# 4.16.40 Created: 2025-05-08 12:17:48 +0000 UTC Image Digest: `sha256:77260d121db0e3d6705d60a57b0da0b2063a3674c889b519f37567b7f7969b5d` ## Changes from 4.16.39 ### Components * Kubectl 1.29.7 * Kubernetes 1.29.14 * Kubernetes Tests 1.29.0 * Red Hat Enterprise Linux CoreOS upgraded from 416.94.202504151456-0 to 416.94.202505051351-0 ### Rebuilt images without code change * [agent-installer-api-server](https://github.com/openshift/assisted-service) git [cf4e24ce](https://github.com/openshift/assisted-service/commit/cf4e24ce161365e4f0bc4286dedef3891041f7ba) `sha256:fb29de1b8e2c8cb210758886c40cc788190c6fb1e94daea6dd7a7c4d01ac1d25` * [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [6e6bb40d](https://github.com/openshift/agent-installer-utils/commit/6e6bb40d95bd966eb6b152e66c5b91794806c4bc) `sha256:4f82e4b1c9d078f27cf61ae8d581c03802ceb289499f49c8105bf77c635906a0` * [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [eacd6ee9](https://github.com/openshift/cluster-node-tuning-operator/commit/eacd6ee98ab26722603083768d4f58727a390dbe) `sha256:b3413f9deb40e709eef39571dfe63328d8c8f5f311a58c15939d17f5acef8687` * [driver-toolkit](https://github.com/openshift/driver-toolkit) git [1d5732f0](https://github.com/openshift/driver-toolkit/commit/1d5732f0209bb7d98661a53c66c5ac265272dce6) `sha256:d65c47bfe03dcb3567d8063fd7fc0c94caf176d517163e54a3c988a6ea5ad10b` * [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [93b8b5fa](https://github.com/openshift/ironic-rhcos-downloader/commit/93b8b5fa33950cadd2310278b7c762ebe0057418) `sha256:9f724158c4f8bb3ed8285a6d481710d01683dae88d538bcc28e56865093cd0ff` * [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [39480963](https://github.com/openshift/image-customization-controller/commit/394809633b6b2e33ea1af444f7237f066bf0abb1) `sha256:8991e29d2c9480cf1ac21aa53f912207196f742b6625a289900a489d32113f0b` * [machine-os-images](https://github.com/openshift/machine-os-images) git [a99847b4](https://github.com/openshift/machine-os-images/commit/a99847b4450d58dbd0e487dd7e834586cd3e9289) `sha256:648c75854be14c1a8f99304d4e5318607e597b8eaec40b197378da055febb4c3` * [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [fcd3a8cc](https://github.com/openshift/monitoring-plugin/commit/fcd3a8cc6a5d5fcce5222a29c8de09fa04d8fc24) `sha256:d7bd0bf0c0812009235386ee9e12c78b7f8477b1f8ccf18d0dc09f738220415a` * [network-tools](https://github.com/openshift/network-tools) git [234ed43e](https://github.com/openshift/network-tools/commit/234ed43e3e7b2cfcb76a19c80fcdb573a625309f) `sha256:a7fd3d4836c4839b3229bcf91b51070e5f7f75535f92aff9088043299719c418` * rhel-coreos `sha256:dc4d1de09587879f83359f3bd78f86ceac0ac3aacce4f0b0c0814d0baf5e2143` * rhel-coreos-extensions `sha256:658fd159c21abb2e6c0f573a1c687565b45858a3122a56769a95e3378642f278` * [sdn](https://github.com/openshift/sdn) git [cbddb0be](https://github.com/openshift/sdn/commit/cbddb0bee05ec89d1379ced8d1aab7269d55daf2) `sha256:1c06dc83c6de94b6ffda3fe352a0288e469164542632625adbdb42eca93bbe9c` * [tools](https://github.com/openshift/oc) git [ee354f66](https://github.com/openshift/oc/commit/ee354f66de43b037ef8b0ed55ce65c6c42aa7b9c) `sha256:c9abbeea2672bf1072dfc16eaaa19d47413c6d80169eae0b6cf357369147708f` ### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/69f77762a6f8ba6bcdc185c4ed6e7a88fb8a5154) * [OCPBUGS-53718](https://issues.redhat.com/browse/OCPBUGS-53718): Bump jwt to 4.5.2 in release-4.16 (#1091) [#1091](https://github.com/openshift/assisted-installer/pull/1091) * [Full changelog](https://github.com/openshift/assisted-installer/compare/27db6d764cbb244b6b817b0ddc289f0bd79f1930...69f77762a6f8ba6bcdc185c4ed6e7a88fb8a5154) ### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/05bd7e0cbf7f29c61f9d9daa969d809d13bb3dc9) * [OCPBUGS-53710](https://issues.redhat.com/browse/OCPBUGS-53710): Bump jwt to 4.5.2 in release-4.16 (#971) [#971](https://github.com/openshift/assisted-installer-agent/pull/971) * [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/5d581421e2cb97db33a111c82d06cb1d275139a7...05bd7e0cbf7f29c61f9d9daa969d809d13bb3dc9) ### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/c567cf94247e7d466a2f2aacbfe96253613c8cf3) * [OCPBUGS-54990](https://issues.redhat.com/browse/OCPBUGS-54990): Re-reconcile machine on NIC provisioning failure [#137](https://github.com/openshift/machine-api-provider-azure/pull/137) * [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/100d2bb8abf8bac723b1f01d7509ba5c3f3303c7...c567cf94247e7d466a2f2aacbfe96253613c8cf3) ### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/91f0e415cc77531d7b6d6108b4a78aff779c2a40) * [OCPBUGS-35040](https://issues.redhat.com/browse/OCPBUGS-35040): Power VS: Add ports needed for private clusters to security group [#8546](https://github.com/openshift/installer/pull/8546) * [Full changelog](https://github.com/openshift/installer/compare/40d677664f1f9e55ea27a9f6faa3fa8f763bc823...91f0e415cc77531d7b6d6108b4a78aff779c2a40) ### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/9989e43ffd2a2b17dd14d7cd6204558507e1f1b1) * [OCPBUGS-53510](https://issues.redhat.com/browse/OCPBUGS-53510): fix CVE-2025-30204 [#1403](https://github.com/openshift/cluster-etcd-operator/pull/1403) * [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/3f2ce4889c255391323d8bdf07dece99e87dbccd...9989e43ffd2a2b17dd14d7cd6204558507e1f1b1) ### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/db952dd8188afc450be6f8c60d00e9068377c266) * [OCPBUGS-53317](https://issues.redhat.com/browse/OCPBUGS-53317): Fix feature migration for EgressIP [#2673](https://github.com/openshift/cluster-network-operator/pull/2673) * [Full changelog](https://github.com/openshift/cluster-network-operator/compare/10162672f39b812dbfdbc3fa51f634c7851c1df1...db952dd8188afc450be6f8c60d00e9068377c266) ### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/6dde5732618244c79b4481f6a3b7a6e7dd5c28f4) * [OCPBUGS-55457](https://issues.redhat.com/browse/OCPBUGS-55457): Adding mutex to func createSamples on handler.go [#633](https://github.com/openshift/cluster-samples-operator/pull/633) * [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/7ee5f8f5eed5351627709eade6e5916790c6f8c5...6dde5732618244c79b4481f6a3b7a6e7dd5c28f4) ### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/d0d0d6e7614148e497a10001ac16af689506c626) * [OCPBUGS-55156](https://issues.redhat.com/browse/OCPBUGS-55156): Fix a panic caused by a data race [#1178](https://github.com/openshift/cluster-version-operator/pull/1178) * [Full changelog](https://github.com/openshift/cluster-version-operator/compare/6af06e02dd84880a6389284840a8d95c91bf226b...d0d0d6e7614148e497a10001ac16af689506c626) ### [console](https://github.com/openshift/console/tree/4a7dc548a3d29a915107925ae8f404bbeadf021c) * [OCPBUGS-55378](https://issues.redhat.com/browse/OCPBUGS-55378): Do not load CSRs if user does not have permissions [#15000](https://github.com/openshift/console/pull/15000) * [OCPBUGS-55644](https://issues.redhat.com/browse/OCPBUGS-55644): fix bug where operator appears twice [#15016](https://github.com/openshift/console/pull/15016) * [OCPBUGS-45142](https://issues.redhat.com/browse/OCPBUGS-45142): Add missing pipelines plugin name to known plugins [#14550](https://github.com/openshift/console/pull/14550) * [Full changelog](https://github.com/openshift/console/compare/96eb186d35ee5fea1f136951afdc52609b12faf1...4a7dc548a3d29a915107925ae8f404bbeadf021c) ### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/8851888abd5f7f47edd12a56f515b8f333c09372) * [OCPBUGS-55249](https://issues.redhat.com/browse/OCPBUGS-55249): Disable shielded VMs for non-UEFI disks [#116](https://github.com/openshift/machine-api-provider-gcp/pull/116) * [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/380f339af123d187a24c4d6be972e18dd8308e6f...8851888abd5f7f47edd12a56f515b8f333c09372) ### [hypershift](https://github.com/openshift/hypershift/tree/ba952e163ff6021327d0ab9fff6c6570062f00c8) * [OCPBUGS-51804](https://issues.redhat.com/browse/OCPBUGS-51804): Fix golang crypto dependency go.mod replacement [#5994](https://github.com/openshift/hypershift/pull/5994) * [OCPBUGS-54914](https://issues.redhat.com/browse/OCPBUGS-54914): Add konnectivity-proxy sidecar to openshift-oauth-apiserver [#6026](https://github.com/openshift/hypershift/pull/6026) * [Full changelog](https://github.com/openshift/hypershift/compare/64381e4e4e3c8bff6f469b7e149fdaa5a9ba4032...ba952e163ff6021327d0ab9fff6c6570062f00c8) ### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/f58519f1aaf9d686a44e3acb2c4952fd6a3535fc) * [OCPBUGS-55248](https://issues.redhat.com/browse/OCPBUGS-55248), [OCPBUGS-55249](https://issues.redhat.com/browse/OCPBUGS-55249): Updates GCP credentials request [#1355](https://github.com/openshift/machine-api-operator/pull/1355) * [Full changelog](https://github.com/openshift/machine-api-operator/compare/693374418a09d902fa9e10c909b0c38b5a513505...f58519f1aaf9d686a44e3acb2c4952fd6a3535fc) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/19d2a0275bf5e566dff786fbc88fe97c69d131d9) * [OCPBUGS-54831](https://issues.redhat.com/browse/OCPBUGS-54831): Make mtu-migration run after wait-for-primary-ip [#4990](https://github.com/openshift/machine-config-operator/pull/4990) * [OCPBUGS-55684](https://issues.redhat.com/browse/OCPBUGS-55684): MSBIC should not update windows machinesets [#5028](https://github.com/openshift/machine-config-operator/pull/5028) * [OCPBUGS-35921](https://issues.redhat.com/browse/OCPBUGS-35921): userCA and cloudCA certfiicates are not removed from nodes and ignition config [#4419](https://github.com/openshift/machine-config-operator/pull/4419) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/d00398e9d7c250a6361222a1024209ca4f73f79d...19d2a0275bf5e566dff786fbc88fe97c69d131d9) ### [prometheus](https://github.com/openshift/prometheus/tree/396e723fdbfb6ef53431dcb35c0c3f84de0712c1) * [OCPBUGS-54942](https://issues.redhat.com/browse/OCPBUGS-54942): Scraping: Bump cache iteration after error to avoid false duplicate detection. [#250](https://github.com/openshift/prometheus/pull/250) * [Full changelog](https://github.com/openshift/prometheus/compare/09479fe37af9d9f187cb21796e73213c80c902fc...396e723fdbfb6ef53431dcb35c0c3f84de0712c1) ### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/9ff2408eb11efe30253ba6a7e9ad4bf92dcb8fab) * [OCPBUGS-55201](https://issues.redhat.com/browse/OCPBUGS-55201): ingress: Reset metrics when ingress is deleted [#58](https://github.com/openshift/route-controller-manager/pull/58) * [Full changelog](https://github.com/openshift/route-controller-manager/compare/3112b458983c6fca6f77d5a945fb0026186dace6...9ff2408eb11efe30253ba6a7e9ad4bf92dcb8fab) ### [tests](https://github.com/openshift/origin/tree/3073d4b11e064d854be2d2ebae0a97ab37d5043d) * [OCPBUGS-55636](https://issues.redhat.com/browse/OCPBUGS-55636): [build] Ensure Git Clone Does Not Run Privileged [#29746](https://github.com/openshift/origin/pull/29746) * [Full changelog](https://github.com/openshift/origin/compare/e47256fe8ed6c66675f23ea8d631b7cb7881a6a5...3073d4b11e064d854be2d2ebae0a97ab37d5043d)