RHBA-2026:6561 - Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform release 4.21.9 is now available with updates to packages and images that fix several bugs.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.

This advisory contains the container images for Red Hat OpenShift Container Platform 4.21.9. See the following advisory for the RPM packages for this release:

https://access.redhat.com/errata/RHBA-2026:6557

Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:

https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/

Solution

For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions
on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/

You can download the oc tool and use it to inspect release image metadata
for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests
can be found at
https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.

The sha values for the release are as follows:

(For x86_64 architecture)
The image digest is sha256:7000f41b49c638e64d008be885b8d9e68c34f3558acb6b7bf920f4aaf22da425

(For s390x architecture)
The image digest is sha256:614d12a9c36610aa5747d65b91c988b0d85ef6148ad30f24ad0b665fe7f81046

(For ppc64le architecture)
The image digest is sha256:f49c36df4919b78c121be6cbcd4730ec74091dc917b73e7fb3c53b071e2f376d

(For aarch64 architecture)
The image digest is sha256:b50f59749368f77db1df49de9d6b2f64547ee24f5e670bc2a190b6fb51b0de86

All OpenShift Container Platform 4.21 users are advised to upgrade to these updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html-single/updating_clusters/index#updating-cluster-cli.

Affected Products

• Red Hat OpenShift Container Platform

Fixes

• OCPBUGS-76375 - [ 4.21] E2E: LLC: Add tests related to odd cpus
• OCPBUGS-77445 - [IBMCloud] MAPI Machine
• OCPBUGS-77464 - [4.22] Add test case to check Infrastructure pods affinity
• OCPBUGS-77871 - event socket not recovering after cloud-event-proxy process crash
• OCPBUGS-77900 - Adding more tested arm instances to Tested instance types for AWS on 64-bit ARM infrastructures
• OCPBUGS-78012 - [4.21] Snapshots of 'disk.csi.azure.com' UltraSSD_LRS PVs periodically exceed the hard coded 10 minute timeout
• OCPBUGS-78164 - [openshift-4.21] dpu-intel-ipu-p4sdk can't be built hermetically
• OCPBUGS-78188 - [OVE] Add a flag to provide custom appliance image
• OCPBUGS-78199 - CCO reads the wrong record of infrastructure sometimes
• OCPBUGS-78201 - Cluster Autoscaler scale-down blocked by resource utilization threshold exceeded
• OCPBUGS-78308 - “Import from Git” should not force HTTPS/443 for Git providers (GitHub/GitLab/Bitbucket)
• OCPBUGS-78536 - CLONE - [image-customization-controller] network data is silently discarded if there's no 'nmstate' key
• OCPBUGS-78542 - useHistory not a function in Routes and Services page in networking-console-plugin
• OCPBUGS-78548 - 4.21- Custom serviceAccountIssuer unsets service-account-jwks-uri
• OCPBUGS-78599 - [release-4.21] page query param persists when changing project
• OCPBUGS-78600 - [release-4.21] InstallPlan details page > Components tab layout issue
• OCPBUGS-78771 - [release-4.21] Placeholder bug for branch sync
• OCPBUGS-78779 - Container azure-inject-credentials does not set readOnlyRootFilesystem: true
• OCPBUGS-78799 - Search page 404s when returning OLM resources
• OCPBUGS-78835 - [release-4.21] Make bootMACAddress optional for virtual media BMC drivers when inspection is enabled
• OCPBUGS-78929 - The deployment console-conversion-webhook doesn't get removed when upgrading from 4.16 to higher versions
• OCPBUGS-78933 - Control Plane Operator fails to reconcile on vanilla Kubernetes on IBMCloud due to missing Route API
• OCPBUGS-79035 - [release-4.21] OpenShift Lightspeed "Import to console" action fails on 4.20+
• OCPBUGS-79074 - [GCP] installing with m3 machine types failed with error like 'failed to create install config: [controlPlane.platform.gcp.type: Not found: "m3"'
• OCPBUGS-79374 - [release-4.21] parseIPList logs "empty list found" at V(0) causing excessive log spam
• OCPBUGS-79378 - IPI Shared VPC + UserProvisionedDNS uses host project for Compute Addresses
• OCPBUGS-79400 - [release-4.21]Catalog operator pod crashed during SNO cluster installation
• OCPBUGS-79426 - [Automated] Update AMI Whitelist
• OCPBUGS-79482 - mco failed at bootimage update with "Error retrieving lease lock" when vcenter dns can not be resolved transitorily
• OCPBUGS-79533 - [release-4.21] DataViewTextFilter doesn't support keyboard shortcut
• OCPBUGS-81291 - [release-4.21] - add jiazha to approvers
• OCPBUGS-81311 - [release-4.21]Fix golangci-lint timeout in CI

CVEs

(none)

References

(none)