# 4.21.19
Created: 2026-06-04 13:37:13 +0000 UTC
Image Digest: `sha256:d35c97623e5b5e1c43a4f27de6946831eaf892584dc25f5675cb0a1800dd418e`
## Changes from 4.21.18
### Components
* Kubectl 1.34.1
* Kubernetes 1.34.8
* Kubernetes Tests 1.34.1
* Red Hat Enterprise Linux CoreOS 10.2.20260521-0
### FeatureGate Changes
| FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: |
| GatewayAPIWithoutOLM
(0 tests)| | | | | | |
### Rebuilt images without code change
* [baremetal-installer](https://github.com/openshift/installer) git [3f855c5b](https://github.com/openshift/installer/commit/3f855c5bbfa977e040bfe98776299a6afa798674) `sha256:66c134d9d84031d67eed7b89f68a23a2c74724edb6fa578a5a45bc306d1c53b7`
* [cli](https://github.com/openshift/oc) git [fdf8daba](https://github.com/openshift/oc/commit/fdf8dabaedf6cf89f60547f57cc5f5f3e8d8798b) `sha256:853bddd0db1e5e23f9a164f50749135841a84217e256d9cce0f20d088656ee19`
* [cli-artifacts](https://github.com/openshift/oc) git [fdf8daba](https://github.com/openshift/oc/commit/fdf8dabaedf6cf89f60547f57cc5f5f3e8d8798b) `sha256:9af81bf4eab74870e6a6c9382b0a316a37819c6591b59024aca913d542ce9f4d`
* [deployer](https://github.com/openshift/oc) git [fdf8daba](https://github.com/openshift/oc/commit/fdf8dabaedf6cf89f60547f57cc5f5f3e8d8798b) `sha256:e9e88736eae0a5f7c007a8331855873a2773f5c32cb07bf08b56174fd6cd4630`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [f0ae9d12](https://github.com/openshift/driver-toolkit/commit/f0ae9d12ca7e3adf594ae34e394b1ea003daa4ad) `sha256:ee524fb5a3cd1b423d006937dc2cf99dc4fefb9892632dd4c9d0452c21a07d05`
* [etcd](https://github.com/openshift/etcd) git [806f690e](https://github.com/openshift/etcd/commit/806f690e1f140e0aea2eb05ef5f288b756b62895) `sha256:7aa6bda744fb5735e34abaa7eb1d4ba07b0fe433473d3187727552043e5f7cef`
* [hyperkube](https://github.com/openshift/kubernetes) git [eab2218b](https://github.com/openshift/kubernetes/commit/eab2218b931d0c20740d6259df59f242abf32ef7) `sha256:33acfe5d260d87bc44cb693e2817c8a1ee61c5eb5f02c96587d88ee168aab456`
* [installer](https://github.com/openshift/installer) git [3f855c5b](https://github.com/openshift/installer/commit/3f855c5bbfa977e040bfe98776299a6afa798674) `sha256:727d7184756040ae9043fef596f64f262e2dcdbb5d38b78372a72ffaab0e3681`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [e9019e5f](https://github.com/openshift/machine-os-images/commit/e9019e5f819c44726e9ff5e1ec8fdfad9fb314fd) `sha256:888a473d504f7e1ddbbc179ce0fcc48ff536b14328c22ef4826728f5a16383a5`
* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [462c7889](https://github.com/openshift/monitoring-plugin/commit/462c78890ffb636e05d91d41ca718bb3c81da4cf) `sha256:df5b3856720fe1fe34325ecb8093344aaa32d8588b1f3d24e1f9cb5fed8700a9`
* [must-gather](https://github.com/openshift/must-gather) git [eeb267f4](https://github.com/openshift/must-gather/commit/eeb267f4b7f8016f13d12866013cad43c7403482) `sha256:8830ad37a21ea69105182859a98409ea1c3b1714c3012ae731af2d5d54dffd4a`
* [network-tools](https://github.com/openshift/network-tools) git [d6717e45](https://github.com/openshift/network-tools/commit/d6717e453a098d551c9e2d2868e1f5317c41e688) `sha256:9b713d523b053d1ae3c62ef21d72808f50a38593e131d03d137050474b722404`
* [networking-console-plugin](https://github.com/openshift/networking-console-plugin) git [268037d7](https://github.com/openshift/networking-console-plugin/commit/268037d76fd97d29f39eae2f25f0a2b2910cb30e) `sha256:40b1c50d3a41aada6d0a274b7e6936d6f6e7e61901458b646af22676a0ee3d00`
* [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes) git [d586f851](https://github.com/openshift/ovn-kubernetes/commit/d586f851c25d8f7cd04840cda79a0a6a98ea8485) `sha256:a807089626f88df81fe06eb9bb1f45c0810b8ed62912cab2b83bb7a42ac2e2e8`
* [rhel-coreos](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:35a1e983639d5cc65716eb88e96aa33f8bd5c2856024ed5217456201c83fe215`
* [rhel-coreos-10](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:3fc409169fe1c5db1391ac1acff58d1a0a5897f05fbbfffc67164386a3af0032`
* [rhel-coreos-10-extensions](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:1c5913e23785e98b9905bf558201fbeb899435387c0e48dfa850322fd4bf4a2a`
* [rhel-coreos-extensions](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:625507510e228c54fe55515b3bf4a16b1ffe08f5a6bb5a59331b655ed86b80dd`
* [tests](https://github.com/openshift/origin) git [c2da98a5](https://github.com/openshift/origin/commit/c2da98a5a8f0e23886ac536fbeb81140e798fb71) `sha256:b79177ad0bf455a69973858addfffc1eff78742268faf29d1619e82836699c81`
* [tools](https://github.com/openshift/oc) git [fdf8daba](https://github.com/openshift/oc/commit/fdf8dabaedf6cf89f60547f57cc5f5f3e8d8798b) `sha256:785ac5c865797686af13ace3f673dbb30d565895cd0d2ab259171dd0d2980097`
### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/154ae10f442b7d40f14492c5973cd3459791d00f)
* [OCPBUGS-81982](https://issues.redhat.com/browse/OCPBUGS-81982): Bump go-jose/go-jose/v4@v4.1.4 [#1027](https://github.com/openshift/cloud-credential-operator/pull/1027)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/693d9f3485b21cf128fa379eabd6787737fa56ad...154ae10f442b7d40f14492c5973cd3459791d00f)
### [cluster-config-api](https://github.com/openshift/api/tree/1d79f30d4668393dc34e9b423ec6904645503c58)
* [OCPBUGS-85149](https://issues.redhat.com/browse/OCPBUGS-85149): Backport GatewayAPIWithoutOLM feature gate as disabled [#2864](https://github.com/openshift/api/pull/2864)
* [Full changelog](https://github.com/openshift/api/compare/b66d75611553df4827e899e5eaa4d6321ed9f44c...1d79f30d4668393dc34e9b423ec6904645503c58)
### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/898d6bd9f6ab96093b8d74e5a7dbfeff9a5cf257)
* [OCPBUGS-84336](https://issues.redhat.com/browse/OCPBUGS-84336): fix(tnf): gate dual-replica setup and keep retrying [#1620](https://github.com/openshift/cluster-etcd-operator/pull/1620)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/10012737e9b23528357c130184ef4d890ae8ea33...898d6bd9f6ab96093b8d74e5a7dbfeff9a5cf257)
### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/3a861ed50a5755aa9eaf58d4e6c86d02729dd9c0)
* [OCPBUGS-74373](https://issues.redhat.com/browse/OCPBUGS-74373): Remove restriction of unmanaged x-k8s.io [#1446](https://github.com/openshift/cluster-ingress-operator/pull/1446)
* [OCPBUGS-86027](https://issues.redhat.com/browse/OCPBUGS-86027): Fix logging for unmanaged controllers [#1448](https://github.com/openshift/cluster-ingress-operator/pull/1448)
* [OCPBUGS-80759](https://issues.redhat.com/browse/OCPBUGS-80759): Authorization bypass due to improper HTTP/2 path validation [#1441](https://github.com/openshift/cluster-ingress-operator/pull/1441)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/6c70966cd2011f861843e85efb8bf08c3a938fe1...3a861ed50a5755aa9eaf58d4e6c86d02729dd9c0)
### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/d78172d1fffdcd29cb3ca6626c78ebecc8e2ef78)
* [OCPBUGS-86809](https://issues.redhat.com/browse/OCPBUGS-86809): Requeue PerformanceStatus update when status write fails [#1524](https://github.com/openshift/cluster-node-tuning-operator/pull/1524)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/a6f7d8ab2efb5e37d848620d5fc8db37a3cf5d58...d78172d1fffdcd29cb3ca6626c78ebecc8e2ef78)
### [console](https://github.com/openshift/console/tree/402882702875b34bb4872c051808a35a67880346)
* [OCPBUGS-85674](https://issues.redhat.com/browse/OCPBUGS-85674): Prevent binary secret data corruption when editing [#16448](https://github.com/openshift/console/pull/16448)
* [OCPBUGS-79459](https://issues.redhat.com/browse/OCPBUGS-79459): CVE-2026-29063 Immutable.js: Improperly Controlled Mod… [#16503](https://github.com/openshift/console/pull/16503)
* [OCPBUGS-86427](https://issues.redhat.com/browse/OCPBUGS-86427): Fix Shipwright detail pages crashing with React error #310 [#16487](https://github.com/openshift/console/pull/16487)
* [OCPBUGS-86314](https://issues.redhat.com/browse/OCPBUGS-86314): Show empty state instead of 403 error for users without projects [#16478](https://github.com/openshift/console/pull/16478)
* [Full changelog](https://github.com/openshift/console/compare/28c6e026e4cc49aa470f755ae01a1acb4cd2935d...402882702875b34bb4872c051808a35a67880346)
### [console-operator](https://github.com/openshift/console-operator/tree/aee1a79b48a86e0feaef8ac72b5ec3c124429859)
* [NETOBSERV-2296](https://issues.redhat.com/browse/NETOBSERV-2296): add missing annotations on netobserv quickstart [#1096](https://github.com/openshift/console-operator/pull/1096)
* [Full changelog](https://github.com/openshift/console-operator/compare/4393afe88810c9db76fc6da1821787449e666ef4...aee1a79b48a86e0feaef8ac72b5ec3c124429859)
### [csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/20bb13fab3865444b7a4ae454dd234391c4d7e49)
* [OCPBUGS-85572](https://issues.redhat.com/browse/OCPBUGS-85572): Add init container for Manila node daemonset [#554](https://github.com/openshift/csi-operator/pull/554)
* [Full changelog](https://github.com/openshift/csi-operator/compare/5f294954dc029e0ed120243c3188af81df89d9e4...20bb13fab3865444b7a4ae454dd234391c4d7e49)
### [hypershift](https://github.com/openshift/hypershift/tree/d345a6af0fb9c22d2058ac98994afbcb41e24f6f)
* [OCPBUGS-86416](https://issues.redhat.com/browse/OCPBUGS-86416): add Konflux pipeline definitions for CPO 4.21 [#8607](https://github.com/openshift/hypershift/pull/8607)
* [OCPBUGS-86477](https://issues.redhat.com/browse/OCPBUGS-86477): [release-4.21] add CP pull-secret watches for in-place propagation [#8583](https://github.com/openshift/hypershift/pull/8583)
* [Full changelog](https://github.com/openshift/hypershift/compare/b5bc1c2f89e9cdbd5d0d1b1374674f5bcd45b76b...d345a6af0fb9c22d2058ac98994afbcb41e24f6f)
### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/0efd2f822814f9965ef6dc14b68f24eebcaca40d)
* Fix for OCPBUGS-81988: CVE-2026-34986 bump github.com/go-jose/go-jose [#143](https://github.com/openshift/kube-state-metrics/pull/143)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/ce6f3742ed123b671acd6de4d3605c3a7f644cf8...0efd2f822814f9965ef6dc14b68f24eebcaca40d)
### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/340c3847f293b8914ebef26d1e9b0a8ce2d2abd5)
* [OCPBUGS-86576](https://issues.redhat.com/browse/OCPBUGS-86576): Verify extension packages are installed [#6090](https://github.com/openshift/machine-config-operator/pull/6090)
* [OCPBUGS-84481](https://issues.redhat.com/browse/OCPBUGS-84481): MCS fallback to latest v3 [#5883](https://github.com/openshift/machine-config-operator/pull/5883)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/5aabf7ccb1f54f0c889a87b1670827f9b2d23461...340c3847f293b8914ebef26d1e9b0a8ce2d2abd5)
### [oc-mirror](https://github.com/openshift/oc-mirror/tree/f9812811fdc23a9baa72f075afe566caddfe2280)
* Fix for OCPBUGS-81971: CVE-2026-34986 github.com/go-jose/go-jose/v4 [#1426](https://github.com/openshift/oc-mirror/pull/1426)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/994deebef2836ca75003dd15372f7110d2448fa6...f9812811fdc23a9baa72f075afe566caddfe2280)
### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/40d1c0adfedeca36498a5d93d69aee96831c756d)
* [OCPBUGS-80854](https://issues.redhat.com/browse/OCPBUGS-80854): bump google.golang.org/grpc to v1.79.3 to fix CVE-2026-33186 [#98](https://github.com/openshift/cloud-provider-powervs/pull/98)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/969a04e9dcb4cdde10e3038a9e28d2e27548918d...40d1c0adfedeca36498a5d93d69aee96831c756d)