4.17.15

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.17.15-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.17-e2e-aws-ovn-serial
- aws-ovn-upgrade-4.17-micro Succeeded periodic-ci-openshift-release-master-ci-4.17-e2e-aws-ovn-upgrade
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.17-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.17-micro Succeeded periodic-ci-openshift-release-master-ci-4.17-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.17-fips-payload-scan
- gcp-ovn-rt-upgrade-4.17-minor Succeeded periodic-ci-openshift-release-master-ci-4.17-upgrade-from-stable-4.16-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.17 Succeeded periodic-ci-openshift-hypershift-release-4.17-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.17-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.17-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.16.11, 4.16.12, 4.16.13, 4.16.14, 4.16.15, 4.16.16, 4.16.17, 4.16.18, 4.16.19, 4.16.23, 4.16.24, 4.16.25, 4.16.26, 4.16.27, 4.16.28, 4.17.10, 4.17.11, 4.17.3, 4.17.7, 4.17.8, 4.17.9

4.17.14 (changes) - S S S S S
4.17.13 (changes) - Success
4.17.12 (changes) - Failed
4.17.6 (changes) - Success
4.17.5 (changes) - Success
4.17.4 (changes) - Failed
4.17.2 - Success
4.17.1 (changes) - Success
4.17.0 (changes) - Failed
4.16.33 (changes) - Success Success
4.16.32 (changes) - Failed
4.16.30 (changes) - Failed
4.16.29 (changes) - Failed
4.16.21 (changes) - Success
4.16.20 (changes) - Success
4.16.10 (changes) - Success
4.16.9 (changes) - Success
4.16.8 (changes) - Failed
4.16.0-0.nightly-2025-01-31-045344 (changes) - Success

Upgrades to:

4.18.0-rc.7 (changes) - Success Failed

Loading changelog, this may take a while ...

Changes from 4.17.2

Created: 2025-01-31 09:57:19 +0000 UTC

Image Digest: sha256:68ffa083a5ab473d9fd87cedcb01c6f27740aad92de0ee39a7ac408da9a65857

Components

Kubectl upgraded from 1.30.2 to 1.30.5
Kubernetes upgraded from 1.30.5 to 1.30.7
Kubernetes Tests 1.30.0
Red Hat Enterprise Linux CoreOS upgraded from 417.94.202410160352-0 to 417.94.202501301529-0 (diff)

New images

gcp-workload-identity-federation-webhook git 08579e9f sha256:03333d01bbf9628fba523d616859fd4381cda750ad4bb87b723c5346c4588b8c

Rebuilt images without code change

agent-installer-utils git 3b99303b sha256:96bc479a88d5c72011a73e6906737fa009826847ce6b5beedfec913660497dbb
apiserver-network-proxy git cd426416 sha256:031f6d3626df3b67e27768ce643a574f590dc58b8f9e2ce96c65404ec0e01b22
aws-cloud-controller-manager git 8c77f418 sha256:5abcefd9eeff0e3c3fce9355d55c2b1e2eac65bb1ddd20253ea90414d03b45e0
aws-ebs-csi-driver git 2bb5b316 sha256:09eea12f02e5985afa44ed06c23a99b37c333a03a833ab72a8fefea6413d5fc7
aws-kms-encryption-provider git 9d401670 sha256:ec6833d93e9d5ee201c08a6ff2c801828eda548d971154bacbcf0d17401b84d4
aws-pod-identity-webhook git b91c75bd sha256:76e57f35472b1b44ba951bd4360fcfba6ea2fb4fd0b7e6e321f24e73ef7b1440
azure-cluster-api-controllers git d359bfe5 sha256:76aedaecd7dde24eeed33d284738571c8b543b6c24b2816205a85c901bd80e22
azure-disk-csi-driver git a544f30b sha256:82a41247fba8b672c6843b0a6063edcccabf5ffb50f9b3dea3a53dfed65b9eca
azure-file-csi-driver git 9f4c38c2 sha256:9eac64580e8b0144a634aa076710afa2df17635475d9d2f9b3e304b341fe7726
azure-machine-controllers git d69a3e35 sha256:2c760dd2e5ad819e3dd9da3128a52edaab01464281df3920efc58cc7a4cf779d
azure-workload-identity-webhook git 75b1b4ce sha256:f507d2839b72e0d1dd7b87f5fb909d24eef922c9cb05cd279d88f774dfcb861f
baremetal-operator git 94748225 sha256:eb4611a8bd25ac003b7cadda1e6120de194bb0e4335b89130026d77bba8a56d0
cloud-network-config-controller git 779b346c sha256:46fa869f363a6fdbd078c6082206619590dff94a0e94bd4198dd13caf301bb39
cluster-baremetal-operator git 2cc85ada sha256:0dad63af87874e563dd0789ca7bc7e2465cc52b7ac5c218295a185ce9c597f35
cluster-bootstrap git 95dd9129 sha256:fc2fb3cef768c9ff2ce5c24467f58d13345efad96bac49ff34952228e8c6100a
cluster-capi-controllers git 77ef4fc5 sha256:3b2e59ec612c89b585cf54aac093a4eb909b880b07b8bd9aafa20cd67535db5c
cluster-config-api git 0a880016 sha256:e4f474eaf42b62e22daed991ec52b53b05cdd90e13dbb1736b617a3e9d46551e
cluster-config-operator git 0dc084f4 sha256:4bf81a559c0f446b5d4dab5393039a13596048dcc263bcdd378a9cd1c7b0a4f1
cluster-csi-snapshot-controller-operator git ffba005b sha256:d0c703f4b4fa2fc88987a01b95a966496cc9771131a88d2bc6b029ca96595d49
cluster-dns-operator git 54eea5bb sha256:1b48de8f8b9a5237e92985132e0571367b4f817e3d7a6670db543a21813f2f41
cluster-etcd-operator git 975fc013 sha256:512639a0fadf99aa5ad3bcd95194fd65d478efd228951f95be32314b78ff68b0
cluster-ingress-operator git cb5306d7 sha256:ab201c715b5d57236001fc80d651109624adeacdd002a519c852681293d8c97f
cluster-kube-cluster-api-operator git aed5f6c7 sha256:d15c81d01b4f28e7ae3108b408473aee9f6c69f8a058cc8078d656d2194a3c9e
cluster-kube-controller-manager-operator git 0a9ed573 sha256:25c08be9efc62e594767c1e3e07b4a2e3b8b8f1cdd7ad550c283dc9dd007ef51
cluster-kube-scheduler-operator git 98ca953b sha256:109c1b64cf0a868cd48a2f800af2a89b4463a79291ea266f9a966722f2e95763
cluster-olm-operator git e31b7775 sha256:7d62d4f053d5490f3f127ca6efd2bb33c7786a777f13f8c1e082de7d3f58beeb
cluster-policy-controller git 7209e90d sha256:de8d0a83caedaee1a968239b9f3054f3372de6e0e6352553d335a8a5d779f7ef
cluster-update-keys git 2ce31fc5 sha256:21525215e914b8bc2256e7677f47c73b6488eb7e5210d6f60fa15ba1e336f153
configmap-reloader git b877222b sha256:52213b2a3479dfbaa9641d1c6c32b851bea23b72a4a28ac7f67f1775ec8abf47
container-networking-plugins git 24a65329 sha256:a0d28544fd2e1d7ef9e93c8881ca03fad6e9fee00d97bb58111381115ac6df25
containernetworking-plugins-microshift git 24a65329 sha256:435d614ef9b938b1989c9ec4adf8b89697b48ab2e50b582c943f30afc54d9b1c
coredns git d3b441c1 sha256:125b14eb766f2b2adc2795a07fe0585aff4f0dc4165f7efae67260455999c366
csi-driver-manila-operator git efc99a2a sha256:8787216a38933f54d820798bd15efc67a83828e29bb130adef22539e3c68eb21
csi-driver-nfs git 6a72c254 sha256:e20bd168d261abb01fcfbba8445bbd6ae8d13df8c7aeb4291701a919c1b1ae53
csi-driver-shared-resource-operator git c095a1f2 sha256:8398e54732d3b5cc64b0969b0fcf5808b03cc5c82a198423a73c1172c2cc41bb
csi-external-attacher git c3fe8e2e sha256:95a23ce6770adf1d1691ee49eb0b7051d5ca90749fac9f7f84eec7f843d66cda
csi-external-provisioner git fe460e56 sha256:2981df81b9e444d5b046f8b5f0f96b3a379863f221553015bb8edb9b4b2d239e
csi-external-resizer git ab87a938 sha256:86ee4093ca716308816011aec7f7753910d430bfb8bb2a7b074f4c7e242edeeb
csi-external-snapshotter git aa558ca4 sha256:f5c2ee214868da1dda796d8743c14581f01a8894f0f9c2bb362fda1cad4a0313
csi-livenessprobe git 075ebcdc sha256:08af6333627ced8ac78af2e70c9f1e141de8789791f372d07e5c69e4f2150d7c
csi-node-driver-registrar git 436a1f33 sha256:14a5a8c796ec6dcbc22704fecc2f2e21035ae050b598e94506e79c45c84126c7
csi-snapshot-controller git aa558ca4 sha256:4f0504fe6e4939f29ecc5c84de3003da08d2995bcff6dec79fd14b8507f8b23c
csi-snapshot-validation-webhook git aa558ca4 sha256:fdb7df38c23a8f1b4579e353141cf71e55b1a413e03ee1e17a4d6493305c9c2f
docker-registry git ef9fa957 sha256:67f4235de0369ea8f04a7cea51f8266e5436567de390a0072e9f613058f7e1bf
driver-toolkit git 859518f6 sha256:ffc7682846d663106e2851e01b328aeb7a1c31b9db93db53e8f3b43b76767587
egress-router-cni git 3193a756 sha256:b050d46b7468b3bc933381c69f7364c0cba89cbb379f6182284682624547d782
gcp-cloud-controller-manager git 8ce997d7 sha256:de5711d0a5434949c74fa26ec44b974d3fe6ec6f4afa014be0657ca2abe24ce3
gcp-cluster-api-controllers git 9c561f2d sha256:672e74b419588fa87aae45ef2eb16dc6c7feb664751249b40f0759d68e2eab15
gcp-pd-csi-driver git c770b412 sha256:cbe777417f59c7af3958b7adec09aef224f5b28131e56a94ca437a39d9981d90
gcp-pd-csi-driver-operator git c23b064f sha256:e25f8161cf44622e7ed707b763d0a62c7c08b564c55a78f1101c3ff5b2bed187
haproxy-router git a33f2b6a sha256:efa6bd7473888931c68afac1c4afb8fb511c043014da4470d5d74df1aba9f27f
ibm-cloud-controller-manager git ad8f7eb0 sha256:fdbd712a9f40a59d72ef856e9769d025adced12ea1cf4f7e5cc1531648dedb80
ibm-vpc-block-csi-driver git 3a3a62f7 sha256:c60d2a5dd444b64854f1bd5b7f8d71a5ef1425b4c361eb18889f0186880d5169
ibm-vpc-block-csi-driver-operator git 8443d86b sha256:d33e55a9ab9cb11aa8016fca423a4912dfb30fa3a687e3aaaa7c542103934299
ironic-agent git f5f742d8 sha256:66dffb8443f13efd61c89568db54bf88922c91b750599e28c3f28e0e6d924953
ironic-machine-os-downloader git b698ea3e sha256:256a5c4bd4dcebd5515cbe2c518eba10c1da830eb9c2a051ea437b44aab85f80
keepalived-ipfailover git e3879e9e sha256:41f0cd9a97feeeccf7f2e0a133d7c58fc078445be1a259be7ae3c81befa1bb87
kube-state-metrics git 462e63f6 sha256:42ad89ee5f2c4de8bc53a1969b221996a040190c8cf1410336ecf3e1cb115a5b
kube-storage-version-migrator git 34fafc04 sha256:25607b564b8afb8fa209b3816aa381af9814b8fa042615ece457b046ae0e82fe
kubevirt-cloud-controller-manager git 3f4542ec sha256:2e97cc416a6407c84812a864825be641fef043b98b16f98565cf1591d3355dd2
kubevirt-csi-driver git 02f9a921 sha256:85a64094070bc3073d622dc5f90e5669e1432dd20c1dc001e2a8625188d6680c
libvirt-machine-controllers git a336f0b5 sha256:b8593f15f24999578bb5d034f5e47f58f18629bb36bd35404302a30fc074c26d
machine-image-customization-controller git 74bee374 sha256:2de470d15e0d384790e471de73b1f7c8a2dd28b1d49fb922f982e70ba5e847b4
machine-os-images git 9e76dac7 sha256:88ecde275b0541696abe36acd7b540258ea0f9c2b28a43da73ec91c3966202e2
metallb-frr git 377d02f9 sha256:968a62580f5051f1140337f9e937687dbf0adca55ea15dabf9a3eb9e1bce83c1
multus-admission-controller git 076f0caa sha256:d40e19cad341164c371f28d8b1e892eb2f1bd86977c0658b3f9aa56986bb3535
multus-cni git b8d8d5c0 sha256:a731c7b86ad1891271fbab9200f669ee5b0413365a41fa663c76e1297e4ccf1a
multus-cni-microshift git b8d8d5c0 sha256:97fad68b21bc4929cef3a09ab05900448817358b4945bae96bb51ee6a38685c7
multus-networkpolicy git 7d01ea1c sha256:97397fa57403f256e0ee93fda35a3beb537b658dc04991c405050ccbfd55b607
multus-route-override-cni git 391c1b03 sha256:2f6ae60e730bb5b035e16dc8b9d050eaf46e697bd720cdc7bb98735da8f65385
network-interface-bond-cni git 8630f336 sha256:1b91df6834efbc0e893cc6d88802ba1ee4ebe7268b2a395443e9dfe24184e4f3
network-metrics-daemon git ddb486ae sha256:e0e430e2e3e43286a26de357f9a53491d7538df8618f924ca9da64172c3fa9c3
network-tools git 8e170b4f sha256:20f627a4e0fa709842f50b17e60c965c9d61e1dc0d3e5e164d73f7361bc36285
nutanix-cloud-controller-manager git c9f6cd1f sha256:33d60cf73c2b87d669b04bcf942bb95a280077311aa14c668be390aaef0cb1b4
nutanix-machine-controllers git 68aa2bbf sha256:eac176a9941e341760ed752a57d31f1ab27168378938831af3a96c99eb99176c
openshift-state-metrics git 1e963eb5 sha256:7d5546a11ab6ec16a645bdc574928f4ea0958f491cf1ba85c4b3089812bca7ca
openstack-cinder-csi-driver-operator git f89b6dbc sha256:3398add0dc487f265be7e2486fe0c4b4c21252d3f42cc812b0ffd002e73d6358
openstack-machine-api-provider git 68971874 sha256:2ebf8cd2189bca8deeb5423c991af8885d4d3176617bddd80ab9a5eb14a91bf8
operator-marketplace git 51f871a5 sha256:3d84947768e6241559aeb45499044a5113d4abb10c6d033c0740db56a4c71550
ovirt-csi-driver git 1db726a9 sha256:c6f6a2ae70a7fd1759722bf6058d76319185da2294754429bf7b5dadca3fb6c7
ovirt-csi-driver-operator git 0feae256 sha256:31549718442db9d16168890969032cd2e36272ffffd746eba505bcbfdd4bc634
ovirt-machine-controllers git abb91c84 sha256:4bdae3f2caf4ca9911b80bb5db1fdc3d991d0d62a3c1effcd21f8d115e8f5ad9
powervs-block-csi-driver git aaa6afa9 sha256:4dddf0936b130e6852d8660d9c948585703c6a1e5d99d7d83af05ba7e2301d84
powervs-block-csi-driver-operator git f6f037c5 sha256:2fc28c5c5db8eb7b280660854fe5d9579df6cd5b7fbcf12e77d0450495063ff8
powervs-cloud-controller-manager git bd3d72e5 sha256:085b25bcb00c0afd0a95ac97fe901440d8fea275f9c4b30900044be7906af60b
powervs-machine-controllers git fe7a877c sha256:f9b760ba1e67e0544fea6493b79c5b08bed512057831028c72c8eafcdd92c423
prom-label-proxy git d80e9044 sha256:0025b1710de59fe8c6a2c6ee0473ced15b3746743c51f2c863141987964dc96e
prometheus-alertmanager git d7c1a7c6 sha256:077b1b2ce6912f013d74a42947d313e726d218a55ec86fef660a67f6eb9e554e
prometheus-node-exporter git d88fd69b sha256:97364c7937ef7a71fde5462da13f2e92dc84505b69bfdbf1013a341808d8a1ed
rhel-coreos sha256:76a2228a3895327f6f63d3150f01ff15eab0d4490b123af6de33efe2421390cc
rhel-coreos-extensions sha256:054f7656147264be998a11c9d14e4b8e96d9098818502462a50ae0c546a88d1c
route-controller-manager git a47f6be3 sha256:edeacbe672db8b01c4d6014da7696ca1b66f43faf33459b6ce7e4c6dab8c46fd
service-ca-operator git 1f7d6472 sha256:c10265fb83ebd99daa8a9913907c16cd6d48992482c1b7923a1b845586c453b9
telemeter git e2b25245 sha256:9d301ff228a0cc1d54dc80c652061990363714b96965d941633965b34dbc7ac3
thanos git 5b567365 sha256:e0885fd15ae5d1ae14d818a1796f3c86f4e7856399d842c2f82d2d7627050121
vsphere-cluster-api-controllers git 1661cc3f sha256:d06e18213dfaa8821a0c31c9a1387b71af089d06a63efd23b94ccc12ed8a3042
vsphere-problem-detector git cd0df71f sha256:38a98087ecaa1611f04ab1dc9c46c983d49d42efbd9c9689de96b8bca677516d

agent-installer-api-server

OCPBUGS-48390: Bump moby from v26.0.0 to v27.2.1 (#7188) #7188
MGMT-19537: Bump golang.org/x/net to 0.33.0 (#7129) #7129
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-47493: MGMT-19537: Bump golang.org/x/net to 0.33.0 (#989) #989
OCPBUGS-44904: Rhcos fails to reboot for skip mco reboot on s390x (#942) #942
Full changelog

agent-installer-node-agent

MGMT-19537: Bump golang.org/x/net to 0.33.0 (#873) #873
Full changelog

aws-cluster-api-controllers

OCPBUGS-43921: OSD-25934: Only tag NetworkInterfaces in RunInstances if IAM Allows It #528
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator

OCPBUGS-46512: remove EFS driver metrics #350
OCPBUGS-44974: Set separate secrets for file and disk config on HyperShift #331
OCPBUGS-42949: add tag matching to Azure File storage class #291
OCPBUGS-43789: add ability to control kube rbac proxy container image… #310
Full changelog

aws-machine-controllers

OCPBUGS-45186: fix Associate*IpAddress flag when launch EC2 #118
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-46039: Prevent panic when informer receives cache.DeletedFinalStateUnknown #132
Full changelog

azure-kms-encryption-provider

OCPBUGS-34277: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.17 #7
Full changelog

baremetal-cluster-api-controllers

OCPBUGS-47049: Bump x/net to 0.33.0 #32
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-41300: Azure: Update SecurityType passed in at Image creation #9409
OCPBUGS-49362: [Nutanix] Installation failed with timeout when uploading images to PC #9406
OCPBUGS-48645: azure: use separate /var to avoid growfs timeouts #9381
OCPBUGS-45340: move GCP zone filtering client-side #9264
OCPBUGS-48257: remove the types which failed by RHEL-59521 and add the new gpu vm type #9354
OCPBUGS-45813: Remove unused variable from ASH arm template 06_workers.json #9285
OCPBUGS-48359: Allow more time for Service Account Creation #9362
OCPBUGS-45344: support additionalNTPSources in node-joiner tool #9265
OCPBUGS-48119: Always set AllowCrossTenantReplication parameter to false #9346
OCPBUGS-46432: Power VS: Create region-zone-sysType hierarchy #9319
OCPBUGS-46360: aws: add ec2:AllocateAddress perm requirement. #9313
no-jira: Collect bootstrap logs when control plane provisioning fails #9308
OCPBUGS-45726: IBMCloud: Add service overrides #9267
OCPBUGS-42117: Remove destroy search for regional target tcp proxies #9025
OCPBUGS-45484: PowerVS: Listen to machineNetwork #9271
OCPBUGS-44848: aws: user right perm for untagging BYO IAM profiles #9228
OCPBUGS-45276: Bump Azure Machine Timeout #9257
ARO-12457: Include bootstrap docker config file in go module #9258
OCPBUGS-43047: fix slice init length #9089
OCPBUGS-43800: pkg/asset/installconfig/azure: send full certifcate chain #9140
CORS-3753: Allow mocking of the Azure client everywhere #9219
OCPBUGS-44611: [release-4.17] capi/aws: set Node Port Service CIDR override #9209
OCPBUGS-44230: Add C4A instance types #9181
OCPBUGS-44231: [release-4.17] capi/aws: bump provider for LB DNS lookup fix #9179
OCPBUGS-44261: Ensure rendezvousIP is checked against host IP #9184
OCPBUGS-43972: Cherrypick oci ccm fix to 4.17 #9152
OCPBUGS-44247: PowerVS: Update 4.17 CAPI ibmcloud to 9b077049 #9182
OCPBUGS-41642: vendor: Update openshift/api to pick up v4.17 capability sets #9013
OCPBUGS-44226: PowerVS: Fix MissingSecurityGroupRules #9175
OCPBUGS-44227: PowerVS: Fix destroy persistent TG #9176
OCPBUGS-44228: PowerVS: Change CAPI verbosity level #9177
OCPBUGS-43846: add chrony.conf file when additional NTP sources are configured #9142
OCPBUGS-43735: Add C4 instance validation #9130
OCPBUGS-43897: Revendor assisted service external platform oci #9147
OCPBUGS-43786: Limit GCP API firewall rule for internal clusters #9138
OCPBUGS-43547: Power VS: Fix incorrect error handling for AddSecurityGroupRule #9112
OCPBUGS-43088: GCP Validate Disk and Instance Type #9091
OCPBUGS-43329: IBMCloud: Handle pagination for subnets #9096
Full changelog

baremetal-machine-controllers

OCPBUGS-46646: Bump x/net to 0.33.0 #225
Full changelog

baremetal-runtimecfg

OCPBUGS-48766: Extend haproxy-monitor fall time #340
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-45344: additional rbac policy rules #1937
OCPBUGS-45517: add retry in case of image pull error #1940
OCPBUGS-44508: Show node-joiner container logs when error occurs #1912
OCPBUGS-44830: Fix newapp unit test failure by using different image #1913
OCPBUGS-43696: Bump k8s dependencies to 1.30.5 #1902
OCPBUGS-41642: vendor: Update openshift/api to pick up the v4.17 capability set #1876
Full changelog

cloud-credential-operator

OCPBUGS-47071: golang.org/x/net v0.33.0 #804
OCPBUGS-45938: Add AWS region to aws-pod-identity-webhook #799
OCPBUGS-45006: Add retry to ccoctl gcp create functions #793
OCPBUGS-45001: github.com/golang-jwt/jwt/v4 v4.5.1 #787
OCPBUGS-44123: Add GCP pod identity webhook #776
OCPBUGS-43644: Only attempt timed token credentials on supported platforms. #773
OCPBUGS-43335: Update github.com/sirupsen/logrus v1.9.3 #766
Full changelog

cluster-authentication-operator

OCPBUGS-43657: audit: do not log requests to /livez #724
Full changelog

cluster-autoscaler

OCPBUGS-48606: UPSTREAM: <carry>: 🐛(metrics) Initialize metrics for autoscaler errors, scale events, and pod evictions #337
OCPBUGS-45147: [release-4.17] VPA: Update OWNERS file #324
Full changelog

cluster-autoscaler-operator

OCPBUGS-45929: set max soft bulk taint count to zero #337
Full changelog

cluster-capi-operator

OCPBUGS-48493: fix: always update clusteroperator status versions when differing #250
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-43389: update goimports targets #371
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-44047: relax validation on delete and if failureDomains not configured #330
Full changelog

cluster-image-registry-operator

OCPBUGS-43564: fix proxy config and leader election test flakes #1144
OCPBUGS-43350: pkg/storage/azure: also check for auth failure error code on deletion #1139
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-43657: audit: do not log requests to /livez #1758
OCPBUGS-34310: Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART for 4.17 #1738
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-46593: “gracefully” shutdown KSVM pod. #123
Full changelog

cluster-machine-approver

OCPBUGS-48155: Fix race condition in CO status controller test #266
OCPBUGS-46429: Filter CSRs by signerName #261
OCPBUGS-45918: Ensure trailing dots on DNS names do not block serving cert auth #256
OCPBUGS-45918: Client internal DNS checks should ignore trailing dot #250
Full changelog

cluster-monitoring-operator

OCPBUGS-44971: Add new metrics for OpenShift logging telemetry #2526
OCPBUGS-44003: fix(monitoring-plugin): disable emitting nginx version on error pages #2511
OCPBUGS-43690: chore: introduce a config parsing check via a strict unmarshaller for… #2494
OCPBUGS-43788: Add runbook url for TelemeterClientFailures #2507
OCPBUGS-43545: Fix api doc on Thanos Ruler default retention #2501
Full changelog

cluster-network-operator

OCPBUGS-44807: ovn-k, cudn: Add missing permissions to ovnkube-node #2575
OCPBUGS-43714: Skip including default crypto policies to avoid authby issue #2597
OCPBUGS-46146: Remove ip xfrm state when IPsec is disabled #2594
OCPBUGS-44415: Pass transit_switch_subnet options in ovnkube-node pod #2561
OCPBUGS-44807, SDN-4930, SDN-5297: OVN-Kubernetes node RBAC tightening #2568
OCPBUGS-44807, SDN-5297, SDN-5472: bindata, ovn-k: Add ClusterUserDefinedNetwork CRD and RBAC #2566
OCPBUGS-44807, SDN-4930, SDN-5297: ovn-k, udn: Update UserDefinedNetwork CRD #2551
OCPBUGS-44807, SDN-4930, SDN-5297: Adds UDN list/watch to ovnknode rbac #2540
OCPBUGS-44779, SDN-5436: Provide support for user owned IPsec machine configs #2564
OCPBUGS-44330: Add controlplane cli image envar for use with hypershift #2542
OCPBUGS-43343: OCPBUGS-42244: Exporting environment varialbe NODE_CNI for live migration #2536
OCPBUGS-43317: Use CNIConfDir for mounting directory to ovn-ipsec-host pod #2533
Full changelog

cluster-node-tuning-operator

use ROLE_WORKER_CNF environment variable to determine mcp name (#1290) #1290
Add missing Polarion test case id (#1288) #1288
e2e: tuned degraded test fix (#1259) #1259
OCPBUGS-48213: [release-4.17][manual] Adjust Workload Hints test cases based on Intel or AMD (#1277) #1277
PPC: correct EnableHardwareTuning flag value (#1271) #1271
e2e: add irdma to module_blacklist kernel args (#1266) #1266
OCPBUGS-45964: performanceprofile cpuset input validation (#1247) #1247
OCPBUGS-43664: Add vendor and architecture specific tuning options (#1191) #1191
OCPBUGS-44644: cmd: PPC: support tolerating heterogeneous core IDs (#1252) #1252
OCPBUGS-45264: Normalize cpu sets when rendering to Tuned profiles (#1238) (#1248) #1238
e2e: wait for node inspector deletion (#1205) #1205
Fixing empty tuned submodule when using Dockerfile (#1211) #1211
E2E: fix modify node selector to use lowercase (#1186) #1186
OCPBUGS-38900: Drop sched_migration_cost_ns setting (#1201) #1201
Make ocp-tuned-one-shot.service restart on-failure (#1187) #1187
Fix context deadlines in ExecCommandOnPod() (#1189) #1189
OCPBUGS-43566: CI: unblock (#1188) #1188
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-43657: audit: do not log requests to /livez #599
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-47770: Add team members to the OWNERS file #375
Full changelog

cluster-samples-operator

OCPBUGS-48786: add shannon and aroyoredhat as owners #595
Full changelog

cluster-storage-operator

OCPBUGS-44997: Fix PodStartupStorageOperationsFailing alert #543
OCPBUGS-43794: add ability to control kube rbac proxy container image on controlplane #529
Full changelog

cluster-version-operator

OCPBUGS-39558: Filter out shallowly UpdateEffectNone errors from a MultipleErrors message in the Failing condition #1114
OCPBUGS-45328: deps: bump golang.org/x/net to 0.31.0 #1117
OCPBUGS-43586: Upgradeable=False should not block a 4.(y+1).z to 4.(y+1).z’ retarget #1095
Full changelog

console

OCPBUGS-44220: disable flaking and change pre-condition test for knative e2e #14467
OCPBUGS-43751: Added token to proxy header #14430
OCPBUGS-48161: ERROR in search tool: Cannot read properties of undefined (reading ‘state’) #14667
OCPBUGS-48227: fix navigation from non-General User Preference tab to… #14674
OCPBUGS-41672: Update vendor imports to include all PatternFly components #14272
OCPBUGS-46344: OCP web console show pod status as Init:0/1 after using Native sidecars #14616
OCPBUGS-47497: Getting Oh no, something went wrong error when trying to install operator. #14645
OCPBUGS-43673: Disable GQL introspection #14640
OCPBUGS-45949: ReRun of Resolver based PipelineRuns fails from UI #14605
OCPBUGS-45954: Fixed capitalization in OpenShift Lightspeed #14607
OCPBUGS-45948: ImagePullSecret getting duplicated when editing DeploymentConfig in Form View #14604
OCPBUGS-45667: Do not pass CSV name to operand list page when an exen… #14591
OCPBUGS-46000: The description and name for GCP Pool ID is not consist #14611
OCPBUGS-42558: Plugins that use very old PF4 dropdown or menu components with grouped items have bullets and padding that needs to be removed. #14344
OCPBUGS-44656: update ConditionalUpdates release type #14505
OCPBUGS-43888: While accessing the node terminal from UI observed ‘Warning alert:Admission Webhook Warning` #14444
OCPBUGS-43441: fix table combination #14546
OCPBUGS-44169: use TaskRuns results.tekton.dev/record annotation to get the logs #14538
OCPBUGS-44873: Unable to remove finally tasks in pipeline builder mode #14527
OCPBUGS-42791: Add missing pipelines plugin name to known plugins #14377
OCPBUGS-44699: Add multiline support to template instantiation #14508
OCPBUGS-44183: Remove ClusterTask dependency in console from Pipelines 1.17 #14512
OCPBUGS-44764: Add IBM Block Storage CSI driver support for RWX #14517
OCPBUGS-43795: While upgrading the cluster from UI observed Warning alert:Admission Webhook Warning #14433
OCPBUGS-44722: include external labels so silenced alerts not displayed in notifications #14511
OCPBUGS-44358: BuildConfig form breaks on manually enter the Git URL #14478
OCPBUGS-43073: Telemetry userPreference results in empty nodes output to the DOM #14392
OCPBUGS-44587: Start last run do not work in buildConfig details page #14499
OCPBUGS-44586: Collapse/Expand Feature Added, Removal Option Removed in Version 4.16 #14498
OCPBUGS-44450: Don’t request user settings configmap if no user has been loaded. #14482
OCPBUGS-44479: conditionally display MachineConfig details page Confi… #14488
OCPBUGS-43878: Add flag to hide the pipelines-plugin pipeline builder extensions #14457
OCPBUGS-42824: remove axios as it is no longer in use #14381
OCPBUGS-42955: Enabling topology e2e tests on CI #14402
Full changelog

console-operator

OCPBUGS-45302: console/status: set initial value of Message field #943
OCPBUGS-46390: Dont disable console when authConfig type is set to None #951
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-43427: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.30 into release-4.17 #314
OCPBUGS-43427: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.30 into release-4.17 #302
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

OCPBUGS-34217: Updating ose-csi-driver-shared-resource-container image to be consistent with ART for 4.17 #188
OCPBUGS-44510: Updating ose-csi-driver-shared-resource-webhook-container image to be consistent with ART for 4.17 #233
Full changelog

docker-builder

OCPBUGS-33889: Updating openshift-enterprise-builder-container image to be consistent with ART for 4.17 #393
OCPBUGS-47768: Add team members to the OWNERS file #423
OCPBUGS-47712: skipping some unit tests to avoid failures as they are duplicate #421
Full changelog

etcd

NO-ISSUE: Add support for cachi2 based deps #297
Full changelog

gcp-machine-controllers

OCPBUGS-48064: Refactor exists() to handle gcp API change #105
OCPBUGS-46082: update a2 gpu detection logic to be dynamic #100
OCPBUGS-43738: Add c4a instance as arm type #95
Full changelog

hyperkube, pod

: OCPBUGS-46364: Fix grace period used for immediate evictions #2164
OCPBUGS-46002: Bump k8s api to 1.30.7 #2160
OCPBUGS-39318: UPSTREAM: 126994: Add required FieldManager for validatingadmissionpolicy e2e #2070
OCPBUGS-43820: UPSTREAM: <carry>: kubelet/cm: fix bug where kubelet restarts from missing cpuset cgroup #2126
OCPBUGS-44897: Backport format library to enable usage in 4.18 #2140
OCPBUGS-44512: Bump k8s api to 1.30.6 #2134
OCPBUGS-42427: UPSTREAM: 125398: Fix issue with scheduler failing on hostname mismatch #2097
Full changelog

hypershift

OCPBUGS-49638: fix overwriting PKI operator HCP conditions #5504
OCPBUGS-46440: Allow ARM64 arch deployment on Agent platform #5296
OCPBUGS-48170: fix disconnected via CLI #5465
OCPBUGS-38810: nodepoolcontroller: List() PerformanceProfile status per NodePool #4585
NO-JIRA: Update dependency mkdocs-mermaid2-plugin to v1.2.1 (release-4.17) #5428
NO-JIRA: Update dependency mkdocs-material to v9.5.50 (release-4.17) #5427
OCPBUGS-44927: Add multi-arch validation for HC/NodePool compatibility #5238
NO-JIRA: [release-4.17] Bump golang.org/x/crypto and golang.org/x/net #5368
NO-JIRA: Update Konflux references (release-4.17) #5329
OCPBUGS-46412: Separate CPO containerfiles #5285
NO-JIRA: chore(deps): update konflux references (release-4.17) #5289
NO-JIRA: chore(deps): update dependency mkdocs to v1.6.1 (release-4.17) #5290
OCPBUGS-44114: Add external kas address to no proxy skip list #5028
NO-JIRA: Red Hat Konflux update hypershift-release-mce-28 #5174
NO-JIRA: chore(deps): update konflux references (release-4.17) #5249
OCPBUGS-44630: Use ingress role in private link controller for DNS operations #5142
NO-JIRA: chore(deps): update konflux references (release-4.17) #5183
NO-JIRA: chore(deps): update konflux references (release-4.17) #5154
NO-JIRA: chore(deps): update konflux references (release-4.17) #5144
OCPBUGS-44184: dont use registryOverrides on kube rbac proxy image be… #5033
NO-JIRA: chore(deps): update konflux references (release-4.17) #5113
OCPBUGS-43929: Return the right tagReference on Catalogs ImageStream #4993
OCPBUGS-44276: Configure OAuth https proxy to dial cloud endpoints directly #5070
OCPBUGS-44268: Fix order rendering HCP objects #5064
NO-JIRA: Update Konflux references (release-4.17) #5098
chore(deps): update konflux references (release-4.17) #5075
HOSTEDCP-2046: CPO 4.17 tekton builds #5006
NO-JIRA: chore(deps): update konflux references (release-4.17) #5053
NO-JIRA: Update Konflux references to fedcfe0 (release-4.17) #5041
chore(deps): update konflux references (release-4.17) #5023
chore(deps): update konflux references to f53fe54 (release-4.17) #5018
NO-JIRA: Update Konflux references (release-4.17) #5009
OCPBUGS-42879: Add network policies for konnectivity server and ignition server proxy #4865
NO-JIRA: bump catalog operators version #4992
NO-JIRA: chore(deps): update konflux references (release-4.17) #4972
OCPBUGS-43746: add ValidIDPConfiguration condition to report IDP config issues #4969
NO-JIRA: chore(deps): update konflux references (release-4.17) #4958
OCPBUGS-43464: Pass feature flags to clusterpolicy controller #4928
NO-JIRA: chore(deps): update konflux references (release-4.17) #4931
OCPBUGS-42704: Run 2 replicas of active/passive HA components #4843
OCPBUGS-43316: Enforce privileged PSA by default #4834
NO-JIRA: chore(deps): update konflux references (release-4.17) #4921
OCPBUGS-43374: release-4.17 openstack/e2e: re-work nodepool tests #4914
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-44880: Fetch service instance id from spec of IBMPowerVSCluster object while setting provider id #94
OCPBUGS-37369: UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.17 #86
Full changelog

ibmcloud-machine-controllers

OCPBUGS-37379: Bump dependency for CVE #49
Full changelog

insights-operator

AUTH-482: set required-scc for dataGahtering jobs & pods #1049
Full changelog

ironic

OCPBUGS-48149: Bump jinja2 to 3.1.5 #622
OCPBUGS-43955, OCPBUGS-43963: Bump python-waitress [4.17] #603
Full changelog

ironic-static-ip-manager

OCPBUGS-49350: Fix subnet validation #47
Full changelog

kube-metrics-server

: OCPBUGS-46491: Disable HTTP2 #40
Full changelog

kube-proxy

OCPBUGS-43807: Revendor to a patched k/k with our prefer-local-DNS hack #640
Full changelog

kube-rbac-proxy

OCPBUGS-42697: protobuf bump [4.17] #112
Full changelog

machine-api-operator

OCPBUGS-43851: vSphere klog initialization preventing verbose log messages #1302
Full changelog

machine-config-operator

OCPBUGS-47475: Pausing Master MCP results in Alerts #4769
OCPBUGS-47802: OCPBUGS-47801: trying to wait for sub-controllers #4775
OCPBUGS-38292: controller: default to runc when upgrading clusters from 4.17 to 4.18 #4715
OCPBUGS-45918: Remove trailing periods from AWS provided hostnames #4738
OCPBUGS-39223: Do not enable on-prem-resolv-prepender.path for UPI #4572
OCPBUGS-38292: Revert “controller: default to runc when upgrading clusters from 4.17 to 4.18” #4716
OCPBUGS-38292: controller: default to runc when upgrading clusters from 4.17 to 4.18 #4635
OCPBUGS-44561: Disable tx chksum for driver IDPF on GCP C3/C4 #4701
MCO-1343: Backport Telemetry to 4.17 #4650
OCPBUGS-43917: Disable ESP offload for OVS attached interfaces #4667
OCPBUGS-43719: Soften haproxy timeout for kubeapi probe #4657
OCPBUGS-42577: openstack: fix non-old systemd compatible unit #4620
OCPBUGS-42108: Do not use ‘restart’ for ‘oneshot’ service #4615
OCPBUGS-42979: Regenerate the rendered MC in use when deleted #4634
Full changelog

monitoring-plugin

OCPBUGS-44394: remove unused package and upgrade vulnerable dependency #271
OCPBUGS-43238: upgrade dynamic plugin sdk to remove vulnerable dependencies 4.17 #216
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-48745: [Release-4.17]Kubeconfig loop #334
Full changelog

must-gather

OCPBUGS-48068: Update owners #452
OCPBUGS-46281: Support gathering IPsec data #467
OCPBUGS-42835: Removes reference to gather_multus_logs in 4.17 #459
OCPBUGS-42964: Collect etcd object count #453
Full changelog

networking-console-plugin

OCPBUGS-45791: fix path-to-regex CVE #196
OCPBUGS-48704: fix service name #188
OCPBUGS-48267: UI crash accessing a Service in pending state #168
OCPBUGS-46553: fix ports as number instead of strings #169
OCPBUGS-45876: Bump nanoid from 3.3.7 to 3.3.8 #172
OCPBUGS-44140: Bump dompurify from 2.4.9 to 2.5.8 #166
OCPBUGS-44397: OCPBUGS-44679: upgrade packages for cve #141
OCPBUGS-44650: Routes list page shows correct status and location #139
OCPBUGS-44648: Add Route Filter in route list #138
OCPBUGS-43037: hide routes metrics non-admin users #129
OCPBUGS-43065: Routes list sort by status #131
Full changelog

oauth-apiserver

OCPBUGS-46044: Update dependencies to address CVE-2024-24786 #127
Full changelog

oauth-proxy

OCPBUGS-46659: Fix oauth-proxy e2e-component tests #303
Full changelog

oauth-server

OCPBUGS-44118: escape spaces in oauth callback path #167
OCPBUGS-43587: Fix login path for go1.22 mux pattern matching #162
Full changelog

oc-mirror

fixes CVEs upgrading go-git dependency (#1033) #1033
OCPBUGS-47453: Use one of the newer sha256 keys to verify release signatures (#1000) (#1024) #1000
changes the owners file (#1017) #1017
OCPBUGS-48513: e2e: use same version of crane as in go.mod (#1020) #1020
Full changelog

openshift-apiserver

OCPBUGS-49399: move on to the next digest/tag during failures #487
OCPBUGS-42752: Pass expected type to deploymentconfig/scale object validation. #457
Full changelog

openshift-controller-manager

OCPBUGS-47769: Add team members to the OWNERS file #357
OCPBUGS-44093: user system:serviceaccount:openshift-infra:serviceaccount-pull-secrets-controller in ns/openshift-infra must not produce too many applies #350
NO-JIRA: cleanup root and app OWNERS #346
Full changelog

openstack-cluster-api-controllers

OCPBUGS-44455: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.17 #342
OCPBUGS-44959: Makefile changes for merge-bot #340
OCPBUGS-44455: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.17 #329
OCPBUGS-43584: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.17 #323
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-48695: Fix excessive catalog source snapshots cause severe performance regression #956
OCPBUGS-45845: Fix concurrent namespace resolution #944
OCPBUGS-46929, OCPBUGS-46936, OCPBUGS-47316: x/net bump to v0.34.0 [release-4.17] #938
OCPBUGS-46598: catalog-operator: Delete Pods that were evicted (#3459) #922
OCPBUGS-46054: CRD upgrade existing CR validation fix #913
OCPBUGS-44760: fix: call TokenRequest API when service account token secret is missing #898
OCPBUGS-43965: Return an error when the IP status cannot be updated #885
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-47506: Let OVN-northd bind remote ports #2404
OCPBUGS-45953: bump OVS version to 3.4.0-18 #2393
OCPBUGS-45312: pin libreswan to 4.6-3.el9_0.3 #2384
OCPBUGS-45339: Dockerfile: Update OVN to the 24.03.2-32.el9fdp minor release. #2376
OCPBUGS-43454: Ignore cluster manager topology not managed errors for localnet with no subnets #2362
OCPBUGS-44303: Add hybird overlay pod IPs to the namespace address_set #2340
OCPBUGS-42931: Add static route to the hairpin masquerade IPs to pod #2315
OCPBUGS-39200: Dockerfile: Bump OVS to 3.4.0-1 #2287
OCPBUGS-42940: Fix egress gateway pod cleanup for remote zone pods. #2316
Full changelog

prometheus

OCPBUGS-43667: fix(discovery): Handle cache.DeletedFinalStateUnknown in node informers’ DeleteFunc #230
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-48069: fix: validate smtp smarthost and smtp from fields #323
Full changelog

tests

OCPBUGS-49411: Add a monitor test to detect concurrent installer pod or static pod #29487
OCPBUGS-48634: Revert “[release-4.17] OCPBUGS-48459, SDN-4930: ovn-k, udn crd e2e: Fix status report consumer assertion” #29453
OCPBUGS-48459, SDN-4930: ovn-k, udn crd e2e: Fix status report consumer assertion #29301
OCPBUGS-48345: Add team members to the OWNERS file for PR approvals #29430
OCPBUGS-48188: Fixing build s2i ruby test data inline with latest ruby version(>=3.0) #29409
: OCPBUGS-48093: fix unit test for compare against string #29405
OCPBUGS-44190: Fix UnexpectedNodeNotReady and UnexpectedNodeUnreachable #29306
OCPBUGS-43576, SDN-4930: Don’t modify pod routes in tests #29250
OCPBUGS-43576, SDN-4930: Set startup probe for UDN tests #29244
OCPBUGS-43576, SDN-4930: UserDefinedPrimaryNetworks: curl the KAPI IP through eth0 #29241
OCPBUGS-44795: fix: adding oslat updates and outputting test results to the artifacts #29193
OCPBUGS-43576, SDN-4930: network_segmentation: allow multiple UDN status conditions #29259
OCPBUGS-44494: removing rteval from the realtime test suite #29194
OCPBUGS-44496: fix: adding in a SNO time override for AWS Metal #29192
OCPBUGS-44062: Adjust createDNSPod() to support hypershift dual-stack test #29254
OCPBUGS-44045: Ignore infra nodes on tap cni tests #29251
OCPBUGS-43569: feat: update to use pullspec image #29207
OCPBUGS-43576: Porting testing for netConfig and UDN and CIDR overlapping tests from upstream #29181
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-43432: update check-fmt goimports command #78
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-43705: redact sensitive information when logging VCenter config #133
Full changelog

vsphere-csi-driver-operator

OCPBUGS-43778: Fix panic on nil infrastructure Spec.PlatformSpec.VSphere #264
OCPBUGS-42327: Fix the config loading warning #259
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github