4.17.44

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.17.44-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded periodic-ci-openshift-release-master-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.17-e2e-aws-ovn-serial
- aws-ovn-upgrade-4.17-micro Succeeded periodic-ci-openshift-release-master-ci-4.17-e2e-aws-ovn-upgrade
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.17-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.17-micro Succeeded periodic-ci-openshift-release-master-ci-4.17-e2e-azure-ovn-upgrade
- fips-scan Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.17-fips-payload-scan
- gcp-ovn-rt-upgrade-4.17-minor Succeeded periodic-ci-openshift-release-master-ci-4.17-upgrade-from-stable-4.16-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.17 Succeeded periodic-ci-openshift-hypershift-release-4.17-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.17-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.17-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.16.11, 4.16.12, 4.16.14, 4.16.15, 4.16.16, 4.16.17, 4.16.18, 4.16.19, 4.16.20, 4.16.21, 4.16.23, 4.16.24, 4.16.25, 4.16.26, 4.16.27, 4.16.28, 4.16.29, 4.16.30, 4.16.33, 4.16.34, 4.16.35, 4.16.36, 4.16.37, 4.16.38, 4.16.39, 4.16.40, 4.16.41, 4.16.43, 4.16.44, 4.16.45, 4.16.46, 4.16.47, 4.16.48, 4.16.49, 4.17.10, 4.17.11, 4.17.12, 4.17.13, 4.17.14, 4.17.15, 4.17.16, 4.17.17, 4.17.18, 4.17.19, 4.17.20, 4.17.21, 4.17.22, 4.17.23, 4.17.24, 4.17.26, 4.17.27, 4.17.28, 4.17.29, 4.17.3, 4.17.30, 4.17.31, 4.17.32, 4.17.33, 4.17.34, 4.17.35, 4.17.37, 4.17.38, 4.17.39, 4.17.4, 4.17.40, 4.17.5, 4.17.7, 4.17.8, 4.17.9

4.17.43 (changes) - S S S S S
4.17.42 (changes) - Success
4.17.41 (changes) - Failed
4.17.36 - Success
4.17.25 (changes) - Success
4.17.6 (changes) - Failed
4.17.2 (changes) - Failed
4.17.1 (changes) - Success
4.17.0 (changes) - Failed
4.16.52 (changes) - Success Success
4.16.51 (changes) - Failed
4.16.50 (changes) - Failed
4.16.42 (changes) - Failed
4.16.32 (changes) - Failed
4.16.13 (changes) - Success
4.16.10 (changes) - Success
4.16.9 (changes) - Failed
4.16.8 (changes) - Failed
4.16.0-0.nightly-2025-11-12-152857 (changes) - Success

Loading changelog, this may take a while ...

Changes from 4.17.36

Created: 2025-11-13 13:50:26 +0000 UTC

Image Digest: sha256:e3d5a7ccc804f95867a4fa9b9802739898be8814a429368521b12d7822de51a0

Components

Kubectl 1.30.5
Kubernetes 1.30.14
Kubernetes Tests 1.30.14
Red Hat Enterprise Linux CoreOS upgraded from 417.94.202507132309-0 to 417.94.202511121758-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
StreamingCollectionEncodingToJSON (0 tests)	Enabled (New)		Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
StreamingCollectionEncodingToProtobuf (0 tests)	Enabled (New)		Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Rebuilt images without code change

agent-installer-utils git 79b73e6a sha256:aee64a96996aa996ee3fa07646458739de5342769dafdc4be28e1da2b3a4a37d
apiserver-network-proxy git ea660559 sha256:32f5aa64db7d8ecef89975384e637e1cb3946e8f532d07d1161517c890ae1a8e
aws-cloud-controller-manager git 144bace6 sha256:c1d1778f208ca6c404320b6575073e67b57a70759cb3669d2930b2834d6e9a27
aws-ebs-csi-driver git 2bb5b316 sha256:f17f3472d01c87c74ed5c5198ecbef097601f4a6b9e48814bab12e402ec13931
aws-kms-encryption-provider git 9d401670 sha256:07ef9d4d550fe447f7a4d9add85ff81f3d0d7ba22c7991f1318e28c85632d1b4
aws-pod-identity-webhook git 80efc4ea sha256:c40c7ec955b395097a71c821382b6805e675f3304b5e1ac28c4387f9e78a3c99
azure-cloud-controller-manager git 626ecd1c sha256:9d4b1e9a9a7595537abf39740e8a6a3d0b8bd29ffb70768f33e3f137ec04f716
azure-cloud-node-manager git 626ecd1c sha256:21711314570f0504f9435f09de7801b45bc23f54a4bdb0e273957d2f4014bfbd
azure-cluster-api-controllers git d359bfe5 sha256:a2ddc31ddcfedb6713acc1de3218bee5cece239b24052ab632b2f8f89e6a943a
azure-disk-csi-driver git a544f30b sha256:dda6c2e26db0df7bc3cb1f1e6c35a7a9419c65e2e6e0c6c65c6cae42ed5ea5bd
azure-file-csi-driver git 9f4c38c2 sha256:314e84db24b2d92dfe95d79f7403ee1622109256ae08a042c3bc8a1143bb20af
azure-kms-encryption-provider git 190a0fab sha256:da19970200f1fea23a9e42924aa4cccc7984692ba5546b426e0c0866196c862e
azure-workload-identity-webhook git 6707f899 sha256:7e396f3208ffd16ad4dd1aafb3990e2850df22c7e96c7a505c7d098c821dd225
baremetal-cluster-api-controllers git 41b34248 sha256:c5b23a5e4cb9c5bce8e07c9fa3861e94d10e8d9d4d690ce6dd85b7b97ffa26f5
baremetal-machine-controllers git 6e7aa77e sha256:3e6c0a01be9f9f08d199db4bd159830ffa4392631048fd56fd00025eb894b8ec
baremetal-operator git e6e5d54a sha256:b595bec98b18b83c0ade348cf17d74fb83fc24d50d0337ecf0e65e57e259bfcb
cloud-network-config-controller git 225a27a5 sha256:91331a9f2a59e43f195e348a26c3af2401af6210e078be75fadba1cdf8c1de05
cluster-authentication-operator git f641a4c6 sha256:80b95bcb5092847af416ba7dae09154fb074fdec54addc3e82827b0f32dab3bf
cluster-autoscaler-operator git ea4a8878 sha256:f56b3b70bb7ea26021e73dd07ded9acce12f4f6bb89cad56994a9e41b5e331f6
cluster-bootstrap git 95dd9129 sha256:f58d8c7ebee99fe9b233d92492710543b5a0ed5ecad159d4caf40289a0f8c3a4
cluster-capi-controllers git 77ef4fc5 sha256:6e3685ad8046032dd6f72a9e38fa1c449936c142979647e6fe7e302906bab221
cluster-capi-operator git a2cdab1b sha256:1588c1cd24bdcbf04ba4467328f036aca5b3d092f208803d101e2cf32c4b76c5
cluster-config-operator git 361ceccc sha256:1b226ac5a1ec8795f0369c1d1986f7e32ca90e209ca0640bbe157729098124f7
cluster-control-plane-machine-set-operator git f7e01c2f sha256:01c0db58fa3c178cca7ca48fa21b9c54ba771b192007749044066702df84400e
cluster-csi-snapshot-controller-operator git ffba005b sha256:81a9c0e85fb72d79c800ec660053782b210176af212d8f5d0130fe15eda9055d
cluster-dns-operator git 81507f04 sha256:a160f9ac35871d72e058d200d5808ac78f21f6addb7452acb535a0deb65527bb
cluster-image-registry-operator git 790f6a59 sha256:cc149d8c42e205860e7a9f324f54eaab10b332a85eca52befb928318302b7466
cluster-ingress-operator git d95595b1 sha256:867f3022a83962d4f1906e205bf199e3eb3bde42a93bd5fcb8d29689414190de
cluster-kube-cluster-api-operator git aed5f6c7 sha256:b55cdb947c45fe50cc1390564112a9d52f7d4aadb35cf88cf1c996535fd3b2b0
cluster-kube-scheduler-operator git 98ca953b sha256:672ea1f80e300a848522ead7435596e9ef8115b3bee53aaa4462dc43b9c37af3
cluster-kube-storage-version-migrator-operator git ab40b611 sha256:f6c279a992022ab18707798dfc90cdf940a07ab20a8176fc87657f7d5aa2c97f
cluster-machine-approver git acc2380e sha256:4abd402b113bf434a5aa9eab25646e5a564a6ae7e2e2e8e81e9be3a9fcd8fd01
cluster-olm-operator git e31b7775 sha256:f3045b6cbf0b693ea431cb4c3a4165c4fa2069e055baee187af5330b17de142d
cluster-openshift-apiserver-operator git 2b2ba3be sha256:98e20543c98050a3f5361c97a855a38612058dd20fdead16c230ebd3f173a4a3
cluster-openshift-controller-manager-operator git b05a249d sha256:d4dd291e0e0a1dee580d411ba8221f3a89cf520dfc85459999210a764e4dfbd5
cluster-policy-controller git 7209e90d sha256:7796ab73917eddc61fde114558075ef5efc89efa13e7ace8d92164153dd57578
configmap-reloader git 62d56d6a sha256:16782049282ab88e1cf916df8cade9c58c7297bdb39a0df2da63353f8a338ae9
container-networking-plugins git 49a6faae sha256:bd23b39e4ce06258240847022ed8d17b23e7c98c511b143049a4d8d330cea1eb
containernetworking-plugins-microshift git 49a6faae sha256:d452dd21b4af3ac8d3b4e5f2fc69414dcf5c6362f1e83690c8409ce86f310da5
csi-driver-manila git 19b025be sha256:bb1450ac358e418d536cf5fc679295f45576c11ba014581b07c00ae874507f15
csi-driver-manila-operator git efc99a2a sha256:eb9fb4a394b19f18b2c0d1c68c9c959fd57907626a0a3594b4a32d38cd767ef2
csi-driver-nfs git 79885550 sha256:94b00429564433ce73363a6504924f8580e84ff7c322fed3e0cb1904012fb140
csi-driver-shared-resource git 66aee5b0 sha256:c1beba4b31cfd3591088ffad647f1c6388557f8469727ce6ca627a7b2713d923
csi-driver-shared-resource-operator git c095a1f2 sha256:3447d8f40beb6be88553c8a5cd19495e9ef1e6b568008d0807c86de0302ddbec
csi-driver-shared-resource-webhook git 66aee5b0 sha256:45b9f2e5c11270b1db34b3a63b54fdc1d0831235c8a1b2944549158f170e59a8
csi-external-attacher git c3fe8e2e sha256:0c7add0bc2a75f4ecf7148b8859da19d6fe80fd63ba83e43c5e0443bce699d5c
csi-external-provisioner git fe460e56 sha256:7f45266f6051c9555bdb2be557d30feaa6848b74d4e8e7895ec95c05e5174b17
csi-livenessprobe git e7d841dc sha256:f37f95f165dad9271237e24800d254cf6863977d5ae2045e68fd7d01d35ff1f1
docker-builder git 4611ac34 sha256:3d27f522baaa20534d9a42892fb977bf6a22105f618c8a8f0c01199ec339dd21
driver-toolkit git 859518f6 sha256:9a156f4524dea8121a7fba4e23c29cf9c7b31a846e0f79fa3986435fdf6e9ad4
egress-router-cni git 3193a756 sha256:2218d4bd33f428f84f53037f65a7764bc2c531cb0df8b5cbf998565d0d6a462e
etcd git 0d9e0a90 sha256:922a79afe9a68ff5c8181d86f80986aa100828b3c5f6a3007ba83e7aa9556d3a
gcp-cloud-controller-manager git 8ce997d7 sha256:e66985e6a3cc1e01cf12bbb3d363d7f78a63df5e8df56eae49824612cb3d28be
gcp-cluster-api-controllers git 9c561f2d sha256:17e20b0429d55d6ca7830437faca2574eae43d4322df435bc926e3731789c0ae
gcp-machine-controllers git 86a1d902 sha256:7d490534b46bf79deb1a22eaaaecc70d23b3060ed0fd9b46867bb592caadf399
gcp-pd-csi-driver git c770b412 sha256:0bf5c7ee6608936c43e9a36e9c053fbfef20a565a7ff35d8c35990c4a3420ea9
gcp-pd-csi-driver-operator git c23b064f sha256:80df8988c926d423451f1fba16c48cd6597c11491dc26c5c7e16442e93206f2e
gcp-workload-identity-federation-webhook git 08579e9f sha256:344eaac980de0a2f8caba438c864cd6fa5ec98e4dd641aa5e52d06966e9690bd
haproxy-router git 1e29d8cc sha256:00ebb51821e4a4acde4d9e4b42a662dffa6e50becb9392d05f71bc6e51136220
ibm-cloud-controller-manager git ad8f7eb0 sha256:6c8b5f10d9cf5dcd9991cb377ca845db8bf4c9954cfec5a290a372bc8ddd9270
ibmcloud-machine-controllers git 0b8dd7ab sha256:7a3495a04982e360212239203cd6de8b55cd193af73afde3a3c66ebd82c91f17
ironic git 391f57f8 sha256:3ecd1b75c371a3013a90790948b04116a624c02486803253fe92ec9a462d0985
ironic-agent git dfc31918 sha256:430bd634408f49f0e1680d21d68403cf805952c8fc0ecd21f9f86aa3b3e8123c
ironic-machine-os-downloader git 9e6596c3 sha256:173185619988933b3d3f06592c7d4c63a7373a6a76b691861e5bdaef58e3fa95
ironic-static-ip-manager git bc5b8a2c sha256:505bd9f95199700aafa0064c755c9cc1edffc34b14bff00b6c4ef69b34639326
keepalived-ipfailover git e3879e9e sha256:cd975059c1a1bc6532b5222c2d5b6af6e96d7687a8a2b817f7ab5aaac4f7515c
kube-metrics-server git 07f8cd9e sha256:5e306df9b91f7db64550e8b0a1326a7adc24b3d281b4136f4ddf968720e121f2
kube-proxy git dee082de sha256:f852fc18917de1bd6bddbf9c1d25a0c7d0826addc96337b9b314d6b7f2ade46c
kube-rbac-proxy git f708b5ec sha256:e32408b1392fb041a4a84413e4f64cc5fed8457b5046115a9f57a67930747aec
kube-state-metrics git 462e63f6 sha256:bf886caac6a1317c2fd64ba6a04d4d7ca796fa2807f4ec41ae7736944ce6dec5
kubevirt-csi-driver git 757a8894 sha256:b35a63e889dcbc2ab10aef750e4a382da347f4f9bb89fce9da6b91c38d38a5dc
libvirt-machine-controllers git a336f0b5 sha256:010e8fe9e61418f2969d8613e86e817ff74d6aca9a75d94926aa4566634f74df
machine-api-operator git 998cffed sha256:faf07af14649c86769e911414edbee57f710a69a95bb06eee9f9c828066dfeda
machine-image-customization-controller git 1a7239eb sha256:b10175d0ff628994334b08c39c6edf73cd3a75b1b25bbd0efa37fff4301049a3
machine-os-images git f85666be sha256:aa3143ac20fe122cb577cc4973638877b832e24cef6fce8be7498c6fddafa694
metallb-frr git c0182036 sha256:ca05f4c317c6ff0cff5411138364631e39c0f91bdc63feaec063159dba47cf0c
multus-networkpolicy git 4d0b1703 sha256:c8c89e5650389a16ac00e3c44e5605565016c5eccc713fa14f8a42bc9ea3df7b
multus-route-override-cni git 391c1b03 sha256:617d25a4f954631a481833aef5905947b25a2178768f525c0f2ea2b3d65ff08d
multus-whereabouts-ipam-cni git df78f643 sha256:e7b2b6adbe28c5c98d6f1eeaa81f749790ddcbb77a80bbcaf65bdfa0d8b3ad1e
must-gather git 2665354a sha256:5b7d8ec0d341e19d7016499242444b5d522ae690f5ae6166a0c8e9887ec33fe3
network-tools git e59e7b25 sha256:b9ae00f0373d35c65862c28062f6a10affb139614a233ef5470150e7c82cb819
nutanix-cloud-controller-manager git c9f6cd1f sha256:ee2e603f7363a29da845b10477896b4108702d7fd6fceeb5e0d6cc66ffc6f83c
nutanix-machine-controllers git a4fadcbc sha256:84f47cfab3218905ff386c667a8d9ffe10877c864eaddb4e9fa486d031029c49
olm-catalogd git c740e056 sha256:41f7a69e8ace12b873c564a671c44191fa7242abc6e3f3f3a4664a73172161f0
olm-operator-controller git e245e661 sha256:a90e66cc61615f1f7dd220b9f2c69f2eb0305a3afbeb98d32a2b8876672e5dd3
openshift-state-metrics git adf64920 sha256:3e5892f6516ffca5395f7b4a4a8ec10fae3207fcca7b4e91414d410fa9ccd881
openstack-cinder-csi-driver git 19b025be sha256:c1f31acf6ec9c6ac20ecd11d559c234c9a71b4ae8bcbbdcc73157d06a473e383
openstack-cinder-csi-driver-operator git f89b6dbc sha256:da37eb965e9e88c0147b30a676df4488baa5cff9da2f19fdcbda706d8888bb9c
openstack-cloud-controller-manager git 19b025be sha256:0b840c919e4c6e2e3980ed1c3341cc37b2e23d809c803e448986225475a59d41
openstack-cluster-api-controllers git 5593c5f7 sha256:af47842740de30f32e076b4339a932945e55e862a4afd1a00888eb2480c785eb
openstack-machine-api-provider git 68971874 sha256:abba97b92e980a0c272840f7db1de5bcdc10d43b6fe0c8254cd09e85131213e0
ovirt-csi-driver git 1db726a9 sha256:bc0b281a4680656190d8a5ba54020dfbf5846834a3cb88077044ab52af718f72
ovirt-csi-driver-operator git 0feae256 sha256:0f91ebc196de0e1a01b8ff7cf6a64c223d2a652f012c97119b19bace0a303d0a
powervs-block-csi-driver git aaa6afa9 sha256:3ac22f0bddd359c0016177b01b6000c5994dccbf9f830cf683c696fe918bbc59
powervs-block-csi-driver-operator git f6f037c5 sha256:4312e08bf12f4611296497d05b987fee498b13a52166edb54127707576598438
powervs-cloud-controller-manager git bd3d72e5 sha256:e4a6389e86cb9011170ac5d85e73193cbea61671e4593df73a7f41644bb7137f
prom-label-proxy git c84c4898 sha256:d927e614b66aa17576302cee0b2ed5cb4d07c2c89167dbb91697dd2cd16c9ed5
prometheus-alertmanager git d7a98144 sha256:4a80dd5e5e432a45a24977f352cc6fe5805c3f24d6e963504af25afd20f09b0c
prometheus-node-exporter git 8f095361 sha256:480bb5f728ce5378464e1a7bdd7798fa72eb17b154684bef51713a3e024563f7
rhel-coreos sha256:f312e338cceb367dd913b21e3faffc2da681a04d15e36b6c996f386e216a7437
rhel-coreos-extensions sha256:6e615a6d4f5759a33bc7a90038ac7688273efc66b254bb898f3e4fc7e1ffcee6
route-controller-manager git 02bbf80a sha256:e267f21f7fddfd2e3076f19fb5d6d9b7a0887701a14656cf3b09efe9bcbed8f1
service-ca-operator git 6ce6cceb sha256:34da1e553bbe681a6968136b47c40dae48577f9f2878408611692a4b0d0d6fdc
telemeter git 0238640e sha256:79f4462615f6d4b497a263de862bb3125441fd95e2336f38bc360e6da3c2ebad
thanos git 98c99371 sha256:9781cb70201659b45f25cfaa28b1c36e04187d61062de0a10848613610eebada
vsphere-cloud-controller-manager git 097d823b sha256:08b12c638d5630165ce1614ab97192cd69c8b1fc04c832800b0e2a5a569e0d0c
vsphere-csi-driver git 039ee368 sha256:4200a8240a324d9cd8af07ac192583ea79ce5a3538f773bbef696c51f1f284da
vsphere-csi-driver-operator git e1de36a2 sha256:302854f3400baa729a627ca8c592ac2ee2bd822efb931a78ccc32b5fbfc4a43d
vsphere-csi-driver-syncer git 039ee368 sha256:ed5370f2fb927567bf8efe54545f19f7036372e83abf7987b74e9f1969b1f81a

agent-installer-api-server

NO-ISSUE: pin gotestsum to v1.12.3 (#8017) #8017
OCPBUGS-58634, OCPBUGS-58639: Bump glog to v1.2.5 in release-4.17 (#7895) #7895
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-58649: Bump glog pkg to 1.2.4 (#1182) #1182
Full changelog

agent-installer-node-agent

OCPBUGS-58654, OCPBUGS-58659: Bump glog to v1.2.5 in release-4.17 (#1070) #1070
Full changelog

aws-cluster-api-controllers

OCPBUGS-61940: UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It #571
OCPBUGS-58669, OCPBUGS-58674: bump github.com/golang/glog to v1.2.5 #559
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator

OCPBUGS-64704: Use 127.0.0.1 for healtz http-endpoints #462
OCPBUGS-63557: Add RBAC ClusterRole and Binding for driver node #453
OCPBUGS-62974: Add withCABundleDaemonSetHook() to AWS EFS operator #449
OCPBUGS-60597: Bump library-go to fix assignment to nil map issue #422
OCPBUGS-60470: Backport stale conditions fix #416
Full changelog

aws-machine-controllers

OCPBUGS-63139: client: re-use a single file for building the session instead of randomly named files #145
Full changelog

azure-machine-controllers

OCPBUGS-63700: Support datadisks on Stack Hub #168
OCPBUGS-56168: [release-4.17] Update virtualmachines service to armcompute/v5 SDK #146
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-53236: Validation for API and Ingress VIPs when using user-managed load balancer #10047
OCPBUGS-62951: Update the RHCOS 4.17 bootimage metadata #10021
OCPBUGS-62054: Make swift containers removal not fatal for UPI. #9952
OCPBUGS-54599: Update the RHCOS 4.17 bootimage metadata #9902
Full changelog

baremetal-runtimecfg

OCPBUGS-60112: Re-add ENABLE_NODEIP_DEBUG env var #363
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-56734: Adding sos.conf file for default sos config into the tools image #2027
Full changelog

cloud-credential-operator

OCPBUGS-63549: ccoctl: add public-key-file flag to create-all #939
OCPBUGS-55128: snyk to ignore SNYK-GOLANG-GOLANGORGXNETHTML-9572088 #917
OCPBUGS-60972: ccoctl: aws to use proper issuer url on subsequent runs #908
OCPBUGS-58679: github.com/golang/glog v1.2.5 #892
Full changelog

cluster-autoscaler

OCPBUGS-60913: revert openshift replica fix #376
OCPBUGS-60608: fix checkpoint gc of unknown recommenders #371
OCPBUGS-59266: Fix cool down status condition to trigger scale down #362
Full changelog

cluster-baremetal-operator

OCPBUGS-63715: Always have a service for ironic-api port #519
OCPBUGS-63666: Allow provisioningIP when network disabled #518
OCPBUGS-61097: Remove webhookport (9447) as HostPort #505
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63167: ccm: disable unused secure-serving port and webhook #423
OCPBUGS-60211: Update service selector to match deployment label #406
OCPBUGS-60211: Add Service using common resource templating #407
Full changelog

cluster-config-api

NO-JIRA: Promote streaming list encoding to Default on Hypershift. #2567
CNTRLPLANE-1611: Add feature gates for StreamingCollectionEncoding #2538
Full changelog

cluster-etcd-operator

OCPBUGS-61337: Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace #1480
OCPBUGS-60220: add missing ports to svc and pod spec #1461
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-60398: Add missing service ports to apiserver service #1893
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-60249: Missing endpoint slices for open ports the operator uses #855
Full changelog

cluster-monitoring-operator

OCPBUGS-63489: Add mcd_local_unsupported_packages metric from MCO to telemetry 4.17 #2725
OCPBUGS-63123: test: remove image registry e2e tests #2715
OCPBUGS-61766: chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind #2672
OCPBUGS-60017: operator: increase wait time till degraded to max 4 times 5m #2634
Full changelog

cluster-network-operator

OCPBUGS-63154: Add drop flows for GARPs #2818
[Release 4.17] OCPBUGS-61765: Update CNO reviewers/approvers #2799
OCPBUGS-58066: [release-4.17]: Manual feature backport of cert rotation for whereabouts #2784
Full changelog

cluster-node-tuning-operator

OCPBUGS-63504: Do not cause kubelet failed dependency by ocp-tuned-one-shot.service #1418
Full changelog

cluster-samples-operator

OCPBUGS-63515: references to github.com/sclorg/django-ex.git now also refer to the branch #658
Full changelog

cluster-storage-operator

OCPBUGS-41160: Move metrics to vsphere driver #633
Full changelog

cluster-update-keys

NO-ISSUE: Updating ose-cluster-update-keys-container image to be consistent with ART for 4.17 #79
Full changelog

cluster-version-operator

OCPBUGS-58451: Failing=Unknown upon long CO updating #1212
Full changelog

console

OCPBUGS-64599: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15665
OCPBUGS-62631: /auth/error?error=missing_state&error_type=auth is showing blank page #15554
OCPBUGS-63212: switch to dev perspective for /dev-monitoring #15614
OCPBUGS-63397: fix bug where Roles list was displaying invalid data f… #15627
OCPBUGS-62282: Fix desync of console and variable namespace #15545
OCPBUGS-44154: bump dompurify to latest #15590
OCPBUGS-61737: Remove ancient X-XSS-Protection header #15494
OCPBUGS-54241: VolumeSnapshots are not displayed in OpenShift Web Console #15465
OCPBUGS-59747: OpenShift console PVC clone cannot use B as the unit #15324
NO-JIRA: Increase the timeout on the cypress test #15420
OCPBUGS-58365: change ‘/metrics/usage’ endpoint to ‘/api/metrics/usage’ #15271
OCPBUGS-59544: Secret key with binary file changes when edited via Console #15301
OCPBUGS-59784: Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image #15329
OCPBUGS-58337: Tolerate unknown fields in Infrastructur… #15236
OCPBUGS-59492: Cannot read properties of undefined (reading ‘node-role.kubernetes.io/master’) error while accessing node logs from console #15294
OCPBUGS-59879: add data-test attrs to console plugins … #15338
OCPBUGS-59510: Not able to launch terminal window from OCP web console due to console plugin conflicts #15297
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

OCPBUGS-60298: Update downloads deployment configuration to use master node selector #1033
Full changelog

coredns

OCPBUGS-62825: UPSTREAM: 7083 and 6836: Fix failing TestZoneExternalCNAMELookupWithProxy #155
Full changelog

csi-external-resizer

OCPBUGS-62466: Requeue PVC over PV creation #175
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-60449: UPSTREAM: 1238: Snapshot Controller startup should not LIST all volumesnapshots #184
Full changelog

csi-node-driver-registrar

OCPBUGS-63682: update log level verbosity to not clutter logs #90
Full changelog

docker-registry

OCPBUGS-60090: bump docker distribution to fix purgeuploads panic #440
Full changelog

hyperkube, pod

OCPBUGS-63460: UPSTREAM: <carry>: backporting fix for concurrent map iteration and write #2456 #2496
CNTRLPLANE-1611: Backport StreamingCollectionEncoding for JSON and protobuf #2486
OCPBUGS-61584: UPSTREAM: <carry>: Don’t retry storage calls with side effects. #2458
OCPBUGS-60552: [4.17] podresources: list: use active pods #2426
4.17: OCPBUGS-60998: scheduler: Improve CSILimits plugin accuracy by using VolumeAttachments #2434
Full changelog

hypershift

CNTRLPLANE-1903: Migrate 4.17 pipelines to use common pipeline #7215
OCPBUGS-63639: [release-4.17] fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries #7112
OCPBUGS-64604: Update DNS names for ovn-kubernetes cp metrics #7150
OCPBUGS-63370: fix: Make the hypershift CLI binary FIPS-compliant #7094
CNTRLPLANE-1425: feat(konflux): tag MCE HO images with latest #6838
OCPBUGS-57143: [release-4.17] HCP payload doesn’t respect multiple mirrors #6771
OCPBUGS-61290: Update KCM node monitor grace period #6760
OCPBUGS-61208: use common MCE konflux pipeline #6749
OCPBUGS-60149: [release-4.17] Always compress and encode payload in token secret for inplace upgrades #6740
OCPBUGS-61101: Use system trust bundle in CPO IDP https client #6735
OCPBUGS-60921: konflux for hcp-cli #6699
CNTRLPLANE-1204: HO MCE change to hermetic ta build #6653
CNTRLPLANE-1230: Move CPO pipeline to hermetic builds #6598
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-58740: bump github.com/golang/glog to version v1.2.4 #105
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-58435: [IBM VPC] set offlineExpansion to false in e2e test manifest #146
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-51823: CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork #121
Full changelog

insights-operator

OCPBUGS-63500: add missing permissions for replicasets and events #1165
And 4 elided commits (e.g. from squash or rebase merges)
Full changelog

kube-storage-version-migrator

NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-17). #226
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-34447: Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART for 4.17 #44
Full changelog

machine-config-operator

OCPBUGS-63154: [release-4.17] Networking: reset ovn-remote config and allow ovnkube controller to set it #5358
OCPBUGS-63540: Add control-plane label for master nodes on legacy clusters #5375
OCPBUGS-63364: Invalid architecture value found in annotation during 4.19 update #5368
OCPBUGS-63055: Recheck generatedByControllerVersion annotation prior to deleting a degraded MC #5346
OCPBUGS-62741: Add /etc/docker/certs.d to template #5335
OCPBUGS-62683: Add mcd_local_unsupported_packages recording rule #5327
OCPBUGS-60890: Race in configure-ovs.sh affects bonding interface configuration. #5267
OCPBUGS-61859: Override NMState service definition #5289
OCPBUGS-59930, OPNET-681: Support migration to NMState #5206
OCPBUGS-56752: Support NODEIP_HINT in IPI deployments too #5080
OCPBUGS-60704: operator: switch out VAP v1beta1 to v1 #5256
OCPBUGS-57084: scope MCD node listers to current node #5107
OCPBUGS-60239: Add workaround fix for static pod race #5231
Full changelog

monitoring-plugin

OU-1058: Don’t show TP button in non-administrator #637
OCPBUGS-62282: align dev and admin persective tab names #602
OCPBUGS-62282: add missing translation string #587
OCPBUGS-61891: feat: add alerting rules tab to dev console #538
OCPBUGS-59399: Fix “Export as CSV” #468
Full changelog

multus-admission-controller

OCPBUGS-58770: Update the github.com/golang/glog module to v1.2.4 #102
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-43391: Update net-attach-def client library to 1.7.5 for cri-o functionality [backport 4.17] #257
Full changelog

network-interface-bond-cni

OCPBUGS-59620: Bump github.com/containernetworking/plugins from to 1.7.1 #83
NO-JIRA: Add ci-operator file #82
Full changelog

network-metrics-daemon

OCPBUGS-58780: Bump github.com/golang/glog to v1.2.4 (#112) #112
OCPBUGS-60177: Replace e2e test image (#121) #121
Full changelog

networking-console-plugin

OCPBUGS-60180: Fix ingress details #265
OCPBUGS-60128: Fix requiremenets with no value #260
Full changelog

oauth-apiserver

OCPBUGS-61584: Bump openshift/kubernetes-apiserver for etcd retry patches. #143
Full changelog

oauth-proxy

OCPBUGS-61445: Update x/crypto to v0.31.0 #334
Full changelog

oauth-server

OCPBUGS-61584: Bump openshift/kubernetes-apiserver for etcd retry patches. #198
Full changelog

oc-mirror

Adding r4f4 and Prashanth684 as approvers and removing contributors who are not working with oc-mirror anymore. (#1269) #1269
Full changelog

openshift-apiserver

OCPBUGS-63392: Wire dry run option to Image API server operations #565
OCPBUGS-61584: Bump openshift/kubernetes-apiserver for etcd retry patches. #554
OCPBUGS-53382: Skip blocked registry check for registries with mirrors #500
OCPBUGS-58821: Fix image reference in TestImageStreamImportQuayIO #515
Full changelog

openshift-controller-manager

OCPBUGS-61199: legacy image pull secret rollback controller #413
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-57092: [release-4.17] e2e stability fixes #1081
OCPBUGS-60791: Add NetworkPolicy as a supported kind #1058
OCPBUGS-57428: reduce cache expiry frequency [release-4.19] #1021
OCPBUGS-59253: Reduce Frequency of Update Requests for Copied CSVs (#3597) #1036
Full changelog

operator-marketplace

OCPBUGS-62219: Remove Expect func so that the test case can use the retry logic #670
OCPBUGS-61036: Update memoryTarget on catalog source pods #663
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-64674: [release-4.17]: Configure sec nic EIPv6 address with NODAD and maximum lifetime #2843
OCPBUGS-63154: Fix EgressIP stale GARP post reboot + pod restart #2807
OCPBUGS-61749: [release-4.17] Fix dnsnameresolver address set #2796
OCPBUGS-60484: Update OWNERS file: Add Patryk/Martin as approvers #2717
OCPBUGS-59381: [release-4.17] Fix default network -> localnet #2667
Full changelog

powervs-machine-controllers

OCPBUGS-61204: Use OS_GIT_VERSION in Makefile when found (for Konflux builds) #126
Full changelog

prometheus

OCPBUGS-61766: chore: compute highestTimestamp at queryManager level #268
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-58408: Fix: One Alertmanager Config failing blocks all others. (#6585) #336
Full changelog

tests

OCPBUGS-64927: update telemtery limit for 4.17 e2e case #30472
OCPBUGS-64641: Migrate OCP-32383 to upstream #30455
OCPBUGS-63392: Backport pr 29834 to release-4.18 #30408
OCPBUGS-61162: images/tests: Remove rteval #30202
NO-JIRA: Update extended/networking OWNERS #30090
OCPBUGS-57324: Fix bearer token exposure in exit condition as well #29910
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-61652: Fix unit tests #71
Full changelog

vsphere-problem-detector

OCPBUGS-61755: Check for number of FailureDomain-s in GetVCenter() #190
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github