# 4.17.0-0.okd-scos-2024-09-18-111031

Created: 2024-09-18 11:14:00 +0000 UTC

Image Digest: `sha256:1ecf9ad98b2361f467e14fa4a905cb2d1b5447766e3a8bb0d21e9998a9a1d0bb`


## Changes from 4.17.0-0.okd-scos-2024-08-30-100727

### Components

* Kubectl 1.30.2
* Kubernetes upgraded from 1.30.3 to 1.30.4
* Kubernetes Tests 1.30.0
* CentOS Stream CoreOS upgraded from 418.9.202408292032-0 to 418.9.202409172033-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| AWSEFSDriverVolumeMetrics <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |
| OpenShiftPodSecurityAdmission <br/> (0 tests)| Disabled<br/>(Changed)| Disabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |
| ProcMountType <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| UserNamespacesSupport <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |


### Rebuilt images without code change

* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [bef583cc](https://github.com/openshift/cluster-samples-operator/commit/bef583cc67368d62316961b506f731af8810ecc7) `sha256:1b33fbcad890ce56495a8fc8a156eee358174f7ed4cb97cfa6c5163f98901482`
* stream-coreos `sha256:5acd84de8a5b90ee9900de0c8c3611d6ec0a833c70d151f991f6a94fb1edb5a7`
* stream-coreos-extensions `sha256:c2a63fa07b024c633aa2a65a93f604c0cb3da99861ce917e59254b9da2ae8ed2`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/351c82c9f29ed61cd3566d6d9f03804ea5b69e23)

* [OCPBUGS-36577](https://issues.redhat.com/browse/OCPBUGS-36577): Switch to github.com/docker/distribution/reference to mitigate CVE-2024-3727 (#6750) [#6750](https://github.com/openshift/assisted-service/pull/6750)
* [MGMT-18575](https://issues.redhat.com/browse/MGMT-18575), [MGMT-18694](https://issues.redhat.com/browse/MGMT-18694), [OCPBUGS-41820](https://issues.redhat.com/browse/OCPBUGS-41820): Don't require mapping for names matching physical interfaces (#6745) [#6745](https://github.com/openshift/assisted-service/pull/6745)
* [Full changelog](https://github.com/openshift/assisted-service/compare/00a5eb37b615c97220cd012bc889064ae54fd3f1...351c82c9f29ed61cd3566d6d9f03804ea5b69e23)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator](https://github.com/openshift/csi-operator/tree/df0b8234c1233cabc0085a7d63a7fd81bf05fd5a)

* [OCPBUGS-38355](https://issues.redhat.com/browse/OCPBUGS-38355): Bump openshift/api to get EFS volume metrics [#274](https://github.com/openshift/csi-operator/pull/274)
* [Full changelog](https://github.com/openshift/csi-operator/compare/6fce95fa1f3630998ed195e828a20435f0847d38...df0b8234c1233cabc0085a7d63a7fd81bf05fd5a)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/5faddcb597e086c32fbda6115e2c672e7a246676)

* [OCPBUGS-42051](https://issues.redhat.com/browse/OCPBUGS-42051): Fix integration tests [#9018](https://github.com/openshift/installer/pull/9018)
* [OCPBUGS-41300](https://issues.redhat.com/browse/OCPBUGS-41300): Azure CAPI: Improve handling of security features configured on the MachinePools and OSDisk [#9007](https://github.com/openshift/installer/pull/9007)
* [OCPBUGS-39286](https://issues.redhat.com/browse/OCPBUGS-39286): Fix var_files syntax to work on older version of ansible [#8933](https://github.com/openshift/installer/pull/8933)
* [OCPBUGS-41896](https://issues.redhat.com/browse/OCPBUGS-41896): Add AWS c7g,m7g,r8g to tested instance types [#9005](https://github.com/openshift/installer/pull/9005)
* [OCPBUGS-41542](https://issues.redhat.com/browse/OCPBUGS-41542): Azure CAPI: Update publicAccess for Blob Containers [#9006](https://github.com/openshift/installer/pull/9006)
* [OCPBUGS-41702](https://issues.redhat.com/browse/OCPBUGS-41702): aws: bump capa to fix EIP leak on bootstrap when BYOIP [#8991](https://github.com/openshift/installer/pull/8991)
* [OCPBUGS-38933](https://issues.redhat.com/browse/OCPBUGS-38933): install-status reflects day 2 services [#8899](https://github.com/openshift/installer/pull/8899)
* [OCPBUGS-39239](https://issues.redhat.com/browse/OCPBUGS-39239), [OCPBUGS-39240](https://issues.redhat.com/browse/OCPBUGS-39240): vSphere - If template is defined skip downloading [#8926](https://github.com/openshift/installer/pull/8926)
* [OCPBUGS-41300](https://issues.redhat.com/browse/OCPBUGS-41300): Azure CAPI: Set SecurityType as a Feature while creating Gallery Image [#8990](https://github.com/openshift/installer/pull/8990)
* [OCPBUGS-41500](https://issues.redhat.com/browse/OCPBUGS-41500): Bump extract-machine-os timout to 20m [#8981](https://github.com/openshift/installer/pull/8981)
* [OCPBUGS-38963](https://issues.redhat.com/browse/OCPBUGS-38963): IngressController subnet selection in AWS [#8909](https://github.com/openshift/installer/pull/8909)
* [OCPBUGS-41542](https://issues.redhat.com/browse/OCPBUGS-41542): Azure CAPI: Fix storage account and vhd container public access [#8984](https://github.com/openshift/installer/pull/8984)
* [OCPBUGS-41539](https://issues.redhat.com/browse/OCPBUGS-41539): Pick the next available IP address for internal LB [#8980](https://github.com/openshift/installer/pull/8980)
* [OCPBUGS-38568](https://issues.redhat.com/browse/OCPBUGS-38568): Azure: Add master and worker VM IPs to both the backend pools API LoadBalancer [#8968](https://github.com/openshift/installer/pull/8968)
* [OCPBUGS-39545](https://issues.redhat.com/browse/OCPBUGS-39545), [OCPBUGS-39546](https://issues.redhat.com/browse/OCPBUGS-39546), [OCPBUGS-39547](https://issues.redhat.com/browse/OCPBUGS-39547): update vault version to 1.13.10 [#8954](https://github.com/openshift/installer/pull/8954)
* [OCPBUGS-38568](https://issues.redhat.com/browse/OCPBUGS-38568): Azure CAPI: Add check for APIServer OperatorPublishingStrategy [#8870](https://github.com/openshift/installer/pull/8870)
* [OCPBUGS-41283](https://issues.redhat.com/browse/OCPBUGS-41283): update RHCOS 4.17 bootimage metadata to 417.94.202408270355-0 [#8975](https://github.com/openshift/installer/pull/8975)
* [OCPBUGS-39495](https://issues.redhat.com/browse/OCPBUGS-39495): capi/aws/byo-vpc/multi-cidr: fix group rules [#8952](https://github.com/openshift/installer/pull/8952)
* [OCPBUGS-39433](https://issues.redhat.com/browse/OCPBUGS-39433): dropping this warning as the move from terraform is transparent to the end user [#8950](https://github.com/openshift/installer/pull/8950)
* [OCPBUGS-38752](https://issues.redhat.com/browse/OCPBUGS-38752): Remove firewall rules created by CAPG [#8948](https://github.com/openshift/installer/pull/8948)
* [OCPBUGS-38738](https://issues.redhat.com/browse/OCPBUGS-38738): pkg/infrastructure/azure: set correct cloud for BYO vnet [#8972](https://github.com/openshift/installer/pull/8972)
* [OCPBUGS-39308](https://issues.redhat.com/browse/OCPBUGS-39308): Fix to validation for GCP pre-created ServiceAccount [#8931](https://github.com/openshift/installer/pull/8931)
* [OCPBUGS-39467](https://issues.redhat.com/browse/OCPBUGS-39467): Enable TLS for virtual media in initial ironic deployment [#8947](https://github.com/openshift/installer/pull/8947)
* [Full changelog](https://github.com/openshift/installer/compare/3c2b596263864a6899e951dba01413bc308d26a5...5faddcb597e086c32fbda6115e2c672e7a246676)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/94748225f29f3a7ef7dfe5844219c3856a421903)

* [OCPBUGS-39489](https://issues.redhat.com/browse/OCPBUGS-39489): Disallow fetching secrets from namespaces different from the host's one [#377](https://github.com/openshift/baremetal-operator/pull/377)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/16e2a3964e9b7e6eb14c504a054ae47b2e9c5446...94748225f29f3a7ef7dfe5844219c3856a421903)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/bc58b3a9c70cee7b03d1943e95b48ced9357711b)

* [OCPBUGS-39090](https://issues.redhat.com/browse/OCPBUGS-39090): use proxy settings when required [#1860](https://github.com/openshift/oc/pull/1860)
* [Full changelog](https://github.com/openshift/oc/compare/664e7de16cf9f140c576bdc696866ca0911b1cb6...bc58b3a9c70cee7b03d1943e95b48ced9357711b)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/d5b0b95c40f72fc6d8444f86dbc6d65f836702e7)

* [OCPBUGS-41233](https://issues.redhat.com/browse/OCPBUGS-41233): List secrets in batches to avoid api timeout [#756](https://github.com/openshift/cloud-credential-operator/pull/756)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/371bd39e5ce3eaaee6372f688b73522bb5f9039f...d5b0b95c40f72fc6d8444f86dbc6d65f836702e7)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/8e8a31d802182c00252221e8233f2d6df609f363)

* [OCPBUGS-39021](https://issues.redhat.com/browse/OCPBUGS-39021): increase oauth-apiserver failureThreshold [#693](https://github.com/openshift/cluster-authentication-operator/pull/693)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/dc429ef1d8a470720aae41b2d62e29ebd07771dd...8e8a31d802182c00252221e8233f2d6df609f363)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/3f893aea1fad5fe124e888453ec0c67c0186da11)

* [OCPBUGS-39309](https://issues.redhat.com/browse/OCPBUGS-39309): manifests-gen: fix: readd missing metadata [#198](https://github.com/openshift/cluster-capi-operator/pull/198)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/c9af64ba67666cc8c9157e930daf30568446d2e2...3f893aea1fad5fe124e888453ec0c67c0186da11)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/f7fa87e4a55cf18a73fa40d2cf56f603d76c8b7f)

* [OCPBUGS-41941](https://issues.redhat.com/browse/OCPBUGS-41941): IBMCloud: Modify liveness probe for IBM Cloud CCM to use loopback address [#365](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/365)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/94da1a47269dbacf4e841ab8a3f0a0f3db2e103e...f7fa87e4a55cf18a73fa40d2cf56f603d76c8b7f)


### [cluster-config-api](https://github.com/openshift/api/tree/0a88001628266522c84e6c6c25ed5a44aced6d8b)

* [OCPBUGS-41642](https://issues.redhat.com/browse/OCPBUGS-41642): config/v1/types_cluster_version: Add v4.17 capability set [#2023](https://github.com/openshift/api/pull/2023)
* [OCPBUGS-34333](https://issues.redhat.com/browse/OCPBUGS-34333): Updating ose-cluster-config-api-container image to be consistent with ART for 4.17 [#1903](https://github.com/openshift/api/pull/1903)
* features: disable PSA [#2018](https://github.com/openshift/api/pull/2018)
* [OCPBUGS-38355](https://issues.redhat.com/browse/OCPBUGS-38355): Promote AWSEFSDriverVolumeMetrics to GA [#2020](https://github.com/openshift/api/pull/2020)
* [OCPBUGS-39300](https://issues.redhat.com/browse/OCPBUGS-39300): clean up openshift-sdn references in the API [4.17] [#2008](https://github.com/openshift/api/pull/2008)
* [OCPBUGS-38958](https://issues.redhat.com/browse/OCPBUGS-38958): [4.17] add UserNamespacesSupport/ProcMountType to tech preview features [#2011](https://github.com/openshift/api/pull/2011)
* [Full changelog](https://github.com/openshift/api/compare/93b6b725ccf1413cc6065c9192eae19473a82bad...0a88001628266522c84e6c6c25ed5a44aced6d8b)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/cb5306d7f68ba35b9a065d65f46c69a836556cb2)

* [OCPBUGS-39220](https://issues.redhat.com/browse/OCPBUGS-39220): Ingress operator status not degraded when canary route fails [#1136](https://github.com/openshift/cluster-ingress-operator/pull/1136)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/4be51efbed00cc3d9e6d0e5d74bb335df2b53051...cb5306d7f68ba35b9a065d65f46c69a836556cb2)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/937f8a77e3274c3ef8907424f4d3294ef642642e)

* [OCPBUGS-41874](https://issues.redhat.com/browse/OCPBUGS-41874): increase kube-apiserver failureThreshold [#1733](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1733)
* [OCPBUGS-34679](https://issues.redhat.com/browse/OCPBUGS-34679): revert dev cert rotation 4.17 [#1729](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1729)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/fbb420f526f41ed816f01594f72c430d32ed909f...937f8a77e3274c3ef8907424f4d3294ef642642e)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/a7ed4a3751af0d5e3d96f07d9b69468397319a2a)

* [OCPBUGS-41341](https://issues.redhat.com/browse/OCPBUGS-41341): disable user-defined monitoring per object [#2458](https://github.com/openshift/cluster-monitoring-operator/pull/2458)
* [OCPBUGS-41908](https://issues.redhat.com/browse/OCPBUGS-41908): filter alerts sent to Telemeter [#2470](https://github.com/openshift/cluster-monitoring-operator/pull/2470)
* [OCPBUGS-41580](https://issues.redhat.com/browse/OCPBUGS-41580): Configure graceful shutdown for metrics-server (4.17 backport) [#2463](https://github.com/openshift/cluster-monitoring-operator/pull/2463)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/2eb9de02273edea6ebf3f8e18745b8397b201c1f...a7ed4a3751af0d5e3d96f07d9b69468397319a2a)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/a3188633549ddd7241484d733f3282bad959482b)

* [OCPBUGS-41674](https://issues.redhat.com/browse/OCPBUGS-41674): Add configurable subnets while running hybrid-overlay-node binary [#2497](https://github.com/openshift/cluster-network-operator/pull/2497)
* [OCPBUGS-41591](https://issues.redhat.com/browse/OCPBUGS-41591): Set required-scc for openshift workloads [#2490](https://github.com/openshift/cluster-network-operator/pull/2490)
* [OCPBUGS-39313](https://issues.redhat.com/browse/OCPBUGS-39313): HyperShift: do not use antiaffinity on single replica control planes [#2486](https://github.com/openshift/cluster-network-operator/pull/2486)
* [OCPBUGS-39387](https://issues.redhat.com/browse/OCPBUGS-39387): add required-scc annotation to console-plugin deployment [#2487](https://github.com/openshift/cluster-network-operator/pull/2487)
* [OCPBUGS-39425](https://issues.redhat.com/browse/OCPBUGS-39425): Preload networking plugin locales [#2489](https://github.com/openshift/cluster-network-operator/pull/2489)
* [OCPBUGS-38932](https://issues.redhat.com/browse/OCPBUGS-38932): Deploy networking-console-plugin by CNO [#2478](https://github.com/openshift/cluster-network-operator/pull/2478)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/0be89dc583540bc8b31de46922d9c261137b68ac...a3188633549ddd7241484d733f3282bad959482b)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/a4e7efa04c136b354a761508231214ac0fa1db1c)

* [OCPBUGS-39005](https://issues.redhat.com/browse/OCPBUGS-39005): Add cluster-wide proxy env file (#1145) [#1145](https://github.com/openshift/cluster-node-tuning-operator/pull/1145)
* OCPBUGS-36431 Fix generated cpu mask for 512+ cpus (#1147) [#1147](https://github.com/openshift/cluster-node-tuning-operator/pull/1147)
* [OCPBUGS-39321](https://issues.redhat.com/browse/OCPBUGS-39321): E2E: Remove checking of reserved cpus in irqbalance file (#1148) [#1148](https://github.com/openshift/cluster-node-tuning-operator/pull/1148)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/74cd69c4de4637e21faf2912ff316ae8a80c265d...a4e7efa04c136b354a761508231214ac0fa1db1c)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/56a90aeec7f94ddfe1be5365fe81ea3e5e52bea0)

* [OCPBUGS-41850](https://issues.redhat.com/browse/OCPBUGS-41850): increase openshift-apiserver failureThreshold [#589](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/589)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/f7210cd840db46b01ec76a98cef332b8ff633701...56a90aeec7f94ddfe1be5365fe81ea3e5e52bea0)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/7209e90d4205dc16bf0c83fb556c3d955d942d6b)

* [OCPBUGS-41849](https://issues.redhat.com/browse/OCPBUGS-41849): pkg/psalabelsyncer: switch to PSA version 'latest' [#154](https://github.com/openshift/cluster-policy-controller/pull/154)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/c502ece1b8bdccdbc58a327520685d9a1d2f59cf...7209e90d4205dc16bf0c83fb556c3d955d942d6b)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/eba39ffecf5a7a55a46443c85fd0ecd9ccc0453f)

* [OCPBUGS-38355](https://issues.redhat.com/browse/OCPBUGS-38355): Bump openshift/api to get EFS volume metrics [#501](https://github.com/openshift/cluster-storage-operator/pull/501)
* [OCPBUGS-38760](https://issues.redhat.com/browse/OCPBUGS-38760): include azure perms for route table [#503](https://github.com/openshift/cluster-storage-operator/pull/503)
* [OCPBUGS-39365](https://issues.redhat.com/browse/OCPBUGS-39365): Use restricted-v2 SCC and remove runAsUser in Hypershift [#498](https://github.com/openshift/cluster-storage-operator/pull/498)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/66f0d53a7050b832fed51813f24a482124ba104c...eba39ffecf5a7a55a46443c85fd0ecd9ccc0453f)


### [console](https://github.com/openshift/console/tree/a7364dad79f804a7e25b10fb02b05cc1898ddfeb)

* [OCPBUGS-39181](https://issues.redhat.com/browse/OCPBUGS-39181): add Create button to Console plugins tab [#14220](https://github.com/openshift/console/pull/14220)
* [OCPBUGS-39091](https://issues.redhat.com/browse/OCPBUGS-39091): update Events ChipGroup to use integrated close [#14211](https://github.com/openshift/console/pull/14211)
* [OCPBUGS-38563](https://issues.redhat.com/browse/OCPBUGS-38563): do not directly mutate links in useMemo [#14159](https://github.com/openshift/console/pull/14159)
* [OCPBUGS-41685](https://issues.redhat.com/browse/OCPBUGS-41685): Topology screen crashes when completed pod is selected [#14276](https://github.com/openshift/console/pull/14276)
* [OCPBUGS-41482](https://issues.redhat.com/browse/OCPBUGS-41482): Unit Tests for the new Ask Lightspeed Button [#14249](https://github.com/openshift/console/pull/14249)
* [OCPBUGS-39601](https://issues.redhat.com/browse/OCPBUGS-39601): Console user settings resources misses ownerRef, removing a user results in remaining data [#14240](https://github.com/openshift/console/pull/14240)
* [OCPBUGS-41893](https://issues.redhat.com/browse/OCPBUGS-41893): Disable Extension Catalog tech preview nav item [#14289](https://github.com/openshift/console/pull/14289)
* [OCPBUGS-39110](https://issues.redhat.com/browse/OCPBUGS-39110): List of default Camel K event sources disappears when adding a custom event source [#14214](https://github.com/openshift/console/pull/14214)
* [OCPBUGS-41684](https://issues.redhat.com/browse/OCPBUGS-41684): Fix access mode selection menu issue [#14277](https://github.com/openshift/console/pull/14277)
* [OCPBUGS-41350](https://issues.redhat.com/browse/OCPBUGS-41350): Update Lightspeed logo to new standards [#14245](https://github.com/openshift/console/pull/14245)
* [OCPBUGS-41480](https://issues.redhat.com/browse/OCPBUGS-41480): improve layout and findability of Hide Lightspeed pref… [#14248](https://github.com/openshift/console/pull/14248)
* [OCPBUGS-39453](https://issues.redhat.com/browse/OCPBUGS-39453): Use vCenterCluster value from CM as primary resource [#14235](https://github.com/openshift/console/pull/14235)
* [OCPBUGS-39109](https://issues.redhat.com/browse/OCPBUGS-39109): Need to allow blank for Project/namespace when setting SA Subject in 'Project access tab' [#14213](https://github.com/openshift/console/pull/14213)
* [OCPBUGS-38903](https://issues.redhat.com/browse/OCPBUGS-38903): Networking section depends on networking-console-plugin [#14185](https://github.com/openshift/console/pull/14185)
* [OCPBUGS-38300](https://issues.redhat.com/browse/OCPBUGS-38300): Add telemetry to Lightspeed console capability [#14129](https://github.com/openshift/console/pull/14129)
* [Full changelog](https://github.com/openshift/console/compare/b0ba6984c999df1aa550e2586ee4fdf34a3feae8...a7364dad79f804a7e25b10fb02b05cc1898ddfeb)


### [console-operator](https://github.com/openshift/console-operator/tree/f41009e8511cf5a042ca81d18e44137b7d11ba05)

* [OCPBUGS-38728](https://issues.redhat.com/browse/OCPBUGS-38728): Get externalOrganizationID instead of the organizationID [#926](https://github.com/openshift/console-operator/pull/926)
* [OCPBUGS-36213](https://issues.redhat.com/browse/OCPBUGS-36213): Vendor proper commit [#928](https://github.com/openshift/console-operator/pull/928)
* [Full changelog](https://github.com/openshift/console-operator/compare/0f85ea7b5efdc01675d544f9ea3535bdc069b013...f41009e8511cf5a042ca81d18e44137b7d11ba05)


### [hyperkube, installer-kube-apiserver-artifacts, pod](https://github.com/openshift/kubernetes/tree/d3adea4933c942000ceb2c9ca98b1920814f5b34)

* [OCPBUGS-41638](https://issues.redhat.com/browse/OCPBUGS-41638): UPSTREAM: &lt;carry&gt;: bump cadvisor version to fix missing network stats [#2081](https://github.com/openshift/kubernetes/pull/2081)
* [OCPBUGS-39014](https://issues.redhat.com/browse/OCPBUGS-39014): Bump 1.30.4 [#2062](https://github.com/openshift/kubernetes/pull/2062)
* [Full changelog](https://github.com/openshift/kubernetes/compare/88e7cc859c37b4aa669e2879e32de895267db9d2...d3adea4933c942000ceb2c9ca98b1920814f5b34)


### [hypershift](https://github.com/openshift/hypershift/tree/0561e9e9a706d710784f18d4a55bec0b0a3dae6a)

* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4726](https://github.com/openshift/hypershift/pull/4726)
* [HOSTEDCP-1953](https://issues.redhat.com/browse/HOSTEDCP-1953): bump CCO version [#4694](https://github.com/openshift/hypershift/pull/4694)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4682](https://github.com/openshift/hypershift/pull/4682)
* [OCPBUGS-41371](https://issues.redhat.com/browse/OCPBUGS-41371): CPO oauth idp converter: resolve names before dialing [#4681](https://github.com/openshift/hypershift/pull/4681)
* [OCPBUGS-38637](https://issues.redhat.com/browse/OCPBUGS-38637): Use http dialer when dialing through proxy [#4680](https://github.com/openshift/hypershift/pull/4680)
* [OSASINFRA-3572](https://issues.redhat.com/browse/OSASINFRA-3572), [OSASINFRA-3573](https://issues.redhat.com/browse/OSASINFRA-3573): OpenStack backports for ingress [#4644](https://github.com/openshift/hypershift/pull/4644)
* [OCPBUGS-39365](https://issues.redhat.com/browse/OCPBUGS-39365): Update CSO deployment file [#4655](https://github.com/openshift/hypershift/pull/4655)
* [OCPBUGS-39452](https://issues.redhat.com/browse/OCPBUGS-39452): Fix multi-arch validation by prioritizing ReleaseImage check [#4665](https://github.com/openshift/hypershift/pull/4665)
* [OCPBUGS-39419](https://issues.redhat.com/browse/OCPBUGS-39419): handle version skewed NodePools that do not have rhel9 binaries [#4662](https://github.com/openshift/hypershift/pull/4662)
* [OCPBUGS-39371](https://issues.redhat.com/browse/OCPBUGS-39371): Fixed NodePool version validation [#4657](https://github.com/openshift/hypershift/pull/4657)
* [OCPBUGS-39234](https://issues.redhat.com/browse/OCPBUGS-39234): Set Image as mutable and trigger upgrades on Azure NodePool spec changes [#4640](https://github.com/openshift/hypershift/pull/4640)
* [HOSTEDCP-1938](https://issues.redhat.com/browse/HOSTEDCP-1938): Remove saas template in 4.17 [#4645](https://github.com/openshift/hypershift/pull/4645)
* [Full changelog](https://github.com/openshift/hypershift/compare/c64f2f554f0abf3f0a23e10afad75778857f357d...0561e9e9a706d710784f18d4a55bec0b0a3dae6a)


### [insights-operator](https://github.com/openshift/insights-operator/tree/d44b5f1be3be9c1630b1216cd231e47758dcd30f)

* [OCPBUGS-39393](https://issues.redhat.com/browse/OCPBUGS-39393): collect some nmstate customresources (#986) (#989) [#986](https://github.com/openshift/insights-operator/pull/986)
* [OCPBUGS-32233](https://issues.redhat.com/browse/OCPBUGS-32233): Not able to enable repositories during entitled build in OCP Cluster on IBM-Z (#991) [#991](https://github.com/openshift/insights-operator/pull/991)
* [Full changelog](https://github.com/openshift/insights-operator/compare/80246495256b1a4628dd45998aa7162d8e934f78...d44b5f1be3be9c1630b1216cd231e47758dcd30f)


### [ironic](https://github.com/openshift/ironic-image/tree/f70cb6807c16e40bc0937f52e23422142ca19793)

* [OCPBUGS-41783](https://issues.redhat.com/browse/OCPBUGS-41783): Set node "alive" when inspection finished [#578](https://github.com/openshift/ironic-image/pull/578)
* [OCPBUGS-39380](https://issues.redhat.com/browse/OCPBUGS-39380): Include fixes for CVE-2024-44082 into 4.17 [#576](https://github.com/openshift/ironic-image/pull/576)
* [OCPBUGS-37365](https://issues.redhat.com/browse/OCPBUGS-37365): Update log statement to avoid logging entire node object [#573](https://github.com/openshift/ironic-image/pull/573)
* [OCPBUGS-38511](https://issues.redhat.com/browse/OCPBUGS-38511): set min version for python3-webob [#552](https://github.com/openshift/ironic-image/pull/552)
* [OCPBUGS-38784](https://issues.redhat.com/browse/OCPBUGS-38784): Update sushy to include Huwaei Fix ( Duplicate PR ) [#572](https://github.com/openshift/ironic-image/pull/572)
* [Full changelog](https://github.com/openshift/ironic-image/compare/22ec159fa1d53e6b05f7036f38b21b7a27229673...f70cb6807c16e40bc0937f52e23422142ca19793)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/8c92604b7557101eb0537c5f99418829948eec26)

* [OCPBUGS-39380](https://issues.redhat.com/browse/OCPBUGS-39380): Include fixes for CVE-2024-44082 into 4.17 [#160](https://github.com/openshift/ironic-agent-image/pull/160)
* [OCPBUGS-38511](https://issues.redhat.com/browse/OCPBUGS-38511): set webob and bump werkzeug [#148](https://github.com/openshift/ironic-agent-image/pull/148)
* [OCPBUGS-38481](https://issues.redhat.com/browse/OCPBUGS-38481): Update root image [#145](https://github.com/openshift/ironic-agent-image/pull/145)
* [METAL-1049](https://issues.redhat.com/browse/METAL-1049): Download and install sources from local dir [#142](https://github.com/openshift/ironic-agent-image/pull/142)
* [OCPBUGS-37086](https://issues.redhat.com/browse/OCPBUGS-37086): Update ironic projects to latest available [#141](https://github.com/openshift/ironic-agent-image/pull/141)
* [METAL-1070](https://issues.redhat.com/browse/METAL-1070): Align ironic dependencies with latest upper constraints [#140](https://github.com/openshift/ironic-agent-image/pull/140)
* [OCPBUGS-35968](https://issues.redhat.com/browse/OCPBUGS-35968): Disable installation of .pyc files through pip [#139](https://github.com/openshift/ironic-agent-image/pull/139)
* NO-ISSUE: Bump ironic projects versions [#137](https://github.com/openshift/ironic-agent-image/pull/137)
* NO-ISSUE: Replace README with an explanation how this agent works [#138](https://github.com/openshift/ironic-agent-image/pull/138)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/f4b86c20989a79e611a27975ac02d0f824b8e5c7...8c92604b7557101eb0537c5f99418829948eec26)


### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/28b10b8fcc2d21fb323e79afeb46301d0c3c6e9c)

* [OCPBUGS-41580](https://issues.redhat.com/browse/OCPBUGS-41580): Wire server run options to flags. [#35](https://github.com/openshift/kubernetes-metrics-server/pull/35)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/1f68026b5733dbf242839ecee7ddf70d913abbf5...28b10b8fcc2d21fb323e79afeb46301d0c3c6e9c)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/858c0a2e5965fcff48716c1db01ee76bb1eed9f2)

* [OCPBUGS-41686](https://issues.redhat.com/browse/OCPBUGS-41686): MCPs with RHEL nodes are degraded when a userCA bundle is added to the cluster [#4580](https://github.com/openshift/machine-config-operator/pull/4580)
* [OCPBUGS-41802](https://issues.redhat.com/browse/OCPBUGS-41802): When newly built images rolled out, the update progress is not displaying correctly (went 0 --&gt; 3) [#4583](https://github.com/openshift/machine-config-operator/pull/4583)
* [OCPBUGS-41688](https://issues.redhat.com/browse/OCPBUGS-41688): Add alert for users of deprecating the Image Registry workaround [#4581](https://github.com/openshift/machine-config-operator/pull/4581)
* [OCPBUGS-41312](https://issues.redhat.com/browse/OCPBUGS-41312): CVE-2024-3727 ose-machine-config-operator-container: containers/image: digest type does not guarantee valid type [#4564](https://github.com/openshift/machine-config-operator/pull/4564)
* [OCPBUGS-38868](https://issues.redhat.com/browse/OCPBUGS-38868): Updates message verbs to use %q where appropriate [#4547](https://github.com/openshift/machine-config-operator/pull/4547)
* [OCPBUGS-38770](https://issues.redhat.com/browse/OCPBUGS-38770): SCC-pinning for openshift workloads [#4542](https://github.com/openshift/machine-config-operator/pull/4542)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/bd740d27b138ee6385950882c2e394381a398737...858c0a2e5965fcff48716c1db01ee76bb1eed9f2)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/b8d8d5c0128743d5d3c188ad37004c0a4bc00337)

* [OCPBUGS-41817](https://issues.redhat.com/browse/OCPBUGS-41817): always attempt a live pod get on miss to confirm its really not there [#248](https://github.com/openshift/multus-cni/pull/248)
* [Full changelog](https://github.com/openshift/multus-cni/compare/3cba503d4b6295efd1fa1931884eab2b63c84d94...b8d8d5c0128743d5d3c188ad37004c0a4bc00337)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/76ef04120aaa43f3f5bc286d3d84c025b3a53222)

* swtich golint install method (#103) [#103](https://github.com/openshift/network-metrics-daemon/pull/103)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/f7a88331a9de217c6619dccd23bc701aa6712df8...76ef04120aaa43f3f5bc286d3d84c025b3a53222)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/f395bb620999a1ead055f59ebe02d1a4c258e764)

* [CNV-48188](https://issues.redhat.com/browse/CNV-48188): Fix networkpolicy list [#99](https://github.com/openshift/networking-console-plugin/pull/99)
* [OCPBUGS-41887](https://issues.redhat.com/browse/OCPBUGS-41887): fix ingress namespace in details page [#101](https://github.com/openshift/networking-console-plugin/pull/101)
* [OCPBUGS-41880](https://issues.redhat.com/browse/OCPBUGS-41880): Fix lastnamespacepath with actual namespace [#100](https://github.com/openshift/networking-console-plugin/pull/100)
* [OCPBUGS-41888](https://issues.redhat.com/browse/OCPBUGS-41888): Add Error page for not found resources and other errors [#102](https://github.com/openshift/networking-console-plugin/pull/102)
* [OCPBUGS-41868](https://issues.redhat.com/browse/OCPBUGS-41868): OCPBUGS-41695: fix clear fileupload not working [#98](https://github.com/openshift/networking-console-plugin/pull/98)
* [OCPBUGS-41861](https://issues.redhat.com/browse/OCPBUGS-41861): fix networkpolicy pagination [#95](https://github.com/openshift/networking-console-plugin/pull/95)
* [OCPBUGS-41863](https://issues.redhat.com/browse/OCPBUGS-41863): fix remove function [#97](https://github.com/openshift/networking-console-plugin/pull/97)
* [OCPBUGS-41862](https://issues.redhat.com/browse/OCPBUGS-41862): OCPBUGS-41698: Add annotation field in ingress details page [#96](https://github.com/openshift/networking-console-plugin/pull/96)
* [OCPBUGS-41856](https://issues.redhat.com/browse/OCPBUGS-41856): Add status box for error handling [#94](https://github.com/openshift/networking-console-plugin/pull/94)
* [OCPBUGS-41808](https://issues.redhat.com/browse/OCPBUGS-41808): normal user have to use projects no namespaces [#93](https://github.com/openshift/networking-console-plugin/pull/93)
* [OCPBUGS-41808](https://issues.redhat.com/browse/OCPBUGS-41808): fix pod preview error [#92](https://github.com/openshift/networking-console-plugin/pull/92)
* [OCPBUGS-41640](https://issues.redhat.com/browse/OCPBUGS-41640): switch key with label [#83](https://github.com/openshift/networking-console-plugin/pull/83)
* [OCPBUGS-41634](https://issues.redhat.com/browse/OCPBUGS-41634): close modal after executeFn [#82](https://github.com/openshift/networking-console-plugin/pull/82)
* [OCPBUGS-41633](https://issues.redhat.com/browse/OCPBUGS-41633): fix ingresses fetch list [#81](https://github.com/openshift/networking-console-plugin/pull/81)
* [OCPBUGS-41624](https://issues.redhat.com/browse/OCPBUGS-41624): fix router link [#80](https://github.com/openshift/networking-console-plugin/pull/80)
* [CNV-48187](https://issues.redhat.com/browse/CNV-48187): Create MultiNetworkPolicy instead of NetworkPolicy [#73](https://github.com/openshift/networking-console-plugin/pull/73)
* [CNV-47529](https://issues.redhat.com/browse/CNV-47529): Fix doc link MultiNetworkPolicy [#70](https://github.com/openshift/networking-console-plugin/pull/70)
* [CNV-47530](https://issues.redhat.com/browse/CNV-47530): fix typehead select on multi policy [#69](https://github.com/openshift/networking-console-plugin/pull/69)
* [OCPBUGS-39390](https://issues.redhat.com/browse/OCPBUGS-39390): fix Sort all resources list [#65](https://github.com/openshift/networking-console-plugin/pull/65)
* Use rhel9 base image in Dockerfile [#64](https://github.com/openshift/networking-console-plugin/pull/64)
* [OCPBUGS-39310](https://issues.redhat.com/browse/OCPBUGS-39310): fix small routes bugs [#63](https://github.com/openshift/networking-console-plugin/pull/63)
* [OCPBUGS-39302](https://issues.redhat.com/browse/OCPBUGS-39302): fix pod selector path [#62](https://github.com/openshift/networking-console-plugin/pull/62)
* [OCPBUGS-39296](https://issues.redhat.com/browse/OCPBUGS-39296): fix docs links [#60](https://github.com/openshift/networking-console-plugin/pull/60)
* [OCPBUGS-39195](https://issues.redhat.com/browse/OCPBUGS-39195): fix switching namespaces in policies [#56](https://github.com/openshift/networking-console-plugin/pull/56)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/6924124591ae38f9c7a80655bf4de46121dccd0f...f395bb620999a1ead055f59ebe02d1a4c258e764)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/c9123030d5df99847cf3779856d90ff83cf64dcb)

* [OCPBUGS-41503](https://issues.redhat.com/browse/OCPBUGS-41503): [release-4.17] oc-mirror throws error when performing delete operation with --generate (#922) [#922](https://github.com/openshift/oc-mirror/pull/922)
* [OCPBUGS-41168](https://issues.redhat.com/browse/OCPBUGS-41168): [release-4.17] Should not panic when specifying wrong loglevel for oc-mirror (#918) [#918](https://github.com/openshift/oc-mirror/pull/918)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/c8cce2c9f92f29e742960e1508cfc89a63e05619...c9123030d5df99847cf3779856d90ff83cf64dcb)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/b0d86a042d2b36be77b3b5bca74e73194bfdeee8)

* [OCPBUGS-41549](https://issues.redhat.com/browse/OCPBUGS-41549): [4.17] adds paginating lister for evaluating CRs' upgrade fitness versus new CRDs. [#860](https://github.com/openshift/operator-framework-olm/pull/860)
* [OCPBUGS-41498](https://issues.redhat.com/browse/OCPBUGS-41498): [release-4.17] Fix e2e flake: upgrade CRD with deprecated version [#858](https://github.com/openshift/operator-framework-olm/pull/858)
* [OCPBUGS-39574](https://issues.redhat.com/browse/OCPBUGS-39574): (fix) registry pods do not come up again after node failure (#3366) [#855](https://github.com/openshift/operator-framework-olm/pull/855)
* [OCPBUGS-39458](https://issues.redhat.com/browse/OCPBUGS-39458): add optional schema migrations; default to olm.bundle.object instead of olm.csv.metadata (#1384) [#851](https://github.com/openshift/operator-framework-olm/pull/851)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/a3a385e87bb828693ff383a383b3e33f3d575d79...b0d86a042d2b36be77b3b5bca74e73194bfdeee8)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/51f871a51fdfec73932100e13201301ddeb35fa1)

* [OCPBUGS-39297](https://issues.redhat.com/browse/OCPBUGS-39297): Replace 4.16 image references with 4.17 [#573](https://github.com/operator-framework/operator-marketplace/pull/573)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/794974488ac28a56f0afbbc15f290b6e32dc87b0...51f871a51fdfec73932100e13201301ddeb35fa1)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/62451d12851aebdd1a3b009a9829f8df796998ad)

* [OCPBUGS-39406](https://issues.redhat.com/browse/OCPBUGS-39406), [SDN-4919](https://issues.redhat.com/browse/SDN-4919): Downstream Merge 28th August [#2283](https://github.com/openshift/ovn-kubernetes/pull/2283)
* [SDN-4919](https://issues.redhat.com/browse/SDN-4919): Downstream Merge August 22nd [#2277](https://github.com/openshift/ovn-kubernetes/pull/2277)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/b024290bcd3798e68664d4b125574953079b7f41...62451d12851aebdd1a3b009a9829f8df796998ad)


### [tests](https://github.com/openshift/origin/tree/ec6389f0e63380e8ec6d792e20ed1e61473ddbb3)

* [OCPBUGS-41817](https://issues.redhat.com/browse/OCPBUGS-41817): Update the NotFound case for CNI plugin to reflect changes [#29091](https://github.com/openshift/origin/pull/29091)
* [OCPBUGS-39134](https://issues.redhat.com/browse/OCPBUGS-39134): Bump timeout for the pod-network-service endpoints check [#29051](https://github.com/openshift/origin/pull/29051)
* [OCPBUGS-38674](https://issues.redhat.com/browse/OCPBUGS-38674): add unexpected ready for monitor tests [#29021](https://github.com/openshift/origin/pull/29021)
* [OCPBUGS-39254](https://issues.redhat.com/browse/OCPBUGS-39254): Change Operator Installed for Smoke Test [#29055](https://github.com/openshift/origin/pull/29055)
* [Full changelog](https://github.com/openshift/origin/compare/e8a55e5d129bd5edab56fafac8f20715a06b8ab6...ec6389f0e63380e8ec6d792e20ed1e61473ddbb3)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/07abced061d16b906b19d1eb49f9bea5c2c77662)

* [OCPBUGS-37661](https://issues.redhat.com/browse/OCPBUGS-37661): Bump otelgrpc to v0.53.0 [#74](https://github.com/openshift/cloud-provider-vsphere/pull/74)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/6464d0bb49283eebeb3ea1a3db4e4914c569dcbd...07abced061d16b906b19d1eb49f9bea5c2c77662)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/d97d4cee0769099004a39fcf7ff1d8f48cb0f3cc)

* [OCPBUGS-42007](https://issues.redhat.com/browse/OCPBUGS-42007): Remove conditions and controllers [#254](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/254)
* [OCPBUGS-42006](https://issues.redhat.com/browse/OCPBUGS-42006): Add check for vCenter version [#253](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/253)
* [OCPBUGS-42008](https://issues.redhat.com/browse/OCPBUGS-42008): Implement minor quality of life improvements. [#255](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/255)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/6054116d4adde0ce92e43f5637e984053c21aa84...d97d4cee0769099004a39fcf7ff1d8f48cb0f3cc)