4.17.48

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.17.48-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded (1 retries) periodic-ci-openshift-release-master-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded (1 retries) periodic-ci-openshift-release-master-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Failed (1 retries) periodic-ci-openshift-release-master-nightly-4.17-e2e-aws-ovn-serial
- aws-ovn-upgrade-4.17-micro Failed (1 retries) periodic-ci-openshift-release-master-ci-4.17-e2e-aws-ovn-upgrade
- aws-ovn-upgrade-micro Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.17-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.17-micro Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.17-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.17-fips-payload-scan
- gcp-ovn-rt-upgrade-4.17-minor Failed (1 retries) periodic-ci-openshift-release-master-ci-4.17-upgrade-from-stable-4.16-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.17 Succeeded (1 retries) periodic-ci-openshift-hypershift-release-4.17-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.17-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Failed (1 retries) periodic-ci-openshift-release-master-nightly-4.17-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.16.11, 4.16.12, 4.16.13, 4.16.14, 4.16.16, 4.16.17, 4.16.18, 4.16.19, 4.16.20, 4.16.21, 4.16.23, 4.16.25, 4.16.27, 4.16.28, 4.16.29, 4.16.30, 4.16.32, 4.16.33, 4.16.34, 4.16.35, 4.16.36, 4.16.37, 4.16.38, 4.16.39, 4.16.40, 4.16.41, 4.16.42, 4.16.43, 4.16.44, 4.16.45, 4.16.46, 4.16.47, 4.16.48, 4.16.49, 4.16.50, 4.16.51, 4.16.52, 4.16.53, 4.17.10, 4.17.11, 4.17.12, 4.17.13, 4.17.14, 4.17.15, 4.17.16, 4.17.17, 4.17.18, 4.17.19, 4.17.20, 4.17.21, 4.17.22, 4.17.23, 4.17.24, 4.17.26, 4.17.27, 4.17.28, 4.17.29, 4.17.3, 4.17.30, 4.17.31, 4.17.32, 4.17.33, 4.17.34, 4.17.35, 4.17.36, 4.17.37, 4.17.38, 4.17.39, 4.17.4, 4.17.41, 4.17.42, 4.17.43, 4.17.44, 4.17.5, 4.17.7, 4.17.8, 4.17.9

4.17.47 (changes) - F F F S F S F S F
4.17.46 (changes) - Failed
4.17.45 (changes) - Failed
4.17.40 - Failed
4.17.25 (changes) - Failed
4.17.6 (changes) - Failed
4.17.2 (changes) - Success
4.17.1 (changes) - Failed
4.17.0 (changes) - Failed
4.16.56 (changes) - F S F
4.16.55 (changes) - Failed
4.16.54 (changes) - Failed
4.16.26 (changes) - Failed
4.16.24 (changes) - Failed
4.16.15 (changes) - Failed
4.16.10 (changes) - Failed
4.16.9 (changes) - Failed
4.16.8 (changes) - Failed
4.16.0-0.nightly-2026-01-26-143410 (changes) - Failed Failed

Upgrades to:

4.18.0-0.ci-2026-01-31-111256 (changes) - Success Success
4.18.0-0.ci-2026-01-31-051256 (changes) - Success Success
4.18.0-0.ci-2026-01-30-150931 (changes) - F S S
4.18.0-0.ci-2026-01-30-082529 (changes) - F S S
4.18.0-0.ci-2026-01-29-230738 (changes) - S F S

Loading changelog, this may take a while ...

Changes from 4.17.40

Created: 2026-01-29 15:32:45 +0000 UTC

Image Digest: sha256:dab58364ecbf7bb848ef62bc515148dee7120c56da91f64a4766eb376b43a2f4

Components

Kubectl 1.30.5
Kubernetes 1.30.14
Kubernetes Tests 1.30.14
Red Hat Enterprise Linux CoreOS upgraded from 417.94.202509161710-0 to 417.94.202601272318-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
StreamingCollectionEncodingToJSON (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
StreamingCollectionEncodingToProtobuf (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Rebuilt images without code change

agent-installer-api-server git bcecf726 sha256:5a7ce4e2b9aaf8e1cdc230e90ae4ae40fc8d8e7acf21d97aa7e3370f05ac6824
agent-installer-csr-approver git 63b2da6e sha256:3af57e69b8347bccda2ae4a9e119111cdbdb3a469676501a50551f4834fdbbad
agent-installer-node-agent git df4660b4 sha256:cca9f4d08f7c991f7f08fc005c6b9daf29d083d34cbf267954e420a293bd2c5e
agent-installer-orchestrator git 63b2da6e sha256:40bf44bd5e1407ec67b2ec2a3d97f0018288ad8f3309669e4e6f2a5dbbeefac0
agent-installer-utils git 79b73e6a sha256:b48d14ad345385cd8021709c9b8916727f23d0382fa764ae4e8b6f4aeadbed7d
apiserver-network-proxy git ea660559 sha256:0f31e990f9ca9d15dcb1b25325c8265515fcc06381909349bb021103827585c6
aws-cloud-controller-manager git 144bace6 sha256:877c0f39d26778330b879c7810a595d386c77105afe51d0bbfbc4d51265f034e
aws-ebs-csi-driver git 2bb5b316 sha256:79449e16b1207223f1209d19888b879eb56a8202c53df4800e09b231392cf219
aws-kms-encryption-provider git 9d401670 sha256:ca6c62b4baef52d4d7331783fbdcfaebfd7c9db53a93c3e6f96777401169dbba
aws-pod-identity-webhook git 80efc4ea sha256:7d7655e88d70c357c7f89e1d097fdf6f90840813ab99b59df8033dd85ed33916
azure-cloud-controller-manager git 626ecd1c sha256:72952d6fff4748ba7c24402d0921420e30beba24bd5df3640478926544a52f2d
azure-cloud-node-manager git 626ecd1c sha256:de081ec516498ec38c965227635ef3f2ae34a52b6d86182f435989dee5a2e886
azure-cluster-api-controllers git d359bfe5 sha256:c90894dce772f0a12ae490f9dfaa88f92fdafd571c352f86622bccebc2749c56
azure-disk-csi-driver git a544f30b sha256:cf698e461de7bf86406f4e78f5f09daaa0217e35b5273b64367242ef5adc075f
azure-file-csi-driver git 9f4c38c2 sha256:56069b55b12a9ab3496e53340756dd7eda38aadaebfe5d9739b44535d2164994
azure-kms-encryption-provider git 190a0fab sha256:a370707c2554c0244ba51de15970721998aea7d5a80be2ea548bd4159676dfb1
azure-workload-identity-webhook git 6707f899 sha256:ffc1e233eb6d8443e56830cb2c710796d0c30d598fc2ab85dfdd207dea68898a
baremetal-cluster-api-controllers git 41b34248 sha256:d7907bb6392da82492ea2bf30475e139a9c9f15e4c10aaaf080c6ab108b68bec
baremetal-operator git e6e5d54a sha256:23f971c0c6db04afb9e43c4c15ff85f269a210123d35d4f478680e4882b59a2e
cluster-authentication-operator git f641a4c6 sha256:460702e85c3689e15deaf972912daa4046274dd1113ec0b8ae14a5eaeafeb98d
cluster-autoscaler git bb3e96f3 sha256:6417d5e46a01dbfe09510462051aa5997f2ddb91787c7f55df8f589f9c4bb478
cluster-autoscaler-operator git ea4a8878 sha256:492f5a4b452460b01a36687675b85fc7c775459858ba60de26a1635dbf3a097c
cluster-bootstrap git 95dd9129 sha256:33452f9684b6469ca05ea91be138475f3d7d95be9290f5f327fe8661416d3c47
cluster-capi-controllers git 77ef4fc5 sha256:00a3793fa77d7a33de9caeef4609574daf4f375ddcaa4f7a5c439ae76dd412d9
cluster-capi-operator git a2cdab1b sha256:05d17ba636e60272fcef688660e265e33ed54694c8501b3752d67cb199c02260
cluster-config-operator git 361ceccc sha256:c762faa772ffcebb9178674da962966a7dabb7b543f4f706cebf8e3a274da7d0
cluster-control-plane-machine-set-operator git f7e01c2f sha256:1767e18e584999ec78fa3339351dd8c1a8d30ac803bc9f3b6f1abd67ffdeccfa
cluster-csi-snapshot-controller-operator git ffba005b sha256:20b9202fa027c51bc72ef75e0f202d2fb1b2d24c1fb1ba7590964aa9c3c9a34d
cluster-dns-operator git 81507f04 sha256:8b96d6c091ac8af535393c0e3cec2fa23f7a32f61dc64394bb7bb02e63071511
cluster-etcd-operator git fe627373 sha256:c1573bacf99a479434060288a30f21d19d9e03576f84c37aed6ce30ce57dc877
cluster-image-registry-operator git 790f6a59 sha256:9b34804852efecfa53bb3c72a94fe205d36862327dbc67d1875d9d045881b493
cluster-kube-cluster-api-operator git aed5f6c7 sha256:a328ee0c9cd7588f2866961c401afc89c9b2b6690236c666a25ed9b65d747846
cluster-kube-controller-manager-operator git d68b3764 sha256:a21573460f3dd86b33af54f25b7f56b2f7fb51e972e5636d82c6dffc1fd15a75
cluster-kube-scheduler-operator git 98ca953b sha256:4224efc0b06be077f2650d74f292da6fc6f820f0c7ca4dd607dc5e001d25e309
cluster-kube-storage-version-migrator-operator git ab40b611 sha256:d40e096dcc1fa1532588e8b3e6360b0ce7ec03a7479473e48496202babdae09c
cluster-machine-approver git acc2380e sha256:4aeacd20188d3f4afc6fa298aae257863ade7c5bdbe1219f4c6ab775a772619c
cluster-olm-operator git e31b7775 sha256:28b573eb184bac8e9a9dfe63e3b511f9030e995f184cea675bde7588a4ecace1
cluster-openshift-apiserver-operator git 2b2ba3be sha256:724bd78357239207996f4db3209bf3e59bd36decdf8b28b42ce69cc9e0f56b87
cluster-openshift-controller-manager-operator git b05a249d sha256:11af02036ddc343fd0f221e616364a1f7c24aaa0ee3d8180fda922f6b80c542c
cluster-policy-controller git 7209e90d sha256:e11ba884d59e6d152250ea6b7e062a012e1b30b5de9a4dfa921fd5b34f4ae6b1
cluster-update-keys git 63022033 sha256:e1950a6e0bc5dea1a8448b0cd1be2b19051ed4b4a3ff2808b5e81dc3af3160d5
cluster-version-operator git b855c680 sha256:d7404c8892daa3b76b56a88999c122e7ddd231fe1bc2930ede83d70769d76971
configmap-reloader git 62d56d6a sha256:c092041862c458ca2315c672a7de61ee2add7008e5f44a46248d19d5583a5371
console-operator git dc3d8515 sha256:036e6f9a4609a7499f200032dac2294e4a2d98764464ed17453ef725f2f0264d
container-networking-plugins git 49a6faae sha256:d1991d47ef6d2a7978f2662b758e1e2390d7e42586caff9e0d7f9edd573fde07
containernetworking-plugins-microshift git 49a6faae sha256:ae09c69ef54afe5b2fa338675c9a766efcd2226ae9095281bcd37a61fbe9dadc
csi-driver-manila-operator git efc99a2a sha256:f999b4d579c01466b742b4ef516bb2acde50a12bd0b13aaafb2beb0dd42f6a19
csi-driver-nfs git 79885550 sha256:7cf24803b5808f464582fbf7ff11a83db412af4756c59339e8fb4d939dcc60c4
csi-driver-shared-resource git 66aee5b0 sha256:2bfb094a3f91351eb653f00c9ba9d0f6271cab13b50569fd4f856c52cc9d7ed9
csi-driver-shared-resource-operator git c095a1f2 sha256:311b457e44e21b82a28a56ba5521b85a9176fafbe40f856e2e1aa62503bb7a25
csi-driver-shared-resource-webhook git 66aee5b0 sha256:c58504574ad052620726807207f72db2e9b4507a3db19c1a63616b43f9b289e4
csi-external-attacher git c3fe8e2e sha256:35f76f75d57d7e61bcfe391b48bc51e6fd17ed48b797b007457b160c667b4d2e
csi-external-provisioner git fe460e56 sha256:40bc028c682c0b2395a726138400e132f8791448156167d954229859416605f4
csi-external-snapshotter git 080f6bdb sha256:b1bc9573d175e80ec5254226ae9a72afe915af9304645e251c7c87fbcb3b8a78
csi-livenessprobe git e7d841dc sha256:9eaf39daf67dddbbbd33be9dfcd8b6dad6be2ed7331109ad87d8de140207933c
csi-snapshot-controller git 080f6bdb sha256:5f34bec68992d874c702c1588185a2ba12fb679fc2aeb3f1ef3630fb6003c4cc
csi-snapshot-validation-webhook git 080f6bdb sha256:6d79a37ccc339c73836cf1e5fa2fa8945aaf93b62d8b7072ee795efef44842b5
docker-registry git 4498bed2 sha256:185305b7da4ef5b90a90046f145e8c66bab3a16b12771d2e98bf78104d6a60f2
driver-toolkit git 859518f6 sha256:5c5ee4a5a2f4a4c1d0847a3f9d0933463812934c0cc8cd21af9af25ea6898fee
egress-router-cni git 3193a756 sha256:e79bb39bda95c5e9b4c529c09c459b9399e8ba06e9ddd344bb639152433fa212
etcd git 0d9e0a90 sha256:d1621447838fffba4ffe9697ceae3cce5c859ef2c8b061d90c57a4bc4695798a
gcp-cloud-controller-manager git 8ce997d7 sha256:8a5cb23e14ce69ec59024996c0f29d24a987b0de2a808753542ba50f3f061e8e
gcp-cluster-api-controllers git 9c561f2d sha256:0e8045c602ecfe3cc2625f4e262ffddccd231a3253b44bc3636ee69e76198d4f
gcp-machine-controllers git 86a1d902 sha256:84f9b40cd014bcc25be3d1d59368f9ef5493fa7578a46c8e5ed62d0c8f32683c
gcp-pd-csi-driver git c770b412 sha256:b9d1a6e5e58286ef091733e493cb26f1bf974d80a959301109ce20fb815ac582
gcp-pd-csi-driver-operator git c23b064f sha256:a1d51c9b1b6ef5295191ba37847cceec07ef88dddb6ecfb80d17940c943235df
gcp-workload-identity-federation-webhook git 08579e9f sha256:2b3afa1e559113125922cebc5b4e056151061837ccece9d30267590c384b61f8
haproxy-router git 1e29d8cc sha256:81c77ea52f9b1b7567d2e45f290b7cc2418d83bbdd9c1b574fed66493120894f
ibm-cloud-controller-manager git ad8f7eb0 sha256:d5a3c856733059b524547c39c618d72ffaa1af29a5d790e0d336a1ac48fc1a2f
ibm-vpc-block-csi-driver git b4d153d6 sha256:20dd373dacf208d0dc42585bc297c6ac8600a535b14eadd23de3e4283412d453
ibm-vpc-block-csi-driver-operator git ee301303 sha256:5f04499cc49b0778fcdf3f179f5c5b8c7d8ce2c9242e6b637feca913cd3ed8b2
ibmcloud-machine-controllers git 0b8dd7ab sha256:dba291821f74a03bf216948f18b18f5e6c846a02e6c27c4e8aead6b3e0e21c47
ironic-machine-os-downloader git 9e6596c3 sha256:e9755353f700b29c76141c9d442274b56352820e3c60f84e21b7eca7214887b4
ironic-static-ip-manager git bc5b8a2c sha256:e0f008d648f5d96dea63d898a4682c5eb429d28f75f1b37970b4cf0d8938eda6
keepalived-ipfailover git e3879e9e sha256:0b734a57115c9526adb336fa619394d961aed0090f6e45a9d3195068afc5952b
kube-metrics-server git 07f8cd9e sha256:28dd932f83bb9b7d81c7dcd15ddb0bbb10f784b39519b2b493bbbf0262392526
kube-proxy git dee082de sha256:4cda56d0ac2e318ff6841dc9fdbf88e0daffcde7c46aa6fce8b1a5346b42099e
kube-rbac-proxy git f708b5ec sha256:33d7e5c63340e93b5a063de538017ac693f154e3c27ee2ef8a8a53bb45583552
kube-state-metrics git 462e63f6 sha256:f944c59b51bb2f737447e66856e0ac0b73f957aabb3c505e6cfb28cc4eaa9ecf
kube-storage-version-migrator git 69b07ae0 sha256:c6206bcb82e6b770cf7c9118989e61018d9689d6bb8cd6d028116af8a0b2c54f
kubevirt-csi-driver git 757a8894 sha256:51640c81de1a650bf33036df3d4a5d23823ba003e897b85b1ff442bd662643dc
libvirt-machine-controllers git a336f0b5 sha256:14cbee8f6087b798f202eecb8235a38d0f7f2486f10eb5d8d4e1719063d73b7c
machine-api-operator git 998cffed sha256:cecee1096149a9cccc485d2ec92505bddb4bb23568bf630217e6d4766f3bd6a8
machine-os-images git f85666be sha256:4598401f3afdf577a351a9b217bc7f4985ae7b76557502685ed28b32c2ff9d4d
metallb-frr git c0182036 sha256:c0d7efbf0bf0bbee7fd032c48ba814370528bf1b43993358e3256b60779fb742
multus-admission-controller git 041b743a sha256:9b43694342df7649e3445dad40c649498ca71bc5acc83cca6e0453588df32299
multus-cni git 93d87533 sha256:9cc55a501aaad1adbefdd573e57c2f756a3a6a8723c43052995be6389edf1fa8
multus-cni-microshift git 93d87533 sha256:e2f984046c970619b074496e881df92beb590777681d35744a05daf897051d92
multus-networkpolicy git 4d0b1703 sha256:bebc21de8feb05af698b4d13c9e165b863b05f6c9ad4a52031a10fd5ad163fca
multus-route-override-cni git 391c1b03 sha256:91d9cb208e6d0c39a87dfe8276d162c75ff3fcd3b005b3e7b537f65c53475a42
network-interface-bond-cni git cc7b628e sha256:357821852af925e0c8a19df2f9fceec8d2e49f9d13575b86ecd3fbedce488afa
network-metrics-daemon git f56bbf7a sha256:41aa7e4b739ce22c7c510e1bc8084654785ce439e238b3dee01583a1f5a1ebad
network-tools git e59e7b25 sha256:db0f0833b197b5ac307f578aea30d8be14373e45e783f6f4ec47f7081312d274
nutanix-cloud-controller-manager git c9f6cd1f sha256:45bbbed3e9bb60c30c91cda587556749a15f78b3ad19842186267f121dc02a4e
nutanix-machine-controllers git a4fadcbc sha256:557e81a719180e666f45dd64707ec6ca1032f93a04d1a7813aeb565d8d0c9ad9
olm-catalogd git c740e056 sha256:8b693227990cdfb36190c20125f728ccdb7b7f698b1962ea9f2608406b5d671f
olm-operator-controller git e245e661 sha256:1615a74100ef1016d227c3924d473b598c254619695cde9999b88124479c56fc
openshift-state-metrics git adf64920 sha256:4bca357257fb5590b125fc132613a7fdf721bb2e11f0c0d37c8ced1973ac056b
openstack-cinder-csi-driver-operator git f89b6dbc sha256:f7dc72345a0f5d5dde7fe4581995523ec63066d6cd5e99e1891748f305344d36
openstack-cluster-api-controllers git 5593c5f7 sha256:1f8d360d8f41a47519716212cb5fa9872ecae210b44ee492f9af6216c5bc2d2b
openstack-machine-api-provider git 68971874 sha256:075f3600f8383cd340859c3014d89a15a5daedf5e12d61b955d84ed5eb99075a
ovirt-csi-driver git 1db726a9 sha256:920088cad5f00e3e5b9fceb03ed58ca3fc82fbec623f0aee6c5bb1abf8542e44
ovirt-csi-driver-operator git 0feae256 sha256:339089727b1a73129e7df270f1148fdcd640e9c069abd13fe231ccb4f4f3d8fb
powervs-block-csi-driver git aaa6afa9 sha256:ca0a606c3676834849729607b5346a136cb6fc0bd46ebc2a746db6f8c55f3d55
powervs-block-csi-driver-operator git f6f037c5 sha256:fdbb10128ebe09b630153912e6fc2cb3150f634c792f1459d460f04c61b6dfa4
powervs-cloud-controller-manager git bd3d72e5 sha256:df6e506d6b74d6ab72a3c4bac0cb9ef00b93907a68cbdbd6f26564af31dbeb3c
powervs-machine-controllers git b7478d7e sha256:18a7e5a86128c95ab9dfb9c22f9a88c90e43cfb084b1d8ea1421b8de89a2c808
prom-label-proxy git c84c4898 sha256:87103e9af9b836dd5edc9eae46885d7ed9471574fa3874459a335a8d01a58136
prometheus-alertmanager git d7a98144 sha256:ba2890d43d0cd18906bd67968541d1b58c76ea731092c15829ae3fce37576d75
prometheus-node-exporter git 8f095361 sha256:0ed9562476aad855edc32bdd4a2ebd759a2c010144a53e4da003cd82af460b1a
rhel-coreos sha256:01410d386a80ebb9c03453151479c9c17ff67836b0231b0979c696ebc880d1a5
rhel-coreos-extensions sha256:ed20f89fdaf2495bd789f3842c11fb424b986d52ad19d082ae2520774a3ab6cc
route-controller-manager git 02bbf80a sha256:f678e1c255e3e5733dd40ac28bf640ed6d626b55f78177d95b0332d1933776bc
service-ca-operator git 6ce6cceb sha256:96ce4d2c768bb771e888e7cab4a2a5d67789c6f96f517244fa26f9f21cffd4e7
telemeter git 0238640e sha256:c4698498a3ca625c3d29358ba2a1f08e8033dfb59c4212a8f8552ca2753b8031
thanos git 98c99371 sha256:072b006abd58ce063deddf5a5ad349f355d8bb1942c81a0d999ad49580274aac
vsphere-cloud-controller-manager git 097d823b sha256:0b15292b529ecf18fef83cf8a66fc5a5f7b956a1c39ca3ee4f6c27992f5f5cbb
vsphere-cluster-api-controllers git 6a5d803e sha256:939ba4881a608449dc3687c40b8b61bf1e15f47ac909b86f6d943e18e79b7d9f
vsphere-csi-driver git 039ee368 sha256:376cdb0309b039dacd65648fa58003a97d8e33ab94bf47219b324769d3409861
vsphere-csi-driver-operator git e1de36a2 sha256:cc095a9197150b4f07db2441d973ebc5fcad2ac5dc831c8fe83ecc17aec77303
vsphere-csi-driver-syncer git 039ee368 sha256:64325c9c31b39ee5b95863ddaa63783a57e8dc154c2d4fb22bd29ad477bdc9f0

aws-cluster-api-controllers

OCPBUGS-61940: UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It #571
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator

OCPBUGS-64704: Use 127.0.0.1 for healtz http-endpoints #462
OCPBUGS-63557: Add RBAC ClusterRole and Binding for driver node #453
OCPBUGS-62974: Add withCABundleDaemonSetHook() to AWS EFS operator #449
Full changelog

aws-machine-controllers

OCPBUGS-73822: Fix reconciler consistency checks in Update and Exists #167
OCPBUGS-63139: client: re-use a single file for building the session instead of randomly named files #145
Full changelog

azure-machine-controllers

OCPBUGS-65954: Set updateDomainCount to one when faultDomainCount is one #176
OCPBUGS-63700: Support datadisks on Stack Hub #168
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-68142: [4.17] uplift logrus #10167
OCPBUGS-53236: Validation for API and Ingress VIPs when using user-managed load balancer #10047
OCPBUGS-62951: Update the RHCOS 4.17 bootimage metadata #10021
OCPBUGS-62054: Make swift containers removal not fatal for UPI. #9952
Full changelog

baremetal-machine-controllers

OCPBUGS-68143: [4.17] uplift logrus #239
Full changelog

baremetal-runtimecfg

OCPBUGS-71209: Bump logrus version #377
OCPBUGS-60112: Re-add ENABLE_NODEIP_DEBUG env var #363
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-64615: Help with must-gather scheduling through suggesting preferance of nodes #2150
Full changelog

cloud-credential-operator

OCPBUGS-65801: ccoctl azure: retry custom role creation on consistency errors #951
OCPBUGS-65480: ccoctl: use pagination when listing resources in aws #945
OCPBUGS-63549: ccoctl: add public-key-file flag to create-all #939
OCPBUGS-55128: snyk to ignore SNYK-GOLANG-GOLANGORGXNETHTML-9572088 #917
Full changelog

cloud-network-config-controller

OCPBUGS-66132: [release-4.17] Fix capacity calculation #194
OCPBUGS-65520: Change the capacity struct from int to ptrOfInt #191
Full changelog

cluster-baremetal-operator

OCPBUGS-63715: Always have a service for ironic-api port #519
OCPBUGS-63666: Allow provisioningIP when network disabled #518
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63167: ccm: disable unused secure-serving port and webhook #423
Full changelog

cluster-config-api

CNTRLPLANE-1981: Promote streaming list encoding to Default #2599
OCPBUGS-71184: Add HTTPKeepAliveTimeout to IngressController API #2639
NO-JIRA: Promote streaming list encoding to Default on Hypershift. #2567
CNTRLPLANE-1611: Add feature gates for StreamingCollectionEncoding #2538
Full changelog

cluster-ingress-operator

OCPBUGS-71184: Implement HTTPKeepAliveTimeout tuning option #1335
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-63614: SCC: add hostmount-anyuid-v2 #1954
Full changelog

cluster-monitoring-operator

OCPBUGS-64580: Fix KSM deny-list typo #2732
OCPBUGS-63489: Add mcd_local_unsupported_packages metric from MCO to telemetry 4.17 #2725
OCPBUGS-63123: test: remove image registry e2e tests #2715
OCPBUGS-61766: chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind #2672
Full changelog

cluster-network-operator

OCPBUGS-45086: Re-disable metrics server #2579
OCPBUGS-63154: Add drop flows for GARPs #2818
[Release 4.17] OCPBUGS-61765: Update CNO reviewers/approvers #2799
Full changelog

cluster-node-tuning-operator

OCPBUGS-63504: Do not cause kubelet failed dependency by ocp-tuned-one-shot.service #1418
Full changelog

cluster-samples-operator

OCPBUGS-63515: references to github.com/sclorg/django-ex.git now also refer to the branch #658
Full changelog

cluster-storage-operator

OCPBUGS-41160: Move metrics to vsphere driver #633
Full changelog

console

OCPBUGS-69403: Disallowed Pipelines-plugin Pipelines navigation section #15849
OCPBUGS-65933: Preserve URL in perspective switch + remove dev console folks from reviewers #15762
OCPBUGS-64942: Expose prometheus tenancy label path as a proxy #15710
OCPBUGS-64599: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15665
OCPBUGS-62631: /auth/error?error=missing_state&error_type=auth is showing blank page #15554
OCPBUGS-63212: switch to dev perspective for /dev-monitoring #15614
OCPBUGS-63397: fix bug where Roles list was displaying invalid data f… #15627
OCPBUGS-62282: Fix desync of console and variable namespace #15545
OCPBUGS-44154: bump dompurify to latest #15590
OCPBUGS-61737: Remove ancient X-XSS-Protection header #15494
Full changelog

coredns

OCPBUGS-62825: UPSTREAM: 7083 and 6836: Fix failing TestZoneExternalCNAMELookupWithProxy #155
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-68209: fix CVE-2025-65637 #357
Full changelog

csi-external-resizer

OCPBUGS-62466: Requeue PVC over PV creation #175
Full changelog

csi-node-driver-registrar

OCPBUGS-63682: update log level verbosity to not clutter logs #90
Full changelog

docker-builder

OCPBUGS-65816: BuildConfig inline Dockerfile fails with heredoc syntax #488
Full changelog

hyperkube, pod

OCPBUGS-72531: Skip E2e: attach on previously attached volumes should work #2566
OCPBUGS-65695: Fix Concurrentmap Iteration #2520
OCPBUGS-63460: UPSTREAM: <carry>: backporting fix for concurrent map iteration and write #2456 #2496
CNTRLPLANE-1611: Backport StreamingCollectionEncoding for JSON and protobuf #2486
OCPBUGS-61584: UPSTREAM: <carry>: Don’t retry storage calls with side effects. #2458
Full changelog

hypershift

OCPBUGS-74230, OCPBUGS-74294: [release-4.17] Support proxy authentication when user/pass is included in URL #7568
fix: OCPBUGS-72956: Fix Konflux EC voilation, update deprecated base … #7457
OCPBUGS-69865: test: remove unit tests that depend on network communication [release-4.17] #7411
OCPBUGS-57123: Add support for registry root entry only in the IDMS/ICSP #6230
CNTRLPLANE-1903: Migrate 4.17 pipelines to use common pipeline #7215
OCPBUGS-63639: [release-4.17] fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries #7112
OCPBUGS-64604: Update DNS names for ovn-kubernetes cp metrics #7150
OCPBUGS-63370: fix: Make the hypershift CLI binary FIPS-compliant #7094
CNTRLPLANE-1425: feat(konflux): tag MCE HO images with latest #6838
OCPBUGS-57143: [release-4.17] HCP payload doesn’t respect multiple mirrors #6771
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-67287: [release-4.17] Fix incomplete vendor/ #139
Full changelog

insights-operator

OCPBUGS-67008: Add filtering to add other possible pod status to QEMU gatherer #1196
OCPBUGS-66395: QEMU logs are not gathered if there are pending status virt-launcher pods #1194
OCPBUGS-66394: [bugfix] The archive’s records may include files whose names are out of bounds #1193
OCPBUGS-64629: add permissions to gather clusterrole #1170
OCPBUGS-63500: add missing permissions for replicasets and events #1165
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

ironic

OCPBUGS-69792: Bump eventlet version to 0.33.1-7 #761
Full changelog

ironic-agent

OCPBUGS-69775: Bump eventlet version to 0.33.1-7 #231
OCPBUGS-62490: netutils: Use ethtool ioctl to get permanent mac address #214
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-34447: Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART for 4.17 #44
Full changelog

machine-config-operator

OCPBUGS-60112: Enable debug logging for nodeip-configuration #5219
OCPBUGS-62170: Fix - NetworkManager restart or crash renders br-ex unusable #5355
OCPBUGS-66037: Remove –mount directives #5443
OCPBUGS-63154: [release-4.17] Networking: reset ovn-remote config and allow ovnkube controller to set it #5358
OCPBUGS-63540: Add control-plane label for master nodes on legacy clusters #5375
OCPBUGS-63364: Invalid architecture value found in annotation during 4.19 update #5368
OCPBUGS-63055: Recheck generatedByControllerVersion annotation prior to deleting a degraded MC #5346
OCPBUGS-62741: Add /etc/docker/certs.d to template #5335
OCPBUGS-62683: Add mcd_local_unsupported_packages recording rule #5327
OCPBUGS-60890: Race in configure-ovs.sh affects bonding interface configuration. #5267
OCPBUGS-61859: Override NMState service definition #5289
Full changelog

machine-image-customization-controller

OCPBUGS-68192: [4.17] Uplift logrus #152
Full changelog

monitoring-plugin

OCPBUGS-64942: Use tenancy access to metric lables #639
OU-1058: Don’t show TP button in non-administrator #637
OCPBUGS-62282: align dev and admin persective tab names #602
OCPBUGS-62282: add missing translation string #587
OCPBUGS-61891: feat: add alerting rules tab to dev console #538
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-73728: Update tag on ci-operator.yaml file #395
OCPBUGS-70256: Prevent accidental IP deallocation in statefulsets #393
Full changelog

must-gather

OCPBUGS-60607: Separate resources with comma to fix malformed inspect #504
Full changelog

networking-console-plugin

CNV-76277: Fix name generator with unprofessional names #320
Full changelog

oauth-apiserver

OCPBUGS-66228: UPSTREAM <carry>: bump kubernetes-apiserver to pick up loopback certificate expiration update #157
NO-JIRA: (chore): update OWNERS file #171
OCPBUGS-61584: Bump openshift/kubernetes-apiserver for etcd retry patches. #143
Full changelog

oauth-proxy

OCPBUGS-61445: Update x/crypto to v0.31.0 #334
Full changelog

oauth-server

OCPBUGS-61584: Bump openshift/kubernetes-apiserver for etcd retry patches. #198
Full changelog

oc-mirror

Adding r4f4 and Prashanth684 as approvers and removing contributors who are not working with oc-mirror anymore. (#1269) #1269
Full changelog

openshift-apiserver

OCPBUGS-66229: UPSTREAM <carry>: bump kubernetes-apiserver to pick up loopback certificate expiration update #584
OCPBUGS-63392: Wire dry run option to Image API server operations #565
OCPBUGS-61584: Bump openshift/kubernetes-apiserver for etcd retry patches. #554
Full changelog

openshift-controller-manager

OCPBUGS-61199: legacy image pull secret rollback controller #413
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-67301: Fix TOCTOU race condition in ensureInstallPlan (#3682) #1172
Full changelog

operator-marketplace

OCPBUGS-68212, OCPBUGS-68213: [release-4.17] CVE-2025-65637 fixed in logrus v1.9.3+ #710
OCPBUGS-62219: Remove Expect func so that the test case can use the retry logic #670
OCPBUGS-61036: Update memoryTarget on catalog source pods #663
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

[release:4.17] OCPBUGS-71985: Fix conntrack reconciliation to use service port instead of endpoint port #2936
OCPBUGS-71218: [release-4.17] CVE-2025-65637 Bump github.com/sirupsen/logrus to v1.9.1 through indirect dependency conversion (go-controller module) #2905
OCPBUGS-71198: NetPol & MultiNetPol: Process update only when spec fields and/or related annotation are updated #2923
OCPBUGS-68348: Add ricky-rav to OWNERS for release-4.17 #2898
OCPBUGS-65928: Skip Pending pods in EgressIP status #2871
OCPBUGS-65569: [release-4.17]: kubevirt: fix bad release of IPs of live migratable pods #2857
OCPBUGS-64856: Fix stale EIP assignments during failover and controller restart #2850
OCPBUGS-64674: [release-4.17]: Configure sec nic EIPv6 address with NODAD and maximum lifetime #2843
OCPBUGS-63154: Fix EgressIP stale GARP post reboot + pod restart #2807
OCPBUGS-61749: [release-4.17] Fix dnsnameresolver address set #2796
Full changelog

prometheus

OCPBUGS-61766: chore: compute highestTimestamp at queryManager level #268
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-58408: Fix: One Alertmanager Config failing blocks all others. (#6585) #336
Full changelog

tests

OCPBUGS-65492: Add imagestream update dryrun test #30479
OCPBUGS-64927: update telemtery limit for 4.17 e2e case #30472
OCPBUGS-64641: Migrate OCP-32383 to upstream #30455
OCPBUGS-63392: Backport pr 29834 to release-4.18 #30408
Full changelog

vsphere-problem-detector

OCPBUGS-61755: Check for number of FailureDomain-s in GetVCenter() #190
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github