Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.17.0-okd-scos.1

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable
  • upgrade-minor Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable

Upgrades from:

• 4.17.0-okd-scos.ec.4 - Success
• 4.17.0-okd-scos.0 (changes) - Success
• 4.16.0-okd-scos.1 (changes) - Success

---

Loading changelog, this may take a while ...

Changes from 4.17.0-okd-scos.ec.4

Created: 2024-12-30 22:21:38 +0000 UTC

Image Digest: sha256:ca4b9a8ebeb0cb7433751726729116fcea12f577eeff1d0b474e43dda828cd09

Release 4.17.0-okd-scos.1 was created from registry.ci.openshift.org/origin/release-scos:4.17.0-0.okd-scos-2024-12-29-210400

Components

• Kubectl 1.30.5
• Kubernetes upgraded from 1.30.6 to 1.30.7
• Kubernetes Tests 1.30.0
• CentOS Stream CoreOS upgraded from 417.9.202411212033-0 to 417.9.202412292032-0 (diff)

Rebuilt images without code change

• stream-coreos sha256:4027bd5d28bd5ee9fb655909069ce145af5b0e63544f99dc8410f8df4f627db0
• stream-coreos-extensions sha256:69ead54fd4a2346c2839ae80bab070d23b23ec023fc22baa141290477dd29c8d

agent-installer-csr-approver, agent-installer-orchestrator

• OCPBUGS-44904: Rhcos fails to reboot for skip mco reboot on s390x (#942) #942
• Full changelog

aws-machine-controllers

• OCPBUGS-45186: fix Associate*IpAddress flag when launch EC2 #118
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPBUGS-46039: Prevent panic when informer receives cache.DeletedFinalStateUnknown #132
• Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

• OCPBUGS-46360: aws: add ec2:AllocateAddress perm requirement. #9313
• no-jira: Collect bootstrap logs when control plane provisioning fails #9308
• OCPBUGS-45726: IBMCloud: Add service overrides #9267
• OCPBUGS-42117: Remove destroy search for regional target tcp proxies #9025
• OCPBUGS-45484: PowerVS: Listen to machineNetwork #9271
• OCPBUGS-44848: aws: user right perm for untagging BYO IAM profiles #9228
• OCPBUGS-45276: Bump Azure Machine Timeout #9257
• ARO-12457: Include bootstrap docker config file in go module #9258
• OCPBUGS-43047: fix slice init length #9089
• OCPBUGS-43800: pkg/asset/installconfig/azure: send full certifcate chain #9140
• CORS-3753: Allow mocking of the Azure client everywhere #9219
• OCPBUGS-44611: [release-4.17] capi/aws: set Node Port Service CIDR override #9209
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-45517: add retry in case of image pull error #1940
• OCPBUGS-44508: Show node-joiner container logs when error occurs #1912
• OCPBUGS-44830: Fix newapp unit test failure by using different image #1913
• Full changelog

cloud-credential-operator

• OCPBUGS-45938: Add AWS region to aws-pod-identity-webhook #799
• OCPBUGS-45006: Add retry to ccoctl gcp create functions #793
• OCPBUGS-45001: github.com/golang-jwt/jwt/v4 v4.5.1 #787
• Full changelog

cluster-autoscaler

• OCPBUGS-45147: [release-4.17] VPA: Update OWNERS file #324
• Full changelog

cluster-autoscaler-operator

• OCPBUGS-45929: set max soft bulk taint count to zero #337
• Full changelog

cluster-kube-storage-version-migrator-operator

• OCPBUGS-46593: “gracefully” shutdown KSVM pod. #123
• Full changelog

cluster-machine-approver

• OCPBUGS-45918: Ensure trailing dots on DNS names do not block serving cert auth #256
• OCPBUGS-45918: Client internal DNS checks should ignore trailing dot #250
• Full changelog

cluster-monitoring-operator

• OCPBUGS-44971: Add new metrics for OpenShift logging telemetry #2526
• Full changelog

cluster-network-operator

• OCPBUGS-43714: Skip including default crypto policies to avoid authby issue #2597
• OCPBUGS-46146: Remove ip xfrm state when IPsec is disabled #2594
• OCPBUGS-44415: Pass transit_switch_subnet options in ovnkube-node pod #2561
• OCPBUGS-44807, SDN-4930, SDN-5297: OVN-Kubernetes node RBAC tightening #2568
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-43664: Add vendor and architecture specific tuning options (#1191) #1191
• OCPBUGS-44644: cmd: PPC: support tolerating heterogeneous core IDs (#1252) #1252
• OCPBUGS-45264: Normalize cpu sets when rendering to Tuned profiles (#1238) (#1248) #1238
• Full changelog

cluster-storage-operator

• OCPBUGS-44997: Fix PodStartupStorageOperationsFailing alert #543
• Full changelog

cluster-version-operator

• OCPBUGS-39558: Filter out shallowly UpdateEffectNone errors from a MultipleErrors message in the Failing condition #1114
• OCPBUGS-45328: deps: bump golang.org/x/net to 0.31.0 #1117
• Full changelog

console

• OCPBUGS-45949: ReRun of Resolver based PipelineRuns fails from UI #14605
• OCPBUGS-45954: Fixed capitalization in OpenShift Lightspeed #14607
• OCPBUGS-45948: ImagePullSecret getting duplicated when editing DeploymentConfig in Form View #14604
• OCPBUGS-45667: Do not pass CSV name to operand list page when an exen… #14591
• OCPBUGS-46000: The description and name for GCP Pool ID is not consist #14611
• OCPBUGS-42558: Plugins that use very old PF4 dropdown or menu components with grouped items have bullets and padding that needs to be removed. #14344
• OCPBUGS-44656: update ConditionalUpdates release type #14505
• OCPBUGS-43888: While accessing the node terminal from UI observed ‘Warning alert:Admission Webhook Warning` #14444
• OCPBUGS-43441: fix table combination #14546
• OCPBUGS-44169: use TaskRuns results.tekton.dev/record annotation to get the logs #14538
• OCPBUGS-44873: Unable to remove finally tasks in pipeline builder mode #14527
• OCPBUGS-42791: Add missing pipelines plugin name to known plugins #14377
• OCPBUGS-44699: Add multiline support to template instantiation #14508
• OCPBUGS-44183: Remove ClusterTask dependency in console from Pipelines 1.17 #14512
• OCPBUGS-44764: Add IBM Block Storage CSI driver support for RWX #14517
• Full changelog

console-operator

• OCPBUGS-46390: Dont disable console when authConfig type is set to None #951
• Full changelog

etcd, installer-etcd-artifacts

• NO-ISSUE: Add support for cachi2 based deps #297
• Full changelog

gcp-machine-controllers

• OCPBUGS-46082: update a2 gpu detection logic to be dynamic #100
• Full changelog

hyperkube, installer-kube-apiserver-artifacts, pod

• : OCPBUGS-46364: Fix grace period used for immediate evictions #2164
• OCPBUGS-46002: Bump k8s api to 1.30.7 #2160
• OCPBUGS-39318: UPSTREAM: 126994: Add required FieldManager for validatingadmissionpolicy e2e #2070
• OCPBUGS-43820: UPSTREAM: <carry>: kubelet/cm: fix bug where kubelet restarts from missing cpuset cgroup #2126
• OCPBUGS-44897: Backport format library to enable usage in 4.18 #2140
• Full changelog

hypershift

• OCPBUGS-46412: Separate CPO containerfiles #5285
• NO-JIRA: chore(deps): update konflux references (release-4.17) #5289
• NO-JIRA: chore(deps): update dependency mkdocs to v1.6.1 (release-4.17) #5290
• OCPBUGS-44114: Add external kas address to no proxy skip list #5028
• NO-JIRA: Red Hat Konflux update hypershift-release-mce-28 #5174
• NO-JIRA: chore(deps): update konflux references (release-4.17) #5249
• OCPBUGS-44630: Use ingress role in private link controller for DNS operations #5142
• NO-JIRA: chore(deps): update konflux references (release-4.17) #5183
• Full changelog

ibmcloud-cluster-api-controllers

• OCPBUGS-44880: Fetch service instance id from spec of IBMPowerVSCluster object while setting provider id #94
• Full changelog

insights-operator

• AUTH-482: set required-scc for dataGahtering jobs & pods #1049
• Full changelog

kube-metrics-server

• : OCPBUGS-46491: Disable HTTP2 #40
• Full changelog

kube-proxy

• OCPBUGS-43807: Revendor to a patched k/k with our prefer-local-DNS hack #640
• Full changelog

machine-api-operator

• OCPBUGS-43851: vSphere klog initialization preventing verbose log messages #1302
• Full changelog

machine-config-operator

• OCPBUGS-38292: controller: default to runc when upgrading clusters from 4.17 to 4.18 #4715
• OCPBUGS-45918: Remove trailing periods from AWS provided hostnames #4738
• OCPBUGS-39223: Do not enable on-prem-resolv-prepender.path for UPI #4572
• OCPBUGS-38292: Revert “controller: default to runc when upgrading clusters from 4.17 to 4.18” #4716
• Full changelog

monitoring-plugin

• OCPBUGS-44394: remove unused package and upgrade vulnerable dependency #271
• Full changelog

must-gather

• OCPBUGS-46281: Support gathering IPsec data #467
• Full changelog

networking-console-plugin

• OCPBUGS-44397: OCPBUGS-44679: upgrade packages for cve #141
• Full changelog

openstack-cluster-api-controllers

• OCPBUGS-44455: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.17 #342
• OCPBUGS-44959: Makefile changes for merge-bot #340
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• OCPBUGS-46598: catalog-operator: Delete Pods that were evicted (#3459) #922
• OCPBUGS-46054: CRD upgrade existing CR validation fix #913
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-47506: Let OVN-northd bind remote ports #2404
• OCPBUGS-45953: bump OVS version to 3.4.0-18 #2393
• OCPBUGS-45312: pin libreswan to 4.6-3.el9_0.3 #2384
• OCPBUGS-45339: Dockerfile: Update OVN to the 24.03.2-32.el9fdp minor release. #2376
• OCPBUGS-43454: Ignore cluster manager topology not managed errors for localnet with no subnets #2362
• Full changelog

tests

• OCPBUGS-44190: Fix UnexpectedNodeNotReady and UnexpectedNodeUnreachable #29306
• OCPBUGS-43576, SDN-4930: Don’t modify pod routes in tests #29250
• Full changelog

vsphere-cloud-controller-manager

• OCPBUGS-43432: update check-fmt goimports command #78
• Full changelog

---

View changelog in Markdown or change previous release: 4.17.0-okd-scos.04.16.0-okd-scos.14.16.0-okd-scos.04.16.0-0.okd-scos-2024-09-24-1517474.16.0-0.okd-scos-2024-08-21-1556134.15.0-0.okd-scos-2024-01-18-223523───4.19.0-0.okd-scos-2025-01-17-1954234.19.0-0.okd-scos-2025-01-17-0754234.19.0-0.okd-scos-2025-01-16-1954234.19.0-0.okd-scos-2025-01-16-0754234.19.0-0.okd-scos-2025-01-15-1954234.19.0-0.okd-scos-2025-01-15-075423───4.18.0-0.okd-scos-2025-01-18-0412514.18.0-0.okd-scos-2025-01-17-1612514.18.0-0.okd-scos-2025-01-17-0412504.18.0-0.okd-scos-2025-01-16-1612494.18.0-0.okd-scos-2025-01-16-0412484.18.0-0.okd-scos-2025-01-15-1612474.18.0-0.okd-scos-2025-01-15-041247───4.17.0-0.okd-scos-2025-01-17-2250544.17.0-0.okd-scos-2025-01-17-1050534.17.0-0.okd-scos-2025-01-16-2250524.17.0-0.okd-scos-2025-01-16-1050514.17.0-0.okd-scos-2025-01-15-2250504.17.0-0.okd-scos-2025-01-15-105050───4.16.0-0.okd-scos-2025-01-06-1432414.16.0-0.okd-scos-2025-01-04-1456004.16.0-0.okd-scos-2025-01-04-0142364.16.0-0.okd-scos-2025-01-03-1342364.16.0-0.okd-scos-2025-01-03-0142364.16.0-0.okd-scos-2024-12-17-0222464.16.0-0.okd-scos-2024-11-24-1100454.16.0-0.okd-scos-2024-11-23-1818454.16.0-0.okd-scos-2024-11-23-0618454.16.0-0.okd-scos-2024-11-22-1818454.16.0-0.okd-scos-2024-11-22-061845───4.15.0-0.okd-scos-2024-12-16-1913164.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2024-12-16-1952254.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.18.0-okd-scos.ec.04.17.0-okd-scos.ec.44.17.0-okd-scos.ec.34.17.0-okd-scos.ec.24.17.0-okd-scos.ec.14.17.0-okd-scos.ec.04.17.0-0.okd-scos-2024-09-30-1017394.17.0-0.okd-scos-2024-09-26-2248284.17.0-0.okd-scos-2024-09-24-1048284.17.0-0.okd-scos-2024-08-21-100712───4.15.0-0.okd-2024-03-10-0101164.15.0-0.okd-2024-02-23-1634104.15.0-0.okd-2024-02-10-0355344.15.0-0.okd-2024-01-27-070424

Source code for this page located on github