# 4.16.40 Created: 2025-05-08 12:20:35 +0000 UTC Image Digest: `sha256:19a2645eba3ad800dc700b512c377efdeb3758e708a6808cb2bf8bd8e1887936` ## Changes from 4.16.39 ### Components * Kubectl 1.29.7 * Kubernetes 1.29.14 * Kubernetes Tests 1.29.0 * Red Hat Enterprise Linux CoreOS upgraded from 416.94.202504151456-0 to 416.94.202505051351-0 ### Rebuilt images without code change * [agent-installer-api-server](https://github.com/openshift/assisted-service) git [cf4e24ce](https://github.com/openshift/assisted-service/commit/cf4e24ce161365e4f0bc4286dedef3891041f7ba) `sha256:b47452eb4d6c7c4ac659ee8c1f40e5af24569d3533d8e445b187348d6db44b58` * [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [6e6bb40d](https://github.com/openshift/agent-installer-utils/commit/6e6bb40d95bd966eb6b152e66c5b91794806c4bc) `sha256:3deb5c702229d507b914db5339a07ca8e6babefc703ec05e8a6e6b8ade9b0cc6` * [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [eacd6ee9](https://github.com/openshift/cluster-node-tuning-operator/commit/eacd6ee98ab26722603083768d4f58727a390dbe) `sha256:4557645d30516d8f2a2363c561a3ac737ab0b4b6ec2289974394c4a91690c829` * [driver-toolkit](https://github.com/openshift/driver-toolkit) git [1d5732f0](https://github.com/openshift/driver-toolkit/commit/1d5732f0209bb7d98661a53c66c5ac265272dce6) `sha256:b295b56aa74cdc389411ef6ded30ff786795692fdcb75aebe7bdeeaff0dcfab1` * [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [93b8b5fa](https://github.com/openshift/ironic-rhcos-downloader/commit/93b8b5fa33950cadd2310278b7c762ebe0057418) `sha256:691f4a39f5b2b8b0aae6013a894a24243105cabc0d253499b8a8ffbb85ee6ca9` * [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [39480963](https://github.com/openshift/image-customization-controller/commit/394809633b6b2e33ea1af444f7237f066bf0abb1) `sha256:2a9509a70e9535fdc32d2ee4496adfa4217c194b146373a6348c1fe40b1a5eca` * [machine-os-images](https://github.com/openshift/machine-os-images) git [a99847b4](https://github.com/openshift/machine-os-images/commit/a99847b4450d58dbd0e487dd7e834586cd3e9289) `sha256:668b1e567721b6cdf202be799054a9f0fba9a37654d35cc2ce0288231448beb5` * [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [fcd3a8cc](https://github.com/openshift/monitoring-plugin/commit/fcd3a8cc6a5d5fcce5222a29c8de09fa04d8fc24) `sha256:37cb26df09ec9460e855af26856a54d8779aa59dbd6342b8ddd1b4dcaded2f06` * [network-tools](https://github.com/openshift/network-tools) git [234ed43e](https://github.com/openshift/network-tools/commit/234ed43e3e7b2cfcb76a19c80fcdb573a625309f) `sha256:7d6dbb421a4af40f2ff22f3835fa62f186723459c5d72b53dc79873388bad802` * rhel-coreos `sha256:3055a3dd1bb8782cd1916a63e3767c2f72bfcfb83d6ad84cb9d170b339894bb5` * rhel-coreos-extensions `sha256:fb7f43bcecc0ca470681ecd8cb12e321e6a3bfe33c0308fba2243bd0b06563e0` * [sdn](https://github.com/openshift/sdn) git [cbddb0be](https://github.com/openshift/sdn/commit/cbddb0bee05ec89d1379ced8d1aab7269d55daf2) `sha256:c3f0fd141772cfc5831d091883c7225a0ea5836c171f155a5e164586e7314427` * [tools](https://github.com/openshift/oc) git [ee354f66](https://github.com/openshift/oc/commit/ee354f66de43b037ef8b0ed55ce65c6c42aa7b9c) `sha256:513f3597987b7e03f0b285f6fd5fefb65e7f3e85bbd8e73b0c869a9d7d6b9a96` ### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/69f77762a6f8ba6bcdc185c4ed6e7a88fb8a5154) * [OCPBUGS-53718](https://issues.redhat.com/browse/OCPBUGS-53718): Bump jwt to 4.5.2 in release-4.16 (#1091) [#1091](https://github.com/openshift/assisted-installer/pull/1091) * [Full changelog](https://github.com/openshift/assisted-installer/compare/27db6d764cbb244b6b817b0ddc289f0bd79f1930...69f77762a6f8ba6bcdc185c4ed6e7a88fb8a5154) ### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/05bd7e0cbf7f29c61f9d9daa969d809d13bb3dc9) * [OCPBUGS-53710](https://issues.redhat.com/browse/OCPBUGS-53710): Bump jwt to 4.5.2 in release-4.16 (#971) [#971](https://github.com/openshift/assisted-installer-agent/pull/971) * [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/5d581421e2cb97db33a111c82d06cb1d275139a7...05bd7e0cbf7f29c61f9d9daa969d809d13bb3dc9) ### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/c567cf94247e7d466a2f2aacbfe96253613c8cf3) * [OCPBUGS-54990](https://issues.redhat.com/browse/OCPBUGS-54990): Re-reconcile machine on NIC provisioning failure [#137](https://github.com/openshift/machine-api-provider-azure/pull/137) * [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/100d2bb8abf8bac723b1f01d7509ba5c3f3303c7...c567cf94247e7d466a2f2aacbfe96253613c8cf3) ### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/91f0e415cc77531d7b6d6108b4a78aff779c2a40) * [OCPBUGS-35040](https://issues.redhat.com/browse/OCPBUGS-35040): Power VS: Add ports needed for private clusters to security group [#8546](https://github.com/openshift/installer/pull/8546) * [Full changelog](https://github.com/openshift/installer/compare/40d677664f1f9e55ea27a9f6faa3fa8f763bc823...91f0e415cc77531d7b6d6108b4a78aff779c2a40) ### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/9989e43ffd2a2b17dd14d7cd6204558507e1f1b1) * [OCPBUGS-53510](https://issues.redhat.com/browse/OCPBUGS-53510): fix CVE-2025-30204 [#1403](https://github.com/openshift/cluster-etcd-operator/pull/1403) * [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/3f2ce4889c255391323d8bdf07dece99e87dbccd...9989e43ffd2a2b17dd14d7cd6204558507e1f1b1) ### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/db952dd8188afc450be6f8c60d00e9068377c266) * [OCPBUGS-53317](https://issues.redhat.com/browse/OCPBUGS-53317): Fix feature migration for EgressIP [#2673](https://github.com/openshift/cluster-network-operator/pull/2673) * [Full changelog](https://github.com/openshift/cluster-network-operator/compare/10162672f39b812dbfdbc3fa51f634c7851c1df1...db952dd8188afc450be6f8c60d00e9068377c266) ### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/6dde5732618244c79b4481f6a3b7a6e7dd5c28f4) * [OCPBUGS-55457](https://issues.redhat.com/browse/OCPBUGS-55457): Adding mutex to func createSamples on handler.go [#633](https://github.com/openshift/cluster-samples-operator/pull/633) * [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/7ee5f8f5eed5351627709eade6e5916790c6f8c5...6dde5732618244c79b4481f6a3b7a6e7dd5c28f4) ### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/d0d0d6e7614148e497a10001ac16af689506c626) * [OCPBUGS-55156](https://issues.redhat.com/browse/OCPBUGS-55156): Fix a panic caused by a data race [#1178](https://github.com/openshift/cluster-version-operator/pull/1178) * [Full changelog](https://github.com/openshift/cluster-version-operator/compare/6af06e02dd84880a6389284840a8d95c91bf226b...d0d0d6e7614148e497a10001ac16af689506c626) ### [console](https://github.com/openshift/console/tree/4a7dc548a3d29a915107925ae8f404bbeadf021c) * [OCPBUGS-55378](https://issues.redhat.com/browse/OCPBUGS-55378): Do not load CSRs if user does not have permissions [#15000](https://github.com/openshift/console/pull/15000) * [OCPBUGS-55644](https://issues.redhat.com/browse/OCPBUGS-55644): fix bug where operator appears twice [#15016](https://github.com/openshift/console/pull/15016) * [OCPBUGS-45142](https://issues.redhat.com/browse/OCPBUGS-45142): Add missing pipelines plugin name to known plugins [#14550](https://github.com/openshift/console/pull/14550) * [Full changelog](https://github.com/openshift/console/compare/96eb186d35ee5fea1f136951afdc52609b12faf1...4a7dc548a3d29a915107925ae8f404bbeadf021c) ### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/8851888abd5f7f47edd12a56f515b8f333c09372) * [OCPBUGS-55249](https://issues.redhat.com/browse/OCPBUGS-55249): Disable shielded VMs for non-UEFI disks [#116](https://github.com/openshift/machine-api-provider-gcp/pull/116) * [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/380f339af123d187a24c4d6be972e18dd8308e6f...8851888abd5f7f47edd12a56f515b8f333c09372) ### [hypershift](https://github.com/openshift/hypershift/tree/ba952e163ff6021327d0ab9fff6c6570062f00c8) * [OCPBUGS-51804](https://issues.redhat.com/browse/OCPBUGS-51804): Fix golang crypto dependency go.mod replacement [#5994](https://github.com/openshift/hypershift/pull/5994) * [OCPBUGS-54914](https://issues.redhat.com/browse/OCPBUGS-54914): Add konnectivity-proxy sidecar to openshift-oauth-apiserver [#6026](https://github.com/openshift/hypershift/pull/6026) * [Full changelog](https://github.com/openshift/hypershift/compare/64381e4e4e3c8bff6f469b7e149fdaa5a9ba4032...ba952e163ff6021327d0ab9fff6c6570062f00c8) ### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/f58519f1aaf9d686a44e3acb2c4952fd6a3535fc) * [OCPBUGS-55248](https://issues.redhat.com/browse/OCPBUGS-55248), [OCPBUGS-55249](https://issues.redhat.com/browse/OCPBUGS-55249): Updates GCP credentials request [#1355](https://github.com/openshift/machine-api-operator/pull/1355) * [Full changelog](https://github.com/openshift/machine-api-operator/compare/693374418a09d902fa9e10c909b0c38b5a513505...f58519f1aaf9d686a44e3acb2c4952fd6a3535fc) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/19d2a0275bf5e566dff786fbc88fe97c69d131d9) * [OCPBUGS-54831](https://issues.redhat.com/browse/OCPBUGS-54831): Make mtu-migration run after wait-for-primary-ip [#4990](https://github.com/openshift/machine-config-operator/pull/4990) * [OCPBUGS-55684](https://issues.redhat.com/browse/OCPBUGS-55684): MSBIC should not update windows machinesets [#5028](https://github.com/openshift/machine-config-operator/pull/5028) * [OCPBUGS-35921](https://issues.redhat.com/browse/OCPBUGS-35921): userCA and cloudCA certfiicates are not removed from nodes and ignition config [#4419](https://github.com/openshift/machine-config-operator/pull/4419) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/d00398e9d7c250a6361222a1024209ca4f73f79d...19d2a0275bf5e566dff786fbc88fe97c69d131d9) ### [prometheus](https://github.com/openshift/prometheus/tree/396e723fdbfb6ef53431dcb35c0c3f84de0712c1) * [OCPBUGS-54942](https://issues.redhat.com/browse/OCPBUGS-54942): Scraping: Bump cache iteration after error to avoid false duplicate detection. [#250](https://github.com/openshift/prometheus/pull/250) * [Full changelog](https://github.com/openshift/prometheus/compare/09479fe37af9d9f187cb21796e73213c80c902fc...396e723fdbfb6ef53431dcb35c0c3f84de0712c1) ### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/9ff2408eb11efe30253ba6a7e9ad4bf92dcb8fab) * [OCPBUGS-55201](https://issues.redhat.com/browse/OCPBUGS-55201): ingress: Reset metrics when ingress is deleted [#58](https://github.com/openshift/route-controller-manager/pull/58) * [Full changelog](https://github.com/openshift/route-controller-manager/compare/3112b458983c6fca6f77d5a945fb0026186dace6...9ff2408eb11efe30253ba6a7e9ad4bf92dcb8fab) ### [tests](https://github.com/openshift/origin/tree/3073d4b11e064d854be2d2ebae0a97ab37d5043d) * [OCPBUGS-55636](https://issues.redhat.com/browse/OCPBUGS-55636): [build] Ensure Git Clone Does Not Run Privileged [#29746](https://github.com/openshift/origin/pull/29746) * [Full changelog](https://github.com/openshift/origin/compare/e47256fe8ed6c66675f23ea8d631b7cb7881a6a5...3073d4b11e064d854be2d2ebae0a97ab37d5043d)