# 4.21.21 Created: 2026-06-18 13:23:15 +0000 UTC Image Digest: `sha256:73811451efed403727e561f1ffadc1936c71bbefbae526fcea86a88fe23473f2` ## Changes from 4.21.20 ### Components * Kubectl 1.34.1 * Kubernetes 1.34.8 * Kubernetes Tests 1.34.1 * Red Hat Enterprise Linux CoreOS 10.2.20260521-0 ### FeatureGate Changes | FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA | | :------ | :---: | :---: | :---: | :---: | :---: | :---: | | GatewayAPIWithoutOLM
(0 tests)| Disabled| Disabled| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed) | ### Rebuilt images without code change * [agent-installer-api-server](https://github.com/openshift/assisted-service) git [f32dfdad](https://github.com/openshift/assisted-service/commit/f32dfdad38c833c22168710bf7814dc7e8cb4c2f) `sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf` * [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [dc0bd090](https://github.com/openshift/agent-installer-utils/commit/dc0bd0906fc9868a65cc9488a7dbdd0f35ca4a23) `sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db` * [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [898663be](https://github.com/openshift/cluster-node-tuning-operator/commit/898663be14bcd0bc62287636409e19c4048a01cd) `sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b` * [driver-toolkit](https://github.com/openshift/driver-toolkit) git [f0ae9d12](https://github.com/openshift/driver-toolkit/commit/f0ae9d12ca7e3adf594ae34e394b1ea003daa4ad) `sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e` * [machine-os-images](https://github.com/openshift/machine-os-images) git [7d29b155](https://github.com/openshift/machine-os-images/commit/7d29b155d3374427a69fa2ebfa4884d55ff76e0f) `sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97` * [network-tools](https://github.com/openshift/network-tools) git [d6717e45](https://github.com/openshift/network-tools/commit/d6717e453a098d551c9e2d2868e1f5317c41e688) `sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188` * [rhel-coreos](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:25ad7c8ea4e768e03e48511092916fe207b7a4d63370dd22af7f4655e1f23066` * [rhel-coreos-10](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:6efb734d836afc4b2749a1bbbadde11256a3bd827808fee99ed90ab7bbcd2df1` * [rhel-coreos-10-extensions](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:b4fac620c15eb705d1f520f534f14e064e9bae5ec761eeedb5e19a85274bb06f` * [rhel-coreos-extensions](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:29aa4860c1be7b59ecf417a9f7962da15c0d960d371faa0ffd3a2ebfd1f28fef` * [tools](https://github.com/openshift/oc) git [fdf8daba](https://github.com/openshift/oc/commit/fdf8dabaedf6cf89f60547f57cc5f5f3e8d8798b) `sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31` ### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/1d5163811da9ec9eaeea69c252c9495889f624a9) * [OCPBUGS-85041](https://issues.redhat.com/browse/OCPBUGS-85041): add --copy-network when manual network config is detected [#1446](https://github.com/openshift/assisted-installer-agent/pull/1446) * [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/e57138265957c81b33d3ac13078d35f6ca07069d...1d5163811da9ec9eaeea69c252c9495889f624a9) ### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/3f37185a7aca5332edd421081fbea98af8b1a527) * [OCPBUGS-81986](https://issues.redhat.com/browse/OCPBUGS-81986): Bump go-jose/v4 to 4.1.4 [#10598](https://github.com/openshift/installer/pull/10598) * [Full changelog](https://github.com/openshift/installer/compare/00ea78b6eb2bb53dd279bcbe7723ff84767685d5...3f37185a7aca5332edd421081fbea98af8b1a527) ### [cluster-config-api](https://github.com/openshift/api/tree/253fff21f708fa7efd5ee65a4c30d6bde1e61cc8) * [OCPBUGS-78330](https://issues.redhat.com/browse/OCPBUGS-78330), [OCPBUGS-82146](https://issues.redhat.com/browse/OCPBUGS-82146), [OCPBUGS-85550](https://issues.redhat.com/browse/OCPBUGS-85550), [OCPBUGS-88295](https://issues.redhat.com/browse/OCPBUGS-88295), [OCPBUGS-88297](https://issues.redhat.com/browse/OCPBUGS-88297): Promote GatewayAPIWithoutOLM feature gate to TechPreview [#2873](https://github.com/openshift/api/pull/2873) * [Full changelog](https://github.com/openshift/api/compare/1d79f30d4668393dc34e9b423ec6904645503c58...253fff21f708fa7efd5ee65a4c30d6bde1e61cc8) ### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/356e3777400d549d9b3194c74c716eb2290baefc) * [OCPBUGS-78330](https://issues.redhat.com/browse/OCPBUGS-78330), [OCPBUGS-82146](https://issues.redhat.com/browse/OCPBUGS-82146), [OCPBUGS-85550](https://issues.redhat.com/browse/OCPBUGS-85550), [OCPBUGS-88295](https://issues.redhat.com/browse/OCPBUGS-88295), [OCPBUGS-88297](https://issues.redhat.com/browse/OCPBUGS-88297): Replace OLM-based Istio install with Sail Library [#1442](https://github.com/openshift/cluster-ingress-operator/pull/1442) * [OCPBUGS-86718](https://issues.redhat.com/browse/OCPBUGS-86718): Add configuration override for X-SSL strip [#1471](https://github.com/openshift/cluster-ingress-operator/pull/1471) * [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/f7a3395618f0925fbe626b18cc8173d19ab30dac...356e3777400d549d9b3194c74c716eb2290baefc) ### [console](https://github.com/openshift/console/tree/c09a410a1301c74a489d3771df7174e5ea6c734f) * [OCPBUGS-88358](https://issues.redhat.com/browse/OCPBUGS-88358): Allow VolumeSnapshot restore when parent PVC is deleted [#16602](https://github.com/openshift/console/pull/16602) * [Full changelog](https://github.com/openshift/console/compare/aa0cc6404fb385d57ad596e7f01f9a40472c3134...c09a410a1301c74a489d3771df7174e5ea6c734f) ### [haproxy-router](https://github.com/openshift/router/tree/dc4c01d494f572773a05e82bffd19c2cdaf8dce9) * [OCPBUGS-86718](https://issues.redhat.com/browse/OCPBUGS-86718): Strip X-SSL-* headers for plain HTTP [#795](https://github.com/openshift/router/pull/795) * [Full changelog](https://github.com/openshift/router/compare/f4c2ba80abb1fb3694a6b2ae0be2e5c898572632...dc4c01d494f572773a05e82bffd19c2cdaf8dce9) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/59524130bbc7ffc63b1c2f7dbd1cd24882e447d3) * [OCPBUGS-88334](https://issues.redhat.com/browse/OCPBUGS-88334): Skip chrony-wait on first node join [#6178](https://github.com/openshift/machine-config-operator/pull/6178) * [OCPBUGS-88335](https://issues.redhat.com/browse/OCPBUGS-88335): daemon: don't pull/extract extensions for all OS updates [#6179](https://github.com/openshift/machine-config-operator/pull/6179) * [OCPBUGS-86998](https://issues.redhat.com/browse/OCPBUGS-86998): configure-ovs: copy lldp mode to br-ex port [#6134](https://github.com/openshift/machine-config-operator/pull/6134) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/507538ada4b9261a9260aef93be7518993dfdcf1...59524130bbc7ffc63b1c2f7dbd1cd24882e447d3) ### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/f47b7a53457d81d4ecf7e862819454054bb4216d) * [OCPBUGS-88396](https://issues.redhat.com/browse/OCPBUGS-88396): CVE-2026-44487 bump axios to 1.16.0 [#999](https://github.com/openshift/monitoring-plugin/pull/999) * [OCPBUGS-84290](https://issues.redhat.com/browse/OCPBUGS-84290): bump follow-redirects to 1.16.0 [#987](https://github.com/openshift/monitoring-plugin/pull/987) * [OCPBUGS-84828](https://issues.redhat.com/browse/OCPBUGS-84828), [OCPBUGS-84991](https://issues.redhat.com/browse/OCPBUGS-84991), [OCPBUGS-85007](https://issues.redhat.com/browse/OCPBUGS-85007), [OCPBUGS-85037](https://issues.redhat.com/browse/OCPBUGS-85037): Update Axios to v1.15.2 [#982](https://github.com/openshift/monitoring-plugin/pull/982) * [Full changelog](https://github.com/openshift/monitoring-plugin/compare/462c78890ffb636e05d91d41ca718bb3c81da4cf...f47b7a53457d81d4ecf7e862819454054bb4216d) ### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/76483af58590e3e73cc713a477b506ff404b604b) * [OCPBUGS-88313](https://issues.redhat.com/browse/OCPBUGS-88313): Trim subnet input in UDN creation form [#430](https://github.com/openshift/networking-console-plugin/pull/430) * [Full changelog](https://github.com/openshift/networking-console-plugin/compare/268037d76fd97d29f39eae2f25f0a2b2910cb30e...76483af58590e3e73cc713a477b506ff404b604b) ### [tests](https://github.com/openshift/origin/tree/9a35db21312438c6097d6bb8110e077cc159d629) * [OCPBUGS-78330](https://issues.redhat.com/browse/OCPBUGS-78330), [OCPBUGS-82146](https://issues.redhat.com/browse/OCPBUGS-82146), [OCPBUGS-85550](https://issues.redhat.com/browse/OCPBUGS-85550), [OCPBUGS-88295](https://issues.redhat.com/browse/OCPBUGS-88295), [OCPBUGS-88297](https://issues.redhat.com/browse/OCPBUGS-88297), [OCPBUGS-88320](https://issues.redhat.com/browse/OCPBUGS-88320), [OCPBUGS-88322](https://issues.redhat.com/browse/OCPBUGS-88322), [OCPBUGS-88324](https://issues.redhat.com/browse/OCPBUGS-88324): Backport noOLM Gateway API test coverage and upgrade tests [#31232](https://github.com/openshift/origin/pull/31232) * [OCPBUGS-88328](https://issues.redhat.com/browse/OCPBUGS-88328): Fix Pod.Create() to use --local flag for template proc… [#31269](https://github.com/openshift/origin/pull/31269) * [Full changelog](https://github.com/openshift/origin/compare/4cc131780d8ec7338e12105477a46b137b670bcb...9a35db21312438c6097d6bb8110e077cc159d629)