# 4.16.23

Created: 2024-11-14 15:06:33 +0000 UTC

Image Digest: `sha256:be725d2e56befbcb28068207b77d731650ad2c82ae77630f46631af750894347`


## Changes from 4.16.20

### Components

* Kubectl 1.29.7
* Kubernetes 1.29.9
* Kubernetes Tests 1.29.0
* Red Hat Enterprise Linux CoreOS upgraded from 416.94.202410292028-0 to 416.94.202411111409-0


### Rebuilt images without code change

* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [b121e878](https://github.com/openshift/assisted-installer-agent/commit/b121e87848721deee183a0d7bcc04bd5010eca38) `sha256:c92caffec36af37d9eade5f032ddef8ecf81d0b4d26acd7aaffd7b81a12408e6`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [e8478585](https://github.com/openshift/cluster-update-keys/commit/e8478585cca88314094112aa5933e5281f4707ea) `sha256:047c51c8d81707c5893b5d9f17384db2d503024494f07513ef4e70e19b6d3449`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [1d5732f0](https://github.com/openshift/driver-toolkit/commit/1d5732f0209bb7d98661a53c66c5ac265272dce6) `sha256:56d46f312253d113bb362792c491697a13063fc2cc57fa143ceba6c79739f326`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [93b8b5fa](https://github.com/openshift/ironic-rhcos-downloader/commit/93b8b5fa33950cadd2310278b7c762ebe0057418) `sha256:9352f0a3c96e80b36c1a49035434973e4fd7da35cf18dc064a6166a6ab8bd49e`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [3cc97098](https://github.com/openshift/machine-os-images/commit/3cc97098ecb9870dcb571f1ed1e26e2f70ce9f8c) `sha256:3c3c670b81807ed2e33d2965889af90bc33c3532fa6df7c8c36c98c6ca8a3dd2`
* [network-tools](https://github.com/openshift/network-tools) git [39eca100](https://github.com/openshift/network-tools/commit/39eca100c0978fb59234e21bf549b130914616ac) `sha256:6577ffa4cfbbf8b15b8d29a8e2e370d8e25aa58b5b359da3a501eeef3f7c7d09`
* rhel-coreos `sha256:a237251d5d004eb0d021037b4f9fd912f9a998a5d561c2139f579306f7428177`
* rhel-coreos-extensions `sha256:4982b3bc1020949e0d3f5f36ca28d0bae957b2a524995e1687b2b8dda3e776b5`
* [tools](https://github.com/openshift/oc) git [cf533b54](https://github.com/openshift/oc/commit/cf533b548154f7f2e828a44864477bbbb881692d) `sha256:0240f0a1f6366d4ec058cefcae1fe75dc9c352e6c9ac36dd0401aa8161552a1c`


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/60d797bea7418e10ec26ae1ccef4e42249705b6c)

* [OCPBUGS-44234](https://issues.redhat.com/browse/OCPBUGS-44234): [release-4.16] OSD-25934: Only tag NetworkInterfaces in RunInstances if IAM Allows It [#531](https://github.com/openshift/cluster-api-provider-aws/pull/531)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/aaaf00b18daf45c9eea93bc2924a6a7e22d27766...60d797bea7418e10ec26ae1ccef4e42249705b6c)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/dc63e8f7a7d8bdd9816c20c484a0af8ed28473a0)

* [OCPBUGS-44348](https://issues.redhat.com/browse/OCPBUGS-44348): Cherrypick oci ccm fix to 4.16 [#9188](https://github.com/openshift/installer/pull/9188)
* [OCPBUGS-43967](https://issues.redhat.com/browse/OCPBUGS-43967): Revendor assisted service external platform oci [#9150](https://github.com/openshift/installer/pull/9150)
* [OCPBUGS-38930](https://issues.redhat.com/browse/OCPBUGS-38930): import failure when esxi config is not the same in the cluster [#8898](https://github.com/openshift/installer/pull/8898)
* [OCPBUGS-36290](https://issues.redhat.com/browse/OCPBUGS-36290): IBMCloud: Ignore failed VPC regions [#8674](https://github.com/openshift/installer/pull/8674)
* [OCPBUGS-41885](https://issues.redhat.com/browse/OCPBUGS-41885): vSphere - If template is defined skip downloading [#8999](https://github.com/openshift/installer/pull/8999)
* [OCPBUGS-41490](https://issues.redhat.com/browse/OCPBUGS-41490): Update RHCOS 4.16 bootimage metadata to 416.94.202410211619-0 [#9158](https://github.com/openshift/installer/pull/9158)
* [OCPBUGS-43476](https://issues.redhat.com/browse/OCPBUGS-43476): IBMCloud: Handle pagination for subnets [#9102](https://github.com/openshift/installer/pull/9102)
* [Full changelog](https://github.com/openshift/installer/compare/8b2895457f8c97ea04ff79b9fc84e8561984458f...dc63e8f7a7d8bdd9816c20c484a0af8ed28473a0)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/03738f2d941b836800926fc701202b8d4b9d0605)

* [OCPBUGS-43556](https://issues.redhat.com/browse/OCPBUGS-43556): SCC-pinning for metal3-baremetal-operator [#453](https://github.com/openshift/cluster-baremetal-operator/pull/453)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/8f65ef620e5a47e3cb29167c6b5fb56c7b802627...03738f2d941b836800926fc701202b8d4b9d0605)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/14571e8a2c4e9bf52d7cc94da87959a56dc2a44c)

* [OCPBUGS-44179](https://issues.redhat.com/browse/OCPBUGS-44179): relax validation on delete and if failureDomains not configured [#331](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/331)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/b0cb3dfa22cfd2ba52caec1c73dee5ea765735ec...14571e8a2c4e9bf52d7cc94da87959a56dc2a44c)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/179c38004739adde111d2fabf08bc94b0c663d9b)

* [OCPBUGS-43604](https://issues.redhat.com/browse/OCPBUGS-43604): OCPBUGS-42244: Exporting environment varialbe NODE_CNI for live migration [#2538](https://github.com/openshift/cluster-network-operator/pull/2538)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/cad89f0fe351e5da920167842d476e0c603c5f43...179c38004739adde111d2fabf08bc94b0c663d9b)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/e739b63c155856b93d072e6077bb73a995ba0f28)

* Fixing empty tuned submodule when using Dockerfile (#1212) [#1212](https://github.com/openshift/cluster-node-tuning-operator/pull/1212)
* [OCPBUGS-38900](https://issues.redhat.com/browse/OCPBUGS-38900): Drop sched_migration_cost_ns setting (#1203) [#1203](https://github.com/openshift/cluster-node-tuning-operator/pull/1203)
* Make ocp-tuned-one-shot.service restart on-failure (#1202) [#1202](https://github.com/openshift/cluster-node-tuning-operator/pull/1202)
* Unblock 4.16 CI (#1204) [#1204](https://github.com/openshift/cluster-node-tuning-operator/pull/1204)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/884858ee423288990e07c254bf10efe60262659d...e739b63c155856b93d072e6077bb73a995ba0f28)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/2280f54414cf403aed0a02b3fdb86ee6bf672410)

* [OCPBUGS-38269](https://issues.redhat.com/browse/OCPBUGS-38269): CVE-2024-24786 infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON [#363](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/363)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/bcc371ccbc9cab9bcb80b3f1a281a40c28011f59...2280f54414cf403aed0a02b3fdb86ee6bf672410)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/15c87e7e6d56f89fcc2453012e09283e965e71af)

* [OCPBUGS-43964](https://issues.redhat.com/browse/OCPBUGS-43964): Fix desired before sync_worker's work is initialized [#1097](https://github.com/openshift/cluster-version-operator/pull/1097)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/617769f980c5b2b59ad6ee821aad511de44a798d...15c87e7e6d56f89fcc2453012e09283e965e71af)


### [console](https://github.com/openshift/console/tree/95cf5fd7d840b19805d1665b6ffc064e51f35bef)

* [OCPBUGS-43834](https://issues.redhat.com/browse/OCPBUGS-43834): Enabling topology e2e tests on CI [#14438](https://github.com/openshift/console/pull/14438)
* [Full changelog](https://github.com/openshift/console/compare/472f4e84543875266d1ff7813a365aa48c122f5b...95cf5fd7d840b19805d1665b6ffc064e51f35bef)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/7423cac0f833e38f8453886514a8910f62fd02d1)

* [OCPBUGS-42555](https://issues.redhat.com/browse/OCPBUGS-42555): Allow pod to be scheduled if node's name and hostname mismatch [#2099](https://github.com/openshift/kubernetes/pull/2099)
* [Full changelog](https://github.com/openshift/kubernetes/compare/5865c5bb1ae6723901343b4c6274de5c8da9fbe3...7423cac0f833e38f8453886514a8910f62fd02d1)


### [hypershift](https://github.com/openshift/hypershift/tree/da6b6e6c44c34a66a0ee9a2844422457714cd323)

* NO-JIRA: Update Konflux references (release-4.16) [#5099](https://github.com/openshift/hypershift/pull/5099)
* chore(deps): update konflux references (release-4.16) [#5078](https://github.com/openshift/hypershift/pull/5078)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.44 (release-4.16) [#5059](https://github.com/openshift/hypershift/pull/5059)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#5058](https://github.com/openshift/hypershift/pull/5058)
* NO-JIRA: Update Konflux references (release-4.16) [#5042](https://github.com/openshift/hypershift/pull/5042)
* chore(deps): update konflux references (release-4.16) [#5024](https://github.com/openshift/hypershift/pull/5024)
* chore(deps): update konflux references (release-4.16) [#5019](https://github.com/openshift/hypershift/pull/5019)
* NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.43 (release-4.16) [#5017](https://github.com/openshift/hypershift/pull/5017)
* NO-JIRA: Update Konflux references (release-4.16) [#5012](https://github.com/openshift/hypershift/pull/5012)
* [Full changelog](https://github.com/openshift/hypershift/compare/5d2301a5b9f329b75932f22ce43b66ed5d6eaea0...da6b6e6c44c34a66a0ee9a2844422457714cd323)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/7d4f93efe65a7c070ded6b889b61ae3d51e259fb)

* [OCPBUGS-43686](https://issues.redhat.com/browse/OCPBUGS-43686): UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.16 [#89](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/89)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/60b7ca98f5121f7e772437823b258a9fd0aa1d99...7d4f93efe65a7c070ded6b889b61ae3d51e259fb)


### [insights-operator](https://github.com/openshift/insights-operator/tree/faf70d79e50b62a3e5014c2081ee5203957c0d20)

* gather selected clusterroles (#1023) [#1023](https://github.com/openshift/insights-operator/pull/1023)
* [Full changelog](https://github.com/openshift/insights-operator/compare/9088c0d70cea4ec1d7f57ad2953430ee47f0fa29...faf70d79e50b62a3e5014c2081ee5203957c0d20)


### [ironic](https://github.com/openshift/ironic-image/tree/d56a7dc8465a36357ba4ede63eabc9897a06a657)

* [OCPBUGS-43950](https://issues.redhat.com/browse/OCPBUGS-43950), [OCPBUGS-43958](https://issues.redhat.com/browse/OCPBUGS-43958): Bump python-waitress [4.16] [#604](https://github.com/openshift/ironic-image/pull/604)
* [Full changelog](https://github.com/openshift/ironic-image/compare/38becaa359fa0cf62e15b35e2740d53a8105241a...d56a7dc8465a36357ba4ede63eabc9897a06a657)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/c4dd04f7cece66d0a237f06cac9253d4e70103a7)

* [OCPBUGS-44301](https://issues.redhat.com/browse/OCPBUGS-44301): Use copy() to duplicate a net.IP [#641](https://github.com/openshift/sdn/pull/641)
* [Full changelog](https://github.com/openshift/sdn/compare/e4a532229b6f12ffe556648fa0319b35acb46fc4...c4dd04f7cece66d0a237f06cac9253d4e70103a7)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/0967219612b43f35342c162f5b92733f946bd9be)

* [OCPBUGS-39028](https://issues.redhat.com/browse/OCPBUGS-39028): Updates message verbs to use %q where appropriate [#1282](https://github.com/openshift/machine-api-operator/pull/1282)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/7d6867c5fef45c08ddce1a95e9e5e7b3bd47ef80...0967219612b43f35342c162f5b92733f946bd9be)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/4bb3364914c4dbcdfcc08b0914f402cdd38f014f)

* [OCPBUGS-44337](https://issues.redhat.com/browse/OCPBUGS-44337): Removal of additionalTrustBundle CA does not remove certificate from node backport [#4688](https://github.com/openshift/machine-config-operator/pull/4688)
* [MCO-1342](https://issues.redhat.com/browse/MCO-1342): Backport Telemetry to 4.16 [#4649](https://github.com/openshift/machine-config-operator/pull/4649)
* [OCPBUGS-44043](https://issues.redhat.com/browse/OCPBUGS-44043): Disable ESP offload for OVS attached interfaces [#4676](https://github.com/openshift/machine-config-operator/pull/4676)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/20e767851f25a12f9be5701012abb881ac33ab25...4bb3364914c4dbcdfcc08b0914f402cdd38f014f)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/e88e6ab3e890917c718e570894cd6899d94debdf)

* [OCPBUGS-43344](https://issues.redhat.com/browse/OCPBUGS-43344): Add SDN node subnet gateway IP to host-network address_set [#2328](https://github.com/openshift/ovn-kubernetes/pull/2328)
* [OCPBUGS-42942](https://issues.redhat.com/browse/OCPBUGS-42942): Fix egress gateway pod cleanup for remote zone pods. [#2341](https://github.com/openshift/ovn-kubernetes/pull/2341)
* [OCPBUGS-36210](https://issues.redhat.com/browse/OCPBUGS-36210): Implementation required to enable Forwarding if it is already disabled [#2212](https://github.com/openshift/ovn-kubernetes/pull/2212)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/52c7ebe90417a98c4e276f735e1824ea04b27cf6...e88e6ab3e890917c718e570894cd6899d94debdf)


### [tests](https://github.com/openshift/origin/tree/c740dbdf225dfeef7fa9470ae61da2507302116c)

* [OCPBUGS-44105](https://issues.redhat.com/browse/OCPBUGS-44105): Adjust createDNSPod() to support hypershift dual-stack test [#29258](https://github.com/openshift/origin/pull/29258)
* [Full changelog](https://github.com/openshift/origin/compare/06403d4defedd9b48c4a8755389516eeb3be2b13...c740dbdf225dfeef7fa9470ae61da2507302116c)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/03b7e8ebf2c6347b40a340d892e1a66d47806300)

* [OCPBUGS-43881](https://issues.redhat.com/browse/OCPBUGS-43881): redact sensitive information when logging VCenter config [#134](https://github.com/openshift/vmware-vsphere-csi-driver/pull/134)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/0d0e8432aed0be6af7463dce0c630d3aa4a2ad60...03b7e8ebf2c6347b40a340d892e1a66d47806300)