openshift · microshift-rebase-script · Feb 18, 2026 · Feb 18, 2026 · Feb 18, 2026 · Feb 18, 2026
diff --git a/Makefile.kube_git.var b/Makefile.kube_git.var
@@ -1,5 +1,5 @@
 KUBE_GIT_MAJOR=1
 KUBE_GIT_MINOR=34
 KUBE_GIT_VERSION=v1.34.2
-KUBE_GIT_COMMIT=9d521311f5fb67dc43f49eeb728ee2c80976835a
+KUBE_GIT_COMMIT=047d96223dd843e9d54bed59bc212d2e9122c56a
 KUBE_GIT_TREE_STATE=clean
diff --git a/Makefile.version.aarch64.var b/Makefile.version.aarch64.var
@@ -1 +1 @@
-OCP_VERSION := 4.22.0-0.nightly-arm64-2026-02-05-082424
+OCP_VERSION := 4.22.0-0.nightly-arm64-2026-02-17-232712
diff --git a/Makefile.version.x86_64.var b/Makefile.version.x86_64.var
@@ -1 +1 @@
-OCP_VERSION := 4.22.0-0.nightly-2026-02-05-115400
+OCP_VERSION := 4.22.0-0.nightly-2026-02-17-112443
diff --git a/assets/components/multus/kustomization.aarch64.yaml b/assets/components/multus/kustomization.aarch64.yaml
@@ -2,7 +2,7 @@
 images:
   - name: multus-cni-microshift
     newName: quay.io/openshift-release-dev/ocp-v4.0-art-dev
-    digest: sha256:18382b50036fed824eaa818406de54f31a19d506d84ba69076647709c0bebd0c
+    digest: sha256:5059097d17fbc06dbe7a9e7f0d61116eeb2750fcc2debc54842916cc35181a06
   - name: containernetworking-plugins-microshift
     newName: quay.io/openshift-release-dev/ocp-v4.0-art-dev
-    digest: sha256:476c31c3adc585ec503b0717bc8898fdaa0d5c51d4ad3acf80acfb8140cc182f
+    digest: sha256:267c37338b0fddc68fd1b7657c722ee0238675ef85b0f274e69fdf96d9df26c6
diff --git a/assets/components/multus/kustomization.x86_64.yaml b/assets/components/multus/kustomization.x86_64.yaml
@@ -2,7 +2,7 @@
 images:
   - name: multus-cni-microshift
     newName: quay.io/openshift-release-dev/ocp-v4.0-art-dev
-    digest: sha256:0db85138bfe4a129e0b85a203ca0c8400145d8fa2e234c467d8496d89a0e66fb
+    digest: sha256:e9b425020d10f9f7ab0ddf27b082dd69e7b5c97f498608f9761f88b533d593d8
   - name: containernetworking-plugins-microshift
     newName: quay.io/openshift-release-dev/ocp-v4.0-art-dev
-    digest: sha256:31264e37769680f66240b51d02b4cbcf12565a9d0ce961a7c23bf90e9e463a99
+    digest: sha256:474aa143fb27219d5be46488f70a56e0fdf25864276fbcfd48c64d10329ab341
diff --git a/assets/components/multus/release-multus-aarch64.json b/assets/components/multus/release-multus-aarch64.json
@@ -1,9 +1,9 @@
 {
   "release": {
-    "base": "4.22.0-0.nightly-arm64-2026-02-05-082424"
+    "base": "4.22.0-0.nightly-arm64-2026-02-17-232712"
   },
   "images": {
-    "multus-cni-microshift": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:18382b50036fed824eaa818406de54f31a19d506d84ba69076647709c0bebd0c",
-    "containernetworking-plugins-microshift": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:476c31c3adc585ec503b0717bc8898fdaa0d5c51d4ad3acf80acfb8140cc182f"
+    "multus-cni-microshift": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:5059097d17fbc06dbe7a9e7f0d61116eeb2750fcc2debc54842916cc35181a06",
+    "containernetworking-plugins-microshift": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:267c37338b0fddc68fd1b7657c722ee0238675ef85b0f274e69fdf96d9df26c6"
   }
 }
diff --git a/assets/components/multus/release-multus-x86_64.json b/assets/components/multus/release-multus-x86_64.json
@@ -1,9 +1,9 @@
 {
   "release": {
-    "base": "4.22.0-0.nightly-2026-02-05-115400"
+    "base": "4.22.0-0.nightly-2026-02-17-112443"
   },
   "images": {
-    "multus-cni-microshift": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0db85138bfe4a129e0b85a203ca0c8400145d8fa2e234c467d8496d89a0e66fb",
-    "containernetworking-plugins-microshift": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:31264e37769680f66240b51d02b4cbcf12565a9d0ce961a7c23bf90e9e463a99"
+    "multus-cni-microshift": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e9b425020d10f9f7ab0ddf27b082dd69e7b5c97f498608f9761f88b533d593d8",
+    "containernetworking-plugins-microshift": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:474aa143fb27219d5be46488f70a56e0fdf25864276fbcfd48c64d10329ab341"
   }
 }
diff --git a/assets/components/openshift-dns/dns/service.yaml b/assets/components/openshift-dns/dns/service.yaml
@@ -1,6 +1,7 @@
 kind: Service
 apiVersion: v1
 spec:
+  trafficDistribution: PreferSameNode
   ports:
     - name: dns
       port: 53

diff --git a/assets/optional/ai-model-serving/kserve/inferenceservice-config-microshift-patch.yaml b/assets/optional/ai-model-serving/kserve/inferenceservice-config-microshift-patch.yaml
@@ -13,9 +13,10 @@ metadata:
   namespace: kserve
 data:
   explainers: "{}"
-  oauthProxy: |- 
+  oauthProxy: |-
     {
-      "image" : "$(oauth-proxy)",
+      "oauthProxyImage" : "$(oauth-proxy)",
+      "kubeRbacProxyImage" : "$(kube-rbac-proxy)",
       "memoryRequest": "64Mi",
       "memoryLimit": "128Mi",
       "cpuRequest": "100m",

diff --git a/assets/optional/ai-model-serving/kserve/overlays/odh/kustomization.yaml b/assets/optional/ai-model-serving/kserve/overlays/odh/kustomization.yaml
@@ -152,6 +152,13 @@ vars:
     apiVersion: v1
     kind: ConfigMap
     name: kserve-parameters
+- fieldref:
+    fieldpath: data.kube-rbac-proxy
+  name: kube-rbac-proxy
+  objref:
+    apiVersion: v1
+    kind: ConfigMap
+    name: kserve-parameters
 - fieldref:
     fieldpath: data.kserve-llm-d-inference-scheduler
   name: kserve-llm-d-inference-scheduler

diff --git a/assets/optional/ai-model-serving/kserve/overlays/odh/params.env b/assets/optional/ai-model-serving/kserve/overlays/odh/params.env
@@ -6,3 +6,5 @@ kserve-llm-d=ghcr.io/llm-d/llm-d-dev:sha-b3f0b0d
 kserve-llm-d-inference-scheduler=quay.io/opendatahub/llm-d-inference-scheduler:odh-v2.33
 kserve-llm-d-routing-sidecar=quay.io/opendatahub/llm-d-routing-sidecar:odh-v2.33
 oauth-proxy=registry.redhat.io/openshift4/ose-oauth-proxy@sha256:bd49cfc8452b3d96467cc222db9487e120abc6cc5ba81349c6b3703706f36a08
+kube-rbac-proxy=registry.redhat.io/rhoai/odh-kube-auth-proxy-rhel9@sha256:1f4b2b9bb5061faf17299c2ae2405ab408e2b7ce349d9831eb6045990e6da005
+
diff --git a/.../optional/ai-model-serving/kserve/overlays/odh/patches/patch-inferenceservice-config.yaml b/.../optional/ai-model-serving/kserve/overlays/odh/patches/patch-inferenceservice-config.yaml
@@ -5,9 +5,10 @@ metadata:
   namespace: kserve
 data:
   explainers: "{}"
-  oauthProxy: |- 
+  oauthProxy: |-
     {
-      "image" : "$(oauth-proxy)",
+      "oauthProxyImage" : "$(oauth-proxy)",
+      "kubeRbacProxyImage" : "$(kube-rbac-proxy)",
       "memoryRequest": "64Mi",
       "memoryLimit": "128Mi",
       "cpuRequest": "100m",

diff --git a/assets/optional/ai-model-serving/release-ai-model-serving-x86_64.json b/assets/optional/ai-model-serving/release-ai-model-serving-x86_64.json
@@ -1,6 +1,6 @@
 {
   "release": {
-    "base": "2.25.1"
+    "base": "2.25.2"
   },
   "images": {
     "ray-tls-generator-image": "registry.redhat.io/ubi9/ubi-minimal:latest",
@@ -21,6 +21,7 @@
     "kserve-llm-d": "ghcr.io/llm-d/llm-d-dev:sha-b3f0b0d",
     "kserve-llm-d-inference-scheduler": "quay.io/opendatahub/llm-d-inference-scheduler:odh-v2.33",
     "kserve-llm-d-routing-sidecar": "quay.io/opendatahub/llm-d-routing-sidecar:odh-v2.33",
-    "oauth-proxy": "registry.redhat.io/openshift4/ose-oauth-proxy@sha256:bd49cfc8452b3d96467cc222db9487e120abc6cc5ba81349c6b3703706f36a08"
+    "oauth-proxy": "registry.redhat.io/openshift4/ose-oauth-proxy@sha256:bd49cfc8452b3d96467cc222db9487e120abc6cc5ba81349c6b3703706f36a08",
+    "kube-rbac-proxy": "registry.redhat.io/rhoai/odh-kube-auth-proxy-rhel9@sha256:1f4b2b9bb5061faf17299c2ae2405ab408e2b7ce349d9831eb6045990e6da005"
   }
 }
diff --git a/assets/optional/ai-model-serving/runtimes/vllm-gaudi.yaml b/assets/optional/ai-model-serving/runtimes/vllm-gaudi.yaml
@@ -5,7 +5,7 @@ metadata:
   annotations:
     openshift.io/display-name: vLLM Intel Gaudi Accelerator ServingRuntime for KServe
     opendatahub.io/recommended-accelerators: '["habana.ai/gaudi"]'
-    opendatahub.io/runtime-version: 'v0.8.5'
+    opendatahub.io/runtime-version: 'v0.13.0'
   labels:
     opendatahub.io/dashboard: 'true'
 spec:

diff --git a/assets/optional/operator-lifecycle-manager/0000_50_olm_00-catalogsources.crd.yaml b/assets/optional/operator-lifecycle-manager/0000_50_olm_00-catalogsources.crd.yaml
@@ -2,7 +2,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.19.0
+    controller-gen.kubebuilder.io/version: v0.20.0
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
     capability.openshift.io/name: "OperatorLifecycleManager"
@@ -1049,9 +1049,10 @@ spec:
                           operator:
                             description: |-
                               Operator represents a key's relationship to the value.
-                              Valid operators are Exists and Equal. Defaults to Equal.
+                              Valid operators are Exists, Equal, Lt, and Gt. Defaults to Equal.
                               Exists is equivalent to wildcard for value, so that a pod can
                               tolerate all taints of a particular category.
+                              Lt and Gt perform numeric comparisons (requires feature gate TaintTolerationComparisonOperators).
                             type: string
                           tolerationSeconds:
                             description: |-

diff --git a/assets/optional/operator-lifecycle-manager/0000_50_olm_00-clusterserviceversions.crd.yaml b/assets/optional/operator-lifecycle-manager/0000_50_olm_00-clusterserviceversions.crd.yaml
@@ -2,7 +2,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.19.0
+    controller-gen.kubebuilder.io/version: v0.20.0
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
     capability.openshift.io/name: "OperatorLifecycleManager"
@@ -2560,7 +2560,9 @@ spec:
                                                       type: integer
                                                       format: int32
                                                 resizePolicy:
-                                                  description: Resources resize policy for the container.
+                                                  description: |-
+                                                    Resources resize policy for the container.
+                                                    This field cannot be set on ephemeral containers.
                                                   type: array
                                                   items:
                                                     description: ContainerResizePolicy represents resource resize policy for the container.
@@ -5633,7 +5635,9 @@ spec:
                                                       type: integer
                                                       format: int32
                                                 resizePolicy:
-                                                  description: Resources resize policy for the container.
+                                                  description: |-
+                                                    Resources resize policy for the container.
+                                                    This field cannot be set on ephemeral containers.
                                                   type: array
                                                   items:
                                                     description: ContainerResizePolicy represents resource resize policy for the container.
@@ -6390,8 +6394,8 @@ spec:
                                               will be made available to those containers which consume them
                                               by name.
 
-                                              This is an alpha field and requires enabling the
-                                              DynamicResourceAllocation feature gate.
+                                              This is a stable field but requires that the
+                                              DynamicResourceAllocation feature gate is enabled.
 
                                               This field is immutable.
                                             type: array
@@ -6845,9 +6849,10 @@ spec:
                                                 operator:
                                                   description: |-
                                                     Operator represents a key's relationship to the value.
-                                                    Valid operators are Exists and Equal. Defaults to Equal.
+                                                    Valid operators are Exists, Equal, Lt, and Gt. Defaults to Equal.
                                                     Exists is equivalent to wildcard for value, so that a pod can
                                                     tolerate all taints of a particular category.
+                                                    Lt and Gt perform numeric comparisons (requires feature gate TaintTolerationComparisonOperators).
                                                   type: string
                                                 tolerationSeconds:
                                                   description: |-
@@ -7609,7 +7614,7 @@ spec:
                                                             resources:
                                                               description: |-
                                                                 resources represents the minimum resources the volume should have.
-                                                                If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirements
+                                                                Users are allowed to specify resource requirements
                                                                 that are lower than previous value but must still be higher than capacity recorded in the
                                                                 status field of the claim.
                                                                 More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources
@@ -8446,6 +8451,24 @@ spec:
                                                               signerName:
                                                                 description: Kubelet's generated CSRs will be addressed to this signer.
                                                                 type: string
+                                                              userAnnotations:
+                                                                description: |-
+                                                                  userAnnotations allow pod authors to pass additional information to
+                                                                  the signer implementation.  Kubernetes does not restrict or validate this
+                                                                  metadata in any way.
+
+                                                                  These values are copied verbatim into the `spec.unverifiedUserAnnotations` field of
+                                                                  the PodCertificateRequest objects that Kubelet creates.
+
+                                                                  Entries are subject to the same validation as object metadata annotations,
+                                                                  with the addition that all keys must be domain-prefixed. No restrictions
+                                                                  are placed on values, except an overall size limitation on the entire field.
+
+                                                                  Signers should document the keys and values they support. Signers should
+                                                                  deny requests that contain keys they do not recognize.
+                                                                type: object
+                                                                additionalProperties:
+                                                                  type: string
                                                           secret:
                                                             description: secret information about the secret data to project
                                                             type: object
@@ -8844,6 +8867,42 @@ spec:
                                             x-kubernetes-list-map-keys:
                                               - name
                                             x-kubernetes-list-type: map
+                                          workloadRef:
+                                            description: |-
+                                              WorkloadRef provides a reference to the Workload object that this Pod belongs to.
+                                              This field is used by the scheduler to identify the PodGroup and apply the
+                                              correct group scheduling policies. The Workload object referenced
+                                              by this field may not exist at the time the Pod is created.
+                                              This field is immutable, but a Workload object with the same name
+                                              may be recreated with different policies. Doing this during pod scheduling
+                                              may result in the placement not conforming to the expected policies.
+                                            type: object
+                                            required:
+                                              - name
+                                              - podGroup
+                                            properties:
+                                              name:
+                                                description: |-
+                                                  Name defines the name of the Workload object this Pod belongs to.
+                                                  Workload must be in the same namespace as the Pod.
+                                                  If it doesn't match any existing Workload, the Pod will remain unschedulable
+                                                  until a Workload object is created and observed by the kube-scheduler.
+                                                  It must be a DNS subdomain.
+                                                type: string
+                                              podGroup:
+                                                description: |-
+                                                  PodGroup is the name of the PodGroup within the Workload that this Pod
+                                                  belongs to. If it doesn't match any existing PodGroup within the Workload,
+                                                  the Pod will remain unschedulable until the Workload object is recreated
+                                                  and observed by the kube-scheduler. It must be a DNS label.
+                                                type: string
+                                              podGroupReplicaKey:
+                                                description: |-
+                                                  PodGroupReplicaKey specifies the replica key of the PodGroup to which this
+                                                  Pod belongs. It is used to distinguish pods belonging to different replicas
+                                                  of the same pod group. The pod group policy is applied separately to each replica.
+                                                  When set, it must be a DNS label.
+                                                type: string
                         permissions:
                           type: array
                           items:
@@ -9159,7 +9218,9 @@ spec:
                               type: string
                         x-kubernetes-map-type: atomic
                       reinvocationPolicy:
-                        description: ReinvocationPolicyType specifies what type of policy the admission hook uses.
+                        description: |-
+                          ReinvocationPolicyType specifies what type of policy is used when other admission plugins also perform
+                          modifications.
                         type: string
                       rules:
                         type: array

diff --git a/assets/optional/operator-lifecycle-manager/0000_50_olm_00-installplans.crd.yaml b/assets/optional/operator-lifecycle-manager/0000_50_olm_00-installplans.crd.yaml
@@ -2,7 +2,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.19.0
+    controller-gen.kubebuilder.io/version: v0.20.0
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
     capability.openshift.io/name: "OperatorLifecycleManager"

diff --git a/assets/optional/operator-lifecycle-manager/0000_50_olm_00-olmconfigs.crd.yaml b/assets/optional/operator-lifecycle-manager/0000_50_olm_00-olmconfigs.crd.yaml
@@ -2,7 +2,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.19.0
+    controller-gen.kubebuilder.io/version: v0.20.0
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
     capability.openshift.io/name: "OperatorLifecycleManager"

diff --git a/assets/optional/operator-lifecycle-manager/0000_50_olm_00-operatorconditions.crd.yaml b/assets/optional/operator-lifecycle-manager/0000_50_olm_00-operatorconditions.crd.yaml
@@ -2,7 +2,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.19.0
+    controller-gen.kubebuilder.io/version: v0.20.0
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
     capability.openshift.io/name: "OperatorLifecycleManager"

diff --git a/assets/optional/operator-lifecycle-manager/0000_50_olm_00-operatorgroups.crd.yaml b/assets/optional/operator-lifecycle-manager/0000_50_olm_00-operatorgroups.crd.yaml
@@ -2,7 +2,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.19.0
+    controller-gen.kubebuilder.io/version: v0.20.0
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
     capability.openshift.io/name: "OperatorLifecycleManager"
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		OCP_VERSION := 4.22.0-0.nightly-arm64-2026-02-05-082424
		OCP_VERSION := 4.22.0-0.nightly-arm64-2026-02-17-232712
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		OCP_VERSION := 4.22.0-0.nightly-2026-02-05-115400
		OCP_VERSION := 4.22.0-0.nightly-2026-02-17-112443