4.16.14

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.16.14-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.16-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.16-micro Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.16-micro Succeeded periodic-ci-openshift-release-master-ci-4.16-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.16-fips-payload-scan
- gcp-ovn-rt-upgrade-4.16-minor Succeeded periodic-ci-openshift-release-master-ci-4.16-upgrade-from-stable-4.15-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.16 Succeeded (1 retries) periodic-ci-openshift-hypershift-release-4.16-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.15.18, 4.15.19, 4.15.20, 4.15.21, 4.15.22, 4.15.23, 4.15.24, 4.15.25, 4.15.26, 4.15.27, 4.15.28, 4.15.29, 4.15.30, 4.15.31, 4.15.32, 4.15.33, 4.15.34, 4.16.0, 4.16.1, 4.16.10, 4.16.11, 4.16.12, 4.16.13, 4.16.2, 4.16.3, 4.16.4, 4.16.5, 4.16.6, 4.16.7, 4.16.8, 4.16.9

Loading changelog, this may take a while ...

Changes from 4.16.2

Created: 2024-09-19 13:00:37 +0000 UTC

Image Digest: sha256:0521a0f1acd2d1b77f76259cb9bae9c743c60c37d9903806a3372c1414253658

Release 4.16.14 was created from registry.ci.openshift.org/ocp/release:4.16.0-0.nightly-2024-09-18-233707

Components

Kubectl upgraded from 1.29.1 to 1.29.7
Kubernetes upgraded from 1.29.6 to 1.29.8
Kubernetes Tests 1.29.0
Red Hat Enterprise Linux CoreOS upgraded from 416.94.202407030122-0 to 416.94.202409181502-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
ExternalRouteCertificate (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)

New images

operator-framework-tools git c50e9ce2 sha256:1af8392e3cb64b8c39274c249f23876e0bf76da80c74487d250c98ee450bb89e

Rebuilt images without code change

agent-installer-node-agent git 9ca7b58d sha256:714d0b45472e190849c890c80e257b64c4a685d0f0368629082d602566c11d42
agent-installer-utils git 6e6bb40d sha256:00729267d701d8ddd33f1d754929d148f84178f70678ea9065546c90de0f4a66
alibaba-cloud-controller-manager git 97e8335e sha256:db02e865ba6057dbc8ed90eb1f92a1ce3c77082ae2066b3b7205473338ec1a03
alibaba-machine-controllers git 064d4624 sha256:32f5089227d5f133c6fe0d70ba43557e62cfc6cc39e2c1426f124c47d4ff9cb4
aws-cloud-controller-manager git a53e9def sha256:8d6a22d5997ec2d54f9e93c84bab415e7524442ad229951b0ac935d27db49013
aws-cluster-api-controllers git aaaf00b1 sha256:6a9fe6f7fedaae423b0ebe78b2a8ae53ad477fd25d8039951dfbf671223eba06
aws-ebs-csi-driver git 1d29a74a sha256:d00bf6c9a5633cf8a3e67cf805fd1507104ee5be198a4def6fca6de8617fa365
aws-ebs-csi-driver-operator git ff69cd03 sha256:2bfd58b73dd33df94d95317f65df71185223c573a6cc604370f51c0af26de701
aws-kms-encryption-provider git da90fb7c sha256:8abe1fdebb80c699929b91d455d4ea1e9ef8456e344bcdfa0a7fc12c18f0ade3
aws-machine-controllers git 61d60f6c sha256:69d5a6f76a31b3c5a15b71d9a20e6f26532e2888b747401ca276603c0ffe99d4
aws-pod-identity-webhook git 746491a6 sha256:8e94b1404cabd227610f4f8119c8179d7030bc511ef4d92ba29f4480040f8363
azure-cloud-controller-manager git 0e955329 sha256:19f6ff42a3507675d1f1c61a889446d8a34fc27af37aad46242213430601ca9b
azure-cloud-node-manager git 0e955329 sha256:5b6cd037f7679179a19b006d8bc0d43dfb38c0734639583b6a6acd8fc396c5a9
azure-cluster-api-controllers git a81e3b31 sha256:305955a381e90b1b4b179d4dabd086653acf1b3dcf0fa9e299ee5b51204bc95b
azure-disk-csi-driver git 6b55f6fb sha256:2c45d9d2aa1e5c74e4c4c77d652ca5dcdb3310c5eeb5230dc51b9b26f18fac60
azure-disk-csi-driver-operator git ff69cd03 sha256:f1f76b8a82fdd97da1fc69700c33dcf785b28cbbe25b88035249a1b9b0c74eaa
azure-file-csi-driver-operator git ff69cd03 sha256:d44d3c4fd14225a0d52c7ac40ace3c3e68d9634e4ff2932dc0ac27dc4ecc7785
azure-kms-encryption-provider git bc92347b sha256:28a496adea96adb9bc4351439a27c3293123f591e0a0924384fff08dfaeea717
azure-workload-identity-webhook git 4aca092a sha256:529d6d722e1ce64bfc48ed5a9756921a7811fc296e5848b4d921571f17cf1568
baremetal-machine-controllers git 11ba601f sha256:deaa1d66baadc987ece6484c52880bd97232fc0c1396adde4620987785f54d44
cloud-network-config-controller git 8ceee788 sha256:f48e9611092e211e0fbc5c6554165b2686cfdf4cee00b0d553b7e4464432a22e
cluster-autoscaler git eecb123a sha256:5063ce5dc0bc44b97d76e24908d6c55edde4e8b21b653c5f98de7c45790c5bcb
cluster-autoscaler-operator git 40cadf8a sha256:f94c05b777a7e5e5c8af130ff5089fa66f03444bd4dfc6b612a1a3213f6c98d2
cluster-bootstrap git 27bfb59f sha256:4d2bca8314a1f91f88b13488274171075beb6f34ccb84252750627c804d58794
cluster-capi-controllers git 5830a10a sha256:60a1fd31a96ed55654df5e59e605af622286efc368fbf8361b1bddbe4cfd35de
cluster-config-operator git 441d29c9 sha256:d8f3f48d8c7f6960d04cf2e23a4a671bb9e22c5e2b2bd898222f7d80b7036836
cluster-csi-snapshot-controller-operator git 439826e1 sha256:13864be44a6b5acc3caefa28f2535c58f5c24caf75adcf4b03db47a1127975df
cluster-kube-cluster-api-operator git 95ceaa9e sha256:1ca7e3c6e0d050e77a109bdb190020ed6fcb189e0a9117130adaff69530c1cf5
cluster-kube-controller-manager-operator git 0338b3be sha256:7485e43a1e8b818f90a277c77285fb8ee9035f5cd0bfe732f7bcb44a1d831817
cluster-kube-scheduler-operator git 630f63bc sha256:e769e23a7e3a8baab441b2dafb1f7af9c169e954e349b56aa11416dd5c42b280
cluster-machine-approver git 3eba7eed sha256:ca78c859d719bdec10949b962b3ab2f5f09d3230d9b2ffd8bf2e4efea61e42b5
cluster-olm-operator git 27bf70dd sha256:3e9afc857bdd53a1d120df058a9d0db8400c316ca63f5edb312eceb1399c5896
cluster-openshift-apiserver-operator git d26f3002 sha256:ed0f74d0a12ae03131fda0c969b613eb893a54cb2ee2961ca838418359b03c0e
cluster-openshift-controller-manager-operator git bcc371cc sha256:a321872759e35e0e0b63902f42c0b288125644764a471c9112e689e1bf55eea2
cluster-policy-controller git eaea543f sha256:18d6cca60d93483cf186f7339b41e5989916ac74b50eae9a8677ed3a42f8c66d
cluster-update-keys git c0641e08 sha256:74669188022c83d7222c7840cad4d2d92c13864233848cbf986a4231bf9e57e9
configmap-reloader git dc91ddc4 sha256:b52e2b1a39be62324a1f1d6b138e0066241afd887f466708b1b559b5fdf7b57f
csi-driver-nfs git 406cec72 sha256:cdf0fd700159b4397e5c14488e7192bf3a5f1eea3638dd22bfc602379c0c5df6
csi-driver-shared-resource git bc125def sha256:af15c935e2bf3f3fd72e402d45fb2c51b1e567420226c5dbc6a76dd8bbebd338
csi-driver-shared-resource-operator git 1e1194bc sha256:799d72b71334626afce5c886b319e636b8430e496e7b7cf57cb484022f0f17e5
csi-driver-shared-resource-webhook git bc125def sha256:e0bf397c5dc037b10db6a3e185323528d95d688ca4622f8ae802fe7aada5b019
csi-external-attacher git 7da80aab sha256:62a9f9db48d8d81422c23c61d752495d3d56f15fd0b80b877d5e0cdc6e20c04c
csi-external-provisioner git 9e8af011 sha256:6b24e5ea90083b359ae269e8d12774c05ac63c5d78261a96dd3cc488ce922ea0
csi-external-resizer git bdf5bfb4 sha256:bf9c0616612bef874b390212f09bf42cec6cf614e61c47394f8f3f8bf1effc21
csi-external-snapshotter git 5315d37a sha256:b4d054b21be4bbc3781b93489faacf84c3db4b99bb7abc0effb42947f19ffc92
csi-livenessprobe git f5e3ff55 sha256:b8e5f9e1683700013ebecc43db6f88d5e951e295cdc857fae1dcdc49ed06cc26
csi-node-driver-registrar git 8930c368 sha256:93089c79bfb2110785c4078adb3bbf8e46165819d732c12478cadb84ed533ff0
csi-snapshot-controller git 5315d37a sha256:7bb61586d06de622c1bb4edf34971a91683620eaae65c7e1544ffee2a52d525d
csi-snapshot-validation-webhook git 5315d37a sha256:b6c1cbdd6a01b555608fb0bfbcf73fcc1c8241b56620ee4e14d5b50564548e39
driver-toolkit git 1d5732f0 sha256:78828089c880e1c7187e0e61948628721a5d686fc0f13e9804e60897c78594dd
gcp-cloud-controller-manager git 26b43dfc sha256:29b6dc36821c89b028cf10a92c0f985ab6265553ea5c258839c333d30d9761ed
gcp-cluster-api-controllers git 02432df8 sha256:7fd6bf6756f08636e96d9701b59c9a9989b5a31a21b953b7b424144b12a7445a
gcp-machine-controllers git e72657c0 sha256:e86c31e0fad7824c8f3af4962ec2217993fdc291b4a1f745d19be6b2d55a4cb5
gcp-pd-csi-driver git 5ed71c64 sha256:b725ec9505ddcf166196e5c290a2e52a187850671b881206269fe3be4434b395
gcp-pd-csi-driver-operator git 799327f7 sha256:2af12608cd4131ae26feb09ef8905d8834d235f8618819ffb7173eb92ad8e7e6
haproxy-router git 4d9b8c4a sha256:e3573c10e9a398fcd0cbbf00abcfa221c6b4f1cde23f498698e3a01a8965bd0c
ibm-cloud-controller-manager git f961f16d sha256:5ac9fb24a0e051aba6b16a1f9b4b3f9d2dd98f33554844953dd4d1e504fb301e
ibmcloud-cluster-api-controllers git 60b7ca98 sha256:540326263b0c4dd663bcc8c511cba0ae98390fd444d064f4a86fa7c3bcb4c496
ibmcloud-machine-controllers git 1a3a3030 sha256:03c4fae09560d4c0d59179b6d32edac24119669700d9bb1656a773d366390ad0
ironic-machine-os-downloader git 93b8b5fa sha256:df53cf3808a773e5922dddb959b754525fc9c427a8e3532107bf0a9a26e0e2c7
ironic-static-ip-manager git e78e4c3e sha256:6f784f28dfa45944e1135c5db68310b46654756dfd868f4a189694bb79cb14c2
k8s-prometheus-adapter git e4f859be sha256:f89d8077c51cc17fe0a29efb7e7f33ddb6e24f3f2bb5867b9339f9f19f800615
keepalived-ipfailover git b58673a3 sha256:f84465f28b5a9ead270a89609535ba47f96c1fb8503a28f4d97dabafc260a11d
kube-metrics-server git 7938f253 sha256:16246d2b68afef1dfa4cd32ced56b2f81dd36ecb1b79b9da0cad2946419a6802
kube-proxy git 5b658c43 sha256:ca015997203f4bea9a0ee2b0d33fc5e870bfac205f899382379c2ca25bb9db03
kube-rbac-proxy git 8ea2c994 sha256:5b531ec7f933ae84539a51008057f354ef45ed6b869a939aaef1e5e8d35cdeef
kube-state-metrics git 9b67b8d1 sha256:8554ba9833385aabbacc4cd7adf00b750c9f27fbb36aade59638e7ce5c403ce2
kube-storage-version-migrator git 969a60e9 sha256:457d664a8f8e7b643aeecd484ce82308ea700b0cf67cc03a95806d0217898d28
kubevirt-cloud-controller-manager git 3db76104 sha256:da4a56ea36d988fa6d46a6087f80938974b2a6d56c853307b6acc5f92da259a0
kubevirt-csi-driver git 0693093f sha256:8626b11deaf79e0ad7a548ffef29eba913370140e6d48ba61bd66a0cbef54c53
libvirt-machine-controllers git a336f0b5 sha256:8e0f3527ac61a1409830c6482ba4556966e797b257a2ef09222edbda78524876
machine-image-customization-controller git 39480963 sha256:20ae526e946f0c98c7d1fcf793d6b7790c364234b1329226c6c077a42fc70120
machine-os-images git 3cc97098 sha256:3cb43c8ea36b72e268e6af3ceb59793d8b78d3d8c0b71889629983be92420606
monitoring-plugin git aa339e45 sha256:37dada73fff862010dcb30678aede6fd2a09b43073e15c9de011073677d4dcc5
multus-cni git c4aa21b9 sha256:0d1ecd0734857f6ba1f059806d2e9c532e705edac42a8ae3c94cd6cadf63c129
multus-cni-microshift git c4aa21b9 sha256:33d2858578d65a2a1ff5062c224fef2f5a51105609902bb2c04dfe6d90a5c7e8
must-gather git aea114c0 sha256:5bdf174c5ad6a211b2a2d28d682d8c0b56977b0eeceffd954cc301baa6e28147
network-interface-bond-cni git bb911451 sha256:ea21eb905d77161cba3a400a9b63b134ebc3e887a547dee3c4c22043f4877a70
network-tools git 39eca100 sha256:e386bd6b25eb9d12e1ea380e8e19bde61b6d717fc4085c2ff495625bf7b6599c
nutanix-cloud-controller-manager git c9bbc44c sha256:5408ebe818a4445be1518266dc14db1e64fb9da66972854725a494b4b02af27c
nutanix-machine-controllers git f053e5a0 sha256:6b1d5fc58f21054cb3c3b5c8e4e7f77dcaa71924a33d2b47a52ac5197582df1f
oauth-apiserver git fa1f097c sha256:d5cc890484692d1512d5ca0a53ed54e66049c627224fdf04223b338e5197e613
oauth-proxy git 30f80124 sha256:be4547dd21314faacf9ad252e8aa39de548642a732ec5adb1734a85cc7da0435
oauth-server git 3739138c sha256:2ce47e951b81a533ccf6b89392ebf63e6bd84e3b78722e542eab91fc3e42e133
olm-catalogd git 79975a51 sha256:439afd4fc583e914cadd1027a1e56d3f436814598f2e1da3cc0945df74675f37
olm-operator-controller git 80b8649c sha256:750fd529fffb739388fc015855bc2e3f69bec4928858c86f1b1b068973fb161d
olm-rukpak git 282cc84c sha256:71f62b3e0a6a9ab2dd7f750f81906ecf498ded8b085264df8cd2a75323cdf3f6
openshift-apiserver git 6b518412 sha256:a0751cb472a149f5e25e43fdf83510b0075b6c7d652ea36b46a54486053f70cf
openshift-state-metrics git 59b8a0ff sha256:a9df6414ffd6e6a29201630d1517dd614eba61af23cb584fcd22ecf7d441cdd4
openstack-cinder-csi-driver-operator git 85b52097 sha256:6f91af6b1418a3c8ddae560d169a38472d03b48fe1714d7b7cfca8221786da81
operator-marketplace git 7db179fb sha256:656c0018bc1b5b588959391665a057b53cd2132f471560d533da31dfce4ecde2
ovirt-csi-driver git 1db726a9 sha256:a0a1e2e1a71050e19650a7118fbfdde3a0ae28718f663bfc516c4f626a0efcae
ovirt-csi-driver-operator git ac852f3e sha256:ba327fd60702ac46173b45e1349d633de2f01de662077cd1257feaa5c69325fc
ovirt-machine-controllers git abb91c84 sha256:a1b57319d321f7878d3863eab736aa673a2246a263c603806c4f7d784bb9c425
powervs-block-csi-driver-operator git 9c5dd8d1 sha256:045ce408adafc64bb9814d7de8882f8f9e8d3c2d7902c7498aad3a480d2dede7
prom-label-proxy git 5e14722e sha256:f835df738287251f9c387c5ec648e82a36badbde02543e46ae5f9dddae60a601
prometheus-alertmanager git e9aea929 sha256:efebe7eaf67f0bd2eac4864a937321c1b0b5c859277cb028b85f9a46b84fcdc9
prometheus-node-exporter git 29ba26d1 sha256:ea81b0bb0ebf3340b6da8ba4ef43c2f8f2eeb504eafd151fe1091985bc5cd319
rhel-coreos sha256:37a57ba7f66cd31f65b24f91a44930eb5056d6e3186efc2bad8ac6011d0c3bc5
rhel-coreos-extensions sha256:fda06d12db2bb108f76399825ebdb186f78331c50b08ee731bfa0020d00251d4
route-controller-manager git 3112b458 sha256:e67fc264eb509faebc298888318d679dbffcf6fa88fda091dccf6ec9ecd379d5
sdn git 5b658c43 sha256:2c6396dcb07d870949289991fb33a883d760aba5190696aa316e9e2ad6e85b03
service-ca-operator git 538c7b98 sha256:f1825699b341e19a2b0e5b33f6cba854b7e0a588ab419870624041fbca00122a
telemeter git c1ecd105 sha256:daa8b0d9fdce554f3291326691906ed8bc3e09977d9ac9d51c8f7859bd7c3502
thanos git 85eee25c sha256:070740907708e2c9f4b06b4b16aad06a2d796385ef2c950778c624ce71e8581a
vsphere-cluster-api-controllers git be22f10a sha256:e4d67a16eaced69fc299b4a1de0f94def2c78122aacd56195d39d1759ec135c7
vsphere-csi-driver git 3cd689f3 sha256:280f290c7291ed2a0c01e8beda7daf06c6ff4f61966fdff782982cc07464d3b3
vsphere-csi-driver-operator git 483de9c5 sha256:f2e50fd1da9746fcc72ac3d7f8ffc41a6a08a69fdbf3e4104333af68d638f9d4
vsphere-csi-driver-syncer git 3cd689f3 sha256:a3598df9e5c9462910cb8900e1cef5a2cb9151b01fa04e50f6ea2005c54711c1

agent-installer-api-server

OCPBUGS-36577: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#6752) #6752
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-36779: Reload host inventory on conflict (#881) #881
Full changelog

apiserver-network-proxy

OCPBUGS-38062: Revert “Agent: Respect HTTPS_PROXY env vars for proxied connections” #59
Full changelog

azure-file-csi-driver

OCPBUGS-39145: bump mount-utils to treat ENODEV error as corrupted mount #76
Full changelog

azure-machine-controllers

CFE-1050: Added support of capacity reservation group #111
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-39287: Fix var_files syntax to work on older version of ansible #8936
OCPBUGS-41929: Add AWS c7g,m7g,r8g to tested instance types #9009
OCPBUGS-36855: Openstack UPI - Reintroduce unique resource names. #8724
OCPBUGS-39082: incorrect folder gen, workaround govmomi vm folder path bug #8912
OCPBUGS-39496: capi/aws/byo-vpc/multi-cidr: fix group rules #8953
OCPBUGS-36861: Updates GCP terraform worker role #8939
OCPBUGS-38956: failed to install Nutanix OCP 4.16 cluster with DHCP #8905
OCPBUGS-38822: upstream capv bug causes session timeout #8891
OCPBUGS-39468: Enable TLS for virtual media in initial ironic deployment #8955
OCPBUGS-37606: vSphere validation fails if dc is in a folder #8777
OCPBUGS-39206: Update GCP Disk Types 4.16 #8920
OCPBUGS-39087: aws: validate public-only subnets configs #8913
OCPBUGS-38821: [release-4.16] Azure: Disable shared key access when using a managed identity #8855
OCPBUGS-38302: upi/aws: update lambda runtime python version #8897
OCPBUGS-38826: aws: add support for clusters with public-only subnets #8892
OCPBUGS-38517: [release-4.16] capi/aws: bump provider for instance register fix #8848
OCPBUGS-38196: Remove timed context for gcp client #8818
OCPBUGS-38502: PowerVS: Fix mad system pool #8846
OCPBUGS-37838: fix bogus analyze message when gather fails #8794
OCPBUGS-37492: openstack: Fix security group tagging #8767
OCPBUGS-37607: bootstrap gather fails in vsphere, only ipv6 address used #8778
OCPBUGS-37494: aws: do not require create permissions when BYO IAM role #8768
OCPBUGS-37510: [release-4.16] aws: bump CAPA for subnet tagging fix #8772
OCPBUGS-37180: ic: fix typo in warning message #8769
OCPBUGS-36968: [release-4.16]: capi/aws: bump provider for ingress rules fix #8734
OCPBUGS-36965: destroy/gcp: set value for DiscardLocalSsd #8733
OCPBUGS-36720: CORS-3582: capi: remove unused feature gates #8716
OCPBUGS-36890: [release-4.16] capi: start controllers after WaitGroup is created #8726
OCPBUGS-36091: [release-4.16] bump go-retryablehttp for CVE fix #8654
OCPBUGS-36777: Cleanup capi artifacts #8719
OCPBUGS-36607: aws: remove terraform configs #8705
OCPBUGS-36324: update RHCOS 4.16 bootimage metadata to 416.94.202406282145-0 #8692
OCPBUGS-36447: capi/aws: disable EKS controller in CAPA #8694
OCPBUGS-36351: vSphere - If the folder pre-exists do not tag #8683
Full changelog

baremetal-operator

OCPBUGS-39490: Disallow fetching secrets from namespaces different from the host’s one #378
OCPBUGS-38938: [OCP] Ability to disable agent power off after deployment #372
OCPBUGS-37765: HostFirmwareComponents doesn’t show the new firmware information in Status Components #355
OCPBUGS-37262: fix(redfish): set correct idrac-redfish management interface #366
OCPBUGS-36673: [4.16] Firmware Update causes BMH to get stuck in Preparing #363
Full changelog

baremetal-runtimecfg

OCPBUGS-35891: Change mechanism of debug flag #323
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-39341: Ignore pruning when deployment points to replicationcontroller #1862
OCPBUGS-37853: Revert “OCPBUGS-35994: pkg/cli/admin/upgrade/rollback: Drop this command” #1839
OCPBUGS-31639: Bump k8s dependencies to 1.29.7 #1824
OCPBUGS-36764: pkg/cli/admin/upgrade/rollback: Drop this command #1820
OCPBUGS-36328: Set required-scc annotation to privileged for node debug pods #1816
OCPBUGS-36379: bump(k8s)=1.29.6 #1810
Full changelog

cloud-credential-operator

OCPBUGS-41234: List secrets in batches to avoid api timeout #757
OCPBUGS-38376: Update google.golang.org/grpc v1.65.0 #748
OCPBUGS-37418: SNYK ignore go-client misreporting #735
OCPBUGS-36834: GCP passthrough permissions check to ignore problematic permissions. #714
OCPBUGS-36954: Update to azidentity v1.7.0 #727
OCPBUGS-36031: IBM/go-sdk-core update to v5.6.3 #718
Full changelog

cluster-authentication-operator

OCPBUGS-34790: update OpenShift favicon to new brand standard #676
NO-JIRA: Fixes for Keycloack IDP test and unit tests #683
Full changelog

cluster-baremetal-operator

OCPBUGS-31961: bump x/net to 0.23.0 #431
OCPBUGS-36415: set required-scc for openshift workloads #433
OCPBUGS-36285: Move pull secret from env var to VolumeMount in metal3-image-customization container #436
OCPBUGS-36285: Mount htpasswds as volumeMounts in metal3-httpd container #434
Full changelog

cluster-capi-operator

OCPBUGS-37441: fix: sort CredentialsRequest manifests after namespace #190
OCPBUGS-37795: fix: align openstack e2e branch #192
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-36317: PowerVS: Remove bind address #358
Full changelog

cluster-config-api

OCPBUGS-38773: remove duplicate featuregate ‘ExternalRouteCertificate’ #2007
OCPBUGS-37857: [release-4.16] OCPBUGS-37852: a rule to check if the featureSet is one of the known set of features #1985
Full changelog

cluster-control-plane-machine-set-operator

CFE-1087: API Bump for capacity Reservation #314
Full changelog

cluster-dns-operator

OCPBUGS-37078: Bump version of DNSNameResolver controller #419
Full changelog

cluster-etcd-operator

OCPBUGS-37820: ensure ordering in member health checks #1311
OCPBUGS-36489: parallelize member health checks #1290
Full changelog

cluster-image-registry-operator

Revert “[release-4.16] OCPBUGS-41903: pkg/operator/azurepathfixcontroller: do not sync on non-azure storage” #1119
OCPBUGS-41903: pkg/operator/azurepathfixcontroller: do not sync on non-azure storage #1115
OCPBUGS-39098: Avoid Shared Access Key usage for Azure Storage Account when using Managed Identity based auth #1104
OCPBUGS-38894: pkg/resource/azurepathfixjob: invoke update-ca-trust extract with –output #1102
OCPBUGS-38894: pkg/resource: invoke update-ca-trust extract with –output #1098
Full changelog

cluster-ingress-operator

OCPBUGS-39324: Refine logging for accurate infra CR status updates #1139
OCPBUGS-39323: Ingress operator status not degraded when canary route fails #1138
OCPBUGS-32887: Delete and recreate canary route to clear spec.host #1099
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-37563: add disabled syncer as reason to CFE for PSA #1714
OCPBUGS-35303: manifests: add ownership annotation for kubelet-bootstrap-kubeconfig #1701
OCPBUGS-35831: add SNO control plane high cpu usage alert #1705
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-38269: bump protobuf #115
Full changelog

cluster-monitoring-operator

OCPBUGS-41910: filter alerts sent to Telemeter #2471
OCPBUGS-39170: Backport #2441 for 4.16 #2447
OCPBUGS-36907: Add deprecated config runbook #2411
OCPBUGS-36717: Exclude windows nodes from kubelet servicemonitor #2408
OCPBUGS-36482: add runbook_url annotations #2404
Full changelog

cluster-network-operator

OCPBUGS-37763: Handle random crictl errors in iptables-alerter #2452
OCPBUGS-41555: HyperShift: do not use antiaffinity on single replica control planes #2494
OCPBUGS-37937: Add proxy env vars to onvkube-node #2457
OCPBUGS-41607: set required-scc for openshift workloads #2496
OCPBUGS-35407: Use applyconfigurations for updating network.oprerator status #2413
OCPBUGS-37362: Fix IC distributed control plane alerts #2445
OCPBUGS-35836: Propogate hypershift control plane priority class override to multus and preserve container resource requests #2417
Full changelog

cluster-node-tuning-operator

E2E: Remove checking of reserved cpus in irqbalance file (#1156) #1156
Fix the destination of asset’s copy (#1134) #1134
Full changelog

cluster-samples-operator

OCPBUGS-38159: add owners #555
Full changelog

cluster-storage-operator

OCPBUGS-36969: STOR-1839: VSphereDriverConfiguration feature Accessible-by-default #491
OCPBUGS-35298: revert vsphere problem detector controller name change #481
Full changelog

cluster-version-operator

OCPBUGS-37853: Revert “OCPBUGS-35994: Revert “OCPBUGS-24535: pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream”” #1077
OCPBUGS-36898: vendor: Update openshift/api to pick up zz_generated.crd-manifests #1069
OCPBUGS-36764: Revert “OCPBUGS-24535: pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream” #1065
Full changelog

console

OCPBUGS-34518: Restore user toggle when authentification is disabled #13902
OCPBUGS-41619: Use vCenterCluster value from CM as primary resource #14268
OCPBUGS-37046: Fix TypeError: Cannot read properties of null (reading ‘metadata’) in Topology view #14059
OCPBUGS-38911: Values entered into the Instantiate Template form are automatically cleared #14187
OCPBUGS-38914: Unrelated readme opened when opening CodeReady workspaces from Quarkus using s2i quickstart #14188
OCPBUGS-38968: A value submitted in From view is wrapped with single quotation after switching to Yaml view. #14193
OCPBUGS-38424: fix bug where cluster version text appears black in da… #14144
OCPBUGS-38464: correct casing in “Lightspeed” #14148
OCPBUGS-37430: Fix utilization card limits/total display #14082
OCPBUGS-36510: DeploymentConfigs deprecation info alert should not present on the Edit deployment page #14031
OCPBUGS-37954: No access to list pipelines.tekton.dev prevents from using Delete application form #14107
OCPBUGS-36601: Tooltip on Pipeline when expression is not shows #14033
OCPBUGS-38803: CONSOLE-4108 [4.16 backport] Show deprecated operators in OperatorHub #14095
OCPBUGS-37048: Fix “Auto deploy when new image is available” becomes unchecked when editing a deployment from web console #14060
OCPBUGS-35839: Fix placement of icons on WebKit #13988
OCPBUGS-35271: Fix password set to Secret created through Start Pipeline form #13954
OCPBUGS-38093: correct link for Lightspeed operator #14112
OCPBUGS-36484: Revert - terminal: use username if uid is not present #14027
OCPBUGS-37097: Add useQuickStartContext hook and expose it via dynamic plugin API #14070
OCPBUGS-36864: maintain session across tabs #14051
OCPBUGS-36620: Redirects to new PipelineRun logs URL from old PipelineRun logs URL #14035
OCPBUGS-36759: RWOP accessMode is not available on OpenShift console UI #14040
OCPBUGS-37063: hide ‘View all steps in documentation’ for ROSA and OSD #14069
OCPBUGS-36411: fix BMH restart annotation #14022
OCPBUGS-36841: ensure correct API version for OperandDetails #14049
Full changelog

console-operator

OCPBUGS-34783: set required-scc for openshift workloads #908
OCPBUGS-34012: Cache organization ID #916
OCPBUGS-33788: Tolerate the absence of ingress capability on HyperShift clusters #910
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-37725: Update owners #166
Full changelog

coredns

OCPBUGS-37078: UPSTREAM: <carry>: openshift: Bump the version of ocp_dnsnameresolver external plugin #127
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-38167: rebase CPO on 4.16 #291
Full changelog

csi-driver-manila-operator

OCPBUGS-30438: Bump protobuf dependency #237
OCPBUGS-38013: Set required-scc for openshift workloads #235
Full changelog

docker-builder

OCPBUGS-30455: bump google.golang.org/protobuf to 1.33.0 #402
Full changelog

docker-registry

OCPBUGS-39412: pull upstream distribution changes to use a consistent multipart chunk size #410
Full changelog

egress-router-cni

OCPBUGS-35525: update to go 1.21 and k8s.io mods to v0.29.2 #85
Full changelog

etcd

OCPBUGS-34690: Rebase etcd 3.5.14 openshift 4.16 #274
Full changelog

hyperkube, pod

OCPBUGS-39015: Bump k8s api to 1.29.8 #2066
OCPBUGS-36773: UPSTREAM: <carry>: Disable vSphere tests with pre-provisioned volumes #2021
NO-JIRA: update downstream owners #2049
OCPBUGS-37621: Bump k8s api to 1.29.7 #2039
OCPBUGS-19802: Bump 4.16 runc #2032
Full changelog

hypershift

NO-JIRA: chore(deps): update golang docker tag to v1.23 (release-4.16) #4729
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.34 (release-4.16) #4728
NO-JIRA: chore(deps): update konflux references (release-4.16) #4727
OCPBUGS-38058: Add HTTP konnectivity proxy to OAuth server #4496
HOSTEDCP-1955: bump CCO version #4696
OCPBUGS-34803: cmd: report server version, supported OCP #4141
OCPBUGS-39293: copy image-registry AdditionalTrustedCA configmap into HC openshift-config #4647
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-9 (release-4.16) #4685
OCPBUGS-38062: [release-4.16] Use HTTP proxy for ingress controller #4688
NO-JIRA: chore(deps): update konflux references (release-4.16) #4684
OCPBUGS-39447: handle version skewed NodePools that do not have rhel9 binaries #4664
HOSTEDCP-1895: [release-4.16] Allow setting Kube APIServer maximum requests in flight #4551
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-7.1724661022 (release-4.16) #4600
chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.33 (release-4.16) #4602
chore(deps): update konflux references (release-4.16) #4599
OCPBUGS-38942: copy oapi ca-trust recursively when building trust anchor #4615
NO-JIRA: Flaky cert validation test #4622
OCPBUGS-38259: Set KCM node monitor grace period #4520
OCPBUGS-38726: fix: bump github.com/IBM/go-sdk-core/v5 #4611
HOSTEDCP-1764: retrieve registryOverrides when ImageStream is not ava… #4541
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-7 (release-4.16) #4525
OCPBUGS-36781: Set Azure VM identity if user assigned identity set #4341
OCPBUGS-37936: set proxy envvars on aws and azure CCMs #4476
OCPBUGS-38486: hcco: reconcile apiserver config into hosted cluster #4559
NO-JIRA: fix(KONFLUX-3663): format PipelineRun files and upload SAST results #4534
OCPBUGS-38131: Let the CPO oidc check resolve through data plane #4505
NO-JIRA: test: relax mgmt KAS egress check #4561
chore(deps): update quay.io/openshift/origin-base docker tag to v4.16 (release-4.16) #4528
chore(deps): update golang docker tag to v1.22 (release-4.16) #4527
NO-JIRA: Update Konflux references (release-4.16) #4524
OCPBUGS-34801: remove weak ciphers from security profile #4518
OCPBUGS-37060: OCPBUGS-35905: E2E test to verify openshift-apiserver TLS certificates #4366
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9 (release-4.16) #4482
NO-JIRA: chore(deps): update konflux references (release-4.16) #4481
OCPBUGS-37065: OCPBUGS-35899: Doubled machineHealthCheck timeout on Agent and None #4367
OCPBUGS-30282: Multiple MachineConfigs in one CM #4398
OCPBUGS-36937: [release-4.16] Add HTTP(s) konnectivity proxy and use it with OpenShift APIServer #4357
OCPBUGS-36766: Delete IDMS in dataplane once HCP ICS field is removed #4434
NO-JIRA: Konflux migration for release-4.16 #4436
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v8.5.11 (release-4.16) #4430
HOSTEDCP-1569: test: e2e: skip unknown conditions instead of erroring #4440
OCPBUGS-37645: Set right endpointSlice port #4431
OCPBUGS-37214: Separate ibmcloud kms encryption configuration types #4380
OCPBUGS-37302: fix(api): Nodepool CEL validation fix #4395
NO-JIRA: Red Hat Konflux update hypershift-release-mce-26 #4392
OCPBUGS-37241: extract rhel9 MCO binaries for rhel8 based MCO images #4383
NO-JIRA: [release-4.16] test/e2e: remove api budget checks #4368
HOSTEDCP-1795, HOSTEDCP-1796: Customize the self-generated cert validity and rotation #4371
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-2 (release-4.16) - abandoned #4364
NO-JIRA: trivial typo fixes to configuring-storage.md #4353
OCPBUGS-36849: Add newline after TLS certs referenced by image.config #4352
OCPBUGS-36589: Fix Hypershift dump for non-OpenShift Management Clusters #4317
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.10-1.1719562237 (release-4.16) - abandoned #4328
OCPBUGS-36358: enable audit log for oauth-openshift #4302
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-36067: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #71
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-36073: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #120
Full changelog

insights-operator

OCPBUGS-38021: Integration of the OpenStack CRs into the insights-operator (#974) #974
Add haproxy metric (#977) #977
OCPBUGS-37671: Ingress controller related certificates’ validate dates gathering (#970) #970
fix the configmapobserver notifications (#969) #969
Full changelog

ironic

OCPBUGS-38510: set min version for python3-webob #553
OCPBUGS-33376: bump werkzeug #534
OCPBUGS-36838: Update Jinja2 #521
OCPBUGS-36285: Read ironic and inspector htpasswds from files #517
Full changelog

ironic-agent

OCPBUGS-38510: set webob and bump werkzeug #149
Full changelog

machine-api-operator

CORS-3648: Add the hyperdisk-balanced disk type #1279
CFE-1051: Adding web-hook validation for capacityReservationGroupID #1263
Full changelog

machine-config-operator

OCPBUGS-41806: When newly built images rolled out, the update progress is not displaying correctly (went 0 –> 3) #4584
OCPBUGS-41518: CVE-2024-3727 ose-machine-config-operator-container: containers/image: digest type does not guarantee valid type #4569
OCPBUGS-38997: Machine-config daemon ListPools panic during tech-preview CI runs #4550
OCPBUGS-38711: SCC-pinning for openshift workloads #4539
OCPBUGS-36850: Port number 22623 exposing weak ciphers to external client from master node IP #4556
OCPBUGS-38373: Revert “MCD-pull: run after network-online.target in Azure” #4528
OCPBUGS-36171, OCPBUGS-36172: fix secret canonicalization #4432
OCPBUGS-37759: Guard MachineOSBuild & MachineOSConfig informers with feature gates #4505
OCPBUGS-37550: On-Prem resolv prepender to watch for NM changes #4498
OCPBUGS-37485: kubelet: boot without PSI for performance concerns #4486
OCPBUGS-37840: [release-4.16] Introduce versioning for Auto Node Sizing feature #4382
OCPBUGS-35891: Make logging configurable for on-prem components #4418
OCPBUGS-37470: Nodes are drained twice when an OCB image is applied #4484
OCPBUGS-37460: Openshift uncordoned compute-node that was intentionally cordoned #4483
OCPBUGS-37428: Machine-config operator should not hot loop generating ValidatingAdmissionPolicyUpdated events #4482
OCPBUGS-36775: templates: run disable-mglru conditionally #4462
OCPBUGS-36330: daemon: Handle correctly OS Version for 4.1 and 4.2 bootimages #4445
OCPBUGS-36536: MCD-pull: run after network-online.target in Azure #4453
Full changelog

multus-admission-controller

OCPBUGS-36341: Update owners #87
Full changelog

multus-networkpolicy

Update owners (#57) #57
Full changelog

multus-route-override-cni

OCPBUGS-37726: Update owners #58
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-37707, OCPBUGS-37708: [release-4.16] align api calls timeout and skip pods marked for deletion #304
OCPBUGS-37723: Update owners #294
Full changelog

network-metrics-daemon

Correct 4.16 owners file (#98) #98
Full changelog

oc-mirror

OCPBUGS-38035: Rebuild catalogs – without cache generation (#905) #905
OCPBUGS-36410: fix: creates tags for release images (#901) #901
OCPBUGS-37055: Use proxy for HTTP request release signatures (#893) #893
OCPBUGS-37040: use current working-dir for fetching release content for disk to mirror (#892) #892
OCPBUGS-36498: Fix to ensure invalid catalogs are skipped (#889) #889
OCPBUGS-362214: Fix V2 DiskToMirror should not require internet access (#884) #884
Full changelog

openshift-controller-manager

OCPBUGS-39191: replaces deprecated square/go-jose wtih go-jose/go-jose #329
OCPBUGS-37526: Race condition when deleting ServiceAccount #324
OCPBUGS-36862: 4.16 “Bad” reconciliation loops can cause unbounded dockercfg secret creation #323
Full changelog

openstack-cluster-api-controllers

OCPBUGS-34931: rebase on release-0.10 (to fix trunks deletion) #321
OCPBUGS-37967: rebase CAPO for 4.16 #319
Full changelog

openstack-machine-api-provider

OCPBUGS-34931: bump CAPO to v0.9.2 #124
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-41540: [4.16] add optional schema migrations; default to olm.bundle.object instead of olm.csv.metadata (#1384) #859
OCPBUGS-41677: [4.17] adds paginating lister for evaluating CRs’ upgrade fitness versus new CRDs. #863
OCPBUGS-41557: Fix e2e flake: upgrade CRD with deprecated version #861
OCPBUGS-41217: (fix) registry pods do not come up again after node failure (#3366) #854
OCPBUGS-38290: release-4.16 Resolver: list CatSrc using client, instead of referring to registry-server cache #838
OCPBUGS-38129: [release-4.16] Update junit report file name to show spec results on Test Grid #833
OCPBUGS-37456: Updating ose-operator-framework-tools-container image to be consistent with ART for 4.16 #826
OCPBUGS-37559: [release-4.16] Update e2e config and backport list of flakes #814
OCPBUGS-37018: Bump github.com/containers/image/v5 #822
OCPBUGS-36450: Can’t install operator on 4.15 after uninstalling it on a prior version #809
OCPBUGS-25019: fix xplat compile for of-tools image; hide utest files from git; use rhel8 art builder image #793
OCPBUGS-36137: fix sorting unpack jobs #799
OCPBUGS-34979: Updates default security context behavior for catalog source pods #788
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-38697: Use more exact name match when deleting static routes to HO nodes. #2282
OCPBUGS-24386: [release-4.16] EgressService: Fix ETP=Local ingress reply for LGW #2278
OCPBUGS-38705: Delete EgressIP LRP stale nexthops when node is not found #2271
OCPBUGS-38054: Fix per-pod MCS/metadata blocking #2248
OCPBUGS-38699, OCPBUGS-38704: EgressIP VRF support & ignore localnet patch ports when bootstrapping #2267
OCPBUGS-37939: [release-4.16] Bump OVSDBTimeout and make it configurable. #2244
OCPBUGS-37362: Fix registering northd metrics on appropriate nodes #2232
OCPBUGS-36608: [release-4.16] ovspinning: Set affinity of each thread #2220
OCPBUGS-36486: Fix race condition when creating/deleting namespace address set #2218
OCPBUGS-35061: Allow ANPs at same priority #2205
Full changelog

powervs-block-csi-driver

OCPBUGS-36097: Fix CVE-2024-6104 by updating http-retryable to 0.7.7 #88
Full changelog

powervs-cloud-controller-manager

OCPBUGS-36107: UPSTREAM: <carry>: Fix go-retryablehttp CVE 4.16 #73
Full changelog

powervs-machine-controllers

OCPBUGS-41976: Update go.mod to fix CVE - 4.16 #84
Full changelog

prometheus

OCPBUGS-39179: Restore Prometheus functionality to accept samples with different timestamps from the same series in a single scrape. #224
OCPBUGS-36918: cherry-pick upstream fix to make PrometheusRemoteWriteBehind fire when remote endpoint is never reached. #214
OCPBUGS-37446: backport of upstream fix #217
OCPBUGS-36854: cherry-pick upstream remote-write fix #212
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-38399: feat: sync proxy settings in Alertmanager configuration #299
Full changelog

tests

OCPBUGS-39135: Bump timeout for the pod-network-service endpoints check #29052
OCPBUGS-41611: Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token [apigroup:build.openshift.io] #29079
OCPBUGS-38707: run vsphere driver config test on non techpreview clusters #28992
OCPBUGS-38788: [4.16] egressfirewall: skip ping tests in case of hypershift kubevirt on Azure infra #28938
OCPBUGS-38015: vertical scaling test should not rely on CPMS replicas #28981
OCPBUGS-37771: fix pod not returning success on ‘Managed cluster should verify that nodes have no unexpected reboots #28959
OCPBUGS-36744: Expand allowance for kubelet metrics api endpoint outages during node upgrades #28928
OCPBUGS-36182: Removes dependency on samples operator images #28904
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-37660: Bump otelgrpc to v0.53.0 #72
Full changelog

vsphere-problem-detector

OCPBUGS-37735: Drop event when CheckDefaultDatastore fails #168
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github