# 4.16.21

Created: 2024-11-07 09:15:25 +0000 UTC

Image Digest: `sha256:d9c75cf244c46c9683b4123d5e54caf217e1e4861f5e1f9f032b478912f472c4`

Promoted from registry.ci.openshift.org/ocp/release:4.16.0-0.nightly-2024-11-06-215354


## Changes from 4.16.20

### Components

* Kubectl 1.29.7
* Kubernetes 1.29.9
* Kubernetes Tests 1.29.0
* Red Hat Enterprise Linux CoreOS upgraded from 416.94.202410292028-0 to 416.94.202411061221-0


### Rebuilt images without code change

* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [1d5732f0](https://github.com/openshift/driver-toolkit/commit/1d5732f0209bb7d98661a53c66c5ac265272dce6) `sha256:56d46f312253d113bb362792c491697a13063fc2cc57fa143ceba6c79739f326`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [93b8b5fa](https://github.com/openshift/ironic-rhcos-downloader/commit/93b8b5fa33950cadd2310278b7c762ebe0057418) `sha256:97a4e61d553549d0f74312b1005bf565fc2aee362bb94392abe86afe5b12bf6f`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [3cc97098](https://github.com/openshift/machine-os-images/commit/3cc97098ecb9870dcb571f1ed1e26e2f70ce9f8c) `sha256:27cbe859cd10f94bf02172f333c187946c91164063903281ca1f410035b8ed5a`
* [network-tools](https://github.com/openshift/network-tools) git [39eca100](https://github.com/openshift/network-tools/commit/39eca100c0978fb59234e21bf549b130914616ac) `sha256:f95bbcdebde709dff015bc24e820b45c0b2b995ce8bb254f08d87691f3da808b`
* rhel-coreos `sha256:e305ced7795f023482cba4edb972c77f257f57fb37ec9327ff4198c21993e559`
* rhel-coreos-extensions `sha256:127268a4b2e5dc10a528e83ae81fa1d91e91152f84d4e57d682dc560cce7c922`
* [tools](https://github.com/openshift/oc) git [cf533b54](https://github.com/openshift/oc/commit/cf533b548154f7f2e828a44864477bbbb881692d) `sha256:0240f0a1f6366d4ec058cefcae1fe75dc9c352e6c9ac36dd0401aa8161552a1c`


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/7c74d42668baba3c59c55b1b1d8e80ba6a305cbf)

* [OCPBUGS-36290](https://issues.redhat.com/browse/OCPBUGS-36290): IBMCloud: Ignore failed VPC regions [#8674](https://github.com/openshift/installer/pull/8674)
* [OCPBUGS-41885](https://issues.redhat.com/browse/OCPBUGS-41885): vSphere - If template is defined skip downloading [#8999](https://github.com/openshift/installer/pull/8999)
* [OCPBUGS-41490](https://issues.redhat.com/browse/OCPBUGS-41490): Update RHCOS 4.16 bootimage metadata to 416.94.202410211619-0 [#9158](https://github.com/openshift/installer/pull/9158)
* [OCPBUGS-43476](https://issues.redhat.com/browse/OCPBUGS-43476): IBMCloud: Handle pagination for subnets [#9102](https://github.com/openshift/installer/pull/9102)
* [Full changelog](https://github.com/openshift/installer/compare/8b2895457f8c97ea04ff79b9fc84e8561984458f...7c74d42668baba3c59c55b1b1d8e80ba6a305cbf)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/03738f2d941b836800926fc701202b8d4b9d0605)

* [OCPBUGS-43556](https://issues.redhat.com/browse/OCPBUGS-43556): SCC-pinning for metal3-baremetal-operator [#453](https://github.com/openshift/cluster-baremetal-operator/pull/453)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/8f65ef620e5a47e3cb29167c6b5fb56c7b802627...03738f2d941b836800926fc701202b8d4b9d0605)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/14571e8a2c4e9bf52d7cc94da87959a56dc2a44c)

* [OCPBUGS-44179](https://issues.redhat.com/browse/OCPBUGS-44179): relax validation on delete and if failureDomains not configured [#331](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/331)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/b0cb3dfa22cfd2ba52caec1c73dee5ea765735ec...14571e8a2c4e9bf52d7cc94da87959a56dc2a44c)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/179c38004739adde111d2fabf08bc94b0c663d9b)

* [OCPBUGS-43604](https://issues.redhat.com/browse/OCPBUGS-43604): OCPBUGS-42244: Exporting environment varialbe NODE_CNI for live migration [#2538](https://github.com/openshift/cluster-network-operator/pull/2538)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/cad89f0fe351e5da920167842d476e0c603c5f43...179c38004739adde111d2fabf08bc94b0c663d9b)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/428c2c01759c7b0a09abad6e3c50d53b4b973ed2)

* [OCPBUGS-38900](https://issues.redhat.com/browse/OCPBUGS-38900): Drop sched_migration_cost_ns setting (#1203) [#1203](https://github.com/openshift/cluster-node-tuning-operator/pull/1203)
* Make ocp-tuned-one-shot.service restart on-failure (#1202) [#1202](https://github.com/openshift/cluster-node-tuning-operator/pull/1202)
* Unblock 4.16 CI (#1204) [#1204](https://github.com/openshift/cluster-node-tuning-operator/pull/1204)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/884858ee423288990e07c254bf10efe60262659d...428c2c01759c7b0a09abad6e3c50d53b4b973ed2)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/15c87e7e6d56f89fcc2453012e09283e965e71af)

* [OCPBUGS-43964](https://issues.redhat.com/browse/OCPBUGS-43964): Fix desired before sync_worker's work is initialized [#1097](https://github.com/openshift/cluster-version-operator/pull/1097)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/617769f980c5b2b59ad6ee821aad511de44a798d...15c87e7e6d56f89fcc2453012e09283e965e71af)


### [hypershift](https://github.com/openshift/hypershift/tree/b2a1a8c05ebab7ebe8e3da0dce7626c3b7026dfd)

* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.44 (release-4.16) [#5059](https://github.com/openshift/hypershift/pull/5059)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#5058](https://github.com/openshift/hypershift/pull/5058)
* NO-JIRA: Update Konflux references (release-4.16) [#5042](https://github.com/openshift/hypershift/pull/5042)
* chore(deps): update konflux references (release-4.16) [#5024](https://github.com/openshift/hypershift/pull/5024)
* chore(deps): update konflux references (release-4.16) [#5019](https://github.com/openshift/hypershift/pull/5019)
* NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.43 (release-4.16) [#5017](https://github.com/openshift/hypershift/pull/5017)
* NO-JIRA: Update Konflux references (release-4.16) [#5012](https://github.com/openshift/hypershift/pull/5012)
* [Full changelog](https://github.com/openshift/hypershift/compare/5d2301a5b9f329b75932f22ce43b66ed5d6eaea0...b2a1a8c05ebab7ebe8e3da0dce7626c3b7026dfd)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/7d4f93efe65a7c070ded6b889b61ae3d51e259fb)

* [OCPBUGS-43686](https://issues.redhat.com/browse/OCPBUGS-43686): UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.16 [#89](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/89)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/60b7ca98f5121f7e772437823b258a9fd0aa1d99...7d4f93efe65a7c070ded6b889b61ae3d51e259fb)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/0967219612b43f35342c162f5b92733f946bd9be)

* [OCPBUGS-39028](https://issues.redhat.com/browse/OCPBUGS-39028): Updates message verbs to use %q where appropriate [#1282](https://github.com/openshift/machine-api-operator/pull/1282)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/7d6867c5fef45c08ddce1a95e9e5e7b3bd47ef80...0967219612b43f35342c162f5b92733f946bd9be)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/439f25084fa2008d3b04187001fb4212dc530440)

* [OCPBUGS-44043](https://issues.redhat.com/browse/OCPBUGS-44043): Disable ESP offload for OVS attached interfaces [#4676](https://github.com/openshift/machine-config-operator/pull/4676)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/20e767851f25a12f9be5701012abb881ac33ab25...439f25084fa2008d3b04187001fb4212dc530440)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/81cc8ea374872f75c684d462b0673baa0b76cd46)

* [OCPBUGS-36210](https://issues.redhat.com/browse/OCPBUGS-36210): Implementation required to enable Forwarding if it is already disabled [#2212](https://github.com/openshift/ovn-kubernetes/pull/2212)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/52c7ebe90417a98c4e276f735e1824ea04b27cf6...81cc8ea374872f75c684d462b0673baa0b76cd46)


### [tests](https://github.com/openshift/origin/tree/c740dbdf225dfeef7fa9470ae61da2507302116c)

* [OCPBUGS-44105](https://issues.redhat.com/browse/OCPBUGS-44105): Adjust createDNSPod() to support hypershift dual-stack test [#29258](https://github.com/openshift/origin/pull/29258)
* [Full changelog](https://github.com/openshift/origin/compare/06403d4defedd9b48c4a8755389516eeb3be2b13...c740dbdf225dfeef7fa9470ae61da2507302116c)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/03b7e8ebf2c6347b40a340d892e1a66d47806300)

* [OCPBUGS-43881](https://issues.redhat.com/browse/OCPBUGS-43881): redact sensitive information when logging VCenter config [#134](https://github.com/openshift/vmware-vsphere-csi-driver/pull/134)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/0d0e8432aed0be6af7463dce0c630d3aa4a2ad60...03b7e8ebf2c6347b40a340d892e1a66d47806300)