4.16.55

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.16.55-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-master-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded (1 retries) periodic-ci-openshift-release-master-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.16-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.16-micro Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.16-micro Failed (1 retries) periodic-ci-openshift-release-master-ci-4.16-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.16-fips-payload-scan
- gcp-ovn-rt-upgrade-4.16-minor Succeeded periodic-ci-openshift-release-master-ci-4.16-upgrade-from-stable-4.15-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.16 Failed (1 retries) periodic-ci-openshift-hypershift-release-4.16-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.15.21, 4.15.22, 4.15.23, 4.15.24, 4.15.25, 4.15.26, 4.15.27, 4.15.28, 4.15.29, 4.15.30, 4.15.31, 4.15.32, 4.15.33, 4.15.34, 4.15.35, 4.15.36, 4.15.37, 4.15.38, 4.15.39, 4.15.40, 4.15.41, 4.15.42, 4.15.43, 4.15.44, 4.15.46, 4.15.48, 4.15.49, 4.15.50, 4.15.51, 4.15.52, 4.15.53, 4.15.54, 4.15.55, 4.15.56, 4.16.10, 4.16.11, 4.16.12, 4.16.13, 4.16.14, 4.16.15, 4.16.16, 4.16.17, 4.16.18, 4.16.19, 4.16.20, 4.16.21, 4.16.23, 4.16.24, 4.16.25, 4.16.26, 4.16.27, 4.16.28, 4.16.29, 4.16.3, 4.16.30, 4.16.32, 4.16.33, 4.16.35, 4.16.36, 4.16.37, 4.16.38, 4.16.39, 4.16.4, 4.16.40, 4.16.42, 4.16.43, 4.16.44, 4.16.45, 4.16.46, 4.16.47, 4.16.49, 4.16.5, 4.16.50, 4.16.51, 4.16.6, 4.16.7, 4.16.8, 4.16.9

4.16.54 (changes) - S F F S S S
4.16.53 (changes) - Failed
4.16.52 (changes) - Success
4.16.48 (changes) - Failed
4.16.41 - Failed
4.16.34 (changes) - Success
4.16.2 (changes) - Failed
4.16.1 (changes) - Failed
4.16.0 (changes) - Failed
4.15.60 (changes) - S F S
4.15.59 (changes) - Failed
4.15.58 (changes) - Success
4.15.57 (changes) - Success
4.15.47 (changes) - Failed
4.15.45 (changes) - Failed
4.15.20 (changes) - Success
4.15.19 (changes) - Failed
4.15.18 (changes) - Failed
4.15.0-0.nightly-2026-01-08-031111 (changes) - Success

Loading changelog, this may take a while ...

Changes from 4.16.41

Created: 2026-01-08 13:45:15 +0000 UTC

Image Digest: sha256:283a4968c61885c67fd17ea4d6920b665c98d53fa85fc897e067d3c4c131da3b

Components

Kubectl 1.29.7
Kubernetes 1.29.14
Kubernetes Tests 1.29.0
Red Hat Enterprise Linux CoreOS upgraded from 416.94.202505191152-0 to 416.94.202601071926-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
StreamingCollectionEncodingToJSON (0 tests)	Enabled (New)		Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
StreamingCollectionEncodingToProtobuf (0 tests)	Enabled (New)		Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Rebuilt images without code change

agent-installer-utils git 6e6bb40d sha256:de60ef03a70714aa641f2b6903b6690b80dfaa08202e78def5303e8a4f2dfb7c
alibaba-cloud-controller-manager git 97e8335e sha256:39c541af8befd2f04186cede99b8d384961851bd82af5dfeccedab5609d8bd28
alibaba-machine-controllers git 248372a4 sha256:dd54dcc212e4a8dd1f95491f1ffdf37a460b2b4afe6b239e97ed01bc10b5d7bb
apiserver-network-proxy git ca81b6a3 sha256:ad573cf9be5ec11c6af02cd482da92ead849c79e8999a53aa78537937c118941
aws-cloud-controller-manager git a53e9def sha256:ca8509dcd86ae6cd818a9b384f507660ad0979102da8982138bcbbfb1a67798a
aws-ebs-csi-driver git 1d29a74a sha256:c0687c055200b806e21dd54fc6ebe7677e07713b7e9d477da50608db698434c3
aws-kms-encryption-provider git c66065de sha256:010910ac80c9f0261005e4eaa852ecf4a22bb0db955c19081d46d75bdfb52690
aws-pod-identity-webhook git 459c5314 sha256:bdb2089dcbfbf7be129707a983d80a2ea2403de4599f542b203d6d70ced116c6
azure-cloud-controller-manager git e5bac334 sha256:cd4dd131fffcbc6cfad4b43bf90cd7f4ca746aa427444fb1b83b8e3ed5448155
azure-cloud-node-manager git e5bac334 sha256:95cfba9c1aa3f5738ea1a0986edf515c7929bcc2e26b743d175855bd5916c3f2
azure-cluster-api-controllers git a81e3b31 sha256:c7d3f63d85078049dd578be45be4922f0b5bc4523204f0f6e7a8454378a50ef2
azure-disk-csi-driver git 6b55f6fb sha256:8fe832d24fff07cb9dd0593c6be189a15dd5b66c90b4f51db34803c3ced0833c
azure-file-csi-driver git 7a36778a sha256:40622ba6d02683af12f5ccf089b627edbb4008cdd00f5c12144154e096e9c70d
azure-kms-encryption-provider git af633e05 sha256:2aa26529942f335f9d1d0df93741b5d6e1bf94f482ecf6f5b91e1e95a0dd56cb
azure-workload-identity-webhook git 5b8d171e sha256:f491089c7250e2999c3c7e20bbf9b5ba6e3f7b9bb5df32ece39296dfd9cf8efb
baremetal-machine-controllers git 2b396e06 sha256:4382802a03a6cdc97faaea32c46d0a50b18bf28078cf97ba016168cd93d56849
baremetal-operator git 84aeac37 sha256:9c4db3b7660983eed8e7f57eb865497c46b4dbc4e9ce434f5723ac7829b21983
cluster-authentication-operator git 0e39ace5 sha256:4fcebea397006c02df68eaa8b8739d2f8192136cf5ed1a736378fb5ed2cb3775
cluster-autoscaler-operator git 70164fc6 sha256:fccbe0a48bf84fd59ff4f235663d4929249a089514c51de14b25f18847cdcfca
cluster-bootstrap git 27bfb59f sha256:69f97ad2e19756c43b53f7400ec2d476d8caab5157eb28049ede1c54b01a1718
cluster-capi-controllers git 5830a10a sha256:fe1f911ae1697287eaea64f6fc9c500ac0cc53df06093501d22d64f18f1f1b2b
cluster-capi-operator git c699f6cf sha256:fc515c05851455d8df0f0251148a805cbfcabe4f00a2635f29b1231939ba6169
cluster-config-operator git 441d29c9 sha256:be6b2ae6eae51154e71ca84672e6cd40adcd90a1063727f37f99f5292e328fc1
cluster-control-plane-machine-set-operator git 14571e8a sha256:95c81b9f4314033e0db920d26fd458553f1d32de2e94f7ec6280a97bf87b970d
cluster-csi-snapshot-controller-operator git 439826e1 sha256:187b1f722e44a85e4a7718eba2ca356798e3be1b78395e5fdd46b0d058355597
cluster-dns-operator git a4b1cfb4 sha256:9f2f9f64b9c37fed403d6b770bb23f759a95871074672dc511ba283edcc8869f
cluster-kube-cluster-api-operator git 95ceaa9e sha256:12c499de90e073bf571f990a23289da67bb290336674155b72370b26703eb140
cluster-kube-scheduler-operator git 630f63bc sha256:4922ff9faeeb349a852b064774a4fc4f0f9ce675ce7ad8ea3460d71ef31ecaa8
cluster-kube-storage-version-migrator-operator git e8258113 sha256:73e75de1e43c3d1ac1f998437ec36412226460ee78456f67f2cf64cb03296ff8
cluster-machine-approver git 7685374f sha256:3dfb58bc1a4560614dd78c7a27062889bb12f452efadf93ba75ca286df7b2c07
cluster-node-tuning-operator git eacd6ee9 sha256:cfdb95647a0ebd3e658736c03c99506c1d30d59842bc5c34e4014cab5a8637ad
cluster-olm-operator git 27bf70dd sha256:87c24a1be0336008c3a332dd89a2628979791baaead41fe098aa7186f66d32ff
cluster-openshift-apiserver-operator git d26f3002 sha256:ce61ed9fe9749d0e361c43d7095e2f48a4883213be864d00b986c5e8e8c85045
cluster-openshift-controller-manager-operator git 2ed3cf99 sha256:2647259bc942fbdba06825ac9c39a20ae9002cba5f91803e0ac07fa667fc8152
cluster-policy-controller git eaea543f sha256:e1d3b9df127e66a181ded3634fec2d5d0cf522a7c690eb3a3e837c07f001d590
cluster-update-keys git e8478585 sha256:6519a4b407c5ba8c0217e1ee71a9bf3cd57f3b5f3ca2b106a1272569dc4901b0
configmap-reloader git dc91ddc4 sha256:65755d3e3aa9a5549b8bf3ee7032b96982a933c2bf8260c62d5791d724275e07
container-networking-plugins git 5f9ee066 sha256:e549728723ecd6d904cda50dd2baec61593f263f1194aefa3235e739e7f0953c
containernetworking-plugins-microshift git 5f9ee066 sha256:6c874cddb9abe4acd3002dfb38f8ad482ba299024db587f35ceba3a0babb22a4
coredns git 1e417656 sha256:5419eccabecd71838e02ccdbcc2b7e78e045664f4a692053aeb256b7bcc15a68
csi-driver-manila-operator git c25d1ff2 sha256:05e427f253db38a3fdb3c7f5cf52e6153b8d5b8d12a64bec031243c2bd3dd69a
csi-driver-nfs git 406cec72 sha256:a8588618e8d614432c463027a95a1b49c94c7194e106ea5cf28af380ecffc1a1
csi-driver-shared-resource git bc125def sha256:2a74e63424d01bf257048d595cc48f96463cf86325a55be3d6779a7573b80a66
csi-driver-shared-resource-operator git 1e1194bc sha256:38dd6545167601f9e1529df42f24ca5dbda82185ea2891935d79cf16a295eec1
csi-driver-shared-resource-webhook git bc125def sha256:7ae12cc1190258bd0f1d8935c59c630e5b2f897f0ac8197c35a1e9f4f7a6d5ca
csi-external-attacher git 7da80aab sha256:423f51705b3e137e01225c5472e8eda4ef184813e2b6f65bd612c35645ec21c9
csi-external-provisioner git 9e8af011 sha256:cd364dc68795dbde9261e983bd6ad898a4cf9bfdf2d8324f9cafac1e533adc75
csi-livenessprobe git f5e3ff55 sha256:14ff9bad30b68fe03fdd72f655e5ec9243ae52a55b2a42a2d5670011ffbc8d97
driver-toolkit git 1d5732f0 sha256:22469a4605f978d2cab2e6e609a52d80b2ceb2816ea7030f6c207aafcce19784
egress-router-cni git 7089efe6 sha256:095ab09409ab30ce355f42e1ef98371e13bc332f0365220e18bbd96592b8cb34
etcd git e7911c0d sha256:704f9ddc250e7a5d7e2dfc0ec5631c3da995906ea0bd65168cc4bdc0dd58d292
gcp-cloud-controller-manager git 26b43dfc sha256:80f2c4dbe7759329ed22058482f0dfd2f102edc1501be404e24ab5ae3f445669
gcp-cluster-api-controllers git 02432df8 sha256:5326afcbf6cff060a1495c7c827893fb257425b799be9e754041a27d05bcdadb
gcp-machine-controllers git 8851888a sha256:036faec3bc26e385dffd7677677d56a17b846eadd33762dd7263ee184a21f1ae
gcp-pd-csi-driver git 5ed71c64 sha256:e9d76d6ad249c82973143f7e4ab9f45198e66d343b807f70dd3cff08cd3f5a09
gcp-pd-csi-driver-operator git 799327f7 sha256:b6109ce5c0e902160deae3578d5c9018c2a2430ca6a1eafd574841934e039208
ibm-cloud-controller-manager git f961f16d sha256:39ab54f3aece62ca424dbc1f5f17d3551d3cea7ccc2d888b2882c5c8bb8dfb77
ibmcloud-machine-controllers git d29506e7 sha256:c4958648a0a74c57eb900d032b71b556ac9d245e3422c1dca83465d5e5c780b7
ironic git d08ca1e2 sha256:7b9335abd4859e062d501545ef53de6038279798ec74676442c0f9d8664847f2
ironic-agent git aea138cd sha256:93ec828e9083c17c29decf19fb120fdc16d31b365bef8c3200bbbe42603155df
ironic-machine-os-downloader git 93b8b5fa sha256:fdcbeaa54f5733386e54677e1216a0b388beab2b4b594ef6de20a29e2a66697c
ironic-static-ip-manager git f44e8a08 sha256:3a6676f6c116c107939521a8fd439cd8c63bc7ee0e4598279b008a74665c7e52
k8s-prometheus-adapter git e4f859be sha256:4809b322211ef80efd2313c20dc9fc7140abde0573d7c7a7979fa57da3287528
keepalived-ipfailover git b58673a3 sha256:60183634c3642f0870b6f98003755ee8cbbb21bffcd22e24f80d28318e677637
kube-metrics-server git 9116b918 sha256:a3351f3517c85285c83ff279daa6c60de1440b454f5db6b7ac3cefa3158d6037
kube-rbac-proxy git c38f4734 sha256:919128cc6362eaa94cd6c8c7b6c3362b0d119df6e26c9262aaadf2726541d8aa
kube-state-metrics git 9b67b8d1 sha256:d968dc49f267e0afcff906870f2fd6d528cdd540d58e9560e9145abf7672c417
kubevirt-cloud-controller-manager git 3db76104 sha256:8acb1a1b52da3dff0cac1f60daedd4ddec00bd69a1c26491b676c042ce5e8221
kubevirt-csi-driver git d474c42e sha256:1014bc1b6cc69c21e40a8af73a4660e78a0888edf3b20c7730f5210b9312b244
machine-os-images git a99847b4 sha256:a7d17faf02b766ef4631f9a1d527f601558bd82c9da61bb26796c9c93fdfb15b
multus-cni git e88ad2bb sha256:51b1dd0d0a15f4a9377cd1c8694c9898aeb1848cb04c2a272fa4aa13c2c7ce27
multus-cni-microshift git e88ad2bb sha256:32d920433f8ab57c952aa8296c2a1d8aaa2f251b89b0232975d412889608ffc3
multus-networkpolicy git f988f894 sha256:be676a549675f456829817f44f6d74dd3e6d62a08d7f795b8bfe455908c5c53a
multus-route-override-cni git 73594f77 sha256:f0ef40d724dd7cb5d070a67e477031b35f6688b0c2f8e0b6cf41b4a89f3fc4ed
multus-whereabouts-ipam-cni git 467d84ad sha256:36c3f0ddb54a93690f72bdf01669cfb492ccf4467e99f816c03bf8573d7f1c92
must-gather git 774a4e02 sha256:16a268411728688bc85393a4d00dabca2b777be477af7c9b0f7e495ff6249ef2
network-tools git 234ed43e sha256:fac30473f878fc94f2a5d8302c8a54e80771bf974de598a6b8ddfbbd209163e2
nutanix-cloud-controller-manager git 28bf5963 sha256:46f4c8e92e41653e490143bfd3f577f42f8de3e90f6857ab6d256e2c8d36f062
oauth-apiserver git f09a9be3 sha256:089c05fc16a090019551b3656d71883ccdb653a61b9e3bc28312d938caeeb904
oauth-server git 3739138c sha256:f7499f0837e42743c846bf9ca2e69d025e8d3d1adf2bc87c03ac794cc1b34bc0
oc-mirror git b137a53a sha256:dfbe99f5488ba10988922c28256f7c21fe05622e40eb332a9932aa2547c0308a
olm-catalogd git 79975a51 sha256:a91a2deb377be99b985687145f7b4006cf039d54b6cd1b6c246bebcaba2d6977
olm-operator-controller git 80b8649c sha256:2ef7714fc29feccf311c89eab19947d1d7b1b89aae40544210254ef8405dead4
olm-rukpak git 282cc84c sha256:df759738bfda3726f291d2a5180cb6e5036b6ffaabee6d35ec68a72c7f31df9a
openshift-state-metrics git 59b8a0ff sha256:4cf7038ca5985cca952130cc466f68d37de7c5ce193ac54eae48a46e50328606
openstack-cinder-csi-driver-operator git 85b52097 sha256:c12655ba45dbda3294750b0afc1134b7ffefcc2b81ee94242055f3be0bc045d6
openstack-machine-api-provider git 5ada1cba sha256:08973c462b160f4d0906e46aca0ff1edd87db47847a1c612b015f460284d2fb4
ovirt-csi-driver git 1db726a9 sha256:0e950fc99f5589bf28fc40da2ae4f5f93eb841f4139db97e7a66bfcb99884050
ovirt-csi-driver-operator git ac852f3e sha256:9e9ea4ff3c64a23714ea66441bac673436534b81976db20563db2ba8a12ea17c
powervs-block-csi-driver git 26162bad sha256:0527b03a5198eaf6ce67fd18442c5f415242a55d65b3f42b1e24e5aebfd0afa8
powervs-block-csi-driver-operator git 9c5dd8d1 sha256:5924c066d6e7bdca746bc004b1be4bb526247c53efcf35ffe7a625737ccd3ac7
powervs-cloud-controller-manager git 20e6dc70 sha256:5f5a93d31b8fa2dcdd661ecf43d1219b5eb438eeb7fe03a92bcb65d3308e7f97
prom-label-proxy git 5e14722e sha256:33577c769b6f04a47fa7e7cf78edc7518988cb7f8f08746047a48a66d0200efa
prometheus-alertmanager git e9aea929 sha256:75d8a44c027c85172f6680acf278d7da380e89c539b1cdc52cc8f5abc9cf7998
prometheus-config-reloader git c7262a43 sha256:9ad14180f452257905033bfa6e1b6058e295894d784dff7dfbe4dd6246ce9913
prometheus-node-exporter git 29ba26d1 sha256:1626cbe1838253cee6cc96d66a69a57079f5d1da82cb29c31cea4be24d5c0008
prometheus-operator git c7262a43 sha256:cdfc297fa8544540438d58c20fa04a6cbb4e8517ca924249571230dd21bef0e4
prometheus-operator-admission-webhook git c7262a43 sha256:1fec64987e6a331ec3e6b35fe0d4627dad7495cb136955a93cc43a2177ff3d8b
rhel-coreos sha256:4ed279029a903cec6b37374d830da9133e0a9f31c3214c38a4957d019f74f1ea
rhel-coreos-extensions sha256:ce3d36897683040da3d9bd83719c9dc3c8232b633b19c62c74a1f44a73cca605
service-ca-operator git 538c7b98 sha256:09243f0ffbed2369ae2f2b74fc0c318b563034fcb0b45540c77178b26c386ee8
telemeter git c1ecd105 sha256:036533b195e4d571910a8b1a65d08436471d17b149bee0aca589af70162c0572
thanos git 85eee25c sha256:0daf72bf67568485144a3573c4c4c1328690731005fca02d52e686dab1b3b453
vsphere-cloud-controller-manager git 023a3655 sha256:9432caf90f640488fc1146e35c1b69662a83356acd2f9205fec7a1d8309ede4e
vsphere-csi-driver git 03b7e8eb sha256:7f1537cd9f3583bcf49568750b03e8dbbd07b2160e79ef4ad938d413db1f7520
vsphere-csi-driver-operator git 7940ea16 sha256:713dbec0d6ec8c243d5d9ebf75dfa4ec27d775d6277e5865e416d5474426feb1
vsphere-csi-driver-syncer git 03b7e8eb sha256:083411a65cd587137da6dd7ea7d9238a5de95e75b111c9e790287c0276f5729c
vsphere-problem-detector git 3683c120 sha256:e6c0081fff8400beba60b81ef5a93f6d4634244dd65ea0c1941f126ef3cd6644

agent-installer-api-server

OCPBUGS-58631, OCPBUGS-58636: Bump glog to v1.2.5 in release-4.16 (#7901) #7901
OCPBUGS-47627: dnsmasq service on OCP SNO fails to read /etc/resolv.conf file during system startup (#7857) #7857
Full changelog

agent-installer-node-agent

run go mod tidy / vendor #1019
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

aws-cluster-api-controllers

OCPBUGS-61942: UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It #572
OCPBUGS-58666, OCPBUGS-58671: bump github.com/golang/glog to v1.2.5 #560
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator

OCPBUGS-64831: Use 127.0.0.1 for healtz http-endpoints #467
OCPBUGS-64768: Add RBAC ClusterRole and Binding for driver node #465
OCPBUGS-61253: add ability to control kube rbac proxy container image… #426
OCPBUGS-60598: Bump library-go #423
OCPBUGS-59606: Backport stale conditions fix #407
OCPBUGS-60248: add tag matching to Azure File storage class #414
Full changelog

aws-machine-controllers

OCPBUGS-63140: client: re-use a single file for building the session instead of randomly named files #144
Full changelog

azure-machine-controllers

OCPBUGS-66044: Set updateDomainCount to one when faultDomainCount is one #177
OCPBUGS-52476: Remove unused vnet package #131
OCPBUGS-56169: [release-4.16] Update virtualmachines service to armcompute/v5 SDK #147
OCPBUGS-56656: Fix failure when attempting to modify immutable availabilitySet #151
OCPBUGS-56092: Update eviction policy for Spot VMs from Deallocate to Delete #142
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-54165: aws: fix NLB creation in secret regions #10031
OCPBUGS-53237: Validation for API and Ingress VIPs when using user-managed load balancer #10048
OCPBUGS-62952: Update the RHCOS 4.16 bootimage metadata #10022
OCPBUGS-62653: Release 4.16 bump terraform provider azurerm #9993
OCPBUGS-59162: vSphere - remove unit tests using nip.io #9835
OCPBUGS-62235: Make swift containers removal not fatal for UPI. #9961
OCPBUGS-58290: sort zone slices extracted from map of byo subnets #9819
OCPBUGS-55807: update resolv.conf every time on bootstrap node #9694
OCPBUGS-57460: vsphere - check if host is powered down or on standby before uploading template #9786
OCPBUGS-36677: Power VS: Enable incoming traffic on port 5000 during installation in a restricted network #8711
OCPBUGS-57498: ensure ctrplane nodes can access bootstrap MCS #9788
Full changelog

baremetal-runtimecfg

OCPBUGS-60113: Re-add ENABLE_NODEIP_DEBUG env var #362
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-64616: Help with must-gather scheduling through suggesting preferance of nodes #2151
OCPBUGS-64561: Update go-jose, x/crypto, x/net #2144
OCPBUGS-59938: Adding sos.conf file for default sos config into the tools image #2064
OCPBUGS-60675: Use fedora image in unit tests instead of centos #2079
Full changelog

cloud-credential-operator

OCPBUGS-65802: ccoctl azure: retry custom role creation on consistency errors #952
OCPBUGS-63550: ccoctl: add public-key-file flag to create-all #940
OCPBUGS-55129: snyk to ignore SNYK-GOLANG-GOLANGORGXNETHTML-9572088 #918
OCPBUGS-60973: ccoctl: aws to use proper issuer url on subsequent runs #909
OCPBUGS-60861: ccoctl: only add owned tag to azure resources on create #902
OCPBUGS-58676: github.com/golang/glog v1.2.5 #893
OCPBUGS-56981: Azure: resolve nil pointer exception when role assignment exists #867
Full changelog

cloud-network-config-controller

OCPBUGS-66346: [release-4.16] Fix capacity calculation #195
OCPBUGS-65567: [release-4.16] Change the capacity struct from int to ptrOfInt #192
Full changelog

cluster-autoscaler

OCPBUGS-60915: revert openshift replica fix #377
OCPBUGS-59267: Fix cool down status condition to trigger scale down #363
OCPBUGS-60609: fix checkpoint gc of unknown recommenders #372
Full changelog

cluster-baremetal-operator

OCPBUGS-64741: Always have a service for ironic-api port #524
OCPBUGS-63417: Fix ironic inspector container privileges #513
OCPBUGS-61504: Remove webhookport (9447) as HostPort #506
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63168: ccm: disable unused secure-serving port and webhook #422
OCPBUGS-60387: Add Service using common resource templating #411
OCPBUGS-60387: Update service selector to match deployment label #410
Full changelog

cluster-config-api

OCPBUGS-71202: Add HTTPKeepAliveTimeout to IngressController API #2640
NO-JIRA: Promote streaming list encoding to Default on Hypershift. #2568
CNTRLPLANE-1611: Add feature gates for StreamingCollectionEncoding #2542
OCPBUGS-58392: Add IPsec API for NAT-T UDP encapsulation support #2393
OCPBUGS-56424: Add IdleConnectionTerminationPolicy field to IngressControllerSpec #2330
Full changelog

cluster-etcd-operator

OCPBUGS-61505: Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace #1482
OCPBUGS-60836: add missing ports to svc and pod spec #1473
Full changelog

cluster-image-registry-operator

OCPBUGS-53870: bump github.com/golang-jwt/jwt #1219
OCPBUGS-51600: bump golang.org/x/oauth2 #1210
Full changelog

cluster-ingress-operator

OCPBUGS-71202: Implement HTTPKeepAliveTimeout tuning option #1337
OCPBUGS-56424: Add e2e tests for IdleConnectionTerminationPolicy #1235
OCPBUGS-56424: Add support for IdleConnectionTerminationPolicy #1234
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-60467: Add missing service ports to apiserver service #1895
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-60834: Missing endpoint slices for open ports the operator uses #864
Full changelog

cluster-monitoring-operator

OCPBUGS-64581: Fix KSM deny-list typo #2733
OCPBUGS-64637: Add mcd_local_unsupported_packages metric from MCO to telemetry 4.16 #2735
OCPBUGS-62765: port metric acm_managed_cluster_worker_cores:max to OCP 4.16 #2719
OCPBUGS-63235: test: remove image registry e2e tests #2727
OCPBUGS-61856: chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind #2676
Full changelog

cluster-network-operator

OCPBUGS-63155: Add drop flows for GARPs #2819
OCPBUGS-57354: block upgrade if a CNI migration is in progress #2760
OCPBUGS-62055: Update CNO reviewers/approvers #2803
OCPBUGS-44443: Add controlplane cli image envar for use with hypershift #2791
OCPBUGS-58392: Add IPsec API for NAT-T UDP encapsulation support #2736
OCPBUGS-56992: iptables-alerter streamlining #2717
OCPBUGS-56195: Fix live migration with feature migration configured explicitly #2710
Full changelog

cluster-samples-operator

OCPBUGS-63516: references to github.com/sclorg/django-ex.git now also refer to the branch #659
Full changelog

cluster-storage-operator

OCPBUGS-61252: add ability to control kube rbac proxy container image on controlplane #614
Full changelog

cluster-version-operator

OCPBUGS-58452: Failing=Unknown upon long CO updating #1213
Full changelog

console

OCPBUGS-69678: Disallowed Pipelines-plugin Pipelines navigation section #15857
OCPBUGS-64884: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15707
OCPBUGS-64649: /auth/error?error=missing_state&error_type=auth is showing blank page #15675
OCPBUGS-44157: bump dompurify to latest #15591
OCPBUGS-62123: Remove ancient X-XSS-Protection header #15528
OCPBUGS-61057: OpenShift console PVC clone cannot use B as the unit #15450
OCPBUGS-60175: Tolerate unknown fields in Infrastructur… #15368
OCPBUGS-60641: Secret key with binary file changes when edited via Console #15417
OCPBUGS-59869: Not able to launch terminal window from OCP web console due to console plugin conflicts #15334
OCPBUGS-57677: Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image #15328
OCPBUGS-60115: Cannot read properties of undefined (reading ‘node-role.kubernetes.io/master’) error while accessing node logs from console #15358
OCPBUGS-59358: fix bug where / in console.tab/horizontalNav href brea… #15286
OCPBUGS-37603: Manual backport of several incremental fixes for unauthenticated endpoints #15312
OCPBUGS-59274: Add the ability to launch multiple modals with useModal hook #15276
OCPBUGS-59445: Cannot read properties of undefined (reading ‘filter’) error while accessing nodes from console. #15291
OCPBUGS-58407: Add flags in console static plugin for all the components of this epic #15243
OCPBUGS-56838: Fetching taskRuns in PLR details page using PLR UID also #15099
OCPBUGS-58188: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15214
OCPBUGS-57326: Remove logoutOpenShift method call #15172
OCPBUGS-57270: Debug pod logs are not accessible when debugging a node via OpenShift Console #15165
OCPBUGS-57096: Add all files to vendor regardless of gitignore #15133
OCPBUGS-57089: Sample segment sessions #15130
OCPBUGS-56858: remove 60 day alert from cluster update modal #15102
OCPBUGS-56715: update the Deployment pod on change in imageStream #15091
OCPBUGS-56472: Remove the devconsole backend common internet proxy and replace it with dedicated ones #15072
Full changelog

console-operator

OCPBUGS-60794: Update downloads deployment configuration to use master node selector #1036
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-58884: CARRY: don’t ignore json files #341
Full changelog

csi-external-resizer

OCPBUGS-62465: Requeue PVC over PV creation #174
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-60450: UPSTREAM: 1238: Snapshot Controller startup should not LIST all volumesnapshots #186
Full changelog

csi-node-driver-registrar

OCPBUGS-64632: update log level verbosity to not clutter logs #91
Full changelog

docker-builder

OCPBUGS-65907: BuildConfig inline Dockerfile fails with heredoc syntax #489
OCPBUGS-58074: S2I build cpu limits observed by assemble are limited to 1 cpu #475
Full changelog

docker-registry

OCPBUGS-60183: bump openshift/docker-distribution #441
OCPBUGS-53654: bump jwt and oauth dependencies #432
Full changelog

haproxy-router

OCPBUGS-56424: Add support for IdleCloseTerminationPolicy #655
OCPBUGS-49391: Reject All CA-Signed Certs Using SHA1 #651
Full changelog

hyperkube, pod

OCPBUGS-65694: Fix Concurrentmap Iteration #2519
CNTRLPLANE-1612: Backport StreamingCollectionEncoding for JSON and protobuf #2485
OCPBUGS-61908: UPSTREAM: <carry>: Don’t retry storage calls with side effects. #2470
OCPBUGS-60553: [4.16]: podresources: list: use active pods #2454
4.16: OCPBUGS-60872: UPSTREAM: 127757: scheduler: Improve CSILimits plugin accuracy by using VolumeAttachments #2435
OCPBUGS-60272: Bump nfs server provisioner #2402
OCPBUGS-58054: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2342
OCPBUGS-58054: UPSTREAM: <carry>: disable some legacy cloud provider Azure tests #2352
OCPBUGS-57290: UPSTREAM: <carry>: Bump cadvisor version to fix kubelet #2325
Full changelog

hypershift

OCPBUGS-63640: [release-4.16] fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries #7113
OCPBUGS-64680: Update DNS names for ovn-kubernetes cp metrics #7158
CNTRLPLANE-1904: Migrate 4.16 pipelines to common pipeline template #7212
CNTRLPLANE-1426: feat(konflux): tag MCE HO images with latest #6839
OCPBUGS-61252: dont use registryOverrides on kube rbac proxy image be… #6756
OCPBUGS-61582: Update KCM node monitor grace period #6797
OCPBUGS-61860: Use the common MCE konflux pipeline #6844
OCPBUGS-60150: Always compress and encode payload in token secret for inplace upgrades #6750
OCPBUGS-60951: MCE 2.6 konflux hcp cli #6701
CNTRLPLANE-1203: HO MCE change to hermetic ta build #6654
CNTRLPLANE-1231: Move CPO pipeline to hermetic builds #6599
OCPBUGS-58505: [release-4.16] Add missing service network DNS entries to KAS cert #6393
OCPBUGS-57494: Add proxy variables for the MCD Pod #6286
OCPBUGS-55697: Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs #6114
CNTRLPLANE-919: Konflux build pipeline service account migration #6087
CNTRLPLANE-919: Konflux build pipeline service account migration #6082
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-58737: bump github.com/golang/glog to version v1.2.4 #106
OCPBUGS-56063: tech debt: rework vendor patches #91
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-59727: [IBM VPC] set offlineExpansion to false in e2e test manifest #149
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-67288: [release-4.16] Fix incomplete vendor/ #138
OCPBUGS-51818: CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork #109
Full changelog

insights-operator

OCPBUGS-68370: Add filtering to add other possible pod status to QEMU gatherer #1200
OCPBUGS-67009: QEMU logs are not gathered if there are pending status virt-launcher pods #1197
And 5 elided commits (e.g. from squash or rebase merges)
Full changelog

kube-proxy, sdn

OCPBUGS-54457: Drop SYNACK as well in MCS side #658
Full changelog

kube-storage-version-migrator

NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-16). #227
Full changelog

libvirt-machine-controllers

OCPBUGS-26525: Updating ose-libvirt-machine-controllers-container image to be consistent with ART for 4.16 #283
Full changelog

machine-api-operator

OCPBUGS-57210: Updates GCP CredentialsRequest #1378
Full changelog

machine-config-operator

OCPBUGS-63155: [release-4.16] Networking: reset ovn-remote config and allow ovnkube controller to set it #5359
OCPBUGS-60773: scope MCD node listers to current node #5260
OCPBUGS-63553: Add control-plane label for master nodes on legacy clusters #5376
OCPBUGS-57423: pkg/operator/status: Drop PoolUpdating as an Upgradeable=False condition #5119
OCPBUGS-63332: Recheck generatedByControllerVersion annotation prior to deleting a degraded MC #5364
OCPBUGS-56753: Support NODEIP_HINT in IPI deployments too #5079
OCPBUGS-62689: Add mcd_local_unsupported_packages recording rule #5328
OCPBUGS-59931, OPNET-681: Support migration to NMState #5205
OCPBUGS-61869: Override NMState service definition #5290
OCPBUGS-60621: Add workaround fix for static pod race #5252
OCPBUGS-56558: Log CRC MC deletion #5178
OCPBUGS-58270: Do not set cpu system reserve below the default value #5163
add missing vendors #4952
OCPBUGS-48283: Do not run resolv-prepender from NM dispatcher #4784
OCPBUGS-56868: daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers #5090
OCPBUGS-56626: error from generateAndValidateRenderedMachineConfig function can be misleading #5075
Full changelog

machine-image-customization-controller

OCPBUGS-68093: [4.16] uplift logrus #153
Full changelog

monitoring-plugin

OCPBUGS-54316: Fix “Export as CSV” #469
Full changelog

multus-admission-controller

OCPBUGS-58767: Update the github.com/golang/glog module to v1.2.4 #103
Full changelog

network-interface-bond-cni

OCPBUGS-61348: Bump github.com/containernetworking/plugins from to 1.7.1 #95
NO-JIRA: Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.16 #91
NO-JIRA: Add ci-operator.yaml file on release-4.16 #84
Full changelog

network-metrics-daemon

OCPBUGS-58777: Bump github.com/golang/glog to v1.2.4 (#113) #113
OCPBUGS-60186: Replace e2e test image (#122) #122
swtich golint install method (#123) #123
Full changelog

nutanix-machine-controllers

OCPBUGS-51854: CVE-2025-22868 #110
OCPBUGS-47266: fixing CVE-2024-45338 #93
Full changelog

oauth-proxy

OCPBUGS-61446: Update x/crypto to v0.31.0 #335
OCPBUGS-62707: Fix oauth-proxy e2e-component tests #338
Full changelog

openshift-apiserver

OCPBUGS-63394: Wire dry run option to Image API server operations #566
OCPBUGS-61474: Skip blocked registry check for registries with mirrors #552
OCPBUGS-56612: Fix image reference in TestImageStreamImportQuayIO #516
Full changelog

openshift-controller-manager

OCPBUGS-61707: legacy image pull secret rollback controller #416
OCPBUGS-60233: ignore error failing to find pull/push secrets #409
OCPBUGS-57513: Set node-pullsecrets volume to read-only to protect image pull credentials #394
Full changelog

openstack-cluster-api-controllers

OCPBUGS-58028: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.16 #346
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-58881: operatorgroup: ensure clusterroleselectors in clusterrole aggregation rules are sorted #1102
OCPBUGS-59647: Reduce Frequency of Update Requests for Copied CSVs (#3597) #1042
OCPBUGS-60847: Add NetworkPolicy as a supported kind #1050
OCPBUGS-61388: [4.16] e2e stability fixes #1083
OCPBUGS-57429: reduce cache expiry frequency [release-4.19] #1022
OCPBUGS-56358: fix(olm): improve error logging for missing olm.managed label (#3558) #1006
Full changelog

operator-marketplace

OCPBUGS-62220: Remove Expect func so that the test case can use the retry logic #671
OCPBUGS-61920: Update memoryTarget on catalog source pods #664
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-68349: Add ricky-rav to OWNERS for release-4.16 #2899
OCPBUGS-66155: Skip Pending pods in EgressIP status updates #2880
OCPBUGS-64944: [release-4.16]: Configure sec nic EIPv6 address with NODAD and maximum lifetime #2853
OCPBUGS-64858: Fix stale EIP assignments during failover and controller restart #2851
OCPBUGS-63155: Fix EgressIP stale GARP post reboot + pod restart #2809
OCPBUGS-63230: Fix dnsnameresolver address set #2812
OCPBUGS-60079: Always enable global IPv6 forwarding #2743
OCPBUGS-60494: Update OWNERS file: Add Patryk/Martin as approvers #2718
OCPBUGS-58161: Unpin OVS patch versions #2648
OCPBUGS-57396: Fix predicate for cluster subnet route to gateway router #2645
OCPBUGS-55282: Fix hybrid overlay node subnets collision with cluster subnets #2621
OCPBUGS-48121: Increase InformerSyncTimeout to 60s #2624
OCPBUGS-56242: Handles unspecified protocol in network policy port #2571
OCPBUGS-56812: egressfirewall: avoid nil dereference on node delete #2591
Full changelog

powervs-machine-controllers

OCPBUGS-61511: Use OS_GIT_VERSION in Makefile when found (for Konflux builds) #127
OCPBUGS-54752: Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.16 #114
Full changelog

prometheus

OCPBUGS-61856: chore: compute highestTimestamp at queryManager level #270
OCPBUGS-56739: BACKPORT: fix promtool analyze block shows metric name with 0 cardinality #255
Full changelog

route-controller-manager

OCPBUGS-56152: Added error event for failed ingress to route conversion #61
Full changelog

tests

OCPBUGS-63395: Backport pr 29834 to release-4.18 #30409
OCPBUGS-62934: Fix bearer token exposure in exit condition as well #30365
OCPBUGS-61170: images/tests: Remove rteval #30203
NO-JIRA: Update extended/networking OWNERS #30091
OCPBUGS-60272: Bump kubernetes version to fix NFS ganesha version #30086
OCPBUGS-57311: Replace RunHostCmd with Exec function to censor bearer token being exposed #29908
OCPBUGS-57203: fix: remove un-needed test #29849
OCPBUGS-34163: Fix regex parser for censoring private key #29805
OCPBUGS-56704: aws/edge: prevent test using unschedulable nodes #29847
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-61653: Fix unit tests #72
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github