# 4.16.17 Created: 2024-10-10 11:18:26 +0000 UTC Image Digest: `sha256:955bc3576eb5902ea912d4577a614ff12a502eb5d1888e431328514fe40ecc83` Promoted from registry.ci.openshift.org/ocp-arm64/release-arm64:4.16.0-0.nightly-arm64-2024-10-09-181834 ## Changes from 4.16.16 ### Components * Kubectl 1.29.7 * Kubernetes 1.29.8 * Kubernetes Tests 1.29.0 * Red Hat Enterprise Linux CoreOS upgraded from 416.94.202410020522-0 to 416.94.202410071428-0 ### Rebuilt images without code change * [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [342902be](https://github.com/openshift/assisted-installer/commit/342902be223378b4d50b251011a3b3185148545a) `sha256:9bd6c062fdac47f4d886fa7cd6c141159944cc9bfdcdfd9ddb361edde5a00948` * [driver-toolkit](https://github.com/openshift/driver-toolkit) git [1d5732f0](https://github.com/openshift/driver-toolkit/commit/1d5732f0209bb7d98661a53c66c5ac265272dce6) `sha256:7bbdce5721440f492dae5ce2b6aaa1861be4d2669efb47440aa19825933c179e` * [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [93b8b5fa](https://github.com/openshift/ironic-rhcos-downloader/commit/93b8b5fa33950cadd2310278b7c762ebe0057418) `sha256:ed59d0b60048f287c5455f0e657a08fa2e257cee008bfeefb0ddc9647d849afe` * [machine-os-images](https://github.com/openshift/machine-os-images) git [3cc97098](https://github.com/openshift/machine-os-images/commit/3cc97098ecb9870dcb571f1ed1e26e2f70ce9f8c) `sha256:7b5559794524dbe30d55e1e20f86158aeeb3f027ffeb4c3bde2cd54404b7c3fb` * [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [6a049e3a](https://github.com/openshift/monitoring-plugin/commit/6a049e3acc8e2efd9e7fcfdc4395b14789941b34) `sha256:2a8c269764106125753fd3534bf7e26b1d6f4e2d33ed03f6962ac7bd5232d527` * [must-gather](https://github.com/openshift/must-gather) git [aea114c0](https://github.com/openshift/must-gather/commit/aea114c0e263e6148b6a26f69f45af559a4f7bc7) `sha256:e8fae4d9959acdaf67db8cf67fed1cc57ed1a1dd4b44a9c7a6299541b2c182ec` * [network-tools](https://github.com/openshift/network-tools) git [39eca100](https://github.com/openshift/network-tools/commit/39eca100c0978fb59234e21bf549b130914616ac) `sha256:234fdf2af2729408d3b287b7576dd1a29f61ad7b21b303d476b1ab3367e0c886` * rhel-coreos `sha256:bcb589ae9a242ae662e250d3077fad72b95a2df344419875d8ede56a27188a62` * rhel-coreos-extensions `sha256:5e6e010b9e7a8496ebe80a279692010e795bf9c6ef7fd0e07a2ae484516e0810` * [tests](https://github.com/openshift/origin) git [06403d4d](https://github.com/openshift/origin/commit/06403d4defedd9b48c4a8755389516eeb3be2b13) `sha256:a0ed744531376c9c2f3f9b10ec9fd3988a8835c1c8bfe511166824cb27ca7873` ### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/aae52d7e3bb80ea0efea327b421e3ee0989919d0) * [OCPBUGS-42570](https://issues.redhat.com/browse/OCPBUGS-42570): Libraries bump to mitigate CVE-2024-27289 (#6833) [#6833](https://github.com/openshift/assisted-service/pull/6833) * [Full changelog](https://github.com/openshift/assisted-service/compare/d56975695e809488e8c7a610ff07fac50eb452a1...aae52d7e3bb80ea0efea327b421e3ee0989919d0) ### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/42753d7581ed4fc8be6cd7d0a70afdff1ec8d596) * [OCPBUGS-42300](https://issues.redhat.com/browse/OCPBUGS-42300): Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#785) [#785](https://github.com/openshift/assisted-installer-agent/pull/785) * [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/9ca7b58d937c413f670a26c02435829b1fb3a196...42753d7581ed4fc8be6cd7d0a70afdff1ec8d596) ### [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider/tree/f6bb064636525c59fcf7200e014d9bfdc996e857) * hack: display diff on verify-mod-tidy failure [#26](https://github.com/openshift/aws-encryption-provider/pull/26) * [Full changelog](https://github.com/openshift/aws-encryption-provider/compare/da90fb7cb0d9108fb1f365e98f31ce6ab16fd7e0...f6bb064636525c59fcf7200e014d9bfdc996e857) ### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/e4d53b1281937aa073855fede82b45d41b3883e0) * [OCPBUGS-41334](https://issues.redhat.com/browse/OCPBUGS-41334): Fix IPv6 security group rule for schedulable master [#8971](https://github.com/openshift/installer/pull/8971) * [Full changelog](https://github.com/openshift/installer/compare/e8f8bf91b0dc2c0488485bd0777ed7f6c658f771...e4d53b1281937aa073855fede82b45d41b3883e0) ### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/cf533b548154f7f2e828a44864477bbbb881692d) * [OCPBUGS-42720](https://issues.redhat.com/browse/OCPBUGS-42720): Check cast result in adm prune deployments to prevent panic [#1891](https://github.com/openshift/oc/pull/1891) * [Full changelog](https://github.com/openshift/oc/compare/c44c839bcb77d6d41229e2d35e45002fa144cf72...cf533b548154f7f2e828a44864477bbbb881692d) ### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/3f2ce4889c255391323d8bdf07dece99e87dbccd) * [OCPBUGS-33673](https://issues.redhat.com/browse/OCPBUGS-33673): rename flowschema to avoid log noise in CVO [#1348](https://github.com/openshift/cluster-etcd-operator/pull/1348) * [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/11269eceae2b839bf05157c6ca40c2f2ed73bd11...3f2ce4889c255391323d8bdf07dece99e87dbccd) ### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/c5a5245333832aa171424cadb23ba628ccd5836b) * [OCPBUGS-42420](https://issues.redhat.com/browse/OCPBUGS-42420): Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) [#1126](https://github.com/openshift/cluster-image-registry-operator/pull/1126) * [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/9d2162f45590dd0ed0a228b79ec036d6d44a7208...c5a5245333832aa171424cadb23ba628ccd5836b) ### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/8f39b8c253667d54b3ab83fb91eb3dbf4e266fd2) * [OCPBUGS-36594](https://issues.redhat.com/browse/OCPBUGS-36594): Set mount propagation to HostToContainer for /var/lib/kubelet [#2430](https://github.com/openshift/cluster-network-operator/pull/2430) * [Full changelog](https://github.com/openshift/cluster-network-operator/compare/5e5e21afb9ceabe3c2166fb9b2d5d12196a77b26...8f39b8c253667d54b3ab83fb91eb3dbf4e266fd2) ### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/329937c1acd693cf754b1e11ef6d1e88fac11aa6) * E2E: Add test to verify cpuset.cpus.exclusive is writeable (#1153) [#1153](https://github.com/openshift/cluster-node-tuning-operator/pull/1153) * [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/57a714574b7b33f2f649ad5f62a61b7e97224fb7...329937c1acd693cf754b1e11ef6d1e88fac11aa6) ### [console](https://github.com/openshift/console/tree/21d218a7b2ebce7fb0aba07f9f90df4bca763606) * [OCPBUGS-37615](https://issues.redhat.com/browse/OCPBUGS-37615): Include PatternFly-4 chart styles so they are available for dynamic plugins that still use PF4 react-charts [#14091](https://github.com/openshift/console/pull/14091) * [Full changelog](https://github.com/openshift/console/compare/a9acc9a4c44b78b7dbe8552e35e92c958e804b4b...21d218a7b2ebce7fb0aba07f9f90df4bca763606) ### [hypershift](https://github.com/openshift/hypershift/tree/9a2ade91ae269b570d4e9dd8a8430a6cbc7b4e20) * [OCPBUGS-42342](https://issues.redhat.com/browse/OCPBUGS-42342): Let payload generation pick the release for the NodePool [#4787](https://github.com/openshift/hypershift/pull/4787) * [OCPBUGS-42431](https://issues.redhat.com/browse/OCPBUGS-42431): Conditionally manage kubeconfig secrets for DNS and Ingress operators [#4798](https://github.com/openshift/hypershift/pull/4798) * NO-JIRA: [chore(deps): update konflux references (release-4.16)](https://github.com/openshift/hypershift/pull/4853#top) [#4853](https://github.com/openshift/hypershift/pull/4853) * [OCPBUGS-42608](https://issues.redhat.com/browse/OCPBUGS-42608): Add Annotation to skip deleting hcp namespace [#4830](https://github.com/openshift/hypershift/pull/4830) * [Full changelog](https://github.com/openshift/hypershift/compare/235766c892a8a1fb7130a422473dec10d540fa54...9a2ade91ae269b570d4e9dd8a8430a6cbc7b4e20) ### [ironic](https://github.com/openshift/ironic-image/tree/f8a69556ca9fab8742bc6a91ccce56bc6de90360) * [OCPBUGS-39017](https://issues.redhat.com/browse/OCPBUGS-39017): Bump ironic-lib to fix utf8 decoding issue [#569](https://github.com/openshift/ironic-image/pull/569) * [Full changelog](https://github.com/openshift/ironic-image/compare/6ef351d60ebf9e340696ac8b217636f1d916294a...f8a69556ca9fab8742bc6a91ccce56bc6de90360) ### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/3c5298e05497b59a876c73c51359f49f3cc2cb99) * [OCPBUGS-39017](https://issues.redhat.com/browse/OCPBUGS-39017): Bump ironic-lib to fix utf8 decoding issue [#156](https://github.com/openshift/ironic-agent-image/pull/156) * [Full changelog](https://github.com/openshift/ironic-agent-image/compare/2a3cd13c05d937ff04f199c0c756646fde62f285...3c5298e05497b59a876c73c51359f49f3cc2cb99) ### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/aec8163c76a7ba11e02c3ba1e9ce46f770210957) * [OCPBUGS-42203](https://issues.redhat.com/browse/OCPBUGS-42203): fix UDP conntrack cleanup [#636](https://github.com/openshift/sdn/pull/636) * [Full changelog](https://github.com/openshift/sdn/compare/807fca22f33bef517b664e314072c3f1b25fbfbc...aec8163c76a7ba11e02c3ba1e9ce46f770210957) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/6f827c3d8c3c5c826b04963a19ad0d79c2ba50ee) * [OCPBUGS-41293](https://issues.redhat.com/browse/OCPBUGS-41293): Enable the use of Linux Bridge as the ovs default port connection [#4563](https://github.com/openshift/machine-config-operator/pull/4563) * [OCPBUGS-41256](https://issues.redhat.com/browse/OCPBUGS-41256): Set ESP offloads off in bonds if slaves don't support them [#4627](https://github.com/openshift/machine-config-operator/pull/4627) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/6a425abbe5e330f0e7bc0849f4927d4c55d0c9e5...6f827c3d8c3c5c826b04963a19ad0d79c2ba50ee) ### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/52c7ebe90417a98c4e276f735e1824ea04b27cf6) * [OCPBUGS-41551](https://issues.redhat.com/browse/OCPBUGS-41551): Add subnet overlap check for transit switch subnet [#2306](https://github.com/openshift/ovn-kubernetes/pull/2306) * [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/90d0591637753ab3d3b18535e506c47e91194da9...52c7ebe90417a98c4e276f735e1824ea04b27cf6)