4.17.11

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.17.11-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.17-e2e-aws-ovn-serial
- aws-ovn-upgrade-4.17-micro Succeeded periodic-ci-openshift-release-master-ci-4.17-e2e-aws-ovn-upgrade
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.17-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.17-micro Succeeded periodic-ci-openshift-release-master-ci-4.17-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.17-fips-payload-scan
- gcp-ovn-rt-upgrade-4.17-minor Succeeded periodic-ci-openshift-release-master-ci-4.17-upgrade-from-stable-4.16-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.17 Succeeded periodic-ci-openshift-hypershift-release-4.17-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.17-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.17-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.16.11, 4.16.12, 4.16.14, 4.16.15, 4.16.16, 4.16.17, 4.16.19, 4.16.20, 4.16.21, 4.16.23, 4.16.25, 4.16.26, 4.17.3, 4.17.6

4.17.10 (changes) - S S S S S
4.17.9 (changes) - Success
4.17.8 (changes) - Failed
4.17.7 (changes) - Failed
4.17.5 (changes) - Success
4.17.4 - Success
4.17.2 (changes) - Success
4.17.1 (changes) - Success
4.17.0 (changes) - Failed
4.16.29 (changes) - Failed
4.16.28 (changes) - Success Success
4.16.27 (changes) - Failed
4.16.24 (changes) - Success
4.16.18 (changes) - Success
4.16.13 (changes) - Failed
4.16.10 (changes) - Success
4.16.9 (changes) - Success
4.16.8 (changes) - Failed
4.16.0-0.nightly-2025-01-01-142042 (changes) - Success

Loading changelog, this may take a while ...

Changes from 4.17.4

Created: 2025-01-02 19:04:02 +0000 UTC

Image Digest: sha256:80078b22e5e6e215141bd8300c0e0392ada651334a6f3f4fc340f6a8076d1166

Components

Kubectl 1.30.5
Kubernetes upgraded from 1.30.5 to 1.30.7
Kubernetes Tests 1.30.0
Red Hat Enterprise Linux CoreOS upgraded from 417.94.202411050056-0 to 417.94.202412250812-0 (diff)

Rebuilt images without code change

agent-installer-api-server git b2babb90 sha256:41dadd6c5e3dc4775db41019cb660cc8ebc33e7d102516bb7470abc2329cdc14
agent-installer-node-agent git 29149b77 sha256:99df1d5900774178976f9f36bb06ed49ceabea5585a4d49e6f6f4b69a7bda44c
agent-installer-utils git 3b99303b sha256:bae2f4c70e8dfe964b747ef55ceff8115741156748ba746c83462eb696814efa
apiserver-network-proxy git cd426416 sha256:b00091dbd8ba91690b384419627dc8e4a968c8f60628a293491bfe75c268a25f
aws-cloud-controller-manager git 8c77f418 sha256:256e4cb5495277224a61b5794e217ebead3d2fdbf92e29d5587fa5bcfdd3d5cb
aws-cluster-api-controllers git 1f1c59f0 sha256:026c3bb26a50eff6a4cfe9e70c1e892f2c3e282e3af0bdb9b5e36644c85e6ed0
aws-ebs-csi-driver git 2bb5b316 sha256:d1efeea4b2ba527da47200184498268aebd20c8ce43561d10f44c53d0fbec34c
aws-kms-encryption-provider git 9d401670 sha256:bb15536357df20637ea543c7b5d0734bdd5f3dfb70ab818f2498363f5b43a27d
aws-pod-identity-webhook git b91c75bd sha256:c4bdbed5dad0eec2e448abf0fdcb014d31d45898bd7cc964e7d7d76d4d53cc82
azure-cluster-api-controllers git d359bfe5 sha256:7d50e496d40e3812ce979b9bfae30cdce12cbd0763fb55cb194f1531bc19f0a3
azure-disk-csi-driver git a544f30b sha256:767999d3adba79adf9af254e79f3bd4651d62258de4b6e2b3bab8e317b95dd8e
azure-file-csi-driver git 9f4c38c2 sha256:4e610b3e115a3dd0666117f67de51cc069b0166e070460c10e87d9b7a56812d3
azure-kms-encryption-provider git b7a46ac8 sha256:d9d921a0b93c3c7b3045f0ae6f6bcaa7522b1f898869ef97c315e6c9502e0269
azure-machine-controllers git d69a3e35 sha256:861cfc34c5db888b5d30956a6f98b8a3a14937ec8c6ef3c7a283c6364500a74d
azure-workload-identity-webhook git 75b1b4ce sha256:da5e5631bb16d1fa9685d355b9bc45022d35a8aefa474c07e83c32d468de2623
baremetal-cluster-api-controllers git 9e6d2bd4 sha256:55237604413c5701057b7dd6360bacb98a733cdd358f0f971b4186a934129535
baremetal-machine-controllers git 2549061c sha256:fbc38747d338a257a85839da70e97842720eda026967fa8f8965585b98306b68
baremetal-operator git 94748225 sha256:e3e4a0a94a54f1d8a92afb6f128faef27cab295c51b2920e68ef5e4fd36d1fc0
baremetal-runtimecfg git e1f3e0d1 sha256:aa0869e945139f433faf914f52e60a9bd43569bb994025acea18da7ba24d7852
cloud-network-config-controller git 779b346c sha256:59a77b050e4276d199c6402cba45cffbb8c7e24d0583c16aeb62ed8a3b5e46d5
cluster-baremetal-operator git 2cc85ada sha256:45cd3c3f63b20f9240993179f27c591822c2e409922c435e9b7ce20198a93a80
cluster-bootstrap git 95dd9129 sha256:ae4e2d7ac08ea13bc8dda4fccf6559bda33446f4955063fe5a1f2bc869eab840
cluster-capi-controllers git 77ef4fc5 sha256:fee7e55a381963ca2ef2294c67f2bb33e395f89217d9b9340799092affe35c58
cluster-capi-operator git f4bca806 sha256:766213a8b1ce2a43dbc96edf7ab1e263f13566609f311d25d070a5cc14b62acc
cluster-cloud-controller-manager-operator git 32fd8399 sha256:981417e3609ca72fce9d2638196195ab2b61aeece71d5eb881d8b1bf7041223b
cluster-config-api git 0a880016 sha256:5264f702aaeb49b0006e95cb1549fbab87ea8921adcf7425895e89b0ed4e1116
cluster-config-operator git 0dc084f4 sha256:f17caf9414c388624a32d43fb585d3630b07bc14c72aee5079a0ada632e9d65a
cluster-control-plane-machine-set-operator git f7e01c2f sha256:65d2c89ffb2aa7c76c4b5ecc1bf0db63978eb6a0e4e4d0f02a833e7725860e88
cluster-csi-snapshot-controller-operator git ffba005b sha256:5c79d065d97ed66ed9640dd61bd97c8a1f85a36f9633b233f81242531cc5d01a
cluster-dns-operator git 54eea5bb sha256:76b6efc04c95666e9172a76714df8db265045f1c2bcd615f14500f55fc548205
cluster-etcd-operator git 975fc013 sha256:601d3b80292d5c7230e6a4ee2eee680431e3422f0aabcc1be016602660b8820e
cluster-image-registry-operator git 46b56029 sha256:8da3f96179877747ce375664375c23e95b733799b69baca710e65a5d19d0b6c8
cluster-ingress-operator git cb5306d7 sha256:fae1ea9c1a4e6b2bed557556cbc79c509f2abc993de56b8d432f2c241a1eacc8
cluster-kube-apiserver-operator git aa95a2b0 sha256:f549d51fe3b6d3a9155cd17fcda12d344a8bfb0aa8f3fc8556550b7687828d9f
cluster-kube-cluster-api-operator git aed5f6c7 sha256:ca0c749b5fd4cba39f8d8760d721b2987b24853ecf12b7086efc9d536b0f239b
cluster-kube-controller-manager-operator git 0a9ed573 sha256:a5557da9c4fd8a94543e8c9a1bb893b8364b6bb41488ed4925ba3fb5c2377e77
cluster-kube-scheduler-operator git 98ca953b sha256:a43ba2075c7e0ab246ed0120c08121719b50dccf95c319bad5210558f7d56496
cluster-olm-operator git e31b7775 sha256:0d87be72f1424cac2022830be7dbe0ac65cc614db9b133c4555724bcf22d6e9e
cluster-openshift-apiserver-operator git 2b2ba3be sha256:ca12eadcb283b7dc2b6fb441787a1477a8dbf63a2ebc86edd91adb8f36c166c5
cluster-openshift-controller-manager-operator git 2b962c71 sha256:b3bc51aedd38069e6a090fdbfd8a2d65fc76349b4ef945e2209384cc8e710792
cluster-policy-controller git 7209e90d sha256:2562f0d82facda33cdc351ba0eaa60a66f94c3f79b32d83e2bd1279797f5f472
cluster-samples-operator git 3a44b4db sha256:df28200659036e48e7925f1ddd35938a0c874082526960bb51bdfeb06c5b84ed
cluster-update-keys git 2ce31fc5 sha256:1b9b5d8d9a282facf9ea1ed865fe1e8f8244282b31fe47e5368dc30ddfd10347
configmap-reloader git b877222b sha256:0e88c3af763508decaa1942367c8c74676302610f978503a6274c9e9434c3c97
container-networking-plugins git 24a65329 sha256:ce98b02d53b51dda73ffba0e9121f20266639ef3dcd5431b57fab00bf29d3d07
containernetworking-plugins-microshift git 24a65329 sha256:8f8ed8ec72082e9206c06c37806c7aa3b5d9344860068e09f5b50c9513757b13
coredns git d3b441c1 sha256:2164d9059b8df17974fbd6513d442adb91987f058d6df2c0025ae160491c986e
csi-driver-manila-operator git efc99a2a sha256:0cdd101c5b70884bffa468843b2281d7d854af1943cb5cfcae8cc22e33e0eba1
csi-driver-nfs git 6a72c254 sha256:c16c7e5ab259d06732c62ff2dbc9c8817cb36b793025bec65ebb6387b42c75e7
csi-driver-shared-resource-operator git c095a1f2 sha256:e5e956d289b21fd515aa7bc62e439fffeae99142e17e1c6cf3f9943caf5c49d7
csi-external-attacher git c3fe8e2e sha256:0bd0db981b463f208c5fb5f7d1042e7c9bc89fa32b211790c7dd4ccfe0e31371
csi-external-provisioner git fe460e56 sha256:0fe40507eb939acbc09376e8db959307bd96289f9fcf73810223becf3632109d
csi-external-resizer git ab87a938 sha256:3fd5699e8a29a11790bfba31113162252b4a7711b32722a6b9c5388387270ed4
csi-external-snapshotter git aa558ca4 sha256:1750f64e78342467ce210f0f92f3a06f5c2b356b1c35b1084108d39ca74ec526
csi-livenessprobe git 075ebcdc sha256:cde3fddb25170dbe0d9dc2d779482f9a45d5d890a5a0be94d1849149a9ea6c3e
csi-node-driver-registrar git 436a1f33 sha256:59911ce59b4d3545e091d7e96f71dbda2421c72d6c4d6e2d8056c17b650b4da2
csi-snapshot-controller git aa558ca4 sha256:abe67c6a9d6dfa5c22826993e659cfff9dafe43270e629532b98f4f7cda7c679
csi-snapshot-validation-webhook git aa558ca4 sha256:46c4dc12ec5fc95735447dec8f7890d03691fb9ea4ecf415d6d60f3c5274dd61
docker-builder git 5dec103f sha256:2f2e96b650ba36089e4e676b5d2e1f240108d98072bb9b3c28b9b3eacddd774f
docker-registry git ef9fa957 sha256:4751c96968073382eae53f3e4502368bd329c06a55ff6126f97c8c319f82aaae
driver-toolkit git 859518f6 sha256:47ba8a10d5938c41f907ee7f70d74aecb9c2dfd7afae4cea2942fc8f47256612
egress-router-cni git 3193a756 sha256:09463f9130726704823f6ae461f92795b943c14bfd8a67cea0f82732ccb7d2f7
gcp-cloud-controller-manager git 8ce997d7 sha256:c0dc72359369172e9c193275a08a809a749530190ad3f48a8e2f633b6419c74f
gcp-cluster-api-controllers git 9c561f2d sha256:a4336d9f69c84afd7cd3b5d9429cc8aa8823eb1870471e0ff51114469a05ab7f
gcp-pd-csi-driver git c770b412 sha256:509d9932eb94e92f2f6783a60d2b2cf189482711cedc70b2851fd91c082501f6
gcp-pd-csi-driver-operator git c23b064f sha256:1ba321eefd886ede4980fa07d427f613c375439925a841e34c243e951e57e037
gcp-workload-identity-federation-webhook git 08579e9f sha256:75c7397252f2279f7ca49998d1277d36314f99e384cd6e54d63f6de4407e32d8
haproxy-router git a33f2b6a sha256:ac1508e67210a4ef8dc7e5f737d3b14173bda80e6cc217d8e9c07480ef7d1ce3
ibm-cloud-controller-manager git ad8f7eb0 sha256:1896606743d3d8879c6c5bf54c93c7c9a75e5951e70f72bfefa512151ce38581
ibm-vpc-block-csi-driver git 3a3a62f7 sha256:e36e22451d54d97c568c4a5003239a2bd4f865dfff4591f8dcce73940969fd68
ibm-vpc-block-csi-driver-operator git 8443d86b sha256:a8491a3d3c0823839c933e250f34e487def238469125d34dcec44b8364fd8588
ironic-agent git f5f742d8 sha256:66dffb8443f13efd61c89568db54bf88922c91b750599e28c3f28e0e6d924953
ironic-machine-os-downloader git b698ea3e sha256:8caa3ed4117cff7e327cb63cc699f29d7b294d38d5e0fd6b1c0ef18f1af2027c
ironic-static-ip-manager git 713378b3 sha256:e658d11a614a5f2b0a5f999893c28265fcc7aff99001b74555ad6d875c381182
keepalived-ipfailover git e3879e9e sha256:bd36d8212ddd5e4da7475f7c77bb780c28bed542a02ef7b664b54bd282ba1efe
kube-rbac-proxy git 7718265c sha256:c79dcf2363aaace01f0bd31b4bd6eaacab44ca605e334480f15bfe9b71460990
kube-state-metrics git 462e63f6 sha256:5a57dd7acc06bef4bee5eb85e2006cf7b89acd28a4fe5c3ef8cc895ed4c7dc95
kube-storage-version-migrator git 34fafc04 sha256:a52f9aa6df3c9193997a682e4e29b9c58c0c99decbb560e8f127d962c2a1eda7
kubevirt-cloud-controller-manager git 3f4542ec sha256:41427d9fedd3dfbbd33bb096dcd3ee26fa4b79d40b79e399db8adc984478ff07
kubevirt-csi-driver git 02f9a921 sha256:46af8d796f4b8117c52fee979ad48e9d8b1ffb2eb282768c486155b7dda72a56
libvirt-machine-controllers git a336f0b5 sha256:bfc8c1351cab10a9da6a01409c5f6cbdcec1360739ddbae085d994fc2f1ffaf8
machine-image-customization-controller git 74bee374 sha256:2d73aa871cf720f2cee7e39f7809c8954a8ab686cd795502306739200ff976e2
machine-os-images git 9e76dac7 sha256:8ed6194ee2c33d7ccbfa493ff5e1ea271b76c155cfb172beed28d27f81eeec62
metallb-frr git 377d02f9 sha256:5695b6a0fcc8a2a3e37372c79912b6a6d64d5ee7a0623fe2f083f89d35b23ac8
multus-admission-controller git 076f0caa sha256:1bf080bea361622295b9eec25432eeae6e7ba1639fc3a1d292d7467022b13c7f
multus-cni git b8d8d5c0 sha256:58522bba37b0b3bb9a0103e8d7f99a85042840d58f49dd847d206e0c2159472b
multus-cni-microshift git b8d8d5c0 sha256:01c5940636c31985b7ce70971230ba78042df3d456c740b2f89cd6e8736f7bad
multus-networkpolicy git 7d01ea1c sha256:244a12a4142b73f0cdc8c5d6d25df143abd44df4893a1f0620cccf6b763c15fb
multus-route-override-cni git 391c1b03 sha256:8f05cfd893623d301d7d34236c7ae18a67f3f70bf4c5205b03ef3932d70e02e7
multus-whereabouts-ipam-cni git b950d50d sha256:46cafafa705714cc7681a5d1fe2c43f96cb55e5b5ce711095a9e8a521d09167d
network-interface-bond-cni git 8630f336 sha256:21f9da6db99de821234f1741473e785a09eebcdb83590531f6a65ed8dab3e749
network-metrics-daemon git ddb486ae sha256:d5e87256072dc471f4ead3d8fc4a1b83488b308d1657d34c6f56f6485898d1fb
network-tools git 8e170b4f sha256:f4724fcf3d94039905f9457fab1bd323b3b503500621baecd4ecd5f1c5490ac2
nutanix-cloud-controller-manager git c9f6cd1f sha256:7e30007b24e35568b461592042dae8cbc6769606e3ed72f284d292a240256b41
nutanix-machine-controllers git 68aa2bbf sha256:49b439c296d8ea16f69ef773ab5f83bc9d30a6e10516dab2c8545ae946999731
oauth-apiserver git e37ccb45 sha256:12aa122922a4b916100b9772122373ae8c468029b15fe739fc663f5324f73354
oauth-proxy git 30f80124 sha256:4362ecb52186ef758fff8ef35a9a2efd54a507b11e37b9d21d03678a7a4e6f2e
oauth-server git 5a70bcef sha256:34708bf463f76777bb0db3e87de0bc4c1646ad020f38ed528b8065c226a2162b
oc-mirror git 07714b7c sha256:405ddde1da469bd4f20af4622c808f35ac98b6482e7fc102d1fda86d0ab7e253
openshift-controller-manager git f299e54a sha256:e774b36ebff0b0761a664487c9f5eef24ee958da3db9a36a55f0e2013adb2bfd
openshift-state-metrics git 1e963eb5 sha256:07561dbef6b466291f1cb0abe4fb1019c7c492d5e64d371fccaaae205d4435ce
openstack-cinder-csi-driver-operator git f89b6dbc sha256:082e1351c0d71f92324097ac0f9979713ceabf824c61686baa77588b33fcd56a
openstack-machine-api-provider git 68971874 sha256:d6baa389d9e16e3dc511cda4a7b2efd8a8eccf715439515da5afece6bd252c15
operator-marketplace git 51f871a5 sha256:45a4cbd98966e4aa2b7f20f881b453e15d97bf923255318053a2d6dfe3925cf4
ovirt-csi-driver git 1db726a9 sha256:8136f53f4d179fbfa0bf3a67429e09d33e2a8fbcd28fd5e05d35944c93951c9e
ovirt-csi-driver-operator git 0feae256 sha256:b68b4a7503edb7e74e8f39880fc902e165e907e6a82b7975b1a551a5623f0dfc
ovirt-machine-controllers git abb91c84 sha256:f66f5cc49237f40e81d01d8e08ea253e81b31b90ce99c6245d6be7d03f3a5cdd
powervs-block-csi-driver git aaa6afa9 sha256:05f5fc1dc85c4a666cfd3eea0302b03a67c26ab77c4f2ad45a5544d4aaa370ac
powervs-block-csi-driver-operator git f6f037c5 sha256:9e6e7bcac116752bd3bdb151030b1dc53a5f5f5b01768dd95a935964dcc49159
powervs-cloud-controller-manager git bd3d72e5 sha256:a956a242e1edeb7eca0e99b33ab8dbcb397a3676d0c1459905e5f0751f678b36
powervs-machine-controllers git fe7a877c sha256:eb8c47b629179786a09e2f95a2cd831d003c8dbadcfb6b851917d31217975764
prom-label-proxy git d80e9044 sha256:127c2fae32671ef43e42819955a91535addbde77ed68309fcf73568304bce3ad
prometheus-alertmanager git d7c1a7c6 sha256:c03fc75bdde653214330d0ea4130a7b806c49f3dc9d7230f255807a67d85b5b3
prometheus-config-reloader git 16f1cb00 sha256:d354b89e09fb7c667ba7099ca6fee2b591a734e58d818da5ad559b32249802c8
prometheus-node-exporter git d88fd69b sha256:e7ed647d4ec2180dd73486b0b1993aae6835db201f29b4584ab3c14da350663c
prometheus-operator git 16f1cb00 sha256:94e0dea785489c1ec718c61ecd1460e9edceed16fb4320441e4371d0389aacde
prometheus-operator-admission-webhook git 16f1cb00 sha256:89f6d0a75c86720fdc1722992d3772a176e082e170594696555f280579c70568
rhel-coreos sha256:6349283e251db752d02e88b44b751ee4b8b893a3b9134fe47f75422bf39dc1e1
rhel-coreos-extensions sha256:9c9ad31c00b874c3c556aa2ecfef8100073b8270e5c5294395343add776793ad
route-controller-manager git a47f6be3 sha256:622cb562d2dfd063e23be2dbc6af7474eea015ff73e83dbbd4a415d462ede9b2
service-ca-operator git 1f7d6472 sha256:222e8fa29f55863ba0c157ee2ba2f460a82e073229688916c60825a75505cb48
telemeter git e2b25245 sha256:b6956fcdd45c29efac0aedfc7971d140947d4231012e2a5250112020ecde59c3
thanos git 5b567365 sha256:b2f408ad4f750a86e039d7df4a03b9b40c5b71e88257710a98cd621dd3902f18
vsphere-cluster-api-controllers git 1661cc3f sha256:54776a4c33056387ed07f0b3aa46ddcbe564a9ad30d8ec49f6e513824cc3b9f7
vsphere-csi-driver git 039ee368 sha256:7c1ec70e9da124fb5c81e59d290df9d9a99a1bcbd24ce5b6e22d6fd86a744f06
vsphere-csi-driver-syncer git 039ee368 sha256:7398ba589636760e79eddb8aceb6e74ca95f4b56c24b093b70d8a3c3d59d1765
vsphere-problem-detector git cd0df71f sha256:83afb2974441ebd19d03cf5470ea93d42a10b568ccad4dd29c80fad70d3f26cb

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-44904: Rhcos fails to reboot for skip mco reboot on s390x (#942) #942
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator

OCPBUGS-42949: add tag matching to Azure File storage class #291
OCPBUGS-43789: add ability to control kube rbac proxy container image… #310
Full changelog

aws-machine-controllers

OCPBUGS-45186: fix Associate*IpAddress flag when launch EC2 #118
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-46039: Prevent panic when informer receives cache.DeletedFinalStateUnknown #132
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-46360: aws: add ec2:AllocateAddress perm requirement. #9313
no-jira: Collect bootstrap logs when control plane provisioning fails #9308
OCPBUGS-45726: IBMCloud: Add service overrides #9267
OCPBUGS-42117: Remove destroy search for regional target tcp proxies #9025
OCPBUGS-45484: PowerVS: Listen to machineNetwork #9271
OCPBUGS-44848: aws: user right perm for untagging BYO IAM profiles #9228
OCPBUGS-45276: Bump Azure Machine Timeout #9257
ARO-12457: Include bootstrap docker config file in go module #9258
OCPBUGS-43047: fix slice init length #9089
OCPBUGS-43800: pkg/asset/installconfig/azure: send full certifcate chain #9140
CORS-3753: Allow mocking of the Azure client everywhere #9219
OCPBUGS-44611: [release-4.17] capi/aws: set Node Port Service CIDR override #9209
OCPBUGS-44230: Add C4A instance types #9181
OCPBUGS-44231: [release-4.17] capi/aws: bump provider for LB DNS lookup fix #9179
OCPBUGS-44261: Ensure rendezvousIP is checked against host IP #9184
OCPBUGS-43972: Cherrypick oci ccm fix to 4.17 #9152
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-45517: add retry in case of image pull error #1940
OCPBUGS-44508: Show node-joiner container logs when error occurs #1912
OCPBUGS-44830: Fix newapp unit test failure by using different image #1913
Full changelog

cloud-credential-operator

OCPBUGS-45938: Add AWS region to aws-pod-identity-webhook #799
OCPBUGS-45006: Add retry to ccoctl gcp create functions #793
OCPBUGS-45001: github.com/golang-jwt/jwt/v4 v4.5.1 #787
Full changelog

cluster-authentication-operator

OCPBUGS-43657: audit: do not log requests to /livez #724
Full changelog

cluster-autoscaler

OCPBUGS-45147: [release-4.17] VPA: Update OWNERS file #324
Full changelog

cluster-autoscaler-operator

OCPBUGS-45929: set max soft bulk taint count to zero #337
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-46593: “gracefully” shutdown KSVM pod. #123
Full changelog

cluster-machine-approver

OCPBUGS-46429: Filter CSRs by signerName #261
OCPBUGS-45918: Ensure trailing dots on DNS names do not block serving cert auth #256
OCPBUGS-45918: Client internal DNS checks should ignore trailing dot #250
Full changelog

cluster-monitoring-operator

OCPBUGS-44971: Add new metrics for OpenShift logging telemetry #2526
OCPBUGS-44003: fix(monitoring-plugin): disable emitting nginx version on error pages #2511
OCPBUGS-43690: chore: introduce a config parsing check via a strict unmarshaller for… #2494
Full changelog

cluster-network-operator

OCPBUGS-43714: Skip including default crypto policies to avoid authby issue #2597
OCPBUGS-46146: Remove ip xfrm state when IPsec is disabled #2594
OCPBUGS-44415: Pass transit_switch_subnet options in ovnkube-node pod #2561
OCPBUGS-44807, SDN-4930, SDN-5297: OVN-Kubernetes node RBAC tightening #2568
OCPBUGS-44807, SDN-5297, SDN-5472: bindata, ovn-k: Add ClusterUserDefinedNetwork CRD and RBAC #2566
OCPBUGS-44807, SDN-4930, SDN-5297: ovn-k, udn: Update UserDefinedNetwork CRD #2551
OCPBUGS-44807, SDN-4930, SDN-5297: Adds UDN list/watch to ovnknode rbac #2540
OCPBUGS-44779, SDN-5436: Provide support for user owned IPsec machine configs #2564
OCPBUGS-44330: Add controlplane cli image envar for use with hypershift #2542
Full changelog

cluster-node-tuning-operator

e2e: add irdma to module_blacklist kernel args (#1266) #1266
OCPBUGS-45964: performanceprofile cpuset input validation (#1247) #1247
OCPBUGS-43664: Add vendor and architecture specific tuning options (#1191) #1191
OCPBUGS-44644: cmd: PPC: support tolerating heterogeneous core IDs (#1252) #1252
OCPBUGS-45264: Normalize cpu sets when rendering to Tuned profiles (#1238) (#1248) #1238
e2e: wait for node inspector deletion (#1205) #1205
Fixing empty tuned submodule when using Dockerfile (#1211) #1211
E2E: fix modify node selector to use lowercase (#1186) #1186
Full changelog

cluster-storage-operator

OCPBUGS-44997: Fix PodStartupStorageOperationsFailing alert #543
OCPBUGS-43794: add ability to control kube rbac proxy container image on controlplane #529
Full changelog

cluster-version-operator

OCPBUGS-39558: Filter out shallowly UpdateEffectNone errors from a MultipleErrors message in the Failing condition #1114
OCPBUGS-45328: deps: bump golang.org/x/net to 0.31.0 #1117
Full changelog

console

OCPBUGS-45949: ReRun of Resolver based PipelineRuns fails from UI #14605
OCPBUGS-45954: Fixed capitalization in OpenShift Lightspeed #14607
OCPBUGS-45948: ImagePullSecret getting duplicated when editing DeploymentConfig in Form View #14604
OCPBUGS-45667: Do not pass CSV name to operand list page when an exen… #14591
OCPBUGS-46000: The description and name for GCP Pool ID is not consist #14611
OCPBUGS-42558: Plugins that use very old PF4 dropdown or menu components with grouped items have bullets and padding that needs to be removed. #14344
OCPBUGS-44656: update ConditionalUpdates release type #14505
OCPBUGS-43888: While accessing the node terminal from UI observed ‘Warning alert:Admission Webhook Warning` #14444
OCPBUGS-43441: fix table combination #14546
OCPBUGS-44169: use TaskRuns results.tekton.dev/record annotation to get the logs #14538
OCPBUGS-44873: Unable to remove finally tasks in pipeline builder mode #14527
OCPBUGS-42791: Add missing pipelines plugin name to known plugins #14377
OCPBUGS-44699: Add multiline support to template instantiation #14508
OCPBUGS-44183: Remove ClusterTask dependency in console from Pipelines 1.17 #14512
OCPBUGS-44764: Add IBM Block Storage CSI driver support for RWX #14517
OCPBUGS-43795: While upgrading the cluster from UI observed Warning alert:Admission Webhook Warning #14433
OCPBUGS-44722: include external labels so silenced alerts not displayed in notifications #14511
OCPBUGS-44358: BuildConfig form breaks on manually enter the Git URL #14478
OCPBUGS-43073: Telemetry userPreference results in empty nodes output to the DOM #14392
OCPBUGS-44587: Start last run do not work in buildConfig details page #14499
OCPBUGS-44586: Collapse/Expand Feature Added, Removal Option Removed in Version 4.16 #14498
OCPBUGS-44450: Don’t request user settings configmap if no user has been loaded. #14482
OCPBUGS-44479: conditionally display MachineConfig details page Confi… #14488
Full changelog

console-operator

OCPBUGS-46390: Dont disable console when authConfig type is set to None #951
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-43427: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.30 into release-4.17 #302
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

OCPBUGS-34217: Updating ose-csi-driver-shared-resource-container image to be consistent with ART for 4.17 #188
OCPBUGS-44510: Updating ose-csi-driver-shared-resource-webhook-container image to be consistent with ART for 4.17 #233
Full changelog

etcd

NO-ISSUE: Add support for cachi2 based deps #297
Full changelog

gcp-machine-controllers

OCPBUGS-46082: update a2 gpu detection logic to be dynamic #100
Full changelog

hyperkube, pod

: OCPBUGS-46364: Fix grace period used for immediate evictions #2164
OCPBUGS-46002: Bump k8s api to 1.30.7 #2160
OCPBUGS-39318: UPSTREAM: 126994: Add required FieldManager for validatingadmissionpolicy e2e #2070
OCPBUGS-43820: UPSTREAM: <carry>: kubelet/cm: fix bug where kubelet restarts from missing cpuset cgroup #2126
OCPBUGS-44897: Backport format library to enable usage in 4.18 #2140
OCPBUGS-44512: Bump k8s api to 1.30.6 #2134
OCPBUGS-42427: UPSTREAM: 125398: Fix issue with scheduler failing on hostname mismatch #2097
Full changelog

hypershift

OCPBUGS-46412: Separate CPO containerfiles #5285
NO-JIRA: chore(deps): update konflux references (release-4.17) #5289
NO-JIRA: chore(deps): update dependency mkdocs to v1.6.1 (release-4.17) #5290
OCPBUGS-44114: Add external kas address to no proxy skip list #5028
NO-JIRA: Red Hat Konflux update hypershift-release-mce-28 #5174
NO-JIRA: chore(deps): update konflux references (release-4.17) #5249
OCPBUGS-44630: Use ingress role in private link controller for DNS operations #5142
NO-JIRA: chore(deps): update konflux references (release-4.17) #5183
NO-JIRA: chore(deps): update konflux references (release-4.17) #5154
NO-JIRA: chore(deps): update konflux references (release-4.17) #5144
OCPBUGS-44184: dont use registryOverrides on kube rbac proxy image be… #5033
NO-JIRA: chore(deps): update konflux references (release-4.17) #5113
OCPBUGS-43929: Return the right tagReference on Catalogs ImageStream #4993
OCPBUGS-44276: Configure OAuth https proxy to dial cloud endpoints directly #5070
OCPBUGS-44268: Fix order rendering HCP objects #5064
NO-JIRA: Update Konflux references (release-4.17) #5098
chore(deps): update konflux references (release-4.17) #5075
HOSTEDCP-2046: CPO 4.17 tekton builds #5006
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-44880: Fetch service instance id from spec of IBMPowerVSCluster object while setting provider id #94
Full changelog

ibmcloud-machine-controllers

OCPBUGS-37379: Bump dependency for CVE #49
Full changelog

insights-operator

AUTH-482: set required-scc for dataGahtering jobs & pods #1049
Full changelog

ironic

OCPBUGS-43955, OCPBUGS-43963: Bump python-waitress [4.17] #603
Full changelog

kube-metrics-server

: OCPBUGS-46491: Disable HTTP2 #40
Full changelog

kube-proxy

OCPBUGS-43807: Revendor to a patched k/k with our prefer-local-DNS hack #640
Full changelog

machine-api-operator

OCPBUGS-43851: vSphere klog initialization preventing verbose log messages #1302
Full changelog

machine-config-operator

OCPBUGS-38292: controller: default to runc when upgrading clusters from 4.17 to 4.18 #4715
OCPBUGS-45918: Remove trailing periods from AWS provided hostnames #4738
OCPBUGS-39223: Do not enable on-prem-resolv-prepender.path for UPI #4572
OCPBUGS-38292: Revert “controller: default to runc when upgrading clusters from 4.17 to 4.18” #4716
OCPBUGS-38292: controller: default to runc when upgrading clusters from 4.17 to 4.18 #4635
OCPBUGS-44561: Disable tx chksum for driver IDPF on GCP C3/C4 #4701
MCO-1343: Backport Telemetry to 4.17 #4650
Full changelog

monitoring-plugin

OCPBUGS-44394: remove unused package and upgrade vulnerable dependency #271
Full changelog

must-gather

OCPBUGS-46281: Support gathering IPsec data #467
OCPBUGS-42835: Removes reference to gather_multus_logs in 4.17 #459
OCPBUGS-42964: Collect etcd object count #453
Full changelog

networking-console-plugin

OCPBUGS-44397: OCPBUGS-44679: upgrade packages for cve #141
OCPBUGS-44650: Routes list page shows correct status and location #139
OCPBUGS-44648: Add Route Filter in route list #138
Full changelog

openshift-apiserver

OCPBUGS-42752: Pass expected type to deploymentconfig/scale object validation. #457
Full changelog

openstack-cluster-api-controllers

OCPBUGS-44455: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.17 #342
OCPBUGS-44959: Makefile changes for merge-bot #340
OCPBUGS-44455: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.17 #329
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-46598: catalog-operator: Delete Pods that were evicted (#3459) #922
OCPBUGS-46054: CRD upgrade existing CR validation fix #913
OCPBUGS-44760: fix: call TokenRequest API when service account token secret is missing #898
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-47506: Let OVN-northd bind remote ports #2404
OCPBUGS-45953: bump OVS version to 3.4.0-18 #2393
OCPBUGS-45312: pin libreswan to 4.6-3.el9_0.3 #2384
OCPBUGS-45339: Dockerfile: Update OVN to the 24.03.2-32.el9fdp minor release. #2376
OCPBUGS-43454: Ignore cluster manager topology not managed errors for localnet with no subnets #2362
OCPBUGS-44303: Add hybird overlay pod IPs to the namespace address_set #2340
OCPBUGS-42931: Add static route to the hairpin masquerade IPs to pod #2315
OCPBUGS-39200: Dockerfile: Bump OVS to 3.4.0-1 #2287
OCPBUGS-42940: Fix egress gateway pod cleanup for remote zone pods. #2316
Full changelog

prometheus

OCPBUGS-43667: fix(discovery): Handle cache.DeletedFinalStateUnknown in node informers’ DeleteFunc #230
Full changelog

tests

OCPBUGS-44190: Fix UnexpectedNodeNotReady and UnexpectedNodeUnreachable #29306
OCPBUGS-43576, SDN-4930: Don’t modify pod routes in tests #29250
OCPBUGS-43576, SDN-4930: Set startup probe for UDN tests #29244
OCPBUGS-43576, SDN-4930: UserDefinedPrimaryNetworks: curl the KAPI IP through eth0 #29241
OCPBUGS-44795: fix: adding oslat updates and outputting test results to the artifacts #29193
OCPBUGS-43576, SDN-4930: network_segmentation: allow multiple UDN status conditions #29259
OCPBUGS-44494: removing rteval from the realtime test suite #29194
OCPBUGS-44496: fix: adding in a SNO time override for AWS Metal #29192
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-43432: update check-fmt goimports command #78
Full changelog

vsphere-csi-driver-operator

OCPBUGS-43778: Fix panic on nil infrastructure Spec.PlatformSpec.VSphere #264
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github