# 4.21.16

Created: 2026-05-14 10:55:40 +0000 UTC

Image Digest: `sha256:fb86c09b7f3e249c79b5b8d753a8cd8f419b7dec84c073eab63ebd12a4708798`


## Changes from 4.21.15

### Components

* Kubectl 1.34.1
* Kubernetes upgraded from 1.34.6 to 1.34.7
* Kubernetes Tests 1.34.1
* Red Hat Enterprise Linux CoreOS 10.2.20260423-0


### Rebuilt images without code change

* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [e5713826](https://github.com/openshift/assisted-installer-agent/commit/e57138265957c81b33d3ac13078d35f6ca07069d) `sha256:1792c8b1258d4fe59797b814ff2708d906c0bc0e19fd85c825197bf1de4b2127`
* [docker-builder](https://github.com/openshift/builder) git [48fce231](https://github.com/openshift/builder/commit/48fce231bac118a63992f466acc8b29a29e1ddde) `sha256:38520533a3960cd35c92da72b19fe644e8788be63af203aeb73de448f96eec41`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [f0ae9d12](https://github.com/openshift/driver-toolkit/commit/f0ae9d12ca7e3adf594ae34e394b1ea003daa4ad) `sha256:ef730a91932609ef344898f12538947dbd2c13af10c8f8448bf2662d5ab022b7`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [9a8e96a6](https://github.com/openshift/machine-os-images/commit/9a8e96a60bb6d8e3c86c2780fd4212e80f5d28e5) `sha256:d2a68564a98d13a139fd072001b2406da8fffc7d526695d90544a07da497e02a`
* [metallb-frr](https://github.com/openshift/frr) git [c82bfaad](https://github.com/openshift/frr/commit/c82bfaad01b196e12f00622a9a609d87e0a56701) `sha256:feea47426eb0922fcf6dbf33bbe619a8abcafce0fc8fb4ae8d8a90412b4900b3`
* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [908df025](https://github.com/openshift/monitoring-plugin/commit/908df0253d40b38864d24fc24de17f4598db24ba) `sha256:248cfd7b27b4c60b22d40b73615480e8f342dc5a1e7796244ef0326542fd9321`
* [network-tools](https://github.com/openshift/network-tools) git [d6717e45](https://github.com/openshift/network-tools/commit/d6717e453a098d551c9e2d2868e1f5317c41e688) `sha256:cce64b2a7fad21d1bf507d9a600699ac387e44f66154399e96bf03dbd2907ef1`
* [networking-console-plugin](https://github.com/openshift/networking-console-plugin) git [268037d7](https://github.com/openshift/networking-console-plugin/commit/268037d76fd97d29f39eae2f25f0a2b2910cb30e) `sha256:b6470a4728e209224369db9a2bb4d320ec9ca919c7893f13590ae735ac890303`
* [rhel-coreos-10](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:95b0d92cadd9c7886fa655e949db4907737e4ce1c3342c1f96d0e5185a025379`
* [rhel-coreos-10-extensions](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:53090ae26b944efcba21f1bd188953589e086cea50edd4134ae2f94f45cf4a39`
* [tools](https://github.com/openshift/oc) git [9d9df34c](https://github.com/openshift/oc/commit/9d9df34c46c9deba8c291a2a084de5724c0bd820) `sha256:26392d4609c0f871e31539615dfc563ff5f099e194e3fbf3947acfb80ec0b4fb`


### [aws-cloud-controller-manager, aws-cluster-api-controllers, aws-ebs-csi-driver, aws-ebs-csi-driver-operator, aws-machine-controllers, aws-pod-identity-webhook, azure-cloud-controller-manager, azure-cloud-node-manager, azure-cluster-api-controllers, azure-disk-csi-driver, azure-disk-csi-driver-operator, azure-file-csi-driver, azure-file-csi-driver-operator, azure-machine-controllers, azure-workload-identity-webhook, hyperkube, ibm-cloud-controller-manager, ibm-vpc-block-csi-driver, ibm-vpc-block-csi-driver-operator, ibmcloud-machine-controllers, ironic, ironic-agent, ironic-machine-os-downloader, ironic-static-ip-manager, kube-proxy, machine-image-customization-controller, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, vsphere-cloud-controller-manager, vsphere-cluster-api-controllers, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector](https://github.com/openshift/kubernetes/tree/ae1604b0cb7cc72e353d0b8311c6d62c34143661)

* "OCPBUGS-83608: Bump to k8s v1.34.7" [#2647](https://github.com/openshift/kubernetes/pull/2647)
* [Full changelog](https://github.com/openshift/kubernetes/compare/dfffacdf0ad6e9aa75664c7b3167dd2ddbfc17ba...ae1604b0cb7cc72e353d0b8311c6d62c34143661)


### [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider/tree/887615ffa8a595ee3693e92fa56db4dd30f20f73)

* [OCPBUGS-80711](https://issues.redhat.com/browse/OCPBUGS-80711): Bump google.golang.org/grpc to v1.79.3 [#40](https://github.com/openshift/aws-encryption-provider/pull/40)
* [Full changelog](https://github.com/openshift/aws-encryption-provider/compare/19e7b623429799c9c549690a1b5ab499844411f9...887615ffa8a595ee3693e92fa56db4dd30f20f73)


### [azure-service-operator](https://github.com/openshift/azure-service-operator/tree/5e84c83176d7630f70802b35cb10cdf2b60fd6d3)

* [OCPBUGS-80713](https://issues.redhat.com/browse/OCPBUGS-80713): Bump google.golang.org/grpc to v1.79.3 [#28](https://github.com/openshift/azure-service-operator/pull/28)
* [Full changelog](https://github.com/openshift/azure-service-operator/compare/482c3a3f0b4e2668f092553585d15c3024016c4e...5e84c83176d7630f70802b35cb10cdf2b60fd6d3)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/9a415c497e70d5234c473325cf17aeef78c03544)

* [OCPBUGS-84225](https://issues.redhat.com/browse/OCPBUGS-84225): ibmcloud: bump vpc-go-sdk and capibm [#10514](https://github.com/openshift/installer/pull/10514)
* [Full changelog](https://github.com/openshift/installer/compare/a8bea03c72112c0f859af3694676da9483baec99...9a415c497e70d5234c473325cf17aeef78c03544)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/9dd5eba07922bb84bf1ec2b16cbbedd6ad195874)

* [OCPBUGS-80749](https://issues.redhat.com/browse/OCPBUGS-80749): Bump google.golang.org/grpc to v1.79.3 [#293](https://github.com/openshift/cluster-api/pull/293)
* [Full changelog](https://github.com/openshift/cluster-api/compare/a957484acb353220da0d3062867168d24494a2b6...9dd5eba07922bb84bf1ec2b16cbbedd6ad195874)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/0fb275ca52c86245ce8914cede6c6724cbb31316)

* [OCPBUGS-80753](https://issues.redhat.com/browse/OCPBUGS-80753): Bump google.golang.org/grpc to v1.79.3 [#550](https://github.com/openshift/cluster-capi-operator/pull/550)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/80728a61725bb6ec7f4515c2ac2b3a249f3c5742...0fb275ca52c86245ce8914cede6c6724cbb31316)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/10012737e9b23528357c130184ef4d890ae8ea33)

* [OCPBUGS-84336](https://issues.redhat.com/browse/OCPBUGS-84336): fix(tnf): align Pacemaker kubelet and etcd retry pacing [#1604](https://github.com/openshift/cluster-etcd-operator/pull/1604)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/5c38f917a43058c73479673a05d4e782524a3a41...10012737e9b23528357c130184ef4d890ae8ea33)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/a6f7d8ab2efb5e37d848620d5fc8db37a3cf5d58)

* [OCPBUGS-85016](https://issues.redhat.com/browse/OCPBUGS-85016): e2e: Add irqbalance StartLimitBurst >= 100 config test [#1505](https://github.com/openshift/cluster-node-tuning-operator/pull/1505)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/9782f0fb3824689caeaa9c48a54dd58d39cdedb4...a6f7d8ab2efb5e37d848620d5fc8db37a3cf5d58)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/03bedb913bce9c7deabf7868e5cbefc57cf3490b)

* [OCPBUGS-80769](https://issues.redhat.com/browse/OCPBUGS-80769): Bump google.golang.org/grpc to v1.79.3 [#197](https://github.com/openshift/cluster-olm-operator/pull/197)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/e8a985a1cd375c1d83e951a1586d11203a1204e2...03bedb913bce9c7deabf7868e5cbefc57cf3490b)


### [console](https://github.com/openshift/console/tree/6bedf3939d52ca255bc02924daf69c2f916ce487)

* NO-JIRA: enable multi-architecture yarn builds [#16420](https://github.com/openshift/console/pull/16420)
* [OCPBUGS-85040](https://issues.redhat.com/browse/OCPBUGS-85040): Remove PII from events [#16401](https://github.com/openshift/console/pull/16401)
* [OCPBUGS-84967](https://issues.redhat.com/browse/OCPBUGS-84967): Add bottom pagination to ConsoleDataView for mobile responsiveness [#16396](https://github.com/openshift/console/pull/16396)
* [OCPBUGS-84858](https://issues.redhat.com/browse/OCPBUGS-84858): Fix ConsoleDataView filter order: Name and Label shoul… [#16386](https://github.com/openshift/console/pull/16386)
* [Full changelog](https://github.com/openshift/console/compare/26094cc20bd77a26431e8ce3cebed61f91493557...6bedf3939d52ca255bc02924daf69c2f916ce487)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/ebfd16d227b3af490f4327a8a040f6c9657a3b01)

* [OCPBUGS-80783](https://issues.redhat.com/browse/OCPBUGS-80783): CVE-2026-33186: bump google.golang.org/grpc v1.79.3 [#176](https://github.com/openshift/csi-driver-nfs/pull/176)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/49f2d86fb6172d9d8909ed0f70cb3bc71a4f7c01...ebfd16d227b3af490f4327a8a040f6c9657a3b01)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/ac55db6fcd6f53ef1c26e3d85c511dbb18bc4d73)

* [OCPBUGS-80785](https://issues.redhat.com/browse/OCPBUGS-80785): Bump google.golang.org/grpc to v1.79.3 [#132](https://github.com/openshift/csi-external-provisioner/pull/132)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/f18190fb8aa26bdcb4ceb57cdd6cf77b5488ed58...ac55db6fcd6f53ef1c26e3d85c511dbb18bc4d73)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/fe230b8a6407a06e1be9d6994a92ac8c5a43237d)

* [OCPBUGS-80805](https://issues.redhat.com/browse/OCPBUGS-80805): Bump google.golang.org/grpc to v1.79.3 [#287](https://github.com/openshift/cluster-api-provider-gcp/pull/287)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/e2d0c20eab31c513764507a6d8774de2aef3db2c...fe230b8a6407a06e1be9d6994a92ac8c5a43237d)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/49b8eb1bbdd364b8144dee270a88cace41271e4d)

* [OCPBUGS-80828](https://issues.redhat.com/browse/OCPBUGS-80828): Bump gRPC-Go package for CVE fix [#154](https://github.com/openshift/machine-api-provider-gcp/pull/154)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/91f71c9adfd6b715a6ef340bb43ea5e1a8b44245...49b8eb1bbdd364b8144dee270a88cace41271e4d)


### [insights-operator](https://github.com/openshift/insights-operator/tree/2bc8825afccf2456f95d8bfea097a528d072bd11)

* [OCPBUGS-80818](https://issues.redhat.com/browse/OCPBUGS-80818): Bump google.golang.org/grpc to v1.79.3 [#1285](https://github.com/openshift/insights-operator/pull/1285)
* [Full changelog](https://github.com/openshift/insights-operator/compare/687578c31a43faaeb971f99344e2acfd94a8abf6...2bc8825afccf2456f95d8bfea097a528d072bd11)


### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/ff4f3e2a6d2b0e8a860831b98733cff152cfddd3)

* [OCPBUGS-80716](https://issues.redhat.com/browse/OCPBUGS-80716): Bump google.golang.org/grpc to v1.79.3 [#61](https://github.com/openshift/kubernetes-metrics-server/pull/61)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/ed76a5e8051caae6519342ae189088b8ddd09979...ff4f3e2a6d2b0e8a860831b98733cff152cfddd3)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/66a56d4b66a1f36655a5726a0b60e9bfff538db2)

* [OCPBUGS-85286](https://issues.redhat.com/browse/OCPBUGS-85286): Fix Admin Ack message for azure/vsphere clusters upgrading to 4.22 [#6017](https://github.com/openshift/machine-config-operator/pull/6017)
* [OCPBUGS-85126](https://issues.redhat.com/browse/OCPBUGS-85126): Fix units rollback if update failure [#6008](https://github.com/openshift/machine-config-operator/pull/6008)
* [OCPBUGS-84941](https://issues.redhat.com/browse/OCPBUGS-84941): Fix ssh and password rollbacks [#5987](https://github.com/openshift/machine-config-operator/pull/5987)
* [OCPBUGS-84970](https://issues.redhat.com/browse/OCPBUGS-84970): Fix encapsulated IGN version [#5996](https://github.com/openshift/machine-config-operator/pull/5996)
* [OCPBUGS-84878](https://issues.redhat.com/browse/OCPBUGS-84878): Update AMI Whitelist [#5915](https://github.com/openshift/machine-config-operator/pull/5915)
* [OCPBUGS-84253](https://issues.redhat.com/browse/OCPBUGS-84253): improve JSON unmarshalling for secret decoding [#5877](https://github.com/openshift/machine-config-operator/pull/5877)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/bc74feed8e96d179347b8ee0c102280c050d5e24...66a56d4b66a1f36655a5726a0b60e9bfff538db2)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/f4f439d4ce40c1175188c81591284dcc9fe6facf)

* UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.13 into release-4.21 [#394](https://github.com/openshift/cluster-api-provider-openstack/pull/394)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/e1c0f2f9e2e70843d5c42dfe3bddf70530a97b0f...f4f439d4ce40c1175188c81591284dcc9fe6facf)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/bed9d823d441b1722e023f9f7f9b2cd56f79e2b2)

* [OCPBUGS-80847](https://issues.redhat.com/browse/OCPBUGS-80847), [OCPBUGS-80848](https://issues.redhat.com/browse/OCPBUGS-80848), [OCPBUGS-80849](https://issues.redhat.com/browse/OCPBUGS-80849): Bump google.golang.org/grpc to v1.79.3 for CVE-2026-33186[Release-4.21] [#1289](https://github.com/openshift/operator-framework-olm/pull/1289)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/d7462e05f60c0ad13a2dce6ea516cbc624cae203...bed9d823d441b1722e023f9f7f9b2cd56f79e2b2)


### [prometheus](https://github.com/openshift/prometheus/tree/78974c3bbd559d91e2c9cdd627c9ffdeca4f94f3)

* [OCPBUGS-80855](https://issues.redhat.com/browse/OCPBUGS-80855): Bump google.golang.org/grpc to v1.79.3 [#309](https://github.com/openshift/prometheus/pull/309)
* [Full changelog](https://github.com/openshift/prometheus/compare/59769d912ceab62bf0b7325c505ed463e64ab734...78974c3bbd559d91e2c9cdd627c9ffdeca4f94f3)


### [telemeter](https://github.com/openshift/telemeter/tree/b79b872a65edd845891db70f6c9a184458a178da)

* [OCPBUGS-80868](https://issues.redhat.com/browse/OCPBUGS-80868): Bump google.golang.org/grpc to v1.79.3 [#589](https://github.com/openshift/telemeter/pull/589)
* [OCPBUGS-81817](https://issues.redhat.com/browse/OCPBUGS-81817): [release-1.21] Fix CVE-2026-34986 [#593](https://github.com/openshift/telemeter/pull/593)
* [Full changelog](https://github.com/openshift/telemeter/compare/a54acdfeb2d62c79516d099e37f3319205c903a7...b79b872a65edd845891db70f6c9a184458a178da)


### [tests](https://github.com/openshift/origin/tree/61dad4d6acf7089de0a1dca1aa0aba32bcab03ff)

* [OCPBUGS-84655](https://issues.redhat.com/browse/OCPBUGS-84655): fix openshift/network/third-party suite selecting zero tests [#31091](https://github.com/openshift/origin/pull/31091)
* [OCPBUGS-84978](https://issues.redhat.com/browse/OCPBUGS-84978): Skip image-registry operator tests for Libvirt platform in upgrade jobs. [#31123](https://github.com/openshift/origin/pull/31123)
* [OCPBUGS-84947](https://issues.redhat.com/browse/OCPBUGS-84947): test: add monitortest to detect pods stuck in Pending state [#31117](https://github.com/openshift/origin/pull/31117)
* [OCPBUGS-84947](https://issues.redhat.com/browse/OCPBUGS-84947): Add [Late] test to collect CRI-O goroutine dumps via SIGUSR1 [#31118](https://github.com/openshift/origin/pull/31118)
* [Full changelog](https://github.com/openshift/origin/compare/34379498817f3123c8e43433e7f1b2b7da6be429...61dad4d6acf7089de0a1dca1aa0aba32bcab03ff)