4.17.34

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.17.34-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.17-e2e-aws-ovn-serial
- aws-ovn-upgrade-4.17-micro Succeeded periodic-ci-openshift-release-master-ci-4.17-e2e-aws-ovn-upgrade
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.17-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.17-micro Succeeded periodic-ci-openshift-release-master-ci-4.17-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.17-fips-payload-scan
- gcp-ovn-rt-upgrade-4.17-minor Succeeded periodic-ci-openshift-release-master-ci-4.17-upgrade-from-stable-4.16-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.17 Succeeded periodic-ci-openshift-hypershift-release-4.17-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.17-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.17-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.16.11, 4.16.12, 4.16.13, 4.16.14, 4.16.15, 4.16.16, 4.16.17, 4.16.18, 4.16.19, 4.16.20, 4.16.21, 4.16.23, 4.16.24, 4.16.25, 4.16.26, 4.16.27, 4.16.28, 4.16.29, 4.16.32, 4.16.34, 4.16.35, 4.16.36, 4.16.37, 4.16.39, 4.17.11, 4.17.12, 4.17.13, 4.17.14, 4.17.15, 4.17.17, 4.17.18, 4.17.19, 4.17.20, 4.17.21, 4.17.22, 4.17.23, 4.17.25, 4.17.26, 4.17.27, 4.17.28, 4.17.29, 4.17.3, 4.17.30, 4.17.4, 4.17.5, 4.17.6, 4.17.7, 4.17.8, 4.17.9

4.17.33 (changes) - S S S S S
4.17.32 (changes) - Success
4.17.31 (changes) - Failed
4.17.24 (changes) - Failed
4.17.16 - Success
4.17.10 (changes) - Success
4.17.2 (changes) - Success
4.17.1 (changes) - Failed
4.17.0 (changes) - Failed
4.16.42 (changes) - Success Success
4.16.41 (changes) - Success
4.16.40 (changes) - Failed
4.16.38 (changes) - Success
4.16.33 (changes) - Failed
4.16.30 (changes) - Failed
4.16.10 (changes) - Success
4.16.9 (changes) - Failed
4.16.8 (changes) - Failed
4.16.0-0.nightly-2025-06-18-121820 (changes) - Success

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.17.16

Created: 2025-06-19 14:17:12 +0000 UTC

Image Digest: sha256:8b32e036f2a0a18fc48e26de96d491ef89d225958c63cf284fefe5b881117e2f

Components

Kubectl 1.30.5
Kubernetes upgraded from 1.30.7 to 1.30.12
Kubernetes Tests upgraded from 1.30.0 to 1.30.12
Red Hat Enterprise Linux CoreOS upgraded from 417.94.202502051822-0 to 417.94.202506170509-0 (diff)

Removed images

ovirt-machine-controllers

Rebuilt images without code change

aws-ebs-csi-driver git 2bb5b316 sha256:53441e28c964665b59146469f15591b29d4840e1ad17956e701b3f4e7ec57b21
aws-ebs-csi-driver-operator git cc862109 sha256:effaf895c0a6e3422e80b85b7573de15d1879b99585af78646fbc28258fe2bb3
aws-kms-encryption-provider git 9d401670 sha256:2f399966e1597bdbafdae4d0c984d50af20ae64c1bb829e6ffcf68985d715687
aws-machine-controllers git b41b8c8f sha256:032fdd38df1c9e3e6102fa50c0ff2cf5ee4924a6e20a367bc1e7e284e7a85733
azure-cloud-controller-manager git 626ecd1c sha256:355639bee4b9940158b78f359f565c443bcd7fef6a143e1f99c33e2e941d073e
azure-cloud-node-manager git 626ecd1c sha256:f1895627f31230978a6e7e15f5c556974342d2e152a3c9cabd988a02efaf09cc
azure-cluster-api-controllers git d359bfe5 sha256:ca9f02dcbc02609eb1b62f6269b986649cf7ccf683104cd7541405389f4e86d6
azure-disk-csi-driver git a544f30b sha256:71aad92de14eb918a61ca7f18c70da18355bb75cba2090873dc60d16b0bde167
azure-disk-csi-driver-operator git cc862109 sha256:a6a3f48a43612caad48fa7a3f54a0871624bc911ff657d18d334ea418098f70a
azure-file-csi-driver git 9f4c38c2 sha256:cac6de4dcfe50ebc21fb93d4dd9c73bd02e51f27429969eee044d3c11d10513f
azure-file-csi-driver-operator git cc862109 sha256:d467d3a4868a9236ac23b0823715d21eca44fc2d33f57d2c9aecf6040a9971a7
baremetal-machine-controllers git 6e7aa77e sha256:7a7f7f04cdd08886b30681ffe1ce9b1df1c4a58d8632a5867200a65fda1076f2
baremetal-runtimecfg git 8956d91b sha256:47c5212fbec79ebf47fcb53be8606d18b91500274f0553a8e8832c135dcf6960
cluster-autoscaler-operator git ea4a8878 sha256:073468017d799ac9b57ef40364345c945dcc52d03002b5f2952b69f561ee19c9
cluster-bootstrap git 95dd9129 sha256:53cf44cc2e3ad9b984463c72e2f04cd435d356715fd4a1ad345386f01a695025
cluster-capi-controllers git 77ef4fc5 sha256:521e4a8dd1dbf218d771fd0d266ef7b260f96d61b78c4309cab2b39da25a0acb
cluster-cloud-controller-manager-operator git 32fd8399 sha256:0ce4fdc01f22338569a492d1fdec36f742ffd73d540d56d00188f98b27531d21
cluster-control-plane-machine-set-operator git f7e01c2f sha256:f01d60f6badf09282501b22dda3b2d770ee1b5dfdede7f199bab455efbd7d3fd
cluster-csi-snapshot-controller-operator git ffba005b sha256:5a62f6b56b2c5ee13a2e97812205f67daffc5daa71bfde354ec2c0ce66052229
cluster-kube-cluster-api-operator git aed5f6c7 sha256:3c3cf95faec783db22f03bc4f28ae01a46b72a14bda05dff9df0693e20a74706
cluster-kube-controller-manager-operator git 0a9ed573 sha256:ef33a596b85db98ced522167c79444991d2018d263fcaa10f63b30abf1501ff7
cluster-kube-scheduler-operator git 98ca953b sha256:35f3516ca0c3a224cf00b17281726025876f1413d20bea82839ad67f950845a0
cluster-kube-storage-version-migrator-operator git ab40b611 sha256:8bf9bed2de267c173c37262a31423956f2631aff6bf51a4e6ba68016d059dac3
cluster-machine-approver git acc2380e sha256:26449727781f2f99b1fa77d9da120fddcfea11e626414096e936d8d2d94390c5
cluster-monitoring-operator git ff3a4f02 sha256:c0e56de7af01a2cd0f19e429b0e251d593b19ff90880e9eb8d8d5194b5631ea0
cluster-node-tuning-operator git b6712f36 sha256:efc97e0d603a6f289dd6191217e329118d6b18eb1a3c8fbb7c5b80e391f4b40a
cluster-olm-operator git e31b7775 sha256:214e454261ba50677b5617a9ac7b1ef0914af3a6d5586e54985b5f1ec003c7ba
cluster-openshift-apiserver-operator git 2b2ba3be sha256:04a95d52120b0e7b3a62ae7dcdba24fd222216b8dd0132a9ec2358be21acf90b
cluster-openshift-controller-manager-operator git b05a249d sha256:d2016d6fe43cd4189742967c3ab683e94716baf8135e8e4a141d5aa10a4a586e
cluster-policy-controller git 7209e90d sha256:fabd1f66559cb30315083951611ba348bb1f9a16c876ba50f02700e66fcfd646
cluster-update-keys git 2ce31fc5 sha256:a6cc8dcc82af18bf40f437ca45c7e9c0579bc1b02d9bfc0f370e20c3f3e84435
console-operator git 253854e7 sha256:53b7beab3c85c8fb8803e0acfa3029909ed03c599b5242581207e0d1d75d9951
csi-driver-manila-operator git efc99a2a sha256:a5a28ac61e232bb045ffef4771bab94e13145beeab8614013829c4dea68d5608
csi-driver-shared-resource-operator git c095a1f2 sha256:fbe8e5495fb167b6a869045f8b516b8a3289888d85b450d7beb6e537a9164f1d
csi-external-attacher git c3fe8e2e sha256:dbe084c2026721bbbcd719565a38287fbbaab7de820a06310627b1d700633a0a
csi-external-provisioner git fe460e56 sha256:01178831200429817b60bbec488350b5123a7eaea9033befab0e67ee24b94fe2
csi-external-resizer git ab87a938 sha256:ab0d26987da8eb148b787046dfbf369846fcd9978bb3408db03e89c9b66e17af
csi-external-snapshotter git aa558ca4 sha256:0f77f8efc52000314018135f96a9d533e9e4e5529b80b6a590eab4909f4703fe
csi-snapshot-controller git aa558ca4 sha256:000ef6a0f9b529051c13a5a27bdff286b5ee2ab5951e784fba079a20f6957271
csi-snapshot-validation-webhook git aa558ca4 sha256:732ad6819326ab5d044976d050efbae2220e7708188228a2150e123a34b88b48
driver-toolkit git 859518f6 sha256:46c06c700b923e1af6ede071f72e47b2fe651b853312202dc09da7f525c5d2ab
egress-router-cni git 3193a756 sha256:bd3fdd0f1a8795dc41630a8246151b9d7ab193ac5027e4e58197e24317037b01
gcp-cloud-controller-manager git 8ce997d7 sha256:e2d895d8108dec1097ffe05aef94b7f7f013c4919967a9a0bb2610c1cc4b73c5
gcp-cluster-api-controllers git 9c561f2d sha256:9d71dc4b9bd523e795eb6e7cf79e04af1cccf63cb56d11d86fb698d1e9d0b5a6
gcp-pd-csi-driver git c770b412 sha256:d505df8e5ef04e3d8f3103ca7d6ad31b2152f1f35b869b0ba0e8326287b0b2ae
gcp-pd-csi-driver-operator git c23b064f sha256:dc8fad6c63730c9b11e487661c42f3fbdfa65a41c48aca4421f795858ef7a9ee
gcp-workload-identity-federation-webhook git 08579e9f sha256:70c1800f3047ba6181b2addd8987a4f549c40158356df3d6daefd16193ad64cc
ibm-cloud-controller-manager git ad8f7eb0 sha256:f6cd31d00e3839dc583b3faffa33f81f0d1e8df9dd8c272feac8828cc2d40536
ibm-vpc-block-csi-driver-operator git 8443d86b sha256:acfed63e8c1798917c305487e516e702f74cdd53ff8e40dd8900130232cf7883
insights-operator git 2b1e2df0 sha256:2383d36d01c176e069af4e88b9dd2ea98b5b27de5ac90a68dce8216801341693
ironic-static-ip-manager git bc5b8a2c sha256:b3b00b9eb0136af2834f69ec2521e1f79cb3b013364548999f1f8b8ca3cad78c
keepalived-ipfailover git e3879e9e sha256:4674a9226d970edd1da97895fa826c91a360c9717a9829a6c309563d387e9381
kube-proxy git dee082de sha256:2b3592bea327353c69cfedd56d7efdca7c95c8862a103b79e37c78a4f5105260
kube-state-metrics git 462e63f6 sha256:b4dadec150bcef5fab2c9f1e243f67f2cea5ed8826812ae28134bc377d68a65d
kubevirt-cloud-controller-manager git 3f4542ec sha256:6d282acc5796ea2fd4f36024441e66bc38e597891786834c6d29ba17b06f8f00
libvirt-machine-controllers git a336f0b5 sha256:e3c7c320622eb5d0ce970efc8ea6da560398d67344607dd8d0f75c658a81ceb3
multus-route-override-cni git 391c1b03 sha256:c6c876967e39be84e4a648a07996e0f6b6b8af97e0445ded1f8582eba9d5b0a5
network-interface-bond-cni git 8630f336 sha256:04530908f2e1453d561d594284e0dd57f10f4d9c85e5913e9f0280134ae2ae67
nutanix-cloud-controller-manager git c9f6cd1f sha256:b49407bb4296cfff4be1b6716e8edd641c347fce931c16ee081ed19c539fad79
oc-mirror git 39bedc78 sha256:020eca3649be90232fd86b9d3abf81cb43ff32724151a6f76f283c434a521789
olm-catalogd git c740e056 sha256:9494e6e34d9355edfe21443c28d930afadcacfc51ee9214a0085f5c586972670
openstack-cinder-csi-driver-operator git f89b6dbc sha256:c80f22d588948a9ce4c0abd013a07e5dcbd8cdeb6d2f2a2fb80489d99eba0bc5
openstack-machine-api-provider git 68971874 sha256:1b13a900255949f656ed953778ac78a174f02e9ca33a7ac0b704b1fd78c9f891
ovirt-csi-driver git 1db726a9 sha256:e4f8553658bd85058cd72d85098e637a955cd5d8d7004f336612933e4c89e6c5
ovirt-csi-driver-operator git 0feae256 sha256:54632cb1d725d2882d8709e42ffa258fc136e7f9fb84fc33b7909cdf1c2c07ac
powervs-block-csi-driver git aaa6afa9 sha256:e8ad887755893e5f401b76ed218fe0850a78269772e670580f6b715742025ab8
powervs-block-csi-driver-operator git f6f037c5 sha256:7f661260a94f11c4e4ee7b95f9554f5e0a7ae404b086d698063208b79bda3f45
powervs-cloud-controller-manager git bd3d72e5 sha256:144cfe9f8e6f218491a4117e05332fcfd74fffe33c71cfc0e8673f249908edca
prometheus-config-reloader git 77cedd6c sha256:24eca026d606dde05c5f70aca9afe21cf509cbd60c79bc8d3d84955d3bf207fc
prometheus-operator git 77cedd6c sha256:016a5d85639537a2dd18476514a5fac1c8db6422bb64307d3b627a056b13067a
prometheus-operator-admission-webhook git 77cedd6c sha256:80f61091e59f642d2329bccc7ecc15477cb28b90ce7ccd2899ad062fbab13d02
rhel-coreos sha256:6bfd6115e7feaea56d875393385ffb32a71332f606861bf16770215923d256f9
rhel-coreos-extensions sha256:20b36214ee0982ecf223307e4c4369b69a60cf143ca840a6c73a8a89a8ea4865
vsphere-cloud-controller-manager git 097d823b sha256:7af6978c45600c3b3849a9185946f9f6ce4d13db18ba4f0bac7f7675b407da21
vsphere-cluster-api-controllers git 1661cc3f sha256:2f31db8164f31d258a833b075661116bbf7cb206f2756f968c1e9ada13e0e124
vsphere-csi-driver git 039ee368 sha256:18000a94e695cf46614809877131c715bf6e56cd1509205610655fe25040e131
vsphere-csi-driver-syncer git 039ee368 sha256:3b039e9506c86444742b9e15adc806853192005f659906f04c2928cf2b84c121
vsphere-problem-detector git cd0df71f sha256:33883a6f978e377a7eb4e5b3b8ee4d209adcd0071f9be33cf36b65bb50642e0f

agent-installer-api-server

OCPBUGS-51230: Revert go-jose from v4.0.5 to v0.3.04 (#7605) #7605
OCPBUGS-51230: Bump github.com/go-jose/go-jose/v4 to v4.0.5 in release-4.17 (#7574) #7574
OCPBUGS-54402: Bump go-jwt to 4.5.2 to fix CVE-30204 (#7484) #7484
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.17 (#1087) #1087
OCPBUGS-53719: Bump jwt to 4.5.2 in release-4.17 (#1086) #1086
abi: let the bootstrap waiting for workers before rebooting (#1028) #1028
Full changelog

agent-installer-node-agent

OCPBUGS-52994: Update to latest ghw version (#986) #986
Updating ose-agent-installer-node-agent-container image to be consistent with ART for 4.17 (#798) #798
OCPBUGS-53711: Bump jwt to 4.5.2 in release-4.17 (#964) #964
NO-ISSUE: Increase image pull timeout during install (#922) #922
Full changelog

agent-installer-utils

append .0 to go.mod version #110
Full changelog

apiserver-network-proxy

append .0 to go.mod version #82
Full changelog

aws-cloud-controller-manager

append .0 to go.mod version #109
Full changelog

aws-cluster-api-controllers

OCPBUGS-53727: bump to github.com/golang-jwt/jwt/v4@v4.5.2 #546
OCPBUGS-51309: UPSTREAM: 5339: Bump glog for recent fixes #539
Full changelog

aws-pod-identity-webhook

OCPBUGS-51232: github.com/go-jose/go-jose/v4 v4.0.5 #202
Full changelog

azure-kms-encryption-provider

append .0 to go.mod version #19
OCPBUGS-53495: bump golang-jwt v4 #12
Full changelog

azure-machine-controllers

OCPBUGS-56655: Fix failure when attempting to modify immutable availabilitySet #152
OCPBUGS-55729: Update eviction policy for Spot VMs from Deallocate to Delete #140
OCPBUGS-54393: Re-reconcile machine on NIC provisioning failure #136
OCPBUGS-52359: Remove unused vnet package #130
OCPBUGS-50017: dynamically setting the amount of fault domains #127
Full changelog

azure-workload-identity-webhook

OCPBUGS-53799: github.com/golang-jwt/jwt/v4 v4.5.2 #32
OCPBUGS-51234: github.com/go-jose/go-jose/v4 v4.0.5 #28
Full changelog

baremetal-cluster-api-controllers

ART-13124: Update go.mod to include patch version in go directive #46
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-56448: vsphere - check if host is powered down or on standby before uploading template #9726
OCPBUGS-57292: ensure ctrplane nodes can access bootstrap MCS #9775
OCPBUGS-57304: IBI nmstate unit test fix #9777
OCPBUGS-55224: Fix Load balancer IP setup #9675
OCPBUGS-51116: update resolv.conf every time on bootstrap node #9504
OCPBUGS-51210: Fixes panic during GCP tags fetch due to unstable network #9512
OCPBUGS-46375: Allow spaces in the aws tags [release-4.17] #9315
OCPBUGS-54357: IBMCloud: Move to IBM TF openshift fork #9613
OCPBUGS-53378: Remove error logging when determining image arch #9581
OCPBUGS-53459: aws: fix NLB creation in secret regions #9071
OCPBUGS-52961: Remove tmp directory used for agent pxe files #9552
OCPBUGS-43528: Prevent race with provisioning-interface service #9110
OCPBUGS-44058: Log correct hostname for validation status #9162
OCPBUGS-50967: PowerVS: destroy dhcp hack #9494
OCPBUGS-50846: OCPBUGS-50702: [release-4.17] MGMT-19771: Convert IDS to proper IDMS manifest #9470
OCPBUGS-50876: correct typo #9484
OCPBUGS-49975: aws/edge/byovpc: subnets tag kube cluster tag to shared #9445
OCPBUGS-48761: Update RHCOS 4.17 bootimage metadata to 417.94.202501301529-0 #9448
OCPBUGS-49993: Disable IP Forwarding for CAPG Machines #9446
Full changelog

baremetal-operator

OCPBUGS-53325: BMO can expose any secret via BMCEventSubscription CRD #406
OCPBUGS-42387: Remove dataImage finalizer if BMH is missing #390
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-49607: Address golang.org/x/* CVEs #1962
OCPBUGS-50984: Add HOST env var in oc debug for sos report collects more #1976
Full changelog

cloud-credential-operator

OCPBUGS-56980: Azure: resolve nil pointer exception when role assignment exists #868
OCPBUGS-54828: Render: configure proxy on bootstrap static pod #863
OCPBUGS-53415: github.com/golang/glog v1.2.4 #842
OCPBUGS-53823: update github.com/golang-jwt/jwt #838
OCPBUGS-51548: Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #828
OCPBUGS-51238: github.com/go-jose/go-jose/v4 v4.0.5 #825
Full changelog

cloud-network-config-controller

OCPBUGS-56257: Increase API call timeout to 30 second #171
Full changelog

cluster-authentication-operator

OCPBUGS-54580: Avoid duplicate OAuth client creation #765
Full changelog

cluster-autoscaler

OCPBUGS-54325: improve replica counting and decrease target size behavior #352
Full changelog

cluster-baremetal-operator

OCPBUGS-54542: Add missing relatedObjects #469
Full changelog

cluster-capi-operator

append .0 to go.mod version #314
Full changelog

cluster-config-api

OCPBUGS-57285: Add IPsec API for NAT-T UDP encapsulation support #2363
OCPBUGS-49702: Add IdleConnectionTerminationPolicy field to IngressControllerSpec #2186
OCPBUGS-39130: Added checks to prevent vCenters from changing after install past 1 vCenter #2014
Full changelog

cluster-config-operator

append .0 to go.mod version #441
Full changelog

cluster-dns-operator

OCPBUGS-52497: [release-4.17] Add runbook_url for CoreDNSErrorsHigh #430
Full changelog

cluster-etcd-operator

OCPBUGS-53511: fix CVE-2025-30204 #1414
Full changelog

cluster-image-registry-operator

OCPBUGS-53871: bump github.com/golang-jwt/jwt #1218
OCPBUGS-51604: bump golang.org/x/oauth2 #1209
OCPBUGS-51103: ensure that storage names don’t end in dashes #1180
Full changelog

cluster-ingress-operator

OCPBUGS-49702: Add support for IdleConnectionTerminationPolicy #1223
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-50516: Increase waitForFallbackDegradedConditionTimeout #1803
Full changelog

cluster-network-operator

OCPBUGS-55518: iptables-alerter streamlining #2698
OCPBUGS-55033: Add IPv6 NGINX configuration #2689
OCPBUGS-52951: Unexpected Behavior During Cluster Upgrade for the ovn-ipsec-host pods #2654
OCPBUGS-49816: ovn-k, rbac: Enable users read & modify UserDefinedNetwork CRs #2655
OCPBUGS-49961: Update egressfirewall CRD to be consistent with ovn-kubernetes repo #2642
: OCPBUGS-44863: Add nodeslicepool #2574
Full changelog

cluster-samples-operator

OCPBUGS-55800: only update LastTransitionTime if operator status change #640
OCPBUGS-55795: Adding filter to clusterOperatorInformerEventHandler #639
OCPBUGS-55894: Samples Operator should sort failing image imports #641
OCPBUGS-55042: Adding mutex to func createSamples on handler.go #632
OCPBUGS-54362: add rhdmalone to owners #619
Full changelog

cluster-storage-operator

OCPBUGS-52222: fix Vsphere cluster Storage operator in Unavailable state #560
Full changelog

cluster-version-operator

OCPBUGS-50589: Set openshift.io/required-scc: privileged annotation in version pods #1154
Full changelog

configmap-reloader

append .0 to go.mod version #70
Full changelog

console

OCPBUGS-56895: HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling #15108
OCPBUGS-57095: Add all files to vendor regardless of gitignore #15132
OCPBUGS-57114: Debug pod logs are not accessible when debugging a node via OpenShift Console #15142
OCPBUGS-56975: Sample segment sessions #15114
OCPBUGS-56844: Enable knative tests #14387
OCPBUGS-56375: remove 60 day alert from cluster update modal #15062
OCPBUGS-55924: Fetching taskRuns in PLR details page using PLR UID also #15029
OCPBUGS-55756: update the Deployment pod on change in imageStream #15022
OCPBUGS-56238: Remove the devconsole backend common internet proxy and replace it with dedicated ones #15049
OCPBUGS-55447: Authenticate user token in openshift Authenticate func #15010
OCPBUGS-55415: fix bug where operator appears twice #15002
OCPBUGS-55202: Do not load CSRs if user does not have permissions #14985
OCPBUGS-52999: Pipeline visualisation shows all tasks as Failed and after that goes to Running state #14862
OCPBUGS-53168: Remove logoutOpenShift method call #14883
OCPBUGS-51277: Fix JSON annotation parsing issue and harden related code #14795
OCPBUGS-53086: Update the monitoring topic used by the console team #14871
OCPBUGS-52205: Show Observe section without PROMETHEUS and MONITORING flags #14811
OCPBUGS-51292: fix run time error when no completed version exists #14796
OCPBUGS-51126: Fix alert rule link to alert in dev perspective #14785
OCPBUGS-49795: ‘create a Project’ button on Getting started page doesn’t work #14714
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-55622: Check error returned by ipv6 SettleAddresses #187
Full changelog

coredns

append .0 to go.mod version #135
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-52416: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.30 into release-4.17 #319
Full changelog

csi-driver-nfs

append .0 to go.mod version #156
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

append .0 to go.mod version #372
Full changelog

csi-livenessprobe

append .0 to go.mod version #73
Full changelog

csi-node-driver-registrar

append .0 to go.mod version #80
Full changelog

docker-builder

OCPBUGS-53075: Upgraded Kubernetes dependency from 1.28.2 to 1.30.2 #465
OCPBUGS-42894: buildah dependency bump to 1.37.6 #452
Full changelog

docker-registry

OCPBUGS-53655: bump jwt and oauth dependencies #431
OCPBUGS-49695: bump docker distribution #422
Full changelog

etcd

DOWNSTREAM: <carry>: OCPBUGS-53447: fix a compaction induce latency issue #321
ETCD-714: Rebase etcd 3.5.18 openshift 4.17 #310
Full changelog

gcp-machine-controllers

OCPBUGS-53037: Disable shielded VMs for non-UEFI disks #115
Full changelog

haproxy-router

OCPBUGS-49390: Reject All CA-Signed Certs Using SHA1 #650
OCPBUGS-49702: Add support for IdleCloseTerminationPolicy #652
Full changelog

hyperkube, pod

OCPBUGS-55269: Bump k8s api to 1.30.12 #2280
OCPBUGS-53016: Bump k8s api to 1.30.11 #2250
OCPBUGS-51006: Bump k8s api to 1.30.10 #2210
OCPBUGS-49905: Bump k8s api to 1.30.9 #2198
Full changelog

hypershift

OCPBUGS-57432: Add proxy variables for the MCD Pod #6258
CNTRLPLANE-918: Konflux build pipeline service account migration #6088
CNTRLPLANE-918: Konflux build pipeline service account migration #6083
OCPBUGS-55723: Don’t check if olm images exist if guest cluster #6115
OCPBUGS-55500, RHOCPPRIO-433: Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs #6098
OCPBUGS-51808: Fix golang crypto dependency go.mod replacement #5993
OCPBUGS-54841: Add konnectivity-proxy sidecar to openshift-oauth-apiserver #6017
OCPBUGS-53323: Handle multiple mirror entries for source #5894
OCPBUGS-54631: Sync RBAC for attaching volumes on VM level #5997
NO-JIRA: update konflux references #5479
OCPBUGS-53903: bump golang-jwt v4 and v5 #5906
NO-JIRA: Red Hat Konflux update control-plane-operator-4-17 #5959
ART-11792: update go mod dependency for konflux #5920
OCPBUGS-51737, OCPBUGS-51808: Bump dependencies to OCP fork in backports #5900
OCPBUGS-48439: kubevirt, Don’t break on hostname NodePort.Address #5394
OCPBUGS-51240: bump go-jose #5863
OCPBUGS-52657: Make managed-trust-bundle optional #5794
OCPBUGS-52425: [release-4.17] refactor aws identity health check into new controller #5772
OCPBUGS-46340: change plaform to platform #5562
OCPBUGS-51339: [release-4.17] Fix IsProgressing condition in HostedClusters #5712
OCPBUGS-50697: add region to AWS creds passed to operators managed by CPO #5671
OCPBUGS-51098: 4.17 Add HostedCluster additional trustbundles to konnectivity-https-proxy #5675
NO-JIRA: Update dependency mkdocs-material to v9.6.5 #5682
OCPBUGS-50596: Honor proxy vars in the util insecure http client #5605
OCPBUGS-49828: Duplicate hostDevices.name when hostDevices.deviceName has multiple types. #5558
OCPBUGS-48487, OCPBUGS-48488, OCPBUGS-48490: Fix IPv6 Disconnected HCP deployments #5402
OCPBUGS-47533: Prevent IgnitionServer from flooding the API server with patch requests #5332
NO-JIRA: Update dependency mkdocs-material to v9.6.3 #5590
Full changelog

ibm-vpc-block-csi-driver

append .0 to go.mod version #100
OCPBUGS-53911: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #83
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-50566: Fix for CVE-2024-45338 in golang.org/x/net/html in release-4.17 #101
Full changelog

ibmcloud-machine-controllers

OCPBUGS-52957: IBMCloud: MAPI replacing unhealthy CP nodes #63
Full changelog

ironic

METAL-1305: Do not use openstack packages #647
OCPBUGS-52292: Fix runlogwatch script #643
OCPBUGS-50673: Install python3-inotify pkg explicitly #640
OCPBUGS-49998: Fix runlogwatch failure if LOG_DIR does not exist #637
Full changelog

ironic-agent

OCPBUGS-55680: Delay determining the hostname to put into ignition #185
METAL-1305: Do not use openstack packages #179
Full changelog

ironic-machine-os-downloader

append .0 to go.mod version #104
Full changelog

kube-metrics-server

append .0 to go.mod version #43
Full changelog

kube-rbac-proxy

ART-13124: Update go.mod to include patch version in go directive #120
Full changelog

kube-storage-version-migrator

ART-13124: Update go.mod to include patch version in go directive #217
Full changelog

kubevirt-csi-driver

OCPBUGS-54631: Ensure volume stays attached through reboots #56
OCPBUGS-44623: During detach don’t return error if VM is not found #50
Full changelog

machine-api-operator

OCPBUGS-57073: Updates GCP CredentialsRequest #1377
OCPBUGS-53036, OCPBUGS-53037: Updates GCP credentials request #1345
OCPBUGS-52576: add image/read permissions #1344
OCPBUGS-52359: Remove unneeded VNet permissions from Azure CredentialsRequest #1337
OCPBUGS-51370: Drop oVirt support #1334
Full changelog

machine-config-operator

OCPBUGS-57135: pkg/operator/status: Drop PoolUpdating as an Upgradeable=False condition #5111
OCPBUGS-56901: Fix dynamic-system-reserved-calc.sh when only true parameter is used #5096
OCPBUGS-56976: Boot Image Controller should not degrade when golden configmap is slow to update #5101
OCPBUGS-56990: Only update boot disks during GCP boot image updates #5102
OCPBUGS-56828: daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers #5087
OCPBUGS-52313: Update machine-config-daemon-pull.service to use custom policy for Podman < 4.4.1 #4893
OCPBUGS-56665: Add hot loop detection in the boot image controller #5077
OCPBUGS-56395: error from generateAndValidateRenderedMachineConfig function can be misleading #5060
OCPBUGS-56218: Rewrote TestFirstBootHasSSHKeys e2e test in pure Go #5053
OCPBUGS-55615: MSBIC should not update windows machinesets #5021
OCPBUGS-55490: MCO should fall back to us-east-1 for AWS bootimages if no region specific-AMI exists #5020
OCPBUGS-54830: Make mtu-migration run after wait-for-primary-ip #4989
OCPBUGS-52314: on-prem/resolv-prepender: stop leaking tmp files #4894
OCPBUGS-45989: Do not run resolv-prepender from NM dispatcher #4785
OCPBUGS-52188: ignore mc not found error #4957
OCPBUGS-52951: Add ipsec connect wait service #4930
OCPBUGS-53441: Fixing typos for MachineConfigNode #4936
OCPBUGS-53186: Update ObservedGeneration in KubeletConfig #4919
OCPBUGS-53225: daemon: ensure ostree-finalize-staged is started before rebooting #4920
OCPBUGS-52160: Enforce VIPs to be collocated at the same host #4884
OCPBUGS-52303: Enable nmstate-configuration on all platforms #4891
OCPBUGS-51003: daemon: add nil check for annotation fetching #4862
OCPBUGS-51353: Update cluster-reader ClusterRole permissions #4882
OCPBUGS-50955: create /run/nodeip-configuration before use #4858
OCPBUGS-51334: Update format verbs for alert logs #4880
OCPBUGS-52257: configure-ovs workaround for ovs-if-br-ex bug #4889
OCPBUGS-49973: Update the storage.conf configuration file template #4836
OCPBUGS-49363: Auto-recover from MC with invalid extension #4824
OCPBUGS-49716: MCO CO degrades are stuck on until master pool updates complete #4826
OCPBUGS-49639: Add clarification to invalid maxUnavailable alert #4820
Full changelog

machine-image-customization-controller

append .0 to go.mod version #135
Full changelog

machine-os-images

OCPBUGS-54146: Change rhcos release browser url #56
Full changelog

metallb-frr

OCPBUGS-55021: Backport DynamicASN #92
OCPBUGS-55344: OpenShift Only: TEMPORARY: pin FRR version to known working rpm #89
OCPBUGS-44111: Use metrics for readiness/liveness probes #77
Full changelog

monitoring-plugin

OCPBUGS-54211: fix issue preventing dev silences from loading #374
OU-724: remove deleted image #377
OCPBUGS-51117: Fix overview links #357
Full changelog

multus-admission-controller

append .0 to go.mod version #97
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-47471: adds getcontext (backport 4.17) #260
Full changelog

multus-networkpolicy

append .0 to go.mod version #71
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-55617: Fixes leftover podref issue #364
Full changelog

must-gather

NO-JIRA: append .0 to go.mod version #492
Full changelog

network-metrics-daemon

append .0 to go.mod version #105
Full changelog

network-tools

append .0 to go.mod version #148
Full changelog

networking-console-plugin

Add translations 4.17 #239
Add translations scripts #235
Full changelog

nutanix-machine-controllers

OCPBUGS-47267: fixing CVE-2024-45338 #92
OCPBUGS-55728: Fix link-local addresses being added to machine #102
Full changelog

oauth-apiserver

append .0 to go.mod version #133
Full changelog

oauth-proxy

OCPBUGS-30443: Update dependencies to address CVE-2024-24786 #298
Full changelog

oauth-server

append .0 to go.mod version #185
Full changelog

openshift-apiserver

append .0 to go.mod version #525
Full changelog

openshift-controller-manager

OCPBUGS-57480: Set node-pullsecrets volume to read-only to protect image pull credentials #393
OCPBUGS-55826: Empty proxy variables are causing issues during the build #379
Full changelog

openshift-state-metrics

append .0 to go.mod version #124
Full changelog

openstack-cluster-api-controllers

append .0 to go.mod version #364
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-56250: fix(olm): improve error logging for missing olm.managed label (#3558) #1004
OCPBUGS-51226, OCPBUGS-51228, OCPBUGS-51246: (vendor) pin go-jose/v4@v4.0.5 #998
OCPBUGS-53071: add missing pod disruption reasons to isPodDead #982
OCPBUGS-53283: Ensure that PSA label is latest instead of pinning versions #985
OCPBUGS-50829, OCPBUGS-50831, OCPBUGS-50835: CVE-2025-24976 Bump github.com/distribution/distribution/v3 [release-4.17] #968
Full changelog

operator-marketplace

ART-13124: append .0 to go.mod version #638
OCPBUGS-53179: Ensure that PSA label is latest instead of pinning versions #607
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-56443: Fix predicate for cluster subnet route to gateway router #2578
OCPBUGS-56244: Allow default network pods to reach localnet on the same node #2572
OCPBUGS-52480: Handles unspecified protocol in network policy port #2478
OCPBUGS-54203: Update OVN to FDP25.A.1 24.03.5-40. #2496
OCPBUGS-52409: Change dynamic_neigh_routers to false for the Interconnect topology. #2476
OCPBUGS-50519: kubevirt, localnet: Reduce live migration downtime #2458
OCPBUGS-48777: Fixes unexpected mp0 route removal during start up #2423
OCPBUGS-48828: fixes overzealous deletion of SNAT in egressIP #2425
Full changelog

powervs-machine-controllers

append .0 to go.mod version #117
OCPBUGS-54750: Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.17 #113
Full changelog

prom-label-proxy

append .0 to go.mod version #381
Full changelog

prometheus

append .0 to go.mod version #258
OCPBUGS-56738: BACKPORT: fix promtool analyze block shows metric name with 0 cardinality #254
OCPBUGS-54941: Scraping: Bump cache iteration after error to avoid false duplicate detection. #249
Full changelog

prometheus-alertmanager

append .0 to go.mod version #102
Full changelog

prometheus-node-exporter

append .0 to go.mod version #167
Full changelog

route-controller-manager

OCPBUGS-55943: Added error event for failed ingress to route conversion #60
OCPBUGS-53077: ingress: Reset metrics when ingress is deleted #57
Full changelog

service-ca-operator

append .0 to go.mod version #266
OCPBUGS-34228: Updating ose-service-ca-operator-container image to be consistent with ART for 4.17 #261
Full changelog

telemeter

ART-13124: Update go.mod to include patch version in go directive #562
Full changelog

tests

OCPBUGS-50664: Replace RunHostCmd with Exec function to censor bearer token being exposed #29539
OCPBUGS-56221: aws/edge: prevent test using unschedulable nodes #29792
OCPBUGS-55451: support provider type external #29737
OCPBUGS-55269: Bump to Kubernetes v1.30.12 #29771
OCPBUGS-55498: [build] Ensure Git Clone Does Not Run Privileged #29743
OCPBUGS-54767: Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com #29660
OCPBUGS-52580: Use payload pullspec for image info test #29588
OCPBUGS-38835: Try also user CA for getting openshift-tests image #29029
Full changelog

thanos

append .0 to go.mod version #161
Full changelog

vsphere-csi-driver-operator

OCPBUGS-52207: fix panic when vcenter address is incorrect #295
OCPBUGS-50593: Set reconcile-sync to 10 minute for ListVolume #291
OCPBUGS-49858: Escape backslash in vCenter username #288
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github