# 4.16.40

Created: 2025-05-08 12:16:51 +0000 UTC

Image Digest: `sha256:c5980117739f78099d5f088ba41e85fabbb44a2dac0c8bc374ffa7ece1ffd36f`

Promoted from quay.io/openshift-release-dev/ocp-release-nightly@sha256:ba7a766770d5a021ee063af34a4f59515ea0938292771162dc5426fb44ec1fea


## Changes from 4.16.39

### Components

* Kubectl 1.29.7
* Kubernetes 1.29.14
* Kubernetes Tests 1.29.0
* Red Hat Enterprise Linux CoreOS upgraded from 416.94.202504151456-0 to 416.94.202505051351-0


### Rebuilt images without code change

* [agent-installer-api-server](https://github.com/openshift/assisted-service) git [cf4e24ce](https://github.com/openshift/assisted-service/commit/cf4e24ce161365e4f0bc4286dedef3891041f7ba) `sha256:5bb8f338894bc4430f703014a0417f71b151106d91df6326b2e52a8d90d38caa`
* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [6e6bb40d](https://github.com/openshift/agent-installer-utils/commit/6e6bb40d95bd966eb6b152e66c5b91794806c4bc) `sha256:31b38c4f03eb2438f0d35a5339c515df3100fe7b53cbbecc98e114e392edde90`
* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [eacd6ee9](https://github.com/openshift/cluster-node-tuning-operator/commit/eacd6ee98ab26722603083768d4f58727a390dbe) `sha256:96724eaca2403877c052db82d66de1e58c61d5e5bd24b345a59ecbad492d3ced`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [1d5732f0](https://github.com/openshift/driver-toolkit/commit/1d5732f0209bb7d98661a53c66c5ac265272dce6) `sha256:aecc30fb0ba70fdc82de66a647e4c92ed5f69448e6cf475714b5e58e985cc7bb`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [93b8b5fa](https://github.com/openshift/ironic-rhcos-downloader/commit/93b8b5fa33950cadd2310278b7c762ebe0057418) `sha256:9c320ce8b364f6dd636f2c1bf1495d52a5b50ebc528bc712623adc89928fef7f`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [39480963](https://github.com/openshift/image-customization-controller/commit/394809633b6b2e33ea1af444f7237f066bf0abb1) `sha256:de033edacce23a3e8084ed568fb268b3f76ffa2854d33bdcf5a7206521ea6e0d`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [a99847b4](https://github.com/openshift/machine-os-images/commit/a99847b4450d58dbd0e487dd7e834586cd3e9289) `sha256:1af8cc24d8f11f55217c8566da76f5f59a47a71092ce516a06e2e4360ec28180`
* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [fcd3a8cc](https://github.com/openshift/monitoring-plugin/commit/fcd3a8cc6a5d5fcce5222a29c8de09fa04d8fc24) `sha256:19ed6a2f80b0277a18ca0fcfb40ef3cb2837a14b4c9820b32525afe37b63373a`
* [network-tools](https://github.com/openshift/network-tools) git [234ed43e](https://github.com/openshift/network-tools/commit/234ed43e3e7b2cfcb76a19c80fcdb573a625309f) `sha256:6f3f304958db2f48b0391a2a9900ef6802b21aa8cf927c65e37d47f1bc73d00a`
* rhel-coreos `sha256:d4de3467370e8617b9644f30332914731744adede8da15ff380398a30af986b6`
* rhel-coreos-extensions `sha256:476af07ccb9629a3632a683c509e15ba7b675f3543d01a698b3add0eccc0272b`
* [sdn](https://github.com/openshift/sdn) git [cbddb0be](https://github.com/openshift/sdn/commit/cbddb0bee05ec89d1379ced8d1aab7269d55daf2) `sha256:fc3725f841a9b3c1b04f0c9b2228d907b2f42acde295beb93e14e99a48a8598c`
* [tools](https://github.com/openshift/oc) git [ee354f66](https://github.com/openshift/oc/commit/ee354f66de43b037ef8b0ed55ce65c6c42aa7b9c) `sha256:9112124bd8c3108d6f96487b312bd0bd60e3df1b114532da9b517f07ae0b0404`


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/69f77762a6f8ba6bcdc185c4ed6e7a88fb8a5154)

* [OCPBUGS-53718](https://issues.redhat.com/browse/OCPBUGS-53718): Bump jwt to 4.5.2 in release-4.16 (#1091) [#1091](https://github.com/openshift/assisted-installer/pull/1091)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/27db6d764cbb244b6b817b0ddc289f0bd79f1930...69f77762a6f8ba6bcdc185c4ed6e7a88fb8a5154)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/05bd7e0cbf7f29c61f9d9daa969d809d13bb3dc9)

* [OCPBUGS-53710](https://issues.redhat.com/browse/OCPBUGS-53710): Bump jwt to 4.5.2 in release-4.16 (#971) [#971](https://github.com/openshift/assisted-installer-agent/pull/971)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/5d581421e2cb97db33a111c82d06cb1d275139a7...05bd7e0cbf7f29c61f9d9daa969d809d13bb3dc9)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/c567cf94247e7d466a2f2aacbfe96253613c8cf3)

* [OCPBUGS-54990](https://issues.redhat.com/browse/OCPBUGS-54990): Re-reconcile machine on NIC provisioning failure [#137](https://github.com/openshift/machine-api-provider-azure/pull/137)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/100d2bb8abf8bac723b1f01d7509ba5c3f3303c7...c567cf94247e7d466a2f2aacbfe96253613c8cf3)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/91f0e415cc77531d7b6d6108b4a78aff779c2a40)

* [OCPBUGS-35040](https://issues.redhat.com/browse/OCPBUGS-35040): Power VS: Add ports needed for private clusters to security group [#8546](https://github.com/openshift/installer/pull/8546)
* [Full changelog](https://github.com/openshift/installer/compare/40d677664f1f9e55ea27a9f6faa3fa8f763bc823...91f0e415cc77531d7b6d6108b4a78aff779c2a40)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/9989e43ffd2a2b17dd14d7cd6204558507e1f1b1)

* [OCPBUGS-53510](https://issues.redhat.com/browse/OCPBUGS-53510): fix CVE-2025-30204 [#1403](https://github.com/openshift/cluster-etcd-operator/pull/1403)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/3f2ce4889c255391323d8bdf07dece99e87dbccd...9989e43ffd2a2b17dd14d7cd6204558507e1f1b1)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/db952dd8188afc450be6f8c60d00e9068377c266)

* [OCPBUGS-53317](https://issues.redhat.com/browse/OCPBUGS-53317): Fix feature migration for EgressIP [#2673](https://github.com/openshift/cluster-network-operator/pull/2673)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/10162672f39b812dbfdbc3fa51f634c7851c1df1...db952dd8188afc450be6f8c60d00e9068377c266)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/6dde5732618244c79b4481f6a3b7a6e7dd5c28f4)

* [OCPBUGS-55457](https://issues.redhat.com/browse/OCPBUGS-55457): Adding mutex to func createSamples on handler.go [#633](https://github.com/openshift/cluster-samples-operator/pull/633)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/7ee5f8f5eed5351627709eade6e5916790c6f8c5...6dde5732618244c79b4481f6a3b7a6e7dd5c28f4)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/d0d0d6e7614148e497a10001ac16af689506c626)

* [OCPBUGS-55156](https://issues.redhat.com/browse/OCPBUGS-55156): Fix a panic caused by a data race [#1178](https://github.com/openshift/cluster-version-operator/pull/1178)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/6af06e02dd84880a6389284840a8d95c91bf226b...d0d0d6e7614148e497a10001ac16af689506c626)


### [console](https://github.com/openshift/console/tree/4a7dc548a3d29a915107925ae8f404bbeadf021c)

* [OCPBUGS-55378](https://issues.redhat.com/browse/OCPBUGS-55378): Do not load CSRs if user does not have permissions [#15000](https://github.com/openshift/console/pull/15000)
* [OCPBUGS-55644](https://issues.redhat.com/browse/OCPBUGS-55644): fix bug where operator appears twice [#15016](https://github.com/openshift/console/pull/15016)
* [OCPBUGS-45142](https://issues.redhat.com/browse/OCPBUGS-45142): Add missing pipelines plugin name to known plugins [#14550](https://github.com/openshift/console/pull/14550)
* [Full changelog](https://github.com/openshift/console/compare/96eb186d35ee5fea1f136951afdc52609b12faf1...4a7dc548a3d29a915107925ae8f404bbeadf021c)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/8851888abd5f7f47edd12a56f515b8f333c09372)

* [OCPBUGS-55249](https://issues.redhat.com/browse/OCPBUGS-55249): Disable shielded VMs for non-UEFI disks [#116](https://github.com/openshift/machine-api-provider-gcp/pull/116)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/380f339af123d187a24c4d6be972e18dd8308e6f...8851888abd5f7f47edd12a56f515b8f333c09372)


### [hypershift](https://github.com/openshift/hypershift/tree/ba952e163ff6021327d0ab9fff6c6570062f00c8)

* [OCPBUGS-51804](https://issues.redhat.com/browse/OCPBUGS-51804): Fix golang crypto dependency go.mod replacement [#5994](https://github.com/openshift/hypershift/pull/5994)
* [OCPBUGS-54914](https://issues.redhat.com/browse/OCPBUGS-54914): Add konnectivity-proxy sidecar to openshift-oauth-apiserver [#6026](https://github.com/openshift/hypershift/pull/6026)
* [Full changelog](https://github.com/openshift/hypershift/compare/64381e4e4e3c8bff6f469b7e149fdaa5a9ba4032...ba952e163ff6021327d0ab9fff6c6570062f00c8)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/f58519f1aaf9d686a44e3acb2c4952fd6a3535fc)

* [OCPBUGS-55248](https://issues.redhat.com/browse/OCPBUGS-55248), [OCPBUGS-55249](https://issues.redhat.com/browse/OCPBUGS-55249): Updates GCP credentials request [#1355](https://github.com/openshift/machine-api-operator/pull/1355)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/693374418a09d902fa9e10c909b0c38b5a513505...f58519f1aaf9d686a44e3acb2c4952fd6a3535fc)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/19d2a0275bf5e566dff786fbc88fe97c69d131d9)

* [OCPBUGS-54831](https://issues.redhat.com/browse/OCPBUGS-54831): Make mtu-migration run after wait-for-primary-ip [#4990](https://github.com/openshift/machine-config-operator/pull/4990)
* [OCPBUGS-55684](https://issues.redhat.com/browse/OCPBUGS-55684): MSBIC should not update windows machinesets [#5028](https://github.com/openshift/machine-config-operator/pull/5028)
* [OCPBUGS-35921](https://issues.redhat.com/browse/OCPBUGS-35921): userCA and cloudCA certfiicates are not removed from nodes and ignition config [#4419](https://github.com/openshift/machine-config-operator/pull/4419)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/d00398e9d7c250a6361222a1024209ca4f73f79d...19d2a0275bf5e566dff786fbc88fe97c69d131d9)


### [prometheus](https://github.com/openshift/prometheus/tree/396e723fdbfb6ef53431dcb35c0c3f84de0712c1)

* [OCPBUGS-54942](https://issues.redhat.com/browse/OCPBUGS-54942): Scraping: Bump cache iteration after error to avoid false duplicate detection. [#250](https://github.com/openshift/prometheus/pull/250)
* [Full changelog](https://github.com/openshift/prometheus/compare/09479fe37af9d9f187cb21796e73213c80c902fc...396e723fdbfb6ef53431dcb35c0c3f84de0712c1)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/9ff2408eb11efe30253ba6a7e9ad4bf92dcb8fab)

* [OCPBUGS-55201](https://issues.redhat.com/browse/OCPBUGS-55201): ingress: Reset metrics when ingress is deleted [#58](https://github.com/openshift/route-controller-manager/pull/58)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/3112b458983c6fca6f77d5a945fb0026186dace6...9ff2408eb11efe30253ba6a7e9ad4bf92dcb8fab)


### [tests](https://github.com/openshift/origin/tree/3073d4b11e064d854be2d2ebae0a97ab37d5043d)

* [OCPBUGS-55636](https://issues.redhat.com/browse/OCPBUGS-55636): [build] Ensure Git Clone Does Not Run Privileged [#29746](https://github.com/openshift/origin/pull/29746)
* [Full changelog](https://github.com/openshift/origin/compare/e47256fe8ed6c66675f23ea8d631b7cb7881a6a5...3073d4b11e064d854be2d2ebae0a97ab37d5043d)