# 4.21.21 Created: 2026-06-18 13:19:02 +0000 UTC Image Digest: `sha256:05cb0b4804507c0b5e7923b7c6bcf293bd4e2d0f476c8ec6d13b179eb3157b42` ## Changes from 4.21.20 ### Components * Kubectl 1.34.1 * Kubernetes 1.34.8 * Kubernetes Tests 1.34.1 * Red Hat Enterprise Linux CoreOS 10.2.20260521-0 ### FeatureGate Changes | FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA | | :------ | :---: | :---: | :---: | :---: | :---: | :---: | | GatewayAPIWithoutOLM
(0 tests)| Disabled| Disabled| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed) | ### Rebuilt images without code change * [agent-installer-api-server](https://github.com/openshift/assisted-service) git [f32dfdad](https://github.com/openshift/assisted-service/commit/f32dfdad38c833c22168710bf7814dc7e8cb4c2f) `sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617` * [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [dc0bd090](https://github.com/openshift/agent-installer-utils/commit/dc0bd0906fc9868a65cc9488a7dbdd0f35ca4a23) `sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8` * [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [898663be](https://github.com/openshift/cluster-node-tuning-operator/commit/898663be14bcd0bc62287636409e19c4048a01cd) `sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea` * [driver-toolkit](https://github.com/openshift/driver-toolkit) git [f0ae9d12](https://github.com/openshift/driver-toolkit/commit/f0ae9d12ca7e3adf594ae34e394b1ea003daa4ad) `sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b` * [machine-os-images](https://github.com/openshift/machine-os-images) git [7d29b155](https://github.com/openshift/machine-os-images/commit/7d29b155d3374427a69fa2ebfa4884d55ff76e0f) `sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53` * [network-tools](https://github.com/openshift/network-tools) git [d6717e45](https://github.com/openshift/network-tools/commit/d6717e453a098d551c9e2d2868e1f5317c41e688) `sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334` * [rhel-coreos](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:3fe269a4d7d7146e467afbc06fc10ddbd74d6a0878d875789eb65f61257f90b2` * [rhel-coreos-10](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:613828b3cfeeae0a720f43e67fc0048a7e1aa2469990089fccaef16b909ea908` * [rhel-coreos-10-extensions](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:e0739efc9ba89c2a905cb8052b8b2383a0e7f5da001dcde69deb2aaaa7bbb640` * [rhel-coreos-extensions](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:caf5d88c4dd8cbee1011c5e339bb88c873051909539259edb2cd5240d4be8fc7` * [tools](https://github.com/openshift/oc) git [fdf8daba](https://github.com/openshift/oc/commit/fdf8dabaedf6cf89f60547f57cc5f5f3e8d8798b) `sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41` ### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/1d5163811da9ec9eaeea69c252c9495889f624a9) * [OCPBUGS-85041](https://issues.redhat.com/browse/OCPBUGS-85041): add --copy-network when manual network config is detected [#1446](https://github.com/openshift/assisted-installer-agent/pull/1446) * [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/e57138265957c81b33d3ac13078d35f6ca07069d...1d5163811da9ec9eaeea69c252c9495889f624a9) ### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/3f37185a7aca5332edd421081fbea98af8b1a527) * [OCPBUGS-81986](https://issues.redhat.com/browse/OCPBUGS-81986): Bump go-jose/v4 to 4.1.4 [#10598](https://github.com/openshift/installer/pull/10598) * [Full changelog](https://github.com/openshift/installer/compare/00ea78b6eb2bb53dd279bcbe7723ff84767685d5...3f37185a7aca5332edd421081fbea98af8b1a527) ### [cluster-config-api](https://github.com/openshift/api/tree/253fff21f708fa7efd5ee65a4c30d6bde1e61cc8) * [OCPBUGS-78330](https://issues.redhat.com/browse/OCPBUGS-78330), [OCPBUGS-82146](https://issues.redhat.com/browse/OCPBUGS-82146), [OCPBUGS-85550](https://issues.redhat.com/browse/OCPBUGS-85550), [OCPBUGS-88295](https://issues.redhat.com/browse/OCPBUGS-88295), [OCPBUGS-88297](https://issues.redhat.com/browse/OCPBUGS-88297): Promote GatewayAPIWithoutOLM feature gate to TechPreview [#2873](https://github.com/openshift/api/pull/2873) * [Full changelog](https://github.com/openshift/api/compare/1d79f30d4668393dc34e9b423ec6904645503c58...253fff21f708fa7efd5ee65a4c30d6bde1e61cc8) ### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/356e3777400d549d9b3194c74c716eb2290baefc) * [OCPBUGS-78330](https://issues.redhat.com/browse/OCPBUGS-78330), [OCPBUGS-82146](https://issues.redhat.com/browse/OCPBUGS-82146), [OCPBUGS-85550](https://issues.redhat.com/browse/OCPBUGS-85550), [OCPBUGS-88295](https://issues.redhat.com/browse/OCPBUGS-88295), [OCPBUGS-88297](https://issues.redhat.com/browse/OCPBUGS-88297): Replace OLM-based Istio install with Sail Library [#1442](https://github.com/openshift/cluster-ingress-operator/pull/1442) * [OCPBUGS-86718](https://issues.redhat.com/browse/OCPBUGS-86718): Add configuration override for X-SSL strip [#1471](https://github.com/openshift/cluster-ingress-operator/pull/1471) * [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/f7a3395618f0925fbe626b18cc8173d19ab30dac...356e3777400d549d9b3194c74c716eb2290baefc) ### [console](https://github.com/openshift/console/tree/c09a410a1301c74a489d3771df7174e5ea6c734f) * [OCPBUGS-88358](https://issues.redhat.com/browse/OCPBUGS-88358): Allow VolumeSnapshot restore when parent PVC is deleted [#16602](https://github.com/openshift/console/pull/16602) * [Full changelog](https://github.com/openshift/console/compare/aa0cc6404fb385d57ad596e7f01f9a40472c3134...c09a410a1301c74a489d3771df7174e5ea6c734f) ### [haproxy-router](https://github.com/openshift/router/tree/dc4c01d494f572773a05e82bffd19c2cdaf8dce9) * [OCPBUGS-86718](https://issues.redhat.com/browse/OCPBUGS-86718): Strip X-SSL-* headers for plain HTTP [#795](https://github.com/openshift/router/pull/795) * [Full changelog](https://github.com/openshift/router/compare/f4c2ba80abb1fb3694a6b2ae0be2e5c898572632...dc4c01d494f572773a05e82bffd19c2cdaf8dce9) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/59524130bbc7ffc63b1c2f7dbd1cd24882e447d3) * [OCPBUGS-88334](https://issues.redhat.com/browse/OCPBUGS-88334): Skip chrony-wait on first node join [#6178](https://github.com/openshift/machine-config-operator/pull/6178) * [OCPBUGS-88335](https://issues.redhat.com/browse/OCPBUGS-88335): daemon: don't pull/extract extensions for all OS updates [#6179](https://github.com/openshift/machine-config-operator/pull/6179) * [OCPBUGS-86998](https://issues.redhat.com/browse/OCPBUGS-86998): configure-ovs: copy lldp mode to br-ex port [#6134](https://github.com/openshift/machine-config-operator/pull/6134) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/507538ada4b9261a9260aef93be7518993dfdcf1...59524130bbc7ffc63b1c2f7dbd1cd24882e447d3) ### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/f47b7a53457d81d4ecf7e862819454054bb4216d) * [OCPBUGS-88396](https://issues.redhat.com/browse/OCPBUGS-88396): CVE-2026-44487 bump axios to 1.16.0 [#999](https://github.com/openshift/monitoring-plugin/pull/999) * [OCPBUGS-84290](https://issues.redhat.com/browse/OCPBUGS-84290): bump follow-redirects to 1.16.0 [#987](https://github.com/openshift/monitoring-plugin/pull/987) * [OCPBUGS-84828](https://issues.redhat.com/browse/OCPBUGS-84828), [OCPBUGS-84991](https://issues.redhat.com/browse/OCPBUGS-84991), [OCPBUGS-85007](https://issues.redhat.com/browse/OCPBUGS-85007), [OCPBUGS-85037](https://issues.redhat.com/browse/OCPBUGS-85037): Update Axios to v1.15.2 [#982](https://github.com/openshift/monitoring-plugin/pull/982) * [Full changelog](https://github.com/openshift/monitoring-plugin/compare/462c78890ffb636e05d91d41ca718bb3c81da4cf...f47b7a53457d81d4ecf7e862819454054bb4216d) ### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/76483af58590e3e73cc713a477b506ff404b604b) * [OCPBUGS-88313](https://issues.redhat.com/browse/OCPBUGS-88313): Trim subnet input in UDN creation form [#430](https://github.com/openshift/networking-console-plugin/pull/430) * [Full changelog](https://github.com/openshift/networking-console-plugin/compare/268037d76fd97d29f39eae2f25f0a2b2910cb30e...76483af58590e3e73cc713a477b506ff404b604b) ### [tests](https://github.com/openshift/origin/tree/9a35db21312438c6097d6bb8110e077cc159d629) * [OCPBUGS-78330](https://issues.redhat.com/browse/OCPBUGS-78330), [OCPBUGS-82146](https://issues.redhat.com/browse/OCPBUGS-82146), [OCPBUGS-85550](https://issues.redhat.com/browse/OCPBUGS-85550), [OCPBUGS-88295](https://issues.redhat.com/browse/OCPBUGS-88295), [OCPBUGS-88297](https://issues.redhat.com/browse/OCPBUGS-88297), [OCPBUGS-88320](https://issues.redhat.com/browse/OCPBUGS-88320), [OCPBUGS-88322](https://issues.redhat.com/browse/OCPBUGS-88322), [OCPBUGS-88324](https://issues.redhat.com/browse/OCPBUGS-88324): Backport noOLM Gateway API test coverage and upgrade tests [#31232](https://github.com/openshift/origin/pull/31232) * [OCPBUGS-88328](https://issues.redhat.com/browse/OCPBUGS-88328): Fix Pod.Create() to use --local flag for template proc… [#31269](https://github.com/openshift/origin/pull/31269) * [Full changelog](https://github.com/openshift/origin/compare/4cc131780d8ec7338e12105477a46b137b670bcb...9a35db21312438c6097d6bb8110e077cc159d629)