# 4.17.21

Created: 2025-03-13 09:12:29 +0000 UTC

Image Digest: `sha256:875094103228a685ab9c2159f5bb97455a823d137e9da09bfd0e00af9296b042`


## Changes from 4.17.19

### Components

* Kubectl 1.30.5
* Kubernetes 1.30.10
* Kubernetes Tests 1.30.0
* Red Hat Enterprise Linux CoreOS upgraded from 417.94.202502251300-0 to 417.94.202503110101-0


### Removed images

* ovirt-machine-controllers


### Rebuilt images without code change

* [agent-installer-api-server](https://github.com/openshift/assisted-service) git [9145aec2](https://github.com/openshift/assisted-service/commit/9145aec2a9daa97078f47bbae1d577d9e2d566ce) `sha256:2833c256f9c6fb4d415d710d8bc2620b37493f0dd3decf0bf35cc308bcf5e2f6`
* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [ddb2740b](https://github.com/openshift/assisted-installer/commit/ddb2740b781fe067d6addd4ee868bbd827f26e9d) `sha256:7bd4c5d63f552231dac223cdafdeb99adb02c418064231286da88b24226c07ba`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [b41b8c8f](https://github.com/openshift/machine-api-provider-aws/commit/b41b8c8f52a76eb494d1dfcb796418c3549e4e5e) `sha256:1695a01b9680566efb61b43a80395eb90e3edc57decf59ec6f4e44e938eee195`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [ea4a8878](https://github.com/openshift/cluster-autoscaler-operator/commit/ea4a88786cf9b237dc446e01fdacd6fd65b73144) `sha256:6ca2097cdea9e3a2cab0b917de06ff3d1722f73f7cf81b9df25acdf779030b34`
* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [b6712f36](https://github.com/openshift/cluster-node-tuning-operator/commit/b6712f369eddb39fa68021ffb3d31fed7e5663a6) `sha256:f316395585ddf5564691724235ecdb64087f6ee7b466e64b5495ca2e89dcf555`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [859518f6](https://github.com/openshift/driver-toolkit/commit/859518f6952407a56ddf7d0562c98fe27e9e0efe) `sha256:bce72b5d72965531809e7424d271390575a0696896af4841290b30cdd54e1984`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [3a27d3ce](https://github.com/openshift/machine-api-provider-gcp/commit/3a27d3ce75bab31b9a04c212c929db8d507f3962) `sha256:d76526a9ae2770b2bb84d451b7d22739f06d82ea9120d8cebd1bcaa2a5044fe4`
* [ironic-agent](https://github.com/openshift/ironic-agent-image) git [f5f742d8](https://github.com/openshift/ironic-agent-image/commit/f5f742d8df2b1879a565809632ce2b43b965b4d4) `sha256:385491d05639aeee1d790d71ac919a07952ed37b8f08560d20cc61531162cb30`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [b698ea3e](https://github.com/openshift/ironic-rhcos-downloader/commit/b698ea3e0818bfcb8c27c4964bcaaaeee5f49818) `sha256:55fbe3a93e167cd774f1c114f99b3e21a8ff56035af238b01963eef31e7742e6`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [9e76dac7](https://github.com/openshift/machine-os-images/commit/9e76dac7c015538cea342bb0d4b226a9ffe58754) `sha256:2b41e6f9c0f7a830cd59290ff02bd619838c75170b19025a9d01569fcac9cd6a`
* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [ad057d32](https://github.com/openshift/monitoring-plugin/commit/ad057d32fa7e2cf4033f535dc9d68c0a2c49f004) `sha256:fdacf3a87bf26df7c21ec1200b046f985ff609f492b88e8c777ba3a796480203`
* [must-gather](https://github.com/openshift/must-gather) git [56b34277](https://github.com/openshift/must-gather/commit/56b34277f6e67963db422373c360509176e5565a) `sha256:3a8bd91114bde3209d337e117f1a3ad9b186bb833f50de3eb03133a5f157c147`
* [network-tools](https://github.com/openshift/network-tools) git [8e170b4f](https://github.com/openshift/network-tools/commit/8e170b4f41c9e80f0f8dd42d6cf6c169872b15d1) `sha256:8648c92dbbbf1ebbee711a4800f1224f63e9478d5c3bccaab48637c080701274`
* [networking-console-plugin](https://github.com/openshift/networking-console-plugin) git [9b76377b](https://github.com/openshift/networking-console-plugin/commit/9b76377b62664d7a0763c1dd5731af7080c4b1fb) `sha256:3ceb5465874ed75b4a6314aeb5945ed265eb3ace5de26c83ecdfdf2675ab459e`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [68971874](https://github.com/openshift/machine-api-provider-openstack/commit/689718740b923e516c037d7862d81a462ecdbbd3) `sha256:e87f458f1b18ff2aed479e4a7c800c2788fb9270ca65e7b3db0ed00464f7f762`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [aaa6afa9](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/aaa6afa9c4cc5b283f2d0f09f78610857e067c7e) `sha256:48184d75e9f63a130ae6527f13e7ac355b8cd881be55647657694bf7533921a8`
* rhel-coreos `sha256:c1e56940177435759bb6d625797264edf06896da6ab0e2feb03d5b75d08cacb3`
* rhel-coreos-extensions `sha256:b8c79701902ebe46169f30aef2656eadc595874875bf221a74d30bdb6c72b2fb`


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/55cddff0a92358a58001c4a886e4d6ff9fb73568)

* [OCPBUGS-51309](https://issues.redhat.com/browse/OCPBUGS-51309): UPSTREAM: 5339: Bump glog for recent fixes [#539](https://github.com/openshift/cluster-api-provider-aws/pull/539)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/1f1c59f0ffd0bda9101e74356142e62305259590...55cddff0a92358a58001c4a886e4d6ff9fb73568)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/f8b50a8341f769302dca6bef1b77d2cb2c159853)

* [OCPBUGS-52359](https://issues.redhat.com/browse/OCPBUGS-52359): Remove unused vnet package [#130](https://github.com/openshift/machine-api-provider-azure/pull/130)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/f45dd3459184500d1967a89785298c7ecc3a655a...f8b50a8341f769302dca6bef1b77d2cb2c159853)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/b4349fd6fb99045cfa5fc18e496f553780fe23f4)

* [OCPBUGS-43528](https://issues.redhat.com/browse/OCPBUGS-43528): Prevent race with provisioning-interface service [#9110](https://github.com/openshift/installer/pull/9110)
* [Full changelog](https://github.com/openshift/installer/compare/ea5bb112568f11611fcb500e377d083d742e3a6d...b4349fd6fb99045cfa5fc18e496f553780fe23f4)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/7a3b0d7445fa76db54a2d650ac2f0fefb288b579)

* [OCPBUGS-42387](https://issues.redhat.com/browse/OCPBUGS-42387): Remove dataImage finalizer if BMH is missing [#390](https://github.com/openshift/baremetal-operator/pull/390)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/c9a636279c4328d97d3d29bcea207f5f7279a4c8...7a3b0d7445fa76db54a2d650ac2f0fefb288b579)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/0000b3ef257d07f423dfdf9b6d274214d1b0c846)

* [OCPBUGS-49607](https://issues.redhat.com/browse/OCPBUGS-49607): Address `golang.org/x/*` CVEs [#1962](https://github.com/openshift/oc/pull/1962)
* [Full changelog](https://github.com/openshift/oc/compare/2510f852661f4ace4fb5ae83de643e74e66ca36b...0000b3ef257d07f423dfdf9b6d274214d1b0c846)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/81507f04686df3e16793b270084ead0a2a67fb38)

* [OCPBUGS-52497](https://issues.redhat.com/browse/OCPBUGS-52497): [release-4.17] Add runbook_url for CoreDNSErrorsHigh [#430](https://github.com/openshift/cluster-dns-operator/pull/430)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/54eea5bb02911cdf0c7fb6dbb80366eb5a923ea7...81507f04686df3e16793b270084ead0a2a67fb38)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/e4b8dceaf16926b5e4b7fc339b240af00e9539c9)

* [OCPBUGS-52222](https://issues.redhat.com/browse/OCPBUGS-52222): fix Vsphere cluster Storage operator in Unavailable state [#560](https://github.com/openshift/cluster-storage-operator/pull/560)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/5683ea22810815595761ff9e5309c656a7392125...e4b8dceaf16926b5e4b7fc339b240af00e9539c9)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/b06c46276c7ac146925dc927202af97b66856a38)

* [OCPBUGS-50589](https://issues.redhat.com/browse/OCPBUGS-50589): Set `openshift.io/required-scc`: privileged annotation in `version` pods [#1154](https://github.com/openshift/cluster-version-operator/pull/1154)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/bc60dbd5f73b9f0548f0bb3aef0468a630362dce...b06c46276c7ac146925dc927202af97b66856a38)


### [console](https://github.com/openshift/console/tree/752c25a4db0ee48e88704a5d440f49c56edb5b5b)

* [OCPBUGS-52205](https://issues.redhat.com/browse/OCPBUGS-52205): Show Observe section without PROMETHEUS and MONITORING flags [#14811](https://github.com/openshift/console/pull/14811)
* [OCPBUGS-51292](https://issues.redhat.com/browse/OCPBUGS-51292): fix run time error when no completed version exists [#14796](https://github.com/openshift/console/pull/14796)
* [OCPBUGS-51126](https://issues.redhat.com/browse/OCPBUGS-51126): Fix alert rule link to alert in dev perspective [#14785](https://github.com/openshift/console/pull/14785)
* [OCPBUGS-49795](https://issues.redhat.com/browse/OCPBUGS-49795): 'create a Project' button on Getting started page doesn't work [#14714](https://github.com/openshift/console/pull/14714)
* [Full changelog](https://github.com/openshift/console/compare/6f7e5c9c98b518e66d38762e7d0fa3f75019beb5...752c25a4db0ee48e88704a5d440f49c56edb5b5b)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/0e338e1e82923f108be2315f7885b8b28e18d159)

* [OCPBUGS-52416](https://issues.redhat.com/browse/OCPBUGS-52416): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.30 into release-4.17 [#319](https://github.com/openshift/cloud-provider-openstack/pull/319)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/52264d6c73dd33d413263969b0c7f6ee795667d3...0e338e1e82923f108be2315f7885b8b28e18d159)


### [docker-builder](https://github.com/openshift/builder/tree/c3b099931c39c60afa02db54a8347f67a70a2d26)

* [OCPBUGS-42894](https://issues.redhat.com/browse/OCPBUGS-42894): buildah dependency bump to 1.37.6 [#452](https://github.com/openshift/builder/pull/452)
* [Full changelog](https://github.com/openshift/builder/compare/a7531531bef4c1a5ef05d877a00cb07afcb669ef...c3b099931c39c60afa02db54a8347f67a70a2d26)


### [hypershift](https://github.com/openshift/hypershift/tree/ffe47c7d9ded2a528862acbb8dd0a0f105dd801c)

* [OCPBUGS-52657](https://issues.redhat.com/browse/OCPBUGS-52657): Make managed-trust-bundle optional [#5794](https://github.com/openshift/hypershift/pull/5794)
* [OCPBUGS-52425](https://issues.redhat.com/browse/OCPBUGS-52425): [release-4.17] refactor aws identity health check into new controller [#5772](https://github.com/openshift/hypershift/pull/5772)
* [OCPBUGS-46340](https://issues.redhat.com/browse/OCPBUGS-46340): change plaform to platform [#5562](https://github.com/openshift/hypershift/pull/5562)
* [OCPBUGS-51339](https://issues.redhat.com/browse/OCPBUGS-51339): [release-4.17] Fix IsProgressing condition in HostedClusters [#5712](https://github.com/openshift/hypershift/pull/5712)
* [Full changelog](https://github.com/openshift/hypershift/compare/190a5f7f694c668c9e67338c1294fe55681c5784...ffe47c7d9ded2a528862acbb8dd0a0f105dd801c)


### [ironic](https://github.com/openshift/ironic-image/tree/b30d8f4d0218960485a411bb085f05c7271eb212)

* [OCPBUGS-52292](https://issues.redhat.com/browse/OCPBUGS-52292): Fix runlogwatch script [#643](https://github.com/openshift/ironic-image/pull/643)
* [Full changelog](https://github.com/openshift/ironic-image/compare/26d66a3766ae7d85da0e4a470b9cbeae91a5868f...b30d8f4d0218960485a411bb085f05c7271eb212)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/c053a50d8a3f839dbe527fb24899afc38d4389dc)

* [OCPBUGS-52359](https://issues.redhat.com/browse/OCPBUGS-52359): Remove unneeded VNet permissions from Azure CredentialsRequest [#1337](https://github.com/openshift/machine-api-operator/pull/1337)
* [OCPBUGS-51370](https://issues.redhat.com/browse/OCPBUGS-51370): Drop oVirt support [#1334](https://github.com/openshift/machine-api-operator/pull/1334)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/191a28d831b1f9493b54a25a3c75babd310bede5...c053a50d8a3f839dbe527fb24899afc38d4389dc)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/0f85e35a0b9f7342907597e74e20dfc9fa30ee67)

* [OCPBUGS-51353](https://issues.redhat.com/browse/OCPBUGS-51353): Update cluster-reader ClusterRole permissions [#4882](https://github.com/openshift/machine-config-operator/pull/4882)
* [OCPBUGS-50955](https://issues.redhat.com/browse/OCPBUGS-50955): create /run/nodeip-configuration before use [#4858](https://github.com/openshift/machine-config-operator/pull/4858)
* [OCPBUGS-51334](https://issues.redhat.com/browse/OCPBUGS-51334): Update format verbs for alert logs [#4880](https://github.com/openshift/machine-config-operator/pull/4880)
* [OCPBUGS-52257](https://issues.redhat.com/browse/OCPBUGS-52257): configure-ovs workaround for ovs-if-br-ex bug [#4889](https://github.com/openshift/machine-config-operator/pull/4889)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/467061987c1e6b90d8f854c9b0eec82fd8bd2d1c...0f85e35a0b9f7342907597e74e20dfc9fa30ee67)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/e9262fe971f881d6a014be70112b0f4cd5b82921)

* [OCPBUGS-50829](https://issues.redhat.com/browse/OCPBUGS-50829), [OCPBUGS-50831](https://issues.redhat.com/browse/OCPBUGS-50831), [OCPBUGS-50835](https://issues.redhat.com/browse/OCPBUGS-50835): CVE-2025-24976 Bump github.com/distribution/distribution/v3 [release-4.17] [#968](https://github.com/openshift/operator-framework-olm/pull/968)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/f667826eb6c9e2bfe779922f0b8e6a9bf2a833ed...e9262fe971f881d6a014be70112b0f4cd5b82921)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/c621cdc876ffb219c7877a1db2f500ba541dba6c)

* [OCPBUGS-52409](https://issues.redhat.com/browse/OCPBUGS-52409): Change dynamic_neigh_routers to false for the Interconnect topology. [#2476](https://github.com/openshift/ovn-kubernetes/pull/2476)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/fd0a1f15e587f83c4e2d6f1721ef7d6dcb1337a3...c621cdc876ffb219c7877a1db2f500ba541dba6c)


### [tests](https://github.com/openshift/origin/tree/4a06fd3a6a435c2b84314589dd45843f9e6d30d6)

* [OCPBUGS-52580](https://issues.redhat.com/browse/OCPBUGS-52580): Use payload pullspec for image info test [#29588](https://github.com/openshift/origin/pull/29588)
* [OCPBUGS-38835](https://issues.redhat.com/browse/OCPBUGS-38835): Try also user CA for getting openshift-tests image [#29029](https://github.com/openshift/origin/pull/29029)
* [Full changelog](https://github.com/openshift/origin/compare/73c604144fd0ddfcd98205ca9ce64453a7205096...4a06fd3a6a435c2b84314589dd45843f9e6d30d6)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/e1de36a2831d0fb4a48fbdfa681d269ccbcfee7d)

* [OCPBUGS-52207](https://issues.redhat.com/browse/OCPBUGS-52207): fix panic when vcenter address is incorrect [#295](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/295)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/492e5b28517d6ba84d17cd6eec12fd7ff329b636...e1de36a2831d0fb4a48fbdfa681d269ccbcfee7d)