# 4.16.23

Created: 2024-11-14 15:06:33 +0000 UTC

Image Digest: `sha256:be725d2e56befbcb28068207b77d731650ad2c82ae77630f46631af750894347`


## Changes from 4.16.21

### Components

* Kubectl 1.29.7
* Kubernetes 1.29.9
* Kubernetes Tests 1.29.0
* Red Hat Enterprise Linux CoreOS upgraded from 416.94.202411061221-0 to 416.94.202411111409-0


### Rebuilt images without code change

* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [b121e878](https://github.com/openshift/assisted-installer-agent/commit/b121e87848721deee183a0d7bcc04bd5010eca38) `sha256:c92caffec36af37d9eade5f032ddef8ecf81d0b4d26acd7aaffd7b81a12408e6`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [e8478585](https://github.com/openshift/cluster-update-keys/commit/e8478585cca88314094112aa5933e5281f4707ea) `sha256:047c51c8d81707c5893b5d9f17384db2d503024494f07513ef4e70e19b6d3449`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [93b8b5fa](https://github.com/openshift/ironic-rhcos-downloader/commit/93b8b5fa33950cadd2310278b7c762ebe0057418) `sha256:9352f0a3c96e80b36c1a49035434973e4fd7da35cf18dc064a6166a6ab8bd49e`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [3cc97098](https://github.com/openshift/machine-os-images/commit/3cc97098ecb9870dcb571f1ed1e26e2f70ce9f8c) `sha256:3c3c670b81807ed2e33d2965889af90bc33c3532fa6df7c8c36c98c6ca8a3dd2`
* [network-tools](https://github.com/openshift/network-tools) git [39eca100](https://github.com/openshift/network-tools/commit/39eca100c0978fb59234e21bf549b130914616ac) `sha256:6577ffa4cfbbf8b15b8d29a8e2e370d8e25aa58b5b359da3a501eeef3f7c7d09`
* rhel-coreos `sha256:a237251d5d004eb0d021037b4f9fd912f9a998a5d561c2139f579306f7428177`
* rhel-coreos-extensions `sha256:4982b3bc1020949e0d3f5f36ca28d0bae957b2a524995e1687b2b8dda3e776b5`


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/60d797bea7418e10ec26ae1ccef4e42249705b6c)

* [OCPBUGS-44234](https://issues.redhat.com/browse/OCPBUGS-44234): [release-4.16] OSD-25934: Only tag NetworkInterfaces in RunInstances if IAM Allows It [#531](https://github.com/openshift/cluster-api-provider-aws/pull/531)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/aaaf00b18daf45c9eea93bc2924a6a7e22d27766...60d797bea7418e10ec26ae1ccef4e42249705b6c)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/dc63e8f7a7d8bdd9816c20c484a0af8ed28473a0)

* [OCPBUGS-44348](https://issues.redhat.com/browse/OCPBUGS-44348): Cherrypick oci ccm fix to 4.16 [#9188](https://github.com/openshift/installer/pull/9188)
* [OCPBUGS-43967](https://issues.redhat.com/browse/OCPBUGS-43967): Revendor assisted service external platform oci [#9150](https://github.com/openshift/installer/pull/9150)
* [OCPBUGS-38930](https://issues.redhat.com/browse/OCPBUGS-38930): import failure when esxi config is not the same in the cluster [#8898](https://github.com/openshift/installer/pull/8898)
* [Full changelog](https://github.com/openshift/installer/compare/7c74d42668baba3c59c55b1b1d8e80ba6a305cbf...dc63e8f7a7d8bdd9816c20c484a0af8ed28473a0)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/e739b63c155856b93d072e6077bb73a995ba0f28)

* Fixing empty tuned submodule when using Dockerfile (#1212) [#1212](https://github.com/openshift/cluster-node-tuning-operator/pull/1212)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/428c2c01759c7b0a09abad6e3c50d53b4b973ed2...e739b63c155856b93d072e6077bb73a995ba0f28)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/2280f54414cf403aed0a02b3fdb86ee6bf672410)

* [OCPBUGS-38269](https://issues.redhat.com/browse/OCPBUGS-38269): CVE-2024-24786 infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON [#363](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/363)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/bcc371ccbc9cab9bcb80b3f1a281a40c28011f59...2280f54414cf403aed0a02b3fdb86ee6bf672410)


### [console](https://github.com/openshift/console/tree/95cf5fd7d840b19805d1665b6ffc064e51f35bef)

* [OCPBUGS-43834](https://issues.redhat.com/browse/OCPBUGS-43834): Enabling topology e2e tests on CI [#14438](https://github.com/openshift/console/pull/14438)
* [Full changelog](https://github.com/openshift/console/compare/472f4e84543875266d1ff7813a365aa48c122f5b...95cf5fd7d840b19805d1665b6ffc064e51f35bef)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/7423cac0f833e38f8453886514a8910f62fd02d1)

* [OCPBUGS-42555](https://issues.redhat.com/browse/OCPBUGS-42555): Allow pod to be scheduled if node's name and hostname mismatch [#2099](https://github.com/openshift/kubernetes/pull/2099)
* [Full changelog](https://github.com/openshift/kubernetes/compare/5865c5bb1ae6723901343b4c6274de5c8da9fbe3...7423cac0f833e38f8453886514a8910f62fd02d1)


### [hypershift](https://github.com/openshift/hypershift/tree/da6b6e6c44c34a66a0ee9a2844422457714cd323)

* NO-JIRA: Update Konflux references (release-4.16) [#5099](https://github.com/openshift/hypershift/pull/5099)
* chore(deps): update konflux references (release-4.16) [#5078](https://github.com/openshift/hypershift/pull/5078)
* [Full changelog](https://github.com/openshift/hypershift/compare/b2a1a8c05ebab7ebe8e3da0dce7626c3b7026dfd...da6b6e6c44c34a66a0ee9a2844422457714cd323)


### [insights-operator](https://github.com/openshift/insights-operator/tree/faf70d79e50b62a3e5014c2081ee5203957c0d20)

* gather selected clusterroles (#1023) [#1023](https://github.com/openshift/insights-operator/pull/1023)
* [Full changelog](https://github.com/openshift/insights-operator/compare/9088c0d70cea4ec1d7f57ad2953430ee47f0fa29...faf70d79e50b62a3e5014c2081ee5203957c0d20)


### [ironic](https://github.com/openshift/ironic-image/tree/d56a7dc8465a36357ba4ede63eabc9897a06a657)

* [OCPBUGS-43950](https://issues.redhat.com/browse/OCPBUGS-43950), [OCPBUGS-43958](https://issues.redhat.com/browse/OCPBUGS-43958): Bump python-waitress [4.16] [#604](https://github.com/openshift/ironic-image/pull/604)
* [Full changelog](https://github.com/openshift/ironic-image/compare/38becaa359fa0cf62e15b35e2740d53a8105241a...d56a7dc8465a36357ba4ede63eabc9897a06a657)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/c4dd04f7cece66d0a237f06cac9253d4e70103a7)

* [OCPBUGS-44301](https://issues.redhat.com/browse/OCPBUGS-44301): Use copy() to duplicate a net.IP [#641](https://github.com/openshift/sdn/pull/641)
* [Full changelog](https://github.com/openshift/sdn/compare/e4a532229b6f12ffe556648fa0319b35acb46fc4...c4dd04f7cece66d0a237f06cac9253d4e70103a7)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/4bb3364914c4dbcdfcc08b0914f402cdd38f014f)

* [OCPBUGS-44337](https://issues.redhat.com/browse/OCPBUGS-44337): Removal of additionalTrustBundle CA does not remove certificate from node backport [#4688](https://github.com/openshift/machine-config-operator/pull/4688)
* [MCO-1342](https://issues.redhat.com/browse/MCO-1342): Backport Telemetry to 4.16 [#4649](https://github.com/openshift/machine-config-operator/pull/4649)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/439f25084fa2008d3b04187001fb4212dc530440...4bb3364914c4dbcdfcc08b0914f402cdd38f014f)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/e88e6ab3e890917c718e570894cd6899d94debdf)

* [OCPBUGS-43344](https://issues.redhat.com/browse/OCPBUGS-43344): Add SDN node subnet gateway IP to host-network address_set [#2328](https://github.com/openshift/ovn-kubernetes/pull/2328)
* [OCPBUGS-42942](https://issues.redhat.com/browse/OCPBUGS-42942): Fix egress gateway pod cleanup for remote zone pods. [#2341](https://github.com/openshift/ovn-kubernetes/pull/2341)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/81cc8ea374872f75c684d462b0673baa0b76cd46...e88e6ab3e890917c718e570894cd6899d94debdf)