Back to index

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.17.40-x86_64

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
  • upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
• Informing jobs
  • aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.17-e2e-aws-ovn-serial
  • aws-ovn-upgrade-4.17-micro Succeeded periodic-ci-openshift-release-master-ci-4.17-e2e-aws-ovn-upgrade
  • aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.17-e2e-aws-ovn-upgrade
  • azure-ovn-upgrade-4.17-micro Pending (1 retries) periodic-ci-openshift-release-master-ci-4.17-e2e-azure-ovn-upgrade
  • fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.17-fips-payload-scan
  • gcp-ovn-rt-upgrade-4.17-minor Pending (1 retries) periodic-ci-openshift-release-master-ci-4.17-upgrade-from-stable-4.16-e2e-gcp-ovn-rt-upgrade
  • hypershift-ovn-conformance-4.17 Succeeded periodic-ci-openshift-hypershift-release-4.17-periodics-e2e-aws-ovn-conformance
  • metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.17-e2e-metal-ipi-ovn-bm
  • metal-ipi-ovn-ipv6 Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.17-e2e-metal-ipi-ovn-ipv6

Upgrades from:

• 4.17.39 (changes) - S S F P S F
• 4.17.38 (changes) - Failed
• 4.17.37 (changes) - Failed
• 4.17.34 (changes) - Success
• 4.17.18 (changes) - Failed
• 4.17.14 - Success
• 4.17.2 (changes) - Failed
• 4.17.1 (changes) - Failed
• 4.17.0 (changes) - Success
• 4.16.48 (changes) - Success Failed
• 4.16.47 (changes) - Failed
• 4.16.46 (changes) - Success
• 4.16.44 (changes) - Failed
• 4.16.42 (changes) - Success
• 4.16.20 (changes) - Failed
• 4.16.10 (changes) - Failed
• 4.16.9 (changes) - Failed
• 4.16.8 (changes) - Success
• 4.16.0-0.nightly-2025-09-16-092333 (changes) - Failed Pending

---

Loading changelog, this may take a while ...

Changes from 4.17.14

Created: 2025-09-18 13:30:15 +0000 UTC

Image Digest: sha256:a3de76823707baa557d08b06cc535256e17bf898cd8dffb51ed93d7cc6518167

Components

• Kubectl 1.30.5
• Kubernetes upgraded from 1.30.7 to 1.30.14
• Kubernetes Tests upgraded from 1.30.0 to 1.30.14
• Red Hat Enterprise Linux CoreOS upgraded from 417.94.202501220426-0 to 417.94.202509161710-0 (diff)

Removed images

• ovirt-machine-controllers

Rebuilt images without code change

• aws-ebs-csi-driver git 2bb5b316 sha256:f5f5649c40c0a0d94d5df45e597c30534c5af0d92f34b81103bef7c8f4d23121
• aws-kms-encryption-provider git 9d401670 sha256:a6eedaf45029078afa1d37cb1a69b3571851210658b13eba6df770f79046d985
• aws-machine-controllers git b41b8c8f sha256:0c723e9e4cc45c910937d76a96a9e569792d2b877ed8954e5f1e4b252c06e65d
• azure-cloud-controller-manager git 626ecd1c sha256:5ce0d5c7248fe5f18631d4175ec469f04aeda78eccec945e3cb07b2f15123a63
• azure-cloud-node-manager git 626ecd1c sha256:3dc4cd43bfb77b0529210c770c886daaa90ffdba184a2c6637f6ca368b318411
• azure-cluster-api-controllers git d359bfe5 sha256:85827afddf3a4d1108e43ea0ba0c3fd0d55c27f6d3c2fab33f3ce2530bbb880c
• azure-disk-csi-driver git a544f30b sha256:d5371378ebed41dc23882a20019f1a03ca7092111104619fb6286c22ad5203b2
• azure-file-csi-driver git 9f4c38c2 sha256:64f0773aeddac911f0e7db6e729f0f8292771113210825e64f5ac02bef92b984
• baremetal-machine-controllers git 6e7aa77e sha256:3d303a8ba456e6c3916379dacd5dbf3dbd78f8ee6d8afd1f4bc9daadca63e827
• cluster-autoscaler-operator git ea4a8878 sha256:b6ca69fd9db42884f7c43afcb451747dd2316cd664faff3d07b5e060a9bad0cc
• cluster-bootstrap git 95dd9129 sha256:38a7817c321e2cb4bbf4dafce1cf609512b9d687176b2da45902d833eb7a4e8b
• cluster-capi-controllers git 77ef4fc5 sha256:08b368baccde6c777766c2bd8798a2d2dc292b7bf477577ea6c4379250297a44
• cluster-control-plane-machine-set-operator git f7e01c2f sha256:99f82925284bf9a36ea5d064509ba030f159e9904c66a27ccc59d6dbf91c926b
• cluster-csi-snapshot-controller-operator git ffba005b sha256:f9548069c02b73c6d71a3faff542721f7ac8b27b0251ec1b8754748d3ccfac92
• cluster-kube-cluster-api-operator git aed5f6c7 sha256:55e9cea45d43a2e9c830fba1bab9b191a1106dc1a32ba2c7ff7a6788935ab0c2
• cluster-kube-scheduler-operator git 98ca953b sha256:ca1f73498ee6611a7b946b0cb914ec55381d0fd94e266f32149cebcafcb68c1e
• cluster-kube-storage-version-migrator-operator git ab40b611 sha256:b410e14a3306e2a665ca03ac07c47ff3f1f3595e560f88c3280e6887549180fb
• cluster-machine-approver git acc2380e sha256:ff807a3f7c5cdbf730084492785fed413295dcd7d71c95aad8de4c3a72f53f16
• cluster-olm-operator git e31b7775 sha256:b13b57f2cc630c25f077f7d1782c01b9ce95b9cabf995492ba6b5b9073ec1cf7
• cluster-openshift-apiserver-operator git 2b2ba3be sha256:a9d77269918014ddba8788ad56caa2e4c23947789ab671c1e0a377bfa12cb014
• cluster-openshift-controller-manager-operator git b05a249d sha256:fc4a980db6b345407d261133a5a58cc6647ce70d6fc5b686af9682d755ae48f6
• cluster-policy-controller git 7209e90d sha256:01087d7e8c3e05a77bee7feff0c3c9e2226a098945ea71c826bac481962a1412
• csi-driver-manila-operator git efc99a2a sha256:13e79747698f51a3ad1b7c6170f0023c9034b0e0d1c41a4d9eceee57b04f107e
• csi-driver-shared-resource-operator git c095a1f2 sha256:100812e1e719ced60a2f32f1f40438e0f3ebce6b49a58fe5921a206691177461
• csi-external-attacher git c3fe8e2e sha256:e40322598ef9acfd05204ef66b948028cb5523d7538ab5a3c6c759de917af86e
• csi-external-provisioner git fe460e56 sha256:ea365da79d93e128eabf785027c605de1e7b10874684f99d65a43562cc422cfd
• csi-external-resizer git ab87a938 sha256:248f245cf8acca49aa7c891ee0214a210b69dfbab1fbaf93a6bdbe7b5aef7d37
• driver-toolkit git 859518f6 sha256:9ec6935a19cf267d2230ba43d86a1c78cc108e90866f48b4c91196458631faa6
• egress-router-cni git 3193a756 sha256:39610be50dcf417026d36b9b66d443d4038c2b70c8d025fa4723fe06d68c66c1
• gcp-cloud-controller-manager git 8ce997d7 sha256:9507780e0e7a2f1e1ab766b23f1a186ee0b7991dae7dd29e61b22423d52b5924
• gcp-cluster-api-controllers git 9c561f2d sha256:5283b420822e9ae7d23816ea3bbf64b00d2bb429b59900f5d5d841cf5e1c39ac
• gcp-pd-csi-driver git c770b412 sha256:7cfb64ee1e3b0925aed43e2c622e35cbebe8dcd82b5ed31c93d73b0f59591a2b
• gcp-pd-csi-driver-operator git c23b064f sha256:23681be1698fef0d7160161cb23f8a442b211d607efc991bff7b82230abbafdc
• gcp-workload-identity-federation-webhook git 08579e9f sha256:615e9d93ac2b016601190a01b5bf1413ee9cb9852cf355f0cce1c26b56c107e0
• ibm-cloud-controller-manager git ad8f7eb0 sha256:c4c381e8cd68a954e2d2287adbd55b0c3376b7d4852fccaa85311f90ff8c0131
• keepalived-ipfailover git e3879e9e sha256:bd92a419b272b7b1eb97295d8125d42ea9ab8d279bdb3bfe7ece8cbdca69d0bd
• kube-proxy git dee082de sha256:a05f6d26a81b8f7c9bafcc0a49c9be1de4e107f8d95730b8f3f278ea85ab02a9
• kube-state-metrics git 462e63f6 sha256:6a1ce8ecd9c7941f621d7b3f33732579f2fd7031a788b070676247273bb0b1a8
• kubevirt-cloud-controller-manager git 3f4542ec sha256:5da4ed3c019338d2e932be2ab636be9afaa90cbbc23b707de0b1914068147c12
• libvirt-machine-controllers git a336f0b5 sha256:0c1375537692881c158c5b675e2c8313e566b7c4a4c20c0b5827c141de266bc3
• multus-route-override-cni git 391c1b03 sha256:4775f8fe498bbc5d5942b114c36acaff9410855accacd71674f3e4a468ca2325
• nutanix-cloud-controller-manager git c9f6cd1f sha256:784309bb4044d0fd96441aa0abbaf4660e97938758fd2a772a0f416cc7238ce7
• oc-mirror git 39bedc78 sha256:2b23040c2e5994e2d9c3cc7bfa8550251e92e8ac168fc3be3e625f7e959e6a63
• olm-catalogd git c740e056 sha256:ab9401a0bcb186641b979f8eddb892df0a83eafe8d26353efc411bdd1f3571ca
• openstack-cinder-csi-driver-operator git f89b6dbc sha256:543d4a467bdcc23fee9b087436eea9a38c8bf0df03ac28834179b44f5cbc1cfe
• openstack-machine-api-provider git 68971874 sha256:5f366e399963dbf204a4b9e0800ea80215aec439b364f0988b8abc5402958da6
• ovirt-csi-driver git 1db726a9 sha256:7b853c5132bd4ee647241e0b629ed229429c891ba7f424c4d4f822aac5dc2226
• ovirt-csi-driver-operator git 0feae256 sha256:048ee6ac84b3ff1470c3135c8c1389514cb4de338e888459b5434d4596885c42
• powervs-block-csi-driver git aaa6afa9 sha256:9d39976401a3f3bab53a9bc8052c8942311191af2803dc6b679d13c447b22cd5
• powervs-block-csi-driver-operator git f6f037c5 sha256:7fa8fa15f9e7b93d606b1366a73601777f83457747d5ad2681fc94f5323a0256
• powervs-cloud-controller-manager git bd3d72e5 sha256:38747888170bbae6499165806d58d9290e3601fe22d84a5001366056a0122534
• prometheus-config-reloader git 77cedd6c sha256:0c73cf300e61f0633c1d878e00d837de73e617c0f302c669b3b74d8aa84a97ac
• prometheus-operator git 77cedd6c sha256:5225a32c18dc7f373d2198255c40daa0dd23b78c8bf4a2e569a31b7305c9752d
• prometheus-operator-admission-webhook git 77cedd6c sha256:158f2e2bed3917549caed5980c7499e214d26e351a3b1ba5059d22cf9c44a28e
• rhel-coreos sha256:a75946a39fcf33505e928555d4afc3ac1420b4e2136afaec0a8021d05e40c910
• rhel-coreos-extensions sha256:48b90664672a1ee57d066aa34437963e3b5a2f1698cac40a8346cadf8a9383f2
• vsphere-cloud-controller-manager git 097d823b sha256:0686fcc8d8be2526e543b8da01ca515710dcbb6d19b7c363ac1dd990f701e068
• vsphere-csi-driver git 039ee368 sha256:0968bbfd89619ca1f527687b9ffb3c03a0e9f3f33b856d5a6c6520f169fc3233
• vsphere-csi-driver-syncer git 039ee368 sha256:ba9f7425321090f1831a365d7ab9969b78b3340cdd97bd9df72b752008840d3b
• vsphere-problem-detector git cd0df71f sha256:2600215cc00a07790b116c455fc12d83025bd84c31d6e107879034bbded571ae

agent-installer-api-server

• NO-ISSUE: pin gotestsum to v1.12.3 (#8017) #8017
• OCPBUGS-58634, OCPBUGS-58639: Bump glog to v1.2.5 in release-4.17 (#7895) #7895
• OCPBUGS-47627: dnsmasq service on OCP SNO fails to read /etc/resolv.conf file during system startup (#7724) #7724
• OCPBUGS-51230: Revert go-jose from v4.0.5 to v0.3.04 (#7605) #7605
• OCPBUGS-51230: Bump github.com/go-jose/go-jose/v4 to v4.0.5 in release-4.17 (#7574) #7574
• OCPBUGS-54402: Bump go-jwt to 4.5.2 to fix CVE-30204 (#7484) #7484
• OCPBUGS-48390: Bump moby from v26.0.0 to v27.2.1 (#7188) #7188
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• OCPBUGS-58649: Bump glog pkg to 1.2.4 (#1182) #1182
• Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.17 (#1088) #1088
• Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.17 (#1087) #1087
• OCPBUGS-53719: Bump jwt to 4.5.2 in release-4.17 (#1086) #1086
• abi: let the bootstrap waiting for workers before rebooting (#1028) #1028
• Full changelog

agent-installer-node-agent

• OCPBUGS-58654, OCPBUGS-58659: Bump glog to v1.2.5 in release-4.17 (#1070) #1070
• OCPBUGS-52994: Update to latest ghw version (#986) #986
• Updating ose-agent-installer-node-agent-container image to be consistent with ART for 4.17 (#798) #798
• OCPBUGS-53711: Bump jwt to 4.5.2 in release-4.17 (#964) #964
• NO-ISSUE: Increase image pull timeout during install (#922) #922
• Full changelog

agent-installer-utils

• append .0 to go.mod version #110
• Full changelog

apiserver-network-proxy

• append .0 to go.mod version #82
• Full changelog

aws-cloud-controller-manager

• append .0 to go.mod version #109
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-58669, OCPBUGS-58674: bump github.com/golang/glog to v1.2.5 #559
• OCPBUGS-53727: bump to github.com/golang-jwt/jwt/v4@v4.5.2 #546
• OCPBUGS-51309: UPSTREAM: 5339: Bump glog for recent fixes #539
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator

• OCPBUGS-60597: Bump library-go to fix assignment to nil map issue #422
• OCPBUGS-60470: Backport stale conditions fix #416
• Full changelog

aws-pod-identity-webhook

• OCPBUGS-51232: github.com/go-jose/go-jose/v4 v4.0.5 #202
• Full changelog

azure-kms-encryption-provider

• append .0 to go.mod version #19
• OCPBUGS-53495: bump golang-jwt v4 #12
• Full changelog

azure-machine-controllers

• OCPBUGS-56168: [release-4.17] Update virtualmachines service to armcompute/v5 SDK #146
• OCPBUGS-56655: Fix failure when attempting to modify immutable availabilitySet #152
• OCPBUGS-55729: Update eviction policy for Spot VMs from Deallocate to Delete #140
• OCPBUGS-54393: Re-reconcile machine on NIC provisioning failure #136
• OCPBUGS-52359: Remove unused vnet package #130
• OCPBUGS-50017: dynamically setting the amount of fault domains #127
• Full changelog

azure-workload-identity-webhook

• OCPBUGS-53799: github.com/golang-jwt/jwt/v4 v4.5.2 #32
• OCPBUGS-51234: github.com/go-jose/go-jose/v4 v4.0.5 #28
• Full changelog

baremetal-cluster-api-controllers

• ART-13124: Update go.mod to include patch version in go directive #46
• Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

• OCPBUGS-54599: Update the RHCOS 4.17 bootimage metadata #9902
• OCPBUGS-58319: vSphere - remove unit tests using nip.io #9821
• OCPBUGS-57293: sort zone slices extracted from map of byo subnets #9778
• OCPBUGS-56448: vsphere - check if host is powered down or on standby before uploading template #9726
• OCPBUGS-57292: ensure ctrplane nodes can access bootstrap MCS #9775
• OCPBUGS-57304: IBI nmstate unit test fix #9777
• OCPBUGS-55224: Fix Load balancer IP setup #9675
• OCPBUGS-51116: update resolv.conf every time on bootstrap node #9504
• OCPBUGS-51210: Fixes panic during GCP tags fetch due to unstable network #9512
• OCPBUGS-46375: Allow spaces in the aws tags [release-4.17] #9315
• OCPBUGS-54357: IBMCloud: Move to IBM TF openshift fork #9613
• OCPBUGS-53378: Remove error logging when determining image arch #9581
• OCPBUGS-53459: aws: fix NLB creation in secret regions #9071
• OCPBUGS-52961: Remove tmp directory used for agent pxe files #9552
• OCPBUGS-43528: Prevent race with provisioning-interface service #9110
• OCPBUGS-44058: Log correct hostname for validation status #9162
• OCPBUGS-50967: PowerVS: destroy dhcp hack #9494
• OCPBUGS-50846: OCPBUGS-50702: [release-4.17] MGMT-19771: Convert IDS to proper IDMS manifest #9470
• OCPBUGS-50876: correct typo #9484
• OCPBUGS-49975: aws/edge/byovpc: subnets tag kube cluster tag to shared #9445
• OCPBUGS-48761: Update RHCOS 4.17 bootimage metadata to 417.94.202501301529-0 #9448
• OCPBUGS-49993: Disable IP Forwarding for CAPG Machines #9446
• OCPBUGS-41300: Azure: Update SecurityType passed in at Image creation #9409
• OCPBUGS-49362: [Nutanix] Installation failed with timeout when uploading images to PC #9406
• OCPBUGS-48645: azure: use separate /var to avoid growfs timeouts #9381
• Full changelog

baremetal-operator

• OCPBUGS-53325: BMO can expose any secret via BMCEventSubscription CRD #406
• OCPBUGS-42387: Remove dataImage finalizer if BMH is missing #390
• OCPBUGS-49701: Handle HFC for non-redfish HW #395
• Full changelog

baremetal-runtimecfg

• OCPBUGS-48766: Extend haproxy-monitor fall time #340
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-56734: Adding sos.conf file for default sos config into the tools image #2027
• OCPBUGS-58091: avoid transfering permissions when copying artifacts from node-joiner pod #2053
• OCPBUGS-57446: Use fedora image in unit tests instead of centos #2038
• OCPBUGS-49607: Address golang.org/x/* CVEs #1962
• OCPBUGS-50984: Add HOST env var in oc debug for sos report collects more #1976
• OCPBUGS-49605: Address github.com/docker/docker CVE #1968
• Full changelog

cloud-credential-operator

• OCPBUGS-60972: ccoctl: aws to use proper issuer url on subsequent runs #908
• OCPBUGS-58679: github.com/golang/glog v1.2.5 #892
• OCPBUGS-58248: ccoctl: only add owned tag to azure resources on create #883
• OCPBUGS-56980: Azure: resolve nil pointer exception when role assignment exists #868
• OCPBUGS-54828: Render: configure proxy on bootstrap static pod #863
• OCPBUGS-53415: github.com/golang/glog v1.2.4 #842
• OCPBUGS-53823: update github.com/golang-jwt/jwt #838
• OCPBUGS-51548: Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #828
• OCPBUGS-51238: github.com/go-jose/go-jose/v4 v4.0.5 #825
• Full changelog

cloud-network-config-controller

• OCPBUGS-56257: Increase API call timeout to 30 second #171
• Full changelog

cluster-authentication-operator

• OCPBUGS-54580: Avoid duplicate OAuth client creation #765
• Full changelog

cluster-autoscaler

• OCPBUGS-60913: revert openshift replica fix #376
• OCPBUGS-60608: fix checkpoint gc of unknown recommenders #371
• OCPBUGS-59266: Fix cool down status condition to trigger scale down #362
• OCPBUGS-54325: improve replica counting and decrease target size behavior #352
• Full changelog

cluster-baremetal-operator

• OCPBUGS-61097: Remove webhookport (9447) as HostPort #505
• OCPBUGS-54542: Add missing relatedObjects #469
• Full changelog

cluster-capi-operator

• append .0 to go.mod version #314
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-60211: Update service selector to match deployment label #406
• OCPBUGS-60211: Add Service using common resource templating #407
• Full changelog

cluster-config-api

• OCPBUGS-57285: Add IPsec API for NAT-T UDP encapsulation support #2363
• OCPBUGS-49702: Add IdleConnectionTerminationPolicy field to IngressControllerSpec #2186
• OCPBUGS-39130: Added checks to prevent vCenters from changing after install past 1 vCenter #2014
• Full changelog

cluster-config-operator

• append .0 to go.mod version #441
• Full changelog

cluster-dns-operator

• OCPBUGS-52497: [release-4.17] Add runbook_url for CoreDNSErrorsHigh #430
• Full changelog

cluster-etcd-operator

• OCPBUGS-61337: Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace #1480
• OCPBUGS-60220: add missing ports to svc and pod spec #1461
• OCPBUGS-53511: fix CVE-2025-30204 #1414
• Full changelog

cluster-image-registry-operator

• OCPBUGS-53871: bump github.com/golang-jwt/jwt #1218
• OCPBUGS-51604: bump golang.org/x/oauth2 #1209
• OCPBUGS-51103: ensure that storage names don’t end in dashes #1180
• Full changelog

cluster-ingress-operator

• OCPBUGS-49702: Add e2e tests for IdleConnectionTerminationPolicy #1225
• OCPBUGS-49702: Add support for IdleConnectionTerminationPolicy #1223
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-60398: Add missing service ports to apiserver service #1893
• OCPBUGS-50516: Increase waitForFallbackDegradedConditionTimeout #1803
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-60249: Missing endpoint slices for open ports the operator uses #855
• Full changelog

cluster-monitoring-operator

• OCPBUGS-60017: operator: increase wait time till degraded to max 4 times 5m #2634
• Full changelog

cluster-network-operator

• OCPBUGS-58066: [release-4.17]: Manual feature backport of cert rotation for whereabouts #2784
• OCPBUGS-57285: Implement IPsec NAT-Traversal encapsulation option #2726
• OCPBUGS-55518: iptables-alerter streamlining #2698
• OCPBUGS-55033: Add IPv6 NGINX configuration #2689
• OCPBUGS-52951: Unexpected Behavior During Cluster Upgrade for the ovn-ipsec-host pods #2654
• OCPBUGS-49816: ovn-k, rbac: Enable users read & modify UserDefinedNetwork CRs #2655
• OCPBUGS-49961: Update egressfirewall CRD to be consistent with ovn-kubernetes repo #2642
• : OCPBUGS-44863: Add nodeslicepool #2574
• Full changelog

cluster-node-tuning-operator

• use ROLE_WORKER_CNF environment variable to determine mcp name (#1290) #1290
• Full changelog

cluster-samples-operator

• OCPBUGS-55800: only update LastTransitionTime if operator status change #640
• OCPBUGS-55795: Adding filter to clusterOperatorInformerEventHandler #639
• OCPBUGS-55894: Samples Operator should sort failing image imports #641
• OCPBUGS-55042: Adding mutex to func createSamples on handler.go #632
• OCPBUGS-54362: add rhdmalone to owners #619
• OCPBUGS-48786: add shannon and aroyoredhat as owners #595
• Full changelog

cluster-storage-operator

• OCPBUGS-52222: fix Vsphere cluster Storage operator in Unavailable state #560
• Full changelog

cluster-update-keys

• NO-ISSUE: Updating ose-cluster-update-keys-container image to be consistent with ART for 4.17 #79
• Full changelog

cluster-version-operator

• OCPBUGS-58451: Failing=Unknown upon long CO updating #1212
• OCPBUGS-50589: Set openshift.io/required-scc: privileged annotation in version pods #1154
• Full changelog

configmap-reloader

• append .0 to go.mod version #70
• Full changelog

console

• OCPBUGS-54241: VolumeSnapshots are not displayed in OpenShift Web Console #15465
• OCPBUGS-59747: OpenShift console PVC clone cannot use B as the unit #15324
• NO-JIRA: Increase the timeout on the cypress test #15420
• OCPBUGS-58365: change ‘/metrics/usage’ endpoint to ‘/api/metrics/usage’ #15271
• OCPBUGS-59544: Secret key with binary file changes when edited via Console #15301
• OCPBUGS-59784: Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image #15329
• OCPBUGS-58337: Tolerate unknown fields in Infrastructur… #15236
• OCPBUGS-59492: Cannot read properties of undefined (reading ‘node-role.kubernetes.io/master’) error while accessing node logs from console #15294
• OCPBUGS-59879: add data-test attrs to console plugins … #15338
• OCPBUGS-59510: Not able to launch terminal window from OCP web console due to console plugin conflicts #15297
• OCPBUGS-59265: fix bug where / in console.tab/horizontalNav href brea… #15270
• OCPBUGS-58318: Implement sessions in openshift authenticator #15238
• OCPBUGS-58224: Add the ability to launch multiple modals with useModal hook #15222
• OCPBUGS-58378: Cannot read properties of undefined (reading ‘filter’) error while accessing nodes from console. #15241
• OCPBUGS-57835: Add flags in console static plugin for all the components of this epic #15192
• OCPBUGS-57932: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15197
• OCPBUGS-57182: Fix ‘/metrics’ endpoint token review to handle interna… #15154
• OCPBUGS-56895: HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling #15108
• OCPBUGS-57095: Add all files to vendor regardless of gitignore #15132
• OCPBUGS-57114: Debug pod logs are not accessible when debugging a node via OpenShift Console #15142
• OCPBUGS-56975: Sample segment sessions #15114
• OCPBUGS-56844: Enable knative tests #14387
• OCPBUGS-56375: remove 60 day alert from cluster update modal #15062
• OCPBUGS-55924: Fetching taskRuns in PLR details page using PLR UID also #15029
• OCPBUGS-55756: update the Deployment pod on change in imageStream #15022
• OCPBUGS-56238: Remove the devconsole backend common internet proxy and replace it with dedicated ones #15049
• OCPBUGS-55447: Authenticate user token in openshift Authenticate func #15010
• OCPBUGS-55415: fix bug where operator appears twice #15002
• OCPBUGS-55202: Do not load CSRs if user does not have permissions #14985
• OCPBUGS-52999: Pipeline visualisation shows all tasks as Failed and after that goes to Running state #14862
• OCPBUGS-53168: Remove logoutOpenShift method call #14883
• OCPBUGS-51277: Fix JSON annotation parsing issue and harden related code #14795
• OCPBUGS-53086: Update the monitoring topic used by the console team #14871
• OCPBUGS-52205: Show Observe section without PROMETHEUS and MONITORING flags #14811
• OCPBUGS-51292: fix run time error when no completed version exists #14796
• OCPBUGS-51126: Fix alert rule link to alert in dev perspective #14785
• OCPBUGS-49795: ‘create a Project’ button on Getting started page doesn’t work #14714
• OCPBUGS-39602: Set default build option as BUILDS for Builder Image sample #14241
• OCPBUGS-45740: Fix Function Import: An error occurred Cannot read properties of undefined (reading ‘filter’) #14595
• OCPBUGS-45625: use default StorageClass for ServerlessFunction pipelineVolumeClaimTemplate #14589
• OCPBUGS-41596: No need to supply ‘User workload notifications’ option on ‘User Preference’ page for normal user #14265
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

console-operator

• OCPBUGS-60298: Update downloads deployment configuration to use master node selector #1033
• Full changelog

container-networking-plugins, containernetworking-plugins-microshift

• OCPBUGS-55622: Check error returned by ipv6 SettleAddresses #187
• Full changelog

coredns

• append .0 to go.mod version #135
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-58839: CARRY: don’t ignore json files #340
• OCPBUGS-52416: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.30 into release-4.17 #319
• Full changelog

csi-driver-nfs

• append .0 to go.mod version #156
• Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

• append .0 to go.mod version #372
• Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

• OCPBUGS-60449: UPSTREAM: 1238: Snapshot Controller startup should not LIST all volumesnapshots #184
• Full changelog

csi-livenessprobe

• append .0 to go.mod version #73
• Full changelog

csi-node-driver-registrar

• append .0 to go.mod version #80
• Full changelog

docker-builder

• OCPBUGS-57939: S2I build cpu limits observed by assemble are limited to 1 cpu #474
• OCPBUGS-53075: Upgraded Kubernetes dependency from 1.28.2 to 1.30.2 #465
• OCPBUGS-42894: buildah dependency bump to 1.37.6 #452
• Full changelog

docker-registry

• OCPBUGS-60090: bump docker distribution to fix purgeuploads panic #440
• OCPBUGS-53655: bump jwt and oauth dependencies #431
• OCPBUGS-49695: bump docker distribution #422
• Full changelog

etcd

• DOWNSTREAM: <carry>: OCPBUGS-53447: fix a compaction induce latency issue #321
• ETCD-714: Rebase etcd 3.5.18 openshift 4.17 #310
• Full changelog

gcp-machine-controllers

• OCPBUGS-53037: Disable shielded VMs for non-UEFI disks #115
• Full changelog

haproxy-router

• OCPBUGS-49390: Reject All CA-Signed Certs Using SHA1 #650
• OCPBUGS-49702: Add support for IdleCloseTerminationPolicy #652
• Full changelog

hyperkube, pod

• OCPBUGS-60552: [4.17] podresources: list: use active pods #2426
• 4.17: OCPBUGS-60998: scheduler: Improve CSILimits plugin accuracy by using VolumeAttachments #2434
• OCPBUGS-57888: Bump k8s api to 1.30.14 #2355
• OCPBUGS-57196: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2328
• OCPBUGS-57289: kubelet: fix a stall on startup from waiting too long for a stat call #2206
• OCPBUGS-55269: Bump k8s api to 1.30.12 #2280
• OCPBUGS-53016: Bump k8s api to 1.30.11 #2250
• OCPBUGS-51006: Bump k8s api to 1.30.10 #2210
• OCPBUGS-49905: Bump k8s api to 1.30.9 #2198
• Full changelog

hypershift

• OCPBUGS-61290: Update KCM node monitor grace period #6760
• OCPBUGS-61208: use common MCE konflux pipeline #6749
• OCPBUGS-60149: [release-4.17] Always compress and encode payload in token secret for inplace upgrades #6740
• OCPBUGS-61101: Use system trust bundle in CPO IDP https client #6735
• OCPBUGS-60921: konflux for hcp-cli #6699
• CNTRLPLANE-1204: HO MCE change to hermetic ta build #6653
• CNTRLPLANE-1230: Move CPO pipeline to hermetic builds #6598
• CNTRLPLANE-936: fix(tekton): drop multiarch builds on PR #6224
• OCPBUGS-57432: Add proxy variables for the MCD Pod #6258
• CNTRLPLANE-918: Konflux build pipeline service account migration #6088
• CNTRLPLANE-918: Konflux build pipeline service account migration #6083
• OCPBUGS-55723: Don’t check if olm images exist if guest cluster #6115
• OCPBUGS-55500, RHOCPPRIO-433: Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs #6098
• OCPBUGS-51808: Fix golang crypto dependency go.mod replacement #5993
• OCPBUGS-54841: Add konnectivity-proxy sidecar to openshift-oauth-apiserver #6017
• OCPBUGS-53323: Handle multiple mirror entries for source #5894
• OCPBUGS-54631: Sync RBAC for attaching volumes on VM level #5997
• NO-JIRA: update konflux references #5479
• OCPBUGS-53903: bump golang-jwt v4 and v5 #5906
• NO-JIRA: Red Hat Konflux update control-plane-operator-4-17 #5959
• ART-11792: update go mod dependency for konflux #5920
• OCPBUGS-51737, OCPBUGS-51808: Bump dependencies to OCP fork in backports #5900
• OCPBUGS-48439: kubevirt, Don’t break on hostname NodePort.Address #5394
• OCPBUGS-51240: bump go-jose #5863
• OCPBUGS-52657: Make managed-trust-bundle optional #5794
• OCPBUGS-52425: [release-4.17] refactor aws identity health check into new controller #5772
• OCPBUGS-46340: change plaform to platform #5562
• OCPBUGS-51339: [release-4.17] Fix IsProgressing condition in HostedClusters #5712
• OCPBUGS-50697: add region to AWS creds passed to operators managed by CPO #5671
• OCPBUGS-51098: 4.17 Add HostedCluster additional trustbundles to konnectivity-https-proxy #5675
• NO-JIRA: Update dependency mkdocs-material to v9.6.5 #5682
• OCPBUGS-50596: Honor proxy vars in the util insecure http client #5605
• OCPBUGS-49828: Duplicate hostDevices.name when hostDevices.deviceName has multiple types. #5558
• OCPBUGS-48487, OCPBUGS-48488, OCPBUGS-48490: Fix IPv6 Disconnected HCP deployments #5402
• OCPBUGS-47533: Prevent IgnitionServer from flooding the API server with patch requests #5332
• NO-JIRA: Update dependency mkdocs-material to v9.6.3 #5590
• OCPBUGS-45268: Reconcile proxy CA bundle into hosted cluster #5228
• OCPBUGS-46465: Consistently look up and dial cloud API hostnames #5302
• NO-JIRA: Update dependency mkdocs-material to v9.6.1 #5528
• OCPBUGS-49638: fix overwriting PKI operator HCP conditions #5504
• OCPBUGS-46440: Allow ARM64 arch deployment on Agent platform #5296
• OCPBUGS-48170: fix disconnected via CLI #5465
• Full changelog

ibm-vpc-block-csi-driver

• OCPBUGS-58740: bump github.com/golang/glog to version v1.2.4 #105
• OCPBUGS-56062: tech debt: rework vendor patches #90
• append .0 to go.mod version #100
• OCPBUGS-53911: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #83
• Full changelog

ibm-vpc-block-csi-driver-operator

• OCPBUGS-58435: [IBM VPC] set offlineExpansion to false in e2e test manifest #146
• Full changelog

ibmcloud-cluster-api-controllers

• OCPBUGS-51823: CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork #121
• OCPBUGS-50566: Fix for CVE-2024-45338 in golang.org/x/net/html in release-4.17 #101
• Full changelog

ibmcloud-machine-controllers

• OCPBUGS-52957: IBMCloud: MAPI replacing unhealthy CP nodes #63
• Full changelog

insights-operator

• avoid possible Go panic when searching existing conditions (#1125) #1125
• fix: incorrect anonymization of domains (#1116) #1116
• feat: copy proxy envs from IO pod to gathering pods (#1107) #1107
• Full changelog

ironic

• METAL-1305: Do not use openstack packages #647
• OCPBUGS-52292: Fix runlogwatch script #643
• OCPBUGS-50673: Install python3-inotify pkg explicitly #640
• OCPBUGS-49998: Fix runlogwatch failure if LOG_DIR does not exist #637
• OCPBUGS-49822: Drop quiet option of grep to avoid race condition with pipefail #633
• OCPBUGS-49756: Use pynotify instead of inotify-tools #631
• Full changelog

ironic-agent

• OCPBUGS-55680: Delay determining the hostname to put into ignition #185
• METAL-1305: Do not use openstack packages #179
• Full changelog

ironic-machine-os-downloader

• append .0 to go.mod version #104
• Full changelog

ironic-static-ip-manager

• OCPBUGS-49350: Fix subnet validation #47
• Full changelog

kube-metrics-server

• append .0 to go.mod version #43
• Full changelog

kube-rbac-proxy

• ART-13124: Update go.mod to include patch version in go directive #120
• Full changelog

kube-storage-version-migrator

• NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-17). #226
• ART-13124: Update go.mod to include patch version in go directive #217
• Full changelog

kubevirt-csi-driver

• OCPBUGS-54631: Ensure volume stays attached through reboots #56
• OCPBUGS-44623: During detach don’t return error if VM is not found #50
• Full changelog

machine-api-operator

• OCPBUGS-57073: Updates GCP CredentialsRequest #1377
• OCPBUGS-53036, OCPBUGS-53037: Updates GCP credentials request #1345
• OCPBUGS-52576: add image/read permissions #1344
• OCPBUGS-52359: Remove unneeded VNet permissions from Azure CredentialsRequest #1337
• OCPBUGS-51370: Drop oVirt support #1334
• Full changelog

machine-config-operator

• OCPBUGS-59930, OPNET-681: Support migration to NMState #5206
• OCPBUGS-56752: Support NODEIP_HINT in IPI deployments too #5080
• OCPBUGS-60704: operator: switch out VAP v1beta1 to v1 #5256
• OCPBUGS-57084: scope MCD node listers to current node #5107
• OCPBUGS-60239: Add workaround fix for static pod race #5231
• OCPBUGS-58292: Do not set cpu system reserve below the default value #5157
• OCPBUGS-58063: Update desired config in MCN on OCL update #5139
• OCPBUGS-56625: Give keepalived container chroot cap #5072
• OCPBUGS-58219: Boot image controller should correctly handle marketplace boot images #5151
• OCPBUGS-58218: add MachineConfiguration to CO related objects #5150
• OCPBUGS-57135: pkg/operator/status: Drop PoolUpdating as an Upgradeable=False condition #5111
• OCPBUGS-56901: Fix dynamic-system-reserved-calc.sh when only true parameter is used #5096
• OCPBUGS-56976: Boot Image Controller should not degrade when golden configmap is slow to update #5101
• OCPBUGS-56990: Only update boot disks during GCP boot image updates #5102
• OCPBUGS-56828: daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers #5087
• OCPBUGS-52313: Update machine-config-daemon-pull.service to use custom policy for Podman < 4.4.1 #4893
• OCPBUGS-56665: Add hot loop detection in the boot image controller #5077
• OCPBUGS-56395: error from generateAndValidateRenderedMachineConfig function can be misleading #5060
• OCPBUGS-56218: Rewrote TestFirstBootHasSSHKeys e2e test in pure Go #5053
• OCPBUGS-55615: MSBIC should not update windows machinesets #5021
• OCPBUGS-55490: MCO should fall back to us-east-1 for AWS bootimages if no region specific-AMI exists #5020
• OCPBUGS-54830: Make mtu-migration run after wait-for-primary-ip #4989
• OCPBUGS-52314: on-prem/resolv-prepender: stop leaking tmp files #4894
• OCPBUGS-45989: Do not run resolv-prepender from NM dispatcher #4785
• OCPBUGS-52188: ignore mc not found error #4957
• OCPBUGS-52951: Add ipsec connect wait service #4930
• OCPBUGS-53441: Fixing typos for MachineConfigNode #4936
• OCPBUGS-53186: Update ObservedGeneration in KubeletConfig #4919
• OCPBUGS-53225: daemon: ensure ostree-finalize-staged is started before rebooting #4920
• OCPBUGS-52160: Enforce VIPs to be collocated at the same host #4884
• OCPBUGS-52303: Enable nmstate-configuration on all platforms #4891
• OCPBUGS-51003: daemon: add nil check for annotation fetching #4862
• OCPBUGS-51353: Update cluster-reader ClusterRole permissions #4882
• OCPBUGS-50955: create /run/nodeip-configuration before use #4858
• OCPBUGS-51334: Update format verbs for alert logs #4880
• OCPBUGS-52257: configure-ovs workaround for ovs-if-br-ex bug #4889
• OCPBUGS-49973: Update the storage.conf configuration file template #4836
• OCPBUGS-49363: Auto-recover from MC with invalid extension #4824
• OCPBUGS-49716: MCO CO degrades are stuck on until master pool updates complete #4826
• OCPBUGS-49639: Add clarification to invalid maxUnavailable alert #4820
• Full changelog

machine-image-customization-controller

• append .0 to go.mod version #135
• Full changelog

machine-os-images

• OCPBUGS-54146: Change rhcos release browser url #56
• Full changelog

metallb-frr

• OCPBUGS-55021: Backport DynamicASN #92
• OCPBUGS-55344: OpenShift Only: TEMPORARY: pin FRR version to known working rpm #89
• OCPBUGS-44111: Use metrics for readiness/liveness probes #77
• Full changelog

monitoring-plugin

• OCPBUGS-59399: Fix “Export as CSV” #468
• OCPBUGS-54211: fix issue preventing dev silences from loading #374
• OU-724: remove deleted image #377
• OCPBUGS-51117: Fix overview links #357
• Full changelog

multus-admission-controller

• OCPBUGS-58770: Update the github.com/golang/glog module to v1.2.4 #102
• append .0 to go.mod version #97
• Full changelog

multus-cni, multus-cni-microshift

• OCPBUGS-43391: Update net-attach-def client library to 1.7.5 for cri-o functionality [backport 4.17] #257
• OCPBUGS-47471: adds getcontext (backport 4.17) #260
• Full changelog

multus-networkpolicy

• append .0 to go.mod version #71
• Full changelog

multus-whereabouts-ipam-cni

• OCPBUGS-55617: Fixes leftover podref issue #364
• OCPBUGS-48745: [Release-4.17]Kubeconfig loop #334
• Full changelog

must-gather

• NO-JIRA: append .0 to go.mod version #492
• Full changelog

network-interface-bond-cni

• OCPBUGS-59620: Bump github.com/containernetworking/plugins from to 1.7.1 #83
• NO-JIRA: Add ci-operator file #82
• Full changelog

network-metrics-daemon

• append .0 to go.mod version #105
• And 2 elided commits (e.g. from squash or rebase merges)
• Full changelog

network-tools

• append .0 to go.mod version #148
• Full changelog

networking-console-plugin

• OCPBUGS-60180: Fix ingress details #265
• OCPBUGS-60128: Fix requiremenets with no value #260
• Add translations 4.17 #239
• Add translations scripts #235
• OCPBUGS-49758: Fix weight width #208
• OCPBUGS-45791: fix path-to-regex CVE #196
• OCPBUGS-48704: fix service name #188
• Full changelog

nutanix-machine-controllers

• OCPBUGS-51859: CVE-2025-22868 #111
• OCPBUGS-47267: fixing CVE-2024-45338 #92
• OCPBUGS-55728: Fix link-local addresses being added to machine #102
• Full changelog

oauth-apiserver

• append .0 to go.mod version #133
• Full changelog

oauth-proxy

• OCPBUGS-58472: fix e2e tests #327
• OCPBUGS-30443: Update dependencies to address CVE-2024-24786 #298
• Full changelog

oauth-server

• append .0 to go.mod version #185
• Full changelog

openshift-apiserver

• OCPBUGS-53382: Skip blocked registry check for registries with mirrors #500
• OCPBUGS-58821: Fix image reference in TestImageStreamImportQuayIO #515
• append .0 to go.mod version #525
• OCPBUGS-49399: prevent panic when no image and error are set #488
• OCPBUGS-49399: validate image property isn’t nil before using #489
• OCPBUGS-49399: move on to the next digest/tag during failures #487
• Full changelog

openshift-controller-manager

• OCPBUGS-57950: ignore error failing to find pull/push secrets #400
• OCPBUGS-57480: Set node-pullsecrets volume to read-only to protect image pull credentials #393
• OCPBUGS-55826: Empty proxy variables are causing issues during the build #379
• Full changelog

openshift-state-metrics

• append .0 to go.mod version #124
• Full changelog

openstack-cluster-api-controllers

• OCPBUGS-44455: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.17 #343
• append .0 to go.mod version #364
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• OCPBUGS-57092: [release-4.17] e2e stability fixes #1081
• OCPBUGS-60791: Add NetworkPolicy as a supported kind #1058
• OCPBUGS-57428: reduce cache expiry frequency [release-4.19] #1021
• OCPBUGS-59253: Reduce Frequency of Update Requests for Copied CSVs (#3597) #1036
• OCPBUGS-57438: operatorgroup: ensure clusterroleselectors in clusterrole aggregation rules are sorted #1025
• OCPBUGS-56250: fix(olm): improve error logging for missing olm.managed label (#3558) #1004
• OCPBUGS-51226, OCPBUGS-51228, OCPBUGS-51246: (vendor) pin go-jose/v4@v4.0.5 #998
• OCPBUGS-53071: add missing pod disruption reasons to isPodDead #982
• OCPBUGS-53283: Ensure that PSA label is latest instead of pinning versions #985
• OCPBUGS-50829, OCPBUGS-50831, OCPBUGS-50835: CVE-2025-24976 Bump github.com/distribution/distribution/v3 [release-4.17] #968
• OCPBUGS-48695: Fix excessive catalog source snapshots cause severe performance regression #956
• Full changelog

operator-marketplace

• ART-13124: append .0 to go.mod version #638
• OCPBUGS-53179: Ensure that PSA label is latest instead of pinning versions #607
• OCPBUGS-49431: Upgrade golang.org/x/net [release-4.17] #585
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-60484: Update OWNERS file: Add Patryk/Martin as approvers #2717
• OCPBUGS-59381: [release-4.17] Fix default network -> localnet #2667
• OCPBUGS-58160: Unpin OVS patch versions, move to ovs 3.5 #2647
• OCPBUGS-57109: Fix hybrid overlay node subnets collision with cluster subnets #2620
• OCPBUGS-57107: Increase InformerSyncTimeout to 60s #2623
• OCPBUGS-56443: Fix predicate for cluster subnet route to gateway router #2578
• OCPBUGS-56244: Allow default network pods to reach localnet on the same node #2572
• OCPBUGS-52480: Handles unspecified protocol in network policy port #2478
• OCPBUGS-54203: Update OVN to FDP25.A.1 24.03.5-40. #2496
• OCPBUGS-52409: Change dynamic_neigh_routers to false for the Interconnect topology. #2476
• OCPBUGS-50519: kubevirt, localnet: Reduce live migration downtime #2458
• OCPBUGS-48777: Fixes unexpected mp0 route removal during start up #2423
• OCPBUGS-48828: fixes overzealous deletion of SNAT in egressIP #2425
• Full changelog

powervs-machine-controllers

• OCPBUGS-61204: Use OS_GIT_VERSION in Makefile when found (for Konflux builds) #126
• append .0 to go.mod version #117
• OCPBUGS-54750: Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.17 #113
• Full changelog

prom-label-proxy

• append .0 to go.mod version #381
• Full changelog

prometheus

• append .0 to go.mod version #258
• OCPBUGS-56738: BACKPORT: fix promtool analyze block shows metric name with 0 cardinality #254
• OCPBUGS-54941: Scraping: Bump cache iteration after error to avoid false duplicate detection. #249
• Full changelog

prometheus-alertmanager

• append .0 to go.mod version #102
• Full changelog

prometheus-node-exporter

• append .0 to go.mod version #167
• Full changelog

route-controller-manager

• OCPBUGS-55943: Added error event for failed ingress to route conversion #60
• OCPBUGS-53077: ingress: Reset metrics when ingress is deleted #57
• Full changelog

service-ca-operator

• append .0 to go.mod version #266
• OCPBUGS-34228: Updating ose-service-ca-operator-container image to be consistent with ART for 4.17 #261
• Full changelog

telemeter

• ART-13124: Update go.mod to include patch version in go directive #562
• Full changelog

tests

• OCPBUGS-61162: images/tests: Remove rteval #30202
• NO-JIRA: Update extended/networking OWNERS #30090
• OCPBUGS-57324: Fix bearer token exposure in exit condition as well #29910
• OCPBUGS-57888: Bump to Kubernetes v1.30.14 #29983
• OCPBUGS-50664: Replace RunHostCmd with Exec function to censor bearer token being exposed #29539
• OCPBUGS-56221: aws/edge: prevent test using unschedulable nodes #29792
• OCPBUGS-55451: support provider type external #29737
• OCPBUGS-55269: Bump to Kubernetes v1.30.12 #29771
• OCPBUGS-55498: [build] Ensure Git Clone Does Not Run Privileged #29743
• OCPBUGS-54767: Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com #29660
• OCPBUGS-52580: Use payload pullspec for image info test #29588
• OCPBUGS-38835: Try also user CA for getting openshift-tests image #29029
• OCPBUGS-49411: Add a monitor test to detect concurrent installer pod or static pod #29487
• Full changelog

thanos

• append .0 to go.mod version #161
• Full changelog

vsphere-cluster-api-controllers

• OCPBUGS-61652: Fix unit tests #71
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-52207: fix panic when vcenter address is incorrect #295
• OCPBUGS-50593: Set reconcile-sync to 10 minute for ListVolume #291
• OCPBUGS-49858: Escape backslash in vCenter username #288
• OCPBUGS-49685: List only linux nodes #285
• Full changelog

---

View changelog in Markdown or change previous release: 4.17.394.17.384.17.374.17.364.17.354.17.344.17.334.17.324.17.314.17.304.17.294.17.284.17.274.17.264.17.254.17.244.17.234.17.224.17.214.17.204.17.194.17.184.17.174.17.164.17.154.17.144.17.134.17.124.17.114.17.104.17.94.17.84.17.74.17.64.17.54.17.44.17.34.17.24.17.14.17.04.17.0-rc.64.17.0-rc.54.17.0-rc.44.17.0-rc.34.17.0-rc.24.17.0-rc.14.17.0-rc.04.16.484.16.474.16.464.16.454.16.444.16.434.16.424.16.414.16.404.16.394.16.384.16.374.16.364.16.354.16.344.16.334.16.324.16.314.16.304.16.294.16.284.16.274.16.264.16.254.16.244.16.234.16.224.16.214.16.204.16.194.16.184.16.174.16.164.16.154.16.144.16.134.16.124.16.114.16.104.16.94.16.84.16.74.16.64.16.54.16.44.16.34.16.24.16.14.16.04.16.0-rc.94.16.0-rc.84.16.0-rc.74.16.0-rc.64.16.0-rc.54.16.0-rc.44.16.0-rc.34.16.0-rc.24.16.0-rc.14.16.0-rc.04.15.574.15.564.15.554.15.544.15.534.15.524.15.514.15.504.15.494.15.484.15.474.15.464.15.454.15.444.15.434.15.424.15.414.15.404.15.394.15.384.15.374.15.364.15.354.15.344.15.334.15.324.15.314.15.304.15.294.15.284.15.274.15.264.15.254.15.244.15.234.15.224.15.214.15.204.15.194.15.184.15.174.15.164.15.154.15.144.15.134.15.124.15.114.15.104.15.94.15.84.15.74.15.64.15.54.15.44.15.34.15.24.15.14.15.04.15.0-rc.84.15.0-rc.74.15.0-rc.54.15.0-rc.44.15.0-rc.34.15.0-rc.24.15.0-rc.14.15.0-rc.04.14.564.14.554.14.544.14.534.14.524.14.514.14.504.14.494.14.484.14.474.14.464.14.454.14.444.14.434.14.424.14.414.14.404.14.394.14.384.14.374.14.364.14.354.14.344.14.334.14.324.14.314.14.304.14.294.14.284.14.274.14.264.14.254.14.244.14.234.14.224.14.214.14.204.14.194.14.184.14.174.14.164.14.154.14.144.14.134.14.124.14.114.14.104.14.94.14.84.14.74.14.64.14.54.14.44.14.34.14.24.14.14.14.04.14.0-rc.74.14.0-rc.64.14.0-rc.54.14.0-rc.44.14.0-rc.34.14.0-rc.24.14.0-rc.14.14.0-rc.04.13.604.13.594.13.584.13.574.13.564.13.554.13.544.13.534.13.524.13.514.13.504.13.494.13.484.13.474.13.464.13.454.13.444.13.434.13.424.13.414.13.404.13.394.13.384.13.374.13.364.13.354.13.344.13.334.13.324.13.314.13.304.13.294.13.284.13.274.13.264.13.254.13.244.13.234.13.224.13.214.13.194.13.184.13.174.13.164.13.154.13.144.13.134.13.124.13.114.13.104.13.94.13.84.13.74.13.64.13.54.13.44.13.34.13.24.13.14.13.04.13.0-rc.84.13.0-rc.74.13.0-rc.64.13.0-rc.54.13.0-rc.44.13.0-rc.34.13.0-rc.24.13.0-rc.04.12.804.12.794.12.784.12.774.12.764.12.754.12.744.12.734.12.724.12.714.12.704.12.694.12.684.12.674.12.664.12.654.12.644.12.634.12.624.12.614.12.604.12.594.12.584.12.574.12.564.12.554.12.544.12.534.12.524.12.514.12.504.12.494.12.484.12.474.12.464.12.454.12.444.12.434.12.424.12.414.12.404.12.394.12.384.12.374.12.364.12.354.12.344.12.334.12.324.12.314.12.304.12.294.12.284.12.274.12.264.12.254.12.244.12.234.12.224.12.214.12.204.12.194.12.184.12.174.12.164.12.154.12.144.12.134.12.124.12.114.12.104.12.94.12.84.12.74.12.64.12.54.12.44.12.34.12.24.12.14.12.04.12.0-rc.84.12.0-rc.74.12.0-rc.64.12.0-rc.54.12.0-rc.44.12.0-rc.34.12.0-rc.24.12.0-rc.14.12.0-rc.04.11.594.11.584.11.574.11.564.11.554.11.544.11.534.11.524.11.514.11.504.11.494.11.484.11.474.11.464.11.454.11.444.11.434.11.424.11.414.11.404.11.394.11.384.11.374.11.364.11.354.11.344.11.334.11.324.11.314.11.304.11.294.11.284.11.274.11.264.11.254.11.244.11.234.11.224.11.214.11.204.11.194.11.184.11.174.11.164.11.154.11.144.11.134.11.124.11.114.11.104.11.94.11.84.11.74.11.64.11.54.11.44.11.34.11.24.11.14.11.04.11.0-rc.74.11.0-rc.64.11.0-rc.54.11.0-rc.44.11.0-rc.34.11.0-rc.24.11.0-rc.14.11.0-rc.04.11.0-fc.34.11.0-fc.24.11.0-fc.0───4.21.0-0.nightly-2025-09-18-1932214.21.0-0.nightly-2025-09-18-1008154.21.0-0.nightly-2025-09-18-0333144.21.0-0.nightly-2025-09-17-1851184.21.0-0.nightly-2025-09-17-1016344.21.0-0.nightly-2025-09-17-0413334.21.0-0.nightly-2025-09-16-2220344.21.0-0.nightly-2025-09-16-1638144.21.0-0.nightly-2025-09-15-0423434.21.0-0.nightly-2025-09-14-2245314.21.0-0.nightly-2025-09-14-1151244.21.0-0.nightly-2025-09-14-0525114.21.0-0.nightly-2025-09-13-2324134.21.0-0.nightly-2025-09-13-1623344.21.0-0.nightly-2025-09-12-0632394.21.0-0.nightly-2025-09-11-1439114.21.0-0.nightly-2025-09-08-0352534.21.0-0.nightly-2025-09-05-094310───4.21.0-0.ci-2025-09-18-2222464.21.0-0.ci-2025-09-18-1535514.21.0-0.ci-2025-09-18-0819264.21.0-0.ci-2025-09-18-0219254.21.0-0.ci-2025-09-17-2019254.21.0-0.ci-2025-09-17-1419254.21.0-0.ci-2025-09-17-0819254.21.0-0.ci-2025-09-17-0219254.21.0-0.ci-2025-09-16-2019254.21.0-0.ci-2025-09-16-1419254.21.0-0.ci-2025-09-16-0819254.21.0-0.ci-2025-09-16-021925───4.20.0-0.nightly-2025-09-18-2109114.20.0-0.nightly-2025-09-18-0437424.20.0-0.nightly-2025-09-17-1236454.20.0-0.nightly-2025-09-15-1000494.20.0-0.nightly-2025-09-15-0430314.20.0-0.nightly-2025-09-14-1156384.20.0-0.nightly-2025-09-14-0606154.20.0-0.nightly-2025-09-13-1431404.20.0-0.nightly-2025-09-12-0602474.20.0-0.nightly-2025-09-11-1934314.20.0-0.nightly-2025-09-11-0844494.20.0-0.nightly-2025-09-10-0952374.20.0-0.nightly-2025-09-10-0055154.20.0-0.nightly-2025-09-08-1820334.20.0-0.nightly-2025-05-26-181128───4.20.0-0.ci-2025-09-18-2239444.20.0-0.ci-2025-09-18-1639444.20.0-0.ci-2025-09-18-1039444.20.0-0.ci-2025-09-18-0313014.20.0-0.ci-2025-09-17-2113014.20.0-0.ci-2025-09-17-1513014.20.0-0.ci-2025-09-17-0912564.20.0-0.ci-2025-09-17-0312564.20.0-0.ci-2025-09-16-2112564.20.0-0.ci-2025-09-16-1512564.20.0-0.ci-2025-09-16-0912564.20.0-0.ci-2025-09-16-023339───4.19.0-0.nightly-2025-09-18-1924024.19.0-0.nightly-2025-09-18-1107124.19.0-0.nightly-2025-09-18-0547304.19.0-0.nightly-2025-09-17-2057294.19.0-0.nightly-2025-09-17-0854354.19.0-0.nightly-2025-09-17-0226314.19.0-0.nightly-2025-09-16-1746334.19.0-0.nightly-2025-09-16-1225464.19.0-0.nightly-2025-09-16-0624344.19.0-0.nightly-2025-09-16-0121124.19.0-0.nightly-2025-09-15-1605074.19.0-0.nightly-2025-09-15-0626544.19.0-0.nightly-2025-09-15-0111504.19.0-0.nightly-2025-09-14-1654404.19.0-0.nightly-2025-09-14-0845064.19.0-0.nightly-2025-09-14-0341154.19.0-0.nightly-2025-09-13-2029224.19.0-0.nightly-2025-09-13-0935344.19.0-0.nightly-2025-09-12-0939444.19.0-0.nightly-2025-09-12-0435214.19.0-0.nightly-2025-09-11-1846584.19.0-0.nightly-2025-09-11-1040484.19.0-0.nightly-2025-09-10-1847454.19.0-0.nightly-2025-09-10-1330314.19.0-0.nightly-2025-09-10-0812254.19.0-0.nightly-2025-09-10-0247464.19.0-0.nightly-2025-09-06-1922264.19.0-0.nightly-2025-09-06-000322───4.19.0-0.ci-2025-09-18-1820424.19.0-0.ci-2025-09-18-1220424.19.0-0.ci-2025-09-18-0620424.19.0-0.ci-2025-09-18-0020094.19.0-0.ci-2025-09-17-1555594.19.0-0.ci-2025-09-17-0909454.19.0-0.ci-2025-09-17-0309454.19.0-0.ci-2025-09-16-1807214.19.0-0.ci-2025-09-16-0828354.19.0-0.ci-2025-09-16-013926───4.18.0-0.nightly-2025-09-18-2002104.18.0-0.nightly-2025-09-18-1148024.18.0-0.nightly-2025-09-18-0030544.18.0-0.nightly-2025-09-17-2030544.18.0-0.nightly-2025-09-17-1625024.18.0-0.nightly-2025-09-17-0448244.18.0-0.nightly-2025-09-16-0826264.18.0-0.nightly-2025-09-15-2242324.18.0-0.nightly-2025-09-15-1534154.18.0-0.nightly-2025-09-15-0611334.18.0-0.nightly-2025-09-15-0044464.18.0-0.nightly-2025-09-14-2044464.18.0-0.nightly-2025-09-14-1644464.18.0-0.nightly-2025-09-14-1244464.18.0-0.nightly-2025-09-14-0417064.18.0-0.nightly-2025-09-13-2121484.18.0-0.nightly-2025-09-13-0046584.18.0-0.nightly-2025-09-12-1412064.18.0-0.nightly-2025-09-12-1001564.18.0-0.nightly-2025-09-12-0102314.18.0-0.nightly-2025-09-11-1955564.18.0-0.nightly-2025-09-11-1332394.18.0-0.nightly-2025-09-11-0932394.18.0-0.nightly-2025-09-11-0016514.18.0-0.nightly-2025-09-10-135328───4.18.0-0.ci-2025-09-18-1819514.18.0-0.ci-2025-09-18-1219514.18.0-0.ci-2025-09-18-0324414.18.0-0.ci-2025-09-17-2046464.18.0-0.ci-2025-09-17-1446464.18.0-0.ci-2025-09-17-0846464.18.0-0.ci-2025-09-17-0105444.18.0-0.ci-2025-09-16-1905444.18.0-0.ci-2025-09-16-1305384.18.0-0.ci-2025-09-16-0705384.18.0-0.ci-2025-09-16-010538───4.17.0-0.nightly-2025-09-18-0537094.17.0-0.nightly-2025-09-17-2313414.17.0-0.nightly-2025-09-15-0351444.17.0-0.nightly-2025-09-14-1909044.17.0-0.nightly-2025-09-14-1330334.17.0-0.nightly-2025-09-14-0930244.17.0-0.nightly-2025-09-14-0110254.17.0-0.nightly-2025-09-13-1634294.17.0-0.nightly-2025-09-13-1013204.17.0-0.nightly-2025-09-09-1504034.17.0-0.nightly-2025-09-08-1755564.17.0-0.nightly-2025-09-08-0519214.17.0-0.nightly-2025-09-07-2146354.17.0-0.nightly-2025-09-07-1746354.17.0-0.nightly-2025-09-07-1051504.17.0-0.nightly-2025-09-05-133958───4.17.0-0.ci-2025-09-18-1923414.17.0-0.ci-2025-09-18-0809184.17.0-0.ci-2025-09-17-2102044.17.0-0.ci-2025-09-17-1335534.17.0-0.ci-2025-09-17-0143064.17.0-0.ci-2025-09-16-1943064.17.0-0.ci-2025-09-16-1211414.17.0-0.ci-2025-09-16-042414───4.16.0-0.nightly-2025-09-16-0923334.16.0-0.nightly-2025-09-15-1315454.16.0-0.nightly-2025-09-15-0606504.16.0-0.nightly-2025-09-15-0026584.16.0-0.nightly-2025-09-14-1919164.16.0-0.nightly-2025-09-14-1148504.16.0-0.nightly-2025-09-12-1254504.16.0-0.nightly-2025-09-12-0854504.16.0-0.nightly-2025-09-12-0454504.16.0-0.nightly-2025-09-11-1828374.16.0-0.nightly-2025-09-11-1428374.16.0-0.nightly-2025-09-11-0900484.16.0-0.nightly-2025-09-11-0328114.16.0-0.nightly-2025-09-10-2328114.16.0-0.nightly-2025-09-10-1924034.16.0-0.nightly-2025-09-10-1158204.16.0-0.nightly-2025-09-06-014223───4.16.0-0.ci-2025-09-18-1513234.16.0-0.ci-2025-09-18-0035544.16.0-0.ci-2025-09-17-0938064.16.0-0.ci-2025-09-16-2114434.16.0-0.ci-2025-09-16-0826254.16.0-0.ci-2025-09-15-2253574.16.0-0.ci-2025-09-15-0309284.16.0-0.ci-2025-09-14-0147414.16.0-0.ci-2025-09-12-0954084.16.0-0.ci-2025-09-12-0243494.16.0-0.ci-2025-09-11-110727───4.15.0-0.nightly-2025-09-18-1356474.15.0-0.nightly-2025-09-18-0255574.15.0-0.nightly-2025-09-16-1610134.15.0-0.nightly-2025-09-14-0733554.15.0-0.nightly-2025-09-06-0155034.15.0-0.nightly-2025-09-01-200241───4.15.0-0.ci-2025-09-18-2152524.15.0-0.ci-2025-09-18-1100464.15.0-0.ci-2025-09-18-0302494.15.0-0.ci-2025-09-16-0737144.15.0-0.ci-2025-09-15-1404484.15.0-0.ci-2025-09-15-080448───4.14.0-0.nightly-2025-09-18-1402594.14.0-0.nightly-2025-09-18-0303484.14.0-0.nightly-2025-09-17-0200574.14.0-0.nightly-2025-09-16-1150454.14.0-0.nightly-2025-09-16-0342494.14.0-0.nightly-2025-09-15-2340444.14.0-0.nightly-2025-09-15-2007364.14.0-0.nightly-2025-09-15-1615284.14.0-0.nightly-2025-09-15-0243164.14.0-0.nightly-2025-09-14-2141034.14.0-0.nightly-2025-09-14-1622564.14.0-0.nightly-2025-09-14-1238074.14.0-0.nightly-2025-09-14-011142───4.14.0-0.ci-2025-09-18-1933494.14.0-0.ci-2025-09-18-1240364.14.0-0.ci-2025-09-17-0207224.14.0-0.ci-2025-09-15-2135174.14.0-0.ci-2025-09-15-1535174.14.0-0.ci-2025-09-15-093517───4.13.0-0.nightly-2025-09-14-1735224.13.0-0.nightly-2025-09-10-0813574.13.0-0.nightly-2025-09-08-1616014.13.0-0.nightly-2025-09-05-0221374.13.0-0.nightly-2025-09-03-1304004.13.0-0.nightly-2025-09-03-0439384.13.0-0.nightly-2025-09-02-1720444.13.0-0.nightly-2025-08-20-1404234.13.0-0.nightly-2025-08-19-1316344.13.0-0.nightly-2025-08-19-025714───4.13.0-0.ci-2025-09-14-2335174.13.0-0.ci-2025-09-14-1326354.13.0-0.ci-2025-09-13-1455504.13.0-0.ci-2025-09-12-2104374.13.0-0.ci-2025-09-12-1415594.13.0-0.ci-2025-09-11-170519───4.12.0-0.nightly-2025-09-09-1033154.12.0-0.nightly-2025-09-03-0737354.12.0-0.nightly-2025-09-02-1717194.12.0-0.nightly-2025-08-18-0059584.12.0-0.nightly-2025-08-15-1226124.12.0-0.nightly-2025-08-15-035741───4.12.0-0.ci-2025-09-16-2110404.12.0-0.ci-2025-09-16-1406414.12.0-0.ci-2025-09-15-1419534.12.0-0.ci-2025-09-15-0749354.12.0-0.ci-2025-09-14-092117───4.11.0-0.nightly-2025-08-30-0110584.11.0-0.nightly-2025-08-27-2007484.11.0-0.nightly-2025-08-26-2039164.11.0-0.nightly-2025-08-21-0105404.11.0-0.nightly-2025-08-14-204255───4.11.0-0.ci-2025-09-12-1707384.11.0-0.ci-2025-09-05-0328514.11.0-0.ci-2025-09-04-2128514.11.0-0.ci-2025-08-30-0105304.11.0-0.ci-2025-08-29-210105───4.21.0-ec.04.20.0-ec.64.20.0-ec.54.20.0-ec.44.20.0-ec.34.20.0-ec.24.20.0-ec.14.20.0-ec.0

Source code for this page located on github