4.17.32

Download the installer for your operating system or run

oc adm release extract --tools registry.ci.openshift.org/ocp/release:4.17.32

Qualifiers (status api):

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.17-e2e-aws-ovn-serial
- aws-ovn-upgrade-4.17-micro Succeeded periodic-ci-openshift-release-main-ci-4.17-e2e-aws-ovn-upgrade
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-main-ci-4.17-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.17-micro Succeeded (2 retries) periodic-ci-openshift-release-main-ci-4.17-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.17-fips-payload-scan
- gcp-ovn-rt-upgrade-4.17-minor Succeeded periodic-ci-openshift-release-main-ci-4.17-upgrade-from-stable-4.16-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.17 Succeeded periodic-ci-openshift-hypershift-release-4.17-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.17-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.16.11, 4.16.12, 4.16.13, 4.16.14, 4.16.15, 4.16.16, 4.16.17, 4.16.18, 4.16.19, 4.16.20, 4.16.24, 4.16.25, 4.16.26, 4.16.27, 4.16.28, 4.16.29, 4.16.30, 4.16.32, 4.16.33, 4.16.34, 4.16.35, 4.16.37, 4.16.38, 4.17.10, 4.17.12, 4.17.13, 4.17.14, 4.17.15, 4.17.16, 4.17.17, 4.17.19, 4.17.20, 4.17.21, 4.17.22, 4.17.23, 4.17.24, 4.17.25, 4.17.26, 4.17.27, 4.17.28, 4.17.3, 4.17.4, 4.17.6, 4.17.7, 4.17.8, 4.17.9

4.17.31 (changes) - S S F F S S S
4.17.30 (changes) - Success
4.17.29 (changes) - Failed
4.17.18 (changes) - Success
4.17.11 - Failed
4.17.5 (changes) - Success
4.17.2 (changes) - Success
4.17.1 (changes) - Success
4.17.0 (changes) - Failed
4.16.41 (changes) - Success Success
4.16.40 (changes) - Success
4.16.39 (changes) - Failed
4.16.36 (changes) - Success
4.16.23 (changes) - Failed
4.16.21 (changes) - Success
4.16.10 (changes) - Success
4.16.9 (changes) - Success
4.16.8 (changes) - Failed
4.16.0-0.nightly-2025-05-28-160637 (changes) - Success

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.17.11

Created: 2025-05-29 08:51:01 +0000 UTC

Image Digest: sha256:0c2421a241e95f56895906885e7f7e53cb1520ee6a82db5cdeea98f5f65457d7

Components

Kubectl 1.30.5
Kubernetes upgraded from 1.30.7 to 1.30.12
Kubernetes Tests upgraded from 1.30.0 to 1.30.12
Red Hat Enterprise Linux CoreOS upgraded from 417.94.202412250812-0 to 417.94.202505250306-0 (diff)

Removed images

ovirt-machine-controllers

Rebuilt images without code change

agent-installer-utils git 3b99303b sha256:02b9f111bbf98bb9224b8fa52c15bd306061ddf6b40cb79bfe75b0acd14f59ee
apiserver-network-proxy git cd426416 sha256:99746355cb1058e918a7d10e0ce9c2ea5df14220583b27727cb1771e75b83ac0
aws-cloud-controller-manager git 8c77f418 sha256:67e73c8c4822389417ab32fea51f693c5333d4beaeab283c0c06de4998fcaf9b
aws-ebs-csi-driver git 2bb5b316 sha256:05d698ae929f639609503cf302052776cf6326ee0400ef09d519416e265fb8d8
aws-kms-encryption-provider git 9d401670 sha256:920cc169b47649760745bd80e6c9dd968ae01d4b03f8d295bd8ffea3848182b1
aws-machine-controllers git b41b8c8f sha256:18cd2eaef54993cd012c71001f926ae1a04a8322d85db0cae99b642bd30c9730
azure-cloud-controller-manager git 626ecd1c sha256:a75b4604e1acc10a86b797dafd2efaf55b0f78c6a948c78de8fbb2145d67e6b7
azure-cloud-node-manager git 626ecd1c sha256:7009711d033e16a78e42711c561b38463c19402fae3179e85ce22f04fad3b5ec
azure-cluster-api-controllers git d359bfe5 sha256:90a92ffdd93577d9006a72fd22fc6955f89321d1987db8bd6ec424fffa18d943
azure-disk-csi-driver git a544f30b sha256:69df19f21ee77f7ac291bb20ee0931725f4d081e30f24701cd9db8b85394cfb0
azure-file-csi-driver git 9f4c38c2 sha256:1da3e9fa69b8ad1f718ae31548380ed617df42921e407dc306dd2773c5692ae9
cluster-autoscaler-operator git ea4a8878 sha256:6586a77f57fc30fa236f5431cfa373c5f4497d42f739ac3710529e020d45e9d5
cluster-bootstrap git 95dd9129 sha256:63a78afdd21279f3e8c56079724a3e9d6f2e4eaeb122b857c51dee7743d73003
cluster-capi-controllers git 77ef4fc5 sha256:a3143b26cf65d267647c579d836a5e8a79b40cff921a8f86f3108a03ec189d8e
cluster-cloud-controller-manager-operator git 32fd8399 sha256:e499299bd9832a9ca6e8c8fec85266b5d797ce9273b8696a49f2bcbcf471e272
cluster-config-operator git 0dc084f4 sha256:0e95a94b1d492d8100687b4cc679ee5ed6d934828f28a20fa7c14787421e3c1b
cluster-control-plane-machine-set-operator git f7e01c2f sha256:e72ea380704520457f2919e7531b641ac2e72dc72f2ddc91e248e5c11628773e
cluster-csi-snapshot-controller-operator git ffba005b sha256:1d25a025ca4fb46dc5da4efb261022b08609f48eaa4be0be6e00a0dec4d3bd92
cluster-kube-cluster-api-operator git aed5f6c7 sha256:9956ef2df3d24449f8c7dbb52b51c2fae0f12c79b1915f6991e58ce2a0fffda8
cluster-kube-controller-manager-operator git 0a9ed573 sha256:3d5a8862bbb8924b7f0bbacb2a319d32b9e49af0ff1213c2a9e8a573aa603f9c
cluster-kube-scheduler-operator git 98ca953b sha256:2d6d59f0787794b7dc8d715616f747bebea7a9e795d43cf712a9422bbdcf8f5a
cluster-kube-storage-version-migrator-operator git ab40b611 sha256:de3a744052188bae718b41a1478ac6ce7a7959902ba4a6a974c0aa97096b8b1d
cluster-monitoring-operator git ff3a4f02 sha256:049de1a2488677344aacbbea8282d29a8d8853365cfeed19de8c781967aa56c7
cluster-olm-operator git e31b7775 sha256:35cf45457cd85a72f742eeae003c3e05c03643fe9620c4479242113fde9b9019
cluster-openshift-apiserver-operator git 2b2ba3be sha256:b702ad8596bbadd0d17e059ac2184bb420fb1d622d7092ae5fcc80a9dc962a2f
cluster-policy-controller git 7209e90d sha256:53cc81738d3fe9afbb4e97a7a2c52d272b2860537c2c934bf97c0a88ecf66386
cluster-update-keys git 2ce31fc5 sha256:cd11e40f2e673d52b24c2f55358691f2140e63eb33c19ca4c393327181aabb7d
configmap-reloader git b877222b sha256:0570280ea26cf1de801398a0fe6b4b8a9f313e49a21a6836c9fba3897d70ac16
coredns git d3b441c1 sha256:eff7c67c6ab14420f49abe8bf9d8226c8b58ceb8fd02fafc63c7a8bdcad11472
csi-driver-manila-operator git efc99a2a sha256:7737a50899696cd0276ef8ea8540324e609c71c71d6d814681d834325ea40a23
csi-driver-nfs git 6a72c254 sha256:ce78c738df7626a180050fd39ab047bbdd04aa312d7a87317ad36cce14d2b397
csi-driver-shared-resource git 027a8c4e sha256:f9d2f56053754fe072e23495e304049ccdf15453c734f992f6547b5a22914c02
csi-driver-shared-resource-operator git c095a1f2 sha256:7e1adf5fe5b862ad108fa90604bf2d75b96e79ad2e327112910fdd62f3578dba
csi-driver-shared-resource-webhook git 027a8c4e sha256:6f7974802e1f50756d6f937fd23ea094ad136648749c9d57234fca23738930a8
csi-external-attacher git c3fe8e2e sha256:d860980b1a6d9d5bae7218a2c6694ebed87cec3cc7b4b0bc0c800b3d2589ae28
csi-external-provisioner git fe460e56 sha256:eff115bfe1371b3fbd8bc15325c8bdfe912e67e4888416b8431e29a1b0a74d37
csi-external-resizer git ab87a938 sha256:c4aa2ab4c9caf0132eae5f3917acc3cdaa23022367d29a3ff2f9a118edb9c932
csi-external-snapshotter git aa558ca4 sha256:e753f61147706a8e4ed77b2834273c89eae3ccb1f0b62f99d88cc67f29f9359c
csi-livenessprobe git 075ebcdc sha256:584dc09d9977042f0bd1496f6f71fbd00f86ef2d3b708810a8cb565d9a7be315
csi-node-driver-registrar git 436a1f33 sha256:eb532e84a6fcd1814ba405842bd6f9f0003cda5c4774d492507adb7824d717bf
csi-snapshot-controller git aa558ca4 sha256:89a35b26101b91b66025f498b3e72bef2a5452575c4491fa60c8d8739f2f5153
csi-snapshot-validation-webhook git aa558ca4 sha256:a57a5a09cf325bd08775915dfa8cdffc3c092b6bef7cc24328e5eabd8f5b7580
driver-toolkit git 859518f6 sha256:d39bf09e44b81e1a0fdd8cc86fc73c22afe6a199f239c9247c57e63ad969e6b3
egress-router-cni git 3193a756 sha256:f48c26ae9d1da14d547a7270978909be5febebfac684d6360615cff160f7b634
gcp-cloud-controller-manager git 8ce997d7 sha256:030c278c6c0a2080313686eef46af576745acecb3e49fba7bbedbc45b9e56127
gcp-cluster-api-controllers git 9c561f2d sha256:e125cc2b10dbd68be5aabf792d5a3b10e1639aca042c476aa63b7bd1a270333e
gcp-pd-csi-driver git c770b412 sha256:cc0577793e1f1dbc61bd495f993c42d04ffb24e2c5185f1a2fb9388393647023
gcp-pd-csi-driver-operator git c23b064f sha256:13e3befdd26051516637ea54d74fd2672aba9a323ae8183b266886dda1a8962b
gcp-workload-identity-federation-webhook git 08579e9f sha256:afa6b81cf6541880dbdeab41bdc2797f83a3c2ed205f89acd88edce7e83db61f
ibm-cloud-controller-manager git ad8f7eb0 sha256:101253c2f9cf236b1abdb6bd6946ee4d9ab6f8c49a02ac6fda67e336371a4293
ibm-vpc-block-csi-driver-operator git 8443d86b sha256:03d2ac5f21c066fc9d82d25c4a37f3a5c367ee3d14567f67c44445db65f3592b
ironic-machine-os-downloader git b698ea3e sha256:8c449068da529e6e17d0ca346dc2223964b1273ae58e3b959167d8be7a270279
keepalived-ipfailover git e3879e9e sha256:6aad044c920f5e1a6ea0e487d59a31c1e522f87353377af881d81bd54b6daf59
kube-metrics-server git e870adbd sha256:677c908cba5f2be0650693c1d271ed0be75a7572f4b3a7238057e9b235caaead
kube-proxy git dee082de sha256:d46e2cb174eeb26571e2259872596536eca5382e3fb88fbfc91715a6ded54b36
kube-rbac-proxy git 7718265c sha256:68fa6a82718cc4106c7c664700f8134cba0f3408bdfac38582f73196e9e92c5c
kube-state-metrics git 462e63f6 sha256:461ef7eb8c1d667a0f3b980f556630d48ff82e77227cf6c9060de7cba08cf97e
kube-storage-version-migrator git 34fafc04 sha256:d31a4e58983a06d6d91fde3fb05c8eb797ad4c1c076296cd0689848aaa0bb0b6
kubevirt-cloud-controller-manager git 3f4542ec sha256:b7a87c633c905b9932c05b505551a3d9dca1e4b4a9bb669231837d60155632ba
libvirt-machine-controllers git a336f0b5 sha256:37b2ecb621bdf612e493f7331af1c2c107ffd268c1088d205a5d2515af8364b7
machine-image-customization-controller git 74bee374 sha256:5b6a547dabddb8b93d444b333090adfc432191e428bb55ea749082cc1e6bc8d1
multus-admission-controller git 076f0caa sha256:6ab434aebd629b64474c3d943b64e078353b1d9bda59a40b3da0ff3593bdd082
multus-networkpolicy git 7d01ea1c sha256:f83e8f51abec6809b803691d744f6e4aadef8816c1140806890e3c57a0e809d7
multus-route-override-cni git 391c1b03 sha256:50b9eacda6ce49ad55c24b5dfdde7913517bfe49fb6a6cc8c7b9893fd68d9c49
network-interface-bond-cni git 8630f336 sha256:472b11f7731dc5f47d709443448b8288291d1c3b0ff9068cbf16156c7c7d19c6
network-metrics-daemon git ddb486ae sha256:1fe998d4d132177e6f986e94a87f50c7307ec962f641c1bbc876e7a7c8b26630
network-tools git 8e170b4f sha256:af1b51bc522cf17a2d6db44b62de3f0dfee9f35fa87ab1287d3f0beacd5f0e2c
nutanix-cloud-controller-manager git c9f6cd1f sha256:7641a9ab3982b03b15c338332cd07c7a0300cb8e4924fe9a3ac01ddbbc777520
oauth-server git 5a70bcef sha256:afbd184703651fd6271cb7476710c74a6ea66cf07a675dfcb69174c6b0d4eda1
olm-catalogd git c740e056 sha256:ed750173b0c8a40a5b7c5533bd8a2b64aa3b3cc223efff145553ace067135078
openshift-state-metrics git 1e963eb5 sha256:6a116403771108b00a7308d23088ee4cbec31ae4b8d7eecf931aec26696d2cb6
openstack-cinder-csi-driver-operator git f89b6dbc sha256:97d260b1078ae07e5249d4d5ba6c83c7ac991089f090fcd9e2d67cf8cc8251ff
openstack-cluster-api-controllers git 23512b67 sha256:46bf5e2b2345f46f2449ff36410a4a706bf69d84f554fe5c8ad0cccb4687f3c4
openstack-machine-api-provider git 68971874 sha256:232a2f9e0c92d04c4a80f03a824246d47683fdaa80e608c9a5ce3d3148d3ab09
ovirt-csi-driver git 1db726a9 sha256:d08cfa9c0c7fc0b3e6ed21c19d0408f0263990148e599b04ec0a3c1b55d7ef13
ovirt-csi-driver-operator git 0feae256 sha256:c590890a67344c938636d7027b475621db84c5411fd06a95560fc4d645349bd4
powervs-block-csi-driver git aaa6afa9 sha256:b278174c56caedad908ddc8176d2644f07196b253077b1159826b7eda76d6db1
powervs-block-csi-driver-operator git f6f037c5 sha256:8cb6bc4fa07dc28a606ac335874e7e27e2b0548f5f6ac484ad09d75f8d5628b2
powervs-cloud-controller-manager git bd3d72e5 sha256:f6198644807fb4daf18664524d354a50d88c22f18879aaf5f0df18baefe6d813
prom-label-proxy git d80e9044 sha256:595ca1f90efbc2c70cfa03c08ccfdbc6b88a440660bf43277c372dc465233a4d
prometheus-alertmanager git d7c1a7c6 sha256:7bf113b8d67b8f29154eb5cb4d8e01580709fa04eb3416de32c6f38ad18ed3b7
prometheus-node-exporter git d88fd69b sha256:f950eebd5f11b001524c8419f43ea518bef87fdf177cfa305563f52c7500db38
rhel-coreos sha256:7448a29462a1608c07f50764cd3801f975544c3ce7163f5e8e5558cb6df1c88d
rhel-coreos-extensions sha256:bd292f3f10c360075c9ee42bd6cf3632c18730c873c121a2d94b584ced12e951
telemeter git e2b25245 sha256:c25706e5b6e774660ae81262f455ddeb2aa4bf6ff433b4b3b19cfd9011449e4e
thanos git 5b567365 sha256:1c39a4323e724db79425e567f6e38bf7c8fbff2a54dac7cf38109a3dd8a8944c
vsphere-cloud-controller-manager git 097d823b sha256:6d36611d7df13fd0e1de72bf5539898584c58f8c8f624f05d952d7d98740bfe9
vsphere-cluster-api-controllers git 1661cc3f sha256:f3f05447130ceb1c9d6355f1ef2f2f181e13ca9df4c72650120cce23fab640b5
vsphere-csi-driver git 039ee368 sha256:ae2654993710d273bf673d17290d71e8c5beb0eccd3fa2ce6d0e161baaf11a2a
vsphere-csi-driver-syncer git 039ee368 sha256:d5237dcb4a9f3ccd54ae7817ca0e1d529f69398bafe90c4525fdc28eec6a0787
vsphere-problem-detector git cd0df71f sha256:76600235c68063a30c911aaa8b96bc7615522ff6570a319182c1cd09585fd53f

agent-installer-api-server

OCPBUGS-51230: Revert go-jose from v4.0.5 to v0.3.04 (#7605) #7605
OCPBUGS-51230: Bump github.com/go-jose/go-jose/v4 to v4.0.5 in release-4.17 (#7574) #7574
OCPBUGS-54402: Bump go-jwt to 4.5.2 to fix CVE-30204 (#7484) #7484
OCPBUGS-48390: Bump moby from v26.0.0 to v27.2.1 (#7188) #7188
MGMT-19537: Bump golang.org/x/net to 0.33.0 (#7129) #7129
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.17 (#1087) #1087
OCPBUGS-53719: Bump jwt to 4.5.2 in release-4.17 (#1086) #1086
abi: let the bootstrap waiting for workers before rebooting (#1028) #1028
OCPBUGS-47493: MGMT-19537: Bump golang.org/x/net to 0.33.0 (#989) #989
Full changelog

agent-installer-node-agent

OCPBUGS-52994: Update to latest ghw version (#986) #986
Updating ose-agent-installer-node-agent-container image to be consistent with ART for 4.17 (#798) #798
OCPBUGS-53711: Bump jwt to 4.5.2 in release-4.17 (#964) #964
NO-ISSUE: Increase image pull timeout during install (#922) #922
MGMT-19537: Bump golang.org/x/net to 0.33.0 (#873) #873
Full changelog

aws-cluster-api-controllers

OCPBUGS-53727: bump to github.com/golang-jwt/jwt/v4@v4.5.2 #546
OCPBUGS-51309: UPSTREAM: 5339: Bump glog for recent fixes #539
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator

OCPBUGS-46512: remove EFS driver metrics #350
OCPBUGS-44974: Set separate secrets for file and disk config on HyperShift #331
Full changelog

aws-pod-identity-webhook

OCPBUGS-51232: github.com/go-jose/go-jose/v4 v4.0.5 #202
Full changelog

azure-kms-encryption-provider

OCPBUGS-53495: bump golang-jwt v4 #12
Full changelog

azure-machine-controllers

OCPBUGS-56655: Fix failure when attempting to modify immutable availabilitySet #152
OCPBUGS-55729: Update eviction policy for Spot VMs from Deallocate to Delete #140
OCPBUGS-54393: Re-reconcile machine on NIC provisioning failure #136
OCPBUGS-52359: Remove unused vnet package #130
OCPBUGS-50017: dynamically setting the amount of fault domains #127
Full changelog

azure-workload-identity-webhook

OCPBUGS-53799: github.com/golang-jwt/jwt/v4 v4.5.2 #32
OCPBUGS-51234: github.com/go-jose/go-jose/v4 v4.0.5 #28
Full changelog

baremetal-cluster-api-controllers

OCPBUGS-47049: Bump x/net to 0.33.0 #32
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-55224: Fix Load balancer IP setup #9675
OCPBUGS-51116: update resolv.conf every time on bootstrap node #9504
OCPBUGS-51210: Fixes panic during GCP tags fetch due to unstable network #9512
OCPBUGS-46375: Allow spaces in the aws tags [release-4.17] #9315
OCPBUGS-54357: IBMCloud: Move to IBM TF openshift fork #9613
OCPBUGS-53378: Remove error logging when determining image arch #9581
OCPBUGS-53459: aws: fix NLB creation in secret regions #9071
OCPBUGS-52961: Remove tmp directory used for agent pxe files #9552
OCPBUGS-43528: Prevent race with provisioning-interface service #9110
OCPBUGS-44058: Log correct hostname for validation status #9162
OCPBUGS-50967: PowerVS: destroy dhcp hack #9494
OCPBUGS-50846: OCPBUGS-50702: [release-4.17] MGMT-19771: Convert IDS to proper IDMS manifest #9470
OCPBUGS-50876: correct typo #9484
OCPBUGS-49975: aws/edge/byovpc: subnets tag kube cluster tag to shared #9445
OCPBUGS-48761: Update RHCOS 4.17 bootimage metadata to 417.94.202501301529-0 #9448
OCPBUGS-49993: Disable IP Forwarding for CAPG Machines #9446
OCPBUGS-41300: Azure: Update SecurityType passed in at Image creation #9409
OCPBUGS-49362: [Nutanix] Installation failed with timeout when uploading images to PC #9406
OCPBUGS-48645: azure: use separate /var to avoid growfs timeouts #9381
OCPBUGS-45340: move GCP zone filtering client-side #9264
OCPBUGS-48257: remove the types which failed by RHEL-59521 and add the new gpu vm type #9354
OCPBUGS-45813: Remove unused variable from ASH arm template 06_workers.json #9285
OCPBUGS-48359: Allow more time for Service Account Creation #9362
OCPBUGS-45344: support additionalNTPSources in node-joiner tool #9265
OCPBUGS-48119: Always set AllowCrossTenantReplication parameter to false #9346
OCPBUGS-46432: Power VS: Create region-zone-sysType hierarchy #9319
Full changelog

baremetal-machine-controllers

OCPBUGS-46646: Bump x/net to 0.33.0 #225
Full changelog

baremetal-operator

OCPBUGS-53325: BMO can expose any secret via BMCEventSubscription CRD #406
OCPBUGS-42387: Remove dataImage finalizer if BMH is missing #390
OCPBUGS-49701: Handle HFC for non-redfish HW #395
Full changelog

baremetal-runtimecfg

OCPBUGS-48766: Extend haproxy-monitor fall time #340
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-49607: Address golang.org/x/* CVEs #1962
OCPBUGS-50984: Add HOST env var in oc debug for sos report collects more #1976
OCPBUGS-49605: Address github.com/docker/docker CVE #1968
OCPBUGS-45344: additional rbac policy rules #1937
Full changelog

cloud-credential-operator

OCPBUGS-53415: github.com/golang/glog v1.2.4 #842
OCPBUGS-53823: update github.com/golang-jwt/jwt #838
OCPBUGS-51548: Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #828
OCPBUGS-51238: github.com/go-jose/go-jose/v4 v4.0.5 #825
OCPBUGS-47071: golang.org/x/net v0.33.0 #804
Full changelog

cloud-network-config-controller

OCPBUGS-56257: Increase API call timeout to 30 second #171
Full changelog

cluster-authentication-operator

OCPBUGS-54580: Avoid duplicate OAuth client creation #765
Full changelog

cluster-autoscaler

OCPBUGS-54325: improve replica counting and decrease target size behavior #352
OCPBUGS-48606: UPSTREAM: <carry>: 🐛(metrics) Initialize metrics for autoscaler errors, scale events, and pod evictions #337
Full changelog

cluster-baremetal-operator

OCPBUGS-54542: Add missing relatedObjects #469
Full changelog

cluster-capi-operator

OCPBUGS-48493: fix: always update clusteroperator status versions when differing #250
Full changelog

cluster-config-api

OCPBUGS-49702: Add IdleConnectionTerminationPolicy field to IngressControllerSpec #2186
OCPBUGS-39130: Added checks to prevent vCenters from changing after install past 1 vCenter #2014
Full changelog

cluster-dns-operator

OCPBUGS-52497: [release-4.17] Add runbook_url for CoreDNSErrorsHigh #430
Full changelog

cluster-etcd-operator

OCPBUGS-53511: fix CVE-2025-30204 #1414
Full changelog

cluster-image-registry-operator

OCPBUGS-51604: bump golang.org/x/oauth2 #1209
OCPBUGS-51103: ensure that storage names don’t end in dashes #1180
Full changelog

cluster-ingress-operator

OCPBUGS-49702: Add support for IdleConnectionTerminationPolicy #1223
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-50516: Increase waitForFallbackDegradedConditionTimeout #1803
Full changelog

cluster-machine-approver

OCPBUGS-48155: Fix race condition in CO status controller test #266
Full changelog

cluster-network-operator

OCPBUGS-55033: Add IPv6 NGINX configuration #2689
OCPBUGS-52951: Unexpected Behavior During Cluster Upgrade for the ovn-ipsec-host pods #2654
OCPBUGS-49816: ovn-k, rbac: Enable users read & modify UserDefinedNetwork CRs #2655
OCPBUGS-49961: Update egressfirewall CRD to be consistent with ovn-kubernetes repo #2642
: OCPBUGS-44863: Add nodeslicepool #2574
OCPBUGS-44807: ovn-k, cudn: Add missing permissions to ovnkube-node #2575
Full changelog

cluster-node-tuning-operator

use ROLE_WORKER_CNF environment variable to determine mcp name (#1290) #1290
Add missing Polarion test case id (#1288) #1288
e2e: tuned degraded test fix (#1259) #1259
OCPBUGS-48213: [release-4.17][manual] Adjust Workload Hints test cases based on Intel or AMD (#1277) #1277
PPC: correct EnableHardwareTuning flag value (#1271) #1271
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-47770: Add team members to the OWNERS file #375
Full changelog

cluster-samples-operator

OCPBUGS-55800: only update LastTransitionTime if operator status change #640
OCPBUGS-55795: Adding filter to clusterOperatorInformerEventHandler #639
OCPBUGS-55894: Samples Operator should sort failing image imports #641
OCPBUGS-55042: Adding mutex to func createSamples on handler.go #632
OCPBUGS-54362: add rhdmalone to owners #619
OCPBUGS-48786: add shannon and aroyoredhat as owners #595
Full changelog

cluster-storage-operator

OCPBUGS-52222: fix Vsphere cluster Storage operator in Unavailable state #560
Full changelog

cluster-version-operator

OCPBUGS-50589: Set openshift.io/required-scc: privileged annotation in version pods #1154
Full changelog

console

OCPBUGS-55756: update the Deployment pod on change in imageStream #15022
OCPBUGS-56238: Remove the devconsole backend common internet proxy and replace it with dedicated ones #15049
OCPBUGS-55447: Authenticate user token in openshift Authenticate func #15010
OCPBUGS-55415: fix bug where operator appears twice #15002
OCPBUGS-55202: Do not load CSRs if user does not have permissions #14985
OCPBUGS-52999: Pipeline visualisation shows all tasks as Failed and after that goes to Running state #14862
OCPBUGS-53168: Remove logoutOpenShift method call #14883
OCPBUGS-51277: Fix JSON annotation parsing issue and harden related code #14795
OCPBUGS-53086: Update the monitoring topic used by the console team #14871
OCPBUGS-52205: Show Observe section without PROMETHEUS and MONITORING flags #14811
OCPBUGS-51292: fix run time error when no completed version exists #14796
OCPBUGS-51126: Fix alert rule link to alert in dev perspective #14785
OCPBUGS-49795: ‘create a Project’ button on Getting started page doesn’t work #14714
OCPBUGS-39602: Set default build option as BUILDS for Builder Image sample #14241
OCPBUGS-45740: Fix Function Import: An error occurred Cannot read properties of undefined (reading ‘filter’) #14595
OCPBUGS-45625: use default StorageClass for ServerlessFunction pipelineVolumeClaimTemplate #14589
OCPBUGS-41596: No need to supply ‘User workload notifications’ option on ‘User Preference’ page for normal user #14265
OCPBUGS-44220: disable flaking and change pre-condition test for knative e2e #14467
OCPBUGS-43751: Added token to proxy header #14430
OCPBUGS-48161: ERROR in search tool: Cannot read properties of undefined (reading ‘state’) #14667
OCPBUGS-48227: fix navigation from non-General User Preference tab to… #14674
OCPBUGS-41672: Update vendor imports to include all PatternFly components #14272
OCPBUGS-46344: OCP web console show pod status as Init:0/1 after using Native sidecars #14616
OCPBUGS-47497: Getting Oh no, something went wrong error when trying to install operator. #14645
OCPBUGS-43673: Disable GQL introspection #14640
Full changelog

console-operator

OCPBUGS-45302: console/status: set initial value of Message field #943
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-55622: Check error returned by ipv6 SettleAddresses #187
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-52416: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.30 into release-4.17 #319
OCPBUGS-43427: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.30 into release-4.17 #314
Full changelog

docker-builder

OCPBUGS-53075: Upgraded Kubernetes dependency from 1.28.2 to 1.30.2 #465
OCPBUGS-42894: buildah dependency bump to 1.37.6 #452
OCPBUGS-33889: Updating openshift-enterprise-builder-container image to be consistent with ART for 4.17 #393
OCPBUGS-47768: Add team members to the OWNERS file #423
OCPBUGS-47712: skipping some unit tests to avoid failures as they are duplicate #421
Full changelog

docker-registry

OCPBUGS-49695: bump docker distribution #422
Full changelog

etcd

DOWNSTREAM: <carry>: OCPBUGS-53447: fix a compaction induce latency issue #321
ETCD-714: Rebase etcd 3.5.18 openshift 4.17 #310
Full changelog

gcp-machine-controllers

OCPBUGS-53037: Disable shielded VMs for non-UEFI disks #115
OCPBUGS-48064: Refactor exists() to handle gcp API change #105
Full changelog

haproxy-router

OCPBUGS-49390: Reject All CA-Signed Certs Using SHA1 #650
OCPBUGS-49702: Add support for IdleCloseTerminationPolicy #652
Full changelog

hyperkube, pod

OCPBUGS-55269: Bump k8s api to 1.30.12 #2280
OCPBUGS-53016: Bump k8s api to 1.30.11 #2250
OCPBUGS-51006: Bump k8s api to 1.30.10 #2210
OCPBUGS-49905: Bump k8s api to 1.30.9 #2198
Full changelog

hypershift

CNTRLPLANE-918: Konflux build pipeline service account migration #6088
CNTRLPLANE-918: Konflux build pipeline service account migration #6083
OCPBUGS-55723: Don’t check if olm images exist if guest cluster #6115
OCPBUGS-55500, RHOCPPRIO-433: Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs #6098
OCPBUGS-51808: Fix golang crypto dependency go.mod replacement #5993
OCPBUGS-54841: Add konnectivity-proxy sidecar to openshift-oauth-apiserver #6017
OCPBUGS-53323: Handle multiple mirror entries for source #5894
OCPBUGS-54631: Sync RBAC for attaching volumes on VM level #5997
NO-JIRA: update konflux references #5479
OCPBUGS-53903: bump golang-jwt v4 and v5 #5906
NO-JIRA: Red Hat Konflux update control-plane-operator-4-17 #5959
ART-11792: update go mod dependency for konflux #5920
OCPBUGS-51737, OCPBUGS-51808: Bump dependencies to OCP fork in backports #5900
OCPBUGS-48439: kubevirt, Don’t break on hostname NodePort.Address #5394
OCPBUGS-51240: bump go-jose #5863
OCPBUGS-52657: Make managed-trust-bundle optional #5794
OCPBUGS-52425: [release-4.17] refactor aws identity health check into new controller #5772
OCPBUGS-46340: change plaform to platform #5562
OCPBUGS-51339: [release-4.17] Fix IsProgressing condition in HostedClusters #5712
OCPBUGS-50697: add region to AWS creds passed to operators managed by CPO #5671
OCPBUGS-51098: 4.17 Add HostedCluster additional trustbundles to konnectivity-https-proxy #5675
NO-JIRA: Update dependency mkdocs-material to v9.6.5 #5682
OCPBUGS-50596: Honor proxy vars in the util insecure http client #5605
OCPBUGS-49828: Duplicate hostDevices.name when hostDevices.deviceName has multiple types. #5558
OCPBUGS-48487, OCPBUGS-48488, OCPBUGS-48490: Fix IPv6 Disconnected HCP deployments #5402
OCPBUGS-47533: Prevent IgnitionServer from flooding the API server with patch requests #5332
NO-JIRA: Update dependency mkdocs-material to v9.6.3 #5590
OCPBUGS-45268: Reconcile proxy CA bundle into hosted cluster #5228
OCPBUGS-46465: Consistently look up and dial cloud API hostnames #5302
NO-JIRA: Update dependency mkdocs-material to v9.6.1 #5528
OCPBUGS-49638: fix overwriting PKI operator HCP conditions #5504
OCPBUGS-46440: Allow ARM64 arch deployment on Agent platform #5296
OCPBUGS-48170: fix disconnected via CLI #5465
OCPBUGS-38810: nodepoolcontroller: List() PerformanceProfile status per NodePool #4585
NO-JIRA: Update dependency mkdocs-mermaid2-plugin to v1.2.1 (release-4.17) #5428
NO-JIRA: Update dependency mkdocs-material to v9.5.50 (release-4.17) #5427
OCPBUGS-44927: Add multi-arch validation for HC/NodePool compatibility #5238
NO-JIRA: [release-4.17] Bump golang.org/x/crypto and golang.org/x/net #5368
NO-JIRA: Update Konflux references (release-4.17) #5329
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-53911: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #83
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-50566: Fix for CVE-2024-45338 in golang.org/x/net/html in release-4.17 #101
Full changelog

ibmcloud-machine-controllers

OCPBUGS-52957: IBMCloud: MAPI replacing unhealthy CP nodes #63
Full changelog

insights-operator

Ignore previous status when disabling alerts (#1062) #1062
Full changelog

ironic

METAL-1305: Do not use openstack packages #647
OCPBUGS-52292: Fix runlogwatch script #643
OCPBUGS-50673: Install python3-inotify pkg explicitly #640
OCPBUGS-49998: Fix runlogwatch failure if LOG_DIR does not exist #637
OCPBUGS-49822: Drop quiet option of grep to avoid race condition with pipefail #633
OCPBUGS-49756: Use pynotify instead of inotify-tools #631
OCPBUGS-48149: Bump jinja2 to 3.1.5 #622
Full changelog

ironic-agent

OCPBUGS-55680: Delay determining the hostname to put into ignition #185
METAL-1305: Do not use openstack packages #179
Full changelog

ironic-static-ip-manager

OCPBUGS-49350: Fix subnet validation #47
Full changelog

kubevirt-csi-driver

OCPBUGS-54631: Ensure volume stays attached through reboots #56
OCPBUGS-44623: During detach don’t return error if VM is not found #50
Full changelog

machine-api-operator

OCPBUGS-53036, OCPBUGS-53037: Updates GCP credentials request #1345
OCPBUGS-52576: add image/read permissions #1344
OCPBUGS-52359: Remove unneeded VNet permissions from Azure CredentialsRequest #1337
OCPBUGS-51370: Drop oVirt support #1334
Full changelog

machine-config-operator

OCPBUGS-56665: Add hot loop detection in the boot image controller #5077
OCPBUGS-56395: error from generateAndValidateRenderedMachineConfig function can be misleading #5060
OCPBUGS-56218: Rewrote TestFirstBootHasSSHKeys e2e test in pure Go #5053
OCPBUGS-55615: MSBIC should not update windows machinesets #5021
OCPBUGS-55490: MCO should fall back to us-east-1 for AWS bootimages if no region specific-AMI exists #5020
OCPBUGS-54830: Make mtu-migration run after wait-for-primary-ip #4989
OCPBUGS-52314: on-prem/resolv-prepender: stop leaking tmp files #4894
OCPBUGS-45989: Do not run resolv-prepender from NM dispatcher #4785
OCPBUGS-52188: ignore mc not found error #4957
OCPBUGS-52951: Add ipsec connect wait service #4930
OCPBUGS-53441: Fixing typos for MachineConfigNode #4936
OCPBUGS-53186: Update ObservedGeneration in KubeletConfig #4919
OCPBUGS-53225: daemon: ensure ostree-finalize-staged is started before rebooting #4920
OCPBUGS-52160: Enforce VIPs to be collocated at the same host #4884
OCPBUGS-52303: Enable nmstate-configuration on all platforms #4891
OCPBUGS-51003: daemon: add nil check for annotation fetching #4862
OCPBUGS-51353: Update cluster-reader ClusterRole permissions #4882
OCPBUGS-50955: create /run/nodeip-configuration before use #4858
OCPBUGS-51334: Update format verbs for alert logs #4880
OCPBUGS-52257: configure-ovs workaround for ovs-if-br-ex bug #4889
OCPBUGS-49973: Update the storage.conf configuration file template #4836
OCPBUGS-49363: Auto-recover from MC with invalid extension #4824
OCPBUGS-49716: MCO CO degrades are stuck on until master pool updates complete #4826
OCPBUGS-49639: Add clarification to invalid maxUnavailable alert #4820
OCPBUGS-47475: Pausing Master MCP results in Alerts #4769
OCPBUGS-47802: OCPBUGS-47801: trying to wait for sub-controllers #4775
Full changelog

machine-os-images

OCPBUGS-54146: Change rhcos release browser url #56
Full changelog

metallb-frr

OCPBUGS-55344: OpenShift Only: TEMPORARY: pin FRR version to known working rpm #89
OCPBUGS-44111: Use metrics for readiness/liveness probes #77
Full changelog

monitoring-plugin

OCPBUGS-54211: fix issue preventing dev silences from loading #374
OU-724: remove deleted image #377
OCPBUGS-51117: Fix overview links #357
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-47471: adds getcontext (backport 4.17) #260
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-55617: Fixes leftover podref issue #364
OCPBUGS-48745: [Release-4.17]Kubeconfig loop #334
Full changelog

must-gather

OCPBUGS-48068: Update owners #452
Full changelog

networking-console-plugin

Add translations 4.17 #239
Add translations scripts #235
OCPBUGS-49758: Fix weight width #208
OCPBUGS-45791: fix path-to-regex CVE #196
OCPBUGS-48704: fix service name #188
OCPBUGS-48267: UI crash accessing a Service in pending state #168
OCPBUGS-46553: fix ports as number instead of strings #169
OCPBUGS-45876: Bump nanoid from 3.3.7 to 3.3.8 #172
OCPBUGS-44140: Bump dompurify from 2.4.9 to 2.5.8 #166
Full changelog

nutanix-machine-controllers

OCPBUGS-47267: fixing CVE-2024-45338 #92
OCPBUGS-55728: Fix link-local addresses being added to machine #102
Full changelog

oauth-apiserver

OCPBUGS-46044: Update dependencies to address CVE-2024-24786 #127
Full changelog

oauth-proxy

OCPBUGS-30443: Update dependencies to address CVE-2024-24786 #298
OCPBUGS-46659: Fix oauth-proxy e2e-component tests #303
Full changelog

oc-mirror

fixes CVEs upgrading go-git dependency (#1033) #1033
OCPBUGS-47453: Use one of the newer sha256 keys to verify release signatures (#1000) (#1024) #1000
changes the owners file (#1017) #1017
OCPBUGS-48513: e2e: use same version of crane as in go.mod (#1020) #1020
Full changelog

openshift-apiserver

OCPBUGS-49399: prevent panic when no image and error are set #488
OCPBUGS-49399: validate image property isn’t nil before using #489
OCPBUGS-49399: move on to the next digest/tag during failures #487
Full changelog

openshift-controller-manager

OCPBUGS-55826: Empty proxy variables are causing issues during the build #379
OCPBUGS-47769: Add team members to the OWNERS file #357
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-56250: fix(olm): improve error logging for missing olm.managed label (#3558) #1004
OCPBUGS-51226, OCPBUGS-51228, OCPBUGS-51246: (vendor) pin go-jose/v4@v4.0.5 #998
OCPBUGS-53071: add missing pod disruption reasons to isPodDead #982
OCPBUGS-53283: Ensure that PSA label is latest instead of pinning versions #985
OCPBUGS-50829, OCPBUGS-50831, OCPBUGS-50835: CVE-2025-24976 Bump github.com/distribution/distribution/v3 [release-4.17] #968
OCPBUGS-48695: Fix excessive catalog source snapshots cause severe performance regression #956
OCPBUGS-45845: Fix concurrent namespace resolution #944
OCPBUGS-46929, OCPBUGS-46936, OCPBUGS-47316: x/net bump to v0.34.0 [release-4.17] #938
Full changelog

operator-marketplace

OCPBUGS-53179: Ensure that PSA label is latest instead of pinning versions #607
OCPBUGS-49431: Upgrade golang.org/x/net [release-4.17] #585
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-56244: Allow default network pods to reach localnet on the same node #2572
OCPBUGS-52480: Handles unspecified protocol in network policy port #2478
OCPBUGS-54203: Update OVN to FDP25.A.1 24.03.5-40. #2496
OCPBUGS-52409: Change dynamic_neigh_routers to false for the Interconnect topology. #2476
OCPBUGS-50519: kubevirt, localnet: Reduce live migration downtime #2458
OCPBUGS-48777: Fixes unexpected mp0 route removal during start up #2423
OCPBUGS-48828: fixes overzealous deletion of SNAT in egressIP #2425
Full changelog

powervs-machine-controllers

OCPBUGS-54750: Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.17 #113
Full changelog

prometheus

OCPBUGS-56738: BACKPORT: fix promtool analyze block shows metric name with 0 cardinality #254
OCPBUGS-54941: Scraping: Bump cache iteration after error to avoid false duplicate detection. #249
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-48069: fix: validate smtp smarthost and smtp from fields #323
Full changelog

route-controller-manager

OCPBUGS-55943: Added error event for failed ingress to route conversion #60
OCPBUGS-53077: ingress: Reset metrics when ingress is deleted #57
Full changelog

service-ca-operator

OCPBUGS-34228: Updating ose-service-ca-operator-container image to be consistent with ART for 4.17 #261
Full changelog

tests

OCPBUGS-56221: aws/edge: prevent test using unschedulable nodes #29792
OCPBUGS-55451: support provider type external #29737
OCPBUGS-55269: Bump to Kubernetes v1.30.12 #29771
OCPBUGS-55498: [build] Ensure Git Clone Does Not Run Privileged #29743
OCPBUGS-54767: Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com #29660
OCPBUGS-52580: Use payload pullspec for image info test #29588
OCPBUGS-38835: Try also user CA for getting openshift-tests image #29029
OCPBUGS-49411: Add a monitor test to detect concurrent installer pod or static pod #29487
OCPBUGS-48634: Revert “[release-4.17] OCPBUGS-48459, SDN-4930: ovn-k, udn crd e2e: Fix status report consumer assertion” #29453
OCPBUGS-48459, SDN-4930: ovn-k, udn crd e2e: Fix status report consumer assertion #29301
OCPBUGS-48345: Add team members to the OWNERS file for PR approvals #29430
OCPBUGS-48188: Fixing build s2i ruby test data inline with latest ruby version(>=3.0) #29409
: OCPBUGS-48093: fix unit test for compare against string #29405
Full changelog

vsphere-csi-driver-operator

OCPBUGS-52207: fix panic when vcenter address is incorrect #295
OCPBUGS-50593: Set reconcile-sync to 10 minute for ListVolume #291
OCPBUGS-49858: Escape backslash in vCenter username #288
OCPBUGS-49685: List only linux nodes #285
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github