diff --git a/.azure-pipelines/azure-pipelines.yml b/.azure-pipelines/azure-pipelines.yml
index 621a2a91..d4a33f2c 100644
--- a/.azure-pipelines/azure-pipelines.yml
+++ b/.azure-pipelines/azure-pipelines.yml
@@ -61,6 +61,17 @@ stages:
               test: 'devel/sanity/1'
             - name: Units
               test: 'devel/units/1'
+  - stage: Ansible_2_21
+    displayName: Sanity & Units 2.21
+    dependsOn: []
+    jobs:
+      - template: templates/matrix.yml
+        parameters:
+          targets:
+            - name: Sanity
+              test: '2.21/sanity/1'
+            - name: Units
+              test: '2.21/units/1'
   - stage: Ansible_2_20
     displayName: Sanity & Units 2.20
     dependsOn: []
@@ -123,6 +134,23 @@ stages:
           groups:
             - 1
             - 2
+  - stage: Docker_2_21
+    displayName: Docker 2.21
+    dependsOn: []
+    jobs:
+      - template: templates/matrix.yml
+        parameters:
+          testFormat: 2.21/linux/{0}
+          targets:
+            - name: Fedora 43
+              test: fedora43
+            - name: Ubuntu 24.04
+              test: ubuntu2404
+            # - name: Alpine 3.23
+            #   test: alpine323
+          groups:
+            - 1
+            - 2
   - stage: Docker_2_20
     displayName: Docker 2.20
     dependsOn: []
@@ -249,6 +277,27 @@ stages:
           groups:
             - 1
             - 2
+  - stage: Remote_2_21
+    displayName: Remote 2.21
+    dependsOn: []
+    jobs:
+      - template: templates/matrix.yml
+        parameters:
+          testFormat: 2.21/{0}
+          targets:
+            # - name: macOS 26.3
+            #   test: macos/26.3
+            - name: RHEL 10.1
+              test: rhel/10.1
+            # - name: RHEL 9.7
+            #   test: rhel/9.7
+            # - name: FreeBSD 15.0
+            #   test: freebsd/15.0
+            # - name: FreeBSD 14.4
+            #   test: freebsd/14.4
+          groups:
+            - 1
+            - 2
   - stage: Remote_2_20
     displayName: Remote 2.20
     dependsOn: []
@@ -314,6 +363,20 @@ stages:
           groups:
             - 1
             - 2
+  - stage: Generic_2_21
+    displayName: Generic 2.21
+    dependsOn: []
+    jobs:
+      - template: templates/matrix.yml
+        parameters:
+          nameFormat: Python {0}
+          testFormat: 2.21/generic/{0}
+          targets:
+            - test: "3.11"
+            - test: "3.14"
+          groups:
+            - 1
+            - 2
   - stage: Generic_2_20
     displayName: Generic 2.20
     dependsOn: []
@@ -377,22 +440,26 @@ stages:
     condition: succeededOrFailed()
     dependsOn:
       - Ansible_devel
+      - Ansible_2_21
       - Ansible_2_20
       - Ansible_2_19
       - Ansible_2_18
       - Ansible_2_17
       - Remote_devel_extra_vms
       - Remote_devel
+      - Remote_2_21
       - Remote_2_20
       - Remote_2_19
       - Remote_2_18
       - Docker_devel
+      - Docker_2_21
       - Docker_2_20
       - Docker_2_19
       - Docker_2_18
       - Docker_2_17
       - Docker_community_devel
       - Generic_devel
+      - Generic_2_21
       - Generic_2_20
       - Generic_2_19
       - Generic_2_18
diff --git a/README.md b/README.md
index 345d83a3..207c6923 100644
--- a/README.md
+++ b/README.md
@@ -39,7 +39,7 @@ For more information about communication, see the [Ansible communication guide](
 
 ## Tested with Ansible
 
-Tested with the current ansible-core-2.17, ansible-core 2.18, and ansible-core 2.19 releases and the current development version of ansible-core. Ansible-core versions before 2.17 are not supported; please use community.crypto 2.x.y with these.
+Tested with the current ansible-core-2.17, ansible-core 2.18, ansible-core 2.19, ansible-core 2.20, ansible-core 2.21 releases and the current development version of ansible-core. Ansible-core versions before 2.17 are not supported; please use community.crypto 2.x.y with these.
 
 ## External requirements
 
diff --git a/tests/sanity/ignore-2.22.txt b/tests/sanity/ignore-2.22.txt
new file mode 100644
index 00000000..a8994df6
--- /dev/null
+++ b/tests/sanity/ignore-2.22.txt
@@ -0,0 +1,14 @@
+plugins/module_utils/_crypto/module_backends/certificate.py no-assert
+plugins/module_utils/_crypto/module_backends/certificate_acme.py no-assert
+plugins/module_utils/_crypto/module_backends/certificate_ownca.py no-assert
+plugins/module_utils/_crypto/module_backends/certificate_selfsigned.py no-assert
+plugins/module_utils/_crypto/module_backends/csr.py no-assert
+plugins/module_utils/_crypto/module_backends/privatekey_convert.py no-assert
+plugins/module_utils/_openssh/backends/keypair_backend.py no-assert
+plugins/modules/acme_certificate.py no-assert
+plugins/modules/acme_certificate.py validate-modules:bad-return-value-key  # this is not a real return value, only a documentation placeholder
+plugins/modules/acme_certificate_order_create.py validate-modules:bad-return-value-key  # this is not a real return value, only a documentation placeholder
+plugins/modules/luks_device.py no-assert
+plugins/modules/openssl_pkcs12.py no-assert
+tests/ee/roles/smoke/library/smoke_ipaddress.py shebang
+tests/ee/roles/smoke/library/smoke_pyyaml.py shebang
diff --git a/tests/sanity/ignore-2.22.txt.license b/tests/sanity/ignore-2.22.txt.license
new file mode 100644
index 00000000..edff8c76
--- /dev/null
+++ b/tests/sanity/ignore-2.22.txt.license
@@ -0,0 +1,3 @@
+GNU General Public License v3.0+ (see LICENSES/GPL-3.0-or-later.txt or https://www.gnu.org/licenses/gpl-3.0.txt)
+SPDX-License-Identifier: GPL-3.0-or-later
+SPDX-FileCopyrightText: Ansible Project