4.16.0-0.ci-2026-08-13-130657

Download the installer for your operating system or run

oc adm release extract --tools quay-proxy.ci.openshift.org/openshift/ci:rc_payload__4.16.0-0.ci-2026-08-13-130657

Qualifiers (status api): None

Tests:

Blocking jobs
- aws-ovn-upgrade-4.16-minor Failed (1 retry) periodic-ci-openshift-release-main-ci-4.16-upgrade-from-stable-4.15-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Failed
- aws-sdn-serial Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.16-e2e-aws-sdn-serial
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- gcp-ovn-upgrade-4.16-micro Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.16-e2e-gcp-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- hypershift-e2e Succeeded periodic-ci-openshift-hypershift-release-4.16-periodics-e2e-aws-ovn

Upgrades from:

Loading changelog, this may take a while ...

Changes from 4.16.0-0.ci-2026-07-08-181459

Created: 2026-08-13 13:09:14 +0000 UTC

Image Digest: sha256:c5ba0e214daf718e2afd3b861b6b943ce0a2cf0bbdaa511771c1c15f187d3e31

Components

Kubectl 1.29.7
Kubernetes 1.29.14
Kubernetes Tests 1.29.0
Red Hat Enterprise Linux CoreOS upgraded from 416.94.202607021016-0 to 416.94.202608111043-0 (diff)

Rebuilt images without code change

agent-installer-api-server git 5c16119a sha256:474ce596e1dcac63f135ab0037268ea3d1ae579119aed9559230286f7f89c63e
aws-machine-controllers git 169f6ab7 sha256:da14e44280ce555f9cf2d0282f922456eaf2c53e51e874fb4cdeaa03d1fb73a8
cluster-baremetal-operator git c6f66328 sha256:234cf076422d8bd36e56b0d846e6daf6f4eb16dd53c18536eb5aad88c3f6c073
cluster-bootstrap git 27bfb59f sha256:de2ef5e3de351acffd80b3728704b8534e1b6dd13b74d1d1a6891697adb7f93e
cluster-etcd-operator git d9e83020 sha256:1730bc7ce9ecf20ff97d876b45a54cb1235e0e5e0e6748ab90f9d4f4db64cf8d
cluster-image-registry-operator git ed0afa7a sha256:abfbcea36f22e92aebda295cb3c37e2a7a0f02196fc9bd9d917802d52cc72d89
cluster-openshift-apiserver-operator git 2497afd3 sha256:a13c7f0de922c02bce15b3ee5cd93e65494166886736f68f248dd0c14084b1f8
hyperkube git 41c4e9ba sha256:eda3f0c27b76653708b0673b6ca9327ea5eaf228cf75ba634b9dd2f1fb6e64e5
installer-kube-apiserver-artifacts git 41c4e9ba sha256:57d2134b451c179d1d721193f2e29b340a1cf1f97803fe39f95ffc0d62fd9ee7
machine-os-images git 4a52a459 sha256:32b56da9d9f47c2d9066ae3920e2505dee04bff89b1e2707076e0cfeb142fd7e
nutanix-machine-controllers git 2f2e121b sha256:a92f9717b9983c6bd802fb6c78f2e6aa167bdc709dd119f3a7b324a2337d742e
ovn-kubernetes git 5b36fd8e sha256:964664c4bd30670bc61dcc307a0279ccac0d259f471098fa0369cf8473d78983
ovn-kubernetes-microshift git 5b36fd8e sha256:15653b9156f49550e57f59df4778e2201af3225788d5765b4e15a142e499aa80
pod git 41c4e9ba sha256:f2cbb56b36b7667de5332fa460c9aa998e124ad21798593c68773295063cb470
rhel-coreos sha256:1bb9dc9f1f6a4f97cd13d58212c1da5fb034218bf725cd0a06345348b4706deb
rhel-coreos-extensions sha256:5733f78590d9cc10b2a13e434c543c8ad8c3e4266ede51ae968ff46303872821

azure-kms-encryption-provider

OCPBUGS-79927: Bump google.golang.org/grpc to 1.64.1-sec.1 patch #48
Full changelog

cloud-credential-operator

OCPBUGS-79941: Bump google.golang.org/grpc to v1.79.3 #1026
Full changelog

cluster-ingress-operator

OCPBUGS-86713: Add configuration override for X-SSL strip #1487
Full changelog

cluster-network-operator

OCPBUGS-67000: Re-disable metrics server #2855
OCPBUGS-63233: Manual feature backport of cert rotation for whereabouts #3040
Full changelog

console

OCPBUGS-87987: [release-4.16] shell-quote: Arbitrary code execution via command injection due to unescaped line terminators #16599
OCPBUGS-81597: CVE-2026-4800 #16566
Full changelog

haproxy-router

OCPBUGS-86713: Strip X-SSL-* headers for plain HTTP #805
Full changelog

hypershift

OCPBUGS-99075: fix(backport): konnectivity agent auth #9097
Full changelog

kubevirt-csi-driver

OCPBUGS-79930: Bump google.golang.org/grpc to v1.79.3 #108
Full changelog

machine-api-operator

OCPBUGS-98439: Use resource group when generating default Azure image #1516
Full changelog

machine-config-operator

OCPBUGS-98960: Remove sensitive ControllerConfig logging #6315
OCPBUGS-98253: Bootstrap MCS logging entire ignition #6290
Full changelog

monitoring-plugin

Fix for OCPBUGS-94001: CVE-2026-13676 #1049
Full changelog

prometheus

OCPBUGS-88616: remote: validate snappy decoded length before allocation in read endpoint #349
Full changelog

prometheus-alertmanager

OCPBUGS-100357: Set testdata CA expiry to 20 years from issue date (#4112) #146
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github