4.16.27

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.16.27-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.16-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.16-micro Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.16-micro Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.16-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.16-fips-payload-scan
- gcp-ovn-rt-upgrade-4.16-minor Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.16-upgrade-from-stable-4.15-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.16 Succeeded periodic-ci-openshift-hypershift-release-4.16-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.15.21, 4.15.22, 4.15.24, 4.15.25, 4.15.26, 4.15.27, 4.15.29, 4.15.30, 4.15.31, 4.15.32, 4.15.33, 4.15.35, 4.15.36, 4.15.37, 4.15.38, 4.16.10, 4.16.11, 4.16.12, 4.16.13, 4.16.15, 4.16.16, 4.16.18, 4.16.19, 4.16.20, 4.16.21, 4.16.3, 4.16.4, 4.16.5, 4.16.6, 4.16.7, 4.16.8, 4.16.9

4.16.26 (changes) - S F S S S S
4.16.25 (changes) - Success
4.16.24 (changes) - Failed
4.16.23 (changes) - Success
4.16.17 (changes) - Failed
4.16.14 - Success
4.16.2 (changes) - Success
4.16.1 (changes) - Success
4.16.0 (changes) - Failed
4.15.41 (changes) - Success Success
4.15.40 (changes) - Success
4.15.39 (changes) - Failed
4.15.34 (changes) - Success
4.15.28 (changes) - Success
4.15.23 (changes) - Failed
4.15.20 (changes) - Failed
4.15.19 (changes) - Failed
4.15.18 (changes) - Failed
4.15.0-0.nightly-2024-12-11-104050 (changes) - Failed Success

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.16.14

Created: 2024-12-12 09:38:43 +0000 UTC

Image Digest: sha256:efc3a4f3db634bc6733dcad71cd57040da05c5f203df9447fa7f7a1a9067fa39

Components

Kubectl 1.29.7
Kubernetes upgraded from 1.29.8 to 1.29.10
Kubernetes Tests 1.29.0
Red Hat Enterprise Linux CoreOS upgraded from 416.94.202409181502-0 to 416.94.202412100237-0 (diff)

Rebuilt images without code change

agent-installer-utils git 6e6bb40d sha256:7981b96420036bb5ecde2f93c34efb3405940945aab8a8cfc7513758fee45635
alibaba-cloud-controller-manager git 97e8335e sha256:4178191a4c895bce7c3b5c513c526f4f7f6e55f5dc7ce0901cef21ece89ce4f8
alibaba-machine-controllers git 064d4624 sha256:db13edcfba200826a99073e2f9905c49afbc023d62c2656f996082a2e72319fd
apiserver-network-proxy git ca81b6a3 sha256:4addf6641b2c65c0cde37d3401b590473bee7edf232f6e274ea5b881ace67b77
aws-cloud-controller-manager git a53e9def sha256:ad0ee2745021d46a57189dfc045c663c0520eb32c94d6318a686a339b1610451
aws-ebs-csi-driver git 1d29a74a sha256:15e39585d0a792802c27b0cf1711d7bd6592f723c0373fd271e651619719b620
aws-ebs-csi-driver-operator git ff69cd03 sha256:b0bdecfd469cac524cdc8304a3681cadf350a6355b4186ea5631fb2a4510ae76
aws-machine-controllers git 61d60f6c sha256:a0014553a79d1ba030681b26126932a0ee68b7b054ce47841a2afe765e8f4490
aws-pod-identity-webhook git 746491a6 sha256:bc59bcba12a042c7166f833bb83d58ec119cd94d53804dd0723ca05710b81a5c
azure-cloud-controller-manager git 0e955329 sha256:c80c5de804767b8a936a3a4ba2f2916674915de12199badaa17bac298f312692
azure-cloud-node-manager git 0e955329 sha256:f3b40bbcb571b6db2f5a7f29b34768355bea53da48314de4de1938b34ede883c
azure-cluster-api-controllers git a81e3b31 sha256:1c1d5ba61c1bdd9dff55518d86f0da7b53fc64309b61aa69b04b55b04beed81a
azure-disk-csi-driver git 6b55f6fb sha256:9b14df5162747d1b6542317f73e67bac097d12a0a0b77db4d6c79679cac6b130
azure-disk-csi-driver-operator git ff69cd03 sha256:9ab254d5f4878b8cf407436c418cbb83115eb6814529cdb65df78a8ec3b37157
azure-file-csi-driver git 7a36778a sha256:48ae291826b51a6304b70db1d078f58ecc72c33c8186f0701ee1e22f485187d7
azure-file-csi-driver-operator git ff69cd03 sha256:aec76526de03cea40d799d38db2b5c710ea1802c5856e0e1cb47240ae5b04a53
azure-machine-controllers git e4e11505 sha256:0d1d4c41d51297070f357db28d5065ad931023bb387939aeb38f24c9bc8e1b9d
azure-workload-identity-webhook git 4aca092a sha256:325aeb5c365c8320d6686579837ce7c01b3a7c13fbd4fce7fc82960200ccc589
baremetal-machine-controllers git 11ba601f sha256:2681f476fa2f0c7886f2bbac7f76434a10f324ea75dd6c69ec1359891afe14f4
baremetal-operator git ae55a705 sha256:a80bda32f83653657fdf3e039d450d924a942188dd143cc6470e456670df2ed6
baremetal-runtimecfg git f55a330f sha256:f1dbfa12836b476e3a036e874551f1e2958b63a6301cf14264491d6c66ce0232
cloud-network-config-controller git 8ceee788 sha256:39ba008172a4688d62e06b3939948d0f2ba9fd776eb8c05b9bde7dc958941c02
cluster-autoscaler-operator git 40cadf8a sha256:c38d5ec979369c960096b1c538548aaecac7f31e84960d86a08fd33523875915
cluster-bootstrap git 27bfb59f sha256:e29e408396e219359e11017f21fa40d5986f9fedc87aa9e913aaad4dce4b305a
cluster-capi-controllers git 5830a10a sha256:d7a38b5b7658ee8f7a51aab691a4afcbea3c69ae2f9d5476f1e47d3d19c80516
cluster-capi-operator git 3a2f98fb sha256:a61343d8fe3363aa7d0c18ea615c6c84e7ce6fb244e53d406b4425869b72fbe3
cluster-config-api git b7d0481c sha256:1baa157a5b9d4a0bfb1586856b692dfe77c531c031d32caa8c44981ff8b27954
cluster-config-operator git 441d29c9 sha256:605c6f52ec7e05bce86443adf31dd0becdb3bda7d58f090ec290edb5fe966001
cluster-csi-snapshot-controller-operator git 439826e1 sha256:c58226e246cf92dc113e5944b0a831d04f883c1549a5ec7ac0f97d0fc3fa65a4
cluster-dns-operator git 8ddf28f9 sha256:d39511785ec23e5de43acf91b453135fc27d43ab9d56a384f304b16ada1eb912
cluster-ingress-operator git 57f9674e sha256:f2d654eb346179bbd8a2b44185b26217a95b215bc3e911d3c833da88cfc67d70
cluster-kube-apiserver-operator git de2f2ac2 sha256:00cfaf1c1fd597c970ef983c72c1a084fc2d3cdb1d1357f7fd5e562c112d2613
cluster-kube-cluster-api-operator git 95ceaa9e sha256:0b3aac1063112553f80111c0175d370df7a18da914f4fc21f43eeca8a356c75a
cluster-kube-controller-manager-operator git 0338b3be sha256:e7e11cfbf7521b4bd1a2a48a9585c54bb14139cc24718a881594b9788ef87dd6
cluster-kube-scheduler-operator git 630f63bc sha256:03d047797148447933cd1db4c7661c2793fa9e87f062220785f480c51e8f96fb
cluster-kube-storage-version-migrator-operator git e8258113 sha256:c2dc504f5289cd563871237b654138a346c43fffd1c51d7ff9dfbfb4f6f6e835
cluster-olm-operator git 27bf70dd sha256:cd8d6918679f673470303a198bd8d6a7ac0b70001dfaa0d0df30438fc9150a42
cluster-openshift-apiserver-operator git d26f3002 sha256:1fe8f2ba87a82ae0fe2675981b8ce6183de6eb735d16598daff11c54a17d7531
cluster-policy-controller git eaea543f sha256:01a3c10b0520348af6b9eee7235a4748b8b58e7f14c69a29468c9853ed093390
configmap-reloader git dc91ddc4 sha256:8589abea4d1d3dd3d3f57383d7c0d3c7120124107e216efe01b1b8b185df0ca5
console-operator git 92447df5 sha256:d4544e241d83a1d78491a8e504c3377c0fcac5811a225f98c103a4d644516917
container-networking-plugins git 73b4123c sha256:24906eba6835ee725b8463dce9f88dc0bda46dcac5be68fb079a294eb7d80c0d
containernetworking-plugins-microshift git 73b4123c sha256:482fe54fb429c11ef1a28b76d6143e61f263e3345c90ec7b6c0ec0227658220f
coredns git 1e417656 sha256:9579f73479a70ac937f2f1becf02715dd653f2cec5fb169047709deaf1252abc
csi-driver-manila git b7e9010d sha256:2f3efdf1e1b240a0547e02239561e29ffa267101e2d3b63d625abe103369c03e
csi-driver-nfs git 406cec72 sha256:270e4ce4660de6d3859086be02b3bce435f5f9529f16e935b428f86b9edf4725
csi-driver-shared-resource git bc125def sha256:948103f5636aac8ca450cee77f078bdc22d7ce8e89189fd77f24287e0efa6de8
csi-driver-shared-resource-operator git 1e1194bc sha256:26b54bd80bdab74e6727a96cd663167ea71bb058cfa9694a6bc8a3cbfb80f2f6
csi-driver-shared-resource-webhook git bc125def sha256:9335771b6a2ed39e3b27df3e2cde3cc6103ac3cc54a91d504de5351222df8661
csi-external-attacher git 7da80aab sha256:d715e72506aaaaa7c6420c0e5ca99d1bae51f203f6793c44df8e1261045bb320
csi-external-provisioner git 9e8af011 sha256:3eb6a3efa4a74641612ebb41f29ed13d481ba27611d013640e13c75ff6ca73db
csi-external-resizer git bdf5bfb4 sha256:2e2379c28b91da9e2ce18c0300a4dbe05e9d139116fd5bee5e1dcec707e168a9
csi-external-snapshotter git 5315d37a sha256:33853cd470d4ada9982e1148881c7a00e1256d097cc6d6c106f7fcf8eab8bdb3
csi-livenessprobe git f5e3ff55 sha256:f6d422b08e6e15b38dfdb43af6a83527a082c52aba4d2cfab4641ca655aec2a4
csi-node-driver-registrar git 8930c368 sha256:c676758a2642c1a261b383a258119616e6614fb0f9387139219a847861e71cf6
csi-snapshot-controller git 5315d37a sha256:989a294981e1051f9bda60dbbfe3f5ca0a6f76cfeb89756e4b49240ceb5a0c9d
csi-snapshot-validation-webhook git 5315d37a sha256:5cd04b1ae7a8c649c94b2781198b1ca0070be813a274e460542b163084487f6a
docker-builder git 5e57cc83 sha256:524b1b10a74115df24c898bc7e5ce99696df082d89b4ea93c6eb0274df586628
docker-registry git e4d56625 sha256:567355203f7fe847a40825eab21e79c1bf063ab0af04f25385b6ef4b405322c6
driver-toolkit git 1d5732f0 sha256:8e71827d12ba18fff98c0596e4c03f62992c29eb0acce7d53f97f061ae8d16a4
egress-router-cni git 7089efe6 sha256:f6b604dbfdaa49b69b233df3fbcd64147faa48b809d652dedc487bddbb0e7e69
etcd git 16202ec4 sha256:52a19d768ecd6dddb18ad633b2911615242956645a14f96d340834ef872e8768
gcp-cloud-controller-manager git 26b43dfc sha256:3abea40e5f727d8a6e3cb6a2c643439a9cb5fcfb4f6318776755433bbdb2268f
gcp-cluster-api-controllers git 02432df8 sha256:09bc292ff574d80bce515f83a3449fdeafd70ad8ac66e61d2c6301092d439fec
gcp-machine-controllers git e72657c0 sha256:6f852efe14321a96c3b8d07756f1b727e30b4fe75716d8b9646c14343eb15a51
gcp-pd-csi-driver git 5ed71c64 sha256:754aece38fd03b9b2fe5999e79dceebac205dfec6b7a16972a388221de65f53c
gcp-pd-csi-driver-operator git 799327f7 sha256:5189cb3d08bcd33d99a915995ab5dbc1ea7e0d03e2ed2b0cb1844769fb1549ae
haproxy-router git 4d9b8c4a sha256:07ec5c5e03b54406a36ba3cb233f3e8707e1f10e4efa9df14c8611551fa54ad9
ibm-cloud-controller-manager git f961f16d sha256:11cc2ad425ba1e63cbde6d4eb311e3421e7eb0c2d0f95552656b0e3cae66306c
ibm-vpc-block-csi-driver git 95719738 sha256:32b261ff8d0d2670c849cd1a16dab846c7a956c3ad24a37b2e5b301a2978d4b1
ironic-machine-os-downloader git 93b8b5fa sha256:7945a2aaf693b8e5a487799b7b92999571b8509f7f27e299ee0ef950f20a55e3
ironic-static-ip-manager git e78e4c3e sha256:7017e414371e7c320765dba724c338ff5646e7d76bf2bf9277b55013948a4e65
k8s-prometheus-adapter git e4f859be sha256:01cd3c4d0d7e839869b519e8ede9b65b142ad04e5a46ea2621558db15641f6c3
keepalived-ipfailover git b58673a3 sha256:e22c6e88ea707701aec6113fe0cf25407665987961150c74ebfc1345c4b5040f
kube-state-metrics git 9b67b8d1 sha256:6777f169d94687c999014d826e6644a4d82d800893e0e64aeed791dc860ee41b
kube-storage-version-migrator git 969a60e9 sha256:d17304856c79d4a8fbc39be27e6308dd314081341f258a9339d05f638865c43b
kubevirt-cloud-controller-manager git 3db76104 sha256:61ff8528e653b777976f5a15f10894dba9a0b532612b74ed9d377e5480770895
kubevirt-csi-driver git 0693093f sha256:af1b5ddb78425a806489fb4147b245299b950ae8ccfc3d74a967f6b618585fee
libvirt-machine-controllers git a336f0b5 sha256:f41f14a551df44c0de8ef565d2d0e4d3188655d7833c5e815f1dd1844d9a7a5a
machine-image-customization-controller git 39480963 sha256:1659ee7e5940fdaa5f324f413a27309edbcf8fadb71fee61b96bc0a8650444cd
machine-os-images git 3cc97098 sha256:7cc2e93b41aece123836d746ed942907a105fbcb40a885b3610461388e34c69d
multus-admission-controller git 88c596ed sha256:f20d333147a81170e090b3ace4e4797c7ef4e304813223d943e7914df976350d
multus-cni git c4aa21b9 sha256:0d454e30fb82d38fddaa6e813ed1689e286d6d85610a919c61a15681e9134afe
multus-cni-microshift git c4aa21b9 sha256:1d0ee147232e43b04d71550c916026ee0fd76d2e37b652be8f6303af57bf22cf
multus-networkpolicy git f988f894 sha256:c579aa7b9eec3ec01a2c02c7fab31ba2deb7a898d508503e564b9e6fbccd124a
multus-route-override-cni git 73594f77 sha256:05011228131e42c338c6eb594e1d9f6ccbfe6742fd2e6365f2a4b7e5bffcde6b
multus-whereabouts-ipam-cni git dab1dd29 sha256:dc8c79acafc1dcab61c1a3ed8e2fca76b86c2554dddea85bd5d21749d2665555
network-interface-bond-cni git bb911451 sha256:5959ae89eda1c9bb3696d065280719fcefd770eec98a1239a6d312a75547ea3d
network-metrics-daemon git 48059263 sha256:1cb9f94c6f4a9b3b60f1a6ae98d32403e9e175bd962eec56613c318b1932674e
network-tools git 39eca100 sha256:7553a960d372a4889eeac957499147f9304253f16e387b0ead745798d9f12ad5
nutanix-machine-controllers git f053e5a0 sha256:7a8f91e5b214e0c5be70073c2818e15d6186cd41710f18d373b3cec4bddf8f20
oauth-apiserver git fa1f097c sha256:ba1b0df2fe7a4a3a6737eb721764bbc4d9387194a940212d46c237c10948a458
oauth-proxy git 30f80124 sha256:36bc9914cc0333b5a07894aef3b69385990d95ff8ea5f21ed0f4cf742e4663fc
oauth-server git 3739138c sha256:0dacbf86f8d83f9148d5f21f45361b71fc636d22124f6a4d61848f0ad289870e
oc-mirror git 819f0115 sha256:490569b86613ddd193f9add034214a8a46f9fc0a71d7b45e92a6143ce966c01b
olm-catalogd git 79975a51 sha256:a91341e10522c125af445b8d1812f17c612132a606d3f2ff121f283be69808fc
olm-operator-controller git 80b8649c sha256:685f25ae293513a324d4235089b3e04461be57ad84133bd530ac3dbf3994ff6d
olm-rukpak git 282cc84c sha256:63c6f41c9617a9bd8f26cf2c72fe349efea624be80235a0c16030337e8573df0
openshift-state-metrics git 59b8a0ff sha256:b4cb4ac523ca9cb627f56946ed5a44be3bdfd413eb640378b86772ad99a68a3d
openstack-cinder-csi-driver git b7e9010d sha256:16e6b4aa3387d40158b9f06b6e92e29e406b5e7b94b7692a6854c3932b8b6c7d
openstack-cinder-csi-driver-operator git 85b52097 sha256:f82d876fe4313f2af36689a15148b736a5864d2b20f191a2b58f83d09f5328a2
openstack-cloud-controller-manager git b7e9010d sha256:52611a7cdb970390b0fa5899c17df67ab04846f75fb89ecea894d2c758c846af
openstack-machine-api-provider git 5ada1cba sha256:ebb0e5668e9f54fd23868ce90338213a4a46b181f4aed3cb3f3a5661518f77cf
operator-marketplace git 7db179fb sha256:3443999d217bc91de8a90473b75c820485d8382c82e04197a91783f45aeb1b0a
ovirt-csi-driver git 1db726a9 sha256:88a2750d7834b870ae0de6e230c863d15898d52ce73646200eb41d89df3737b8
ovirt-csi-driver-operator git ac852f3e sha256:aea338899de79fbc52c02013377b22650a5ea26f1a8ff1ccc4e3049863b0750b
ovirt-machine-controllers git abb91c84 sha256:215fd6d9e4a9f53848cacfa8fd9fd49125e2a044e5e411a658173bf8b08ab1e6
powervs-block-csi-driver git 26162bad sha256:046a6bdbeedbeee597f5d443fa953ef2fffff9e1a1db7479622a24f50fbee5f1
powervs-block-csi-driver-operator git 9c5dd8d1 sha256:a786f977e7d7338d0e61b26e0cf9f9daafeeef2e7a09950d7c09ae167ecee193
powervs-cloud-controller-manager git 20e6dc70 sha256:218896a939e764790ca0e024577c87f77c5e776d328093cb113efc5733850c25
powervs-machine-controllers git 60ebedf0 sha256:69af50486a905f1fb23444064f8e81002f2a4fc1cf23c4583618336be1b9b6a7
prom-label-proxy git 5e14722e sha256:47ff4aaf3ce613c6018f13aa40bb50e9b034e355a7fc9119c6007eccb3193ad7
prometheus git c5c08df9 sha256:2e53006d834bae133a8ce88039d0d46e25c6f158c608393ecea97fd701cf59ca
prometheus-alertmanager git e9aea929 sha256:b690132064fb60b800b5a023a9bc60afe1ef19e6e36074fb30e2f55c21fd8d92
prometheus-config-reloader git c7262a43 sha256:34aee65fa894c7b14b6b86591f5ab38008267214b3dd06d80ea9dae82ede2d24
prometheus-node-exporter git 29ba26d1 sha256:dad2f4f464c581287530165494f3c7a3e0f1907566a3ad048bee344b251202a6
prometheus-operator git c7262a43 sha256:6752cb45a30734b6149774950101a2e42c00bc3fb021f3ffbb60bd065ed75e80
prometheus-operator-admission-webhook git c7262a43 sha256:373a2f9767dab4e71f85c786c7074b1844317c0004ee369db1ca5c242a91ca2b
rhel-coreos sha256:bc0b3efa9bd81792c7ac356f3e99811ebbd3a7f6b42b2c6e880e44edc1d8d1c2
rhel-coreos-extensions sha256:fb24ef5129d56468d86d77b4b202fc88d77246ee29a26008c6de55089eed0950
route-controller-manager git 3112b458 sha256:0185d4266ecfc2a1e1961cd96bb3cb9ec0f3b508f0ff828a7466497495b60f34
service-ca-operator git 538c7b98 sha256:25e106e3cd3752008c80dccd051882d90aa3a5a6648c3787cefddadefcdc0304
telemeter git c1ecd105 sha256:372761d94bcb80225d3752b0eb13334773698efea2b691ae37145d27495573d2
thanos git 85eee25c sha256:1c07fab895a26a2bd793502eb9846f4bd4f96629c885fe7e72a8eef3358febab
vsphere-cloud-controller-manager git 44ea2b58 sha256:cbd04f8d93d0381840129221895c0b3f383e0d8c9fa0c456eb58bc77d9c563d1
vsphere-cluster-api-controllers git be22f10a sha256:0901c96dd11d7e9db9aa346edeba2390fedd43691c811f7aa0bdcc0aa728ce45
vsphere-csi-driver-operator git 483de9c5 sha256:6f47381e0e5b79689cfbec22628a7bba59c31d05eaa19dcd693da7dc1cbfc1b6
vsphere-problem-detector git 3683c120 sha256:78ed07268270c449da8b6bfe25611d2f4665c9eaefda9783d2c35f2ace6964a3

agent-installer-api-server

OCPBUGS-43021: Update go-jose to v2.6.3 to mitigate CVE-2024-28180 (#6893) #6893
OCPBUGS-42570: Libraries bump to mitigate CVE-2024-27289 (#6833) #6833
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-38466: Allow controller to continue when assisted-service (#914) #914
OCPBUGS-43025: Pick up latest CVE changes by bumping service (#920) #920
OCPBUGS-36577: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#906) #906
Full changelog

agent-installer-node-agent

OCPBUGS-43028: Pick up latest CVE changes by bumping service (#804) #804
OCPBUGS-42300: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#785) #785
Full changelog

aws-cluster-api-controllers

OCPBUGS-44234: [release-4.16] OSD-25934: Only tag NetworkInterfaces in RunInstances if IAM Allows It #531
Full changelog

aws-kms-encryption-provider

OCPBUGS-33693: Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.16 #18
hack: display diff on verify-mod-tidy failure #26
Full changelog

azure-kms-encryption-provider

OCPBUGS-33692: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.16 #4
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-45669: [release-4.16] capi/aws: remove allow-all Node Port Service #9281
OCPBUGS-39434: dropping this warning as the move from terraform is transparent to the end user #8951
OCPBUGS-45852: Update upi references to api-internal #9290
OCPBUGS-41813: Validate MTU for custom network #9104
ARO-12457: Include bootstrap docker config file in go module #9259
OCPBUGS-45181: add chrony.conf file when additional NTP sources are configured #9247
CORS-3753: Allow mocking of the Azure client everywhere #9220
OCPBUGS-44348: Cherrypick oci ccm fix to 4.16 #9188
OCPBUGS-43967: Revendor assisted service external platform oci #9150
OCPBUGS-38930: import failure when esxi config is not the same in the cluster #8898
OCPBUGS-36290: IBMCloud: Ignore failed VPC regions #8674
OCPBUGS-41885: vSphere - If template is defined skip downloading #8999
OCPBUGS-41490: Update RHCOS 4.16 bootimage metadata to 416.94.202410211619-0 #9158
OCPBUGS-43476: IBMCloud: Handle pagination for subnets #9102
OCPBUGS-41490: Update RHCOS 4.16 bootimage metadata to 416.94.202410172137-0 #9132
OCPBUGS-42014: Update terraform provider for google #9077
OCPBUGS-38732: vsphere, if secureboot is enabled, disable it in the template #8904
OCPBUGS-39415: OpenStack: Install CI dependencies from rpm #8995
OCPBUGS-41334: Fix IPv6 security group rule for schedulable master #8971
OCPBUGS-38687: only allow a single network in failure domain topology #8875
OCPBUGS-42062: OCPBUGS-41865: [release-4.16] vault version updated to 1.13.10 #9036
OCPBUGS-42012: Systemd Fails to Parse Multiline EC Keys #9037
OCPBUGS-41845: Bump extract-machine-os timout to 20m #8997
OCPBUGS-38964: IngressController subnet selection in AWS #8910
OCPBUGS-42138: add tested instance type for IBMCloud #9031
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-42720: Check cast result in adm prune deployments to prevent panic #1891
Full changelog

cloud-credential-operator

OCPBUGS-45007: Add retry to ccoctl gcp create functions #794
OCPBUGS-45002: github.com/golang-jwt/jwt/v4 v4.5.1 #788
OCPBUGS-43645: Only attempt timed token credentials on supported platforms. #772
OCPBUGS-43337: Update github.com/sirupsen/logrus v1.9.3 #767
Full changelog

cluster-authentication-operator

OCPBUGS-43367: manifests should not use APIs that are removed in upcoming releases #717
Full changelog

cluster-autoscaler

OCPBUGS-45148: [release-4.16] VPA: Update OWNERS file #325
Full changelog

cluster-baremetal-operator

OCPBUGS-43556: SCC-pinning for metal3-baremetal-operator #453
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-42125: IBMCloud: Modify liveness probe for IBM Cloud CCM to use loopback address #366
OCPBUGS-43473: update goimports targets #372
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-44179: relax validation on delete and if failureDomains not configured #331
Full changelog

cluster-etcd-operator

OCPBUGS-33673: rename flowschema to avoid log noise in CVO #1348
Full changelog

cluster-image-registry-operator

OCPBUGS-43797: fix proxy config and leader election test flakes #1148
OCPBUGS-43555: pkg/storage/azure: also check for auth failure error code on deletion #1143
OCPBUGS-42933: azureclient: stop validating credentials when creating the client #1134
OCPBUGS-42420: Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) #1126
Full changelog

cluster-machine-approver

OCPBUGS-45974: Client internal DNS checks should ignore trailing dot #251
OCPBUGS-44629: Client internal DNS checks should be case insensitive #244
Full changelog

cluster-monitoring-operator

OCPBUGS-44005: fix(monitoring-plugin): disable emitting nginx version on error pages #2521
OCPBUGS-43826: Add runbook url for TelemeterClientFailures #2508
OCPBUGS-41967: disable user-defined monitoring per object #2474
OCPBUGS-42067: Reapply “chore: poll immediately in the e2e tests” #2476
OCPBUGS-41717: Configure graceful shutdown for metrics-server (4.16 backport) #2467
Full changelog

cluster-network-operator

OCPBUGS-45593: Pass transit_switch_subnet options in ovnkube-node pod #2584
OCPBUGS-44846, SDN-5436: Provide support for user owned IPsec machine configs #2571
OCPBUGS-42727: Live migration: report network overlap via live_migration_blocked metric #2519
OCPBUGS-43604: OCPBUGS-42244: Exporting environment varialbe NODE_CNI for live migration #2538
OCPBUGS-36210: Set global IP forwarding sysctl parameters while starting ovnkube-node #2422
OCPBUGS-43544: Use CNIConfDir for mounting directory to ovn-ipsec-host pod #2537
OCPBUGS-43035: Configure narrowing=yes for IPsec connections #2528
OCPBUGS-36594: Set mount propagation to HostToContainer for /var/lib/kubelet #2430
OCPBUGS-41840: Add configurable subnets while running hybrid-overlay-node binary #2502
Full changelog

cluster-node-tuning-operator

E2E: fix modify node selector to use lowercase (#1209) #1209
Fixing empty tuned submodule when using Dockerfile (#1212) #1212
OCPBUGS-38900: Drop sched_migration_cost_ns setting (#1203) #1203
Make ocp-tuned-one-shot.service restart on-failure (#1202) #1202
Unblock 4.16 CI (#1204) #1204
e2e: performance: verify tuned one-shot service vs kubelet (#1192) #1192
E2E: Add test to verify cpuset.cpus.exclusive is writeable (#1153) #1153
OCPBUGS-39005: Add cluster-wide proxy env file (#1166) #1166
OCPBUGS-36431 Fix generated cpu mask for 512+ cpus (#1152) #1152
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-38269: CVE-2024-24786 infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON #363
Full changelog

cluster-samples-operator

OKD-225: remove only the EOL CentOS 7 images #576
Full changelog

cluster-storage-operator

OCPBUGS-43315: assets: shared-resource: hypershift: add pull-secret to operator SA #521
NO-JIRA: release-4.16: Run make update #512
Full changelog

cluster-update-keys

OCPBUGS-43467: keys: Update Red Hat keys to use SHA256 signatures #64
Full changelog

cluster-version-operator

OCPBUGS-43964: Fix desired before sync_worker’s work is initialized #1097
Full changelog

console

OCPBUGS-45229: Unable to remove finally tasks in pipeline builder mode #14558
OCPBUGS-45245: use TaskRuns results.tekton.dev/record annotation to get the logs #14563
OCPBUGS-41523: i18n upload/download routine task - Sprint 254 #14258
OCPBUGS-45015: Remove ClusterTask dependency in console from Pipelines 1.17 #14537
OCPBUGS-44792: Collapse/Expand Feature Added, Removal Option Removed in Version 4.16 #14519
OCPBUGS-44875: Start last run do not work in buildConfig details page #14529
OCPBUGS-44874: Telemetry userPreference results in empty nodes output to the DOM #14528
OCPBUGS-45124: Add multiline support to template instantiation #14545
OCPBUGS-44885: include external labels so silenced alerts not displayed in notifications #14530
OCPBUGS-44932: Add IBM Block Storage CSI driver support for RWX #14533
OCPBUGS-43447: Ensure envs are initted upon first load #14405
OCPBUGS-44806: Don’t request user settings configmap if no user has been loaded. #14522
OCPBUGS-44207: Create RoleBinding will trigger Admission Webhook Warning #14465
OCPBUGS-44219: Add flag to hide the pipelines-plugin pipeline builder extensions #14466
OCPBUGS-41673: Update vendor imports to include all PatternFly components #14273
OCPBUGS-43834: Enabling topology e2e tests on CI #14438
OCPBUGS-35204: replace global refresh sync lock in OIDC provider with per-refresh-token one #13950
OCPBUGS-36556: Increase login flow state paramater length/entropy #14354
OCPBUGS-42369: Console crashes when ssh is selected in add secret for starting a pipeline run #14320
OCPBUGS-41904: fix annotation for ovn localnet #14366
OCPBUGS-37615: Include PatternFly-4 chart styles so they are available for dynamic plugins that still use PF4 react-charts #14091
OCPBUGS-37689: Switch to use annotations as labels from PipelineRuns created through Pipelines as Code is deprecated #14094
OCPBUGS-42015: Topology screen crashes when completed pod is selected #14298
OCPBUGS-35850: Fix: Quick Start “next” button requires double click to move to next step #13989
OCPBUGS-42382: Allow operators to enable monitoring by default #14317
OCPBUGS-41905: List of default Camel K event sources disappears when adding a custom event source #14290
OCPBUGS-41709: Need to allow blank for Project/namespace when setting SA Subject in ‘Project access tab’ #14278
OCPBUGS-42069: add Create button to Console plugins tab #14302
OCPBUGS-41996: Fix updating the “Until” field on the Silence > Edit page #14296
OCPBUGS-38112: do not directly mutate links in useMemo #14117
Full changelog

csi-driver-manila-operator

OCPBUGS-38458: Add missing healthchecks #241
Full changelog

hyperkube, pod

OCPBUGS-44513: Bump k8s api to 1.29.10 #2133
OCPBUGS-42555: Allow pod to be scheduled if node’s name and hostname mismatch #2099
OCPBUGS-42168: Bump k8s api to 1.29.9 #2090
release-4.16] OCPBUGS-42057: UPSTREAM: <drop>: bump(github.com/openshift/apiserver-library-go) #2096
Full changelog

hypershift

NO-JIRA: Update Konflux References and Perform Migration for Release-4.16 #5261
OCPBUGS-39372: Fixed NodePool version validation #5219
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.47 (release-4.16) #5209
NO-JIRA: chore(deps): update konflux references (release-4.16) #5207
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.46 (release-4.16) #5189
OCPBUGS-43930: Return the right tagReference on Catalogs ImageStream #5133
NO-JIRA: chore(deps): update konflux references (release-4.16) #5161
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.45 (release-4.16) #5163
chore(deps): update konflux references (release-4.16) #5135
OCPBUGS-44277: Configure OAuth https proxy to dial cloud endpoints directly #5069
chore(deps): update konflux references (release-4.16) #5119
OCPBUGS-43973: Add network policies for konnectivity server and ignition server proxy #4998
NO-JIRA: Update Konflux references (release-4.16) #5112
NO-JIRA: Update Konflux references (release-4.16) #5099
chore(deps): update konflux references (release-4.16) #5078
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.44 (release-4.16) #5059
NO-JIRA: chore(deps): update konflux references (release-4.16) #5058
NO-JIRA: Update Konflux references (release-4.16) #5042
chore(deps): update konflux references (release-4.16) #5024
chore(deps): update konflux references (release-4.16) #5019
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.43 (release-4.16) #5017
NO-JIRA: Update Konflux references (release-4.16) #5012
OCPBUGS-43840: add ValidIDPConfiguration condition to report IDP config issues #4985
NO-JIRA: chore(deps): update konflux references (release-4.16) #4971
OCPBUGS-43046: Do not send traffic to local audit-webhook through konnectivity #4883
NO-JIRA: chore(deps): update konflux references (release-4.16) #4954
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.42 (release-4.16) #4947
NO-JIRA: chore(deps): update konflux references (release-4.16) #4933
OCPBUGS-43104: label routes only when HCP router used #4899
OCPBUGS-43308: Use guest DNS resolution in Konnectivity HTTPS proxy by default #4905
NO-JIRA: chore(deps): update konflux references (release-4.16) #4923
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.41 (release-4.16) #4919
NO-JIRA: chore(deps): update konflux references to 674e70f (release-4.16) #4908
NO-JIRA: chore(deps): update konflux references (release-4.16) #4896
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.40 (release-4.16) #4880
OCPBUGS-42432: Use KubeClientCABundle for HostedClusterConfigOperator cluster-signer-ca #4799
OCPBUGS-42342: Let payload generation pick the release for the NodePool #4787
OCPBUGS-42431: Conditionally manage kubeconfig secrets for DNS and Ingress operators #4798
NO-JIRA: chore(deps): update konflux references (release-4.16) #4853
OCPBUGS-42608: Add Annotation to skip deleting hcp namespace #4830
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.39 (release-4.16) #4827
chore(deps): update konflux references (release-4.16) #4816
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.38 (release-4.16) #4806
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.37 (release-4.16) #4796
chore(deps): update konflux references (release-4.16) #4781
NO-JIRA: chore(deps): update konflux references (release-4.16) #4760
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.36 (release-4.16) #4759
NO-JIRA: Security fixes for openshift-ci-security job #4750
OCPBUGS-41372: CPO oauth idp converter: resolve names before dialing #4689
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-42286: Reorder static resources to create RBAC first #129
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-43686: UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.16 #89
Full changelog

ibmcloud-machine-controllers

OCPBUGS-44870: Bump dependency for CVE #53
OCPBUGS-36698: IBMCloud: Handle pagination for subnets #42
Full changelog

insights-operator

gather selected clusterroles (#1023) #1023
OCPBUGS-39564: Not able to enable repositories during entitled build in OCP Cluster on IBM-Z (#1013) #1013
OCPBUGS-39394: collect some nmstate customresources (#986) (#989) (#995) #986
Full changelog

ironic

OCPBUGS-44895: Bump Ironic #610
OCPBUGS-43950, OCPBUGS-43958: Bump python-waitress [4.16] #604
OCPBUGS-43438: Include fixes for CVE-2024-5569 #599
OCPBUGS-42511: Include fix for CVE-2024-47211 #594
OCPBUGS-39017: Bump ironic-lib to fix utf8 decoding issue #569
OCPBUGS-38797: redfish-virtualmedia fails on XFusion nodes #564
OCPBUGS-42113: Update ironic-inspector to fix the memory leak #587
OCPBUGS-37758, OCPBUGS-39383: Include fixes for CVE-2024-44082 #579
Full changelog

ironic-agent

OCPBUGS-39017: Bump ironic-lib to fix utf8 decoding issue #156
OCPBUGS-39383: Include fixes for CVE-2024-44082 #161
Full changelog

kube-metrics-server

OCPBUGS-41717: Wire server run options to flags. ([release-4.16] backport) #37
Full changelog

kube-proxy, sdn

OCPBUGS-45806: Stop checking ruleVersion [4.16] #643
OCPBUGS-44301: Use copy() to duplicate a net.IP #641
OCPBUGS-43344: OCPBUGS-42244: Implement namespaceSelectors on ingress with all pods IPs #635
OCPBUGS-42203: fix UDP conntrack cleanup #636
OCPBUGS-42159: fix redundant router-default iptables rule #633
Full changelog

kube-rbac-proxy

OCPBUGS-30447: protobuf bump [4.16] #111
Full changelog

machine-api-operator

OCPBUGS-39028: Updates message verbs to use %q where appropriate #1282
OCPBUGS-43433: Vsphere: Handle cloned instance with lost taskID #1298
Full changelog

machine-config-operator

OCPBUGS-45974: Remove trailing periods from AWS provided hostnames #4744
OCPBUGS-44337: Removal of additionalTrustBundle CA does not remove certificate from node backport #4688
MCO-1342: Backport Telemetry to 4.16 #4649
OCPBUGS-44043: Disable ESP offload for OVS attached interfaces #4676
OCPBUGS-42109: Do not use ‘restart’ for ‘oneshot’ service #4616
OCPBUGS-42744: Check for kernel arg diff in updateOnClusterBuild #4628
OCPBUGS-42722: Panic seen in CI job for MCC pod #4626
OCPBUGS-42719: MCPs report wrong number of nodes when we move nodes from one custom MCP to another custom MCP #4625
OCPBUGS-41293: Enable the use of Linux Bridge as the ovs default port connection #4563
OCPBUGS-41256: Set ESP offloads off in bonds if slaves don’t support them #4627
Full changelog

monitoring-plugin

OCPBUGS-44395: remove unused package and upgrade vulnerable dependency #272
OCPBUGS-43239: upgrade dynamic plugin sdk to remove vulnerable dependencies 4.16 #217
OCPBUGS-42424: fix path-to-regexp dependency #197
Full changelog

must-gather

OCPBUGS-42969: Collect etcd object count #454
OCPBUGS-43056: Open [Release-4.16] Multus is now a Pod and will be captured by normal #449
Full changelog

nutanix-cloud-controller-manager

OCPBUGS-30524: bump google.golang.org/protobuf to v1.33.0 #38
Full changelog

openshift-apiserver

OCPBUGS-42724: fail image import when both image and error are nil #455
Full changelog

openshift-controller-manager

NO-JIRA: cleanup root and app OWNERS #347
OCPBUGS-42420: Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) #343
Full changelog

openstack-cluster-api-controllers

OCPBUGS-44456: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.16 #328
OCPBUGS-44990: Makefile changes for merge-bot #341
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-44802: fix: call TokenRequest API when service account token secret is missing #900
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-45942: pin libreswan to 4.6-3.el9_0.3 #2386
OCPBUGS-45343: Dockerfile: Update OVN to the 24.03.2-32.el9fdp minor release. #2377
OCPBUGS-42244: Add hybird overlay pod IPs to the namespace address_set #2352
OCPBUGS-43344: Add SDN node subnet gateway IP to host-network address_set #2328
OCPBUGS-42942: Fix egress gateway pod cleanup for remote zone pods. #2341
OCPBUGS-36210: Implementation required to enable Forwarding if it is already disabled #2212
OCPBUGS-41551: Add subnet overlap check for transit switch subnet #2306
Full changelog

tests

OCPBUGS-44105: Adjust createDNSPod() to support hypershift dual-stack test #29258
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-43881: redact sensitive information when logging VCenter config #134
OCPBUGS-42878: Add compute resource entity to consider a standalone cluster for volu… #131
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github