4.16.48

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.16.48-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.16-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.16-micro Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.16-micro Succeeded periodic-ci-openshift-release-master-ci-4.16-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.16-fips-payload-scan
- gcp-ovn-rt-upgrade-4.16-minor Succeeded periodic-ci-openshift-release-master-ci-4.16-upgrade-from-stable-4.15-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.16 Succeeded periodic-ci-openshift-hypershift-release-4.16-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.15.21, 4.15.23, 4.15.24, 4.15.25, 4.15.26, 4.15.27, 4.15.28, 4.15.29, 4.15.30, 4.15.31, 4.15.32, 4.15.33, 4.15.34, 4.15.35, 4.15.36, 4.15.37, 4.15.39, 4.15.40, 4.15.41, 4.15.42, 4.15.43, 4.15.44, 4.15.45, 4.15.47, 4.15.48, 4.15.49, 4.15.50, 4.15.51, 4.15.52, 4.15.53, 4.15.54, 4.16.11, 4.16.12, 4.16.13, 4.16.14, 4.16.15, 4.16.16, 4.16.17, 4.16.18, 4.16.19, 4.16.20, 4.16.21, 4.16.23, 4.16.24, 4.16.25, 4.16.27, 4.16.28, 4.16.29, 4.16.3, 4.16.30, 4.16.32, 4.16.33, 4.16.34, 4.16.35, 4.16.36, 4.16.37, 4.16.38, 4.16.4, 4.16.40, 4.16.41, 4.16.42, 4.16.43, 4.16.44, 4.16.5, 4.16.6, 4.16.7, 4.16.8, 4.16.9

4.16.47 (changes) - S S S S S
4.16.46 (changes) - Failed
4.16.45 (changes) - Failed
4.16.39 - Success
4.16.26 (changes) - Success
4.16.10 (changes) - Failed
4.16.2 (changes) - Success
4.16.1 (changes) - Success
4.16.0 (changes) - Failed
4.15.57 (changes) - Failed Success
4.15.56 (changes) - Success
4.15.55 (changes) - Failed
4.15.46 (changes) - Success
4.15.38 (changes) - Success
4.15.22 (changes) - Failed
4.15.20 (changes) - Success
4.15.19 (changes) - Success
4.15.18 (changes) - Failed
4.15.0-0.nightly-2025-09-06-015503 (changes) - Success

Loading changelog, this may take a while ...

Changes from 4.16.39

Created: 2025-09-11 12:48:39 +0000 UTC

Image Digest: sha256:8e67463f5d411e5d311591603d0f5f4005a0f0ddf0e04e9fb9fe9da736e19f1e

Components

Kubectl 1.29.7
Kubernetes 1.29.14
Kubernetes Tests 1.29.0
Red Hat Enterprise Linux CoreOS upgraded from 416.94.202504151456-0 to 416.94.202509101559-0 (diff)

Rebuilt images without code change

agent-installer-utils git 6e6bb40d sha256:ebd2a800c6006f8c8072212fcb5d33ee3f764ce8cd4db88c095c6144a5088cda
alibaba-cloud-controller-manager git 97e8335e sha256:7b4d2d6cf9ab5282a9af46fd419aefff8155277b061fd24758735710c8e2a0d2
alibaba-machine-controllers git 248372a4 sha256:dc4347ccacfc45c98f7eec1ebf47e306e1180ad5b7be9109928d452b6eea92c8
apiserver-network-proxy git ca81b6a3 sha256:2d4126768655d1acd303cdbb08f584abcc42f7d99408ff0f0256322de0c7f410
aws-cloud-controller-manager git a53e9def sha256:a209432b941f4a1b69e5c256e853215602dbb74569a4e5c6af2f8d2256ae4b7a
aws-ebs-csi-driver git 1d29a74a sha256:623fc46991f45624a2c00bce8408dbb44f0a6e0dd9efc4b108bcdc9fdc7cd1e0
aws-kms-encryption-provider git c66065de sha256:dab954617ab503c31b7e8314a83b4c3b482b113a871abf3fbaf87faca51fb9cd
aws-machine-controllers git 0c819861 sha256:6b5325b836255a2ba9a3371065f7d868df70b083232b6315b24d88d5e64042b2
aws-pod-identity-webhook git 459c5314 sha256:7ebfb696e44cb98750ba2b5f39ce75f63a7aaa499a123d7480be386a450091ff
azure-cloud-controller-manager git e5bac334 sha256:be560c9d135ebbcee83a7b3c9d3e9dbc42f95a5308eccca2b39ecd345b8f2760
azure-cloud-node-manager git e5bac334 sha256:3cc31caa42ca0e190f8012073f68de5896611ff8fec49e9dd418f60039123685
azure-cluster-api-controllers git a81e3b31 sha256:69e6606df193bb933747916fc2f280cfcecd2807524898d77b9c83db4e1de9ab
azure-disk-csi-driver git 6b55f6fb sha256:cc6a6270aa76957c1e1c19c3ed4c04156f4ef783966a2c07b09b5b1cb4a2d694
azure-file-csi-driver git 7a36778a sha256:6988f2b6ef36ac7ae86eb53ce212e69ec291589770aa05d5c92e071f595988b0
azure-kms-encryption-provider git af633e05 sha256:511e52dfbb4fd0d4e7eebca8547ff0d2b56c395cbb0b91594a196d4d1208c0f1
azure-workload-identity-webhook git 5b8d171e sha256:d3afe4e47c3d6a6df4f920cc679e296a6ad06cfd15504aea379dca8e39a4a31f
baremetal-machine-controllers git 2b396e06 sha256:a276ccc97a7b8fd71df5d2919d34958474de46914830f9b3630754a3f7661d98
baremetal-operator git 84aeac37 sha256:cb097d0a4cf6a6894d2dd0a83d96711d771c11c04747730482d00491ef04c875
baremetal-runtimecfg git f55a330f sha256:c52dc9f2ecba030db3a991d5211d789128c6518fa70ad4aefa2bffd7e7b7737d
cluster-authentication-operator git 0e39ace5 sha256:956ee8da80b7599ac70c77d19be3ed29965d196dc7ab36a41298ab1682639fb8
cluster-autoscaler-operator git 70164fc6 sha256:2e465ad0ca78af0129587a4628a738c157666ac8f6ccba209f2e32b1364d733a
cluster-baremetal-operator git 4f6e4b9f sha256:c9c0894232c9385131586142752c769cf5a324328b6858c6a5a4ca4e0be00cc7
cluster-bootstrap git 27bfb59f sha256:bfe6d9f100afc9290128b2779bcff5e1cb6ff87a43824811bca8576a83730708
cluster-capi-controllers git 5830a10a sha256:2dcffd363dbad72001150ce751642b421d0857587acac92d89a890ed9c0c2391
cluster-capi-operator git c699f6cf sha256:a267d9c89c04e4ba832da2022e67d8949fb1fe94ad58bde513ac17ec3a88057f
cluster-config-operator git 441d29c9 sha256:d2b5897e8b9d0f4749c047802fb05b515d4207e5e0fb335b842654eb882e2b8f
cluster-control-plane-machine-set-operator git 14571e8a sha256:7103e01e0f84f65c8e662a4a02bde09a8065f7ceb69e8cb69e7b0b5abd09a05a
cluster-csi-snapshot-controller-operator git 439826e1 sha256:79c58446658b6a10813b4cc188e564059ed0693b71dd675346c06d14b593fa04
cluster-dns-operator git a4b1cfb4 sha256:57ac7e21af190f18a37ce97ee67a99ab0d617a3826f0fc85e7c454b68491cfb0
cluster-kube-cluster-api-operator git 95ceaa9e sha256:e70cd7eafd3c464d6226de2bf0e4227c6455c25f1f84869b32ec72c75d84b73f
cluster-kube-scheduler-operator git 630f63bc sha256:7992bda13be7015230f475709518ad4e288fa4081131931dbdeec7d2a322c600
cluster-kube-storage-version-migrator-operator git e8258113 sha256:914497087aed95ac773832db0fbbbf3d957b633782efafba2d72b6f13de19f11
cluster-machine-approver git 7685374f sha256:554a7eab436602816d0a6557dc679a7e7fbb0f9b6255b6edb5b3b6647121ca27
cluster-monitoring-operator git 09963a50 sha256:87d2b258f62ba2f04fc4a9482c88a5c6861ac8089223e4f2ce525c2ab28fc3ed
cluster-node-tuning-operator git eacd6ee9 sha256:b7a569eede0a029bc82be59b3300e1b8aa1a34220edecc7f91c5a66d52f150b2
cluster-olm-operator git 27bf70dd sha256:b0a48e0f20b041857c28d9184f4e7005aecc5becb106c272716b09fb17e981bf
cluster-openshift-apiserver-operator git d26f3002 sha256:8e0830f211b63d8b1e3792687f51865a874a3c3e812a6b81f3bb2a54152c3561
cluster-openshift-controller-manager-operator git 2ed3cf99 sha256:e9e06a3b8e1a67900bad7a81a47fd7d9498f0312dd12b381dd1f495f3822f931
cluster-policy-controller git eaea543f sha256:1baa2197c21059d6c097ea21e7fff7d0205c305afa2e1594d19eb16101b8fae6
cluster-update-keys git e8478585 sha256:6f9c215692fbfa3f964354d14ef93a1d1a0a4e0281b555997dfdf9bfe2065d07
configmap-reloader git dc91ddc4 sha256:01f4afca407f8d28f3efef12fc4df2d815334b1e8cc0a3619f7b256584279f73
coredns git 1e417656 sha256:f77fae7bea0596723b2dfcb7ab640426680d503268d170494976dfd415fa3b7d
csi-driver-manila-operator git c25d1ff2 sha256:2eca1d6217bf37f2186136d1db00e7684cea139cfcaefb39d0e92c9805f6548e
csi-driver-nfs git 406cec72 sha256:b0c4e9298eb194ef9e9531435587378153981cda53fa5f29ac7ba0407a6662b3
csi-driver-shared-resource git bc125def sha256:1af15d3e4e594523f94f4e00a54356b0f91557dc463c8493a98589eacf5809fe
csi-driver-shared-resource-operator git 1e1194bc sha256:69a766027d5dfb5bb939d4821d1291d9232647d5725af6914f0ace988de65116
csi-driver-shared-resource-webhook git bc125def sha256:92a0c2957167260e9e7043d9623b90ba7c91f1309618ef1997db2e7db49b1536
csi-external-attacher git 7da80aab sha256:c5d83b524b78406c3a0abddc6ddd54a317f79c3d12206ead1aa24ca98fe1c44c
csi-external-provisioner git 9e8af011 sha256:77026dc8593dd2f4ece66e97487c4082a733a11115dbfe07842b83dfda8d775f
csi-external-resizer git bdf5bfb4 sha256:73ad6226c352eb221dd00a04870da2782b0082e7cc302d2a1f0c9e4a1f8f2f57
csi-livenessprobe git f5e3ff55 sha256:7b1c93b4713d1d4de7cb57728ee29da09657e8561eee127d04609127e744c61e
csi-node-driver-registrar git 8930c368 sha256:4d6f104514ebfede24fee22278865ef447b06fef2adc3fce48a1dbda1ff14cdb
driver-toolkit git 1d5732f0 sha256:72f5419e276fcf696918c7cec5c86f6cfb3a3cce99ad7ac9862b8e84b7bea8ba
egress-router-cni git 7089efe6 sha256:353d95bfb26e9217a4ba4e3b2a3514fd9a31582815bbd0f2fb3b69bc9e0e76e1
etcd git e7911c0d sha256:a4594a8060e52a9090e21be808264042602d921a7b0290d5f129c4e55921c67c
gcp-cloud-controller-manager git 26b43dfc sha256:2ba1e60f1bd923c502ecfe47013303a012abe5b498985697c0ba25d9e6f30d04
gcp-cluster-api-controllers git 02432df8 sha256:b51949dec4eef94d454be0566327e4c8fbe62790597152101300a8bd91316a99
gcp-pd-csi-driver git 5ed71c64 sha256:dc573ea3f31057903182ee80eb0759e3f67d712b06007fbbd0aa026adf249aa4
gcp-pd-csi-driver-operator git 799327f7 sha256:565da91b2afb17fc725548f4c8fb3c11f3baac5cdf7a65d7329bc2306c6b6efd
ibm-cloud-controller-manager git f961f16d sha256:74361bba53b1a3081b04a60aa987c44861179c6b7a7e7fbd27a3ec625d502893
ibmcloud-machine-controllers git d29506e7 sha256:402804b506d7b49384908784195ace86fd8f9ef38df6c9bb877af52b3c310799
ironic git d08ca1e2 sha256:c239a55c905b4fa795e9c851889d8fd4fca2748dae17adc17868a3254bf35810
ironic-agent git aea138cd sha256:5105e6f5d4bab7e56952d4bf09cbad44bc9894721c2f9b1ff37c490e4a327d68
ironic-machine-os-downloader git 93b8b5fa sha256:7f395fed6fa6cde3241bebf1038c2cf25607aaad4926dd468aab86202527a4fc
ironic-static-ip-manager git f44e8a08 sha256:34afefa9caabaeee85206d0e2c55a4fe19d7246f8ffcffb254382c271dbda490
k8s-prometheus-adapter git e4f859be sha256:17791dce42043ba9ebf846000989164bd8e9455e48e88a3643bee2558be53fce
keepalived-ipfailover git b58673a3 sha256:919a9add83fd3f3b75847c14c9d50aaf6f8cc9937120c4e06deec07d8f82364a
kube-metrics-server git 9116b918 sha256:0786dd4725983759b9d529df3973e98e831d56ee568cd3472cd2f37d894617e4
kube-rbac-proxy git c38f4734 sha256:64cb3b2194a3a12fb04144b2a47c2e6e7c773ccafef39804b6d72ac0458c0297
kube-state-metrics git 9b67b8d1 sha256:0aac6e1f195a8ad6ffd9cb5f21e74faa5fce46bcc7dc61a505709ba100f495fb
kubevirt-cloud-controller-manager git 3db76104 sha256:771f2e28858f24abbfdac15c459de82cbd6db409f5f137e7ff59abf65c88b130
kubevirt-csi-driver git d474c42e sha256:88b788cf6436b4eec3e4c2733d4cfd204dd756c02ab5e1a995e4e726191ed1c9
machine-image-customization-controller git 39480963 sha256:5a79b2766e6081d52d31280be95863269415663979bb0f5d95bf60c207dcde41
machine-os-images git a99847b4 sha256:b0011f8cb1a24a079bde6ed0436623903d46f6f9174d432c06ff4ec6a9e65555
multus-networkpolicy git f988f894 sha256:c913ee66bd97c3f933a95ba64e705d443a11f0c832c67f90930ce4b003f30284
multus-route-override-cni git 73594f77 sha256:3b652713194e8c715cf9bd3303fff04341b1ad84cb60be9dd887e4e613c194f9
must-gather git 774a4e02 sha256:98f20b12dd787eab4d33ce54cc767e03405492b062ff895a6438a312663dc807
network-tools git 234ed43e sha256:0a422ddb86d0dac280d959b6de8e0d9f66f97edce6f5bc5359c0cac5409534fd
nutanix-cloud-controller-manager git 28bf5963 sha256:606dc5c6092d8a65f94edb8ee8c46afd6e1534ff27f309fd0c163f95a5f8d827
oauth-apiserver git f09a9be3 sha256:065509e3bcb6665fa5d5618daba54084a68da7aa4832d283b3d7933798da4bd8
oauth-proxy git 30f80124 sha256:0b54c4e7208b2f812e54163b29117ef7a65f5f1a6eeed4e467bafaf61581b5c2
oauth-server git 3739138c sha256:b0a10cbe6b46673e2f3873dc2dcfeceddfd1f368ba5da6d2f633c368f11de9e9
oc-mirror git b137a53a sha256:de1d8f88179c53e2ebe14d82e3967eef5e51355864e621c3adbf7b8119617d2a
olm-catalogd git 79975a51 sha256:18a64af4636aa8a4ea8d6cba9ccd70c954f01c5d848fdd213d477b5346c218ca
olm-operator-controller git 80b8649c sha256:d390ebcac1f4c7702b5afc4e146d68ca335528046fb44f0ee31bb237f55c1653
olm-rukpak git 282cc84c sha256:94691db7cff65d98371d0a64823f2a4fe60fc072cf32dc08906bb7b724c013d6
openshift-state-metrics git 59b8a0ff sha256:3f6ce6f7e1ff2e4befa5d45958493a0c0910074286ce302197feebb8235fffc6
openstack-cinder-csi-driver-operator git 85b52097 sha256:5c83d8ad59dbcbbdb6890b2d456c1e2c56a3a9d0a01d152c60bfbadeec884a07
openstack-machine-api-provider git 5ada1cba sha256:07dc59c3ecab972130c26ba611997fed5ee9cda973c7d2e8b4958290c6c7cff7
operator-marketplace git 208d5aa7 sha256:8a9caa21fd725de997019e7b66e702cfb8e0a36b88c9a1b67212f9cdf45a300f
ovirt-csi-driver git 1db726a9 sha256:7eb99e3ba062c76bcbb2e6c66395f42ed67f6ed6b832f307c3e0d0f1d1e21df2
ovirt-csi-driver-operator git ac852f3e sha256:b21a80bd7ca8b6c433ac6c73d899419f097cfbb319b7d3995ce12f09da9b95cb
powervs-block-csi-driver git 26162bad sha256:2b14dc1a25f05da1dfed468461a5e6b1702e67d5882cb463752f0b03ae1dc4bd
powervs-block-csi-driver-operator git 9c5dd8d1 sha256:668268528d393797775dbd4de0bd8356840f5e86774a17e5c2d4a65d80742b97
powervs-cloud-controller-manager git 20e6dc70 sha256:11e16233ffdb9eda46a003067ad2714ad97fef78e293578810a529a02459b880
prom-label-proxy git 5e14722e sha256:5685fa83d9f4d66d83cccbee577615469fa0badca4701d228d7b1182dac533be
prometheus-alertmanager git e9aea929 sha256:5035139cabc906d4dc83791a98956bfc3390c2beef0eb0e332eba1fb4e7a334f
prometheus-config-reloader git c7262a43 sha256:d5c3f96caf49c824c1b260c5567b16cdf8c6d55129fb509c5ce02ffca8de92bd
prometheus-node-exporter git 29ba26d1 sha256:83b2e97f2f98fed5ac6e2e5c622f984b2cb7ab2809cd29c7da3e5fd4c9ef0186
prometheus-operator git c7262a43 sha256:f464e6e3cb1cda0dd87971c9fc44577b03dbe1ea91ca2077c25463a2b6d6bcf3
prometheus-operator-admission-webhook git c7262a43 sha256:a594982176a39cdcfa60236362662e027071c4d72668ccf62e4b44b396a9e473
rhel-coreos sha256:a07c85990244bf4aa155201d9cc5003e3c40b5f3d92e02dda58fb061985549c8
rhel-coreos-extensions sha256:1e2bb3992fdad9812eff39c72a2e6165d34aa8729be977ee06812ff104aae3b6
service-ca-operator git 538c7b98 sha256:60c1da04cd0708dd4ecb4a80fd8ccd86a93422173b50b1d307f06a0d690bfdae
telemeter git c1ecd105 sha256:51c78317bf7fb83d8b833ae563316394fe80f1e26da6a4e761a122098158a2b0
thanos git 85eee25c sha256:7f0984f1cf441cc86ec6a5cb54fd9529bd8eb5bb0f29e4cc6de71f93d865d44c
vsphere-cloud-controller-manager git 023a3655 sha256:7b982489e439c83fd9afb8ac66a8b65d148adc625fbe6f8de93d61fd3eca6f93
vsphere-cluster-api-controllers git be22f10a sha256:63c0934383cadf9cf718e334bb7f6428a7067c55de968eb59cfe398bad6aab4f
vsphere-csi-driver git 03b7e8eb sha256:6a2ba223d3b9c87eb24cb40aaefc244ae87533e286ff8acb4786514f3be9dc7a
vsphere-csi-driver-operator git 7940ea16 sha256:ade1d5a9a276e5d842dd3d3d983f0b6598283020022a29b0ed2298518401d941
vsphere-csi-driver-syncer git 03b7e8eb sha256:2d9fc583e28e3e4f4cced0aad6e40519628b8767afb98d6424f9fd90e6ccb6b2
vsphere-problem-detector git 3683c120 sha256:2d72c1b62a3912e514cf16c1fd8c870b8cf25b30df7c7b86b6373a0608b57366

agent-installer-api-server

OCPBUGS-58631, OCPBUGS-58636: Bump glog to v1.2.5 in release-4.16 (#7901) #7901
OCPBUGS-47627: dnsmasq service on OCP SNO fails to read /etc/resolv.conf file during system startup (#7857) #7857
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-53718: Bump jwt to 4.5.2 in release-4.16 (#1091) #1091
Full changelog

agent-installer-node-agent

run go mod tidy / vendor #1019
And 3 elided commits (e.g. from squash or rebase merges)
Full changelog

aws-cluster-api-controllers

OCPBUGS-58666, OCPBUGS-58671: bump github.com/golang/glog to v1.2.5 #560
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator

OCPBUGS-61253: add ability to control kube rbac proxy container image… #426
OCPBUGS-60598: Bump library-go #423
OCPBUGS-59606: Backport stale conditions fix #407
OCPBUGS-60248: add tag matching to Azure File storage class #414
Full changelog

azure-machine-controllers

OCPBUGS-52476: Remove unused vnet package #131
OCPBUGS-56169: [release-4.16] Update virtualmachines service to armcompute/v5 SDK #147
OCPBUGS-56656: Fix failure when attempting to modify immutable availabilitySet #151
OCPBUGS-56092: Update eviction policy for Spot VMs from Deallocate to Delete #142
OCPBUGS-54990: Re-reconcile machine on NIC provisioning failure #137
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-58290: sort zone slices extracted from map of byo subnets #9819
OCPBUGS-55807: update resolv.conf every time on bootstrap node #9694
OCPBUGS-57460: vsphere - check if host is powered down or on standby before uploading template #9786
OCPBUGS-36677: Power VS: Enable incoming traffic on port 5000 during installation in a restricted network #8711
OCPBUGS-57498: ensure ctrplane nodes can access bootstrap MCS #9788
OCPBUGS-54240: Update timeout for GCP WaitFor operation #9715
OCPBUGS-35040: Power VS: Add ports needed for private clusters to security group #8546
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-59938: Adding sos.conf file for default sos config into the tools image #2064
OCPBUGS-60675: Use fedora image in unit tests instead of centos #2079
Full changelog

cloud-credential-operator

OCPBUGS-60973: ccoctl: aws to use proper issuer url on subsequent runs #909
OCPBUGS-60861: ccoctl: only add owned tag to azure resources on create #902
OCPBUGS-58676: github.com/golang/glog v1.2.5 #893
OCPBUGS-56981: Azure: resolve nil pointer exception when role assignment exists #867
Full changelog

cloud-network-config-controller

OCPBUGS-56359: Increase API call timeout to 30 second #172
Full changelog

cluster-autoscaler

OCPBUGS-59267: Fix cool down status condition to trigger scale down #363
OCPBUGS-60609: fix checkpoint gc of unknown recommenders #372
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-60387: Add Service using common resource templating #411
OCPBUGS-60387: Update service selector to match deployment label #410
Full changelog

cluster-config-api

OCPBUGS-58392: Add IPsec API for NAT-T UDP encapsulation support #2393
OCPBUGS-56424: Add IdleConnectionTerminationPolicy field to IngressControllerSpec #2330
Full changelog

cluster-etcd-operator

OCPBUGS-60836: add missing ports to svc and pod spec #1473
OCPBUGS-53510: fix CVE-2025-30204 #1403
Full changelog

cluster-image-registry-operator

OCPBUGS-53870: bump github.com/golang-jwt/jwt #1219
OCPBUGS-51600: bump golang.org/x/oauth2 #1210
Full changelog

cluster-ingress-operator

OCPBUGS-56424: Add e2e tests for IdleConnectionTerminationPolicy #1235
OCPBUGS-56424: Add support for IdleConnectionTerminationPolicy #1234
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-60467: Add missing service ports to apiserver service #1895
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-60834: Missing endpoint slices for open ports the operator uses #864
Full changelog

cluster-network-operator

OCPBUGS-44443: Add controlplane cli image envar for use with hypershift #2791
OCPBUGS-58392: Add IPsec API for NAT-T UDP encapsulation support #2736
OCPBUGS-56992: iptables-alerter streamlining #2717
OCPBUGS-56195: Fix live migration with feature migration configured explicitly #2710
OCPBUGS-53317: Fix feature migration for EgressIP #2673
Full changelog

cluster-samples-operator

OCPBUGS-55457: Adding mutex to func createSamples on handler.go #633
Full changelog

cluster-storage-operator

OCPBUGS-61252: add ability to control kube rbac proxy container image on controlplane #614
Full changelog

cluster-version-operator

OCPBUGS-58452: Failing=Unknown upon long CO updating #1213
OCPBUGS-55156: Fix a panic caused by a data race #1178
Full changelog

console

OCPBUGS-61057: OpenShift console PVC clone cannot use B as the unit #15450
OCPBUGS-60175: Tolerate unknown fields in Infrastructur… #15368
OCPBUGS-60641: Secret key with binary file changes when edited via Console #15417
OCPBUGS-59869: Not able to launch terminal window from OCP web console due to console plugin conflicts #15334
OCPBUGS-57677: Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image #15328
OCPBUGS-60115: Cannot read properties of undefined (reading ‘node-role.kubernetes.io/master’) error while accessing node logs from console #15358
OCPBUGS-59358: fix bug where / in console.tab/horizontalNav href brea… #15286
OCPBUGS-37603: Manual backport of several incremental fixes for unauthenticated endpoints #15312
OCPBUGS-59274: Add the ability to launch multiple modals with useModal hook #15276
OCPBUGS-59445: Cannot read properties of undefined (reading ‘filter’) error while accessing nodes from console. #15291
OCPBUGS-58407: Add flags in console static plugin for all the components of this epic #15243
OCPBUGS-56838: Fetching taskRuns in PLR details page using PLR UID also #15099
OCPBUGS-58188: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15214
OCPBUGS-57326: Remove logoutOpenShift method call #15172
OCPBUGS-57270: Debug pod logs are not accessible when debugging a node via OpenShift Console #15165
OCPBUGS-57096: Add all files to vendor regardless of gitignore #15133
OCPBUGS-57089: Sample segment sessions #15130
OCPBUGS-56858: remove 60 day alert from cluster update modal #15102
OCPBUGS-56715: update the Deployment pod on change in imageStream #15091
OCPBUGS-56472: Remove the devconsole backend common internet proxy and replace it with dedicated ones #15072
OCPBUGS-55378: Do not load CSRs if user does not have permissions #15000
OCPBUGS-55644: fix bug where operator appears twice #15016
OCPBUGS-45142: Add missing pipelines plugin name to known plugins #14550
Full changelog

console-operator

OCPBUGS-60794: Update downloads deployment configuration to use master node selector #1036
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-55648: Check error returned by ipv6 SettleAddresses #188
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-58884: CARRY: don’t ignore json files #341
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-60450: UPSTREAM: 1238: Snapshot Controller startup should not LIST all volumesnapshots #186
Full changelog

docker-builder

OCPBUGS-58074: S2I build cpu limits observed by assemble are limited to 1 cpu #475
Full changelog

docker-registry

OCPBUGS-60183: bump openshift/docker-distribution #441
OCPBUGS-53654: bump jwt and oauth dependencies #432
Full changelog

gcp-machine-controllers

OCPBUGS-55249: Disable shielded VMs for non-UEFI disks #116
Full changelog

haproxy-router

OCPBUGS-56424: Add support for IdleCloseTerminationPolicy #655
OCPBUGS-49391: Reject All CA-Signed Certs Using SHA1 #651
Full changelog

hyperkube, pod

4.16: OCPBUGS-60872: UPSTREAM: 127757: scheduler: Improve CSILimits plugin accuracy by using VolumeAttachments #2435
OCPBUGS-60272: Bump nfs server provisioner #2402
OCPBUGS-58054: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2342
OCPBUGS-58054: UPSTREAM: <carry>: disable some legacy cloud provider Azure tests #2352
OCPBUGS-57290: UPSTREAM: <carry>: Bump cadvisor version to fix kubelet #2325
Full changelog

hypershift

OCPBUGS-60150: Always compress and encode payload in token secret for inplace upgrades #6750
OCPBUGS-60951: MCE 2.6 konflux hcp cli #6701
CNTRLPLANE-1203: HO MCE change to hermetic ta build #6654
CNTRLPLANE-1231: Move CPO pipeline to hermetic builds #6599
OCPBUGS-58505: [release-4.16] Add missing service network DNS entries to KAS cert #6393
OCPBUGS-57494: Add proxy variables for the MCD Pod #6286
OCPBUGS-55697: Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs #6114
CNTRLPLANE-919: Konflux build pipeline service account migration #6087
CNTRLPLANE-919: Konflux build pipeline service account migration #6082
OCPBUGS-51804: Fix golang crypto dependency go.mod replacement #5994
OCPBUGS-54914: Add konnectivity-proxy sidecar to openshift-oauth-apiserver #6026
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-58737: bump github.com/golang/glog to version v1.2.4 #106
OCPBUGS-56063: tech debt: rework vendor patches #91
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-59727: [IBM VPC] set offlineExpansion to false in e2e test manifest #149
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-51818: CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork #109
Full changelog

insights-operator

fix: incorrect anonymization of domains (#1119) #1119
feat: copy proxy envs from IO pod to gathering pods (#1108) #1108
OCPBUGS-60448: [release-4.16] Adding missing back-port changes from OCPBUGS issue (#1117) #1117
Full changelog

kube-proxy, sdn

OCPBUGS-54457: Drop SYNACK as well in MCS side #658
Full changelog

kube-storage-version-migrator

NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-16). #227
Full changelog

libvirt-machine-controllers

OCPBUGS-26525: Updating ose-libvirt-machine-controllers-container image to be consistent with ART for 4.16 #283
Full changelog

machine-api-operator

OCPBUGS-57210: Updates GCP CredentialsRequest #1378
OCPBUGS-55248, OCPBUGS-55249: Updates GCP credentials request #1355
Full changelog

machine-config-operator

OCPBUGS-60621: Add workaround fix for static pod race #5252
OCPBUGS-56558: Log CRC MC deletion #5178
OCPBUGS-58270: Do not set cpu system reserve below the default value #5163
add missing vendors #4952
OCPBUGS-48283: Do not run resolv-prepender from NM dispatcher #4784
OCPBUGS-56868: daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers #5090
OCPBUGS-56626: error from generateAndValidateRenderedMachineConfig function can be misleading #5075
OCPBUGS-54831: Make mtu-migration run after wait-for-primary-ip #4990
OCPBUGS-55684: MSBIC should not update windows machinesets #5028
OCPBUGS-35921: userCA and cloudCA certfiicates are not removed from nodes and ignition config #4419
Full changelog

monitoring-plugin

OCPBUGS-54316: Fix “Export as CSV” #469
Full changelog

multus-admission-controller

OCPBUGS-58767: Update the github.com/golang/glog module to v1.2.4 #103
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-47472: adds getcontext (backport 4.16) #261
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-55618: Fixes leftover podref issue #365
Full changelog

network-interface-bond-cni

OCPBUGS-61348: Bump github.com/containernetworking/plugins from to 1.7.1 #95
NO-JIRA: Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.16 #91
NO-JIRA: Add ci-operator.yaml file on release-4.16 #84
Full changelog

network-metrics-daemon

OCPBUGS-58777: Bump github.com/golang/glog to v1.2.4 (#113) #113
OCPBUGS-60186: Replace e2e test image (#122) #122
swtich golint install method (#123) #123
Full changelog

nutanix-machine-controllers

OCPBUGS-51854: CVE-2025-22868 #110
OCPBUGS-47266: fixing CVE-2024-45338 #93
Full changelog

openshift-apiserver

OCPBUGS-56612: Fix image reference in TestImageStreamImportQuayIO #516
Full changelog

openshift-controller-manager

OCPBUGS-60233: ignore error failing to find pull/push secrets #409
OCPBUGS-57513: Set node-pullsecrets volume to read-only to protect image pull credentials #394
OCPBUGS-56354: Empty proxy variables are causing issues during the build #382
Full changelog

openstack-cluster-api-controllers

OCPBUGS-58028: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.16 #346
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-58881: operatorgroup: ensure clusterroleselectors in clusterrole aggregation rules are sorted #1102
OCPBUGS-59647: Reduce Frequency of Update Requests for Copied CSVs (#3597) #1042
OCPBUGS-60847: Add NetworkPolicy as a supported kind #1050
OCPBUGS-61388: [4.16] e2e stability fixes #1083
OCPBUGS-57429: reduce cache expiry frequency [release-4.19] #1022
OCPBUGS-56358: fix(olm): improve error logging for missing olm.managed label (#3558) #1006
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-60494: Update OWNERS file: Add Patryk/Martin as approvers #2718
OCPBUGS-58161: Unpin OVS patch versions #2648
OCPBUGS-57396: Fix predicate for cluster subnet route to gateway router #2645
OCPBUGS-55282: Fix hybrid overlay node subnets collision with cluster subnets #2621
OCPBUGS-48121: Increase InformerSyncTimeout to 60s #2624
OCPBUGS-56242: Handles unspecified protocol in network policy port #2571
OCPBUGS-56812: egressfirewall: avoid nil dereference on node delete #2591
OCPBUGS-52503: Fixes unexpected mp0 route removal during start up #2479
Full changelog

powervs-machine-controllers

OCPBUGS-54752: Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.16 #114
Full changelog

prometheus

OCPBUGS-56739: BACKPORT: fix promtool analyze block shows metric name with 0 cardinality #255
OCPBUGS-54942: Scraping: Bump cache iteration after error to avoid false duplicate detection. #250
Full changelog

route-controller-manager

OCPBUGS-56152: Added error event for failed ingress to route conversion #61
OCPBUGS-55201: ingress: Reset metrics when ingress is deleted #58
Full changelog

tests

OCPBUGS-61170: images/tests: Remove rteval #30203
NO-JIRA: Update extended/networking OWNERS #30091
OCPBUGS-60272: Bump kubernetes version to fix NFS ganesha version #30086
OCPBUGS-57311: Replace RunHostCmd with Exec function to censor bearer token being exposed #29908
OCPBUGS-57203: fix: remove un-needed test #29849
OCPBUGS-34163: Fix regex parser for censoring private key #29805
OCPBUGS-56704: aws/edge: prevent test using unschedulable nodes #29847
OCPBUGS-55476: support provider type external #29738
OCPBUGS-55636: [build] Ensure Git Clone Does Not Run Privileged #29746
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github