4.16.33

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.16.33-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded (3 retries) periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.16-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.16-micro Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.16-micro Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.16-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.16-fips-payload-scan
- gcp-ovn-rt-upgrade-4.16-minor Succeeded periodic-ci-openshift-release-master-ci-4.16-upgrade-from-stable-4.15-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.16 Succeeded periodic-ci-openshift-hypershift-release-4.16-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.15.21, 4.15.22, 4.15.23, 4.15.24, 4.15.25, 4.15.27, 4.15.28, 4.15.29, 4.15.30, 4.15.31, 4.15.32, 4.15.34, 4.15.35, 4.15.36, 4.15.37, 4.15.38, 4.15.39, 4.15.41, 4.16.10, 4.16.11, 4.16.12, 4.16.14, 4.16.16, 4.16.17, 4.16.18, 4.16.19, 4.16.20, 4.16.21, 4.16.23, 4.16.24, 4.16.25, 4.16.26, 4.16.27, 4.16.28, 4.16.3, 4.16.4, 4.16.5, 4.16.6, 4.16.7, 4.16.8

4.16.32 (changes) - S F S S S S
4.16.30 (changes) - Failed
4.16.29 (changes) - Success
4.16.15 (changes) - Success
4.16.13 - Failed
4.16.9 (changes) - Success
4.16.2 (changes) - Failed
4.16.1 (changes) - Failed
4.16.0 (changes) - Success
4.15.44 (changes) - Success Success
4.15.43 (changes) - Failed
4.15.42 (changes) - Success
4.15.40 (changes) - Success
4.15.33 (changes) - Failed
4.15.26 (changes) - Success
4.15.20 (changes) - Success
4.15.19 (changes) - Failed
4.15.18 (changes) - Success
4.15.0-0.nightly-2025-01-29-180352 (changes) - Success

Loading changelog, this may take a while ...

Changes from 4.16.13

Created: 2025-01-30 10:09:53 +0000 UTC

Image Digest: sha256:0683aef9c0807b9821f7f286b4a3f71b5e358cf995522883f9478baaffe6aff9

Components

Kubectl 1.29.7
Kubernetes upgraded from 1.29.8 to 1.29.11
Kubernetes Tests 1.29.0
Red Hat Enterprise Linux CoreOS upgraded from 416.94.202409092052-0 to 416.94.202501270445-0 (diff)

Rebuilt images without code change

agent-installer-utils git 6e6bb40d sha256:c5317498744fb25916ef08fb653a5e00ab74c1ece17fea43ce169e0bdc00bd61
alibaba-cloud-controller-manager git 97e8335e sha256:93700e0414498564618053fcefa1b669c60e17ec49529117c9ea77696b123827
apiserver-network-proxy git ca81b6a3 sha256:f8e4ae9999e475bc285e3be1baf977ce733c4706907e65080491b8cf33db1e78
aws-cloud-controller-manager git a53e9def sha256:0cc45d40092122884ca4a8b967932f87ec58c7ac787ea5d7993f29e0d10fdb0c
aws-ebs-csi-driver git 1d29a74a sha256:0af74f4a02da624978d4b53bd898707bdea8bca2cf62ce98c5bb0a8dfd32ef97
aws-ebs-csi-driver-operator git ff69cd03 sha256:b0aa3f517afdc6f072ad40cce529e89cc36aa95d1ced9876e17d35f2150d5e05
aws-pod-identity-webhook git 746491a6 sha256:63a6ad9b7b5fec9fc6e4a7e44b5d16b8cd908fbf452edc57a1bf2c2a53717b04
azure-cluster-api-controllers git a81e3b31 sha256:ca8c7f544298b77b995889657cc83ffba758f80ce9ec4294bd6c741ebea7f61e
azure-disk-csi-driver git 6b55f6fb sha256:8124a5553f351594383c0344e351c33ae180abfe4ab155fb729c1ab7c0d533aa
azure-disk-csi-driver-operator git ff69cd03 sha256:49340e7394e124088bba2d53a718206eaeaad9b5ac4854091393bba31da101af
azure-file-csi-driver git 7a36778a sha256:2666374b4177a4d7d6e745e5aa8834ef6a0e0a7375efa7159e8a70290605431c
azure-file-csi-driver-operator git ff69cd03 sha256:adfb7a79b89279109675b44880d8d20678a33ec0377d53f6fa62c09c7e41ebe0
azure-machine-controllers git e4e11505 sha256:8fc8568f7561ad451d72a3d7d5cdf9d88d8cd4f1cf1e1d73476c15211ef11802
azure-workload-identity-webhook git 4aca092a sha256:c29670d8f4f0bac7983209480479b24ac1d9f53c98e15215849476bb57beea1b
baremetal-runtimecfg git f55a330f sha256:f6dec6d2a36f98545821b5fee2ee6e8875383845c43eafd8612c214868bc0e28
cloud-network-config-controller git 8ceee788 sha256:e210f1b9669290efdd606e67eac474a7938defce34f80ecbd1a5620a9b773348
cluster-autoscaler-operator git 40cadf8a sha256:7e7af404196f6a0469432fdd2e8c0c81d2f6a63e5ea86e9e9d49d716e4f33e1e
cluster-bootstrap git 27bfb59f sha256:f3608da814c5d845555faec68b9ff7b84433302ebc7e235bfd07a186c65a4686
cluster-capi-controllers git 5830a10a sha256:1cda14f6e56e1a8f649472564e12c8e6d18509594af19d906059cd3fedc8cf31
cluster-capi-operator git 3a2f98fb sha256:294d2eab6e9c69de415bd682b1f62fccc6e28d1e94ceb3ad1f6e9b9611534df5
cluster-config-api git b7d0481c sha256:1a0b75fddb91659733d1b6b9603df8be4b2a5817c129e70d66e9038583fe826a
cluster-config-operator git 441d29c9 sha256:1f0734f77cc943685587aaee2e8cd997af6fcf09dae1936d85f7941cb855c10a
cluster-csi-snapshot-controller-operator git 439826e1 sha256:c16fb9865f7af2d20ee051559306f127350bd97c8351c52496cc0fd13966c036
cluster-dns-operator git 8ddf28f9 sha256:594ea18ff7d260c73d5de371dc8b6bdc7917d941f61a53240030c1f8512edd02
cluster-ingress-operator git 57f9674e sha256:f84360fb8a53ef63c11b005376c8a7c102c6875fa8e166d1ebb11ae811192743
cluster-kube-apiserver-operator git de2f2ac2 sha256:c40e8ccef51bcf687d3317f355c016d66353da319ea8964bc0f01f67b9e0a439
cluster-kube-cluster-api-operator git 95ceaa9e sha256:4ad59aac87985defeedeb162a57ac40c549b266d1d82970500bf976663c21374
cluster-kube-controller-manager-operator git 0338b3be sha256:58459d044955bd9eb7a9673e10670f27ec4e223261f27ff07e2624c25a9aae94
cluster-kube-scheduler-operator git 630f63bc sha256:e04066288b53c00afc9eb17adbc3d2e61b897a0ece7dbff117f59d3be0238ec8
cluster-kube-storage-version-migrator-operator git e8258113 sha256:6977d07fff71893386563b47f3a6343ee94cac9f5d1e303bcb0c77e6c806eeca
cluster-olm-operator git 27bf70dd sha256:b7e4c73be4c8fac713cd8c4fcd30ef34c484d9875e2e15f2fa982f2c33e1ac37
cluster-openshift-apiserver-operator git d26f3002 sha256:0e5aa6f731e323fe56acb0692cc6bb2b5cab809fcf5da462ef0647e3790c0d36
cluster-policy-controller git eaea543f sha256:3bc5e531709064295a90d46235997b68a6e2300f0878129121c6069f918ad699
configmap-reloader git dc91ddc4 sha256:f679416b1d53a0d17b71a6894d11099aef7c60a5fa75053836b559aad5b8670d
container-networking-plugins git 73b4123c sha256:f2cbdec42d2e88f280970db59dc095ae783ab2c72e54bff8c0b6469e9ba03bc6
containernetworking-plugins-microshift git 73b4123c sha256:cfb41b9109877b0d93fbab9ae237ae0b8936240c9e2f2ef05ed8a22cf7713191
coredns git 1e417656 sha256:9369e778dda4192a08d8e0534a25d44af2c235ce74748a30cfe06b7efe6f4173
csi-driver-nfs git 406cec72 sha256:19fb32e8829190a594948455db164b8529e261267a793b52bc85c129b54de92d
csi-driver-shared-resource git bc125def sha256:7457232d1ee9c177375590687d33f44df91a8ac0cf41bffdf1be1c543e384a53
csi-driver-shared-resource-operator git 1e1194bc sha256:4d4646b855623b022f1fc8bcb9e34e3aed9421f5b0941ed8f9c08284bc051ac1
csi-driver-shared-resource-webhook git bc125def sha256:1e94a9ed2ae52f6e6b7c0d4f8ab3cb68447276629be94692b459272f00d44e43
csi-external-attacher git 7da80aab sha256:89792bebdce2f82df930857bcd7ec5968a003d75f2869ee44060de10233a1f45
csi-external-provisioner git 9e8af011 sha256:fa2bd3a67704580a9646ae2113988097aaeb07436c8a47a7c9c26a2f04dca948
csi-external-resizer git bdf5bfb4 sha256:91c8146390ff15221c7ab456d9b45775601a2fcf1a098dfcebbb512a7a63dc34
csi-external-snapshotter git 5315d37a sha256:f41a96ade16fc34e2ff4bbe94939e23aadbee33d6dfac2d00d439e8377fc6a40
csi-livenessprobe git f5e3ff55 sha256:512408cf449d6266aee5318c88d431a7669a0e95784c5659f0f2652227cde3b1
csi-node-driver-registrar git 8930c368 sha256:f28e4517438c89ca5ba5278368e37d15a94873a0aaa479d361660db37b9de443
csi-snapshot-controller git 5315d37a sha256:4b1c6df18efe6f3872b73f3f3f5ec59a21f4909a71d973d5898ac0d308343ae2
csi-snapshot-validation-webhook git 5315d37a sha256:c1a110e6f586a710c2763d3938b9dc1ddb50ed5738f4273b1e1973b057379cba
docker-registry git e4d56625 sha256:020ae591ebacda7ef7bc0972ae901fd36dd61ab722c910c4d775c6737c6abed6
driver-toolkit git 1d5732f0 sha256:01e0e07cc6c41638f8e9022fb9aa36a7984efcde2166d8158fb59a6c9f7dbbdf
egress-router-cni git 7089efe6 sha256:5b996b0ee1a072110b8968b0e4771abce9b11d110aaa3d3a0a5ff9862a65d14b
gcp-cloud-controller-manager git 26b43dfc sha256:d3b01714fc71205c64c469732543751e0881e71578d8bfcf72ebcaa3fbd82226
gcp-cluster-api-controllers git 02432df8 sha256:2625410b35f76e34d5ce9bb895b9d5467b1b503ce02b8960f9f1d8e03f54680a
gcp-pd-csi-driver git 5ed71c64 sha256:2251aecd5ea2b64745b16b5a75393f8f850d247363333e7bea9b3e5b2287ea5b
gcp-pd-csi-driver-operator git 799327f7 sha256:150779c086d3d05cd613a02ab7c4f79ada4861c93899f5a6eb79a591f9e0633d
haproxy-router git 4d9b8c4a sha256:e77309570f0a8716292a8466e445fe720f50ec0714782bf75826361d88c2fa83
ibm-cloud-controller-manager git f961f16d sha256:338d0e59fbf65cb40610155c22fc7b922d7f7c15b587a1cc228ba78b015ffe37
ibm-vpc-block-csi-driver git 95719738 sha256:b06a6b58423f2d0735613486296e8c732c318734b7415e89ecc8e9973d23d69a
ironic-machine-os-downloader git 93b8b5fa sha256:dfd2a035b87813e1d587a9069cc9714ee8426a15479df7a91cea6e4c6caafb13
ironic-static-ip-manager git e78e4c3e sha256:a90dde8640559255f2db33bdfabe124b3eb867deb26f12ed48ccfc524981d4ac
k8s-prometheus-adapter git e4f859be sha256:e60b772b8de31bde9dad101ab4ce6cdb808bbe67fea620ce912e1b995d75a2b9
keepalived-ipfailover git b58673a3 sha256:9263e71c2c55592f67283ae899eea579ce435e99458fd0ea1aad992ce0aba0b8
kube-state-metrics git 9b67b8d1 sha256:580b63227f50c8122e8e48df6fb8cc485e39245823b6917ab5360fd2e4998948
kube-storage-version-migrator git 969a60e9 sha256:fcaf442417a6028d77743df01291c34708590044eabaa960e41b4cf2af796c31
kubevirt-cloud-controller-manager git 3db76104 sha256:8531105fc4680f6c72427848f4c6f040a46e804e172a5f01d746156159501d30
kubevirt-csi-driver git 0693093f sha256:68f30aeaa0216d0805dd3d1bc54fc10c2aabbd47693ab07d260e54074b94c068
libvirt-machine-controllers git a336f0b5 sha256:e6ea1a0109ed8987614c5934110a902b9eed3a393deead6f314e120dbef851bd
machine-image-customization-controller git 39480963 sha256:43624f6a4d75515cb71ce60e7cc6e6f3a30b89ee955d93e7aa648dfe002dd138
machine-os-images git 3cc97098 sha256:a667a69bbc88fc3d3da0aabbc0927432b78db79114dc06c99a58f2b05efdb464
multus-admission-controller git 88c596ed sha256:ce601e0c336b87754d2a7296699716133710ac6e361465bab920d10380e78ddc
multus-cni git c4aa21b9 sha256:cb8ad5c196f9378977b3e8ce50a8910ad8c221de5e620b51998a83b6e0fae689
multus-cni-microshift git c4aa21b9 sha256:733362b95b97f1d40bb24f1395f49342d8afdd8890e734b5759081267ed1f689
multus-networkpolicy git f988f894 sha256:ed022c812d4770fb02d383237708df39f1c7d1973b5bf1be49baac0c30300ebb
multus-route-override-cni git 73594f77 sha256:4ccffcba7db823d8d0b45e19306a385d8a524a299538319d85c807ded6ebd1d7
multus-whereabouts-ipam-cni git dab1dd29 sha256:73d967b52581bfecab189eb449057a168d9f17ea285cacfef21df3a85f8078e9
network-interface-bond-cni git bb911451 sha256:a7a62ff1e185d045342ab0f214eafeb8b5b2dd347282657d731928e0994d8a5a
network-metrics-daemon git 48059263 sha256:e51b32090fd911eba1430021ca0bfb78a41c92eec90930f525341011f12b7f4b
network-tools git 39eca100 sha256:8a19fc47d622cbe485c29bf49ded8793b4ec8076071b611dd4e2b9168bcb59db
nutanix-machine-controllers git f053e5a0 sha256:7fbcac7e093a52e021e321997d7fdd7700cae40c023411f1937418c546a99660
oauth-apiserver git fa1f097c sha256:1bfbc1a6384c43337e0ea8a6d477137dc7a2ded0d2ca5ce2aba0395690dcf849
oauth-proxy git 30f80124 sha256:e17f2f76c30eaf9c4f2c5ce3d59e962cc12c3d90afe7cc4791ce7de320152f04
oauth-server git 3739138c sha256:a98de018b89e24b615c848983e788ac38130fc78bcf426d775b0c97670e8da21
olm-catalogd git 79975a51 sha256:17bfa7781363bb4e1da82a2197e12d26c423e6f85f2078b920ea2d8f2d2c28bc
olm-operator-controller git 80b8649c sha256:c832f0b6d6db6d041fedbe35bf6fcd1559a7660ae1e74a8485d314657f094840
olm-rukpak git 282cc84c sha256:5b622948ab7ffa7c37c6b195a3982b474064e60dca05060ce40fc7b9e01872eb
openshift-state-metrics git 59b8a0ff sha256:d48d47299ee568f1e9f0dfc48db95e90b5e6f40f1f3b46aed8cf66dc6c451f40
openstack-cinder-csi-driver-operator git 85b52097 sha256:32cf1de1715d63726352cbc97107e5bcd33572795e8f176b6c5084ce9639d409
openstack-machine-api-provider git 5ada1cba sha256:a16888356bf7d16516369e30410c783bba762c2f90fb249f83dc534da848bedf
operator-marketplace git 7db179fb sha256:41f684e9874c27dc8976bfac889e7ddca7cde7a6fa0cc21b88e64d54023e7b6a
ovirt-csi-driver git 1db726a9 sha256:d98567bde54c297a36846812b212bb0278b5e8b910412e32b935f2dda580037f
ovirt-csi-driver-operator git ac852f3e sha256:5a0f2a9cc777945fa238875ecbf9711f51706413834992fdcfc4979cf5924230
ovirt-machine-controllers git abb91c84 sha256:a2201cc93fc5beb01c673609b6c5c7c3667710bf4bef531a721b8aea90103a1f
powervs-block-csi-driver git 26162bad sha256:2f9c2e713c5a6f0fbeaa1e7b36fb857bf0b98ae006406279dc5c5d93fe8f1366
powervs-block-csi-driver-operator git 9c5dd8d1 sha256:484d2239fe5a6067033e7afc0ab17e5681191b08df87fa589aedb9bd2cad09a1
powervs-cloud-controller-manager git 20e6dc70 sha256:f7b3fad4ef310ffed8127211ebcdf009755a6304cee384f982f7de1a4cb66137
prom-label-proxy git 5e14722e sha256:9e846a80d87c3aaeba425e2b0f3b265fa46b6ba4c8f0191ed98169c0d839a97a
prometheus-alertmanager git e9aea929 sha256:eb834728beac9a825facf29f77e30b160698e6b7eb6684f404a47dd2a7809343
prometheus-config-reloader git c7262a43 sha256:3f8a6f4eee750dbc2b1bfd297191bed7228cf60959727cdc696d5d0ea91ba0f7
prometheus-node-exporter git 29ba26d1 sha256:b4391dc39d17c4ad5eddafc85af6abec1d74fead47679add664bf5fe43be26ce
prometheus-operator git c7262a43 sha256:a35182731ce947a9b6a1fe4133d06c85e739ee223ea9707c2ed24a1503d63dbb
prometheus-operator-admission-webhook git c7262a43 sha256:1a0c18b7c247be6d1963585ec81f10d7ae1b0a5f7a4940a86e58f2594ce6ee38
rhel-coreos sha256:8760100875c277e738110ed634a008f798f05c6e287bdf2619b5edcc3d01d3fd
rhel-coreos-extensions sha256:241e901c5e434fbe8a315ac884ae2f1105207ae39aa39f63cf4d4e2496437c93
route-controller-manager git 3112b458 sha256:1a8dfa9c618e3d320b8ead98fb471e9fd63c6b5d5bfe11f823be0ebc2063d27a
service-ca-operator git 538c7b98 sha256:c26bc0695bc3ae142abb84de5fcb2fa483a80b0ae7824e88a6af8181aaf5f62d
telemeter git c1ecd105 sha256:fb2a4201a2569ae83ff26dcb3b22a6cb90c34cfc89befc2a2ce23d289112c109
thanos git 85eee25c sha256:3b52e5b3cc4696f35a217d3a51a8df20b19ac02d508e9274f15467ebdb8093f6
vsphere-cluster-api-controllers git be22f10a sha256:b5d794e7aef51d6e96afc9db4d5a8e527ee77e66c2c7fdc61fb4c088f80a9f8e
vsphere-csi-driver-operator git 483de9c5 sha256:a3b29009e3285c9b39ec805826bc320768d4188024124ef0fb3535a75ce98ee7
vsphere-problem-detector git 3683c120 sha256:472ac65b1945e1f992ca1fd83edb94c2c25583aa7e2a323de062863a2889670b

agent-installer-api-server

MGMT-19537: Bump golang.org/x/net to 0.33.0 (#7130) #7130
OCPBUGS-43021: Update go-jose to v2.6.3 to mitigate CVE-2024-28180 (#6893) #6893
OCPBUGS-42570: Libraries bump to mitigate CVE-2024-27289 (#6833) #6833
OCPBUGS-36577: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#6752) #6752
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-47494: MGMT-19537: Bump golang.org/x/net to 0.33.0 (#990) #990
OCPBUGS-38466: Allow controller to continue when assisted-service (#914) #914
OCPBUGS-43025: Pick up latest CVE changes by bumping service (#920) #920
OCPBUGS-36577: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#906) #906
Full changelog

agent-installer-node-agent

MGMT-19537: Bump golang.org/x/net to 0.33.0 (#874) #874
OCPBUGS-43028: Pick up latest CVE changes by bumping service (#804) #804
OCPBUGS-42300: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#785) #785
Full changelog

alibaba-machine-controllers

OCPBUGS-44242: change the VERSION makefile variable to use OS_GIT_VERSION #58
Full changelog

aws-cluster-api-controllers

OCPBUGS-44234: [release-4.16] OSD-25934: Only tag NetworkInterfaces in RunInstances if IAM Allows It #531
Full changelog

aws-kms-encryption-provider

OCPBUGS-33693: Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.16 #18
hack: display diff on verify-mod-tidy failure #26
Full changelog

aws-machine-controllers

OCPBUGS-46508: fix Associate*IpAddress flag on launch EC2 #121
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-47645: Prevent panic when informer receives cache.DeletedFinalStateUnknown #133
Full changelog

azure-kms-encryption-provider

OCPBUGS-33692: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.16 #4
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-47663: [release-4.16] Power VS: Create region-zone-sysType hierarchy #9338
OCPBUGS-48442: Ensure rendezvousIP is checked against host IP #9369
OCPBUGS-45999: Always set cross_tenant_replication_enabled parameter to false #9321
OCPBUGS-45669: aws: fix Node Port Service rule removal #9312
OCPBUGS-45669: [release-4.16] capi/aws: remove allow-all Node Port Service #9281
OCPBUGS-39434: dropping this warning as the move from terraform is transparent to the end user #8951
OCPBUGS-45852: Update upi references to api-internal #9290
OCPBUGS-41813: Validate MTU for custom network #9104
ARO-12457: Include bootstrap docker config file in go module #9259
OCPBUGS-45181: add chrony.conf file when additional NTP sources are configured #9247
CORS-3753: Allow mocking of the Azure client everywhere #9220
OCPBUGS-44348: Cherrypick oci ccm fix to 4.16 #9188
OCPBUGS-43967: Revendor assisted service external platform oci #9150
OCPBUGS-38930: import failure when esxi config is not the same in the cluster #8898
OCPBUGS-36290: IBMCloud: Ignore failed VPC regions #8674
OCPBUGS-41885: vSphere - If template is defined skip downloading #8999
OCPBUGS-41490: Update RHCOS 4.16 bootimage metadata to 416.94.202410211619-0 #9158
OCPBUGS-43476: IBMCloud: Handle pagination for subnets #9102
OCPBUGS-41490: Update RHCOS 4.16 bootimage metadata to 416.94.202410172137-0 #9132
OCPBUGS-42014: Update terraform provider for google #9077
OCPBUGS-38732: vsphere, if secureboot is enabled, disable it in the template #8904
OCPBUGS-39415: OpenStack: Install CI dependencies from rpm #8995
OCPBUGS-41334: Fix IPv6 security group rule for schedulable master #8971
OCPBUGS-38687: only allow a single network in failure domain topology #8875
OCPBUGS-42062: OCPBUGS-41865: [release-4.16] vault version updated to 1.13.10 #9036
OCPBUGS-42012: Systemd Fails to Parse Multiline EC Keys #9037
OCPBUGS-41845: Bump extract-machine-os timout to 20m #8997
OCPBUGS-38964: IngressController subnet selection in AWS #8910
OCPBUGS-42138: add tested instance type for IBMCloud #9031
OCPBUGS-39287: Fix var_files syntax to work on older version of ansible #8936
OCPBUGS-41929: Add AWS c7g,m7g,r8g to tested instance types #9009
OCPBUGS-36855: Openstack UPI - Reintroduce unique resource names. #8724
OCPBUGS-39082: incorrect folder gen, workaround govmomi vm folder path bug #8912
OCPBUGS-39496: capi/aws/byo-vpc/multi-cidr: fix group rules #8953
Full changelog

baremetal-machine-controllers

OCPBUGS-46645: Bump x/net to 0.33.0 #226
Full changelog

baremetal-operator

OCPBUGS-39490: Disallow fetching secrets from namespaces different from the host’s one #378
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-42720: Check cast result in adm prune deployments to prevent panic #1891
Full changelog

cloud-credential-operator

OCPBUGS-47070: golang.org/x/net v0.33.0 #805
OCPBUGS-45939: Add AWS region to aws-pod-identity-webhook #800
OCPBUGS-45007: Add retry to ccoctl gcp create functions #794
OCPBUGS-45002: github.com/golang-jwt/jwt/v4 v4.5.1 #788
OCPBUGS-43645: Only attempt timed token credentials on supported platforms. #772
OCPBUGS-43337: Update github.com/sirupsen/logrus v1.9.3 #767
Full changelog

cluster-authentication-operator

OCPBUGS-43367: manifests should not use APIs that are removed in upcoming releases #717
Full changelog

cluster-autoscaler

OCPBUGS-48732: UPSTREAM: <carry>: 🐛(metrics) Initialize metrics for autoscaler errors, scale events, and pod evictions #339
OCPBUGS-45148: [release-4.16] VPA: Update OWNERS file #325
Full changelog

cluster-baremetal-operator

OCPBUGS-43556: SCC-pinning for metal3-baremetal-operator #453
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-42125: IBMCloud: Modify liveness probe for IBM Cloud CCM to use loopback address #366
OCPBUGS-43473: update goimports targets #372
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-44179: relax validation on delete and if failureDomains not configured #331
Full changelog

cluster-etcd-operator

OCPBUGS-33673: rename flowschema to avoid log noise in CVO #1348
Full changelog

cluster-image-registry-operator

OCPBUGS-43797: fix proxy config and leader election test flakes #1148
OCPBUGS-43555: pkg/storage/azure: also check for auth failure error code on deletion #1143
OCPBUGS-42933: azureclient: stop validating credentials when creating the client #1134
OCPBUGS-42420: Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) #1126
Revert “[release-4.16] OCPBUGS-41903: pkg/operator/azurepathfixcontroller: do not sync on non-azure storage” #1119
OCPBUGS-41903: pkg/operator/azurepathfixcontroller: do not sync on non-azure storage #1115
Full changelog

cluster-machine-approver

OCPBUGS-48258: Fix race condition in CO status controller test #267
OCPBUGS-47704: Filter CSRs by signerName #263
OCPBUGS-45974: Ensure trailing dots on DNS names do not block serving cert auth #257
OCPBUGS-45974: Client internal DNS checks should ignore trailing dot #251
OCPBUGS-44629: Client internal DNS checks should be case insensitive #244
Full changelog

cluster-monitoring-operator

OCPBUGS-46066: Add new metrics for OpenShift logging telemetry #2537
OCPBUGS-44005: fix(monitoring-plugin): disable emitting nginx version on error pages #2521
OCPBUGS-43826: Add runbook url for TelemeterClientFailures #2508
OCPBUGS-41967: disable user-defined monitoring per object #2474
OCPBUGS-42067: Reapply “chore: poll immediately in the e2e tests” #2476
OCPBUGS-41717: Configure graceful shutdown for metrics-server (4.16 backport) #2467
OCPBUGS-41910: filter alerts sent to Telemeter #2471
Full changelog

cluster-network-operator

OCPBUGS-43803: Start feature migration when the cluster CNI is changed to the target type #2552
OCPBUGS-43715: Skip including default crypto policies to avoid authby issue #2598
OCPBUGS-44338: Prevent live migration process from flapping between step-2 and step-3 #2565
OCPBUGS-46148: Remove ip xfrm state when IPsec is disabled #2595
OCPBUGS-45593: Pass transit_switch_subnet options in ovnkube-node pod #2584
OCPBUGS-44846, SDN-5436: Provide support for user owned IPsec machine configs #2571
OCPBUGS-42727: Live migration: report network overlap via live_migration_blocked metric #2519
OCPBUGS-43604: OCPBUGS-42244: Exporting environment varialbe NODE_CNI for live migration #2538
OCPBUGS-36210: Set global IP forwarding sysctl parameters while starting ovnkube-node #2422
OCPBUGS-43544: Use CNIConfDir for mounting directory to ovn-ipsec-host pod #2537
OCPBUGS-43035: Configure narrowing=yes for IPsec connections #2528
OCPBUGS-36594: Set mount propagation to HostToContainer for /var/lib/kubelet #2430
OCPBUGS-41840: Add configurable subnets while running hybrid-overlay-node binary #2502
OCPBUGS-37763: Handle random crictl errors in iptables-alerter #2452
OCPBUGS-41555: HyperShift: do not use antiaffinity on single replica control planes #2494
OCPBUGS-37937: Add proxy env vars to onvkube-node #2457
OCPBUGS-41607: set required-scc for openshift workloads #2496
Full changelog

cluster-node-tuning-operator

use ROLE_WORKER_CNF environment variable to determine mcp name (#1292) #1292
e2e: tuned degraded test fix (#1282) #1282
Adjust Workload Hints test cases based on Intel or AMD (#1277) (#1281) #1277
e2e:performance: decode to valid kubeletconfig object (#1273) #1273
cmd: PPC: support tolerating heterogeneous core IDs (#1252) (#1268) #1252
e2e: add irdma to module_blacklist kernel args (#1267) #1267
OCPBUGS-47678: performanceprofile cpuset input validation (#1264) #1264
Fix context deadlines in ExecCommandOnPod() (#1263) #1263
OCPBUGS-46496: [release-4.16] Add vendor and architecture specific tuning options (#1254) #1254
OCPBUGS-45264: Normalize cpu sets when rendering to Tuned profiles (#1238) (#1251) #1238
E2E: fix modify node selector to use lowercase (#1209) #1209
Fixing empty tuned submodule when using Dockerfile (#1212) #1212
OCPBUGS-38900: Drop sched_migration_cost_ns setting (#1203) #1203
Make ocp-tuned-one-shot.service restart on-failure (#1202) #1202
Unblock 4.16 CI (#1204) #1204
e2e: performance: verify tuned one-shot service vs kubelet (#1192) #1192
E2E: Add test to verify cpuset.cpus.exclusive is writeable (#1153) #1153
OCPBUGS-39005: Add cluster-wide proxy env file (#1166) #1166
OCPBUGS-36431 Fix generated cpu mask for 512+ cpus (#1152) #1152
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-48657: Add new team members to owners file #378
OCPBUGS-38269: CVE-2024-24786 infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON #363
Full changelog

cluster-samples-operator

OCPBUGS-48848: add shannon and aroyoredhat as owners #596
OKD-225: remove only the EOL CentOS 7 images #576
Full changelog

cluster-storage-operator

OCPBUGS-46077: Fix PodStartupStorageOperationsFailing alert #548
OCPBUGS-43315: assets: shared-resource: hypershift: add pull-secret to operator SA #521
NO-JIRA: release-4.16: Run make update #512
Full changelog

cluster-update-keys

OCPBUGS-43467: keys: Update Red Hat keys to use SHA256 signatures #64
Full changelog

cluster-version-operator

OCPBUGS-46408: Filter out shallowly UpdateEffectNone errors from a MultipleErrors message in the Failing condition #1128
OCPBUGS-45329: deps: bump golang.org/x/net to 0.31.0 #1118
OCPBUGS-43964: Fix desired before sync_worker’s work is initialized #1097
Full changelog

console

OCPBUGS-46602: ReRun of Resolver based PipelineRuns fails from UI #14641
OCPBUGS-46567: ImagePullSecret getting duplicated when editing DeploymentConfig in Form View #14636
OCPBUGS-48162: OCP web console show pod status as Init:0/1 after using Native sidecars #14668
OCPBUGS-43672: Disable GQL introspection #14638
OCPBUGS-45334: fix table combination #14576
OCPBUGS-41342: fix namespace for networkpolicy #14244
OCPBUGS-46022: Plugins that use very old PF4 dropdown or menu components with grouped items have bullets and padding that needs to be removed. #14612
OCPBUGS-45229: Unable to remove finally tasks in pipeline builder mode #14558
OCPBUGS-45245: use TaskRuns results.tekton.dev/record annotation to get the logs #14563
OCPBUGS-41523: i18n upload/download routine task - Sprint 254 #14258
OCPBUGS-45015: Remove ClusterTask dependency in console from Pipelines 1.17 #14537
OCPBUGS-44792: Collapse/Expand Feature Added, Removal Option Removed in Version 4.16 #14519
OCPBUGS-44875: Start last run do not work in buildConfig details page #14529
OCPBUGS-44874: Telemetry userPreference results in empty nodes output to the DOM #14528
OCPBUGS-45124: Add multiline support to template instantiation #14545
OCPBUGS-44885: include external labels so silenced alerts not displayed in notifications #14530
OCPBUGS-44932: Add IBM Block Storage CSI driver support for RWX #14533
OCPBUGS-43447: Ensure envs are initted upon first load #14405
OCPBUGS-44806: Don’t request user settings configmap if no user has been loaded. #14522
OCPBUGS-44207: Create RoleBinding will trigger Admission Webhook Warning #14465
OCPBUGS-44219: Add flag to hide the pipelines-plugin pipeline builder extensions #14466
OCPBUGS-41673: Update vendor imports to include all PatternFly components #14273
OCPBUGS-43834: Enabling topology e2e tests on CI #14438
OCPBUGS-35204: replace global refresh sync lock in OIDC provider with per-refresh-token one #13950
OCPBUGS-36556: Increase login flow state paramater length/entropy #14354
OCPBUGS-42369: Console crashes when ssh is selected in add secret for starting a pipeline run #14320
OCPBUGS-41904: fix annotation for ovn localnet #14366
OCPBUGS-37615: Include PatternFly-4 chart styles so they are available for dynamic plugins that still use PF4 react-charts #14091
OCPBUGS-37689: Switch to use annotations as labels from PipelineRuns created through Pipelines as Code is deprecated #14094
OCPBUGS-42015: Topology screen crashes when completed pod is selected #14298
OCPBUGS-35850: Fix: Quick Start “next” button requires double click to move to next step #13989
OCPBUGS-42382: Allow operators to enable monitoring by default #14317
OCPBUGS-41905: List of default Camel K event sources disappears when adding a custom event source #14290
OCPBUGS-41709: Need to allow blank for Project/namespace when setting SA Subject in ‘Project access tab’ #14278
OCPBUGS-42069: add Create button to Console plugins tab #14302
OCPBUGS-41996: Fix updating the “Until” field on the Silence > Edit page #14296
OCPBUGS-38112: do not directly mutate links in useMemo #14117
OCPBUGS-34518: Restore user toggle when authentification is disabled #13902
OCPBUGS-41619: Use vCenterCluster value from CM as primary resource #14268
OCPBUGS-37046: Fix TypeError: Cannot read properties of null (reading ‘metadata’) in Topology view #14059
OCPBUGS-38911: Values entered into the Instantiate Template form are automatically cleared #14187
Full changelog

console-operator

OCPBUGS-46481: Dont disable console when authConfig type is set to None #952
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-43426: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.29 into release-4.16 #303
Full changelog

csi-driver-manila-operator

OCPBUGS-38458: Add missing healthchecks #241
Full changelog

docker-builder

OCPBUGS-43186: runc library bump to 1.1.12 #420
OCPBUGS-47775: skipping some unit tests to avoid failures as they are duplicate #424
OCPBUGS-48159: Add team members to the OWNERS file #426
OCPBUGS-30455: bump google.golang.org/protobuf to 1.33.0 #402
Full changelog

etcd

NO-ISSUE: Add support for cachi2 based deps #298
Full changelog

gcp-machine-controllers

OCPBUGS-48484: Refactor exists() to handle gcp API change #106
Full changelog

hyperkube, pod

OCPBUGS-46003: Bump k8s api to 1.29.11 #2161
OCPBUGS-44513: Bump k8s api to 1.29.10 #2133
OCPBUGS-42555: Allow pod to be scheduled if node’s name and hostname mismatch #2099
OCPBUGS-42168: Bump k8s api to 1.29.9 #2090
release-4.16] OCPBUGS-42057: UPSTREAM: <drop>: bump(github.com/openshift/apiserver-library-go) #2096
Full changelog

hypershift

NO-JIRA: chore(deps): chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1737480393 - abandoned #5484
NO-JIRA: chore(deps): update konflux references (release-4.16) #5477
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.50 (release-4.16) #5437
NO-JIRA: Update Konflux references (release-4.16) #5431
NO-JIRA: chore(deps): update konflux references (release-4.16) #5384
NO-JIRA: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v9 (release-4.16) #5298
NO-JIRA: [release-4.16] Bump golang.org/x/crypto and golang.org/x/net #5370
NO-JIRA: Update Konflux references (release-4.16) #5328
NO-JIRA: Red Hat Konflux update control-plane-operator-4-16 #5337
OCPBUGS-47539: Separate CPO containerfiles #5333
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.22.7-1733160835 (release-4.16) #5295
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.49 (release-4.16) #5297
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.48 (release-4.16) #5294
NO-JIRA: Update Konflux References and Perform Migration for Release-4.16 #5261
OCPBUGS-39372: Fixed NodePool version validation #5219
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.47 (release-4.16) #5209
NO-JIRA: chore(deps): update konflux references (release-4.16) #5207
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.46 (release-4.16) #5189
OCPBUGS-43930: Return the right tagReference on Catalogs ImageStream #5133
NO-JIRA: chore(deps): update konflux references (release-4.16) #5161
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.45 (release-4.16) #5163
chore(deps): update konflux references (release-4.16) #5135
OCPBUGS-44277: Configure OAuth https proxy to dial cloud endpoints directly #5069
chore(deps): update konflux references (release-4.16) #5119
OCPBUGS-43973: Add network policies for konnectivity server and ignition server proxy #4998
NO-JIRA: Update Konflux references (release-4.16) #5112
NO-JIRA: Update Konflux references (release-4.16) #5099
chore(deps): update konflux references (release-4.16) #5078
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.44 (release-4.16) #5059
NO-JIRA: chore(deps): update konflux references (release-4.16) #5058
NO-JIRA: Update Konflux references (release-4.16) #5042
chore(deps): update konflux references (release-4.16) #5024
chore(deps): update konflux references (release-4.16) #5019
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.43 (release-4.16) #5017
NO-JIRA: Update Konflux references (release-4.16) #5012
OCPBUGS-43840: add ValidIDPConfiguration condition to report IDP config issues #4985
NO-JIRA: chore(deps): update konflux references (release-4.16) #4971
OCPBUGS-43046: Do not send traffic to local audit-webhook through konnectivity #4883
NO-JIRA: chore(deps): update konflux references (release-4.16) #4954
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.42 (release-4.16) #4947
NO-JIRA: chore(deps): update konflux references (release-4.16) #4933
OCPBUGS-43104: label routes only when HCP router used #4899
OCPBUGS-43308: Use guest DNS resolution in Konnectivity HTTPS proxy by default #4905
NO-JIRA: chore(deps): update konflux references (release-4.16) #4923
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.41 (release-4.16) #4919
NO-JIRA: chore(deps): update konflux references to 674e70f (release-4.16) #4908
NO-JIRA: chore(deps): update konflux references (release-4.16) #4896
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.40 (release-4.16) #4880
OCPBUGS-42432: Use KubeClientCABundle for HostedClusterConfigOperator cluster-signer-ca #4799
OCPBUGS-42342: Let payload generation pick the release for the NodePool #4787
OCPBUGS-42431: Conditionally manage kubeconfig secrets for DNS and Ingress operators #4798
NO-JIRA: chore(deps): update konflux references (release-4.16) #4853
OCPBUGS-42608: Add Annotation to skip deleting hcp namespace #4830
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.39 (release-4.16) #4827
chore(deps): update konflux references (release-4.16) #4816
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.38 (release-4.16) #4806
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.37 (release-4.16) #4796
chore(deps): update konflux references (release-4.16) #4781
NO-JIRA: chore(deps): update konflux references (release-4.16) #4760
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.36 (release-4.16) #4759
NO-JIRA: Security fixes for openshift-ci-security job #4750
OCPBUGS-41372: CPO oauth idp converter: resolve names before dialing #4689
NO-JIRA: chore(deps): update golang docker tag to v1.23 (release-4.16) #4729
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.34 (release-4.16) #4728
NO-JIRA: chore(deps): update konflux references (release-4.16) #4727
OCPBUGS-38058: Add HTTP konnectivity proxy to OAuth server #4496
HOSTEDCP-1955: bump CCO version #4696
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-42286: Reorder static resources to create RBAC first #129
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-43686: UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.16 #89
Full changelog

ibmcloud-machine-controllers

OCPBUGS-44870: Bump dependency for CVE #53
OCPBUGS-36698: IBMCloud: Handle pagination for subnets #42
Full changelog

insights-operator

Ignore previous status when disabling alerts (#1061) #1061
OCPBUGS-45203: LokiStack gatherer (#1051) #1051
OCPBUGS-45044: insightsoperator.operator.openshift.io resource is create-only (#1054) #1054
gather selected clusterroles (#1023) #1023
OCPBUGS-39564: Not able to enable repositories during entitled build in OCP Cluster on IBM-Z (#1013) #1013
OCPBUGS-39394: collect some nmstate customresources (#986) (#989) (#995) #986
Full changelog

ironic

OCPBUGS-48151, OCPBUGS-48598: Bump jinja2 to 3.0.1-6.el9.2 #623
OCPBUGS-44895: Bump Ironic #610
OCPBUGS-43950, OCPBUGS-43958: Bump python-waitress [4.16] #604
OCPBUGS-43438: Include fixes for CVE-2024-5569 #599
OCPBUGS-42511: Include fix for CVE-2024-47211 #594
OCPBUGS-39017: Bump ironic-lib to fix utf8 decoding issue #569
OCPBUGS-38797: redfish-virtualmedia fails on XFusion nodes #564
OCPBUGS-42113: Update ironic-inspector to fix the memory leak #587
OCPBUGS-37758, OCPBUGS-39383: Include fixes for CVE-2024-44082 #579
OCPBUGS-38510: set min version for python3-webob #553
Full changelog

ironic-agent

OCPBUGS-39017: Bump ironic-lib to fix utf8 decoding issue #156
OCPBUGS-39383: Include fixes for CVE-2024-44082 #161
OCPBUGS-38510: set webob and bump werkzeug #149
Full changelog

kube-metrics-server

: OCPBUGS-46663: Disable HTTP2 #41
OCPBUGS-41717: Wire server run options to flags. ([release-4.16] backport) #37
Full changelog

kube-proxy, sdn

OCPBUGS-46048: clean up containernetworking/plugins vendoring in sdn #645
OCPBUGS-45806: Stop checking ruleVersion [4.16] #643
OCPBUGS-44301: Use copy() to duplicate a net.IP #641
OCPBUGS-43344: OCPBUGS-42244: Implement namespaceSelectors on ingress with all pods IPs #635
OCPBUGS-42203: fix UDP conntrack cleanup #636
OCPBUGS-42159: fix redundant router-default iptables rule #633
Full changelog

kube-rbac-proxy

OCPBUGS-30447: protobuf bump [4.16] #111
Full changelog

machine-api-operator

OCPBUGS-45947: vSphere klog initialization preventing verbose log messages #1312
OCPBUGS-45998: Ensure deletion annotation takes priority and oldestPolicy can distinguish longer ages #1313
OCPBUGS-39028: Updates message verbs to use %q where appropriate #1282
OCPBUGS-43433: Vsphere: Handle cloned instance with lost taskID #1298
Full changelog

machine-config-operator

OCPBUGS-39224: Do not enable on-prem-resolv-prepender.path for UPI #4573
OCPBUGS-48290: Pausing Master MCP results in Alerts #4786
OCPBUGS-43765: openstack: fix non-old systemd compatible unit #4660
OCPBUGS-43741: Soften haproxy timeout for kubeapi probe #4662
OCPBUGS-48116: OCPBUGS-47801: trying to wait for sub-controllers #4777
OCPBUGS-45974: Remove trailing periods from AWS provided hostnames #4744
OCPBUGS-44337: Removal of additionalTrustBundle CA does not remove certificate from node backport #4688
MCO-1342: Backport Telemetry to 4.16 #4649
OCPBUGS-44043: Disable ESP offload for OVS attached interfaces #4676
OCPBUGS-42109: Do not use ‘restart’ for ‘oneshot’ service #4616
OCPBUGS-42744: Check for kernel arg diff in updateOnClusterBuild #4628
OCPBUGS-42722: Panic seen in CI job for MCC pod #4626
OCPBUGS-42719: MCPs report wrong number of nodes when we move nodes from one custom MCP to another custom MCP #4625
OCPBUGS-41293: Enable the use of Linux Bridge as the ovs default port connection #4563
OCPBUGS-41256: Set ESP offloads off in bonds if slaves don’t support them #4627
OCPBUGS-41806: When newly built images rolled out, the update progress is not displaying correctly (went 0 –> 3) #4584
OCPBUGS-41518: CVE-2024-3727 ose-machine-config-operator-container: containers/image: digest type does not guarantee valid type #4569
Full changelog

monitoring-plugin

OU-559: fix log based alerts namespace for dev console #320
OCPBUGS-44395: remove unused package and upgrade vulnerable dependency #272
OCPBUGS-43239: upgrade dynamic plugin sdk to remove vulnerable dependencies 4.16 #217
OCPBUGS-42424: fix path-to-regexp dependency #197
Full changelog

must-gather

OCPBUGS-46407: Support gathering IPsec data #469
OCPBUGS-42969: Collect etcd object count #454
OCPBUGS-43056: Open [Release-4.16] Multus is now a Pod and will be captured by normal #449
Full changelog

nutanix-cloud-controller-manager

OCPBUGS-30524: bump google.golang.org/protobuf to v1.33.0 #38
Full changelog

oc-mirror

changes the owners file (#1015) #1015
OCPBUGS-48513: e2e: use same version of crane as in go.mod (#1021) #1021
Full changelog

openshift-apiserver

OCPBUGS-45010: Pass expected type to deploymentconfig/scale object validation. #461
OCPBUGS-42724: fail image import when both image and error are nil #455
Full changelog

openshift-controller-manager

OCPBUGS-44186: user system:serviceaccount:openshift-infra:serviceaccount-pull-secrets-controller in ns/openshift-infra must not produce too many applies #351
OCPBUGS-48202: Add team members to the OWNERS file #358
NO-JIRA: cleanup root and app OWNERS #347
OCPBUGS-42420: Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) #343
Full changelog

openstack-cluster-api-controllers

OCPBUGS-44456: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.16 #328
OCPBUGS-44990: Makefile changes for merge-bot #341
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-48696: Fix excessive catalog source snapshots cause severe performance regression #957
OCPBUGS-48661: Fix concurrent namespace resolution #947
OCPBUGS-46928, OCPBUGS-46935, OCPBUGS-47315: x/net bump to v0.34.0 [release-4.16] #939
OCPBUGS-47738: catalog-operator: Delete Pods that were evicted (#3459) #925
OCPBUGS-46434: CRD upgrade existing CR validation fix #916
OCPBUGS-44802: fix: call TokenRequest API when service account token secret is missing #900
OCPBUGS-41540: [4.16] add optional schema migrations; default to olm.bundle.object instead of olm.csv.metadata (#1384) #859
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-47634: Let OVN-northd bind remote ports #2406
OCPBUGS-45958: bump OVS to 3.3.0-62.el9fdp for OCP 4.16 #2388
OCPBUGS-44457: Add static route to the hairpin masquerade IPs to pod #2346
OCPBUGS-45942: pin libreswan to 4.6-3.el9_0.3 #2386
OCPBUGS-45343: Dockerfile: Update OVN to the 24.03.2-32.el9fdp minor release. #2377
OCPBUGS-42244: Add hybird overlay pod IPs to the namespace address_set #2352
OCPBUGS-43344: Add SDN node subnet gateway IP to host-network address_set #2328
OCPBUGS-42942: Fix egress gateway pod cleanup for remote zone pods. #2341
OCPBUGS-36210: Implementation required to enable Forwarding if it is already disabled #2212
OCPBUGS-41551: Add subnet overlap check for transit switch subnet #2306
Full changelog

powervs-machine-controllers

OCPBUGS-41976: Update go.mod to fix CVE - 4.16 #84
Full changelog

prometheus

OCPBUGS-43668: fix(discovery): Handle cache.DeletedFinalStateUnknown in node informers’ DeleteFunc #231
OCPBUGS-39179: Restore Prometheus functionality to accept samples with different timestamps from the same series in a single scrape. #224
Full changelog

tests

OCPBUGS-48448: Add team members to the OWNERS file for PR approvals #29443
OCPBUGS-48348: Fixing build s2i ruby test data inline with latest ruby version(>=3.0) #29431
OCPBUGS-44105: Adjust createDNSPod() to support hypershift dual-stack test #29258
OCPBUGS-39135: Bump timeout for the pod-network-service endpoints check #29052
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-46341: update check-fmt goimports command #83
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-43881: redact sensitive information when logging VCenter config #134
OCPBUGS-42878: Add compute resource entity to consider a standalone cluster for volu… #131
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github