RHBA-2026:2637 - Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform release 4.21.2 is now available with updates to packages and images that fix several bugs.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.

This advisory contains the container images for Red Hat OpenShift Container Platform 4.21.2. See the following advisory for the RPM packages for this release:

https://access.redhat.com/errata/RHBA-2026:2630

Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:

https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/

Solution

For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions
on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/

You can download the oc tool and use it to inspect release image metadata
for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests
can be found at
https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.

The sha values for the release are as follows:

(For x86_64 architecture)
The image digest is sha256:ed3b2be8d2673f8669ba2a6d4951011b9b4d52eb4a28eb46ed87c05d175cc196

(For s390x architecture)
The image digest is sha256:e4f7b42df53f281139c8e8661a0dfd0f91e492491b59b5eb7dee8dd1a5349aae

(For ppc64le architecture)
The image digest is sha256:01f668412a648f5bcba76d10ac2f08f5d0113749efb94e6f37876f8c6bfc14ac

(For aarch64 architecture)
The image digest is sha256:4ff297feccb71d6a992a176c0405e55247a13abaa36379c26d1502b983aa205c

All OpenShift Container Platform 4.21 users are advised to upgrade to these updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html-single/updating_clusters/index#updating-cluster-cli.

Fixes

• OCPBUGS-49992 - OVS bridge created through OCP Console does not include `allow-extra-patch-ports: true`
• OCPBUGS-55399 - cluster-node-tuning-operator Pod of the hosted cluster is not listening on 60000 port which makes the target to be down
• OCPBUGS-58397 - Unable to configure External evictionStrategy on HyperShift NodePool VMs
• OCPBUGS-60823 - Networking -> Routes and NetworkPolicies creation form YAML view content reload and revert
• OCPBUGS-60931 - The progressing condition won't be changed when the gathering pod is deleted accidentally
• OCPBUGS-61244 - ingress-node-firewall-operator-Incorrect image references in 4.21 branch - ART
• OCPBUGS-61548 - Items in action list should be disabled on one Network Attachment Definition details page
• OCPBUGS-61729 - ExternalOIDC tests - retry route creations
• OCPBUGS-61730 - Update ExternalOIDC payload tests to use proper e2e image process
• OCPBUGS-62295 - HAProxy timeouts are too long
• OCPBUGS-62307 - The deployment console-conversion-webhook doesn't get removed when upgrading from 4.16 to higher versions
• OCPBUGS-62635 - cluster operator olm reported Progressing=True with reason=CatalogdDeploymentCatalogdControllerManager_Deploying or reason=OperatorcontrollerDeploymentOperatorControllerControllerManager_Deploying for a node reboot
• OCPBUGS-65496 - console ClusterOperator relatedObjects missing ClusterRole
• OCPBUGS-66154 - HyperShift documentation missing OAuth serving certificate configuration
• OCPBUGS-66374 - Some VMs fail RAM validations because they cannot report physical memory
• OCPBUGS-72414 - Component Readiness: [sig-network] Networking IPerf2 [Feature:Networking-Performance] should run iperf2
• OCPBUGS-74145 - nodeip-configuration not enabled on platform type external
• OCPBUGS-74181 - SCCs Missing “image” as supported volume type
• OCPBUGS-74265 - Cluster Operator kube-scheduler did not report Progressing=True during a cluster update
• OCPBUGS-74301 - csi-snapshot-controller-operator fails to start when placed on HCP guest cluster
• OCPBUGS-74489 - [4.21] clusteroperator/etcd blips Degraded=True during upgrade test
• OCPBUGS-74569 - [4.21] openshift-cluster-csi-drivers vmware-vsphere-csi-driver-operator-metrics endpoint 8445 port should return 401 instead 500
• OCPBUGS-74893 - Add hypershift.openshift.io/nodepool-globalps-enabled label to be ignored in cluster-autoscaler deployment
• OCPBUGS-74975 - [4.21] Kubelet startup times out waiting for hostname resolution
• OCPBUGS-74998 - [release-4.21] Subscription details page kebab menu is empty
• OCPBUGS-76266 - Remove collect-profiles cronjob [4.21]
• OCPBUGS-76285 - ovn-ipsec-host creates duplicate openssl attribute
• OCPBUGS-76356 - 4.21 enables short name mode by default
• OCPBUGS-76359 - Update AMI Whitelist
• OCPBUGS-76389 - [release-4.21] Subscrption details page renders a kebab button instead of Actions button

CVEs

(none)

References

(none)