# 4.16.17 Created: 2024-10-10 11:16:02 +0000 UTC Image Digest: `sha256:12b2e7ddacb8756a5fb222adee1d030c642554bd73573b0d43aca60a5280eaea` Promoted from quay.io/openshift-release-dev/ocp-release-nightly@sha256:2090e78b0bc943a591cda430ed43d0e3c2e0852a4df1d24c354b3a8e2bd0202e ## Changes from 4.16.16 ### Components * Kubectl 1.29.7 * Kubernetes 1.29.8 * Kubernetes Tests 1.29.0 * Red Hat Enterprise Linux CoreOS upgraded from 416.94.202410020522-0 to 416.94.202410071428-0 ### Rebuilt images without code change * [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [342902be](https://github.com/openshift/assisted-installer/commit/342902be223378b4d50b251011a3b3185148545a) `sha256:cc4d9bf369010505c389d1f5fe5ae0f80633464d5ff906218afb9746b49945c8` * [driver-toolkit](https://github.com/openshift/driver-toolkit) git [1d5732f0](https://github.com/openshift/driver-toolkit/commit/1d5732f0209bb7d98661a53c66c5ac265272dce6) `sha256:7dfb273ff0b7f5c941ad00565ca4c689089540dbba4729b3bac1ed96e83d991d` * [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [93b8b5fa](https://github.com/openshift/ironic-rhcos-downloader/commit/93b8b5fa33950cadd2310278b7c762ebe0057418) `sha256:296197ff5acd7519730bb160d0e6e787487dba360d22fd465e0cdd1e547d79a6` * [machine-os-images](https://github.com/openshift/machine-os-images) git [3cc97098](https://github.com/openshift/machine-os-images/commit/3cc97098ecb9870dcb571f1ed1e26e2f70ce9f8c) `sha256:a60ca83f20d2b7432d8f76a8ff2fc1646fcb32e1452740bc630103177e720ddc` * [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [6a049e3a](https://github.com/openshift/monitoring-plugin/commit/6a049e3acc8e2efd9e7fcfdc4395b14789941b34) `sha256:0990b42eb13a1442723fb1d8561708b317e28490e98caae2d68b6a38002ed1c3` * [must-gather](https://github.com/openshift/must-gather) git [aea114c0](https://github.com/openshift/must-gather/commit/aea114c0e263e6148b6a26f69f45af559a4f7bc7) `sha256:3063cea5c83f607f125355c1e999b5c171398efc8129e4f46e12b7c32e79b0ed` * [network-tools](https://github.com/openshift/network-tools) git [39eca100](https://github.com/openshift/network-tools/commit/39eca100c0978fb59234e21bf549b130914616ac) `sha256:7d485406b461bea00a242eafa0a6b3562a4d964c5e834dc95fbdf8643840c6be` * rhel-coreos `sha256:1c08ebfed38400d0802cae63651686ef8afba7aef4bf34ef92562694a655b779` * rhel-coreos-extensions `sha256:65f043428527bf4cc48e7861f4719ae646df7ea48ec0e9f10ec75bb8d82bb93b` * [tests](https://github.com/openshift/origin) git [06403d4d](https://github.com/openshift/origin/commit/06403d4defedd9b48c4a8755389516eeb3be2b13) `sha256:5d559bf5c9026eff364839c917356ffd3b9738a592b6321f82b6fe2138caf6ad` ### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/aae52d7e3bb80ea0efea327b421e3ee0989919d0) * [OCPBUGS-42570](https://issues.redhat.com/browse/OCPBUGS-42570): Libraries bump to mitigate CVE-2024-27289 (#6833) [#6833](https://github.com/openshift/assisted-service/pull/6833) * [Full changelog](https://github.com/openshift/assisted-service/compare/d56975695e809488e8c7a610ff07fac50eb452a1...aae52d7e3bb80ea0efea327b421e3ee0989919d0) ### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/42753d7581ed4fc8be6cd7d0a70afdff1ec8d596) * [OCPBUGS-42300](https://issues.redhat.com/browse/OCPBUGS-42300): Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#785) [#785](https://github.com/openshift/assisted-installer-agent/pull/785) * [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/9ca7b58d937c413f670a26c02435829b1fb3a196...42753d7581ed4fc8be6cd7d0a70afdff1ec8d596) ### [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider/tree/f6bb064636525c59fcf7200e014d9bfdc996e857) * hack: display diff on verify-mod-tidy failure [#26](https://github.com/openshift/aws-encryption-provider/pull/26) * [Full changelog](https://github.com/openshift/aws-encryption-provider/compare/da90fb7cb0d9108fb1f365e98f31ce6ab16fd7e0...f6bb064636525c59fcf7200e014d9bfdc996e857) ### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/e4d53b1281937aa073855fede82b45d41b3883e0) * [OCPBUGS-41334](https://issues.redhat.com/browse/OCPBUGS-41334): Fix IPv6 security group rule for schedulable master [#8971](https://github.com/openshift/installer/pull/8971) * [Full changelog](https://github.com/openshift/installer/compare/e8f8bf91b0dc2c0488485bd0777ed7f6c658f771...e4d53b1281937aa073855fede82b45d41b3883e0) ### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/cf533b548154f7f2e828a44864477bbbb881692d) * [OCPBUGS-42720](https://issues.redhat.com/browse/OCPBUGS-42720): Check cast result in adm prune deployments to prevent panic [#1891](https://github.com/openshift/oc/pull/1891) * [Full changelog](https://github.com/openshift/oc/compare/c44c839bcb77d6d41229e2d35e45002fa144cf72...cf533b548154f7f2e828a44864477bbbb881692d) ### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/3f2ce4889c255391323d8bdf07dece99e87dbccd) * [OCPBUGS-33673](https://issues.redhat.com/browse/OCPBUGS-33673): rename flowschema to avoid log noise in CVO [#1348](https://github.com/openshift/cluster-etcd-operator/pull/1348) * [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/11269eceae2b839bf05157c6ca40c2f2ed73bd11...3f2ce4889c255391323d8bdf07dece99e87dbccd) ### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/c5a5245333832aa171424cadb23ba628ccd5836b) * [OCPBUGS-42420](https://issues.redhat.com/browse/OCPBUGS-42420): Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) [#1126](https://github.com/openshift/cluster-image-registry-operator/pull/1126) * [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/9d2162f45590dd0ed0a228b79ec036d6d44a7208...c5a5245333832aa171424cadb23ba628ccd5836b) ### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/8f39b8c253667d54b3ab83fb91eb3dbf4e266fd2) * [OCPBUGS-36594](https://issues.redhat.com/browse/OCPBUGS-36594): Set mount propagation to HostToContainer for /var/lib/kubelet [#2430](https://github.com/openshift/cluster-network-operator/pull/2430) * [Full changelog](https://github.com/openshift/cluster-network-operator/compare/5e5e21afb9ceabe3c2166fb9b2d5d12196a77b26...8f39b8c253667d54b3ab83fb91eb3dbf4e266fd2) ### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/329937c1acd693cf754b1e11ef6d1e88fac11aa6) * E2E: Add test to verify cpuset.cpus.exclusive is writeable (#1153) [#1153](https://github.com/openshift/cluster-node-tuning-operator/pull/1153) * [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/57a714574b7b33f2f649ad5f62a61b7e97224fb7...329937c1acd693cf754b1e11ef6d1e88fac11aa6) ### [console](https://github.com/openshift/console/tree/21d218a7b2ebce7fb0aba07f9f90df4bca763606) * [OCPBUGS-37615](https://issues.redhat.com/browse/OCPBUGS-37615): Include PatternFly-4 chart styles so they are available for dynamic plugins that still use PF4 react-charts [#14091](https://github.com/openshift/console/pull/14091) * [Full changelog](https://github.com/openshift/console/compare/a9acc9a4c44b78b7dbe8552e35e92c958e804b4b...21d218a7b2ebce7fb0aba07f9f90df4bca763606) ### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/c25d1ff2677a882504b18220dcbbe153781f3883) * [OCPBUGS-38458](https://issues.redhat.com/browse/OCPBUGS-38458): Add missing healthchecks [#241](https://github.com/openshift/csi-driver-manila-operator/pull/241) * [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/bdac0fd6ff11af0135bb7a4f6e5cb1c7d1d6b227...c25d1ff2677a882504b18220dcbbe153781f3883) ### [hypershift](https://github.com/openshift/hypershift/tree/9a2ade91ae269b570d4e9dd8a8430a6cbc7b4e20) * [OCPBUGS-42342](https://issues.redhat.com/browse/OCPBUGS-42342): Let payload generation pick the release for the NodePool [#4787](https://github.com/openshift/hypershift/pull/4787) * [OCPBUGS-42431](https://issues.redhat.com/browse/OCPBUGS-42431): Conditionally manage kubeconfig secrets for DNS and Ingress operators [#4798](https://github.com/openshift/hypershift/pull/4798) * NO-JIRA: [chore(deps): update konflux references (release-4.16)](https://github.com/openshift/hypershift/pull/4853#top) [#4853](https://github.com/openshift/hypershift/pull/4853) * [OCPBUGS-42608](https://issues.redhat.com/browse/OCPBUGS-42608): Add Annotation to skip deleting hcp namespace [#4830](https://github.com/openshift/hypershift/pull/4830) * [Full changelog](https://github.com/openshift/hypershift/compare/235766c892a8a1fb7130a422473dec10d540fa54...9a2ade91ae269b570d4e9dd8a8430a6cbc7b4e20) ### [ironic](https://github.com/openshift/ironic-image/tree/f8a69556ca9fab8742bc6a91ccce56bc6de90360) * [OCPBUGS-39017](https://issues.redhat.com/browse/OCPBUGS-39017): Bump ironic-lib to fix utf8 decoding issue [#569](https://github.com/openshift/ironic-image/pull/569) * [Full changelog](https://github.com/openshift/ironic-image/compare/6ef351d60ebf9e340696ac8b217636f1d916294a...f8a69556ca9fab8742bc6a91ccce56bc6de90360) ### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/3c5298e05497b59a876c73c51359f49f3cc2cb99) * [OCPBUGS-39017](https://issues.redhat.com/browse/OCPBUGS-39017): Bump ironic-lib to fix utf8 decoding issue [#156](https://github.com/openshift/ironic-agent-image/pull/156) * [Full changelog](https://github.com/openshift/ironic-agent-image/compare/2a3cd13c05d937ff04f199c0c756646fde62f285...3c5298e05497b59a876c73c51359f49f3cc2cb99) ### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/aec8163c76a7ba11e02c3ba1e9ce46f770210957) * [OCPBUGS-42203](https://issues.redhat.com/browse/OCPBUGS-42203): fix UDP conntrack cleanup [#636](https://github.com/openshift/sdn/pull/636) * [Full changelog](https://github.com/openshift/sdn/compare/807fca22f33bef517b664e314072c3f1b25fbfbc...aec8163c76a7ba11e02c3ba1e9ce46f770210957) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/6f827c3d8c3c5c826b04963a19ad0d79c2ba50ee) * [OCPBUGS-41293](https://issues.redhat.com/browse/OCPBUGS-41293): Enable the use of Linux Bridge as the ovs default port connection [#4563](https://github.com/openshift/machine-config-operator/pull/4563) * [OCPBUGS-41256](https://issues.redhat.com/browse/OCPBUGS-41256): Set ESP offloads off in bonds if slaves don't support them [#4627](https://github.com/openshift/machine-config-operator/pull/4627) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/6a425abbe5e330f0e7bc0849f4927d4c55d0c9e5...6f827c3d8c3c5c826b04963a19ad0d79c2ba50ee) ### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/52c7ebe90417a98c4e276f735e1824ea04b27cf6) * [OCPBUGS-41551](https://issues.redhat.com/browse/OCPBUGS-41551): Add subnet overlap check for transit switch subnet [#2306](https://github.com/openshift/ovn-kubernetes/pull/2306) * [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/90d0591637753ab3d3b18535e506c47e91194da9...52c7ebe90417a98c4e276f735e1824ea04b27cf6)