# 4.16.14

Created: 2024-09-19 13:00:37 +0000 UTC

Image Digest: `sha256:76eb80594e33fc9300a0f36e4402e5232681eddf948b995a8d1acfd2fc7d72f9`

Promoted from registry.ci.openshift.org/ocp-arm64/release-arm64:4.16.0-0.nightly-arm64-2024-09-18-232317


## Changes from 4.16.13

### Components

* Kubectl 1.29.7
* Kubernetes 1.29.8
* Kubernetes Tests 1.29.0
* Red Hat Enterprise Linux CoreOS upgraded from 416.94.202409092052-0 to 416.94.202409181502-0


### Rebuilt images without code change

* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [9ca7b58d](https://github.com/openshift/assisted-installer-agent/commit/9ca7b58d937c413f670a26c02435829b1fb3a196) `sha256:33516a841e32c04c6e4ec752143831098c9a72ede3f36c1ac0fced5326142c2e`
* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [9a6f6b14](https://github.com/openshift/cluster-node-tuning-operator/commit/9a6f6b14ab6d6142afc442e3a504b54d113b034e) `sha256:f75ae71d338ee4aba248799884d81aee02d9a1d5fe57a366e9ffa72390dfb2fc`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [1d5732f0](https://github.com/openshift/driver-toolkit/commit/1d5732f0209bb7d98661a53c66c5ac265272dce6) `sha256:31e5005e80d4f31e953e576306cf7c67257d1ea0e67f23df0becb17ff8c4d5c2`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [93b8b5fa](https://github.com/openshift/ironic-rhcos-downloader/commit/93b8b5fa33950cadd2310278b7c762ebe0057418) `sha256:b49ab7156282acd619e635f021393d97a9a8b31286a4f499cbbde025331acd1c`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [3cc97098](https://github.com/openshift/machine-os-images/commit/3cc97098ecb9870dcb571f1ed1e26e2f70ce9f8c) `sha256:7a3ef2d33e39f0ea8a24f7043d1b3ba75955f19e4915cd40d6f967e5dcb5280e`
* [network-tools](https://github.com/openshift/network-tools) git [39eca100](https://github.com/openshift/network-tools/commit/39eca100c0978fb59234e21bf549b130914616ac) `sha256:d4eef75db4b42fb328435312624fd481eae6a60b9741c7b1727a88f09e50f5e3`
* [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes) git [90d05916](https://github.com/openshift/ovn-kubernetes/commit/90d0591637753ab3d3b18535e506c47e91194da9) `sha256:ae723a979ca43a8b6508985c123246e4db095947678478aa3d70f22db3f54bc7`
* rhel-coreos `sha256:b96a8b74baa24fcd2328ac03525a5b07cbefc63b2294693476db16508bfc90e8`
* rhel-coreos-extensions `sha256:7204ebf4d75190a2c4be86e2983b83ee0936203b4adcb5b4a714317cfe185f95`
* [sdn](https://github.com/openshift/sdn) git [5b658c43](https://github.com/openshift/sdn/commit/5b658c433786797d0ac1b870db08346584794514) `sha256:328b91c8e3c8a8d341ff1f4876c19741b098cfbcef013d90767f771763a634c0`
* [tools](https://github.com/openshift/oc) git [c44c839b](https://github.com/openshift/oc/commit/c44c839bcb77d6d41229e2d35e45002fa144cf72) `sha256:8cf75ea8bd6d1f358c3d800cdaf427573ad3c56e3e5ae8099729812e3cad32a7`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/d56975695e809488e8c7a610ff07fac50eb452a1)

* [OCPBUGS-36577](https://issues.redhat.com/browse/OCPBUGS-36577): Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#6752) [#6752](https://github.com/openshift/assisted-service/pull/6752)
* [Full changelog](https://github.com/openshift/assisted-service/compare/6b26a25e2ae7c4eae4a0f3ee0cedbd16c29bab8a...d56975695e809488e8c7a610ff07fac50eb452a1)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/daa3384bd58be1cb8794d0afb93896a37f364277)

* [OCPBUGS-39287](https://issues.redhat.com/browse/OCPBUGS-39287): Fix var_files syntax to work on older version of ansible [#8936](https://github.com/openshift/installer/pull/8936)
* [OCPBUGS-41929](https://issues.redhat.com/browse/OCPBUGS-41929): Add AWS c7g,m7g,r8g to tested instance types [#9009](https://github.com/openshift/installer/pull/9009)
* [OCPBUGS-36855](https://issues.redhat.com/browse/OCPBUGS-36855): Openstack UPI - Reintroduce unique resource names. [#8724](https://github.com/openshift/installer/pull/8724)
* [OCPBUGS-39082](https://issues.redhat.com/browse/OCPBUGS-39082): incorrect folder gen, workaround govmomi vm folder path bug [#8912](https://github.com/openshift/installer/pull/8912)
* [OCPBUGS-39496](https://issues.redhat.com/browse/OCPBUGS-39496): capi/aws/byo-vpc/multi-cidr: fix group rules [#8953](https://github.com/openshift/installer/pull/8953)
* [Full changelog](https://github.com/openshift/installer/compare/acbd12cec5dc7ceb53b66e14c10775119abe5c26...daa3384bd58be1cb8794d0afb93896a37f364277)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/ae55a7053373827ad4b1aff6dceae5f077ce90e5)

* [OCPBUGS-39490](https://issues.redhat.com/browse/OCPBUGS-39490): Disallow fetching secrets from namespaces different from the host's one [#378](https://github.com/openshift/baremetal-operator/pull/378)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/25719d2e309bf82d4370cd8d5b2114e8fdc28bde...ae55a7053373827ad4b1aff6dceae5f077ce90e5)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/9d2162f45590dd0ed0a228b79ec036d6d44a7208)

* Revert "[release-4.16]  OCPBUGS-41903: pkg/operator/azurepathfixcontroller: do not sync on non-azure storage" [#1119](https://github.com/openshift/cluster-image-registry-operator/pull/1119)
* [OCPBUGS-41903](https://issues.redhat.com/browse/OCPBUGS-41903): pkg/operator/azurepathfixcontroller: do not sync on non-azure storage [#1115](https://github.com/openshift/cluster-image-registry-operator/pull/1115)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/39690c160969cc9cb1640985ba2f15541b757261...9d2162f45590dd0ed0a228b79ec036d6d44a7208)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/db6bc3a38a7280653827b22b258378fc149d526c)

* [OCPBUGS-41910](https://issues.redhat.com/browse/OCPBUGS-41910): filter alerts sent to Telemeter [#2471](https://github.com/openshift/cluster-monitoring-operator/pull/2471)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/985956716e900c7da06a3e07097e7874689370cc...db6bc3a38a7280653827b22b258378fc149d526c)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/32a7e8919ab782d8ede30144c1354236c557a8ed)

* [OCPBUGS-37763](https://issues.redhat.com/browse/OCPBUGS-37763): Handle random crictl errors in iptables-alerter [#2452](https://github.com/openshift/cluster-network-operator/pull/2452)
* [OCPBUGS-41555](https://issues.redhat.com/browse/OCPBUGS-41555): HyperShift: do not use antiaffinity on single replica control planes [#2494](https://github.com/openshift/cluster-network-operator/pull/2494)
* [OCPBUGS-37937](https://issues.redhat.com/browse/OCPBUGS-37937): Add proxy env vars to onvkube-node [#2457](https://github.com/openshift/cluster-network-operator/pull/2457)
* [OCPBUGS-41607](https://issues.redhat.com/browse/OCPBUGS-41607): set required-scc for openshift workloads [#2496](https://github.com/openshift/cluster-network-operator/pull/2496)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/64bf8adae331c75a21e106f9fb537b2b6a9243a8...32a7e8919ab782d8ede30144c1354236c557a8ed)


### [console](https://github.com/openshift/console/tree/0b1616cb0c45e5fdb5792fb96ffce1f157705369)

* [OCPBUGS-34518](https://issues.redhat.com/browse/OCPBUGS-34518): Restore user toggle when authentification is disabled [#13902](https://github.com/openshift/console/pull/13902)
* [OCPBUGS-41619](https://issues.redhat.com/browse/OCPBUGS-41619): Use vCenterCluster value from CM as primary resource [#14268](https://github.com/openshift/console/pull/14268)
* [OCPBUGS-37046](https://issues.redhat.com/browse/OCPBUGS-37046): Fix TypeError: Cannot read properties of null (reading 'metadata') in Topology view [#14059](https://github.com/openshift/console/pull/14059)
* [OCPBUGS-38911](https://issues.redhat.com/browse/OCPBUGS-38911): Values entered into the Instantiate Template form are automatically cleared [#14187](https://github.com/openshift/console/pull/14187)
* [Full changelog](https://github.com/openshift/console/compare/41af3e685e3cc7aaa72da0fc807458d2ba2b057c...0b1616cb0c45e5fdb5792fb96ffce1f157705369)


### [docker-builder](https://github.com/openshift/builder/tree/5e57cc83b011f98b9cd10b9f97e9d5ae6e5ee6be)

* [OCPBUGS-30455](https://issues.redhat.com/browse/OCPBUGS-30455): bump google.golang.org/protobuf to 1.33.0 [#402](https://github.com/openshift/builder/pull/402)
* [Full changelog](https://github.com/openshift/builder/compare/fee4b5846e5b9eca535640070be38c0bdc33a136...5e57cc83b011f98b9cd10b9f97e9d5ae6e5ee6be)


### [hypershift](https://github.com/openshift/hypershift/tree/c68950b6a4d2cc96cb42fb16c26da94dafa48891)

* NO-JIRA: chore(deps): update golang docker tag to v1.23 (release-4.16) [#4729](https://github.com/openshift/hypershift/pull/4729)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.34 (release-4.16) [#4728](https://github.com/openshift/hypershift/pull/4728)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#4727](https://github.com/openshift/hypershift/pull/4727)
* [OCPBUGS-38058](https://issues.redhat.com/browse/OCPBUGS-38058): Add HTTP konnectivity proxy to OAuth server [#4496](https://github.com/openshift/hypershift/pull/4496)
* [HOSTEDCP-1955](https://issues.redhat.com/browse/HOSTEDCP-1955): bump CCO version [#4696](https://github.com/openshift/hypershift/pull/4696)
* [Full changelog](https://github.com/openshift/hypershift/compare/3d129eede1e71bb65aa450d722be9669bbc8e49a...c68950b6a4d2cc96cb42fb16c26da94dafa48891)


### [ironic](https://github.com/openshift/ironic-image/tree/e670fd3f1b0aa5be3ccc7584a9d716d04c5b0776)

* [OCPBUGS-38510](https://issues.redhat.com/browse/OCPBUGS-38510): set min version for python3-webob [#553](https://github.com/openshift/ironic-image/pull/553)
* [Full changelog](https://github.com/openshift/ironic-image/compare/a428def3622bab2c00f22a9e3d1ba82ac6899e80...e670fd3f1b0aa5be3ccc7584a9d716d04c5b0776)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/b8cf4bf5b77fca62c4bbf267c6a16440ca7fc13a)

* [OCPBUGS-38510](https://issues.redhat.com/browse/OCPBUGS-38510): set webob and bump werkzeug [#149](https://github.com/openshift/ironic-agent-image/pull/149)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/63681a469fdba2f223373ff36350bf2462b997a3...b8cf4bf5b77fca62c4bbf267c6a16440ca7fc13a)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/6a425abbe5e330f0e7bc0849f4927d4c55d0c9e5)

* [OCPBUGS-41806](https://issues.redhat.com/browse/OCPBUGS-41806): When newly built images rolled out, the update progress is not displaying correctly (went 0 --> 3) [#4584](https://github.com/openshift/machine-config-operator/pull/4584)
* [OCPBUGS-41518](https://issues.redhat.com/browse/OCPBUGS-41518): CVE-2024-3727 ose-machine-config-operator-container: containers/image: digest type does not guarantee valid type [#4569](https://github.com/openshift/machine-config-operator/pull/4569)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/da3a6e3437c9438f146ce50063b1f862fd0156b8...6a425abbe5e330f0e7bc0849f4927d4c55d0c9e5)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/c50e9ce2b292a188e99e72fc6dc59d1fb5e9e0cb)

* [OCPBUGS-41540](https://issues.redhat.com/browse/OCPBUGS-41540): [4.16] add optional schema migrations; default to olm.bundle.object instead of olm.csv.metadata (#1384) [#859](https://github.com/openshift/operator-framework-olm/pull/859)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/c4c6542e2b56c33a8baba8266cc0c7d70e98077c...c50e9ce2b292a188e99e72fc6dc59d1fb5e9e0cb)


### [prometheus](https://github.com/openshift/prometheus/tree/c5c08df947236f3917abf14de481eb2f99fb07de)

* [OCPBUGS-39179](https://issues.redhat.com/browse/OCPBUGS-39179): Restore Prometheus functionality to accept samples with different timestamps from the same series in a single scrape. [#224](https://github.com/openshift/prometheus/pull/224)
* [Full changelog](https://github.com/openshift/prometheus/compare/1a133f0c8dd8225864c0fd472581836cdbac639a...c5c08df947236f3917abf14de481eb2f99fb07de)


### [tests](https://github.com/openshift/origin/tree/06403d4defedd9b48c4a8755389516eeb3be2b13)

* [OCPBUGS-39135](https://issues.redhat.com/browse/OCPBUGS-39135): Bump timeout for the pod-network-service endpoints check [#29052](https://github.com/openshift/origin/pull/29052)
* [Full changelog](https://github.com/openshift/origin/compare/c0f5926b93d95999a44c4237767dae066662b168...06403d4defedd9b48c4a8755389516eeb3be2b13)