4.17.0-rc.5

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.17.0-rc.5-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.17-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.17-e2e-aws-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.17-fips-payload-scan
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.17-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.17-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.16.10, 4.16.11, 4.16.12, 4.16.13, 4.16.8, 4.16.9, 4.17.0-ec.0, 4.17.0-ec.1, 4.17.0-ec.2, 4.17.0-ec.3, 4.17.0-rc.0, 4.17.0-rc.1, 4.17.0-rc.2, 4.17.0-rc.3, 4.17.0-rc.4

Loading changelog, this may take a while ...

Changes from 4.17.0-rc.0

Created: 2024-09-20 03:40:13 +0000 UTC

Image Digest: sha256:5b1399dc8175d7d26611c2541962d101948cba6a951ed3dd51cddf75afbab303

Components

Kubectl 1.30.2
Kubernetes upgraded from 1.30.3 to 1.30.4
Kubernetes Tests 1.30.0
Red Hat Enterprise Linux CoreOS upgraded from 417.94.202408170011-0 to 417.94.202409120353-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
ExternalRouteCertificate (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)
AWSEFSDriverVolumeMetrics (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
OpenShiftPodSecurityAdmission (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Enabled	Enabled
ProcMountType (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
UserNamespacesSupport (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

New images

networking-console-plugin git f395bb62 sha256:30d6a26e4971d2081f0749bc3e39312a7583b74cafce775bdedf151bfa4807e9

Rebuilt images without code change

agent-installer-csr-approver git 37fd43a4 sha256:d380f37da2d940292bff39dea2f6fa21a8247913b3c9d2dfb6c1650ae26d49e2
agent-installer-node-agent git ef533920 sha256:7b94108ce9f71bf2725a3e6dc416ddad26266e047f92f10ad6d40b360e624aab
agent-installer-orchestrator git 37fd43a4 sha256:78a0760c4e68da38a2c7ced9eb879d2788d735199d796b54b39032018b516396
agent-installer-utils git 3b99303b sha256:32e29a277ff76f3fbe6301174e0b26a3e56a927e7c6820b0a32dedd0ad877790
apiserver-network-proxy git cd426416 sha256:01745f6ea0f7763b86ee62e324402aec620bb4cd5f096a10962264cb4d68cd2d
aws-cloud-controller-manager git 8c77f418 sha256:c6d6d19333fd11c44561059165c2d77e50f29795feb22e79b43873df122c4ecd
aws-cluster-api-controllers git b722659d sha256:a4e3e558fb59d24bfd7d41f74e4a5ee59f1c63c28f52e39deadc491e90ac5267
aws-ebs-csi-driver git 2bb5b316 sha256:0ea101da7995d3f3c6647704c12a81d412e26f96993fd03d40201856a497c61a
aws-kms-encryption-provider git 003c3caa sha256:f8b1471a9691bc88cdb8dd4c2bdac9057d4f6ff1638e58373a6e4b25a911b7a3
aws-machine-controllers git 451c30d9 sha256:f5eb755c637fdb06df12b5c776a49085c6e02b7d6db3f595fa2adbbe04d99a7e
aws-pod-identity-webhook git b91c75bd sha256:6a41688219c734f009a1fbb608cfbc2fe35bd4c91c7c3ab79ba92cc3b35542dc
azure-cloud-controller-manager git b9204e21 sha256:17192e137024654746ee9d2656a18f32844ffb9dbaf89f97f3e1e9c32b3d0f21
azure-cloud-node-manager git b9204e21 sha256:5f9df99f89a86478f59866e56f19d9765c71e449ef4599ffe020172d8dff2981
azure-cluster-api-controllers git d359bfe5 sha256:9fe0fc709cae09210f9e88bc864aef586ccea42fb9597f0ed6fb2654759f41a4
azure-disk-csi-driver git a544f30b sha256:44f395569d11114c2d016e957a8fce1456d3c2d8e1679d667f743109f542e508
azure-kms-encryption-provider git eab1dcfc sha256:17d2151744d630a06a2c49ef98edcc0472926d3f45f31fca42dfebfca887fe4e
azure-machine-controllers git d69a3e35 sha256:5e35f5f8c7961db5f08129fba4468d37b1f2e9d53ba01260ec0c1ff1d540e77e
azure-workload-identity-webhook git 75b1b4ce sha256:357c8a8c63676a8c2b910fd7658908661117d505cf128aebe749c2bc66fd47d9
baremetal-cluster-api-controllers git 9e6d2bd4 sha256:45ac4317d021296ccc204b0ad62b636ed955a2eed053fbf2697ca6488bc88482
baremetal-machine-controllers git 2549061c sha256:68a4eaa7a1b2e868f2273a1100d77996e427a792b46b0ddabcccf9f3345015f8
cloud-network-config-controller git 779b346c sha256:71d33d111fb24fe4a979c8956135e90b4c9adef5dc29d96f93a28ae0236a4f58
cluster-autoscaler git 9a013d5c sha256:65b96b77f133edfd6d4225dcdfeebbd6cee5db8350ef1e9ae87182f7e03bda06
cluster-autoscaler-operator git 99b23ded sha256:34e8bbd447ad41b17de2d38dc9bcb7c12e3f54b8ae3a4a4e5698c42aa8a25dbb
cluster-baremetal-operator git c09fb731 sha256:a2fc3da48474a6b9b99d17d9f832b7bfff1be63b7ad6a6c2b96b92b671cea4f9
cluster-bootstrap git 27bfb59f sha256:2cde74831d83d0d0fc31f343ee1871b9b51f33aaa90f92035d76bc25005fca18
cluster-capi-controllers git 77ef4fc5 sha256:4b7c26872bfeff1af4381139418c9af72473ab28092c1792648e54310da2e8df
cluster-cloud-controller-manager-operator git 94da1a47 sha256:37684b2891940ea37401554c522b165fce1fbf706de2d2e885b45bfaf8af2bda
cluster-config-operator git 0dc084f4 sha256:9b3b5f5bd8eec54244455641a65d0c82e7c3023b210f008e1267ebff180070b4
cluster-csi-snapshot-controller-operator git ffba005b sha256:dd4d371b4308bf91fb433bf941b0ed23b82e0d6b19f35febf9fd9c90637a0934
cluster-dns-operator git 54eea5bb sha256:64e75963a489fe253efc142caf22282d721e61c9d70b5ea65d9a9e4e3b1d2fe2
cluster-kube-cluster-api-operator git b90945e9 sha256:3de6757b8e595d290b66862157562a63ae820eecccf4606cc63931ec0d9eea0d
cluster-kube-controller-manager-operator git 0a9ed573 sha256:2e59c736b8048d4af1220250fead3797a41a4df930e9a244e356ce5e789a43bc
cluster-kube-scheduler-operator git 98ca953b sha256:5da4e56d7b243766d7363a3d9db8341a4277ce15b984fdb1df9da791edd8c418
cluster-kube-storage-version-migrator-operator git a0d27f3f sha256:e87bcc2432d70e65c0ce56aa2cd0dd64534917a1fe1e46593922bdf36913fec9
cluster-machine-approver git d29c16b2 sha256:8a5d6624dfdb915062b2655624a18052273722e0661671e51712282fa4c8b5f7
cluster-olm-operator git e31b7775 sha256:fefd3e37358bcc5c027568ca39a5c78392fd9be92e02ebcea3e5fe0bcc7130e5
cluster-openshift-controller-manager-operator git 2b962c71 sha256:c1d0806b8e7f5be7f35468798838080b1f76981371d681a9fe8dbc142ad19733
cluster-update-keys git 2ce31fc5 sha256:d2ae07bd1ffccd9317abd3365d5f39ebefcf2567fbf00fb2d7b6b8b5ba9dea7f
cluster-version-operator git ce6c0b89 sha256:ecc8987b3e5fa0949b17f9e2db90b826a1ba52a6fc5788265e35b38f2254c2af
configmap-reloader git b877222b sha256:ca7632251673f149254be6eb0d5b69399a6213b1cbb10549857e517cad4e4d0a
container-networking-plugins git 24a65329 sha256:8a37bdef0c7c36d6b25f62b47e3dff674fe9ff27320b70ae1c3ee0b53630b1a6
containernetworking-plugins-microshift git 24a65329 sha256:b029ef6c12a9b26bd8ec9746204bd545ef888dae937204c7b502708ec624e14b
coredns git d3b441c1 sha256:4e6bd511653baca1118f099cf190a6635ed0dadd863adab13e6496dc7e8d95d0
csi-driver-manila git a13ed564 sha256:b407dec05e3f7fa8cb30d7021953cee9e9cfb3eb558510fc93d945d73f9ae6ff
csi-driver-manila-operator git 34052f25 sha256:6dfb79f57d1902c266398c42f4a4654451e9328a843bf3e1cad419d6c8e08395
csi-driver-nfs git 6a72c254 sha256:6d44de3216adf7eb338149ea39039b832dfbc329fa0e77ef3de4f5d2180ede04
csi-driver-shared-resource git abbeb172 sha256:6760000df47da2656cad89ff96c89fb041748975a3f367db00e81c1fcd03b833
csi-driver-shared-resource-operator git c095a1f2 sha256:0c875fdeed57286a3ad3bd789d7d12e57b8f45ca4c8c6462493ff301efe699c5
csi-driver-shared-resource-webhook git abbeb172 sha256:774c5932dc24e50dbce66a6a1588a4b7acaf0ce37e367123bbe8e52a6d940965
csi-external-attacher git c3fe8e2e sha256:f38998dbed22c7df77af63b82503db3894c0b80ee559f7e66585c39b05b9c0db
csi-external-provisioner git fe460e56 sha256:3251417ad9f39a123e45635127e159fb9a646298452f68735161398c461b8afc
csi-external-resizer git ab87a938 sha256:e29415869e3950ed3d6c6b3d1693965fef8ffeb9aa3791630ede2d8c1a5c39d9
csi-external-snapshotter git aa558ca4 sha256:1386e9a83a68b1be7c47c295efdeb60e0f10e61bdc0a3e2243e02b5c8fd0cc16
csi-livenessprobe git 075ebcdc sha256:04eb8145f1c640563169e459f802643a421871f9a91b87a6fb6160de6bdd2383
csi-node-driver-registrar git 436a1f33 sha256:b6c08f531fe43eceb07b370a4ee821350b14d3d80cd2010b80545175d820a8fb
csi-snapshot-controller git aa558ca4 sha256:69ab00f2435880cdbb807560a109f278205881bde31661fa1e8cc4f2beda9c9f
csi-snapshot-validation-webhook git aa558ca4 sha256:3eafe7d6f3475167ae337c14ed79b208c96faca9b2c9e637cfdd94a8770a1a2d
driver-toolkit git 859518f6 sha256:5ade3bb39301509ce941b053f2c943e381b8ea5f6d5337c72a58ee33ff27b391
egress-router-cni git 3193a756 sha256:595077a734f0fbef65187a4562d51ed5f323128618316035a7ff4ac858b5e6cf
etcd git 1fb31653 sha256:a89c81468bed85fcb909a22be4ae692bc980ee86705ce3c607cc28332de4ea5d
gcp-cloud-controller-manager git 8ce997d7 sha256:a11887e595a448cb77fca70fb70749f98bbfb0340746908bcaf61ca8e0886848
gcp-cluster-api-controllers git 9c561f2d sha256:a48604246b2cebbe9ca21e5fe313e506ee5a58d528cbd8caf41ff52ebbb3a3ca
gcp-machine-controllers git f2711c6d sha256:5e566271536ce68c2647cc2397f920ab68ceaf55489ca631d6ebe8ea89e09ed0
gcp-pd-csi-driver git c770b412 sha256:b28dc4772d453f5698afc3476186d8f546a7fee74a8be72d5e10787426b9f99e
gcp-pd-csi-driver-operator git c23b064f sha256:8190c55acc95e50541f7a434cbf226ad243695e9f7faad193b5c7697a320177f
haproxy-router git a33f2b6a sha256:d357e2ca8a6ccf4e1de71f13320e45ffa8cae3c7506a7f9be057a9e4060446c9
ibm-cloud-controller-manager git ad8f7eb0 sha256:b2bda74a06ad49855a4d2a67e30dbe144929f94ec5461840b3b25b0865185fdc
ibm-vpc-block-csi-driver git 3a3a62f7 sha256:10e14a5c25f7b26ac0129bdf52d5d866f927c83483d70c8b1eef3946d03138cb
ibm-vpc-block-csi-driver-operator git f74c374b sha256:46da8fa2b087b11b2eb9518dde682c1f2b5fe348d93de35ac6ca7961ef7a7c45
ibmcloud-cluster-api-controllers git 9179e154 sha256:6b7d724947ddff422669874819c391442cffcf11e07b5f9d7202a8539854b1b3
ibmcloud-machine-controllers git dce9d33e sha256:dce8a8ee4682ea44dfc4cec5380c2dffcbd7c6f96f81f9b4374be843ae048dc8
ironic-machine-os-downloader git b698ea3e sha256:cbd459d5a933c549cb1224575a80d3c995be2d22ed2a9c5a136b0ba73643a888
ironic-static-ip-manager git 713378b3 sha256:a20e664a701e6502a988c55679d6219c0741eec26556678098a1fa0fc4a3715c
keepalived-ipfailover git e3879e9e sha256:e6e3e451a0d248a39035804a1ec5c5d264a004c2be9ad250765f1404c00e7fe9
kube-proxy git 307a0b2c sha256:4e00de21ec8eeedc23ccccfc6b61e321976fdcb3441e6250c78946927a60d065
kube-state-metrics git 462e63f6 sha256:b6e8b83cfba5761f11a8e99a0a8268d92bbb6311b4100dce2327ba90eae899cf
kube-storage-version-migrator git 34fafc04 sha256:b7cd875a8a444e2ebda612836a9a4da93c0a3280cb3de077de49d56c30e214be
kubevirt-cloud-controller-manager git 3f4542ec sha256:695fbff06172bd009640b2ec9e08e6b6d3797f344cae5aba0381b255907a1021
kubevirt-csi-driver git 02f9a921 sha256:7feccb20961a3b68521d1c0ab9b9f29e3babd3fba93d35955a9aaedcedc71468
libvirt-machine-controllers git a336f0b5 sha256:39b2d7212eb03e19d94d653893ae4bf75faac6676d00559d1639778987eee01b
machine-image-customization-controller git 74bee374 sha256:a28615b55df617f4ca6c2f24a89098eebb6f4c834dfe5085c52cba926659789d
machine-os-images git 9e76dac7 sha256:326cd9d09b3f2f7f4d6fa9a987327d33daf0ce84310a9a658ba0e229dbba53a1
metallb-frr git 377d02f9 sha256:05aec47952706105e238dfccf277791691b31b82e4c4482b513f54cb13bd0d9e
multus-admission-controller git 076f0caa sha256:cf1f3e54c609533daa1b96a107fdd52ff3929df76866ce7efd9b87c7b2d12568
multus-networkpolicy git 7d01ea1c sha256:dc9fdfb696cd2d6093176b581f650241005a9eacdb91cff5bc96bd3f97082cc2
multus-route-override-cni git 391c1b03 sha256:6ae94082d25dbcfd77c1f82c7e821f5e958aa198bd02670f7c9b153d8c1138ff
multus-whereabouts-ipam-cni git b950d50d sha256:8f865253e35cd8203b925cb4b9f9293e7e4247e5a0ca8e00aaf8f6fb2c8700ad
must-gather git 6598b160 sha256:673267b732f782b6e2046c6fda3355da7cd860f2bd7b26b25aea6f821e22fa06
network-interface-bond-cni git 8630f336 sha256:12ebccb7c34491b6cc8a1495bf555a4ddfac38889d32a67bb35acbe35dbccce8
network-metrics-daemon git f7a88331 sha256:589a103bf957db978da3f61e97354eb7af339e2d4848a8110ff77f34bb6e27ee
network-tools git 8e170b4f sha256:d3e3f2d69b9eb457802d976b04ba4b6f4280704a20f47017fad9f0825726d5d3
nutanix-cloud-controller-manager git c9f6cd1f sha256:e2a46aa241ddf7e516336b2cb6f90149b7f93f26e3f522d54e33c08b434da1d0
nutanix-machine-controllers git 68aa2bbf sha256:3b1d43015218e5be6cffcddfa328af977cfb8e916826f5cfa74ffe1dbcadcc94
oauth-apiserver git e37ccb45 sha256:3f7f07a5d07c8de1e8f95ed16cdb5bc8b67f8fa281067f13f75b6a84bd10df7e
oauth-proxy git 30f80124 sha256:8bd911017ad7415b244899437f3570752f814e4d1469d2b88f4c08e5d914b633
olm-catalogd git c4497d09 sha256:27433b99ca0c2e7597a56191ddfc512ee1fbf3885eaa89ad393ac6bbd774ed2e
olm-operator-controller git 8d16b39f sha256:e4211594687fdaf4584006df4232b10b4fa35f25fdff82229fb16dcfd9355cfa
openshift-apiserver git 3c3cb886 sha256:ecd44ecb789c3fd0f199c1367c932f64ccc5901868833cd93bf0501f6ae7785f
openshift-state-metrics git 1e963eb5 sha256:0757c9ef9556e0e40d03d7980bbcc78b09c4f35be8fa5941a40b24bab2a63c8d
openstack-cinder-csi-driver git a13ed564 sha256:deb31f721c6648e428ea012c2fe0d63fe70bba7c73b9202bfa0955a0e811f238
openstack-cinder-csi-driver-operator git f89b6dbc sha256:556cac940ecce39fc1f19436b759626f971c8354cb8452f233e852b633d360f1
openstack-cloud-controller-manager git a13ed564 sha256:f1ceec56297fdc665ab6286e5e319bfe98d89ea5fc5c928e639314b8766dfefe
openstack-cluster-api-controllers git 9db571c5 sha256:31cebd49bb61c02ae8b8c32a109d6952ec72a48fcf29ee64e9ab2226f5aee9fc
openstack-machine-api-provider git 68971874 sha256:fd8b914e23f8a86758767b656a579b9b56d8082115ce8e7452ff4ab843e02364
ovirt-csi-driver git 1db726a9 sha256:8d83750fb963186bb5c93a7dd65069f5a06d900f2240b428c481ea6e1c7451e5
ovirt-csi-driver-operator git 0feae256 sha256:cff02a7f5c0e658ca65a4c162f08d34643fbdabd980d480e04b2fb32aaaf40e4
ovirt-machine-controllers git abb91c84 sha256:d8425ca09c400e86158f8773eed58a5560a70d8e4d86c3df16ab13f335dec0c4
powervs-block-csi-driver git aaa6afa9 sha256:797b5309eb51a7a27f9181a0359e91a0636e3dd2b4cddd49cb0e2e8b8b915f52
powervs-block-csi-driver-operator git f6f037c5 sha256:4658f1e571f2eaa43d0f99befb06fe26b604c0ca9c0696c7dd962220d0fa5864
powervs-cloud-controller-manager git bd3d72e5 sha256:2d5a99bdd9ba4ca5cb38962b8911f3961c9b270eeb1fc5097739e4c5b4f03c98
powervs-machine-controllers git fe7a877c sha256:73f2f633ce755ff6424267a854ee53ec3911ac577a4ae8049c06abf9f6ee4153
prom-label-proxy git d80e9044 sha256:3c6acb7a4bce65076eb06ddf9e45c27b535e664a9250d685d17cf3fa916c8f53
prometheus-alertmanager git d7c1a7c6 sha256:143a861c5bca7f410aefb7d013f2d45c6e4361ea7e89c3029d3c273a14c18b7e
prometheus-node-exporter git d88fd69b sha256:8e55e431feba35788116507f0a288e388bc1b61518319789d54e66b618a90eb1
rhel-coreos sha256:6c7386c267386b6666a2d107f919c0e7239b90fd00b4f872c384be4526009212
rhel-coreos-extensions sha256:af199b8882e6758381ecd3a58d5ac1e265d1f0ce92f79ba4624648addb49f49c
route-controller-manager git a47f6be3 sha256:c6c9537d055a13b78743fa0bd6d2ce5254344bc75eda44cc192ddf4b41357fa7
service-ca-operator git 1f7d6472 sha256:2a67eedbb21433aeb51f66dea80ae54144459564b162d1e43219e443d211c32a
telemeter git e2b25245 sha256:e60fad4f9bb454f43a7857769c877aaa3fc9dd2bf9b8a1361b77f68808fcb63b
thanos git 5b567365 sha256:f5a5dd3120c84b1ec479f1e0056dbfefb0f66a113a54ed3a05d27b5b0328badc
vsphere-cluster-api-controllers git 1661cc3f sha256:6d515e1c4d5853904fe43ed6ab367bc4e5a65fe0bca3395d0faba1e939cd0a8f
vsphere-csi-driver git 738c43cf sha256:34a350bdfd29d0be14ebea3c911c4150dbfe68e356b39e7ddff79517e26df4aa
vsphere-csi-driver-syncer git 738c43cf sha256:75ec9cedf347a5f089815c6d64fb7363823a0f18322ac0f82718f2dac296f30f
vsphere-problem-detector git cd0df71f sha256:6e7ba1b64bd19cedc3fdfb06c9382bccccf4b6c706126a58ff5934083b3b2443

agent-installer-api-server

MGMT-18575, MGMT-18694, OCPBUGS-41820: Don’t require mapping for names matching physical interfaces (#6745) #6745
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator

OCPBUGS-38355: Bump openshift/api to get EFS volume metrics #274
OCPBUGS-38736: Some CSI driver containers missing terminationMessagePolicy #263
OCPBUGS-38815: add init container in EFS CSI controller pod #265
Full changelog

azure-file-csi-driver

OCPBUGS-38669: bump mount-utils to treat ENODEV error as corrupted mount #75
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-38933: install-status reflects day 2 services #8899
OCPBUGS-39239, OCPBUGS-39240: vSphere - If template is defined skip downloading #8926
OCPBUGS-41300: Azure CAPI: Set SecurityType as a Feature while creating Gallery Image #8990
OCPBUGS-41500: Bump extract-machine-os timout to 20m #8981
OCPBUGS-38963: IngressController subnet selection in AWS #8909
OCPBUGS-41542: Azure CAPI: Fix storage account and vhd container public access #8984
OCPBUGS-41539: Pick the next available IP address for internal LB #8980
OCPBUGS-38568: Azure: Add master and worker VM IPs to both the backend pools API LoadBalancer #8968
OCPBUGS-39545, OCPBUGS-39546, OCPBUGS-39547: update vault version to 1.13.10 #8954
OCPBUGS-38568: Azure CAPI: Add check for APIServer OperatorPublishingStrategy #8870
OCPBUGS-41283: update RHCOS 4.17 bootimage metadata to 417.94.202408270355-0 #8975
OCPBUGS-39495: capi/aws/byo-vpc/multi-cidr: fix group rules #8952
OCPBUGS-39433: dropping this warning as the move from terraform is transparent to the end user #8950
OCPBUGS-38752: Remove firewall rules created by CAPG #8948
OCPBUGS-38738: pkg/infrastructure/azure: set correct cloud for BYO vnet #8972
OCPBUGS-39308: Fix to validation for GCP pre-created ServiceAccount #8931
OCPBUGS-39467: Enable TLS for virtual media in initial ironic deployment #8947
OCPBUGS-39092: Use infrastructure resource to retrieve platform type #8914
OCPBUGS-38934: failed to install Nutanix OCP 4.16 cluster with DHCP network #8900
OCPBUGS-38841: ic: validate release arch is compatible with cluster arch #8895
OCPBUGS-38600: GCP Global Address failed to destroy #8884
OCPBUGS-38616: incorrect folder gen, workaround govmomi vm folder path bug #8867
OCPBUGS-39002: Add new disk types GCP Control Plane nodes #8903
OCPBUGS-38301: upi/aws: update lambda runtime python version #8896
OCPBUGS-38832: aws: validate public-only subnets configs #8893
OCPBUGS-38497: vsphere, if secureboot is enabled, disable it in the template #8841
OCPBUGS-38560: import failure when esxi config is not the same in the cluster #8857
OCPBUGS-38604: Updated powercli configuration to allow multi vcenters #8865
OCPBUGS-38738: CAPZ USGovernmentCloud fixes #8885
OCPBUGS-38534: Resource deletion is holding up deletion process #8849
OCPBUGS-38677: upstream capv bug causes session timeout #8874
OCPBUGS-38246: Add roles needed for shared VPC #8866
OCPBUGS-38692: aws: add support for clusters with public-only subnets #8878
OCPBUGS-38700: pkg/infrastructure/azure: limit storage account to 24 characters or less #8879
OCPBUGS-38602: pkg/asset/machines: fix Azure zones #8862
OCPBUGS-38730: Fix typo #8881
OCPBUGS-38488: AGENT-938: Enhance console logging to display node ISO expiry date during addNodes workflow #8839
OCPBUGS-38569: only allow a single network in failure domain topology #8859
OCPBUGS-38604: Enhanced vSphere UPI scripts for multi vcenter support #8863
Full changelog

baremetal-operator

OCPBUGS-39489: Disallow fetching secrets from namespaces different from the host’s one #377
OCPBUGS-38937: [OCP] Ability to disable agent power off after deployment #371
Full changelog

baremetal-runtimecfg

OCPBUGS-38423: Distinguish NotExist from nil for keepalived sentinel file errors. #329
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-39090: use proxy settings when required #1860
make the idle command’s scale update unconditional #1856
OCPBUGS-38720: Add examples for some oc adm policy commands #1850
Full changelog

cloud-credential-operator

OCPBUGS-41233: List secrets in batches to avoid api timeout #756
OCPBUGS-38952: Follow-up bug fixes for CCO-572 #751
OCPBUGS-38375: update google.golang.org/grpc v1.65.0 #747
Full changelog

cluster-authentication-operator

OCPBUGS-39021: increase oauth-apiserver failureThreshold #693
Full changelog

cluster-capi-operator

OCPBUGS-39309: manifests-gen: fix: readd missing metadata #198
Full changelog

cluster-config-api

OCPBUGS-41642: config/v1/types_cluster_version: Add v4.17 capability set #2023
OCPBUGS-34333: Updating ose-cluster-config-api-container image to be consistent with ART for 4.17 #1903
features: disable PSA #2018
OCPBUGS-38355: Promote AWSEFSDriverVolumeMetrics to GA #2020
OCPBUGS-39300: clean up openshift-sdn references in the API [4.17] #2008
OCPBUGS-38958: [4.17] add UserNamespacesSupport/ProcMountType to tech preview features #2011
OCPBUGS-38605: remove duplicate featuregate ‘ExternalRouteCertificate’ #2004
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-38643: Add 1 minute stabilisation for clusteroperators after rollout #321
Full changelog

cluster-etcd-operator

OCPBUGS-38454: prefer env var over hardcoding ciphers #1316
Full changelog

cluster-image-registry-operator

OCPBUGS-38538: Avoid Shared Access Key usage for Azure Storage Account when using Managed Identity based auth #1103
OCPBUGS-38885: pkg/resource: invoke update-ca-trust extract with –output #1097
IR-467, OCPBUGS-38379: Enable MSI override for ARO HCP #1088
Full changelog

cluster-ingress-operator

OCPBUGS-39220: Ingress operator status not degraded when canary route fails #1136
OCPBUGS-38646: Clear LB Status Parameters on LB Type Change #1131
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-41874: increase kube-apiserver failureThreshold #1733
OCPBUGS-34679: revert dev cert rotation 4.17 #1729
OCPBUGS-34942: Update APIRemovedInNextReleaseInUse for kube 1.30 / ocp 4.17 #1698
Full changelog

cluster-monitoring-operator

OCPBUGS-41580: Configure graceful shutdown for metrics-server (4.17 backport) #2463
OCPBUGS-39029: Backport #2441 for 4.17 #2445
Full changelog

cluster-network-operator

OCPBUGS-41674: Add configurable subnets while running hybrid-overlay-node binary #2497
OCPBUGS-41591: Set required-scc for openshift workloads #2490
OCPBUGS-39313: HyperShift: do not use antiaffinity on single replica control planes #2486
OCPBUGS-39387: add required-scc annotation to console-plugin deployment #2487
OCPBUGS-39425: Preload networking plugin locales #2489
OCPBUGS-38932: Deploy networking-console-plugin by CNO #2478
OCPBUGS-38932: Add networking-console-plugin image to release payload #2474
OCPBUGS-38654: [release-4.17] Verify that the codegen changes were commited #2475
Full changelog

cluster-node-tuning-operator

OCPBUGS-36431 Fix generated cpu mask for 512+ cpus (#1147) #1147
OCPBUGS-39321: E2E: Remove checking of reserved cpus in irqbalance file (#1148) #1148
E2E: Add test to verify cpuset.cpus.exclusive is writeable (#1146) #1146
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-41850: increase openshift-apiserver failureThreshold #589
Full changelog

cluster-policy-controller

OCPBUGS-41849: pkg/psalabelsyncer: switch to PSA version ‘latest’ #154
Full changelog

cluster-samples-operator

OCPBUGS-39071: Fix library-sync.sh to handle renames in unsupported samples #565
OCPBUGS-38927: Update Go version, API version and vendored libs to the same versions as in the openshift/api. #564
OCPBUGS-33899: Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.17 #547
Full changelog

cluster-storage-operator

OCPBUGS-38355: Bump openshift/api to get EFS volume metrics #501
OCPBUGS-38760: include azure perms for route table #503
OCPBUGS-39365: Use restricted-v2 SCC and remove runAsUser in Hypershift #498
Full changelog

console

OCPBUGS-41893: Disable Extension Catalog tech preview nav item #14289
OCPBUGS-39110: List of default Camel K event sources disappears when adding a custom event source #14214
OCPBUGS-41684: Fix access mode selection menu issue #14277
OCPBUGS-41350: Update Lightspeed logo to new standards #14245
OCPBUGS-41480: improve layout and findability of Hide Lightspeed pref… #14248
OCPBUGS-39453: Use vCenterCluster value from CM as primary resource #14235
OCPBUGS-39109: Need to allow blank for Project/namespace when setting SA Subject in ‘Project access tab’ #14213
OCPBUGS-38903: Networking section depends on networking-console-plugin #14185
OCPBUGS-38300: Add telemetry to Lightspeed console capability #14129
OCPBUGS-38591: Add support for GCP Workload Identity / Federated identity operator installs #14160
OCPBUGS-38427: fix bug where cluster version text appears black in da… #14145
OCPBUGS-38615: improve Lightspeed popup contents and navigation #14163
OCPBUGS-38395: A value submitted in From view is wrapped with single quotation after switching to Yaml view. #14141
OCPBUGS-38394: Unrelated readme opened when opening CodeReady workspaces from Quarkus using s2i quickstart #14140
OCPBUGS-38691: Modifying helm e2e test to fix CI issue #14169
OCPBUGS-38412: Values entered into the Instantiate Template form are automatically cleared #14143
OCPBUGS-38644: Add the signals correlation to the app launcher #14161
Full changelog

console-operator

OCPBUGS-38728: Get externalOrganizationID instead of the organizationID #926
OCPBUGS-36213: Vendor proper commit #928
Full changelog

docker-builder

OCPBUGS-41225: Prevent Build Inputs “Zip-Slip” #2
Full changelog

docker-registry

OCPBUGS-39040: pull upstream distribution changes to use a consistent multipart chunk size #409
Full changelog

hyperkube, pod

OCPBUGS-41638: UPSTREAM: <carry>: bump cadvisor version to fix missing network stats #2081
OCPBUGS-39014: Bump 1.30.4 #2062
OCPBUGS-38363: UPSTREAM: 126470: Move APIServingWithRoutine to alpha and disabled by default #2053
Full changelog

hypershift

NO-JIRA: chore(deps): update konflux references (release-4.17) #4682
OCPBUGS-41371: CPO oauth idp converter: resolve names before dialing #4681
OCPBUGS-38637: Use http dialer when dialing through proxy #4680
OSASINFRA-3572, OSASINFRA-3573: OpenStack backports for ingress #4644
OCPBUGS-39365: Update CSO deployment file #4655
OCPBUGS-39452: Fix multi-arch validation by prioritizing ReleaseImage check #4665
OCPBUGS-39419: handle version skewed NodePools that do not have rhel9 binaries #4662
OCPBUGS-39371: Fixed NodePool version validation #4657
OCPBUGS-39234: Set Image as mutable and trigger upgrades on Azure NodePool spec changes #4640
HOSTEDCP-1938: Remove saas template in 4.17 #4645
OCPBUGS-39225: copy image-registry AdditionalTrustedCA configmap into HC openshift-config #4637
OCPBUGS-39159: regroup KAS certs into public and private certs #4634
OCPBUGS-39102: Add networking-console-plugin image to CNO as an env var #4592
NO-JIRA: chore(deps): update konflux references (release-4.17) #4601
OCPBUGS-38967: [release-4.17] Remove go workspaces #4620
OCPBUGS-38941: copy oapi ca-trust recursively when building trust anchor #4614
HOSTEDCP-1861: cpo: separate KAS cert into internal and external #4595
OCPBUGS-38833: [Azure] Use infraID from infra-json if provided #4590
NO-JIRA: Fix KubeVirtNodesLiveMigratable condition for NodePools with 0 replicas #4588
HOSTEDCP-1764: retrieve registryOverrides when ImageStream is not ava… #4540
NO-JIRA: Update quay.io/openshift/origin-base Docker tag to v4.16 (release-4.17) #4573
NO-JIRA: Update golang Docker tag to v1.23 (release-4.17) #4571
NO-JIRA: Update Konflux references (release-4.17) #4570
OCPBUGS-38410: bump CPO base image to use 4.17:base-rhel9 #4544
OCPBUGS-38637: HTTPS proxy: do not proxy communication to cloud providers #4577
Full changelog

insights-operator

OCPBUGS-39393: collect some nmstate customresources (#986) (#989) #986
OCPBUGS-32233: Not able to enable repositories during entitled build in OCP Cluster on IBM-Z (#991) #991
Full changelog

ironic

OCPBUGS-41783: Set node “alive” when inspection finished #578
OCPBUGS-39380: Include fixes for CVE-2024-44082 into 4.17 #576
OCPBUGS-37365: Update log statement to avoid logging entire node object #573
OCPBUGS-38511: set min version for python3-webob #552
OCPBUGS-38784: Update sushy to include Huwaei Fix ( Duplicate PR ) #572
OCPBUGS-39013: Bump ironic-lib to fix utf8 decoding issue #568
NO-ISSUE: fix scos and fcos dockerfiles to remove ironic-inspector #567
OCPBUGS-38465: update sushy to pick up the RAID fix #545
OCPBUGS-38481: Update root image #546
Full changelog

ironic-agent

OCPBUGS-39380: Include fixes for CVE-2024-44082 into 4.17 #160
OCPBUGS-38511: set webob and bump werkzeug #148
OCPBUGS-38481: Update root image #145
Full changelog

kube-metrics-server

OCPBUGS-41580: Wire server run options to flags. #35
Full changelog

kube-rbac-proxy

OCPBUGS-34057: Updating kube-rbac-proxy-container image to be consistent with ART for 4.17 #99
Full changelog

machine-api-operator

OCPBUGS-38868: Updates message verbs to use %q where appropriate #1278
Full changelog

machine-config-operator

OCPBUGS-41802: When newly built images rolled out, the update progress is not displaying correctly (went 0 –> 3) #4583
OCPBUGS-41688: Add alert for users of deprecating the Image Registry workaround #4581
OCPBUGS-41312: CVE-2024-3727 ose-machine-config-operator-container: containers/image: digest type does not guarantee valid type #4564
OCPBUGS-38868: Updates message verbs to use %q where appropriate #4547
OCPBUGS-38770: SCC-pinning for openshift workloads #4542
OCPBUGS-38846: Machine-config daemon ListPools panic during tech-preview CI runs #4546
OCPBUGS-38415: Give keepalived-monitor necessary capabilities #4532
OCPNODE-2482: Enable CRI-O internal repair feature as the default #4535
Full changelog

monitoring-plugin

NO-JIRA: Update query-browser to not use setState #166
NO-JIRA: upgrade to go 1.22 fixing the z version #163
NO-JIRA: downgrade to go 1.21 to be able to use cachito #161
NO-JIRA: add FIPS compliant flags and env vars #159
NO-JIRA: fix cachito web folder #152
NO-JIRA: Use DNF and go based image in Dockerfile #155
NO-JIRA: fix command chain for art image #150
NO-JIRA: fix cachito pem file location #147
NO-JIRA: fix cachito target folder #145
NO-JIRA: Fix art image cachito path for yarn lock #143
OU-436: Add Golang backend #128
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-41817: always attempt a live pod get on miss to confirm its really not there #248
Full changelog

oauth-server

OCPBUGS-34248: Updating oauth-server-container image to be consistent with ART for 4.17 #149
Full changelog

oc-mirror

OCPBUGS-41503: [release-4.17] oc-mirror throws error when performing delete operation with –generate (#922) #922
OCPBUGS-41168: [release-4.17] Should not panic when specifying wrong loglevel for oc-mirror (#918) #918
OCPBUGS-37950: Bug fix when kubevirt image not found (#914) #914
OCPBUGS-38469: unable to build graph image in enclave environment (#912) #912
OCPBUGS-38396: use platform.release when set (#910) #910
Full changelog

openshift-controller-manager

OCPBUGS-39167: replaces deprecated square/go-jose wtih go-jose/go-jose #328
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-41549: [4.17] adds paginating lister for evaluating CRs’ upgrade fitness versus new CRDs. #860
OCPBUGS-41498: [release-4.17] Fix e2e flake: upgrade CRD with deprecated version #858
OCPBUGS-39574: (fix) registry pods do not come up again after node failure (#3366) #855
OCPBUGS-39458: add optional schema migrations; default to olm.bundle.object instead of olm.csv.metadata (#1384) #851
Full changelog

operator-marketplace

OCPBUGS-39297: Replace 4.16 image references with 4.17 #573
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-39406, SDN-4919: Downstream Merge 28th August #2283
SDN-4919: Downstream Merge August 22nd #2277
SDN-4919: Downstream Merge 20th August #2274
OCPBUGS-38267, OCPBUGS-38653, OCPBUGS-38693: Downstream Merge 14th August 2024 #2265
Full changelog

prometheus

OCPBUGS-38690: Restore Prometheus functionality to accept samples with different timestamps from the same series in a single scrape. #221
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-38398: feat: sync proxy settings in Alertmanager configuration #296
Full changelog

tests

OCPBUGS-39134: Bump timeout for the pod-network-service endpoints check #29051
OCPBUGS-38674: add unexpected ready for monitor tests #29021
OCPBUGS-39254: Change Operator Installed for Smoke Test #29055
OCPBUGS-39031: kube-apiserver rollout: wait for stability before exiting #29047
OCPBUGS-38446: NetworkSegmentation tests: fix the IPv6 node IP detection #29005
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-37661: Bump otelgrpc to v0.53.0 #74
Full changelog

vsphere-csi-driver-operator

OCPBUGS-38442: Restart CSI driver controller pod on config change #247
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github