# 4.21.19

Created: 2026-06-04 13:40:58 +0000 UTC

Image Digest: `sha256:713c99f6f70ee1297892c4920860ebbc2dc981e22273bb3a6aace5dcc1e28699`


## Changes from 4.21.18

### Components

* Kubectl 1.34.1
* Kubernetes 1.34.8
* Kubernetes Tests 1.34.1
* Red Hat Enterprise Linux CoreOS 10.2.20260521-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| GatewayAPIWithoutOLM <br/> (0 tests)|  |  |  |  |  |   |


### Rebuilt images without code change

* [baremetal-installer](https://github.com/openshift/installer) git [3f855c5b](https://github.com/openshift/installer/commit/3f855c5bbfa977e040bfe98776299a6afa798674) `sha256:6d51d4f2b4493741ae41bfb2afa4a4dea996a6b871340b2ffe3da4912b6c87a1`
* [cli](https://github.com/openshift/oc) git [fdf8daba](https://github.com/openshift/oc/commit/fdf8dabaedf6cf89f60547f57cc5f5f3e8d8798b) `sha256:ca3b5ac347423af6140f8f817ea475975da761213e41f48cabf64a1f030005fb`
* [cli-artifacts](https://github.com/openshift/oc) git [fdf8daba](https://github.com/openshift/oc/commit/fdf8dabaedf6cf89f60547f57cc5f5f3e8d8798b) `sha256:71c0d96e658cebc82a05077849288f0a993d0b81551c330843e8bb495499fa4c`
* [deployer](https://github.com/openshift/oc) git [fdf8daba](https://github.com/openshift/oc/commit/fdf8dabaedf6cf89f60547f57cc5f5f3e8d8798b) `sha256:077f47c1600209beee84c795ed66d2fca8cfa51dfae3b1655d2c3b5bcdac18da`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [f0ae9d12](https://github.com/openshift/driver-toolkit/commit/f0ae9d12ca7e3adf594ae34e394b1ea003daa4ad) `sha256:92b82f0b125bc503b4fd8c2a1b45b2d61fb7e09cad625a34a97640c9b3e4a677`
* [etcd](https://github.com/openshift/etcd) git [806f690e](https://github.com/openshift/etcd/commit/806f690e1f140e0aea2eb05ef5f288b756b62895) `sha256:7f4c64ed454d18d4a2eb694453181ab85d0923a90fa6efed6fc202669e9b79a7`
* [hyperkube](https://github.com/openshift/kubernetes) git [eab2218b](https://github.com/openshift/kubernetes/commit/eab2218b931d0c20740d6259df59f242abf32ef7) `sha256:89bbfeea2974c6fd0794f5f6e5b8d7d51ad34a2ef2859e072ae3c86019ae8984`
* [installer](https://github.com/openshift/installer) git [3f855c5b](https://github.com/openshift/installer/commit/3f855c5bbfa977e040bfe98776299a6afa798674) `sha256:2ad4dd6c9266e917701dfabd658aa2227559db2423c8bd03d5e757fe54f2a245`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [e9019e5f](https://github.com/openshift/machine-os-images/commit/e9019e5f819c44726e9ff5e1ec8fdfad9fb314fd) `sha256:912966eff943afb0ccc1fcea7803724a88d1a977b60af63613d6feea21f775f7`
* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [462c7889](https://github.com/openshift/monitoring-plugin/commit/462c78890ffb636e05d91d41ca718bb3c81da4cf) `sha256:a60f62120bb53113fc5ba1d04f725c1a534459bd42c53fe81feff5199b25a8ec`
* [must-gather](https://github.com/openshift/must-gather) git [eeb267f4](https://github.com/openshift/must-gather/commit/eeb267f4b7f8016f13d12866013cad43c7403482) `sha256:618f693f10646e6b545b16c489e500925a49b7b29647fb5800763c6441839710`
* [network-tools](https://github.com/openshift/network-tools) git [d6717e45](https://github.com/openshift/network-tools/commit/d6717e453a098d551c9e2d2868e1f5317c41e688) `sha256:cd5a1732e78eed148055ee218de9526b3a1697823b1de097efd0c36298d25636`
* [networking-console-plugin](https://github.com/openshift/networking-console-plugin) git [268037d7](https://github.com/openshift/networking-console-plugin/commit/268037d76fd97d29f39eae2f25f0a2b2910cb30e) `sha256:4e05a567f8c48056567cc6a1db48720449a25104bfe2b59c2c7b2a739ff22e11`
* [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes) git [d586f851](https://github.com/openshift/ovn-kubernetes/commit/d586f851c25d8f7cd04840cda79a0a6a98ea8485) `sha256:12edcbf2d3260d048723cfd233517e98d29c971bb4304860762b565ad22068dd`
* [rhel-coreos](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:035a49ec6bc7db5e68ce7ba5ee448c77539592afb5b04fd17794379e3215fa4c`
* [rhel-coreos-10](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:c79a08f72d6933cc81efc2aece66634c31b3c06aaf6b6af63fc50ad01836232a`
* [rhel-coreos-10-extensions](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:59054ae464d976cf01c334fa4dc09c991dfee94c6db5a6c0c53b7877618e5310`
* [rhel-coreos-extensions](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:48e9215ab76b9c255f1a406bdefb9b8b55c7ee11c78927e02695529c257c8069`
* [tests](https://github.com/openshift/origin) git [c2da98a5](https://github.com/openshift/origin/commit/c2da98a5a8f0e23886ac536fbeb81140e798fb71) `sha256:6e0ff508f6f36112488741c83e4e5b2043890023441e9b744db404118c9ea639`
* [tools](https://github.com/openshift/oc) git [fdf8daba](https://github.com/openshift/oc/commit/fdf8dabaedf6cf89f60547f57cc5f5f3e8d8798b) `sha256:62e97a2d24950dafec21139b3d1c4962a25bc331ed05f62f20666d31adc90bc4`


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/154ae10f442b7d40f14492c5973cd3459791d00f)

* [OCPBUGS-81982](https://issues.redhat.com/browse/OCPBUGS-81982): Bump go-jose/go-jose/v4@v4.1.4 [#1027](https://github.com/openshift/cloud-credential-operator/pull/1027)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/693d9f3485b21cf128fa379eabd6787737fa56ad...154ae10f442b7d40f14492c5973cd3459791d00f)


### [cluster-config-api](https://github.com/openshift/api/tree/1d79f30d4668393dc34e9b423ec6904645503c58)

* [OCPBUGS-85149](https://issues.redhat.com/browse/OCPBUGS-85149): Backport GatewayAPIWithoutOLM feature gate as disabled [#2864](https://github.com/openshift/api/pull/2864)
* [Full changelog](https://github.com/openshift/api/compare/b66d75611553df4827e899e5eaa4d6321ed9f44c...1d79f30d4668393dc34e9b423ec6904645503c58)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/898d6bd9f6ab96093b8d74e5a7dbfeff9a5cf257)

* [OCPBUGS-84336](https://issues.redhat.com/browse/OCPBUGS-84336): fix(tnf): gate dual-replica setup and keep retrying [#1620](https://github.com/openshift/cluster-etcd-operator/pull/1620)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/10012737e9b23528357c130184ef4d890ae8ea33...898d6bd9f6ab96093b8d74e5a7dbfeff9a5cf257)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/3a861ed50a5755aa9eaf58d4e6c86d02729dd9c0)

* [OCPBUGS-74373](https://issues.redhat.com/browse/OCPBUGS-74373): Remove restriction of unmanaged x-k8s.io [#1446](https://github.com/openshift/cluster-ingress-operator/pull/1446)
* [OCPBUGS-86027](https://issues.redhat.com/browse/OCPBUGS-86027): Fix logging for unmanaged controllers [#1448](https://github.com/openshift/cluster-ingress-operator/pull/1448)
* [OCPBUGS-80759](https://issues.redhat.com/browse/OCPBUGS-80759): Authorization bypass due to improper HTTP/2 path validation [#1441](https://github.com/openshift/cluster-ingress-operator/pull/1441)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/6c70966cd2011f861843e85efb8bf08c3a938fe1...3a861ed50a5755aa9eaf58d4e6c86d02729dd9c0)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/d78172d1fffdcd29cb3ca6626c78ebecc8e2ef78)

* [OCPBUGS-86809](https://issues.redhat.com/browse/OCPBUGS-86809): Requeue PerformanceStatus update when status write fails [#1524](https://github.com/openshift/cluster-node-tuning-operator/pull/1524)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/a6f7d8ab2efb5e37d848620d5fc8db37a3cf5d58...d78172d1fffdcd29cb3ca6626c78ebecc8e2ef78)


### [console](https://github.com/openshift/console/tree/402882702875b34bb4872c051808a35a67880346)

* [OCPBUGS-85674](https://issues.redhat.com/browse/OCPBUGS-85674): Prevent binary secret data corruption when editing [#16448](https://github.com/openshift/console/pull/16448)
* [OCPBUGS-79459](https://issues.redhat.com/browse/OCPBUGS-79459): CVE-2026-29063 Immutable.js: Improperly Controlled Mod… [#16503](https://github.com/openshift/console/pull/16503)
* [OCPBUGS-86427](https://issues.redhat.com/browse/OCPBUGS-86427): Fix Shipwright detail pages crashing with React error #310 [#16487](https://github.com/openshift/console/pull/16487)
* [OCPBUGS-86314](https://issues.redhat.com/browse/OCPBUGS-86314): Show empty state instead of 403 error for users without projects [#16478](https://github.com/openshift/console/pull/16478)
* [Full changelog](https://github.com/openshift/console/compare/28c6e026e4cc49aa470f755ae01a1acb4cd2935d...402882702875b34bb4872c051808a35a67880346)


### [console-operator](https://github.com/openshift/console-operator/tree/aee1a79b48a86e0feaef8ac72b5ec3c124429859)

* [NETOBSERV-2296](https://issues.redhat.com/browse/NETOBSERV-2296): add missing annotations on netobserv quickstart [#1096](https://github.com/openshift/console-operator/pull/1096)
* [Full changelog](https://github.com/openshift/console-operator/compare/4393afe88810c9db76fc6da1821787449e666ef4...aee1a79b48a86e0feaef8ac72b5ec3c124429859)


### [hypershift](https://github.com/openshift/hypershift/tree/d345a6af0fb9c22d2058ac98994afbcb41e24f6f)

* [OCPBUGS-86416](https://issues.redhat.com/browse/OCPBUGS-86416): add Konflux pipeline definitions for CPO 4.21 [#8607](https://github.com/openshift/hypershift/pull/8607)
* [OCPBUGS-86477](https://issues.redhat.com/browse/OCPBUGS-86477): [release-4.21] add CP pull-secret watches for in-place propagation [#8583](https://github.com/openshift/hypershift/pull/8583)
* [Full changelog](https://github.com/openshift/hypershift/compare/b5bc1c2f89e9cdbd5d0d1b1374674f5bcd45b76b...d345a6af0fb9c22d2058ac98994afbcb41e24f6f)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/0efd2f822814f9965ef6dc14b68f24eebcaca40d)

* Fix for OCPBUGS-81988: CVE-2026-34986 bump github.com/go-jose/go-jose [#143](https://github.com/openshift/kube-state-metrics/pull/143)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/ce6f3742ed123b671acd6de4d3605c3a7f644cf8...0efd2f822814f9965ef6dc14b68f24eebcaca40d)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/340c3847f293b8914ebef26d1e9b0a8ce2d2abd5)

* [OCPBUGS-86576](https://issues.redhat.com/browse/OCPBUGS-86576): Verify extension packages are installed [#6090](https://github.com/openshift/machine-config-operator/pull/6090)
* [OCPBUGS-84481](https://issues.redhat.com/browse/OCPBUGS-84481): MCS fallback to latest v3 [#5883](https://github.com/openshift/machine-config-operator/pull/5883)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/5aabf7ccb1f54f0c889a87b1670827f9b2d23461...340c3847f293b8914ebef26d1e9b0a8ce2d2abd5)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/f9812811fdc23a9baa72f075afe566caddfe2280)

* Fix for OCPBUGS-81971: CVE-2026-34986 github.com/go-jose/go-jose/v4 [#1426](https://github.com/openshift/oc-mirror/pull/1426)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/994deebef2836ca75003dd15372f7110d2448fa6...f9812811fdc23a9baa72f075afe566caddfe2280)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/20bb13fab3865444b7a4ae454dd234391c4d7e49)

* [OCPBUGS-85572](https://issues.redhat.com/browse/OCPBUGS-85572): Add init container for Manila node daemonset [#554](https://github.com/openshift/csi-operator/pull/554)
* [Full changelog](https://github.com/openshift/csi-operator/compare/5f294954dc029e0ed120243c3188af81df89d9e4...20bb13fab3865444b7a4ae454dd234391c4d7e49)