4.17.50

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.17.50-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded (1 retries) periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.17-e2e-aws-ovn-serial
- aws-ovn-upgrade-4.17-micro Succeeded periodic-ci-openshift-release-main-ci-4.17-e2e-aws-ovn-upgrade
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-main-ci-4.17-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.17-micro Succeeded periodic-ci-openshift-release-main-ci-4.17-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.17-fips-payload-scan
- gcp-ovn-rt-upgrade-4.17-minor Succeeded (1 retries) periodic-ci-openshift-release-main-ci-4.17-upgrade-from-stable-4.16-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.17 Succeeded periodic-ci-openshift-hypershift-release-4.17-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-main-nightly-4.17-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.17-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.16.11, 4.16.12, 4.16.13, 4.16.14, 4.16.15, 4.16.16, 4.16.17, 4.16.18, 4.16.19, 4.16.20, 4.16.21, 4.16.23, 4.16.25, 4.16.26, 4.16.27, 4.16.28, 4.16.29, 4.16.30, 4.16.32, 4.16.33, 4.16.34, 4.16.35, 4.16.36, 4.16.37, 4.16.38, 4.16.39, 4.16.40, 4.16.41, 4.16.42, 4.16.44, 4.16.45, 4.16.46, 4.16.48, 4.16.49, 4.16.50, 4.16.51, 4.16.52, 4.16.53, 4.16.54, 4.17.10, 4.17.11, 4.17.12, 4.17.13, 4.17.14, 4.17.15, 4.17.16, 4.17.17, 4.17.18, 4.17.19, 4.17.21, 4.17.22, 4.17.23, 4.17.24, 4.17.25, 4.17.26, 4.17.28, 4.17.29, 4.17.3, 4.17.30, 4.17.31, 4.17.32, 4.17.33, 4.17.34, 4.17.35, 4.17.36, 4.17.37, 4.17.38, 4.17.39, 4.17.4, 4.17.41, 4.17.42, 4.17.43, 4.17.44, 4.17.45, 4.17.46, 4.17.5, 4.17.6, 4.17.7, 4.17.8, 4.17.9

4.17.49 (changes) - S S S F F S
4.17.48 (changes) - Failed
4.17.47 (changes) - Success
4.17.40 - Success
4.17.27 (changes) - Success
4.17.20 (changes) - Success
4.17.2 (changes) - Success
4.17.1 (changes) - Success
4.17.0 (changes) - Failed
4.16.57 (changes) - Failed Success
4.16.56 (changes) - Success
4.16.55 (changes) - Success
4.16.47 (changes) - Failed
4.16.43 (changes) - Failed
4.16.24 (changes) - Success
4.16.10 (changes) - Success
4.16.9 (changes) - Failed
4.16.8 (changes) - Failed
4.16.0-0.nightly-2026-02-24-151311 (changes) - Failed Success

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.17.40

Created: 2026-02-27 00:10:51 +0000 UTC

Image Digest: sha256:fffcbd70f5251c30d23bdcc87900e3eaf8b3ae4945a29618c26277669b453b1d

Components

Kubectl 1.30.5
Kubernetes 1.30.14
Kubernetes Tests 1.30.14
Red Hat Enterprise Linux CoreOS upgraded from 417.94.202509161710-0 to 417.94.202602251654-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
StreamingCollectionEncodingToJSON (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
StreamingCollectionEncodingToProtobuf (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Rebuilt images without code change

agent-installer-api-server git bcecf726 sha256:aed088a80b3257ba9c92959fa3a0c61db90a293b9b6e6c53cd68a3b95032670e
agent-installer-csr-approver git 63b2da6e sha256:7b767b4d1ddd94c3ba38dcb1fb5ef358342567ad6005d156a447f48a4045659b
agent-installer-node-agent git df4660b4 sha256:41956575b800aff5ed1ad22af939e2bc0ad436357e0c5f6d75dd3a84a5a54fbc
agent-installer-orchestrator git 63b2da6e sha256:7594c6dbb00cd000554104509c62644f6417bdce4000b8e00bcbf0b1e8ec4779
apiserver-network-proxy git ea660559 sha256:56c652922b7c927c646a64ab5d9f5a23d4fd96059eb44467813b6a3f28329e8b
aws-cloud-controller-manager git 144bace6 sha256:f38fc1ab820414e0dc373c920ae8e078483b999f413cac3487da01940a44f5dc
aws-ebs-csi-driver git 2bb5b316 sha256:adfdd4d49d50e0036e1370fb053d10fbb0cec8fd06ce2fc394cb377691c5dc6d
aws-kms-encryption-provider git 9d401670 sha256:1d3817d8a6dea4669961faaac9185ebab2fdd07bd9eab09a38d5443adceac04b
aws-pod-identity-webhook git 80efc4ea sha256:00ab13647c5e161142476256ef679e6daaa29e9e87de1a31de0e4d8950fe091e
azure-cloud-controller-manager git 626ecd1c sha256:4fa65c9e93fb4d9f5e6fe1fa07d938d9d2d83792af4e4e245fc36f2e7bdeb448
azure-cloud-node-manager git 626ecd1c sha256:05285f5b7d4c6dfa2dd9b02a8cf7a9e4aff3acff52774800135d8aedaf3f331a
azure-cluster-api-controllers git d359bfe5 sha256:26f8ab1e8ae77916c537c09c4fa3db1afaf09f5d277e1e55fab2fdf9219b60ce
azure-disk-csi-driver git a544f30b sha256:a865b7d34ac21738ce72d3842390a19802ca6fa8727c2a6b99f64e0958e99d40
azure-file-csi-driver git 9f4c38c2 sha256:d6adf4ead994113f5119194ea67ace17d84b1aeb3d8ac5de7c66b3b8df24e894
azure-kms-encryption-provider git 190a0fab sha256:757be5333232ccfdb0645e2430e7aa68c6825634570cef5393149934234dcc54
azure-workload-identity-webhook git 6707f899 sha256:a0e986976bbf4558a17cdaa790f78e217fb67e150000b25e8e61035c4e14f111
baremetal-cluster-api-controllers git 41b34248 sha256:e6c63cfcdcbd17f4ac6b1c71f894616b550637977d641aeb0723fdccc3380ed5
cluster-autoscaler-operator git ea4a8878 sha256:a43c1c107623b4ba1dcd173b1e70905d01b2b88b4f2b8ce7d6b91d9835cb57e9
cluster-bootstrap git 95dd9129 sha256:a5f36a10b5e39d6b4d10801e820cd5b1cb851a323e3323e22c49c7b6355d3b5f
cluster-capi-controllers git 77ef4fc5 sha256:95f31108170fb4fa1a122fe6a800f05f7d6b875ecc98e5ab9c553f89a0170fbf
cluster-capi-operator git a2cdab1b sha256:cc9096de1bbdd2b06f2f3667ab9bffb68d7fda5fa668aa886473d699c0cf6c52
cluster-control-plane-machine-set-operator git f7e01c2f sha256:abd7039a4f460a61d1b48ec2afc1a151c3c809390d43d6d831815b18d5917337
cluster-csi-snapshot-controller-operator git ffba005b sha256:1b304eae1056c3593775993e367e469a957179e118a6f8844378dd018a46f102
cluster-dns-operator git 81507f04 sha256:fe257e79c8977ab133869db9ce7484224d22b0354a9378bd4df80368c6c5adc9
cluster-image-registry-operator git 790f6a59 sha256:b386bfca3cee3dbbe8263f620095d57f84ecbaafca6ab04288bb0709ae5c5536
cluster-kube-cluster-api-operator git aed5f6c7 sha256:de250087f41c77e0a09b95a3b17761bfda8f76d99a4eb79c29f1190cfab72771
cluster-kube-controller-manager-operator git d68b3764 sha256:f6b36f548516bdb80db6d9fff5dfb4bcb5e97820b116fb800b3902cbc323089c
cluster-machine-approver git acc2380e sha256:29072dbfe8cab53df48e12ed62d2bef9306b3e9454f4f6bcc2b6557b187fead9
cluster-olm-operator git e31b7775 sha256:1a0f8a7d49e49a95ab21cd40337a5b395404aeeaa416018c3483d40f874342f7
cluster-openshift-apiserver-operator git 2b2ba3be sha256:f996e76b3a7e554b4586291584c25bb2f1b63d150eca1e38c607e7d2df147053
cluster-openshift-controller-manager-operator git b05a249d sha256:f4bc290b04ef25f5a359baf48a49784b2de7d5a00350f9998f385b836bbc55e8
cluster-policy-controller git 7209e90d sha256:640f302d82c67acdeb2c661bde55b266fa99e30ee542d34a0242b63b23034cbb
cluster-update-keys git 63022033 sha256:3da7289d7c8704a29245da279c125cab2b11a498a54deb85d2eb33c8dcd428cb
cluster-version-operator git b855c680 sha256:2333997268591491086cf6f72a038d590b7e766eeb727b7eab8200749359df8c
configmap-reloader git 62d56d6a sha256:33ee93f31c6de4bc7aebd3d87dce022edeef9ed45bd01ca3a464652a2a441e82
console-operator git dc3d8515 sha256:0878b9379e179ca9acedf5f4a8daed17995ea8e3c78f12b5453df3d5bef80029
csi-driver-manila-operator git efc99a2a sha256:c1031c6e0b96fed0e110aaa06ad620509b7aed14bf977d09b5f997f5cf4447a8
csi-driver-nfs git 79885550 sha256:e673cce47a2a792d1904bdd4f5a1143fbcdb79c96a7af7820337bb9f6537bd49
csi-driver-shared-resource git 66aee5b0 sha256:bd9b98ed00243b332310f8a728bc8f033280c681b9c13294709f8e64c5f2f9b5
csi-driver-shared-resource-operator git c095a1f2 sha256:634f64a67abf46aad47bba1602318cebc8da5173af85a4aa9764291687908617
csi-driver-shared-resource-webhook git 66aee5b0 sha256:fa8d071ec82fad8b6c0c121a74206b37cfb4a6c15a1ac974f826ac28ce3fd354
csi-external-attacher git c3fe8e2e sha256:adefd6ab96adbc931c88213c3618b594f18bc000e6ea7dcec155ff9432bc6615
csi-external-provisioner git fe460e56 sha256:f2934c3a342867bcf638642cc9f413d557e2c541d5f5623f858c2726a412b5f7
csi-external-snapshotter git 080f6bdb sha256:cc7a22cc305e7a0923d1222b9b0e76043a6da56b84c2ba68a67c314f5388face
csi-livenessprobe git e7d841dc sha256:20322cbb3d146c6ff8af5a853709b495685b2f8b50805e96b354cba956b79e9d
csi-snapshot-controller git 080f6bdb sha256:0f607897f97fd1be55f775e048a7addb93fa485d487a1cf2f6f06d2fe16ab227
csi-snapshot-validation-webhook git 080f6bdb sha256:aed9bb89e63bf4c56ac5a58bb4e7d40c9a19e48a06eb77a66f50f5f811b4c1f9
docker-registry git 4498bed2 sha256:935e72a4057e888eea19742eec39edfcbb4bdd6ce8e7bb1cc1dd9ac72e6495fe
driver-toolkit git 859518f6 sha256:d7a101256b23eb8e7952ef943c63bacc41b099243a1eaa078f3f92b2683ac2f7
egress-router-cni git 3193a756 sha256:274c07d9e670efe09f08f56e851857c63f22de7604a74c3ba07be81a5fb7e724
etcd git 0d9e0a90 sha256:20ade0f46e3eed7d609358ff7cb0c9a661f268d909506652100bbe1549d7d90b
gcp-cloud-controller-manager git 8ce997d7 sha256:0743e3124b243ce7be4cc0a0c797ac69e53d40e3e995f0299d6b7986b20eaf08
gcp-cluster-api-controllers git 9c561f2d sha256:0db611b429c7f0c0d172be3f2ed0bbaaf7766102f978711b90dbf1b8dca995d3
gcp-machine-controllers git 86a1d902 sha256:7081c1b8e8d305af13f61c0cf1721c37024af21ee2143460d15e8fc252136d76
gcp-pd-csi-driver-operator git c23b064f sha256:e4c93d506d81888b1849753bb5d649f9ab6a1830210237d3e0377f09c202c25d
gcp-workload-identity-federation-webhook git 08579e9f sha256:4f75baed8e721e80321ae2c11969ea681b77d082462811f8fb76e7f5d59edef5
haproxy-router git 1e29d8cc sha256:c11501dced0ef6a81d438d33a95faf90085bb56db0cb04ba9050ef99d0d46874
ibm-cloud-controller-manager git ad8f7eb0 sha256:c784e40521f1e8c3d3f35631fbf08308b070548c0f60f6e12603d1ee7be3d7cd
ibm-vpc-block-csi-driver git b4d153d6 sha256:840dd594f677aa06ad2ff4cca9daf4ce18686bdbaf44205be93ca3ae5d964f39
ibm-vpc-block-csi-driver-operator git ee301303 sha256:8fc6c930b16dd4a192a15ac60b660a23f2e9d67a252f45dc6bfa75e624e0b65c
ibmcloud-machine-controllers git 0b8dd7ab sha256:1b5a85f415910d774a240fe05bdf96e2f36bd5724c8eeea710b6a5af3f28ddc6
ironic-machine-os-downloader git 9e6596c3 sha256:676b0cf0a7030c90b48f802522de35ccf835d6015fd7ff8f4b12492572bd6409
ironic-static-ip-manager git bc5b8a2c sha256:7639e55a39d5cc32c531edfc2e7dc63634950141512e705a7c557c5e7811959b
keepalived-ipfailover git e3879e9e sha256:02756b68014d85cc80a723fb3aae6adac4923c877ad559757efa4414c01d9490
kube-metrics-server git 07f8cd9e sha256:a38422dacbdb5ed46bc418f41b9f6d0492ca991785d4a2b65b83189af4d25d38
kube-rbac-proxy git f708b5ec sha256:61f00f27abbc3b81262048e19f6c87af4b21c21f4b0593acb54da21013100569
kube-state-metrics git 462e63f6 sha256:a1309bfb7149dae293769d938be725eb844635b2f6431cf2f56f15fa25f8a0af
kube-storage-version-migrator git 69b07ae0 sha256:fcf4e934159b74e406e5496326f9d9016049ec162c2a909fcfa76d08853ef786
kubevirt-csi-driver git 757a8894 sha256:50d602d604921b082acd62ea742f2c3a1cbb7a419c7e489a02f1825621f6a379
libvirt-machine-controllers git a336f0b5 sha256:980585040470619dc58909ad3daf38139974518be900e6c2165e87a59ffe1d09
machine-api-operator git 998cffed sha256:f94b5dc30f962d17c57e52615be71dde8330fde06c587577efdad8a2c4576cf6
machine-os-images git f85666be sha256:c5e5bb25b50a1ee46ee3b608603cfc6d397c851e99896a848f21aae755e8c887
metallb-frr git c0182036 sha256:7b30fe2a8c1069758aefaeabcf415eb1443beb5b61a73b2d138a0f0bbd060a7f
multus-admission-controller git 041b743a sha256:2847c7cf645660a24307341c8d34e3a1a7bccbf65214e5747c8a4c802f50a773
multus-cni git 93d87533 sha256:f9aa26468c7bd74e8a3d5957711c4e5156470e6b94acf2b90cdd239fd326340b
multus-cni-microshift git 93d87533 sha256:532d370684ed211276a6aff46c960db358f33e61bc927e6e5c9658200f665131
multus-networkpolicy git 4d0b1703 sha256:5c8c1a2af8e0104dc7948cc32724ff8067990c12f30087ed4833cdb19aaf1538
multus-route-override-cni git 391c1b03 sha256:09f2a75dc4827e32b7e5c796978b04101a222f31c168bab8074b4c184694801b
network-interface-bond-cni git cc7b628e sha256:e84cb9bdc98f8816c14b08678cb1147266c3210c3641fe675d5461125cb2bd7a
network-metrics-daemon git f56bbf7a sha256:e154e911873d940da497eca522876b26bfb6faa0c30e7fef0f9cd9dcf37d0f65
network-tools git e59e7b25 sha256:e3bbad9ee57e7cd11dfd7531c3141334e5792642f1d582a074dcea6ec762b0cb
nutanix-cloud-controller-manager git c9f6cd1f sha256:0f4ce660f76b45ad486b6afd3f965e047b2dfad8d479f5c502db33d462f4852f
nutanix-machine-controllers git a4fadcbc sha256:ddd6756a690bcfb9d1168a3ac65037b632de70da60a0e7e004cea8246b01c621
olm-catalogd git c740e056 sha256:9093749e307b3489ab3413f7116e220a4eae07e234aa991751dcdce02e0f08be
olm-operator-controller git e245e661 sha256:49c054313f5e1b13c7ead47b7f5e0fae9ffd165352021773b15ea4df479f6c68
openshift-state-metrics git adf64920 sha256:1a69030b0d9d21d615f40d6aaaf75aa53f3311917375dc0a4ad29d2ec5fd62e9
openstack-cinder-csi-driver-operator git f89b6dbc sha256:dafdcb60c6da9fd9e567fbf5fbaaa4df15a704a412464d87c0a112d60d09ac90
openstack-cluster-api-controllers git 5593c5f7 sha256:eba606753ab7a7f38d62c5328a1da718c678e944acb1bdbf5db1ffec6934fc90
ovirt-csi-driver git 1db726a9 sha256:3f71a5160cdb479ecc84c319c8a5041127c6c6e761544ec5d95560ed99ee7f5b
powervs-block-csi-driver git aaa6afa9 sha256:ed7949eeedbf729af7a0c1c0ad1cef0a00b358056a2b9fdd64e5e10a7309d7b6
powervs-block-csi-driver-operator git f6f037c5 sha256:3ec0291746609be26c900737bcbd1e549fc8dc81b621acdfe5752bfff0fb0c1c
powervs-cloud-controller-manager git bd3d72e5 sha256:86c0bb731c82dba8c7006153a851cb0601de56995251ba1ac7c4a5e1c931c934
powervs-machine-controllers git b7478d7e sha256:a5e307e477bf4ad3db37109891cb579aa60eb8a167de74c6acb86778b41417b4
prom-label-proxy git c84c4898 sha256:d70492c990d338f2d55a1760b4e3b031e2880c08e7ef3f3ae4ea2f966b232bbc
prometheus-node-exporter git 8f095361 sha256:0f97b18884aecfa3838b979309b65060e20e7684db504eae45d0cc85b9b7b05c
rhel-coreos sha256:b4995c1a252cf38f93f131b71835160c035b4391945700423e93563dc69a0b7e
rhel-coreos-extensions sha256:ac8a3195ce4529501dff83158374a12eff22e0b14ad013a432d991b48a2f44e6
route-controller-manager git 02bbf80a sha256:85fe504c8711061db2b1ffead38f886fc9be3ad9d54ca1228d58d4f998eef204
telemeter git 0238640e sha256:30315d9393e114113e7961279b3afe9a71e93c69e916431d79c90d26b2f47a5a
thanos git 98c99371 sha256:dce569b81aacb058d6457a716b339018251614a0919ffd57b33570dd9a95a288
vsphere-cloud-controller-manager git 097d823b sha256:9457fd80b9de069cb2e758be49d98ef8354105e2756d2702beb531b7b482d626
vsphere-cluster-api-controllers git 6a5d803e sha256:9b26bb813d2ff55439756ac2100891d468de568ed402c97017c865205c75134b
vsphere-csi-driver-operator git e1de36a2 sha256:b0183d64cd361bf69045014bbb00daf770ca8c0147d1f00dbf60513600b8521f

agent-installer-utils

OCPBUGS-68141: bump github.com/sirupsen/logrus to v1.9.3 #238
Full changelog

aws-cluster-api-controllers

OCPBUGS-61940: UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It #571
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator

OCPBUGS-64704: Use 127.0.0.1 for healtz http-endpoints #462
OCPBUGS-63557: Add RBAC ClusterRole and Binding for driver node #453
OCPBUGS-62974: Add withCABundleDaemonSetHook() to AWS EFS operator #449
Full changelog

aws-machine-controllers

OCPBUGS-73822: Fix reconciler consistency checks in Update and Exists #167
OCPBUGS-63139: client: re-use a single file for building the session instead of randomly named files #145
Full changelog

azure-machine-controllers

OCPBUGS-65954: Set updateDomainCount to one when faultDomainCount is one #176
OCPBUGS-63700: Support datadisks on Stack Hub #168
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-74677: [release-4.17] GCP: skip AI zones #10276
OCPBUGS-74555: Azure UPI ARM template: use storageAccountId #10264
OCPBUGS-68142: [4.17] uplift logrus #10167
OCPBUGS-53236: Validation for API and Ingress VIPs when using user-managed load balancer #10047
OCPBUGS-62951: Update the RHCOS 4.17 bootimage metadata #10021
OCPBUGS-62054: Make swift containers removal not fatal for UPI. #9952
Full changelog

baremetal-machine-controllers

OCPBUGS-68143: [4.17] uplift logrus #239
Full changelog

baremetal-operator

OCPBUGS-77185: Unblock BMH direct deletion when detached annotation is present #462
Full changelog

baremetal-runtimecfg

OCPBUGS-71209: Bump logrus version #377
OCPBUGS-60112: Re-add ENABLE_NODEIP_DEBUG env var #363
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-64615: Help with must-gather scheduling through suggesting preferance of nodes #2150
Full changelog

cloud-credential-operator

OCPBUGS-65801: ccoctl azure: retry custom role creation on consistency errors #951
OCPBUGS-65480: ccoctl: use pagination when listing resources in aws #945
OCPBUGS-63549: ccoctl: add public-key-file flag to create-all #939
OCPBUGS-55128: snyk to ignore SNYK-GOLANG-GOLANGORGXNETHTML-9572088 #917
Full changelog

cloud-network-config-controller

OCPBUGS-66132: [release-4.17] Fix capacity calculation #194
OCPBUGS-65520: Change the capacity struct from int to ptrOfInt #191
Full changelog

cluster-authentication-operator

OCPBUGS-68150: Update library-go to fix CVE-2025-65637 #840
Full changelog

cluster-autoscaler

OCPBUGS-68151: update logrus to version 1.9.3 #398
Full changelog

cluster-baremetal-operator

OCPBUGS-63715: Always have a service for ironic-api port #519
OCPBUGS-63666: Allow provisioningIP when network disabled #518
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63167: ccm: disable unused secure-serving port and webhook #423
Full changelog

cluster-config-api

CNTRLPLANE-1981: Promote streaming list encoding to Default #2599
OCPBUGS-71184: Add HTTPKeepAliveTimeout to IngressController API #2639
NO-JIRA: Promote streaming list encoding to Default on Hypershift. #2567
CNTRLPLANE-1611: Add feature gates for StreamingCollectionEncoding #2538
Full changelog

cluster-config-operator

OCPBUGS-75998: Update logrus to 1.9.3 to address CVE-2025-65637 #465
Full changelog

cluster-etcd-operator

OCPBUGS-68156: Update logrus to 1.9.3 to address CVE-2025-65637 #1542
Full changelog

cluster-ingress-operator

OCPBUGS-71184: Implement HTTPKeepAliveTimeout tuning option #1335
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-63614: SCC: add hostmount-anyuid-v2 #1954
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-68165: deps: Update library-go and logrus to fix a CVE #613
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-68167: Bump github.com/sirupsen/logrus to 1.9.1 #140
Full changelog

cluster-monitoring-operator

OCPBUGS-64580: Fix KSM deny-list typo #2732
OCPBUGS-63489: Add mcd_local_unsupported_packages metric from MCO to telemetry 4.17 #2725
OCPBUGS-63123: test: remove image registry e2e tests #2715
OCPBUGS-61766: chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind #2672
Full changelog

cluster-network-operator

OCPBUGS-73799: Tweak iptables-alerter to try to avoid crictl bug #2878
: NO-JIRA: Update CNO reviewers/approvers #2767
OCPBUGS-74348: [release-4.17] fix typo in release annotation for whereabouts-token-watcher deamonset #2888
OCPBUGS-45086: Re-disable metrics server #2579
OCPBUGS-63154: Add drop flows for GARPs #2818
[Release 4.17] OCPBUGS-61765: Update CNO reviewers/approvers #2799
Full changelog

cluster-node-tuning-operator

OCPBUGS-63504: Do not cause kubelet failed dependency by ocp-tuned-one-shot.service #1418
Full changelog

cluster-samples-operator

OCPBUGS-63515: references to github.com/sclorg/django-ex.git now also refer to the branch #658
Full changelog

cluster-storage-operator

OCPBUGS-41160: Move metrics to vsphere driver #633
Full changelog

console

NO-JIRA: Bump builder image to v29 #15994
OCPBUGS-74452: Bump lodash to latest #15966
OCPBUGS-69403: Disallowed Pipelines-plugin Pipelines navigation section #15849
OCPBUGS-65933: Preserve URL in perspective switch + remove dev console folks from reviewers #15762
OCPBUGS-64942: Expose prometheus tenancy label path as a proxy #15710
OCPBUGS-64599: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15665
OCPBUGS-62631: /auth/error?error=missing_state&error_type=auth is showing blank page #15554
OCPBUGS-63212: switch to dev perspective for /dev-monitoring #15614
OCPBUGS-63397: fix bug where Roles list was displaying invalid data f… #15627
OCPBUGS-62282: Fix desync of console and variable namespace #15545
OCPBUGS-44154: bump dompurify to latest #15590
OCPBUGS-61737: Remove ancient X-XSS-Protection header #15494
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-68135: Bump logrus to v1.9.1 #224
Full changelog

coredns

OCPBUGS-62825: UPSTREAM: 7083 and 6836: Fix failing TestZoneExternalCNAMELookupWithProxy #155
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-68209: fix CVE-2025-65637 #357
Full changelog

csi-external-resizer

OCPBUGS-62466: Requeue PVC over PV creation #175
Full changelog

csi-node-driver-registrar

OCPBUGS-63682: update log level verbosity to not clutter logs #90
Full changelog

docker-builder

OCPBUGS-66988: bump buildah to 1.37.7 to fix CVE-2025-52881 #499
OCPBUGS-65816: BuildConfig inline Dockerfile fails with heredoc syntax #488
Full changelog

gcp-pd-csi-driver

OCPBUGS-68186: Update logrus to 1.9.3 #90
Full changelog

hyperkube, pod

OCPBUGS-68132, OCPBUGS-68190: CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 #2573
OCPBUGS-72531: Skip E2e: attach on previously attached volumes should work #2566
OCPBUGS-65695: Fix Concurrentmap Iteration #2520
OCPBUGS-63460: UPSTREAM: <carry>: backporting fix for concurrent map iteration and write #2456 #2496
CNTRLPLANE-1611: Backport StreamingCollectionEncoding for JSON and protobuf #2486
OCPBUGS-61584: UPSTREAM: <carry>: Don’t retry storage calls with side effects. #2458
Full changelog

hypershift

OCPBUGS-74230, OCPBUGS-74294: [release-4.17] Support proxy authentication when user/pass is included in URL #7568
fix: OCPBUGS-72956: Fix Konflux EC voilation, update deprecated base … #7457
OCPBUGS-69865: test: remove unit tests that depend on network communication [release-4.17] #7411
OCPBUGS-57123: Add support for registry root entry only in the IDMS/ICSP #6230
CNTRLPLANE-1903: Migrate 4.17 pipelines to use common pipeline #7215
OCPBUGS-63639: [release-4.17] fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries #7112
OCPBUGS-64604: Update DNS names for ovn-kubernetes cp metrics #7150
OCPBUGS-63370: fix: Make the hypershift CLI binary FIPS-compliant #7094
CNTRLPLANE-1425: feat(konflux): tag MCE HO images with latest #6838
OCPBUGS-57143: [release-4.17] HCP payload doesn’t respect multiple mirrors #6771
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-67287: [release-4.17] Fix incomplete vendor/ #139
Full changelog

insights-operator

OCPBUGS-68193: OCPBUGS-68194: [vuln] Update logrus library to 1.9.3 #1227
OCPBUGS-67008: Add filtering to add other possible pod status to QEMU gatherer #1196
OCPBUGS-66395: QEMU logs are not gathered if there are pending status virt-launcher pods #1194
OCPBUGS-66394: [bugfix] The archive’s records may include files whose names are out of bounds #1193
OCPBUGS-64629: add permissions to gather clusterrole #1170
OCPBUGS-63500: add missing permissions for replicasets and events #1165
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

ironic

OCPBUGS-69792: Bump eventlet version to 0.33.1-7 #761
Full changelog

ironic-agent

OCPBUGS-69775: Bump eventlet version to 0.33.1-7 #231
OCPBUGS-62490: netutils: Use ethtool ioctl to get permanent mac address #214
Full changelog

kube-proxy

OCPBUGS-68165: deps: Update library-go to fix a CVE #661
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-34447: Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART for 4.17 #44
Full changelog

machine-config-operator

OCPBUGS-77186: Machine-config controller should not log about non-existent pull-secret changes #5679
OCPBUGS-77090: machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] #5678
OCPBUGS-61190: MCO report “failed to list *v1alpha1.MachineOSConfig” when enable TechPreview after upgrading from 4.16 to 4.17 with one mcp paused #5584
OCPBUGS-60112: Enable debug logging for nodeip-configuration #5219
OCPBUGS-62170: Fix - NetworkManager restart or crash renders br-ex unusable #5355
OCPBUGS-66037: Remove –mount directives #5443
OCPBUGS-63154: [release-4.17] Networking: reset ovn-remote config and allow ovnkube controller to set it #5358
OCPBUGS-63540: Add control-plane label for master nodes on legacy clusters #5375
OCPBUGS-63364: Invalid architecture value found in annotation during 4.19 update #5368
OCPBUGS-63055: Recheck generatedByControllerVersion annotation prior to deleting a degraded MC #5346
OCPBUGS-62741: Add /etc/docker/certs.d to template #5335
OCPBUGS-62683: Add mcd_local_unsupported_packages recording rule #5327
OCPBUGS-60890: Race in configure-ovs.sh affects bonding interface configuration. #5267
OCPBUGS-61859: Override NMState service definition #5289
Full changelog

machine-image-customization-controller

OCPBUGS-68192: [4.17] Uplift logrus #152
Full changelog

monitoring-plugin

OCPBUGS-70290: Manual cherry pick qs vulnerability 4 17 #747
OCPBUGS-64942: Use tenancy access to metric lables #639
OU-1058: Don’t show TP button in non-administrator #637
OCPBUGS-62282: align dev and admin persective tab names #602
OCPBUGS-62282: add missing translation string #587
OCPBUGS-61891: feat: add alerting rules tab to dev console #538
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-73728: Update tag on ci-operator.yaml file #395
OCPBUGS-70256: Prevent accidental IP deallocation in statefulsets #393
Full changelog

must-gather

OCPBUGS-60607: Separate resources with comma to fix malformed inspect #504
Full changelog

networking-console-plugin

CNV-76277: Fix name generator with unprofessional names #320
Full changelog

oauth-apiserver

OCPBUGS-66228: UPSTREAM <carry>: bump kubernetes-apiserver to pick up loopback certificate expiration update #157
NO-JIRA: (chore): update OWNERS file #171
OCPBUGS-61584: Bump openshift/kubernetes-apiserver for etcd retry patches. #143
Full changelog

oauth-proxy

OCPBUGS-61445: Update x/crypto to v0.31.0 #334
Full changelog

oauth-server

OCPBUGS-61584: Bump openshift/kubernetes-apiserver for etcd retry patches. #198
Full changelog

oc-mirror

Adding r4f4 and Prashanth684 as approvers and removing contributors who are not working with oc-mirror anymore. (#1269) #1269
Full changelog

openshift-apiserver

OCPBUGS-68208: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.17] #609
OCPBUGS-74143: pkg/image: conditionally parse raw image manifest #596
OCPBUGS-66229: UPSTREAM <carry>: bump kubernetes-apiserver to pick up loopback certificate expiration update #584
OCPBUGS-63392: Wire dry run option to Image API server operations #565
OCPBUGS-61584: Bump openshift/kubernetes-apiserver for etcd retry patches. #554
Full changelog

openshift-controller-manager

OCPBUGS-61199: legacy image pull secret rollback controller #413
Full changelog

openstack-machine-api-provider

OCPBUGS-76793: Fix make test #160
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-76953: Remove the collect-profiles job #1232
OCPBUGS-67301: Fix TOCTOU race condition in ensureInstallPlan (#3682) #1172
Full changelog

operator-marketplace

OCPBUGS-68212, OCPBUGS-68213: [release-4.17] CVE-2025-65637 fixed in logrus v1.9.3+ #710
OCPBUGS-62219: Remove Expect func so that the test case can use the retry logic #670
OCPBUGS-61036: Update memoryTarget on catalog source pods #663
Full changelog

ovirt-csi-driver-operator

OCPBUGS-68230: Bump github.com/sirupsen/logrus to v1.8.3 #151
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

CORENET-6055, OCPBUGS-74492: [release-4.17] Dockerfile: Unpin OVN and consume the latest from FDP #2959
[release:4.17] OCPBUGS-71985: Fix conntrack reconciliation to use service port instead of endpoint port #2936
OCPBUGS-71218: [release-4.17] CVE-2025-65637 Bump github.com/sirupsen/logrus to v1.9.1 through indirect dependency conversion (go-controller module) #2905
OCPBUGS-71198: NetPol & MultiNetPol: Process update only when spec fields and/or related annotation are updated #2923
OCPBUGS-68348: Add ricky-rav to OWNERS for release-4.17 #2898
OCPBUGS-65928: Skip Pending pods in EgressIP status #2871
OCPBUGS-65569: [release-4.17]: kubevirt: fix bad release of IPs of live migratable pods #2857
OCPBUGS-64856: Fix stale EIP assignments during failover and controller restart #2850
OCPBUGS-64674: [release-4.17]: Configure sec nic EIPv6 address with NODAD and maximum lifetime #2843
OCPBUGS-63154: Fix EgressIP stale GARP post reboot + pod restart #2807
OCPBUGS-61749: [release-4.17] Fix dnsnameresolver address set #2796
Full changelog

prometheus

OCPBUGS-61766: chore: compute highestTimestamp at queryManager level #268
Full changelog

prometheus-alertmanager

OCPBUGS-75885: Include go-verify-deps expected files in gitignore #115
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-58408: Fix: One Alertmanager Config failing blocks all others. (#6585) #336
Full changelog

service-ca-operator

OCPBUGS-68220: Update logrus to 1.9.3 to address CVE-2025-65637 #316
Fix for OCPBUGS-68221: CVE-2025-65637 bump github.com/sirupsen/logrus to v1.9.3 #309
Full changelog

tests

OCPBUGS-65492: Add imagestream update dryrun test #30479
OCPBUGS-64927: update telemtery limit for 4.17 e2e case #30472
OCPBUGS-64641: Migrate OCP-32383 to upstream #30455
OCPBUGS-63392: Backport pr 29834 to release-4.18 #30408
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-68224: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.8.3 #157
Full changelog

vsphere-problem-detector

OCPBUGS-61755: Check for number of FailureDomain-s in GetVCenter() #190
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github