# 4.16.41

Created: 2025-05-22 13:51:20 +0000 UTC

Image Digest: `sha256:e6d37b140f32d560dcdac97e9a0a34f1ec1a96af6f987f769eaa801369f1f610`


## Changes from 4.16.39

### Components

* Kubectl 1.29.7
* Kubernetes 1.29.14
* Kubernetes Tests 1.29.0
* Red Hat Enterprise Linux CoreOS upgraded from 416.94.202504151456-0 to 416.94.202505191152-0


### Rebuilt images without code change

* [agent-installer-api-server](https://github.com/openshift/assisted-service) git [cf4e24ce](https://github.com/openshift/assisted-service/commit/cf4e24ce161365e4f0bc4286dedef3891041f7ba) `sha256:3e84d4ba7994f022222494b7fa2c0a37cc94d30ebfcd9c128b98cf941cdce562`
* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [6e6bb40d](https://github.com/openshift/agent-installer-utils/commit/6e6bb40d95bd966eb6b152e66c5b91794806c4bc) `sha256:88e45901dde644213323e13621da2b9a030bd00c6b6c45cf752b3918b14b4a79`
* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [eacd6ee9](https://github.com/openshift/cluster-node-tuning-operator/commit/eacd6ee98ab26722603083768d4f58727a390dbe) `sha256:225442bcd9fd40c24721f4642288712bcc1c72c616f6cf933aa9405cb0441338`
* [docker-builder](https://github.com/openshift/builder) git [15d916b6](https://github.com/openshift/builder/commit/15d916b6c02fb4ac96f3491a60a9acc2c3df96ef) `sha256:ffba0cf52591365231f5d7c8368bc23ac983148e98ab05b3aa0d1eef5622efa9`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [1d5732f0](https://github.com/openshift/driver-toolkit/commit/1d5732f0209bb7d98661a53c66c5ac265272dce6) `sha256:bc9c3c574b664be6f5e96b1b4dfd3a0191beac8a039125ec0da38193fe1567d0`
* [ironic](https://github.com/openshift/ironic-image) git [d08ca1e2](https://github.com/openshift/ironic-image/commit/d08ca1e28ec84a3b34e87aea3dcb67a475b342e5) `sha256:216557c245d7cf4c447af38de1cb766fef3d2add9a92bb59b28e32dcb3d913aa`
* [ironic-agent](https://github.com/openshift/ironic-agent-image) git [aea138cd](https://github.com/openshift/ironic-agent-image/commit/aea138cd4ac822092199c141bb925b37527389cd) `sha256:3f303ef9d5179cbad1d1e7353718040109f67f7fe85def79f83405930ac475a8`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [93b8b5fa](https://github.com/openshift/ironic-rhcos-downloader/commit/93b8b5fa33950cadd2310278b7c762ebe0057418) `sha256:1a1a1d9775b5fab33854c3b2d9feecea9ef4c7b6f4d67341cee568127b28441c`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [39480963](https://github.com/openshift/image-customization-controller/commit/394809633b6b2e33ea1af444f7237f066bf0abb1) `sha256:8991e29d2c9480cf1ac21aa53f912207196f742b6625a289900a489d32113f0b`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [a99847b4](https://github.com/openshift/machine-os-images/commit/a99847b4450d58dbd0e487dd7e834586cd3e9289) `sha256:902225a31e81010b30d48676d7ff53910c97e19ddc51d83ca982241077ddcd86`
* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [fcd3a8cc](https://github.com/openshift/monitoring-plugin/commit/fcd3a8cc6a5d5fcce5222a29c8de09fa04d8fc24) `sha256:dbf7e8b4b17c555bdf59248a667a8277e25344b69fcb5916ffccd4cda3c403a8`
* [network-tools](https://github.com/openshift/network-tools) git [234ed43e](https://github.com/openshift/network-tools/commit/234ed43e3e7b2cfcb76a19c80fcdb573a625309f) `sha256:8ed54093f072ffd4498bf0262a30e2861ff2820178e5770d6ea7387320f6414f`
* rhel-coreos `sha256:6a707b3512cbc0c9a754e6cf60bc9baeef13ec79653602f31fb78f634c9982c8`
* rhel-coreos-extensions `sha256:b5cad16ce5326cb67c25616639047ff54d929686fb510631b07616c78c4ebebd`
* [sdn](https://github.com/openshift/sdn) git [cbddb0be](https://github.com/openshift/sdn/commit/cbddb0bee05ec89d1379ced8d1aab7269d55daf2) `sha256:5933eb3b27b52fb124ba391d9808b682b413a1943f1bbd3267445821c42dc6a2`
* [tools](https://github.com/openshift/oc) git [ee354f66](https://github.com/openshift/oc/commit/ee354f66de43b037ef8b0ed55ce65c6c42aa7b9c) `sha256:fad1d9660d351b8b20e69531c0af399b490481a8736d245bf6baf9b1f20edf8d`


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/69f77762a6f8ba6bcdc185c4ed6e7a88fb8a5154)

* [OCPBUGS-53718](https://issues.redhat.com/browse/OCPBUGS-53718): Bump jwt to 4.5.2 in release-4.16 (#1091) [#1091](https://github.com/openshift/assisted-installer/pull/1091)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/27db6d764cbb244b6b817b0ddc289f0bd79f1930...69f77762a6f8ba6bcdc185c4ed6e7a88fb8a5154)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/dca62e533cb886dedb89890948b2c9505d0ee0d5)

* [OCPBUGS-52994](https://issues.redhat.com/browse/OCPBUGS-52994): Update to latest ghw version (#986) (#996) [#986](https://github.com/openshift/assisted-installer-agent/pull/986)
* [OCPBUGS-53710](https://issues.redhat.com/browse/OCPBUGS-53710): Bump jwt to 4.5.2 in release-4.16 (#971) [#971](https://github.com/openshift/assisted-installer-agent/pull/971)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/5d581421e2cb97db33a111c82d06cb1d275139a7...dca62e533cb886dedb89890948b2c9505d0ee0d5)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/c567cf94247e7d466a2f2aacbfe96253613c8cf3)

* [OCPBUGS-54990](https://issues.redhat.com/browse/OCPBUGS-54990): Re-reconcile machine on NIC provisioning failure [#137](https://github.com/openshift/machine-api-provider-azure/pull/137)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/100d2bb8abf8bac723b1f01d7509ba5c3f3303c7...c567cf94247e7d466a2f2aacbfe96253613c8cf3)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/1a3d64c615bbd1c339ba0c1a5c34e75522a64efb)

* [OCPBUGS-54240](https://issues.redhat.com/browse/OCPBUGS-54240): Update timeout for GCP WaitFor operation [#9715](https://github.com/openshift/installer/pull/9715)
* [OCPBUGS-35040](https://issues.redhat.com/browse/OCPBUGS-35040): Power VS: Add ports needed for private clusters to security group [#8546](https://github.com/openshift/installer/pull/8546)
* [Full changelog](https://github.com/openshift/installer/compare/40d677664f1f9e55ea27a9f6faa3fa8f763bc823...1a3d64c615bbd1c339ba0c1a5c34e75522a64efb)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/66931aae890394ae9f91b273160e2788e548b969)

* [OCPBUGS-56359](https://issues.redhat.com/browse/OCPBUGS-56359): Increase API call timeout to 30 second [#172](https://github.com/openshift/cloud-network-config-controller/pull/172)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/8ceee78810756afaa2efb75f60bef0358502834f...66931aae890394ae9f91b273160e2788e548b969)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/9989e43ffd2a2b17dd14d7cd6204558507e1f1b1)

* [OCPBUGS-53510](https://issues.redhat.com/browse/OCPBUGS-53510): fix CVE-2025-30204 [#1403](https://github.com/openshift/cluster-etcd-operator/pull/1403)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/3f2ce4889c255391323d8bdf07dece99e87dbccd...9989e43ffd2a2b17dd14d7cd6204558507e1f1b1)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/db952dd8188afc450be6f8c60d00e9068377c266)

* [OCPBUGS-53317](https://issues.redhat.com/browse/OCPBUGS-53317): Fix feature migration for EgressIP [#2673](https://github.com/openshift/cluster-network-operator/pull/2673)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/10162672f39b812dbfdbc3fa51f634c7851c1df1...db952dd8188afc450be6f8c60d00e9068377c266)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/6dde5732618244c79b4481f6a3b7a6e7dd5c28f4)

* [OCPBUGS-55457](https://issues.redhat.com/browse/OCPBUGS-55457): Adding mutex to func createSamples on handler.go [#633](https://github.com/openshift/cluster-samples-operator/pull/633)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/7ee5f8f5eed5351627709eade6e5916790c6f8c5...6dde5732618244c79b4481f6a3b7a6e7dd5c28f4)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/d0d0d6e7614148e497a10001ac16af689506c626)

* [OCPBUGS-55156](https://issues.redhat.com/browse/OCPBUGS-55156): Fix a panic caused by a data race [#1178](https://github.com/openshift/cluster-version-operator/pull/1178)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/6af06e02dd84880a6389284840a8d95c91bf226b...d0d0d6e7614148e497a10001ac16af689506c626)


### [console](https://github.com/openshift/console/tree/4a7dc548a3d29a915107925ae8f404bbeadf021c)

* [OCPBUGS-55378](https://issues.redhat.com/browse/OCPBUGS-55378): Do not load CSRs if user does not have permissions [#15000](https://github.com/openshift/console/pull/15000)
* [OCPBUGS-55644](https://issues.redhat.com/browse/OCPBUGS-55644): fix bug where operator appears twice [#15016](https://github.com/openshift/console/pull/15016)
* [OCPBUGS-45142](https://issues.redhat.com/browse/OCPBUGS-45142): Add missing pipelines plugin name to known plugins [#14550](https://github.com/openshift/console/pull/14550)
* [Full changelog](https://github.com/openshift/console/compare/96eb186d35ee5fea1f136951afdc52609b12faf1...4a7dc548a3d29a915107925ae8f404bbeadf021c)


### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/5f9ee066b2b7768606ffae81b52e8bd0f25cb471)

* [OCPBUGS-55648](https://issues.redhat.com/browse/OCPBUGS-55648): Check error returned by ipv6 SettleAddresses [#188](https://github.com/openshift/containernetworking-plugins/pull/188)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/73b4123cc75abd22af8dc3b429836be2bea45fd5...5f9ee066b2b7768606ffae81b52e8bd0f25cb471)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/8851888abd5f7f47edd12a56f515b8f333c09372)

* [OCPBUGS-55249](https://issues.redhat.com/browse/OCPBUGS-55249): Disable shielded VMs for non-UEFI disks [#116](https://github.com/openshift/machine-api-provider-gcp/pull/116)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/380f339af123d187a24c4d6be972e18dd8308e6f...8851888abd5f7f47edd12a56f515b8f333c09372)


### [hypershift](https://github.com/openshift/hypershift/tree/ba952e163ff6021327d0ab9fff6c6570062f00c8)

* [OCPBUGS-51804](https://issues.redhat.com/browse/OCPBUGS-51804): Fix golang crypto dependency go.mod replacement [#5994](https://github.com/openshift/hypershift/pull/5994)
* [OCPBUGS-54914](https://issues.redhat.com/browse/OCPBUGS-54914): Add konnectivity-proxy sidecar to openshift-oauth-apiserver [#6026](https://github.com/openshift/hypershift/pull/6026)
* [Full changelog](https://github.com/openshift/hypershift/compare/64381e4e4e3c8bff6f469b7e149fdaa5a9ba4032...ba952e163ff6021327d0ab9fff6c6570062f00c8)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/f58519f1aaf9d686a44e3acb2c4952fd6a3535fc)

* [OCPBUGS-55248](https://issues.redhat.com/browse/OCPBUGS-55248), [OCPBUGS-55249](https://issues.redhat.com/browse/OCPBUGS-55249): Updates GCP credentials request [#1355](https://github.com/openshift/machine-api-operator/pull/1355)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/693374418a09d902fa9e10c909b0c38b5a513505...f58519f1aaf9d686a44e3acb2c4952fd6a3535fc)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/19d2a0275bf5e566dff786fbc88fe97c69d131d9)

* [OCPBUGS-54831](https://issues.redhat.com/browse/OCPBUGS-54831): Make mtu-migration run after wait-for-primary-ip [#4990](https://github.com/openshift/machine-config-operator/pull/4990)
* [OCPBUGS-55684](https://issues.redhat.com/browse/OCPBUGS-55684): MSBIC should not update windows machinesets [#5028](https://github.com/openshift/machine-config-operator/pull/5028)
* [OCPBUGS-35921](https://issues.redhat.com/browse/OCPBUGS-35921): userCA and cloudCA certfiicates are not removed from nodes and ignition config [#4419](https://github.com/openshift/machine-config-operator/pull/4419)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/d00398e9d7c250a6361222a1024209ca4f73f79d...19d2a0275bf5e566dff786fbc88fe97c69d131d9)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/e88ad2bbc482feb728c61783cfed85509b2a2db6)

* [OCPBUGS-47472](https://issues.redhat.com/browse/OCPBUGS-47472): adds getcontext (backport 4.16) [#261](https://github.com/openshift/multus-cni/pull/261)
* [Full changelog](https://github.com/openshift/multus-cni/compare/c4aa21b9bfed4ebafc2e67ca1474e245b67b5f9f...e88ad2bbc482feb728c61783cfed85509b2a2db6)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/467d84ad05ef97ab2a36d27258185942e21d1636)

* [OCPBUGS-55618](https://issues.redhat.com/browse/OCPBUGS-55618): Fixes leftover podref issue [#365](https://github.com/openshift/whereabouts-cni/pull/365)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/36e2ad06f7637f867233bd7e9367f9faf12835b3...467d84ad05ef97ab2a36d27258185942e21d1636)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/87554a1774e48ab8ce44199976f1aeab2902e346)

* [OCPBUGS-56354](https://issues.redhat.com/browse/OCPBUGS-56354): Empty proxy variables are causing issues during the build [#382](https://github.com/openshift/openshift-controller-manager/pull/382)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/bcf6e58edbcc8e7ce6f7e4d0658635688e0fc114...87554a1774e48ab8ce44199976f1aeab2902e346)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/2501912454f1c119be5d53416ba7271aaace727d)

* [OCPBUGS-52503](https://issues.redhat.com/browse/OCPBUGS-52503): Fixes unexpected mp0 route removal during start up [#2479](https://github.com/openshift/ovn-kubernetes/pull/2479)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/961bff913e2a04d640941f73d4632452adbaffaf...2501912454f1c119be5d53416ba7271aaace727d)


### [prometheus](https://github.com/openshift/prometheus/tree/396e723fdbfb6ef53431dcb35c0c3f84de0712c1)

* [OCPBUGS-54942](https://issues.redhat.com/browse/OCPBUGS-54942): Scraping: Bump cache iteration after error to avoid false duplicate detection. [#250](https://github.com/openshift/prometheus/pull/250)
* [Full changelog](https://github.com/openshift/prometheus/compare/09479fe37af9d9f187cb21796e73213c80c902fc...396e723fdbfb6ef53431dcb35c0c3f84de0712c1)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/9ff2408eb11efe30253ba6a7e9ad4bf92dcb8fab)

* [OCPBUGS-55201](https://issues.redhat.com/browse/OCPBUGS-55201): ingress: Reset metrics when ingress is deleted [#58](https://github.com/openshift/route-controller-manager/pull/58)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/3112b458983c6fca6f77d5a945fb0026186dace6...9ff2408eb11efe30253ba6a7e9ad4bf92dcb8fab)


### [tests](https://github.com/openshift/origin/tree/c7747b3fe629ab9ca93f877ed5946da7e3fb3f32)

* [OCPBUGS-55476](https://issues.redhat.com/browse/OCPBUGS-55476): support provider type external [#29738](https://github.com/openshift/origin/pull/29738)
* [OCPBUGS-55636](https://issues.redhat.com/browse/OCPBUGS-55636): [build] Ensure Git Clone Does Not Run Privileged [#29746](https://github.com/openshift/origin/pull/29746)
* [Full changelog](https://github.com/openshift/origin/compare/e47256fe8ed6c66675f23ea8d631b7cb7881a6a5...c7747b3fe629ab9ca93f877ed5946da7e3fb3f32)