4.17.0-0.ci-2026-07-04-084809

Download the installer for your operating system or run

oc adm release extract --tools quay-proxy.ci.openshift.org/openshift/ci:rc_payload__4.17.0-0.ci-2026-07-04-084809

Team Approvals:

Tests:

Blocking jobs
- aws-ovn-upgrade-4.17-minor Succeeded periodic-ci-openshift-release-main-ci-4.17-upgrade-from-stable-4.16-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.17-minor Succeeded periodic-ci-openshift-release-main-ci-4.17-upgrade-from-stable-4.16-e2e-azure-ovn-upgrade
- gcp-ovn-upgrade-4.17-micro Succeeded periodic-ci-openshift-release-main-ci-4.17-e2e-gcp-ovn-upgrade
- hypershift-e2e Failed (1 retry) periodic-ci-openshift-hypershift-release-4.17-periodics-e2e-aws-ovn
  - Attempt 1 Failed
  - Attempt 2 Failed

Upgrades from:

Loading changelog, this may take a while ...

Changes from 4.17.0-0.ci-2026-06-15-103712

Created: 2026-07-04 08:48:36 +0000 UTC

Image Digest: sha256:b8a7f9e4ce2a1d59193854f58ba900506858f656670f653852916a1f7a6c5387

Components

Kubectl 1.30.5
Kubernetes 1.30.14
Kubernetes Tests 1.30.14
Red Hat Enterprise Linux CoreOS upgraded from 417.94.202606110951-0 to 417.94.202607020955-0 (diff)

Rebuilt images without code change

rhel-coreos sha256:ccfec0f95dd417982dbaff7c2513f64bc9a84e39fe194f1e57236c0ed4330cd6
rhel-coreos-extensions sha256:cabf30c713435f920477fb081f577ee2b9ed99b8e8b8ef8edbd2dc7585366c1a

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-80035, OCPBUGS-80036, OCPBUGS-80174: Bump google.golang.org/grpc to v1.79.3 #181
Full changelog

azure-file-csi-driver

OCPBUGS-80041: Bump google.golang.org/grpc to v1.79.3 #130
Full changelog

cluster-network-operator

OCPBUGS-85244: whereabouts-token-watcher DaemonSet improvements #3016
Full changelog

cluster-node-tuning-operator

OCPBUGS-82706: Bump github.com/moby/spdystream from v0.2.0 to v0.5.1 #1548
Full changelog

console

OCPBUGS-77124: [release-4.17] CVE-2026-26996 Bump minimatch library #16345
OCPBUGS-79443: Bump immutable #16326
Full changelog

gcp-machine-controllers

OCPBUGS-80118: Bump google.golang.org/grpc to v1.79.3 #166
Full changelog

hypershift

OCPBUGS-89357: build(operator): drop hypershift-no-cgo from operator container images #8761
OCPBUGS-80103: fix https://github.com/advisories/GHSA-p77j-4mvh-x3m3 by replacing grpc-go #8516
Full changelog

ironic-agent

OCPBUGS-95067: Replace individual package removal with a single rpm -e loop #287
OCPBUGS-95067: Replace dnf remove with rpm -e to prevent dependency removal #275
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-95083: OWNERS: Update component to Cloud Compute / KubeVirt Provider #79
Full changelog

machine-os-images

OCPBUGS-87877: Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs #101
Full changelog

monitoring-plugin

Fix for OCPBUGS-90525 OCPBUGS-90526: CVE-2026-12151 CVE-2026-9697 #1008
Full changelog

oauth-server

OCPBUGS-81795: Bump github.com/go-jose/go-jose/v3 from v3.0.3 to v3.0.5 #239
Full changelog

openshift-apiserver

OCPBUGS-82720: Address CVE-2026-35469 #658
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-80133: Bump google.golang.org/grpc to v1.79.3 #194
Full changelog

thanos

OCPBUGS-80161: Bump google.golang.org/grpc to v1.79.3 #185
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github