4.16.0

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.16.0-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Failed release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.16-e2e-aws-ovn-upgrade
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.16.0-ec.4, 4.16.0-ec.5, 4.16.0-rc.1, 4.16.0-rc.2, 4.16.0-rc.4

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.16.0-rc.0

Created: 2024-06-25 20:17:15 +0000 UTC

Image Digest: sha256:3717338045df06e31effea46761b2c7e90f543cc4f00547af8158dd6aea868c3

Components

Kubectl 1.29.1
Kubernetes upgraded from 1.29.4 to 1.29.5
Kubernetes Tests 1.29.0
Red Hat Enterprise Linux CoreOS upgraded from 416.94.202405010033-0 to 416.94.202406172220-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
ClusterAPIInstallAWS (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)
ClusterAPIInstallNutanix (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)
ClusterAPIInstallOpenStack (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)
ClusterAPIInstallVSphere (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)
HardwareSpeed (1 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
MetricsServer (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
NetworkDiagnosticsConfig (6 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
OpenShiftPodSecurityAdmission (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Enabled	Enabled
VSphereDriverConfiguration (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ClusterAPIInstallGCP (0 tests)	Disabled	Disabled	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)
ClusterAPIInstallPowerVS (0 tests)	Disabled	Disabled	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)
GatewayAPI (0 tests)	Disabled	Disabled	Enabled	Enabled	Disabled (Changed)	Disabled (Changed)
ChunkSizeMiB (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
EtcdBackendQuota (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
VSphereMultiVCenters (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

New images

aws-kms-encryption-provider git da90fb7c sha256:5668f00f71bfceb7bb7966d7a9f432f2193436bbfa1ebcefaadfe2f48a2be55b
azure-kms-encryption-provider git bc92347b sha256:e29c1cf827ee8834c8d87d5661b70b7331a5d78456440478e4a31314ae96433a
containernetworking-plugins-microshift git f5039976 sha256:f1776c5c20353bd9ed42b8c118271d4652cd8e2e84b80aeb1896a763ea24c2fe
multus-cni-microshift git c4aa21b9 sha256:454fcc7d474271d13b864fda2e7ae7b7b5235799f1423ba79cb3f2b52c05ba57

Removed images

cluster-platform-operators-manager

Rebuilt images without code change

agent-installer-utils git 6e6bb40d sha256:ea2c9addb1026f05f373585f0ad86e7d3ede8be64d70726c5624d279cf124f55
alibaba-cloud-controller-manager git 97e8335e sha256:c9ede35d40f2292cdefc202374658b927d67386baa146e8db050c8fd6cb0d40a
apiserver-network-proxy git 9a6028c4 sha256:bfe6348d1537d0618771812f2a3f7e1d6c2a543948a99a80b373186044d77794
aws-ebs-csi-driver git 1d29a74a sha256:3c46d147deb9f93d703339c07598f959792b50cadbfa2d22f1c744f6dae19f92
aws-machine-controllers git 61d60f6c sha256:c9a16f74c05aac14c7e7375420e4f75bba23ce5c9a17ca4b726ce173399d350b
aws-pod-identity-webhook git 746491a6 sha256:bdf22eb19a391efde539f7d4727a840014e6386edbe90b78b5ead5d216506f4a
azure-cloud-controller-manager git 0e955329 sha256:f84568509ed17d7b43d484534e6438f8c6751494c39947b7b40cdc97d42ea8e3
azure-cloud-node-manager git 0e955329 sha256:b7818892fdf53da13ee04bca2c47aed08d9acd107f51ba93b3441ce69048bd7f
azure-cluster-api-controllers git face7da9 sha256:a348e68c48c9a71eb952f7fe1a25d975682b2a686dd48aebd6473a1f06ba892a
azure-disk-csi-driver git 6b55f6fb sha256:532ced1ff6864578ef88be69158c4e8a93bb0e32c5b918dfe7450f24a4b488df
azure-file-csi-driver git 5ceb190a sha256:ecaf5fc70e391785946f69846ca4eabaaf553de57bdd6f2c1133f518e46ff3c9
azure-machine-controllers git d6be293a sha256:8322a01cc8a639ffa7098f2e5f3abef8dfcd9eae7910abbdbe7b090384495bb4
azure-workload-identity-webhook git 4aca092a sha256:23d9f2fbf4f5f35988b945ba599f0f84b1fc4d2f1daf17725f6fca2a1c90b4cf
baremetal-machine-controllers git 11ba601f sha256:79148057b74d9815e0dcb01b8693c870d24bd2e0cd8782c63ed94c8d66642e68
cluster-bootstrap git 27bfb59f sha256:f929ddc3033f4e54e8505f841c4df75ea428d765c74f2696a927223aaf4283a8
cluster-kube-cluster-api-operator git 95ceaa9e sha256:c1def799d510853ff49afe92fbc5d10bdcc48e8e57b3cc886ff6067a515cf34b
cluster-kube-scheduler-operator git 630f63bc sha256:fcfcd442b37827a1acbd2953c1e4f8103f31fec151e6666b9c5bb0045feada8f
cluster-kube-storage-version-migrator-operator git bf6afbb8 sha256:730f5b20164dd87b074b356636cdfa4848f1159b412ccf7e09ab0c4554232730
cluster-openshift-apiserver-operator git d26f3002 sha256:3e2c5a70fe7e9b625f5ef26f458c54d20eb41da9ac60e96442f3a33dacfae5ce
cluster-policy-controller git eaea543f sha256:d1ce9342b0ceac619a262bd0894094be1e318f913e06ed5392b9e45dfc973791
cluster-samples-operator git d4dd8439 sha256:bd9205b185124b3b67669bb3166734f9e22831957c457aa1083f4f2bc4750312
cluster-update-keys git c0641e08 sha256:10aed32867a3e2138d6006426a84160c5bb428b86b686a0770d3c536714b0855
configmap-reloader git dc91ddc4 sha256:5dda85af9197d3905c67a31effbae5047eeca678c8065229bc45088426a338e8
container-networking-plugins git f5039976 sha256:1b752ed92e0354fc8b4316fc7fc482d136a19212ae4a886515db81e8f0b37648
csi-driver-manila git 5340eaab sha256:334920a064a5dee9cce98c570674c8ac03e47b3acdb9e4040dae6736c329c36b
csi-driver-manila-operator git 6de0dc79 sha256:44f59ae794834bf05f9fc5ecfc72900557e1865688a5922346cb6c0c9191fa51
csi-driver-nfs git 406cec72 sha256:0c26bac463c2c1dd60c32d4b012747a50bb9d11a6cee0aa3f6b12d0ceab6e2b9
csi-driver-shared-resource-operator git 1e1194bc sha256:2c9f84bf28a0af4f3ba5019575058316abaeda1dd5c1c85e48745067b8b5d961
csi-external-attacher git 7da80aab sha256:7e1b0878754a15723c3c7d41bf16a2ab75c2a5409cd74a324298ae5f8ea03969
csi-external-provisioner git 9e8af011 sha256:b6b007b3c711b05bcc4eb4423771119a06aa4b99807c3f931419c9e7d24506b3
csi-external-resizer git bdf5bfb4 sha256:e80b8f5c299001d63af519280501352c163e490b60ccbf25ad6e7b14c2699a89
csi-external-snapshotter git 5315d37a sha256:aafb1ff11acc4a86441ecf1ec90dce94add1ab17b4d8b75d3daff942488683ed
csi-livenessprobe git f5e3ff55 sha256:a8f10de71f86a86f33a184ff494a8d5b8d9b0de38314390c048e13c6d37767e8
csi-node-driver-registrar git 8930c368 sha256:2ea9fdddc0443ded9cdaf50b8f74747b100a710b1b602b38d4205fd2497c0f21
csi-snapshot-controller git 5315d37a sha256:2860f4cd96d390433759df75b68cacd2449f4a690f06e12efa42a0adc6f3f8f6
csi-snapshot-validation-webhook git 5315d37a sha256:6241d7b00a85a01f1ea042e4c1145eaad9381ed2d20c3f6f908f13cbfa3614ea
docker-builder git ca2b36ac sha256:f69708d7711c9fdc19d1b60591f04a3061fe1f796853e2daea9edea688b2e086
egress-router-cni git 7534ab90 sha256:476d419f3e57548b58f62712e3994b6e6d4a6ca45c5a462f71b7b8e5f137a208
gcp-cloud-controller-manager git 26b43dfc sha256:918dd6674f3a3b27a89f854d2804c5b020fd1c4d3d06cd855019881985e23ba7
gcp-pd-csi-driver git 5ed71c64 sha256:412ce22f48c834522a76ed6885573089bc577d57aaa91cf816b46d4db5815bdf
gcp-pd-csi-driver-operator git 799327f7 sha256:53e329ebf6028eb4e9fa649b11837c26de29d7b54de71cdff7eef67dacbc8407
ibm-cloud-controller-manager git f961f16d sha256:e7d51eddc9956a1bc70272958315c0f15d0e7cd5baa4f1b5b6dbaefd0cc7ef63
ibm-vpc-block-csi-driver git 32b4c005 sha256:26723933f3e379b2ab33043d5acc1970a4cb4589eb06cebf5757fe7881351a78
ibmcloud-machine-controllers git 1a3a3030 sha256:a064f3f3370f777756981b8b3e51ee32cbc4c26a0cd44548f5afaffddb9e1e0f
ironic-agent git 63681a46 sha256:70b6121b4a8323b124b8570ecb8f9d74940f5e6a20939181792e486ccad0b930
ironic-machine-os-downloader git 93b8b5fa sha256:277940ca6a06a87c98a39aeb1508a06dc8e04e5d0b73594ec704b2597775d65f
ironic-static-ip-manager git e78e4c3e sha256:41966d85320e3961e589b180125b2f54e8323446b8a1039055265fc9e07184f0
k8s-prometheus-adapter git e4f859be sha256:9dfd59d8c7eda6a08fbdfbed0df1a0ac741fb07c2a9380751b5a15f713e300bc
kube-metrics-server git 7938f253 sha256:8c1f690970ce6e1457238c76bcee59f83c50c02a9b07b2ee9baca4fcee819fb0
kube-proxy git 5b658c43 sha256:ce3a9355a4497b51899867170943d34bbc2d2b7996d9a002c103797bd828d71b
kube-state-metrics git 9b67b8d1 sha256:26765b7a91c1c755b0761315e7ef9243856073900095aff9cc95f7cf2a7161ee
kube-storage-version-migrator git 969a60e9 sha256:30f6d30b6bd801c455b91dc3c00333ffa9eec698082510d7abd3ad266d0de5a1
kubevirt-cloud-controller-manager git 3db76104 sha256:fe445bb9d26629f7239247c0805261f409ee52ed1289fb5eb74e69270eb6ebfc
libvirt-machine-controllers git a336f0b5 sha256:3de4d979b4663c60e8d80857fd53f774d9915180c9f4400cc07719175196d264
machine-image-customization-controller git 39480963 sha256:0154a167337c7eaf3f5c9533101ba849ce5fd3b0d936e2fa4bd081460fbfd952
machine-os-images git 3cc97098 sha256:0af828e31b52e9d20ba73d19017ac7e982a6777bc65ddb325271f7ce344d7e85
monitoring-plugin git f1fc4315 sha256:913d1090848aa4e87f11a1a3c5a287f17a0b06b64dd05694d1ee997270e7d365
multus-admission-controller git 2591682f sha256:b589a20426aa14440a5e226ccd7f08c3efb23f45a2d687d71c9b399967adfa45
multus-networkpolicy git c9a6ba24 sha256:f0791454224e2ec76fd43916220bd5ae55bf18f37f0cd571cb05c76e1d791453
multus-route-override-cni git 6a04feea sha256:f410c53f8634b7827203f15862c05b6872e3d2e7ec59799b27a6b414943469d8
network-interface-bond-cni git bb911451 sha256:329299206a95c4bc22e9175de3c3dbedc8e44048aaa7d07e83eafb3e14a3a30f
network-metrics-daemon git 710bd872 sha256:cc389b05ef555b742646390ef180ad25a8f5111c68fec6df1cfa1c6c492e98da
nutanix-cloud-controller-manager git c9bbc44c sha256:5974ca9365fc6258c2bbeb23172eae24cefbb28a1d55493022972b5ed5db3379
oauth-apiserver git fa1f097c sha256:26660173efd872a01c061efc0bd4a2b08beb4e5d63e3d7636ec35ddcf5d3c1fa
oauth-proxy git 30f80124 sha256:c9baff203ca8c8f3726f2191b9378dbb1523ce1dd8bf2f4e9607d276b39370ba
openshift-state-metrics git 59b8a0ff sha256:0212f125ddc0db88b64ed8bb60de7c93f99d08ba8f95efab58f9d2b000ed4b8a
openstack-cinder-csi-driver git 5340eaab sha256:5996d1ad20317f36c857cb499e1a8c87a2f82545df14e98d0fc655358b13836c
openstack-cloud-controller-manager git 5340eaab sha256:83490e1054615f801a599f2a2167b3400abd58dba607b9efbeb4f09c0eed7442
ovirt-csi-driver git 1db726a9 sha256:e7c4135554bb35e39c20ce1f66380a22b57db849c9b4aefd3ff50177089b43a0
ovirt-csi-driver-operator git ac852f3e sha256:31c03b6d58b3aea8b4fda1969a1623e50506a72838a58a152a0cbc69222ab62f
powervs-block-csi-driver git 730a473c sha256:6a5d2c0a3f9057bfdcf30f994c346962aff065c5d583cd148015ef1b7215afd8
powervs-cloud-controller-manager git 87386cd4 sha256:51535fa1087dbc8ecb44b29e998df888b6d7bc8fa0c0c6fa2a768dfd4c1bea2c
powervs-machine-controllers git 6b57e6c1 sha256:b2d4cce31e3f185d1f61e68a952dd66b2e4c5b8022a41a25046296cc99027361
prom-label-proxy git 5e14722e sha256:7b6f207289ca16648d5ac95d1ae3f8bdbe91b4f5943a16fd97317798a9d7ee90
prometheus-config-reloader git 8bf4750a sha256:0f03a4ee4a7772aed369a72badb20e66e6157fd6bff5b92b527f0c0083e41907
prometheus-node-exporter git 29ba26d1 sha256:4b894460cc73907bdaf520b88864d95816482d19fa090757458533da31ae35d1
prometheus-operator git 8bf4750a sha256:9b8349d3e622370f71c09088c37938b0b41088c5fa7259ee405cc463a83f0253
prometheus-operator-admission-webhook git 8bf4750a sha256:861a154582c8f46c99f54d5308b933dc6d5b57723ec69006545e4812650c8779
rhel-coreos sha256:eaa7835f2ec7d2513a76e30a41c21ce62ec11313fab2f8f3f46dd4999957a883
rhel-coreos-extensions sha256:187be439d39bbf12201dc98a198b399d0ef819ae472b27808153824d16b6f09c
route-controller-manager git 3112b458 sha256:1fd628f40d321354832b0f409d2bf9b89910de27bc6263a4fb5a55c25e160a99
sdn git 5b658c43 sha256:9ec002699d6fa111b93b08bda974586ae4018f4a52d1cbfd0995e6dc9c732151
telemeter git 6ab43e48 sha256:378c3dae496ba03b5d05c4550196cf4b576289eb751f9a834c513bbae2728900
vsphere-problem-detector git d674e6d8 sha256:203f934f8714eec40ee529373e41d4eff754091413db76098f8826a0177a39e6

agent-installer-api-server

OCPBUGS-31727: Invalid Pull-Secret when using password which contains a colon character (#6362) #6362
MGMT-17850: Bump k8s.io modules to v0.29 (#6345) (#6372) #6345
OCPBUGS-34278: Don’t use the statically linked installer if FIPS is enabled (#6357) #6357
Use openshift-install binary for releases >= 4.16 (#6304) #6304
MGMT-17775: Ensure that patch manifest filenames are consistent and correct (#6289) #6289
MGMT-17194: Ensure that we improve error messages for mirror registry tagged images (#6266) #6266
MGMT-17764: Update the latest image search functionality in the RestAPI flow to correctly compare pre-release versions (#6276) #6276
NO-ISSUE: Add openshift-edge-bot as an OWNER in order to run konflux pipelines on its PRs (#6255) #6255
Revert “MGMT-17194: Ensure releaseImage is not tag based when mirror registry enabled. (#6260)” (#6268) #6260
MGMT-17194: Ensure releaseImage is not tag based when mirror registry enabled. (#6260) #6260
MGMT-17523: Fail when OS images CPU architecture is missing instead of giving it default value (#6256) #6256
NO-ISSUE: Bump OCP versions: 4.13, 4.15, 4.14 (#6259) #6259
OCPBUGS-31733: Remove CPMS manifest for vsphere platform (#6239) #6239
NO-ISSUE: Bump OCP versions: 4.16 (#6254) #6254
MGMT-17697: Change L3 connectivity to use connected addresses instead of majority groups (#6252) #6252
NO-ISSUE: Bump OCP versions: 4.13, 4.12, 4.14, 4.15 (#6250) #6250
NO-ISSUE: Fix hypershift destroy in CI test script (#6246) #6246
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

MGMT-16843: Use hostnamectl to replace illegal hostname (#850) #850
OCPBUGS-32105: Fix race to mark node Joined (#823) #823
NO-ISSUE: Bump github.com/onsi/gomega (#841) #841
MGMT-17305: Moving disk operations to new repo (#840) #840
Full changelog

agent-installer-node-agent

OCPBUGS-33404: Make removable disks eligible (#717) #717
Updating ose-agent-installer-node-agent-container image to be consistent with ART (#637) #637
NO-ISSUE: Bump the go-dependencies group across 1 directory with 2 updates (#710) #710
Full changelog

alibaba-machine-controllers

AUTH-482: set required-scc for openshift workloads #50
Full changelog

aws-cloud-controller-manager

OCPBUGS-31968: update for CVE-2023-45288 [release-4.16] #82
OCPBUGS-34046: Ensure that addresses are added in network device index order #88
OCPBUGS-8213: Ensure removal of security group rules on deleting load balancers #57
Full changelog

aws-cluster-api-controllers

OCPBUGS-33170: All containers must fallback to logs on error #510
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator

OCPBUGS-34392: Adjust port for registrar sidecar in aws-ebs csi driver container #230
OCPBUGS-32785: add token audience for Azure File #224
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-35706: capi/aws: allow 6443 for private cluster NLB #8622
OCPBUGS-35570: capi/aws: retry SSH ingress rule removal #8618
OCPBUGS-35515: SPLAT-1437: CAPI/AWS/BYOIP: supporting Public IPv4 Pool #8608
OCPBUGS-35493: Validate OnHostMaintenance and ConfidentialCompute #8606
OCPBUGS-35435: vsphere - allow network selection on cluster name #8595
OCPBUGS-35527: [release-4.16] bump github.com/container/images for CVE fix #8611
OCPBUGS-35471: capi/aws: disable CAPA’s TagUnmanagedNetworkResources feature gate #8604
OCPBUGS-35023: azure: bump profile used for network #8537
OCPBUGS-35448: [release-4.16] capi/aws: bump provider for fixes #8598
OCPBUGS-35460: save etcd data to its own directory #8600
OCPBUGS-35384: Add ELB V2 permission to set security groups on API server load balancer #8589
OCPBUGS-35344: baremetal: check if HardwareDetails is nil #8579
OCPBUGS-35392: aws: delete ignition bucket on bootstrap destroy #8590
OCPBUGS-35383: capi: use polling instead of exponential backoff #8588
OCPBUGS-35372: openstack: Attach a bootstrap FIP to the cluster network port #8585
OCPBUGS-35323: Add S3 permission to allow attaching S3 bucket policy #8576
OCPBUGS-35379: capi/aws: do not set proxy for masters #8586
OCPBUGS-35253: AWS remove extra tags from awsmachines for security groups and subnets #8569
OCPBUGS-35235: baremetal: Don’t always enable provisioning-interface.service #8563
OCPBUGS-35302: Prevent multiple invocations on CAPI #8571
OCPBUGS-35101: [release-4.16] Add 4 new regions for PowerVS #8533
OCPBUGS-35312: capi/aws: rename preserveBootstrapIgnition #8574
OCPBUGS-35192: write etcd and kube-apiserver logs #8558
OCPBUGS-34760: capi/aws: fix setting custom AMI #8520
OCPBUGS-35243: capi: do not override KUBECONFIG #8566
OCPBUGS-35224: PowerVS: Destroy DHCP in ERROR state #8561
OCPBUGS-35151: wait for ip addresses to be present on machines #8554
OCPBUGS-34499: unique AWS HostedZone Caller Ref #8476
OCPBUGS-35103: OCPBUGS-4466: Prevent cluster installation with mismatched worker assets and worker replicas #8553
OCPBUGS-35098: capi/aws: add BootstrapDestroyer guard #8552
OCPBUGS-35088: PowerVS: fix AddIPToLoadBalancerPool #8551
OCPBUGS-35030: Increase timeout for bootstrap complete #8539
OCPBUGS-35049: capi/aws: don’t use S3 stub for masters #8548
OCPBUGS-35044: aws: don’t always require s3:Delete* permissions #8547
OCPBUGS-34620: Use infrastructure API to detect cluster topology #8499
OCPBUGS-34822: [Nutanix] installer intermittent failed at uploading the bootstrap image to PC when CAPI enabled #8524
OCPBUGS-34976: [release-4.16] aws: terraform: add spot instance support for masters #8526
OCPBUGS-34707: attach tag to folder,fix folder destroy #8509
OCPBUGS-33794: Make Ingress capability required for standalone OpenShift #8528
OCPBUGS-34628: tfvars: change asset’s name #8501
OCPBUGS-34388: Add –dir /tmp to node-joiner-monitor.sh #8461
OCPBUGS-34728: [release-4.16] MULTIARCH-4076: PowerVS: Default region bug fix #8506
OCPBUGS-34693: update RHCOS 4.16 bootimage metadata to 416.94.202405291527-0 #8517
OCPBUGS-34419: PowerVS: update capi ibmcloud to release 0 8 0 #8465
OCPBUGS-34623, OCPBUGS-34625: capv - missing cores/socket,disk type #8500
OCPBUGS-34427: aws/cluster: restrict SSH on private clusters #8467
OCPBUGS-34528: Nutanix IPI install with capi failed to set bootType #8481
OCPBUGS-31845: Detect Release Image Arch in a Disconnected Env #8490
OCPBUGS-33962: [release-4.16] Remove vSphere Terraform #8431
OCPBUGS-34506: [release-4.16] bump golang-protobuf for CVE fix #8478
OCPBUGS-34417: capi/aws: don’t modify BYO role’s policy #8463
OCPBUGS-34220: Reintroduce CAPI-installer to 4.16 #8451
OCPBUGS-33976: Enable leader election for baremetal operator #8435
Trt-1674: 4.16 capi revert 1 #8434
CORS-2840: [release-4.16] GA CAPI Installer #8428
OCPBUGS-33668: Changed folder name to match cluster name instead of infra-id. #8414
AGENT-903: monitor-add-nodes should only show CSRs matching node #8376
CORS-3480: aws/sdk: remove sdk provisioner #8358
CORS-3460: Always collect clusterapi manifests #8411
OCPBUGS-33709: GCP mixup when using the ignition shim vs the signed url #8342
CORS-3297: Add GCP firewall rule to access bootstrap node via ssh #8374
CORS-2905: capi-aws delete bootstrap ssh rule #8359
OCPBUGS-33370: baremetal: always write masters file #8365
OCPBUGS-33531: update RHCOS 4.16 bootimage metadata to 416.94.202405132047-0 #8409
no-jira: Vendor api changes for tech preview with capg #8407
CORS-3269: Azure ignite control plane machines #8126
OCPBUGS-31017: aws: add missing permission for IPv4 pools #8408
OCPBUGS-33649: add quota support to ca-west-1 #8406
CORS-3460: capi: collect generated assets in hidden dir and save into log bundle #8387
OCPBUGS-33006: baremetal: aarch64-related fixes #8385
OCPBUGS-33610: fix API detection, azure bootstrap disk size, and use get to verify endpoint #8371
no-jira: Removing unused terraform variables #8360
OCPBUGS-33502: capi/aws: fix setting IMDSv2 value #8399
CORS-3516: hack: do not execute cross-compiled binaries #8397
OCPBUGS-33578: capi/aws: fix HostedZone ID lookup #8396
OCPBUGS-30860: improve bootstrap logic to wait for at least 2 apiserver instances #8394
OKD-213: Reference stream-coreos instead of centos-stream-coreos-9 #8356
OCPBUGS-33470: use read/write cache on azure masters #8380
no-jira: AzureMachines: set disk caching to ReadWrite #8390
AGENT-863: Change $@ to “$*” to fix shellcheck #8402
OCPBUGS-33481: set the node tag used by CAPG for CloudProviderConfig #8386
OCPBUGS-23022: Installer should not complain when API and API-INT are resolved. #7701
no-jira: vendor: capi-installer in tech preview #8372
CORS-2895: capa/machines: fix zone placement for control planes #8347
OCPBUGS-32947: Changed vsphere CPMS to not include fields controlled by failure domains. #8354
AGENT-872: Generate JWT token #8110
no-jira: vSphere - update owners aliases #8384
AGENT-906: Script to run monitor-add-nodes in cluster #8294
OCPBUGS-33430: Fix CAPI installation typo #8375
CORS-3471: standalone destroy bootstrap support with capi #8350
CORS-3477: hack: build capi + providers by default #8357
OCPBUGS-33189: OCPBUGS-33006: baremetal: correct libvirt defaults #8366
OCPBUGS-33157: baremetal: pause provisioning #8346
NO-ISSUE: baremetal: disable bmo webhook on bootstrap #8340
OCPBUGS-33240: avoid FAT32 error messages when generating the agent ISO #8353
no-jira: Private domains in survey for PowerVS #8303
CORS-3250: images: use pre-built KAS/etcd binaries #8343
SPLAT-1599: Convert storage policy id to SpbmStoragePolicy. #8352
no-jira: Power VS: Refactor InfraReady to use metadata client #8337
CORS-3466: CAPG set instance group name #8314
MULTIARCH-4633: Power VS: Configure load balancers for the private scenario #8331
OCPBUGS-26216: Fix parameter used to disable smt for ppc64 systems #8178
COS-2744: update RHCOS 4.16 bootimage metadata to 416.94.202404301731-0 #8335
METAL-872: baremetal: write masters.json file #8336
no-jira: azure: Add securityProfile to control plane machines #8334
Full changelog

baremetal-operator

OCPBUGS-33254: Merge upstream #354
NO-ISSUE: Revert “downstream-only: Disable webhooks” #335
Full changelog

baremetal-runtimecfg

OCPBUGS-29067: Fix generation of DNSUpstreams on cloud platforms #308
NO-ISSUE: Fix wrong golang version, bump to 1.21 #311
Revert “OCPBUGS-32348: Make log level configurable” #310
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-34886: Hardcode resource groups/kinds for now #1796
OCPBUGS-33917: add alert data to upgrade health in oc adm upgrade status #1794
OCPBUGS-33975: pkg/cli/admin/upgrade/rollback: Gate on OC_ENABLE_CMD_UPGRADE_ROLLBACK #1776
OCPBUGS-34406: Simplify output when not updating #1781
OCPBUGS-33918: adm update status: Show information about the upgrade target version #1772
OCPBUGS-33916: Add s390x based oc into extraction target #1770
OCPNODE-2281: Support multiple icsps in migrate icsp #1751
OCPNODE-2282: Support multiple ImageDigestMirrorSet objects in the th… #1756
OTA-1275: cli/admin/release/git: use optimized git flags #1754
WRKLDS-1251: Switch cli image to RHEL9 base image #1752
Full changelog

cloud-credential-operator

OCPBUGS-32948: Update documentation to restart pods when enabling workload identity #701
Full changelog

cloud-network-config-controller

OCPBUGS-33617: Avoid panic when looking up attachedOutboundRule.ID in azure #144
NO-JIRA: Update dependency google.golang.org/api #143
OCPBUGS-33154: Incorrect use of go wait groups #140
Full changelog

cluster-authentication-operator

NO-JIRA: remove go-jose not to get flagged with its CVEs #668
Full changelog

cluster-autoscaler

OCPBUGS-33932: fix: scale up broken for providers not implementing NodeGroup.GetOptions() #303
NO-JIRA: UPSTREAM: 6796: Avoid expesive pointer copy in capi nodegroup #298
Full changelog

cluster-autoscaler-operator

AUTH-482: set required-scc for openshift workloads #315
OCPBUGS-20565: Set webhook minimum TLS version to 1.3 #320
OCPCLOUD-2493: Add empty string as value for GpuType if GpuCount is empty 0 #317
Full changelog

cluster-baremetal-operator

OCPBUGS-35503: Add capability to metal3-ramdisk-logs container #426
OCPBUGS-34041: Run metal3 containers as specific users and groups #418
OCPBUGS-33493: Enable leader election for baremetal-operator #416
OCPBUGS-27145: Drop unneccessary capabilities #401
OCPBUGS-33254: Wait for bootstrapping to finish before starting #415
Full changelog

cluster-capi-controllers

OCPBUGS-33170: All containers must fallback to logs on error #207
Full changelog

cluster-capi-operator

OCPBUGS-33170: All containers must fallback to logs on error #172
OCPBUGS-28230: enforce termination message policy on all platform pods #171
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-34826: Nutanix CCM pods Cipher Suites vulnerability issue #350
NO-JIRA: Ensure termination message policy in tests #344
OCPBUGS-33405: update azure and ash tolerations on node manager #342
Full changelog

cluster-config-api

OCPBUGS-26466: Disable PSA in non-previews 4.16 #1912
STOR-1839: promote VSphereDriverConfiguration feature to Accessible-by-default #1904
temporarily break the featuregate check to show we can get results #1911
Feature gates for platforms, architecture, and installs #1910
OCPBUGS-34398: Streamline bootstrap crds #1905
ETCD-602: Move etcd hardware speed feature to GA #1901
Move CAPI install platforms to default feature set #1892
OCPBUGS-33727: Fix Gateway API Feature Gate #1894
NO-JIRA: Set listType for .status.serviceNetwork and .status.clusterNetwork in networks.config #1890
SDN-4600: Add NetworkDiagnosticsConfig to the default featureset #1886
Revert “Revert “Merge pull request #1851 from slashpai/metrics-server”” #1865
CORS-3488: Add GCP CAPI installer to tech preview feature set. #1889
Add eligible CAPI-install platforms to TechPreview #1880
NO-JIRA: Update runtime image and drop color in CI #1885
add MachineConfiguration conditions for boot image updates #1882
SPLAT-1452: Changed vcenter MaxItems to be 3 for TechPreview. #1842
ETCD-520: add BackendQuotaGiB example #1874
Update SSA tag markers #1881
Expose chunksize variable for S3 storage driver #1864
ETCD-520: add etcd dbsize field #1736
Update imageregistry component SSA tags #1877
Add Machine V1 to payload CRDs #1876
Recurse when loading CRD schemas to check #1875
MCO-1148: Attempt to tombstone MachineConfiguration/StaticPodOperatorStatus #1789
Full changelog

cluster-config-operator

SPLAT-1630: Bump API version to get new VSphereMultiVCenters featuregate. #418
AUTH-482: set required-scc for openshift workloads #410
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-34970: Add unreadyNodeGracePeriod for allowing brief node hiccups #298
OCPBUGS-35227: Improved debugging of API listing errors #300
OCPBUGS-32947: Modified webhook to reject changes to vsphere fields coming from failure domains. #291
AUTH-482: set required-scc for openshift workloads #282
Drop CRDs for CPMS #292
Full changelog

cluster-csi-snapshot-controller-operator

AUTH-482: set required-scc for openshift workloads #196
Full changelog

cluster-dns-operator

CFE-964: Add DNSNameResolver controller #394
OCPBUGS-32941: Bump to Kubernetes 1.29 and controller-runtime 0.17.3 #408
OCPBUGS-27924: Updating ose-cluster-dns-operator-container image to be consistent with ART for 4.16 #402
Full changelog

cluster-etcd-operator

ETCD-621: Update api vendor libraries to get GA’ed tuning profiles #1265
OCPBUGS-33495: return errors in wait-for-ceo #1260
OCPBUGS-31849: check the quorum in case the cluster is healthy or not after generating certs #1239
Full changelog

cluster-image-registry-operator

OCPBUGS-34779: add SAR capability to image-registry #1054
OCPBUGS-34165: azure-path-fix: get client secret from k8s secret #1041
OCPBUGS-34166: pkg/storage/s3: use force path style in favour of virtual hosted style config #1042
OCPBUGS-34069: Bump openshift api, client-go & library-go #1039
OCPBUGS-33172: azurepathfix: check if platform status is nil before accessing it #1030
Full changelog

cluster-ingress-operator

OCPBUGS-34835: internalServiceChanged: Fix target port logic #1072
OCPBUGS-34837: Bump openshift/library-go to resolve NewPrometheusClient E2E failures #1074
OCPBUGS-32887: Allow operator to update Route spec.subdomain #1047
OCPBUGS-32942: Bump controller-runtime to v0.17.3 #1050
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-25104: revert dev cert rotation 4.16 #1695
OCPBUGS-34408: Create one-shot migrations for the flowcontrol group. #1690
OCPBUGS-33522: add a controller that reconciles SCCs’ volumes #1675
NO-ISSUE: Revert “add SNO control plane high cpu usage alert” #1674
OCPBUGS-33184: Fix incorrect name for hostmount-anyuid SCC ClusterRole #1671
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-33933: Remove cloud-provider, cloud-config, and cloud-volume-plugin flags #808
Full changelog

cluster-machine-approver

OCPBUGS-34161: check for machine crd before listing machines #233
Full changelog

cluster-monitoring-operator

OCPBUGS-34806: send cnv_abnormal metric via telemetry #2364
MON-3861: Bump go tools 1.21 #2348
MON-3856: Bump openshift/prometheus to v2.52.0 #2342
OCPBUGS-32510: change metrics-server probes for SNO #2337
MON-3851: Bump openshift/thanos to v0.35.0 #2338
MON-3847: Bump openshift/node_exporter to v1.8.0 #2336
OCPBUGS-32510: tweak Prometheus RBAC setup as a temp fix. #2334
AUTH-482: set required-scc for openshift workloads #2335
Full changelog

cluster-network-operator

OCPBUGS-34736: Limit iptables-alerter’s cpu #2407
OCPBUGS-34736: Handle pod exiting race conditions in iptables-alerter #2394
MON-3795, OCPBUGS-35061: Add ANP metric rule expressions for telemetry exposure #2398
OCPBUGS-34612, OCPBUGS-34660, OCPBUGS-34663: Live migration backports #2392
OCPBUGS-34964: Fix DNSResolver feature gate enablement #2402
OCPBUGS-34770: Ensure that the node-identity webhook address contains colons for IPv6 #2395
OCPBUGS-34214: Add conditions for ignored-namespaces #2378
OCPBUGS-34013: Add custom masquerade subnet against right key at ovnkube-config CM #2374
CFE-888: Enable DNSNameResolver feature-gate #2131
OCPBUGS-32979: Update network operator status for IPsec #2360
USHIFT-2912: Add ref to MicroShift’s Multus and CNI Plugins #2365
OCPBUGS-29403: add more safe sysctls #2273
OCPBUGS-32525: Check every MachineConfigPool for IPsec plugin existence #2349
OCPBUGS-28230: enforce termination message policy on all platform pods #2364
Full changelog

cluster-node-tuning-operator

OCPBUGS-33682: right-hand-side profile_dirs take precedence (#1080) #1080
NO-JIRA: E2E: Add test for checking cpuset.cpus.exclusive (#1046) #1046
CNF-11817: e2e: control and data planes clients (#1004) #1004
Unify OKD and OCP Dockerfiles (#1058) #1058
OCPBUGS-33460: E2E: change tuned profile path (#1055) #1055
E2E: modify test use HaveKey matchter instead of ContainElement (#1056) #1056
E2E: Add automation to check default cpuset from cpu manager state file (#1050) #1050
perfprof: latency e2e: adjust failure message (#1044) #1044
Full changelog

cluster-olm-operator

AUTH-482: set required-scc for openshift workloads #54
OPRUN-3291: Add roles for clusterextensions #53
OPRUN-3291: Add roles for validating admission policy APIs #52
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-34384: [release-4.16] Disable Rolebindings for Capabilities #350
AUTH-482: set required-scc for openshift workloads #336
Full changelog

cluster-storage-operator

OCPBUGS-28230: enforce termination message policy on all platform pods #470
OCPBUGS-29126: vsphere-problem-detector: don’t set Available condition #456
Full changelog

cluster-version-operator

OCPBUGS-35249: Revert: Add support for Custom Certificate Authorities for custom signature stores” #1053
OCPBUGS-24700: Add support for Custom Certificate Authorities for custom signature stores #1030
Full changelog

console

OCPBUGS-35395: Keep useUserSettings hook in the internal api #13970
OCPBUGS-35152: restore missing CloseButton styles #13947
OCPBUGS-35318, OCPBUGS-35319, OCPBUGS-35320: disabling add-flow A-04-TC01 test and knative tests due to flakes #13962
(chore) Update tectonic builder image to use golang-1.21 #13944
OCPBUGS-34139: Improve Pipeline list page performance #13882
OCPBUGS-34002: Fix console crash-loop with OIDC auth config #13874
OCPBUGS-34711: show “Debug container” link for pods with status.phase… #13914
OCPBUGS-33965: i18n - Download and merge French and Spanish languages translations in the OCP Console #13870
OCPBUGS-34393: fix bug where textarea is not resizable #13894
OCPBUGS-33989: Updating the secrets using Form editor displays an unknown warning message #13873
OCPBUGS-34112: Fix Admission webhook warning for Route and BuildConfig creation via import flow #13881
OCPBUGS-34141: UI inconsistency in topology when application grouping is collapsed #13883
OCPBUGS-34142: Import from Git allow users to import an app with Build option Pipeline also when no Pipeline is available #13884
OCPBUGS-34143: Create Serverless form does not create BuildConfig #13885
OCPBUGS-33872: add user-impersonation to QuickStartGettingStartedCard,… #13864
OCPBUGS-32631: TaskRuns should not be fetched for Failed PLR’s #13806
OCPBUGS-33567: Expose useUserSettings hooks in dynamic plugin sdk #13843
ODC-7576: Pipelines plugin test fixes #13841
OCPBUGS-31901: Patch PF dynamic module parser to exclude ‘next’ modules #13832
ODC-7574: Add e2e tests for QuickStart from Masthead in CI #13837
OCPBUGS-33523: restrict Masthead logo to max-height #13838
OCPBUGS-29745: Fix Pipeline details page with when expression using CEL expression #13834
CONSOLE-4019: Display a warning message from kube-apiserver when creating resource integration tests #13814
CONSOLE-3943: Backup to segment public api key #13821
OCPBUGS-33352: Fix PatternFly modules check #13817
OCPBUGS-33345: Disable create button on NAD empty state for regular user #13805
CNV-36170: Multi NetworkPolicies #13772
OCPBUGS-33219: Fix StatusItem layout when no timestamp is present #13815
OCPBUGS-31558: Fix NAD creation defaulting to the default namespace #13822
OCPBUGS-33222: List DeploymentConfig triggers a warning notification which is not required for Display warning policy feature #13818
OCPBUGS-33199: The filepath including leading slash makes error during parsing devfile using Gitlab #13812
OCPBUGS-33202: Pipeline list page is crashed when navigating from Search page #13813
CONSOLE-3939: Display a warning message from kube-apiserver when creating / updating workloads resource #13763
Full changelog

console-operator

CONSOLE-4047: Console-operator should be internally using listers for fetching data #901
OCPBUGS-33505: Add missing return statement to fix crash in healthcheck controller #900
OKD-214: Dockerfile: Add ARG TAGS=ocp #896
TRT-1664: Revert #895 “CONSOLE-4047: Console-operator should be internally using listers for fetching data” #899
CONSOLE-4047: Console-operator should be internally using listers for fetching data #895
CONSOLE-3943: Default telemetry values #890
CONSOLE-4014: Pass OCM organization ID and OCP cluster ID to console-config.yaml #893
Full changelog

coredns

OCPBUGS-35296: UPSTREAM: 6692: openshift: Fix OCPBUGS-35296 #123
CFE-963: UPSTREAM: <carry>: openshift: Move ocp_dnsnameresolver before cache in plugin chaining order #116
OCPBUGS-31768: UPSTREAM: <carry>: Address CVE-2023-49295 and CVE-2024-22189 #108
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

BUILD-877: BUILD-887: Add konflux config for push and pull request #183
BUILD-961: use separate dockerfile for using catalog images #180
OCPBUGS-33513: Updating ose-csi-driver-shared-resource-container image to be consistent with ART for 4.16 #178
OCPBUGS-33511: Updating ose-csi-driver-shared-resource-webhook-container image to be consistent with ART for 4.16 #177
BUILD-957: Update Images with Red Hat Catalog Images #173
BUILD-953: Compare to Other Secret Stores #176
BUILD-953: Simplify README #174
Full changelog

docker-registry

OCPBUGS-34779: Use SAR instead of SSAR #403
Full changelog

driver-toolkit

Adding the + char to the RT kernel version. (#156) #156
ART bash parser is failing on [[…]] syntax Replace with sh compatible syntax. (#152) #152
Patch manifests to require stream-coreos instead of rhel-coreos in the OKD/SCOS case (#150) #150
Use a default RHEL_VERSION when the build argument is not specified (#148) #148
Full changelog

etcd

CORS-3191: DOWNSTREAM <carry>: add native binary to installer images #269
CORS-3249: DOWNSTREAM <carry>: installer: make etcd binaries static #268
CORS-3249: DOWNSTREAM <carry>: add installer Dockerfile for ART builds #267
Full changelog

gcp-cluster-api-controllers

OCPBUGS-33170: Container fallback to logs on error #224
OCPBUGS-28331: add test directory to snyk excludes #220
Full changelog

gcp-machine-controllers

OCPBUGS-30520: Bump protobuf to v1.34.0 #82
Full changelog

haproxy-router

CFE-1020: feature:route external certificate reference #565
OCPBUGS-29373: generateHAProxyCertConfigMap: No H2 with dup certs #589
OCPBUGS-26498: Optimize Upgrade Validation plugin by skipping unnecessary changes #587
Full changelog

hyperkube, pod

OCPBUGS-35291: Backport 125337 #1989
OCPBUGS-27074: UPSTREAM: <carry>: extend termination events #1980
OCPBUGS-34545: UPSTREAM: <carry>: Disable e2e tests that need PersistentVolumeLabel #1985
OCPBUGS-33710: Bump k8s API to 1.29.5 #1972
UPSTREAM: <carry>: OCPBUGS-34102: force static build of linux binaries #1978
OCPBUGS-33574: bump openshift/library-go@e22d25a #1967
OCPBUGS-32934: UPSTREAM: 124795: e2e: DaemonSet maxSurge test should account for terminated pods #1966
no-jira: UPSTREAM <carry>: add native build to installer image #1961
API-1809: Provide SCC access via RBAC #1959
Full changelog

hypershift

OCPBUGS-35369: OCPBUGS-35252: vendor: bump openshift/api #4197
NO-JIRA: hack: make the e2e script generic #4198
OCPBUGS-35308: fix router on 4.14 y-stream upgrade #4194
HOSTEDCP-1715: Kubernetes API Server Log Verbosity Annotation cherry pick to 4.16 #4177
HOSTEDCP-1570: remove liveness and readiness probes using metrics endpoint #4116
OCPBUGS-35052: Add missing Tag permissions to cli role #4173
OCPBUGS-34903: Allow access to root-ca configmap in cluster-network-operator role #4155
OCPBUGS-34575: Rename machine-config operator CRD references #4105
OCPBUGS-34759: add AWS STS URL to OIDC provider audiences #4134
HOSTEDCP-1688: Use operator namespace for openshift-config-managed-trusted-ca-bundle #4117
OCPBUGS-34801: remove weak cipher #4139
OCPBUGS-34773: Fix disconnected metadata inspection for nodepool #4137
OCPBUGS-34569, OCPBUGS-34602: Backports that should go in together #4114
OCPBUGS-34542: Reconcile KAS endpoints and endpoint slice #4096
OCPBUGS-34554: Fixed audit-logs sigterm failing to terminate gracefully #4090
OCPBUGS-34390: Add TrustedBundles to OAS container #4087
HOSTEDCP-1561: Move HCP Product CLI to STS #4092
HOSTEDCP-1556: Support Priority based expander for cluster-autoscaler #4068
OCPBUGS-34171: Make active & backup Azure KMS containers use different –metrics-addr #4079
NO-JIRA: Bump library-go dependency #4069
TRT-1672: e2e: proceed with teardown even if dump fails #4052
NO-JIRA: Update RHTAP references #4042
OCPBUGS-33729: Do not ignore single placeholder pods for a specific hosted cluster #4037
HOSTEDCP-1668: remove dns-operator leader-elect flags #4038
OCPBUGS-33595: Cluster sizing controller: do not error on not found HC #4023
HOSTEDCP-1655: Don’t Ignore SubnetID and Network Security Group ID flags when values are passed through #4021
HOSTEDCP-1518: Preserve container resource requests and limits #3864
HOSTEDCP-1310: use kms images from payload #3996
OCPBUGS-32257: Restrict image registry overrides to control plane components #3952
HOSTEDCP-1560: Create AWS STS Role for the hypershift/hcp cli #4003
HOSTEDCP-1566: Bump Azure SDK, IBM, AWS, ectd, & gomega dependencies #4012
HOSTEDCP-1566: Bump CAPI dependencies #4011
OCPBUGS-33320: Fix nil dereference in clustersizingconfig validation #4016
HOSTEDCP-1525: Fixed azure using incorrect kms socket #3981
HOSTEDCP-1563: Refine the Azure API in the NodePool Spec #4004
OCPBUGS-33320: Autoscaler for non request serving nodes #4007
HOSTEDCP-1557: Allow the NSG ID to drive the NSG Resource Group for the Azure Cloud Provider Config #4006
NO-JIRA: Remove CLI inspection of release image #3548
OCPBUGS-33237: Run haproxy to connect to kas from data plane if noproxy settings contain kas #3999
OCPBUGS-26762: Disable DNS resolving for CNO #3986
MULTIARCH-4637: Set arch to ppc64le within PowerVS platform func #4002
MULTIARCH-4637: Support ppc64le arch for Agent and PowerVS platform #3979
HOSTEDCP-1544: Allow user to specify subnet ID for Hosted Cluster & NodePool Creation #3945
CNV-36073: Set time out for external snapshotter on kubevirt csi driver #3968
HOSTEDCP-1523: Bump k8s to v0.29.3 #3878
OCPBUGS-25012: Updating ose-hypershift-container image to be consistent with ART #3303
OCPBUGS-33203, OCPBUGS-33274: Autoscaler: scale down unused machinesets #3988
NO-JIRA: chore(deps): update rhtap references #3973
HOSTEDCP-1513: Add operator scoping support to nodepool controller #3928
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-33329: [ibm-vpc] Scheduling issue on IBM Cloud Bare Metal nodes #115
OCPBUGS-28230: enforce termination message policy on all platform pods #114
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-33170: All containers must fallback to logs on error #80
Full changelog

insights-operator

OCPBUGS-35086: Collect aggregated Prometheus Alertmanager instances (#948) #948
gather aggregated numbers of Pods and Netnamespaces with SDN annotations (#946) #946
Full changelog

ironic

Bug OCPBUGS-34985: Disable installation of .pyc files through pip #509
OCPBUGS-32304: Fix ironic-inspector permissions for creating /certs/ca directory #500
METAL-1005: [4.16] Update ironic projects and remove cinder and glance clients #493
Full changelog

keepalived-ipfailover

OKD-40: Revert #179 #180
OKD-40: Remove centos-openstack-zed and add in rdo repo to get python-cinderclient dependency #179
Add dnf-plugins-core in scos to help with OCP image compat #178
OKD-210: Add sig-cloud repository and enable rt repository #177
OKD-210: Add the sig-nfv repo in the CS9 base #176
OCPBUGS-24850: Bump OpenShift 4.16, RHEL9, and iptables package #175
OCPBUGS-24990: Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART #159
OCPBUGS-24800: Updating ose-egress-http-proxy-container image to be consistent with ART #156
Full changelog

kube-rbac-proxy

OCPBUGS-31955: Merge upstream v0.17.1 release #98
Full changelog

kubevirt-csi-driver

CNV-36073: Enable snapshot tests #40
Full changelog

machine-api-operator

AUTH-482: set required-scc for openshift workloads #1220
Full changelog

machine-config-operator

OCPBUGS-35992: disable mglru service #4427
OCPBUGS-35291: Default ipv4 NODE_IP to 0.0.0.0 #4409
OCPBUGS-35364: Azure: add Azure specific dnsmasq ordering #4406
OCPBUGS-35299: Panic when we remove an OCB infra MCP and we try to create new ones with different names #4403
OCPBUGS-35042: ensure event handlers are registered after queue is configured #4394
OCPBUGS-34799: set required-scc for openshift workloads #4384
OCPBUGS-33901: machine-os-puller SA refreshes every hour, causing machine config regeneration #4374
OCPBUGS-10498: If multiple hostnames are returned, use the first one for the Node name #4368
OKD-212: Reference stream-coreos instead of centos-stream-coreos-9 #4349
OCPBUGS-25821, OCPBUGS-31381: certificate_writer: clean up disk-write logic #4343
MCO-1131: Merge implementation machineOSBuild and machineOSConfig in MCO #4327
OCPBUGS-33357: Check both ready and health ingress endpoints #4356
OCPBUGS-32583: daemon/pinned-image-set: refactor mirrored registry auth #4345
OCPBUGS-33046: improve status reporting for pinned image sets #4339
OPNET-282: Configure-ovs alternative implementation #4249
OCPBUGS-33018: pkg/daemon: Only re-bootstrap kubelet on X.509 errors #4351
OCPBUGS-33018: pkg/daemon: logSystem the Kube API errors that trigger a re-bootstrap #4342
OCPBUGS-29067: Fix CoreDNS pod definition on bootstrap nodes on cloud platforms #4238
Full changelog

multus-cni

OCPBUGS-34910: Thick plugin should not wait for API readiness on CNI DEL #238
OCPBUGS-34924: Update owners file #239
OCPBUGS-33256: Fix CNI cache update function to prevent nil access #230
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-34929: [release-4.16] Use IP to identify orphaned allocation to be deleted #286
OCPBUGS-33565: Upstream sync may24 #278
Full changelog

must-gather

WRKLDS-1257: Switch must-gather to RHEL9 as base image #421
WRKLDS-1251: Use oc.rhel8 based on the target arch of image #420
Full changelog

network-tools

OCPBUGS-33388: Updating ose-network-tools-container image to be consistent with ART for 4.16 #125
NO-JIRA: New label for CI flakes #124
Full changelog

nutanix-machine-controllers

AUTH-482: set required-scc for openshift workloads #73
Full changelog

oauth-server

OCPBUGS-35374: p/o/handlers - fix nil-pointer, if ResStatus is nil #152
Full changelog

oc-mirror

OCPBUGS-33775: Do not generate idms & itms if nothing has been mirrored (#871) #871
CLID-122: upgrades distribution/distribution for a released version (#864) (#868) #864
OCPBUGS-34521: Fix DiskToMirror without internet connection without rebuild catalog (#863) #863
OCPBUGS-33081: Skip images that don’t follow standards, semver and naming (#861) #861
OCPBUGS-33196: skip images with both tag and digest (#853) #853
OCPBUGS-31608: Fix IDMS/ITMS generated source repository in case of empty namespace (#850) #850
OCPBUGS-31858: CLID-97: Provide a way to skip failing images (#854) #854
OCPBUGS-31622: Fix operator related image has empty reference (#851) #851
OCPBUGS-31536: OCPBUGS-33554: Fix mirroring operators on fedora systems - no sig verification (#852) #852
OCPBUGS-32547: Fix delete generation for mirror to mirror flow (#848) #848
OCPBUGS-31536: Change default behavior to not rebuild catalogs for V1 - 2 (#847) #847
Fix golint errors (#845) #845
OCPBUGS-31536: Change default behavior to not rebuild catalogs for V1 (#844) #844
OCPBUGS-33098: feat: generates a file with errors during mirroring (#843) #843
Full changelog

olm-operator-controller

NO-ISSUE: Synchronize From Upstream Repositories #102
NO-ISSUE: Synchronize From Upstream Repositories #101
Full changelog

olm-rukpak

NO-ISSUE: Synchronize From Upstream Repositories #84
Full changelog

openshift-apiserver

OCPBUGS-33574: Bump library-go #434
OCPBUGS-31666: Bump openshift/api for Route API godoc fix #433
Full changelog

openshift-controller-manager

OCPBUGS-34825: Whitelists lower-case proxy envs to pod proxydefaults #314
OCPBUGS-33893: openshift-controller-manager overwriting/undoing changes to ServiceAccount imagePullSecrets #309
OCPBUGS-33876: filter delete events #308
OCPBUGS-33600: revert revert and fix for hypershift #305
Revert #288 “API-1644: Use bound service account tokens when generating pull secrets” #304
API-1644: Use bound service account tokens when generating pull secrets #288
OCPBUGS-33241: panic in image trigger controller #302
OCPBUGS-30688: bump go-jose to fix CVE-2024-28176 #297
OCPBUILD-9: Adds roleBinding controllers to the controllerInitializers #296
OCPBUGS-32729: Rollback state of managed image pull secrets after downgrade #300
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-34882: Correct out-of-bounds check #171
Full changelog

openstack-cluster-api-controllers

NO-JIRA: Bump to latest CAPO v0.10 #312
OCPBUGS-33170: openshift: Set FallbackToLogsOnError on infra-cluster controller #311
Full changelog

openstack-machine-api-provider

OCPBUGS-34158: Failure to get bootstrap is non-fatal #115
OCPBUGS-34155: Fix panic deleting Machine in ERROR state #114
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-35219: Unblock CI #767
Full changelog

operator-marketplace

OCPBUGS-24971: bump golang to 1.21 #560
AUTH-482: set required-scc for openshift workloads #561
Full changelog

ovirt-machine-controllers

OCPBUGS-24925: Updating ose-ovirt-machine-controllers-container image to be consistent with ART for 4.16 #177
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-35835: [release-4.16] bump OVN to ovn24.03-24.03.2-19.el9fdp #2209
OCPBUGS-34402: [release-4.16] dns: fix deadlock in case of error #2181
OKD-40: Add ovnver_okd and ovsver_okd to Dockerfile.base #2174
SDN-4157, SDN-4436: Downstream Merge 16th May 2024 #2171
OCPBUGS-30224, OCPBUGS-33328, SDN-4388: [DownstreamMerge] 10 may 2024 #2162
OCPBUGS-33080: Downstream Merge May 2nd 2024 #2152
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-28230: enforce termination message policy on all platform pods #70
Full changelog

prometheus

MON-3856: Bump openshift/prometheus to v2.52.0 #202
MON-3856: Bump openshift/prometheus to v2.52.0 #201
Full changelog

prometheus-alertmanager

OCPBUGS-33686: Dockerfile.ocp: use common-build target #91
Full changelog

service-ca-operator

OCPBUGS-24916: Bump to rhel9 #240
OCPBUGS-29583: Apply hypershift cluster-profile for ibm-cloud-managed #234
Full changelog

tests

OCPBUGS-34736: Add a “limit” exception for iptables-alerter #28859
OCPBUGS-34500: add manual etcd signer cert rotation e2e test #28830
OCPBUGS-33710: Bump k8s API to 1.29.5 #28831
NO-JIRA: quota.sh: 4.16 no longer creates legacy API tokens #28810
STOR-1838: add test for vsphere driver snapshot configuration #28717
OCPEDGE-1101: skip etcd test for hardware speed on sno #28800
SPLAT-1439: Ignore edge workers when listing nodes #28584
NO-ISSUE: Automated - Update synthetic test data #28795
NO-JIRA: oc template - set NS PSP level=privileged (hostPorts) #28803
USHIFT-3143: Skip metrics and adjust termination message policy monitor tests #28799
OCPBUGS-18534: Pass namespace in function checkHostnameReady for monitortest #28794
ETCD-488: Fix feature gate for etcd profiles e2e test #28782
OCPBUGS-31919: Use proper pull-secret for getting openshift-tests image #28764
OCPBUGS-33378: Verify Build Webhooks on Upgrade #28783
SDN-4168: Increase IPsec timeout parameters #28779
USHIFT-3142: Automatically exclude FeatureGate tagged tests #28786
USHIFT-3133: Skip cloud provider disruption monitors for MicroShift #28767
NO-JIRA: enforce termination policy #28777
TRT-1656: Revert #28750 “OCPBUGS-33041: Add RoleBinding for BuildConfig Webhooks” #28781
SDN-4783: Add e2e tests for NetworkDiagnosticsConfig featuregate #28719
API-1783: Update etcd test data for 1.30 release #28770
NO-JIRA: verify tls artifacts #28772
API-1809: Provide SCC access via RBAC #28771
OCPEDGE-812: feat: add tests for cpu limits on workload partitioning #28752
OCPBUGS-18534: monitor test fix to wait before connecting to a non-existent dns on PowerVS and IBMCloud platforms #28739
MON-3513: Add availability test for Metrics API #28737
SDN-4168: Add IPsec e2e tests #28658
OCPBUGS-33041: Add RoleBinding for BuildConfig Webhooks #28750
OCPBUGS-33317: use tokenrequest api #28769
OCPBUGS-31868: allow for some errors checking namespace delete #28761
OCPBUGS-26498: Add test for UpgradeValidation contention #28710
OCPBUGS-29373: test/extended/router/http2: Use unique certs #28757
OCPBUGS-33125: Allow flexible rhel in tests #28755
Full changelog

thanos

MON-3851: Bump openshift/thanos to v0.35.0 #145
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-30538: Bump protobuf to v1.33.0 #67
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-33170: Container fallback to logs on error #37
OCPBUGS-30539: Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.9.3 (e50b9e2) into master #36
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-13551: FailedPrecondition volume does not appear staged #88
Full changelog

vsphere-csi-driver-operator

OCPBUGS-24061: Keep CSI operators progressing=true during DaemonSet rollout #230
OCPBUGS-28230: enforce termination message policy on all platform pods #231
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github