# 4.17.0-okd-scos.2

Created: 2025-01-20 16:22:58 +0000 UTC

Image Digest: `sha256:86eae13f86908aa4673750f35a28a4aac124dd53c739c58379559cf3af03faff`

Promoted from registry.ci.openshift.org/origin/release-scos:4.17.0-0.okd-scos-2025-01-20-061611


## Changes from 4.17.0-okd-scos.ec.4

### Components

* Kubectl 1.30.5
* Kubernetes upgraded from 1.30.6 to 1.30.7
* Kubernetes Tests 1.30.0
* CentOS Stream CoreOS upgraded from 417.9.202411212033-0 to 417.9.202501192032-0


### Rebuilt images without code change

* stream-coreos `sha256:dfc196da40a81b10e6219f34da0d5ec97a0704b42e9093230ef0463fec813b18`
* stream-coreos-extensions `sha256:17f8f51a1b9b43ea5562ae18ba05820329f06fdb8720f837350b61402787a575`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/7aa9bf5a5101bcafab8a429ac83c582cf9b56edd)

* [MGMT-19537](https://issues.redhat.com/browse/MGMT-19537): Bump golang.org/x/net to 0.33.0 (#7129) [#7129](https://github.com/openshift/assisted-service/pull/7129)
* [Full changelog](https://github.com/openshift/assisted-service/compare/b2babb90b439acef3b05ccd8400b49b7ef9ecada...7aa9bf5a5101bcafab8a429ac83c582cf9b56edd)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/faffde9e0f731819b3833c26a55324f96bcd0450)

* [OCPBUGS-47493](https://issues.redhat.com/browse/OCPBUGS-47493): MGMT-19537: Bump golang.org/x/net to 0.33.0 (#989) [#989](https://github.com/openshift/assisted-installer/pull/989)
* [OCPBUGS-44904](https://issues.redhat.com/browse/OCPBUGS-44904): Rhcos fails to reboot for skip mco reboot on s390x (#942) [#942](https://github.com/openshift/assisted-installer/pull/942)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/9614e8b4cd8393727d3fc12ff9df9e647c6f694b...faffde9e0f731819b3833c26a55324f96bcd0450)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/05e480dd8cf0ee88b1cce68ebdde9ea41ca847c7)

* [MGMT-19537](https://issues.redhat.com/browse/MGMT-19537): Bump golang.org/x/net to 0.33.0 (#873) [#873](https://github.com/openshift/assisted-installer-agent/pull/873)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/29149b7793e1f15dcb0e39a54e79fddcac744ff8...05e480dd8cf0ee88b1cce68ebdde9ea41ca847c7)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator](https://github.com/openshift/csi-operator/tree/ad51c446184e6fdaa9ec1cf0639259bb1f6265f2)

* [OCPBUGS-44974](https://issues.redhat.com/browse/OCPBUGS-44974): Set separate secrets for file and disk config on HyperShift [#331](https://github.com/openshift/csi-operator/pull/331)
* [Full changelog](https://github.com/openshift/csi-operator/compare/d27753a267f723bab2ce7b28f5d164024f847feb...ad51c446184e6fdaa9ec1cf0639259bb1f6265f2)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/b41b8c8f52a76eb494d1dfcb796418c3549e4e5e)

* [OCPBUGS-45186](https://issues.redhat.com/browse/OCPBUGS-45186): fix Associate*IpAddress flag when launch EC2 [#118](https://github.com/openshift/machine-api-provider-aws/pull/118)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/451c30d9aff7ae7b22100ddd9f3fe5fcdaf01ae7...b41b8c8f52a76eb494d1dfcb796418c3549e4e5e)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/626ecd1c32f50953e84fd1cb499077d52fe53e43)

* [OCPBUGS-46039](https://issues.redhat.com/browse/OCPBUGS-46039): Prevent panic when informer receives cache.DeletedFinalStateUnknown [#132](https://github.com/openshift/cloud-provider-azure/pull/132)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/b9204e2197b922ecd080fcbe112b4a09e18344db...626ecd1c32f50953e84fd1cb499077d52fe53e43)


### [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3/tree/8754bf63984c6879e34abf8413e27e9811bf0655)

* [OCPBUGS-47049](https://issues.redhat.com/browse/OCPBUGS-47049): Bump x/net to 0.33.0 [#32](https://github.com/openshift/cluster-api-provider-metal3/pull/32)
* [Full changelog](https://github.com/openshift/cluster-api-provider-metal3/compare/9e6d2bd4f848a0137040e618c2df4eecce4caed7...8754bf63984c6879e34abf8413e27e9811bf0655)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/cc9298dfa71993ca8a86e4514641622acf18bcbd)

* [OCPBUGS-45340](https://issues.redhat.com/browse/OCPBUGS-45340): move GCP zone filtering client-side [#9264](https://github.com/openshift/installer/pull/9264)
* [OCPBUGS-48257](https://issues.redhat.com/browse/OCPBUGS-48257): remove the types which failed by RHEL-59521 and add the new gpu vm type [#9354](https://github.com/openshift/installer/pull/9354)
* [OCPBUGS-45813](https://issues.redhat.com/browse/OCPBUGS-45813): Remove unused variable from ASH arm template 06_workers.json [#9285](https://github.com/openshift/installer/pull/9285)
* [OCPBUGS-48359](https://issues.redhat.com/browse/OCPBUGS-48359): Allow more time for Service Account Creation [#9362](https://github.com/openshift/installer/pull/9362)
* [OCPBUGS-45344](https://issues.redhat.com/browse/OCPBUGS-45344): support additionalNTPSources in node-joiner tool [#9265](https://github.com/openshift/installer/pull/9265)
* [OCPBUGS-48119](https://issues.redhat.com/browse/OCPBUGS-48119): Always set AllowCrossTenantReplication parameter to false [#9346](https://github.com/openshift/installer/pull/9346)
* [OCPBUGS-46432](https://issues.redhat.com/browse/OCPBUGS-46432): Power VS: Create region-zone-sysType hierarchy [#9319](https://github.com/openshift/installer/pull/9319)
* [OCPBUGS-46360](https://issues.redhat.com/browse/OCPBUGS-46360): aws: add ec2:AllocateAddress perm requirement. [#9313](https://github.com/openshift/installer/pull/9313)
* no-jira: Collect bootstrap logs when control plane provisioning fails [#9308](https://github.com/openshift/installer/pull/9308)
* [OCPBUGS-45726](https://issues.redhat.com/browse/OCPBUGS-45726): IBMCloud: Add service overrides [#9267](https://github.com/openshift/installer/pull/9267)
* [OCPBUGS-42117](https://issues.redhat.com/browse/OCPBUGS-42117): Remove destroy search for regional target tcp proxies [#9025](https://github.com/openshift/installer/pull/9025)
* [OCPBUGS-45484](https://issues.redhat.com/browse/OCPBUGS-45484): PowerVS: Listen to machineNetwork [#9271](https://github.com/openshift/installer/pull/9271)
* [OCPBUGS-44848](https://issues.redhat.com/browse/OCPBUGS-44848): aws: user right perm for untagging BYO IAM profiles [#9228](https://github.com/openshift/installer/pull/9228)
* [OCPBUGS-45276](https://issues.redhat.com/browse/OCPBUGS-45276): Bump Azure Machine Timeout [#9257](https://github.com/openshift/installer/pull/9257)
* [ARO-12457](https://issues.redhat.com/browse/ARO-12457): Include bootstrap docker config file in go module [#9258](https://github.com/openshift/installer/pull/9258)
* [OCPBUGS-43047](https://issues.redhat.com/browse/OCPBUGS-43047): fix slice init length [#9089](https://github.com/openshift/installer/pull/9089)
* [OCPBUGS-43800](https://issues.redhat.com/browse/OCPBUGS-43800): pkg/asset/installconfig/azure: send full certifcate chain [#9140](https://github.com/openshift/installer/pull/9140)
* [CORS-3753](https://issues.redhat.com/browse/CORS-3753): Allow mocking of the Azure client everywhere [#9219](https://github.com/openshift/installer/pull/9219)
* [OCPBUGS-44611](https://issues.redhat.com/browse/OCPBUGS-44611): [release-4.17] capi/aws: set Node Port Service CIDR override [#9209](https://github.com/openshift/installer/pull/9209)
* [Full changelog](https://github.com/openshift/installer/compare/77b3f596ded29b413a09cf0b1ebea647f17bb68b...cc9298dfa71993ca8a86e4514641622acf18bcbd)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/6e7aa77e5e144adc97b498ada5a6ab400f97ca39)

* [OCPBUGS-46646](https://issues.redhat.com/browse/OCPBUGS-46646): Bump x/net to 0.33.0 [#225](https://github.com/openshift/cluster-api-provider-baremetal/pull/225)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/2549061c570a7ff152c66322978bb142647b8b4e...6e7aa77e5e144adc97b498ada5a6ab400f97ca39)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/ae1bd9e4a75b8ab617a569e5c8e1a0d7285a16f6)

* [OCPBUGS-45344](https://issues.redhat.com/browse/OCPBUGS-45344): additional rbac policy rules [#1937](https://github.com/openshift/oc/pull/1937)
* [OCPBUGS-45517](https://issues.redhat.com/browse/OCPBUGS-45517): add retry in case of image pull error [#1940](https://github.com/openshift/oc/pull/1940)
* [OCPBUGS-44508](https://issues.redhat.com/browse/OCPBUGS-44508): Show node-joiner container logs when error occurs [#1912](https://github.com/openshift/oc/pull/1912)
* [OCPBUGS-44830](https://issues.redhat.com/browse/OCPBUGS-44830): Fix newapp unit test failure by using different image [#1913](https://github.com/openshift/oc/pull/1913)
* [Full changelog](https://github.com/openshift/oc/compare/dde885f94df59c4816acc36814ffec3b55d4a1ca...ae1bd9e4a75b8ab617a569e5c8e1a0d7285a16f6)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/a046a6fe8bdedd2744946d5eeffffd13327e6ac6)

* [OCPBUGS-47071](https://issues.redhat.com/browse/OCPBUGS-47071): golang.org/x/net v0.33.0 [#804](https://github.com/openshift/cloud-credential-operator/pull/804)
* [OCPBUGS-45938](https://issues.redhat.com/browse/OCPBUGS-45938): Add AWS region to aws-pod-identity-webhook [#799](https://github.com/openshift/cloud-credential-operator/pull/799)
* [OCPBUGS-45006](https://issues.redhat.com/browse/OCPBUGS-45006): Add retry to ccoctl gcp create functions [#793](https://github.com/openshift/cloud-credential-operator/pull/793)
* [OCPBUGS-45001](https://issues.redhat.com/browse/OCPBUGS-45001): github.com/golang-jwt/jwt/v4 v4.5.1 [#787](https://github.com/openshift/cloud-credential-operator/pull/787)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/a836d6794373f8c2f69cef842e5a9f3d92556abe...a046a6fe8bdedd2744946d5eeffffd13327e6ac6)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/db8cb6812faa09b840d67d16a55277c2f4835ba3)

* [OCPBUGS-45147](https://issues.redhat.com/browse/OCPBUGS-45147): [release-4.17] VPA: Update OWNERS file [#324](https://github.com/openshift/kubernetes-autoscaler/pull/324)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/9a013d5c1fb2b1a6332d371f882a0cbfee13a0d4...db8cb6812faa09b840d67d16a55277c2f4835ba3)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/ea4a88786cf9b237dc446e01fdacd6fd65b73144)

* [OCPBUGS-45929](https://issues.redhat.com/browse/OCPBUGS-45929): set max soft bulk taint count to zero [#337](https://github.com/openshift/cluster-autoscaler-operator/pull/337)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/99b23ded9fb70aa29622d0f6c4254e54c51d2813...ea4a88786cf9b237dc446e01fdacd6fd65b73144)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/6dd70ba593f5e8050b5c77fa658cdb3d0c06f4f6)

* [OCPBUGS-48493](https://issues.redhat.com/browse/OCPBUGS-48493): fix: always update clusteroperator status versions when differing [#250](https://github.com/openshift/cluster-capi-operator/pull/250)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/f4bca806981f51160b5e5d69aa87d6e3cee15dac...6dd70ba593f5e8050b5c77fa658cdb3d0c06f4f6)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/ab40b61142a30f21eec8301b2e98f2fafb25164b)

* [OCPBUGS-46593](https://issues.redhat.com/browse/OCPBUGS-46593): "gracefully" shutdown KSVM pod. [#123](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/123)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/a0d27f3f04cb61084fef767c2df5bcc7b3db2d27...ab40b61142a30f21eec8301b2e98f2fafb25164b)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/acc2380eb52e4f83ba07f9d04b44a36cbc47a48c)

* [OCPBUGS-48155](https://issues.redhat.com/browse/OCPBUGS-48155): Fix race condition in CO status controller test [#266](https://github.com/openshift/cluster-machine-approver/pull/266)
* [OCPBUGS-46429](https://issues.redhat.com/browse/OCPBUGS-46429): Filter CSRs by signerName [#261](https://github.com/openshift/cluster-machine-approver/pull/261)
* [OCPBUGS-45918](https://issues.redhat.com/browse/OCPBUGS-45918): Ensure trailing dots on DNS names do not block serving cert auth [#256](https://github.com/openshift/cluster-machine-approver/pull/256)
* [OCPBUGS-45918](https://issues.redhat.com/browse/OCPBUGS-45918): Client internal DNS checks should ignore trailing dot [#250](https://github.com/openshift/cluster-machine-approver/pull/250)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/32c847111e45313f34d615196d00aeeffd50a281...acc2380eb52e4f83ba07f9d04b44a36cbc47a48c)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/ff3a4f0218f4985874f2ab872f6f6f440a38e17d)

* [OCPBUGS-44971](https://issues.redhat.com/browse/OCPBUGS-44971): Add new metrics for OpenShift logging telemetry [#2526](https://github.com/openshift/cluster-monitoring-operator/pull/2526)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/15bded36cc8392cd88e28634b8b63dd83934867c...ff3a4f0218f4985874f2ab872f6f6f440a38e17d)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/37be1f8c3b4296048a2bd385ffc6636fc3603f38)

* [OCPBUGS-43714](https://issues.redhat.com/browse/OCPBUGS-43714): Skip including default crypto policies to avoid authby issue [#2597](https://github.com/openshift/cluster-network-operator/pull/2597)
* [OCPBUGS-46146](https://issues.redhat.com/browse/OCPBUGS-46146): Remove ip xfrm state when IPsec is disabled [#2594](https://github.com/openshift/cluster-network-operator/pull/2594)
* [OCPBUGS-44415](https://issues.redhat.com/browse/OCPBUGS-44415): Pass transit_switch_subnet options in ovnkube-node pod [#2561](https://github.com/openshift/cluster-network-operator/pull/2561)
* [OCPBUGS-44807](https://issues.redhat.com/browse/OCPBUGS-44807), [SDN-4930](https://issues.redhat.com/browse/SDN-4930), [SDN-5297](https://issues.redhat.com/browse/SDN-5297): OVN-Kubernetes node RBAC tightening [#2568](https://github.com/openshift/cluster-network-operator/pull/2568)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/3f16413f4358f12d36e8fe60484c33654a24e95c...37be1f8c3b4296048a2bd385ffc6636fc3603f38)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/271091eff912d41ac94fc74813d1631276921ffc)

* [OCPBUGS-43664](https://issues.redhat.com/browse/OCPBUGS-43664): Add vendor and architecture specific tuning options (#1191) [#1191](https://github.com/openshift/cluster-node-tuning-operator/pull/1191)
* [OCPBUGS-44644](https://issues.redhat.com/browse/OCPBUGS-44644): cmd: PPC: support tolerating heterogeneous core IDs (#1252) [#1252](https://github.com/openshift/cluster-node-tuning-operator/pull/1252)
* [OCPBUGS-45264](https://issues.redhat.com/browse/OCPBUGS-45264): Normalize cpu sets when rendering to Tuned profiles (#1238) (#1248) [#1238](https://github.com/openshift/cluster-node-tuning-operator/pull/1238)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/222249d39165d5ed01702e70f2e32e61483ee2ae...271091eff912d41ac94fc74813d1631276921ffc)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/b05a249d6919978217aefa7060951af078eac931)

* [OCPBUGS-47770](https://issues.redhat.com/browse/OCPBUGS-47770): Add team members to the OWNERS file [#375](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/375)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/2b962c71d5b3ac179898dc1ece6a98de0b33cd70...b05a249d6919978217aefa7060951af078eac931)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/5683ea22810815595761ff9e5309c656a7392125)

* [OCPBUGS-44997](https://issues.redhat.com/browse/OCPBUGS-44997): Fix PodStartupStorageOperationsFailing alert [#543](https://github.com/openshift/cluster-storage-operator/pull/543)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/bb40448723a3906ab80250e4601d431b66499f50...5683ea22810815595761ff9e5309c656a7392125)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/bc60dbd5f73b9f0548f0bb3aef0468a630362dce)

* [OCPBUGS-39558](https://issues.redhat.com/browse/OCPBUGS-39558): Filter out shallowly `UpdateEffectNone` errors from a `MultipleErrors` message in the Failing condition [#1114](https://github.com/openshift/cluster-version-operator/pull/1114)
* [OCPBUGS-45328](https://issues.redhat.com/browse/OCPBUGS-45328): deps: bump golang.org/x/net to 0.31.0 [#1117](https://github.com/openshift/cluster-version-operator/pull/1117)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/8c3b8082fe109c24c23894635428549cab5be26c...bc60dbd5f73b9f0548f0bb3aef0468a630362dce)


### [console](https://github.com/openshift/console/tree/67982c0234af2dc6f83f16e2f661a05d8835f273)

* [OCPBUGS-48161](https://issues.redhat.com/browse/OCPBUGS-48161): ERROR in search tool: Cannot read properties of undefined (reading 'state') [#14667](https://github.com/openshift/console/pull/14667)
* [OCPBUGS-48227](https://issues.redhat.com/browse/OCPBUGS-48227): fix navigation from non-General User Preference tab to… [#14674](https://github.com/openshift/console/pull/14674)
* [OCPBUGS-41672](https://issues.redhat.com/browse/OCPBUGS-41672): Update vendor imports to include all PatternFly components [#14272](https://github.com/openshift/console/pull/14272)
* [OCPBUGS-46344](https://issues.redhat.com/browse/OCPBUGS-46344): OCP web console show pod status as Init:0/1 after using Native sidecars [#14616](https://github.com/openshift/console/pull/14616)
* [OCPBUGS-47497](https://issues.redhat.com/browse/OCPBUGS-47497): Getting `Oh no, something went wrong` error when trying to install operator. [#14645](https://github.com/openshift/console/pull/14645)
* [OCPBUGS-43673](https://issues.redhat.com/browse/OCPBUGS-43673): Disable GQL introspection [#14640](https://github.com/openshift/console/pull/14640)
* [OCPBUGS-45949](https://issues.redhat.com/browse/OCPBUGS-45949): ReRun of Resolver based PipelineRuns fails from UI [#14605](https://github.com/openshift/console/pull/14605)
* [OCPBUGS-45954](https://issues.redhat.com/browse/OCPBUGS-45954): Fixed capitalization in OpenShift Lightspeed [#14607](https://github.com/openshift/console/pull/14607)
* [OCPBUGS-45948](https://issues.redhat.com/browse/OCPBUGS-45948): ImagePullSecret getting duplicated when editing DeploymentConfig in Form View [#14604](https://github.com/openshift/console/pull/14604)
* [OCPBUGS-45667](https://issues.redhat.com/browse/OCPBUGS-45667): Do not pass CSV name to operand list page when an exen… [#14591](https://github.com/openshift/console/pull/14591)
* [OCPBUGS-46000](https://issues.redhat.com/browse/OCPBUGS-46000): The description and name for GCP Pool ID is not consist [#14611](https://github.com/openshift/console/pull/14611)
* [OCPBUGS-42558](https://issues.redhat.com/browse/OCPBUGS-42558): Plugins that use very old PF4 dropdown or menu components with grouped items have bullets and padding that needs to be removed. [#14344](https://github.com/openshift/console/pull/14344)
* [OCPBUGS-44656](https://issues.redhat.com/browse/OCPBUGS-44656): update ConditionalUpdates release type [#14505](https://github.com/openshift/console/pull/14505)
* [OCPBUGS-43888](https://issues.redhat.com/browse/OCPBUGS-43888): While accessing the node terminal from UI observed 'Warning alert:Admission Webhook Warning` [#14444](https://github.com/openshift/console/pull/14444)
* [OCPBUGS-43441](https://issues.redhat.com/browse/OCPBUGS-43441): fix table combination [#14546](https://github.com/openshift/console/pull/14546)
* [OCPBUGS-44169](https://issues.redhat.com/browse/OCPBUGS-44169): use TaskRuns results.tekton.dev/record annotation to get the logs [#14538](https://github.com/openshift/console/pull/14538)
* [OCPBUGS-44873](https://issues.redhat.com/browse/OCPBUGS-44873): Unable to remove finally tasks in pipeline builder mode [#14527](https://github.com/openshift/console/pull/14527)
* [OCPBUGS-42791](https://issues.redhat.com/browse/OCPBUGS-42791): Add missing pipelines plugin name to known plugins [#14377](https://github.com/openshift/console/pull/14377)
* [OCPBUGS-44699](https://issues.redhat.com/browse/OCPBUGS-44699): Add multiline support to template instantiation [#14508](https://github.com/openshift/console/pull/14508)
* [OCPBUGS-44183](https://issues.redhat.com/browse/OCPBUGS-44183): Remove ClusterTask dependency in console from Pipelines 1.17 [#14512](https://github.com/openshift/console/pull/14512)
* [OCPBUGS-44764](https://issues.redhat.com/browse/OCPBUGS-44764): Add IBM Block Storage CSI driver support for RWX [#14517](https://github.com/openshift/console/pull/14517)
* [Full changelog](https://github.com/openshift/console/compare/f7ad40e27f0c6e416f3defd3a0094919e2428ad1...67982c0234af2dc6f83f16e2f661a05d8835f273)


### [console-operator](https://github.com/openshift/console-operator/tree/253854e7e529fb42e90b71038eff4aabf8f31cf7)

* [OCPBUGS-45302](https://issues.redhat.com/browse/OCPBUGS-45302): console/status: set initial value of Message field [#943](https://github.com/openshift/console-operator/pull/943)
* [OCPBUGS-46390](https://issues.redhat.com/browse/OCPBUGS-46390): Dont disable console when authConfig type is set to None [#951](https://github.com/openshift/console-operator/pull/951)
* [Full changelog](https://github.com/openshift/console-operator/compare/f41009e8511cf5a042ca81d18e44137b7d11ba05...253854e7e529fb42e90b71038eff4aabf8f31cf7)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/52264d6c73dd33d413263969b0c7f6ee795667d3)

* [OCPBUGS-43427](https://issues.redhat.com/browse/OCPBUGS-43427): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.30 into release-4.17 [#314](https://github.com/openshift/cloud-provider-openstack/pull/314)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/f5b13c522e62538892fa90e1e5ddc89fc31dc538...52264d6c73dd33d413263969b0c7f6ee795667d3)


### [docker-builder](https://github.com/openshift/builder/tree/a7531531bef4c1a5ef05d877a00cb07afcb669ef)

* [OCPBUGS-33889](https://issues.redhat.com/browse/OCPBUGS-33889): Updating openshift-enterprise-builder-container image to be consistent with ART for 4.17 [#393](https://github.com/openshift/builder/pull/393)
* [OCPBUGS-47768](https://issues.redhat.com/browse/OCPBUGS-47768): Add team members to the OWNERS file [#423](https://github.com/openshift/builder/pull/423)
* [OCPBUGS-47712](https://issues.redhat.com/browse/OCPBUGS-47712): skipping some unit tests to avoid failures as they are duplicate [#421](https://github.com/openshift/builder/pull/421)
* [Full changelog](https://github.com/openshift/builder/compare/5dec103fe7e811afc7d6886db94c6ffdbfa77c56...a7531531bef4c1a5ef05d877a00cb07afcb669ef)


### [etcd, installer-etcd-artifacts](https://github.com/openshift/etcd/tree/23c5a247c3e601f7806a0bbffdc6d201a55bf469)

* NO-ISSUE: Add support for cachi2 based deps [#297](https://github.com/openshift/etcd/pull/297)
* [Full changelog](https://github.com/openshift/etcd/compare/c82057da87388662904654d4f01acd06595ee22d...23c5a247c3e601f7806a0bbffdc6d201a55bf469)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/3a27d3ce75bab31b9a04c212c929db8d507f3962)

* [OCPBUGS-48064](https://issues.redhat.com/browse/OCPBUGS-48064): Refactor exists() to handle gcp API change [#105](https://github.com/openshift/machine-api-provider-gcp/pull/105)
* [OCPBUGS-46082](https://issues.redhat.com/browse/OCPBUGS-46082): update a2 gpu detection logic to be dynamic [#100](https://github.com/openshift/machine-api-provider-gcp/pull/100)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/0d6fbdb09401bcdf1a6da8dc07842732bc8e95ff...3a27d3ce75bab31b9a04c212c929db8d507f3962)


### [hyperkube, installer-kube-apiserver-artifacts, pod](https://github.com/openshift/kubernetes/tree/f868289cea8577c895fa957b466f209b9af6a1a2)

* : OCPBUGS-46364: Fix grace period used for immediate evictions [#2164](https://github.com/openshift/kubernetes/pull/2164)
* [OCPBUGS-46002](https://issues.redhat.com/browse/OCPBUGS-46002): Bump k8s api to 1.30.7 [#2160](https://github.com/openshift/kubernetes/pull/2160)
* [OCPBUGS-39318](https://issues.redhat.com/browse/OCPBUGS-39318): UPSTREAM: 126994: Add required FieldManager for validatingadmissionpolicy e2e [#2070](https://github.com/openshift/kubernetes/pull/2070)
* [OCPBUGS-43820](https://issues.redhat.com/browse/OCPBUGS-43820): UPSTREAM: <carry>: kubelet/cm: fix bug where kubelet restarts from missing cpuset cgroup [#2126](https://github.com/openshift/kubernetes/pull/2126)
* [OCPBUGS-44897](https://issues.redhat.com/browse/OCPBUGS-44897): Backport format library to enable usage in 4.18 [#2140](https://github.com/openshift/kubernetes/pull/2140)
* [Full changelog](https://github.com/openshift/kubernetes/compare/5a24e858060a609366c5ff1402ec1424e9f7e403...f868289cea8577c895fa957b466f209b9af6a1a2)


### [hypershift](https://github.com/openshift/hypershift/tree/8de00ceaa126f2be60caf8877135d544e698a564)

* NO-JIRA: Update dependency mkdocs-mermaid2-plugin to v1.2.1 (release-4.17) [#5428](https://github.com/openshift/hypershift/pull/5428)
* NO-JIRA: Update dependency mkdocs-material to v9.5.50 (release-4.17) [#5427](https://github.com/openshift/hypershift/pull/5427)
* [OCPBUGS-44927](https://issues.redhat.com/browse/OCPBUGS-44927): Add multi-arch validation for HC/NodePool compatibility [#5238](https://github.com/openshift/hypershift/pull/5238)
* NO-JIRA:  [release-4.17] Bump golang.org/x/crypto and golang.org/x/net [#5368](https://github.com/openshift/hypershift/pull/5368)
* NO-JIRA: Update Konflux references (release-4.17) [#5329](https://github.com/openshift/hypershift/pull/5329)
* [OCPBUGS-46412](https://issues.redhat.com/browse/OCPBUGS-46412): Separate CPO containerfiles [#5285](https://github.com/openshift/hypershift/pull/5285)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5289](https://github.com/openshift/hypershift/pull/5289)
* NO-JIRA: chore(deps): update dependency mkdocs to v1.6.1 (release-4.17) [#5290](https://github.com/openshift/hypershift/pull/5290)
* [OCPBUGS-44114](https://issues.redhat.com/browse/OCPBUGS-44114): Add external kas address to no proxy skip list [#5028](https://github.com/openshift/hypershift/pull/5028)
* NO-JIRA: Red Hat Konflux update hypershift-release-mce-28 [#5174](https://github.com/openshift/hypershift/pull/5174)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5249](https://github.com/openshift/hypershift/pull/5249)
* [OCPBUGS-44630](https://issues.redhat.com/browse/OCPBUGS-44630): Use ingress role in private link controller for DNS operations [#5142](https://github.com/openshift/hypershift/pull/5142)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5183](https://github.com/openshift/hypershift/pull/5183)
* [Full changelog](https://github.com/openshift/hypershift/compare/680a489270b53fd700b4e6b660fb9e9bf7be9f63...8de00ceaa126f2be60caf8877135d544e698a564)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/213d34ddedaebc23bd409ff904ecaf9eaa62c517)

* [OCPBUGS-44880](https://issues.redhat.com/browse/OCPBUGS-44880): Fetch service instance id from spec of IBMPowerVSCluster object while setting provider id [#94](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/94)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/a2beaa303d4ebaa0cfc5137153a90328d8d5fff0...213d34ddedaebc23bd409ff904ecaf9eaa62c517)


### [insights-operator](https://github.com/openshift/insights-operator/tree/2b1e2df05f67be7567d234f4150076a5aefd4ee2)

* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for dataGahtering jobs & pods [#1049](https://github.com/openshift/insights-operator/pull/1049)
* [Full changelog](https://github.com/openshift/insights-operator/compare/714aeb53392b66b4346edbee4b9b7f8c8836b419...2b1e2df05f67be7567d234f4150076a5aefd4ee2)


### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/e870adbd46e2b0f9afa88227f951b37d5ba4dc0c)

* : OCPBUGS-46491: Disable HTTP2 [#40](https://github.com/openshift/kubernetes-metrics-server/pull/40)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/28b10b8fcc2d21fb323e79afeb46301d0c3c6e9c...e870adbd46e2b0f9afa88227f951b37d5ba4dc0c)


### [kube-proxy](https://github.com/openshift/sdn/tree/dee082def2014ab85a0e5ff9a056d3fe2461eab7)

* [OCPBUGS-43807](https://issues.redhat.com/browse/OCPBUGS-43807): Revendor to a patched k/k with our prefer-local-DNS hack [#640](https://github.com/openshift/sdn/pull/640)
* [Full changelog](https://github.com/openshift/sdn/compare/307a0b2cdd1d5e97830e940d95ba9985e80f5d19...dee082def2014ab85a0e5ff9a056d3fe2461eab7)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/191a28d831b1f9493b54a25a3c75babd310bede5)

* [OCPBUGS-43851](https://issues.redhat.com/browse/OCPBUGS-43851): vSphere klog initialization preventing verbose log messages [#1302](https://github.com/openshift/machine-api-operator/pull/1302)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/139064c02af33d94baa669cce30967bfea534d13...191a28d831b1f9493b54a25a3c75babd310bede5)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/3594c4b2eb42d8c9e56a146baea52d9c147721b0)

* [OCPBUGS-47475](https://issues.redhat.com/browse/OCPBUGS-47475): Pausing Master MCP results in Alerts [#4769](https://github.com/openshift/machine-config-operator/pull/4769)
* [OCPBUGS-47802](https://issues.redhat.com/browse/OCPBUGS-47802): OCPBUGS-47801: trying to wait for sub-controllers [#4775](https://github.com/openshift/machine-config-operator/pull/4775)
* [OCPBUGS-38292](https://issues.redhat.com/browse/OCPBUGS-38292): controller: default to runc when upgrading clusters from 4.17 to 4.18 [#4715](https://github.com/openshift/machine-config-operator/pull/4715)
* [OCPBUGS-45918](https://issues.redhat.com/browse/OCPBUGS-45918): Remove trailing periods from AWS provided hostnames [#4738](https://github.com/openshift/machine-config-operator/pull/4738)
* [OCPBUGS-39223](https://issues.redhat.com/browse/OCPBUGS-39223): Do not enable on-prem-resolv-prepender.path for UPI [#4572](https://github.com/openshift/machine-config-operator/pull/4572)
* [OCPBUGS-38292](https://issues.redhat.com/browse/OCPBUGS-38292): Revert "controller: default to runc when upgrading clusters from 4.17 to 4.18" [#4716](https://github.com/openshift/machine-config-operator/pull/4716)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/fd148574acf50271171c33570a4ba80fd9e9e617...3594c4b2eb42d8c9e56a146baea52d9c147721b0)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/ad057d32fa7e2cf4033f535dc9d68c0a2c49f004)

* [OCPBUGS-44394](https://issues.redhat.com/browse/OCPBUGS-44394): remove unused package and upgrade vulnerable dependency [#271](https://github.com/openshift/monitoring-plugin/pull/271)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/9c9c0a02591a627b194e3966679a6fdbbd7718e5...ad057d32fa7e2cf4033f535dc9d68c0a2c49f004)


### [must-gather](https://github.com/openshift/must-gather/tree/56b34277f6e67963db422373c360509176e5565a)

* [OCPBUGS-48068](https://issues.redhat.com/browse/OCPBUGS-48068): Update owners [#452](https://github.com/openshift/must-gather/pull/452)
* [OCPBUGS-46281](https://issues.redhat.com/browse/OCPBUGS-46281): Support gathering IPsec data [#467](https://github.com/openshift/must-gather/pull/467)
* [Full changelog](https://github.com/openshift/must-gather/compare/d785c127c87271f3f3823d5000e6e4352ac9b88f...56b34277f6e67963db422373c360509176e5565a)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/0244dffb68e2ddbbabcb9a9fc2db7a009597a1dc)

* [OCPBUGS-48267](https://issues.redhat.com/browse/OCPBUGS-48267): UI crash accessing a Service in pending state [#168](https://github.com/openshift/networking-console-plugin/pull/168)
* [OCPBUGS-46553](https://issues.redhat.com/browse/OCPBUGS-46553): fix ports as number instead of strings [#169](https://github.com/openshift/networking-console-plugin/pull/169)
* [OCPBUGS-45876](https://issues.redhat.com/browse/OCPBUGS-45876): Bump nanoid from 3.3.7 to 3.3.8 [#172](https://github.com/openshift/networking-console-plugin/pull/172)
* [OCPBUGS-44140](https://issues.redhat.com/browse/OCPBUGS-44140): Bump dompurify from 2.4.9 to 2.5.8 [#166](https://github.com/openshift/networking-console-plugin/pull/166)
* [OCPBUGS-44397](https://issues.redhat.com/browse/OCPBUGS-44397): OCPBUGS-44679: upgrade packages for cve [#141](https://github.com/openshift/networking-console-plugin/pull/141)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/ffb990b4923b80a001b6544eb3a2197dcd871b98...0244dffb68e2ddbbabcb9a9fc2db7a009597a1dc)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/04782ff30cdc7c11ec12b266a76f83765aaadf34)

* [OCPBUGS-46044](https://issues.redhat.com/browse/OCPBUGS-46044): Update dependencies to address CVE-2024-24786 [#127](https://github.com/openshift/oauth-apiserver/pull/127)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/e37ccb455e1b48d1af032315987baf1e93b4084f...04782ff30cdc7c11ec12b266a76f83765aaadf34)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/3451e8ba203c0facb5c90faf59a1fecc7df06153)

* [OCPBUGS-46659](https://issues.redhat.com/browse/OCPBUGS-46659): Fix oauth-proxy e2e-component tests [#303](https://github.com/openshift/oauth-proxy/pull/303)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/30f8012482023689655252dc2af2f17fe6a09253...3451e8ba203c0facb5c90faf59a1fecc7df06153)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/783f93eb947b3443db2581ace11073eabc5814a9)

* changes the owners file (#1017) [#1017](https://github.com/openshift/oc-mirror/pull/1017)
* [OCPBUGS-48513](https://issues.redhat.com/browse/OCPBUGS-48513): e2e: use same version of crane as in go.mod (#1020) [#1020](https://github.com/openshift/oc-mirror/pull/1020)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/07714b7c836ec3ad1b776f25b44c3b2c2f083aa2...783f93eb947b3443db2581ace11073eabc5814a9)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/70aa014585cd33fc21f27ba20a722c71faf3c411)

* [OCPBUGS-47769](https://issues.redhat.com/browse/OCPBUGS-47769): Add team members to the OWNERS file [#357](https://github.com/openshift/openshift-controller-manager/pull/357)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/f299e54abad2f06a51f95bf40b611a5f1519b31e...70aa014585cd33fc21f27ba20a722c71faf3c411)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/23512b675c57095bc03ac0da8cad39561d6aef9b)

* [OCPBUGS-44455](https://issues.redhat.com/browse/OCPBUGS-44455): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.17 [#342](https://github.com/openshift/cluster-api-provider-openstack/pull/342)
* [OCPBUGS-44959](https://issues.redhat.com/browse/OCPBUGS-44959): Makefile changes for merge-bot [#340](https://github.com/openshift/cluster-api-provider-openstack/pull/340)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/d17a4a051a39095deb3fc781efee4a565d970a1a...23512b675c57095bc03ac0da8cad39561d6aef9b)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/b31ed59e501aa4853c29126af6857d3639498b7b)

* [OCPBUGS-46598](https://issues.redhat.com/browse/OCPBUGS-46598): catalog-operator: Delete Pods that were evicted (#3459) [#922](https://github.com/openshift/operator-framework-olm/pull/922)
* [OCPBUGS-46054](https://issues.redhat.com/browse/OCPBUGS-46054): CRD upgrade existing CR validation fix [#913](https://github.com/openshift/operator-framework-olm/pull/913)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/649dfc4dc0a7fca1c25c7678665a55ad8ce53040...b31ed59e501aa4853c29126af6857d3639498b7b)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/d60fad7b368831724701ebc90f6581a554eb673f)

* [OCPBUGS-47506](https://issues.redhat.com/browse/OCPBUGS-47506): Let OVN-northd bind remote ports [#2404](https://github.com/openshift/ovn-kubernetes/pull/2404)
* [OCPBUGS-45953](https://issues.redhat.com/browse/OCPBUGS-45953): bump OVS version to 3.4.0-18 [#2393](https://github.com/openshift/ovn-kubernetes/pull/2393)
* [OCPBUGS-45312](https://issues.redhat.com/browse/OCPBUGS-45312): pin libreswan to 4.6-3.el9_0.3 [#2384](https://github.com/openshift/ovn-kubernetes/pull/2384)
* [OCPBUGS-45339](https://issues.redhat.com/browse/OCPBUGS-45339): Dockerfile: Update OVN to the 24.03.2-32.el9fdp minor release. [#2376](https://github.com/openshift/ovn-kubernetes/pull/2376)
* [OCPBUGS-43454](https://issues.redhat.com/browse/OCPBUGS-43454): Ignore cluster manager topology not managed errors for localnet with no subnets [#2362](https://github.com/openshift/ovn-kubernetes/pull/2362)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/01d8c97267775c0212c64e6d5ddc176c9354eae8...d60fad7b368831724701ebc90f6581a554eb673f)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/77cedd6cfe2eda65c7bb1f0a87c249c2bc46b867)

* [OCPBUGS-48069](https://issues.redhat.com/browse/OCPBUGS-48069): fix: validate smtp smarthost and smtp from fields [#323](https://github.com/openshift/prometheus-operator/pull/323)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/16f1cb003f65bf11b2a0a9a9ff9f9450eb7f249c...77cedd6cfe2eda65c7bb1f0a87c249c2bc46b867)


### [tests](https://github.com/openshift/origin/tree/59c37e9cf01bb13bb96b13b8a28d970003caa25b)

* [OCPBUGS-48459](https://issues.redhat.com/browse/OCPBUGS-48459), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): ovn-k, udn crd e2e: Fix status report consumer assertion [#29301](https://github.com/openshift/origin/pull/29301)
* [OCPBUGS-48345](https://issues.redhat.com/browse/OCPBUGS-48345): Add team members to the OWNERS file for PR approvals [#29430](https://github.com/openshift/origin/pull/29430)
* [OCPBUGS-48188](https://issues.redhat.com/browse/OCPBUGS-48188): Fixing build s2i ruby test data inline with latest ruby version(>=3.0) [#29409](https://github.com/openshift/origin/pull/29409)
* : OCPBUGS-48093: fix unit test for compare against string [#29405](https://github.com/openshift/origin/pull/29405)
* [OCPBUGS-44190](https://issues.redhat.com/browse/OCPBUGS-44190): Fix UnexpectedNodeNotReady and UnexpectedNodeUnreachable [#29306](https://github.com/openshift/origin/pull/29306)
* [OCPBUGS-43576](https://issues.redhat.com/browse/OCPBUGS-43576), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): Don't modify pod routes in tests [#29250](https://github.com/openshift/origin/pull/29250)
* [Full changelog](https://github.com/openshift/origin/compare/b250e34f70e146f967abbae993bc350241bdd4a6...59c37e9cf01bb13bb96b13b8a28d970003caa25b)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/097d823bd10abbc6cd016c34a1c5c3cd1b514031)

* [OCPBUGS-43432](https://issues.redhat.com/browse/OCPBUGS-43432): update check-fmt goimports command [#78](https://github.com/openshift/cloud-provider-vsphere/pull/78)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/07abced061d16b906b19d1eb49f9bea5c2c77662...097d823bd10abbc6cd016c34a1c5c3cd1b514031)