NO-ISSUE: rebase-release-4.20-4.20.0-0.nightly-2026-02-22-195517_amd64-2026-02-22_arm64-2026-02-23

[microshift-rebase-script]

amd64: 4.20.0-0.nightly-2026-02-22-195517
arm64: 4.20.0-0.nightly-arm64-2026-02-22-234452
prow job: https://prow.ci.openshift.org/view/gs/origin-ci-test/logs/periodic-ci-openshift-microshift-release-4.20-periodics-rebase-on-nightlies/2025783047386828800

• cluster-kube-apiserver-operator embedded-component 974542ae2ef86a631546b3a48fd0da3c2e3b74dd to f6bb470ca76bd37d533a5366321faa9f478c614a

  • 29d4a74 2026-01-20T22:44:35+00:00 SCC: allow image volume type for all SCCs

• cluster-kube-scheduler-operator embedded-component ad21ef032211c5455a3ba48c7147b27558204658 to 73d84b5bb0a5fc555c6c0f5cd0a9958a5139afaa

  • 6917d3b 2026-01-22T19:58:19+00:00 Add OPERATOR_IMAGE_VERSION to recovery container

• etcd embedded-component eac09c01677bb03daed156d407be27785fd61e0d to 05bca97760b1cfa1bcef11c0b1f1a5c4dab19709

  • 65251b30 2025-12-18T03:27:13+08:00 version: bump up to 3.5.26
  • 751f1628 2025-12-15T22:36:25-06:00 dependency: Bump golang.org/x/crypto from 0.38.0 to 0.45.0
  • 47f9b5aa 2025-12-10T09:37:59-05:00 server: cleanup zombie membership information
  • 5ff84215 2025-12-10T09:36:18-05:00 tests: setup two testcases to reproduce 20967 issue
  • a8ffc2e2 2025-12-06T21:32:18+08:00 Bump go to 1.24.11
  • 80e15b8f 2025-11-18T13:11:14+00:00 Fix a typo of 'etcdctl snapshot restore/status' commands
  • 8bdb0edc 2025-11-17T17:56:45+00:00 Print token fingerprint instead of the original tokens in log messages
  • e2eff772 2025-11-12T00:00:11-05:00 version: bump up to 3.5.25
  • 26c67519 2025-11-06T21:57:49-08:00 Bump from go1.24.9 to go1.24.10
  • 547d6f42 2025-11-06T19:37:43+00:00 Fix the '--force-new-cluster' can't clean up learners issue
  • 2cdacbc4 2025-11-06T19:35:12+00:00 Add an e2e test cases to reproduce the '--force-new-cluster' can't remove learners issue
  • 67ddeb51 2025-11-04T09:30:54-05:00 etcdutl: add --wal-dir for check-v2store

• kubernetes embedded-component 33a825ebe5da727e8ccce0fb3c9d33fce7c6bdd9 to b96a4039358613f770d20f5e4ce5125f66369521

  • f0c0d9f3a 2026-02-18T21:01:26+00:00 UPSTREAM: : hack/update-vendor.sh, make update and update image
  • 1bbdeea4f 2026-02-18T15:32:09-05:00 UPSTREAM: : manually resolve conflicts
  • 5adfc48e1 2026-02-10T12:54:00+00:00 Release commit for Kubernetes v1.33.8
  • 607a93617 2026-02-03T09:35:30+01:00 UPSTREAM: 136595: raise kubelet CSI init backoff to cover ~140s DNS delays
  • 9067f06e3 2026-01-30T11:13:21+01:00 Bump dependencies, images and versions used to Go 1.24.12 and distroless iptables
  • 7be92699e 2026-01-29T15:02:43-05:00 Apparently some EC2 images we use do not have /proc/net/nf_conntrack
  • 1479c62a2 2026-01-29T15:02:43-05:00 test: cleanup from review
  • 727969bb6 2026-01-29T15:02:43-05:00 test: Fix KubeProxy CLOSE_WAIT test for IPv6 environments
  • 2e3a2fa22 2026-01-29T15:02:41-05:00 test: Read /proc/net/nf_conntrack instead of using conntrack binary
  • c45940ecd 2026-01-28T11:49:07+01:00 csi: raise kubelet CSI init backoff to cover ~140s DNS delays
  • ba81d3040 2026-01-27T14:44:04+01:00 DRA scheduler: fix another root cause of double device allocation
  • 75fd186e7 2026-01-27T14:44:03+01:00 DRA scheduler: fix one root cause of double device allocation
  • dc42de643 2026-01-27T00:01:46+00:00 fix(kubelet): convert V().Error() to V().Info() for verbosity-aware logging
  • f00408bb4 2026-01-21T05:41:34+00:00 Fix for preferred dualstack and required dualstack in winkernel proxier.
  • 7a092c63d 2026-01-20T16:01:08-08:00 kubeadm: waiting for etcd learner member to be started before promoting during 'kubeadm join'
  • 7c5a9b983 2026-01-12T14:48:14+01:00 Add unit test with CSIDriver.SELinuxMount=false
  • aa6b40b2a 2026-01-12T14:48:14+01:00 Added e2e tests with disabled SELinux
  • 6e491604a 2026-01-12T14:48:14+01:00 Use only enqueuePod to add pods to the controller queue
  • 1c3b0b113 2026-01-12T14:48:13+01:00 Fix policy of Pods with unknown SELinux label
  • e6ae3c940 2026-01-12T14:48:13+01:00 selinux: add e2e test with a completed pod
  • d05bfe812 2026-01-12T14:48:13+01:00 Add new unit tests
  • 5602c5e6b 2026-01-12T14:48:13+01:00 Rework unit tests to builder pattern
  • 9222f08d2 2026-01-12T14:48:13+01:00 selinux: Do not report conflits with finished pods
  • f02a1fc35 2026-01-12T14:48:13+01:00 refactoring: use a common function to enqueue Pod
  • 6a783eb8f 2026-01-08T13:46:29+01:00 mark QuotaMonitor as not running and invalidate monitors list
  • 4e36355c5 2026-01-07T14:27:10+01:00 kubeadm: always retry Patch() Node API calls
  • 249d35bf4 2025-12-19T17:43:22+01:00 kubeadm: do not sort extraArgs alpha-numerically
  • 44193b0a7 2025-12-18T18:03:45+09:00 hack/lib/util.sh: support uutils' date command
  • 4978d948f 2025-12-17T16:31:15+02:00 Update pod resize test to accept new cpu.weight conversion
  • fc38c49c0 2025-12-09T14:59:10+00:00 Update CHANGELOG/CHANGELOG-1.33.md for v1.33.7
  • a7245cdf3 2025-12-09T14:35:21+00:00 Release commit for Kubernetes v1.33.7
  • 45feeb6a0 2025-12-05T11:47:07+01:00 Bump dependencies, images and versions used to Go 1.24.11 and distroless iptables
  • 4815a2894 2025-12-03T12:16:46-08:00 fix docker IP address detection for rsync
  • 46e99b718 2025-11-29T11:15:48+01:00 Bump dependencies, images and versions used to Go 1.24.10 and distroless iptables
  • f55ba2c

The change list was truncated. See scripts/auto-rebase/changelog.txt in the PR for the full details.

/label tide/merge-method-squash
/label backport-risk-assessed
/label jira/valid-bug

[microshift-rebase-script]

/verified by automatic-rebase

[openshift-ci-robot]

@microshift-rebase-script[bot]: This pull request explicitly references no jira issue.

Details

In response to this:

amd64: 4.20.0-0.nightly-2026-02-22-195517
arm64: 4.20.0-0.nightly-arm64-2026-02-22-234452
prow job: https://prow.ci.openshift.org/view/gs/origin-ci-test/logs/periodic-ci-openshift-microshift-release-4.20-periodics-rebase-on-nightlies/2025783047386828800

• cluster-kube-apiserver-operator embedded-component 974542ae2ef86a631546b3a48fd0da3c2e3b74dd to f6bb470ca76bd37d533a5366321faa9f478c614a

• 29d4a74 2026-01-20T22:44:35+00:00 SCC: allow image volume type for all SCCs

• cluster-kube-scheduler-operator embedded-component ad21ef032211c5455a3ba48c7147b27558204658 to 73d84b5bb0a5fc555c6c0f5cd0a9958a5139afaa

• 6917d3b 2026-01-22T19:58:19+00:00 Add OPERATOR_IMAGE_VERSION to recovery container

• etcd embedded-component eac09c01677bb03daed156d407be27785fd61e0d to 05bca97760b1cfa1bcef11c0b1f1a5c4dab19709

• 65251b30 2025-12-18T03:27:13+08:00 version: bump up to 3.5.26

• 751f1628 2025-12-15T22:36:25-06:00 dependency: Bump golang.org/x/crypto from 0.38.0 to 0.45.0

• 47f9b5aa 2025-12-10T09:37:59-05:00 server: cleanup zombie membership information

• 5ff84215 2025-12-10T09:36:18-05:00 tests: setup two testcases to reproduce 20967 issue

• a8ffc2e2 2025-12-06T21:32:18+08:00 Bump go to 1.24.11

• 80e15b8f 2025-11-18T13:11:14+00:00 Fix a typo of 'etcdctl snapshot restore/status' commands

• 8bdb0edc 2025-11-17T17:56:45+00:00 Print token fingerprint instead of the original tokens in log messages

• e2eff772 2025-11-12T00:00:11-05:00 version: bump up to 3.5.25

• 26c67519 2025-11-06T21:57:49-08:00 Bump from go1.24.9 to go1.24.10

• 547d6f42 2025-11-06T19:37:43+00:00 Fix the '--force-new-cluster' can't clean up learners issue

• 2cdacbc4 2025-11-06T19:35:12+00:00 Add an e2e test cases to reproduce the '--force-new-cluster' can't remove learners issue

• 67ddeb51 2025-11-04T09:30:54-05:00 etcdutl: add --wal-dir for check-v2store

• kubernetes embedded-component 33a825ebe5da727e8ccce0fb3c9d33fce7c6bdd9 to b96a4039358613f770d20f5e4ce5125f66369521

• f0c0d9f3a 2026-02-18T21:01:26+00:00 UPSTREAM: : hack/update-vendor.sh, make update and update image

• 1bbdeea4f 2026-02-18T15:32:09-05:00 UPSTREAM: : manually resolve conflicts

• 5adfc48e1 2026-02-10T12:54:00+00:00 Release commit for Kubernetes v1.33.8

• 607a93617 2026-02-03T09:35:30+01:00 UPSTREAM: 136595: raise kubelet CSI init backoff to cover ~140s DNS delays

• 9067f06e3 2026-01-30T11:13:21+01:00 Bump dependencies, images and versions used to Go 1.24.12 and distroless iptables

• 7be92699e 2026-01-29T15:02:43-05:00 Apparently some EC2 images we use do not have /proc/net/nf_conntrack

• 1479c62a2 2026-01-29T15:02:43-05:00 test: cleanup from review

• 727969bb6 2026-01-29T15:02:43-05:00 test: Fix KubeProxy CLOSE_WAIT test for IPv6 environments

• 2e3a2fa22 2026-01-29T15:02:41-05:00 test: Read /proc/net/nf_conntrack instead of using conntrack binary

• c45940ecd 2026-01-28T11:49:07+01:00 csi: raise kubelet CSI init backoff to cover ~140s DNS delays

• ba81d3040 2026-01-27T14:44:04+01:00 DRA scheduler: fix another root cause of double device allocation

• 75fd186e7 2026-01-27T14:44:03+01:00 DRA scheduler: fix one root cause of double device allocation

• dc42de643 2026-01-27T00:01:46+00:00 fix(kubelet): convert V().Error() to V().Info() for verbosity-aware logging

• f00408bb4 2026-01-21T05:41:34+00:00 Fix for preferred dualstack and required dualstack in winkernel proxier.

• 7a092c63d 2026-01-20T16:01:08-08:00 kubeadm: waiting for etcd learner member to be started before promoting during 'kubeadm join'

• 7c5a9b983 2026-01-12T14:48:14+01:00 Add unit test with CSIDriver.SELinuxMount=false

• aa6b40b2a 2026-01-12T14:48:14+01:00 Added e2e tests with disabled SELinux

• 6e491604a 2026-01-12T14:48:14+01:00 Use only enqueuePod to add pods to the controller queue

• 1c3b0b113 2026-01-12T14:48:13+01:00 Fix policy of Pods with unknown SELinux label

• e6ae3c940 2026-01-12T14:48:13+01:00 selinux: add e2e test with a completed pod

• d05bfe812 2026-01-12T14:48:13+01:00 Add new unit tests

• 5602c5e6b 2026-01-12T14:48:13+01:00 Rework unit tests to builder pattern

• 9222f08d2 2026-01-12T14:48:13+01:00 selinux: Do not report conflits with finished pods

• f02a1fc35 2026-01-12T14:48:13+01:00 refactoring: use a common function to enqueue Pod

• 6a783eb8f 2026-01-08T13:46:29+01:00 mark QuotaMonitor as not running and invalidate monitors list

• 4e36355c5 2026-01-07T14:27:10+01:00 kubeadm: always retry Patch() Node API calls

• 249d35bf4 2025-12-19T17:43:22+01:00 kubeadm: do not sort extraArgs alpha-numerically

• 44193b0a7 2025-12-18T18:03:45+09:00 hack/lib/util.sh: support uutils' date command

• 4978d948f 2025-12-17T16:31:15+02:00 Update pod resize test to accept new cpu.weight conversion

• fc38c49c0 2025-12-09T14:59:10+00:00 Update CHANGELOG/CHANGELOG-1.33.md for v1.33.7

• a7245cdf3 2025-12-09T14:35:21+00:00 Release commit for Kubernetes v1.33.7

• 45feeb6a0 2025-12-05T11:47:07+01:00 Bump dependencies, images and versions used to Go 1.24.11 and distroless iptables

• 4815a2894 2025-12-03T12:16:46-08:00 fix docker IP address detection for rsync

• 46e99b718 2025-11-29T11:15:48+01:00 Bump dependencies, images and versions used to Go 1.24.10 and distroless iptables

• f55ba2c

The change list was truncated. See scripts/auto-rebase/changelog.txt in the PR for the full details.

/label tide/merge-method-squash
/label backport-risk-assessed
/label jira/valid-bug

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[openshift-ci-robot]

@microshift-rebase-script[bot]: Jira verification commands are restricted to collaborators for this repo.

Details

In response to this:

/verified by automatic-rebase

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: microshift-rebase-script[bot]
Once this PR has been reviewed and has the lgtm label, please assign dhensel-rh for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

@microshift-rebase-script[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/e2e-aws-tests	5e3ac3a	link	true	/test e2e-aws-tests
ci/prow/e2e-aws-tests-arm	5e3ac3a	link	true	/test e2e-aws-tests-arm

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.