# 4.17.27

Created: 2025-04-25 04:35:09 +0000 UTC

Image Digest: `sha256:f225d0f0fd7d4509ed00e82f11c871731ee04aecff7d924f820ac6dba7c7b346`


## Changes from 4.17.25

### Components

* Kubectl 1.30.5
* Kubernetes 1.30.11
* Kubernetes Tests 1.30.0
* Red Hat Enterprise Linux CoreOS upgraded from 417.94.202504080421-0 to 417.94.202504232017-0


### Rebuilt images without code change

* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [ded6f9d3](https://github.com/openshift/assisted-installer-agent/commit/ded6f9d332bd26f21405a630b6266cef9c75d3f0) `sha256:acb530b1b24fa51c4c451abcfbf30d6a5fa439d5bc3911778598a86608e49eb4`
* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [3b99303b](https://github.com/openshift/agent-installer-utils/commit/3b99303bc6d1c85465139f1e1c4847c038e4dc8f) `sha256:320f1f5e7c0f8b871c7963381508652747efacf9e0003f66838c46c5963e8b8b`
* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [b6712f36](https://github.com/openshift/cluster-node-tuning-operator/commit/b6712f369eddb39fa68021ffb3d31fed7e5663a6) `sha256:d5433693ff2a735a8366a324ab4abddc506d482c26546c9d23886747bdc24e9a`
* [docker-builder](https://github.com/openshift/builder) git [2bfbba1a](https://github.com/openshift/builder/commit/2bfbba1a477574840db035ad1024c9e4b317bc8f) `sha256:1a9add8f16068164b34fc8cfd0aa71d14c378fecf0d6b88ed622ee2f0ccdec99`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [859518f6](https://github.com/openshift/driver-toolkit/commit/859518f6952407a56ddf7d0562c98fe27e9e0efe) `sha256:c0469002f7ea21a00b1514b607f63dc289e66e14cd35aa756f5ec2e545aecf4c`
* [ironic](https://github.com/openshift/ironic-image) git [391f57f8](https://github.com/openshift/ironic-image/commit/391f57f8b58ebc0849c40ee40cfa1e9c394f3d2c) `sha256:850e82c42af0641991ba8a460d4cc5ce670a698a66514e02bfbb9966f5325f64`
* [ironic-agent](https://github.com/openshift/ironic-agent-image) git [6d5c18e4](https://github.com/openshift/ironic-agent-image/commit/6d5c18e4fd49644c17893a949b1b8a067152f797) `sha256:f65e13e96fe5800d91cdcdb1a19a6a157b4a655a7db8d984481425749eaf0bb8`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [b698ea3e](https://github.com/openshift/ironic-rhcos-downloader/commit/b698ea3e0818bfcb8c27c4964bcaaaeee5f49818) `sha256:c0af82ac9a930b0528fc413d304f0839e7d7a5b884bacc29be631e60e17dc732`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:5ba210c7adb1cbded79517894286019d2fb5d32ffc3230c985a726464a4d906a`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [74bee374](https://github.com/openshift/image-customization-controller/commit/74bee37482b0e9d581c2e12c8040195169e49032) `sha256:d7b630c93e94e9782c1cec120b8be02bb50566ea39a1899245f9fa28704c4b23`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [f85666be](https://github.com/openshift/machine-os-images/commit/f85666be7889cd6ba95926546a005fed5f3cb68a) `sha256:3dd996c9c9c2983c322c7a1c49ceddc3db507899e490d1eff73cc200c552902a`
* [metallb-frr](https://github.com/openshift/frr) git [c30988b0](https://github.com/openshift/frr/commit/c30988b0bda9815fd0b8686fd10d423a5055262f) `sha256:5f7b8a6b83a87bc254977899e63a63a43afe1150f752f0ea0374d5d5f0c1be20`
* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [32463001](https://github.com/openshift/monitoring-plugin/commit/32463001843feb1cf87b175d75187fc35cfa3caf) `sha256:2dc62019450f865e387879b978116775488fc0d3b99d77ce9a4fa4bce486ffef`
* [network-tools](https://github.com/openshift/network-tools) git [8e170b4f](https://github.com/openshift/network-tools/commit/8e170b4f41c9e80f0f8dd42d6cf6c169872b15d1) `sha256:c951f4b8b0921b16e8f37f55b9bf3f6e6bb2da4056063c5a417017cffebca1a7`
* [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes) git [b02d1af7](https://github.com/openshift/ovn-kubernetes/commit/b02d1af7d45ae88c91785ebc83ddec23348596cf) `sha256:c00a12974455cead3c62315bff75c330e381afda09830ebcc00c3e6ef0c0369b`
* rhel-coreos `sha256:ca4b8ea114d9b5f64e41f47d66d646ee4d0e8ffff641ec87ba48ee1112631d6a`
* rhel-coreos-extensions `sha256:931ec54ccdd94cf4db40e2a370844eecd71bd176a6cbcf9dfda7c625f8156837`
* [tools](https://github.com/openshift/oc) git [0000b3ef](https://github.com/openshift/oc/commit/0000b3ef257d07f423dfdf9b6d274214d1b0c846) `sha256:07cf75f77fdde7641b0b8a9d34a83d6333b80180dd23f3461e0e0541bc3049f3`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/0657bd107b1df4487134702dc39b2111d888b276)

* [OCPBUGS-51230](https://issues.redhat.com/browse/OCPBUGS-51230): Bump github.com/go-jose/go-jose/v4 to v4.0.5 in release-4.17 (#7574) [#7574](https://github.com/openshift/assisted-service/pull/7574)
* [Full changelog](https://github.com/openshift/assisted-service/compare/0399efe4da85def6cb1fb35a7eb1c72c3104fa6c...0657bd107b1df4487134702dc39b2111d888b276)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/6a8ebdd16729ed8f81c83a2a3efbd81be2495637)

* [OCPBUGS-53719](https://issues.redhat.com/browse/OCPBUGS-53719): Bump jwt to 4.5.2 in release-4.17 (#1086) [#1086](https://github.com/openshift/assisted-installer/pull/1086)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/ddb2740b781fe067d6addd4ee868bbd827f26e9d...6a8ebdd16729ed8f81c83a2a3efbd81be2495637)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/0bff150f6641f68c3712b3b83367c64bc52cfabd)

* [OCPBUGS-54393](https://issues.redhat.com/browse/OCPBUGS-54393): Re-reconcile machine on NIC provisioning failure [#136](https://github.com/openshift/machine-api-provider-azure/pull/136)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/f8b50a8341f769302dca6bef1b77d2cb2c159853...0bff150f6641f68c3712b3b83367c64bc52cfabd)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/5e4e2af58d0ba03707b21d6511cbb83ae97fcad7)

* [OCPBUGS-55224](https://issues.redhat.com/browse/OCPBUGS-55224): Fix Load balancer IP setup [#9675](https://github.com/openshift/installer/pull/9675)
* [OCPBUGS-51116](https://issues.redhat.com/browse/OCPBUGS-51116): update resolv.conf every time on bootstrap node [#9504](https://github.com/openshift/installer/pull/9504)
* [OCPBUGS-51210](https://issues.redhat.com/browse/OCPBUGS-51210): Fixes panic during GCP tags fetch due to unstable network [#9512](https://github.com/openshift/installer/pull/9512)
* [OCPBUGS-46375](https://issues.redhat.com/browse/OCPBUGS-46375): Allow spaces in the aws tags [release-4.17] [#9315](https://github.com/openshift/installer/pull/9315)
* [Full changelog](https://github.com/openshift/installer/compare/ac8d902617627136689cb77b9701e4ea5b609103...5e4e2af58d0ba03707b21d6511cbb83ae97fcad7)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/50f554151e66f6339d5d49e9c9d6c8b96ec7e960)

* [OCPBUGS-53511](https://issues.redhat.com/browse/OCPBUGS-53511): fix CVE-2025-30204 [#1414](https://github.com/openshift/cluster-etcd-operator/pull/1414)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/975fc013a240a003f23e51b9dcd9bfcdb112e801...50f554151e66f6339d5d49e9c9d6c8b96ec7e960)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/5f2fe68003e8f17304d7000f8672a0f6ff2eaf8b)

* [OCPBUGS-55033](https://issues.redhat.com/browse/OCPBUGS-55033): Add IPv6 NGINX configuration [#2689](https://github.com/openshift/cluster-network-operator/pull/2689)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/cf90595d759b3cf9511de22f190368f46585ef3e...5f2fe68003e8f17304d7000f8672a0f6ff2eaf8b)


### [console](https://github.com/openshift/console/tree/825695f935379289af02384095531714a8c5c07e)

* [OCPBUGS-52999](https://issues.redhat.com/browse/OCPBUGS-52999): Pipeline visualisation shows all tasks as Failed and after that goes to Running state [#14862](https://github.com/openshift/console/pull/14862)
* [OCPBUGS-53168](https://issues.redhat.com/browse/OCPBUGS-53168): Remove logoutOpenShift method call [#14883](https://github.com/openshift/console/pull/14883)
* [Full changelog](https://github.com/openshift/console/compare/e3810ed10015a84982c7d1096b9cb814bee9851a...825695f935379289af02384095531714a8c5c07e)


### [hypershift](https://github.com/openshift/hypershift/tree/98664c845408b0981acec8d3a85f02a20077d127)

* [OCPBUGS-51808](https://issues.redhat.com/browse/OCPBUGS-51808): Fix golang crypto dependency go.mod replacement [#5993](https://github.com/openshift/hypershift/pull/5993)
* [OCPBUGS-54841](https://issues.redhat.com/browse/OCPBUGS-54841): Add konnectivity-proxy sidecar to openshift-oauth-apiserver [#6017](https://github.com/openshift/hypershift/pull/6017)
* [OCPBUGS-53323](https://issues.redhat.com/browse/OCPBUGS-53323): Handle multiple mirror entries for source [#5894](https://github.com/openshift/hypershift/pull/5894)
* [Full changelog](https://github.com/openshift/hypershift/compare/7f2027b151077daa530da7a35cb9ca713a0905d1...98664c845408b0981acec8d3a85f02a20077d127)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/5f18d29e73366557d8dfbfb2f1bf1949fe39dbf6)

* [OCPBUGS-53911](https://issues.redhat.com/browse/OCPBUGS-53911): bump github.com/golang-jwt/jwt/v4 to v4.5.2 [#83](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/83)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/3a3a62f7a200d2042cb64757f2d60faed20b6218...5f18d29e73366557d8dfbfb2f1bf1949fe39dbf6)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/14489f69f70f6077bcc81ce2dfa4edba2b330801)

* [OCPBUGS-50566](https://issues.redhat.com/browse/OCPBUGS-50566): Fix for CVE-2024-45338 in golang.org/x/net/html in release-4.17 [#101](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/101)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/213d34ddedaebc23bd409ff904ecaf9eaa62c517...14489f69f70f6077bcc81ce2dfa4edba2b330801)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/0b8dd7abc69b9a2369005517846c95c619abf613)

* [OCPBUGS-52957](https://issues.redhat.com/browse/OCPBUGS-52957): IBMCloud: MAPI replacing unhealthy CP nodes [#63](https://github.com/openshift/machine-api-provider-ibmcloud/pull/63)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/238348d2d06feb540a360aeba81416c1134f86e9...0b8dd7abc69b9a2369005517846c95c619abf613)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/1e7747d08d10dd65994b7aeb98f5351b25e053ef)

* [OCPBUGS-53036](https://issues.redhat.com/browse/OCPBUGS-53036), [OCPBUGS-53037](https://issues.redhat.com/browse/OCPBUGS-53037): Updates GCP credentials request [#1345](https://github.com/openshift/machine-api-operator/pull/1345)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/08fb3ab3f496da0e84ad01de854044482a2b15f5...1e7747d08d10dd65994b7aeb98f5351b25e053ef)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/8c86422ffddcad9d55ad07342cfffa35eb59dacc)

* [OCPBUGS-45989](https://issues.redhat.com/browse/OCPBUGS-45989): Do not run resolv-prepender from NM dispatcher [#4785](https://github.com/openshift/machine-config-operator/pull/4785)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/95ff6412be3b5cf798e2729657302c77fb24b564...8c86422ffddcad9d55ad07342cfffa35eb59dacc)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/99b73a5025e60b15c0d1af6e0be0d9b2190a8b4b)

* Add translations scripts [#235](https://github.com/openshift/networking-console-plugin/pull/235)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/9b76377b62664d7a0763c1dd5731af7080c4b1fb...99b73a5025e60b15c0d1af6e0be0d9b2190a8b4b)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/07d03d7169fcc6dd7733f09df47c2ffad46fda34)

* [OCPBUGS-30443](https://issues.redhat.com/browse/OCPBUGS-30443): Update dependencies to address CVE-2024-24786 [#298](https://github.com/openshift/oauth-proxy/pull/298)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/3451e8ba203c0facb5c90faf59a1fecc7df06153...07d03d7169fcc6dd7733f09df47c2ffad46fda34)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/d7b13a63a1b221ca745ace326f92ec3a6162941f)

* [OCPBUGS-54750](https://issues.redhat.com/browse/OCPBUGS-54750): Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.17 [#113](https://github.com/openshift/machine-api-provider-powervs/pull/113)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/fe7a877c750d1f67c6cbe9c0ea03d864d3c06cea...d7b13a63a1b221ca745ace326f92ec3a6162941f)


### [prometheus](https://github.com/openshift/prometheus/tree/b43f995336f617a43c9aebacc309b1605cb81d3c)

* [OCPBUGS-54941](https://issues.redhat.com/browse/OCPBUGS-54941): Scraping: Bump cache iteration after error to avoid false duplicate detection. [#249](https://github.com/openshift/prometheus/pull/249)
* [Full changelog](https://github.com/openshift/prometheus/compare/e2fb74187b1858a31e3bf75cc5ab02c75ad8abe8...b43f995336f617a43c9aebacc309b1605cb81d3c)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/cd4a3dc28ce3a7fe5a65a00df20cfcddb561bf49)

* [OCPBUGS-53077](https://issues.redhat.com/browse/OCPBUGS-53077): ingress: Reset metrics when ingress is deleted [#57](https://github.com/openshift/route-controller-manager/pull/57)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/a47f6be3676d3eabb864ca339584fe857e1076c5...cd4a3dc28ce3a7fe5a65a00df20cfcddb561bf49)


### [tests](https://github.com/openshift/origin/tree/95cbab598b1c8c32d7f82ebb1f2ebd5b8c672d64)

* [OCPBUGS-54767](https://issues.redhat.com/browse/OCPBUGS-54767): Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com [#29660](https://github.com/openshift/origin/pull/29660)
* [Full changelog](https://github.com/openshift/origin/compare/4a06fd3a6a435c2b84314589dd45843f9e6d30d6...95cbab598b1c8c32d7f82ebb1f2ebd5b8c672d64)