4.16.57

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.16.57-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded (2 retries) periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.16-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-main-ci-4.16-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.16-micro Succeeded (1 retries) periodic-ci-openshift-release-main-nightly-4.16-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.16-micro Failed (1 retries) periodic-ci-openshift-release-main-ci-4.16-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.16-fips-payload-scan
- gcp-ovn-rt-upgrade-4.16-minor Succeeded periodic-ci-openshift-release-main-ci-4.16-upgrade-from-stable-4.15-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.16 Succeeded periodic-ci-openshift-hypershift-release-4.16-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-main-nightly-4.16-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.16-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.15.21, 4.15.22, 4.15.23, 4.15.24, 4.15.25, 4.15.26, 4.15.27, 4.15.28, 4.15.29, 4.15.30, 4.15.31, 4.15.32, 4.15.33, 4.15.34, 4.15.36, 4.15.37, 4.15.38, 4.15.39, 4.15.40, 4.15.41, 4.15.42, 4.15.44, 4.15.45, 4.15.46, 4.15.47, 4.15.48, 4.15.49, 4.15.50, 4.15.52, 4.15.53, 4.15.54, 4.15.55, 4.15.56, 4.15.57, 4.15.58, 4.16.10, 4.16.11, 4.16.12, 4.16.13, 4.16.14, 4.16.15, 4.16.16, 4.16.17, 4.16.18, 4.16.19, 4.16.20, 4.16.21, 4.16.23, 4.16.24, 4.16.25, 4.16.26, 4.16.27, 4.16.28, 4.16.29, 4.16.30, 4.16.32, 4.16.33, 4.16.34, 4.16.35, 4.16.37, 4.16.38, 4.16.39, 4.16.4, 4.16.40, 4.16.41, 4.16.42, 4.16.44, 4.16.45, 4.16.46, 4.16.47, 4.16.48, 4.16.49, 4.16.5, 4.16.50, 4.16.51, 4.16.52, 4.16.53, 4.16.6, 4.16.7, 4.16.8, 4.16.9

4.16.56 (changes) - S F F F S S S
4.16.55 (changes) - Failed
4.16.54 (changes) - Success
4.16.43 - Failed
4.16.36 (changes) - Success
4.16.3 (changes) - Success
4.16.2 (changes) - Success
4.16.1 (changes) - Failed
4.16.0 (changes) - Success
4.15.61 (changes) - F F F S
4.15.60 (changes) - Success
4.15.59 (changes) - Failed
4.15.51 (changes) - Failed
4.15.43 (changes) - Failed
4.15.35 (changes) - Failed
4.15.20 (changes) - Failed
4.15.19 (changes) - Failed
4.15.18 (changes) - Success
4.15.0-0.nightly-2026-02-13-161558 (changes) - Success

Upgrades to:

4.17.49 (changes) - Success

Loading changelog, this may take a while ...

Changes from 4.16.43

Created: 2026-02-13 21:55:48 +0000 UTC

Image Digest: sha256:9be78983e01f2fd4a8652543a3a997923818f2d62e0968f15ff30d0084233b49

Components

Kubectl 1.29.7
Kubernetes 1.29.14
Kubernetes Tests 1.29.0
Red Hat Enterprise Linux CoreOS upgraded from 416.94.202506251808-0 to 416.94.202602101357-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
StreamingCollectionEncodingToJSON (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
StreamingCollectionEncodingToProtobuf (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Rebuilt images without code change

agent-installer-utils git 6e6bb40d sha256:d996ae5e72eb8bd4584b5b51b1bb56c4f1573caa0791c5e66a5c89d850ef3dc1
alibaba-cloud-controller-manager git 97e8335e sha256:939ce68dc53e8612f38f1c9ee2a25034e4d7953f98b136dd24966d30bb7d4e82
alibaba-machine-controllers git 248372a4 sha256:db48cb10424ecaf7a52681e7e17bfbe187ee238ddb3be21ba599b3aabc856e0a
apiserver-network-proxy git ca81b6a3 sha256:3bb343771d20dd2ec6a05b595dd0065474799b189c33985589f07217b1fd321a
aws-cloud-controller-manager git a53e9def sha256:59214d21308fdcf9535342dd4662ecd4f8ebea431270f577f5d6fd266371b6ed
aws-ebs-csi-driver git 1d29a74a sha256:d63a70864e886482cbcda411c93c811bb3b1d904b9a586ab42fc67cda8ddd9c7
aws-kms-encryption-provider git c66065de sha256:71f36e93f7195b10639a5c7db58e2f396f1272c6dbaba651e78a4c9ce955c427
aws-pod-identity-webhook git 459c5314 sha256:396f40db5ba672cd4ecad68fa6f837405c9bfae9fa38f1276e672918f9de7b4d
azure-cloud-controller-manager git e5bac334 sha256:545a23225833cb931e6962febaf183bf7fb7d3532c5ffa4556c9c198f3b73954
azure-cloud-node-manager git e5bac334 sha256:c887cc0ed1561b2253c907df741d98c1bf4836ba3faccc2d8c5a8734e0857fc1
azure-cluster-api-controllers git a81e3b31 sha256:d344bcbdaab988fcc26ae36cceb1eaf2b5f60943fac7bc1c318786c5b33fd45e
azure-disk-csi-driver git 6b55f6fb sha256:5fbffddc788c5499be501c8650150299d515527b230e62dd15920b33f9eb93a3
azure-file-csi-driver git 7a36778a sha256:7766c535404fb104ddca41eb50e2be914c14bdcb6305ff3f6ab1508594c1fc90
azure-kms-encryption-provider git af633e05 sha256:7dfa6966d81447102d92f49b7256c7b47955f1d2b60e5b9dc133f71a1b2c8033
azure-workload-identity-webhook git 5b8d171e sha256:feb92f825bb3ab62bb5ac81ed63718f5e3fb274fd0b6575487285e55bcd549de
baremetal-machine-controllers git 2b396e06 sha256:55973d56e1df439ece9c90bf4a6ac870c4be37fa5c718c90da6deb275c34c062
baremetal-operator git 84aeac37 sha256:9c0ed5fd8235d31c3a959cf3f00717a841c2e5ea2e9e222454ded28932ac2f2b
cluster-authentication-operator git 0e39ace5 sha256:8ee226df0ab0bf40ee1eb32bbf64b2feeafff15a165b92be994a331949f29516
cluster-autoscaler-operator git 70164fc6 sha256:5c88ce9b17d4baf03f9ab7e89dfbd9c82a8e4bccd23e5dce74e11d6b2a0ecf6d
cluster-bootstrap git 27bfb59f sha256:47e60f0ec21835c324472d63a89089c62480ef17e2225b537c7023404f63c796
cluster-capi-controllers git 5830a10a sha256:08cf0dc27f2e823756ba009358a028860354793bcb3abc9ef7c14d71ec011fed
cluster-capi-operator git c699f6cf sha256:ac40d2c4950576d453b18666a9acb3c19d4175d94a28d6e0e9bc19a4c302aece
cluster-config-operator git 441d29c9 sha256:97e522d7f8d7c3f88f50bb511f1696657f9dfb41282c702fbb5325a993267fd9
cluster-control-plane-machine-set-operator git 14571e8a sha256:8933a240bb1a42d823f4bf6feaf1baf6a6f083909fd9e5a62c8b61ca770cee50
cluster-csi-snapshot-controller-operator git 439826e1 sha256:1fdb8df2f66c1558fcf03d227a63e58f63b990f1ff47ad81e3e3482c4e89779e
cluster-dns-operator git a4b1cfb4 sha256:be58ac468d10396163e8e30c2e927d365ec7f21f710b99813b9f8f74b260c21a
cluster-image-registry-operator git 0f1869b1 sha256:19eb2ef0c58d253602d9dfc10f356481bc443b6ba6a1729eeb253549a5b06235
cluster-kube-cluster-api-operator git 95ceaa9e sha256:b5df8abccc723af3f3ff86b4d1fbe7f643b89bcdf87c93abf3b926e8b622efc3
cluster-kube-scheduler-operator git 630f63bc sha256:4cca1c61fb2e435230b15535e8423825378ad0f523e7eeed5300b139ade380da
cluster-kube-storage-version-migrator-operator git e8258113 sha256:8d49a0a22cdef610f8338e3e4e3c009d493e6990d6fd68362063a9138164cd1d
cluster-machine-approver git 7685374f sha256:6f08d4c8d88aab768b5c727b824584cb5443f67e69fd543ea95bcc8cf90cff2e
cluster-node-tuning-operator git eacd6ee9 sha256:4f7552d3e6293c981fa9da6db88f330bece8f668376abf43f71b906553a5c99e
cluster-olm-operator git 27bf70dd sha256:4d29bc385e8920f178688a741187cc67ed670ea997201952d0b9a77b56c762bd
cluster-openshift-apiserver-operator git d26f3002 sha256:8b2d6dfc8fc31a67250dca39ac60bdaf86cbbd61353cfe7731d4fb1ebf5463c0
cluster-openshift-controller-manager-operator git 2ed3cf99 sha256:df5cccd485b9a00dd75fd58cc2690f4713062e43fcba9aad630fa400f314c588
cluster-policy-controller git eaea543f sha256:2814cd076f00b58ec1abc468adbe95d2281b50cddbce2d112dbf8befa70dd470
cluster-update-keys git e8478585 sha256:33d14b8d5f2c6b2e06b4bb0afb00a0725195ac80899f786640a0c3df9d238e30
configmap-reloader git dc91ddc4 sha256:3b594e4afd1f6540d0c0da8f875bdb8de328ba3f2dce17c8226712929079360b
container-networking-plugins git 5f9ee066 sha256:a8430b0829211ecb9925cb3061a328e054c006433bbe067d8746f92c348ff141
containernetworking-plugins-microshift git 5f9ee066 sha256:8ebf277d8c153fa0be2825ebade894a87f61ba26c198225e4fd714302be26ef2
coredns git 1e417656 sha256:fdc7347043706d1c88f0d0327e29fd47dca2ba6b41bfaadfe4acb18c175c3a03
csi-driver-manila-operator git c25d1ff2 sha256:f8fa8bb4a92b3ad3028f21cec3c5394f565c9e02f06b0619696cebf56cf598e3
csi-driver-nfs git 406cec72 sha256:02d69fddf5e810141a02f739de9b3b56a1301d4ecbdad3b8df3b7b0c8c67db87
csi-driver-shared-resource git bc125def sha256:a2cd6bd5ba28e30282de522e76ec1fee891eeee677350638802535f329f41d56
csi-driver-shared-resource-operator git 1e1194bc sha256:d167970d8be3d911c29a54fe93b3c5ba2ace1a5bd823fb0dd3b5f0691d67f5e0
csi-driver-shared-resource-webhook git bc125def sha256:3a4686f99c0461088ac8d8d83b53ff967b57840aca2fa87a3d04823823c4d5fa
csi-external-attacher git 7da80aab sha256:cb2ff11c7a67c79a0164613e9ae68e58c14c6ef7a5af4dc4b6fbc897921db161
csi-external-provisioner git 9e8af011 sha256:ff65e0a6ded81326ad41c930abd5f396a6b3c2920169d349be3f4240aa212889
csi-livenessprobe git f5e3ff55 sha256:e6755753af40adcaef42af4fa79da923446d57d2da328a5689a8aac7d7a6a803
driver-toolkit git 1d5732f0 sha256:ef70455cbaeae026e8b15538a2a1d159bbb35e47427ea97e13f5e5a7cdf27dcc
egress-router-cni git 7089efe6 sha256:6b96865aa6187e5d1d46bb64717dfcd42a1cc17f33bbb96be9021d8b61f6465f
etcd git e7911c0d sha256:eefbc25642cd5387702ba23a6bbc3a33e1d507caf9b5d873657c08be096828bf
gcp-cloud-controller-manager git 26b43dfc sha256:f8efd3a98425d3b6ee6cb9df9d20cf8390168998d5f3d8ae4b8030b9353e2b43
gcp-cluster-api-controllers git 02432df8 sha256:dd07d396e484826008d9accb4013073f654bbdbc9373c3ec94c79e2fcd903c10
gcp-machine-controllers git 8851888a sha256:6d4fbb7a93c300154e76eec4307a3dfc14555e6a2d0d065db2de3fcdfe9f5fa6
gcp-pd-csi-driver git 5ed71c64 sha256:19ef2c2e8606c2bcc69c922cda581826281770cdb7e70aa9dfff11404ed30a3a
gcp-pd-csi-driver-operator git 799327f7 sha256:4f8de05a10bb92e5c982471035860ef72f44d0f4213397dd3a304c0fc21af267
ibm-cloud-controller-manager git f961f16d sha256:a0d207f70105e6c6c74adeca74cb6b9218e107a869a7e9ceee35022db9218009
ibmcloud-machine-controllers git d29506e7 sha256:a6f98204b5eda5ee82ed092ad791c0e75d3d299a0b2b7ddc56c229b2f2cfaab3
ironic-machine-os-downloader git 93b8b5fa sha256:afd2a6edd07ebb4b6b77544ae5ee18e3371f514daf4c669a00d154b5e33b701a
ironic-static-ip-manager git f44e8a08 sha256:554b7d9d81f9fb5dbccbabdaadfda9e45d186eba6488df224f83ab512a4c4653
k8s-prometheus-adapter git e4f859be sha256:65777a3f824fbba1a23da143ef64a1824aa48883b94947682f787232d55055c1
keepalived-ipfailover git b58673a3 sha256:8e64d6ec539d991b5a228d8f4b9079fb959dd11c3b8a77ee5bc3576398340dc2
kube-metrics-server git 9116b918 sha256:685d78a491e935d0b4e7a8eea29df7863976a60800d1e08c3bd3faaeafad5a25
kube-proxy git 53fea06b sha256:333d60c92a9efcb4febe144c3e331c553197d325ba0afd64bebfcc2803cc0e07
kube-rbac-proxy git c38f4734 sha256:ef722b792c00415c1efaecc99ea873df11d2ef8cd35c5b86af0afcb28c08f821
kube-state-metrics git 9b67b8d1 sha256:b19219d62e0e70404ac9b7643caa49a792b9450e8bdd815b02a6539e41526a77
kubevirt-cloud-controller-manager git 3db76104 sha256:1aeee3943c69893e59b8d0bdbf4c32b4452cf4f6af73a802b64be9cfa051f38b
kubevirt-csi-driver git d474c42e sha256:790592a71ce9e5bfce5c82f0efb257d08c463658db59b6bef0af4de7d0ccfbd8
machine-os-images git a99847b4 sha256:96bf65054c994cec4326f1bd5432e45caeef3c48513a7e3cd2248759f9e6efdc
multus-cni git e88ad2bb sha256:ebcd87df2ac74dcac93ceed85bed5587957036381a49d7969e9a530f7744942b
multus-cni-microshift git e88ad2bb sha256:34dadb46049ecbb75501d512642e7d2a58961c783f749aa0169d1a108155db97
multus-networkpolicy git f988f894 sha256:dd146a5240dc6b3328240e27e4257151e187aa50df62150160d1050e065f0041
multus-route-override-cni git 73594f77 sha256:7942d7e452866f23d468bc06b2b8b43df126c9bbf2fca5607fcd3e3fc391c76d
network-tools git 234ed43e sha256:64d10474aa6082fbc20dcb45adf3f78369650b94352eab601e16e3ea0f45dc70
nutanix-cloud-controller-manager git 28bf5963 sha256:e4e0509c00b2dc8f6feeba505240de8debcb1b7e6e01e138ce406125e344efcb
oauth-server git 3739138c sha256:5017bd5e359111c80afc7cf55fba210bcd7f15ca82d3a6282d2f63560ffe8d3d
oc-mirror git b137a53a sha256:b47c8a889f18a9d9601612c058e1c890308f1603584b626d16ee7bf50af00d4d
olm-catalogd git 79975a51 sha256:d4f9611470c2e215f919f6b08149425755ebae0a89bea7c3a3b95ffa4b7c59db
olm-operator-controller git 80b8649c sha256:25811e863ae8cce3659fa109172b0fe4fb11260cd612410b2880f69edf3f2459
olm-rukpak git 282cc84c sha256:85859d9cf6668ca35cf196718aa7df1588411e4ddb287f832d4e7c6992aa5af3
openshift-state-metrics git 59b8a0ff sha256:abe083c619d9906f8ad612d300dfd9b7a6c9fc93897e4c437f2ad5481eb4320a
openstack-cinder-csi-driver-operator git 85b52097 sha256:9eb6b6ad34e973b0c20aec9028b893d92baca2639b28b9f5d457aac43392bfdb
openstack-cluster-api-controllers git 3b972b2b sha256:5907d836ebf2133c63591afc2135a9224582e0c75373642d4bca8094ee4d48bc
openstack-machine-api-provider git 5ada1cba sha256:1c2ae2d75a70fd6620fc71ac3f314b3f09746f78903f93d5e1fdca64941946be
ovirt-csi-driver git 1db726a9 sha256:48e8779ae80d139e0d0cd6ff9d5586c66ba42f6c85d32cea200759056904ddd7
ovirt-csi-driver-operator git ac852f3e sha256:0e3b5a014910aa57779fb95853037590569f1edc9bb48bba2d9461b3a2b0fa73
powervs-block-csi-driver git 26162bad sha256:03201ef76eea07d6632c483c1f05a1b983a8fb17e892722f673d7903d3d589ae
powervs-block-csi-driver-operator git 9c5dd8d1 sha256:767e3986e21c2f1514a8a12d8b07d8bfaccc5afabdb58ec2cec07918d9805554
powervs-cloud-controller-manager git 20e6dc70 sha256:2b606ac9745c95d3c70d91044357602677c8ab5e6242ee78aa9f11ccb4729e57
prom-label-proxy git 5e14722e sha256:2f962daa09a741fef6dae721df2f0c66b911b70ac45e50fba5d3c4e17e9942b8
prometheus-alertmanager git e9aea929 sha256:0c0a5d2256bb2f57a9656d8bc97df07613940255c6add3fbaf2e6322ca840d43
prometheus-config-reloader git c7262a43 sha256:21f55af564e556247c4ea8263a5878314e025f290a723b716a9402c3ad228084
prometheus-node-exporter git 29ba26d1 sha256:6f20725914f0924a8c0e605bfe6cbb2040ebcb7953737a120aac78ae540cbe34
prometheus-operator git c7262a43 sha256:a301c39c613445ea4df3c3bb70cf653d456a2e2f2cabc8ba7899e14792065170
prometheus-operator-admission-webhook git c7262a43 sha256:94d5008f0cbba99ee510257dc9921c6874e3853bffa0a22f91fb8635608c4cd2
rhel-coreos sha256:ea935ca0d6d12eeeeaba2c28cf93b6d3ff3915cffcbb782c3cc7b3cf69677b50
rhel-coreos-extensions sha256:04dba326b9be9748b33d750a54dd626375cafdac04034841eb7864e4b1abda62
route-controller-manager git 5da234dd sha256:fbdd3810520e77b36b749f73d70d416799bae48b35430eb025a6b4e5d4b42b77
sdn git 53fea06b sha256:0733858547fe3b3e5ba4fd312446b846f4da4117a767552662871d61ff6952c5
service-ca-operator git 538c7b98 sha256:eb77fcd0fc42f542e8f761eee4003cd969ef4e80b94f10e2b25e801acccd0911
telemeter git c1ecd105 sha256:950695ad184709b631a6220ebd01cdcfff0c841f9c0977db7aab1fb2ec309c76
thanos git 85eee25c sha256:9b07702f9d90053a3e349df86cfa61ae30522447b3ed6e44ea14ca34e9d54f6a
vsphere-cloud-controller-manager git 023a3655 sha256:e28276a853d5b9b4937c8d38717139597be50e7458801607c841a569703a97a2
vsphere-csi-driver-operator git 7940ea16 sha256:98845440ef473d8a65a926f6fc7e9bc95e2d975c6431bc2c64c04d166226cce1
vsphere-problem-detector git 3683c120 sha256:5288894add34aafeec729069a4a4917aa7d4156917f9a5e2dcd82aa4bcea2a91

agent-installer-api-server

OCPBUGS-58631, OCPBUGS-58636: Bump glog to v1.2.5 in release-4.16 (#7901) #7901
OCPBUGS-47627: dnsmasq service on OCP SNO fails to read /etc/resolv.conf file during system startup (#7857) #7857
Full changelog

agent-installer-node-agent

OCPBUGS-58651, OCPBUGS-58656: Bump glog to v1.2.5 in release-4.16 (#1071) #1071
Full changelog

aws-cluster-api-controllers

OCPBUGS-61942: UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It #572
OCPBUGS-58666, OCPBUGS-58671: bump github.com/golang/glog to v1.2.5 #560
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator

OCPBUGS-64831: Use 127.0.0.1 for healtz http-endpoints #467
OCPBUGS-64768: Add RBAC ClusterRole and Binding for driver node #465
OCPBUGS-61253: add ability to control kube rbac proxy container image… #426
OCPBUGS-60598: Bump library-go #423
OCPBUGS-59606: Backport stale conditions fix #407
OCPBUGS-60248: add tag matching to Azure File storage class #414
Full changelog

aws-machine-controllers

OCPBUGS-73903: Fix reconciler consistency checks in Update and Exists #168
OCPBUGS-63140: client: re-use a single file for building the session instead of randomly named files #144
Full changelog

azure-machine-controllers

OCPBUGS-66044: Set updateDomainCount to one when faultDomainCount is one #177
OCPBUGS-52476: Remove unused vnet package #131
OCPBUGS-56169: [release-4.16] Update virtualmachines service to armcompute/v5 SDK #147
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-73879: data/manifests/bootkube/cvo-overrides: Default to eus-4.16 #10226
OCPBUGS-54165: aws: fix NLB creation in secret regions #10031
OCPBUGS-53237: Validation for API and Ingress VIPs when using user-managed load balancer #10048
OCPBUGS-62952: Update the RHCOS 4.16 bootimage metadata #10022
OCPBUGS-62653: Release 4.16 bump terraform provider azurerm #9993
OCPBUGS-59162: vSphere - remove unit tests using nip.io #9835
OCPBUGS-62235: Make swift containers removal not fatal for UPI. #9961
OCPBUGS-58290: sort zone slices extracted from map of byo subnets #9819
OCPBUGS-55807: update resolv.conf every time on bootstrap node #9694
OCPBUGS-57460: vsphere - check if host is powered down or on standby before uploading template #9786
OCPBUGS-36677: Power VS: Enable incoming traffic on port 5000 during installation in a restricted network #8711
OCPBUGS-57498: ensure ctrplane nodes can access bootstrap MCS #9788
Full changelog

baremetal-runtimecfg

OCPBUGS-60113: Re-add ENABLE_NODEIP_DEBUG env var #362
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-64616: Help with must-gather scheduling through suggesting preferance of nodes #2151
OCPBUGS-64561: Update go-jose, x/crypto, x/net #2144
OCPBUGS-59938: Adding sos.conf file for default sos config into the tools image #2064
OCPBUGS-60675: Use fedora image in unit tests instead of centos #2079
Full changelog

cloud-credential-operator

OCPBUGS-65802: ccoctl azure: retry custom role creation on consistency errors #952
OCPBUGS-63550: ccoctl: add public-key-file flag to create-all #940
OCPBUGS-55129: snyk to ignore SNYK-GOLANG-GOLANGORGXNETHTML-9572088 #918
OCPBUGS-60973: ccoctl: aws to use proper issuer url on subsequent runs #909
OCPBUGS-60861: ccoctl: only add owned tag to azure resources on create #902
OCPBUGS-58676: github.com/golang/glog v1.2.5 #893
Full changelog

cloud-network-config-controller

OCPBUGS-66346: [release-4.16] Fix capacity calculation #195
OCPBUGS-65567: [release-4.16] Change the capacity struct from int to ptrOfInt #192
Full changelog

cluster-autoscaler

OCPBUGS-60915: revert openshift replica fix #377
OCPBUGS-59267: Fix cool down status condition to trigger scale down #363
OCPBUGS-60609: fix checkpoint gc of unknown recommenders #372
Full changelog

cluster-baremetal-operator

OCPBUGS-64741: Always have a service for ironic-api port #524
OCPBUGS-63417: Fix ironic inspector container privileges #513
OCPBUGS-61504: Remove webhookport (9447) as HostPort #506
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63168: ccm: disable unused secure-serving port and webhook #422
OCPBUGS-60387: Add Service using common resource templating #411
OCPBUGS-60387: Update service selector to match deployment label #410
Full changelog

cluster-config-api

CNTRLPLANE-1982: Promote streaming list encoding to Default #2600
OCPBUGS-71202: Add HTTPKeepAliveTimeout to IngressController API #2640
NO-JIRA: Promote streaming list encoding to Default on Hypershift. #2568
CNTRLPLANE-1611: Add feature gates for StreamingCollectionEncoding #2542
OCPBUGS-58392: Add IPsec API for NAT-T UDP encapsulation support #2393
OCPBUGS-56424: Add IdleConnectionTerminationPolicy field to IngressControllerSpec #2330
Full changelog

cluster-etcd-operator

OCPBUGS-68058: Update logrus to 1.9.3 to address CVE-2025-65637 #1546
OCPBUGS-61505: Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace #1482
OCPBUGS-60836: add missing ports to svc and pod spec #1473
Full changelog

cluster-ingress-operator

OCPBUGS-71202: Implement HTTPKeepAliveTimeout tuning option #1337
OCPBUGS-56424: Add e2e tests for IdleConnectionTerminationPolicy #1235
OCPBUGS-56424: Add support for IdleConnectionTerminationPolicy #1234
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-60467: Add missing service ports to apiserver service #1895
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-60834: Missing endpoint slices for open ports the operator uses #864
Full changelog

cluster-monitoring-operator

OCPBUGS-64581: Fix KSM deny-list typo #2733
OCPBUGS-64637: Add mcd_local_unsupported_packages metric from MCO to telemetry 4.16 #2735
OCPBUGS-62765: port metric acm_managed_cluster_worker_cores:max to OCP 4.16 #2719
OCPBUGS-63235: test: remove image registry e2e tests #2727
OCPBUGS-61856: chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind #2676
Full changelog

cluster-network-operator

: NO-JIRA: Update CNO reviewers/approvers #2768
OCPBUGS-63155: Add drop flows for GARPs #2819
OCPBUGS-57354: block upgrade if a CNI migration is in progress #2760
OCPBUGS-62055: Update CNO reviewers/approvers #2803
OCPBUGS-44443: Add controlplane cli image envar for use with hypershift #2791
OCPBUGS-58392: Add IPsec API for NAT-T UDP encapsulation support #2736
OCPBUGS-56992: iptables-alerter streamlining #2717
Full changelog

cluster-samples-operator

OCPBUGS-63516: references to github.com/sclorg/django-ex.git now also refer to the branch #659
Full changelog

cluster-storage-operator

OCPBUGS-61252: add ability to control kube rbac proxy container image on controlplane #614
Full changelog

cluster-version-operator

OCPBUGS-58452: Failing=Unknown upon long CO updating #1213
Full changelog

console

NO-JIRA: Bump builder image to v29 #15993
OCPBUGS-74447: Bump lodash to latest #15967
OCPBUGS-69678: Disallowed Pipelines-plugin Pipelines navigation section #15857
OCPBUGS-64884: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15707
OCPBUGS-64649: /auth/error?error=missing_state&error_type=auth is showing blank page #15675
OCPBUGS-44157: bump dompurify to latest #15591
OCPBUGS-62123: Remove ancient X-XSS-Protection header #15528
OCPBUGS-61057: OpenShift console PVC clone cannot use B as the unit #15450
OCPBUGS-60175: Tolerate unknown fields in Infrastructur… #15368
OCPBUGS-60641: Secret key with binary file changes when edited via Console #15417
OCPBUGS-59869: Not able to launch terminal window from OCP web console due to console plugin conflicts #15334
OCPBUGS-57677: Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image #15328
OCPBUGS-60115: Cannot read properties of undefined (reading ‘node-role.kubernetes.io/master’) error while accessing node logs from console #15358
OCPBUGS-59358: fix bug where / in console.tab/horizontalNav href brea… #15286
OCPBUGS-37603: Manual backport of several incremental fixes for unauthenticated endpoints #15312
OCPBUGS-59274: Add the ability to launch multiple modals with useModal hook #15276
OCPBUGS-59445: Cannot read properties of undefined (reading ‘filter’) error while accessing nodes from console. #15291
OCPBUGS-58407: Add flags in console static plugin for all the components of this epic #15243
OCPBUGS-56838: Fetching taskRuns in PLR details page using PLR UID also #15099
OCPBUGS-58188: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15214
Full changelog

console-operator

OCPBUGS-60794: Update downloads deployment configuration to use master node selector #1036
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-58884: CARRY: don’t ignore json files #341
Full changelog

csi-external-resizer

OCPBUGS-62465: Requeue PVC over PV creation #174
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-60450: UPSTREAM: 1238: Snapshot Controller startup should not LIST all volumesnapshots #186
Full changelog

csi-node-driver-registrar

OCPBUGS-64632: update log level verbosity to not clutter logs #91
Full changelog

docker-builder

OCPBUGS-65907: BuildConfig inline Dockerfile fails with heredoc syntax #489
OCPBUGS-58074: S2I build cpu limits observed by assemble are limited to 1 cpu #475
Full changelog

docker-registry

OCPBUGS-60183: bump openshift/docker-distribution #441
Full changelog

haproxy-router

OCPBUGS-56424: Add support for IdleCloseTerminationPolicy #655
Full changelog

hyperkube, pod

OCPBUGS-68041, OCPBUGS-68091: CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 [4.16] #2582
OCPBUGS-74299: Skip E2e: attach on previously attached volumes should work #2568
OCPBUGS-65694: Fix Concurrentmap Iteration #2519
CNTRLPLANE-1612: Backport StreamingCollectionEncoding for JSON and protobuf #2485
OCPBUGS-61908: UPSTREAM: <carry>: Don’t retry storage calls with side effects. #2470
OCPBUGS-60553: [4.16]: podresources: list: use active pods #2454
4.16: OCPBUGS-60872: UPSTREAM: 127757: scheduler: Improve CSILimits plugin accuracy by using VolumeAttachments #2435
OCPBUGS-60272: Bump nfs server provisioner #2402
OCPBUGS-58054: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2342
OCPBUGS-58054: UPSTREAM: <carry>: disable some legacy cloud provider Azure tests #2352
Full changelog

hypershift

OCPBUGS-74375, OCPBUGS-74376: Support proxy authentication when user/pass is included in URL #7578
OCPBUGS-73118: Fix Konflux EC voilation, update deprecated base … #7459
OCPBUGS-63640: [release-4.16] fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries #7113
OCPBUGS-64680: Update DNS names for ovn-kubernetes cp metrics #7158
CNTRLPLANE-1904: Migrate 4.16 pipelines to common pipeline template #7212
CNTRLPLANE-1426: feat(konflux): tag MCE HO images with latest #6839
OCPBUGS-61252: dont use registryOverrides on kube rbac proxy image be… #6756
OCPBUGS-61582: Update KCM node monitor grace period #6797
OCPBUGS-61860: Use the common MCE konflux pipeline #6844
OCPBUGS-60150: Always compress and encode payload in token secret for inplace upgrades #6750
OCPBUGS-60951: MCE 2.6 konflux hcp cli #6701
CNTRLPLANE-1203: HO MCE change to hermetic ta build #6654
CNTRLPLANE-1231: Move CPO pipeline to hermetic builds #6599
OCPBUGS-58505: [release-4.16] Add missing service network DNS entries to KAS cert #6393
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-58737: bump github.com/golang/glog to version v1.2.4 #106
OCPBUGS-56063: tech debt: rework vendor patches #91
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-59727: [IBM VPC] set offlineExpansion to false in e2e test manifest #149
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-67288: [release-4.16] Fix incomplete vendor/ #138
OCPBUGS-51818: CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork #109
Full changelog

insights-operator

OCPBUGS-68370: Add filtering to add other possible pod status to QEMU gatherer #1200
OCPBUGS-67009: QEMU logs are not gathered if there are pending status virt-launcher pods #1197
And 5 elided commits (e.g. from squash or rebase merges)
Full changelog

ironic

OCPBUGS-69789: Bump eventlet version to 0.33.1-7 #763
Full changelog

ironic-agent

OCPBUGS-69781: Bump eventlet version to 0.33.1-7 #232
Full changelog

kube-storage-version-migrator

NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-16). #227
Full changelog

libvirt-machine-controllers

OCPBUGS-26525: Updating ose-libvirt-machine-controllers-container image to be consistent with ART for 4.16 #283
Full changelog

machine-api-operator

OCPBUGS-57210: Updates GCP CredentialsRequest #1378
Full changelog

machine-config-operator

OCPBUGS-63155: [release-4.16] Networking: reset ovn-remote config and allow ovnkube controller to set it #5359
OCPBUGS-60773: scope MCD node listers to current node #5260
OCPBUGS-63553: Add control-plane label for master nodes on legacy clusters #5376
OCPBUGS-57423: pkg/operator/status: Drop PoolUpdating as an Upgradeable=False condition #5119
OCPBUGS-63332: Recheck generatedByControllerVersion annotation prior to deleting a degraded MC #5364
OCPBUGS-56753: Support NODEIP_HINT in IPI deployments too #5079
OCPBUGS-62689: Add mcd_local_unsupported_packages recording rule #5328
OCPBUGS-59931, OPNET-681: Support migration to NMState #5205
OCPBUGS-61869: Override NMState service definition #5290
OCPBUGS-60621: Add workaround fix for static pod race #5252
OCPBUGS-56558: Log CRC MC deletion #5178
OCPBUGS-58270: Do not set cpu system reserve below the default value #5163
add missing vendors #4952
Full changelog

machine-image-customization-controller

OCPBUGS-68093: [4.16] uplift logrus #153
Full changelog

monitoring-plugin

OCPBUGS-54316: Fix “Export as CSV” #469
Full changelog

multus-admission-controller

OCPBUGS-58767: Update the github.com/golang/glog module to v1.2.4 #103
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-70215: Prevent accidental IP deallocation in statefulsets #396
Full changelog

must-gather

OCPBUGS-66106: Separate resources with comma to fix malformed inspect #515
Full changelog

network-interface-bond-cni

OCPBUGS-61348: Bump github.com/containernetworking/plugins from to 1.7.1 #95
NO-JIRA: Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.16 #91
NO-JIRA: Add ci-operator.yaml file on release-4.16 #84
Full changelog

network-metrics-daemon

OCPBUGS-58777: Bump github.com/golang/glog to v1.2.4 (#113) #113
OCPBUGS-60186: Replace e2e test image (#122) #122
swtich golint install method (#123) #123
Full changelog

nutanix-machine-controllers

OCPBUGS-51854: CVE-2025-22868 #110
Full changelog

oauth-apiserver

OCPBUGS-74112: UPSTREAM: <carry>: bump kubernetes-apiserver to pick up loopback cert expiration update #166
NO-JIRA: (chore): update OWNERS file #172
Full changelog

oauth-proxy

OCPBUGS-61446: Update x/crypto to v0.31.0 #335
OCPBUGS-62707: Fix oauth-proxy e2e-component tests #338
Full changelog

openshift-apiserver

OCPBUGS-74113: UPSTREAM: <carry>: bump kubernetes-apiserver to pick up loopback cert expiration update #595
OCPBUGS-63394: Wire dry run option to Image API server operations #566
OCPBUGS-61474: Skip blocked registry check for registries with mirrors #552
OCPBUGS-56612: Fix image reference in TestImageStreamImportQuayIO #516
Full changelog

openshift-controller-manager

OCPBUGS-61707: legacy image pull secret rollback controller #416
OCPBUGS-60233: ignore error failing to find pull/push secrets #409
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-58881: operatorgroup: ensure clusterroleselectors in clusterrole aggregation rules are sorted #1102
OCPBUGS-59647: Reduce Frequency of Update Requests for Copied CSVs (#3597) #1042
OCPBUGS-60847: Add NetworkPolicy as a supported kind #1050
OCPBUGS-61388: [4.16] e2e stability fixes #1083
OCPBUGS-57429: reduce cache expiry frequency [release-4.19] #1022
Full changelog

operator-marketplace

OCPBUGS-62220: Remove Expect func so that the test case can use the retry logic #671
OCPBUGS-61920: Update memoryTarget on catalog source pods #664
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

CORENET-6055, OCPBUGS-76277: [release-4.16] Dockerfile: Unpin OVN and consume the latest from FDP #2972
OCPBUGS-71219: [release-4.16] CVE-2025-65637 Bump github.com/sirupsen/logrus to v1.9.1 through indirect dependency conversion (go-controller module) #2906
OCPBUGS-72541: NetPol & MultiNetPol: Process update only when spec fields and/or related annotation are updated #2933
OCPBUGS-68349: Add ricky-rav to OWNERS for release-4.16 #2899
OCPBUGS-66155: Skip Pending pods in EgressIP status updates #2880
OCPBUGS-64944: [release-4.16]: Configure sec nic EIPv6 address with NODAD and maximum lifetime #2853
OCPBUGS-64858: Fix stale EIP assignments during failover and controller restart #2851
OCPBUGS-63155: Fix EgressIP stale GARP post reboot + pod restart #2809
OCPBUGS-63230: Fix dnsnameresolver address set #2812
OCPBUGS-60079: Always enable global IPv6 forwarding #2743
OCPBUGS-60494: Update OWNERS file: Add Patryk/Martin as approvers #2718
OCPBUGS-58161: Unpin OVS patch versions #2648
OCPBUGS-57396: Fix predicate for cluster subnet route to gateway router #2645
Full changelog

powervs-machine-controllers

OCPBUGS-61511: Use OS_GIT_VERSION in Makefile when found (for Konflux builds) #127
OCPBUGS-54752: Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.16 #114
Full changelog

prometheus

OCPBUGS-61856: chore: compute highestTimestamp at queryManager level #270
Full changelog

tests

OCPBUGS-63395: Backport pr 29834 to release-4.18 #30409
OCPBUGS-62934: Fix bearer token exposure in exit condition as well #30365
OCPBUGS-61170: images/tests: Remove rteval #30203
NO-JIRA: Update extended/networking OWNERS #30091
OCPBUGS-60272: Bump kubernetes version to fix NFS ganesha version #30086
OCPBUGS-57311: Replace RunHostCmd with Exec function to censor bearer token being exposed #29908
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-61653: Fix unit tests #72
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-68119: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.8.3 #158
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github