# 4.16.5

Created: 2024-07-25 09:48:56 +0000 UTC

Image Digest: `sha256:ac78ebf77f95ab8ff52847ecd22592b545415e1ff6c7ff7f66bf81f158ae4f5e`

Promoted from registry.ci.openshift.org/ocp/release:4.16.0-0.nightly-2024-07-24-150731


## Changes from 4.16.3

### Components

* Kubectl upgraded from 1.29.6 to 1.29.7
* Kubernetes 1.29.6
* Kubernetes Tests 1.29.0
* Red Hat Enterprise Linux CoreOS upgraded from 416.94.202407081958-0 to 416.94.202407231922-0


### New images

* [operator-framework-tools](https://github.com/openshift/operator-framework-olm) git [15511019](https://github.com/openshift/operator-framework-olm/commit/1551101943313e3546cba7d9bc78effc79b40a8e) `sha256:e76c943f7a19379d3dfcb599fc3c57af1f123fe2d3fda908070aa79d97c62efb`


### Rebuilt images without code change

* [agent-installer-api-server](https://github.com/openshift/assisted-service) git [6b26a25e](https://github.com/openshift/assisted-service/commit/6b26a25e2ae7c4eae4a0f3ee0cedbd16c29bab8a) `sha256:5bb98edf376dfa838ce6899b0fc0e867237f34df63e8bf476d0ba9d2195131bd`
* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [373c87ad](https://github.com/openshift/assisted-installer/commit/373c87ad8f0d88816031b5c39764c80d900228d9) `sha256:6a8a7825b2039759548c6d83db384979cf4bf0a17d231c2a588c57e80623f74c`
* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [9ca7b58d](https://github.com/openshift/assisted-installer-agent/commit/9ca7b58d937c413f670a26c02435829b1fb3a196) `sha256:667efccd05c2154ebda8ae7a14fbb3ed4523ad8c1f459df9eda77a041239ae1c`
* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [6e6bb40d](https://github.com/openshift/agent-installer-utils/commit/6e6bb40d95bd966eb6b152e66c5b91794806c4bc) `sha256:041d983c6807129d0e0cf371133f8a1c0d5fde78a813c60aa1f293e64004fb43`
* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [2bd8891e](https://github.com/openshift/cluster-node-tuning-operator/commit/2bd8891ead93e161b9a871ac2eaa947bfc17309f) `sha256:41c673cf5d1c78e13dad9c79f4171a9baead48a38b61dec3a97a3a27fb80a54f`
* [docker-builder](https://github.com/openshift/builder) git [3b7a1b1b](https://github.com/openshift/builder/commit/3b7a1b1be130d5068481fe005b0a119fbd7057a6) `sha256:5098b6b1162e8d4e6ee422771330abb2044295417cc7788f094ba8ab2c05998e`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [1d5732f0](https://github.com/openshift/driver-toolkit/commit/1d5732f0209bb7d98661a53c66c5ac265272dce6) `sha256:b6888f97ae95a3fad643c7d1da50ca258309ad8e58082da2304a259392b7fd42`
* [ironic-agent](https://github.com/openshift/ironic-agent-image) git [63681a46](https://github.com/openshift/ironic-agent-image/commit/63681a469fdba2f223373ff36350bf2462b997a3) `sha256:5354396daafc857f302fcbc04b517df72fd60f8215904e216270e9ffdf3a1f19`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [93b8b5fa](https://github.com/openshift/ironic-rhcos-downloader/commit/93b8b5fa33950cadd2310278b7c762ebe0057418) `sha256:9ffc37fb5bef1c49ab01142d0107dc0fb376c6a318d87c1471ceb50f047feaf2`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:cd5fc310ea39597c3c4f00a8cb83ca1e598d6ad1bfa4fec67bac3395c3438246`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [3cc97098](https://github.com/openshift/machine-os-images/commit/3cc97098ecb9870dcb571f1ed1e26e2f70ce9f8c) `sha256:4f846c6203ec47c8696bbf645a87a5d7c44b628286c1e738675589bf1f56f1af`
* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [aa339e45](https://github.com/openshift/monitoring-plugin/commit/aa339e459718c1644d53fcdaf6a59bb751bfecea) `sha256:ffeb6edc9f09e75011c3547b2149b8120c68e7721d8ba2e7a6d659e6c83229bc`
* [must-gather](https://github.com/openshift/must-gather) git [aea114c0](https://github.com/openshift/must-gather/commit/aea114c0e263e6148b6a26f69f45af559a4f7bc7) `sha256:2d50634579d0c9be102647fa2eeca253f99e381002695b08fe22ae309b0f456d`
* [network-tools](https://github.com/openshift/network-tools) git [39eca100](https://github.com/openshift/network-tools/commit/39eca100c0978fb59234e21bf549b130914616ac) `sha256:4970c7ea91478c1232abbb9de916a00af97731fa1ca5d323a23f2f33e8a14f97`
* [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes) git [7f412836](https://github.com/openshift/ovn-kubernetes/commit/7f412836bd26c3d6e9735552a7fd615e7e7e9695) `sha256:db9d39fe95746bcd0f1759cf51e3d135b76ecd31356d218bafe117ada4432bb1`
* rhel-coreos `sha256:a8e09b8d4705be09a6355af5b181181be0181b43c5fcc4c0fc8a0ae42bd0a5a8`
* rhel-coreos-extensions `sha256:b37de0ae913dca7e412a544cc7011101ffb8e0a68724ffeaeb774c19a875bad6`
* [sdn](https://github.com/openshift/sdn) git [5b658c43](https://github.com/openshift/sdn/commit/5b658c433786797d0ac1b870db08346584794514) `sha256:05465d12c9ad94908fe0c5ee36e52b274776e661985f1d414b84638758d58b63`
* [tests](https://github.com/openshift/origin) git [ac6867d1](https://github.com/openshift/origin/commit/ac6867d1c00e18bf9a933863b8dcb32a133cbc5f) `sha256:a3cfc539fe8b1397d831e8db8494a54dcfcb95e3493106e2d3cdc11bd4dc3660`


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/38d2f1de5d5a03aafb7419f587b0a241de1e3ae0)

* [OCPBUGS-36965](https://issues.redhat.com/browse/OCPBUGS-36965): destroy/gcp: set value for DiscardLocalSsd [#8733](https://github.com/openshift/installer/pull/8733)
* [OCPBUGS-36720](https://issues.redhat.com/browse/OCPBUGS-36720): CORS-3582: capi: remove unused feature gates [#8716](https://github.com/openshift/installer/pull/8716)
* [OCPBUGS-36890](https://issues.redhat.com/browse/OCPBUGS-36890): [release-4.16] capi: start controllers after WaitGroup is created [#8726](https://github.com/openshift/installer/pull/8726)
* [OCPBUGS-36091](https://issues.redhat.com/browse/OCPBUGS-36091): [release-4.16] bump go-retryablehttp for CVE fix [#8654](https://github.com/openshift/installer/pull/8654)
* [OCPBUGS-36777](https://issues.redhat.com/browse/OCPBUGS-36777): Cleanup capi artifacts [#8719](https://github.com/openshift/installer/pull/8719)
* [Full changelog](https://github.com/openshift/installer/compare/e1f9f057ce87c1a4a5f3c268812fa4c9dc003cb7...38d2f1de5d5a03aafb7419f587b0a241de1e3ae0)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/f7a6e7f3be52ddcfcc5a641601805f1d60b81a77)

* [OCPBUGS-36673](https://issues.redhat.com/browse/OCPBUGS-36673): [4.16] Firmware Update causes BMH to get stuck in Preparing [#363](https://github.com/openshift/baremetal-operator/pull/363)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/7673d14fc567c3621e8d5fdca69ff03bd99504ef...f7a6e7f3be52ddcfcc5a641601805f1d60b81a77)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/ada2fa874dc7dc175da036dae67e8d7a61a27291)

* [OCPBUGS-31639](https://issues.redhat.com/browse/OCPBUGS-31639): Bump k8s dependencies to 1.29.7 [#1824](https://github.com/openshift/oc/pull/1824)
* [OCPBUGS-36764](https://issues.redhat.com/browse/OCPBUGS-36764): pkg/cli/admin/upgrade/rollback: Drop this command [#1820](https://github.com/openshift/oc/pull/1820)
* [Full changelog](https://github.com/openshift/oc/compare/0127eb4d4f1131758ef39f445eba783eaf7b240f...ada2fa874dc7dc175da036dae67e8d7a61a27291)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/0fc6474ac61af1fce53c3ed68ac2bba58364a768)

* [OCPBUGS-36834](https://issues.redhat.com/browse/OCPBUGS-36834): GCP passthrough permissions check to ignore problematic permissions. [#714](https://github.com/openshift/cloud-credential-operator/pull/714)
* [OCPBUGS-36954](https://issues.redhat.com/browse/OCPBUGS-36954): Update to azidentity v1.7.0 [#727](https://github.com/openshift/cloud-credential-operator/pull/727)
* [OCPBUGS-36031](https://issues.redhat.com/browse/OCPBUGS-36031): IBM/go-sdk-core update to v5.6.3 [#718](https://github.com/openshift/cloud-credential-operator/pull/718)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/c6c1b0b0977d9e0e33eb0b75c5d1c1f901a70ed0...0fc6474ac61af1fce53c3ed68ac2bba58364a768)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/74f5cfe1f7f655bdb56b4298b370d6b37507af83)

* [OCPBUGS-36285](https://issues.redhat.com/browse/OCPBUGS-36285): Mount htpasswds as volumeMounts in metal3-httpd container [#434](https://github.com/openshift/cluster-baremetal-operator/pull/434)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/5556c245c312981380136fe5380ed2e39e27168e...74f5cfe1f7f655bdb56b4298b370d6b37507af83)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/af5d3f6c171354c387e0cfc901110a7211715e9b)

* [OCPBUGS-32887](https://issues.redhat.com/browse/OCPBUGS-32887): Delete and recreate canary route to clear spec.host [#1099](https://github.com/openshift/cluster-ingress-operator/pull/1099)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/9eae38dce9615897991a3b0b1f73e2cdb33b7f8e...af5d3f6c171354c387e0cfc901110a7211715e9b)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/0afad8a00186e1e7a2712e9addf026e17b8cd950)

* [OCPBUGS-35303](https://issues.redhat.com/browse/OCPBUGS-35303): manifests: add ownership annotation for kubelet-bootstrap-kubeconfig [#1701](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1701)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/b0eea1220af097c61241ebe221af4c220d72f0b7...0afad8a00186e1e7a2712e9addf026e17b8cd950)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/cb3d884237cda666ad740cc9a104fc885b05bdae)

* [OCPBUGS-36907](https://issues.redhat.com/browse/OCPBUGS-36907): Add deprecated config runbook [#2411](https://github.com/openshift/cluster-monitoring-operator/pull/2411)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/70b819ecdd9199aa14e73869324cb2c962cb597b...cb3d884237cda666ad740cc9a104fc885b05bdae)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/dc0ef57c8512a150435226f5774a0f2263b0080b)

* [OCPBUGS-35836](https://issues.redhat.com/browse/OCPBUGS-35836): Propogate hypershift control plane priority class override to multus and preserve container resource requests [#2417](https://github.com/openshift/cluster-network-operator/pull/2417)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/e2f42540a5cbde654ef1b2535b1a6afc1fc7ab29...dc0ef57c8512a150435226f5774a0f2263b0080b)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/f82b0611f8d0cd637036bcede4684a8f466edb6a)

* [OCPBUGS-36898](https://issues.redhat.com/browse/OCPBUGS-36898): vendor: Update openshift/api to pick up zz_generated.crd-manifests [#1069](https://github.com/openshift/cluster-version-operator/pull/1069)
* [OCPBUGS-36764](https://issues.redhat.com/browse/OCPBUGS-36764): Revert "OCPBUGS-24535: pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream" [#1065](https://github.com/openshift/cluster-version-operator/pull/1065)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/6f553e98877e87d08a5c5fa9b13758a12cdcef8c...f82b0611f8d0cd637036bcede4684a8f466edb6a)


### [console](https://github.com/openshift/console/tree/56c4305339ba76d904739bd763804d9ebc7c537d)

* [OCPBUGS-36620](https://issues.redhat.com/browse/OCPBUGS-36620): Redirects to new PipelineRun logs URL from old PipelineRun logs URL [#14035](https://github.com/openshift/console/pull/14035)
* [OCPBUGS-36759](https://issues.redhat.com/browse/OCPBUGS-36759): RWOP accessMode is not available on OpenShift console UI [#14040](https://github.com/openshift/console/pull/14040)
* [OCPBUGS-37063](https://issues.redhat.com/browse/OCPBUGS-37063): hide 'View all steps in documentation' for ROSA and OSD [#14069](https://github.com/openshift/console/pull/14069)
* [OCPBUGS-36411](https://issues.redhat.com/browse/OCPBUGS-36411): fix BMH restart annotation [#14022](https://github.com/openshift/console/pull/14022)
* [OCPBUGS-36841](https://issues.redhat.com/browse/OCPBUGS-36841): ensure correct API version for OperandDetails [#14049](https://github.com/openshift/console/pull/14049)
* [Full changelog](https://github.com/openshift/console/compare/c76720242be623e84657ab63d19052e1770c1aff...56c4305339ba76d904739bd763804d9ebc7c537d)


### [console-operator](https://github.com/openshift/console-operator/tree/595d9d4a1d9a9a7d77e143a897446e52b65abf20)

* [OCPBUGS-34012](https://issues.redhat.com/browse/OCPBUGS-34012): Cache organization ID [#916](https://github.com/openshift/console-operator/pull/916)
* [Full changelog](https://github.com/openshift/console-operator/compare/70c05de7096e5eac77015f08a57c38c61309da55...595d9d4a1d9a9a7d77e143a897446e52b65abf20)


### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/7089efe6100c1f52f28adccf1dccc722b8dcacdc)

* [OCPBUGS-35525](https://issues.redhat.com/browse/OCPBUGS-35525): update to go 1.21 and k8s.io mods to v0.29.2 [#85](https://github.com/openshift/egress-router-cni/pull/85)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/7534ab906e5f9d38defbbbc6b169e5d829463bb5...7089efe6100c1f52f28adccf1dccc722b8dcacdc)


### [hypershift](https://github.com/openshift/hypershift/tree/bdf469e5bf1341d983eddc82375f6a3aae73e9ad)

* [OCPBUGS-37302](https://issues.redhat.com/browse/OCPBUGS-37302): fix(api): Nodepool CEL validation fix [#4395](https://github.com/openshift/hypershift/pull/4395)
* NO-JIRA: Red Hat Konflux update hypershift-release-mce-26 [#4392](https://github.com/openshift/hypershift/pull/4392)
* [OCPBUGS-37241](https://issues.redhat.com/browse/OCPBUGS-37241): extract rhel9 MCO binaries for rhel8 based MCO images [#4383](https://github.com/openshift/hypershift/pull/4383)
* NO-JIRA: [release-4.16] test/e2e: remove api budget checks [#4368](https://github.com/openshift/hypershift/pull/4368)
* [HOSTEDCP-1795](https://issues.redhat.com/browse/HOSTEDCP-1795), [HOSTEDCP-1796](https://issues.redhat.com/browse/HOSTEDCP-1796): Customize the self-generated cert validity and rotation [#4371](https://github.com/openshift/hypershift/pull/4371)
* NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-2 (release-4.16) - abandoned [#4364](https://github.com/openshift/hypershift/pull/4364)
* NO-JIRA: trivial typo fixes to configuring-storage.md [#4353](https://github.com/openshift/hypershift/pull/4353)
* [OCPBUGS-36849](https://issues.redhat.com/browse/OCPBUGS-36849): Add newline after TLS certs referenced by image.config [#4352](https://github.com/openshift/hypershift/pull/4352)
* [OCPBUGS-36589](https://issues.redhat.com/browse/OCPBUGS-36589): Fix Hypershift dump for non-OpenShift Management Clusters [#4317](https://github.com/openshift/hypershift/pull/4317)
* [Full changelog](https://github.com/openshift/hypershift/compare/073e376e1188a6883e83d091c110a59505144d3e...bdf469e5bf1341d983eddc82375f6a3aae73e9ad)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/957197389ec49234c3883bbb730bb630b459e24f)

* [OCPBUGS-36067](https://issues.redhat.com/browse/OCPBUGS-36067): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#71](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/71)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/32b4c00517de0f54bf738380064a12d58b031eec...957197389ec49234c3883bbb730bb630b459e24f)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/72d41aa9bf0e8ef7bffac13bd60a7c22d183fb72)

* [OCPBUGS-36073](https://issues.redhat.com/browse/OCPBUGS-36073): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#120](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/120)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/34fc9a4d3a4ae00d75bbfc01ac4c6385f9e94130...72d41aa9bf0e8ef7bffac13bd60a7c22d183fb72)


### [ironic](https://github.com/openshift/ironic-image/tree/39aee9b58edba6a7b4038b299b75fb93c73f67e9)

* [OCPBUGS-36838](https://issues.redhat.com/browse/OCPBUGS-36838): Update Jinja2 [#521](https://github.com/openshift/ironic-image/pull/521)
* [Full changelog](https://github.com/openshift/ironic-image/compare/2a0823e1b97f64209e5cee29e024a5abf3b436b8...39aee9b58edba6a7b4038b299b75fb93c73f67e9)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/d70a17fc8fee26d27c0624522f000504838f4b22)

* [OCPBUGS-36775](https://issues.redhat.com/browse/OCPBUGS-36775): templates: run disable-mglru conditionally [#4462](https://github.com/openshift/machine-config-operator/pull/4462)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/1ec936b6519a118ba05617efbe338e4961c71e7f...d70a17fc8fee26d27c0624522f000504838f4b22)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/2bfefccc11eb7f08ce6b1806624e03472bf33b6e)

* [OCPBUGS-37040](https://issues.redhat.com/browse/OCPBUGS-37040): use current working-dir for fetching release content for disk to mirror (#892) [#892](https://github.com/openshift/oc-mirror/pull/892)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/75da281989a147ead237e738507bbd8cec3175e5...2bfefccc11eb7f08ce6b1806624e03472bf33b6e)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/f0536caff57932e0b5fb88987477f4978463574a)

* [OCPBUGS-36862](https://issues.redhat.com/browse/OCPBUGS-36862): 4.16 "Bad" reconciliation loops can cause unbounded dockercfg secret creation [#323](https://github.com/openshift/openshift-controller-manager/pull/323)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/1432fe0aa630ce83c0c3fd18c86e1fb9a47ae4cc...f0536caff57932e0b5fb88987477f4978463574a)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/1551101943313e3546cba7d9bc78effc79b40a8e)

* [OCPBUGS-37018](https://issues.redhat.com/browse/OCPBUGS-37018): Bump github.com/containers/image/v5 [#822](https://github.com/openshift/operator-framework-olm/pull/822)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/f4eac4271317504fcdeaf45fcf30bb01b1cd8bb0...1551101943313e3546cba7d9bc78effc79b40a8e)


### [prometheus](https://github.com/openshift/prometheus/tree/54b1197b232204f466c6e1991ce82016a121f08f)

* [OCPBUGS-36854](https://issues.redhat.com/browse/OCPBUGS-36854): cherry-pick upstream remote-write fix [#212](https://github.com/openshift/prometheus/pull/212)
* [Full changelog](https://github.com/openshift/prometheus/compare/69e2ed89ac1e73cfa36ce792d8b045b2e7f3c649...54b1197b232204f466c6e1991ce82016a121f08f)