4.16.18

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.16.18-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.16-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.16-micro Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.16-micro Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.16-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.16-fips-payload-scan
- gcp-ovn-rt-upgrade-4.16-minor Succeeded periodic-ci-openshift-release-master-ci-4.16-upgrade-from-stable-4.15-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.16 Succeeded periodic-ci-openshift-hypershift-release-4.16-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.15.21, 4.15.22, 4.15.23, 4.15.25, 4.15.26, 4.15.28, 4.15.29, 4.15.31, 4.15.32, 4.15.33, 4.16.10, 4.16.11, 4.16.13, 4.16.14, 4.16.3, 4.16.4, 4.16.5, 4.16.6, 4.16.9

4.16.17 (changes) - S F S S S S
4.16.16 (changes) - Success
4.16.15 (changes) - Failed
4.16.12 (changes) - Failed
4.16.8 - Success
4.16.7 (changes) - Success
4.16.2 (changes) - Success
4.16.1 (changes) - Success
4.16.0 (changes) - Failed
4.15.36 (changes) - Success Success
4.15.35 (changes) - Success
4.15.34 (changes) - Failed
4.15.30 (changes) - Success
4.15.27 (changes) - Success
4.15.24 (changes) - Failed
4.15.20 (changes) - Success
4.15.19 (changes) - Success
4.15.18 (changes) - Failed
4.15.0-0.nightly-2024-10-18-051734 (changes) - Success

Upgrades to:

4.17.2 (changes) - Failed

Loading changelog, this may take a while ...

Changes from 4.16.8

Created: 2024-10-18 16:20:48 +0000 UTC

Image Digest: sha256:3f14e29f5b42e1fee7d7e49482cfff4df0e63363bb4a5e782b65c66aba4944e7

Release 4.16.18 was created from registry.ci.openshift.org/ocp/release:4.16.0-0.nightly-2024-10-18-061923

Components

Kubectl 1.29.7
Kubernetes upgraded from 1.29.7 to 1.29.8
Kubernetes Tests 1.29.0
Red Hat Enterprise Linux CoreOS upgraded from 416.94.202408132101-0 to 416.94.202410172137-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
ExternalRouteCertificate (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)

Rebuilt images without code change

agent-installer-utils git 6e6bb40d sha256:3c2de69e4dfa4be9217e9d7f3d27c598f54d5d8fb5b32ebfa1b5007915c1a136
alibaba-cloud-controller-manager git 97e8335e sha256:c07477a86f0afae4e81dd9789f49b2d86047d1d603386207d90eb836fc3704ec
alibaba-machine-controllers git 064d4624 sha256:e5424f150f760e8383a31fd0e02822a11edc274f6c3412bd1c31a39c87937c39
aws-cloud-controller-manager git a53e9def sha256:2b37a56fea7cd1f1839745062be9e4ea64f442139e0f884e514a6d1914056875
aws-cluster-api-controllers git aaaf00b1 sha256:3fbbb72173367e388037ef97a785d66d7f58ee53555d4a303d05f560f4e7e9b0
aws-ebs-csi-driver git 1d29a74a sha256:72e6661d8b960f8dc93a470d5c9fbd4e2fd505b29eb6d2d13b17892c25412729
aws-ebs-csi-driver-operator git ff69cd03 sha256:ce7b83607bce5b2c5458eb17e4e9ad9feb3c5a3bbd902b1781714e5ee165d3c7
aws-machine-controllers git 61d60f6c sha256:04ee351281a1e65faf93febc34eb2d2d9d41b93854272033b42cecee004654e8
aws-pod-identity-webhook git 746491a6 sha256:27f1b394ed93aa6ef07025e28d2d95539153d8cecc1cbaa62b6f037e3af00541
azure-cloud-controller-manager git 0e955329 sha256:7059f18f16b95e7a1652ae22f437c0376df787d285e842326b59e0ff1a05ed74
azure-cloud-node-manager git 0e955329 sha256:e50f98b24a6cd5d6d281ab96a81f7527d3d56ac8e0637214df378d68b2d02173
azure-cluster-api-controllers git a81e3b31 sha256:2587b1ddf70bd5c72cc685636dd727e6ec32815cc7cc6229b4fc59f38caa7ea5
azure-disk-csi-driver git 6b55f6fb sha256:10b95469bb6a5b0e9beabd8da6685d5fe558a8d360be3cb29891c9a5d7d87172
azure-disk-csi-driver-operator git ff69cd03 sha256:54cf23c99d395e137480609ddf4166ca7388991fa669b6b8b593d6c9fc2951a4
azure-file-csi-driver-operator git ff69cd03 sha256:8677d41f05503c944d7f11f6842934a305413ab360ae6dfa99b7d8b59301e82a
azure-machine-controllers git e4e11505 sha256:15056414e682cd4f482226727ebb6795278dd6052adad53639c1ce819c65fee7
azure-workload-identity-webhook git 4aca092a sha256:076ecb778f609024b2fb0675b9733ed0662d2e889ec279b8e52c774d459c97a5
baremetal-machine-controllers git 11ba601f sha256:ccbf8910cdc2a2e5de54a3dc3666127c48ebfbc2aa7e68f9f56d62c06c4bade6
baremetal-runtimecfg git f55a330f sha256:b7ae17994a1c0c30c17d3706dacbe0bdea0449a54567f2f8342f3e02066203d4
cloud-network-config-controller git 8ceee788 sha256:73bcb0279325ec2e068cd0af4214af7b384b03cec5e6f7f629e50f6e84c88f74
cluster-authentication-operator git bae1e1c4 sha256:1865ea8aa8b130995815d49a37de787c8b62c5435389461a210d19493cf782f2
cluster-autoscaler git eecb123a sha256:3926f4e121655dab8d58ca23c601f77bb04ee61f444f33a33276b3fd7e9072ba
cluster-autoscaler-operator git 40cadf8a sha256:28060c10f26cd83f9f0bab0d3833a0afd52dedc6cc790f45e5c2fa4599105fd5
cluster-bootstrap git 27bfb59f sha256:9f709f6ea138151b5f0d81cb60779d610fcfe9414a48d87e7a8256d12b043b04
cluster-capi-controllers git 5830a10a sha256:7f40074fe7158b577254899ed05bd92123faee4ef136e5f9040e2eac7aa7d32e
cluster-capi-operator git 3a2f98fb sha256:a93d837323073e8408e6c5fbecbbd672f782552170c57014f85bcd845c23309e
cluster-cloud-controller-manager-operator git d4008130 sha256:211330b739b3f3ccf38c455c9ac2b784e8fe210799a8b478ae169d5d0a3fbf4e
cluster-config-operator git 441d29c9 sha256:8918d812afa08eda5f6fbfd0913c239b32b95d62e7727cbed9489ab435867938
cluster-control-plane-machine-set-operator git b0cb3dfa sha256:77bb21effc2ad587e1fc139aa625f895f7ebf19277ed0e3c31014040d6da7170
cluster-csi-snapshot-controller-operator git 439826e1 sha256:3b9e43df644b05cdf69665a9d5d231ba19a7846aa8d3babd9968a3ec33fd32dc
cluster-dns-operator git 8ddf28f9 sha256:18fd93558b0972ef27a7836669bdfc5d7e1f44d9e7db4dca49deeb15f292b3ef
cluster-kube-apiserver-operator git de2f2ac2 sha256:94eb592be27d898c569e07562aecb157d7ba5db6c6455da18845350b948c3fc1
cluster-kube-cluster-api-operator git 95ceaa9e sha256:d0637e86b30fb37cff09890066acd3fa179de3738a869c2d7cd064da74d5f6c1
cluster-kube-controller-manager-operator git 0338b3be sha256:27d3c9c3aab97eb994363beacd52cd2df01ab2e2256e1fc0bac8afd5ed753ef1
cluster-kube-scheduler-operator git 630f63bc sha256:997034690ff04f6c4697d1b0768673ac36e26197ed8e2123ee5b0f188df5bed7
cluster-machine-approver git 3eba7eed sha256:7e21f435213fa96707dae0974759080ebad2fae5d17704694f36364fb032674b
cluster-olm-operator git 27bf70dd sha256:aca7790786a0c4f3da8672bfb67ca7231a044b669345559c57f699b55b696709
cluster-openshift-apiserver-operator git d26f3002 sha256:ce18681a7994540c930a4f564bdb6ef179693218f931e78656f132c2fe5620ef
cluster-openshift-controller-manager-operator git bcc371cc sha256:c607e2d8b876c65a67099f5262ef4cc31bcf96c6e8f3b815b06e83ebde5e563f
cluster-policy-controller git eaea543f sha256:6e4339de9a9b08a2bb2e7c452d8bf1297063b84fb426f7d1d5ae9669970c1845
cluster-version-operator git 617769f9 sha256:59cf55a6269ba370f426e18317188de4acf6aee4eee7f79f96d3f2066c9643b0
configmap-reloader git dc91ddc4 sha256:e2ae7431075d5cce23013399e843084b7d26bc0e52530e7001ab57fa4ee0a364
console-operator git 92447df5 sha256:514ab7310f840027dc2609b10fa465eb6282c11d110f3d69efcf21ea5ef63ec9
container-networking-plugins git 73b4123c sha256:e003b5cd2331fcf64612c9f63ffeb79821556dc9953efbf2c4135e88e28d324a
containernetworking-plugins-microshift git 73b4123c sha256:a659df32b2c45e4a4e416ca6de4bfecd4eda4d1a60fa930cc2ec9a5856ad9ea8
coredns git 1e417656 sha256:bd6efec780391d82ac1fdcf1756c14d5b589e0edde75e0ab79fb34e987f9c610
csi-driver-manila git b7e9010d sha256:95b269780efa9f3a3e9305b6bac3e7234c99e3a6e4d7cb6a5b6cfab5a963a881
csi-driver-nfs git 406cec72 sha256:3eb6e2d693f2354bd3317104530aad90be183c082dcb20ee515e07fcc48436f4
csi-driver-shared-resource git bc125def sha256:3050949d8851d611a23a3d83e5b5b4d611603ecf55fe2254979d0342903b41d5
csi-driver-shared-resource-operator git 1e1194bc sha256:94688366ec93978fcb38fc670b785e521925e67543ed76ca24db5a1d4603b83b
csi-driver-shared-resource-webhook git bc125def sha256:8efea1cf0b2248d729bd84da28bc6ac2c5b8398a2990bf72bf5bfd7a57c04855
csi-external-attacher git 7da80aab sha256:13167b6098fc081275f72f7542861a4d0400447f9901792bf179cfebd53f725d
csi-external-provisioner git 9e8af011 sha256:b3f893b1ece9780a4ce3fd79a2581af4861f68361cda9a66b7e83d3f48e28003
csi-external-resizer git bdf5bfb4 sha256:2379da0a5d2e2cc0f1ae115f3f9de11dc9df5c6670a641814321ded76547e25f
csi-external-snapshotter git 5315d37a sha256:94c3eb8a06df3f052a6540d64dc52495d60b353065f61ead7d557fbc4a720eba
csi-livenessprobe git f5e3ff55 sha256:52059a5d5ffa5da17f36a7f09aa8aefb0835dcf6acc4557a5a1b89cad14cc2a2
csi-node-driver-registrar git 8930c368 sha256:c116247a477876781d7ece5f5fb0e523590a47238276d5b016d6fb54e8b8aa85
csi-snapshot-controller git 5315d37a sha256:5c6088b46aea36834f6c7255d11e0f3b196a6bc72a1ea42260f007a1cd304b1a
csi-snapshot-validation-webhook git 5315d37a sha256:5d51dc5e80e1020cb70dbe9c235bd88d7b0fe13ae43273911fd6e0839e29c1ef
driver-toolkit git 1d5732f0 sha256:e2e2e13e4d3a4521bba65985d33495d59a7f67ecc273ad3637b11bc481bf1a6d
egress-router-cni git 7089efe6 sha256:551111b069ee98c13760f73dbe191a40e6a847dd7ec731a000da5945c69f5aa1
etcd git 16202ec4 sha256:6042cc22604bae935e341d8bac91ed268419f55b50b534ef81c9de4275921f1c
gcp-cloud-controller-manager git 26b43dfc sha256:d3d0767e7f7021d14b50f108337d7bb2c7133ac912bf720d97c068e6d232b74a
gcp-cluster-api-controllers git 02432df8 sha256:661bf489f29b61a171017efdab2a9057c2e135c692861efcf4fd1510a3554a0b
gcp-machine-controllers git e72657c0 sha256:f27badab622d549b22ddc3729c2b4a7ff5ebcc477a8c5498ea49be9ecf66c9a8
gcp-pd-csi-driver git 5ed71c64 sha256:9aa09f6f9c406d7a564dd56de2e7b9dd8cb49ad3e65204d3fbb89f9264ed948d
gcp-pd-csi-driver-operator git 799327f7 sha256:734ff41f84f5ecc0f6fca1d00526b25478e376c6a1ee6e31ef539babae8b4646
haproxy-router git 4d9b8c4a sha256:6cb010148728790e274dc35124bdfd8eb73ab700e2d960f557d62b543c41c77d
ibm-cloud-controller-manager git f961f16d sha256:65c794908ab2d25f5af0a44226a8f52739cd6d68527b0fbd304c4808b9e959f7
ibm-vpc-block-csi-driver git 95719738 sha256:5523c6cf60aa2b7e04fff6bfe89e15b1614ce17218258e0ce34e233e7c342a9d
ibmcloud-cluster-api-controllers git 60b7ca98 sha256:8012c5f620c266a0a1a5b7a3e1dcc80a4e00cfd09049a39c9c71d44e87e75a88
ibmcloud-machine-controllers git 1a3a3030 sha256:bb3b61b24143587e666ecac3b243f147ce57f0e95568830a7019ef9c2a50d694
ironic-machine-os-downloader git 93b8b5fa sha256:6e5823a95010269f3dfca76688c1aef8031215c775f9d6d031c6268bdf6c23ee
ironic-static-ip-manager git e78e4c3e sha256:7abd406cd883cca552ed4d9b820713fd103972240bce56584c0b5c12aacf4f8e
k8s-prometheus-adapter git e4f859be sha256:09c71c17cac7107a0e176c8c8b97102ed308c6b124bb382df6319b155e32da59
keepalived-ipfailover git b58673a3 sha256:dcd55ef2d57096d7cc3ef3cf8aa628d303b13a1cd3122c1bf0f7da5a1bbcbeb1
kube-rbac-proxy git 8ea2c994 sha256:e88d455d3eae4ddcca31e103557ce494ab00f1bd88557b9974f5f5a5311184f4
kube-state-metrics git 9b67b8d1 sha256:9d5f8e059dc460af730833689223f1488e5fbc24ae6d99de719294709fe914af
kube-storage-version-migrator git 969a60e9 sha256:217581eb283ffa3b20c324d766c7cdae9ddefbcd8df626bba565c26cd02cbf64
kubevirt-cloud-controller-manager git 3db76104 sha256:3105e1966d3cc83969ea6c64dce6c4159e56fe29b92d9a38dfe4df30f25efe94
kubevirt-csi-driver git 0693093f sha256:cf4c3f16000d26e1d39d0c0c040c978737671451a055f5e88898d9e1d3d59d20
libvirt-machine-controllers git a336f0b5 sha256:470158e5006e1c1911e980b9f6cecd2b7d2c0b8b48bda71d32e126d16962b344
machine-image-customization-controller git 39480963 sha256:8d49c1a52c777dc6cc8643ff9d9c28fefe7c63185944f5aa2e122ddd431d0d7e
machine-os-images git 3cc97098 sha256:e68809c69e6a2406d550e4ec9915ea8b500f7ae652c21d2d77e3ff644d93bde0
multus-admission-controller git 88c596ed sha256:dfb8755490f1181c9e4a385e5468ca83083d5e8307df09f4124a11ae321dfbd2
multus-cni git c4aa21b9 sha256:2e306bf1c9af83559491b299513d78d3043fff323434bc9ddca5a695c4b2ef30
multus-cni-microshift git c4aa21b9 sha256:0483ddb6a434b59d6bbbb5dc9989c9ad2b42a5addee89fd12589515a97276c7b
multus-networkpolicy git f988f894 sha256:1a23dd0fa90812645a10777595a0d8d05f2a1ca085fdba49fb4e7530bf8ce022
multus-route-override-cni git 73594f77 sha256:0d21cc1d7cf3807c0dd28202e1d6c0db20c6ce2c7c948bdbe7da85faa0490a01
multus-whereabouts-ipam-cni git dab1dd29 sha256:00bde18097829619a5bdb26234551b05d2992497de547f1549991f7dbcb7151b
network-interface-bond-cni git bb911451 sha256:f5bd365edac43416f3ac30daba85553bf8392d383202b95962a892b0dca004e3
network-metrics-daemon git 48059263 sha256:cef9b0d1925213f1bb3504d7f9ce3f177056ee3aa73b4cc51f68aaa0d0d76f4a
network-tools git 39eca100 sha256:072e0720599a3d10764b1adbf1c120c51180981409913a4a268d292e3d1a4c47
nutanix-cloud-controller-manager git c9bbc44c sha256:17c51cad970d73c0217b6ba8cf89b5adea91eb04aad87a627ee16714e1f3f4cc
nutanix-machine-controllers git f053e5a0 sha256:6889117fb74225d8975f9678f459ccc19aa069922d4fc203fedd77fe615ab606
oauth-apiserver git fa1f097c sha256:e89fe2abe74d64bb85dffa17604237e2d394d27131d97928e7bc41bcc8bddbc5
oauth-proxy git 30f80124 sha256:d8bdbedff34ff739f34a441ab119c1fe461f3e06c8e013b7779599daa1839f8d
oauth-server git 3739138c sha256:f9f637909b35cdd3f118cf5a9c6d8d0ed1e0889765feb0deab1e6b52d15aaba4
oc-mirror git 819f0115 sha256:5e0269217cd6c09a2d00e9edf315150bcd39f96949a95a572795393cd3f5eb05
olm-catalogd git 79975a51 sha256:fc9e02a47d0eb498eb4b054b4207eb220b8bf7a38623a6c1081bc1970d3d6f87
olm-operator-controller git 80b8649c sha256:ef910bd9252638c6d89065ce7017222c654608775a6361a6c72fd45507cc7083
olm-rukpak git 282cc84c sha256:0662b47786d8f5245579c1ce37187201b15d3d989eac77443f03d25653182e0e
openshift-state-metrics git 59b8a0ff sha256:9047a4d5a710ef483ffcf0c756bcf749d8edd8e16f77b13ae951b3b944a5eac7
openstack-cinder-csi-driver git b7e9010d sha256:8d97db4f41b59d7b0e332b3b7c902c7ea1d1d02989fcb68a97a876cee7ec449d
openstack-cinder-csi-driver-operator git 85b52097 sha256:bd6b5569a7c84fcbb3dbdbd1d146ee607d51cdba1311444a945fbbe308ea7570
openstack-cloud-controller-manager git b7e9010d sha256:b230f3b5a491448fff8538ab540f7a848aabb930813b46708e56cf22e4019ef0
operator-marketplace git 7db179fb sha256:0ac8243111a5d49c9b54881c219b79b1819a40c893784a5bd3cf7df695719154
ovirt-csi-driver git 1db726a9 sha256:5f313a03d31f8bb633a0e0c3522f1653ec1098b0d1a60ff2663ce73b6da097c8
ovirt-csi-driver-operator git ac852f3e sha256:fefbbd3732f8c3e1674d0db26350821d6d3fe2ea3c146de2272ebacec48b4406
ovirt-machine-controllers git abb91c84 sha256:1e5fcbc293d7529c6fe45b78b32afee9d5a0e2e3804757b2b96cb32ab05799d1
powervs-block-csi-driver git 26162bad sha256:65b12ce61786e2f608ba696ec7ef660d22d3577321f6695baa6df673aeb188fe
powervs-block-csi-driver-operator git 9c5dd8d1 sha256:fb0a354cc04ec4dc13b9914deb4a5d3745142c69a37574e23d451dd225193f70
powervs-cloud-controller-manager git 20e6dc70 sha256:09bbfbfa0b4617e169345e1ac70387c361fbe194d47cb43ebc24cb14d83a515d
prom-label-proxy git 5e14722e sha256:865de909c4b5135f3498193472ea3d09bb012497884b3ee716916644ffebff4e
prometheus-alertmanager git e9aea929 sha256:641f625c472613aa587d5cccc498ce1dcd0d21ddd11b0d046d6de1015d67cf7f
prometheus-node-exporter git 29ba26d1 sha256:4d503a4c05351b2a54b5025050c8761fae94da0a20218f2a92dd75979f0c55df
rhel-coreos sha256:4953eceb38b2a74631a520886dbee8bcb0a2db3fa12b950f4434d46e99380b2a
rhel-coreos-extensions sha256:fb3b9b24b7ad567e979ee85d936abe503f0b2fa8ea00527dd72f2e85067d26da
route-controller-manager git 3112b458 sha256:2e38478073ac41c5ebdc3b121c5c41dd464e7ce47d61d9ecc88dd7b17838155f
service-ca-operator git 538c7b98 sha256:43dcca8dc726eda2c47621089698349d987aa8261e283ee807bb5be2b24ce03d
telemeter git c1ecd105 sha256:df94d6b9f598a889ed75e2e079e3ce8452d50dc17bf539eb74c92154c4902eca
thanos git 85eee25c sha256:f0c7c8556906dddd1c7cf74a4a358bc34d9eb180a8f408603d56b91657e78505
vsphere-cluster-api-controllers git be22f10a sha256:10cad44ace09e4bacd6582dc45f1e3d6448dca5a88adebdfb3857afdc5ea7213
vsphere-csi-driver-operator git 483de9c5 sha256:857888602e21c2a0bb30ac598149a3dfea228bc517d140e7f075eae00806ac2a
vsphere-problem-detector git 3683c120 sha256:e9cd246723bd0955a8a888a9bea908a5342ad3d639ea1c9edc3d273073cfc194

agent-installer-api-server

OCPBUGS-43021: Update go-jose to v2.6.3 to mitigate CVE-2024-28180 (#6893) #6893
OCPBUGS-42570: Libraries bump to mitigate CVE-2024-27289 (#6833) #6833
OCPBUGS-36577: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#6752) #6752
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-38466: Allow controller to continue when assisted-service (#914) #914
OCPBUGS-43025: Pick up latest CVE changes by bumping service (#920) #920
OCPBUGS-36577: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#906) #906
Full changelog

agent-installer-node-agent

OCPBUGS-43028: Pick up latest CVE changes by bumping service (#804) #804
OCPBUGS-42300: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#785) #785
Full changelog

apiserver-network-proxy

OCPBUGS-38062: Revert “Agent: Respect HTTPS_PROXY env vars for proxied connections” #59
Full changelog

aws-kms-encryption-provider

OCPBUGS-33693: Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.16 #18
hack: display diff on verify-mod-tidy failure #26
Full changelog

azure-file-csi-driver

OCPBUGS-39145: bump mount-utils to treat ENODEV error as corrupted mount #76
Full changelog

azure-kms-encryption-provider

OCPBUGS-33692: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.16 #4
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-42014: Update terraform provider for google #9077
OCPBUGS-38732: vsphere, if secureboot is enabled, disable it in the template #8904
OCPBUGS-39415: OpenStack: Install CI dependencies from rpm #8995
OCPBUGS-41334: Fix IPv6 security group rule for schedulable master #8971
OCPBUGS-38687: only allow a single network in failure domain topology #8875
OCPBUGS-42062: OCPBUGS-41865: [release-4.16] vault version updated to 1.13.10 #9036
OCPBUGS-42012: Systemd Fails to Parse Multiline EC Keys #9037
OCPBUGS-41845: Bump extract-machine-os timout to 20m #8997
OCPBUGS-38964: IngressController subnet selection in AWS #8910
OCPBUGS-42138: add tested instance type for IBMCloud #9031
OCPBUGS-39287: Fix var_files syntax to work on older version of ansible #8936
OCPBUGS-41929: Add AWS c7g,m7g,r8g to tested instance types #9009
OCPBUGS-36855: Openstack UPI - Reintroduce unique resource names. #8724
OCPBUGS-39082: incorrect folder gen, workaround govmomi vm folder path bug #8912
OCPBUGS-39496: capi/aws/byo-vpc/multi-cidr: fix group rules #8953
OCPBUGS-36861: Updates GCP terraform worker role #8939
OCPBUGS-38956: failed to install Nutanix OCP 4.16 cluster with DHCP #8905
OCPBUGS-38822: upstream capv bug causes session timeout #8891
OCPBUGS-39468: Enable TLS for virtual media in initial ironic deployment #8955
OCPBUGS-37606: vSphere validation fails if dc is in a folder #8777
OCPBUGS-39206: Update GCP Disk Types 4.16 #8920
OCPBUGS-39087: aws: validate public-only subnets configs #8913
OCPBUGS-38821: [release-4.16] Azure: Disable shared key access when using a managed identity #8855
OCPBUGS-38302: upi/aws: update lambda runtime python version #8897
OCPBUGS-38826: aws: add support for clusters with public-only subnets #8892
OCPBUGS-38517: [release-4.16] capi/aws: bump provider for instance register fix #8848
OCPBUGS-38196: Remove timed context for gcp client #8818
OCPBUGS-38502: PowerVS: Fix mad system pool #8846
Full changelog

baremetal-operator

OCPBUGS-39490: Disallow fetching secrets from namespaces different from the host’s one #378
OCPBUGS-38938: [OCP] Ability to disable agent power off after deployment #372
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-42720: Check cast result in adm prune deployments to prevent panic #1891
OCPBUGS-39341: Ignore pruning when deployment points to replicationcontroller #1862
Full changelog

cloud-credential-operator

OCPBUGS-43337: Update github.com/sirupsen/logrus v1.9.3 #767
OCPBUGS-41234: List secrets in batches to avoid api timeout #757
OCPBUGS-38376: Update google.golang.org/grpc v1.65.0 #748
Full changelog

cluster-baremetal-operator

OCPBUGS-31961: bump x/net to 0.23.0 #431
OCPBUGS-36415: set required-scc for openshift workloads #433
Full changelog

cluster-config-api

OCPBUGS-38773: remove duplicate featuregate ‘ExternalRouteCertificate’ #2007
Full changelog

cluster-etcd-operator

OCPBUGS-33673: rename flowschema to avoid log noise in CVO #1348
Full changelog

cluster-image-registry-operator

OCPBUGS-42933: azureclient: stop validating credentials when creating the client #1134
OCPBUGS-42420: Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) #1126
Revert “[release-4.16] OCPBUGS-41903: pkg/operator/azurepathfixcontroller: do not sync on non-azure storage” #1119
OCPBUGS-41903: pkg/operator/azurepathfixcontroller: do not sync on non-azure storage #1115
OCPBUGS-39098: Avoid Shared Access Key usage for Azure Storage Account when using Managed Identity based auth #1104
OCPBUGS-38894: pkg/resource/azurepathfixjob: invoke update-ca-trust extract with –output #1102
OCPBUGS-38894: pkg/resource: invoke update-ca-trust extract with –output #1098
Full changelog

cluster-ingress-operator

OCPBUGS-39324: Refine logging for accurate infra CR status updates #1139
OCPBUGS-39323: Ingress operator status not degraded when canary route fails #1138
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-38269: bump protobuf #115
Full changelog

cluster-monitoring-operator

OCPBUGS-41967: disable user-defined monitoring per object #2474
OCPBUGS-42067: Reapply “chore: poll immediately in the e2e tests” #2476
OCPBUGS-41717: Configure graceful shutdown for metrics-server (4.16 backport) #2467
OCPBUGS-41910: filter alerts sent to Telemeter #2471
OCPBUGS-39170: Backport #2441 for 4.16 #2447
Full changelog

cluster-network-operator

OCPBUGS-43035: Configure narrowing=yes for IPsec connections #2528
OCPBUGS-36594: Set mount propagation to HostToContainer for /var/lib/kubelet #2430
OCPBUGS-41840: Add configurable subnets while running hybrid-overlay-node binary #2502
OCPBUGS-37763: Handle random crictl errors in iptables-alerter #2452
OCPBUGS-41555: HyperShift: do not use antiaffinity on single replica control planes #2494
OCPBUGS-37937: Add proxy env vars to onvkube-node #2457
OCPBUGS-41607: set required-scc for openshift workloads #2496
Full changelog

cluster-node-tuning-operator

E2E: Add test to verify cpuset.cpus.exclusive is writeable (#1153) #1153
OCPBUGS-39005: Add cluster-wide proxy env file (#1166) #1166
OCPBUGS-36431 Fix generated cpu mask for 512+ cpus (#1152) #1152
E2E: Remove checking of reserved cpus in irqbalance file (#1156) #1156
Fix the destination of asset’s copy (#1134) #1134
Full changelog

cluster-samples-operator

OKD-225: remove only the EOL CentOS 7 images #576
Full changelog

cluster-storage-operator

NO-JIRA: release-4.16: Run make update #512
Full changelog

cluster-update-keys

OCPBUGS-43467: keys: Update Red Hat keys to use SHA256 signatures #64
Full changelog

console

OCPBUGS-42369: Console crashes when ssh is selected in add secret for starting a pipeline run #14320
OCPBUGS-41904: fix annotation for ovn localnet #14366
OCPBUGS-37615: Include PatternFly-4 chart styles so they are available for dynamic plugins that still use PF4 react-charts #14091
OCPBUGS-37689: Switch to use annotations as labels from PipelineRuns created through Pipelines as Code is deprecated #14094
OCPBUGS-42015: Topology screen crashes when completed pod is selected #14298
OCPBUGS-35850: Fix: Quick Start “next” button requires double click to move to next step #13989
OCPBUGS-42382: Allow operators to enable monitoring by default #14317
OCPBUGS-41905: List of default Camel K event sources disappears when adding a custom event source #14290
OCPBUGS-41709: Need to allow blank for Project/namespace when setting SA Subject in ‘Project access tab’ #14278
OCPBUGS-42069: add Create button to Console plugins tab #14302
OCPBUGS-41996: Fix updating the “Until” field on the Silence > Edit page #14296
OCPBUGS-38112: do not directly mutate links in useMemo #14117
OCPBUGS-34518: Restore user toggle when authentification is disabled #13902
OCPBUGS-41619: Use vCenterCluster value from CM as primary resource #14268
OCPBUGS-37046: Fix TypeError: Cannot read properties of null (reading ‘metadata’) in Topology view #14059
OCPBUGS-38911: Values entered into the Instantiate Template form are automatically cleared #14187
OCPBUGS-38914: Unrelated readme opened when opening CodeReady workspaces from Quarkus using s2i quickstart #14188
OCPBUGS-38968: A value submitted in From view is wrapped with single quotation after switching to Yaml view. #14193
OCPBUGS-38424: fix bug where cluster version text appears black in da… #14144
OCPBUGS-38464: correct casing in “Lightspeed” #14148
OCPBUGS-37430: Fix utilization card limits/total display #14082
OCPBUGS-36510: DeploymentConfigs deprecation info alert should not present on the Edit deployment page #14031
OCPBUGS-37954: No access to list pipelines.tekton.dev prevents from using Delete application form #14107
OCPBUGS-36601: Tooltip on Pipeline when expression is not shows #14033
OCPBUGS-38803: CONSOLE-4108 [4.16 backport] Show deprecated operators in OperatorHub #14095
OCPBUGS-37048: Fix “Auto deploy when new image is available” becomes unchecked when editing a deployment from web console #14060
OCPBUGS-35839: Fix placement of icons on WebKit #13988
OCPBUGS-35271: Fix password set to Secret created through Start Pipeline form #13954
Full changelog

csi-driver-manila-operator

OCPBUGS-38458: Add missing healthchecks #241
OCPBUGS-30438: Bump protobuf dependency #237
OCPBUGS-38013: Set required-scc for openshift workloads #235
Full changelog

docker-builder

OCPBUGS-30455: bump google.golang.org/protobuf to 1.33.0 #402
Full changelog

docker-registry

OCPBUGS-39412: pull upstream distribution changes to use a consistent multipart chunk size #410
Full changelog

hyperkube, pod

release-4.16] OCPBUGS-42057: UPSTREAM: <drop>: bump(github.com/openshift/apiserver-library-go) #2096
OCPBUGS-39015: Bump k8s api to 1.29.8 #2066
OCPBUGS-36773: UPSTREAM: <carry>: Disable vSphere tests with pre-provisioned volumes #2021
Full changelog

hypershift

OCPBUGS-43104: label routes only when HCP router used #4899
OCPBUGS-43308: Use guest DNS resolution in Konnectivity HTTPS proxy by default #4905
NO-JIRA: chore(deps): update konflux references (release-4.16) #4923
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.41 (release-4.16) #4919
NO-JIRA: chore(deps): update konflux references to 674e70f (release-4.16) #4908
NO-JIRA: chore(deps): update konflux references (release-4.16) #4896
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.40 (release-4.16) #4880
OCPBUGS-42432: Use KubeClientCABundle for HostedClusterConfigOperator cluster-signer-ca #4799
OCPBUGS-42342: Let payload generation pick the release for the NodePool #4787
OCPBUGS-42431: Conditionally manage kubeconfig secrets for DNS and Ingress operators #4798
NO-JIRA: chore(deps): update konflux references (release-4.16) #4853
OCPBUGS-42608: Add Annotation to skip deleting hcp namespace #4830
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.39 (release-4.16) #4827
chore(deps): update konflux references (release-4.16) #4816
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.38 (release-4.16) #4806
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.37 (release-4.16) #4796
chore(deps): update konflux references (release-4.16) #4781
NO-JIRA: chore(deps): update konflux references (release-4.16) #4760
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.36 (release-4.16) #4759
NO-JIRA: Security fixes for openshift-ci-security job #4750
OCPBUGS-41372: CPO oauth idp converter: resolve names before dialing #4689
NO-JIRA: chore(deps): update golang docker tag to v1.23 (release-4.16) #4729
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.34 (release-4.16) #4728
NO-JIRA: chore(deps): update konflux references (release-4.16) #4727
OCPBUGS-38058: Add HTTP konnectivity proxy to OAuth server #4496
HOSTEDCP-1955: bump CCO version #4696
OCPBUGS-34803: cmd: report server version, supported OCP #4141
OCPBUGS-39293: copy image-registry AdditionalTrustedCA configmap into HC openshift-config #4647
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-9 (release-4.16) #4685
OCPBUGS-38062: [release-4.16] Use HTTP proxy for ingress controller #4688
NO-JIRA: chore(deps): update konflux references (release-4.16) #4684
OCPBUGS-39447: handle version skewed NodePools that do not have rhel9 binaries #4664
HOSTEDCP-1895: [release-4.16] Allow setting Kube APIServer maximum requests in flight #4551
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-7.1724661022 (release-4.16) #4600
chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.33 (release-4.16) #4602
chore(deps): update konflux references (release-4.16) #4599
OCPBUGS-38942: copy oapi ca-trust recursively when building trust anchor #4615
NO-JIRA: Flaky cert validation test #4622
OCPBUGS-38259: Set KCM node monitor grace period #4520
OCPBUGS-38726: fix: bump github.com/IBM/go-sdk-core/v5 #4611
HOSTEDCP-1764: retrieve registryOverrides when ImageStream is not ava… #4541
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-7 (release-4.16) #4525
OCPBUGS-36781: Set Azure VM identity if user assigned identity set #4341
OCPBUGS-37936: set proxy envvars on aws and azure CCMs #4476
OCPBUGS-38486: hcco: reconcile apiserver config into hosted cluster #4559
NO-JIRA: fix(KONFLUX-3663): format PipelineRun files and upload SAST results #4534
OCPBUGS-38131: Let the CPO oidc check resolve through data plane #4505
NO-JIRA: test: relax mgmt KAS egress check #4561
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-42286: Reorder static resources to create RBAC first #129
Full changelog

insights-operator

OCPBUGS-39564: Not able to enable repositories during entitled build in OCP Cluster on IBM-Z (#1013) #1013
OCPBUGS-39394: collect some nmstate customresources (#986) (#989) (#995) #986
OCPBUGS-38021: Integration of the OpenStack CRs into the insights-operator (#974) #974
Add haproxy metric (#977) #977
Full changelog

ironic

OCPBUGS-39017: Bump ironic-lib to fix utf8 decoding issue #569
OCPBUGS-38797: redfish-virtualmedia fails on XFusion nodes #564
OCPBUGS-42113: Update ironic-inspector to fix the memory leak #587
OCPBUGS-37758, OCPBUGS-39383: Include fixes for CVE-2024-44082 #579
OCPBUGS-38510: set min version for python3-webob #553
Full changelog

ironic-agent

OCPBUGS-39017: Bump ironic-lib to fix utf8 decoding issue #156
OCPBUGS-39383: Include fixes for CVE-2024-44082 #161
OCPBUGS-38510: set webob and bump werkzeug #149
Full changelog

kube-metrics-server

OCPBUGS-41717: Wire server run options to flags. ([release-4.16] backport) #37
Full changelog

kube-proxy, sdn

OCPBUGS-42203: fix UDP conntrack cleanup #636
OCPBUGS-42159: fix redundant router-default iptables rule #633
Full changelog

machine-api-operator

OCPBUGS-43433: Vsphere: Handle cloned instance with lost taskID #1298
CORS-3648: Add the hyperdisk-balanced disk type #1279
Full changelog

machine-config-operator

OCPBUGS-41293: Enable the use of Linux Bridge as the ovs default port connection #4563
OCPBUGS-41256: Set ESP offloads off in bonds if slaves don’t support them #4627
OCPBUGS-41806: When newly built images rolled out, the update progress is not displaying correctly (went 0 –> 3) #4584
OCPBUGS-41518: CVE-2024-3727 ose-machine-config-operator-container: containers/image: digest type does not guarantee valid type #4569
OCPBUGS-38997: Machine-config daemon ListPools panic during tech-preview CI runs #4550
OCPBUGS-38711: SCC-pinning for openshift workloads #4539
OCPBUGS-36850: Port number 22623 exposing weak ciphers to external client from master node IP #4556
Full changelog

monitoring-plugin

OCPBUGS-42424: fix path-to-regexp dependency #197
Full changelog

must-gather

OCPBUGS-43056: Open [Release-4.16] Multus is now a Pod and will be captured by normal #449
Full changelog

openshift-apiserver

OCPBUGS-42724: fail image import when both image and error are nil #455
Full changelog

openshift-controller-manager

OCPBUGS-42420: Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) #343
OCPBUGS-39191: replaces deprecated square/go-jose wtih go-jose/go-jose #329
OCPBUGS-37526: Race condition when deleting ServiceAccount #324
Full changelog

openstack-cluster-api-controllers

OCPBUGS-34931: rebase on release-0.10 (to fix trunks deletion) #321
Full changelog

openstack-machine-api-provider

OCPBUGS-34931: bump CAPO to v0.9.2 #124
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-41540: [4.16] add optional schema migrations; default to olm.bundle.object instead of olm.csv.metadata (#1384) #859
OCPBUGS-41677: [4.17] adds paginating lister for evaluating CRs’ upgrade fitness versus new CRDs. #863
OCPBUGS-41557: Fix e2e flake: upgrade CRD with deprecated version #861
OCPBUGS-41217: (fix) registry pods do not come up again after node failure (#3366) #854
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-41551: Add subnet overlap check for transit switch subnet #2306
OCPBUGS-38697: Use more exact name match when deleting static routes to HO nodes. #2282
OCPBUGS-24386: [release-4.16] EgressService: Fix ETP=Local ingress reply for LGW #2278
OCPBUGS-38705: Delete EgressIP LRP stale nexthops when node is not found #2271
OCPBUGS-38054: Fix per-pod MCS/metadata blocking #2248
OCPBUGS-38699, OCPBUGS-38704: EgressIP VRF support & ignore localnet patch ports when bootstrapping #2267
Full changelog

powervs-machine-controllers

OCPBUGS-41976: Update go.mod to fix CVE - 4.16 #84
Full changelog

prometheus

OCPBUGS-39179: Restore Prometheus functionality to accept samples with different timestamps from the same series in a single scrape. #224
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-38399: feat: sync proxy settings in Alertmanager configuration #299
Full changelog

tests

OCPBUGS-39135: Bump timeout for the pod-network-service endpoints check #29052
OCPBUGS-41611: Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token [apigroup:build.openshift.io] #29079
OCPBUGS-38707: run vsphere driver config test on non techpreview clusters #28992
OCPBUGS-38788: [4.16] egressfirewall: skip ping tests in case of hypershift kubevirt on Azure infra #28938
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-37660: Bump otelgrpc to v0.53.0 #72
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-42878: Add compute resource entity to consider a standalone cluster for volu… #131
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github