4.17.45

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.17.45-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-master-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded periodic-ci-openshift-release-master-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.17-e2e-aws-ovn-serial
- aws-ovn-upgrade-4.17-micro Succeeded periodic-ci-openshift-release-master-ci-4.17-e2e-aws-ovn-upgrade
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.17-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.17-micro Failed (1 retries) periodic-ci-openshift-release-master-ci-4.17-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.17-fips-payload-scan
- gcp-ovn-rt-upgrade-4.17-minor Succeeded periodic-ci-openshift-release-master-ci-4.17-upgrade-from-stable-4.16-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.17 Succeeded periodic-ci-openshift-hypershift-release-4.17-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.17-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.17-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.16.11, 4.16.12, 4.16.13, 4.16.14, 4.16.16, 4.16.17, 4.16.18, 4.16.19, 4.16.20, 4.16.21, 4.16.23, 4.16.25, 4.16.26, 4.16.27, 4.16.28, 4.16.29, 4.16.30, 4.16.32, 4.16.33, 4.16.34, 4.16.36, 4.16.37, 4.16.38, 4.16.39, 4.16.40, 4.16.41, 4.16.42, 4.16.43, 4.16.44, 4.16.45, 4.16.46, 4.16.47, 4.16.48, 4.16.49, 4.16.50, 4.17.10, 4.17.11, 4.17.12, 4.17.13, 4.17.14, 4.17.15, 4.17.16, 4.17.17, 4.17.18, 4.17.19, 4.17.20, 4.17.21, 4.17.22, 4.17.23, 4.17.25, 4.17.26, 4.17.27, 4.17.28, 4.17.29, 4.17.3, 4.17.30, 4.17.32, 4.17.34, 4.17.35, 4.17.36, 4.17.37, 4.17.38, 4.17.39, 4.17.4, 4.17.40, 4.17.41, 4.17.5, 4.17.6, 4.17.7, 4.17.8, 4.17.9

4.17.44 (changes) - S S F F S F
4.17.43 (changes) - Success
4.17.42 (changes) - Success
4.17.33 (changes) - Success
4.17.31 - Success
4.17.24 (changes) - Success
4.17.2 (changes) - Success
4.17.1 (changes) - Success
4.17.0 (changes) - Success
4.16.53 (changes) - Success Success
4.16.52 (changes) - Success
4.16.51 (changes) - Success
4.16.35 (changes) - Failed
4.16.24 (changes) - Success
4.16.15 (changes) - Failed
4.16.10 (changes) - Failed
4.16.9 (changes) - Success
4.16.8 (changes) - Failed
4.16.0-0.nightly-2025-11-27-033655 (changes) - Success

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.17.31

Created: 2025-11-27 17:06:37 +0000 UTC

Image Digest: sha256:4f7b8774832b0928a98ffc519637a6e1e4fe085754a0e9d240104993f7ce940b

Components

Kubectl 1.30.5
Kubernetes upgraded from 1.30.12 to 1.30.14
Kubernetes Tests upgraded from 1.30.12 to 1.30.14
Red Hat Enterprise Linux CoreOS upgraded from 417.94.202505150851-0 to 417.94.202511260612-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
StreamingCollectionEncodingToJSON (0 tests)	Enabled (New)		Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
StreamingCollectionEncodingToProtobuf (0 tests)	Enabled (New)		Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Rebuilt images without code change

aws-ebs-csi-driver git 2bb5b316 sha256:0de37436e9d27c23cb0757f2cc01c02a5c2dd920d421fea00e56d0402e26f88e
aws-kms-encryption-provider git 9d401670 sha256:ff5675151a4275d670373342aefd2fa831f2f173b7656520e6a374940067c94c
aws-pod-identity-webhook git 80efc4ea sha256:e7b90636858689146be1184907503aca8c45c9a953ee22747a65a44f65f4b987
azure-cloud-controller-manager git 626ecd1c sha256:628e6e015b498251d2b0a8bc62b0dbc33f457da3ad5ac0839f7a3a5f1f90168e
azure-cloud-node-manager git 626ecd1c sha256:cd71816bc850b6cc408c690ab49b7d6be1cc532b886d2ded9670a105411fbe28
azure-cluster-api-controllers git d359bfe5 sha256:1edef0b045adb5d43bb8bbfe33c5464f59e0114245996d84635f9fb76484a654
azure-disk-csi-driver git a544f30b sha256:fc74a21c1f65bff606b2828674970e78277c6e1c4f7cfd071b756e6cb0ceccea
azure-file-csi-driver git 9f4c38c2 sha256:4f6c63eabfcbea3128f3fb96d9a9055438a3ae4d87a89749d743dcbcdb3882f3
azure-workload-identity-webhook git 6707f899 sha256:5fb7b8632062497e71a95eb8621e4a290017af3e1b16300dd26c02857d9da3c4
baremetal-machine-controllers git 6e7aa77e sha256:1e5281393c461803031e07f8a41ed4ac8cbb6a3b9519db38de1ef554a8ae5ec7
baremetal-operator git e6e5d54a sha256:fba33f455940913dc152a9e5bfb2b6857541ecab56becd82d65d018c737ef842
cluster-authentication-operator git f641a4c6 sha256:bbaa31e89e99794a594966432510b4e60919ed21f5dd50dbb2f3256877aa1997
cluster-autoscaler-operator git ea4a8878 sha256:4c112db09cc025e7df413e75ada816cf5bba0434e367275bd5aa36b666436d0e
cluster-bootstrap git 95dd9129 sha256:93d7b0cf24313649bf1655197ad8b01ad395098a310c95b1cddf4e700397ffb5
cluster-capi-controllers git 77ef4fc5 sha256:a2d018a2554a4cb5b6922a0b7b4d9b65fa6d4971433bbd1d1c0c6aba8744a294
cluster-control-plane-machine-set-operator git f7e01c2f sha256:a4fc450b579c6cdc804558c2e2430cf018bce93c297eaeb854f480e9309417b5
cluster-csi-snapshot-controller-operator git ffba005b sha256:08e81b7739b744da71ac9b8a724f256bbd76098ff77147939482260489b072c5
cluster-dns-operator git 81507f04 sha256:8ce43373fc03e041183e99a603269b8916ae89a2e1d0ee58e69100aa7b89ab0d
cluster-kube-cluster-api-operator git aed5f6c7 sha256:8860151c54f3a35cf258254304e014ff2690a104106dd39020c7446540d76c60
cluster-kube-scheduler-operator git 98ca953b sha256:d6295d2a910aec5ac226a831a91a3f5bcacb6f37303a50dc75c40f2b0b16b97c
cluster-kube-storage-version-migrator-operator git ab40b611 sha256:268da0862d0c8b2e3fbc6e9970523dedce3608ff6e8a6d3ec35761876a0d47ba
cluster-machine-approver git acc2380e sha256:640fd229f629531ef981f18980b1d2da6fea000c4e6c60a2b6a00ae04a331ee7
cluster-olm-operator git e31b7775 sha256:4a1d2431fa5ede99b60a1040ca0b3eaeef39709f410b3065a1328998838cc47d
cluster-openshift-apiserver-operator git 2b2ba3be sha256:5532aecbe0011b0137f1efc2a7f30383096a6a81c4d321b6a6e42eb53b6a0b14
cluster-openshift-controller-manager-operator git b05a249d sha256:d6b304596c49edca3fdec327ed865d8a95b1bee9f5709e97d63e37b71bc63e2d
cluster-policy-controller git 7209e90d sha256:0fdb97f55d5bd2435104fe78c746cfd2d67bfd13a6d12c680600c5f0d95d8ef1
container-networking-plugins git 49a6faae sha256:3cb7f3547cbac635c217506f45a89f974fdf18acefaf00a0d48b0892c092e1d1
containernetworking-plugins-microshift git 49a6faae sha256:cefe433cbb7086fe5f04b2b68d7404c39743e5748d2af18c56b96354cb7f69a5
csi-driver-manila-operator git efc99a2a sha256:e31df2919769384bc5e654685e32d94a252955bebf211ba5dde2031fa70e6ac0
csi-driver-shared-resource-operator git c095a1f2 sha256:6b94c931d2c17c19adb4383b4578fef587aedd19d5d9530b79f36eb19d593536
csi-external-attacher git c3fe8e2e sha256:e021626b70ea6564fe5609d236b122b8a0028424bcaacb75fddd3a2b972244a6
csi-external-provisioner git fe460e56 sha256:a30d3d5e25e2ffed694d6df25daa9248e74e124f2b03c0ce314cd573c7332443
driver-toolkit git 859518f6 sha256:94056a1013528820e3fc815074cad18059a7d90a294693c25ad6eb075dfc9bbf
egress-router-cni git 3193a756 sha256:f437df1ca26e757ff17aed408b4d2014cbc3444dd755931e05da988816bd59cb
etcd git 0d9e0a90 sha256:0f94f49a322d699185bb0dbb76d400dfd8324cfa1b32bc23bc4c01bc60457428
gcp-cloud-controller-manager git 8ce997d7 sha256:a1d0b42e54d669edfe0aa39c285d77dea4db138004ce039ad257850f12e6a39a
gcp-cluster-api-controllers git 9c561f2d sha256:2a45bad55f4a904987825ff312ca45503422335f7a3e3c25bdb87cbc03c0d0a6
gcp-machine-controllers git 86a1d902 sha256:52c920fb41493a26098fdd5e75c012ec8fa45dd139724ab80179869ce09f6bf1
gcp-pd-csi-driver git c770b412 sha256:a3d1f4990e64da3cacb93561630cd6f7323e35367c774846ccb02ead44b77897
gcp-pd-csi-driver-operator git c23b064f sha256:bebd69e6a7331efa1eac4e9fdb60c9f94ad99d9fc34179cb1017e31ca0ce5248
gcp-workload-identity-federation-webhook git 08579e9f sha256:d0f4d3c3c460c4a16c77c38a9fd6c66cf1277bd19340adc4ee270fe15ac39120
ibm-cloud-controller-manager git ad8f7eb0 sha256:5130c859a1a8ce1b76a6cb9ea1e3dd9981e96b9eb0fa39dc49f6378174d5b7f3
ibmcloud-machine-controllers git 0b8dd7ab sha256:f1846a3c7b62ed7da7b26e055df5ae73fdb82ed2ad8d7842d1d873292b71007d
ironic git 391f57f8 sha256:b608a4732d7734f131caf617b53fa5e00b8989f6312f90cad3977c8c96eee337
ironic-agent git dfc31918 sha256:7942145e9f330bc68e0edd58f9b5e47a52a34ab37b1cd0ed703e0d8e8236b9ec
ironic-static-ip-manager git bc5b8a2c sha256:02ad019ea04a2c4328c7e23353b4da186db5923020127c3d54c77dcee065b2c2
keepalived-ipfailover git e3879e9e sha256:7573bb8da9efa9a95d7df169048cfecc0b4de3cce5ac1bc48119b891082ad7bf
kube-proxy git dee082de sha256:734bced2bc07984aeb05bd46ea06c5272d5b1556cdafcdbca42513ecd811fef8
kube-state-metrics git 462e63f6 sha256:5063df4194b1e4164db5cc5e3e84848dee13268f5a042c08bfd839c5f50976bd
kubevirt-csi-driver git 757a8894 sha256:181e7f9b558269da73b46ab16b43f3f391905c86bd1d8957b1a2a33923590d87
libvirt-machine-controllers git a336f0b5 sha256:7321ee1bccb0b85ce6ea89815baa6288f2b8c9b0bd67dac6319c211c112494de
machine-os-images git f85666be sha256:41825dc44fda803bafa6ee3d69ea95d4d8ed17159160e14226bb1452a1d6ef03
multus-route-override-cni git 391c1b03 sha256:5e8fb712161c4529dba638913955aa809ff1625ae0943fa76cc27d5535e66ffb
multus-whereabouts-ipam-cni git df78f643 sha256:b51877c32781bdb4f5e5bab195e257d9858ed7355f57358c49669d6a0e9bbf50
nutanix-cloud-controller-manager git c9f6cd1f sha256:b8eca0860ddd8f5a41b41f4bb7b8d05c884ae80960612c6af66a248b5ec645f5
olm-catalogd git c740e056 sha256:1f7dacb210c60c08af8c981245414282a470e3fcf0f997e0394af560118a694c
openstack-cinder-csi-driver-operator git f89b6dbc sha256:6612dd5124476c24dd75c3f4a48a865b348e057590d6ad343c9d80f95dc2b6e5
openstack-machine-api-provider git 68971874 sha256:4003cbd012b077829dbfeeec8e4750924606d63bdf88acd128022f41bc375cae
ovirt-csi-driver git 1db726a9 sha256:c53c9cd656de48ca1e6ea17fbcb9a3cb4b77f240b9591a034003e90bdfb952f2
ovirt-csi-driver-operator git 0feae256 sha256:4932516468531d0a54d9f28e7003724ed376fe0a947db3057e435b40bfb5fcc3
powervs-block-csi-driver git aaa6afa9 sha256:0c0363c38c1a8b9146b00cf1e4f669787f4cf56ac0e9fe2411e5afa3eae40240
powervs-block-csi-driver-operator git f6f037c5 sha256:cf127baf07b341a77b8ab8ee70dd79fbbaa2b575114a9cf3b26cb9834c640d5d
powervs-cloud-controller-manager git bd3d72e5 sha256:b7438ad19c7b384041a1fccfce369e89a6beaea8ec6844c1e753d58fbc399e07
rhel-coreos sha256:7ec3651bc283e839b4b6ed65855d19f8007cbce16932985ab8a8d25972155957
rhel-coreos-extensions sha256:c992aec338bee709b72b5fb6460bbd0ca8c897aa8b258b5fda915fd010c9bf68
route-controller-manager git 02bbf80a sha256:fa6974d82e11eb56be097cb5f53b6aaccd45693343dc4dce3359b5b0ed3a9598
vsphere-cloud-controller-manager git 097d823b sha256:3a2b7923a2ca1db75c658b21cd7ec2084bc42f977e2dc75661fd41d3cef6b535
vsphere-csi-driver git 039ee368 sha256:0b422d982fc8048862379ee9fdf23adb85a2b52513c2ef884cef9165916cfa9e
vsphere-csi-driver-operator git e1de36a2 sha256:72f893a3472da7024a65cda2687d83071876c497e8e05f4fba7e3d2bcaebb6e8
vsphere-csi-driver-syncer git 039ee368 sha256:502f00dcbc11e40b0ac414ac9e99624a70dde18addd461866eb3876d6ac370e5

agent-installer-api-server

NO-ISSUE: pin gotestsum to v1.12.3 (#8017) #8017
OCPBUGS-58634, OCPBUGS-58639: Bump glog to v1.2.5 in release-4.17 (#7895) #7895
OCPBUGS-47627: dnsmasq service on OCP SNO fails to read /etc/resolv.conf file during system startup (#7724) #7724
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-58649: Bump glog pkg to 1.2.4 (#1182) #1182
Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.17 (#1088) #1088
Full changelog

agent-installer-node-agent

OCPBUGS-58654, OCPBUGS-58659: Bump glog to v1.2.5 in release-4.17 (#1070) #1070
Full changelog

agent-installer-utils

append .0 to go.mod version #110
Full changelog

apiserver-network-proxy

append .0 to go.mod version #82
Full changelog

aws-cloud-controller-manager

append .0 to go.mod version #109
Full changelog

aws-cluster-api-controllers

OCPBUGS-61940: UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It #571
OCPBUGS-58669, OCPBUGS-58674: bump github.com/golang/glog to v1.2.5 #559
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator

OCPBUGS-64704: Use 127.0.0.1 for healtz http-endpoints #462
OCPBUGS-63557: Add RBAC ClusterRole and Binding for driver node #453
OCPBUGS-62974: Add withCABundleDaemonSetHook() to AWS EFS operator #449
OCPBUGS-60597: Bump library-go to fix assignment to nil map issue #422
OCPBUGS-60470: Backport stale conditions fix #416
Full changelog

aws-machine-controllers

OCPBUGS-63139: client: re-use a single file for building the session instead of randomly named files #145
Full changelog

azure-kms-encryption-provider

append .0 to go.mod version #19
Full changelog

azure-machine-controllers

OCPBUGS-65954: Set updateDomainCount to one when faultDomainCount is one #176
OCPBUGS-63700: Support datadisks on Stack Hub #168
OCPBUGS-56168: [release-4.17] Update virtualmachines service to armcompute/v5 SDK #146
OCPBUGS-56655: Fix failure when attempting to modify immutable availabilitySet #152
Full changelog

baremetal-cluster-api-controllers

ART-13124: Update go.mod to include patch version in go directive #46
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-53236: Validation for API and Ingress VIPs when using user-managed load balancer #10047
OCPBUGS-62951: Update the RHCOS 4.17 bootimage metadata #10021
OCPBUGS-62054: Make swift containers removal not fatal for UPI. #9952
OCPBUGS-54599: Update the RHCOS 4.17 bootimage metadata #9902
OCPBUGS-58319: vSphere - remove unit tests using nip.io #9821
OCPBUGS-57293: sort zone slices extracted from map of byo subnets #9778
OCPBUGS-56448: vsphere - check if host is powered down or on standby before uploading template #9726
OCPBUGS-57292: ensure ctrplane nodes can access bootstrap MCS #9775
OCPBUGS-57304: IBI nmstate unit test fix #9777
Full changelog

baremetal-runtimecfg

OCPBUGS-60112: Re-add ENABLE_NODEIP_DEBUG env var #363
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-64615: Help with must-gather scheduling through suggesting preferance of nodes #2150
OCPBUGS-56734: Adding sos.conf file for default sos config into the tools image #2027
OCPBUGS-58091: avoid transfering permissions when copying artifacts from node-joiner pod #2053
OCPBUGS-57446: Use fedora image in unit tests instead of centos #2038
Full changelog

cloud-credential-operator

OCPBUGS-65480: ccoctl: use pagination when listing resources in aws #945
OCPBUGS-63549: ccoctl: add public-key-file flag to create-all #939
OCPBUGS-55128: snyk to ignore SNYK-GOLANG-GOLANGORGXNETHTML-9572088 #917
OCPBUGS-60972: ccoctl: aws to use proper issuer url on subsequent runs #908
OCPBUGS-58679: github.com/golang/glog v1.2.5 #892
OCPBUGS-58248: ccoctl: only add owned tag to azure resources on create #883
OCPBUGS-56980: Azure: resolve nil pointer exception when role assignment exists #868
OCPBUGS-54828: Render: configure proxy on bootstrap static pod #863
Full changelog

cloud-network-config-controller

OCPBUGS-65520: Change the capacity struct from int to ptrOfInt #191
Full changelog

cluster-autoscaler

OCPBUGS-60913: revert openshift replica fix #376
OCPBUGS-60608: fix checkpoint gc of unknown recommenders #371
OCPBUGS-59266: Fix cool down status condition to trigger scale down #362
Full changelog

cluster-baremetal-operator

OCPBUGS-63715: Always have a service for ironic-api port #519
OCPBUGS-63666: Allow provisioningIP when network disabled #518
OCPBUGS-61097: Remove webhookport (9447) as HostPort #505
Full changelog

cluster-capi-operator

append .0 to go.mod version #314
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63167: ccm: disable unused secure-serving port and webhook #423
OCPBUGS-60211: Update service selector to match deployment label #406
OCPBUGS-60211: Add Service using common resource templating #407
Full changelog

cluster-config-api

NO-JIRA: Promote streaming list encoding to Default on Hypershift. #2567
CNTRLPLANE-1611: Add feature gates for StreamingCollectionEncoding #2538
OCPBUGS-57285: Add IPsec API for NAT-T UDP encapsulation support #2363
Full changelog

cluster-config-operator

append .0 to go.mod version #441
Full changelog

cluster-etcd-operator

OCPBUGS-61337: Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace #1480
OCPBUGS-60220: add missing ports to svc and pod spec #1461
Full changelog

cluster-image-registry-operator

OCPBUGS-53871: bump github.com/golang-jwt/jwt #1218
OCPBUGS-51604: bump golang.org/x/oauth2 #1209
Full changelog

cluster-ingress-operator

OCPBUGS-49702: Add e2e tests for IdleConnectionTerminationPolicy #1225
OCPBUGS-49702: Add support for IdleConnectionTerminationPolicy #1223
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-63614: SCC: add hostmount-anyuid-v2 #1954
OCPBUGS-60398: Add missing service ports to apiserver service #1893
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-60249: Missing endpoint slices for open ports the operator uses #855
Full changelog

cluster-monitoring-operator

OCPBUGS-64580: Fix KSM deny-list typo #2732
OCPBUGS-63489: Add mcd_local_unsupported_packages metric from MCO to telemetry 4.17 #2725
OCPBUGS-63123: test: remove image registry e2e tests #2715
OCPBUGS-61766: chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind #2672
OCPBUGS-60017: operator: increase wait time till degraded to max 4 times 5m #2634
Full changelog

cluster-network-operator

OCPBUGS-63154: Add drop flows for GARPs #2818
[Release 4.17] OCPBUGS-61765: Update CNO reviewers/approvers #2799
OCPBUGS-58066: [release-4.17]: Manual feature backport of cert rotation for whereabouts #2784
OCPBUGS-57285: Implement IPsec NAT-Traversal encapsulation option #2726
OCPBUGS-55518: iptables-alerter streamlining #2698
Full changelog

cluster-node-tuning-operator

OCPBUGS-63504: Do not cause kubelet failed dependency by ocp-tuned-one-shot.service #1418
Full changelog

cluster-samples-operator

OCPBUGS-63515: references to github.com/sclorg/django-ex.git now also refer to the branch #658
Full changelog

cluster-storage-operator

OCPBUGS-41160: Move metrics to vsphere driver #633
Full changelog

cluster-update-keys

NO-ISSUE: Updating ose-cluster-update-keys-container image to be consistent with ART for 4.17 #79
Full changelog

cluster-version-operator

OCPBUGS-58451: Failing=Unknown upon long CO updating #1212
Full changelog

configmap-reloader

append .0 to go.mod version #70
Full changelog

console

OCPBUGS-65933: Preserve URL in perspective switch + remove dev console folks from reviewers #15762
OCPBUGS-64942: Expose prometheus tenancy label path as a proxy #15710
OCPBUGS-64599: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15665
OCPBUGS-62631: /auth/error?error=missing_state&error_type=auth is showing blank page #15554
OCPBUGS-63212: switch to dev perspective for /dev-monitoring #15614
OCPBUGS-63397: fix bug where Roles list was displaying invalid data f… #15627
OCPBUGS-62282: Fix desync of console and variable namespace #15545
OCPBUGS-44154: bump dompurify to latest #15590
OCPBUGS-61737: Remove ancient X-XSS-Protection header #15494
OCPBUGS-54241: VolumeSnapshots are not displayed in OpenShift Web Console #15465
OCPBUGS-59747: OpenShift console PVC clone cannot use B as the unit #15324
NO-JIRA: Increase the timeout on the cypress test #15420
OCPBUGS-58365: change ‘/metrics/usage’ endpoint to ‘/api/metrics/usage’ #15271
OCPBUGS-59544: Secret key with binary file changes when edited via Console #15301
OCPBUGS-59784: Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image #15329
OCPBUGS-58337: Tolerate unknown fields in Infrastructur… #15236
OCPBUGS-59492: Cannot read properties of undefined (reading ‘node-role.kubernetes.io/master’) error while accessing node logs from console #15294
OCPBUGS-59879: add data-test attrs to console plugins … #15338
OCPBUGS-59510: Not able to launch terminal window from OCP web console due to console plugin conflicts #15297
OCPBUGS-59265: fix bug where / in console.tab/horizontalNav href brea… #15270
OCPBUGS-58318: Implement sessions in openshift authenticator #15238
OCPBUGS-58224: Add the ability to launch multiple modals with useModal hook #15222
OCPBUGS-58378: Cannot read properties of undefined (reading ‘filter’) error while accessing nodes from console. #15241
OCPBUGS-57835: Add flags in console static plugin for all the components of this epic #15192
OCPBUGS-57932: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15197
OCPBUGS-57182: Fix ‘/metrics’ endpoint token review to handle interna… #15154
OCPBUGS-56895: HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling #15108
OCPBUGS-57095: Add all files to vendor regardless of gitignore #15132
OCPBUGS-57114: Debug pod logs are not accessible when debugging a node via OpenShift Console #15142
OCPBUGS-56975: Sample segment sessions #15114
OCPBUGS-56844: Enable knative tests #14387
OCPBUGS-56375: remove 60 day alert from cluster update modal #15062
OCPBUGS-55924: Fetching taskRuns in PLR details page using PLR UID also #15029
OCPBUGS-55756: update the Deployment pod on change in imageStream #15022
OCPBUGS-56238: Remove the devconsole backend common internet proxy and replace it with dedicated ones #15049
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

OCPBUGS-60298: Update downloads deployment configuration to use master node selector #1033
Full changelog

coredns

OCPBUGS-62825: UPSTREAM: 7083 and 6836: Fix failing TestZoneExternalCNAMELookupWithProxy #155
append .0 to go.mod version #135
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-58839: CARRY: don’t ignore json files #340
Full changelog

csi-driver-nfs

append .0 to go.mod version #156
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

append .0 to go.mod version #372
Full changelog

csi-external-resizer

OCPBUGS-62466: Requeue PVC over PV creation #175
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-60449: UPSTREAM: 1238: Snapshot Controller startup should not LIST all volumesnapshots #184
Full changelog

csi-livenessprobe

append .0 to go.mod version #73
Full changelog

csi-node-driver-registrar

OCPBUGS-63682: update log level verbosity to not clutter logs #90
append .0 to go.mod version #80
Full changelog

docker-builder

OCPBUGS-65816: BuildConfig inline Dockerfile fails with heredoc syntax #488
OCPBUGS-57939: S2I build cpu limits observed by assemble are limited to 1 cpu #474
Full changelog

docker-registry

OCPBUGS-60090: bump docker distribution to fix purgeuploads panic #440
OCPBUGS-53655: bump jwt and oauth dependencies #431
Full changelog

haproxy-router

OCPBUGS-49390: Reject All CA-Signed Certs Using SHA1 #650
OCPBUGS-49702: Add support for IdleCloseTerminationPolicy #652
Full changelog

hyperkube, pod

OCPBUGS-65695: Fix Concurrentmap Iteration #2520
OCPBUGS-63460: UPSTREAM: <carry>: backporting fix for concurrent map iteration and write #2456 #2496
CNTRLPLANE-1611: Backport StreamingCollectionEncoding for JSON and protobuf #2486
OCPBUGS-61584: UPSTREAM: <carry>: Don’t retry storage calls with side effects. #2458
OCPBUGS-60552: [4.17] podresources: list: use active pods #2426
4.17: OCPBUGS-60998: scheduler: Improve CSILimits plugin accuracy by using VolumeAttachments #2434
OCPBUGS-57888: Bump k8s api to 1.30.14 #2355
OCPBUGS-57196: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2328
OCPBUGS-57289: kubelet: fix a stall on startup from waiting too long for a stat call #2206
Full changelog

hypershift

CNTRLPLANE-1903: Migrate 4.17 pipelines to use common pipeline #7215
OCPBUGS-63639: [release-4.17] fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries #7112
OCPBUGS-64604: Update DNS names for ovn-kubernetes cp metrics #7150
OCPBUGS-63370: fix: Make the hypershift CLI binary FIPS-compliant #7094
CNTRLPLANE-1425: feat(konflux): tag MCE HO images with latest #6838
OCPBUGS-57143: [release-4.17] HCP payload doesn’t respect multiple mirrors #6771
OCPBUGS-61290: Update KCM node monitor grace period #6760
OCPBUGS-61208: use common MCE konflux pipeline #6749
OCPBUGS-60149: [release-4.17] Always compress and encode payload in token secret for inplace upgrades #6740
OCPBUGS-61101: Use system trust bundle in CPO IDP https client #6735
OCPBUGS-60921: konflux for hcp-cli #6699
CNTRLPLANE-1204: HO MCE change to hermetic ta build #6653
CNTRLPLANE-1230: Move CPO pipeline to hermetic builds #6598
CNTRLPLANE-936: fix(tekton): drop multiarch builds on PR #6224
OCPBUGS-57432: Add proxy variables for the MCD Pod #6258
CNTRLPLANE-918: Konflux build pipeline service account migration #6088
CNTRLPLANE-918: Konflux build pipeline service account migration #6083
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-58740: bump github.com/golang/glog to version v1.2.4 #105
OCPBUGS-56062: tech debt: rework vendor patches #90
append .0 to go.mod version #100
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-58435: [IBM VPC] set offlineExpansion to false in e2e test manifest #146
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-51823: CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork #121
Full changelog

insights-operator

OCPBUGS-64629: add permissions to gather clusterrole #1170
OCPBUGS-63500: add missing permissions for replicasets and events #1165
And 4 elided commits (e.g. from squash or rebase merges)
Full changelog

ironic-machine-os-downloader

append .0 to go.mod version #104
Full changelog

kube-metrics-server

append .0 to go.mod version #43
Full changelog

kube-rbac-proxy

ART-13124: Update go.mod to include patch version in go directive #120
Full changelog

kube-storage-version-migrator

NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-17). #226
ART-13124: Update go.mod to include patch version in go directive #217
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-34447: Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART for 4.17 #44
Full changelog

machine-api-operator

OCPBUGS-57073: Updates GCP CredentialsRequest #1377
Full changelog

machine-config-operator

OCPBUGS-63154: [release-4.17] Networking: reset ovn-remote config and allow ovnkube controller to set it #5358
OCPBUGS-63540: Add control-plane label for master nodes on legacy clusters #5375
OCPBUGS-63364: Invalid architecture value found in annotation during 4.19 update #5368
OCPBUGS-63055: Recheck generatedByControllerVersion annotation prior to deleting a degraded MC #5346
OCPBUGS-62741: Add /etc/docker/certs.d to template #5335
OCPBUGS-62683: Add mcd_local_unsupported_packages recording rule #5327
OCPBUGS-60890: Race in configure-ovs.sh affects bonding interface configuration. #5267
OCPBUGS-61859: Override NMState service definition #5289
OCPBUGS-59930, OPNET-681: Support migration to NMState #5206
OCPBUGS-56752: Support NODEIP_HINT in IPI deployments too #5080
OCPBUGS-60704: operator: switch out VAP v1beta1 to v1 #5256
OCPBUGS-57084: scope MCD node listers to current node #5107
OCPBUGS-60239: Add workaround fix for static pod race #5231
OCPBUGS-58292: Do not set cpu system reserve below the default value #5157
OCPBUGS-58063: Update desired config in MCN on OCL update #5139
OCPBUGS-56625: Give keepalived container chroot cap #5072
OCPBUGS-58219: Boot image controller should correctly handle marketplace boot images #5151
OCPBUGS-58218: add MachineConfiguration to CO related objects #5150
OCPBUGS-57135: pkg/operator/status: Drop PoolUpdating as an Upgradeable=False condition #5111
OCPBUGS-56901: Fix dynamic-system-reserved-calc.sh when only true parameter is used #5096
OCPBUGS-56976: Boot Image Controller should not degrade when golden configmap is slow to update #5101
OCPBUGS-56990: Only update boot disks during GCP boot image updates #5102
OCPBUGS-56828: daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers #5087
OCPBUGS-52313: Update machine-config-daemon-pull.service to use custom policy for Podman < 4.4.1 #4893
OCPBUGS-56665: Add hot loop detection in the boot image controller #5077
OCPBUGS-56395: error from generateAndValidateRenderedMachineConfig function can be misleading #5060
Full changelog

machine-image-customization-controller

append .0 to go.mod version #135
Full changelog

metallb-frr

OCPBUGS-55021: Backport DynamicASN #92
Full changelog

monitoring-plugin

OCPBUGS-64942: Use tenancy access to metric lables #639
OU-1058: Don’t show TP button in non-administrator #637
OCPBUGS-62282: align dev and admin persective tab names #602
OCPBUGS-62282: add missing translation string #587
OCPBUGS-61891: feat: add alerting rules tab to dev console #538
OCPBUGS-59399: Fix “Export as CSV” #468
Full changelog

multus-admission-controller

OCPBUGS-58770: Update the github.com/golang/glog module to v1.2.4 #102
append .0 to go.mod version #97
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-43391: Update net-attach-def client library to 1.7.5 for cri-o functionality [backport 4.17] #257
Full changelog

multus-networkpolicy

append .0 to go.mod version #71
Full changelog

must-gather

NO-JIRA: append .0 to go.mod version #492
Full changelog

network-interface-bond-cni

OCPBUGS-59620: Bump github.com/containernetworking/plugins from to 1.7.1 #83
NO-JIRA: Add ci-operator file #82
Full changelog

network-metrics-daemon

append .0 to go.mod version #105
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

network-tools

append .0 to go.mod version #148
Full changelog

networking-console-plugin

OCPBUGS-60180: Fix ingress details #265
OCPBUGS-60128: Fix requiremenets with no value #260
Full changelog

nutanix-machine-controllers

OCPBUGS-51859: CVE-2025-22868 #111
OCPBUGS-47267: fixing CVE-2024-45338 #92
Full changelog

oauth-apiserver

OCPBUGS-61584: Bump openshift/kubernetes-apiserver for etcd retry patches. #143
append .0 to go.mod version #133
Full changelog

oauth-proxy

OCPBUGS-61445: Update x/crypto to v0.31.0 #334
OCPBUGS-58472: fix e2e tests #327
Full changelog

oauth-server

OCPBUGS-61584: Bump openshift/kubernetes-apiserver for etcd retry patches. #198
append .0 to go.mod version #185
Full changelog

oc-mirror

Adding r4f4 and Prashanth684 as approvers and removing contributors who are not working with oc-mirror anymore. (#1269) #1269
Full changelog

openshift-apiserver

OCPBUGS-63392: Wire dry run option to Image API server operations #565
OCPBUGS-61584: Bump openshift/kubernetes-apiserver for etcd retry patches. #554
OCPBUGS-53382: Skip blocked registry check for registries with mirrors #500
OCPBUGS-58821: Fix image reference in TestImageStreamImportQuayIO #515
append .0 to go.mod version #525
Full changelog

openshift-controller-manager

OCPBUGS-61199: legacy image pull secret rollback controller #413
OCPBUGS-57950: ignore error failing to find pull/push secrets #400
OCPBUGS-57480: Set node-pullsecrets volume to read-only to protect image pull credentials #393
Full changelog

openshift-state-metrics

append .0 to go.mod version #124
Full changelog

openstack-cluster-api-controllers

OCPBUGS-44455: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.17 #343
append .0 to go.mod version #364
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-57092: [release-4.17] e2e stability fixes #1081
OCPBUGS-60791: Add NetworkPolicy as a supported kind #1058
OCPBUGS-57428: reduce cache expiry frequency [release-4.19] #1021
OCPBUGS-59253: Reduce Frequency of Update Requests for Copied CSVs (#3597) #1036
OCPBUGS-57438: operatorgroup: ensure clusterroleselectors in clusterrole aggregation rules are sorted #1025
Full changelog

operator-marketplace

OCPBUGS-62219: Remove Expect func so that the test case can use the retry logic #670
OCPBUGS-61036: Update memoryTarget on catalog source pods #663
ART-13124: append .0 to go.mod version #638
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-65569: [release-4.17]: kubevirt: fix bad release of IPs of live migratable pods #2857
OCPBUGS-64856: Fix stale EIP assignments during failover and controller restart #2850
OCPBUGS-64674: [release-4.17]: Configure sec nic EIPv6 address with NODAD and maximum lifetime #2843
OCPBUGS-63154: Fix EgressIP stale GARP post reboot + pod restart #2807
OCPBUGS-61749: [release-4.17] Fix dnsnameresolver address set #2796
OCPBUGS-60484: Update OWNERS file: Add Patryk/Martin as approvers #2717
OCPBUGS-59381: [release-4.17] Fix default network -> localnet #2667
OCPBUGS-58160: Unpin OVS patch versions, move to ovs 3.5 #2647
OCPBUGS-57109: Fix hybrid overlay node subnets collision with cluster subnets #2620
OCPBUGS-57107: Increase InformerSyncTimeout to 60s #2623
OCPBUGS-56443: Fix predicate for cluster subnet route to gateway router #2578
OCPBUGS-56244: Allow default network pods to reach localnet on the same node #2572
Full changelog

powervs-machine-controllers

OCPBUGS-61204: Use OS_GIT_VERSION in Makefile when found (for Konflux builds) #126
append .0 to go.mod version #117
Full changelog

prom-label-proxy

append .0 to go.mod version #381
Full changelog

prometheus

OCPBUGS-61766: chore: compute highestTimestamp at queryManager level #268
append .0 to go.mod version #258
OCPBUGS-56738: BACKPORT: fix promtool analyze block shows metric name with 0 cardinality #254
Full changelog

prometheus-alertmanager

append .0 to go.mod version #102
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-58408: Fix: One Alertmanager Config failing blocks all others. (#6585) #336
Full changelog

prometheus-node-exporter

append .0 to go.mod version #167
Full changelog

service-ca-operator

append .0 to go.mod version #266
Full changelog

telemeter

ART-13124: Update go.mod to include patch version in go directive #562
Full changelog

tests

OCPBUGS-65492: Add imagestream update dryrun test #30479
OCPBUGS-64927: update telemtery limit for 4.17 e2e case #30472
OCPBUGS-64641: Migrate OCP-32383 to upstream #30455
OCPBUGS-63392: Backport pr 29834 to release-4.18 #30408
OCPBUGS-61162: images/tests: Remove rteval #30202
NO-JIRA: Update extended/networking OWNERS #30090
OCPBUGS-57324: Fix bearer token exposure in exit condition as well #29910
OCPBUGS-57888: Bump to Kubernetes v1.30.14 #29983
OCPBUGS-50664: Replace RunHostCmd with Exec function to censor bearer token being exposed #29539
OCPBUGS-56221: aws/edge: prevent test using unschedulable nodes #29792
Full changelog

thanos

append .0 to go.mod version #161
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-61652: Fix unit tests #71
Full changelog

vsphere-problem-detector

OCPBUGS-61755: Check for number of FailureDomain-s in GetVCenter() #190
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github