# 4.16.14

Created: 2024-09-19 13:00:37 +0000 UTC

Image Digest: `sha256:0521a0f1acd2d1b77f76259cb9bae9c743c60c37d9903806a3372c1414253658`

Promoted from registry.ci.openshift.org/ocp/release:4.16.0-0.nightly-2024-09-18-233707


## Changes from 4.16.13

### Components

* Kubectl 1.29.7
* Kubernetes 1.29.8
* Kubernetes Tests 1.29.0
* Red Hat Enterprise Linux CoreOS upgraded from 416.94.202409092052-0 to 416.94.202409181502-0


### Rebuilt images without code change

* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [9ca7b58d](https://github.com/openshift/assisted-installer-agent/commit/9ca7b58d937c413f670a26c02435829b1fb3a196) `sha256:714d0b45472e190849c890c80e257b64c4a685d0f0368629082d602566c11d42`
* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [9a6f6b14](https://github.com/openshift/cluster-node-tuning-operator/commit/9a6f6b14ab6d6142afc442e3a504b54d113b034e) `sha256:c5ebb637466e7be51fb2efc750b147cb61768da513cceb0e51f62c199bea9831`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [1d5732f0](https://github.com/openshift/driver-toolkit/commit/1d5732f0209bb7d98661a53c66c5ac265272dce6) `sha256:78828089c880e1c7187e0e61948628721a5d686fc0f13e9804e60897c78594dd`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [93b8b5fa](https://github.com/openshift/ironic-rhcos-downloader/commit/93b8b5fa33950cadd2310278b7c762ebe0057418) `sha256:df53cf3808a773e5922dddb959b754525fc9c427a8e3532107bf0a9a26e0e2c7`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [3cc97098](https://github.com/openshift/machine-os-images/commit/3cc97098ecb9870dcb571f1ed1e26e2f70ce9f8c) `sha256:3cb43c8ea36b72e268e6af3ceb59793d8b78d3d8c0b71889629983be92420606`
* [network-tools](https://github.com/openshift/network-tools) git [39eca100](https://github.com/openshift/network-tools/commit/39eca100c0978fb59234e21bf549b130914616ac) `sha256:e386bd6b25eb9d12e1ea380e8e19bde61b6d717fc4085c2ff495625bf7b6599c`
* [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes) git [90d05916](https://github.com/openshift/ovn-kubernetes/commit/90d0591637753ab3d3b18535e506c47e91194da9) `sha256:f2bc0af72448d92260679d392d2cbc3ebaa8de4a2423ca9c468c3d954d89b534`
* rhel-coreos `sha256:37a57ba7f66cd31f65b24f91a44930eb5056d6e3186efc2bad8ac6011d0c3bc5`
* rhel-coreos-extensions `sha256:fda06d12db2bb108f76399825ebdb186f78331c50b08ee731bfa0020d00251d4`
* [sdn](https://github.com/openshift/sdn) git [5b658c43](https://github.com/openshift/sdn/commit/5b658c433786797d0ac1b870db08346584794514) `sha256:2c6396dcb07d870949289991fb33a883d760aba5190696aa316e9e2ad6e85b03`
* [tools](https://github.com/openshift/oc) git [c44c839b](https://github.com/openshift/oc/commit/c44c839bcb77d6d41229e2d35e45002fa144cf72) `sha256:6c3f7eadc425368d3d395bd7ffbbfc97e19005f09fba227cce1e6a05dbc5af12`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/d56975695e809488e8c7a610ff07fac50eb452a1)

* [OCPBUGS-36577](https://issues.redhat.com/browse/OCPBUGS-36577): Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#6752) [#6752](https://github.com/openshift/assisted-service/pull/6752)
* [Full changelog](https://github.com/openshift/assisted-service/compare/6b26a25e2ae7c4eae4a0f3ee0cedbd16c29bab8a...d56975695e809488e8c7a610ff07fac50eb452a1)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/daa3384bd58be1cb8794d0afb93896a37f364277)

* [OCPBUGS-39287](https://issues.redhat.com/browse/OCPBUGS-39287): Fix var_files syntax to work on older version of ansible [#8936](https://github.com/openshift/installer/pull/8936)
* [OCPBUGS-41929](https://issues.redhat.com/browse/OCPBUGS-41929): Add AWS c7g,m7g,r8g to tested instance types [#9009](https://github.com/openshift/installer/pull/9009)
* [OCPBUGS-36855](https://issues.redhat.com/browse/OCPBUGS-36855): Openstack UPI - Reintroduce unique resource names. [#8724](https://github.com/openshift/installer/pull/8724)
* [OCPBUGS-39082](https://issues.redhat.com/browse/OCPBUGS-39082): incorrect folder gen, workaround govmomi vm folder path bug [#8912](https://github.com/openshift/installer/pull/8912)
* [OCPBUGS-39496](https://issues.redhat.com/browse/OCPBUGS-39496): capi/aws/byo-vpc/multi-cidr: fix group rules [#8953](https://github.com/openshift/installer/pull/8953)
* [Full changelog](https://github.com/openshift/installer/compare/acbd12cec5dc7ceb53b66e14c10775119abe5c26...daa3384bd58be1cb8794d0afb93896a37f364277)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/ae55a7053373827ad4b1aff6dceae5f077ce90e5)

* [OCPBUGS-39490](https://issues.redhat.com/browse/OCPBUGS-39490): Disallow fetching secrets from namespaces different from the host's one [#378](https://github.com/openshift/baremetal-operator/pull/378)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/25719d2e309bf82d4370cd8d5b2114e8fdc28bde...ae55a7053373827ad4b1aff6dceae5f077ce90e5)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/9d2162f45590dd0ed0a228b79ec036d6d44a7208)

* Revert "[release-4.16]  OCPBUGS-41903: pkg/operator/azurepathfixcontroller: do not sync on non-azure storage" [#1119](https://github.com/openshift/cluster-image-registry-operator/pull/1119)
* [OCPBUGS-41903](https://issues.redhat.com/browse/OCPBUGS-41903): pkg/operator/azurepathfixcontroller: do not sync on non-azure storage [#1115](https://github.com/openshift/cluster-image-registry-operator/pull/1115)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/39690c160969cc9cb1640985ba2f15541b757261...9d2162f45590dd0ed0a228b79ec036d6d44a7208)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/db6bc3a38a7280653827b22b258378fc149d526c)

* [OCPBUGS-41910](https://issues.redhat.com/browse/OCPBUGS-41910): filter alerts sent to Telemeter [#2471](https://github.com/openshift/cluster-monitoring-operator/pull/2471)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/985956716e900c7da06a3e07097e7874689370cc...db6bc3a38a7280653827b22b258378fc149d526c)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/32a7e8919ab782d8ede30144c1354236c557a8ed)

* [OCPBUGS-37763](https://issues.redhat.com/browse/OCPBUGS-37763): Handle random crictl errors in iptables-alerter [#2452](https://github.com/openshift/cluster-network-operator/pull/2452)
* [OCPBUGS-41555](https://issues.redhat.com/browse/OCPBUGS-41555): HyperShift: do not use antiaffinity on single replica control planes [#2494](https://github.com/openshift/cluster-network-operator/pull/2494)
* [OCPBUGS-37937](https://issues.redhat.com/browse/OCPBUGS-37937): Add proxy env vars to onvkube-node [#2457](https://github.com/openshift/cluster-network-operator/pull/2457)
* [OCPBUGS-41607](https://issues.redhat.com/browse/OCPBUGS-41607): set required-scc for openshift workloads [#2496](https://github.com/openshift/cluster-network-operator/pull/2496)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/64bf8adae331c75a21e106f9fb537b2b6a9243a8...32a7e8919ab782d8ede30144c1354236c557a8ed)


### [console](https://github.com/openshift/console/tree/0b1616cb0c45e5fdb5792fb96ffce1f157705369)

* [OCPBUGS-34518](https://issues.redhat.com/browse/OCPBUGS-34518): Restore user toggle when authentification is disabled [#13902](https://github.com/openshift/console/pull/13902)
* [OCPBUGS-41619](https://issues.redhat.com/browse/OCPBUGS-41619): Use vCenterCluster value from CM as primary resource [#14268](https://github.com/openshift/console/pull/14268)
* [OCPBUGS-37046](https://issues.redhat.com/browse/OCPBUGS-37046): Fix TypeError: Cannot read properties of null (reading 'metadata') in Topology view [#14059](https://github.com/openshift/console/pull/14059)
* [OCPBUGS-38911](https://issues.redhat.com/browse/OCPBUGS-38911): Values entered into the Instantiate Template form are automatically cleared [#14187](https://github.com/openshift/console/pull/14187)
* [Full changelog](https://github.com/openshift/console/compare/41af3e685e3cc7aaa72da0fc807458d2ba2b057c...0b1616cb0c45e5fdb5792fb96ffce1f157705369)


### [docker-builder](https://github.com/openshift/builder/tree/5e57cc83b011f98b9cd10b9f97e9d5ae6e5ee6be)

* [OCPBUGS-30455](https://issues.redhat.com/browse/OCPBUGS-30455): bump google.golang.org/protobuf to 1.33.0 [#402](https://github.com/openshift/builder/pull/402)
* [Full changelog](https://github.com/openshift/builder/compare/fee4b5846e5b9eca535640070be38c0bdc33a136...5e57cc83b011f98b9cd10b9f97e9d5ae6e5ee6be)


### [hypershift](https://github.com/openshift/hypershift/tree/c68950b6a4d2cc96cb42fb16c26da94dafa48891)

* NO-JIRA: chore(deps): update golang docker tag to v1.23 (release-4.16) [#4729](https://github.com/openshift/hypershift/pull/4729)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.34 (release-4.16) [#4728](https://github.com/openshift/hypershift/pull/4728)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#4727](https://github.com/openshift/hypershift/pull/4727)
* [OCPBUGS-38058](https://issues.redhat.com/browse/OCPBUGS-38058): Add HTTP konnectivity proxy to OAuth server [#4496](https://github.com/openshift/hypershift/pull/4496)
* [HOSTEDCP-1955](https://issues.redhat.com/browse/HOSTEDCP-1955): bump CCO version [#4696](https://github.com/openshift/hypershift/pull/4696)
* [Full changelog](https://github.com/openshift/hypershift/compare/3d129eede1e71bb65aa450d722be9669bbc8e49a...c68950b6a4d2cc96cb42fb16c26da94dafa48891)


### [ironic](https://github.com/openshift/ironic-image/tree/e670fd3f1b0aa5be3ccc7584a9d716d04c5b0776)

* [OCPBUGS-38510](https://issues.redhat.com/browse/OCPBUGS-38510): set min version for python3-webob [#553](https://github.com/openshift/ironic-image/pull/553)
* [Full changelog](https://github.com/openshift/ironic-image/compare/a428def3622bab2c00f22a9e3d1ba82ac6899e80...e670fd3f1b0aa5be3ccc7584a9d716d04c5b0776)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/b8cf4bf5b77fca62c4bbf267c6a16440ca7fc13a)

* [OCPBUGS-38510](https://issues.redhat.com/browse/OCPBUGS-38510): set webob and bump werkzeug [#149](https://github.com/openshift/ironic-agent-image/pull/149)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/63681a469fdba2f223373ff36350bf2462b997a3...b8cf4bf5b77fca62c4bbf267c6a16440ca7fc13a)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/6a425abbe5e330f0e7bc0849f4927d4c55d0c9e5)

* [OCPBUGS-41806](https://issues.redhat.com/browse/OCPBUGS-41806): When newly built images rolled out, the update progress is not displaying correctly (went 0 --> 3) [#4584](https://github.com/openshift/machine-config-operator/pull/4584)
* [OCPBUGS-41518](https://issues.redhat.com/browse/OCPBUGS-41518): CVE-2024-3727 ose-machine-config-operator-container: containers/image: digest type does not guarantee valid type [#4569](https://github.com/openshift/machine-config-operator/pull/4569)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/da3a6e3437c9438f146ce50063b1f862fd0156b8...6a425abbe5e330f0e7bc0849f4927d4c55d0c9e5)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/c50e9ce2b292a188e99e72fc6dc59d1fb5e9e0cb)

* [OCPBUGS-41540](https://issues.redhat.com/browse/OCPBUGS-41540): [4.16] add optional schema migrations; default to olm.bundle.object instead of olm.csv.metadata (#1384) [#859](https://github.com/openshift/operator-framework-olm/pull/859)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/c4c6542e2b56c33a8baba8266cc0c7d70e98077c...c50e9ce2b292a188e99e72fc6dc59d1fb5e9e0cb)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/60ebedf061fe1bb5279650fd637108b13b92d95f)

* [OCPBUGS-41976](https://issues.redhat.com/browse/OCPBUGS-41976): Update go.mod to fix CVE - 4.16 [#84](https://github.com/openshift/machine-api-provider-powervs/pull/84)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/6b57e6c1bf0ee22bd0d51fde1249209c53da07d1...60ebedf061fe1bb5279650fd637108b13b92d95f)


### [prometheus](https://github.com/openshift/prometheus/tree/c5c08df947236f3917abf14de481eb2f99fb07de)

* [OCPBUGS-39179](https://issues.redhat.com/browse/OCPBUGS-39179): Restore Prometheus functionality to accept samples with different timestamps from the same series in a single scrape. [#224](https://github.com/openshift/prometheus/pull/224)
* [Full changelog](https://github.com/openshift/prometheus/compare/1a133f0c8dd8225864c0fd472581836cdbac639a...c5c08df947236f3917abf14de481eb2f99fb07de)


### [tests](https://github.com/openshift/origin/tree/06403d4defedd9b48c4a8755389516eeb3be2b13)

* [OCPBUGS-39135](https://issues.redhat.com/browse/OCPBUGS-39135): Bump timeout for the pod-network-service endpoints check [#29052](https://github.com/openshift/origin/pull/29052)
* [Full changelog](https://github.com/openshift/origin/compare/c0f5926b93d95999a44c4237767dae066662b168...06403d4defedd9b48c4a8755389516eeb3be2b13)