# 4.17.10

Created: 2024-12-19 18:50:57 +0000 UTC

Image Digest: `sha256:4c8cc149a8e4ef2f9ea2c43cde4f197faf3f58c26b1f3954871fd1c59f2bc1fa`


## Changes from 4.17.0

### Components

* Kubectl upgraded from 1.30.2 to 1.30.5
* Kubernetes upgraded from 1.30.4 to 1.30.7
* Kubernetes Tests 1.30.0
* Red Hat Enterprise Linux CoreOS upgraded from 417.94.202409121747-0 to 417.94.202412180008-0


### New images

* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [08579e9f](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/08579e9f60ab7f5f6c57f7e507c66a7ff0cc6d62) `sha256:75c7397252f2279f7ca49998d1277d36314f99e384cd6e54d63f6de4407e32d8`


### Rebuilt images without code change

* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [3b99303b](https://github.com/openshift/agent-installer-utils/commit/3b99303bc6d1c85465139f1e1c4847c038e4dc8f) `sha256:bae2f4c70e8dfe964b747ef55ceff8115741156748ba746c83462eb696814efa`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [cd426416](https://github.com/openshift/apiserver-network-proxy/commit/cd4264165057a0098c5d6e0b4e8727b4232cc3ce) `sha256:b00091dbd8ba91690b384419627dc8e4a968c8f60628a293491bfe75c268a25f`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [8c77f418](https://github.com/openshift/cloud-provider-aws/commit/8c77f418214630cb5f3e0b1cf68f3f3d881e5f0a) `sha256:256e4cb5495277224a61b5794e217ebead3d2fdbf92e29d5587fa5bcfdd3d5cb`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [2bb5b316](https://github.com/openshift/aws-ebs-csi-driver/commit/2bb5b316f5941788e398f22974f9c816dd37d428) `sha256:d1efeea4b2ba527da47200184498268aebd20c8ce43561d10f44c53d0fbec34c`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [b91c75bd](https://github.com/openshift/aws-pod-identity-webhook/commit/b91c75bd2948189a150061ef799d688d75cf2a1d) `sha256:c4bdbed5dad0eec2e448abf0fdcb014d31d45898bd7cc964e7d7d76d4d53cc82`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [b9204e21](https://github.com/openshift/cloud-provider-azure/commit/b9204e2197b922ecd080fcbe112b4a09e18344db) `sha256:76566e32c208650a8b835846294ee6ce96b707871907c7f0a41066696bb39349`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [b9204e21](https://github.com/openshift/cloud-provider-azure/commit/b9204e2197b922ecd080fcbe112b4a09e18344db) `sha256:a288fb07274d7a0f3d9b06cb514f00906b2c586b2701d59e9d51e5c51252727b`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [d359bfe5](https://github.com/openshift/cluster-api-provider-azure/commit/d359bfe56764238e2881f0f003fd8206b2b40dec) `sha256:7d50e496d40e3812ce979b9bfae30cdce12cbd0763fb55cb194f1531bc19f0a3`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [a544f30b](https://github.com/openshift/azure-disk-csi-driver/commit/a544f30bb48dbf6325efbb75e7114b9837c32505) `sha256:767999d3adba79adf9af254e79f3bd4651d62258de4b6e2b3bab8e317b95dd8e`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [9f4c38c2](https://github.com/openshift/azure-file-csi-driver/commit/9f4c38c2bb28347ed5c4fd082666bfdea7382243) `sha256:4e610b3e115a3dd0666117f67de51cc069b0166e070460c10e87d9b7a56812d3`
* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [d69a3e35](https://github.com/openshift/machine-api-provider-azure/commit/d69a3e35d8cb0c9497eab723563f18d46f860bb8) `sha256:861cfc34c5db888b5d30956a6f98b8a3a14937ec8c6ef3c7a283c6364500a74d`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [75b1b4ce](https://github.com/openshift/azure-workload-identity/commit/75b1b4ce871da06195b39da0eddd7a68496e4a59) `sha256:da5e5631bb16d1fa9685d355b9bc45022d35a8aefa474c07e83c32d468de2623`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [9e6d2bd4](https://github.com/openshift/cluster-api-provider-metal3/commit/9e6d2bd4f848a0137040e618c2df4eecce4caed7) `sha256:55237604413c5701057b7dd6360bacb98a733cdd358f0f971b4186a934129535`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [2549061c](https://github.com/openshift/cluster-api-provider-baremetal/commit/2549061c570a7ff152c66322978bb142647b8b4e) `sha256:fbc38747d338a257a85839da70e97842720eda026967fa8f8965585b98306b68`
* [baremetal-operator](https://github.com/openshift/baremetal-operator) git [94748225](https://github.com/openshift/baremetal-operator/commit/94748225f29f3a7ef7dfe5844219c3856a421903) `sha256:e3e4a0a94a54f1d8a92afb6f128faef27cab295c51b2920e68ef5e4fd36d1fc0`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [e1f3e0d1](https://github.com/openshift/baremetal-runtimecfg/commit/e1f3e0d105247d8a53fafe53de33a4ce92b88c41) `sha256:aa0869e945139f433faf914f52e60a9bd43569bb994025acea18da7ba24d7852`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [779b346c](https://github.com/openshift/cloud-network-config-controller/commit/779b346c8bccdb8590e403661ca57cc6ac544eb9) `sha256:59a77b050e4276d199c6402cba45cffbb8c7e24d0583c16aeb62ed8a3b5e46d5`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [77ef4fc5](https://github.com/openshift/cluster-api/commit/77ef4fc55392dd02232da73cc06a504659d08b48) `sha256:fee7e55a381963ca2ef2294c67f2bb33e395f89217d9b9340799092affe35c58`
* [cluster-config-api](https://github.com/openshift/api) git [0a880016](https://github.com/openshift/api/commit/0a88001628266522c84e6c6c25ed5a44aced6d8b) `sha256:5264f702aaeb49b0006e95cb1549fbab87ea8921adcf7425895e89b0ed4e1116`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [0dc084f4](https://github.com/openshift/cluster-config-operator/commit/0dc084f47be4c5ee02cf40495b6bd8f334c930eb) `sha256:f17caf9414c388624a32d43fb585d3630b07bc14c72aee5079a0ada632e9d65a`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [ffba005b](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/ffba005bf839897b173cb76d0bb561dcf9c7215c) `sha256:5c79d065d97ed66ed9640dd61bd97c8a1f85a36f9633b233f81242531cc5d01a`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [54eea5bb](https://github.com/openshift/cluster-dns-operator/commit/54eea5bb02911cdf0c7fb6dbb80366eb5a923ea7) `sha256:76b6efc04c95666e9172a76714df8db265045f1c2bcd615f14500f55fc548205`
* [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator) git [cb5306d7](https://github.com/openshift/cluster-ingress-operator/commit/cb5306d7f68ba35b9a065d65f46c69a836556cb2) `sha256:fae1ea9c1a4e6b2bed557556cbc79c509f2abc993de56b8d432f2c241a1eacc8`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [0a9ed573](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/0a9ed573e35751455bfb24842fd2de0b05379ed0) `sha256:a5557da9c4fd8a94543e8c9a1bb893b8364b6bb41488ed4925ba3fb5c2377e77`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [98ca953b](https://github.com/openshift/cluster-kube-scheduler-operator/commit/98ca953ba6955401023e219f37e0af49879355d2) `sha256:a43ba2075c7e0ab246ed0120c08121719b50dccf95c319bad5210558f7d56496`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [a0d27f3f](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/a0d27f3f04cb61084fef767c2df5bcc7b3db2d27) `sha256:5e864fc65d96dd58d17d04b05dfd0622b899771c6a10fa2f7d2661f6b5a8e38e`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [e31b7775](https://github.com/openshift/cluster-olm-operator/commit/e31b7775ef903ff0c35f95656af27afa2dddd3e4) `sha256:0d87be72f1424cac2022830be7dbe0ac65cc614db9b133c4555724bcf22d6e9e`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [2b962c71](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/2b962c71d5b3ac179898dc1ece6a98de0b33cd70) `sha256:b3bc51aedd38069e6a090fdbfd8a2d65fc76349b4ef945e2209384cc8e710792`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [7209e90d](https://github.com/openshift/cluster-policy-controller/commit/7209e90d4205dc16bf0c83fb556c3d955d942d6b) `sha256:2562f0d82facda33cdc351ba0eaa60a66f94c3f79b32d83e2bd1279797f5f472`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [2ce31fc5](https://github.com/openshift/cluster-update-keys/commit/2ce31fc513224e76ac5924addc6207c205d95742) `sha256:1b9b5d8d9a282facf9ea1ed865fe1e8f8244282b31fe47e5368dc30ddfd10347`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [b877222b](https://github.com/openshift/configmap-reload/commit/b877222b8c5527450447079e33d86dd9fe288e54) `sha256:0e88c3af763508decaa1942367c8c74676302610f978503a6274c9e9434c3c97`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [24a65329](https://github.com/openshift/containernetworking-plugins/commit/24a653296bab25b772cf6a573cc26f6f884be4ae) `sha256:ce98b02d53b51dda73ffba0e9121f20266639ef3dcd5431b57fab00bf29d3d07`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [24a65329](https://github.com/openshift/containernetworking-plugins/commit/24a653296bab25b772cf6a573cc26f6f884be4ae) `sha256:8f8ed8ec72082e9206c06c37806c7aa3b5d9344860068e09f5b50c9513757b13`
* [coredns](https://github.com/openshift/coredns) git [d3b441c1](https://github.com/openshift/coredns/commit/d3b441c150ccbcc0d9ebf03b8c39a730b830ddb1) `sha256:2164d9059b8df17974fbd6513d442adb91987f058d6df2c0025ae160491c986e`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [6a72c254](https://github.com/openshift/csi-driver-nfs/commit/6a72c2541e6bc85bba0c1a7ed379dcb9fa53dfb7) `sha256:c16c7e5ab259d06732c62ff2dbc9c8817cb36b793025bec65ebb6387b42c75e7`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [c095a1f2](https://github.com/openshift/csi-driver-shared-resource-operator/commit/c095a1f2bbd0c365b74e548498d13f8463c69eb2) `sha256:e5e956d289b21fd515aa7bc62e439fffeae99142e17e1c6cf3f9943caf5c49d7`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [c3fe8e2e](https://github.com/openshift/csi-external-attacher/commit/c3fe8e2ec46929fbad110b392337960be3c9d6a0) `sha256:0bd0db981b463f208c5fb5f7d1042e7c9bc89fa32b211790c7dd4ccfe0e31371`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [fe460e56](https://github.com/openshift/csi-external-provisioner/commit/fe460e56e19dd3cc5497fd068083da9850fc1996) `sha256:0fe40507eb939acbc09376e8db959307bd96289f9fcf73810223becf3632109d`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [ab87a938](https://github.com/openshift/csi-external-resizer/commit/ab87a93853882d6ede0a8fe0a61469cd4fa61a62) `sha256:3fd5699e8a29a11790bfba31113162252b4a7711b32722a6b9c5388387270ed4`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [aa558ca4](https://github.com/openshift/csi-external-snapshotter/commit/aa558ca4bc55238e1909119f94eaf33872a76dec) `sha256:1750f64e78342467ce210f0f92f3a06f5c2b356b1c35b1084108d39ca74ec526`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [075ebcdc](https://github.com/openshift/csi-livenessprobe/commit/075ebcdcb83929571fbea0a4d8ef5e2429e7a259) `sha256:cde3fddb25170dbe0d9dc2d779482f9a45d5d890a5a0be94d1849149a9ea6c3e`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [436a1f33](https://github.com/openshift/csi-node-driver-registrar/commit/436a1f334dd75ae75206f52223b7933f7ff5036f) `sha256:59911ce59b4d3545e091d7e96f71dbda2421c72d6c4d6e2d8056c17b650b4da2`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [aa558ca4](https://github.com/openshift/csi-external-snapshotter/commit/aa558ca4bc55238e1909119f94eaf33872a76dec) `sha256:abe67c6a9d6dfa5c22826993e659cfff9dafe43270e629532b98f4f7cda7c679`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [aa558ca4](https://github.com/openshift/csi-external-snapshotter/commit/aa558ca4bc55238e1909119f94eaf33872a76dec) `sha256:46c4dc12ec5fc95735447dec8f7890d03691fb9ea4ecf415d6d60f3c5274dd61`
* [docker-registry](https://github.com/openshift/image-registry) git [ef9fa957](https://github.com/openshift/image-registry/commit/ef9fa95763754c05beb32e1ddca406de67ae4bd6) `sha256:4751c96968073382eae53f3e4502368bd329c06a55ff6126f97c8c319f82aaae`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [859518f6](https://github.com/openshift/driver-toolkit/commit/859518f6952407a56ddf7d0562c98fe27e9e0efe) `sha256:08b87914b52745e957a46caa9e3085902557f609c18adf7d60ad7a8b6db19af2`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [3193a756](https://github.com/openshift/egress-router-cni/commit/3193a756d60e14f7139992e2e42b7036955652e7) `sha256:09463f9130726704823f6ae461f92795b943c14bfd8a67cea0f82732ccb7d2f7`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [8ce997d7](https://github.com/openshift/cloud-provider-gcp/commit/8ce997d7b2fc615ce23788512246fb9955c7c711) `sha256:c0dc72359369172e9c193275a08a809a749530190ad3f48a8e2f633b6419c74f`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [9c561f2d](https://github.com/openshift/cluster-api-provider-gcp/commit/9c561f2dfeff6ca44a6c23ae8acbce4a465b380f) `sha256:a4336d9f69c84afd7cd3b5d9429cc8aa8823eb1870471e0ff51114469a05ab7f`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [c770b412](https://github.com/openshift/gcp-pd-csi-driver/commit/c770b41229e39d8859fc11ec709ab57a0e0ad06a) `sha256:509d9932eb94e92f2f6783a60d2b2cf189482711cedc70b2851fd91c082501f6`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [c23b064f](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/c23b064fe303ec760c0de6204577d10ef0b0f63d) `sha256:1ba321eefd886ede4980fa07d427f613c375439925a841e34c243e951e57e037`
* [haproxy-router](https://github.com/openshift/router) git [a33f2b6a](https://github.com/openshift/router/commit/a33f2b6ad04f8c39b95c1839340f0e38b5c0662a) `sha256:ac1508e67210a4ef8dc7e5f737d3b14173bda80e6cc217d8e9c07480ef7d1ce3`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [ad8f7eb0](https://github.com/openshift/cloud-provider-ibm/commit/ad8f7eb0ffba27fa8db8ad3692f530728312ad06) `sha256:1896606743d3d8879c6c5bf54c93c7c9a75e5951e70f72bfefa512151ce38581`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [3a3a62f7](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/3a3a62f7a200d2042cb64757f2d60faed20b6218) `sha256:e36e22451d54d97c568c4a5003239a2bd4f865dfff4591f8dcce73940969fd68`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [b698ea3e](https://github.com/openshift/ironic-rhcos-downloader/commit/b698ea3e0818bfcb8c27c4964bcaaaeee5f49818) `sha256:6a37c353b90a9253660e0e1670ba91cef8039a260ec37eb655c3fa4b3f895907`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [713378b3](https://github.com/openshift/ironic-static-ip-manager/commit/713378b37863d482b72051e3d7f1d0976abed0ce) `sha256:e658d11a614a5f2b0a5f999893c28265fcc7aff99001b74555ad6d875c381182`
* [keepalived-ipfailover](https://github.com/openshift/images) git [e3879e9e](https://github.com/openshift/images/commit/e3879e9e36d64c6be08b621a50ad5d3ee343dc3e) `sha256:bd36d8212ddd5e4da7475f7c77bb780c28bed542a02ef7b664b54bd282ba1efe`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [28b10b8f](https://github.com/openshift/kubernetes-metrics-server/commit/28b10b8fcc2d21fb323e79afeb46301d0c3c6e9c) `sha256:91f547c0a676ccf372682e3a0add5588c4608251776e9b43ede394c37b332a83`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [462e63f6](https://github.com/openshift/kube-state-metrics/commit/462e63f6223817d3610f030f6166a790d793c572) `sha256:5a57dd7acc06bef4bee5eb85e2006cf7b89acd28a4fe5c3ef8cc895ed4c7dc95`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [34fafc04](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/34fafc04e5f2872e282617da31175a7e091ffdb2) `sha256:a52f9aa6df3c9193997a682e4e29b9c58c0c99decbb560e8f127d962c2a1eda7`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [3f4542ec](https://github.com/openshift/cloud-provider-kubevirt/commit/3f4542ecd17fb0e47da4c6d9bceb076b98fb314b) `sha256:41427d9fedd3dfbbd33bb096dcd3ee26fa4b79d40b79e399db8adc984478ff07`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [02f9a921](https://github.com/openshift/kubevirt-csi-driver/commit/02f9a9211a89784aad3272ffe93aa305a00be736) `sha256:46af8d796f4b8117c52fee979ad48e9d8b1ffb2eb282768c486155b7dda72a56`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:bfc8c1351cab10a9da6a01409c5f6cbdcec1360739ddbae085d994fc2f1ffaf8`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [74bee374](https://github.com/openshift/image-customization-controller/commit/74bee37482b0e9d581c2e12c8040195169e49032) `sha256:2d73aa871cf720f2cee7e39f7809c8954a8ab686cd795502306739200ff976e2`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [9e76dac7](https://github.com/openshift/machine-os-images/commit/9e76dac7c015538cea342bb0d4b226a9ffe58754) `sha256:e83b48efb159a5c05ef9ecb1e15b055d00711fd0e53a35237d2803e8b2ea8822`
* [metallb-frr](https://github.com/openshift/frr) git [377d02f9](https://github.com/openshift/frr/commit/377d02f94181d26dac3ab2e2067ced9fe8d73763) `sha256:5695b6a0fcc8a2a3e37372c79912b6a6d64d5ee7a0623fe2f083f89d35b23ac8`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [076f0caa](https://github.com/openshift/multus-admission-controller/commit/076f0caa98ca33b0eb4d3cdb0f984de03e8bd6b7) `sha256:1bf080bea361622295b9eec25432eeae6e7ba1639fc3a1d292d7467022b13c7f`
* [multus-cni](https://github.com/openshift/multus-cni) git [b8d8d5c0](https://github.com/openshift/multus-cni/commit/b8d8d5c0128743d5d3c188ad37004c0a4bc00337) `sha256:58522bba37b0b3bb9a0103e8d7f99a85042840d58f49dd847d206e0c2159472b`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [b8d8d5c0](https://github.com/openshift/multus-cni/commit/b8d8d5c0128743d5d3c188ad37004c0a4bc00337) `sha256:01c5940636c31985b7ce70971230ba78042df3d456c740b2f89cd6e8736f7bad`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [7d01ea1c](https://github.com/openshift/multus-networkpolicy/commit/7d01ea1c54c4eeace626f05a9dcc94230b3a9ec8) `sha256:244a12a4142b73f0cdc8c5d6d25df143abd44df4893a1f0620cccf6b763c15fb`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:8f05cfd893623d301d7d34236c7ae18a67f3f70bf4c5205b03ef3932d70e02e7`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [b950d50d](https://github.com/openshift/whereabouts-cni/commit/b950d50da905e2174df6f93a1f49f69332f65f42) `sha256:46cafafa705714cc7681a5d1fe2c43f96cb55e5b5ce711095a9e8a521d09167d`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [8630f336](https://github.com/openshift/bond-cni/commit/8630f336431ccca04de465f991dbdf3ab736913b) `sha256:21f9da6db99de821234f1741473e785a09eebcdb83590531f6a65ed8dab3e749`
* [network-tools](https://github.com/openshift/network-tools) git [8e170b4f](https://github.com/openshift/network-tools/commit/8e170b4f41c9e80f0f8dd42d6cf6c169872b15d1) `sha256:77a9f887329eac13c74b5b74a9e50eb48962f092cecf9d40a6ae3b62454b49bb`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [c9f6cd1f](https://github.com/openshift/cloud-provider-nutanix/commit/c9f6cd1fa4cff30c060d8927c16fabafb645a4e9) `sha256:7e30007b24e35568b461592042dae8cbc6769606e3ed72f284d292a240256b41`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [68aa2bbf](https://github.com/openshift/machine-api-provider-nutanix/commit/68aa2bbf47a02361b89cdd71ea18968a78cbd0c0) `sha256:49b439c296d8ea16f69ef773ab5f83bc9d30a6e10516dab2c8545ae946999731`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [e37ccb45](https://github.com/openshift/oauth-apiserver/commit/e37ccb455e1b48d1af032315987baf1e93b4084f) `sha256:12aa122922a4b916100b9772122373ae8c468029b15fe739fc663f5324f73354`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [30f80124](https://github.com/openshift/oauth-proxy/commit/30f8012482023689655252dc2af2f17fe6a09253) `sha256:4362ecb52186ef758fff8ef35a9a2efd54a507b11e37b9d21d03678a7a4e6f2e`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [1e963eb5](https://github.com/openshift/openshift-state-metrics/commit/1e963eb5839e2408734e37765d4d6b8fc48b343d) `sha256:07561dbef6b466291f1cb0abe4fb1019c7c492d5e64d371fccaaae205d4435ce`
* [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator) git [f89b6dbc](https://github.com/openshift/openstack-cinder-csi-driver-operator/commit/f89b6dbc9464e13f432a96ab42bdbb38bdd587d2) `sha256:082e1351c0d71f92324097ac0f9979713ceabf824c61686baa77588b33fcd56a`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [68971874](https://github.com/openshift/machine-api-provider-openstack/commit/689718740b923e516c037d7862d81a462ecdbbd3) `sha256:d6baa389d9e16e3dc511cda4a7b2efd8a8eccf715439515da5afece6bd252c15`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [51f871a5](https://github.com/operator-framework/operator-marketplace/commit/51f871a51fdfec73932100e13201301ddeb35fa1) `sha256:45a4cbd98966e4aa2b7f20f881b453e15d97bf923255318053a2d6dfe3925cf4`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:8136f53f4d179fbfa0bf3a67429e09d33e2a8fbcd28fd5e05d35944c93951c9e`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [0feae256](https://github.com/openshift/ovirt-csi-driver-operator/commit/0feae256abcc9b86c0276eaf2fc233cf899fb0ae) `sha256:b68b4a7503edb7e74e8f39880fc902e165e907e6a82b7975b1a551a5623f0dfc`
* [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [abb91c84](https://github.com/openshift/cluster-api-provider-ovirt/commit/abb91c84083dd139780921673da64fa5cd13bccb) `sha256:f66f5cc49237f40e81d01d8e08ea253e81b31b90ce99c6245d6be7d03f3a5cdd`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [aaa6afa9](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/aaa6afa9c4cc5b283f2d0f09f78610857e067c7e) `sha256:05f5fc1dc85c4a666cfd3eea0302b03a67c26ab77c4f2ad45a5544d4aaa370ac`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [f6f037c5](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/f6f037c556d7fb8155c83e20e951944aecd102c6) `sha256:9e6e7bcac116752bd3bdb151030b1dc53a5f5f5b01768dd95a935964dcc49159`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [bd3d72e5](https://github.com/openshift/cloud-provider-powervs/commit/bd3d72e5095c950964f64871253e4da4ad2acbe7) `sha256:a956a242e1edeb7eca0e99b33ab8dbcb397a3676d0c1459905e5f0751f678b36`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [fe7a877c](https://github.com/openshift/machine-api-provider-powervs/commit/fe7a877c750d1f67c6cbe9c0ea03d864d3c06cea) `sha256:eb8c47b629179786a09e2f95a2cd831d003c8dbadcfb6b851917d31217975764`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [d80e9044](https://github.com/openshift/prom-label-proxy/commit/d80e904430effd51a5f00bf6345a2108b33bc15e) `sha256:127c2fae32671ef43e42819955a91535addbde77ed68309fcf73568304bce3ad`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [d7c1a7c6](https://github.com/openshift/prometheus-alertmanager/commit/d7c1a7c6ac4b5482174797649834a47fc39d2575) `sha256:c03fc75bdde653214330d0ea4130a7b806c49f3dc9d7230f255807a67d85b5b3`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [16f1cb00](https://github.com/openshift/prometheus-operator/commit/16f1cb003f65bf11b2a0a9a9ff9f9450eb7f249c) `sha256:d354b89e09fb7c667ba7099ca6fee2b591a734e58d818da5ad559b32249802c8`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [d88fd69b](https://github.com/openshift/node_exporter/commit/d88fd69b579485146a584e8640c82a09daed2d5e) `sha256:e7ed647d4ec2180dd73486b0b1993aae6835db201f29b4584ab3c14da350663c`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [16f1cb00](https://github.com/openshift/prometheus-operator/commit/16f1cb003f65bf11b2a0a9a9ff9f9450eb7f249c) `sha256:94e0dea785489c1ec718c61ecd1460e9edceed16fb4320441e4371d0389aacde`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [16f1cb00](https://github.com/openshift/prometheus-operator/commit/16f1cb003f65bf11b2a0a9a9ff9f9450eb7f249c) `sha256:89f6d0a75c86720fdc1722992d3772a176e082e170594696555f280579c70568`
* rhel-coreos `sha256:8f6e0c5c7d4177c6631277deea60df55f67b15ba40f7d06f3d4e2eeb88fd4530`
* rhel-coreos-extensions `sha256:4e78b712891afdeecaf04b3169f7a0a2dc58d1017c7e5a3f4069697e1b5b1289`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [a47f6be3](https://github.com/openshift/route-controller-manager/commit/a47f6be3676d3eabb864ca339584fe857e1076c5) `sha256:622cb562d2dfd063e23be2dbc6af7474eea015ff73e83dbbd4a415d462ede9b2`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [1f7d6472](https://github.com/openshift/service-ca-operator/commit/1f7d6472fea332fc307d9c8911f8c3cf57347755) `sha256:222e8fa29f55863ba0c157ee2ba2f460a82e073229688916c60825a75505cb48`
* [telemeter](https://github.com/openshift/telemeter) git [e2b25245](https://github.com/openshift/telemeter/commit/e2b25245eb81ba6bc3821574f889678ceae1b16a) `sha256:b6956fcdd45c29efac0aedfc7971d140947d4231012e2a5250112020ecde59c3`
* [thanos](https://github.com/openshift/thanos) git [5b567365](https://github.com/openshift/thanos/commit/5b567365230115e5c242dd719110bac52fc2a4ef) `sha256:b2f408ad4f750a86e039d7df4a03b9b40c5b71e88257710a98cd621dd3902f18`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [1661cc3f](https://github.com/openshift/cluster-api-provider-vsphere/commit/1661cc3f7997902caf0ea71fbef9ea394f3b14ef) `sha256:54776a4c33056387ed07f0b3aa46ddcbe564a9ad30d8ec49f6e513824cc3b9f7`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [cd0df71f](https://github.com/openshift/vsphere-problem-detector/commit/cd0df71f2ec22d84676f40b042d4603e9c94c360) `sha256:83afb2974441ebd19d03cf5470ea93d42a10b568ccad4dd29c80fad70d3f26cb`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/b2babb90b439acef3b05ccd8400b49b7ef9ecada)

* [OCPBUGS-42525](https://issues.redhat.com/browse/OCPBUGS-42525): Disable pprof for agent-based installer (#6897) [#6897](https://github.com/openshift/assisted-service/pull/6897)
* [OCPBUGS-43020](https://issues.redhat.com/browse/OCPBUGS-43020): Update go-jose to v2.6.3 to mitigate CVE-2024-28180 (#6892) [#6892](https://github.com/openshift/assisted-service/pull/6892)
* Updating ose-agent-installer-api-server-container image to be consistent with ART for 4.17 (#6709) [#6709](https://github.com/openshift/assisted-service/pull/6709)
* [OCPBUGS-42569](https://issues.redhat.com/browse/OCPBUGS-42569): Libraries bump to mitigate CVE-2024-27289 (#6832) [#6832](https://github.com/openshift/assisted-service/pull/6832)
* [MGMT-17805](https://issues.redhat.com/browse/MGMT-17805): Fix MCO reboot error for s390x (#6727) [#6727](https://github.com/openshift/assisted-service/pull/6727)
* [OCPBUGS-36577](https://issues.redhat.com/browse/OCPBUGS-36577): Switch to github.com/docker/distribution/reference to mitigate CVE-2024-3727 (#6750) [#6750](https://github.com/openshift/assisted-service/pull/6750)
* [Full changelog](https://github.com/openshift/assisted-service/compare/4965b257ea30e1cf098a81bb6808c5db1bfe79eb...b2babb90b439acef3b05ccd8400b49b7ef9ecada)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/89f9cbab469a4433318c30f548ae02468b20fd2f)

* [OCPBUGS-44904](https://issues.redhat.com/browse/OCPBUGS-44904): Rhcos fails to reboot for skip mco reboot on s390x (#942) [#942](https://github.com/openshift/assisted-installer/pull/942)
* [OCPBUGS-38466](https://issues.redhat.com/browse/OCPBUGS-38466): Allow controller to continue when assisted-service (#918) [#918](https://github.com/openshift/assisted-installer/pull/918)
* [OCPBUGS-43023](https://issues.redhat.com/browse/OCPBUGS-43023): Pick up latest CVE changes by bumping service (#919) [#919](https://github.com/openshift/assisted-installer/pull/919)
* [OCPBUGS-42156](https://issues.redhat.com/browse/OCPBUGS-42156): Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#904) [#904](https://github.com/openshift/assisted-installer/pull/904)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/37fd43a46b3743208c1ddea98cf3b98faf0792ad...89f9cbab469a4433318c30f548ae02468b20fd2f)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/29149b7793e1f15dcb0e39a54e79fddcac744ff8)

* [OCPBUGS-43024](https://issues.redhat.com/browse/OCPBUGS-43024): Pick up latest CVE changes by bumping service (#805) [#805](https://github.com/openshift/assisted-installer-agent/pull/805)
* [OCPBUGS-42157](https://issues.redhat.com/browse/OCPBUGS-42157): Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#783) [#783](https://github.com/openshift/assisted-installer-agent/pull/783)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/ef533920d8ea0cc6c96632d042e9cdd8fa0db7bf...29149b7793e1f15dcb0e39a54e79fddcac744ff8)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/1f1c59f0ffd0bda9101e74356142e62305259590)

* [OCPBUGS-43921](https://issues.redhat.com/browse/OCPBUGS-43921): OSD-25934: Only tag NetworkInterfaces in `RunInstances` if IAM Allows It [#528](https://github.com/openshift/cluster-api-provider-aws/pull/528)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/b722659d11fcdbc4ed003aa866ed877ce654af3a...1f1c59f0ffd0bda9101e74356142e62305259590)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator](https://github.com/openshift/csi-operator/tree/d27753a267f723bab2ce7b28f5d164024f847feb)

* [OCPBUGS-42949](https://issues.redhat.com/browse/OCPBUGS-42949): add tag matching to Azure File storage class [#291](https://github.com/openshift/csi-operator/pull/291)
* [OCPBUGS-43789](https://issues.redhat.com/browse/OCPBUGS-43789): add ability to control kube rbac proxy container image… [#310](https://github.com/openshift/csi-operator/pull/310)
* [OCPBUGS-42997](https://issues.redhat.com/browse/OCPBUGS-42997): Correct aws efs csi driver config as removable [#296](https://github.com/openshift/csi-operator/pull/296)
* [Full changelog](https://github.com/openshift/csi-operator/compare/df0b8234c1233cabc0085a7d63a7fd81bf05fd5a...d27753a267f723bab2ce7b28f5d164024f847feb)


### [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider/tree/9d4016701d355cd3a47f5ebe10f266d8971febc6)

* [OCPBUGS-34314](https://issues.redhat.com/browse/OCPBUGS-34314): Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.17 [#19](https://github.com/openshift/aws-encryption-provider/pull/19)
* hack: display diff on verify-mod-tidy failure [#25](https://github.com/openshift/aws-encryption-provider/pull/25)
* [Full changelog](https://github.com/openshift/aws-encryption-provider/compare/003c3caa034c46701157f84989838793683e3fe4...9d4016701d355cd3a47f5ebe10f266d8971febc6)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/b41b8c8f52a76eb494d1dfcb796418c3549e4e5e)

* [OCPBUGS-45186](https://issues.redhat.com/browse/OCPBUGS-45186): fix Associate*IpAddress flag when launch EC2 [#118](https://github.com/openshift/machine-api-provider-aws/pull/118)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/451c30d9aff7ae7b22100ddd9f3fe5fcdaf01ae7...b41b8c8f52a76eb494d1dfcb796418c3549e4e5e)


### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/b7a46ac8f11afa837abb7c419c0e6bf191f34cc4)

* [OCPBUGS-34277](https://issues.redhat.com/browse/OCPBUGS-34277): Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.17 [#7](https://github.com/openshift/azure-kubernetes-kms/pull/7)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/eab1dcfcf4a5758aad6b50dcefe85c93b7bcce59...b7a46ac8f11afa837abb7c419c0e6bf191f34cc4)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/6e3f5e3a235c7a38be9568d7be8602f4bb02b958)

* no-jira: Collect bootstrap logs when control plane provisioning fails [#9308](https://github.com/openshift/installer/pull/9308)
* [OCPBUGS-45726](https://issues.redhat.com/browse/OCPBUGS-45726): IBMCloud: Add service overrides [#9267](https://github.com/openshift/installer/pull/9267)
* [OCPBUGS-42117](https://issues.redhat.com/browse/OCPBUGS-42117): Remove destroy search for regional target tcp proxies [#9025](https://github.com/openshift/installer/pull/9025)
* [OCPBUGS-45484](https://issues.redhat.com/browse/OCPBUGS-45484): PowerVS: Listen to machineNetwork [#9271](https://github.com/openshift/installer/pull/9271)
* [OCPBUGS-44848](https://issues.redhat.com/browse/OCPBUGS-44848): aws: user right perm for untagging BYO IAM profiles [#9228](https://github.com/openshift/installer/pull/9228)
* [OCPBUGS-45276](https://issues.redhat.com/browse/OCPBUGS-45276): Bump Azure Machine Timeout [#9257](https://github.com/openshift/installer/pull/9257)
* [ARO-12457](https://issues.redhat.com/browse/ARO-12457): Include bootstrap docker config file in go module [#9258](https://github.com/openshift/installer/pull/9258)
* [OCPBUGS-43047](https://issues.redhat.com/browse/OCPBUGS-43047): fix slice init length [#9089](https://github.com/openshift/installer/pull/9089)
* [OCPBUGS-43800](https://issues.redhat.com/browse/OCPBUGS-43800): pkg/asset/installconfig/azure: send full certifcate chain [#9140](https://github.com/openshift/installer/pull/9140)
* [CORS-3753](https://issues.redhat.com/browse/CORS-3753): Allow mocking of the Azure client everywhere [#9219](https://github.com/openshift/installer/pull/9219)
* [OCPBUGS-44611](https://issues.redhat.com/browse/OCPBUGS-44611): [release-4.17] capi/aws: set Node Port Service CIDR override [#9209](https://github.com/openshift/installer/pull/9209)
* [OCPBUGS-44230](https://issues.redhat.com/browse/OCPBUGS-44230): Add C4A instance types [#9181](https://github.com/openshift/installer/pull/9181)
* [OCPBUGS-44231](https://issues.redhat.com/browse/OCPBUGS-44231): [release-4.17]  capi/aws: bump provider for LB DNS lookup fix [#9179](https://github.com/openshift/installer/pull/9179)
* [OCPBUGS-44261](https://issues.redhat.com/browse/OCPBUGS-44261): Ensure rendezvousIP is checked against host IP [#9184](https://github.com/openshift/installer/pull/9184)
* [OCPBUGS-43972](https://issues.redhat.com/browse/OCPBUGS-43972): Cherrypick oci ccm fix to 4.17 [#9152](https://github.com/openshift/installer/pull/9152)
* [OCPBUGS-44247](https://issues.redhat.com/browse/OCPBUGS-44247): PowerVS: Update 4.17 CAPI ibmcloud to 9b077049 [#9182](https://github.com/openshift/installer/pull/9182)
* [OCPBUGS-41642](https://issues.redhat.com/browse/OCPBUGS-41642): vendor: Update openshift/api to pick up v4.17 capability sets [#9013](https://github.com/openshift/installer/pull/9013)
* [OCPBUGS-44226](https://issues.redhat.com/browse/OCPBUGS-44226): PowerVS: Fix MissingSecurityGroupRules [#9175](https://github.com/openshift/installer/pull/9175)
* [OCPBUGS-44227](https://issues.redhat.com/browse/OCPBUGS-44227): PowerVS: Fix destroy persistent TG [#9176](https://github.com/openshift/installer/pull/9176)
* [OCPBUGS-44228](https://issues.redhat.com/browse/OCPBUGS-44228): PowerVS: Change CAPI verbosity level [#9177](https://github.com/openshift/installer/pull/9177)
* [OCPBUGS-43846](https://issues.redhat.com/browse/OCPBUGS-43846): add chrony.conf file when additional NTP sources are configured [#9142](https://github.com/openshift/installer/pull/9142)
* [OCPBUGS-43735](https://issues.redhat.com/browse/OCPBUGS-43735): Add C4 instance validation [#9130](https://github.com/openshift/installer/pull/9130)
* [OCPBUGS-43897](https://issues.redhat.com/browse/OCPBUGS-43897): Revendor assisted service external platform oci [#9147](https://github.com/openshift/installer/pull/9147)
* [OCPBUGS-43786](https://issues.redhat.com/browse/OCPBUGS-43786): Limit GCP API firewall rule for internal clusters [#9138](https://github.com/openshift/installer/pull/9138)
* [OCPBUGS-43547](https://issues.redhat.com/browse/OCPBUGS-43547): Power VS: Fix incorrect error handling for AddSecurityGroupRule [#9112](https://github.com/openshift/installer/pull/9112)
* [OCPBUGS-43088](https://issues.redhat.com/browse/OCPBUGS-43088): GCP Validate Disk and Instance Type [#9091](https://github.com/openshift/installer/pull/9091)
* [OCPBUGS-43329](https://issues.redhat.com/browse/OCPBUGS-43329): IBMCloud: Handle pagination for subnets [#9096](https://github.com/openshift/installer/pull/9096)
* [OCPBUGS-42716](https://issues.redhat.com/browse/OCPBUGS-42716): Update RHCOS 4.17 bootimage metadata to 417.94.202410090854-0 [#9092](https://github.com/openshift/installer/pull/9092)
* [OCPBUGS-42806](https://issues.redhat.com/browse/OCPBUGS-42806): gather: simplify service regex for analyze [#9079](https://github.com/openshift/installer/pull/9079)
* [OCPBUGS-42996](https://issues.redhat.com/browse/OCPBUGS-42996): Power VS Ensure Metadata populated for CAPI/private cluster case on PowerVS [#9086](https://github.com/openshift/installer/pull/9086)
* [OCPBUGS-42115](https://issues.redhat.com/browse/OCPBUGS-42115): Add validation for gcp disk and instance types [#9023](https://github.com/openshift/installer/pull/9023)
* [OCPBUGS-42842](https://issues.redhat.com/browse/OCPBUGS-42842): add new tested azure instance types detected during QE 4.17 full function test [#9080](https://github.com/openshift/installer/pull/9080)
* [OCPBUGS-41812](https://issues.redhat.com/browse/OCPBUGS-41812): Validate MTU for custom network [#9084](https://github.com/openshift/installer/pull/9084)
* [OCPBUGS-42794](https://issues.redhat.com/browse/OCPBUGS-42794): PowerVS: Add support for persistent Transit Gateways [#9078](https://github.com/openshift/installer/pull/9078)
* [OCPBUGS-42699](https://issues.redhat.com/browse/OCPBUGS-42699): machines: don't sort mpool zones [#9065](https://github.com/openshift/installer/pull/9065)
* [OCPBUGS-42483](https://issues.redhat.com/browse/OCPBUGS-42483): PowerVS: update capi ibmcloud c6bcd313 for 4.17 [#9054](https://github.com/openshift/installer/pull/9054)
* [OCPBUGS-39414](https://issues.redhat.com/browse/OCPBUGS-39414): OpenStack: Install CI dependencies from rpm [#8994](https://github.com/openshift/installer/pull/8994)
* [OCPBUGS-42142](https://issues.redhat.com/browse/OCPBUGS-42142): Skip private managed zone creation for xpn installs [#9033](https://github.com/openshift/installer/pull/9033)
* [OCPBUGS-42183](https://issues.redhat.com/browse/OCPBUGS-42183): Add GCP N4 Machine Series to tested instances for OCP [#9041](https://github.com/openshift/installer/pull/9041)
* [OCPBUGS-42126](https://issues.redhat.com/browse/OCPBUGS-42126): add tested IBMCloud instance types in 4.17 test [#9030](https://github.com/openshift/installer/pull/9030)
* [OCPBUGS-42118](https://issues.redhat.com/browse/OCPBUGS-42118): Set default release image to 4.17 [#9026](https://github.com/openshift/installer/pull/9026)
* [OCPBUGS-42116](https://issues.redhat.com/browse/OCPBUGS-42116): Remove bindings for XPN installs [#9024](https://github.com/openshift/installer/pull/9024)
* [OCPBUGS-39409](https://issues.redhat.com/browse/OCPBUGS-39409): Fix IPv6 security group rule for schedulable master [#8970](https://github.com/openshift/installer/pull/8970)
* [OCPBUGS-41622](https://issues.redhat.com/browse/OCPBUGS-41622): update RHCOS 4.17 bootimage metadata to 417.94.202409120353-0 [#9019](https://github.com/openshift/installer/pull/9019)
* [OCPBUGS-42051](https://issues.redhat.com/browse/OCPBUGS-42051): Fix integration tests [#9018](https://github.com/openshift/installer/pull/9018)
* [OCPBUGS-41300](https://issues.redhat.com/browse/OCPBUGS-41300): Azure CAPI: Improve handling of security features configured on the MachinePools and OSDisk [#9007](https://github.com/openshift/installer/pull/9007)
* [OCPBUGS-39286](https://issues.redhat.com/browse/OCPBUGS-39286): Fix var_files syntax to work on older version of ansible [#8933](https://github.com/openshift/installer/pull/8933)
* [OCPBUGS-41896](https://issues.redhat.com/browse/OCPBUGS-41896): Add AWS c7g,m7g,r8g to tested instance types [#9005](https://github.com/openshift/installer/pull/9005)
* [OCPBUGS-41542](https://issues.redhat.com/browse/OCPBUGS-41542): Azure CAPI: Update publicAccess for Blob Containers [#9006](https://github.com/openshift/installer/pull/9006)
* [OCPBUGS-41702](https://issues.redhat.com/browse/OCPBUGS-41702): aws: bump capa to fix EIP leak on bootstrap when BYOIP [#8991](https://github.com/openshift/installer/pull/8991)
* [Full changelog](https://github.com/openshift/installer/compare/dfd4c085a7210e49111fa8d6747016d78f98ecf2...6e3f5e3a235c7a38be9568d7be8602f4bb02b958)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/f4525b82d768063bf14d5f15f0998d2217b7b792)

* [OCPBUGS-45517](https://issues.redhat.com/browse/OCPBUGS-45517): add retry in case of image pull error [#1940](https://github.com/openshift/oc/pull/1940)
* [OCPBUGS-44508](https://issues.redhat.com/browse/OCPBUGS-44508): Show node-joiner container logs when error occurs [#1912](https://github.com/openshift/oc/pull/1912)
* [OCPBUGS-44830](https://issues.redhat.com/browse/OCPBUGS-44830): Fix newapp unit test failure by using different image [#1913](https://github.com/openshift/oc/pull/1913)
* [OCPBUGS-43696](https://issues.redhat.com/browse/OCPBUGS-43696): Bump k8s dependencies to 1.30.5 [#1902](https://github.com/openshift/oc/pull/1902)
* [OCPBUGS-41642](https://issues.redhat.com/browse/OCPBUGS-41642): vendor: Update openshift/api to pick up the v4.17 capability set [#1876](https://github.com/openshift/oc/pull/1876)
* [OCPBUGS-42176](https://issues.redhat.com/browse/OCPBUGS-42176): Fix copy artifacts for all CPU architectures [#1880](https://github.com/openshift/oc/pull/1880)
* [OCPBUGS-42721](https://issues.redhat.com/browse/OCPBUGS-42721): Update push targets of digest with new appended tags [#1892](https://github.com/openshift/oc/pull/1892)
* [OCPBUGS-42580](https://issues.redhat.com/browse/OCPBUGS-42580): fix outputname flag for node-image create command [#1888](https://github.com/openshift/oc/pull/1888)
* [OCPBUGS-42164](https://issues.redhat.com/browse/OCPBUGS-42164): Check cast result in adm prune deployments to prevent panic [#1879](https://github.com/openshift/oc/pull/1879)
* [Full changelog](https://github.com/openshift/oc/compare/bc58b3a9c70cee7b03d1943e95b48ced9357711b...f4525b82d768063bf14d5f15f0998d2217b7b792)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/7e1cf460fbd31b254c2fed51810800e7520c9926)

* [OCPBUGS-45938](https://issues.redhat.com/browse/OCPBUGS-45938): Add AWS region to aws-pod-identity-webhook [#799](https://github.com/openshift/cloud-credential-operator/pull/799)
* [OCPBUGS-45006](https://issues.redhat.com/browse/OCPBUGS-45006): Add retry to ccoctl gcp create functions [#793](https://github.com/openshift/cloud-credential-operator/pull/793)
* [OCPBUGS-45001](https://issues.redhat.com/browse/OCPBUGS-45001): github.com/golang-jwt/jwt/v4 v4.5.1 [#787](https://github.com/openshift/cloud-credential-operator/pull/787)
* [OCPBUGS-44123](https://issues.redhat.com/browse/OCPBUGS-44123): Add GCP pod identity webhook [#776](https://github.com/openshift/cloud-credential-operator/pull/776)
* [OCPBUGS-43644](https://issues.redhat.com/browse/OCPBUGS-43644): Only attempt timed token credentials on supported platforms. [#773](https://github.com/openshift/cloud-credential-operator/pull/773)
* [OCPBUGS-43335](https://issues.redhat.com/browse/OCPBUGS-43335): Update github.com/sirupsen/logrus v1.9.3 [#766](https://github.com/openshift/cloud-credential-operator/pull/766)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/d5b0b95c40f72fc6d8444f86dbc6d65f836702e7...7e1cf460fbd31b254c2fed51810800e7520c9926)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/246d3726b1c541ef2bbe6def95783bee60b12a58)

* [OCPBUGS-43657](https://issues.redhat.com/browse/OCPBUGS-43657): audit: do not log requests to /livez [#724](https://github.com/openshift/cluster-authentication-operator/pull/724)
* [OCPBUGS-42784](https://issues.redhat.com/browse/OCPBUGS-42784): manifests should not use APIs that are removed in upcoming releases [#712](https://github.com/openshift/cluster-authentication-operator/pull/712)
* [OCPBUGS-42545](https://issues.redhat.com/browse/OCPBUGS-42545): when no type is specified, don't make illegal condition [#703](https://github.com/openshift/cluster-authentication-operator/pull/703)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/8e8a31d802182c00252221e8233f2d6df609f363...246d3726b1c541ef2bbe6def95783bee60b12a58)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/db8cb6812faa09b840d67d16a55277c2f4835ba3)

* [OCPBUGS-45147](https://issues.redhat.com/browse/OCPBUGS-45147): [release-4.17] VPA: Update OWNERS file [#324](https://github.com/openshift/kubernetes-autoscaler/pull/324)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/9a013d5c1fb2b1a6332d371f882a0cbfee13a0d4...db8cb6812faa09b840d67d16a55277c2f4835ba3)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/ea4a88786cf9b237dc446e01fdacd6fd65b73144)

* [OCPBUGS-45929](https://issues.redhat.com/browse/OCPBUGS-45929): set max soft bulk taint count to zero [#337](https://github.com/openshift/cluster-autoscaler-operator/pull/337)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/99b23ded9fb70aa29622d0f6c4254e54c51d2813...ea4a88786cf9b237dc446e01fdacd6fd65b73144)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/2cc85adaec732c9408ca9d6b37b6b9faabe1d30a)

* [OCPBUGS-41926](https://issues.redhat.com/browse/OCPBUGS-41926): SCC-pinning for metal3-baremetal-operator [#444](https://github.com/openshift/cluster-baremetal-operator/pull/444)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/c09fb7310873c657a15c8541f7cc20cccdbc4ede...2cc85adaec732c9408ca9d6b37b6b9faabe1d30a)


### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/95dd9129fa44410a0103fe087d13e27dddecab19)

* [OCPBUGS-34034](https://issues.redhat.com/browse/OCPBUGS-34034): Updating ose-cluster-bootstrap-container image to be consistent with ART for 4.17 [#108](https://github.com/openshift/cluster-bootstrap/pull/108)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/27bfb59fd0ff399224ee673869b8875ef10f1962...95dd9129fa44410a0103fe087d13e27dddecab19)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/f4bca806981f51160b5e5d69aa87d6e3cee15dac)

* [OCPBUGS-41576](https://issues.redhat.com/browse/OCPBUGS-41576): Use CAPO v0.10 and API v1beta1 [#205](https://github.com/openshift/cluster-capi-operator/pull/205)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/3f893aea1fad5fe124e888453ec0c67c0186da11...f4bca806981f51160b5e5d69aa87d6e3cee15dac)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/32fd83999e7eae9941abe7da915bacae1d50e49c)

* [OCPBUGS-43389](https://issues.redhat.com/browse/OCPBUGS-43389): update goimports targets [#371](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/371)
* [OCPBUGS-41941](https://issues.redhat.com/browse/OCPBUGS-41941): IBMCloud: Modify liveness probe for IBM Cloud CCM to use loopback address [#365](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/365)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/94da1a47269dbacf4e841ab8a3f0a0f3db2e103e...32fd83999e7eae9941abe7da915bacae1d50e49c)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/f7e01c2f91628b25d1578c0a752f9b55c4233625)

* [OCPBUGS-44047](https://issues.redhat.com/browse/OCPBUGS-44047): relax validation on delete and if failureDomains not configured [#330](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/330)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/a52da80dbb374fcb91b610cc2688cc863615f97d...f7e01c2f91628b25d1578c0a752f9b55c4233625)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/975fc013a240a003f23e51b9dcd9bfcdb112e801)

* [OCPBUGS-38574](https://issues.redhat.com/browse/OCPBUGS-38574): use pooled client for etcd single member health checks [#1327](https://github.com/openshift/cluster-etcd-operator/pull/1327)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/8f04f689ce0dd513660e87ce4c12c7f0bf7747eb...975fc013a240a003f23e51b9dcd9bfcdb112e801)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/46b5602933182b749b36727d97f1ee9f9d9ee15e)

* [OCPBUGS-43564](https://issues.redhat.com/browse/OCPBUGS-43564): fix proxy config and leader election test flakes [#1144](https://github.com/openshift/cluster-image-registry-operator/pull/1144)
* [OCPBUGS-43350](https://issues.redhat.com/browse/OCPBUGS-43350): pkg/storage/azure: also check for auth failure error code on deletion [#1139](https://github.com/openshift/cluster-image-registry-operator/pull/1139)
* [OCPBUGS-42812](https://issues.redhat.com/browse/OCPBUGS-42812): azureclient: stop validating credentials when creating the client [#1130](https://github.com/openshift/cluster-image-registry-operator/pull/1130)
* [OCPBUGS-42394](https://issues.redhat.com/browse/OCPBUGS-42394): pkg/storage/azure: use cluster-api tag key to discover vnet [#1125](https://github.com/openshift/cluster-image-registry-operator/pull/1125)
* [OCPBUGS-42362](https://issues.redhat.com/browse/OCPBUGS-42362): Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) [#1124](https://github.com/openshift/cluster-image-registry-operator/pull/1124)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/402a511b2d1cbb099f798075ef036180775e95e0...46b5602933182b749b36727d97f1ee9f9d9ee15e)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/aa95a2b0ecfe4892d6a936bb2da58412edce0fe0)

* [OCPBUGS-43657](https://issues.redhat.com/browse/OCPBUGS-43657): audit: do not log requests to /livez [#1758](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1758)
* [OCPBUGS-34310](https://issues.redhat.com/browse/OCPBUGS-34310): Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART for 4.17 [#1738](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1738)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/937f8a77e3274c3ef8907424f4d3294ef642642e...aa95a2b0ecfe4892d6a936bb2da58412edce0fe0)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/aed5f6c74a0e174901709f18eecad6573cd80784)

* [OCPBUGS-42612](https://issues.redhat.com/browse/OCPBUGS-42612): Sync Release 4.17 with UPSTREAM [#48](https://github.com/openshift/cluster-api-operator/pull/48)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/b90945e939eb726ffd42a746add7d1e945df5128...aed5f6c74a0e174901709f18eecad6573cd80784)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/f63a15d06c83a771268ba027b6f75af4d000f47a)

* [OCPBUGS-45918](https://issues.redhat.com/browse/OCPBUGS-45918): Ensure trailing dots on DNS names do not block serving cert auth [#256](https://github.com/openshift/cluster-machine-approver/pull/256)
* [OCPBUGS-45918](https://issues.redhat.com/browse/OCPBUGS-45918): Client internal DNS checks should ignore trailing dot [#250](https://github.com/openshift/cluster-machine-approver/pull/250)
* [OCPBUGS-43312](https://issues.redhat.com/browse/OCPBUGS-43312): Client internal DNS checks should be case insensitive [#242](https://github.com/openshift/cluster-machine-approver/pull/242)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/d29c16b2167bdf84f6f4b8fe60517182580e3a18...f63a15d06c83a771268ba027b6f75af4d000f47a)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/ff3a4f0218f4985874f2ab872f6f6f440a38e17d)

* [OCPBUGS-44971](https://issues.redhat.com/browse/OCPBUGS-44971): Add new metrics for OpenShift logging telemetry [#2526](https://github.com/openshift/cluster-monitoring-operator/pull/2526)
* [OCPBUGS-44003](https://issues.redhat.com/browse/OCPBUGS-44003): fix(monitoring-plugin): disable emitting nginx version on error pages [#2511](https://github.com/openshift/cluster-monitoring-operator/pull/2511)
* [OCPBUGS-43690](https://issues.redhat.com/browse/OCPBUGS-43690): chore: introduce a config parsing check via a strict unmarshaller for… [#2494](https://github.com/openshift/cluster-monitoring-operator/pull/2494)
* [OCPBUGS-43788](https://issues.redhat.com/browse/OCPBUGS-43788): Add runbook url for TelemeterClientFailures [#2507](https://github.com/openshift/cluster-monitoring-operator/pull/2507)
* [OCPBUGS-43545](https://issues.redhat.com/browse/OCPBUGS-43545): Fix api doc on Thanos Ruler default retention [#2501](https://github.com/openshift/cluster-monitoring-operator/pull/2501)
* [OCPBUGS-41341](https://issues.redhat.com/browse/OCPBUGS-41341): disable user-defined monitoring per object [#2458](https://github.com/openshift/cluster-monitoring-operator/pull/2458)
* [OCPBUGS-41908](https://issues.redhat.com/browse/OCPBUGS-41908): filter alerts sent to Telemeter [#2470](https://github.com/openshift/cluster-monitoring-operator/pull/2470)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/9692e6e3e0595748c9c9f5ccf74045175043728f...ff3a4f0218f4985874f2ab872f6f6f440a38e17d)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/37be1f8c3b4296048a2bd385ffc6636fc3603f38)

* [OCPBUGS-43714](https://issues.redhat.com/browse/OCPBUGS-43714): Skip including default crypto policies to avoid authby issue [#2597](https://github.com/openshift/cluster-network-operator/pull/2597)
* [OCPBUGS-46146](https://issues.redhat.com/browse/OCPBUGS-46146): Remove ip xfrm state when IPsec is disabled [#2594](https://github.com/openshift/cluster-network-operator/pull/2594)
* [OCPBUGS-44415](https://issues.redhat.com/browse/OCPBUGS-44415): Pass transit_switch_subnet options in ovnkube-node pod [#2561](https://github.com/openshift/cluster-network-operator/pull/2561)
* [OCPBUGS-44807](https://issues.redhat.com/browse/OCPBUGS-44807), [SDN-4930](https://issues.redhat.com/browse/SDN-4930), [SDN-5297](https://issues.redhat.com/browse/SDN-5297): OVN-Kubernetes node RBAC tightening [#2568](https://github.com/openshift/cluster-network-operator/pull/2568)
* [OCPBUGS-44807](https://issues.redhat.com/browse/OCPBUGS-44807), [SDN-5297](https://issues.redhat.com/browse/SDN-5297), [SDN-5472](https://issues.redhat.com/browse/SDN-5472): bindata, ovn-k: Add ClusterUserDefinedNetwork CRD and RBAC [#2566](https://github.com/openshift/cluster-network-operator/pull/2566)
* [OCPBUGS-44807](https://issues.redhat.com/browse/OCPBUGS-44807), [SDN-4930](https://issues.redhat.com/browse/SDN-4930), [SDN-5297](https://issues.redhat.com/browse/SDN-5297): ovn-k, udn: Update UserDefinedNetwork CRD [#2551](https://github.com/openshift/cluster-network-operator/pull/2551)
* [OCPBUGS-44807](https://issues.redhat.com/browse/OCPBUGS-44807), [SDN-4930](https://issues.redhat.com/browse/SDN-4930), [SDN-5297](https://issues.redhat.com/browse/SDN-5297): Adds UDN list/watch to ovnknode rbac [#2540](https://github.com/openshift/cluster-network-operator/pull/2540)
* [OCPBUGS-44779](https://issues.redhat.com/browse/OCPBUGS-44779), [SDN-5436](https://issues.redhat.com/browse/SDN-5436): Provide support for user owned IPsec machine configs [#2564](https://github.com/openshift/cluster-network-operator/pull/2564)
* [OCPBUGS-44330](https://issues.redhat.com/browse/OCPBUGS-44330): Add controlplane cli image envar for use with hypershift [#2542](https://github.com/openshift/cluster-network-operator/pull/2542)
* [OCPBUGS-43343](https://issues.redhat.com/browse/OCPBUGS-43343): OCPBUGS-42244: Exporting environment varialbe NODE_CNI for live migration [#2536](https://github.com/openshift/cluster-network-operator/pull/2536)
* [OCPBUGS-43317](https://issues.redhat.com/browse/OCPBUGS-43317): Use CNIConfDir for mounting directory to ovn-ipsec-host pod [#2533](https://github.com/openshift/cluster-network-operator/pull/2533)
* [OCPBUGS-39300](https://issues.redhat.com/browse/OCPBUGS-39300): rebase openshift/api for openshift-sdn removal [4.17] [#2477](https://github.com/openshift/cluster-network-operator/pull/2477)
* [OCPBUGS-39121](https://issues.redhat.com/browse/OCPBUGS-39121): Live migration: report network overlap via live_migration_blocked metric [#2483](https://github.com/openshift/cluster-network-operator/pull/2483)
* [OCPBUGS-42260](https://issues.redhat.com/browse/OCPBUGS-42260): Configure narrowing=yes for IPsec connections [#2510](https://github.com/openshift/cluster-network-operator/pull/2510)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/a3188633549ddd7241484d733f3282bad959482b...37be1f8c3b4296048a2bd385ffc6636fc3603f38)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/271091eff912d41ac94fc74813d1631276921ffc)

* [OCPBUGS-43664](https://issues.redhat.com/browse/OCPBUGS-43664): Add vendor and architecture specific tuning options (#1191) [#1191](https://github.com/openshift/cluster-node-tuning-operator/pull/1191)
* [OCPBUGS-44644](https://issues.redhat.com/browse/OCPBUGS-44644): cmd: PPC: support tolerating heterogeneous core IDs (#1252) [#1252](https://github.com/openshift/cluster-node-tuning-operator/pull/1252)
* [OCPBUGS-45264](https://issues.redhat.com/browse/OCPBUGS-45264): Normalize cpu sets when rendering to Tuned profiles (#1238) (#1248) [#1238](https://github.com/openshift/cluster-node-tuning-operator/pull/1238)
* e2e: wait for node inspector deletion (#1205) [#1205](https://github.com/openshift/cluster-node-tuning-operator/pull/1205)
* Fixing empty tuned submodule when using Dockerfile (#1211) [#1211](https://github.com/openshift/cluster-node-tuning-operator/pull/1211)
* E2E: fix modify node selector to use lowercase (#1186) [#1186](https://github.com/openshift/cluster-node-tuning-operator/pull/1186)
* [OCPBUGS-38900](https://issues.redhat.com/browse/OCPBUGS-38900): Drop sched_migration_cost_ns setting (#1201) [#1201](https://github.com/openshift/cluster-node-tuning-operator/pull/1201)
* Make ocp-tuned-one-shot.service restart on-failure (#1187) [#1187](https://github.com/openshift/cluster-node-tuning-operator/pull/1187)
* Fix context deadlines in ExecCommandOnPod() (#1189) [#1189](https://github.com/openshift/cluster-node-tuning-operator/pull/1189)
* [OCPBUGS-43566](https://issues.redhat.com/browse/OCPBUGS-43566): CI: unblock (#1188) [#1188](https://github.com/openshift/cluster-node-tuning-operator/pull/1188)
* E2E: wait for ovs services affinity to reset after deployment deletion (#1160) [#1160](https://github.com/openshift/cluster-node-tuning-operator/pull/1160)
* [OCPBUGS-38721](https://issues.redhat.com/browse/OCPBUGS-38721): tuned: distinguish deferred updates (#1149) [#1149](https://github.com/openshift/cluster-node-tuning-operator/pull/1149)
* [OCPBUGS-39005](https://issues.redhat.com/browse/OCPBUGS-39005): Add cluster-wide proxy env file (#1145) [#1145](https://github.com/openshift/cluster-node-tuning-operator/pull/1145)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/8da7d69a2649a6a0a4faab781495dad92d99e109...271091eff912d41ac94fc74813d1631276921ffc)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/2b2ba3bef92814ebc92b80be797cfc7d9d3b8c9e)

* [OCPBUGS-43657](https://issues.redhat.com/browse/OCPBUGS-43657): audit: do not log requests to /livez [#599](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/599)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/56a90aeec7f94ddfe1be5365fe81ea3e5e52bea0...2b2ba3bef92814ebc92b80be797cfc7d9d3b8c9e)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/3a44b4db39d3ffc8cb2736985e2fa8edeb7868fd)

* [OCPBUGS-39120](https://issues.redhat.com/browse/OCPBUGS-39120): Sync the non-OKD assets from master to release-4.17 [#577](https://github.com/openshift/cluster-samples-operator/pull/577)
* [OKD-225](https://issues.redhat.com/browse/OKD-225): remove only the EOL CentOS 7 images [#575](https://github.com/openshift/cluster-samples-operator/pull/575)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/bef583cc67368d62316961b506f731af8810ecc7...3a44b4db39d3ffc8cb2736985e2fa8edeb7868fd)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/5683ea22810815595761ff9e5309c656a7392125)

* [OCPBUGS-44997](https://issues.redhat.com/browse/OCPBUGS-44997): Fix PodStartupStorageOperationsFailing alert [#543](https://github.com/openshift/cluster-storage-operator/pull/543)
* [OCPBUGS-43794](https://issues.redhat.com/browse/OCPBUGS-43794): add ability to control kube rbac proxy container image on controlplane [#529](https://github.com/openshift/cluster-storage-operator/pull/529)
* [OCPBUGS-43112](https://issues.redhat.com/browse/OCPBUGS-43112): assets: shared-resource: hypershift: add pull-secret to operator SA [#520](https://github.com/openshift/cluster-storage-operator/pull/520)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/eba39ffecf5a7a55a46443c85fd0ecd9ccc0453f...5683ea22810815595761ff9e5309c656a7392125)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/bc60dbd5f73b9f0548f0bb3aef0468a630362dce)

* [OCPBUGS-39558](https://issues.redhat.com/browse/OCPBUGS-39558): Filter out shallowly `UpdateEffectNone` errors from a `MultipleErrors` message in the Failing condition [#1114](https://github.com/openshift/cluster-version-operator/pull/1114)
* [OCPBUGS-45328](https://issues.redhat.com/browse/OCPBUGS-45328): deps: bump golang.org/x/net to 0.31.0 [#1117](https://github.com/openshift/cluster-version-operator/pull/1117)
* [OCPBUGS-43586](https://issues.redhat.com/browse/OCPBUGS-43586): Upgradeable=False should not block a 4.(y+1).z to 4.(y+1).z' retarget [#1095](https://github.com/openshift/cluster-version-operator/pull/1095)
* [OCPBUGS-41642](https://issues.redhat.com/browse/OCPBUGS-41642): vendor: Update openshift/api to pick up the v4.17 capability sets [#1087](https://github.com/openshift/cluster-version-operator/pull/1087)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/ce6c0b89e14e4d26bc2918f160847fd7e9aeb083...bc60dbd5f73b9f0548f0bb3aef0468a630362dce)


### [console](https://github.com/openshift/console/tree/18734acbfe63d484eec27667881b4b5efeb71470)

* [OCPBUGS-45949](https://issues.redhat.com/browse/OCPBUGS-45949): ReRun of Resolver based PipelineRuns fails from UI [#14605](https://github.com/openshift/console/pull/14605)
* [OCPBUGS-45954](https://issues.redhat.com/browse/OCPBUGS-45954): Fixed capitalization in OpenShift Lightspeed [#14607](https://github.com/openshift/console/pull/14607)
* [OCPBUGS-45948](https://issues.redhat.com/browse/OCPBUGS-45948): ImagePullSecret getting duplicated when editing DeploymentConfig in Form View [#14604](https://github.com/openshift/console/pull/14604)
* [OCPBUGS-45667](https://issues.redhat.com/browse/OCPBUGS-45667): Do not pass CSV name to operand list page when an exen… [#14591](https://github.com/openshift/console/pull/14591)
* [OCPBUGS-46000](https://issues.redhat.com/browse/OCPBUGS-46000): The description and name for GCP Pool ID is not consist [#14611](https://github.com/openshift/console/pull/14611)
* [OCPBUGS-42558](https://issues.redhat.com/browse/OCPBUGS-42558): Plugins that use very old PF4 dropdown or menu components with grouped items have bullets and padding that needs to be removed. [#14344](https://github.com/openshift/console/pull/14344)
* [OCPBUGS-44656](https://issues.redhat.com/browse/OCPBUGS-44656): update ConditionalUpdates release type [#14505](https://github.com/openshift/console/pull/14505)
* [OCPBUGS-43888](https://issues.redhat.com/browse/OCPBUGS-43888): While accessing the node terminal from UI observed 'Warning alert:Admission Webhook Warning` [#14444](https://github.com/openshift/console/pull/14444)
* [OCPBUGS-43441](https://issues.redhat.com/browse/OCPBUGS-43441): fix table combination [#14546](https://github.com/openshift/console/pull/14546)
* [OCPBUGS-44169](https://issues.redhat.com/browse/OCPBUGS-44169): use TaskRuns results.tekton.dev/record annotation to get the logs [#14538](https://github.com/openshift/console/pull/14538)
* [OCPBUGS-44873](https://issues.redhat.com/browse/OCPBUGS-44873): Unable to remove finally tasks in pipeline builder mode [#14527](https://github.com/openshift/console/pull/14527)
* [OCPBUGS-42791](https://issues.redhat.com/browse/OCPBUGS-42791): Add missing pipelines plugin name to known plugins [#14377](https://github.com/openshift/console/pull/14377)
* [OCPBUGS-44699](https://issues.redhat.com/browse/OCPBUGS-44699): Add multiline support to template instantiation [#14508](https://github.com/openshift/console/pull/14508)
* [OCPBUGS-44183](https://issues.redhat.com/browse/OCPBUGS-44183): Remove ClusterTask dependency in console from Pipelines 1.17 [#14512](https://github.com/openshift/console/pull/14512)
* [OCPBUGS-44764](https://issues.redhat.com/browse/OCPBUGS-44764): Add IBM Block Storage CSI driver support for RWX [#14517](https://github.com/openshift/console/pull/14517)
* [OCPBUGS-43795](https://issues.redhat.com/browse/OCPBUGS-43795): While upgrading the cluster from UI observed `Warning alert:Admission Webhook Warning` [#14433](https://github.com/openshift/console/pull/14433)
* [OCPBUGS-44722](https://issues.redhat.com/browse/OCPBUGS-44722): include external labels so silenced alerts not displayed in notifications [#14511](https://github.com/openshift/console/pull/14511)
* [OCPBUGS-44358](https://issues.redhat.com/browse/OCPBUGS-44358): BuildConfig form breaks on manually enter the Git URL [#14478](https://github.com/openshift/console/pull/14478)
* [OCPBUGS-43073](https://issues.redhat.com/browse/OCPBUGS-43073): Telemetry userPreference results in empty nodes output to the DOM [#14392](https://github.com/openshift/console/pull/14392)
* [OCPBUGS-44587](https://issues.redhat.com/browse/OCPBUGS-44587): Start last run do not work in buildConfig details page [#14499](https://github.com/openshift/console/pull/14499)
* [OCPBUGS-44586](https://issues.redhat.com/browse/OCPBUGS-44586): Collapse/Expand Feature Added, Removal Option Removed in Version 4.16 [#14498](https://github.com/openshift/console/pull/14498)
* [OCPBUGS-44450](https://issues.redhat.com/browse/OCPBUGS-44450): Don't request user settings configmap if no user has been loaded. [#14482](https://github.com/openshift/console/pull/14482)
* [OCPBUGS-44479](https://issues.redhat.com/browse/OCPBUGS-44479): conditionally display MachineConfig details page Confi… [#14488](https://github.com/openshift/console/pull/14488)
* [OCPBUGS-43878](https://issues.redhat.com/browse/OCPBUGS-43878): Add flag to hide the pipelines-plugin pipeline builder extensions [#14457](https://github.com/openshift/console/pull/14457)
* [OCPBUGS-42824](https://issues.redhat.com/browse/OCPBUGS-42824): remove axios as it is no longer in use [#14381](https://github.com/openshift/console/pull/14381)
* [OCPBUGS-42955](https://issues.redhat.com/browse/OCPBUGS-42955): Enabling topology e2e tests on CI [#14402](https://github.com/openshift/console/pull/14402)
* [OCPBUGS-43009](https://issues.redhat.com/browse/OCPBUGS-43009): Project is "Undefined" on "VolumeSnapshot" create page [#14389](https://github.com/openshift/console/pull/14389)
* [OCPBUGS-42607](https://issues.redhat.com/browse/OCPBUGS-42607): add role exclusion to avoid unexpected triggering the namespace menu [#14351](https://github.com/openshift/console/pull/14351)
* [OCPBUGS-42606](https://issues.redhat.com/browse/OCPBUGS-42606): make createdBy mandatory and auto fill with the current user [#14352](https://github.com/openshift/console/pull/14352)
* [OCPBUGS-42585](https://issues.redhat.com/browse/OCPBUGS-42585): Red Hat Camel K Operator installation via cli [#14346](https://github.com/openshift/console/pull/14346)
* [OCPBUGS-42299](https://issues.redhat.com/browse/OCPBUGS-42299): Increase login flow state paramater length/entropy [#14318](https://github.com/openshift/console/pull/14318)
* [OCPBUGS-42391](https://issues.redhat.com/browse/OCPBUGS-42391): change "Partial cluster update" to "Control plane onl… [#14323](https://github.com/openshift/console/pull/14323)
* [OCPBUGS-42380](https://issues.redhat.com/browse/OCPBUGS-42380): Allow operators to enable monitoring by default [#14316](https://github.com/openshift/console/pull/14316)
* [OCPBUGS-42060](https://issues.redhat.com/browse/OCPBUGS-42060): Console crashes when ssh is selected in add secret for starting a pipeline run [#14301](https://github.com/openshift/console/pull/14301)
* [OCPBUGS-42223](https://issues.redhat.com/browse/OCPBUGS-42223): restore Spotlight removal on next click [#14314](https://github.com/openshift/console/pull/14314)
* [OCPBUGS-39181](https://issues.redhat.com/browse/OCPBUGS-39181): add Create button to Console plugins tab [#14220](https://github.com/openshift/console/pull/14220)
* [OCPBUGS-39091](https://issues.redhat.com/browse/OCPBUGS-39091): update Events ChipGroup to use integrated close [#14211](https://github.com/openshift/console/pull/14211)
* [OCPBUGS-38563](https://issues.redhat.com/browse/OCPBUGS-38563): do not directly mutate links in useMemo [#14159](https://github.com/openshift/console/pull/14159)
* [OCPBUGS-41685](https://issues.redhat.com/browse/OCPBUGS-41685): Topology screen crashes when completed pod is selected [#14276](https://github.com/openshift/console/pull/14276)
* [OCPBUGS-41482](https://issues.redhat.com/browse/OCPBUGS-41482): Unit Tests for the new Ask Lightspeed Button [#14249](https://github.com/openshift/console/pull/14249)
* [OCPBUGS-39601](https://issues.redhat.com/browse/OCPBUGS-39601): Console user settings resources misses ownerRef, removing a user results in remaining data [#14240](https://github.com/openshift/console/pull/14240)
* [Full changelog](https://github.com/openshift/console/compare/5bbc956f78ecd2872c9630c15b9eb192c97ca80b...18734acbfe63d484eec27667881b4b5efeb71470)


### [console-operator](https://github.com/openshift/console-operator/tree/71ba58ad67f04d99b5d2adbe2dad74301fcb6d0f)

* [OCPBUGS-46390](https://issues.redhat.com/browse/OCPBUGS-46390): Dont disable console when authConfig type is set to None [#951](https://github.com/openshift/console-operator/pull/951)
* [Full changelog](https://github.com/openshift/console-operator/compare/f41009e8511cf5a042ca81d18e44137b7d11ba05...71ba58ad67f04d99b5d2adbe2dad74301fcb6d0f)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/f5b13c522e62538892fa90e1e5ddc89fc31dc538)

* [OCPBUGS-43427](https://issues.redhat.com/browse/OCPBUGS-43427): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.30 into release-4.17 [#302](https://github.com/openshift/cloud-provider-openstack/pull/302)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/a13ed564f36bd295b53afde59f4ac90a92cb75b3...f5b13c522e62538892fa90e1e5ddc89fc31dc538)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/efc99a2a5e72ec3d3ecd1792fdd9225e74ac6ea8)

* [OCPBUGS-38457](https://issues.redhat.com/browse/OCPBUGS-38457): Add missing healthchecks [#240](https://github.com/openshift/csi-driver-manila-operator/pull/240)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/34052f2570cd39144f7ba9ec2e382644e81dcc07...efc99a2a5e72ec3d3ecd1792fdd9225e74ac6ea8)


### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/027a8c4e106d7c02e1688c38015b8fd2bd94a304)

* [OCPBUGS-34217](https://issues.redhat.com/browse/OCPBUGS-34217): Updating ose-csi-driver-shared-resource-container image to be consistent with ART for 4.17 [#188](https://github.com/openshift/csi-driver-shared-resource/pull/188)
* [OCPBUGS-44510](https://issues.redhat.com/browse/OCPBUGS-44510): Updating ose-csi-driver-shared-resource-webhook-container image to be consistent with ART for 4.17 [#233](https://github.com/openshift/csi-driver-shared-resource/pull/233)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/abbeb17206231cd9d7d8c32bf7cbdc592e121aa4...027a8c4e106d7c02e1688c38015b8fd2bd94a304)


### [etcd](https://github.com/openshift/etcd/tree/23c5a247c3e601f7806a0bbffdc6d201a55bf469)

* NO-ISSUE: Add support for cachi2 based deps [#297](https://github.com/openshift/etcd/pull/297)
* [OCPBUGS-42680](https://issues.redhat.com/browse/OCPBUGS-42680): Rebase etcd 3.5.16 openshift 4.17 [#291](https://github.com/openshift/etcd/pull/291)
* NO-JIRA: use golang 1.22 image [#286](https://github.com/openshift/etcd/pull/286)
* [Full changelog](https://github.com/openshift/etcd/compare/1fb3165305efc8d986344b555b22592e6e6c1786...23c5a247c3e601f7806a0bbffdc6d201a55bf469)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/601931f471a4270e63fd524c7c0bd494a1800a21)

* [OCPBUGS-46082](https://issues.redhat.com/browse/OCPBUGS-46082): update a2 gpu detection logic to be dynamic [#100](https://github.com/openshift/machine-api-provider-gcp/pull/100)
* [OCPBUGS-43738](https://issues.redhat.com/browse/OCPBUGS-43738): Add c4a instance as arm type [#95](https://github.com/openshift/machine-api-provider-gcp/pull/95)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/f2711c6d7a7ceb809dfe553525157ed88dd3713c...601931f471a4270e63fd524c7c0bd494a1800a21)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/f868289cea8577c895fa957b466f209b9af6a1a2)

* : OCPBUGS-46364: Fix grace period used for immediate evictions [#2164](https://github.com/openshift/kubernetes/pull/2164)
* [OCPBUGS-46002](https://issues.redhat.com/browse/OCPBUGS-46002): Bump k8s api to 1.30.7 [#2160](https://github.com/openshift/kubernetes/pull/2160)
* [OCPBUGS-39318](https://issues.redhat.com/browse/OCPBUGS-39318): UPSTREAM: 126994: Add required FieldManager for validatingadmissionpolicy e2e [#2070](https://github.com/openshift/kubernetes/pull/2070)
* [OCPBUGS-43820](https://issues.redhat.com/browse/OCPBUGS-43820): UPSTREAM: <carry>: kubelet/cm: fix bug where kubelet restarts from missing cpuset cgroup [#2126](https://github.com/openshift/kubernetes/pull/2126)
* [OCPBUGS-44897](https://issues.redhat.com/browse/OCPBUGS-44897): Backport format library to enable usage in 4.18 [#2140](https://github.com/openshift/kubernetes/pull/2140)
* [OCPBUGS-44512](https://issues.redhat.com/browse/OCPBUGS-44512): Bump k8s api to 1.30.6 [#2134](https://github.com/openshift/kubernetes/pull/2134)
* [OCPBUGS-42427](https://issues.redhat.com/browse/OCPBUGS-42427): UPSTREAM: 125398: Fix issue with scheduler failing on hostname mismatch [#2097](https://github.com/openshift/kubernetes/pull/2097)
* [OCPBUGS-42640](https://issues.redhat.com/browse/OCPBUGS-42640): Unrevert Bump k8s api to 1.30.5" [#2107](https://github.com/openshift/kubernetes/pull/2107)
* [OCPBUGS-42640](https://issues.redhat.com/browse/OCPBUGS-42640): Revert #2089 "OCPBUGS-42167: Bump k8s api to 1.30.5" [#2100](https://github.com/openshift/kubernetes/pull/2100)
* [OCPBUGS-42167](https://issues.redhat.com/browse/OCPBUGS-42167): Bump k8s api to 1.30.5 [#2089](https://github.com/openshift/kubernetes/pull/2089)
* [OCPBUGS-42019](https://issues.redhat.com/browse/OCPBUGS-42019): UPSTREAM: <drop>: bump(github.com/openshift/apiserver-library-go) [#2087](https://github.com/openshift/kubernetes/pull/2087)
* [Full changelog](https://github.com/openshift/kubernetes/compare/d3adea4933c942000ceb2c9ca98b1920814f5b34...f868289cea8577c895fa957b466f209b9af6a1a2)


### [hypershift](https://github.com/openshift/hypershift/tree/608f456c902e70137a64028264b3caf31abd569a)

* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5289](https://github.com/openshift/hypershift/pull/5289)
* NO-JIRA: chore(deps): update dependency mkdocs to v1.6.1 (release-4.17) [#5290](https://github.com/openshift/hypershift/pull/5290)
* [OCPBUGS-44114](https://issues.redhat.com/browse/OCPBUGS-44114): Add external kas address to no proxy skip list [#5028](https://github.com/openshift/hypershift/pull/5028)
* NO-JIRA: Red Hat Konflux update hypershift-release-mce-28 [#5174](https://github.com/openshift/hypershift/pull/5174)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5249](https://github.com/openshift/hypershift/pull/5249)
* [OCPBUGS-44630](https://issues.redhat.com/browse/OCPBUGS-44630): Use ingress role in private link controller for DNS operations [#5142](https://github.com/openshift/hypershift/pull/5142)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5183](https://github.com/openshift/hypershift/pull/5183)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5154](https://github.com/openshift/hypershift/pull/5154)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5144](https://github.com/openshift/hypershift/pull/5144)
* [OCPBUGS-44184](https://issues.redhat.com/browse/OCPBUGS-44184): dont use registryOverrides on kube rbac proxy image be… [#5033](https://github.com/openshift/hypershift/pull/5033)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5113](https://github.com/openshift/hypershift/pull/5113)
* [OCPBUGS-43929](https://issues.redhat.com/browse/OCPBUGS-43929): Return the right tagReference on Catalogs ImageStream [#4993](https://github.com/openshift/hypershift/pull/4993)
* [OCPBUGS-44276](https://issues.redhat.com/browse/OCPBUGS-44276): Configure OAuth https proxy to dial cloud endpoints directly [#5070](https://github.com/openshift/hypershift/pull/5070)
* [OCPBUGS-44268](https://issues.redhat.com/browse/OCPBUGS-44268): Fix order rendering HCP objects [#5064](https://github.com/openshift/hypershift/pull/5064)
* NO-JIRA: Update Konflux references (release-4.17) [#5098](https://github.com/openshift/hypershift/pull/5098)
* chore(deps): update konflux references (release-4.17) [#5075](https://github.com/openshift/hypershift/pull/5075)
* [HOSTEDCP-2046](https://issues.redhat.com/browse/HOSTEDCP-2046): CPO 4.17 tekton builds [#5006](https://github.com/openshift/hypershift/pull/5006)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5053](https://github.com/openshift/hypershift/pull/5053)
* NO-JIRA: Update Konflux references to fedcfe0 (release-4.17) [#5041](https://github.com/openshift/hypershift/pull/5041)
* chore(deps): update konflux references (release-4.17) [#5023](https://github.com/openshift/hypershift/pull/5023)
* chore(deps): update konflux references to f53fe54 (release-4.17) [#5018](https://github.com/openshift/hypershift/pull/5018)
* NO-JIRA: Update Konflux references (release-4.17) [#5009](https://github.com/openshift/hypershift/pull/5009)
* [OCPBUGS-42879](https://issues.redhat.com/browse/OCPBUGS-42879): Add network policies for konnectivity server and ignition server proxy [#4865](https://github.com/openshift/hypershift/pull/4865)
* NO-JIRA: bump catalog operators version [#4992](https://github.com/openshift/hypershift/pull/4992)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4972](https://github.com/openshift/hypershift/pull/4972)
* [OCPBUGS-43746](https://issues.redhat.com/browse/OCPBUGS-43746): add ValidIDPConfiguration condition to report IDP config issues [#4969](https://github.com/openshift/hypershift/pull/4969)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4958](https://github.com/openshift/hypershift/pull/4958)
* [OCPBUGS-43464](https://issues.redhat.com/browse/OCPBUGS-43464): Pass feature flags to clusterpolicy controller [#4928](https://github.com/openshift/hypershift/pull/4928)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4931](https://github.com/openshift/hypershift/pull/4931)
* [OCPBUGS-42704](https://issues.redhat.com/browse/OCPBUGS-42704): Run 2 replicas of active/passive HA components [#4843](https://github.com/openshift/hypershift/pull/4843)
* [OCPBUGS-43316](https://issues.redhat.com/browse/OCPBUGS-43316): Enforce privileged PSA by default [#4834](https://github.com/openshift/hypershift/pull/4834)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4921](https://github.com/openshift/hypershift/pull/4921)
* [OCPBUGS-43374](https://issues.redhat.com/browse/OCPBUGS-43374): [release-4.17] (manual backport) openstack/e2e: re-work nodepool tests [#4914](https://github.com/openshift/hypershift/pull/4914)
* NO-JIRA: chore(deps): update konflux references to 674e70f (release-4.17) [#4907](https://github.com/openshift/hypershift/pull/4907)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4895](https://github.com/openshift/hypershift/pull/4895)
* [OCPBUGS-43051](https://issues.redhat.com/browse/OCPBUGS-43051): Use guest DNS resolution in Konnectivity HTTPS proxy by default [#4885](https://github.com/openshift/hypershift/pull/4885)
* [HOSTEDCP-2020](https://issues.redhat.com/browse/HOSTEDCP-2020): [release-4.17] Add support for SharedVPC [#4873](https://github.com/openshift/hypershift/pull/4873)
* [HOSTEDCP-2023](https://issues.redhat.com/browse/HOSTEDCP-2023): [release-4.17] Split worker and vpc endpoint security groups [#4882](https://github.com/openshift/hypershift/pull/4882)
* [OCPBUGS-42974](https://issues.redhat.com/browse/OCPBUGS-42974): [release-4.17] Do not send traffic to local audit-webhook through konnectivity [#4869](https://github.com/openshift/hypershift/pull/4869)
* NO-JIRA: Remove EnsurePSANotPrivileged check [#4855](https://github.com/openshift/hypershift/pull/4855)
* [OCPBUGS-42714](https://issues.redhat.com/browse/OCPBUGS-42714): label routes only when HCP router used [#4845](https://github.com/openshift/hypershift/pull/4845)
* NO-JIRA: chore(deps): update konflux references to 37b9187 (release-4.17) [#4854](https://github.com/openshift/hypershift/pull/4854)
* [OCPBUGS-42390](https://issues.redhat.com/browse/OCPBUGS-42390): Add Annotation to skip deleting hcp namespace [#4792](https://github.com/openshift/hypershift/pull/4792)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4812](https://github.com/openshift/hypershift/pull/4812)
* NO-JIRA: e2e: openstack: fix nil deref in route53 teardown [#4810](https://github.com/openshift/hypershift/pull/4810)
* [OCPBUGS-42261](https://issues.redhat.com/browse/OCPBUGS-42261): Conditionally manage kubeconfig secrets for DNS and Ingress operators [#4764](https://github.com/openshift/hypershift/pull/4764)
* [OCPBUGS-42098](https://issues.redhat.com/browse/OCPBUGS-42098): Use KubeClientCABundle for HostedClusterConfigOperator cluster-signer-ca [#4736](https://github.com/openshift/hypershift/pull/4736)
* chore(deps): update konflux references to 5ac9b24 (release-4.17) [#4780](https://github.com/openshift/hypershift/pull/4780)
* [OCPBUGS-41552](https://issues.redhat.com/browse/OCPBUGS-41552): Let payload generation pick the release for the NodePool [#4691](https://github.com/openshift/hypershift/pull/4691)
* chore(deps): update konflux references to 2c3426a (release-4.17) [#4774](https://github.com/openshift/hypershift/pull/4774)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4761](https://github.com/openshift/hypershift/pull/4761)
* NO-JIRA: Security fixes for openshift-ci-security job [#4748](https://github.com/openshift/hypershift/pull/4748)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4726](https://github.com/openshift/hypershift/pull/4726)
* [HOSTEDCP-1953](https://issues.redhat.com/browse/HOSTEDCP-1953): bump CCO version [#4694](https://github.com/openshift/hypershift/pull/4694)
* [Full changelog](https://github.com/openshift/hypershift/compare/05864f61f24a8517731664f8091cedcfc5f9b60d...608f456c902e70137a64028264b3caf31abd569a)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/8443d86bf284684b7849fa76d40795d141ef86d2)

* [OCPBUGS-42277](https://issues.redhat.com/browse/OCPBUGS-42277): Reorder static resources to create RBAC first [#128](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/128)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/f74c374bc09ee57a077c86d307b4544c01111956...8443d86bf284684b7849fa76d40795d141ef86d2)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/213d34ddedaebc23bd409ff904ecaf9eaa62c517)

* [OCPBUGS-44880](https://issues.redhat.com/browse/OCPBUGS-44880): Fetch service instance id from spec of IBMPowerVSCluster object while setting provider id [#94](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/94)
* [OCPBUGS-37369](https://issues.redhat.com/browse/OCPBUGS-37369): UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.17 [#86](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/86)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/9179e15477e8de38460db74b4ec1ac125ea9d625...213d34ddedaebc23bd409ff904ecaf9eaa62c517)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/238348d2d06feb540a360aeba81416c1134f86e9)

* [OCPBUGS-37379](https://issues.redhat.com/browse/OCPBUGS-37379): Bump dependency for CVE [#49](https://github.com/openshift/machine-api-provider-ibmcloud/pull/49)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/dce9d33e91d0f6eae88da8d233e7b4b002c5c1b0...238348d2d06feb540a360aeba81416c1134f86e9)


### [insights-operator](https://github.com/openshift/insights-operator/tree/85c2bb66bf02d507c40c060cfd0516219ccb029d)

* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for dataGahtering jobs & pods [#1049](https://github.com/openshift/insights-operator/pull/1049)
* [Full changelog](https://github.com/openshift/insights-operator/compare/d44b5f1be3be9c1630b1216cd231e47758dcd30f...85c2bb66bf02d507c40c060cfd0516219ccb029d)


### [ironic](https://github.com/openshift/ironic-image/tree/073486f10e7f657b5082a1b1d06196a19c8f69be)

* [OCPBUGS-43955](https://issues.redhat.com/browse/OCPBUGS-43955), [OCPBUGS-43963](https://issues.redhat.com/browse/OCPBUGS-43963): Bump python-waitress [4.17] [#603](https://github.com/openshift/ironic-image/pull/603)
* [OCPBUGS-42692](https://issues.redhat.com/browse/OCPBUGS-42692): Include fixes for CVE-2024-5569 [#590](https://github.com/openshift/ironic-image/pull/590)
* [OCPBUGS-42509](https://issues.redhat.com/browse/OCPBUGS-42509): Include fix for CVE-2024-47211 [#593](https://github.com/openshift/ironic-image/pull/593)
* [Full changelog](https://github.com/openshift/ironic-image/compare/f70cb6807c16e40bc0937f52e23422142ca19793...073486f10e7f657b5082a1b1d06196a19c8f69be)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/f5f742d8df2b1879a565809632ce2b43b965b4d4)

* [OCPBUGS-39013](https://issues.redhat.com/browse/OCPBUGS-39013): Bump ironic-lib to fix utf8 decoding issue [#155](https://github.com/openshift/ironic-agent-image/pull/155)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/8c92604b7557101eb0537c5f99418829948eec26...f5f742d8df2b1879a565809632ce2b43b965b4d4)


### [kube-proxy](https://github.com/openshift/sdn/tree/dee082def2014ab85a0e5ff9a056d3fe2461eab7)

* [OCPBUGS-43807](https://issues.redhat.com/browse/OCPBUGS-43807): Revendor to a patched k/k with our prefer-local-DNS hack [#640](https://github.com/openshift/sdn/pull/640)
* [Full changelog](https://github.com/openshift/sdn/compare/307a0b2cdd1d5e97830e940d95ba9985e80f5d19...dee082def2014ab85a0e5ff9a056d3fe2461eab7)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/7718265cc7640f6fa0d75eee366e424911d6f00f)

* [OCPBUGS-42697](https://issues.redhat.com/browse/OCPBUGS-42697): protobuf bump [4.17] [#112](https://github.com/openshift/kube-rbac-proxy/pull/112)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/b2d2c462e801d7b8890347c017184153c3c8eaab...7718265cc7640f6fa0d75eee366e424911d6f00f)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/191a28d831b1f9493b54a25a3c75babd310bede5)

* [OCPBUGS-43851](https://issues.redhat.com/browse/OCPBUGS-43851): vSphere klog initialization preventing verbose log messages [#1302](https://github.com/openshift/machine-api-operator/pull/1302)
* [OCPBUGS-42414](https://issues.redhat.com/browse/OCPBUGS-42414): Ensure deletion annotation takes priority and oldestPolicy can distinguish longer ages [#1293](https://github.com/openshift/machine-api-operator/pull/1293)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/bb1ed5f76faafe99cfcc930e9e7ab7070d2aba88...191a28d831b1f9493b54a25a3c75babd310bede5)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/119a374e94ea622c080409cc82f106ac737d4e85)

* [OCPBUGS-45918](https://issues.redhat.com/browse/OCPBUGS-45918): Remove trailing periods from AWS provided hostnames [#4738](https://github.com/openshift/machine-config-operator/pull/4738)
* [OCPBUGS-39223](https://issues.redhat.com/browse/OCPBUGS-39223): Do not enable on-prem-resolv-prepender.path for UPI [#4572](https://github.com/openshift/machine-config-operator/pull/4572)
* [OCPBUGS-38292](https://issues.redhat.com/browse/OCPBUGS-38292): Revert "controller: default to runc when upgrading clusters from 4.17 to 4.18" [#4716](https://github.com/openshift/machine-config-operator/pull/4716)
* [OCPBUGS-38292](https://issues.redhat.com/browse/OCPBUGS-38292): controller: default to runc when upgrading clusters from 4.17 to 4.18 [#4635](https://github.com/openshift/machine-config-operator/pull/4635)
* [OCPBUGS-44561](https://issues.redhat.com/browse/OCPBUGS-44561): Disable tx chksum for driver IDPF on GCP C3/C4 [#4701](https://github.com/openshift/machine-config-operator/pull/4701)
* [MCO-1343](https://issues.redhat.com/browse/MCO-1343): Backport Telemetry to 4.17 [#4650](https://github.com/openshift/machine-config-operator/pull/4650)
* [OCPBUGS-43917](https://issues.redhat.com/browse/OCPBUGS-43917): Disable ESP offload for OVS attached interfaces [#4667](https://github.com/openshift/machine-config-operator/pull/4667)
* [OCPBUGS-43719](https://issues.redhat.com/browse/OCPBUGS-43719): Soften haproxy timeout for kubeapi probe [#4657](https://github.com/openshift/machine-config-operator/pull/4657)
* [OCPBUGS-42577](https://issues.redhat.com/browse/OCPBUGS-42577): openstack: fix non-old systemd compatible unit [#4620](https://github.com/openshift/machine-config-operator/pull/4620)
* [OCPBUGS-42108](https://issues.redhat.com/browse/OCPBUGS-42108): Do not use 'restart' for 'oneshot' service [#4615](https://github.com/openshift/machine-config-operator/pull/4615)
* [OCPBUGS-42979](https://issues.redhat.com/browse/OCPBUGS-42979): Regenerate the rendered MC in use when deleted [#4634](https://github.com/openshift/machine-config-operator/pull/4634)
* [OCPBUGS-42677](https://issues.redhat.com/browse/OCPBUGS-42677): The MCO does not properly degrade when pools are failing to render a new config [#4623](https://github.com/openshift/machine-config-operator/pull/4623)
* [OCPBUGS-42081](https://issues.redhat.com/browse/OCPBUGS-42081): Check for kernel arg diff in updateOnClusterBuild [#4595](https://github.com/openshift/machine-config-operator/pull/4595)
* [OCPBUGS-41255](https://issues.redhat.com/browse/OCPBUGS-41255): Set ESP offloads off in bonds if slaves don't support them [#4598](https://github.com/openshift/machine-config-operator/pull/4598)
* [OCPBUGS-42256](https://issues.redhat.com/browse/OCPBUGS-42256): Panic seen in CI job for MCC pod [#4603](https://github.com/openshift/machine-config-operator/pull/4603)
* [OCPBUGS-42200](https://issues.redhat.com/browse/OCPBUGS-42200): MCPs report wrong number of nodes when we move nodes from one custom MCP to another custom MCP [#4602](https://github.com/openshift/machine-config-operator/pull/4602)
* [OCPBUGS-41357](https://issues.redhat.com/browse/OCPBUGS-41357): Enable the use of Linux Bridge as the ovs default port connection [#4567](https://github.com/openshift/machine-config-operator/pull/4567)
* [OCPBUGS-41686](https://issues.redhat.com/browse/OCPBUGS-41686): MCPs with RHEL nodes are degraded when a userCA bundle is added to the cluster [#4580](https://github.com/openshift/machine-config-operator/pull/4580)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/b170ad094e24cf4643acc3a8db8914aec1e964d4...119a374e94ea622c080409cc82f106ac737d4e85)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/ad057d32fa7e2cf4033f535dc9d68c0a2c49f004)

* [OCPBUGS-44394](https://issues.redhat.com/browse/OCPBUGS-44394): remove unused package and upgrade vulnerable dependency [#271](https://github.com/openshift/monitoring-plugin/pull/271)
* [OCPBUGS-43238](https://issues.redhat.com/browse/OCPBUGS-43238): upgrade dynamic plugin sdk to remove vulnerable dependencies 4.17 [#216](https://github.com/openshift/monitoring-plugin/pull/216)
* [OCPBUGS-42408](https://issues.redhat.com/browse/OCPBUGS-42408): fix path-to-regexp dependency [#196](https://github.com/openshift/monitoring-plugin/pull/196)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/ccaf40d66254b328a688abddef841b7763c726d6...ad057d32fa7e2cf4033f535dc9d68c0a2c49f004)


### [must-gather](https://github.com/openshift/must-gather/tree/f8fb61b7740b6029a0008e4925ed7a56735d468e)

* [OCPBUGS-46281](https://issues.redhat.com/browse/OCPBUGS-46281): Support gathering IPsec data [#467](https://github.com/openshift/must-gather/pull/467)
* [OCPBUGS-42835](https://issues.redhat.com/browse/OCPBUGS-42835): Removes reference to gather_multus_logs in 4.17 [#459](https://github.com/openshift/must-gather/pull/459)
* [OCPBUGS-42964](https://issues.redhat.com/browse/OCPBUGS-42964): Collect etcd object count [#453](https://github.com/openshift/must-gather/pull/453)
* [OCPBUGS-42958](https://issues.redhat.com/browse/OCPBUGS-42958): Gather OSUS data [#443](https://github.com/openshift/must-gather/pull/443)
* [OCPBUGS-42835](https://issues.redhat.com/browse/OCPBUGS-42835): [Release-4.17] Network logs collection: skip unready nodes [#445](https://github.com/openshift/must-gather/pull/445)
* [Full changelog](https://github.com/openshift/must-gather/compare/6598b160656d8c51e12254278cb39576561a9b68...f8fb61b7740b6029a0008e4925ed7a56735d468e)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/ddb486ae8c68d228a1421c779ec8fe35fc436ccb)

* Updating ose-network-metrics-daemon-container image to be consistent with ART for 4.17 (#93) [#93](https://github.com/openshift/network-metrics-daemon/pull/93)
* swtich golint install method (#103) [#103](https://github.com/openshift/network-metrics-daemon/pull/103)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/f7a88331a9de217c6619dccd23bc701aa6712df8...ddb486ae8c68d228a1421c779ec8fe35fc436ccb)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/fa9e6b018d0e72e4243194a0b5b6c88d5090bcf2)

* [OCPBUGS-44397](https://issues.redhat.com/browse/OCPBUGS-44397): OCPBUGS-44679: upgrade packages for cve [#141](https://github.com/openshift/networking-console-plugin/pull/141)
* [OCPBUGS-44650](https://issues.redhat.com/browse/OCPBUGS-44650): Routes list page shows correct status and location [#139](https://github.com/openshift/networking-console-plugin/pull/139)
* [OCPBUGS-44648](https://issues.redhat.com/browse/OCPBUGS-44648): Add Route Filter in route list [#138](https://github.com/openshift/networking-console-plugin/pull/138)
* [OCPBUGS-43037](https://issues.redhat.com/browse/OCPBUGS-43037): hide routes metrics non-admin users [#129](https://github.com/openshift/networking-console-plugin/pull/129)
* [OCPBUGS-43065](https://issues.redhat.com/browse/OCPBUGS-43065): Routes list sort by status [#131](https://github.com/openshift/networking-console-plugin/pull/131)
* [CNV-49305](https://issues.redhat.com/browse/CNV-49305): fix for virt perspective [#128](https://github.com/openshift/networking-console-plugin/pull/128)
* [OCPBUGS-42678](https://issues.redhat.com/browse/OCPBUGS-42678): OCPBUGS-42352: add service weight [#125](https://github.com/openshift/networking-console-plugin/pull/125)
* [OCPBUGS-39390](https://issues.redhat.com/browse/OCPBUGS-39390): fix sorting on lists [#123](https://github.com/openshift/networking-console-plugin/pull/123)
* [OCPBUGS-42582](https://issues.redhat.com/browse/OCPBUGS-42582): fix html in translations [#122](https://github.com/openshift/networking-console-plugin/pull/122)
* [OCPBUGS-42581](https://issues.redhat.com/browse/OCPBUGS-42581): Route edit form [#121](https://github.com/openshift/networking-console-plugin/pull/121)
* [CNV-48190](https://issues.redhat.com/browse/CNV-48190): move title networkpolicies above tabs [#120](https://github.com/openshift/networking-console-plugin/pull/120)
* Fix alert ServiceSelector [#111](https://github.com/openshift/networking-console-plugin/pull/111)
* [CNV-47528](https://issues.redhat.com/browse/CNV-47528): Fix key value in selector [#110](https://github.com/openshift/networking-console-plugin/pull/110)
* Revert IPAM (subnets input) [#115](https://github.com/openshift/networking-console-plugin/pull/115)
* [OCPBUGS-42248](https://issues.redhat.com/browse/OCPBUGS-42248): fix pagination during sorting [#109](https://github.com/openshift/networking-console-plugin/pull/109)
* [OCPBUGS-41868](https://issues.redhat.com/browse/OCPBUGS-41868): Add destination ca cert [#106](https://github.com/openshift/networking-console-plugin/pull/106)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/f395bb620999a1ead055f59ebe02d1a4c258e764...fa9e6b018d0e72e4243194a0b5b6c88d5090bcf2)


### [oauth-server](https://github.com/openshift/oauth-server/tree/5a70bcef9c5a913bda3ac9fbb5a27cb43d27a7db)

* [OCPBUGS-44118](https://issues.redhat.com/browse/OCPBUGS-44118): escape spaces in oauth callback path [#167](https://github.com/openshift/oauth-server/pull/167)
* [OCPBUGS-43587](https://issues.redhat.com/browse/OCPBUGS-43587): Fix login path for go1.22 mux pattern matching [#162](https://github.com/openshift/oauth-server/pull/162)
* [Full changelog](https://github.com/openshift/oauth-server/compare/a44685102fbccd24a68207eacdc0a63435af5dde...5a70bcef9c5a913bda3ac9fbb5a27cb43d27a7db)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/07714b7c836ec3ad1b776f25b44c3b2c2f083aa2)

* [OCPBUGS-37867](https://issues.redhat.com/browse/OCPBUGS-37867): Use tag only when image by tag and digest (#911) (#932) [#911](https://github.com/openshift/oc-mirror/pull/911)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/c9123030d5df99847cf3779856d90ff83cf64dcb...07714b7c836ec3ad1b776f25b44c3b2c2f083aa2)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/05a4611f68caee0ba8ef49514ec0e0c6b95d7184)

* [OCPBUGS-42752](https://issues.redhat.com/browse/OCPBUGS-42752): Pass expected type to deploymentconfig/scale object validation. [#457](https://github.com/openshift/openshift-apiserver/pull/457)
* [OCPBUGS-42232](https://issues.redhat.com/browse/OCPBUGS-42232): fail image import when both image and error are nil [#450](https://github.com/openshift/openshift-apiserver/pull/450)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/3c3cb886cb4621e7584156af68bdcf108c27cdaa...05a4611f68caee0ba8ef49514ec0e0c6b95d7184)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/f299e54abad2f06a51f95bf40b611a5f1519b31e)

* [OCPBUGS-44093](https://issues.redhat.com/browse/OCPBUGS-44093): user system:serviceaccount:openshift-infra:serviceaccount-pull-secrets-controller in ns/openshift-infra must not produce too many applies [#350](https://github.com/openshift/openshift-controller-manager/pull/350)
* NO-JIRA: cleanup root and app OWNERS [#346](https://github.com/openshift/openshift-controller-manager/pull/346)
* [OCPBUGS-42362](https://issues.redhat.com/browse/OCPBUGS-42362): Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) [#339](https://github.com/openshift/openshift-controller-manager/pull/339)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/7682a61bedd0db855bb9696bfb08f6078688ea4e...f299e54abad2f06a51f95bf40b611a5f1519b31e)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/23512b675c57095bc03ac0da8cad39561d6aef9b)

* [OCPBUGS-44455](https://issues.redhat.com/browse/OCPBUGS-44455): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.17 [#342](https://github.com/openshift/cluster-api-provider-openstack/pull/342)
* [OCPBUGS-44959](https://issues.redhat.com/browse/OCPBUGS-44959): Makefile changes for merge-bot [#340](https://github.com/openshift/cluster-api-provider-openstack/pull/340)
* [OCPBUGS-44455](https://issues.redhat.com/browse/OCPBUGS-44455): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.17 [#329](https://github.com/openshift/cluster-api-provider-openstack/pull/329)
* [OCPBUGS-43584](https://issues.redhat.com/browse/OCPBUGS-43584): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.17 [#323](https://github.com/openshift/cluster-api-provider-openstack/pull/323)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/9db571c5fc2ce02aa3296ced348d082ee4cddaba...23512b675c57095bc03ac0da8cad39561d6aef9b)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/a8acb3d612717850bff384af0eaa06b6f0f5e136)

* [OCPBUGS-46054](https://issues.redhat.com/browse/OCPBUGS-46054): CRD upgrade existing CR validation fix [#913](https://github.com/openshift/operator-framework-olm/pull/913)
* [OCPBUGS-44760](https://issues.redhat.com/browse/OCPBUGS-44760): fix: call TokenRequest API when service account token secret is missing [#898](https://github.com/openshift/operator-framework-olm/pull/898)
* [OCPBUGS-43965](https://issues.redhat.com/browse/OCPBUGS-43965): Return an error when the IP status cannot be updated [#885](https://github.com/openshift/operator-framework-olm/pull/885)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/b0d86a042d2b36be77b3b5bca74e73194bfdeee8...a8acb3d612717850bff384af0eaa06b6f0f5e136)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/604f3cb92b77150ce1c66e147eddd0d553216441)

* [OCPBUGS-45953](https://issues.redhat.com/browse/OCPBUGS-45953): bump OVS version to 3.4.0-18 [#2393](https://github.com/openshift/ovn-kubernetes/pull/2393)
* [OCPBUGS-45312](https://issues.redhat.com/browse/OCPBUGS-45312): pin libreswan to 4.6-3.el9_0.3 [#2384](https://github.com/openshift/ovn-kubernetes/pull/2384)
* [OCPBUGS-45339](https://issues.redhat.com/browse/OCPBUGS-45339): Dockerfile: Update OVN to the 24.03.2-32.el9fdp minor release. [#2376](https://github.com/openshift/ovn-kubernetes/pull/2376)
* [OCPBUGS-43454](https://issues.redhat.com/browse/OCPBUGS-43454): Ignore cluster manager topology not managed errors for localnet with no subnets [#2362](https://github.com/openshift/ovn-kubernetes/pull/2362)
* [OCPBUGS-44303](https://issues.redhat.com/browse/OCPBUGS-44303): Add hybird overlay pod IPs to the namespace address_set [#2340](https://github.com/openshift/ovn-kubernetes/pull/2340)
* [OCPBUGS-42931](https://issues.redhat.com/browse/OCPBUGS-42931): Add static route to the hairpin masquerade IPs to pod [#2315](https://github.com/openshift/ovn-kubernetes/pull/2315)
* [OCPBUGS-39200](https://issues.redhat.com/browse/OCPBUGS-39200): Dockerfile: Bump OVS to 3.4.0-1 [#2287](https://github.com/openshift/ovn-kubernetes/pull/2287)
* [OCPBUGS-42940](https://issues.redhat.com/browse/OCPBUGS-42940): Fix egress gateway pod cleanup for remote zone pods. [#2316](https://github.com/openshift/ovn-kubernetes/pull/2316)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/62451d12851aebdd1a3b009a9829f8df796998ad...604f3cb92b77150ce1c66e147eddd0d553216441)


### [prometheus](https://github.com/openshift/prometheus/tree/e2fb74187b1858a31e3bf75cc5ab02c75ad8abe8)

* [OCPBUGS-43667](https://issues.redhat.com/browse/OCPBUGS-43667): fix(discovery): Handle cache.DeletedFinalStateUnknown in node informers' DeleteFunc [#230](https://github.com/openshift/prometheus/pull/230)
* [Full changelog](https://github.com/openshift/prometheus/compare/6853164ae2073146f78cbe9cbda92ebfe1e744d7...e2fb74187b1858a31e3bf75cc5ab02c75ad8abe8)


### [tests](https://github.com/openshift/origin/tree/38cdceafc39431ab1546976a79704290a5cc5d0f)

* [OCPBUGS-44190](https://issues.redhat.com/browse/OCPBUGS-44190): Fix UnexpectedNodeNotReady and UnexpectedNodeUnreachable [#29306](https://github.com/openshift/origin/pull/29306)
* [OCPBUGS-43576](https://issues.redhat.com/browse/OCPBUGS-43576), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): Don't modify pod routes in tests [#29250](https://github.com/openshift/origin/pull/29250)
* [OCPBUGS-43576](https://issues.redhat.com/browse/OCPBUGS-43576), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): Set startup probe for UDN tests [#29244](https://github.com/openshift/origin/pull/29244)
* [OCPBUGS-43576](https://issues.redhat.com/browse/OCPBUGS-43576), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): UserDefinedPrimaryNetworks: curl the KAPI IP through eth0 [#29241](https://github.com/openshift/origin/pull/29241)
* [OCPBUGS-44795](https://issues.redhat.com/browse/OCPBUGS-44795): fix: adding oslat updates and outputting test results to the artifacts [#29193](https://github.com/openshift/origin/pull/29193)
* [OCPBUGS-43576](https://issues.redhat.com/browse/OCPBUGS-43576), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): network_segmentation: allow multiple UDN status conditions [#29259](https://github.com/openshift/origin/pull/29259)
* [OCPBUGS-44494](https://issues.redhat.com/browse/OCPBUGS-44494): removing rteval from the realtime test suite [#29194](https://github.com/openshift/origin/pull/29194)
* [OCPBUGS-44496](https://issues.redhat.com/browse/OCPBUGS-44496): fix: adding in a SNO time override for AWS Metal [#29192](https://github.com/openshift/origin/pull/29192)
* [OCPBUGS-44062](https://issues.redhat.com/browse/OCPBUGS-44062): Adjust createDNSPod() to support hypershift dual-stack test [#29254](https://github.com/openshift/origin/pull/29254)
* [OCPBUGS-44045](https://issues.redhat.com/browse/OCPBUGS-44045): Ignore infra nodes on tap cni tests [#29251](https://github.com/openshift/origin/pull/29251)
* [OCPBUGS-43569](https://issues.redhat.com/browse/OCPBUGS-43569): feat: update to use pullspec image [#29207](https://github.com/openshift/origin/pull/29207)
* [OCPBUGS-43576](https://issues.redhat.com/browse/OCPBUGS-43576): Porting testing for netConfig and UDN and CIDR overlapping tests from upstream [#29181](https://github.com/openshift/origin/pull/29181)
* [OCPBUGS-39606](https://issues.redhat.com/browse/OCPBUGS-39606): Add image registry capability check [#29174](https://github.com/openshift/origin/pull/29174)
* [OCPBUGS-42814](https://issues.redhat.com/browse/OCPBUGS-42814): ruby:3.0-ubi8 => ruby:3.1-ubi8 [#29162](https://github.com/openshift/origin/pull/29162)
* [OCPBUGS-42336](https://issues.redhat.com/browse/OCPBUGS-42336): Fix image ecosystem tests 4.17 [#29126](https://github.com/openshift/origin/pull/29126)
* [OCPBUGS-41817](https://issues.redhat.com/browse/OCPBUGS-41817): Update the NotFound case for CNI plugin to reflect changes [#29091](https://github.com/openshift/origin/pull/29091)
* [Full changelog](https://github.com/openshift/origin/compare/08f2f5f123f1058a849372fd36802765d0e4ebb2...38cdceafc39431ab1546976a79704290a5cc5d0f)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/097d823bd10abbc6cd016c34a1c5c3cd1b514031)

* [OCPBUGS-43432](https://issues.redhat.com/browse/OCPBUGS-43432): update check-fmt goimports command [#78](https://github.com/openshift/cloud-provider-vsphere/pull/78)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/07abced061d16b906b19d1eb49f9bea5c2c77662...097d823bd10abbc6cd016c34a1c5c3cd1b514031)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/039ee3684d5addee3ff8436b19462def77bd5804)

* [OCPBUGS-43705](https://issues.redhat.com/browse/OCPBUGS-43705): redact sensitive information when logging VCenter config [#133](https://github.com/openshift/vmware-vsphere-csi-driver/pull/133)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/738c43cfac38f92f5304935368bb3c41a147069f...039ee3684d5addee3ff8436b19462def77bd5804)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/c9ad7eca24e515bc6555b65ffd172ebc2702c5ff)

* [OCPBUGS-43778](https://issues.redhat.com/browse/OCPBUGS-43778): Fix panic on nil infrastructure Spec.PlatformSpec.VSphere [#264](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/264)
* [OCPBUGS-42327](https://issues.redhat.com/browse/OCPBUGS-42327): Fix the config loading warning [#259](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/259)
* [OCPBUGS-42007](https://issues.redhat.com/browse/OCPBUGS-42007): Remove conditions and controllers [#254](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/254)
* [OCPBUGS-42006](https://issues.redhat.com/browse/OCPBUGS-42006): Add check for vCenter version [#253](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/253)
* [OCPBUGS-42008](https://issues.redhat.com/browse/OCPBUGS-42008): Implement minor quality of life improvements. [#255](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/255)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/6054116d4adde0ce92e43f5637e984053c21aa84...c9ad7eca24e515bc6555b65ffd172ebc2702c5ff)