4.16.53

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.16.53-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-master-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded periodic-ci-openshift-release-master-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.16-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.16-micro Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.16-micro Succeeded periodic-ci-openshift-release-master-ci-4.16-e2e-azure-ovn-upgrade
- fips-scan Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.16-fips-payload-scan
- gcp-ovn-rt-upgrade-4.16-minor Succeeded periodic-ci-openshift-release-master-ci-4.16-upgrade-from-stable-4.15-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.16 Succeeded periodic-ci-openshift-hypershift-release-4.16-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.15.21, 4.15.22, 4.15.23, 4.15.24, 4.15.25, 4.15.26, 4.15.27, 4.15.28, 4.15.29, 4.15.30, 4.15.31, 4.15.32, 4.15.33, 4.15.34, 4.15.36, 4.15.37, 4.15.38, 4.15.39, 4.15.40, 4.15.41, 4.15.43, 4.15.44, 4.15.45, 4.15.46, 4.15.47, 4.15.48, 4.15.49, 4.15.50, 4.15.51, 4.15.52, 4.15.54, 4.15.55, 4.15.56, 4.16.10, 4.16.11, 4.16.12, 4.16.14, 4.16.15, 4.16.16, 4.16.17, 4.16.18, 4.16.19, 4.16.20, 4.16.21, 4.16.23, 4.16.24, 4.16.25, 4.16.26, 4.16.27, 4.16.29, 4.16.3, 4.16.30, 4.16.33, 4.16.34, 4.16.35, 4.16.36, 4.16.37, 4.16.38, 4.16.39, 4.16.4, 4.16.40, 4.16.41, 4.16.42, 4.16.43, 4.16.44, 4.16.45, 4.16.46, 4.16.47, 4.16.48, 4.16.49, 4.16.5, 4.16.6, 4.16.7, 4.16.8, 4.16.9

4.16.52 (changes) - S S S F S
4.16.51 (changes) - Failed
4.16.50 (changes) - Success
4.16.32 - Success
4.16.28 (changes) - Success
4.16.13 (changes) - Failed
4.16.2 (changes) - Success
4.16.1 (changes) - Failed
4.16.0 (changes) - Failed
4.15.59 (changes) - Success Success
4.15.58 (changes) - Failed
4.15.57 (changes) - Success
4.15.53 (changes) - Success
4.15.42 (changes) - Success
4.15.35 (changes) - Failed
4.15.20 (changes) - Failed
4.15.19 (changes) - Failed
4.15.18 (changes) - Failed
4.15.0-0.nightly-2025-11-20-135123 (changes) - Success

Loading changelog, this may take a while ...

Changes from 4.16.32

Created: 2025-11-21 16:16:55 +0000 UTC

Image Digest: sha256:fe82edf8318eb10aac27fbc005ccee485a6e92734a0241cfa74a5b5ad4f9cc04

Components

Kubectl 1.29.7
Kubernetes upgraded from 1.29.11 to 1.29.14
Kubernetes Tests 1.29.0
Red Hat Enterprise Linux CoreOS upgraded from 416.94.202501220853-0 to 416.94.202511191934-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
StreamingCollectionEncodingToJSON (0 tests)	Enabled (New)		Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
StreamingCollectionEncodingToProtobuf (0 tests)	Enabled (New)		Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Removed images

ovirt-machine-controllers

Rebuilt images without code change

agent-installer-utils git 6e6bb40d sha256:c676cecfc7aba29796dcc60b6efefae82eba3ed6477a20d2c52c4bbff3c3cb1c
alibaba-cloud-controller-manager git 97e8335e sha256:a43ffeffd514624ab29438b37b1badaacde55196b8c2a43106aee857af590b91
alibaba-machine-controllers git 248372a4 sha256:c353d2e19cba87c82778ed52ce5cea82c80b0e7592c1d3cdf1743f6dfaa2f94a
apiserver-network-proxy git ca81b6a3 sha256:000d9584ef230afd4a24c1abcd3c647825a073b9b24a05227b8b49a99030117e
aws-cloud-controller-manager git a53e9def sha256:28108a34dfb757facfa31c43d3f2ecae61cca328437e3f6e043076ac3aec7f21
aws-ebs-csi-driver git 1d29a74a sha256:d546061e155fd64a5f862364988038567498ff45a29dbdac1869933a0111bf04
aws-kms-encryption-provider git c66065de sha256:71864dcb5249812d55fb6f5695dec04b017dd6a7357acb72751807947e902e71
azure-cloud-controller-manager git e5bac334 sha256:0f57ea98c72beda0addf8a1f277eead9e0295a104dd369111f8509396761f3fd
azure-cloud-node-manager git e5bac334 sha256:828f1ff744b2373e34e4358bb7bfe8969999f845e9b565564b636b2db675b56a
azure-cluster-api-controllers git a81e3b31 sha256:85244fa774769a1017734dc460a525d086e86fb7c6ab59ab816828d21622461e
azure-disk-csi-driver git 6b55f6fb sha256:d07482f28926dcd79d5aee909ad9d9b72395ab06ca3fbc7fd5ca0248dfc0d751
azure-file-csi-driver git 7a36778a sha256:79e062e08429815b09d1ae74777a55b793e7392007ae88b6b8add886d5129899
baremetal-machine-controllers git 2b396e06 sha256:7d59ebe34d84f3088962c0ceded851a1f81573466472ae40fed08b11b70374b7
baremetal-runtimecfg git f55a330f sha256:d65f4327f36e0a383869a735df81aa395b3c7e090240a280332a2ee15468cc21
cluster-bootstrap git 27bfb59f sha256:e6cc38101b670765a581681bc156423e36cabf7adad1ef494351efe446e34bc3
cluster-capi-controllers git 5830a10a sha256:69f8541e2b8acffeac18adeb1af8dae6ada219eb71492af2fa31ee82994fdf9c
cluster-config-operator git 441d29c9 sha256:11bdb71ebdaeb051299791a1faf85b1810af4e47180cfcff1acd2e34d4cfc3eb
cluster-control-plane-machine-set-operator git 14571e8a sha256:901a7d653a61cbc7b405cf0815633192e4148250ee8faf2a5be0d17f2961848b
cluster-csi-snapshot-controller-operator git 439826e1 sha256:02f0c1cd04d6f18d2d5f9750fcfea800e0cf1a413e7ca768f22d1b9ac7d1685d
cluster-kube-cluster-api-operator git 95ceaa9e sha256:d28dcbc459a78808d944c7e0e708e18801d714bbeb1d7eb9cdaaa56cbb8e53f5
cluster-kube-scheduler-operator git 630f63bc sha256:a87c9ab3ffd1e95570a1928a895dd02ec9ce0663f7925501696bc1effe77da73
cluster-kube-storage-version-migrator-operator git e8258113 sha256:04f6c2b3cfdf78fe459f291eada07dd31ec5c2d0ee588d3f6bc1f3b4d20edbf1
cluster-machine-approver git 7685374f sha256:50f8faaf13c3eedf9815068716d0998c8cc467e64ff2439174e91dd33f24c27e
cluster-olm-operator git 27bf70dd sha256:5bbc9f16f772ef7537bb7b8a398eb7ac58ffc72b45cfd80d85f2588202218287
cluster-openshift-apiserver-operator git d26f3002 sha256:7ff7ff2e3af16ffd251ba44304db0859f4e67ad9ffab03b285b188803ac4d829
cluster-policy-controller git eaea543f sha256:650e26870d106dbfb4f0bb298a9df5f8750c02fbbdf98b4513942d1dad3842b8
cluster-update-keys git e8478585 sha256:d0bd0787d0e99922de84509bc41b940dd255eff6d429fb5858ff5d2482f5047e
configmap-reloader git dc91ddc4 sha256:0d34eb583091e04be84acd41d99cd265d7511cd9c52530f2c95d1e447d238af2
coredns git 1e417656 sha256:df304af77254f74c4fd1d0cfd474fca98b5a6ecebc45743a55778a7a4e15facc
csi-driver-manila-operator git c25d1ff2 sha256:1dcc257e4d8e7ad96385d5e99d51deb102ab09bbc9cd78ea8d698b4eb35ed460
csi-driver-nfs git 406cec72 sha256:448eb927b6f1c861444f7b718adc83711cbd1482a4418d610b78288dd42864af
csi-driver-shared-resource git bc125def sha256:d5b9ad4b0b2a0274cd4234fae6d4bb74ce752deefcf680c1d8072bc87fb9a3ed
csi-driver-shared-resource-operator git 1e1194bc sha256:7d96b5e5fa4ccab083c4435fa0e791660cc3945a8c6efb17176cbef823e34c2b
csi-driver-shared-resource-webhook git bc125def sha256:ec490ac983dcd1052bf825bca27de54a11a78c7889df4acc674e304ac395e3ee
csi-external-attacher git 7da80aab sha256:765a9a363028a7395384949dd1ffb36a4b5a7160baedc17dc05a80a4ce0c11c7
csi-external-provisioner git 9e8af011 sha256:7f3e6dabfb02065cea6c492e9246c98b6e9f6a82f406968976ad69c5f1941d72
csi-livenessprobe git f5e3ff55 sha256:fc09aa9ed77d52071726fb477330d4d1e3be40aba2e1607751ef26e467d63710
csi-node-driver-registrar git 8930c368 sha256:a652a9296cd75a651e5166fd7b437888d238fa5197a8471a30ea8d1cf4bcdf1e
driver-toolkit git 1d5732f0 sha256:7467f5654f46302c245c433afbd7a0caea4e28e665586a34a7e496dfb016ffb1
egress-router-cni git 7089efe6 sha256:49de5bc666ec3acf7c434b6c4a01250738135636aec75955eb77499bcdb5d9a5
etcd git e7911c0d sha256:a60abfbbd5f54637bccc9e356252a2ae0bb6baf1aff1ac2ecdbe9e9745dbc801
gcp-cloud-controller-manager git 26b43dfc sha256:1b6950fa94d34135a8234b739b584994704e18001bd6987a7f15474b07ae8060
gcp-cluster-api-controllers git 02432df8 sha256:7ac9c8e6a40a0896dbcc578b70bd83f773f29230402ad9a5b1d963e205c941a9
gcp-pd-csi-driver git 5ed71c64 sha256:ebff78d299c488d9854cd7002f5c2c44e4ee1fe75081085fa4c461ef495765a8
gcp-pd-csi-driver-operator git 799327f7 sha256:67e870df7efab570f1021c1485c60715ad0609fbbb3b49ef9f27d57cc034ce92
ibm-cloud-controller-manager git f961f16d sha256:c6119923b68cbca698df2731303439709cc89dedd03b01d52984ad75236c2924
ibmcloud-machine-controllers git d29506e7 sha256:857f90d808b6951f707defa13bdee63e4ca843568e291cf7481a2313241b1882
ironic-machine-os-downloader git 93b8b5fa sha256:45009807ab16a0a0b691988f0140cab68c9eea99843b2f1259f8f349c4596e27
k8s-prometheus-adapter git e4f859be sha256:66b7328a614c808d4cc826dc0af37a679130be18aa34ef98abcee44fff942a3d
keepalived-ipfailover git b58673a3 sha256:5e0b429a32212977c606bbfe434d6871b2dabb953969df863bb538fdfa9257e1
kube-metrics-server git 9116b918 sha256:aaba7f818014af15431952e60a0d0b3109034b0cd71f616312951be6c4cec3bf
kube-rbac-proxy git c38f4734 sha256:eb80cf2697a55d14dce107eefcd5d9f40f6a5a0d68e0c0fe43302d49ffc79015
kube-state-metrics git 9b67b8d1 sha256:4e8c9f4e9270dfd08c0fea8cc37fe833e64bf26f6a328f081ae768e84466c9fe
kubevirt-cloud-controller-manager git 3db76104 sha256:ccdc74107f53bfbe970de852b44435845ac4bb560e3893ca777be46e5ca822f7
machine-image-customization-controller git 39480963 sha256:1518e69656bd5c1f791c1ad1c831d478779a20267e562c758347e7d3e34e69d1
multus-networkpolicy git f988f894 sha256:47e39ab965d979aa592d377649b38d82acc2034871d91472aaedce8af3f5cb06
multus-route-override-cni git 73594f77 sha256:6ab904b7962903aaabe6347daa864e5c54c43419f87b5451cd6dbb4114b30262
nutanix-cloud-controller-manager git 28bf5963 sha256:a0d4166b864ab761ce6cc4d2ca5c536c6ca424df36fdb228b8ed2ab14728881d
oauth-server git 3739138c sha256:d76dc27dcd86b6f960ca171608b6bfb954ea06b2cf3b3ba3ad3e43e7ec652cba
oc-mirror git b137a53a sha256:8e7353eda576f29aa3f9294f92d29b9c0ee5817bb76b704b5660d21efebdd3b6
olm-catalogd git 79975a51 sha256:5601a5e31b898d0282b676ad4269dae60b430ef03102c161d58e8911313d04fc
olm-operator-controller git 80b8649c sha256:3a80335628256ff3ae6e3d915d139591e43efe37c520c36c828cbf1a2eae768e
olm-rukpak git 282cc84c sha256:f883f977f40d2b456decd499b48e09c8015e9e4cadd49f595177930680c7fa4e
openshift-state-metrics git 59b8a0ff sha256:1a45b7eac990cfd555998ab3ea6626c2a4da62e8d0dc06edf0bd858f4892478b
openstack-cinder-csi-driver-operator git 85b52097 sha256:7188e75eaaa74399bca8f571a859c136ffd11e58a1021b5eab5bbaee7ca82a92
openstack-machine-api-provider git 5ada1cba sha256:2b577079fb985988e399fb5a43fd8fd21be499af47c2610a13f6bb852f86cd4d
ovirt-csi-driver git 1db726a9 sha256:ad40a1290a0742b7d1c2fff68d638522469ae89ee9183833c10812b12d748237
ovirt-csi-driver-operator git ac852f3e sha256:1f92c8fe7837fbd484e6edad65db52fd997e85beb01d60bf1f5316bfd12cc25c
powervs-block-csi-driver git 26162bad sha256:19c7ed255f7c2cb7c6f91b9abba938c029bf8c892577cd90f27860ffdea4135b
powervs-block-csi-driver-operator git 9c5dd8d1 sha256:7fe65b420003b587f7e1827a90cd49e0e436bb8b10cf6973fe77da0cc0fceac6
powervs-cloud-controller-manager git 20e6dc70 sha256:46d37c6653118cece8c36ffdf159f2d13d0e8c1caa8904562e2dfdea691f0838
prom-label-proxy git 5e14722e sha256:1dcf652b2409f942d75dd023ae04687b1dd6b97fdde816ef5248fddb26a1190d
prometheus-alertmanager git e9aea929 sha256:008c1ad8321b2eba2848eea4d293aa3de1bdbde51c2673a72ceab491214890ea
prometheus-config-reloader git c7262a43 sha256:0042fe51ac321ea4f66aaed35bed8b071d55a26974cb6892b3ca1d103d5b095c
prometheus-node-exporter git 29ba26d1 sha256:b3b823fec482fa21c4bac2684ca41ddc1f5159878ef5685961d1fb0c0d1d52f3
prometheus-operator git c7262a43 sha256:6405869e9dd68f872d410d53209d4cc948af35e24747378beefc26132faf063b
prometheus-operator-admission-webhook git c7262a43 sha256:086941a8ddce7f51fc1d784e9b97fb8c2414d06b97236f10721a3ff32b47136d
rhel-coreos sha256:23431fa0db3f6d822aadf5e40b7f6a96dd27315a28b002f3dab3c2db46b3c30e
rhel-coreos-extensions sha256:a4bc84106698dc345894e4fde7e33d0c92dd47e8e745931b61e30dd5e9a74d76
service-ca-operator git 538c7b98 sha256:eabddd711cb071350cf9e4b37e84b258963b1c6eff14630befee602106f7b586
telemeter git c1ecd105 sha256:dbf843aad10bc325169dfaf19bb11b3dc534ac417fa613a7652ee24ff905f98b
thanos git 85eee25c sha256:be7babcecb24b269aadce5d10a9ab4e30fdff094a9530f4dcc8f248d77c50844
vsphere-cloud-controller-manager git 023a3655 sha256:7f12c0a4b56133e25e87f5f2de768ff73eeb3c91db4237bea150d8c444ed98f9
vsphere-csi-driver git 03b7e8eb sha256:6c08fcd111b630daec92298b00d27f42a6ac5c9ea7fb3cda820f36bfa2bc8057
vsphere-csi-driver-syncer git 03b7e8eb sha256:72d2a8a6e5946d87c18cfeea44276a09357030c5391148d7bde643dd455abd52
vsphere-problem-detector git 3683c120 sha256:dea7705b647ab4cf3db0891eec743b8c736a8cc22c36d03a199890a4bc6e820f

agent-installer-api-server

OCPBUGS-58631, OCPBUGS-58636: Bump glog to v1.2.5 in release-4.16 (#7901) #7901
OCPBUGS-47627: dnsmasq service on OCP SNO fails to read /etc/resolv.conf file during system startup (#7857) #7857
OCPBUGS-54402: Bump go-jwt to 4.5.2 to fix CVE-30204 (#7486) #7486
OCPBUGS-45244: Bump moby from v26.0.0 to v27.2.1 (#7189) #7189
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-53718: Bump jwt to 4.5.2 in release-4.16 (#1091) #1091
abi: let the bootstrap waiting for workers before rebooting (#1047) #1047
Full changelog

agent-installer-node-agent

run go mod tidy / vendor #1019
And 4 elided commits (e.g. from squash or rebase merges)
Full changelog

aws-cluster-api-controllers

OCPBUGS-61942: UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It #572
OCPBUGS-58666, OCPBUGS-58671: bump github.com/golang/glog to v1.2.5 #560
OCPBUGS-53726: Update golang-jwt to v4.5.2 #547
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator

OCPBUGS-64831: Use 127.0.0.1 for healtz http-endpoints #467
OCPBUGS-64768: Add RBAC ClusterRole and Binding for driver node #465
OCPBUGS-61253: add ability to control kube rbac proxy container image… #426
OCPBUGS-60598: Bump library-go #423
OCPBUGS-59606: Backport stale conditions fix #407
OCPBUGS-60248: add tag matching to Azure File storage class #414
Full changelog

aws-machine-controllers

OCPBUGS-63140: client: re-use a single file for building the session instead of randomly named files #144
Full changelog

aws-pod-identity-webhook

OCPBUGS-52513: github.com/go-jose/go-jose/v4 v4.0.5 #203
Full changelog

azure-kms-encryption-provider

OCPBUGS-53494: bump golang-jwt v4 #13
Full changelog

azure-machine-controllers

OCPBUGS-52476: Remove unused vnet package #131
OCPBUGS-56169: [release-4.16] Update virtualmachines service to armcompute/v5 SDK #147
OCPBUGS-56656: Fix failure when attempting to modify immutable availabilitySet #151
OCPBUGS-56092: Update eviction policy for Spot VMs from Deallocate to Delete #142
OCPBUGS-54990: Re-reconcile machine on NIC provisioning failure #137
OCPBUGS-50966: dynamically setting the amount of fault domains #129
Full changelog

azure-workload-identity-webhook

OCPBUGS-53798: github.com/golang-jwt/jwt/v4 v4.5.2 #33
OCPBUGS-52510: github.com/go-jose/go-jose/v4 v4.0.5 #29
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-54165: aws: fix NLB creation in secret regions #10031
OCPBUGS-53237: Validation for API and Ingress VIPs when using user-managed load balancer #10048
OCPBUGS-62952: Update the RHCOS 4.16 bootimage metadata #10022
OCPBUGS-62653: Release 4.16 bump terraform provider azurerm #9993
OCPBUGS-59162: vSphere - remove unit tests using nip.io #9835
OCPBUGS-62235: Make swift containers removal not fatal for UPI. #9961
OCPBUGS-58290: sort zone slices extracted from map of byo subnets #9819
OCPBUGS-55807: update resolv.conf every time on bootstrap node #9694
OCPBUGS-57460: vsphere - check if host is powered down or on standby before uploading template #9786
OCPBUGS-36677: Power VS: Enable incoming traffic on port 5000 during installation in a restricted network #8711
OCPBUGS-57498: ensure ctrplane nodes can access bootstrap MCS #9788
OCPBUGS-54240: Update timeout for GCP WaitFor operation #9715
OCPBUGS-35040: Power VS: Add ports needed for private clusters to security group #8546
OCPBUGS-54327: Remove error logging when determining image arch #9610
OCPBUGS-54345: Remove tmp directory used for agent pxe files #9611
OCPBUGS-54263: IBMCloud: Move to IBM TF openshift fork #9604
OCPBUGS-50547: aws/edge/byovpc: tag edge subnets with shared value #9482
OCPBUGS-52191: [release-4.16] capi/aws: bump provider for LB DNS lookup fix #9547
OCPBUGS-51207: Log correct hostname for validation status #9511
OCPBUGS-51111: PowerVS: destroy dhcp hack #9502
OCPBUGS-48762: Update RHCOS-release-4.16 bootimage metadata to 416.94.202501270445-0 #9478
OCPBUGS-43469: pkg/asset/installconfig/azure: send full certifcate chain #9467
OCPBUGS-49416: [Nutanix] Installation failed with timeout when uploading images to PC #9412
Full changelog

baremetal-operator

OCPBUGS-53322: BMO can expose any secret via BMCEventSubscription CRD #407
OCPBUGS-49703: Handle HFC for non-redfish HW #396
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-64561: Update go-jose, x/crypto, x/net #2144
OCPBUGS-59938: Adding sos.conf file for default sos config into the tools image #2064
OCPBUGS-60675: Use fedora image in unit tests instead of centos #2079
OCPBUGS-51043: Add HOST env var in oc debug for sos report collects more #1977
Full changelog

cloud-credential-operator

OCPBUGS-63550: ccoctl: add public-key-file flag to create-all #940
OCPBUGS-55129: snyk to ignore SNYK-GOLANG-GOLANGORGXNETHTML-9572088 #918
OCPBUGS-60973: ccoctl: aws to use proper issuer url on subsequent runs #909
OCPBUGS-60861: ccoctl: only add owned tag to azure resources on create #902
OCPBUGS-58676: github.com/golang/glog v1.2.5 #893
OCPBUGS-56981: Azure: resolve nil pointer exception when role assignment exists #867
OCPBUGS-53416: github.com/golang/glog v1.2.4 #843
OCPBUGS-53822: update github.com/golang-jwt/jwt #839
OCPBUGS-51544: Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #829
OCPBUGS-52512: github.com/go-jose/go-jose/v4 v4.0.5 #826
Full changelog

cloud-network-config-controller

OCPBUGS-65567: [release-4.16] Change the capacity struct from int to ptrOfInt #192
OCPBUGS-56359: Increase API call timeout to 30 second #172
Full changelog

cluster-authentication-operator

OCPBUGS-54655: Avoid duplicate OAuth client creation #766
Full changelog

cluster-autoscaler

OCPBUGS-60915: revert openshift replica fix #377
OCPBUGS-59267: Fix cool down status condition to trigger scale down #363
OCPBUGS-60609: fix checkpoint gc of unknown recommenders #372
OCPBUGS-54326: improve replica counting and decrease target size behavior #353
OCPBUGS-48732: UPSTREAM: <carry>: 🐛(metrics) Initialize metrics for autoscaler errors, scale events, and pod evictions #339
Full changelog

cluster-autoscaler-operator

OCPBUGS-52329: set max soft bulk taint count to zero #341
Full changelog

cluster-baremetal-operator

OCPBUGS-64741: Always have a service for ironic-api port #524
OCPBUGS-63417: Fix ironic inspector container privileges #513
OCPBUGS-61504: Remove webhookport (9447) as HostPort #506
OCPBUGS-54546: Add missing relatedObjects #470
Full changelog

cluster-capi-operator

OCPBUGS-49603: fix: always update clusteroperator status versions when differing #253
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63168: ccm: disable unused secure-serving port and webhook #422
OCPBUGS-60387: Add Service using common resource templating #411
OCPBUGS-60387: Update service selector to match deployment label #410
Full changelog

cluster-config-api

NO-JIRA: Promote streaming list encoding to Default on Hypershift. #2568
CNTRLPLANE-1611: Add feature gates for StreamingCollectionEncoding #2542
OCPBUGS-58392: Add IPsec API for NAT-T UDP encapsulation support #2393
OCPBUGS-56424: Add IdleConnectionTerminationPolicy field to IngressControllerSpec #2330
Full changelog

cluster-dns-operator

OCPBUGS-52498: [release-4.16] Add runbook_url for CoreDNSErrorsHigh #431
Full changelog

cluster-etcd-operator

OCPBUGS-61505: Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace #1482
OCPBUGS-60836: add missing ports to svc and pod spec #1473
OCPBUGS-53510: fix CVE-2025-30204 #1403
Full changelog

cluster-image-registry-operator

OCPBUGS-53870: bump github.com/golang-jwt/jwt #1219
OCPBUGS-51600: bump golang.org/x/oauth2 #1210
OCPBUGS-51167: ensure that storage names don’t end in dashes #1181
Full changelog

cluster-ingress-operator

OCPBUGS-56424: Add e2e tests for IdleConnectionTerminationPolicy #1235
OCPBUGS-56424: Add support for IdleConnectionTerminationPolicy #1234
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-60467: Add missing service ports to apiserver service #1895
OCPBUGS-50575: Increase waitForFallbackDegradedConditionTimeout #1805
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-60834: Missing endpoint slices for open ports the operator uses #864
Full changelog

cluster-monitoring-operator

OCPBUGS-64581: Fix KSM deny-list typo #2733
OCPBUGS-64637: Add mcd_local_unsupported_packages metric from MCO to telemetry 4.16 #2735
OCPBUGS-62765: port metric acm_managed_cluster_worker_cores:max to OCP 4.16 #2719
OCPBUGS-63235: test: remove image registry e2e tests #2727
OCPBUGS-61856: chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind #2676
Full changelog

cluster-network-operator

OCPBUGS-63155: Add drop flows for GARPs #2819
OCPBUGS-57354: block upgrade if a CNI migration is in progress #2760
OCPBUGS-62055: Update CNO reviewers/approvers #2803
OCPBUGS-44443: Add controlplane cli image envar for use with hypershift #2791
OCPBUGS-58392: Add IPsec API for NAT-T UDP encapsulation support #2736
OCPBUGS-56992: iptables-alerter streamlining #2717
OCPBUGS-56195: Fix live migration with feature migration configured explicitly #2710
OCPBUGS-53317: Fix feature migration for EgressIP #2673
OCPBUGS-52952: Unexpected Behavior During Cluster Upgrade for the ovn-ipsec-host pods #2663
[Release 4.16] OCPBUGS-50712: Not update status.migration of the network.config CR to empty #2651
OCPBUGS-51074: Update egressfirewall CRD to be consistent with ovn-kubernetes repo #2650
Full changelog

cluster-node-tuning-operator

use ROLE_WORKER_CNF environment variable to determine mcp name (#1292) #1292
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-48657: Add new team members to owners file #378
Full changelog

cluster-samples-operator

OCPBUGS-63516: references to github.com/sclorg/django-ex.git now also refer to the branch #659
OCPBUGS-55457: Adding mutex to func createSamples on handler.go #633
OCPBUGS-54420: add rhdmalone to owners #620
OCPBUGS-48848: add shannon and aroyoredhat as owners #596
Full changelog

cluster-storage-operator

OCPBUGS-61252: add ability to control kube rbac proxy container image on controlplane #614
OCPBUGS-52353: fix Vsphere cluster Storage operator in Unavailable state #563
Full changelog

cluster-version-operator

OCPBUGS-58452: Failing=Unknown upon long CO updating #1213
OCPBUGS-55156: Fix a panic caused by a data race #1178
OCPBUGS-50590: Set openshift.io/required-scc: privileged annotation in version pods #1153
OCPBUGS-46408: Filter out shallowly UpdateEffectNone errors from a MultipleErrors message in the Failing condition #1128
Full changelog

console

OCPBUGS-64649: /auth/error?error=missing_state&error_type=auth is showing blank page #15675
OCPBUGS-44157: bump dompurify to latest #15591
OCPBUGS-62123: Remove ancient X-XSS-Protection header #15528
OCPBUGS-61057: OpenShift console PVC clone cannot use B as the unit #15450
OCPBUGS-60175: Tolerate unknown fields in Infrastructur… #15368
OCPBUGS-60641: Secret key with binary file changes when edited via Console #15417
OCPBUGS-59869: Not able to launch terminal window from OCP web console due to console plugin conflicts #15334
OCPBUGS-57677: Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image #15328
OCPBUGS-60115: Cannot read properties of undefined (reading ‘node-role.kubernetes.io/master’) error while accessing node logs from console #15358
OCPBUGS-59358: fix bug where / in console.tab/horizontalNav href brea… #15286
OCPBUGS-37603: Manual backport of several incremental fixes for unauthenticated endpoints #15312
OCPBUGS-59274: Add the ability to launch multiple modals with useModal hook #15276
OCPBUGS-59445: Cannot read properties of undefined (reading ‘filter’) error while accessing nodes from console. #15291
OCPBUGS-58407: Add flags in console static plugin for all the components of this epic #15243
OCPBUGS-56838: Fetching taskRuns in PLR details page using PLR UID also #15099
OCPBUGS-58188: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15214
OCPBUGS-57326: Remove logoutOpenShift method call #15172
OCPBUGS-57270: Debug pod logs are not accessible when debugging a node via OpenShift Console #15165
OCPBUGS-57096: Add all files to vendor regardless of gitignore #15133
OCPBUGS-57089: Sample segment sessions #15130
OCPBUGS-56858: remove 60 day alert from cluster update modal #15102
OCPBUGS-56715: update the Deployment pod on change in imageStream #15091
OCPBUGS-56472: Remove the devconsole backend common internet proxy and replace it with dedicated ones #15072
OCPBUGS-55378: Do not load CSRs if user does not have permissions #15000
OCPBUGS-55644: fix bug where operator appears twice #15016
OCPBUGS-45142: Add missing pipelines plugin name to known plugins #14550
OCPBUGS-48628: Added token to proxy header #14693
OCPBUGS-54174: Update the monitoring topic used by the console team #14900
OCPBUGS-52450: fix run time error when no completed version exists #14840
OCPBUGS-52851: Show Observe section without PROMETHEUS and MONITORING flags #14849
OCPBUGS-52288: While upgrading the cluster from UI observed Warning alert:Admission Webhook Warning #14821
OCPBUGS-49409: ERROR in search tool: Cannot read properties of undefined (reading ‘state’) #14703
OCPBUGS-52418: While accessing the node terminal from UI observed ‘Warning alert:Admission Webhook Warning` #14837
OCPBUGS-49979: Set default build option as BUILDS for Builder Image sample #14730
OCPBUGS-49800: Fix Function Import: An error occurred Cannot read properties of undefined (reading ‘filter’) #14715
OCPBUGS-49801: use default StorageClass for ServerlessFunction pipelineVolumeClaimTemplate #14716
OCPBUGS-46388: fix alert rule link #14808
OCPBUGS-52252: Fix alert rule link to alert in dev perspective #14817
OCPBUGS-46441: Do not pass CSV name to operand list page when an exen… #14627
OCPBUGS-36963: Manually create an API token for a ServiceAccount #14057
OCPBUGS-35394: sessions: fix sessions pruning #13969
Full changelog

console-operator

OCPBUGS-60794: Update downloads deployment configuration to use master node selector #1036
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-55648: Check error returned by ipv6 SettleAddresses #188
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-58884: CARRY: don’t ignore json files #341
Full changelog

csi-external-resizer

OCPBUGS-62465: Requeue PVC over PV creation #174
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-60450: UPSTREAM: 1238: Snapshot Controller startup should not LIST all volumesnapshots #186
Full changelog

docker-builder

OCPBUGS-58074: S2I build cpu limits observed by assemble are limited to 1 cpu #475
OCPBUGS-53076: Upgraded Kubernetes dependency from 1.28.2 to 1.29.0 #468
OCPBUGS-42893, OCPBUGS-42914: buildah dependency bump to fix - Buildah allows arbitrary directory mount and symlink traversal vulnerability in the containers/storage library #450
Full changelog

docker-registry

OCPBUGS-60183: bump openshift/docker-distribution #441
OCPBUGS-53654: bump jwt and oauth dependencies #432
OCPBUGS-49696: bump docker distribution #423
Full changelog

gcp-machine-controllers

OCPBUGS-55249: Disable shielded VMs for non-UEFI disks #116
Full changelog

haproxy-router

OCPBUGS-56424: Add support for IdleCloseTerminationPolicy #655
OCPBUGS-49391: Reject All CA-Signed Certs Using SHA1 #651
Full changelog

hyperkube, pod

CNTRLPLANE-1612: Backport StreamingCollectionEncoding for JSON and protobuf #2485
OCPBUGS-61908: UPSTREAM: <carry>: Don’t retry storage calls with side effects. #2470
OCPBUGS-60553: [4.16]: podresources: list: use active pods #2454
4.16: OCPBUGS-60872: UPSTREAM: 127757: scheduler: Improve CSILimits plugin accuracy by using VolumeAttachments #2435
OCPBUGS-60272: Bump nfs server provisioner #2402
OCPBUGS-58054: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2342
OCPBUGS-58054: UPSTREAM: <carry>: disable some legacy cloud provider Azure tests #2352
OCPBUGS-57290: UPSTREAM: <carry>: Bump cadvisor version to fix kubelet #2325
OCPBUGS-49906: Bump k8s api to 1.29.14 #2211
OCPBUGS-45931: UPSTREAM: <carry>: kubelet/cm: fix bug where kubelet restarts from missing cpuset cgroup #2158 #2200
Full changelog

hypershift

OCPBUGS-63640: [release-4.16] fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries #7113
OCPBUGS-64680: Update DNS names for ovn-kubernetes cp metrics #7158
CNTRLPLANE-1904: Migrate 4.16 pipelines to common pipeline template #7212
CNTRLPLANE-1426: feat(konflux): tag MCE HO images with latest #6839
OCPBUGS-61252: dont use registryOverrides on kube rbac proxy image be… #6756
OCPBUGS-61582: Update KCM node monitor grace period #6797
OCPBUGS-61860: Use the common MCE konflux pipeline #6844
OCPBUGS-60150: Always compress and encode payload in token secret for inplace upgrades #6750
OCPBUGS-60951: MCE 2.6 konflux hcp cli #6701
CNTRLPLANE-1203: HO MCE change to hermetic ta build #6654
CNTRLPLANE-1231: Move CPO pipeline to hermetic builds #6599
OCPBUGS-58505: [release-4.16] Add missing service network DNS entries to KAS cert #6393
OCPBUGS-57494: Add proxy variables for the MCD Pod #6286
OCPBUGS-55697: Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs #6114
CNTRLPLANE-919: Konflux build pipeline service account migration #6087
CNTRLPLANE-919: Konflux build pipeline service account migration #6082
OCPBUGS-51804: Fix golang crypto dependency go.mod replacement #5994
OCPBUGS-54914: Add konnectivity-proxy sidecar to openshift-oauth-apiserver #6026
OCPBUGS-54632: Sync RBAC for attaching volumes on VM level #5998
OCPBUGS-49914: Reconcile proxy CA bundle into hosted cluster #5983
OCPBUGS-53902: bump golang-jwt v4 and v5 #5907
Red Hat Konflux update control-plane-operator-4-16 #5957
ART-11792: update go mod dependency for konflux #5922
OCPBUGS-51733, OCPBUGS-51804: Bump dependencies to OCP fork in backports #5901
OCPBUGS-53308: fix(deps): bump go-jose #5866
OCPBUGS-52506: refactor aws identity health check into new controller #5781
OCPBUGS-52857: Make managed-trust-bundle optional #5809
OCPBUGS-52426: change plaform to platform #5773
OCPBUGS-50993: Honor proxy vars in the util insecure http client #5662
OCPBUGS-46466: Consistently look up and dial cloud API hostnames #5301
OCPBUGS-50698: add region to AWS creds passed to operators managed by CPO #5670
OCPBUGS-51296: 4.17 Add HostedCluster additional trustbundles to konnectivity-https-proxy #5707
NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.5 #5686
OCPBUGS-50694: OCPBUGS-50692: Fix IsIPv4 function identifying also addresses instead of CIDRs #5620
NO-JIRA: chore(deps): update dependency mkdocs-material to v9 #5635
OCPBUGS-50557: Prevent IgnitionServer from flooding the API server with patch requests #5599
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1739267472 #5597
NO-JIRA: chore(deps): update dependency mkdocs-material to v8.5.11 #5591
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.3 #5587
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1738746453 #5574
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.2 #5575
NO-JIRA: chore(deps): update dependency mkdocs to v1.6.1 #5531
NO-JIRA: chore(deps): update dependency mkdocs-glightbox to v0.4.0 #5532
OCPBUGS-49640: fix overwriting PKI operator HCP conditions #5506
NO-JIRA: chore(deps): chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1737480393 - abandoned #5484
NO-JIRA: chore(deps): update konflux references (release-4.16) #5477
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-58737: bump github.com/golang/glog to version v1.2.4 #106
OCPBUGS-56063: tech debt: rework vendor patches #91
OCPBUGS-53910: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #84
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-59727: [IBM VPC] set offlineExpansion to false in e2e test manifest #149
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-51818: CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork #109
Full changelog

insights-operator

OCPBUGS-61656: virt launcher logs gatherer (#1135) (#1138) (#1147) #1135
avoid possible Go panic when searching existing conditions (#1142) #1142
fix: incorrect anonymization of domains (#1119) #1119
feat: copy proxy envs from IO pod to gathering pods (#1108) #1108
OCPBUGS-60448: [release-4.16] Adding missing back-port changes from OCPBUGS issue (#1117) #1117
Full changelog

ironic

METAL-1306: Do not use openstack packages #648
OCPBUGS-49895: Drop quiet option of grep to avoid race condition with pipefail #634
OCPBUGS-48151, OCPBUGS-48598: Bump jinja2 to 3.0.1-6.el9.2 #623
Full changelog

ironic-agent

METAL-1306: Do not use openstack packages #180
Full changelog

ironic-static-ip-manager

OCPBUGS-49595: Fix subnet validation #48
Full changelog

kube-proxy, sdn

OCPBUGS-54457: Drop SYNACK as well in MCS side #658
OCPBUGS-44674: Handle openshift-host-network namespace as special when it modifies #648
OCPBUGS-46493: Raise the minSyncPeriod for NetworkPolicies to 10s during migration #649
Full changelog

kube-storage-version-migrator

NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-16). #227
Full changelog

kubevirt-csi-driver

OCPBUGS-54632: Ensure volume stays attached through reboots #57
OCPBUGS-44622: During detach don’t return error if VM is not found #49
Full changelog

libvirt-machine-controllers

OCPBUGS-26525: Updating ose-libvirt-machine-controllers-container image to be consistent with ART for 4.16 #283
Full changelog

machine-api-operator

OCPBUGS-57210: Updates GCP CredentialsRequest #1378
OCPBUGS-55248, OCPBUGS-55249: Updates GCP credentials request #1355
OCPBUGS-53045: add image/read permissions #1348
OCPBUGS-52342: Drop oVirt support #1336
Full changelog

machine-config-operator

OCPBUGS-63155: [release-4.16] Networking: reset ovn-remote config and allow ovnkube controller to set it #5359
OCPBUGS-60773: scope MCD node listers to current node #5260
OCPBUGS-63553: Add control-plane label for master nodes on legacy clusters #5376
OCPBUGS-57423: pkg/operator/status: Drop PoolUpdating as an Upgradeable=False condition #5119
OCPBUGS-63332: Recheck generatedByControllerVersion annotation prior to deleting a degraded MC #5364
OCPBUGS-56753: Support NODEIP_HINT in IPI deployments too #5079
OCPBUGS-62689: Add mcd_local_unsupported_packages recording rule #5328
OCPBUGS-59931, OPNET-681: Support migration to NMState #5205
OCPBUGS-61869: Override NMState service definition #5290
OCPBUGS-60621: Add workaround fix for static pod race #5252
OCPBUGS-56558: Log CRC MC deletion #5178
OCPBUGS-58270: Do not set cpu system reserve below the default value #5163
add missing vendors #4952
OCPBUGS-48283: Do not run resolv-prepender from NM dispatcher #4784
OCPBUGS-56868: daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers #5090
OCPBUGS-56626: error from generateAndValidateRenderedMachineConfig function can be misleading #5075
OCPBUGS-54831: Make mtu-migration run after wait-for-primary-ip #4990
OCPBUGS-55684: MSBIC should not update windows machinesets #5028
OCPBUGS-35921: userCA and cloudCA certfiicates are not removed from nodes and ignition config #4419
OCPBUGS-53248: Enforce VIPs to be collocated at the same host #4923
OCPBUGS-53043: Enable nmstate-configuration on all platforms #4910
OCPBUGS-52952: Add ipsec connect wait service #4931
OCPBUGS-54163: Fixing typos for MachineConfigNode #4942
OCPBUGS-53434: Update ObservedGeneration in KubeletConfig #4935
OCPBUGS-53313: daemon: ensure ostree-finalize-staged is started before rebooting #4928
OCPBUGS-52421: Update format verbs for alert logs #4901
OCPBUGS-51347: Update the storage.conf configuration file template #4881
OCPBUGS-52593: Update cluster-reader ClusterRole permissions #4905
OCPBUGS-52404: create /run/nodeip-configuration before use #4897
OCPBUGS-52310: configure-ovs workaround for ovs-if-br-ex bug #4892
OCPBUGS-50862: Auto-recover from MC with invalid extension #4853
OCPBUGS-43680: Regenerate the rendered MC in use when deleted #4655
OCPBUGS-49976: Add clarification to invalid maxUnavailable alert #4837
OCPBUGS-39224: Do not enable on-prem-resolv-prepender.path for UPI #4573
OCPBUGS-48290: Pausing Master MCP results in Alerts #4786
Full changelog

machine-os-images

OCPBUGS-54169: Change rhcos release browser url #57
Full changelog

monitoring-plugin

OCPBUGS-54316: Fix “Export as CSV” #469
Full changelog

multus-admission-controller

OCPBUGS-58767: Update the github.com/golang/glog module to v1.2.4 #103
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-47472: adds getcontext (backport 4.16) #261
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-55618: Fixes leftover podref issue #365
OCPBUGS-50005: [Release-4.17]Kubeconfig loop #340
Full changelog

must-gather

OCPBUGS-42960: Gather OSUS data #455
OCPBUGS-48082: Update owners #473
Full changelog

network-interface-bond-cni

OCPBUGS-61348: Bump github.com/containernetworking/plugins from to 1.7.1 #95
NO-JIRA: Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.16 #91
NO-JIRA: Add ci-operator.yaml file on release-4.16 #84
Full changelog

network-metrics-daemon

OCPBUGS-58777: Bump github.com/golang/glog to v1.2.4 (#113) #113
OCPBUGS-60186: Replace e2e test image (#122) #122
swtich golint install method (#123) #123
Full changelog

network-tools

add missing go vendors #140
Full changelog

nutanix-machine-controllers

OCPBUGS-51854: CVE-2025-22868 #110
OCPBUGS-47266: fixing CVE-2024-45338 #93
Full changelog

oauth-apiserver

OCPBUGS-30525: Update dependencies to address CVE-2024-24786 #124
Full changelog

oauth-proxy

OCPBUGS-61446: Update x/crypto to v0.31.0 #335
OCPBUGS-62707: Fix oauth-proxy e2e-component tests #338
Full changelog

openshift-apiserver

OCPBUGS-63394: Wire dry run option to Image API server operations #566
OCPBUGS-61474: Skip blocked registry check for registries with mirrors #552
OCPBUGS-56612: Fix image reference in TestImageStreamImportQuayIO #516
OCPBUGS-49656: prevent panic when no image and error are set #494
OCPBUGS-49656: validate image property isn’t nil before using #493
OCPBUGS-49656: move on to the next digest/tag during failures #492
Full changelog

openshift-controller-manager

OCPBUGS-61707: legacy image pull secret rollback controller #416
OCPBUGS-60233: ignore error failing to find pull/push secrets #409
OCPBUGS-57513: Set node-pullsecrets volume to read-only to protect image pull credentials #394
OCPBUGS-56354: Empty proxy variables are causing issues during the build #382
Full changelog

openstack-cluster-api-controllers

OCPBUGS-58028: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.16 #346
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-58881: operatorgroup: ensure clusterroleselectors in clusterrole aggregation rules are sorted #1102
OCPBUGS-59647: Reduce Frequency of Update Requests for Copied CSVs (#3597) #1042
OCPBUGS-60847: Add NetworkPolicy as a supported kind #1050
OCPBUGS-61388: [4.16] e2e stability fixes #1083
OCPBUGS-57429: reduce cache expiry frequency [release-4.19] #1022
OCPBUGS-56358: fix(olm): improve error logging for missing olm.managed label (#3558) #1006
OCPBUGS-53395: Ensure that PSA label is latest instead of pinning versions #987
OCPBUGS-48696: Fix excessive catalog source snapshots cause severe performance regression #957
Full changelog

operator-marketplace

OCPBUGS-62220: Remove Expect func so that the test case can use the retry logic #671
OCPBUGS-61920: Update memoryTarget on catalog source pods #664
OCPBUGS-49429: Upgrade golang.org/x/net [release-4.16] #587
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-64944: [release-4.16]: Configure sec nic EIPv6 address with NODAD and maximum lifetime #2853
OCPBUGS-64858: Fix stale EIP assignments during failover and controller restart #2851
OCPBUGS-63155: Fix EgressIP stale GARP post reboot + pod restart #2809
OCPBUGS-63230: Fix dnsnameresolver address set #2812
OCPBUGS-60079: Always enable global IPv6 forwarding #2743
OCPBUGS-60494: Update OWNERS file: Add Patryk/Martin as approvers #2718
OCPBUGS-58161: Unpin OVS patch versions #2648
OCPBUGS-57396: Fix predicate for cluster subnet route to gateway router #2645
OCPBUGS-55282: Fix hybrid overlay node subnets collision with cluster subnets #2621
OCPBUGS-48121: Increase InformerSyncTimeout to 60s #2624
OCPBUGS-56242: Handles unspecified protocol in network policy port #2571
OCPBUGS-56812: egressfirewall: avoid nil dereference on node delete #2591
OCPBUGS-52503: Fixes unexpected mp0 route removal during start up #2479
OCPBUGS-54204: Update OVN to FDP25.A.1 24.03.5-40. #2497
OCPBUGS-50595: kubevirt, localnet: Reduce live migration downtime #2469
OCPBUGS-50594: fixes overzealous deletion of SNAT in egressIP #2456
Full changelog

powervs-machine-controllers

OCPBUGS-61511: Use OS_GIT_VERSION in Makefile when found (for Konflux builds) #127
OCPBUGS-54752: Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.16 #114
Full changelog

prometheus

OCPBUGS-61856: chore: compute highestTimestamp at queryManager level #270
OCPBUGS-56739: BACKPORT: fix promtool analyze block shows metric name with 0 cardinality #255
OCPBUGS-54942: Scraping: Bump cache iteration after error to avoid false duplicate detection. #250
Full changelog

route-controller-manager

OCPBUGS-56152: Added error event for failed ingress to route conversion #61
OCPBUGS-55201: ingress: Reset metrics when ingress is deleted #58
Full changelog

tests

OCPBUGS-63395: Backport pr 29834 to release-4.18 #30409
OCPBUGS-62934: Fix bearer token exposure in exit condition as well #30365
OCPBUGS-61170: images/tests: Remove rteval #30203
NO-JIRA: Update extended/networking OWNERS #30091
OCPBUGS-60272: Bump kubernetes version to fix NFS ganesha version #30086
OCPBUGS-57311: Replace RunHostCmd with Exec function to censor bearer token being exposed #29908
OCPBUGS-57203: fix: remove un-needed test #29849
OCPBUGS-34163: Fix regex parser for censoring private key #29805
OCPBUGS-56704: aws/edge: prevent test using unschedulable nodes #29847
OCPBUGS-55476: support provider type external #29738
OCPBUGS-55636: [build] Ensure Git Clone Does Not Run Privileged #29746
OCPBUGS-54768: Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com #29663
OCPBUGS-52581: Use payload pullspec for image info test #29589
OCPBUGS-52343: Try also user CA for getting openshift-tests image #29578
OCPBUGS-44119: Ignore infra nodes on tap cni tests #29261
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-61653: Fix unit tests #72
Full changelog

vsphere-csi-driver-operator

OCPBUGS-51206: Set reconcile-sync to 10 minute for ListVolume #294
OCPBUGS-49862: List only linux nodes #289
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github