4.16.0-rc.6

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.16.0-rc.6-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.16-e2e-aws-ovn-upgrade
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.16.0-ec.4, 4.16.0-rc.0, 4.16.0-rc.1

4.16.0-rc.5 (changes) - F F S S S S S S F S S S S S
4.16.0-rc.4 (changes) - Failed
4.16.0-rc.3 (changes) - Failed
4.16.0-rc.2 - Failed
4.16.0-ec.6 (changes) - Failed
4.16.0-ec.5 (changes) - Failed
4.16.0-ec.3 (changes) - Failed
4.16.0-ec.2 (changes) - Failed
4.16.0-ec.1 (changes) - Success
4.15.18 (changes) - Success Success
4.15.0-0.nightly-2024-06-18-052116 (changes) - S F S S S S S

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.16.0-rc.2

Created: 2024-06-18 17:43:01 +0000 UTC

Image Digest: sha256:f3bafdd925d51899e6715edc47869c94990954b4d330804c4114a7992af54d1d

Components

Kubectl 1.29.1
Kubernetes upgraded from 1.29.4 to 1.29.5
Kubernetes Tests 1.29.0
Red Hat Enterprise Linux CoreOS upgraded from 416.94.202405132047-0 to 416.94.202406172220-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
ClusterAPIInstallAWS (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ClusterAPIInstallNutanix (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ClusterAPIInstallOpenStack (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ClusterAPIInstallVSphere (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
HardwareSpeed (1 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
MetricsServer (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
NetworkDiagnosticsConfig (6 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
OpenShiftPodSecurityAdmission (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Enabled	Enabled
VSphereDriverConfiguration (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ClusterAPIInstallGCP (0 tests)	Disabled	Disabled	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)
GatewayAPI (0 tests)	Disabled	Disabled	Enabled	Enabled	Disabled (Changed)	Disabled (Changed)

New images

containernetworking-plugins-microshift git f5039976 sha256:f1776c5c20353bd9ed42b8c118271d4652cd8e2e84b80aeb1896a763ea24c2fe
multus-cni-microshift git c4aa21b9 sha256:454fcc7d474271d13b864fda2e7ae7b7b5235799f1423ba79cb3f2b52c05ba57

Rebuilt images without code change

agent-installer-utils git 6e6bb40d sha256:ea2c9addb1026f05f373585f0ad86e7d3ede8be64d70726c5624d279cf124f55
alibaba-cloud-controller-manager git 97e8335e sha256:c9ede35d40f2292cdefc202374658b927d67386baa146e8db050c8fd6cb0d40a
apiserver-network-proxy git 9a6028c4 sha256:bfe6348d1537d0618771812f2a3f7e1d6c2a543948a99a80b373186044d77794
aws-cluster-api-controllers git aaaf00b1 sha256:1dbc1bdd8c4207409dc205e9263dd2997dec72d76e753857583168bcd40c8b98
aws-ebs-csi-driver git 1d29a74a sha256:3c46d147deb9f93d703339c07598f959792b50cadbfa2d22f1c744f6dae19f92
aws-kms-encryption-provider git da90fb7c sha256:5668f00f71bfceb7bb7966d7a9f432f2193436bbfa1ebcefaadfe2f48a2be55b
aws-machine-controllers git 61d60f6c sha256:c9a16f74c05aac14c7e7375420e4f75bba23ce5c9a17ca4b726ce173399d350b
aws-pod-identity-webhook git 746491a6 sha256:bdf22eb19a391efde539f7d4727a840014e6386edbe90b78b5ead5d216506f4a
azure-cloud-controller-manager git 0e955329 sha256:f84568509ed17d7b43d484534e6438f8c6751494c39947b7b40cdc97d42ea8e3
azure-cloud-node-manager git 0e955329 sha256:b7818892fdf53da13ee04bca2c47aed08d9acd107f51ba93b3441ce69048bd7f
azure-cluster-api-controllers git face7da9 sha256:a348e68c48c9a71eb952f7fe1a25d975682b2a686dd48aebd6473a1f06ba892a
azure-disk-csi-driver git 6b55f6fb sha256:532ced1ff6864578ef88be69158c4e8a93bb0e32c5b918dfe7450f24a4b488df
azure-file-csi-driver git 5ceb190a sha256:ecaf5fc70e391785946f69846ca4eabaaf553de57bdd6f2c1133f518e46ff3c9
azure-machine-controllers git d6be293a sha256:8322a01cc8a639ffa7098f2e5f3abef8dfcd9eae7910abbdbe7b090384495bb4
azure-workload-identity-webhook git 4aca092a sha256:23d9f2fbf4f5f35988b945ba599f0f84b1fc4d2f1daf17725f6fca2a1c90b4cf
baremetal-machine-controllers git 11ba601f sha256:79148057b74d9815e0dcb01b8693c870d24bd2e0cd8782c63ed94c8d66642e68
cluster-authentication-operator git b415439e sha256:1252c975e7e2b2f2f1e4a547ca59f1b5af16b1d6dc5b2aa2efdd99f9edc47a75
cluster-autoscaler-operator git 40cadf8a sha256:522e6263630cd9cc5f983c43822eacd62c109e96f500bfe098c983eaf2dc8a1c
cluster-bootstrap git 27bfb59f sha256:f929ddc3033f4e54e8505f841c4df75ea428d765c74f2696a927223aaf4283a8
cluster-capi-controllers git 5830a10a sha256:8ec9e14294232e2d17ead94f068b8f8eca6d68861eac264748678ee907b23bf0
cluster-capi-operator git a24f1aeb sha256:c584d30816db6d52e7306cd6f9856630e085624ebb1e86adf54d2a7a0dd5b09a
cluster-kube-cluster-api-operator git 95ceaa9e sha256:c1def799d510853ff49afe92fbc5d10bdcc48e8e57b3cc886ff6067a515cf34b
cluster-kube-scheduler-operator git 630f63bc sha256:fcfcd442b37827a1acbd2953c1e4f8103f31fec151e6666b9c5bb0045feada8f
cluster-kube-storage-version-migrator-operator git bf6afbb8 sha256:730f5b20164dd87b074b356636cdfa4848f1159b412ccf7e09ab0c4554232730
cluster-olm-operator git 27bf70dd sha256:6675a104b6df16047cc80447196bd1f81a475dd818dc331c549db544d8f02ab6
cluster-openshift-apiserver-operator git d26f3002 sha256:3e2c5a70fe7e9b625f5ef26f458c54d20eb41da9ac60e96442f3a33dacfae5ce
cluster-policy-controller git eaea543f sha256:d1ce9342b0ceac619a262bd0894094be1e318f913e06ed5392b9e45dfc973791
cluster-samples-operator git d4dd8439 sha256:bd9205b185124b3b67669bb3166734f9e22831957c457aa1083f4f2bc4750312
cluster-storage-operator git 7cb82678 sha256:b571317722f85986735ed212b3b721edf88e1f584ec04707090ac436d4e2a1c7
cluster-update-keys git c0641e08 sha256:10aed32867a3e2138d6006426a84160c5bb428b86b686a0770d3c536714b0855
configmap-reloader git dc91ddc4 sha256:5dda85af9197d3905c67a31effbae5047eeca678c8065229bc45088426a338e8
container-networking-plugins git f5039976 sha256:1b752ed92e0354fc8b4316fc7fc482d136a19212ae4a886515db81e8f0b37648
csi-driver-manila git 5340eaab sha256:334920a064a5dee9cce98c570674c8ac03e47b3acdb9e4040dae6736c329c36b
csi-driver-manila-operator git 6de0dc79 sha256:44f59ae794834bf05f9fc5ecfc72900557e1865688a5922346cb6c0c9191fa51
csi-driver-nfs git 406cec72 sha256:0c26bac463c2c1dd60c32d4b012747a50bb9d11a6cee0aa3f6b12d0ceab6e2b9
csi-driver-shared-resource-operator git 1e1194bc sha256:2c9f84bf28a0af4f3ba5019575058316abaeda1dd5c1c85e48745067b8b5d961
csi-external-attacher git 7da80aab sha256:7e1b0878754a15723c3c7d41bf16a2ab75c2a5409cd74a324298ae5f8ea03969
csi-external-provisioner git 9e8af011 sha256:b6b007b3c711b05bcc4eb4423771119a06aa4b99807c3f931419c9e7d24506b3
csi-external-resizer git bdf5bfb4 sha256:e80b8f5c299001d63af519280501352c163e490b60ccbf25ad6e7b14c2699a89
csi-external-snapshotter git 5315d37a sha256:aafb1ff11acc4a86441ecf1ec90dce94add1ab17b4d8b75d3daff942488683ed
csi-livenessprobe git f5e3ff55 sha256:a8f10de71f86a86f33a184ff494a8d5b8d9b0de38314390c048e13c6d37767e8
csi-node-driver-registrar git 8930c368 sha256:2ea9fdddc0443ded9cdaf50b8f74747b100a710b1b602b38d4205fd2497c0f21
csi-snapshot-controller git 5315d37a sha256:2860f4cd96d390433759df75b68cacd2449f4a690f06e12efa42a0adc6f3f8f6
csi-snapshot-validation-webhook git 5315d37a sha256:6241d7b00a85a01f1ea042e4c1145eaad9381ed2d20c3f6f908f13cbfa3614ea
docker-builder git ca2b36ac sha256:f69708d7711c9fdc19d1b60591f04a3061fe1f796853e2daea9edea688b2e086
egress-router-cni git 7534ab90 sha256:476d419f3e57548b58f62712e3994b6e6d4a6ca45c5a462f71b7b8e5f137a208
etcd git bc2fec27 sha256:5375febaac0dd91b58ec329a5668a28516737ace6ba3f474888f2d43328c9db3
gcp-cloud-controller-manager git 26b43dfc sha256:918dd6674f3a3b27a89f854d2804c5b020fd1c4d3d06cd855019881985e23ba7
gcp-cluster-api-controllers git 02432df8 sha256:8730972c6959267665845104077f93329e4a1205e75c007a7605832a38e9811e
gcp-machine-controllers git e72657c0 sha256:ae57a1ff2e03da6c76e8c1479c9d7bcd52a29a7ce1bf63a085ed5e1ce5a5844f
gcp-pd-csi-driver git 5ed71c64 sha256:412ce22f48c834522a76ed6885573089bc577d57aaa91cf816b46d4db5815bdf
gcp-pd-csi-driver-operator git 799327f7 sha256:53e329ebf6028eb4e9fa649b11837c26de29d7b54de71cdff7eef67dacbc8407
ibm-cloud-controller-manager git f961f16d sha256:e7d51eddc9956a1bc70272958315c0f15d0e7cd5baa4f1b5b6dbaefd0cc7ef63
ibm-vpc-block-csi-driver git 32b4c005 sha256:26723933f3e379b2ab33043d5acc1970a4cb4589eb06cebf5757fe7881351a78
ibmcloud-cluster-api-controllers git 60b7ca98 sha256:3ff82c283f967aab2e0ac13e907423879f7ee8488c7a6836ad698e5b298502fe
ibmcloud-machine-controllers git 1a3a3030 sha256:a064f3f3370f777756981b8b3e51ee32cbc4c26a0cd44548f5afaffddb9e1e0f
ironic-agent git 63681a46 sha256:70b6121b4a8323b124b8570ecb8f9d74940f5e6a20939181792e486ccad0b930
ironic-machine-os-downloader git 93b8b5fa sha256:277940ca6a06a87c98a39aeb1508a06dc8e04e5d0b73594ec704b2597775d65f
ironic-static-ip-manager git e78e4c3e sha256:41966d85320e3961e589b180125b2f54e8323446b8a1039055265fc9e07184f0
k8s-prometheus-adapter git e4f859be sha256:9dfd59d8c7eda6a08fbdfbed0df1a0ac741fb07c2a9380751b5a15f713e300bc
kube-metrics-server git 7938f253 sha256:8c1f690970ce6e1457238c76bcee59f83c50c02a9b07b2ee9baca4fcee819fb0
kube-proxy git 5b658c43 sha256:ce3a9355a4497b51899867170943d34bbc2d2b7996d9a002c103797bd828d71b
kube-rbac-proxy git 8ea2c994 sha256:69f0ea9c4dd64fcb95e7d523331e9e46cf36132427af07bd759cbd1837eaf903
kube-state-metrics git 9b67b8d1 sha256:26765b7a91c1c755b0761315e7ef9243856073900095aff9cc95f7cf2a7161ee
kube-storage-version-migrator git 969a60e9 sha256:30f6d30b6bd801c455b91dc3c00333ffa9eec698082510d7abd3ad266d0de5a1
kubevirt-cloud-controller-manager git 3db76104 sha256:fe445bb9d26629f7239247c0805261f409ee52ed1289fb5eb74e69270eb6ebfc
libvirt-machine-controllers git a336f0b5 sha256:3de4d979b4663c60e8d80857fd53f774d9915180c9f4400cc07719175196d264
machine-api-operator git 49a82ff0 sha256:6a5a3a50ec641063c0e1f3fc43240ceca65b0ac8e04564a4f69a62288e1930b2
machine-image-customization-controller git 39480963 sha256:0154a167337c7eaf3f5c9533101ba849ce5fd3b0d936e2fa4bd081460fbfd952
machine-os-images git 3cc97098 sha256:0af828e31b52e9d20ba73d19017ac7e982a6777bc65ddb325271f7ce344d7e85
monitoring-plugin git f1fc4315 sha256:913d1090848aa4e87f11a1a3c5a287f17a0b06b64dd05694d1ee997270e7d365
multus-admission-controller git 2591682f sha256:b589a20426aa14440a5e226ccd7f08c3efb23f45a2d687d71c9b399967adfa45
multus-networkpolicy git c9a6ba24 sha256:f0791454224e2ec76fd43916220bd5ae55bf18f37f0cd571cb05c76e1d791453
multus-route-override-cni git 6a04feea sha256:f410c53f8634b7827203f15862c05b6872e3d2e7ec59799b27a6b414943469d8
must-gather git 7d5f7894 sha256:e0af20153105dc79dd48e3ae9594f0cbe674a4cf5abf0eec08a40675ee17eb1c
network-interface-bond-cni git bb911451 sha256:329299206a95c4bc22e9175de3c3dbedc8e44048aaa7d07e83eafb3e14a3a30f
network-metrics-daemon git 710bd872 sha256:cc389b05ef555b742646390ef180ad25a8f5111c68fec6df1cfa1c6c492e98da
network-tools git 39eca100 sha256:6ad735336cbf52ec49b20e02e37119831ad7d4728d7798b47f8f108fba9442e3
nutanix-cloud-controller-manager git c9bbc44c sha256:5974ca9365fc6258c2bbeb23172eae24cefbb28a1d55493022972b5ed5db3379
oauth-apiserver git fa1f097c sha256:26660173efd872a01c061efc0bd4a2b08beb4e5d63e3d7636ec35ddcf5d3c1fa
oauth-proxy git 30f80124 sha256:c9baff203ca8c8f3726f2191b9378dbb1523ce1dd8bf2f4e9607d276b39370ba
olm-catalogd git 79975a51 sha256:1ba680bd31bf433d51a012b956559faded593de47825c02da398c7f28f3dcfb9
olm-rukpak git 282cc84c sha256:dc6240a7f82faf42046a47a4d7d9c89294fca1c0dc734fd6bfa41dd67112e7ec
openshift-apiserver git 6b518412 sha256:c48d0ab22815dfdb3e171ef3df637ba22947bd5d2ec5154fb7dfc4041c600f78
openshift-state-metrics git 59b8a0ff sha256:0212f125ddc0db88b64ed8bb60de7c93f99d08ba8f95efab58f9d2b000ed4b8a
openstack-cinder-csi-driver git 5340eaab sha256:5996d1ad20317f36c857cb499e1a8c87a2f82545df14e98d0fc655358b13836c
openstack-cloud-controller-manager git 5340eaab sha256:83490e1054615f801a599f2a2167b3400abd58dba607b9efbeb4f09c0eed7442
openstack-cluster-api-controllers git be72b754 sha256:6e33b672f1e77e9287c986355f81dc278736974239f5624d5cdb252db7ec9d34
operator-marketplace git 7db179fb sha256:7c3c2223e85e89c657ef6687dc57f1075aa0d16e5f1cccebc9f6a48911233b46
ovirt-csi-driver git 1db726a9 sha256:e7c4135554bb35e39c20ce1f66380a22b57db849c9b4aefd3ff50177089b43a0
ovirt-csi-driver-operator git ac852f3e sha256:31c03b6d58b3aea8b4fda1969a1623e50506a72838a58a152a0cbc69222ab62f
ovirt-machine-controllers git abb91c84 sha256:3ed693f3fc02809edad1207191b3cf92d7df2c376eef99c3468c6b5a13b04d24
powervs-block-csi-driver git 730a473c sha256:6a5d2c0a3f9057bfdcf30f994c346962aff065c5d583cd148015ef1b7215afd8
powervs-block-csi-driver-operator git 9c5dd8d1 sha256:e3ce364076ad378ab61e2505b2cf82a5cc1ea0ba6af1a954e6d7700308e765a1
powervs-cloud-controller-manager git 87386cd4 sha256:51535fa1087dbc8ecb44b29e998df888b6d7bc8fa0c0c6fa2a768dfd4c1bea2c
powervs-machine-controllers git 6b57e6c1 sha256:b2d4cce31e3f185d1f61e68a952dd66b2e4c5b8022a41a25046296cc99027361
prom-label-proxy git 5e14722e sha256:7b6f207289ca16648d5ac95d1ae3f8bdbe91b4f5943a16fd97317798a9d7ee90
prometheus-config-reloader git 8bf4750a sha256:0f03a4ee4a7772aed369a72badb20e66e6157fd6bff5b92b527f0c0083e41907
prometheus-node-exporter git 29ba26d1 sha256:4b894460cc73907bdaf520b88864d95816482d19fa090757458533da31ae35d1
prometheus-operator git 8bf4750a sha256:9b8349d3e622370f71c09088c37938b0b41088c5fa7259ee405cc463a83f0253
prometheus-operator-admission-webhook git 8bf4750a sha256:861a154582c8f46c99f54d5308b933dc6d5b57723ec69006545e4812650c8779
rhel-coreos sha256:eaa7835f2ec7d2513a76e30a41c21ce62ec11313fab2f8f3f46dd4999957a883
rhel-coreos-extensions sha256:187be439d39bbf12201dc98a198b399d0ef819ae472b27808153824d16b6f09c
route-controller-manager git 3112b458 sha256:1fd628f40d321354832b0f409d2bf9b89910de27bc6263a4fb5a55c25e160a99
sdn git 5b658c43 sha256:9ec002699d6fa111b93b08bda974586ae4018f4a52d1cbfd0995e6dc9c732151
service-ca-operator git 538c7b98 sha256:24216f0c25a6e1d33af5f8798e7066a97c6c468ad09b8fad7342ee280db29d9d
telemeter git 6ab43e48 sha256:378c3dae496ba03b5d05c4550196cf4b576289eb751f9a834c513bbae2728900
thanos git 85eee25c sha256:4639d780a90ec06d5dc83b5f6ef78aa3e6c9c0150b19a5d7889b6af0bd5b600a
vsphere-cluster-api-controllers git be22f10a sha256:ffab095104687fce598cac83c9429f2ba419e7c1602d681d3b0cdf0e7b31f96d
vsphere-csi-driver git 3cd689f3 sha256:02ad969d0411567fb8cc33678f74a1104923585095e8bfc40aec91bf064a7a0d
vsphere-csi-driver-operator git 483de9c5 sha256:77630503129ddb19db376838e5b93d5a96c975e72b618dddcfdb525292aa2784
vsphere-csi-driver-syncer git 3cd689f3 sha256:857904715b5548c78e626b90395bf6b41242fd8f8dd99b49ca3d657339da665a
vsphere-problem-detector git d674e6d8 sha256:203f934f8714eec40ee529373e41d4eff754091413db76098f8826a0177a39e6

agent-installer-api-server

OCPBUGS-31727: Invalid Pull-Secret when using password which contains a colon character (#6362) #6362
MGMT-17850: Bump k8s.io modules to v0.29 (#6345) (#6372) #6345
OCPBUGS-34278: Don’t use the statically linked installer if FIPS is enabled (#6357) #6357
Use openshift-install binary for releases >= 4.16 (#6304) #6304
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

MGMT-16843: Use hostnamectl to replace illegal hostname (#850) #850
Full changelog

agent-installer-node-agent

OCPBUGS-33404: Make removable disks eligible (#717) #717
Full changelog

alibaba-machine-controllers

AUTH-482: set required-scc for openshift workloads #50
Full changelog

aws-cloud-controller-manager

OCPBUGS-31968: update for CVE-2023-45288 [release-4.16] #82
OCPBUGS-34046: Ensure that addresses are added in network device index order #88
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator

OCPBUGS-34392: Adjust port for registrar sidecar in aws-ebs csi driver container #230
Full changelog

azure-kms-encryption-provider

OCPBUGS-33940: Use exec form entrypoint #6
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-35706: capi/aws: allow 6443 for private cluster NLB #8622
OCPBUGS-35570: capi/aws: retry SSH ingress rule removal #8618
OCPBUGS-35515: SPLAT-1437: CAPI/AWS/BYOIP: supporting Public IPv4 Pool #8608
OCPBUGS-35493: Validate OnHostMaintenance and ConfidentialCompute #8606
OCPBUGS-35435: vsphere - allow network selection on cluster name #8595
OCPBUGS-35527: [release-4.16] bump github.com/container/images for CVE fix #8611
OCPBUGS-35471: capi/aws: disable CAPA’s TagUnmanagedNetworkResources feature gate #8604
OCPBUGS-35023: azure: bump profile used for network #8537
OCPBUGS-35448: [release-4.16] capi/aws: bump provider for fixes #8598
OCPBUGS-35460: save etcd data to its own directory #8600
OCPBUGS-35384: Add ELB V2 permission to set security groups on API server load balancer #8589
OCPBUGS-35344: baremetal: check if HardwareDetails is nil #8579
OCPBUGS-35392: aws: delete ignition bucket on bootstrap destroy #8590
OCPBUGS-35383: capi: use polling instead of exponential backoff #8588
OCPBUGS-35372: openstack: Attach a bootstrap FIP to the cluster network port #8585
OCPBUGS-35323: Add S3 permission to allow attaching S3 bucket policy #8576
OCPBUGS-35379: capi/aws: do not set proxy for masters #8586
OCPBUGS-35253: AWS remove extra tags from awsmachines for security groups and subnets #8569
OCPBUGS-35235: baremetal: Don’t always enable provisioning-interface.service #8563
OCPBUGS-35302: Prevent multiple invocations on CAPI #8571
OCPBUGS-35101: [release-4.16] Add 4 new regions for PowerVS #8533
OCPBUGS-35312: capi/aws: rename preserveBootstrapIgnition #8574
OCPBUGS-35192: write etcd and kube-apiserver logs #8558
OCPBUGS-34760: capi/aws: fix setting custom AMI #8520
OCPBUGS-35243: capi: do not override KUBECONFIG #8566
OCPBUGS-35224: PowerVS: Destroy DHCP in ERROR state #8561
OCPBUGS-35151: wait for ip addresses to be present on machines #8554
OCPBUGS-34499: unique AWS HostedZone Caller Ref #8476
OCPBUGS-35103: OCPBUGS-4466: Prevent cluster installation with mismatched worker assets and worker replicas #8553
OCPBUGS-35098: capi/aws: add BootstrapDestroyer guard #8552
OCPBUGS-35088: PowerVS: fix AddIPToLoadBalancerPool #8551
OCPBUGS-35030: Increase timeout for bootstrap complete #8539
OCPBUGS-35049: capi/aws: don’t use S3 stub for masters #8548
OCPBUGS-35044: aws: don’t always require s3:Delete* permissions #8547
OCPBUGS-34620: Use infrastructure API to detect cluster topology #8499
OCPBUGS-34822: [Nutanix] installer intermittent failed at uploading the bootstrap image to PC when CAPI enabled #8524
OCPBUGS-34976: [release-4.16] aws: terraform: add spot instance support for masters #8526
OCPBUGS-34707: attach tag to folder,fix folder destroy #8509
OCPBUGS-33794: Make Ingress capability required for standalone OpenShift #8528
OCPBUGS-34628: tfvars: change asset’s name #8501
OCPBUGS-34388: Add –dir /tmp to node-joiner-monitor.sh #8461
OCPBUGS-34728: [release-4.16] MULTIARCH-4076: PowerVS: Default region bug fix #8506
OCPBUGS-34693: update RHCOS 4.16 bootimage metadata to 416.94.202405291527-0 #8517
OCPBUGS-34419: PowerVS: update capi ibmcloud to release 0 8 0 #8465
OCPBUGS-34623, OCPBUGS-34625: capv - missing cores/socket,disk type #8500
OCPBUGS-34427: aws/cluster: restrict SSH on private clusters #8467
OCPBUGS-34528: Nutanix IPI install with capi failed to set bootType #8481
OCPBUGS-31845: Detect Release Image Arch in a Disconnected Env #8490
OCPBUGS-33962: [release-4.16] Remove vSphere Terraform #8431
OCPBUGS-34506: [release-4.16] bump golang-protobuf for CVE fix #8478
OCPBUGS-34417: capi/aws: don’t modify BYO role’s policy #8463
OCPBUGS-34220: Reintroduce CAPI-installer to 4.16 #8451
OCPBUGS-33976: Enable leader election for baremetal operator #8435
Trt-1674: 4.16 capi revert 1 #8434
CORS-2840: [release-4.16] GA CAPI Installer #8428
OCPBUGS-33668: Changed folder name to match cluster name instead of infra-id. #8414
AGENT-903: monitor-add-nodes should only show CSRs matching node #8376
CORS-3480: aws/sdk: remove sdk provisioner #8358
CORS-3460: Always collect clusterapi manifests #8411
OCPBUGS-33709: GCP mixup when using the ignition shim vs the signed url #8342
CORS-3297: Add GCP firewall rule to access bootstrap node via ssh #8374
CORS-2905: capi-aws delete bootstrap ssh rule #8359
OCPBUGS-33370: baremetal: always write masters file #8365
OCPBUGS-33531: update RHCOS 4.16 bootimage metadata to 416.94.202405132047-0 #8409
no-jira: Vendor api changes for tech preview with capg #8407
CORS-3269: Azure ignite control plane machines #8126
OCPBUGS-31017: aws: add missing permission for IPv4 pools #8408
OCPBUGS-33649: add quota support to ca-west-1 #8406
CORS-3460: capi: collect generated assets in hidden dir and save into log bundle #8387
OCPBUGS-33006: baremetal: aarch64-related fixes #8385
OCPBUGS-33610: fix API detection, azure bootstrap disk size, and use get to verify endpoint #8371
no-jira: Removing unused terraform variables #8360
OCPBUGS-33502: capi/aws: fix setting IMDSv2 value #8399
CORS-3516: hack: do not execute cross-compiled binaries #8397
OCPBUGS-33578: capi/aws: fix HostedZone ID lookup #8396
OCPBUGS-30860: improve bootstrap logic to wait for at least 2 apiserver instances #8394
Full changelog

baremetal-operator

OCPBUGS-33254: Merge upstream #354
Full changelog

baremetal-runtimecfg

OCPBUGS-29067: Fix generation of DNSUpstreams on cloud platforms #308
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-34886: Hardcode resource groups/kinds for now #1796
OCPBUGS-33917: add alert data to upgrade health in oc adm upgrade status #1794
OCPBUGS-33975: pkg/cli/admin/upgrade/rollback: Gate on OC_ENABLE_CMD_UPGRADE_ROLLBACK #1776
OCPBUGS-34406: Simplify output when not updating #1781
OCPBUGS-33918: adm update status: Show information about the upgrade target version #1772
OCPBUGS-33916: Add s390x based oc into extraction target #1770
Full changelog

cloud-credential-operator

OCPBUGS-32948: Update documentation to restart pods when enabling workload identity #701
Full changelog

cloud-network-config-controller

OCPBUGS-33617: Avoid panic when looking up attachedOutboundRule.ID in azure #144
Full changelog

cluster-autoscaler

OCPBUGS-33932: fix: scale up broken for providers not implementing NodeGroup.GetOptions() #303
Full changelog

cluster-baremetal-operator

OCPBUGS-35503: Add capability to metal3-ramdisk-logs container #426
OCPBUGS-34041: Run metal3 containers as specific users and groups #418
OCPBUGS-33493: Enable leader election for baremetal-operator #416
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-34826: Nutanix CCM pods Cipher Suites vulnerability issue #350
Full changelog

cluster-config-api

OCPBUGS-26466: Disable PSA in non-previews 4.16 #1912
STOR-1839: promote VSphereDriverConfiguration feature to Accessible-by-default #1904
temporarily break the featuregate check to show we can get results #1911
Feature gates for platforms, architecture, and installs #1910
OCPBUGS-34398: Streamline bootstrap crds #1905
ETCD-602: Move etcd hardware speed feature to GA #1901
Move CAPI install platforms to default feature set #1892
OCPBUGS-33727: Fix Gateway API Feature Gate #1894
NO-JIRA: Set listType for .status.serviceNetwork and .status.clusterNetwork in networks.config #1890
SDN-4600: Add NetworkDiagnosticsConfig to the default featureset #1886
Revert “Revert “Merge pull request #1851 from slashpai/metrics-server”” #1865
CORS-3488: Add GCP CAPI installer to tech preview feature set. #1889
Full changelog

cluster-config-operator

SPLAT-1630: Bump API version to get new VSphereMultiVCenters featuregate. #418
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-34970: Add unreadyNodeGracePeriod for allowing brief node hiccups #298
OCPBUGS-35227: Improved debugging of API listing errors #300
OCPBUGS-32947: Modified webhook to reject changes to vsphere fields coming from failure domains. #291
Full changelog

cluster-csi-snapshot-controller-operator

AUTH-482: set required-scc for openshift workloads #196
Full changelog

cluster-dns-operator

CFE-964: Add DNSNameResolver controller #394
Full changelog

cluster-etcd-operator

ETCD-621: Update api vendor libraries to get GA’ed tuning profiles #1265
Full changelog

cluster-image-registry-operator

OCPBUGS-34779: add SAR capability to image-registry #1054
OCPBUGS-34165: azure-path-fix: get client secret from k8s secret #1041
OCPBUGS-34166: pkg/storage/s3: use force path style in favour of virtual hosted style config #1042
OCPBUGS-34069: Bump openshift api, client-go & library-go #1039
Full changelog

cluster-ingress-operator

OCPBUGS-34835: internalServiceChanged: Fix target port logic #1072
OCPBUGS-34837: Bump openshift/library-go to resolve NewPrometheusClient E2E failures #1074
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-25104: revert dev cert rotation 4.16 #1695
OCPBUGS-34408: Create one-shot migrations for the flowcontrol group. #1690
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-33933: Remove cloud-provider, cloud-config, and cloud-volume-plugin flags #808
Full changelog

cluster-machine-approver

OCPBUGS-34161: check for machine crd before listing machines #233
Full changelog

cluster-monitoring-operator

OCPBUGS-34806: send cnv_abnormal metric via telemetry #2364
MON-3861: Bump go tools 1.21 #2348
MON-3856: Bump openshift/prometheus to v2.52.0 #2342
Full changelog

cluster-network-operator

OCPBUGS-34736: Limit iptables-alerter’s cpu #2407
OCPBUGS-34736: Handle pod exiting race conditions in iptables-alerter #2394
MON-3795, OCPBUGS-35061: Add ANP metric rule expressions for telemetry exposure #2398
OCPBUGS-34612, OCPBUGS-34660, OCPBUGS-34663: Live migration backports #2392
OCPBUGS-34964: Fix DNSResolver feature gate enablement #2402
OCPBUGS-34770: Ensure that the node-identity webhook address contains colons for IPv6 #2395
OCPBUGS-34214: Add conditions for ignored-namespaces #2378
OCPBUGS-34013: Add custom masquerade subnet against right key at ovnkube-config CM #2374
CFE-888: Enable DNSNameResolver feature-gate #2131
OCPBUGS-32979: Update network operator status for IPsec #2360
USHIFT-2912: Add ref to MicroShift’s Multus and CNI Plugins #2365
Full changelog

cluster-node-tuning-operator

OCPBUGS-33682: right-hand-side profile_dirs take precedence (#1080) #1080
NO-JIRA: E2E: Add test for checking cpuset.cpus.exclusive (#1046) #1046
CNF-11817: e2e: control and data planes clients (#1004) #1004
Unify OKD and OCP Dockerfiles (#1058) #1058
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-34384: [release-4.16] Disable Rolebindings for Capabilities #350
Full changelog

cluster-version-operator

OCPBUGS-35249: Revert: Add support for Custom Certificate Authorities for custom signature stores” #1053
OCPBUGS-24700: Add support for Custom Certificate Authorities for custom signature stores #1030
Full changelog

console

OCPBUGS-35395: Keep useUserSettings hook in the internal api #13970
OCPBUGS-35152: restore missing CloseButton styles #13947
OCPBUGS-35318, OCPBUGS-35319, OCPBUGS-35320: disabling add-flow A-04-TC01 test and knative tests due to flakes #13962
(chore) Update tectonic builder image to use golang-1.21 #13944
OCPBUGS-34139: Improve Pipeline list page performance #13882
OCPBUGS-34002: Fix console crash-loop with OIDC auth config #13874
OCPBUGS-34711: show “Debug container” link for pods with status.phase… #13914
OCPBUGS-33965: i18n - Download and merge French and Spanish languages translations in the OCP Console #13870
OCPBUGS-34393: fix bug where textarea is not resizable #13894
OCPBUGS-33989: Updating the secrets using Form editor displays an unknown warning message #13873
OCPBUGS-34112: Fix Admission webhook warning for Route and BuildConfig creation via import flow #13881
OCPBUGS-34141: UI inconsistency in topology when application grouping is collapsed #13883
OCPBUGS-34142: Import from Git allow users to import an app with Build option Pipeline also when no Pipeline is available #13884
OCPBUGS-34143: Create Serverless form does not create BuildConfig #13885
OCPBUGS-33872: add user-impersonation to QuickStartGettingStartedCard,… #13864
OCPBUGS-32631: TaskRuns should not be fetched for Failed PLR’s #13806
OCPBUGS-33567: Expose useUserSettings hooks in dynamic plugin sdk #13843
ODC-7576: Pipelines plugin test fixes #13841
Full changelog

console-operator

CONSOLE-4047: Console-operator should be internally using listers for fetching data #901
OCPBUGS-33505: Add missing return statement to fix crash in healthcheck controller #900
Full changelog

coredns

OCPBUGS-35296: UPSTREAM: 6692: openshift: Fix OCPBUGS-35296 #123
CFE-963: UPSTREAM: <carry>: openshift: Move ocp_dnsnameresolver before cache in plugin chaining order #116
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

BUILD-877: BUILD-887: Add konflux config for push and pull request #183
BUILD-961: use separate dockerfile for using catalog images #180
Full changelog

docker-registry

OCPBUGS-34779: Use SAR instead of SSAR #403
Full changelog

driver-toolkit

Adding the + char to the RT kernel version. (#156) #156
ART bash parser is failing on [[…]] syntax Replace with sh compatible syntax. (#152) #152
Patch manifests to require stream-coreos instead of rhel-coreos in the OKD/SCOS case (#150) #150
Use a default RHEL_VERSION when the build argument is not specified (#148) #148
Full changelog

haproxy-router

CFE-1020: feature:route external certificate reference #565
Full changelog

hyperkube, pod

OCPBUGS-35291: Backport 125337 #1989
OCPBUGS-27074: UPSTREAM: <carry>: extend termination events #1980
OCPBUGS-34545: UPSTREAM: <carry>: Disable e2e tests that need PersistentVolumeLabel #1985
OCPBUGS-33710: Bump k8s API to 1.29.5 #1972
UPSTREAM: <carry>: OCPBUGS-34102: force static build of linux binaries #1978
OCPBUGS-33574: bump openshift/library-go@e22d25a #1967
Full changelog

hypershift

OCPBUGS-35369: OCPBUGS-35252: vendor: bump openshift/api #4197
NO-JIRA: hack: make the e2e script generic #4198
OCPBUGS-35308: fix router on 4.14 y-stream upgrade #4194
HOSTEDCP-1715: Kubernetes API Server Log Verbosity Annotation cherry pick to 4.16 #4177
HOSTEDCP-1570: remove liveness and readiness probes using metrics endpoint #4116
OCPBUGS-35052: Add missing Tag permissions to cli role #4173
OCPBUGS-34903: Allow access to root-ca configmap in cluster-network-operator role #4155
OCPBUGS-34575: Rename machine-config operator CRD references #4105
OCPBUGS-34759: add AWS STS URL to OIDC provider audiences #4134
HOSTEDCP-1688: Use operator namespace for openshift-config-managed-trusted-ca-bundle #4117
OCPBUGS-34801: remove weak cipher #4139
OCPBUGS-34773: Fix disconnected metadata inspection for nodepool #4137
OCPBUGS-34569, OCPBUGS-34602: Backports that should go in together #4114
OCPBUGS-34542: Reconcile KAS endpoints and endpoint slice #4096
OCPBUGS-34554: Fixed audit-logs sigterm failing to terminate gracefully #4090
OCPBUGS-34390: Add TrustedBundles to OAS container #4087
HOSTEDCP-1561: Move HCP Product CLI to STS #4092
HOSTEDCP-1556: Support Priority based expander for cluster-autoscaler #4068
OCPBUGS-34171: Make active & backup Azure KMS containers use different –metrics-addr #4079
NO-JIRA: Bump library-go dependency #4069
TRT-1672: e2e: proceed with teardown even if dump fails #4052
NO-JIRA: Update RHTAP references #4042
OCPBUGS-33729: Do not ignore single placeholder pods for a specific hosted cluster #4037
HOSTEDCP-1668: remove dns-operator leader-elect flags #4038
OCPBUGS-33595: Cluster sizing controller: do not error on not found HC #4023
HOSTEDCP-1655: Don’t Ignore SubnetID and Network Security Group ID flags when values are passed through #4021
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-33329: [ibm-vpc] Scheduling issue on IBM Cloud Bare Metal nodes #115
Full changelog

insights-operator

OCPBUGS-35086: Collect aggregated Prometheus Alertmanager instances (#948) #948
gather aggregated numbers of Pods and Netnamespaces with SDN annotations (#946) #946
Full changelog

ironic

Bug OCPBUGS-34985: Disable installation of .pyc files through pip #509
OCPBUGS-32304: Fix ironic-inspector permissions for creating /certs/ca directory #500
Full changelog

keepalived-ipfailover

OKD-40: Revert #179 #180
OKD-40: Remove centos-openstack-zed and add in rdo repo to get python-cinderclient dependency #179
Full changelog

kubevirt-csi-driver

CNV-36073: Enable snapshot tests #40
Full changelog

machine-config-operator

OCPBUGS-35291: Default ipv4 NODE_IP to 0.0.0.0 #4409
OCPBUGS-35364: Azure: add Azure specific dnsmasq ordering #4406
OCPBUGS-35299: Panic when we remove an OCB infra MCP and we try to create new ones with different names #4403
OCPBUGS-35042: ensure event handlers are registered after queue is configured #4394
OCPBUGS-34799: set required-scc for openshift workloads #4384
OCPBUGS-33901: machine-os-puller SA refreshes every hour, causing machine config regeneration #4374
OCPBUGS-10498: If multiple hostnames are returned, use the first one for the Node name #4368
Full changelog

multus-cni

OCPBUGS-34910: Thick plugin should not wait for API readiness on CNI DEL #238
OCPBUGS-34924: Update owners file #239
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-34929: [release-4.16] Use IP to identify orphaned allocation to be deleted #286
OCPBUGS-33565: Upstream sync may24 #278
Full changelog

nutanix-machine-controllers

AUTH-482: set required-scc for openshift workloads #73
Full changelog

oauth-server

OCPBUGS-35374: p/o/handlers - fix nil-pointer, if ResStatus is nil #152
Full changelog

oc-mirror

OCPBUGS-33775: Do not generate idms & itms if nothing has been mirrored (#871) #871
CLID-122: upgrades distribution/distribution for a released version (#864) (#868) #864
OCPBUGS-34521: Fix DiskToMirror without internet connection without rebuild catalog (#863) #863
OCPBUGS-33081: Skip images that don’t follow standards, semver and naming (#861) #861
OCPBUGS-33196: skip images with both tag and digest (#853) #853
OCPBUGS-31608: Fix IDMS/ITMS generated source repository in case of empty namespace (#850) #850
OCPBUGS-31858: CLID-97: Provide a way to skip failing images (#854) #854
OCPBUGS-31622: Fix operator related image has empty reference (#851) #851
OCPBUGS-31536: OCPBUGS-33554: Fix mirroring operators on fedora systems - no sig verification (#852) #852
Full changelog

olm-operator-controller

NO-ISSUE: Synchronize From Upstream Repositories #102
NO-ISSUE: Synchronize From Upstream Repositories #101
Full changelog

openshift-controller-manager

OCPBUGS-34825: Whitelists lower-case proxy envs to pod proxydefaults #314
OCPBUGS-33893: openshift-controller-manager overwriting/undoing changes to ServiceAccount imagePullSecrets #309
OCPBUGS-33876: filter delete events #308
OCPBUGS-33600: revert revert and fix for hypershift #305
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-34882: Correct out-of-bounds check #171
Full changelog

openstack-machine-api-provider

OCPBUGS-34158: Failure to get bootstrap is non-fatal #115
OCPBUGS-34155: Fix panic deleting Machine in ERROR state #114
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-35219: Unblock CI #767
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-34402: [release-4.16] dns: fix deadlock in case of error #2181
OKD-40: Add ovnver_okd and ovsver_okd to Dockerfile.base #2174
SDN-4157, SDN-4436: Downstream Merge 16th May 2024 #2171
Full changelog

prometheus

MON-3856: Bump openshift/prometheus to v2.52.0 #202
Full changelog

prometheus-alertmanager

OCPBUGS-33686: Dockerfile.ocp: use common-build target #91
Full changelog

tests

OCPBUGS-34736: Add a “limit” exception for iptables-alerter #28859
OCPBUGS-34500: add manual etcd signer cert rotation e2e test #28830
OCPBUGS-33710: Bump k8s API to 1.29.5 #28831
NO-JIRA: quota.sh: 4.16 no longer creates legacy API tokens #28810
STOR-1838: add test for vsphere driver snapshot configuration #28717
OCPEDGE-1101: skip etcd test for hardware speed on sno #28800
SPLAT-1439: Ignore edge workers when listing nodes #28584
NO-ISSUE: Automated - Update synthetic test data #28795
NO-JIRA: oc template - set NS PSP level=privileged (hostPorts) #28803
USHIFT-3143: Skip metrics and adjust termination message policy monitor tests #28799
OCPBUGS-18534: Pass namespace in function checkHostnameReady for monitortest #28794
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-30538: Bump protobuf to v1.33.0 #67
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github