4.16.38

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.16.38-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.16-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.16-micro Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.16-micro Succeeded (2 retries) periodic-ci-openshift-release-master-ci-4.16-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.16-fips-payload-scan
- gcp-ovn-rt-upgrade-4.16-minor Succeeded periodic-ci-openshift-release-master-ci-4.16-upgrade-from-stable-4.15-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.16 Succeeded periodic-ci-openshift-hypershift-release-4.16-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.15.21, 4.15.22, 4.15.23, 4.15.24, 4.15.25, 4.15.26, 4.15.27, 4.15.28, 4.15.29, 4.15.30, 4.15.31, 4.15.32, 4.15.35, 4.15.36, 4.15.37, 4.15.38, 4.15.39, 4.15.41, 4.15.42, 4.15.43, 4.15.44, 4.15.45, 4.16.10, 4.16.11, 4.16.12, 4.16.13, 4.16.14, 4.16.15, 4.16.16, 4.16.18, 4.16.19, 4.16.20, 4.16.21, 4.16.23, 4.16.24, 4.16.25, 4.16.27, 4.16.28, 4.16.29, 4.16.3, 4.16.30, 4.16.32, 4.16.33, 4.16.34, 4.16.4, 4.16.5, 4.16.6, 4.16.8, 4.16.9

4.16.37 (changes) - S F F S S S S
4.16.36 (changes) - Success
4.16.35 (changes) - Failed
4.16.26 (changes) - Failed
4.16.17 - Failed
4.16.7 (changes) - Success
4.16.2 (changes) - Success
4.16.1 (changes) - Success
4.16.0 (changes) - Failed
4.15.48 (changes) - Success Success
4.15.47 (changes) - Success
4.15.46 (changes) - Failed
4.15.40 (changes) - Success
4.15.34 (changes) - Failed
4.15.33 (changes) - Failed
4.15.20 (changes) - Success
4.15.19 (changes) - Success
4.15.18 (changes) - Failed
4.15.0-0.nightly-2025-03-26-045404 (changes) - Success

Upgrades to:

4.17.23 (changes) - Success

Loading changelog, this may take a while ...

Changes from 4.16.17

Created: 2025-03-27 09:39:53 +0000 UTC

Image Digest: sha256:6da09834a9e0e30a79f77c13c2520a25172d8be3fc044dc2ad1392d69b2edfbf

Components

Kubectl 1.29.7
Kubernetes upgraded from 1.29.8 to 1.29.14
Kubernetes Tests 1.29.0
Red Hat Enterprise Linux CoreOS upgraded from 416.94.202410071428-0 to 416.94.202503252048-0 (diff)

Removed images

ovirt-machine-controllers

Rebuilt images without code change

agent-installer-utils git 6e6bb40d sha256:b28b3c431aecafaa6e786c6804a1cfd283ffe7e0e33227446b0a7d9aeee5afd5
alibaba-cloud-controller-manager git 97e8335e sha256:962814d101f0b19ade2cbe20ca622b9605f5c17e485538c23cfe393abb5f67b7
apiserver-network-proxy git ca81b6a3 sha256:80f23abedfa6997ac60ebfc304a5de26c68b871855514d5dc5982d3562198d60
aws-cloud-controller-manager git a53e9def sha256:e3f56169a5a7ba59da3763f0022eeb53d93efc8b9fec428c07ecfab7a08fc807
aws-ebs-csi-driver git 1d29a74a sha256:b6567df203e2c424e8b13210f29fc0979ec40d457273274d2fccfaa7153d113b
aws-ebs-csi-driver-operator git ff69cd03 sha256:e220de5b35809760c0289d92d80aafdb8360b15ea5e4db3568fcff0c997ee380
azure-cluster-api-controllers git a81e3b31 sha256:5df9e8114e3d865570697327529f51ec6d6de989dfcf12c895a089d1983b901d
azure-disk-csi-driver git 6b55f6fb sha256:a26f197d648513d7eb64b8ec067dc6ca42808f753fd2f6bbf747e3992d8dbbdb
azure-disk-csi-driver-operator git ff69cd03 sha256:4d0b6d8235527bd06f86ed2682eb7f929869d9d836c55a63679d8a1834ef50dc
azure-file-csi-driver git 7a36778a sha256:b535558c312324e6dc0b9b8e0b611e85e076b2676ec087949f87cbd0037f165c
azure-file-csi-driver-operator git ff69cd03 sha256:a8eae7f0ada3c4bc9f9aa759ee8ed09d4543105410074e815766939e8c6c86cb
baremetal-runtimecfg git f55a330f sha256:f64405e024ce14049b3d7fcf6d5e8fb9f7cf2a790e605b0f47f0b2d1322b396e
cloud-network-config-controller git 8ceee788 sha256:1c7ae3ff32c409c83209478c12b1017d6559e8f7d1f24c0fea0a2a099e2608b9
cluster-bootstrap git 27bfb59f sha256:d7b8cc7dd69b1eeddcad87994530ba7c5b36d07877549abdf3cef92da9800d93
cluster-capi-controllers git 5830a10a sha256:4c72e4a5a16fd0c02e4d95150ea848191bb3dddc3ad8d67ce531e82d15e7e544
cluster-config-api git b7d0481c sha256:1b05298b72ead5035cb4903e84df625dd302692992e813311701934ab5ea5fae
cluster-config-operator git 441d29c9 sha256:728934589a9147093d0401a11be2c87350a1de642ee362801bc7afc4b297c140
cluster-csi-snapshot-controller-operator git 439826e1 sha256:7ad7ae8cf869c7698f8283b7caa9aac9b5cf1f5a62a733800df6b3ac693643b5
cluster-etcd-operator git 3f2ce488 sha256:a28d623bbbf6c23bde704cff81fbfe7f1c95f81d50ec8dc772fe373be20c76a1
cluster-ingress-operator git 57f9674e sha256:1fa2f2767f2905ab286955741209e55df8f6b055a69e9e52a0b7e85bf313a163
cluster-kube-cluster-api-operator git 95ceaa9e sha256:c4a0b031c120df6d0c6563939653b4f344da0c6340d27b8cbf49d076d5acd9e6
cluster-kube-controller-manager-operator git 0338b3be sha256:d243f4bd09f71f6f8ac0be1b0dac8441a0cbd149db325cf5233bbd6e369ad7b1
cluster-kube-scheduler-operator git 630f63bc sha256:9218a00c79b43ff1dafce7ebe184a633953349882485e83a5dae7a6d62e186e2
cluster-kube-storage-version-migrator-operator git e8258113 sha256:87e1a3b792cf1c224a1da60d7e79af4c54b397e2909bfeb07425389a31934ca7
cluster-olm-operator git 27bf70dd sha256:36939a759fcca482e344e5bd0bf714e671786776b4234efec9d8caca0b94fb82
cluster-openshift-apiserver-operator git d26f3002 sha256:15afbf837f0f2dbc897be38787bc2e651eb83df67892a041d6b64b2cf2b62291
cluster-policy-controller git eaea543f sha256:28f0ef1bf7598720aa53456a042658d5886a2c5be044cd434ac0443dd40182eb
configmap-reloader git dc91ddc4 sha256:e10a84c419669138f7c9375d5a17e3c8908989f598712319b5b7d7d985197995
container-networking-plugins git 73b4123c sha256:9e01cd8561cc5ceade71be32af55eda7fcfb5e71911cf6e00dfe2e198121ea17
containernetworking-plugins-microshift git 73b4123c sha256:c17a221a731733b5d63a9d3d470616973bc2132f3433574696b6096f5be46e52
coredns git 1e417656 sha256:67dae90916d9b744e20cc1d38d854fb6eebabee1d7dc7d315e5eb9957342fe58
csi-driver-manila-operator git c25d1ff2 sha256:ada99b228549411b21020bb8b5856b0c84497f2ae067a191404ea361137790fd
csi-driver-nfs git 406cec72 sha256:b35b23ddac28ffc128a3693ee5b8f1a43f3c4a8ffa74cfa4db8cb9c33bc70510
csi-driver-shared-resource git bc125def sha256:ffe42dbb97f065407466797e56d06e845fca408ac2f4bc5d90edcb5a8a084da1
csi-driver-shared-resource-operator git 1e1194bc sha256:09f1b9272b95d206e5088c92a144eeff023b6eaf24fd17d2b77319c27624012f
csi-driver-shared-resource-webhook git bc125def sha256:4ed0cd3d97b62c7e13d95ed2c8e8ce62dd85d4359aeca7dfe9fd802702bf0d9e
csi-external-attacher git 7da80aab sha256:52f8478ba508a6ebf994ade2282fe73afd9911d6feb701396d26ad19ff7a0f2d
csi-external-provisioner git 9e8af011 sha256:4e7d619a54407ccea4991d4ee2d4444312df6bc6b3005a1f8b234aeace7958e3
csi-external-resizer git bdf5bfb4 sha256:51d1b775384acbf0987b7d3ea9212c91bdc032b920ff8fb184e934deb8c531f7
csi-external-snapshotter git 5315d37a sha256:273d50f299a20db2ddb4be6cad5dea84e9488d932aa83ea2c61967687b9ba8ce
csi-livenessprobe git f5e3ff55 sha256:564afbfd84026d55a58128028582668265d5fc7eff8209d39e119ffb7ddf3795
csi-node-driver-registrar git 8930c368 sha256:3692b5ce3b3cf3343eef7bcb12986203f8143e5489a022fbd9268b65063782f9
csi-snapshot-controller git 5315d37a sha256:f678ce04651d1f8f752218522253bf4c583c03cca95dfd56a7add36ac0eedef6
csi-snapshot-validation-webhook git 5315d37a sha256:d51159843c2f889fbfe6ea6ebb33d3244d1013127d8af83d5618a03bbf1834af
driver-toolkit git 1d5732f0 sha256:03336515e9dcdece823625978b0c09ec9f3f4c21c8ce0d54d5b3bc90d9365c23
egress-router-cni git 7089efe6 sha256:2cf85d67b4702d4b093b20f26bb75a0c058b4c4caeecc12d5f13a094b6c56e2d
gcp-cloud-controller-manager git 26b43dfc sha256:71c8e61c1406285afdded883b4946070f5a97fecf108f165b4def3af183c383f
gcp-cluster-api-controllers git 02432df8 sha256:bcb7882737a78db63964326e0047c41daaa694e47eea899424319152ecb22d06
gcp-pd-csi-driver git 5ed71c64 sha256:1d1fc3aee494c82258acaa0ef6f1aa9fbbe343aa0bd316adf5fc00e217a1e2ef
gcp-pd-csi-driver-operator git 799327f7 sha256:920d74686e2a97fa442b36e92288bb3deaee815992c36004c1a1818ad5226248
haproxy-router git 4d9b8c4a sha256:f34084a54f1d4029f418c87adf663ef823125afaded7705cdcc4f6f959275cf6
ibm-cloud-controller-manager git f961f16d sha256:7910416c1b644e9dc47904964f40d07ead49183d23f12f976233929d56049408
ibm-vpc-block-csi-driver git 95719738 sha256:00d46a98697f4054d70b32447044eb2a8929d3d2bfabc94795d4e957a30752e3
ibm-vpc-block-csi-driver-operator git 5d5d8010 sha256:4eaedb9aeb71834c6597b3a9c9c2408b10d5a5caa3eb1fec137ec8c771ced920
ironic-machine-os-downloader git 93b8b5fa sha256:232902187cc16117813cbbd3e8c370b50dd76fa26a43fd2fe41d7f1145f1f801
k8s-prometheus-adapter git e4f859be sha256:608c82b49e8606785d53eea4477c940c7010533d17ca2a8399213aa01434c179
keepalived-ipfailover git b58673a3 sha256:1958c5cb4a0d1890becedd477be05cd25142ae708a1d2c068022fb01b7563d4c
kube-state-metrics git 9b67b8d1 sha256:372c3b66a83b9f72527f072ceec49f58dc5492736d0efba488dfeedff2a6b326
kube-storage-version-migrator git 969a60e9 sha256:f202db792fffaa1d124f8261df03c887d3e7d3b87170b09f7f52b8066839cbd1
kubevirt-cloud-controller-manager git 3db76104 sha256:512668afab4daba71a9256eae1ec4167c4a3125e7fa51f3179a9abc13e4f02a8
libvirt-machine-controllers git a336f0b5 sha256:b8be8e279959726a60b14339ab4fd63609c7db0aa010a37f9164d1a9f5fb2b6b
machine-image-customization-controller git 39480963 sha256:fd16be924db880aca6aaad247bd5875b7dea0785d35c1e14ef0085a7c07803c3
multus-admission-controller git 88c596ed sha256:29ecce5e257a08cc64bfe57bda736ba4ff742f5fcf9dfc6d16e3edd412e24f84
multus-cni git c4aa21b9 sha256:bbed239175ab11023a5c5e95de5475f97118947e5a6f1ad643dfe2bfaf683507
multus-cni-microshift git c4aa21b9 sha256:3fdcdce1e9a1cbac1b45c8d21f3b22e40543f25e478ac7f7488c3735a94cdd37
multus-networkpolicy git f988f894 sha256:f01c34dac4db1cea54a0c9e083fff7684a504023a0a0c6af12f1d6ec1fabe741
multus-route-override-cni git 73594f77 sha256:ea2f61925fe7107d10021c1dfdcf62888881ae18be244b715c23e0c639f3f72b
network-interface-bond-cni git bb911451 sha256:de2d75d59be4adfa448f7a534e1c211ebb3206b9dd40cc9179dee34691a72a88
network-metrics-daemon git 48059263 sha256:4cafd985bc893849ec8f5fd46ea97cbcb109231fe2667cdd75739dc81fecc139
network-tools git 39eca100 sha256:5f7372932d47657683df69730ed4d2732af311c85a0c25668abf5e0efca4ee68
nutanix-machine-controllers git f053e5a0 sha256:70580822917ff0776e5a0d245aafe6b2a741188be363a822f685fa36c9472204
oauth-proxy git 30f80124 sha256:42c50f4746ea78a4022f104e3380fde3ce942d6ae154783d6cd04ef947820bc6
oauth-server git 3739138c sha256:a33549fe8019b84700c2417d915a5e496b8481806d0eff2ed3072f4f7b274636
olm-catalogd git 79975a51 sha256:03bdabd45cfdb5de1bf24b2dda4ae258e6663b62568c283314e3f34b79962f17
olm-operator-controller git 80b8649c sha256:1a2a7343bfbe139b9ba2a637c496b711bc56addae41522397f83bdc4ae45d8db
olm-rukpak git 282cc84c sha256:277f883605adaea1d9b6cfefead78cf9210295e193cf44ef1683a3c255214373
openshift-state-metrics git 59b8a0ff sha256:e33948231337746cdd13177f439ab9ce3dedf161297e317e43efa2ce4e79bb0e
openstack-cinder-csi-driver-operator git 85b52097 sha256:fd4cbdfe3a13e962dca6264c88c976253e8e6f3824b179a8c0ede7010b4cf16f
openstack-machine-api-provider git 5ada1cba sha256:fd44704ed0073c0c4eee6a9c6963f31010b1b6f206634476da26f92289d3b49b
ovirt-csi-driver git 1db726a9 sha256:457be64f6782af0d5ffbd4a6c0939c87d6218ac3423d17a4ff4c2230394df42b
ovirt-csi-driver-operator git ac852f3e sha256:e76dd97d8c01ee9b49456bfc7352a087ba72e0a7a863d20299a5b4900f4d30ee
powervs-block-csi-driver git 26162bad sha256:ffc5cf2db7dd833dab20e836681adc440c026c31ebfddd686784b0769951a2bf
powervs-block-csi-driver-operator git 9c5dd8d1 sha256:76ee687eba37b3e155131170d2e2921131af87abc3926c7ceb1cfe805137f442
powervs-cloud-controller-manager git 20e6dc70 sha256:fc612dbffad47f91bf45d28a115fc2f26700879f69c1c8c0240d4dd0ab45fb61
powervs-machine-controllers git 60ebedf0 sha256:9661194ac1bb1ff9b681392e89d36fb63eb23d241d69226145db86ceaee1e4fd
prom-label-proxy git 5e14722e sha256:5ca0f32693ae8ab477eabca671feededbbc7c8b699b3b8fb64c4c0015a4400b0
prometheus-alertmanager git e9aea929 sha256:849e522af61967dbd8b07fe3c5e9e4d3b065b9b662ca39843778df4c7dcf33ce
prometheus-config-reloader git c7262a43 sha256:c20ceba3c3205fb16a88a3c2191a14d4159d0a417a21044186d40f837c25ae69
prometheus-node-exporter git 29ba26d1 sha256:170eb3a2b5232a8c0b73faf440b939c520401338ff4963fa6c6e2606edb76f15
prometheus-operator git c7262a43 sha256:de220b6b3fc94e8467ace13012bf443f07cd2dd01c920bbd20d8b01c3927f195
prometheus-operator-admission-webhook git c7262a43 sha256:cf11d0d245f18a555d6c3e153c54897957156eff6bb3e3334d3f63e369a324d9
rhel-coreos sha256:f7dd130ddacf7814c9cad7ce1c457736152d560f1731c349bda600ddee980b42
rhel-coreos-extensions sha256:288a688564a54665accf7c20fccbe95958a53b655311a4240784e8cc73ad275b
route-controller-manager git 3112b458 sha256:7a8b8ebec55edac02ef0068295e1a055c9920bb9ef8805207bf2fc5c6d01c45e
service-ca-operator git 538c7b98 sha256:c146fddea4d64809ccf3f52f65a1ef1c9f326cc6d01d1c1963cfbee744deac30
telemeter git c1ecd105 sha256:3ab095977dd7afcf66b3ae3ed47f6284c6517c2aff03c5e9d69d28794310e3d7
thanos git 85eee25c sha256:ab9d7bd150ee3436fdefdc6cd7aeebca7ecc1ddb3f158d6d734b77d699285d09
vsphere-cluster-api-controllers git be22f10a sha256:fe93dd6df31033f640334d86fd50f4600f151022175b53b534a3333c4114d2d9
vsphere-problem-detector git 3683c120 sha256:71a1bc749fa7e2a1c4d2142b8a57f21429cae51f6d9aeee3a704b4aa2a8ee54d

agent-installer-api-server

OCPBUGS-45244: Bump moby from v26.0.0 to v27.2.1 (#7189) #7189
MGMT-19537: Bump golang.org/x/net to 0.33.0 (#7130) #7130
OCPBUGS-43021: Update go-jose to v2.6.3 to mitigate CVE-2024-28180 (#6893) #6893
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

abi: let the bootstrap waiting for workers before rebooting (#1047) #1047
OCPBUGS-47494: MGMT-19537: Bump golang.org/x/net to 0.33.0 (#990) #990
OCPBUGS-38466: Allow controller to continue when assisted-service (#914) #914
OCPBUGS-43025: Pick up latest CVE changes by bumping service (#920) #920
Full changelog

agent-installer-node-agent

NO-ISSUE: Increase image pull timeout during install (#923) #923
MGMT-19537: Bump golang.org/x/net to 0.33.0 (#874) #874
OCPBUGS-43028: Pick up latest CVE changes by bumping service (#804) #804
Full changelog

alibaba-machine-controllers

OCPBUGS-44242: change the VERSION makefile variable to use OS_GIT_VERSION #58
Full changelog

aws-cluster-api-controllers

OCPBUGS-44234: [release-4.16] OSD-25934: Only tag NetworkInterfaces in RunInstances if IAM Allows It #531
Full changelog

aws-kms-encryption-provider

OCPBUGS-33693: Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.16 #18
Full changelog

aws-machine-controllers

OCPBUGS-46508: fix Associate*IpAddress flag on launch EC2 #121
Full changelog

aws-pod-identity-webhook

OCPBUGS-52513: github.com/go-jose/go-jose/v4 v4.0.5 #203
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-47645: Prevent panic when informer receives cache.DeletedFinalStateUnknown #133
Full changelog

azure-kms-encryption-provider

OCPBUGS-33692: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.16 #4
Full changelog

azure-machine-controllers

OCPBUGS-50966: dynamically setting the amount of fault domains #129
Full changelog

azure-workload-identity-webhook

OCPBUGS-52510: github.com/go-jose/go-jose/v4 v4.0.5 #29
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-52191: [release-4.16] capi/aws: bump provider for LB DNS lookup fix #9547
OCPBUGS-51207: Log correct hostname for validation status #9511
OCPBUGS-51111: PowerVS: destroy dhcp hack #9502
OCPBUGS-48762: Update RHCOS-release-4.16 bootimage metadata to 416.94.202501270445-0 #9478
OCPBUGS-43469: pkg/asset/installconfig/azure: send full certifcate chain #9467
OCPBUGS-49416: [Nutanix] Installation failed with timeout when uploading images to PC #9412
OCPBUGS-47663: [release-4.16] Power VS: Create region-zone-sysType hierarchy #9338
OCPBUGS-48442: Ensure rendezvousIP is checked against host IP #9369
OCPBUGS-45999: Always set cross_tenant_replication_enabled parameter to false #9321
OCPBUGS-45669: aws: fix Node Port Service rule removal #9312
OCPBUGS-45669: [release-4.16] capi/aws: remove allow-all Node Port Service #9281
OCPBUGS-39434: dropping this warning as the move from terraform is transparent to the end user #8951
OCPBUGS-45852: Update upi references to api-internal #9290
OCPBUGS-41813: Validate MTU for custom network #9104
ARO-12457: Include bootstrap docker config file in go module #9259
OCPBUGS-45181: add chrony.conf file when additional NTP sources are configured #9247
CORS-3753: Allow mocking of the Azure client everywhere #9220
OCPBUGS-44348: Cherrypick oci ccm fix to 4.16 #9188
OCPBUGS-43967: Revendor assisted service external platform oci #9150
OCPBUGS-38930: import failure when esxi config is not the same in the cluster #8898
OCPBUGS-36290: IBMCloud: Ignore failed VPC regions #8674
OCPBUGS-41885: vSphere - If template is defined skip downloading #8999
OCPBUGS-41490: Update RHCOS 4.16 bootimage metadata to 416.94.202410211619-0 #9158
OCPBUGS-43476: IBMCloud: Handle pagination for subnets #9102
OCPBUGS-41490: Update RHCOS 4.16 bootimage metadata to 416.94.202410172137-0 #9132
OCPBUGS-42014: Update terraform provider for google #9077
OCPBUGS-38732: vsphere, if secureboot is enabled, disable it in the template #8904
OCPBUGS-39415: OpenStack: Install CI dependencies from rpm #8995
Full changelog

baremetal-machine-controllers

OCPBUGS-46645: Bump x/net to 0.33.0 #226
Full changelog

baremetal-operator

OCPBUGS-49703: Handle HFC for non-redfish HW #396
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-51043: Add HOST env var in oc debug for sos report collects more #1977
Full changelog

cloud-credential-operator

OCPBUGS-51544: Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #829
OCPBUGS-52512: github.com/go-jose/go-jose/v4 v4.0.5 #826
OCPBUGS-47070: golang.org/x/net v0.33.0 #805
OCPBUGS-45939: Add AWS region to aws-pod-identity-webhook #800
OCPBUGS-45007: Add retry to ccoctl gcp create functions #794
OCPBUGS-45002: github.com/golang-jwt/jwt/v4 v4.5.1 #788
OCPBUGS-43645: Only attempt timed token credentials on supported platforms. #772
OCPBUGS-43337: Update github.com/sirupsen/logrus v1.9.3 #767
Full changelog

cluster-authentication-operator

OCPBUGS-43367: manifests should not use APIs that are removed in upcoming releases #717
Full changelog

cluster-autoscaler

OCPBUGS-48732: UPSTREAM: <carry>: 🐛(metrics) Initialize metrics for autoscaler errors, scale events, and pod evictions #339
OCPBUGS-45148: [release-4.16] VPA: Update OWNERS file #325
Full changelog

cluster-autoscaler-operator

OCPBUGS-52329: set max soft bulk taint count to zero #341
Full changelog

cluster-baremetal-operator

OCPBUGS-43556: SCC-pinning for metal3-baremetal-operator #453
Full changelog

cluster-capi-operator

OCPBUGS-49603: fix: always update clusteroperator status versions when differing #253
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-42125: IBMCloud: Modify liveness probe for IBM Cloud CCM to use loopback address #366
OCPBUGS-43473: update goimports targets #372
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-44179: relax validation on delete and if failureDomains not configured #331
Full changelog

cluster-dns-operator

OCPBUGS-52498: [release-4.16] Add runbook_url for CoreDNSErrorsHigh #431
Full changelog

cluster-image-registry-operator

OCPBUGS-51167: ensure that storage names don’t end in dashes #1181
OCPBUGS-43797: fix proxy config and leader election test flakes #1148
OCPBUGS-43555: pkg/storage/azure: also check for auth failure error code on deletion #1143
OCPBUGS-42933: azureclient: stop validating credentials when creating the client #1134
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-50575: Increase waitForFallbackDegradedConditionTimeout #1805
Full changelog

cluster-machine-approver

OCPBUGS-48258: Fix race condition in CO status controller test #267
OCPBUGS-47704: Filter CSRs by signerName #263
OCPBUGS-45974: Ensure trailing dots on DNS names do not block serving cert auth #257
OCPBUGS-45974: Client internal DNS checks should ignore trailing dot #251
OCPBUGS-44629: Client internal DNS checks should be case insensitive #244
Full changelog

cluster-monitoring-operator

OCPBUGS-46066: Add new metrics for OpenShift logging telemetry #2537
OCPBUGS-44005: fix(monitoring-plugin): disable emitting nginx version on error pages #2521
OCPBUGS-43826: Add runbook url for TelemeterClientFailures #2508
Full changelog

cluster-network-operator

[Release 4.16] OCPBUGS-50712: Not update status.migration of the network.config CR to empty #2651
OCPBUGS-51074: Update egressfirewall CRD to be consistent with ovn-kubernetes repo #2650
OCPBUGS-43803: Start feature migration when the cluster CNI is changed to the target type #2552
OCPBUGS-43715: Skip including default crypto policies to avoid authby issue #2598
OCPBUGS-44338: Prevent live migration process from flapping between step-2 and step-3 #2565
OCPBUGS-46148: Remove ip xfrm state when IPsec is disabled #2595
OCPBUGS-45593: Pass transit_switch_subnet options in ovnkube-node pod #2584
OCPBUGS-44846, SDN-5436: Provide support for user owned IPsec machine configs #2571
OCPBUGS-42727: Live migration: report network overlap via live_migration_blocked metric #2519
OCPBUGS-43604: OCPBUGS-42244: Exporting environment varialbe NODE_CNI for live migration #2538
OCPBUGS-36210: Set global IP forwarding sysctl parameters while starting ovnkube-node #2422
OCPBUGS-43544: Use CNIConfDir for mounting directory to ovn-ipsec-host pod #2537
OCPBUGS-43035: Configure narrowing=yes for IPsec connections #2528
Full changelog

cluster-node-tuning-operator

use ROLE_WORKER_CNF environment variable to determine mcp name (#1292) #1292
e2e: tuned degraded test fix (#1282) #1282
Adjust Workload Hints test cases based on Intel or AMD (#1277) (#1281) #1277
e2e:performance: decode to valid kubeletconfig object (#1273) #1273
cmd: PPC: support tolerating heterogeneous core IDs (#1252) (#1268) #1252
e2e: add irdma to module_blacklist kernel args (#1267) #1267
OCPBUGS-47678: performanceprofile cpuset input validation (#1264) #1264
Fix context deadlines in ExecCommandOnPod() (#1263) #1263
OCPBUGS-46496: [release-4.16] Add vendor and architecture specific tuning options (#1254) #1254
OCPBUGS-45264: Normalize cpu sets when rendering to Tuned profiles (#1238) (#1251) #1238
E2E: fix modify node selector to use lowercase (#1209) #1209
Fixing empty tuned submodule when using Dockerfile (#1212) #1212
OCPBUGS-38900: Drop sched_migration_cost_ns setting (#1203) #1203
Make ocp-tuned-one-shot.service restart on-failure (#1202) #1202
Unblock 4.16 CI (#1204) #1204
e2e: performance: verify tuned one-shot service vs kubelet (#1192) #1192
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-48657: Add new team members to owners file #378
OCPBUGS-38269: CVE-2024-24786 infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON #363
Full changelog

cluster-samples-operator

OCPBUGS-48848: add shannon and aroyoredhat as owners #596
Full changelog

cluster-storage-operator

OCPBUGS-52353: fix Vsphere cluster Storage operator in Unavailable state #563
OCPBUGS-46077: Fix PodStartupStorageOperationsFailing alert #548
OCPBUGS-43315: assets: shared-resource: hypershift: add pull-secret to operator SA #521
Full changelog

cluster-update-keys

OCPBUGS-43467: keys: Update Red Hat keys to use SHA256 signatures #64
Full changelog

cluster-version-operator

OCPBUGS-50590: Set openshift.io/required-scc: privileged annotation in version pods #1153
OCPBUGS-46408: Filter out shallowly UpdateEffectNone errors from a MultipleErrors message in the Failing condition #1128
OCPBUGS-45329: deps: bump golang.org/x/net to 0.31.0 #1118
OCPBUGS-43964: Fix desired before sync_worker’s work is initialized #1097
Full changelog

console

OCPBUGS-52450: fix run time error when no completed version exists #14840
OCPBUGS-52851: Show Observe section without PROMETHEUS and MONITORING flags #14849
OCPBUGS-52288: While upgrading the cluster from UI observed Warning alert:Admission Webhook Warning #14821
OCPBUGS-49409: ERROR in search tool: Cannot read properties of undefined (reading ‘state’) #14703
OCPBUGS-52418: While accessing the node terminal from UI observed ‘Warning alert:Admission Webhook Warning` #14837
OCPBUGS-49979: Set default build option as BUILDS for Builder Image sample #14730
OCPBUGS-49800: Fix Function Import: An error occurred Cannot read properties of undefined (reading ‘filter’) #14715
OCPBUGS-49801: use default StorageClass for ServerlessFunction pipelineVolumeClaimTemplate #14716
OCPBUGS-46388: fix alert rule link #14808
OCPBUGS-52252: Fix alert rule link to alert in dev perspective #14817
OCPBUGS-46441: Do not pass CSV name to operand list page when an exen… #14627
OCPBUGS-36963: Manually create an API token for a ServiceAccount #14057
OCPBUGS-35394: sessions: fix sessions pruning #13969
OCPBUGS-46602: ReRun of Resolver based PipelineRuns fails from UI #14641
OCPBUGS-46567: ImagePullSecret getting duplicated when editing DeploymentConfig in Form View #14636
OCPBUGS-48162: OCP web console show pod status as Init:0/1 after using Native sidecars #14668
OCPBUGS-43672: Disable GQL introspection #14638
OCPBUGS-45334: fix table combination #14576
OCPBUGS-41342: fix namespace for networkpolicy #14244
OCPBUGS-46022: Plugins that use very old PF4 dropdown or menu components with grouped items have bullets and padding that needs to be removed. #14612
OCPBUGS-45229: Unable to remove finally tasks in pipeline builder mode #14558
OCPBUGS-45245: use TaskRuns results.tekton.dev/record annotation to get the logs #14563
OCPBUGS-41523: i18n upload/download routine task - Sprint 254 #14258
OCPBUGS-45015: Remove ClusterTask dependency in console from Pipelines 1.17 #14537
OCPBUGS-44792: Collapse/Expand Feature Added, Removal Option Removed in Version 4.16 #14519
OCPBUGS-44875: Start last run do not work in buildConfig details page #14529
OCPBUGS-44874: Telemetry userPreference results in empty nodes output to the DOM #14528
OCPBUGS-45124: Add multiline support to template instantiation #14545
OCPBUGS-44885: include external labels so silenced alerts not displayed in notifications #14530
OCPBUGS-44932: Add IBM Block Storage CSI driver support for RWX #14533
OCPBUGS-43447: Ensure envs are initted upon first load #14405
OCPBUGS-44806: Don’t request user settings configmap if no user has been loaded. #14522
OCPBUGS-44207: Create RoleBinding will trigger Admission Webhook Warning #14465
OCPBUGS-44219: Add flag to hide the pipelines-plugin pipeline builder extensions #14466
OCPBUGS-41673: Update vendor imports to include all PatternFly components #14273
OCPBUGS-43834: Enabling topology e2e tests on CI #14438
OCPBUGS-35204: replace global refresh sync lock in OIDC provider with per-refresh-token one #13950
OCPBUGS-36556: Increase login flow state paramater length/entropy #14354
OCPBUGS-42369: Console crashes when ssh is selected in add secret for starting a pipeline run #14320
OCPBUGS-41904: fix annotation for ovn localnet #14366
Full changelog

console-operator

OCPBUGS-46481: Dont disable console when authConfig type is set to None #952
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-43426: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.29 into release-4.16 #303
Full changelog

docker-builder

OCPBUGS-42893, OCPBUGS-42914: buildah dependency bump to fix - Buildah allows arbitrary directory mount and symlink traversal vulnerability in the containers/storage library #450
OCPBUGS-43186: runc library bump to 1.1.12 #420
OCPBUGS-47775: skipping some unit tests to avoid failures as they are duplicate #424
OCPBUGS-48159: Add team members to the OWNERS file #426
Full changelog

docker-registry

OCPBUGS-49696: bump docker distribution #423
Full changelog

etcd

NO-ISSUE: Add support for cachi2 based deps #298
Full changelog

gcp-machine-controllers

OCPBUGS-48484: Refactor exists() to handle gcp API change #106
Full changelog

hyperkube, pod

OCPBUGS-49906: Bump k8s api to 1.29.14 #2211
OCPBUGS-45931: UPSTREAM: <carry>: kubelet/cm: fix bug where kubelet restarts from missing cpuset cgroup #2158 #2200
OCPBUGS-46003: Bump k8s api to 1.29.11 #2161
OCPBUGS-44513: Bump k8s api to 1.29.10 #2133
OCPBUGS-42555: Allow pod to be scheduled if node’s name and hostname mismatch #2099
OCPBUGS-42168: Bump k8s api to 1.29.9 #2090
Full changelog

hypershift

OCPBUGS-53308: fix(deps): bump go-jose #5866
OCPBUGS-52506: refactor aws identity health check into new controller #5781
OCPBUGS-52857: Make managed-trust-bundle optional #5809
OCPBUGS-52426: change plaform to platform #5773
OCPBUGS-50993: Honor proxy vars in the util insecure http client #5662
OCPBUGS-46466: Consistently look up and dial cloud API hostnames #5301
OCPBUGS-50698: add region to AWS creds passed to operators managed by CPO #5670
OCPBUGS-51296: 4.17 Add HostedCluster additional trustbundles to konnectivity-https-proxy #5707
NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.5 #5686
OCPBUGS-50694: OCPBUGS-50692: Fix IsIPv4 function identifying also addresses instead of CIDRs #5620
NO-JIRA: chore(deps): update dependency mkdocs-material to v9 #5635
OCPBUGS-50557: Prevent IgnitionServer from flooding the API server with patch requests #5599
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1739267472 #5597
NO-JIRA: chore(deps): update dependency mkdocs-material to v8.5.11 #5591
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.3 #5587
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1738746453 #5574
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.2 #5575
NO-JIRA: chore(deps): update dependency mkdocs to v1.6.1 #5531
NO-JIRA: chore(deps): update dependency mkdocs-glightbox to v0.4.0 #5532
OCPBUGS-49640: fix overwriting PKI operator HCP conditions #5506
NO-JIRA: chore(deps): chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1737480393 - abandoned #5484
NO-JIRA: chore(deps): update konflux references (release-4.16) #5477
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.50 (release-4.16) #5437
NO-JIRA: Update Konflux references (release-4.16) #5431
NO-JIRA: chore(deps): update konflux references (release-4.16) #5384
NO-JIRA: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v9 (release-4.16) #5298
NO-JIRA: [release-4.16] Bump golang.org/x/crypto and golang.org/x/net #5370
NO-JIRA: Update Konflux references (release-4.16) #5328
NO-JIRA: Red Hat Konflux update control-plane-operator-4-16 #5337
OCPBUGS-47539: Separate CPO containerfiles #5333
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.22.7-1733160835 (release-4.16) #5295
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.49 (release-4.16) #5297
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.48 (release-4.16) #5294
NO-JIRA: Update Konflux References and Perform Migration for Release-4.16 #5261
OCPBUGS-39372: Fixed NodePool version validation #5219
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.47 (release-4.16) #5209
NO-JIRA: chore(deps): update konflux references (release-4.16) #5207
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.46 (release-4.16) #5189
OCPBUGS-43930: Return the right tagReference on Catalogs ImageStream #5133
NO-JIRA: chore(deps): update konflux references (release-4.16) #5161
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.45 (release-4.16) #5163
chore(deps): update konflux references (release-4.16) #5135
OCPBUGS-44277: Configure OAuth https proxy to dial cloud endpoints directly #5069
chore(deps): update konflux references (release-4.16) #5119
OCPBUGS-43973: Add network policies for konnectivity server and ignition server proxy #4998
NO-JIRA: Update Konflux references (release-4.16) #5112
NO-JIRA: Update Konflux references (release-4.16) #5099
chore(deps): update konflux references (release-4.16) #5078
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.44 (release-4.16) #5059
NO-JIRA: chore(deps): update konflux references (release-4.16) #5058
NO-JIRA: Update Konflux references (release-4.16) #5042
chore(deps): update konflux references (release-4.16) #5024
chore(deps): update konflux references (release-4.16) #5019
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.43 (release-4.16) #5017
NO-JIRA: Update Konflux references (release-4.16) #5012
OCPBUGS-43840: add ValidIDPConfiguration condition to report IDP config issues #4985
NO-JIRA: chore(deps): update konflux references (release-4.16) #4971
OCPBUGS-43046: Do not send traffic to local audit-webhook through konnectivity #4883
NO-JIRA: chore(deps): update konflux references (release-4.16) #4954
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.42 (release-4.16) #4947
NO-JIRA: chore(deps): update konflux references (release-4.16) #4933
OCPBUGS-43104: label routes only when HCP router used #4899
OCPBUGS-43308: Use guest DNS resolution in Konnectivity HTTPS proxy by default #4905
NO-JIRA: chore(deps): update konflux references (release-4.16) #4923
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.41 (release-4.16) #4919
NO-JIRA: chore(deps): update konflux references to 674e70f (release-4.16) #4908
NO-JIRA: chore(deps): update konflux references (release-4.16) #4896
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.40 (release-4.16) #4880
OCPBUGS-42432: Use KubeClientCABundle for HostedClusterConfigOperator cluster-signer-ca #4799
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-43686: UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.16 #89
Full changelog

ibmcloud-machine-controllers

OCPBUGS-44870: Bump dependency for CVE #53
OCPBUGS-36698: IBMCloud: Handle pagination for subnets #42
Full changelog

insights-operator

Ignore previous status when disabling alerts (#1061) #1061
OCPBUGS-45203: LokiStack gatherer (#1051) #1051
OCPBUGS-45044: insightsoperator.operator.openshift.io resource is create-only (#1054) #1054
gather selected clusterroles (#1023) #1023
OCPBUGS-39564: Not able to enable repositories during entitled build in OCP Cluster on IBM-Z (#1013) #1013
Full changelog

ironic

METAL-1306: Do not use openstack packages #648
OCPBUGS-49895: Drop quiet option of grep to avoid race condition with pipefail #634
OCPBUGS-48151, OCPBUGS-48598: Bump jinja2 to 3.0.1-6.el9.2 #623
OCPBUGS-44895: Bump Ironic #610
OCPBUGS-43950, OCPBUGS-43958: Bump python-waitress [4.16] #604
OCPBUGS-43438: Include fixes for CVE-2024-5569 #599
OCPBUGS-42511: Include fix for CVE-2024-47211 #594
Full changelog

ironic-agent

METAL-1306: Do not use openstack packages #180
Full changelog

ironic-static-ip-manager

OCPBUGS-49595: Fix subnet validation #48
Full changelog

kube-metrics-server

: OCPBUGS-46663: Disable HTTP2 #41
Full changelog

kube-proxy, sdn

OCPBUGS-44674: Handle openshift-host-network namespace as special when it modifies #648
OCPBUGS-46493: Raise the minSyncPeriod for NetworkPolicies to 10s during migration #649
OCPBUGS-46048: clean up containernetworking/plugins vendoring in sdn #645
OCPBUGS-45806: Stop checking ruleVersion [4.16] #643
OCPBUGS-44301: Use copy() to duplicate a net.IP #641
OCPBUGS-43344: OCPBUGS-42244: Implement namespaceSelectors on ingress with all pods IPs #635
Full changelog

kube-rbac-proxy

OCPBUGS-30447: protobuf bump [4.16] #111
Full changelog

kubevirt-csi-driver

OCPBUGS-44622: During detach don’t return error if VM is not found #49
Full changelog

machine-api-operator

OCPBUGS-53045: add image/read permissions #1348
OCPBUGS-52342: Drop oVirt support #1336
OCPBUGS-45947: vSphere klog initialization preventing verbose log messages #1312
OCPBUGS-45998: Ensure deletion annotation takes priority and oldestPolicy can distinguish longer ages #1313
OCPBUGS-39028: Updates message verbs to use %q where appropriate #1282
OCPBUGS-43433: Vsphere: Handle cloned instance with lost taskID #1298
Full changelog

machine-config-operator

OCPBUGS-53434: Update ObservedGeneration in KubeletConfig #4935
OCPBUGS-53313: daemon: ensure ostree-finalize-staged is started before rebooting #4928
OCPBUGS-52421: Update format verbs for alert logs #4901
OCPBUGS-51347: Update the storage.conf configuration file template #4881
OCPBUGS-52593: Update cluster-reader ClusterRole permissions #4905
OCPBUGS-52404: create /run/nodeip-configuration before use #4897
OCPBUGS-52310: configure-ovs workaround for ovs-if-br-ex bug #4892
OCPBUGS-50862: Auto-recover from MC with invalid extension #4853
OCPBUGS-43680: Regenerate the rendered MC in use when deleted #4655
OCPBUGS-49976: Add clarification to invalid maxUnavailable alert #4837
OCPBUGS-39224: Do not enable on-prem-resolv-prepender.path for UPI #4573
OCPBUGS-48290: Pausing Master MCP results in Alerts #4786
OCPBUGS-43765: openstack: fix non-old systemd compatible unit #4660
OCPBUGS-43741: Soften haproxy timeout for kubeapi probe #4662
OCPBUGS-48116: OCPBUGS-47801: trying to wait for sub-controllers #4777
OCPBUGS-45974: Remove trailing periods from AWS provided hostnames #4744
OCPBUGS-44337: Removal of additionalTrustBundle CA does not remove certificate from node backport #4688
MCO-1342: Backport Telemetry to 4.16 #4649
OCPBUGS-44043: Disable ESP offload for OVS attached interfaces #4676
OCPBUGS-42109: Do not use ‘restart’ for ‘oneshot’ service #4616
OCPBUGS-42744: Check for kernel arg diff in updateOnClusterBuild #4628
OCPBUGS-42722: Panic seen in CI job for MCC pod #4626
OCPBUGS-42719: MCPs report wrong number of nodes when we move nodes from one custom MCP to another custom MCP #4625
Full changelog

machine-os-images

OCPBUGS-54169: Change rhcos release browser url #57
Full changelog

monitoring-plugin

OU-559: fix log based alerts namespace for dev console #320
OCPBUGS-44395: remove unused package and upgrade vulnerable dependency #272
OCPBUGS-43239: upgrade dynamic plugin sdk to remove vulnerable dependencies 4.16 #217
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-50005: [Release-4.17]Kubeconfig loop #340
Full changelog

must-gather

OCPBUGS-42960: Gather OSUS data #455
OCPBUGS-48082: Update owners #473
OCPBUGS-46407: Support gathering IPsec data #469
OCPBUGS-42969: Collect etcd object count #454
OCPBUGS-43056: Open [Release-4.16] Multus is now a Pod and will be captured by normal #449
Full changelog

nutanix-cloud-controller-manager

OCPBUGS-30524: bump google.golang.org/protobuf to v1.33.0 #38
Full changelog

oauth-apiserver

OCPBUGS-30525: Update dependencies to address CVE-2024-24786 #124
Full changelog

oc-mirror

changes the owners file (#1015) #1015
OCPBUGS-48513: e2e: use same version of crane as in go.mod (#1021) #1021
Full changelog

openshift-apiserver

OCPBUGS-49656: prevent panic when no image and error are set #494
OCPBUGS-49656: validate image property isn’t nil before using #493
OCPBUGS-49656: move on to the next digest/tag during failures #492
OCPBUGS-45010: Pass expected type to deploymentconfig/scale object validation. #461
OCPBUGS-42724: fail image import when both image and error are nil #455
Full changelog

openshift-controller-manager

OCPBUGS-44186: user system:serviceaccount:openshift-infra:serviceaccount-pull-secrets-controller in ns/openshift-infra must not produce too many applies #351
OCPBUGS-48202: Add team members to the OWNERS file #358
NO-JIRA: cleanup root and app OWNERS #347
OCPBUGS-42420: Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) #343
Full changelog

openstack-cluster-api-controllers

OCPBUGS-44456: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.16 #328
OCPBUGS-44990: Makefile changes for merge-bot #341
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-48696: Fix excessive catalog source snapshots cause severe performance regression #957
OCPBUGS-48661: Fix concurrent namespace resolution #947
OCPBUGS-46928, OCPBUGS-46935, OCPBUGS-47315: x/net bump to v0.34.0 [release-4.16] #939
OCPBUGS-47738: catalog-operator: Delete Pods that were evicted (#3459) #925
OCPBUGS-46434: CRD upgrade existing CR validation fix #916
OCPBUGS-44802: fix: call TokenRequest API when service account token secret is missing #900
Full changelog

operator-marketplace

OCPBUGS-49429: Upgrade golang.org/x/net [release-4.16] #587
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-54204: Update OVN to FDP25.A.1 24.03.5-40. #2497
OCPBUGS-50595: kubevirt, localnet: Reduce live migration downtime #2469
OCPBUGS-50594: fixes overzealous deletion of SNAT in egressIP #2456
OCPBUGS-47634: Let OVN-northd bind remote ports #2406
OCPBUGS-45958: bump OVS to 3.3.0-62.el9fdp for OCP 4.16 #2388
OCPBUGS-44457: Add static route to the hairpin masquerade IPs to pod #2346
OCPBUGS-45942: pin libreswan to 4.6-3.el9_0.3 #2386
OCPBUGS-45343: Dockerfile: Update OVN to the 24.03.2-32.el9fdp minor release. #2377
OCPBUGS-42244: Add hybird overlay pod IPs to the namespace address_set #2352
OCPBUGS-43344: Add SDN node subnet gateway IP to host-network address_set #2328
OCPBUGS-42942: Fix egress gateway pod cleanup for remote zone pods. #2341
OCPBUGS-36210: Implementation required to enable Forwarding if it is already disabled #2212
Full changelog

prometheus

OCPBUGS-43668: fix(discovery): Handle cache.DeletedFinalStateUnknown in node informers’ DeleteFunc #231
Full changelog

tests

OCPBUGS-52581: Use payload pullspec for image info test #29589
OCPBUGS-52343: Try also user CA for getting openshift-tests image #29578
OCPBUGS-44119: Ignore infra nodes on tap cni tests #29261
OCPBUGS-48448: Add team members to the OWNERS file for PR approvals #29443
OCPBUGS-48348: Fixing build s2i ruby test data inline with latest ruby version(>=3.0) #29431
OCPBUGS-44105: Adjust createDNSPod() to support hypershift dual-stack test #29258
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-46341: update check-fmt goimports command #83
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-43881: redact sensitive information when logging VCenter config #134
OCPBUGS-42878: Add compute resource entity to consider a standalone cluster for volu… #131
Full changelog

vsphere-csi-driver-operator

OCPBUGS-51206: Set reconcile-sync to 10 minute for ListVolume #294
OCPBUGS-49862: List only linux nodes #289
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github