4.16.31

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.16.31-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.16-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.16-micro Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.16-micro Succeeded periodic-ci-openshift-release-master-ci-4.16-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.16-fips-payload-scan
- gcp-ovn-rt-upgrade-4.16-minor Succeeded periodic-ci-openshift-release-master-ci-4.16-upgrade-from-stable-4.15-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.16 Succeeded periodic-ci-openshift-hypershift-release-4.16-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.15.21, 4.15.22, 4.15.23, 4.15.24, 4.15.25, 4.15.26, 4.15.27, 4.15.28, 4.15.31, 4.15.32, 4.15.33, 4.15.34, 4.15.36, 4.15.37, 4.15.38, 4.15.39, 4.15.40, 4.16.10, 4.16.12, 4.16.13, 4.16.14, 4.16.15, 4.16.16, 4.16.17, 4.16.18, 4.16.19, 4.16.20, 4.16.21, 4.16.23, 4.16.24, 4.16.25, 4.16.26, 4.16.27, 4.16.3, 4.16.5, 4.16.6, 4.16.7, 4.16.8

4.16.30 (changes) - S S S S S F
4.16.29 (changes) - Success Failed
4.16.28 (changes) - Failed Failed
4.16.11 - Success Failed
4.16.9 (changes) - Failed Failed
4.16.4 (changes) - Success Failed
4.16.2 (changes) - Success Failed
4.16.1 (changes) - Success Failed
4.16.0 (changes) - Failed Failed
4.15.43 (changes) - S F F
4.15.42 (changes) - Failed Failed
4.15.41 (changes) - Failed Failed
4.15.35 (changes) - Success Failed
4.15.30 (changes) - Failed Failed
4.15.29 (changes) - Success Failed
4.15.20 (changes) - Failed Failed
4.15.19 (changes) - Success Failed
4.15.18 (changes) - Failed Failed
4.15.0-0.nightly-2025-01-11-001833 (changes) - Success

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.16.11

Created: 2025-01-16 11:09:20 +0000 UTC

Image Digest: sha256:ceb73b82fcaca6b438b9f0640292c4dc5ee8241e220d5f8596c0fd37ae1f4663

Components

Kubectl 1.29.7
Kubernetes upgraded from 1.29.7 to 1.29.10
Kubernetes Tests 1.29.0
Red Hat Enterprise Linux CoreOS upgraded from 416.94.202409040013-0 to 416.94.202501131553-0 (diff)

Rebuilt images without code change

agent-installer-utils git 6e6bb40d sha256:2d65887f224be279796bdcf3fd8db9b7e70d173edad49f7ebcd5955d1e13a027
alibaba-cloud-controller-manager git 97e8335e sha256:1013bf5d0c4ebf43a4528827825617885672d08065743d420bc16b02da2845e0
aws-cloud-controller-manager git a53e9def sha256:1e5de523cfefcb9bca52eea02119bcf2a8a0af1ff832ed76d2dc23c79f377150
aws-ebs-csi-driver git 1d29a74a sha256:45bbb6fa3de21003f693e011a9d8c8216a22684d7668ccfcf30824d745c62552
aws-ebs-csi-driver-operator git ff69cd03 sha256:ddbf96e3312228b0354151439cc6f71c403435a08a461d6e7e91782c5c08e00b
aws-pod-identity-webhook git 746491a6 sha256:ec0c14971934c4b440902ca4991a0eb92f8083a423ae7ef13a0729505099c846
azure-cluster-api-controllers git a81e3b31 sha256:00c260a5f3ac50b98847208e93b72a705486f34c85d8f928ba80919589fa1e12
azure-disk-csi-driver git 6b55f6fb sha256:809cb64b2b9f7de700a52e6af10e8cc5aab0bbb9d872824d067c50c4f7b6eaa2
azure-disk-csi-driver-operator git ff69cd03 sha256:74ede8a984bf2ca60e3792bcc0471dec1a39e41bc9cc190407933a0e3fa15d58
azure-file-csi-driver git 7a36778a sha256:0fd366766b976a7918d9e3e00eb89790290b6540bf841992b7b3cb70d4abca27
azure-file-csi-driver-operator git ff69cd03 sha256:af1baf6283c1bf4cfa2469bcaebee65d352c832b65166d2127ffdbc1730a212f
azure-machine-controllers git e4e11505 sha256:fdb7a072e11eebf033838a2c4476908d24765f28aef62a157284cf482399967f
azure-workload-identity-webhook git 4aca092a sha256:13ac88ba3ee7a1084a3640edf61fadab3c94e077fb43066b72a892dfc734cf44
baremetal-machine-controllers git 11ba601f sha256:2caf00a3cb4455d7b9f6006f49fd80eac3c131fee2377e46f5ec2155bedeea0b
baremetal-runtimecfg git f55a330f sha256:0b3b1b82fb595a53afcf9f6936dde646fa9e058f55b7df01568ab7c8d198ad0f
cloud-network-config-controller git 8ceee788 sha256:4424f763c9ffaecfb0d98d8183aba728404520a59c8704f32a07c8583f39a31a
cluster-autoscaler-operator git 40cadf8a sha256:afb2238e39a6881d2154b28a48c166fa1aea44b72152347a833d4b97dd89082e
cluster-bootstrap git 27bfb59f sha256:b753fe89c80c59ff2f5a83b24777d02ba81d23b716d39fc897e0f845e3d8283c
cluster-capi-controllers git 5830a10a sha256:2f3d083a28a0480463c60b502a2b6fdfc9d1dc22a82dbc06a8fe3d4f9aa11e0a
cluster-capi-operator git 3a2f98fb sha256:3b9a0e78267cb94d90bedf27ab5bf73d07dce3820aee33e88fa7d93494ec6891
cluster-config-api git b7d0481c sha256:60249ef334b5c3ad0f344539760b623cb4f259f0b3a285390dd9636109823ad0
cluster-config-operator git 441d29c9 sha256:90482fb78a71670e488f3bdb83c872a43eee836068ba736f93742c07c36b5491
cluster-csi-snapshot-controller-operator git 439826e1 sha256:ee8a3163edbf47efca0409381e1e3034cdd3b72633f42af9164e1cc9b5271a31
cluster-dns-operator git 8ddf28f9 sha256:e39403f54e52cfaeb35715576b9e7f5e7ea75d4f62a64afe3049ffe05deba6a9
cluster-kube-apiserver-operator git de2f2ac2 sha256:8a8b870949f91343a4d89b5f45103f3a54b0df625be5ac21298e74100265aa5c
cluster-kube-cluster-api-operator git 95ceaa9e sha256:141dc132caf5efa4cb2755a284fd650bbc749ada64f55ec07b57706b6866739c
cluster-kube-controller-manager-operator git 0338b3be sha256:0c9ee96624d52145c124eccaaf6b4537d3767c11cc63c67ed1cc566093951902
cluster-kube-scheduler-operator git 630f63bc sha256:8971805142671923b094343c50a18e837e014b9df02b953b30ed51353ca9a5c6
cluster-olm-operator git 27bf70dd sha256:f33018cf833f603cfc625a39d1d949a5b745612f46c12e708778b001848824f6
cluster-openshift-apiserver-operator git d26f3002 sha256:ac4d71bd57d24fb7126fc7b812cb68677d5c1966e167b6c46955371da75c0ebc
cluster-policy-controller git eaea543f sha256:4f152602ddfec97785b25cb3ea4fc1c23da2279c2f199095771c9603bf111eda
configmap-reloader git dc91ddc4 sha256:e27d3535604868f6c56b2633f713e2a813984b1b96427d5a8c7fed63b2397fa3
container-networking-plugins git 73b4123c sha256:102b3a3bb31643c01dfcd9583a3f2fe0c80a0bd3fef947b4c2e7e60c5e5841e8
containernetworking-plugins-microshift git 73b4123c sha256:b0efc598d2b6c8ce93c1dc6ee0634e32ed8bde90ccc28bf061c4bd02835f07d2
coredns git 1e417656 sha256:ded7349d8f21678508f7c4dc65b007350422cf8f07115a8ebc21804f8d625b21
csi-driver-nfs git 406cec72 sha256:cef68cea614bf80d8ddd3a12e6ff8a4f07338b0e277c797c42dfbadb0acae900
csi-driver-shared-resource git bc125def sha256:921dfe7af898279dac664daa6b15af3a431a6c11359d7e12b71a025a0505b261
csi-driver-shared-resource-operator git 1e1194bc sha256:9716609851b75d426822776c7e95940fb55701a7a4b67e31a9eebeb4d5e97bea
csi-driver-shared-resource-webhook git bc125def sha256:480d8a475a77bd8be6882f1e0735b9459c1e5d4f040dd95ba8a5fa778ca162a2
csi-external-attacher git 7da80aab sha256:9a0fdc3848ee69a1d91b73e0697846e7d2e45a6a2bfbc3eb6b29d5ab36fe24c9
csi-external-provisioner git 9e8af011 sha256:09453af93760e47180f55a7c946a16de56dcfa13003c77e9768d1315ca44269f
csi-external-resizer git bdf5bfb4 sha256:4c0ee8d9c4e28e5993f5bacfe3920cd3714cd986c81ceb254052c30f156867de
csi-external-snapshotter git 5315d37a sha256:2f4060706adcc300124ae2933403056790211477595743ad015a53e9f99b30bc
csi-livenessprobe git f5e3ff55 sha256:1533c9559a7ef98a68592588a97865f7d3414b6a6247df7ff33a12d61a6d37b4
csi-node-driver-registrar git 8930c368 sha256:a8551c345dfa393c5a087fb02b3a44838ee572862b222ff3bced9c069c8cdddb
csi-snapshot-controller git 5315d37a sha256:98939168b6a1bfe45a497044ff1aa1893a26adaf809f27d8c3ffde67595fd5a3
csi-snapshot-validation-webhook git 5315d37a sha256:8c1719d2a4cbb17990bb0fb20e7fc5fc9ed53ceed5e6412299abfbb521016ddb
driver-toolkit git 1d5732f0 sha256:b18cb6bb8d96dacc8236ea991dc65a138cca4d4c2fb7e89612a6fbcc92d3312b
egress-router-cni git 7089efe6 sha256:1a32fcb1702a21af396d4aa2cd86a6aec8e4d7cef791f01224a7dcd3dff3192a
gcp-cloud-controller-manager git 26b43dfc sha256:61f3ace84b466dccaa3fdcd1e551dcf037a51c8b1da138358b8ffd35bb58b65f
gcp-cluster-api-controllers git 02432df8 sha256:d01260061400088f3543383b7ab0711634d56c9f0d13cb4ecdf67549c3a0f9d9
gcp-machine-controllers git e72657c0 sha256:0f7d4c0d9edf6b5a68e55741c7c2f0bc7d8be35c7bb02e22ae2553a6ae0dd38f
gcp-pd-csi-driver git 5ed71c64 sha256:fdef769a5aac9b4e77bb6c9f6fd178c6b2c826f942f9ad08d20486264cd3746c
gcp-pd-csi-driver-operator git 799327f7 sha256:7cfa2185c83ae759da4a636f6839508acebf73aae36e4894d78eff53c4661397
haproxy-router git 4d9b8c4a sha256:8246b63cdf76387c06913a97738ad88110f7a3a55d9d57661d09b41e00b8369b
ibm-cloud-controller-manager git f961f16d sha256:5fc2ac096d697c967392ac5f01ef28490893fc274d1cef59ca78e1d5fc826be8
ibm-vpc-block-csi-driver git 95719738 sha256:be8080e6f68b17e6049bed3b38972cd519a8637e7151a13e83daed517c143965
ironic-machine-os-downloader git 93b8b5fa sha256:f06e0822ddf454a3ecb1da8b3b0f96cc850bf003d316734514297b7ed0e8c04a
ironic-static-ip-manager git e78e4c3e sha256:a90dde8640559255f2db33bdfabe124b3eb867deb26f12ed48ccfc524981d4ac
k8s-prometheus-adapter git e4f859be sha256:e9eed0878820b0f38f44e38aa50a3a187e5bd40953b23a3f6616a983538d98e6
keepalived-ipfailover git b58673a3 sha256:ed0c1ab1982a031f222bf55d079dfb85e9a2040e9d194983620a31aa061c65b7
kube-state-metrics git 9b67b8d1 sha256:eae85b6758bfe492caf37823036edc4e69a10ca29263e18849f871d418928f49
kube-storage-version-migrator git 969a60e9 sha256:a404c22222edb379e1126bd51b19be2426d93867844da0f08b0eb21d3b414d00
kubevirt-cloud-controller-manager git 3db76104 sha256:cd5a4fe97bac48d9038724d0a84188fc914c4f3fca5f66f69c8b9898d9805f2f
kubevirt-csi-driver git 0693093f sha256:fbbd9eec6144c91496062cf935cc188d2d2e57fa1988c80a662c977abeeca408
libvirt-machine-controllers git a336f0b5 sha256:ee49a96b3f5431ec4b6962a18856403225bcb2a2cb296e782c85c9b46c243ca1
machine-image-customization-controller git 39480963 sha256:097f8d93d99527fb436ba28ce61c21d2f22df8b0ecccc587518a8edc250fb20c
machine-os-images git 3cc97098 sha256:988f9ac69d30e261aec3755594cb96a54121345e137cd039ab85fa3714859e55
multus-admission-controller git 88c596ed sha256:14273c52953887916e3a2f27dd7cb82444175009e6c0ec908ab4636cdebd1793
multus-cni git c4aa21b9 sha256:a56af35db208577842cf5a8f48977912b412d4ef3f22a3e8652c1721bb39ad66
multus-cni-microshift git c4aa21b9 sha256:206b23c9a596391210050367b64d28085421f3889b53792082e42890526f14f7
multus-networkpolicy git f988f894 sha256:6368f239b313cab795ef3992f1c7972e9d205a5230defa1a6e709bb17c4aa2fe
multus-route-override-cni git 73594f77 sha256:0de3172cf939310872fcc958a0ebc65e2d8442e3e12646ab33384b395224384f
multus-whereabouts-ipam-cni git dab1dd29 sha256:ee99c6cb4714f49488a87823c81a9f40a7db9ee78424c022936a463e780afc63
network-interface-bond-cni git bb911451 sha256:d36a5db4f45952a89fd8b7131e43a432c98a0f9774691fcdfc550aba94bfa23f
network-metrics-daemon git 48059263 sha256:a5f0fb7e74137c77a16643a8a08b4e837fda0e41d1c225a2d0864deecd43f04f
network-tools git 39eca100 sha256:406c5f0ef3287123d14d117db603ced651e80a790f3e79c443255b09f9201798
nutanix-machine-controllers git f053e5a0 sha256:fac50330660468492efcf22936d65f7c8b07cc5a7f579969c78b195efe3b3565
oauth-apiserver git fa1f097c sha256:3d8e935d0d82890c7747abd2374c4a6e9c1435dab411b8ddb0ea208ec76e570a
oauth-proxy git 30f80124 sha256:e17f2f76c30eaf9c4f2c5ce3d59e962cc12c3d90afe7cc4791ce7de320152f04
oauth-server git 3739138c sha256:125b70f01cddb5bc2fef5b9642943660804572c9c2f2d2defc735ba7ec01638e
oc-mirror git 819f0115 sha256:9397a402328f5ec11b0fae5691082e15df776c957549ad9fed3911cba96eca0b
olm-catalogd git 79975a51 sha256:b3e0c4bbc3b57bf977ba367fd18d84a8c07a7f83fc2ec92f147b0aadb2675484
olm-operator-controller git 80b8649c sha256:84fa41ad1ee64b161b8ae797f48996dc0639c5aeb0c96748407fa9e8fed6f4b2
olm-rukpak git 282cc84c sha256:e45e662e83d1e78341b82095a6d4678a8674d398069502c553dbc8de1e59778d
openshift-state-metrics git 59b8a0ff sha256:2c0308edc20878995848defcaa5ad034d6646f7ec698854fa138ea486eecc090
openstack-cinder-csi-driver-operator git 85b52097 sha256:bd1e3e72d6b9aa6263f63fd206560fa989cef7c6304e880b0b0c33b24d0eb6d6
openstack-machine-api-provider git 5ada1cba sha256:e8f011bf62160b945d7259e95b30d2de6d3313ced516f28a7cf470a158ce4b1d
operator-marketplace git 7db179fb sha256:d7ddd6d86ef47b7aa7f68a97b6eb08ae3bac29f1cbe52812e6fd2de56d5475a0
ovirt-csi-driver git 1db726a9 sha256:6b60eb7f5056af5bcbff803d6b0a422e85217ee2f3c32a0a468df69acf90d5d2
ovirt-csi-driver-operator git ac852f3e sha256:56a95fed248a9ea5a7f5e0d5fbe0cf9afd6a8e25a803dc163ef34fc194dec84c
ovirt-machine-controllers git abb91c84 sha256:3456c854f27046eebc986657e604c685959c59f5686973cd3360c43c33c392de
powervs-block-csi-driver git 26162bad sha256:f0fe3e2ee54f846c4fba60fb3017f17645c687039a10ca45c2f5f292a801f1dd
powervs-block-csi-driver-operator git 9c5dd8d1 sha256:f62e6477e18396ca6f4c89369393eb0c91042d3af0deb011d86e8853e2d2167a
powervs-cloud-controller-manager git 20e6dc70 sha256:a424e082445065bf85a5b9d214aa285725b43f843f5045239a733a3423dff5e1
prom-label-proxy git 5e14722e sha256:f4d8a9967dbb55fc198a102c55687414173ffb8f85d046f03d921f790aa55648
prometheus-alertmanager git e9aea929 sha256:e4a09d4a16d173c6a76ed9046ce76e4d8f0c043f9a2091526ec78df09e92c454
prometheus-config-reloader git c7262a43 sha256:88c392d688a286f4acd0059bbbea8434de0a19f125d2d3a112c364bc19e9345f
prometheus-node-exporter git 29ba26d1 sha256:7e73c1fe3738fc243b61b12b75def64de087551b09ea6ad43a68569ade37d8b0
prometheus-operator git c7262a43 sha256:bc732d02790c4fd016a9630a06d3572ef4b9a2e9c8bbe229a3d8aa3d3e60f197
prometheus-operator-admission-webhook git c7262a43 sha256:3841a10fc02d48948c8d24bdae7cd534de31a37a0f2f44d3646528d2913a6067
rhel-coreos sha256:bc5a955c0caf80133dacbc2efb0640a8be6f97c296d245a1e203052bff08b773
rhel-coreos-extensions sha256:ee1024340bff88691f7c85f6f74418ec0f1f6175827497a3fac3327cf4a3c625
route-controller-manager git 3112b458 sha256:3948d908279f489653ff5afaebfe14d473dfe63c79629313384c8584306cdd45
service-ca-operator git 538c7b98 sha256:e244052a2470f09c4669720e3cc7675c212a7c7f35ebfc3b2104682bc2ec758e
telemeter git c1ecd105 sha256:e886bffe7f7d1a47c237d182d8949eb52bb850a6dc994c4cdf7f48d4198d71b3
thanos git 85eee25c sha256:4bc85578bc8d51e0252f254f368a363f52a75b0db957757c64d51e36df150dcd
vsphere-cluster-api-controllers git be22f10a sha256:1918f88fa552e01578be84505f332c9cf3f0cae9d214b637d9eea9b6e01ad989
vsphere-csi-driver-operator git 483de9c5 sha256:eddef02bb866e48de35662199e30d09f9d6e8ff878816c7b984e46872c126f56
vsphere-problem-detector git 3683c120 sha256:b5ce4bc1c8cff661a95273399d7b163e21667285866e936e8055d44760a34cc5

agent-installer-api-server

OCPBUGS-43021: Update go-jose to v2.6.3 to mitigate CVE-2024-28180 (#6893) #6893
OCPBUGS-42570: Libraries bump to mitigate CVE-2024-27289 (#6833) #6833
OCPBUGS-36577: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#6752) #6752
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-38466: Allow controller to continue when assisted-service (#914) #914
OCPBUGS-43025: Pick up latest CVE changes by bumping service (#920) #920
OCPBUGS-36577: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#906) #906
Full changelog

agent-installer-node-agent

OCPBUGS-43028: Pick up latest CVE changes by bumping service (#804) #804
OCPBUGS-42300: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#785) #785
Full changelog

alibaba-machine-controllers

OCPBUGS-44242: change the VERSION makefile variable to use OS_GIT_VERSION #58
Full changelog

apiserver-network-proxy

OCPBUGS-38062: Revert “Agent: Respect HTTPS_PROXY env vars for proxied connections” #59
Full changelog

aws-cluster-api-controllers

OCPBUGS-44234: [release-4.16] OSD-25934: Only tag NetworkInterfaces in RunInstances if IAM Allows It #531
Full changelog

aws-kms-encryption-provider

OCPBUGS-33693: Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.16 #18
hack: display diff on verify-mod-tidy failure #26
Full changelog

aws-machine-controllers

OCPBUGS-46508: fix Associate*IpAddress flag on launch EC2 #121
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-47645: Prevent panic when informer receives cache.DeletedFinalStateUnknown #133
Full changelog

azure-kms-encryption-provider

OCPBUGS-33692: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.16 #4
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-45999: Always set cross_tenant_replication_enabled parameter to false #9321
OCPBUGS-45669: aws: fix Node Port Service rule removal #9312
OCPBUGS-45669: [release-4.16] capi/aws: remove allow-all Node Port Service #9281
OCPBUGS-39434: dropping this warning as the move from terraform is transparent to the end user #8951
OCPBUGS-45852: Update upi references to api-internal #9290
OCPBUGS-41813: Validate MTU for custom network #9104
ARO-12457: Include bootstrap docker config file in go module #9259
OCPBUGS-45181: add chrony.conf file when additional NTP sources are configured #9247
CORS-3753: Allow mocking of the Azure client everywhere #9220
OCPBUGS-44348: Cherrypick oci ccm fix to 4.16 #9188
OCPBUGS-43967: Revendor assisted service external platform oci #9150
OCPBUGS-38930: import failure when esxi config is not the same in the cluster #8898
OCPBUGS-36290: IBMCloud: Ignore failed VPC regions #8674
OCPBUGS-41885: vSphere - If template is defined skip downloading #8999
OCPBUGS-41490: Update RHCOS 4.16 bootimage metadata to 416.94.202410211619-0 #9158
OCPBUGS-43476: IBMCloud: Handle pagination for subnets #9102
OCPBUGS-41490: Update RHCOS 4.16 bootimage metadata to 416.94.202410172137-0 #9132
OCPBUGS-42014: Update terraform provider for google #9077
OCPBUGS-38732: vsphere, if secureboot is enabled, disable it in the template #8904
OCPBUGS-39415: OpenStack: Install CI dependencies from rpm #8995
OCPBUGS-41334: Fix IPv6 security group rule for schedulable master #8971
OCPBUGS-38687: only allow a single network in failure domain topology #8875
OCPBUGS-42062: OCPBUGS-41865: [release-4.16] vault version updated to 1.13.10 #9036
OCPBUGS-42012: Systemd Fails to Parse Multiline EC Keys #9037
OCPBUGS-41845: Bump extract-machine-os timout to 20m #8997
OCPBUGS-38964: IngressController subnet selection in AWS #8910
OCPBUGS-42138: add tested instance type for IBMCloud #9031
OCPBUGS-39287: Fix var_files syntax to work on older version of ansible #8936
OCPBUGS-41929: Add AWS c7g,m7g,r8g to tested instance types #9009
OCPBUGS-36855: Openstack UPI - Reintroduce unique resource names. #8724
OCPBUGS-39082: incorrect folder gen, workaround govmomi vm folder path bug #8912
OCPBUGS-39496: capi/aws/byo-vpc/multi-cidr: fix group rules #8953
OCPBUGS-36861: Updates GCP terraform worker role #8939
OCPBUGS-38956: failed to install Nutanix OCP 4.16 cluster with DHCP #8905
OCPBUGS-38822: upstream capv bug causes session timeout #8891
OCPBUGS-39468: Enable TLS for virtual media in initial ironic deployment #8955
OCPBUGS-37606: vSphere validation fails if dc is in a folder #8777
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

baremetal-operator

OCPBUGS-39490: Disallow fetching secrets from namespaces different from the host’s one #378
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-42720: Check cast result in adm prune deployments to prevent panic #1891
Full changelog

cloud-credential-operator

OCPBUGS-47070: golang.org/x/net v0.33.0 #805
OCPBUGS-45939: Add AWS region to aws-pod-identity-webhook #800
OCPBUGS-45007: Add retry to ccoctl gcp create functions #794
OCPBUGS-45002: github.com/golang-jwt/jwt/v4 v4.5.1 #788
OCPBUGS-43645: Only attempt timed token credentials on supported platforms. #772
OCPBUGS-43337: Update github.com/sirupsen/logrus v1.9.3 #767
OCPBUGS-41234: List secrets in batches to avoid api timeout #757
Full changelog

cluster-authentication-operator

OCPBUGS-43367: manifests should not use APIs that are removed in upcoming releases #717
Full changelog

cluster-autoscaler

OCPBUGS-45148: [release-4.16] VPA: Update OWNERS file #325
Full changelog

cluster-baremetal-operator

OCPBUGS-43556: SCC-pinning for metal3-baremetal-operator #453
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-42125: IBMCloud: Modify liveness probe for IBM Cloud CCM to use loopback address #366
OCPBUGS-43473: update goimports targets #372
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-44179: relax validation on delete and if failureDomains not configured #331
Full changelog

cluster-etcd-operator

OCPBUGS-33673: rename flowschema to avoid log noise in CVO #1348
Full changelog

cluster-image-registry-operator

OCPBUGS-43797: fix proxy config and leader election test flakes #1148
OCPBUGS-43555: pkg/storage/azure: also check for auth failure error code on deletion #1143
OCPBUGS-42933: azureclient: stop validating credentials when creating the client #1134
OCPBUGS-42420: Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) #1126
Revert “[release-4.16] OCPBUGS-41903: pkg/operator/azurepathfixcontroller: do not sync on non-azure storage” #1119
OCPBUGS-41903: pkg/operator/azurepathfixcontroller: do not sync on non-azure storage #1115
Full changelog

cluster-ingress-operator

OCPBUGS-39324: Refine logging for accurate infra CR status updates #1139
OCPBUGS-39323: Ingress operator status not degraded when canary route fails #1138
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-38269: bump protobuf #115
Full changelog

cluster-machine-approver

OCPBUGS-48258: Fix race condition in CO status controller test #267
OCPBUGS-47704: Filter CSRs by signerName #263
OCPBUGS-45974: Ensure trailing dots on DNS names do not block serving cert auth #257
OCPBUGS-45974: Client internal DNS checks should ignore trailing dot #251
OCPBUGS-44629: Client internal DNS checks should be case insensitive #244
Full changelog

cluster-monitoring-operator

OCPBUGS-46066: Add new metrics for OpenShift logging telemetry #2537
OCPBUGS-44005: fix(monitoring-plugin): disable emitting nginx version on error pages #2521
OCPBUGS-43826: Add runbook url for TelemeterClientFailures #2508
OCPBUGS-41967: disable user-defined monitoring per object #2474
OCPBUGS-42067: Reapply “chore: poll immediately in the e2e tests” #2476
OCPBUGS-41717: Configure graceful shutdown for metrics-server (4.16 backport) #2467
OCPBUGS-41910: filter alerts sent to Telemeter #2471
Full changelog

cluster-network-operator

OCPBUGS-43803: Start feature migration when the cluster CNI is changed to the target type #2552
OCPBUGS-43715: Skip including default crypto policies to avoid authby issue #2598
OCPBUGS-44338: Prevent live migration process from flapping between step-2 and step-3 #2565
OCPBUGS-46148: Remove ip xfrm state when IPsec is disabled #2595
OCPBUGS-45593: Pass transit_switch_subnet options in ovnkube-node pod #2584
OCPBUGS-44846, SDN-5436: Provide support for user owned IPsec machine configs #2571
OCPBUGS-42727: Live migration: report network overlap via live_migration_blocked metric #2519
OCPBUGS-43604: OCPBUGS-42244: Exporting environment varialbe NODE_CNI for live migration #2538
OCPBUGS-36210: Set global IP forwarding sysctl parameters while starting ovnkube-node #2422
OCPBUGS-43544: Use CNIConfDir for mounting directory to ovn-ipsec-host pod #2537
OCPBUGS-43035: Configure narrowing=yes for IPsec connections #2528
OCPBUGS-36594: Set mount propagation to HostToContainer for /var/lib/kubelet #2430
OCPBUGS-41840: Add configurable subnets while running hybrid-overlay-node binary #2502
OCPBUGS-37763: Handle random crictl errors in iptables-alerter #2452
OCPBUGS-41555: HyperShift: do not use antiaffinity on single replica control planes #2494
OCPBUGS-37937: Add proxy env vars to onvkube-node #2457
OCPBUGS-41607: set required-scc for openshift workloads #2496
Full changelog

cluster-node-tuning-operator

Adjust Workload Hints test cases based on Intel or AMD (#1277) (#1281) #1277
e2e:performance: decode to valid kubeletconfig object (#1273) #1273
cmd: PPC: support tolerating heterogeneous core IDs (#1252) (#1268) #1252
e2e: add irdma to module_blacklist kernel args (#1267) #1267
OCPBUGS-47678: performanceprofile cpuset input validation (#1264) #1264
Fix context deadlines in ExecCommandOnPod() (#1263) #1263
OCPBUGS-46496: [release-4.16] Add vendor and architecture specific tuning options (#1254) #1254
OCPBUGS-45264: Normalize cpu sets when rendering to Tuned profiles (#1238) (#1251) #1238
E2E: fix modify node selector to use lowercase (#1209) #1209
Fixing empty tuned submodule when using Dockerfile (#1212) #1212
OCPBUGS-38900: Drop sched_migration_cost_ns setting (#1203) #1203
Make ocp-tuned-one-shot.service restart on-failure (#1202) #1202
Unblock 4.16 CI (#1204) #1204
e2e: performance: verify tuned one-shot service vs kubelet (#1192) #1192
E2E: Add test to verify cpuset.cpus.exclusive is writeable (#1153) #1153
OCPBUGS-39005: Add cluster-wide proxy env file (#1166) #1166
OCPBUGS-36431 Fix generated cpu mask for 512+ cpus (#1152) #1152
E2E: Remove checking of reserved cpus in irqbalance file (#1156) #1156
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-38269: CVE-2024-24786 infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON #363
Full changelog

cluster-samples-operator

OKD-225: remove only the EOL CentOS 7 images #576
Full changelog

cluster-storage-operator

OCPBUGS-46077: Fix PodStartupStorageOperationsFailing alert #548
OCPBUGS-43315: assets: shared-resource: hypershift: add pull-secret to operator SA #521
NO-JIRA: release-4.16: Run make update #512
Full changelog

cluster-update-keys

OCPBUGS-43467: keys: Update Red Hat keys to use SHA256 signatures #64
Full changelog

cluster-version-operator

OCPBUGS-45329: deps: bump golang.org/x/net to 0.31.0 #1118
OCPBUGS-43964: Fix desired before sync_worker’s work is initialized #1097
Full changelog

console

OCPBUGS-48162: OCP web console show pod status as Init:0/1 after using Native sidecars #14668
OCPBUGS-43672: Disable GQL introspection #14638
OCPBUGS-45334: fix table combination #14576
OCPBUGS-41342: fix namespace for networkpolicy #14244
OCPBUGS-46022: Plugins that use very old PF4 dropdown or menu components with grouped items have bullets and padding that needs to be removed. #14612
OCPBUGS-45229: Unable to remove finally tasks in pipeline builder mode #14558
OCPBUGS-45245: use TaskRuns results.tekton.dev/record annotation to get the logs #14563
OCPBUGS-41523: i18n upload/download routine task - Sprint 254 #14258
OCPBUGS-45015: Remove ClusterTask dependency in console from Pipelines 1.17 #14537
OCPBUGS-44792: Collapse/Expand Feature Added, Removal Option Removed in Version 4.16 #14519
OCPBUGS-44875: Start last run do not work in buildConfig details page #14529
OCPBUGS-44874: Telemetry userPreference results in empty nodes output to the DOM #14528
OCPBUGS-45124: Add multiline support to template instantiation #14545
OCPBUGS-44885: include external labels so silenced alerts not displayed in notifications #14530
OCPBUGS-44932: Add IBM Block Storage CSI driver support for RWX #14533
OCPBUGS-43447: Ensure envs are initted upon first load #14405
OCPBUGS-44806: Don’t request user settings configmap if no user has been loaded. #14522
OCPBUGS-44207: Create RoleBinding will trigger Admission Webhook Warning #14465
OCPBUGS-44219: Add flag to hide the pipelines-plugin pipeline builder extensions #14466
OCPBUGS-41673: Update vendor imports to include all PatternFly components #14273
OCPBUGS-43834: Enabling topology e2e tests on CI #14438
OCPBUGS-35204: replace global refresh sync lock in OIDC provider with per-refresh-token one #13950
OCPBUGS-36556: Increase login flow state paramater length/entropy #14354
OCPBUGS-42369: Console crashes when ssh is selected in add secret for starting a pipeline run #14320
OCPBUGS-41904: fix annotation for ovn localnet #14366
OCPBUGS-37615: Include PatternFly-4 chart styles so they are available for dynamic plugins that still use PF4 react-charts #14091
OCPBUGS-37689: Switch to use annotations as labels from PipelineRuns created through Pipelines as Code is deprecated #14094
OCPBUGS-42015: Topology screen crashes when completed pod is selected #14298
OCPBUGS-35850: Fix: Quick Start “next” button requires double click to move to next step #13989
OCPBUGS-42382: Allow operators to enable monitoring by default #14317
OCPBUGS-41905: List of default Camel K event sources disappears when adding a custom event source #14290
OCPBUGS-41709: Need to allow blank for Project/namespace when setting SA Subject in ‘Project access tab’ #14278
OCPBUGS-42069: add Create button to Console plugins tab #14302
OCPBUGS-41996: Fix updating the “Until” field on the Silence > Edit page #14296
OCPBUGS-38112: do not directly mutate links in useMemo #14117
OCPBUGS-34518: Restore user toggle when authentification is disabled #13902
OCPBUGS-41619: Use vCenterCluster value from CM as primary resource #14268
OCPBUGS-37046: Fix TypeError: Cannot read properties of null (reading ‘metadata’) in Topology view #14059
OCPBUGS-38911: Values entered into the Instantiate Template form are automatically cleared #14187
OCPBUGS-38914: Unrelated readme opened when opening CodeReady workspaces from Quarkus using s2i quickstart #14188
OCPBUGS-38968: A value submitted in From view is wrapped with single quotation after switching to Yaml view. #14193
OCPBUGS-38424: fix bug where cluster version text appears black in da… #14144
Full changelog

console-operator

OCPBUGS-46481: Dont disable console when authConfig type is set to None #952
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-43426: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.29 into release-4.16 #303
Full changelog

csi-driver-manila-operator

OCPBUGS-38458: Add missing healthchecks #241
Full changelog

docker-builder

OCPBUGS-47775: skipping some unit tests to avoid failures as they are duplicate #424
OCPBUGS-48159: Add team members to the OWNERS file #426
OCPBUGS-30455: bump google.golang.org/protobuf to 1.33.0 #402
Full changelog

docker-registry

OCPBUGS-39412: pull upstream distribution changes to use a consistent multipart chunk size #410
Full changelog

etcd

NO-ISSUE: Add support for cachi2 based deps #298
Full changelog

hyperkube, pod

OCPBUGS-44513: Bump k8s api to 1.29.10 #2133
OCPBUGS-42555: Allow pod to be scheduled if node’s name and hostname mismatch #2099
OCPBUGS-42168: Bump k8s api to 1.29.9 #2090
release-4.16] OCPBUGS-42057: UPSTREAM: <drop>: bump(github.com/openshift/apiserver-library-go) #2096
OCPBUGS-39015: Bump k8s api to 1.29.8 #2066
Full changelog

hypershift

NO-JIRA: chore(deps): update konflux references (release-4.16) #5384
NO-JIRA: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v9 (release-4.16) #5298
NO-JIRA: [release-4.16] Bump golang.org/x/crypto and golang.org/x/net #5370
NO-JIRA: Update Konflux references (release-4.16) #5328
NO-JIRA: Red Hat Konflux update control-plane-operator-4-16 #5337
OCPBUGS-47539: Separate CPO containerfiles #5333
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.22.7-1733160835 (release-4.16) #5295
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.49 (release-4.16) #5297
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.48 (release-4.16) #5294
NO-JIRA: Update Konflux References and Perform Migration for Release-4.16 #5261
OCPBUGS-39372: Fixed NodePool version validation #5219
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.47 (release-4.16) #5209
NO-JIRA: chore(deps): update konflux references (release-4.16) #5207
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.46 (release-4.16) #5189
OCPBUGS-43930: Return the right tagReference on Catalogs ImageStream #5133
NO-JIRA: chore(deps): update konflux references (release-4.16) #5161
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.45 (release-4.16) #5163
chore(deps): update konflux references (release-4.16) #5135
OCPBUGS-44277: Configure OAuth https proxy to dial cloud endpoints directly #5069
chore(deps): update konflux references (release-4.16) #5119
OCPBUGS-43973: Add network policies for konnectivity server and ignition server proxy #4998
NO-JIRA: Update Konflux references (release-4.16) #5112
NO-JIRA: Update Konflux references (release-4.16) #5099
chore(deps): update konflux references (release-4.16) #5078
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.44 (release-4.16) #5059
NO-JIRA: chore(deps): update konflux references (release-4.16) #5058
NO-JIRA: Update Konflux references (release-4.16) #5042
chore(deps): update konflux references (release-4.16) #5024
chore(deps): update konflux references (release-4.16) #5019
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.43 (release-4.16) #5017
NO-JIRA: Update Konflux references (release-4.16) #5012
OCPBUGS-43840: add ValidIDPConfiguration condition to report IDP config issues #4985
NO-JIRA: chore(deps): update konflux references (release-4.16) #4971
OCPBUGS-43046: Do not send traffic to local audit-webhook through konnectivity #4883
NO-JIRA: chore(deps): update konflux references (release-4.16) #4954
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.42 (release-4.16) #4947
NO-JIRA: chore(deps): update konflux references (release-4.16) #4933
OCPBUGS-43104: label routes only when HCP router used #4899
OCPBUGS-43308: Use guest DNS resolution in Konnectivity HTTPS proxy by default #4905
NO-JIRA: chore(deps): update konflux references (release-4.16) #4923
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.41 (release-4.16) #4919
NO-JIRA: chore(deps): update konflux references to 674e70f (release-4.16) #4908
NO-JIRA: chore(deps): update konflux references (release-4.16) #4896
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.40 (release-4.16) #4880
OCPBUGS-42432: Use KubeClientCABundle for HostedClusterConfigOperator cluster-signer-ca #4799
OCPBUGS-42342: Let payload generation pick the release for the NodePool #4787
OCPBUGS-42431: Conditionally manage kubeconfig secrets for DNS and Ingress operators #4798
NO-JIRA: chore(deps): update konflux references (release-4.16) #4853
OCPBUGS-42608: Add Annotation to skip deleting hcp namespace #4830
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.39 (release-4.16) #4827
chore(deps): update konflux references (release-4.16) #4816
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.38 (release-4.16) #4806
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.37 (release-4.16) #4796
chore(deps): update konflux references (release-4.16) #4781
NO-JIRA: chore(deps): update konflux references (release-4.16) #4760
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.36 (release-4.16) #4759
NO-JIRA: Security fixes for openshift-ci-security job #4750
OCPBUGS-41372: CPO oauth idp converter: resolve names before dialing #4689
NO-JIRA: chore(deps): update golang docker tag to v1.23 (release-4.16) #4729
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.34 (release-4.16) #4728
NO-JIRA: chore(deps): update konflux references (release-4.16) #4727
OCPBUGS-38058: Add HTTP konnectivity proxy to OAuth server #4496
HOSTEDCP-1955: bump CCO version #4696
OCPBUGS-34803: cmd: report server version, supported OCP #4141
OCPBUGS-39293: copy image-registry AdditionalTrustedCA configmap into HC openshift-config #4647
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-9 (release-4.16) #4685
OCPBUGS-38062: [release-4.16] Use HTTP proxy for ingress controller #4688
NO-JIRA: chore(deps): update konflux references (release-4.16) #4684
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-42286: Reorder static resources to create RBAC first #129
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-43686: UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.16 #89
Full changelog

ibmcloud-machine-controllers

OCPBUGS-44870: Bump dependency for CVE #53
OCPBUGS-36698: IBMCloud: Handle pagination for subnets #42
Full changelog

insights-operator

OCPBUGS-45203: LokiStack gatherer (#1051) #1051
OCPBUGS-45044: insightsoperator.operator.openshift.io resource is create-only (#1054) #1054
gather selected clusterroles (#1023) #1023
OCPBUGS-39564: Not able to enable repositories during entitled build in OCP Cluster on IBM-Z (#1013) #1013
OCPBUGS-39394: collect some nmstate customresources (#986) (#989) (#995) #986
Full changelog

ironic

OCPBUGS-44895: Bump Ironic #610
OCPBUGS-43950, OCPBUGS-43958: Bump python-waitress [4.16] #604
OCPBUGS-43438: Include fixes for CVE-2024-5569 #599
OCPBUGS-42511: Include fix for CVE-2024-47211 #594
OCPBUGS-39017: Bump ironic-lib to fix utf8 decoding issue #569
OCPBUGS-38797: redfish-virtualmedia fails on XFusion nodes #564
OCPBUGS-42113: Update ironic-inspector to fix the memory leak #587
OCPBUGS-37758, OCPBUGS-39383: Include fixes for CVE-2024-44082 #579
OCPBUGS-38510: set min version for python3-webob #553
Full changelog

ironic-agent

OCPBUGS-39017: Bump ironic-lib to fix utf8 decoding issue #156
OCPBUGS-39383: Include fixes for CVE-2024-44082 #161
OCPBUGS-38510: set webob and bump werkzeug #149
Full changelog

kube-metrics-server

: OCPBUGS-46663: Disable HTTP2 #41
OCPBUGS-41717: Wire server run options to flags. ([release-4.16] backport) #37
Full changelog

kube-proxy, sdn

OCPBUGS-46048: clean up containernetworking/plugins vendoring in sdn #645
OCPBUGS-45806: Stop checking ruleVersion [4.16] #643
OCPBUGS-44301: Use copy() to duplicate a net.IP #641
OCPBUGS-43344: OCPBUGS-42244: Implement namespaceSelectors on ingress with all pods IPs #635
OCPBUGS-42203: fix UDP conntrack cleanup #636
OCPBUGS-42159: fix redundant router-default iptables rule #633
Full changelog

kube-rbac-proxy

OCPBUGS-30447: protobuf bump [4.16] #111
Full changelog

machine-api-operator

OCPBUGS-45947: vSphere klog initialization preventing verbose log messages #1312
OCPBUGS-45998: Ensure deletion annotation takes priority and oldestPolicy can distinguish longer ages #1313
OCPBUGS-39028: Updates message verbs to use %q where appropriate #1282
OCPBUGS-43433: Vsphere: Handle cloned instance with lost taskID #1298
Full changelog

machine-config-operator

OCPBUGS-43765: openstack: fix non-old systemd compatible unit #4660
OCPBUGS-43741: Soften haproxy timeout for kubeapi probe #4662
OCPBUGS-48116: OCPBUGS-47801: trying to wait for sub-controllers #4777
OCPBUGS-45974: Remove trailing periods from AWS provided hostnames #4744
OCPBUGS-44337: Removal of additionalTrustBundle CA does not remove certificate from node backport #4688
MCO-1342: Backport Telemetry to 4.16 #4649
OCPBUGS-44043: Disable ESP offload for OVS attached interfaces #4676
OCPBUGS-42109: Do not use ‘restart’ for ‘oneshot’ service #4616
OCPBUGS-42744: Check for kernel arg diff in updateOnClusterBuild #4628
OCPBUGS-42722: Panic seen in CI job for MCC pod #4626
OCPBUGS-42719: MCPs report wrong number of nodes when we move nodes from one custom MCP to another custom MCP #4625
OCPBUGS-41293: Enable the use of Linux Bridge as the ovs default port connection #4563
OCPBUGS-41256: Set ESP offloads off in bonds if slaves don’t support them #4627
OCPBUGS-41806: When newly built images rolled out, the update progress is not displaying correctly (went 0 –> 3) #4584
OCPBUGS-41518: CVE-2024-3727 ose-machine-config-operator-container: containers/image: digest type does not guarantee valid type #4569
OCPBUGS-38997: Machine-config daemon ListPools panic during tech-preview CI runs #4550
Full changelog

monitoring-plugin

OCPBUGS-44395: remove unused package and upgrade vulnerable dependency #272
OCPBUGS-43239: upgrade dynamic plugin sdk to remove vulnerable dependencies 4.16 #217
OCPBUGS-42424: fix path-to-regexp dependency #197
Full changelog

must-gather

OCPBUGS-46407: Support gathering IPsec data #469
OCPBUGS-42969: Collect etcd object count #454
OCPBUGS-43056: Open [Release-4.16] Multus is now a Pod and will be captured by normal #449
Full changelog

nutanix-cloud-controller-manager

OCPBUGS-30524: bump google.golang.org/protobuf to v1.33.0 #38
Full changelog

openshift-apiserver

OCPBUGS-45010: Pass expected type to deploymentconfig/scale object validation. #461
OCPBUGS-42724: fail image import when both image and error are nil #455
Full changelog

openshift-controller-manager

OCPBUGS-48202: Add team members to the OWNERS file #358
NO-JIRA: cleanup root and app OWNERS #347
OCPBUGS-42420: Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) #343
OCPBUGS-39191: replaces deprecated square/go-jose wtih go-jose/go-jose #329
Full changelog

openstack-cluster-api-controllers

OCPBUGS-44456: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.16 #328
OCPBUGS-44990: Makefile changes for merge-bot #341
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-47738: catalog-operator: Delete Pods that were evicted (#3459) #925
OCPBUGS-46434: CRD upgrade existing CR validation fix #916
OCPBUGS-44802: fix: call TokenRequest API when service account token secret is missing #900
OCPBUGS-41540: [4.16] add optional schema migrations; default to olm.bundle.object instead of olm.csv.metadata (#1384) #859
OCPBUGS-41677: [4.17] adds paginating lister for evaluating CRs’ upgrade fitness versus new CRDs. #863
OCPBUGS-41557: Fix e2e flake: upgrade CRD with deprecated version #861
OCPBUGS-41217: (fix) registry pods do not come up again after node failure (#3366) #854
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-47634: Let OVN-northd bind remote ports #2406
OCPBUGS-45958: bump OVS to 3.3.0-62.el9fdp for OCP 4.16 #2388
OCPBUGS-44457: Add static route to the hairpin masquerade IPs to pod #2346
OCPBUGS-45942: pin libreswan to 4.6-3.el9_0.3 #2386
OCPBUGS-45343: Dockerfile: Update OVN to the 24.03.2-32.el9fdp minor release. #2377
OCPBUGS-42244: Add hybird overlay pod IPs to the namespace address_set #2352
OCPBUGS-43344: Add SDN node subnet gateway IP to host-network address_set #2328
OCPBUGS-42942: Fix egress gateway pod cleanup for remote zone pods. #2341
OCPBUGS-36210: Implementation required to enable Forwarding if it is already disabled #2212
OCPBUGS-41551: Add subnet overlap check for transit switch subnet #2306
OCPBUGS-38697: Use more exact name match when deleting static routes to HO nodes. #2282
OCPBUGS-24386: [release-4.16] EgressService: Fix ETP=Local ingress reply for LGW #2278
Full changelog

powervs-machine-controllers

OCPBUGS-41976: Update go.mod to fix CVE - 4.16 #84
Full changelog

prometheus

OCPBUGS-43668: fix(discovery): Handle cache.DeletedFinalStateUnknown in node informers’ DeleteFunc #231
OCPBUGS-39179: Restore Prometheus functionality to accept samples with different timestamps from the same series in a single scrape. #224
Full changelog

tests

OCPBUGS-44105: Adjust createDNSPod() to support hypershift dual-stack test #29258
OCPBUGS-39135: Bump timeout for the pod-network-service endpoints check #29052
OCPBUGS-41611: Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token [apigroup:build.openshift.io] #29079
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-46341: update check-fmt goimports command #83
OCPBUGS-37660: Bump otelgrpc to v0.53.0 #72
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-43881: redact sensitive information when logging VCenter config #134
OCPBUGS-42878: Add compute resource entity to consider a standalone cluster for volu… #131
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github