](https://github.com/openshift/cluster-monitoring-operator/pull/2760)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/65f3aa82165c7659a8c46ecb275f38fa3c118526...3e2d6cd307bbf3345f0a321537bba19e16af10a3)


### [console](https://github.com/openshift/console/tree/6573386fe4032970844e1949b07508af4a54dbea)

* [OCPBUGS-62438](https://issues.redhat.com/browse/OCPBUGS-62438): Updation of label from edit label doesn't work [#15547](https://github.com/openshift/console/pull/15547)
* [Full changelog](https://github.com/openshift/console/compare/5b067ea4ae1ff177f35791e5651015d7bec4b352...6573386fe4032970844e1949b07508af4a54dbea)


### [insights-operator](https://github.com/openshift/insights-operator/tree/73c8e92a8b9c37e3f2432861e21964495e435d86)

* [OCPBUGS-66202](https://issues.redhat.com/browse/OCPBUGS-66202): Add filtering to add other possible pod status to QEMU gatherer [#1190](https://github.com/openshift/insights-operator/pull/1190)
* [OCPBUGS-66058](https://issues.redhat.com/browse/OCPBUGS-66058): [bugfix] The archive's records may include files whose names are out of bounds [#1183](https://github.com/openshift/insights-operator/pull/1183)
* [OCPBUGS-66061](https://issues.redhat.com/browse/OCPBUGS-66061): QEMU logs are not gathered if there are pending status virt-launcher pods [#1184](https://github.com/openshift/insights-operator/pull/1184)
* [Full changelog](https://github.com/openshift/insights-operator/compare/5e4c640c4c6d3e7f63a28222939e2b0d7e227cda...73c8e92a8b9c37e3f2432861e21964495e435d86)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/6fd31b7e48fefb01d263cd19b733aca57ba2cf95)

* [OCPBUGS-64922](https://issues.redhat.com/browse/OCPBUGS-64922): Update timing of MCN desired config spec update to align with node annotation setting [#5439](https://github.com/openshift/machine-config-operator/pull/5439)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/8917be0090ce3a745b1a56449b185863a9a112e2...6fd31b7e48fefb01d263cd19b733aca57ba2cf95)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/5d64d2906329e9fe7e97491a7766c1f2b21c7bbd)

* [OCPBUGS-65968](https://issues.redhat.com/browse/OCPBUGS-65968): Remove empty status field from generated IDMS/ITMS files [#1318](https://github.com/openshift/oc-mirror/pull/1318)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/66e94e191f1bfdba1263ef1a50bb90e5b637e5db...5d64d2906329e9fe7e97491a7766c1f2b21c7bbd)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/101bce5067b46b2b08b38f31633fc019982f23d9)

* NO-JIRA: add .0 to go version [#583](https://github.com/openshift/openshift-apiserver/pull/583)
* [OCPBUGS-65863](https://issues.redhat.com/browse/OCPBUGS-65863): update pkg/image/OWNERS [#578](https://github.com/openshift/openshift-apiserver/pull/578)
* [OCPBUGS-61759](https://issues.redhat.com/browse/OCPBUGS-61759): bump kubernetes-apiserver to pick up loopback certificate expiration update [#569](https://github.com/openshift/openshift-apiserver/pull/569)
* [OCPBUGS-57043](https://issues.redhat.com/browse/OCPBUGS-57043): Updating ose-openshift-apiserver-container image to be consistent with ART for 4.19 [#564](https://github.com/openshift/openshift-apiserver/pull/564)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/7fe57362c4f64c0d4caf52a0bb26a59b2799b227...101bce5067b46b2b08b38f31633fc019982f23d9)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/1f07d27f00ead9fd39b18d9001a7b2fe24eb11ea)

* [CORENET-6055](https://issues.redhat.com/browse/CORENET-6055), [OCPBUGS-65658](https://issues.redhat.com/browse/OCPBUGS-65658), [OCPBUGS-65909](https://issues.redhat.com/browse/OCPBUGS-65909), [OCPBUGS-65956](https://issues.redhat.com/browse/OCPBUGS-65956): Branch Sync release-4.20 to release-4.19 [11-26-2025] [#2872](https://github.com/openshift/ovn-kubernetes/pull/2872)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/5f7020596a7016a6046bc40111a63fff8ba73db7...1f07d27f00ead9fd39b18d9001a7b2fe24eb11ea)