Back to index

Download installer and client with:

oc adm release extract --tools registry.ci.openshift.org/origin/release-scos:4.16.0-0.okd-scos-2024-09-19-104700

Team Approvals:

Tests:

• Blocking jobs
  • aws Failed (2 retries) periodic-ci-openshift-release-master-okd-scos-4.16-e2e-aws-ovn
• Informing jobs
  • aws-upgrade Succeeded periodic-ci-openshift-release-master-okd-scos-4.16-e2e-aws-ovn-upgrade
  • vsphere Failed (2 retries) periodic-ci-openshift-release-master-okd-scos-4.16-e2e-vsphere-ovn

Upgrades from:

• 4.16.0-0.okd-scos-2024-08-30-131155 - Success

---

Changes from 4.16.0-0.okd-scos-2024-08-30-131155

Created: 2024-09-19 10:49:04 +0000 UTC

Image Digest: sha256:8e5e70879a7e3c1ad2f5834bca453bbd9e4a1f9a3460798e5bf71f3cc2ba7269

Components

• Kubectl 1.29.7
• Kubernetes upgraded from 1.29.7 to 1.29.8
• Kubernetes Tests 1.29.0
• CentOS Stream CoreOS upgraded from 418.9.202408301032-0 to 418.9.202409181032-0 (diff)

Rebuilt images without code change

• cluster-samples-operator git df318476 sha256:fcb10fb4fcaf6c8926b1967aff2020e523d20f9d97c04a46fb9384287916cdd4
• operator-marketplace git 7db179fb sha256:9349f7746c62baaf408c555e77096bee1bb6fc5b0e07781593ffead2d7786627
• stream-coreos sha256:cc8048f208a9cd4020a212ef103f64d2c45aafd004a47c6f7c492e8d6bf7710c
• stream-coreos-extensions sha256:779ee96d15422c80d08032010630e2e13ac8c5711c743944f9fd764a44f2c9cb

agent-installer-api-server

• OCPBUGS-36577: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#6752) #6752
• Full changelog

apiserver-network-proxy

• OCPBUGS-38062: Revert “Agent: Respect HTTPS_PROXY env vars for proxied connections” #59
• Full changelog

azure-file-csi-driver

• OCPBUGS-39145: bump mount-utils to treat ENODEV error as corrupted mount #76
• Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

• OCPBUGS-39287: Fix var_files syntax to work on older version of ansible #8936
• OCPBUGS-41929: Add AWS c7g,m7g,r8g to tested instance types #9009
• OCPBUGS-36855: Openstack UPI - Reintroduce unique resource names. #8724
• OCPBUGS-39082: incorrect folder gen, workaround govmomi vm folder path bug #8912
• OCPBUGS-39496: capi/aws/byo-vpc/multi-cidr: fix group rules #8953
• OCPBUGS-36861: Updates GCP terraform worker role #8939
• OCPBUGS-38956: failed to install Nutanix OCP 4.16 cluster with DHCP #8905
• OCPBUGS-38822: upstream capv bug causes session timeout #8891
• OCPBUGS-39468: Enable TLS for virtual media in initial ironic deployment #8955
• OCPBUGS-37606: vSphere validation fails if dc is in a folder #8777
• OCPBUGS-39206: Update GCP Disk Types 4.16 #8920
• OCPBUGS-39087: aws: validate public-only subnets configs #8913
• Full changelog

baremetal-operator

• OCPBUGS-39490: Disallow fetching secrets from namespaces different from the host’s one #378
• OCPBUGS-38938: [OCP] Ability to disable agent power off after deployment #372
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-39341: Ignore pruning when deployment points to replicationcontroller #1862
• Full changelog

cloud-credential-operator

• OCPBUGS-41234: List secrets in batches to avoid api timeout #757
• Full changelog

cluster-image-registry-operator

• Revert “[release-4.16] OCPBUGS-41903: pkg/operator/azurepathfixcontroller: do not sync on non-azure storage” #1119
• OCPBUGS-41903: pkg/operator/azurepathfixcontroller: do not sync on non-azure storage #1115
• Full changelog

cluster-ingress-operator

• OCPBUGS-39324: Refine logging for accurate infra CR status updates #1139
• OCPBUGS-39323: Ingress operator status not degraded when canary route fails #1138
• Full changelog

cluster-kube-storage-version-migrator-operator

• OCPBUGS-38269: bump protobuf #115
• Full changelog

cluster-monitoring-operator

• OCPBUGS-41910: filter alerts sent to Telemeter #2471
• OCPBUGS-39170: Backport #2441 for 4.16 #2447
• Full changelog

cluster-network-operator

• OCPBUGS-37763: Handle random crictl errors in iptables-alerter #2452
• OCPBUGS-41555: HyperShift: do not use antiaffinity on single replica control planes #2494
• OCPBUGS-37937: Add proxy env vars to onvkube-node #2457
• OCPBUGS-41607: set required-scc for openshift workloads #2496
• Full changelog

console

• OCPBUGS-34518: Restore user toggle when authentification is disabled #13902
• OCPBUGS-41619: Use vCenterCluster value from CM as primary resource #14268
• OCPBUGS-37046: Fix TypeError: Cannot read properties of null (reading ‘metadata’) in Topology view #14059
• OCPBUGS-38911: Values entered into the Instantiate Template form are automatically cleared #14187
• OCPBUGS-38914: Unrelated readme opened when opening CodeReady workspaces from Quarkus using s2i quickstart #14188
• OCPBUGS-38968: A value submitted in From view is wrapped with single quotation after switching to Yaml view. #14193
• OCPBUGS-38424: fix bug where cluster version text appears black in da… #14144
• Full changelog

docker-builder

• OCPBUGS-30455: bump google.golang.org/protobuf to 1.33.0 #402
• Full changelog

docker-registry

• OCPBUGS-39412: pull upstream distribution changes to use a consistent multipart chunk size #410
• Full changelog

hyperkube, installer-kube-apiserver-artifacts, pod

• OCPBUGS-39015: Bump k8s api to 1.29.8 #2066
• OCPBUGS-36773: UPSTREAM: <carry>: Disable vSphere tests with pre-provisioned volumes #2021
• Full changelog

hypershift

• OCPBUGS-41372: CPO oauth idp converter: resolve names before dialing #4689
• NO-JIRA: chore(deps): update golang docker tag to v1.23 (release-4.16) #4729
• NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.34 (release-4.16) #4728
• NO-JIRA: chore(deps): update konflux references (release-4.16) #4727
• OCPBUGS-38058: Add HTTP konnectivity proxy to OAuth server #4496
• HOSTEDCP-1955: bump CCO version #4696
• OCPBUGS-34803: cmd: report server version, supported OCP #4141
• OCPBUGS-39293: copy image-registry AdditionalTrustedCA configmap into HC openshift-config #4647
• chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-9 (release-4.16) #4685
• OCPBUGS-38062: [release-4.16] Use HTTP proxy for ingress controller #4688
• NO-JIRA: chore(deps): update konflux references (release-4.16) #4684
• OCPBUGS-39447: handle version skewed NodePools that do not have rhel9 binaries #4664
• HOSTEDCP-1895: [release-4.16] Allow setting Kube APIServer maximum requests in flight #4551
• Full changelog

insights-operator

• OCPBUGS-38021: Integration of the OpenStack CRs into the insights-operator (#974) #974
• Full changelog

ironic

• OCPBUGS-38510: set min version for python3-webob #553
• Full changelog

ironic-agent

• OCPBUGS-38510: set webob and bump werkzeug #149
• Full changelog

kube-metrics-server

• OCPBUGS-41717: Wire server run options to flags. ([release-4.16] backport) #37
• Full changelog

machine-config-operator

• OCPBUGS-41806: When newly built images rolled out, the update progress is not displaying correctly (went 0 –> 3) #4584
• OCPBUGS-41518: CVE-2024-3727 ose-machine-config-operator-container: containers/image: digest type does not guarantee valid type #4569
• OCPBUGS-38997: Machine-config daemon ListPools panic during tech-preview CI runs #4550
• OCPBUGS-38711: SCC-pinning for openshift workloads #4539
• OCPBUGS-36850: Port number 22623 exposing weak ciphers to external client from master node IP #4556
• Full changelog

openshift-controller-manager

• OCPBUGS-39191: replaces deprecated square/go-jose wtih go-jose/go-jose #329
• Full changelog

openstack-cluster-api-controllers

• OCPBUGS-34931: rebase on release-0.10 (to fix trunks deletion) #321
• Full changelog

openstack-machine-api-provider

• OCPBUGS-34931: bump CAPO to v0.9.2 #124
• Full changelog

operator-lifecycle-manager, operator-registry

• OCPBUGS-41540: [4.16] add optional schema migrations; default to olm.bundle.object instead of olm.csv.metadata (#1384) #859
• OCPBUGS-41677: [4.17] adds paginating lister for evaluating CRs’ upgrade fitness versus new CRDs. #863
• OCPBUGS-41557: Fix e2e flake: upgrade CRD with deprecated version #861
• OCPBUGS-41217: (fix) registry pods do not come up again after node failure (#3366) #854
• OCPBUGS-38290: release-4.16 Resolver: list CatSrc using client, instead of referring to registry-server cache #838
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-38697: Use more exact name match when deleting static routes to HO nodes. #2282
• OCPBUGS-24386: [release-4.16] EgressService: Fix ETP=Local ingress reply for LGW #2278
• OCPBUGS-38705: Delete EgressIP LRP stale nexthops when node is not found #2271
• Full changelog

powervs-machine-controllers

• OCPBUGS-41976: Update go.mod to fix CVE - 4.16 #84
• Full changelog

prometheus

• OCPBUGS-39179: Restore Prometheus functionality to accept samples with different timestamps from the same series in a single scrape. #224
• Full changelog

tests

• OCPBUGS-41611: Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token [apigroup:build.openshift.io] #29079
• Full changelog

vsphere-cloud-controller-manager

• OCPBUGS-37660: Bump otelgrpc to v0.53.0 #72
• Full changelog

---

View changelog in Markdown or change previous release: 4.16.0-0.okd-scos-2024-09-18-2236504.16.0-0.okd-scos-2024-09-18-1825084.16.0-0.okd-scos-2024-09-18-1247064.16.0-0.okd-scos-2024-09-18-0731414.16.0-0.okd-scos-2024-08-30-1311554.16.0-0.okd-scos-2024-08-30-0907544.16.0-0.okd-scos-2024-08-30-0502244.16.0-0.okd-scos-2024-08-30-0052004.16.0-0.okd-scos-2024-08-29-173831───4.18.0-0.okd-scos-2024-09-19-2034394.18.0-0.okd-scos-2024-09-19-0834394.18.0-0.okd-scos-2024-09-18-2034394.18.0-0.okd-scos-2024-09-18-0834394.18.0-0.okd-scos-2024-09-17-2034394.18.0-0.okd-scos-2024-09-17-0834394.18.0-0.okd-scos-2024-08-26-2109074.18.0-0.okd-scos-2024-08-26-0909074.18.0-0.okd-scos-2024-08-25-2109074.18.0-0.okd-scos-2024-08-24-1013214.18.0-0.okd-scos-2024-08-23-221321───4.17.0-0.okd-scos-2024-09-19-1034554.17.0-0.okd-scos-2024-09-18-1110314.17.0-0.okd-scos-2024-09-17-2310314.17.0-0.okd-scos-2024-09-17-1110314.17.0-0.okd-scos-2024-09-16-2310314.17.0-0.okd-scos-2024-08-30-1007274.17.0-0.okd-scos-2024-08-29-2207264.17.0-0.okd-scos-2024-08-29-1007254.17.0-0.okd-scos-2024-08-28-2207244.17.0-0.okd-scos-2024-08-28-100723───4.15.0-0.okd-scos-2024-05-13-2236094.15.0-0.okd-scos-2024-04-25-1837084.15.0-0.okd-scos-2024-04-25-0637084.15.0-0.okd-scos-2024-04-24-1837084.15.0-0.okd-scos-2024-04-24-0637084.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2024-09-19-1327274.15.0-0.okd-2024-09-09-0346264.15.0-0.okd-2024-09-04-1828354.15.0-0.okd-2024-08-27-1743134.15.0-0.okd-2024-08-27-0543134.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.17.0-0.okd-scos-2024-08-21-100712───4.15.0-0.okd-2024-03-10-0101164.15.0-0.okd-2024-02-23-1634104.15.0-0.okd-2024-02-10-0355344.15.0-0.okd-2024-01-27-070424───4.16.0-0.okd-scos-2024-08-21-1556134.15.0-0.okd-scos-2024-01-18-223523

Source code for this page located on github