# 4.16.4

Created: 2024-07-19 19:04:50 +0000 UTC

Image Digest: `sha256:145af4bc1ee8c9959a16c17d098d73535458d1a4bc4094914d3b2eaca816e775`

Promoted from quay.io/openshift-release-dev/ocp-release-nightly@sha256:2316f6d87a5a9b2f508299a09c637b96bd42fcaa7d4ed0d5f1f8952557c25b86


## Changes from 4.16.3

### Components

* Kubectl 1.29.6
* Kubernetes 1.29.6
* Kubernetes Tests 1.29.0
* Red Hat Enterprise Linux CoreOS upgraded from 416.94.202407081958-0 to 416.94.202407171205-0


### Rebuilt images without code change

* [agent-installer-api-server](https://github.com/openshift/assisted-service) git [6b26a25e](https://github.com/openshift/assisted-service/commit/6b26a25e2ae7c4eae4a0f3ee0cedbd16c29bab8a) `sha256:44be07099daa1dd426d8bbf3e18011b089e3f7bf4f99c5c7388a78edbd4aa33d`
* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [373c87ad](https://github.com/openshift/assisted-installer/commit/373c87ad8f0d88816031b5c39764c80d900228d9) `sha256:8e0813183ce916b0802eb90992b6c7118b43e8e35fa387db12409230731d03c6`
* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [9ca7b58d](https://github.com/openshift/assisted-installer-agent/commit/9ca7b58d937c413f670a26c02435829b1fb3a196) `sha256:4052b0f172f44fcfa94aeeba4ca7c6033cd4cedeb473b45d1046028915d87189`
* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [6e6bb40d](https://github.com/openshift/agent-installer-utils/commit/6e6bb40d95bd966eb6b152e66c5b91794806c4bc) `sha256:a6b271dc8c3adf77653132e980e2fd179a8fd556b672322e96f05dfd6ada9c89`
* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [2bd8891e](https://github.com/openshift/cluster-node-tuning-operator/commit/2bd8891ead93e161b9a871ac2eaa947bfc17309f) `sha256:314d4a2f1622588edcba09483c7734b7da2074132eddbed304faf9f4bca4e76f`
* [docker-builder](https://github.com/openshift/builder) git [3b7a1b1b](https://github.com/openshift/builder/commit/3b7a1b1be130d5068481fe005b0a119fbd7057a6) `sha256:e90c4e5af465c3ef1cd6e4e3dc650650e768821dfb4d1eaf11276138445f61b4`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [1d5732f0](https://github.com/openshift/driver-toolkit/commit/1d5732f0209bb7d98661a53c66c5ac265272dce6) `sha256:b0a819836174f4e91ce50fc5db02005fc5c43ec2158b1abf659996c95e90d9b7`
* [ironic-agent](https://github.com/openshift/ironic-agent-image) git [63681a46](https://github.com/openshift/ironic-agent-image/commit/63681a469fdba2f223373ff36350bf2462b997a3) `sha256:81bf65c74c39942380d012e51f6cb02216a5382c7366691c8c431fe359383727`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [93b8b5fa](https://github.com/openshift/ironic-rhcos-downloader/commit/93b8b5fa33950cadd2310278b7c762ebe0057418) `sha256:29779fa3211951df128a7ff3036aba412c453440250000dfd81de02ba0705d41`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [3cc97098](https://github.com/openshift/machine-os-images/commit/3cc97098ecb9870dcb571f1ed1e26e2f70ce9f8c) `sha256:93ca5ca6ab7e8dbb342fdeff1faa2e4c65bb4b6f9eef1311aab50c603763b951`
* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [aa339e45](https://github.com/openshift/monitoring-plugin/commit/aa339e459718c1644d53fcdaf6a59bb751bfecea) `sha256:094757c52abd9228297809a3a2f6c23edada0ba3ab6973b005806bf2cf29282d`
* [must-gather](https://github.com/openshift/must-gather) git [aea114c0](https://github.com/openshift/must-gather/commit/aea114c0e263e6148b6a26f69f45af559a4f7bc7) `sha256:f3d4d886171cd808daf6826c7541b14ad731706e7b88d67d785a4f4068f6ed19`
* [network-tools](https://github.com/openshift/network-tools) git [39eca100](https://github.com/openshift/network-tools/commit/39eca100c0978fb59234e21bf549b130914616ac) `sha256:f9a8d1afbeb7baa93dd51496559b4d96c741e66a56ef5718d05508b68caa8a9b`
* [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes) git [7f412836](https://github.com/openshift/ovn-kubernetes/commit/7f412836bd26c3d6e9735552a7fd615e7e7e9695) `sha256:90ec93cb611c6a2d39b37b4c931a2e91bbe6744341c388118e8e63f38b0824c1`
* rhel-coreos `sha256:188af52af95b9d27cdc8026f1467cc0ea539a3908340499fc5e32bd657e7aab6`
* rhel-coreos-extensions `sha256:8919430f29060b7adb4ae809c1497f5346ed81602730bf24807fedd195b4a579`
* [sdn](https://github.com/openshift/sdn) git [5b658c43](https://github.com/openshift/sdn/commit/5b658c433786797d0ac1b870db08346584794514) `sha256:22815fa571014523d73330408d7496612c0d65a0b5a233e4808bcb840e06e1ce`
* [tests](https://github.com/openshift/origin) git [ac6867d1](https://github.com/openshift/origin/commit/ac6867d1c00e18bf9a933863b8dcb32a133cbc5f) `sha256:3c3cbdd95e401c7672bdaf477fd9082779281d117ea9fc15c77a668a3e0ecd13`


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/41969e2919edc06c0a8b55a87e82354cb0f07142)

* [OCPBUGS-36720](https://issues.redhat.com/browse/OCPBUGS-36720): CORS-3582: capi: remove unused feature gates [#8716](https://github.com/openshift/installer/pull/8716)
* [OCPBUGS-36890](https://issues.redhat.com/browse/OCPBUGS-36890): [release-4.16] capi: start controllers after WaitGroup is created [#8726](https://github.com/openshift/installer/pull/8726)
* [OCPBUGS-36091](https://issues.redhat.com/browse/OCPBUGS-36091): [release-4.16] bump go-retryablehttp for CVE fix [#8654](https://github.com/openshift/installer/pull/8654)
* [OCPBUGS-36777](https://issues.redhat.com/browse/OCPBUGS-36777): Cleanup capi artifacts [#8719](https://github.com/openshift/installer/pull/8719)
* [Full changelog](https://github.com/openshift/installer/compare/e1f9f057ce87c1a4a5f3c268812fa4c9dc003cb7...41969e2919edc06c0a8b55a87e82354cb0f07142)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/f7a6e7f3be52ddcfcc5a641601805f1d60b81a77)

* [OCPBUGS-36673](https://issues.redhat.com/browse/OCPBUGS-36673): [4.16] Firmware Update causes BMH to get stuck in Preparing [#363](https://github.com/openshift/baremetal-operator/pull/363)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/7673d14fc567c3621e8d5fdca69ff03bd99504ef...f7a6e7f3be52ddcfcc5a641601805f1d60b81a77)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/fa846511dbeb7e08cf77265056397283c6c896f9)

* [OCPBUGS-36764](https://issues.redhat.com/browse/OCPBUGS-36764): pkg/cli/admin/upgrade/rollback: Drop this command [#1820](https://github.com/openshift/oc/pull/1820)
* [Full changelog](https://github.com/openshift/oc/compare/0127eb4d4f1131758ef39f445eba783eaf7b240f...fa846511dbeb7e08cf77265056397283c6c896f9)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/fffc75d5574777fb7f0577562148b477ebd63359)

* [OCPBUGS-36031](https://issues.redhat.com/browse/OCPBUGS-36031): IBM/go-sdk-core update to v5.6.3 [#718](https://github.com/openshift/cloud-credential-operator/pull/718)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/c6c1b0b0977d9e0e33eb0b75c5d1c1f901a70ed0...fffc75d5574777fb7f0577562148b477ebd63359)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/af5d3f6c171354c387e0cfc901110a7211715e9b)

* [OCPBUGS-32887](https://issues.redhat.com/browse/OCPBUGS-32887): Delete and recreate canary route to clear spec.host [#1099](https://github.com/openshift/cluster-ingress-operator/pull/1099)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/9eae38dce9615897991a3b0b1f73e2cdb33b7f8e...af5d3f6c171354c387e0cfc901110a7211715e9b)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/0afad8a00186e1e7a2712e9addf026e17b8cd950)

* [OCPBUGS-35303](https://issues.redhat.com/browse/OCPBUGS-35303): manifests: add ownership annotation for kubelet-bootstrap-kubeconfig [#1701](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1701)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/b0eea1220af097c61241ebe221af4c220d72f0b7...0afad8a00186e1e7a2712e9addf026e17b8cd950)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/cb3d884237cda666ad740cc9a104fc885b05bdae)

* [OCPBUGS-36907](https://issues.redhat.com/browse/OCPBUGS-36907): Add deprecated config runbook [#2411](https://github.com/openshift/cluster-monitoring-operator/pull/2411)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/70b819ecdd9199aa14e73869324cb2c962cb597b...cb3d884237cda666ad740cc9a104fc885b05bdae)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/dc0ef57c8512a150435226f5774a0f2263b0080b)

* [OCPBUGS-35836](https://issues.redhat.com/browse/OCPBUGS-35836): Propogate hypershift control plane priority class override to multus and preserve container resource requests [#2417](https://github.com/openshift/cluster-network-operator/pull/2417)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/e2f42540a5cbde654ef1b2535b1a6afc1fc7ab29...dc0ef57c8512a150435226f5774a0f2263b0080b)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/49b0f182603b5dc1d5f458537f5751b84b3e12e6)

* [OCPBUGS-36764](https://issues.redhat.com/browse/OCPBUGS-36764): Revert "OCPBUGS-24535: pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream" [#1065](https://github.com/openshift/cluster-version-operator/pull/1065)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/6f553e98877e87d08a5c5fa9b13758a12cdcef8c...49b0f182603b5dc1d5f458537f5751b84b3e12e6)


### [console](https://github.com/openshift/console/tree/897c0f71fba8e7d4b9da30faebc70a6da938d886)

* [OCPBUGS-36759](https://issues.redhat.com/browse/OCPBUGS-36759): RWOP accessMode is not available on OpenShift console UI [#14040](https://github.com/openshift/console/pull/14040)
* [OCPBUGS-37063](https://issues.redhat.com/browse/OCPBUGS-37063): hide 'View all steps in documentation' for ROSA and OSD [#14069](https://github.com/openshift/console/pull/14069)
* [OCPBUGS-36411](https://issues.redhat.com/browse/OCPBUGS-36411): fix BMH restart annotation [#14022](https://github.com/openshift/console/pull/14022)
* [OCPBUGS-36841](https://issues.redhat.com/browse/OCPBUGS-36841): ensure correct API version for OperandDetails [#14049](https://github.com/openshift/console/pull/14049)
* [Full changelog](https://github.com/openshift/console/compare/c76720242be623e84657ab63d19052e1770c1aff...897c0f71fba8e7d4b9da30faebc70a6da938d886)


### [console-operator](https://github.com/openshift/console-operator/tree/595d9d4a1d9a9a7d77e143a897446e52b65abf20)

* [OCPBUGS-34012](https://issues.redhat.com/browse/OCPBUGS-34012): Cache organization ID [#916](https://github.com/openshift/console-operator/pull/916)
* [Full changelog](https://github.com/openshift/console-operator/compare/70c05de7096e5eac77015f08a57c38c61309da55...595d9d4a1d9a9a7d77e143a897446e52b65abf20)


### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/7089efe6100c1f52f28adccf1dccc722b8dcacdc)

* [OCPBUGS-35525](https://issues.redhat.com/browse/OCPBUGS-35525): update to go 1.21 and k8s.io mods to v0.29.2 [#85](https://github.com/openshift/egress-router-cni/pull/85)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/7534ab906e5f9d38defbbbc6b169e5d829463bb5...7089efe6100c1f52f28adccf1dccc722b8dcacdc)


### [hypershift](https://github.com/openshift/hypershift/tree/5a87f948f0f4aba57d491fba0b9c769559e7e441)

* [OCPBUGS-37241](https://issues.redhat.com/browse/OCPBUGS-37241): extract rhel9 MCO binaries for rhel8 based MCO images [#4383](https://github.com/openshift/hypershift/pull/4383)
* NO-JIRA: [release-4.16] test/e2e: remove api budget checks [#4368](https://github.com/openshift/hypershift/pull/4368)
* [HOSTEDCP-1795](https://issues.redhat.com/browse/HOSTEDCP-1795), [HOSTEDCP-1796](https://issues.redhat.com/browse/HOSTEDCP-1796): Customize the self-generated cert validity and rotation [#4371](https://github.com/openshift/hypershift/pull/4371)
* NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-2 (release-4.16) - abandoned [#4364](https://github.com/openshift/hypershift/pull/4364)
* NO-JIRA: trivial typo fixes to configuring-storage.md [#4353](https://github.com/openshift/hypershift/pull/4353)
* [OCPBUGS-36849](https://issues.redhat.com/browse/OCPBUGS-36849): Add newline after TLS certs referenced by image.config [#4352](https://github.com/openshift/hypershift/pull/4352)
* [OCPBUGS-36589](https://issues.redhat.com/browse/OCPBUGS-36589): Fix Hypershift dump for non-OpenShift Management Clusters [#4317](https://github.com/openshift/hypershift/pull/4317)
* [Full changelog](https://github.com/openshift/hypershift/compare/073e376e1188a6883e83d091c110a59505144d3e...5a87f948f0f4aba57d491fba0b9c769559e7e441)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/957197389ec49234c3883bbb730bb630b459e24f)

* [OCPBUGS-36067](https://issues.redhat.com/browse/OCPBUGS-36067): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#71](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/71)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/32b4c00517de0f54bf738380064a12d58b031eec...957197389ec49234c3883bbb730bb630b459e24f)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/72d41aa9bf0e8ef7bffac13bd60a7c22d183fb72)

* [OCPBUGS-36073](https://issues.redhat.com/browse/OCPBUGS-36073): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#120](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/120)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/34fc9a4d3a4ae00d75bbfc01ac4c6385f9e94130...72d41aa9bf0e8ef7bffac13bd60a7c22d183fb72)


### [ironic](https://github.com/openshift/ironic-image/tree/39aee9b58edba6a7b4038b299b75fb93c73f67e9)

* [OCPBUGS-36838](https://issues.redhat.com/browse/OCPBUGS-36838): Update Jinja2 [#521](https://github.com/openshift/ironic-image/pull/521)
* [Full changelog](https://github.com/openshift/ironic-image/compare/2a0823e1b97f64209e5cee29e024a5abf3b436b8...39aee9b58edba6a7b4038b299b75fb93c73f67e9)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/d70a17fc8fee26d27c0624522f000504838f4b22)

* [OCPBUGS-36775](https://issues.redhat.com/browse/OCPBUGS-36775): templates: run disable-mglru conditionally [#4462](https://github.com/openshift/machine-config-operator/pull/4462)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/1ec936b6519a118ba05617efbe338e4961c71e7f...d70a17fc8fee26d27c0624522f000504838f4b22)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/f0536caff57932e0b5fb88987477f4978463574a)

* [OCPBUGS-36862](https://issues.redhat.com/browse/OCPBUGS-36862): 4.16 "Bad" reconciliation loops can cause unbounded dockercfg secret creation [#323](https://github.com/openshift/openshift-controller-manager/pull/323)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/1432fe0aa630ce83c0c3fd18c86e1fb9a47ae4cc...f0536caff57932e0b5fb88987477f4978463574a)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/1551101943313e3546cba7d9bc78effc79b40a8e)

* [OCPBUGS-37018](https://issues.redhat.com/browse/OCPBUGS-37018): Bump github.com/containers/image/v5 [#822](https://github.com/openshift/operator-framework-olm/pull/822)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/f4eac4271317504fcdeaf45fcf30bb01b1cd8bb0...1551101943313e3546cba7d9bc78effc79b40a8e)


### [prometheus](https://github.com/openshift/prometheus/tree/54b1197b232204f466c6e1991ce82016a121f08f)

* [OCPBUGS-36854](https://issues.redhat.com/browse/OCPBUGS-36854): cherry-pick upstream remote-write fix [#212](https://github.com/openshift/prometheus/pull/212)
* [Full changelog](https://github.com/openshift/prometheus/compare/69e2ed89ac1e73cfa36ce792d8b045b2e7f3c649...54b1197b232204f466c6e1991ce82016a121f08f)