Back to index

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.17.36-x86_64

Team Approvals:

• Accepted
  • QE

Tests:

• Blocking jobs
  • upgrade Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
  • upgrade-minor Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
• Informing jobs
  • aws-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.17-e2e-aws-ovn-serial
  • aws-ovn-upgrade-4.17-micro Succeeded periodic-ci-openshift-release-main-ci-4.17-e2e-aws-ovn-upgrade
  • aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-main-ci-4.17-e2e-aws-ovn-upgrade
  • azure-ovn-upgrade-4.17-micro Succeeded periodic-ci-openshift-release-main-ci-4.17-e2e-azure-ovn-upgrade
  • fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.17-fips-payload-scan
  • gcp-ovn-rt-upgrade-4.17-minor Succeeded periodic-ci-openshift-release-main-ci-4.17-upgrade-from-stable-4.16-e2e-gcp-ovn-rt-upgrade
  • hypershift-ovn-conformance-4.17 Succeeded periodic-ci-openshift-hypershift-release-4.17-periodics-e2e-aws-ovn-conformance
  • metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-main-nightly-4.17-e2e-metal-ipi-ovn-bm
  • metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.17-e2e-metal-ipi-ovn-ipv6

Upgrades from:

• 4.17.35 (changes) - S S S S S
• 4.17.34 (changes) - Success
• 4.17.33 (changes) - Failed
• 4.17.22 (changes) - Success
• 4.17.12 - Success
• 4.17.9 (changes) - Failed
• 4.17.2 (changes) - Success
• 4.17.1 (changes) - Success
• 4.17.0 (changes) - Failed
• 4.16.44 (changes) - Success Success
• 4.16.43 (changes) - Success
• 4.16.42 (changes) - Failed
• 4.16.35 (changes) - Success
• 4.16.34 (changes) - Success
• 4.16.21 (changes) - Failed
• 4.16.10 (changes) - Success
• 4.16.9 (changes) - Success
• 4.16.8 (changes) - Failed
• 4.16.0-0.nightly-2025-07-16-212107 (changes) - Success

Upgrades to:

• 4.18.32 (changes) - Failed
• 4.18.23 (changes) - Success
• 4.18.22 (changes) - Success
• 4.18.21 (changes) - S S S
• 4.17.44 (changes) - Success
• 4.17.42 (changes) - Success
• 4.17.39 (changes) - Failed
• 4.17.38 (changes) - Failed
• 4.17.37 (changes) - F S S F F S S F

---

Loading changelog, this may take a while ...

Changes from 4.17.12

Created: 2025-07-17 08:24:46 +0000 UTC

Image Digest: sha256:9c476b68adc8fbcf44f37d96dd7e45e3a5c792d80cdb5227108e87aa9d448e78

Components

• Kubectl 1.30.5
• Kubernetes upgraded from 1.30.7 to 1.30.14
• Kubernetes Tests upgraded from 1.30.0 to 1.30.14
• Red Hat Enterprise Linux CoreOS upgraded from 417.94.202501071621-0 to 417.94.202507132309-0 (diff)

Removed images

• ovirt-machine-controllers

Rebuilt images without code change

• aws-ebs-csi-driver git 2bb5b316 sha256:0a2ab4a4570e4c737984284522c9b6ec1c6e338807c317496a5f331ed40b03ec
• aws-kms-encryption-provider git 9d401670 sha256:8ce8d57fcceaf4f9d49e8f9da3d16d28bba099431f26fd2cba10be4770a2216b
• aws-machine-controllers git b41b8c8f sha256:8cf17659200e781ad9bbe911a0cf073cad49f7353b4ef98f47657516f4f767b6
• azure-cloud-controller-manager git 626ecd1c sha256:42f66d60f62bdc6222b5637a476f880185b948b7ca9a61910707d2e957aee8c0
• azure-cloud-node-manager git 626ecd1c sha256:3f6c1690a7505216917cc1364ef4f29763af4a98e7f17eac6478a526cfaccbde
• azure-cluster-api-controllers git d359bfe5 sha256:3cb7013048a3cbd7e6acb3c2dd4526c1d6fb54a5ad9c5ec88575d847f23421f4
• azure-disk-csi-driver git a544f30b sha256:803a03d0f0e4a918ddf8cc9b858e361c423b5ecb46f2f0cd8f99fa5e0bb078cd
• azure-file-csi-driver git 9f4c38c2 sha256:0acc4c86f299a830c5126c2e53fb59769dd57eb6e0cd53159caa003ed3732e28
• cluster-autoscaler-operator git ea4a8878 sha256:33155201401c18c784a53174fc914b93b4fa7b519640f0109385321942215290
• cluster-bootstrap git 95dd9129 sha256:b0d21d5837c232724d929e7ddc95b6b24ceaa55b1983934d25e3ac1bcd1c439c
• cluster-capi-controllers git 77ef4fc5 sha256:842402db1a3d53fd2c0d33102755b30db4ea04f09d54d4bcf91a8e9c749dcc14
• cluster-cloud-controller-manager-operator git 32fd8399 sha256:b054424a03dd759c64f83696aa97ea0a1c77b2cf25307c3e5e73d85560b65654
• cluster-control-plane-machine-set-operator git f7e01c2f sha256:30569c41baf2a07ed47910cc3571ed313133f31fb9bd77d7a316f651b5fd31f2
• cluster-csi-snapshot-controller-operator git ffba005b sha256:b03705fe09039886c1ffc648328b5d1679fbc3d13c924738306f0295f227e48b
• cluster-kube-cluster-api-operator git aed5f6c7 sha256:1a49b3c9dab7755dcf365d20e5d56b140dce28a1b895bf181e2e64ff55a5b509
• cluster-kube-controller-manager-operator git 0a9ed573 sha256:4a3b0625d09e9fbc0aa41779cb4e3c235155c6491f12b3cfb503cd938a6f940b
• cluster-kube-scheduler-operator git 98ca953b sha256:d49aa1d6970ab82ee714253c933e96ce0d991a0a048a42956ef0d7fc83849b90
• cluster-kube-storage-version-migrator-operator git ab40b611 sha256:062f3d63f5aed84c2b452786c982cf34a4c2fae78f80ebf0a6fa7d0936b8d01e
• cluster-monitoring-operator git ff3a4f02 sha256:6a3609e2efaea5c12e9b21e8935e5280bb6c8d0e2739da45ff3cbacb672c30bc
• cluster-olm-operator git e31b7775 sha256:0342eb979590285709a73c245ed5baf8dd649c877875690f66858f67f87ae7e7
• cluster-openshift-apiserver-operator git 2b2ba3be sha256:66c049b16b90effab2804ee18840627d34106fee21078f356a31477ed42bff0e
• cluster-policy-controller git 7209e90d sha256:11240646453ae03e8cb998d6406f175fb465b4f0c86ba6821af6babf31d7042e
• cluster-update-keys git 2ce31fc5 sha256:2cf48e2ac6b66bbe0055dc16c8bdf2f9957237ac288a2dda9491936a7e0dcf36
• console-operator git 253854e7 sha256:b3c19b032c10fcc2ae15cfba51b7e5cda92d3aa219d373f66742113d8e8cb9a8
• csi-driver-manila-operator git efc99a2a sha256:2821fae91bf32c2ee4a6f4e5eded8ee35006e42aadfdb826a9305c8e2b8f2b13
• csi-driver-shared-resource-operator git c095a1f2 sha256:39fa2add17f64feee4b1f517a58b376aad35575aa61110c117a857595009bb13
• csi-external-attacher git c3fe8e2e sha256:52ae9e7adacc3adb3400f3f914ab39aed6414f302d20c30134834a7c5ca1e9d9
• csi-external-provisioner git fe460e56 sha256:93915de2895e99decbe8314f51a6fa4547fa0afc1ef3a56e11c6c5787f9adb66
• csi-external-resizer git ab87a938 sha256:04d1dd524b5df7d6e7f453b9731a933c01d48864fa76d05d82d4e77b6485cae1
• csi-external-snapshotter git aa558ca4 sha256:b87fe047721143079a14cac1a8476c745641fdcf90bc1046c96d468d5e27ca17
• csi-snapshot-controller git aa558ca4 sha256:6f6546dd4897dd0e65497c76c43eeb7c1b8a8a0c631b591d8fa6ed77f41c8f3b
• csi-snapshot-validation-webhook git aa558ca4 sha256:02cc35a8b2d41121f9c540cc28e6231f7c8cf1456d3bc9747b7551aae7ce360f
• driver-toolkit git 859518f6 sha256:502ad56b8473d96a225daaf224643f28dc7edb8f8d4991666d276577e63180cb
• egress-router-cni git 3193a756 sha256:5686407be006390eb5e317e04405ec1f3613bca2846bba605491c5f00d1df4c5
• gcp-cloud-controller-manager git 8ce997d7 sha256:2ad92129195bbfb6b2d2c3e0b512961084b5e1077ba19cf42277bfe7cba3552f
• gcp-cluster-api-controllers git 9c561f2d sha256:7f6db2cc1bde1f336f755d8228f16f60e7df5ab0c4f632157f16e654a737fc5f
• gcp-pd-csi-driver git c770b412 sha256:c7bb1126ab33ef5e4398cb776fa1efabb5715f6385f3f4b6f56d3271d22a924e
• gcp-pd-csi-driver-operator git c23b064f sha256:eaa52d629f6c26bee3e285cc47c3ce6121c06816b549ed29e52b0506344cd01d
• gcp-workload-identity-federation-webhook git 08579e9f sha256:64bf84bd1c313dc743cff553f77945a178f28a1dd6e6b3d6727dc6c69da484de
• ibm-cloud-controller-manager git ad8f7eb0 sha256:9dc5cf7a1686c22acb3e95786e86c32ba2a3c50597b46da524565543e8b423cc
• ibm-vpc-block-csi-driver-operator git 8443d86b sha256:237428bcfc32800516cb7da3e9983ac1f2d39650104bc9916cd2035139421930
• keepalived-ipfailover git e3879e9e sha256:6c0aadf708ec787e6a94bd8c8f888bd45aa33d6fd9955f5282e3c85ea6fb0532
• kube-proxy git dee082de sha256:8f455048e699dc8f41ca521fad3cd0aee8b70ea73587aa2bfd1fbbf198dc11c5
• kube-state-metrics git 462e63f6 sha256:cddd0015e469cef96b91f4a0de6540c4d49388847eb26181feaf44e4a68c51d8
• kubevirt-cloud-controller-manager git 3f4542ec sha256:012eb36979b247d1e0867fbc8c00a50c288202d9b4d842de575366112c650e77
• libvirt-machine-controllers git a336f0b5 sha256:12ca5814abaae62dd2b26aee5516f95d72a3dc876e4caf93c118e7d6de8b1794
• multus-route-override-cni git 391c1b03 sha256:0faa160f5db1cf484e4d59edc81dbb4de47cedcd38b95aabe4031b639f1b7fba
• network-interface-bond-cni git 8630f336 sha256:8498607056b164848fd1ab75022ec103c18ac6477765e06941a0b7fe46b56d62
• nutanix-cloud-controller-manager git c9f6cd1f sha256:fffd3c052810028acecf4e2d4d4a241edd699cb748e5b06292a4869a42f8cf5b
• olm-catalogd git c740e056 sha256:872e5d524e2565b0decef62e88e8e40e757f46719659d312b1adcecfdcf3fa1d
• openstack-cinder-csi-driver-operator git f89b6dbc sha256:335389e1b21980743b67ac63ed95fb675dd064773335b926c99227093bc2eee4
• openstack-machine-api-provider git 68971874 sha256:e4e09d7ffa81dde5404ac36061eeb2f4f26a5486580746a6ea5fea397c5af3f6
• ovirt-csi-driver git 1db726a9 sha256:9a7ad6cfa53ad52a7834884edd8daf7163f11a6da89fea33b503e13b3fedd24a
• ovirt-csi-driver-operator git 0feae256 sha256:477994e22355d1571115b11785c42aef22047e3f8fb655ea5816c11c5bc936b0
• powervs-block-csi-driver git aaa6afa9 sha256:4d61be44ca2a58e78211d06b5a630e65602dd11ec54ec080a09eb50ee1dd0cd7
• powervs-block-csi-driver-operator git f6f037c5 sha256:793727f5b37c21ff35a29cd07602715af57f9531435614fe2a9209f0d944db61
• powervs-cloud-controller-manager git bd3d72e5 sha256:ac1e4c31eb154fbaf1d3da8585b1b9fb7816bc9063a480e0eda5a8bf43d60608
• prometheus-config-reloader git 77cedd6c sha256:bbc6a8e1a42285e4e761a5482d0a21a923b6b63bf0cf4ea8151632f4782e6765
• prometheus-operator git 77cedd6c sha256:286674a7984b826520247d4bd72eb228ae68ff9042752398f783d78c898365ae
• prometheus-operator-admission-webhook git 77cedd6c sha256:4e463bd6e6afd9e637558ee17c8d3af47dc4ce7f5e299efe80b917f21987fa6d
• rhel-coreos sha256:5a156be6f72a8dbd2fe7fc0658a758c0e5fa78f57a4e4dc3416f2f8c3f5dc9d8
• rhel-coreos-extensions sha256:30264a7026ccf1d507c7afaa3e045760c36add67bb22a0377d441c064484aaeb
• vsphere-cloud-controller-manager git 097d823b sha256:f09d7fd2e4e920674af9a4ed98d58153ed296abd9bc68ee2cbbc2e58c40912ea
• vsphere-cluster-api-controllers git 1661cc3f sha256:d037a6d2c458e5d1b9ad71f8f878562b901ee385f05f2da0dd2b5da20a2f5045
• vsphere-csi-driver git 039ee368 sha256:e8ffcbfc75904121bfb54417e957f0402d5eb7a26dcf372cc2958a258ac5bca2
• vsphere-csi-driver-syncer git 039ee368 sha256:4106a28223d244c7cb75b8f00673074156676b65fe358428d8d8f796a9e43fa6
• vsphere-problem-detector git cd0df71f sha256:bb4ca36431f1150f7577c5833d8737fe41e4918c81ac94e2d83e5e4e3b694cf0

agent-installer-api-server

• OCPBUGS-47627: dnsmasq service on OCP SNO fails to read /etc/resolv.conf file during system startup (#7724) #7724
• OCPBUGS-51230: Revert go-jose from v4.0.5 to v0.3.04 (#7605) #7605
• OCPBUGS-51230: Bump github.com/go-jose/go-jose/v4 to v4.0.5 in release-4.17 (#7574) #7574
• OCPBUGS-54402: Bump go-jwt to 4.5.2 to fix CVE-30204 (#7484) #7484
• OCPBUGS-48390: Bump moby from v26.0.0 to v27.2.1 (#7188) #7188
• MGMT-19537: Bump golang.org/x/net to 0.33.0 (#7129) #7129
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.17 (#1088) #1088
• Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.17 (#1087) #1087
• OCPBUGS-53719: Bump jwt to 4.5.2 in release-4.17 (#1086) #1086
• abi: let the bootstrap waiting for workers before rebooting (#1028) #1028
• OCPBUGS-47493: MGMT-19537: Bump golang.org/x/net to 0.33.0 (#989) #989
• Full changelog

agent-installer-node-agent

• OCPBUGS-52994: Update to latest ghw version (#986) #986
• Updating ose-agent-installer-node-agent-container image to be consistent with ART for 4.17 (#798) #798
• OCPBUGS-53711: Bump jwt to 4.5.2 in release-4.17 (#964) #964
• NO-ISSUE: Increase image pull timeout during install (#922) #922
• MGMT-19537: Bump golang.org/x/net to 0.33.0 (#873) #873
• Full changelog

agent-installer-utils

• append .0 to go.mod version #110
• Full changelog

apiserver-network-proxy

• append .0 to go.mod version #82
• Full changelog

aws-cloud-controller-manager

• append .0 to go.mod version #109
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-53727: bump to github.com/golang-jwt/jwt/v4@v4.5.2 #546
• OCPBUGS-51309: UPSTREAM: 5339: Bump glog for recent fixes #539
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator

• OCPBUGS-46512: remove EFS driver metrics #350
• OCPBUGS-44974: Set separate secrets for file and disk config on HyperShift #331
• Full changelog

aws-pod-identity-webhook

• OCPBUGS-51232: github.com/go-jose/go-jose/v4 v4.0.5 #202
• Full changelog

azure-kms-encryption-provider

• append .0 to go.mod version #19
• OCPBUGS-53495: bump golang-jwt v4 #12
• Full changelog

azure-machine-controllers

• OCPBUGS-56655: Fix failure when attempting to modify immutable availabilitySet #152
• OCPBUGS-55729: Update eviction policy for Spot VMs from Deallocate to Delete #140
• OCPBUGS-54393: Re-reconcile machine on NIC provisioning failure #136
• OCPBUGS-52359: Remove unused vnet package #130
• OCPBUGS-50017: dynamically setting the amount of fault domains #127
• Full changelog

azure-workload-identity-webhook

• OCPBUGS-53799: github.com/golang-jwt/jwt/v4 v4.5.2 #32
• OCPBUGS-51234: github.com/go-jose/go-jose/v4 v4.0.5 #28
• Full changelog

baremetal-cluster-api-controllers

• ART-13124: Update go.mod to include patch version in go directive #46
• OCPBUGS-47049: Bump x/net to 0.33.0 #32
• Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

• OCPBUGS-58319: vSphere - remove unit tests using nip.io #9821
• OCPBUGS-57293: sort zone slices extracted from map of byo subnets #9778
• OCPBUGS-56448: vsphere - check if host is powered down or on standby before uploading template #9726
• OCPBUGS-57292: ensure ctrplane nodes can access bootstrap MCS #9775
• OCPBUGS-57304: IBI nmstate unit test fix #9777
• OCPBUGS-55224: Fix Load balancer IP setup #9675
• OCPBUGS-51116: update resolv.conf every time on bootstrap node #9504
• OCPBUGS-51210: Fixes panic during GCP tags fetch due to unstable network #9512
• OCPBUGS-46375: Allow spaces in the aws tags [release-4.17] #9315
• OCPBUGS-54357: IBMCloud: Move to IBM TF openshift fork #9613
• OCPBUGS-53378: Remove error logging when determining image arch #9581
• OCPBUGS-53459: aws: fix NLB creation in secret regions #9071
• OCPBUGS-52961: Remove tmp directory used for agent pxe files #9552
• OCPBUGS-43528: Prevent race with provisioning-interface service #9110
• OCPBUGS-44058: Log correct hostname for validation status #9162
• OCPBUGS-50967: PowerVS: destroy dhcp hack #9494
• OCPBUGS-50846: OCPBUGS-50702: [release-4.17] MGMT-19771: Convert IDS to proper IDMS manifest #9470
• OCPBUGS-50876: correct typo #9484
• OCPBUGS-49975: aws/edge/byovpc: subnets tag kube cluster tag to shared #9445
• OCPBUGS-48761: Update RHCOS 4.17 bootimage metadata to 417.94.202501301529-0 #9448
• OCPBUGS-49993: Disable IP Forwarding for CAPG Machines #9446
• OCPBUGS-41300: Azure: Update SecurityType passed in at Image creation #9409
• OCPBUGS-49362: [Nutanix] Installation failed with timeout when uploading images to PC #9406
• OCPBUGS-48645: azure: use separate /var to avoid growfs timeouts #9381
• OCPBUGS-45340: move GCP zone filtering client-side #9264
• OCPBUGS-48257: remove the types which failed by RHEL-59521 and add the new gpu vm type #9354
• OCPBUGS-45813: Remove unused variable from ASH arm template 06_workers.json #9285
• OCPBUGS-48359: Allow more time for Service Account Creation #9362
• OCPBUGS-45344: support additionalNTPSources in node-joiner tool #9265
• OCPBUGS-48119: Always set AllowCrossTenantReplication parameter to false #9346
• OCPBUGS-46432: Power VS: Create region-zone-sysType hierarchy #9319
• Full changelog

baremetal-machine-controllers

• OCPBUGS-46646: Bump x/net to 0.33.0 #225
• Full changelog

baremetal-operator

• OCPBUGS-53325: BMO can expose any secret via BMCEventSubscription CRD #406
• OCPBUGS-42387: Remove dataImage finalizer if BMH is missing #390
• OCPBUGS-49701: Handle HFC for non-redfish HW #395
• Full changelog

baremetal-runtimecfg

• OCPBUGS-48766: Extend haproxy-monitor fall time #340
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-58091: avoid transfering permissions when copying artifacts from node-joiner pod #2053
• OCPBUGS-57446: Use fedora image in unit tests instead of centos #2038
• OCPBUGS-49607: Address golang.org/x/* CVEs #1962
• OCPBUGS-50984: Add HOST env var in oc debug for sos report collects more #1976
• OCPBUGS-49605: Address github.com/docker/docker CVE #1968
• OCPBUGS-45344: additional rbac policy rules #1937
• Full changelog

cloud-credential-operator

• OCPBUGS-58248: ccoctl: only add owned tag to azure resources on create #883
• OCPBUGS-56980: Azure: resolve nil pointer exception when role assignment exists #868
• OCPBUGS-54828: Render: configure proxy on bootstrap static pod #863
• OCPBUGS-53415: github.com/golang/glog v1.2.4 #842
• OCPBUGS-53823: update github.com/golang-jwt/jwt #838
• OCPBUGS-51548: Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #828
• OCPBUGS-51238: github.com/go-jose/go-jose/v4 v4.0.5 #825
• Full changelog

cloud-network-config-controller

• OCPBUGS-56257: Increase API call timeout to 30 second #171
• Full changelog

cluster-authentication-operator

• OCPBUGS-54580: Avoid duplicate OAuth client creation #765
• Full changelog

cluster-autoscaler

• OCPBUGS-54325: improve replica counting and decrease target size behavior #352
• OCPBUGS-48606: UPSTREAM: <carry>: 🐛(metrics) Initialize metrics for autoscaler errors, scale events, and pod evictions #337
• Full changelog

cluster-baremetal-operator

• OCPBUGS-54542: Add missing relatedObjects #469
• Full changelog

cluster-capi-operator

• append .0 to go.mod version #314
• OCPBUGS-48493: fix: always update clusteroperator status versions when differing #250
• Full changelog

cluster-config-api

• OCPBUGS-57285: Add IPsec API for NAT-T UDP encapsulation support #2363
• OCPBUGS-49702: Add IdleConnectionTerminationPolicy field to IngressControllerSpec #2186
• OCPBUGS-39130: Added checks to prevent vCenters from changing after install past 1 vCenter #2014
• Full changelog

cluster-config-operator

• append .0 to go.mod version #441
• Full changelog

cluster-dns-operator

• OCPBUGS-52497: [release-4.17] Add runbook_url for CoreDNSErrorsHigh #430
• Full changelog

cluster-etcd-operator

• OCPBUGS-53511: fix CVE-2025-30204 #1414
• Full changelog

cluster-image-registry-operator

• OCPBUGS-53871: bump github.com/golang-jwt/jwt #1218
• OCPBUGS-51604: bump golang.org/x/oauth2 #1209
• OCPBUGS-51103: ensure that storage names don’t end in dashes #1180
• Full changelog

cluster-ingress-operator

• OCPBUGS-49702: Add e2e tests for IdleConnectionTerminationPolicy #1225
• OCPBUGS-49702: Add support for IdleConnectionTerminationPolicy #1223
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-50516: Increase waitForFallbackDegradedConditionTimeout #1803
• Full changelog

cluster-machine-approver

• OCPBUGS-48155: Fix race condition in CO status controller test #266
• Full changelog

cluster-network-operator

• OCPBUGS-57285: Implement IPsec NAT-Traversal encapsulation option #2726
• OCPBUGS-55518: iptables-alerter streamlining #2698
• OCPBUGS-55033: Add IPv6 NGINX configuration #2689
• OCPBUGS-52951: Unexpected Behavior During Cluster Upgrade for the ovn-ipsec-host pods #2654
• OCPBUGS-49816: ovn-k, rbac: Enable users read & modify UserDefinedNetwork CRs #2655
• OCPBUGS-49961: Update egressfirewall CRD to be consistent with ovn-kubernetes repo #2642
• : OCPBUGS-44863: Add nodeslicepool #2574
• OCPBUGS-44807: ovn-k, cudn: Add missing permissions to ovnkube-node #2575
• Full changelog

cluster-node-tuning-operator

• use ROLE_WORKER_CNF environment variable to determine mcp name (#1290) #1290
• Add missing Polarion test case id (#1288) #1288
• e2e: tuned degraded test fix (#1259) #1259
• OCPBUGS-48213: [release-4.17][manual] Adjust Workload Hints test cases based on Intel or AMD (#1277) #1277
• Full changelog

cluster-openshift-controller-manager-operator

• OCPBUGS-47770: Add team members to the OWNERS file #375
• Full changelog

cluster-samples-operator

• OCPBUGS-55800: only update LastTransitionTime if operator status change #640
• OCPBUGS-55795: Adding filter to clusterOperatorInformerEventHandler #639
• OCPBUGS-55894: Samples Operator should sort failing image imports #641
• OCPBUGS-55042: Adding mutex to func createSamples on handler.go #632
• OCPBUGS-54362: add rhdmalone to owners #619
• OCPBUGS-48786: add shannon and aroyoredhat as owners #595
• Full changelog

cluster-storage-operator

• OCPBUGS-52222: fix Vsphere cluster Storage operator in Unavailable state #560
• Full changelog

cluster-version-operator

• OCPBUGS-50589: Set openshift.io/required-scc: privileged annotation in version pods #1154
• Full changelog

configmap-reloader

• append .0 to go.mod version #70
• Full changelog

console

• OCPBUGS-59265: fix bug where / in console.tab/horizontalNav href brea… #15270
• OCPBUGS-58318: Implement sessions in openshift authenticator #15238
• OCPBUGS-58224: Add the ability to launch multiple modals with useModal hook #15222
• OCPBUGS-58378: Cannot read properties of undefined (reading ‘filter’) error while accessing nodes from console. #15241
• OCPBUGS-57835: Add flags in console static plugin for all the components of this epic #15192
• OCPBUGS-57932: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15197
• OCPBUGS-57182: Fix ‘/metrics’ endpoint token review to handle interna… #15154
• OCPBUGS-56895: HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling #15108
• OCPBUGS-57095: Add all files to vendor regardless of gitignore #15132
• OCPBUGS-57114: Debug pod logs are not accessible when debugging a node via OpenShift Console #15142
• OCPBUGS-56975: Sample segment sessions #15114
• OCPBUGS-56844: Enable knative tests #14387
• OCPBUGS-56375: remove 60 day alert from cluster update modal #15062
• OCPBUGS-55924: Fetching taskRuns in PLR details page using PLR UID also #15029
• OCPBUGS-55756: update the Deployment pod on change in imageStream #15022
• OCPBUGS-56238: Remove the devconsole backend common internet proxy and replace it with dedicated ones #15049
• OCPBUGS-55447: Authenticate user token in openshift Authenticate func #15010
• OCPBUGS-55415: fix bug where operator appears twice #15002
• OCPBUGS-55202: Do not load CSRs if user does not have permissions #14985
• OCPBUGS-52999: Pipeline visualisation shows all tasks as Failed and after that goes to Running state #14862
• OCPBUGS-53168: Remove logoutOpenShift method call #14883
• OCPBUGS-51277: Fix JSON annotation parsing issue and harden related code #14795
• OCPBUGS-53086: Update the monitoring topic used by the console team #14871
• OCPBUGS-52205: Show Observe section without PROMETHEUS and MONITORING flags #14811
• OCPBUGS-51292: fix run time error when no completed version exists #14796
• OCPBUGS-51126: Fix alert rule link to alert in dev perspective #14785
• OCPBUGS-49795: ‘create a Project’ button on Getting started page doesn’t work #14714
• OCPBUGS-39602: Set default build option as BUILDS for Builder Image sample #14241
• OCPBUGS-45740: Fix Function Import: An error occurred Cannot read properties of undefined (reading ‘filter’) #14595
• OCPBUGS-45625: use default StorageClass for ServerlessFunction pipelineVolumeClaimTemplate #14589
• OCPBUGS-41596: No need to supply ‘User workload notifications’ option on ‘User Preference’ page for normal user #14265
• OCPBUGS-44220: disable flaking and change pre-condition test for knative e2e #14467
• OCPBUGS-43751: Added token to proxy header #14430
• OCPBUGS-48161: ERROR in search tool: Cannot read properties of undefined (reading ‘state’) #14667
• OCPBUGS-48227: fix navigation from non-General User Preference tab to… #14674
• Full changelog

container-networking-plugins, containernetworking-plugins-microshift

• OCPBUGS-55622: Check error returned by ipv6 SettleAddresses #187
• Full changelog

coredns

• append .0 to go.mod version #135
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-58839: CARRY: don’t ignore json files #340
• OCPBUGS-52416: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.30 into release-4.17 #319
• OCPBUGS-43427: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.30 into release-4.17 #314
• Full changelog

csi-driver-nfs

• append .0 to go.mod version #156
• Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

• append .0 to go.mod version #372
• Full changelog

csi-livenessprobe

• append .0 to go.mod version #73
• Full changelog

csi-node-driver-registrar

• append .0 to go.mod version #80
• Full changelog

docker-builder

• OCPBUGS-57939: S2I build cpu limits observed by assemble are limited to 1 cpu #474
• OCPBUGS-53075: Upgraded Kubernetes dependency from 1.28.2 to 1.30.2 #465
• OCPBUGS-42894: buildah dependency bump to 1.37.6 #452
• OCPBUGS-33889: Updating openshift-enterprise-builder-container image to be consistent with ART for 4.17 #393
• OCPBUGS-47768: Add team members to the OWNERS file #423
• Full changelog

docker-registry

• OCPBUGS-53655: bump jwt and oauth dependencies #431
• OCPBUGS-49695: bump docker distribution #422
• Full changelog

etcd

• DOWNSTREAM: <carry>: OCPBUGS-53447: fix a compaction induce latency issue #321
• ETCD-714: Rebase etcd 3.5.18 openshift 4.17 #310
• Full changelog

gcp-machine-controllers

• OCPBUGS-53037: Disable shielded VMs for non-UEFI disks #115
• OCPBUGS-48064: Refactor exists() to handle gcp API change #105
• Full changelog

haproxy-router

• OCPBUGS-49390: Reject All CA-Signed Certs Using SHA1 #650
• OCPBUGS-49702: Add support for IdleCloseTerminationPolicy #652
• Full changelog

hyperkube, pod

• OCPBUGS-57888: Bump k8s api to 1.30.14 #2355
• OCPBUGS-57196: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2328
• OCPBUGS-57289: kubelet: fix a stall on startup from waiting too long for a stat call #2206
• OCPBUGS-55269: Bump k8s api to 1.30.12 #2280
• OCPBUGS-53016: Bump k8s api to 1.30.11 #2250
• OCPBUGS-51006: Bump k8s api to 1.30.10 #2210
• OCPBUGS-49905: Bump k8s api to 1.30.9 #2198
• Full changelog

hypershift

• CNTRLPLANE-936: fix(tekton): drop multiarch builds on PR #6224
• OCPBUGS-57432: Add proxy variables for the MCD Pod #6258
• CNTRLPLANE-918: Konflux build pipeline service account migration #6088
• CNTRLPLANE-918: Konflux build pipeline service account migration #6083
• OCPBUGS-55723: Don’t check if olm images exist if guest cluster #6115
• OCPBUGS-55500, RHOCPPRIO-433: Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs #6098
• OCPBUGS-51808: Fix golang crypto dependency go.mod replacement #5993
• OCPBUGS-54841: Add konnectivity-proxy sidecar to openshift-oauth-apiserver #6017
• OCPBUGS-53323: Handle multiple mirror entries for source #5894
• OCPBUGS-54631: Sync RBAC for attaching volumes on VM level #5997
• NO-JIRA: update konflux references #5479
• OCPBUGS-53903: bump golang-jwt v4 and v5 #5906
• NO-JIRA: Red Hat Konflux update control-plane-operator-4-17 #5959
• ART-11792: update go mod dependency for konflux #5920
• OCPBUGS-51737, OCPBUGS-51808: Bump dependencies to OCP fork in backports #5900
• OCPBUGS-48439: kubevirt, Don’t break on hostname NodePort.Address #5394
• OCPBUGS-51240: bump go-jose #5863
• OCPBUGS-52657: Make managed-trust-bundle optional #5794
• OCPBUGS-52425: [release-4.17] refactor aws identity health check into new controller #5772
• OCPBUGS-46340: change plaform to platform #5562
• OCPBUGS-51339: [release-4.17] Fix IsProgressing condition in HostedClusters #5712
• OCPBUGS-50697: add region to AWS creds passed to operators managed by CPO #5671
• OCPBUGS-51098: 4.17 Add HostedCluster additional trustbundles to konnectivity-https-proxy #5675
• NO-JIRA: Update dependency mkdocs-material to v9.6.5 #5682
• OCPBUGS-50596: Honor proxy vars in the util insecure http client #5605
• OCPBUGS-49828: Duplicate hostDevices.name when hostDevices.deviceName has multiple types. #5558
• OCPBUGS-48487, OCPBUGS-48488, OCPBUGS-48490: Fix IPv6 Disconnected HCP deployments #5402
• OCPBUGS-47533: Prevent IgnitionServer from flooding the API server with patch requests #5332
• NO-JIRA: Update dependency mkdocs-material to v9.6.3 #5590
• OCPBUGS-45268: Reconcile proxy CA bundle into hosted cluster #5228
• OCPBUGS-46465: Consistently look up and dial cloud API hostnames #5302
• NO-JIRA: Update dependency mkdocs-material to v9.6.1 #5528
• OCPBUGS-49638: fix overwriting PKI operator HCP conditions #5504
• OCPBUGS-46440: Allow ARM64 arch deployment on Agent platform #5296
• OCPBUGS-48170: fix disconnected via CLI #5465
• OCPBUGS-38810: nodepoolcontroller: List() PerformanceProfile status per NodePool #4585
• NO-JIRA: Update dependency mkdocs-mermaid2-plugin to v1.2.1 (release-4.17) #5428
• NO-JIRA: Update dependency mkdocs-material to v9.5.50 (release-4.17) #5427
• OCPBUGS-44927: Add multi-arch validation for HC/NodePool compatibility #5238
• NO-JIRA: [release-4.17] Bump golang.org/x/crypto and golang.org/x/net #5368
• Full changelog

ibm-vpc-block-csi-driver

• OCPBUGS-56062: tech debt: rework vendor patches #90
• append .0 to go.mod version #100
• OCPBUGS-53911: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #83
• Full changelog

ibmcloud-cluster-api-controllers

• OCPBUGS-50566: Fix for CVE-2024-45338 in golang.org/x/net/html in release-4.17 #101
• Full changelog

ibmcloud-machine-controllers

• OCPBUGS-52957: IBMCloud: MAPI replacing unhealthy CP nodes #63
• Full changelog

insights-operator

• Ignore previous status when disabling alerts (#1062) #1062
• Full changelog

ironic

• METAL-1305: Do not use openstack packages #647
• OCPBUGS-52292: Fix runlogwatch script #643
• OCPBUGS-50673: Install python3-inotify pkg explicitly #640
• OCPBUGS-49998: Fix runlogwatch failure if LOG_DIR does not exist #637
• OCPBUGS-49822: Drop quiet option of grep to avoid race condition with pipefail #633
• OCPBUGS-49756: Use pynotify instead of inotify-tools #631
• OCPBUGS-48149: Bump jinja2 to 3.1.5 #622
• Full changelog

ironic-agent

• OCPBUGS-55680: Delay determining the hostname to put into ignition #185
• METAL-1305: Do not use openstack packages #179
• Full changelog

ironic-machine-os-downloader

• append .0 to go.mod version #104
• Full changelog

ironic-static-ip-manager

• OCPBUGS-49350: Fix subnet validation #47
• Full changelog

kube-metrics-server

• append .0 to go.mod version #43
• Full changelog

kube-rbac-proxy

• ART-13124: Update go.mod to include patch version in go directive #120
• Full changelog

kube-storage-version-migrator

• ART-13124: Update go.mod to include patch version in go directive #217
• Full changelog

kubevirt-csi-driver

• OCPBUGS-54631: Ensure volume stays attached through reboots #56
• OCPBUGS-44623: During detach don’t return error if VM is not found #50
• Full changelog

machine-api-operator

• OCPBUGS-57073: Updates GCP CredentialsRequest #1377
• OCPBUGS-53036, OCPBUGS-53037: Updates GCP credentials request #1345
• OCPBUGS-52576: add image/read permissions #1344
• OCPBUGS-52359: Remove unneeded VNet permissions from Azure CredentialsRequest #1337
• OCPBUGS-51370: Drop oVirt support #1334
• Full changelog

machine-config-operator

• OCPBUGS-58292: Do not set cpu system reserve below the default value #5157
• OCPBUGS-58063: Update desired config in MCN on OCL update #5139
• OCPBUGS-56625: Give keepalived container chroot cap #5072
• OCPBUGS-58219: Boot image controller should correctly handle marketplace boot images #5151
• OCPBUGS-58218: add MachineConfiguration to CO related objects #5150
• OCPBUGS-57135: pkg/operator/status: Drop PoolUpdating as an Upgradeable=False condition #5111
• OCPBUGS-56901: Fix dynamic-system-reserved-calc.sh when only true parameter is used #5096
• OCPBUGS-56976: Boot Image Controller should not degrade when golden configmap is slow to update #5101
• OCPBUGS-56990: Only update boot disks during GCP boot image updates #5102
• OCPBUGS-56828: daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers #5087
• OCPBUGS-52313: Update machine-config-daemon-pull.service to use custom policy for Podman < 4.4.1 #4893
• OCPBUGS-56665: Add hot loop detection in the boot image controller #5077
• OCPBUGS-56395: error from generateAndValidateRenderedMachineConfig function can be misleading #5060
• OCPBUGS-56218: Rewrote TestFirstBootHasSSHKeys e2e test in pure Go #5053
• OCPBUGS-55615: MSBIC should not update windows machinesets #5021
• OCPBUGS-55490: MCO should fall back to us-east-1 for AWS bootimages if no region specific-AMI exists #5020
• OCPBUGS-54830: Make mtu-migration run after wait-for-primary-ip #4989
• OCPBUGS-52314: on-prem/resolv-prepender: stop leaking tmp files #4894
• OCPBUGS-45989: Do not run resolv-prepender from NM dispatcher #4785
• OCPBUGS-52188: ignore mc not found error #4957
• OCPBUGS-52951: Add ipsec connect wait service #4930
• OCPBUGS-53441: Fixing typos for MachineConfigNode #4936
• OCPBUGS-53186: Update ObservedGeneration in KubeletConfig #4919
• OCPBUGS-53225: daemon: ensure ostree-finalize-staged is started before rebooting #4920
• OCPBUGS-52160: Enforce VIPs to be collocated at the same host #4884
• OCPBUGS-52303: Enable nmstate-configuration on all platforms #4891
• OCPBUGS-51003: daemon: add nil check for annotation fetching #4862
• OCPBUGS-51353: Update cluster-reader ClusterRole permissions #4882
• OCPBUGS-50955: create /run/nodeip-configuration before use #4858
• OCPBUGS-51334: Update format verbs for alert logs #4880
• OCPBUGS-52257: configure-ovs workaround for ovs-if-br-ex bug #4889
• OCPBUGS-49973: Update the storage.conf configuration file template #4836
• OCPBUGS-49363: Auto-recover from MC with invalid extension #4824
• OCPBUGS-49716: MCO CO degrades are stuck on until master pool updates complete #4826
• OCPBUGS-49639: Add clarification to invalid maxUnavailable alert #4820
• OCPBUGS-47475: Pausing Master MCP results in Alerts #4769
• Full changelog

machine-image-customization-controller

• append .0 to go.mod version #135
• Full changelog

machine-os-images

• OCPBUGS-54146: Change rhcos release browser url #56
• Full changelog

metallb-frr

• OCPBUGS-55021: Backport DynamicASN #92
• OCPBUGS-55344: OpenShift Only: TEMPORARY: pin FRR version to known working rpm #89
• OCPBUGS-44111: Use metrics for readiness/liveness probes #77
• Full changelog

monitoring-plugin

• OCPBUGS-54211: fix issue preventing dev silences from loading #374
• OU-724: remove deleted image #377
• OCPBUGS-51117: Fix overview links #357
• Full changelog

multus-admission-controller

• append .0 to go.mod version #97
• Full changelog

multus-cni, multus-cni-microshift

• OCPBUGS-47471: adds getcontext (backport 4.17) #260
• Full changelog

multus-networkpolicy

• append .0 to go.mod version #71
• Full changelog

multus-whereabouts-ipam-cni

• OCPBUGS-55617: Fixes leftover podref issue #364
• OCPBUGS-48745: [Release-4.17]Kubeconfig loop #334
• Full changelog

must-gather

• NO-JIRA: append .0 to go.mod version #492
• Full changelog

network-metrics-daemon

• append .0 to go.mod version #105
• Full changelog

network-tools

• append .0 to go.mod version #148
• Full changelog

networking-console-plugin

• Add translations 4.17 #239
• Add translations scripts #235
• OCPBUGS-49758: Fix weight width #208
• OCPBUGS-45791: fix path-to-regex CVE #196
• OCPBUGS-48704: fix service name #188
• OCPBUGS-48267: UI crash accessing a Service in pending state #168
• OCPBUGS-46553: fix ports as number instead of strings #169
• OCPBUGS-45876: Bump nanoid from 3.3.7 to 3.3.8 #172
• OCPBUGS-44140: Bump dompurify from 2.4.9 to 2.5.8 #166
• Full changelog

nutanix-machine-controllers

• OCPBUGS-51859: CVE-2025-22868 #111
• OCPBUGS-47267: fixing CVE-2024-45338 #92
• OCPBUGS-55728: Fix link-local addresses being added to machine #102
• Full changelog

oauth-apiserver

• append .0 to go.mod version #133
• OCPBUGS-46044: Update dependencies to address CVE-2024-24786 #127
• Full changelog

oauth-proxy

• OCPBUGS-58472: fix e2e tests #327
• OCPBUGS-30443: Update dependencies to address CVE-2024-24786 #298
• OCPBUGS-46659: Fix oauth-proxy e2e-component tests #303
• Full changelog

oauth-server

• append .0 to go.mod version #185
• Full changelog

oc-mirror

• fixes CVEs upgrading go-git dependency (#1033) #1033
• OCPBUGS-47453: Use one of the newer sha256 keys to verify release signatures (#1000) (#1024) #1000
• changes the owners file (#1017) #1017
• OCPBUGS-48513: e2e: use same version of crane as in go.mod (#1020) #1020
• Full changelog

openshift-apiserver

• append .0 to go.mod version #525
• OCPBUGS-49399: prevent panic when no image and error are set #488
• OCPBUGS-49399: validate image property isn’t nil before using #489
• OCPBUGS-49399: move on to the next digest/tag during failures #487
• Full changelog

openshift-controller-manager

• OCPBUGS-57950: ignore error failing to find pull/push secrets #400
• OCPBUGS-57480: Set node-pullsecrets volume to read-only to protect image pull credentials #393
• OCPBUGS-55826: Empty proxy variables are causing issues during the build #379
• OCPBUGS-47769: Add team members to the OWNERS file #357
• Full changelog

openshift-state-metrics

• append .0 to go.mod version #124
• Full changelog

openstack-cluster-api-controllers

• OCPBUGS-44455: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.17 #343
• append .0 to go.mod version #364
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• OCPBUGS-57438: operatorgroup: ensure clusterroleselectors in clusterrole aggregation rules are sorted #1025
• OCPBUGS-56250: fix(olm): improve error logging for missing olm.managed label (#3558) #1004
• OCPBUGS-51226, OCPBUGS-51228, OCPBUGS-51246: (vendor) pin go-jose/v4@v4.0.5 #998
• OCPBUGS-53071: add missing pod disruption reasons to isPodDead #982
• OCPBUGS-53283: Ensure that PSA label is latest instead of pinning versions #985
• OCPBUGS-50829, OCPBUGS-50831, OCPBUGS-50835: CVE-2025-24976 Bump github.com/distribution/distribution/v3 [release-4.17] #968
• OCPBUGS-48695: Fix excessive catalog source snapshots cause severe performance regression #956
• OCPBUGS-45845: Fix concurrent namespace resolution #944
• OCPBUGS-46929, OCPBUGS-46936, OCPBUGS-47316: x/net bump to v0.34.0 [release-4.17] #938
• Full changelog

operator-marketplace

• ART-13124: append .0 to go.mod version #638
• OCPBUGS-53179: Ensure that PSA label is latest instead of pinning versions #607
• OCPBUGS-49431: Upgrade golang.org/x/net [release-4.17] #585
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-58160: Unpin OVS patch versions, move to ovs 3.5 #2647
• OCPBUGS-57109: Fix hybrid overlay node subnets collision with cluster subnets #2620
• OCPBUGS-57107: Increase InformerSyncTimeout to 60s #2623
• OCPBUGS-56443: Fix predicate for cluster subnet route to gateway router #2578
• OCPBUGS-56244: Allow default network pods to reach localnet on the same node #2572
• OCPBUGS-52480: Handles unspecified protocol in network policy port #2478
• OCPBUGS-54203: Update OVN to FDP25.A.1 24.03.5-40. #2496
• OCPBUGS-52409: Change dynamic_neigh_routers to false for the Interconnect topology. #2476
• OCPBUGS-50519: kubevirt, localnet: Reduce live migration downtime #2458
• OCPBUGS-48777: Fixes unexpected mp0 route removal during start up #2423
• OCPBUGS-48828: fixes overzealous deletion of SNAT in egressIP #2425
• Full changelog

powervs-machine-controllers

• append .0 to go.mod version #117
• OCPBUGS-54750: Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.17 #113
• Full changelog

prom-label-proxy

• append .0 to go.mod version #381
• Full changelog

prometheus

• append .0 to go.mod version #258
• OCPBUGS-56738: BACKPORT: fix promtool analyze block shows metric name with 0 cardinality #254
• OCPBUGS-54941: Scraping: Bump cache iteration after error to avoid false duplicate detection. #249
• Full changelog

prometheus-alertmanager

• append .0 to go.mod version #102
• Full changelog

prometheus-node-exporter

• append .0 to go.mod version #167
• Full changelog

route-controller-manager

• OCPBUGS-55943: Added error event for failed ingress to route conversion #60
• OCPBUGS-53077: ingress: Reset metrics when ingress is deleted #57
• Full changelog

service-ca-operator

• append .0 to go.mod version #266
• OCPBUGS-34228: Updating ose-service-ca-operator-container image to be consistent with ART for 4.17 #261
• Full changelog

telemeter

• ART-13124: Update go.mod to include patch version in go directive #562
• Full changelog

tests

• OCPBUGS-57888: Bump to Kubernetes v1.30.14 #29983
• OCPBUGS-50664: Replace RunHostCmd with Exec function to censor bearer token being exposed #29539
• OCPBUGS-56221: aws/edge: prevent test using unschedulable nodes #29792
• OCPBUGS-55451: support provider type external #29737
• OCPBUGS-55269: Bump to Kubernetes v1.30.12 #29771
• OCPBUGS-55498: [build] Ensure Git Clone Does Not Run Privileged #29743
• OCPBUGS-54767: Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com #29660
• OCPBUGS-52580: Use payload pullspec for image info test #29588
• OCPBUGS-38835: Try also user CA for getting openshift-tests image #29029
• OCPBUGS-49411: Add a monitor test to detect concurrent installer pod or static pod #29487
• OCPBUGS-48634: Revert “[release-4.17] OCPBUGS-48459, SDN-4930: ovn-k, udn crd e2e: Fix status report consumer assertion” #29453
• OCPBUGS-48459, SDN-4930: ovn-k, udn crd e2e: Fix status report consumer assertion #29301
• OCPBUGS-48345: Add team members to the OWNERS file for PR approvals #29430
• OCPBUGS-48188: Fixing build s2i ruby test data inline with latest ruby version(>=3.0) #29409
• Full changelog

thanos

• append .0 to go.mod version #161
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-52207: fix panic when vcenter address is incorrect #295
• OCPBUGS-50593: Set reconcile-sync to 10 minute for ListVolume #291
• OCPBUGS-49858: Escape backslash in vCenter username #288
• OCPBUGS-49685: List only linux nodes #285
• Full changelog

---

View changelog in Markdown or change previous release: 4.17.354.17.344.17.334.17.324.17.314.17.304.17.294.17.284.17.274.17.264.17.254.17.244.17.234.17.224.17.214.17.204.17.194.17.184.17.174.17.164.17.154.17.144.17.134.17.124.17.114.17.104.17.94.17.84.17.74.17.64.17.54.17.44.17.34.17.24.17.14.17.04.17.0-rc.64.17.0-rc.54.17.0-rc.44.17.0-rc.34.17.0-rc.24.17.0-rc.14.17.0-rc.04.16.584.16.574.16.564.16.554.16.544.16.534.16.524.16.514.16.504.16.494.16.484.16.474.16.464.16.454.16.444.16.434.16.424.16.414.16.404.16.394.16.384.16.374.16.364.16.354.16.344.16.334.16.324.16.314.16.304.16.294.16.284.16.274.16.264.16.254.16.244.16.234.16.224.16.214.16.204.16.194.16.184.16.174.16.164.16.154.16.144.16.134.16.124.16.114.16.104.16.94.16.84.16.74.16.64.16.54.16.44.16.34.16.24.16.14.16.04.16.0-rc.94.16.0-rc.84.16.0-rc.74.16.0-rc.64.16.0-rc.54.16.0-rc.44.16.0-rc.34.16.0-rc.24.16.0-rc.14.16.0-rc.04.15.624.15.614.15.604.15.594.15.584.15.574.15.564.15.554.15.544.15.534.15.524.15.514.15.504.15.494.15.484.15.474.15.464.15.454.15.444.15.434.15.424.15.414.15.404.15.394.15.384.15.374.15.364.15.354.15.344.15.334.15.324.15.314.15.304.15.294.15.284.15.274.15.264.15.254.15.244.15.234.15.224.15.214.15.204.15.194.15.184.15.174.15.164.15.154.15.144.15.134.15.124.15.114.15.104.15.94.15.84.15.74.15.64.15.54.15.44.15.34.15.24.15.14.15.04.15.0-rc.84.15.0-rc.74.15.0-rc.54.15.0-rc.44.15.0-rc.34.15.0-rc.24.15.0-rc.14.15.0-rc.04.14.624.14.614.14.604.14.594.14.584.14.574.14.564.14.554.14.544.14.534.14.524.14.514.14.504.14.494.14.484.14.474.14.464.14.454.14.444.14.434.14.424.14.414.14.404.14.394.14.384.14.374.14.364.14.354.14.344.14.334.14.324.14.314.14.304.14.294.14.284.14.274.14.264.14.254.14.244.14.234.14.224.14.214.14.204.14.194.14.184.14.174.14.164.14.154.14.144.14.134.14.124.14.114.14.104.14.94.14.84.14.74.14.64.14.54.14.44.14.34.14.24.14.14.14.04.14.0-rc.74.14.0-rc.64.14.0-rc.54.14.0-rc.44.14.0-rc.34.14.0-rc.24.14.0-rc.14.14.0-rc.04.13.644.13.634.13.624.13.614.13.604.13.594.13.584.13.574.13.564.13.554.13.544.13.534.13.524.13.514.13.504.13.494.13.484.13.474.13.464.13.454.13.444.13.434.13.424.13.414.13.404.13.394.13.384.13.374.13.364.13.354.13.344.13.334.13.324.13.314.13.304.13.294.13.284.13.274.13.264.13.254.13.244.13.234.13.224.13.214.13.194.13.184.13.174.13.164.13.154.13.144.13.134.13.124.13.114.13.104.13.94.13.84.13.74.13.64.13.54.13.44.13.34.13.24.13.14.13.04.13.0-rc.84.13.0-rc.74.13.0-rc.64.13.0-rc.54.13.0-rc.44.13.0-rc.34.13.0-rc.24.13.0-rc.04.12.864.12.854.12.844.12.834.12.824.12.814.12.804.12.794.12.784.12.774.12.764.12.754.12.744.12.734.12.724.12.714.12.704.12.694.12.684.12.674.12.664.12.654.12.644.12.634.12.624.12.614.12.604.12.594.12.584.12.574.12.564.12.554.12.544.12.534.12.524.12.514.12.504.12.494.12.484.12.474.12.464.12.454.12.444.12.434.12.424.12.414.12.404.12.394.12.384.12.374.12.364.12.354.12.344.12.334.12.324.12.314.12.304.12.294.12.284.12.274.12.264.12.254.12.244.12.234.12.224.12.214.12.204.12.194.12.184.12.174.12.164.12.154.12.144.12.134.12.124.12.114.12.104.12.94.12.84.12.74.12.64.12.54.12.44.12.34.12.24.12.14.12.04.12.0-rc.84.12.0-rc.74.12.0-rc.64.12.0-rc.54.12.0-rc.44.12.0-rc.34.12.0-rc.24.12.0-rc.14.12.0-rc.04.11.594.11.584.11.574.11.564.11.554.11.544.11.534.11.524.11.514.11.504.11.494.11.484.11.474.11.464.11.454.11.444.11.434.11.424.11.414.11.404.11.394.11.384.11.374.11.364.11.354.11.344.11.334.11.324.11.314.11.304.11.294.11.284.11.274.11.264.11.254.11.244.11.234.11.224.11.214.11.204.11.194.11.184.11.174.11.164.11.154.11.144.11.134.11.124.11.114.11.104.11.94.11.84.11.74.11.64.11.54.11.44.11.34.11.24.11.14.11.04.11.0-rc.74.11.0-rc.64.11.0-rc.54.11.0-rc.44.11.0-rc.34.11.0-rc.24.11.0-rc.14.11.0-rc.04.11.0-fc.34.11.0-fc.24.11.0-fc.0───5.0.0-0.nightly-2026-03-16-1223085.0.0-0.nightly-2026-03-16-0746515.0.0-0.nightly-2026-03-16-0331085.0.0-0.nightly-2026-03-15-2108045.0.0-0.nightly-2026-03-14-0000325.0.0-0.nightly-2026-03-13-1939495.0.0-0.nightly-2026-03-13-1518045.0.0-0.nightly-2026-03-12-2340065.0.0-0.nightly-2026-03-12-1441065.0.0-0.nightly-2026-03-12-0930575.0.0-0.nightly-2026-03-12-0459225.0.0-0.nightly-2026-03-12-0027165.0.0-0.nightly-2026-03-11-2000245.0.0-0.nightly-2026-03-11-0126055.0.0-0.nightly-2026-03-10-2042185.0.0-0.nightly-2026-03-10-1502215.0.0-0.nightly-2026-03-10-0558415.0.0-0.nightly-2026-03-09-2101495.0.0-0.nightly-2026-03-09-0659115.0.0-0.nightly-2026-03-08-2149565.0.0-0.nightly-2026-03-07-2320575.0.0-0.nightly-2026-03-07-1910355.0.0-0.nightly-2026-03-07-1022365.0.0-0.nightly-2026-03-07-0604195.0.0-0.nightly-2026-03-07-0152195.0.0-0.nightly-2026-03-06-2125295.0.0-0.nightly-2026-03-06-1659595.0.0-0.nightly-2026-03-06-0313555.0.0-0.nightly-2026-03-05-2214485.0.0-0.nightly-2026-03-05-1243365.0.0-0.nightly-2026-03-05-0815285.0.0-0.nightly-2026-03-05-0339245.0.0-0.nightly-2026-03-04-2306585.0.0-0.nightly-2026-03-04-1321435.0.0-0.nightly-2026-03-04-0855525.0.0-0.nightly-2026-03-03-2354105.0.0-0.nightly-2026-03-03-1622145.0.0-0.nightly-2026-03-03-1222145.0.0-0.nightly-2026-03-03-0318325.0.0-0.nightly-2026-03-02-173856───5.0.0-0.ci-2026-03-16-0959465.0.0-0.ci-2026-03-16-0359455.0.0-0.ci-2026-03-15-2159455.0.0-0.ci-2026-03-15-1559445.0.0-0.ci-2026-03-15-0959435.0.0-0.ci-2026-03-15-0359425.0.0-0.ci-2026-03-14-2159415.0.0-0.ci-2026-03-14-1559405.0.0-0.ci-2026-03-14-0959395.0.0-0.ci-2026-03-14-0359385.0.0-0.ci-2026-03-13-2159375.0.0-0.ci-2026-03-13-155936───4.23.0-0.nightly-2026-03-16-0641424.23.0-0.nightly-2026-03-13-2349214.23.0-0.nightly-2026-03-13-1926234.23.0-0.nightly-2026-03-13-1526234.23.0-0.nightly-2026-03-11-1333084.23.0-0.nightly-2026-03-10-1847364.23.0-0.nightly-2026-03-10-1447364.23.0-0.nightly-2026-03-09-1527584.23.0-0.nightly-2026-03-08-0033494.23.0-0.nightly-2026-03-06-162627───4.23.0-0.ci-2026-03-16-1136024.23.0-0.ci-2026-03-16-0536024.23.0-0.ci-2026-03-15-2222324.23.0-0.ci-2026-03-15-1622314.23.0-0.ci-2026-03-15-1022304.23.0-0.ci-2026-03-15-0422294.23.0-0.ci-2026-03-14-2222284.23.0-0.ci-2026-03-14-1622274.23.0-0.ci-2026-03-14-1022264.23.0-0.ci-2026-03-14-0422254.23.0-0.ci-2026-03-13-2222244.23.0-0.ci-2026-03-13-162223───4.22.0-0.nightly-2026-03-16-0239454.22.0-0.nightly-2026-03-15-2038414.22.0-0.nightly-2026-03-14-0110354.22.0-0.nightly-2026-03-13-1845044.22.0-0.nightly-2026-03-13-1247484.22.0-0.nightly-2026-03-13-0653134.22.0-0.nightly-2026-03-13-0020384.22.0-0.nightly-2026-03-12-1257574.22.0-0.nightly-2026-03-11-2206424.22.0-0.nightly-2026-03-11-0342114.22.0-0.nightly-2026-03-10-1940014.22.0-0.nightly-2026-03-10-1002514.22.0-0.nightly-2026-03-10-0319144.22.0-0.nightly-2026-03-09-1039414.22.0-0.nightly-2026-03-07-0919254.22.0-0.nightly-2026-03-06-1636384.22.0-0.nightly-2026-03-05-0704354.22.0-0.nightly-2026-03-03-0457464.22.0-0.nightly-2026-03-03-0057464.22.0-0.nightly-2026-03-02-153725───4.22.0-0.ci-2026-03-16-1505324.22.0-0.ci-2026-03-16-0905324.22.0-0.ci-2026-03-16-0305304.22.0-0.ci-2026-03-15-2105294.22.0-0.ci-2026-03-15-1505284.22.0-0.ci-2026-03-15-0905284.22.0-0.ci-2026-03-15-0305284.22.0-0.ci-2026-03-14-2105284.22.0-0.ci-2026-03-14-1505284.22.0-0.ci-2026-03-14-0905284.22.0-0.ci-2026-03-14-030528───4.21.0-0.nightly-2026-03-16-1223094.21.0-0.nightly-2026-03-16-0413564.21.0-0.nightly-2026-03-14-0157184.21.0-0.nightly-2026-03-13-1735214.21.0-0.nightly-2026-03-12-1006214.21.0-0.nightly-2026-03-12-0056364.21.0-0.nightly-2026-03-11-1859444.21.0-0.nightly-2026-03-09-1956104.21.0-0.nightly-2026-03-04-1919304.21.0-0.nightly-2026-03-04-1052184.21.0-0.nightly-2026-03-01-213049───4.21.0-0.ci-2026-03-16-1327464.21.0-0.ci-2026-03-16-0443074.21.0-0.ci-2026-03-15-1920034.21.0-0.ci-2026-03-15-0040354.21.0-0.ci-2026-03-14-1544594.21.0-0.ci-2026-03-14-0547204.21.0-0.ci-2026-03-13-212345───4.20.0-0.nightly-2026-03-16-0749294.20.0-0.nightly-2026-03-15-2251574.20.0-0.nightly-2026-03-14-0306314.20.0-0.nightly-2026-03-13-1952114.20.0-0.nightly-2026-03-13-1127404.20.0-0.nightly-2026-03-13-0421364.20.0-0.nightly-2026-03-12-1942104.20.0-0.nightly-2026-03-12-0314104.20.0-0.nightly-2026-03-11-0542384.20.0-0.nightly-2026-03-10-0259414.20.0-0.nightly-2026-03-05-0039514.20.0-0.nightly-2026-03-04-0954404.20.0-0.nightly-2025-05-26-181128───4.20.0-0.ci-2026-03-16-1308494.20.0-0.ci-2026-03-16-0641104.20.0-0.ci-2026-03-15-2252034.20.0-0.ci-2026-03-15-1558214.20.0-0.ci-2026-03-15-0732014.20.0-0.ci-2026-03-14-2157594.20.0-0.ci-2026-03-13-1557594.20.0-0.ci-2026-03-13-0957594.20.0-0.ci-2026-03-13-0357594.20.0-0.ci-2026-03-12-1952104.20.0-0.ci-2026-03-12-124012───4.19.0-0.nightly-2026-03-16-0731564.19.0-0.nightly-2026-03-16-0037154.19.0-0.nightly-2026-03-13-2345174.19.0-0.nightly-2026-03-13-1701574.19.0-0.nightly-2026-03-13-1012124.19.0-0.nightly-2026-03-13-0242114.19.0-0.nightly-2026-03-11-1056054.19.0-0.nightly-2026-03-11-0014354.19.0-0.nightly-2026-03-09-2010284.19.0-0.nightly-2026-03-07-2153094.19.0-0.nightly-2026-03-07-0800234.19.0-0.nightly-2026-03-05-2313504.19.0-0.nightly-2026-03-05-1314224.19.0-0.nightly-2026-03-03-044805───4.19.0-0.ci-2026-03-16-1415304.19.0-0.ci-2026-03-16-0637174.19.0-0.ci-2026-03-16-0037174.19.0-0.ci-2026-03-14-2036294.19.0-0.ci-2026-03-14-1436294.19.0-0.ci-2026-03-14-0836294.19.0-0.ci-2026-03-13-1903114.19.0-0.ci-2026-03-13-1303114.19.0-0.ci-2026-03-13-0703114.19.0-0.ci-2026-03-12-2232544.19.0-0.ci-2026-03-12-163254───4.18.0-0.nightly-2026-03-16-1010304.18.0-0.nightly-2026-03-16-0609284.18.0-0.nightly-2026-03-15-2145574.18.0-0.nightly-2026-03-12-2351194.18.0-0.nightly-2026-03-12-1018444.18.0-0.nightly-2026-03-12-0343284.18.0-0.nightly-2026-03-11-1529574.18.0-0.nightly-2026-03-11-0723484.18.0-0.nightly-2026-03-10-2343104.18.0-0.nightly-2026-03-10-1236214.18.0-0.nightly-2026-03-09-1457064.18.0-0.nightly-2026-03-07-2352144.18.0-0.nightly-2026-03-07-1610334.18.0-0.nightly-2026-03-06-0933214.18.0-0.nightly-2026-03-05-2051504.18.0-0.nightly-2026-03-05-0223304.18.0-0.nightly-2026-03-04-1838084.18.0-0.nightly-2026-03-04-1112134.18.0-0.nightly-2026-03-03-135506───4.18.0-0.ci-2026-03-16-1304474.18.0-0.ci-2026-03-16-0551524.18.0-0.ci-2026-03-15-2145564.18.0-0.ci-2026-03-14-1732114.18.0-0.ci-2026-03-14-1053474.18.0-0.ci-2026-03-14-0453474.18.0-0.ci-2026-03-13-195118───4.17.0-0.nightly-2026-03-16-1505284.17.0-0.nightly-2026-03-11-1305524.17.0-0.nightly-2026-03-11-0905524.17.0-0.nightly-2026-03-11-0218534.17.0-0.nightly-2026-03-10-1240574.17.0-0.nightly-2026-03-10-0816104.17.0-0.nightly-2026-03-10-0242084.17.0-0.nightly-2026-03-09-1448004.17.0-0.nightly-2026-03-08-0056474.17.0-0.nightly-2026-03-07-1846374.17.0-0.nightly-2026-03-07-0920554.17.0-0.nightly-2026-03-07-0520554.17.0-0.nightly-2026-03-05-0653124.17.0-0.nightly-2026-03-05-0150074.17.0-0.nightly-2026-03-03-2332334.17.0-0.nightly-2026-03-03-0907424.17.0-0.nightly-2026-03-02-173637───4.17.0-0.ci-2026-03-16-1344284.17.0-0.ci-2026-03-14-2314394.17.0-0.ci-2026-03-14-1714394.17.0-0.ci-2026-03-14-0934504.17.0-0.ci-2026-03-14-0052024.17.0-0.ci-2026-03-13-1852024.17.0-0.ci-2026-03-13-1117444.17.0-0.ci-2026-03-13-0352104.17.0-0.ci-2026-03-12-2004434.17.0-0.ci-2026-03-12-1116254.17.0-0.ci-2026-03-11-211528───4.16.0-0.nightly-2026-03-16-1511264.16.0-0.nightly-2026-03-13-0505544.16.0-0.nightly-2026-03-12-2316254.16.0-0.nightly-2026-03-12-1727164.16.0-0.nightly-2026-03-12-0356164.16.0-0.nightly-2026-03-11-1929404.16.0-0.nightly-2026-03-11-0350574.16.0-0.nightly-2026-03-10-0344324.16.0-0.nightly-2026-03-09-040039───4.16.0-0.ci-2026-03-16-1139594.16.0-0.ci-2026-03-16-0421214.16.0-0.ci-2026-03-15-2221214.16.0-0.ci-2026-03-14-2327004.16.0-0.ci-2026-03-14-1617004.16.0-0.ci-2026-03-14-0757004.16.0-0.ci-2026-03-14-0055544.16.0-0.ci-2026-03-13-1703004.16.0-0.ci-2026-03-13-110300───4.15.0-0.nightly-2026-03-13-0326174.15.0-0.nightly-2026-03-11-1921174.15.0-0.nightly-2026-03-11-0413164.15.0-0.nightly-2026-03-09-1559484.15.0-0.nightly-2026-03-09-0421564.15.0-0.nightly-2026-03-08-0358384.15.0-0.nightly-2026-03-07-214126───4.15.0-0.ci-2026-03-15-0023164.15.0-0.ci-2026-03-13-2312384.15.0-0.ci-2026-03-13-0737284.15.0-0.ci-2026-03-12-1520104.15.0-0.ci-2026-03-12-0739084.15.0-0.ci-2026-03-12-0122074.15.0-0.ci-2026-03-11-0942254.15.0-0.ci-2026-03-10-2341584.15.0-0.ci-2026-03-10-0930144.15.0-0.ci-2026-03-09-181505───4.14.0-0.nightly-2026-03-13-0850104.14.0-0.nightly-2026-03-12-2340404.14.0-0.nightly-2026-03-12-0725024.14.0-0.nightly-2026-03-11-1839534.14.0-0.nightly-2026-03-10-1549504.14.0-0.nightly-2026-03-10-0417234.14.0-0.nightly-2026-03-09-1623564.14.0-0.nightly-2026-03-09-042633───4.14.0-0.ci-2026-03-16-1111334.14.0-0.ci-2026-03-15-0810134.14.0-0.ci-2026-03-14-2014064.14.0-0.ci-2026-03-14-1125054.14.0-0.ci-2026-03-13-2124064.14.0-0.ci-2026-03-13-0845444.14.0-0.ci-2026-03-12-2252114.14.0-0.ci-2026-03-09-0901194.14.0-0.ci-2026-03-07-1946594.14.0-0.ci-2026-03-07-0913514.14.0-0.ci-2026-03-04-212137───4.13.0-0.nightly-2026-03-13-0216394.13.0-0.nightly-2026-03-12-1640394.13.0-0.nightly-2026-03-11-1948444.13.0-0.nightly-2026-03-10-1355504.13.0-0.nightly-2026-03-10-020741───4.13.0-0.ci-2026-03-14-2257494.13.0-0.ci-2026-03-14-1617104.13.0-0.ci-2026-03-14-0507014.13.0-0.ci-2026-03-13-1934594.13.0-0.ci-2026-03-13-0911464.13.0-0.ci-2026-03-12-1309514.13.0-0.ci-2026-03-11-2219284.13.0-0.ci-2026-03-11-1619284.13.0-0.ci-2026-03-09-2054454.13.0-0.ci-2026-03-09-081749───4.12.0-0.nightly-2026-03-12-1824304.12.0-0.nightly-2026-03-12-0758504.12.0-0.nightly-2026-03-11-2217424.12.0-0.nightly-2026-03-06-0335154.12.0-0.nightly-2026-03-04-1451084.12.0-0.nightly-2026-03-04-0144434.12.0-0.nightly-2026-03-03-0135554.12.0-0.nightly-2026-02-28-1342074.12.0-0.nightly-2026-02-27-1747314.12.0-0.nightly-2026-02-24-133145───4.12.0-0.ci-2026-03-14-1720274.12.0-0.ci-2026-03-14-0831064.12.0-0.ci-2026-03-13-1910294.12.0-0.ci-2026-03-13-0707544.12.0-0.ci-2026-03-12-1645074.12.0-0.ci-2026-03-12-0552394.12.0-0.ci-2026-03-11-1747314.12.0-0.ci-2026-03-11-1016114.12.0-0.ci-2026-03-10-1454514.12.0-0.ci-2026-03-09-085746───4.11.0-0.nightly-2025-08-30-0110584.11.0-0.nightly-2025-08-27-2007484.11.0-0.nightly-2025-08-26-2039164.11.0-0.nightly-2025-08-21-0105404.11.0-0.nightly-2025-08-14-204255───4.11.0-0.ci-2026-02-05-1836444.11.0-0.ci-2026-02-03-1141494.11.0-0.ci-2026-02-03-0506094.11.0-0.ci-2026-02-02-2306094.11.0-0.ci-2026-01-30-1622184.11.0-0.ci-2025-11-26-0737454.11.0-0.ci-2025-09-22-2122234.11.0-0.ci-2025-09-22-1522234.11.0-0.ci-2025-09-12-1707384.11.0-0.ci-2025-09-05-032851───4.22.0-ec.34.22.0-ec.24.22.0-ec.14.22.0-ec.0

Source code for this page located on github