# 4.17.0-okd-scos.1

Created: 2024-12-30 22:21:38 +0000 UTC

Image Digest: `sha256:ca4b9a8ebeb0cb7433751726729116fcea12f577eeff1d0b474e43dda828cd09`

Promoted from registry.ci.openshift.org/origin/release-scos:4.17.0-0.okd-scos-2024-12-29-210400


## Changes from 4.17.0-okd-scos.0

### Components

* Kubectl 1.30.5
* Kubernetes upgraded from 1.30.6 to 1.30.7
* Kubernetes Tests 1.30.0
* CentOS Stream CoreOS upgraded from 417.9.202412022032-0 to 417.9.202412292032-0


### Rebuilt images without code change

* stream-coreos `sha256:4027bd5d28bd5ee9fb655909069ce145af5b0e63544f99dc8410f8df4f627db0`
* stream-coreos-extensions `sha256:69ead54fd4a2346c2839ae80bab070d23b23ec023fc22baa141290477dd29c8d`


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/89f9cbab469a4433318c30f548ae02468b20fd2f)

* [OCPBUGS-44904](https://issues.redhat.com/browse/OCPBUGS-44904): Rhcos fails to reboot for skip mco reboot on s390x (#942) [#942](https://github.com/openshift/assisted-installer/pull/942)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/9614e8b4cd8393727d3fc12ff9df9e647c6f694b...89f9cbab469a4433318c30f548ae02468b20fd2f)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/b41b8c8f52a76eb494d1dfcb796418c3549e4e5e)

* [OCPBUGS-45186](https://issues.redhat.com/browse/OCPBUGS-45186): fix Associate*IpAddress flag when launch EC2 [#118](https://github.com/openshift/machine-api-provider-aws/pull/118)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/451c30d9aff7ae7b22100ddd9f3fe5fcdaf01ae7...b41b8c8f52a76eb494d1dfcb796418c3549e4e5e)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/626ecd1c32f50953e84fd1cb499077d52fe53e43)

* [OCPBUGS-46039](https://issues.redhat.com/browse/OCPBUGS-46039): Prevent panic when informer receives cache.DeletedFinalStateUnknown [#132](https://github.com/openshift/cloud-provider-azure/pull/132)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/b9204e2197b922ecd080fcbe112b4a09e18344db...626ecd1c32f50953e84fd1cb499077d52fe53e43)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/baa59e5213e017d66a818c975f6093b1db697dda)

* [OCPBUGS-46360](https://issues.redhat.com/browse/OCPBUGS-46360): aws: add ec2:AllocateAddress perm requirement. [#9313](https://github.com/openshift/installer/pull/9313)
* no-jira: Collect bootstrap logs when control plane provisioning fails [#9308](https://github.com/openshift/installer/pull/9308)
* [OCPBUGS-45726](https://issues.redhat.com/browse/OCPBUGS-45726): IBMCloud: Add service overrides [#9267](https://github.com/openshift/installer/pull/9267)
* [OCPBUGS-42117](https://issues.redhat.com/browse/OCPBUGS-42117): Remove destroy search for regional target tcp proxies [#9025](https://github.com/openshift/installer/pull/9025)
* [OCPBUGS-45484](https://issues.redhat.com/browse/OCPBUGS-45484): PowerVS: Listen to machineNetwork [#9271](https://github.com/openshift/installer/pull/9271)
* [OCPBUGS-44848](https://issues.redhat.com/browse/OCPBUGS-44848): aws: user right perm for untagging BYO IAM profiles [#9228](https://github.com/openshift/installer/pull/9228)
* [OCPBUGS-45276](https://issues.redhat.com/browse/OCPBUGS-45276): Bump Azure Machine Timeout [#9257](https://github.com/openshift/installer/pull/9257)
* [ARO-12457](https://issues.redhat.com/browse/ARO-12457): Include bootstrap docker config file in go module [#9258](https://github.com/openshift/installer/pull/9258)
* [Full changelog](https://github.com/openshift/installer/compare/e09aaf186494231de92bd80f02a43db764bd5e27...baa59e5213e017d66a818c975f6093b1db697dda)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/f4525b82d768063bf14d5f15f0998d2217b7b792)

* [OCPBUGS-45517](https://issues.redhat.com/browse/OCPBUGS-45517): add retry in case of image pull error [#1940](https://github.com/openshift/oc/pull/1940)
* [OCPBUGS-44508](https://issues.redhat.com/browse/OCPBUGS-44508): Show node-joiner container logs when error occurs [#1912](https://github.com/openshift/oc/pull/1912)
* [OCPBUGS-44830](https://issues.redhat.com/browse/OCPBUGS-44830): Fix newapp unit test failure by using different image [#1913](https://github.com/openshift/oc/pull/1913)
* [Full changelog](https://github.com/openshift/oc/compare/dde885f94df59c4816acc36814ffec3b55d4a1ca...f4525b82d768063bf14d5f15f0998d2217b7b792)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/7e1cf460fbd31b254c2fed51810800e7520c9926)

* [OCPBUGS-45938](https://issues.redhat.com/browse/OCPBUGS-45938): Add AWS region to aws-pod-identity-webhook [#799](https://github.com/openshift/cloud-credential-operator/pull/799)
* [OCPBUGS-45006](https://issues.redhat.com/browse/OCPBUGS-45006): Add retry to ccoctl gcp create functions [#793](https://github.com/openshift/cloud-credential-operator/pull/793)
* [OCPBUGS-45001](https://issues.redhat.com/browse/OCPBUGS-45001): github.com/golang-jwt/jwt/v4 v4.5.1 [#787](https://github.com/openshift/cloud-credential-operator/pull/787)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/a836d6794373f8c2f69cef842e5a9f3d92556abe...7e1cf460fbd31b254c2fed51810800e7520c9926)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/ea4a88786cf9b237dc446e01fdacd6fd65b73144)

* [OCPBUGS-45929](https://issues.redhat.com/browse/OCPBUGS-45929): set max soft bulk taint count to zero [#337](https://github.com/openshift/cluster-autoscaler-operator/pull/337)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/99b23ded9fb70aa29622d0f6c4254e54c51d2813...ea4a88786cf9b237dc446e01fdacd6fd65b73144)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/ab40b61142a30f21eec8301b2e98f2fafb25164b)

* [OCPBUGS-46593](https://issues.redhat.com/browse/OCPBUGS-46593): "gracefully" shutdown KSVM pod. [#123](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/123)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/a0d27f3f04cb61084fef767c2df5bcc7b3db2d27...ab40b61142a30f21eec8301b2e98f2fafb25164b)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/f63a15d06c83a771268ba027b6f75af4d000f47a)

* [OCPBUGS-45918](https://issues.redhat.com/browse/OCPBUGS-45918): Ensure trailing dots on DNS names do not block serving cert auth [#256](https://github.com/openshift/cluster-machine-approver/pull/256)
* [OCPBUGS-45918](https://issues.redhat.com/browse/OCPBUGS-45918): Client internal DNS checks should ignore trailing dot [#250](https://github.com/openshift/cluster-machine-approver/pull/250)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/32c847111e45313f34d615196d00aeeffd50a281...f63a15d06c83a771268ba027b6f75af4d000f47a)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/ff3a4f0218f4985874f2ab872f6f6f440a38e17d)

* [OCPBUGS-44971](https://issues.redhat.com/browse/OCPBUGS-44971): Add new metrics for OpenShift logging telemetry [#2526](https://github.com/openshift/cluster-monitoring-operator/pull/2526)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/15bded36cc8392cd88e28634b8b63dd83934867c...ff3a4f0218f4985874f2ab872f6f6f440a38e17d)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/37be1f8c3b4296048a2bd385ffc6636fc3603f38)

* [OCPBUGS-43714](https://issues.redhat.com/browse/OCPBUGS-43714): Skip including default crypto policies to avoid authby issue [#2597](https://github.com/openshift/cluster-network-operator/pull/2597)
* [OCPBUGS-46146](https://issues.redhat.com/browse/OCPBUGS-46146): Remove ip xfrm state when IPsec is disabled [#2594](https://github.com/openshift/cluster-network-operator/pull/2594)
* [OCPBUGS-44415](https://issues.redhat.com/browse/OCPBUGS-44415): Pass transit_switch_subnet options in ovnkube-node pod [#2561](https://github.com/openshift/cluster-network-operator/pull/2561)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/7768811ef167eb33a0eaafc5c3eb30fdd02470fd...37be1f8c3b4296048a2bd385ffc6636fc3603f38)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/271091eff912d41ac94fc74813d1631276921ffc)

* [OCPBUGS-43664](https://issues.redhat.com/browse/OCPBUGS-43664): Add vendor and architecture specific tuning options (#1191) [#1191](https://github.com/openshift/cluster-node-tuning-operator/pull/1191)
* [OCPBUGS-44644](https://issues.redhat.com/browse/OCPBUGS-44644): cmd: PPC: support tolerating heterogeneous core IDs (#1252) [#1252](https://github.com/openshift/cluster-node-tuning-operator/pull/1252)
* [OCPBUGS-45264](https://issues.redhat.com/browse/OCPBUGS-45264): Normalize cpu sets when rendering to Tuned profiles (#1238) (#1248) [#1238](https://github.com/openshift/cluster-node-tuning-operator/pull/1238)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/222249d39165d5ed01702e70f2e32e61483ee2ae...271091eff912d41ac94fc74813d1631276921ffc)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/5683ea22810815595761ff9e5309c656a7392125)

* [OCPBUGS-44997](https://issues.redhat.com/browse/OCPBUGS-44997): Fix PodStartupStorageOperationsFailing alert [#543](https://github.com/openshift/cluster-storage-operator/pull/543)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/bb40448723a3906ab80250e4601d431b66499f50...5683ea22810815595761ff9e5309c656a7392125)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/bc60dbd5f73b9f0548f0bb3aef0468a630362dce)

* [OCPBUGS-39558](https://issues.redhat.com/browse/OCPBUGS-39558): Filter out shallowly `UpdateEffectNone` errors from a `MultipleErrors` message in the Failing condition [#1114](https://github.com/openshift/cluster-version-operator/pull/1114)
* [OCPBUGS-45328](https://issues.redhat.com/browse/OCPBUGS-45328): deps: bump golang.org/x/net to 0.31.0 [#1117](https://github.com/openshift/cluster-version-operator/pull/1117)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/8c3b8082fe109c24c23894635428549cab5be26c...bc60dbd5f73b9f0548f0bb3aef0468a630362dce)


### [console](https://github.com/openshift/console/tree/18734acbfe63d484eec27667881b4b5efeb71470)

* [OCPBUGS-45949](https://issues.redhat.com/browse/OCPBUGS-45949): ReRun of Resolver based PipelineRuns fails from UI [#14605](https://github.com/openshift/console/pull/14605)
* [OCPBUGS-45954](https://issues.redhat.com/browse/OCPBUGS-45954): Fixed capitalization in OpenShift Lightspeed [#14607](https://github.com/openshift/console/pull/14607)
* [OCPBUGS-45948](https://issues.redhat.com/browse/OCPBUGS-45948): ImagePullSecret getting duplicated when editing DeploymentConfig in Form View [#14604](https://github.com/openshift/console/pull/14604)
* [OCPBUGS-45667](https://issues.redhat.com/browse/OCPBUGS-45667): Do not pass CSV name to operand list page when an exen… [#14591](https://github.com/openshift/console/pull/14591)
* [OCPBUGS-46000](https://issues.redhat.com/browse/OCPBUGS-46000): The description and name for GCP Pool ID is not consist [#14611](https://github.com/openshift/console/pull/14611)
* [OCPBUGS-42558](https://issues.redhat.com/browse/OCPBUGS-42558): Plugins that use very old PF4 dropdown or menu components with grouped items have bullets and padding that needs to be removed. [#14344](https://github.com/openshift/console/pull/14344)
* [OCPBUGS-44656](https://issues.redhat.com/browse/OCPBUGS-44656): update ConditionalUpdates release type [#14505](https://github.com/openshift/console/pull/14505)
* [OCPBUGS-43888](https://issues.redhat.com/browse/OCPBUGS-43888): While accessing the node terminal from UI observed 'Warning alert:Admission Webhook Warning` [#14444](https://github.com/openshift/console/pull/14444)
* [Full changelog](https://github.com/openshift/console/compare/34d0673518e9f3c7117fc9ba64d7bd326b0a3d1a...18734acbfe63d484eec27667881b4b5efeb71470)


### [console-operator](https://github.com/openshift/console-operator/tree/71ba58ad67f04d99b5d2adbe2dad74301fcb6d0f)

* [OCPBUGS-46390](https://issues.redhat.com/browse/OCPBUGS-46390): Dont disable console when authConfig type is set to None [#951](https://github.com/openshift/console-operator/pull/951)
* [Full changelog](https://github.com/openshift/console-operator/compare/f41009e8511cf5a042ca81d18e44137b7d11ba05...71ba58ad67f04d99b5d2adbe2dad74301fcb6d0f)


### [etcd, installer-etcd-artifacts](https://github.com/openshift/etcd/tree/23c5a247c3e601f7806a0bbffdc6d201a55bf469)

* NO-ISSUE: Add support for cachi2 based deps [#297](https://github.com/openshift/etcd/pull/297)
* [Full changelog](https://github.com/openshift/etcd/compare/c82057da87388662904654d4f01acd06595ee22d...23c5a247c3e601f7806a0bbffdc6d201a55bf469)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/601931f471a4270e63fd524c7c0bd494a1800a21)

* [OCPBUGS-46082](https://issues.redhat.com/browse/OCPBUGS-46082): update a2 gpu detection logic to be dynamic [#100](https://github.com/openshift/machine-api-provider-gcp/pull/100)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/0d6fbdb09401bcdf1a6da8dc07842732bc8e95ff...601931f471a4270e63fd524c7c0bd494a1800a21)


### [hyperkube, installer-kube-apiserver-artifacts, pod](https://github.com/openshift/kubernetes/tree/f868289cea8577c895fa957b466f209b9af6a1a2)

* : OCPBUGS-46364: Fix grace period used for immediate evictions [#2164](https://github.com/openshift/kubernetes/pull/2164)
* [OCPBUGS-46002](https://issues.redhat.com/browse/OCPBUGS-46002): Bump k8s api to 1.30.7 [#2160](https://github.com/openshift/kubernetes/pull/2160)
* [OCPBUGS-39318](https://issues.redhat.com/browse/OCPBUGS-39318): UPSTREAM: 126994: Add required FieldManager for validatingadmissionpolicy e2e [#2070](https://github.com/openshift/kubernetes/pull/2070)
* [OCPBUGS-43820](https://issues.redhat.com/browse/OCPBUGS-43820): UPSTREAM: <carry>: kubelet/cm: fix bug where kubelet restarts from missing cpuset cgroup [#2126](https://github.com/openshift/kubernetes/pull/2126)
* [OCPBUGS-44897](https://issues.redhat.com/browse/OCPBUGS-44897): Backport format library to enable usage in 4.18 [#2140](https://github.com/openshift/kubernetes/pull/2140)
* [Full changelog](https://github.com/openshift/kubernetes/compare/5a24e858060a609366c5ff1402ec1424e9f7e403...f868289cea8577c895fa957b466f209b9af6a1a2)


### [hypershift](https://github.com/openshift/hypershift/tree/e8bf75a02f131b80e60569c87a8e0ba4c209b75b)

* [OCPBUGS-46412](https://issues.redhat.com/browse/OCPBUGS-46412): Separate CPO containerfiles [#5285](https://github.com/openshift/hypershift/pull/5285)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5289](https://github.com/openshift/hypershift/pull/5289)
* NO-JIRA: chore(deps): update dependency mkdocs to v1.6.1 (release-4.17) [#5290](https://github.com/openshift/hypershift/pull/5290)
* [OCPBUGS-44114](https://issues.redhat.com/browse/OCPBUGS-44114): Add external kas address to no proxy skip list [#5028](https://github.com/openshift/hypershift/pull/5028)
* NO-JIRA: Red Hat Konflux update hypershift-release-mce-28 [#5174](https://github.com/openshift/hypershift/pull/5174)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5249](https://github.com/openshift/hypershift/pull/5249)
* [OCPBUGS-44630](https://issues.redhat.com/browse/OCPBUGS-44630): Use ingress role in private link controller for DNS operations [#5142](https://github.com/openshift/hypershift/pull/5142)
* [Full changelog](https://github.com/openshift/hypershift/compare/4430d04b2bca1f8cf2ddd0a5ed5b4dc7cd42c639...e8bf75a02f131b80e60569c87a8e0ba4c209b75b)


### [insights-operator](https://github.com/openshift/insights-operator/tree/85c2bb66bf02d507c40c060cfd0516219ccb029d)

* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for dataGahtering jobs & pods [#1049](https://github.com/openshift/insights-operator/pull/1049)
* [Full changelog](https://github.com/openshift/insights-operator/compare/714aeb53392b66b4346edbee4b9b7f8c8836b419...85c2bb66bf02d507c40c060cfd0516219ccb029d)


### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/e870adbd46e2b0f9afa88227f951b37d5ba4dc0c)

* : OCPBUGS-46491: Disable HTTP2 [#40](https://github.com/openshift/kubernetes-metrics-server/pull/40)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/28b10b8fcc2d21fb323e79afeb46301d0c3c6e9c...e870adbd46e2b0f9afa88227f951b37d5ba4dc0c)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/191a28d831b1f9493b54a25a3c75babd310bede5)

* [OCPBUGS-43851](https://issues.redhat.com/browse/OCPBUGS-43851): vSphere klog initialization preventing verbose log messages [#1302](https://github.com/openshift/machine-api-operator/pull/1302)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/139064c02af33d94baa669cce30967bfea534d13...191a28d831b1f9493b54a25a3c75babd310bede5)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/d7c30c8b04e46f2b86e1b8ee3ed5ed11cfd2fadc)

* [OCPBUGS-38292](https://issues.redhat.com/browse/OCPBUGS-38292): controller: default to runc when upgrading clusters from 4.17 to 4.18 [#4715](https://github.com/openshift/machine-config-operator/pull/4715)
* [OCPBUGS-45918](https://issues.redhat.com/browse/OCPBUGS-45918): Remove trailing periods from AWS provided hostnames [#4738](https://github.com/openshift/machine-config-operator/pull/4738)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/911e8829ee867544a650b61751c66f571396bd5c...d7c30c8b04e46f2b86e1b8ee3ed5ed11cfd2fadc)


### [must-gather](https://github.com/openshift/must-gather/tree/f8fb61b7740b6029a0008e4925ed7a56735d468e)

* [OCPBUGS-46281](https://issues.redhat.com/browse/OCPBUGS-46281): Support gathering IPsec data [#467](https://github.com/openshift/must-gather/pull/467)
* [Full changelog](https://github.com/openshift/must-gather/compare/d785c127c87271f3f3823d5000e6e4352ac9b88f...f8fb61b7740b6029a0008e4925ed7a56735d468e)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/b31ed59e501aa4853c29126af6857d3639498b7b)

* [OCPBUGS-46598](https://issues.redhat.com/browse/OCPBUGS-46598): catalog-operator: Delete Pods that were evicted (#3459) [#922](https://github.com/openshift/operator-framework-olm/pull/922)
* [OCPBUGS-46054](https://issues.redhat.com/browse/OCPBUGS-46054): CRD upgrade existing CR validation fix [#913](https://github.com/openshift/operator-framework-olm/pull/913)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/649dfc4dc0a7fca1c25c7678665a55ad8ce53040...b31ed59e501aa4853c29126af6857d3639498b7b)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/d60fad7b368831724701ebc90f6581a554eb673f)

* [OCPBUGS-47506](https://issues.redhat.com/browse/OCPBUGS-47506): Let OVN-northd bind remote ports [#2404](https://github.com/openshift/ovn-kubernetes/pull/2404)
* [OCPBUGS-45953](https://issues.redhat.com/browse/OCPBUGS-45953): bump OVS version to 3.4.0-18 [#2393](https://github.com/openshift/ovn-kubernetes/pull/2393)
* [OCPBUGS-45312](https://issues.redhat.com/browse/OCPBUGS-45312): pin libreswan to 4.6-3.el9_0.3 [#2384](https://github.com/openshift/ovn-kubernetes/pull/2384)
* [OCPBUGS-45339](https://issues.redhat.com/browse/OCPBUGS-45339): Dockerfile: Update OVN to the 24.03.2-32.el9fdp minor release. [#2376](https://github.com/openshift/ovn-kubernetes/pull/2376)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/f1fed30814655ebf01015570e6f806d1250e4b8f...d60fad7b368831724701ebc90f6581a554eb673f)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/097d823bd10abbc6cd016c34a1c5c3cd1b514031)

* [OCPBUGS-43432](https://issues.redhat.com/browse/OCPBUGS-43432): update check-fmt goimports command [#78](https://github.com/openshift/cloud-provider-vsphere/pull/78)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/07abced061d16b906b19d1eb49f9bea5c2c77662...097d823bd10abbc6cd016c34a1c5c3cd1b514031)