4.17.49

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.17.49-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Pending (1 retries) periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.17-e2e-aws-ovn-serial
- aws-ovn-upgrade-4.17-micro Succeeded periodic-ci-openshift-release-main-ci-4.17-e2e-aws-ovn-upgrade
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-main-ci-4.17-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.17-micro Succeeded periodic-ci-openshift-release-main-ci-4.17-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.17-fips-payload-scan
- gcp-ovn-rt-upgrade-4.17-minor Succeeded periodic-ci-openshift-release-main-ci-4.17-upgrade-from-stable-4.16-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.17 Succeeded periodic-ci-openshift-hypershift-release-4.17-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-main-nightly-4.17-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.17-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.16.11, 4.16.12, 4.16.13, 4.16.14, 4.16.15, 4.16.16, 4.16.17, 4.16.18, 4.16.19, 4.16.20, 4.16.21, 4.16.23, 4.16.24, 4.16.25, 4.16.26, 4.16.27, 4.16.28, 4.16.29, 4.16.30, 4.16.32, 4.16.33, 4.16.34, 4.16.35, 4.16.36, 4.16.38, 4.16.39, 4.16.41, 4.16.42, 4.16.43, 4.16.44, 4.16.45, 4.16.47, 4.16.48, 4.16.49, 4.16.50, 4.16.51, 4.16.52, 4.16.53, 4.16.54, 4.17.10, 4.17.11, 4.17.12, 4.17.13, 4.17.14, 4.17.16, 4.17.17, 4.17.19, 4.17.20, 4.17.21, 4.17.22, 4.17.23, 4.17.24, 4.17.25, 4.17.26, 4.17.27, 4.17.28, 4.17.29, 4.17.3, 4.17.30, 4.17.31, 4.17.32, 4.17.33, 4.17.34, 4.17.35, 4.17.36, 4.17.38, 4.17.39, 4.17.4, 4.17.40, 4.17.41, 4.17.42, 4.17.43, 4.17.44, 4.17.45, 4.17.5, 4.17.6, 4.17.7, 4.17.8, 4.17.9

4.17.48 (changes) - S S S S S
4.17.47 (changes) - Failed
4.17.46 (changes) - Success
4.17.37 - Success
4.17.18 (changes) - Success
4.17.15 (changes) - Failed
4.17.2 (changes) - Success
4.17.1 (changes) - Failed
4.17.0 (changes) - Failed
4.16.57 (changes) - Success
4.16.56 (changes) - F P S
4.16.55 (changes) - Success
4.16.46 (changes) - Success
4.16.40 (changes) - Failed
4.16.37 (changes) - Success
4.16.10 (changes) - Success
4.16.9 (changes) - Failed
4.16.8 (changes) - Failed
4.16.0-0.nightly-2026-02-12-042618 (changes) - Success

Loading changelog, this may take a while ...

Changes from 4.17.37

Created: 2026-02-13 22:01:14 +0000 UTC

Image Digest: sha256:d1c2044e31dd213e8b67aa19f63a7bdb93e0424c3d6f932a66e7d1513a9ca1e2

Components

Kubectl 1.30.5
Kubernetes 1.30.14
Kubernetes Tests 1.30.14
Red Hat Enterprise Linux CoreOS upgraded from 417.94.202507291008-0 to 417.94.202602090846-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
StreamingCollectionEncodingToJSON (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
StreamingCollectionEncodingToProtobuf (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Rebuilt images without code change

agent-installer-csr-approver git 63b2da6e sha256:0f08791517accf79e535ac23e5b5566df87bc0566b0b855bab48e98e2a042409
agent-installer-orchestrator git 63b2da6e sha256:fb8a71ad5d2b22abe70086eddc66bb00490214cfe48105a44e990a1b457165a6
agent-installer-utils git 79b73e6a sha256:4d7608060116545149f6f935ad765bd8522c08ae31c42be8ead83d2e8fc9dd8e
apiserver-network-proxy git ea660559 sha256:5f39e2b2fd7b44bb165c898e01792ca46ac21271e26216668c343fcad218ba89
aws-cloud-controller-manager git 144bace6 sha256:2f955fb2b62f516fd5f138905ae4d42126ec3630ab77c01884ea6f8378adbb5c
aws-ebs-csi-driver git 2bb5b316 sha256:3398fc50fdd07a18f9d75b33fc92f5be4b52fcf546e43bc9c0e9d21febcebb96
aws-kms-encryption-provider git 9d401670 sha256:03439c083358214ca25b04f6aac8595ab3ec13befd3e3649a6e1cf3be9ea1d96
aws-pod-identity-webhook git 80efc4ea sha256:f929b7ba166009c0efa03b3086625ecf2b6a742d998bcccc60d5d13e37d5d2d9
azure-cloud-controller-manager git 626ecd1c sha256:773b60106933d83b93a447cb26830d5e3efdbf8dcbb481e61041af9ad6e3fb62
azure-cloud-node-manager git 626ecd1c sha256:731b5bdf2794555f25e58788a7205d8ba58d4bd0184e18781132f91ab41b8205
azure-cluster-api-controllers git d359bfe5 sha256:5b8b41c61cd3449d3124399c3e73fdf84409f1f0ae586409815496c74f9876f1
azure-disk-csi-driver git a544f30b sha256:d21652b137f580e9c9cff4b673268538173936ac663e924021f2894856c8e2eb
azure-file-csi-driver git 9f4c38c2 sha256:f4a772aac333720e9bc965b322b444c518f06c68229d9510ab629abf6d3ebad1
azure-kms-encryption-provider git 190a0fab sha256:db7fa414c1f6599dfb49e01575f63daa0ed2d097ebadad679598fefc55c76303
azure-workload-identity-webhook git 6707f899 sha256:14135df4633ad04558bc291dd85ae3fe43a15b19e20a60eb7e6ad51e94a8adbe
baremetal-cluster-api-controllers git 41b34248 sha256:5ea6774c67fe44e259dfcdbe3f15319e01fcdc65d04578d2d3ec9e1a17fc209c
baremetal-operator git e6e5d54a sha256:939d9d17a08f631e05ab2f829074179b96d47779bde83c4a39b4da460dd6c0df
cluster-authentication-operator git f641a4c6 sha256:b4e2f4bd244a06bd878fde55fa4ffc3eecf18b9c2f372cc64ac98421b5c6fa12
cluster-autoscaler-operator git ea4a8878 sha256:07565c5a853923c88999f685bfc58b7182ab5a521e362410d8f0a7101710db8e
cluster-bootstrap git 95dd9129 sha256:aff848987165bcb773334d6e0d2329e5088e92263a020746a59daa9fd245694a
cluster-capi-controllers git 77ef4fc5 sha256:e7fd15b6fb005e4c939acaaf3d3a9b6d7bdd6a45b41f53545834f8700ce73429
cluster-capi-operator git a2cdab1b sha256:75512e6abd571f62c93f3aa64df6c191cee8de9cb073e9c02e61897c6bb7a0b6
cluster-control-plane-machine-set-operator git f7e01c2f sha256:2ecd9f318058dfa6d7fd5cbf68394233b7723f81c388126d4c25f27b3be4a691
cluster-csi-snapshot-controller-operator git ffba005b sha256:903c57a5adba0880c445fd6bd5b97cc29332a970a1380e2665d46856daacb458
cluster-dns-operator git 81507f04 sha256:665674a1a7def872e6a30691701d79e47b600f2618d2fed2d9df83549547ed0c
cluster-image-registry-operator git 790f6a59 sha256:0c1e6d227e4c7ce9f7f26b8d83e9f4e66fdcf9862a4b69b76b137022e81d2db9
cluster-kube-cluster-api-operator git aed5f6c7 sha256:b312d0206536d31670c490843eecc1e6957a3e4a60ad6510926e112bf4c6199b
cluster-kube-storage-version-migrator-operator git ab40b611 sha256:1b893e910998a40b251c50241a48a20038a25809abe4693ef3020efebd93f7a2
cluster-machine-approver git acc2380e sha256:d7e779704d845d9566debea51df94dd13fc70832c2e9fb3749c911a78d2c5a83
cluster-olm-operator git e31b7775 sha256:85c3d718fda737cd2e6662678823eef1762d5fa2c956cabd8471ca4904144c9c
cluster-openshift-apiserver-operator git 2b2ba3be sha256:eb40a39130e669424f1be55c975146e66395df5d04224577f3e99639e4ca8319
cluster-openshift-controller-manager-operator git b05a249d sha256:116f30f0ad2701b65875a7899490612983cf14dfda4fca904bc0bc28373ee432
cluster-policy-controller git 7209e90d sha256:a090de286422d01e126124bcf9f31f9186411861eafaebcca765655f8b3e4c7b
configmap-reloader git 62d56d6a sha256:328a118d8884e697989b973e68a4bfbe969900c01f1de9336e3a3da8fbd7b9b7
csi-driver-manila-operator git efc99a2a sha256:a1549c625108282c8c0b43a4bd9568ccef5524a561750b7b83ba937298449980
csi-driver-nfs git 79885550 sha256:ef9ed5248d0d7069da44073e3a01656ac72fe773f2557948fe85929301f27af5
csi-driver-shared-resource git 66aee5b0 sha256:c7fe14e24c56c6a7ea7fcb0c92426721c6f9250a1f980b16ccbc005beada458b
csi-driver-shared-resource-operator git c095a1f2 sha256:7318e32ca31ac55cb8920938883e02df10c08e2638720c5457f4f51ee3bd3806
csi-driver-shared-resource-webhook git 66aee5b0 sha256:031682315dfa440ea83e735ce5bb2d9d028624f89d7da3ba945024eaea97e560
csi-external-attacher git c3fe8e2e sha256:7cfc3fef08ad545e4285cd504d04c99ffb30cf5487dcf19fdf2dc834f76ebc6e
csi-external-provisioner git fe460e56 sha256:2ad6590f527c6c3c2a62bfd373aec2a7b718166421696bb1af8f90edab680394
csi-livenessprobe git e7d841dc sha256:cfd1d5878c47407c5ab0c6c5a4bc1f965a973f52e6a0ae50b9165d38491630bc
driver-toolkit git 859518f6 sha256:e445cacc121b112a63e85595b7906261ea08371d376307b3d0d7154001dc0904
egress-router-cni git 3193a756 sha256:fb169d7e8b6498601ee5b4d9118a18eb9eabf9ab2f6fac1490895cd963e061e3
etcd git 0d9e0a90 sha256:b66a1a75d24c8bc1dcb133f05bcd5336f3b9cf136e6ee704c20dd2320d789bba
gcp-cloud-controller-manager git 8ce997d7 sha256:9e788c203501c8beb27c6ec3d6c8cd6baa697b92e93d1a3e3a5a3f31986499d9
gcp-cluster-api-controllers git 9c561f2d sha256:e28ec3a4cf42e031f3081dd07c110114cbdb4d752bee22766d94ed834f185ad9
gcp-machine-controllers git 86a1d902 sha256:f3378a32724504b607b203b078da1c2bcb11b7de79df2450f6f5781c1e14f8af
gcp-pd-csi-driver-operator git c23b064f sha256:4ad0bc153f330c730d42cb135c6b57c086f712ac1470785a578bfb09c42df5d7
gcp-workload-identity-federation-webhook git 08579e9f sha256:d0d1d93fba97290acaf6f95f4750db2e1dc5b85b32e816d7b973d8d4493e10b3
haproxy-router git 1e29d8cc sha256:aad12c4bc679dd1ae11038d1d18e435ad8adff445955370808296ee61f790e64
ibm-cloud-controller-manager git ad8f7eb0 sha256:1b59e9c31180973bdb6d06cde158940d61933a9cdf4216c1ae8328264a26f9e0
ibm-vpc-block-csi-driver git b4d153d6 sha256:f4d17c39184926114318fdeaa1ae03c609aa5cb2baf7e4a6077e017b0e123b62
ibm-vpc-block-csi-driver-operator git ee301303 sha256:a493ed7963da83fe08c42c952a77b544a683c8e4de719a69ca17d5c98ddaf5d3
ibmcloud-machine-controllers git 0b8dd7ab sha256:c70903433dfc14721d3e5428d4b5bb090ceb2d0d33cc05e3109b79c5187a9623
ironic-machine-os-downloader git 9e6596c3 sha256:7864401ddeb26ed89d65ffa18f24cca0cbf440c779d42ef18388801f7f36165d
ironic-static-ip-manager git bc5b8a2c sha256:7639e55a39d5cc32c531edfc2e7dc63634950141512e705a7c557c5e7811959b
keepalived-ipfailover git e3879e9e sha256:02756b68014d85cc80a723fb3aae6adac4923c877ad559757efa4414c01d9490
kube-metrics-server git 07f8cd9e sha256:8114ba5b941425e6119f1b7b18a0bd9f237e390ae2d95f174879d81be95fd5d4
kube-rbac-proxy git f708b5ec sha256:e2c908e9da2df7a9dd83e23ed6bafcddbbadcb75bca214ecc1866b99ff56b90b
kube-state-metrics git 462e63f6 sha256:b06669dc4bac1790e9ae07460fb6f15c0f98a0c75b642be17f42e3f0686d7715
kubevirt-csi-driver git 757a8894 sha256:f9f29cc2be2a4eab0bb658fe65fe2c918e54f2b3d353e1328c2b36877b98adc0
libvirt-machine-controllers git a336f0b5 sha256:8fe579f402f1b079c8fc411529082d836b9758f7e19a4b6fb33e715d1f09ce1d
machine-api-operator git 998cffed sha256:246df506dfbe7ed1ab73793d04bc36ae2051e1db161412b9c45c082686455abe
machine-os-images git f85666be sha256:cd33ce74ecbcc87b06f207a35eb566dbfe0ee4453e6fc82ed6d75a24585eac38
metallb-frr git c0182036 sha256:cd343b5fad226a1d118ac154bc64c6cdfcb0683cbcdefa5c2352fb1873ca9281
multus-networkpolicy git 4d0b1703 sha256:85aaa5e37b84f0725517b8b8409f87a1f0ed37af4a43c62df32195aab0aba83c
multus-route-override-cni git 391c1b03 sha256:0044f50366884dbac8963833a0fd0d55127726da637d87afa9c68d1f6a015108
network-tools git e59e7b25 sha256:cdd564162c84bf0082316f7e5c8d7f056225661f55b88df814ae41ea20d70a5c
nutanix-cloud-controller-manager git c9f6cd1f sha256:4a394aa834e9df765f70af820df87bcd026aefcfdb6f1e7b6da3e7cdd6731c55
nutanix-machine-controllers git a4fadcbc sha256:bc91818198ea991642d9a8a0f5c199ef6663fe70ff4e7cdf6810bb91e5b11d4a
olm-catalogd git c740e056 sha256:1f3fca67e22dab56a9c567e7bc8c7e2e65ba07697e575c15e8223286d1cb45a6
olm-operator-controller git e245e661 sha256:43cde93df6ee67e685494b85af0c4ba872ee3d2095226a45ec668ef464745996
openshift-state-metrics git adf64920 sha256:9362b119821c2708b17d3122a7f880e564d3bc02dae54a9e34433b316d9075a0
openstack-cinder-csi-driver-operator git f89b6dbc sha256:79c174ce37bbcf06d9a866b74b63f7738c09f40a8d27f6f3ade179cb47030f63
openstack-cluster-api-controllers git 5593c5f7 sha256:61f0183563c3b4645137c68e972a9826c24d2ff21fe46d5adc9b432bceecd243
openstack-machine-api-provider git 68971874 sha256:39ef308676b140ee55028fcd1d5cdfe16831c909f286eb2bf21b24ee64de3de5
ovirt-csi-driver git 1db726a9 sha256:0aa4c59c8254ee0bcf633e5c2d9f40d8b9738dbdd923ed3e3956c84b6724c2df
powervs-block-csi-driver git aaa6afa9 sha256:e803367f16d1730c3580aea87f4294ba44cfeaed395868c14e977c7e70a443ba
powervs-block-csi-driver-operator git f6f037c5 sha256:320bcfab175e26450a9c1af46b25cbed45d9b121e47678c483c3fd0cfa5ce965
powervs-cloud-controller-manager git bd3d72e5 sha256:4c276b6cc59e31a809d243ed481e2401717f8be42c95de2aaffbf3354107ec20
prom-label-proxy git c84c4898 sha256:30b720e63a57af01292caf2b3d4137438cf4581343713b607b9460a0c6bfcb6b
prometheus-node-exporter git 8f095361 sha256:779c1355323d06aeb756d542fc45953d1db64dd9143c014b5b0789f4718718dd
rhel-coreos sha256:1ca596d7a6a6e39eea62f51b92ef99196debe575c32a9f3ee9ef2dabfb4803d4
rhel-coreos-extensions sha256:800dbdad3b4b815f2b1292ef8bbfc9802d493bc6d94d1d859421ef9e4c50bc73
route-controller-manager git 02bbf80a sha256:4de474587c021b2c95533b5ddd7649e7ddd5c0373b617300086592219c8c04e8
telemeter git 0238640e sha256:d820e3b93a012fef63405a99ccaefe43980ca5671b2ef3db5b131d6e08f95a29
thanos git 98c99371 sha256:53405884b5e2f0029e11362ac6a83a866a46592283fb3ce61b8fee6b27a55be2
vsphere-cloud-controller-manager git 097d823b sha256:d5fc36d6f1b8bab484175aef6df171621372a934cab057a53cc6a83c6008def8
vsphere-csi-driver-operator git e1de36a2 sha256:5a5a40429720d6917c49cb16a31de7a3c0c20be43757b8dcd007e36ca36b97c7

agent-installer-api-server

NO-ISSUE: pin gotestsum to v1.12.3 (#8017) #8017
Full changelog

agent-installer-node-agent

OCPBUGS-58654, OCPBUGS-58659: Bump glog to v1.2.5 in release-4.17 (#1070) #1070
Full changelog

aws-cluster-api-controllers

OCPBUGS-61940: UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It #571
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator

OCPBUGS-64704: Use 127.0.0.1 for healtz http-endpoints #462
OCPBUGS-63557: Add RBAC ClusterRole and Binding for driver node #453
OCPBUGS-62974: Add withCABundleDaemonSetHook() to AWS EFS operator #449
OCPBUGS-60597: Bump library-go to fix assignment to nil map issue #422
OCPBUGS-60470: Backport stale conditions fix #416
Full changelog

aws-machine-controllers

OCPBUGS-73822: Fix reconciler consistency checks in Update and Exists #167
OCPBUGS-63139: client: re-use a single file for building the session instead of randomly named files #145
Full changelog

azure-machine-controllers

OCPBUGS-65954: Set updateDomainCount to one when faultDomainCount is one #176
OCPBUGS-63700: Support datadisks on Stack Hub #168
OCPBUGS-56168: [release-4.17] Update virtualmachines service to armcompute/v5 SDK #146
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-74677: [release-4.17] GCP: skip AI zones #10276
OCPBUGS-74555: Azure UPI ARM template: use storageAccountId #10264
OCPBUGS-68142: [4.17] uplift logrus #10167
OCPBUGS-53236: Validation for API and Ingress VIPs when using user-managed load balancer #10047
OCPBUGS-62951: Update the RHCOS 4.17 bootimage metadata #10021
OCPBUGS-62054: Make swift containers removal not fatal for UPI. #9952
OCPBUGS-54599: Update the RHCOS 4.17 bootimage metadata #9902
Full changelog

baremetal-machine-controllers

OCPBUGS-68143: [4.17] uplift logrus #239
Full changelog

baremetal-runtimecfg

OCPBUGS-71209: Bump logrus version #377
OCPBUGS-60112: Re-add ENABLE_NODEIP_DEBUG env var #363
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-64615: Help with must-gather scheduling through suggesting preferance of nodes #2150
Full changelog

cloud-credential-operator

OCPBUGS-65801: ccoctl azure: retry custom role creation on consistency errors #951
OCPBUGS-65480: ccoctl: use pagination when listing resources in aws #945
OCPBUGS-63549: ccoctl: add public-key-file flag to create-all #939
OCPBUGS-55128: snyk to ignore SNYK-GOLANG-GOLANGORGXNETHTML-9572088 #917
OCPBUGS-60972: ccoctl: aws to use proper issuer url on subsequent runs #908
Full changelog

cloud-network-config-controller

OCPBUGS-66132: [release-4.17] Fix capacity calculation #194
OCPBUGS-65520: Change the capacity struct from int to ptrOfInt #191
Full changelog

cluster-autoscaler

OCPBUGS-60913: revert openshift replica fix #376
OCPBUGS-60608: fix checkpoint gc of unknown recommenders #371
Full changelog

cluster-baremetal-operator

OCPBUGS-63715: Always have a service for ironic-api port #519
OCPBUGS-63666: Allow provisioningIP when network disabled #518
OCPBUGS-61097: Remove webhookport (9447) as HostPort #505
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63167: ccm: disable unused secure-serving port and webhook #423
OCPBUGS-60211: Update service selector to match deployment label #406
OCPBUGS-60211: Add Service using common resource templating #407
Full changelog

cluster-config-api

CNTRLPLANE-1981: Promote streaming list encoding to Default #2599
OCPBUGS-71184: Add HTTPKeepAliveTimeout to IngressController API #2639
NO-JIRA: Promote streaming list encoding to Default on Hypershift. #2567
CNTRLPLANE-1611: Add feature gates for StreamingCollectionEncoding #2538
Full changelog

cluster-config-operator

OCPBUGS-75998: Update logrus to 1.9.3 to address CVE-2025-65637 #465
Full changelog

cluster-etcd-operator

OCPBUGS-68156: Update logrus to 1.9.3 to address CVE-2025-65637 #1542
OCPBUGS-61337: Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace #1480
OCPBUGS-60220: add missing ports to svc and pod spec #1461
Full changelog

cluster-ingress-operator

OCPBUGS-71184: Implement HTTPKeepAliveTimeout tuning option #1335
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-63614: SCC: add hostmount-anyuid-v2 #1954
OCPBUGS-60398: Add missing service ports to apiserver service #1893
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-60249: Missing endpoint slices for open ports the operator uses #855
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-68165: deps: Update library-go and logrus to fix a CVE #613
Full changelog

cluster-monitoring-operator

OCPBUGS-64580: Fix KSM deny-list typo #2732
OCPBUGS-63489: Add mcd_local_unsupported_packages metric from MCO to telemetry 4.17 #2725
OCPBUGS-63123: test: remove image registry e2e tests #2715
OCPBUGS-61766: chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind #2672
OCPBUGS-60017: operator: increase wait time till degraded to max 4 times 5m #2634
Full changelog

cluster-network-operator

OCPBUGS-73799: Tweak iptables-alerter to try to avoid crictl bug #2878
: NO-JIRA: Update CNO reviewers/approvers #2767
OCPBUGS-74348: [release-4.17] fix typo in release annotation for whereabouts-token-watcher deamonset #2888
OCPBUGS-45086: Re-disable metrics server #2579
OCPBUGS-63154: Add drop flows for GARPs #2818
[Release 4.17] OCPBUGS-61765: Update CNO reviewers/approvers #2799
OCPBUGS-58066: [release-4.17]: Manual feature backport of cert rotation for whereabouts #2784
Full changelog

cluster-node-tuning-operator

OCPBUGS-63504: Do not cause kubelet failed dependency by ocp-tuned-one-shot.service #1418
Full changelog

cluster-samples-operator

OCPBUGS-63515: references to github.com/sclorg/django-ex.git now also refer to the branch #658
Full changelog

cluster-storage-operator

OCPBUGS-41160: Move metrics to vsphere driver #633
Full changelog

cluster-update-keys

NO-ISSUE: Updating ose-cluster-update-keys-container image to be consistent with ART for 4.17 #79
Full changelog

cluster-version-operator

OCPBUGS-58451: Failing=Unknown upon long CO updating #1212
Full changelog

console

NO-JIRA: Bump builder image to v29 #15994
OCPBUGS-74452: Bump lodash to latest #15966
OCPBUGS-69403: Disallowed Pipelines-plugin Pipelines navigation section #15849
OCPBUGS-65933: Preserve URL in perspective switch + remove dev console folks from reviewers #15762
OCPBUGS-64942: Expose prometheus tenancy label path as a proxy #15710
OCPBUGS-64599: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15665
OCPBUGS-62631: /auth/error?error=missing_state&error_type=auth is showing blank page #15554
OCPBUGS-63212: switch to dev perspective for /dev-monitoring #15614
OCPBUGS-63397: fix bug where Roles list was displaying invalid data f… #15627
OCPBUGS-62282: Fix desync of console and variable namespace #15545
OCPBUGS-44154: bump dompurify to latest #15590
OCPBUGS-61737: Remove ancient X-XSS-Protection header #15494
OCPBUGS-54241: VolumeSnapshots are not displayed in OpenShift Web Console #15465
OCPBUGS-59747: OpenShift console PVC clone cannot use B as the unit #15324
NO-JIRA: Increase the timeout on the cypress test #15420
OCPBUGS-58365: change ‘/metrics/usage’ endpoint to ‘/api/metrics/usage’ #15271
OCPBUGS-59544: Secret key with binary file changes when edited via Console #15301
OCPBUGS-59784: Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image #15329
OCPBUGS-58337: Tolerate unknown fields in Infrastructur… #15236
OCPBUGS-59492: Cannot read properties of undefined (reading ‘node-role.kubernetes.io/master’) error while accessing node logs from console #15294
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

OCPBUGS-60298: Update downloads deployment configuration to use master node selector #1033
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-68135: Bump logrus to v1.9.1 #224
Full changelog

coredns

OCPBUGS-62825: UPSTREAM: 7083 and 6836: Fix failing TestZoneExternalCNAMELookupWithProxy #155
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-68209: fix CVE-2025-65637 #357
Full changelog

csi-external-resizer

OCPBUGS-62466: Requeue PVC over PV creation #175
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-60449: UPSTREAM: 1238: Snapshot Controller startup should not LIST all volumesnapshots #184
Full changelog

csi-node-driver-registrar

OCPBUGS-63682: update log level verbosity to not clutter logs #90
Full changelog

docker-builder

OCPBUGS-65816: BuildConfig inline Dockerfile fails with heredoc syntax #488
Full changelog

docker-registry

OCPBUGS-60090: bump docker distribution to fix purgeuploads panic #440
Full changelog

gcp-pd-csi-driver

OCPBUGS-68186: Update logrus to 1.9.3 #90
Full changelog

hyperkube, pod

OCPBUGS-68132, OCPBUGS-68190: CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 #2573
OCPBUGS-72531: Skip E2e: attach on previously attached volumes should work #2566
OCPBUGS-65695: Fix Concurrentmap Iteration #2520
OCPBUGS-63460: UPSTREAM: <carry>: backporting fix for concurrent map iteration and write #2456 #2496
CNTRLPLANE-1611: Backport StreamingCollectionEncoding for JSON and protobuf #2486
OCPBUGS-61584: UPSTREAM: <carry>: Don’t retry storage calls with side effects. #2458
OCPBUGS-60552: [4.17] podresources: list: use active pods #2426
4.17: OCPBUGS-60998: scheduler: Improve CSILimits plugin accuracy by using VolumeAttachments #2434
Full changelog

hypershift

OCPBUGS-74230, OCPBUGS-74294: [release-4.17] Support proxy authentication when user/pass is included in URL #7568
fix: OCPBUGS-72956: Fix Konflux EC voilation, update deprecated base … #7457
OCPBUGS-69865: test: remove unit tests that depend on network communication [release-4.17] #7411
OCPBUGS-57123: Add support for registry root entry only in the IDMS/ICSP #6230
CNTRLPLANE-1903: Migrate 4.17 pipelines to use common pipeline #7215
OCPBUGS-63639: [release-4.17] fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries #7112
OCPBUGS-64604: Update DNS names for ovn-kubernetes cp metrics #7150
OCPBUGS-63370: fix: Make the hypershift CLI binary FIPS-compliant #7094
CNTRLPLANE-1425: feat(konflux): tag MCE HO images with latest #6838
OCPBUGS-57143: [release-4.17] HCP payload doesn’t respect multiple mirrors #6771
OCPBUGS-61290: Update KCM node monitor grace period #6760
OCPBUGS-61208: use common MCE konflux pipeline #6749
OCPBUGS-60149: [release-4.17] Always compress and encode payload in token secret for inplace upgrades #6740
OCPBUGS-61101: Use system trust bundle in CPO IDP https client #6735
OCPBUGS-60921: konflux for hcp-cli #6699
CNTRLPLANE-1204: HO MCE change to hermetic ta build #6653
CNTRLPLANE-1230: Move CPO pipeline to hermetic builds #6598
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-67287: [release-4.17] Fix incomplete vendor/ #139
OCPBUGS-51823: CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork #121
Full changelog

insights-operator

OCPBUGS-67008: Add filtering to add other possible pod status to QEMU gatherer #1196
OCPBUGS-66395: QEMU logs are not gathered if there are pending status virt-launcher pods #1194
OCPBUGS-66394: [bugfix] The archive’s records may include files whose names are out of bounds #1193
OCPBUGS-64629: add permissions to gather clusterrole #1170
OCPBUGS-63500: add missing permissions for replicasets and events #1165
And 4 elided commits (e.g. from squash or rebase merges)
Full changelog

ironic

OCPBUGS-69792: Bump eventlet version to 0.33.1-7 #761
Full changelog

ironic-agent

OCPBUGS-69775: Bump eventlet version to 0.33.1-7 #231
OCPBUGS-62490: netutils: Use ethtool ioctl to get permanent mac address #214
Full changelog

kube-proxy

OCPBUGS-68165: deps: Update library-go to fix a CVE #661
Full changelog

kube-storage-version-migrator

NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-17). #226
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-34447: Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART for 4.17 #44
Full changelog

machine-config-operator

OCPBUGS-60112: Enable debug logging for nodeip-configuration #5219
OCPBUGS-62170: Fix - NetworkManager restart or crash renders br-ex unusable #5355
OCPBUGS-66037: Remove –mount directives #5443
OCPBUGS-63154: [release-4.17] Networking: reset ovn-remote config and allow ovnkube controller to set it #5358
OCPBUGS-63540: Add control-plane label for master nodes on legacy clusters #5375
OCPBUGS-63364: Invalid architecture value found in annotation during 4.19 update #5368
OCPBUGS-63055: Recheck generatedByControllerVersion annotation prior to deleting a degraded MC #5346
OCPBUGS-62741: Add /etc/docker/certs.d to template #5335
OCPBUGS-62683: Add mcd_local_unsupported_packages recording rule #5327
OCPBUGS-60890: Race in configure-ovs.sh affects bonding interface configuration. #5267
OCPBUGS-61859: Override NMState service definition #5289
OCPBUGS-59930, OPNET-681: Support migration to NMState #5206
OCPBUGS-56752: Support NODEIP_HINT in IPI deployments too #5080
OCPBUGS-60704: operator: switch out VAP v1beta1 to v1 #5256
OCPBUGS-57084: scope MCD node listers to current node #5107
OCPBUGS-60239: Add workaround fix for static pod race #5231
Full changelog

machine-image-customization-controller

OCPBUGS-68192: [4.17] Uplift logrus #152
Full changelog

monitoring-plugin

OCPBUGS-70290: Manual cherry pick qs vulnerability 4 17 #747
OCPBUGS-64942: Use tenancy access to metric lables #639
OU-1058: Don’t show TP button in non-administrator #637
OCPBUGS-62282: align dev and admin persective tab names #602
OCPBUGS-62282: add missing translation string #587
OCPBUGS-61891: feat: add alerting rules tab to dev console #538
Full changelog

multus-admission-controller

OCPBUGS-58770: Update the github.com/golang/glog module to v1.2.4 #102
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-43391: Update net-attach-def client library to 1.7.5 for cri-o functionality [backport 4.17] #257
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-73728: Update tag on ci-operator.yaml file #395
OCPBUGS-70256: Prevent accidental IP deallocation in statefulsets #393
Full changelog

must-gather

OCPBUGS-60607: Separate resources with comma to fix malformed inspect #504
Full changelog

network-interface-bond-cni

OCPBUGS-59620: Bump github.com/containernetworking/plugins from to 1.7.1 #83
Full changelog

network-metrics-daemon

OCPBUGS-58780: Bump github.com/golang/glog to v1.2.4 (#112) #112
OCPBUGS-60177: Replace e2e test image (#121) #121
Full changelog

networking-console-plugin

CNV-76277: Fix name generator with unprofessional names #320
OCPBUGS-60180: Fix ingress details #265
OCPBUGS-60128: Fix requiremenets with no value #260
Full changelog

oauth-apiserver

OCPBUGS-66228: UPSTREAM <carry>: bump kubernetes-apiserver to pick up loopback certificate expiration update #157
NO-JIRA: (chore): update OWNERS file #171
OCPBUGS-61584: Bump openshift/kubernetes-apiserver for etcd retry patches. #143
Full changelog

oauth-proxy

OCPBUGS-61445: Update x/crypto to v0.31.0 #334
Full changelog

oauth-server

OCPBUGS-61584: Bump openshift/kubernetes-apiserver for etcd retry patches. #198
Full changelog

oc-mirror

Adding r4f4 and Prashanth684 as approvers and removing contributors who are not working with oc-mirror anymore. (#1269) #1269
Full changelog

openshift-apiserver

OCPBUGS-74143: pkg/image: conditionally parse raw image manifest #596
OCPBUGS-66229: UPSTREAM <carry>: bump kubernetes-apiserver to pick up loopback certificate expiration update #584
OCPBUGS-63392: Wire dry run option to Image API server operations #565
OCPBUGS-61584: Bump openshift/kubernetes-apiserver for etcd retry patches. #554
OCPBUGS-53382: Skip blocked registry check for registries with mirrors #500
OCPBUGS-58821: Fix image reference in TestImageStreamImportQuayIO #515
Full changelog

openshift-controller-manager

OCPBUGS-61199: legacy image pull secret rollback controller #413
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-67301: Fix TOCTOU race condition in ensureInstallPlan (#3682) #1172
OCPBUGS-57092: [release-4.17] e2e stability fixes #1081
OCPBUGS-60791: Add NetworkPolicy as a supported kind #1058
Full changelog

operator-marketplace

OCPBUGS-68212, OCPBUGS-68213: [release-4.17] CVE-2025-65637 fixed in logrus v1.9.3+ #710
OCPBUGS-62219: Remove Expect func so that the test case can use the retry logic #670
OCPBUGS-61036: Update memoryTarget on catalog source pods #663
Full changelog

ovirt-csi-driver-operator

OCPBUGS-68230: Bump github.com/sirupsen/logrus to v1.8.3 #151
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

CORENET-6055, OCPBUGS-74492: [release-4.17] Dockerfile: Unpin OVN and consume the latest from FDP #2959
[release:4.17] OCPBUGS-71985: Fix conntrack reconciliation to use service port instead of endpoint port #2936
OCPBUGS-71218: [release-4.17] CVE-2025-65637 Bump github.com/sirupsen/logrus to v1.9.1 through indirect dependency conversion (go-controller module) #2905
OCPBUGS-71198: NetPol & MultiNetPol: Process update only when spec fields and/or related annotation are updated #2923
OCPBUGS-68348: Add ricky-rav to OWNERS for release-4.17 #2898
OCPBUGS-65928: Skip Pending pods in EgressIP status #2871
OCPBUGS-65569: [release-4.17]: kubevirt: fix bad release of IPs of live migratable pods #2857
OCPBUGS-64856: Fix stale EIP assignments during failover and controller restart #2850
OCPBUGS-64674: [release-4.17]: Configure sec nic EIPv6 address with NODAD and maximum lifetime #2843
OCPBUGS-63154: Fix EgressIP stale GARP post reboot + pod restart #2807
OCPBUGS-61749: [release-4.17] Fix dnsnameresolver address set #2796
OCPBUGS-60484: Update OWNERS file: Add Patryk/Martin as approvers #2717
Full changelog