4.16.16

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.16.16-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.16-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.16-micro Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.16-micro Succeeded periodic-ci-openshift-release-master-ci-4.16-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.16-fips-payload-scan
- gcp-ovn-rt-upgrade-4.16-minor Succeeded periodic-ci-openshift-release-master-ci-4.16-upgrade-from-stable-4.15-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.16 Succeeded periodic-ci-openshift-hypershift-release-4.16-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.15.18, 4.15.19, 4.15.20, 4.15.21, 4.15.22, 4.15.23, 4.15.24, 4.15.25, 4.15.26, 4.15.27, 4.15.28, 4.15.29, 4.15.30, 4.15.31, 4.15.32, 4.15.33, 4.15.34, 4.15.35, 4.15.36, 4.16.0, 4.16.1, 4.16.10, 4.16.11, 4.16.12, 4.16.13, 4.16.14, 4.16.15, 4.16.2, 4.16.3, 4.16.4, 4.16.5, 4.16.6, 4.16.7, 4.16.8, 4.16.9

Upgrades to:

4.17.8 (changes) - Success
4.16.26 (changes) - Success

Loading changelog, this may take a while ...

Changes from 4.16.0

Created: 2024-10-03 14:01:55 +0000 UTC

Image Digest: sha256:bd78fab2d62370a0a051c4284239c81e97304cf4cc63b97c194b7a9e1ff3235d

Release 4.16.16 was created from registry.ci.openshift.org/ocp/release:4.16.0-0.nightly-2024-10-02-220852

Components

Kubectl upgraded from 1.29.1 to 1.29.7
Kubernetes upgraded from 1.29.5 to 1.29.8
Kubernetes Tests 1.29.0
Red Hat Enterprise Linux CoreOS upgraded from 416.94.202406172220-0 to 416.94.202410020522-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
ExternalRouteCertificate (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)

New images

operator-framework-tools git c50e9ce2 sha256:da29f4168d13b9eab798c007438e77c576a11eaa357a8a4cbe80ee979bbb05c1

Rebuilt images without code change

agent-installer-node-agent git 9ca7b58d sha256:3c3071625e35f1c0be78c62d2f2a0b5b6f0f01f29cad64564358ef4186f7bc59
agent-installer-utils git 6e6bb40d sha256:4f4742f7a79c7532120df580d8b9491ad046939f01bd53b591b0458015378ed3
alibaba-cloud-controller-manager git 97e8335e sha256:ea7a5acd0df518ede61ef8ec4db40667f9b266cde6ade6f0ffe3be6e4c88775e
alibaba-machine-controllers git 064d4624 sha256:d1e3fed50f5b4f7802bf41bda2ad0c9e1079bb41295d8439c7b06c8dac492e48
aws-cloud-controller-manager git a53e9def sha256:2e8f37234bc801ccf23b94dc1c6c6af3211b6f234e547d3bf5ff0ffdd651f245
aws-cluster-api-controllers git aaaf00b1 sha256:ca402e778775cf8610e4c7d247b4702727b8c03e89b8b16bcde051de11c52f0b
aws-ebs-csi-driver git 1d29a74a sha256:933afae8e4703ee258396a7fac89f3b897e0e9a772e75787f11c729ef4f19d08
aws-ebs-csi-driver-operator git ff69cd03 sha256:68171b2d39113ab8e6468a4a4a7dd4cccd768df4cff1351d6f65d0b58f7744c6
aws-kms-encryption-provider git da90fb7c sha256:7460081ddaf409891100dad0bbf264e09a2ed75a5daab332610837c6091ca6ce
aws-machine-controllers git 61d60f6c sha256:e062a25836afeeb7287249c070df92c3e9a2a1f152cbde99d29b275c4792133f
aws-pod-identity-webhook git 746491a6 sha256:5399da05185695216989b878d4a12d4e92416e7908defbbbac0c9c1f58978c7e
azure-cloud-controller-manager git 0e955329 sha256:72b513406cd5ea37d88c98e876715c04c283e83a7530dbb660c3c301a393afe3
azure-cloud-node-manager git 0e955329 sha256:83cf0690693d6737ecd89816e393d6f25f78fb2b689724ae78361a79c7768541
azure-disk-csi-driver git 6b55f6fb sha256:b22b0397f47418a9c01917062dfe78159a4bffbadfcc7633f5c9ab9550e81e6b
azure-disk-csi-driver-operator git ff69cd03 sha256:ad3f9f3f305c96ec69f3013411b7ece702a438789f31f9396b8d82f0599e7d6a
azure-file-csi-driver-operator git ff69cd03 sha256:ae28d58b4a0ad3edf018de74c517131e9cdc435d3f41891a07ea1ddcb2279998
azure-kms-encryption-provider git bc92347b sha256:f203347886da20ec203893b3244b60963d8bd3e9d781e044058af632ffe2c8c7
azure-workload-identity-webhook git 4aca092a sha256:69f6ffedbb428a25407406e804d3a1b735931c375e30263edac41bf581c8b20d
baremetal-machine-controllers git 11ba601f sha256:4cd726ce3ab613c3046f02b11cd1224529a6fb95112ced02820bd54854cce699
cloud-network-config-controller git 8ceee788 sha256:a7f63d6643fe81281732276c56d1e75b5e6065989badbba43e8bfd885a7acac8
cluster-autoscaler git eecb123a sha256:02dfe00e72c8d8ec065cad164f557ece932d133f8e0f69641ea9654422b8eb56
cluster-autoscaler-operator git 40cadf8a sha256:7105f48c069729a8037ab6ddc160e31bcbbb8a513949873087afed238bd0d182
cluster-bootstrap git 27bfb59f sha256:8beccd525b8723ef1133ff016bc7fb70bf6c96ab5afd8757655620ebdda1ef1c
cluster-capi-controllers git 5830a10a sha256:9fa080637dd3c79b02fda03cca881542603b922976cdb26ca2aca5ca140bc555
cluster-config-operator git 441d29c9 sha256:c857b56aae557e92127a9fc1b6fb57929c2cb448eed10fd8e0d8a2edbbdf7d1b
cluster-csi-snapshot-controller-operator git 439826e1 sha256:e959fc784a5d07407cbe1943b987c40b50da840a9d690ba946dc239e078531bb
cluster-kube-cluster-api-operator git 95ceaa9e sha256:e6607cd51559f53e6432a4f0ea62d9f5dc2bc6ca57652264ea60522c2a19e12c
cluster-kube-controller-manager-operator git 0338b3be sha256:a032ad404a81ef865bf269cac888d638e710892345ab2ffd7377a7ebfde1b42f
cluster-kube-scheduler-operator git 630f63bc sha256:aca1f9d1c886bb14309c4d1ef9c9e54b6507c5a61b6c75aef847e7bd497f99bf
cluster-machine-approver git 3eba7eed sha256:e76d3f7e076257b5c22912377d2b27ae442e02184ee956392aa95cfcb4d7411a
cluster-olm-operator git 27bf70dd sha256:9a3177c0895de41fad2fa86ec1a5bc515db3e2d98cc40c07e01b68a46109f430
cluster-openshift-apiserver-operator git d26f3002 sha256:8dc70e98eead753a989705b56de326b89c6273f41838f718692a5a51e5d7109e
cluster-policy-controller git eaea543f sha256:8be46ad0a8d0f97e9df5746fd7183c32f74221b7b39e06dcafbbad4136b432eb
cluster-update-keys git c0641e08 sha256:191d2ca66ac0e92c555f3d23488a804a520eb6f41fd4ecb7a479f31fee050874
configmap-reloader git dc91ddc4 sha256:a3a2ea42793472be0bbcae0b19e0a85c136c6f5b588b6f4ad61119df378d5cf6
csi-driver-nfs git 406cec72 sha256:1887000754f427f35b9cf610f754307f26b2e59c803fd32aa111a7e45a36752c
csi-driver-shared-resource git bc125def sha256:e72c1cae0d72836b86a516c3b26a57f477764cbc6ece400eb9d54339ff925e76
csi-driver-shared-resource-operator git 1e1194bc sha256:33c099fe7da772893944118e77933c57b3f42a7bba6d627b0510634bf188faca
csi-driver-shared-resource-webhook git bc125def sha256:616267d404f4ae99963fe3cb8a29761e3b2ad098a26b76befec8e9cce84f9d01
csi-external-attacher git 7da80aab sha256:18f4a510c4b26b12fc5257d04a1a167e8e1b721f93c3d2d4bfe3756d0282be5e
csi-external-provisioner git 9e8af011 sha256:a2b936748a6fd8281c71dc6ec389a56e28bee2531e46721e677ca52ad950327f
csi-external-resizer git bdf5bfb4 sha256:773fa229b7930a2c22e848a3147cba42bf397e491b6e063c57bf2c8a4024af73
csi-external-snapshotter git 5315d37a sha256:572e6a139ddf4d26120846323994848180108aba5f2302890a00da8b8b520989
csi-livenessprobe git f5e3ff55 sha256:f3084026bbbb6603717fe0ad04df7aa4616d43eee24a9404b6482cf95a4005c6
csi-node-driver-registrar git 8930c368 sha256:dbceab32444995093af9dbb312b9a72cf3c15032fe8700211243a013a575ff0a
csi-snapshot-controller git 5315d37a sha256:66e97aaa85cc6723c1ee711778c64a32046553e386399e31b7298866a103b8c3
csi-snapshot-validation-webhook git 5315d37a sha256:a43be110d11f49fc87b25b46da318bbf799e1a140f518f7b4fde414c7af341b4
driver-toolkit git 1d5732f0 sha256:5cf5d4a15f410aa6bb74d05715cf4eb5630478b6271554f30a8a716dfdfe5bcc
gcp-cloud-controller-manager git 26b43dfc sha256:5f84b234f2bafa731e4554c9bfde2970c94e7f073867388962c0533e9bad74cc
gcp-cluster-api-controllers git 02432df8 sha256:f9e9e61dafd5315dc23cdd537de910130a8e6c7e6d06f73faf64e533588d07d6
gcp-machine-controllers git e72657c0 sha256:1a6f04c2234ba27547c8c3989a45b5c62795f4f8959c4f380d36a5e04b555047
gcp-pd-csi-driver git 5ed71c64 sha256:c6c4d1ee6411493ce488cc9ee380c09de5a1e928db538de2ebc700e102a8db28
gcp-pd-csi-driver-operator git 799327f7 sha256:8f468a261c1d304bdb32a5e6b8249fe685cec73308984e53eec5e4810e296384
haproxy-router git 4d9b8c4a sha256:1b6fc807ec024e581d39d741006b21c184400cba648dc07c78d84ba6846a2c05
ibm-cloud-controller-manager git f961f16d sha256:7be3b1c8088ce0238c7ea3cac82f08bbe067580acffb15d4ab0f17eec6ed92b3
ibmcloud-cluster-api-controllers git 60b7ca98 sha256:777b7af58dbb1f542795a5b767c6c6483e0bfda71a95d9c7d5119c9018b79208
ibmcloud-machine-controllers git 1a3a3030 sha256:88aa10e74968b69e7d0f77dedf499de1b02bb07401e5019d077f6478d092d8b8
ironic-machine-os-downloader git 93b8b5fa sha256:84a530c6433ecbf85dfe0538fd2ac5e84c2031879deef86d78d702d03f4fa39d
ironic-static-ip-manager git e78e4c3e sha256:7abd406cd883cca552ed4d9b820713fd103972240bce56584c0b5c12aacf4f8e
k8s-prometheus-adapter git e4f859be sha256:6015286dbc21c63448540772372c0e031a1be8c78d1f3c8f29bf6bb23da97eb8
kube-rbac-proxy git 8ea2c994 sha256:d606ca817b3e7be1d2148ea034640dfc4fa9ef0c40c2bf13cae8a626e2c396fa
kube-state-metrics git 9b67b8d1 sha256:21d8bbb3b6f8c8d320a7f6f14ef3154a809582da967ba52e469005287af18058
kube-storage-version-migrator git 969a60e9 sha256:1e39bbb9ef418ca53c5304f5d20efd28fe7f9d8ba8af5e2e627321f3ab64558b
kubevirt-cloud-controller-manager git 3db76104 sha256:aa1012923bbc8878d52215a7958945fdfcf433aaf342747297db66646925d821
kubevirt-csi-driver git 0693093f sha256:bf9ecd722c9207f053369bfc981bdb09559a9015da52e426c9d4ebe948288cf9
libvirt-machine-controllers git a336f0b5 sha256:1a97a216f18e582571a883c4263f36656fd373d32fccba0c86b810bcc9e6cb07
machine-image-customization-controller git 39480963 sha256:0bedaa1a2c8738c782917e4ccb17c1468c678115adae95651664d0ddfa2f4400
machine-os-images git 3cc97098 sha256:8e037ebb3a4fc6e430c9ca90cad5845bdd04682283d7c1238a9cb701b55e9cc2
multus-cni git c4aa21b9 sha256:476bcd488022220eb35577e7cc67f842a608d07a80e1323c214b3548d5012fad
multus-cni-microshift git c4aa21b9 sha256:0bca64aec5a3d6f6f52fbc874f11b38992557e86b8f63bee236702072d1713a0
network-interface-bond-cni git bb911451 sha256:d0d9ec1c9420df3cef05a99b18a782c3b3fa47bb4c43dd52613e8ee8e2354ec8
network-tools git 39eca100 sha256:9fc16540b3b6c6c62682dfb8598337b0ffb891e9e3db43a41d57631c3ece0e17
nutanix-cloud-controller-manager git c9bbc44c sha256:00dbaebb586d8a032b42c7b540cc10d69fa33d8f3380aef8c15296946beec6d4
nutanix-machine-controllers git f053e5a0 sha256:b464080669b56227e93d9076cf40c3f728cd28ceece631e1324de33a20f942a0
oauth-apiserver git fa1f097c sha256:ec19f068115f9797b8587c63c6a9bacc36cbf561177d1b842eb41f0f3ac66950
oauth-proxy git 30f80124 sha256:b1622d360bbc5acd5d2805c7f44d0474ee01fdae458252c066a2f4bd5eef1d8f
oauth-server git 3739138c sha256:a845a7093bf5d5dca4abdfe6b9537549685765c16bb60b48dd6baffa75700f6e
olm-catalogd git 79975a51 sha256:1df8a6b62a2b1cfab9f386c273c5ae3b085ff53dfc3272b3abd2240c9ab125af
olm-operator-controller git 80b8649c sha256:581bef59d36c3eb5328d3de685bc4efe654687fbbb4ea7decc625ecb56df7e60
olm-rukpak git 282cc84c sha256:a6f45ef197d4dfc0acf2aff1f26369b427cc811c3ab4ae37a52258db2456197e
openshift-apiserver git 6b518412 sha256:289e63a558a7a1a8ab5649c2854c5a99dc0b0181debfa2e21712674db14a45b8
openshift-state-metrics git 59b8a0ff sha256:c0799fe4d3d550ad5be9f3e6acdd0dbeb6ed6548e66fb24380b127ced75d58ad
operator-marketplace git 7db179fb sha256:1f95e1c63a9efc40267509814a64f9d48cbe4ce10a39d71ca620cd2da6f99ed8
ovirt-csi-driver git 1db726a9 sha256:4df0fbfb837fbf103e1e0875ec6633044cb381ce61819ca619135afd9cf07bac
ovirt-csi-driver-operator git ac852f3e sha256:e0a6636d9e0e12be0def836dc1213c5badc4b82aaa7b4bcdd5452a6b4e38c2c7
ovirt-machine-controllers git abb91c84 sha256:ec3aededab3e9e644e50cee9aa9ce1537deeeaee2587b45ec0e47237bcfa2c6e
powervs-block-csi-driver-operator git 9c5dd8d1 sha256:fe875a00cd161fd4e221c99e6b62370a1cfb326508edaf012cebf547e6ef1382
prom-label-proxy git 5e14722e sha256:38470eb678986a5583790516aed062d41978d545d1ea43edf76059df4740b629
prometheus-alertmanager git e9aea929 sha256:9aa1c37b63d90c7ca80188e5ae633284e6e8d61032575c4e4a90e167544ca15c
prometheus-node-exporter git 29ba26d1 sha256:0d854b231d13648b4ef8c0b0be1b1703a7b331bdc9a8b34c24058c544651ba2a
rhel-coreos sha256:d21f2ed754a66d18b0a13a59434fa4dc36abd4320e78f3be83a3e29e21e3c2f9
rhel-coreos-extensions sha256:a987f12b0c84c491667f5220458a5e9354beb278c2f1517734b175cda98e1263
route-controller-manager git 3112b458 sha256:df3e7e6ba9b49aad06fc0fbeda79675cc5f1c503e9a485961b76900c81c55d9d
service-ca-operator git 538c7b98 sha256:1b909c3b72be9acfccdccb0e1d14bb12318a9b5150df0629d64f3f7d8e42d024
thanos git 85eee25c sha256:8c23b17da9f3e97d0a91dc2e34a3db7c357a9cdeb1cb06b1564212dd37eb5890
vsphere-cluster-api-controllers git be22f10a sha256:70119f11bc4fb283c2bac08f99cd9b45eb7d884213fb2f5715ccb3fffa9d1a9b
vsphere-csi-driver git 3cd689f3 sha256:a1af54b6ee8c676668a0ea68977d53dbf05bb47bdd7d5b830997f6b1c44fc78e
vsphere-csi-driver-operator git 483de9c5 sha256:1eb09ec3763bbe3b59abbc3ac28f9fbd0f3f477417b34c77b68c08a150749466
vsphere-csi-driver-syncer git 3cd689f3 sha256:b17bf96d74c31b37977db8d180a4fc947bcd91cd3f15bdf40d8531f1f4f3fe94

agent-installer-api-server

OCPBUGS-36577: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#6752) #6752
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-36577: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#906) #906
OCPBUGS-36779: Reload host inventory on conflict (#881) #881
Full changelog

apiserver-network-proxy

OCPBUGS-38062: Revert “Agent: Respect HTTPS_PROXY env vars for proxied connections” #59
Full changelog

azure-cluster-api-controllers

OCPBUGS-36025: Update go-retryablehttp to v0.7.7 #310
Full changelog

azure-file-csi-driver

OCPBUGS-39145: bump mount-utils to treat ENODEV error as corrupted mount #76
Full changelog

azure-machine-controllers

CFE-1050: Added support of capacity reservation group #111
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-38687: only allow a single network in failure domain topology #8875
OCPBUGS-42062: OCPBUGS-41865: [release-4.16] vault version updated to 1.13.10 #9036
OCPBUGS-42012: Systemd Fails to Parse Multiline EC Keys #9037
OCPBUGS-41845: Bump extract-machine-os timout to 20m #8997
OCPBUGS-38964: IngressController subnet selection in AWS #8910
OCPBUGS-42138: add tested instance type for IBMCloud #9031
OCPBUGS-39287: Fix var_files syntax to work on older version of ansible #8936
OCPBUGS-41929: Add AWS c7g,m7g,r8g to tested instance types #9009
OCPBUGS-36855: Openstack UPI - Reintroduce unique resource names. #8724
OCPBUGS-39082: incorrect folder gen, workaround govmomi vm folder path bug #8912
OCPBUGS-39496: capi/aws/byo-vpc/multi-cidr: fix group rules #8953
OCPBUGS-36861: Updates GCP terraform worker role #8939
OCPBUGS-38956: failed to install Nutanix OCP 4.16 cluster with DHCP #8905
OCPBUGS-38822: upstream capv bug causes session timeout #8891
OCPBUGS-39468: Enable TLS for virtual media in initial ironic deployment #8955
OCPBUGS-37606: vSphere validation fails if dc is in a folder #8777
OCPBUGS-39206: Update GCP Disk Types 4.16 #8920
OCPBUGS-39087: aws: validate public-only subnets configs #8913
OCPBUGS-38821: [release-4.16] Azure: Disable shared key access when using a managed identity #8855
OCPBUGS-38302: upi/aws: update lambda runtime python version #8897
OCPBUGS-38826: aws: add support for clusters with public-only subnets #8892
OCPBUGS-38517: [release-4.16] capi/aws: bump provider for instance register fix #8848
OCPBUGS-38196: Remove timed context for gcp client #8818
OCPBUGS-38502: PowerVS: Fix mad system pool #8846
OCPBUGS-37838: fix bogus analyze message when gather fails #8794
OCPBUGS-37492: openstack: Fix security group tagging #8767
OCPBUGS-37607: bootstrap gather fails in vsphere, only ipv6 address used #8778
OCPBUGS-37494: aws: do not require create permissions when BYO IAM role #8768
OCPBUGS-37510: [release-4.16] aws: bump CAPA for subnet tagging fix #8772
OCPBUGS-37180: ic: fix typo in warning message #8769
OCPBUGS-36968: [release-4.16]: capi/aws: bump provider for ingress rules fix #8734
OCPBUGS-36965: destroy/gcp: set value for DiscardLocalSsd #8733
OCPBUGS-36720: CORS-3582: capi: remove unused feature gates #8716
OCPBUGS-36890: [release-4.16] capi: start controllers after WaitGroup is created #8726
OCPBUGS-36091: [release-4.16] bump go-retryablehttp for CVE fix #8654
OCPBUGS-36777: Cleanup capi artifacts #8719
OCPBUGS-36607: aws: remove terraform configs #8705
OCPBUGS-36324: update RHCOS 4.16 bootimage metadata to 416.94.202406282145-0 #8692
OCPBUGS-36447: capi/aws: disable EKS controller in CAPA #8694
OCPBUGS-36351: vSphere - If the folder pre-exists do not tag #8683
OCPBUGS-36286: PowerVS: Add ibmcloud plugins #8672
OCPBUGS-35818: baremetal: bootstrap: bind icc to localhost #8632
OCPBUGS-34457: [release-4.16] bump envtest binaries version #8470
OCPBUGS-35718: Fix ethertype for masters service router SG creation #8623
OCPBUGS-36156: Configured logger for controller-runtime #8657
OCPBUGS-36249: capi: shutdown local controlplane as the last step #8670
OCPBUGS-35470: add machine series ‘A3’ and ‘C3D’ to ‘Tested instance types for GCP’ #8614
OCPBUGS-35722: Support CAPI provider custom timeouts #8624
OCPBUGS-35733: [release-4.16] remove terraform libvirt from the installer #8626
OCPBUGS-35531: For GCP, only configure kmsKeyServiceAccount if set #8613
OCPBUGS-35529: capi aws: append random string in caller ref #8612
Full changelog

baremetal-operator

OCPBUGS-39490: Disallow fetching secrets from namespaces different from the host’s one #378
OCPBUGS-38938: [OCP] Ability to disable agent power off after deployment #372
OCPBUGS-37765: HostFirmwareComponents doesn’t show the new firmware information in Status Components #355
OCPBUGS-37262: fix(redfish): set correct idrac-redfish management interface #366
OCPBUGS-36673: [4.16] Firmware Update causes BMH to get stuck in Preparing #363
Full changelog

baremetal-runtimecfg

OCPBUGS-35891: Change mechanism of debug flag #323
OCPBUGS-35743: Fix handling of ELB Node IP detection #320
OCPBUGS-35486: Add support for OVN HostCidrs annotation #318
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-39341: Ignore pruning when deployment points to replicationcontroller #1862
OCPBUGS-37853: Revert “OCPBUGS-35994: pkg/cli/admin/upgrade/rollback: Drop this command” #1839
OCPBUGS-31639: Bump k8s dependencies to 1.29.7 #1824
OCPBUGS-36764: pkg/cli/admin/upgrade/rollback: Drop this command #1820
OCPBUGS-36328: Set required-scc annotation to privileged for node debug pods #1816
OCPBUGS-36379: bump(k8s)=1.29.6 #1810
OCPBUGS-35924: upgrade status: control plane completion estimate #1804
Full changelog

cloud-credential-operator

OCPBUGS-41234: List secrets in batches to avoid api timeout #757
OCPBUGS-38376: Update google.golang.org/grpc v1.65.0 #748
OCPBUGS-37418: SNYK ignore go-client misreporting #735
OCPBUGS-36834: GCP passthrough permissions check to ignore problematic permissions. #714
OCPBUGS-36954: Update to azidentity v1.7.0 #727
OCPBUGS-36031: IBM/go-sdk-core update to v5.6.3 #718
OCPBUGS-34117: AWS STS should not error when a credentailsRequest does not have awsSTSIAMRoleARN #704
Full changelog

cluster-authentication-operator

OCPBUGS-34790: update OpenShift favicon to new brand standard #676
NO-JIRA: Fixes for Keycloack IDP test and unit tests #683
Full changelog

cluster-baremetal-operator

OCPBUGS-31961: bump x/net to 0.23.0 #431
OCPBUGS-36415: set required-scc for openshift workloads #433
OCPBUGS-36285: Move pull secret from env var to VolumeMount in metal3-image-customization container #436
OCPBUGS-36285: Mount htpasswds as volumeMounts in metal3-httpd container #434
OCPBUGS-35381: provisioning: add ownership for tls secret #425
Full changelog

cluster-capi-operator

OCPBUGS-37441: fix: sort CredentialsRequest manifests after namespace #190
OCPBUGS-37795: fix: align openstack e2e branch #192
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-36317: PowerVS: Remove bind address #358
Full changelog

cluster-config-api

OCPBUGS-38773: remove duplicate featuregate ‘ExternalRouteCertificate’ #2007
OCPBUGS-37857: [release-4.16] OCPBUGS-37852: a rule to check if the featureSet is one of the known set of features #1985
OCPBUGS-33788: add console and download URLs to console operator config #1915
CFE-1047: Add the field “CapacityReservationGroupID” to “AzureMachineProviderSpec” in openshift/api #1923
OCPBUGS-35742: prevent removing featureSet entirely #1933
Full changelog

cluster-control-plane-machine-set-operator

CFE-1087: API Bump for capacity Reservation #314
OCPBUGS-35476: Wait for ControlPlaneMachineSet to be created when waiting for it to be updated #307
Full changelog

cluster-dns-operator

OCPBUGS-37078: Bump version of DNSNameResolver controller #419
Full changelog

cluster-etcd-operator

OCPBUGS-37820: ensure ordering in member health checks #1311
OCPBUGS-36489: parallelize member health checks #1290
OCPBUGS-35500: Update etcd-tls-assets.md #1276
Full changelog

cluster-image-registry-operator

Revert “[release-4.16] OCPBUGS-41903: pkg/operator/azurepathfixcontroller: do not sync on non-azure storage” #1119
OCPBUGS-41903: pkg/operator/azurepathfixcontroller: do not sync on non-azure storage #1115
OCPBUGS-39098: Avoid Shared Access Key usage for Azure Storage Account when using Managed Identity based auth #1104
OCPBUGS-38894: pkg/resource/azurepathfixjob: invoke update-ca-trust extract with –output #1102
OCPBUGS-38894: pkg/resource: invoke update-ca-trust extract with –output #1098
OCPBUGS-36037: go.*,vendor: bump go-retryablehttp #1064 #1064
Full changelog

cluster-ingress-operator

OCPBUGS-39324: Refine logging for accurate infra CR status updates #1139
OCPBUGS-39323: Ingress operator status not degraded when canary route fails #1138
OCPBUGS-32887: Delete and recreate canary route to clear spec.host #1099
OCPBUGS-36184: Add e2e test for connect timeout #1094
OCPBUGS-35883: Add Regexp Anchor to TestAll #1093
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-37563: add disabled syncer as reason to CFE for PSA #1714
OCPBUGS-35303: manifests: add ownership annotation for kubelet-bootstrap-kubeconfig #1701
OCPBUGS-35831: add SNO control plane high cpu usage alert #1705
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-38269: bump protobuf #115
Full changelog

cluster-monitoring-operator

OCPBUGS-41967: disable user-defined monitoring per object #2474
OCPBUGS-42067: Reapply “chore: poll immediately in the e2e tests” #2476
OCPBUGS-41717: Configure graceful shutdown for metrics-server (4.16 backport) #2467
OCPBUGS-41910: filter alerts sent to Telemeter #2471
OCPBUGS-39170: Backport #2441 for 4.16 #2447
OCPBUGS-36907: Add deprecated config runbook #2411
OCPBUGS-36717: Exclude windows nodes from kubelet servicemonitor #2408
OCPBUGS-36482: add runbook_url annotations #2404
OCPBUGS-36206: Add deprecation for prometheus adapter #2396
OCPBUGS-34530: inject trusted CA bundle into UWM Alertmanager #2373
OCPBUGS-35904: opt-out of multi-cluster Prometheus dashboard #2391
OCPBUGS-34383: remove deprecated logtostderr argument #2370
OCPBUGS-35884: attach runbook to the PrometheusDuplicateTimestamps alert #2389
MON-3795, OCPBUGS-35061: Backport anp telemetry #2379
Full changelog

cluster-network-operator

OCPBUGS-41840: Add configurable subnets while running hybrid-overlay-node binary #2502
OCPBUGS-37763: Handle random crictl errors in iptables-alerter #2452
OCPBUGS-41555: HyperShift: do not use antiaffinity on single replica control planes #2494
OCPBUGS-37937: Add proxy env vars to onvkube-node #2457
OCPBUGS-41607: set required-scc for openshift workloads #2496
OCPBUGS-35407: Use applyconfigurations for updating network.oprerator status #2413
OCPBUGS-37362: Fix IC distributed control plane alerts #2445
OCPBUGS-35836: Propogate hypershift control plane priority class override to multus and preserve container resource requests #2417
OCPBUGS-35829: Create the configmap mtu if not found #2416
OCPBUGS-35923: update whereabouts crd #2419
Full changelog

cluster-node-tuning-operator

OCPBUGS-39005: Add cluster-wide proxy env file (#1166) #1166
OCPBUGS-36431 Fix generated cpu mask for 512+ cpus (#1152) #1152
E2E: Remove checking of reserved cpus in irqbalance file (#1156) #1156
Fix the destination of asset’s copy (#1134) #1134
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-34213: lots of churn during image registry managed/removed transition #348
OCPBUGS-35822: nil pointer reference in ocm-operator #356
Full changelog

cluster-samples-operator

OKD-225: remove only the EOL CentOS 7 images #576
OCPBUGS-38159: add owners #555
Full changelog

cluster-storage-operator

NO-JIRA: release-4.16: Run make update #512
OCPBUGS-36969: STOR-1839: VSphereDriverConfiguration feature Accessible-by-default #491
OCPBUGS-35298: revert vsphere problem detector controller name change #481
Full changelog

cluster-version-operator

OCPBUGS-37853: Revert “OCPBUGS-35994: Revert “OCPBUGS-24535: pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream”” #1077
OCPBUGS-36898: vendor: Update openshift/api to pick up zz_generated.crd-manifests #1069
OCPBUGS-36764: Revert “OCPBUGS-24535: pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream” #1065
Full changelog

console

OCPBUGS-37689: Switch to use annotations as labels from PipelineRuns created through Pipelines as Code is deprecated #14094
OCPBUGS-42015: Topology screen crashes when completed pod is selected #14298
OCPBUGS-35850: Fix: Quick Start “next” button requires double click to move to next step #13989
OCPBUGS-42382: Allow operators to enable monitoring by default #14317
OCPBUGS-41905: List of default Camel K event sources disappears when adding a custom event source #14290
OCPBUGS-41709: Need to allow blank for Project/namespace when setting SA Subject in ‘Project access tab’ #14278
OCPBUGS-42069: add Create button to Console plugins tab #14302
OCPBUGS-41996: Fix updating the “Until” field on the Silence > Edit page #14296
OCPBUGS-38112: do not directly mutate links in useMemo #14117
OCPBUGS-34518: Restore user toggle when authentification is disabled #13902
OCPBUGS-41619: Use vCenterCluster value from CM as primary resource #14268
OCPBUGS-37046: Fix TypeError: Cannot read properties of null (reading ‘metadata’) in Topology view #14059
OCPBUGS-38911: Values entered into the Instantiate Template form are automatically cleared #14187
OCPBUGS-38914: Unrelated readme opened when opening CodeReady workspaces from Quarkus using s2i quickstart #14188
OCPBUGS-38968: A value submitted in From view is wrapped with single quotation after switching to Yaml view. #14193
OCPBUGS-38424: fix bug where cluster version text appears black in da… #14144
OCPBUGS-38464: correct casing in “Lightspeed” #14148
OCPBUGS-37430: Fix utilization card limits/total display #14082
OCPBUGS-36510: DeploymentConfigs deprecation info alert should not present on the Edit deployment page #14031
OCPBUGS-37954: No access to list pipelines.tekton.dev prevents from using Delete application form #14107
OCPBUGS-36601: Tooltip on Pipeline when expression is not shows #14033
OCPBUGS-38803: CONSOLE-4108 [4.16 backport] Show deprecated operators in OperatorHub #14095
OCPBUGS-37048: Fix “Auto deploy when new image is available” becomes unchecked when editing a deployment from web console #14060
OCPBUGS-35839: Fix placement of icons on WebKit #13988
OCPBUGS-35271: Fix password set to Secret created through Start Pipeline form #13954
OCPBUGS-38093: correct link for Lightspeed operator #14112
OCPBUGS-36484: Revert - terminal: use username if uid is not present #14027
OCPBUGS-37097: Add useQuickStartContext hook and expose it via dynamic plugin API #14070
OCPBUGS-36864: maintain session across tabs #14051
OCPBUGS-36620: Redirects to new PipelineRun logs URL from old PipelineRun logs URL #14035
OCPBUGS-36759: RWOP accessMode is not available on OpenShift console UI #14040
OCPBUGS-37063: hide ‘View all steps in documentation’ for ROSA and OSD #14069
OCPBUGS-36411: fix BMH restart annotation #14022
OCPBUGS-36841: ensure correct API version for OperandDetails #14049
OCPBUGS-36186: Add default sorting column for VirtualizedTable component of dynamic plugin sdk #14008
OCPBUGS-36002: fix flaking crd-extension tests #14003
OCPBUGS-35565: remove duplicate OAuth config #13982
OCPBUGS-35571: Update Go prereq in README.md #13981
OCPBUGS-35465: ManagedField in YAML editor is not collapsed by default which is incorrect #13974
OCPBUGS-35408: fix pseudolocalization #13972
OCPBUGS-35280: Ensure requiredVersion is set for Console provided shared modules #13956
OCPBUGS-34011: Use bridge instead of cnv-bridge #13875
OCPBUGS-35946: Fix invalid node filesystem query #13999
OCPBUGS-34717: The s2i build strategy is not assumed for Serverless Functions #13915
OCPBUGS-34968: Update plugin docs regarding Console 4.16 shared module changes #13933
OCPBUGS-35281: Display of “Auth Token GCP” filter in OperatorHub should be conditioned #13955
OCPBUGS-35472: bump helm to 3.14 #13971
OCPBUGS-35481: fix crash if helm chart metadata is nil #13975
Full changelog

console-operator

OCPBUGS-34783: set required-scc for openshift workloads #908
OCPBUGS-34012: Cache organization ID #916
OCPBUGS-33788: Tolerate the absence of ingress capability on HyperShift clusters #910
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-37725: Update owners #166
Full changelog

coredns

OCPBUGS-37078: UPSTREAM: <carry>: openshift: Bump the version of ocp_dnsnameresolver external plugin #127
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-38167: rebase CPO on 4.16 #291
Full changelog

csi-driver-manila-operator

OCPBUGS-30438: Bump protobuf dependency #237
OCPBUGS-38013: Set required-scc for openshift workloads #235
Full changelog

docker-builder

OCPBUGS-30455: bump google.golang.org/protobuf to 1.33.0 #402
OCPBUGS-35283: Bumps openshift/api & related dependencies #397
Full changelog

docker-registry

OCPBUGS-39412: pull upstream distribution changes to use a consistent multipart chunk size #410
OCPBUGS-35567: use SelfSubjectReview to obtain user info #405
Full changelog

egress-router-cni

OCPBUGS-35525: update to go 1.21 and k8s.io mods to v0.29.2 #85
Full changelog

etcd

OCPBUGS-34690: Rebase etcd 3.5.14 openshift 4.16 #274
Full changelog

hyperkube, pod

release-4.16] OCPBUGS-42057: UPSTREAM: <drop>: bump(github.com/openshift/apiserver-library-go) #2096
OCPBUGS-39015: Bump k8s api to 1.29.8 #2066
OCPBUGS-36773: UPSTREAM: <carry>: Disable vSphere tests with pre-provisioned volumes #2021
NO-JIRA: update downstream owners #2049
OCPBUGS-37621: Bump k8s api to 1.29.7 #2039
OCPBUGS-19802: Bump 4.16 runc #2032
OCPBUGS-35551: Bump k8s 1.29.6 #1990
OCPBUGS-34545: UPSTREAM: <carry>: Disable PersistentVolumeLabel by default #1993
Full changelog

hypershift

NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.39 (release-4.16) #4827
chore(deps): update konflux references (release-4.16) #4816
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.38 (release-4.16) #4806
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.37 (release-4.16) #4796
chore(deps): update konflux references (release-4.16) #4781
NO-JIRA: chore(deps): update konflux references (release-4.16) #4760
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.36 (release-4.16) #4759
NO-JIRA: Security fixes for openshift-ci-security job #4750
OCPBUGS-41372: CPO oauth idp converter: resolve names before dialing #4689
NO-JIRA: chore(deps): update golang docker tag to v1.23 (release-4.16) #4729
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.34 (release-4.16) #4728
NO-JIRA: chore(deps): update konflux references (release-4.16) #4727
OCPBUGS-38058: Add HTTP konnectivity proxy to OAuth server #4496
HOSTEDCP-1955: bump CCO version #4696
OCPBUGS-34803: cmd: report server version, supported OCP #4141
OCPBUGS-39293: copy image-registry AdditionalTrustedCA configmap into HC openshift-config #4647
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-9 (release-4.16) #4685
OCPBUGS-38062: [release-4.16] Use HTTP proxy for ingress controller #4688
NO-JIRA: chore(deps): update konflux references (release-4.16) #4684
OCPBUGS-39447: handle version skewed NodePools that do not have rhel9 binaries #4664
HOSTEDCP-1895: [release-4.16] Allow setting Kube APIServer maximum requests in flight #4551
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-7.1724661022 (release-4.16) #4600
chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.33 (release-4.16) #4602
chore(deps): update konflux references (release-4.16) #4599
OCPBUGS-38942: copy oapi ca-trust recursively when building trust anchor #4615
NO-JIRA: Flaky cert validation test #4622
OCPBUGS-38259: Set KCM node monitor grace period #4520
OCPBUGS-38726: fix: bump github.com/IBM/go-sdk-core/v5 #4611
HOSTEDCP-1764: retrieve registryOverrides when ImageStream is not ava… #4541
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-7 (release-4.16) #4525
OCPBUGS-36781: Set Azure VM identity if user assigned identity set #4341
OCPBUGS-37936: set proxy envvars on aws and azure CCMs #4476
OCPBUGS-38486: hcco: reconcile apiserver config into hosted cluster #4559
NO-JIRA: fix(KONFLUX-3663): format PipelineRun files and upload SAST results #4534
OCPBUGS-38131: Let the CPO oidc check resolve through data plane #4505
NO-JIRA: test: relax mgmt KAS egress check #4561
chore(deps): update quay.io/openshift/origin-base docker tag to v4.16 (release-4.16) #4528
chore(deps): update golang docker tag to v1.22 (release-4.16) #4527
NO-JIRA: Update Konflux references (release-4.16) #4524
OCPBUGS-34801: remove weak ciphers from security profile #4518
OCPBUGS-37060: OCPBUGS-35905: E2E test to verify openshift-apiserver TLS certificates #4366
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9 (release-4.16) #4482
NO-JIRA: chore(deps): update konflux references (release-4.16) #4481
OCPBUGS-37065: OCPBUGS-35899: Doubled machineHealthCheck timeout on Agent and None #4367
OCPBUGS-30282: Multiple MachineConfigs in one CM #4398
OCPBUGS-36937: [release-4.16] Add HTTP(s) konnectivity proxy and use it with OpenShift APIServer #4357
OCPBUGS-36766: Delete IDMS in dataplane once HCP ICS field is removed #4434
NO-JIRA: Konflux migration for release-4.16 #4436
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v8.5.11 (release-4.16) #4430
HOSTEDCP-1569: test: e2e: skip unknown conditions instead of erroring #4440
OCPBUGS-37645: Set right endpointSlice port #4431
OCPBUGS-37214: Separate ibmcloud kms encryption configuration types #4380
OCPBUGS-37302: fix(api): Nodepool CEL validation fix #4395
NO-JIRA: Red Hat Konflux update hypershift-release-mce-26 #4392
OCPBUGS-37241: extract rhel9 MCO binaries for rhel8 based MCO images #4383
NO-JIRA: [release-4.16] test/e2e: remove api budget checks #4368
HOSTEDCP-1795, HOSTEDCP-1796: Customize the self-generated cert validity and rotation #4371
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-2 (release-4.16) - abandoned #4364
NO-JIRA: trivial typo fixes to configuring-storage.md #4353
OCPBUGS-36849: Add newline after TLS certs referenced by image.config #4352
OCPBUGS-36589: Fix Hypershift dump for non-OpenShift Management Clusters #4317
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.10-1.1719562237 (release-4.16) - abandoned #4328
OCPBUGS-36358: enable audit log for oauth-openshift #4302
OCPBUGS-35522: Copy infra-volumesnapshot-class-mapping to core binding #4291
NO-JIRA: chore(deps): update konflux references (release-4.16) #4299
OCPBUGS-36227: kubevirt-csi-driver: Pass infra kubeconfig in case of external infra #4276
OCPBUGS-35341: [release-4.16] Fixed ValidReleaseInfo condition #4204
OCPBUGS-36220: Make guest cluster components use the correct KAS port #4275
OCPBUGS-35934: check mgmt cluster for route capability before DeleteIfNeeded for ovn sbdb route #4264
NO-JIRA: chore(deps): update konflux references (release-4.16) #4260
OCPBUGS-34545: Disable PersistentVolumeLabel admission plugin #4241
OCPBUGS-35838: Remove KMS V1 provider support for IBM Cloud #4250
NO-JIRA: chore(deps): update konflux references (release-4.16) #4251
OCPBUGS-35369: OCPBUGS-35252: Enforce Privileged Instead of Restricted PSA in 4.16 #4193
NO-JIRA: chore(deps): update konflux references (release-4.16) #4245
OCPBUGS-35557: Complete KAS migration to none endpoint reconciler type #4227
NO-JIRA: chore(deps): update konflux references (release-4.16) #4238
NO-JIRA: feat(olm): Set packageserver replicas to 2 for IBMCloudPlatform #4230
OCPBUGS-35268: Add hypershift-cluster-version-operator image to release providers #4185
NO-JIRA: chore(deps): update konflux references (release-4.16) #4235
NO-JIRA: Red Hat Konflux update hypershift-release-mce-26 #4233
OCPBUGS-35056: Generate default worker security group rules based on machineCIDR #4174
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-36067: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #71
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-42286: Reorder static resources to create RBAC first #129
OCPBUGS-36073: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #120
Full changelog

insights-operator

OCPBUGS-39394: collect some nmstate customresources (#986) (#989) (#995) #986
OCPBUGS-38021: Integration of the OpenStack CRs into the insights-operator (#974) #974
Add haproxy metric (#977) #977
OCPBUGS-37671: Ingress controller related certificates’ validate dates gathering (#970) #970
fix the configmapobserver notifications (#969) #969
OCPBUGS-35882: properly encode the URL for the advisor links (#957) #957
Full changelog

ironic

OCPBUGS-38797: redfish-virtualmedia fails on XFusion nodes #564
OCPBUGS-42113: Update ironic-inspector to fix the memory leak #587
OCPBUGS-37758, OCPBUGS-39383: Include fixes for CVE-2024-44082 #579
OCPBUGS-38510: set min version for python3-webob #553
OCPBUGS-33376: bump werkzeug #534
OCPBUGS-36838: Update Jinja2 #521
OCPBUGS-36285: Read ironic and inspector htpasswds from files #517
Full changelog

ironic-agent

OCPBUGS-39383: Include fixes for CVE-2024-44082 #161
OCPBUGS-38510: set webob and bump werkzeug #149
Full changelog

keepalived-ipfailover

OKD-219: add util-linux to base image #188
Full changelog

kube-metrics-server

OCPBUGS-41717: Wire server run options to flags. ([release-4.16] backport) #37
Full changelog

kube-proxy, sdn

OCPBUGS-42159: fix redundant router-default iptables rule #633
Full changelog

machine-api-operator

CORS-3648: Add the hyperdisk-balanced disk type #1279
CFE-1051: Adding web-hook validation for capacityReservationGroupID #1263
Full changelog

machine-config-operator

OCPBUGS-41806: When newly built images rolled out, the update progress is not displaying correctly (went 0 –> 3) #4584
OCPBUGS-41518: CVE-2024-3727 ose-machine-config-operator-container: containers/image: digest type does not guarantee valid type #4569
OCPBUGS-38997: Machine-config daemon ListPools panic during tech-preview CI runs #4550
OCPBUGS-38711: SCC-pinning for openshift workloads #4539
OCPBUGS-36850: Port number 22623 exposing weak ciphers to external client from master node IP #4556
OCPBUGS-38373: Revert “MCD-pull: run after network-online.target in Azure” #4528
OCPBUGS-36171, OCPBUGS-36172: fix secret canonicalization #4432
OCPBUGS-37759: Guard MachineOSBuild & MachineOSConfig informers with feature gates #4505
OCPBUGS-37550: On-Prem resolv prepender to watch for NM changes #4498
OCPBUGS-37485: kubelet: boot without PSI for performance concerns #4486
OCPBUGS-37840: [release-4.16] Introduce versioning for Auto Node Sizing feature #4382
OCPBUGS-35891: Make logging configurable for on-prem components #4418
OCPBUGS-37470: Nodes are drained twice when an OCB image is applied #4484
OCPBUGS-37460: Openshift uncordoned compute-node that was intentionally cordoned #4483
OCPBUGS-37428: Machine-config operator should not hot loop generating ValidatingAdmissionPolicyUpdated events #4482
OCPBUGS-36775: templates: run disable-mglru conditionally #4462
OCPBUGS-36330: daemon: Handle correctly OS Version for 4.1 and 4.2 bootimages #4445
OCPBUGS-36536: MCD-pull: run after network-online.target in Azure #4453
OCPBUGS-35929: The MCD can override a restart crio action with a reload crio action #4420
OCPBUGS-36165, OCPBUGS-36166: CurrentImagePullSecret should be consumed by the MCD #4430
OCPBUGS-35753: Fix reference to $host_file #4413
OCPBUGS-36198: daemon/update: disable systemd unit before overwriting #4436
OCPBUGS-35806: Revert “Azure: add Azure specific dnsmasq ordering” #4414
Full changelog

monitoring-plugin

OCPBUGS-42424: fix path-to-regexp dependency #197
NO-JIRA: Use rhel9 base image in Dockerfile #122
Full changelog

multus-admission-controller

OCPBUGS-36341: Update owners #87
Full changelog

multus-networkpolicy

Update owners (#57) #57
Full changelog

multus-route-override-cni

OCPBUGS-37726: Update owners #58
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-37707, OCPBUGS-37708: [release-4.16] align api calls timeout and skip pods marked for deletion #304
OCPBUGS-37723: Update owners #294
OCPBUGS-35923: [release-4.16] Return previous IP allocation for add cmd #293
Full changelog

must-gather

OCPBUGS-35357: Run ppc node collection in parallel #426
Full changelog

network-metrics-daemon

Correct 4.16 owners file (#98) #98
Full changelog

oc-mirror

OCPBUGS-38035: Rebuild catalogs – without cache generation (#905) #905
OCPBUGS-36410: fix: creates tags for release images (#901) #901
OCPBUGS-37055: Use proxy for HTTP request release signatures (#893) #893
OCPBUGS-37040: use current working-dir for fetching release content for disk to mirror (#892) #892
OCPBUGS-36498: Fix to ensure invalid catalogs are skipped (#889) #889
OCPBUGS-362214: Fix V2 DiskToMirror should not require internet access (#884) #884
OCPBUGS-35279: Fix spelling error in delete console message (#881) #881
OCPBUGS-35409: Implement fail safe / fail fast in workers (#879) #879
Full changelog

openshift-controller-manager

OCPBUGS-39191: replaces deprecated square/go-jose wtih go-jose/go-jose #329
OCPBUGS-37526: Race condition when deleting ServiceAccount #324
OCPBUGS-36862: 4.16 “Bad” reconciliation loops can cause unbounded dockercfg secret creation #323
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-35730: Add config map hooks #174
Full changelog

openstack-cluster-api-controllers

OCPBUGS-34931: rebase on release-0.10 (to fix trunks deletion) #321
OCPBUGS-37967: rebase CAPO for 4.16 #319
Full changelog

openstack-machine-api-provider

OCPBUGS-34931: bump CAPO to v0.9.2 #124
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-41540: [4.16] add optional schema migrations; default to olm.bundle.object instead of olm.csv.metadata (#1384) #859
OCPBUGS-41677: [4.17] adds paginating lister for evaluating CRs’ upgrade fitness versus new CRDs. #863
OCPBUGS-41557: Fix e2e flake: upgrade CRD with deprecated version #861
OCPBUGS-41217: (fix) registry pods do not come up again after node failure (#3366) #854
OCPBUGS-38290: release-4.16 Resolver: list CatSrc using client, instead of referring to registry-server cache #838
OCPBUGS-38129: [release-4.16] Update junit report file name to show spec results on Test Grid #833
OCPBUGS-37456: Updating ose-operator-framework-tools-container image to be consistent with ART for 4.16 #826
OCPBUGS-37559: [release-4.16] Update e2e config and backport list of flakes #814
OCPBUGS-37018: Bump github.com/containers/image/v5 #822
OCPBUGS-36450: Can’t install operator on 4.15 after uninstalling it on a prior version #809
OCPBUGS-25019: fix xplat compile for of-tools image; hide utest files from git; use rhel8 art builder image #793
OCPBUGS-36137: fix sorting unpack jobs #799
OCPBUGS-34979: Updates default security context behavior for catalog source pods #788
OCPBUGS-36138: perform operator apiService certificate validity checks directly #798
OCPBUGS-35373: [release-4.16] Warn and allow CRD upgrade if validation fails but webhook is specified #781
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-38697: Use more exact name match when deleting static routes to HO nodes. #2282
OCPBUGS-24386: [release-4.16] EgressService: Fix ETP=Local ingress reply for LGW #2278
OCPBUGS-38705: Delete EgressIP LRP stale nexthops when node is not found #2271
OCPBUGS-38054: Fix per-pod MCS/metadata blocking #2248
OCPBUGS-38699, OCPBUGS-38704: EgressIP VRF support & ignore localnet patch ports when bootstrapping #2267
OCPBUGS-37939: [release-4.16] Bump OVSDBTimeout and make it configurable. #2244
OCPBUGS-37362: Fix registering northd metrics on appropriate nodes #2232
OCPBUGS-36608: [release-4.16] ovspinning: Set affinity of each thread #2220
OCPBUGS-36486: Fix race condition when creating/deleting namespace address set #2218
OCPBUGS-35061: Allow ANPs at same priority #2205
Full changelog

powervs-block-csi-driver

OCPBUGS-36097: Fix CVE-2024-6104 by updating http-retryable to 0.7.7 #88
Full changelog

powervs-cloud-controller-manager

OCPBUGS-36107: UPSTREAM: <carry>: Fix go-retryablehttp CVE 4.16 #73
Full changelog

powervs-machine-controllers

OCPBUGS-41976: Update go.mod to fix CVE - 4.16 #84
Full changelog

prometheus

OCPBUGS-39179: Restore Prometheus functionality to accept samples with different timestamps from the same series in a single scrape. #224
OCPBUGS-36918: cherry-pick upstream fix to make PrometheusRemoteWriteBehind fire when remote endpoint is never reached. #214
OCPBUGS-37446: backport of upstream fix #217
OCPBUGS-36854: cherry-pick upstream remote-write fix #212
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-38399: feat: sync proxy settings in Alertmanager configuration #299
Full changelog

telemeter

OCPBUGS-31552: fix issuer check during JWT authentication 4.16 #537
Full changelog

tests

OCPBUGS-39135: Bump timeout for the pod-network-service endpoints check #29052
OCPBUGS-41611: Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token [apigroup:build.openshift.io] #29079
OCPBUGS-38707: run vsphere driver config test on non techpreview clusters #28992
OCPBUGS-38788: [4.16] egressfirewall: skip ping tests in case of hypershift kubevirt on Azure infra #28938
OCPBUGS-38015: vertical scaling test should not rely on CPMS replicas #28981
OCPBUGS-37771: fix pod not returning success on ‘Managed cluster should verify that nodes have no unexpected reboots #28959
OCPBUGS-36744: Expand allowance for kubelet metrics api endpoint outages during node upgrades #28928
OCPBUGS-36182: Removes dependency on samples operator images #28904
OCPBUGS-36241: remove unused in-cluster monitoring code #28909
OCPBUGS-35842: add Proxy config #28894
TRT-1721: Add new intervals for kubelet metrics endpoints down #28901
TRT-1720: Filter must-gather and truncate system node users #28883
ETCD-578: remove Tech Preview check from etcd profiles e2e test #28819
OCPBUGS-35755: Fix etcd profiles e2e test to check returned status for updated values #28885
bump 4.16 to latest o/k 4.16 release branch #28888
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-37660: Bump otelgrpc to v0.53.0 #72
Full changelog

vsphere-problem-detector

OCPBUGS-37735: Drop event when CheckDefaultDatastore fails #168
OCPBUGS-35446: Fix missing failure-domains #160
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github