4.17.0-0.ci-2026-07-08-103024

Manual Override Applied

This release was manually Accepted.

Reason: Manually accepting per DPTP

Download the installer for your operating system or run

oc adm release extract --tools quay-proxy.ci.openshift.org/openshift/ci:rc_payload__4.17.0-0.ci-2026-07-08-103024

Qualifiers (status api): None

Tests:

Blocking jobs
- aws-ovn-upgrade-4.17-minor Failed (1 retry) periodic-ci-openshift-release-main-ci-4.17-upgrade-from-stable-4.16-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Failed
- azure-ovn-upgrade-4.17-minor Failed (1 retry) periodic-ci-openshift-release-main-ci-4.17-upgrade-from-stable-4.16-e2e-azure-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Failed
- gcp-ovn-upgrade-4.17-micro Succeeded periodic-ci-openshift-release-main-ci-4.17-e2e-gcp-ovn-upgrade
- hypershift-e2e Failed (1 retry) periodic-ci-openshift-hypershift-release-4.17-periodics-e2e-aws-ovn
  - Attempt 1 Failed
  - Attempt 2 Failed

Upgrades from:

4.17.0-0.ci-2026-06-15-103712 - F F S
4.16.0-0.ci-2026-06-12-105508 (changes) - F F F F

Loading changelog, this may take a while ...

Changes from 4.17.0-0.ci-2026-06-15-103712

Created: 2026-07-08 10:31:05 +0000 UTC

Image Digest: sha256:97b1801336486c1f6877a95bf1d9654953d1d98644218270dd11b61cd0a93c50

Components

Kubectl 1.30.5
Kubernetes 1.30.14
Kubernetes Tests 1.30.14
Red Hat Enterprise Linux CoreOS upgraded from 417.94.202606110951-0 to 417.94.202607020955-0 (diff)

Rebuilt images without code change

network-interface-bond-cni git cc7b628e sha256:5254f2345112f4efe9cea98e8d66f1f57f10c4178ebd86fdbe725d9d6734be2b
rhel-coreos sha256:ccfec0f95dd417982dbaff7c2513f64bc9a84e39fe194f1e57236c0ed4330cd6
rhel-coreos-extensions sha256:cabf30c713435f920477fb081f577ee2b9ed99b8e8b8ef8edbd2dc7585366c1a

aws-ebs-csi-driver

OCPBUGS-82699: Address CVE-2026-35469 #328
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-80035, OCPBUGS-80036, OCPBUGS-80174: Bump google.golang.org/grpc to v1.79.3 #181
Full changelog

azure-file-csi-driver

OCPBUGS-80041: Bump google.golang.org/grpc to v1.79.3 #130
Full changelog

cluster-network-operator

OCPBUGS-85244: whereabouts-token-watcher DaemonSet improvements #3016
Full changelog

cluster-node-tuning-operator

OCPBUGS-82706: Bump github.com/moby/spdystream from v0.2.0 to v0.5.1 #1548
Full changelog

console

OCPBUGS-77124: [release-4.17] CVE-2026-26996 Bump minimatch library #16345
OCPBUGS-79443: Bump immutable #16326
Full changelog

csi-external-provisioner

OCPBUGS-82709: Address CVE-2026-35469 #142
Full changelog

gcp-machine-controllers

OCPBUGS-80118: Bump google.golang.org/grpc to v1.79.3 #166
Full changelog

hypershift

OCPBUGS-89357: build(operator): drop hypershift-no-cgo from operator container images #8761
OCPBUGS-80103: fix https://github.com/advisories/GHSA-p77j-4mvh-x3m3 by replacing grpc-go #8516
Full changelog

ironic-agent

OCPBUGS-95067: Replace individual package removal with a single rpm -e loop #287
OCPBUGS-95067: Replace dnf remove with rpm -e to prevent dependency removal #275
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-95083: OWNERS: Update component to Cloud Compute / KubeVirt Provider #79
Full changelog

machine-os-images

OCPBUGS-87877: Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs #101
Full changelog

monitoring-plugin

Fix for OCPBUGS-90525 OCPBUGS-90526: CVE-2026-12151 CVE-2026-9697 #1008
Full changelog

oauth-server

OCPBUGS-81795: Bump github.com/go-jose/go-jose/v3 from v3.0.3 to v3.0.5 #239
Full changelog

openshift-apiserver

OCPBUGS-82720: Address CVE-2026-35469 #658
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-80133: Bump google.golang.org/grpc to v1.79.3 #194
Full changelog

thanos

OCPBUGS-80161: Bump google.golang.org/grpc to v1.79.3 #185
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github