Back to index

Download installer and client with:

oc adm release extract --tools registry.ci.openshift.org/origin/release-scos:4.17.0-0.okd-scos-2024-09-19-103455

Team Approvals:

Tests:

• Blocking jobs
  • aws Failed (2 retries) periodic-ci-openshift-release-master-okd-scos-4.17-e2e-aws-ovn
• Informing jobs
  • aws-upgrade Succeeded periodic-ci-openshift-release-master-okd-scos-4.17-e2e-aws-ovn-upgrade
  • aws-upgrade-minor Succeeded periodic-ci-openshift-release-master-okd-scos-4.17-upgrade-from-okd-scos-4.16-e2e-aws-ovn-upgrade
  • vsphere Failed (2 retries) periodic-ci-openshift-release-master-okd-scos-4.17-e2e-vsphere-ovn

Upgrades from:

• 4.17.0-0.okd-scos-2024-08-30-100727 - Success
• 4.16.0-0.okd-scos-2024-08-30-131155 (changes) - Success

---

Changes from 4.17.0-0.okd-scos-2024-08-30-100727

Created: 2024-09-19 10:39:03 +0000 UTC

Image Digest: sha256:d416b23805c89e1255922f3782c9b784175bcdf2224a0fcb7c6124d9a29bcb38

Components

• Kubectl 1.30.2
• Kubernetes upgraded from 1.30.3 to 1.30.4
• Kubernetes Tests 1.30.0
• CentOS Stream CoreOS upgraded from 418.9.202408292032-0 to 418.9.202409172033-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
AWSEFSDriverVolumeMetrics (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
OpenShiftPodSecurityAdmission (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Enabled	Enabled
ProcMountType (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
UserNamespacesSupport (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Rebuilt images without code change

• cluster-samples-operator git bef583cc sha256:1b33fbcad890ce56495a8fc8a156eee358174f7ed4cb97cfa6c5163f98901482
• stream-coreos sha256:5acd84de8a5b90ee9900de0c8c3611d6ec0a833c70d151f991f6a94fb1edb5a7
• stream-coreos-extensions sha256:c2a63fa07b024c633aa2a65a93f604c0cb3da99861ce917e59254b9da2ae8ed2

agent-installer-api-server

• OCPBUGS-36577: Switch to github.com/docker/distribution/reference to mitigate CVE-2024-3727 (#6750) #6750
• MGMT-18575, MGMT-18694, OCPBUGS-41820: Don’t require mapping for names matching physical interfaces (#6745) #6745
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator

• OCPBUGS-38355: Bump openshift/api to get EFS volume metrics #274
• Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

• OCPBUGS-42051: Fix integration tests #9018
• OCPBUGS-41300: Azure CAPI: Improve handling of security features configured on the MachinePools and OSDisk #9007
• OCPBUGS-39286: Fix var_files syntax to work on older version of ansible #8933
• OCPBUGS-41896: Add AWS c7g,m7g,r8g to tested instance types #9005
• OCPBUGS-41542: Azure CAPI: Update publicAccess for Blob Containers #9006
• OCPBUGS-41702: aws: bump capa to fix EIP leak on bootstrap when BYOIP #8991
• OCPBUGS-38933: install-status reflects day 2 services #8899
• OCPBUGS-39239, OCPBUGS-39240: vSphere - If template is defined skip downloading #8926
• OCPBUGS-41300: Azure CAPI: Set SecurityType as a Feature while creating Gallery Image #8990
• OCPBUGS-41500: Bump extract-machine-os timout to 20m #8981
• OCPBUGS-38963: IngressController subnet selection in AWS #8909
• OCPBUGS-41542: Azure CAPI: Fix storage account and vhd container public access #8984
• OCPBUGS-41539: Pick the next available IP address for internal LB #8980
• OCPBUGS-38568: Azure: Add master and worker VM IPs to both the backend pools API LoadBalancer #8968
• OCPBUGS-39545, OCPBUGS-39546, OCPBUGS-39547: update vault version to 1.13.10 #8954
• OCPBUGS-38568: Azure CAPI: Add check for APIServer OperatorPublishingStrategy #8870
• OCPBUGS-41283: update RHCOS 4.17 bootimage metadata to 417.94.202408270355-0 #8975
• OCPBUGS-39495: capi/aws/byo-vpc/multi-cidr: fix group rules #8952
• OCPBUGS-39433: dropping this warning as the move from terraform is transparent to the end user #8950
• OCPBUGS-38752: Remove firewall rules created by CAPG #8948
• OCPBUGS-38738: pkg/infrastructure/azure: set correct cloud for BYO vnet #8972
• OCPBUGS-39308: Fix to validation for GCP pre-created ServiceAccount #8931
• OCPBUGS-39467: Enable TLS for virtual media in initial ironic deployment #8947
• Full changelog

baremetal-operator

• OCPBUGS-39489: Disallow fetching secrets from namespaces different from the host’s one #377
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-39090: use proxy settings when required #1860
• Full changelog

cloud-credential-operator

• OCPBUGS-41233: List secrets in batches to avoid api timeout #756
• Full changelog

cluster-authentication-operator

• OCPBUGS-39021: increase oauth-apiserver failureThreshold #693
• Full changelog

cluster-capi-operator

• OCPBUGS-39309: manifests-gen: fix: readd missing metadata #198
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-41941: IBMCloud: Modify liveness probe for IBM Cloud CCM to use loopback address #365
• Full changelog

cluster-config-api

• OCPBUGS-41642: config/v1/types_cluster_version: Add v4.17 capability set #2023
• OCPBUGS-34333: Updating ose-cluster-config-api-container image to be consistent with ART for 4.17 #1903
• features: disable PSA #2018
• OCPBUGS-38355: Promote AWSEFSDriverVolumeMetrics to GA #2020
• OCPBUGS-39300: clean up openshift-sdn references in the API [4.17] #2008
• OCPBUGS-38958: [4.17] add UserNamespacesSupport/ProcMountType to tech preview features #2011
• Full changelog

cluster-ingress-operator

• OCPBUGS-39220: Ingress operator status not degraded when canary route fails #1136
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-41874: increase kube-apiserver failureThreshold #1733
• OCPBUGS-34679: revert dev cert rotation 4.17 #1729
• Full changelog

cluster-monitoring-operator

• OCPBUGS-41341: disable user-defined monitoring per object #2458
• OCPBUGS-41908: filter alerts sent to Telemeter #2470
• OCPBUGS-41580: Configure graceful shutdown for metrics-server (4.17 backport) #2463
• Full changelog

cluster-network-operator

• OCPBUGS-41674: Add configurable subnets while running hybrid-overlay-node binary #2497
• OCPBUGS-41591: Set required-scc for openshift workloads #2490
• OCPBUGS-39313: HyperShift: do not use antiaffinity on single replica control planes #2486
• OCPBUGS-39387: add required-scc annotation to console-plugin deployment #2487
• OCPBUGS-39425: Preload networking plugin locales #2489
• OCPBUGS-38932: Deploy networking-console-plugin by CNO #2478
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-39005: Add cluster-wide proxy env file (#1145) #1145
• OCPBUGS-36431 Fix generated cpu mask for 512+ cpus (#1147) #1147
• OCPBUGS-39321: E2E: Remove checking of reserved cpus in irqbalance file (#1148) #1148
• Full changelog

cluster-openshift-apiserver-operator

• OCPBUGS-41850: increase openshift-apiserver failureThreshold #589
• Full changelog

cluster-policy-controller

• OCPBUGS-41849: pkg/psalabelsyncer: switch to PSA version ‘latest’ #154
• Full changelog

cluster-storage-operator

• OCPBUGS-38355: Bump openshift/api to get EFS volume metrics #501
• OCPBUGS-38760: include azure perms for route table #503
• OCPBUGS-39365: Use restricted-v2 SCC and remove runAsUser in Hypershift #498
• Full changelog

console

• OCPBUGS-39181: add Create button to Console plugins tab #14220
• OCPBUGS-39091: update Events ChipGroup to use integrated close #14211
• OCPBUGS-38563: do not directly mutate links in useMemo #14159
• OCPBUGS-41685: Topology screen crashes when completed pod is selected #14276
• OCPBUGS-41482: Unit Tests for the new Ask Lightspeed Button #14249
• OCPBUGS-39601: Console user settings resources misses ownerRef, removing a user results in remaining data #14240
• OCPBUGS-41893: Disable Extension Catalog tech preview nav item #14289
• OCPBUGS-39110: List of default Camel K event sources disappears when adding a custom event source #14214
• OCPBUGS-41684: Fix access mode selection menu issue #14277
• OCPBUGS-41350: Update Lightspeed logo to new standards #14245
• OCPBUGS-41480: improve layout and findability of Hide Lightspeed pref… #14248
• OCPBUGS-39453: Use vCenterCluster value from CM as primary resource #14235
• OCPBUGS-39109: Need to allow blank for Project/namespace when setting SA Subject in ‘Project access tab’ #14213
• OCPBUGS-38903: Networking section depends on networking-console-plugin #14185
• OCPBUGS-38300: Add telemetry to Lightspeed console capability #14129
• Full changelog

console-operator

• OCPBUGS-38728: Get externalOrganizationID instead of the organizationID #926
• OCPBUGS-36213: Vendor proper commit #928
• Full changelog

hyperkube, installer-kube-apiserver-artifacts, pod

• OCPBUGS-41638: UPSTREAM: <carry>: bump cadvisor version to fix missing network stats #2081
• OCPBUGS-39014: Bump 1.30.4 #2062
• Full changelog

hypershift

• NO-JIRA: Security fixes for openshift-ci-security job #4748
• NO-JIRA: chore(deps): update konflux references (release-4.17) #4726
• HOSTEDCP-1953: bump CCO version #4694
• NO-JIRA: chore(deps): update konflux references (release-4.17) #4682
• OCPBUGS-41371: CPO oauth idp converter: resolve names before dialing #4681
• OCPBUGS-38637: Use http dialer when dialing through proxy #4680
• OSASINFRA-3572, OSASINFRA-3573: OpenStack backports for ingress #4644
• OCPBUGS-39365: Update CSO deployment file #4655
• OCPBUGS-39452: Fix multi-arch validation by prioritizing ReleaseImage check #4665
• OCPBUGS-39419: handle version skewed NodePools that do not have rhel9 binaries #4662
• OCPBUGS-39371: Fixed NodePool version validation #4657
• OCPBUGS-39234: Set Image as mutable and trigger upgrades on Azure NodePool spec changes #4640
• HOSTEDCP-1938: Remove saas template in 4.17 #4645
• Full changelog

insights-operator

• OCPBUGS-39393: collect some nmstate customresources (#986) (#989) #986
• OCPBUGS-32233: Not able to enable repositories during entitled build in OCP Cluster on IBM-Z (#991) #991
• Full changelog

ironic

• OCPBUGS-41783: Set node “alive” when inspection finished #578
• OCPBUGS-39380: Include fixes for CVE-2024-44082 into 4.17 #576
• OCPBUGS-37365: Update log statement to avoid logging entire node object #573
• OCPBUGS-38511: set min version for python3-webob #552
• OCPBUGS-38784: Update sushy to include Huwaei Fix ( Duplicate PR ) #572
• Full changelog

ironic-agent

• OCPBUGS-39380: Include fixes for CVE-2024-44082 into 4.17 #160
• OCPBUGS-38511: set webob and bump werkzeug #148
• OCPBUGS-38481: Update root image #145
• METAL-1049: Download and install sources from local dir #142
• OCPBUGS-37086: Update ironic projects to latest available #141
• METAL-1070: Align ironic dependencies with latest upper constraints #140
• OCPBUGS-35968: Disable installation of .pyc files through pip #139
• NO-ISSUE: Bump ironic projects versions #137
• NO-ISSUE: Replace README with an explanation how this agent works #138
• Full changelog

kube-metrics-server

• OCPBUGS-41580: Wire server run options to flags. #35
• Full changelog

machine-config-operator

• OCPBUGS-41686: MCPs with RHEL nodes are degraded when a userCA bundle is added to the cluster #4580
• OCPBUGS-41802: When newly built images rolled out, the update progress is not displaying correctly (went 0 –> 3) #4583
• OCPBUGS-41688: Add alert for users of deprecating the Image Registry workaround #4581
• OCPBUGS-41312: CVE-2024-3727 ose-machine-config-operator-container: containers/image: digest type does not guarantee valid type #4564
• OCPBUGS-38868: Updates message verbs to use %q where appropriate #4547
• OCPBUGS-38770: SCC-pinning for openshift workloads #4542
• Full changelog

multus-cni, multus-cni-microshift

• OCPBUGS-41817: always attempt a live pod get on miss to confirm its really not there #248
• Full changelog

network-metrics-daemon

• swtich golint install method (#103) #103
• Full changelog

networking-console-plugin

• CNV-48188: Fix networkpolicy list #99
• OCPBUGS-41887: fix ingress namespace in details page #101
• OCPBUGS-41880: Fix lastnamespacepath with actual namespace #100
• OCPBUGS-41888: Add Error page for not found resources and other errors #102
• OCPBUGS-41868: OCPBUGS-41695: fix clear fileupload not working #98
• OCPBUGS-41861: fix networkpolicy pagination #95
• OCPBUGS-41863: fix remove function #97
• OCPBUGS-41862: OCPBUGS-41698: Add annotation field in ingress details page #96
• OCPBUGS-41856: Add status box for error handling #94
• OCPBUGS-41808: normal user have to use projects no namespaces #93
• OCPBUGS-41808: fix pod preview error #92
• OCPBUGS-41640: switch key with label #83
• OCPBUGS-41634: close modal after executeFn #82
• OCPBUGS-41633: fix ingresses fetch list #81
• OCPBUGS-41624: fix router link #80
• CNV-48187: Create MultiNetworkPolicy instead of NetworkPolicy #73
• CNV-47529: Fix doc link MultiNetworkPolicy #70
• CNV-47530: fix typehead select on multi policy #69
• OCPBUGS-39390: fix Sort all resources list #65
• Use rhel9 base image in Dockerfile #64
• OCPBUGS-39310: fix small routes bugs #63
• OCPBUGS-39302: fix pod selector path #62
• OCPBUGS-39296: fix docs links #60
• OCPBUGS-39195: fix switching namespaces in policies #56
• Full changelog

oc-mirror

• OCPBUGS-41503: [release-4.17] oc-mirror throws error when performing delete operation with –generate (#922) #922
• OCPBUGS-41168: [release-4.17] Should not panic when specifying wrong loglevel for oc-mirror (#918) #918
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• OCPBUGS-41549: [4.17] adds paginating lister for evaluating CRs’ upgrade fitness versus new CRDs. #860
• OCPBUGS-41498: [release-4.17] Fix e2e flake: upgrade CRD with deprecated version #858
• OCPBUGS-39574: (fix) registry pods do not come up again after node failure (#3366) #855
• OCPBUGS-39458: add optional schema migrations; default to olm.bundle.object instead of olm.csv.metadata (#1384) #851
• Full changelog

operator-marketplace

• OCPBUGS-39297: Replace 4.16 image references with 4.17 #573
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-39406, SDN-4919: Downstream Merge 28th August #2283
• SDN-4919: Downstream Merge August 22nd #2277
• Full changelog

tests

• OCPBUGS-41817: Update the NotFound case for CNI plugin to reflect changes #29091
• OCPBUGS-39134: Bump timeout for the pod-network-service endpoints check #29051
• OCPBUGS-38674: add unexpected ready for monitor tests #29021
• OCPBUGS-39254: Change Operator Installed for Smoke Test #29055
• Full changelog

vsphere-cloud-controller-manager

• OCPBUGS-37661: Bump otelgrpc to v0.53.0 #74
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-42007: Remove conditions and controllers #254
• OCPBUGS-42006: Add check for vCenter version #253
• OCPBUGS-42008: Implement minor quality of life improvements. #255
• Full changelog

---

View changelog in Markdown or change previous release: 4.17.0-0.okd-scos-2024-09-18-1110314.17.0-0.okd-scos-2024-09-17-2310314.17.0-0.okd-scos-2024-09-17-1110314.17.0-0.okd-scos-2024-09-16-2310314.17.0-0.okd-scos-2024-08-30-1007274.17.0-0.okd-scos-2024-08-29-2207264.17.0-0.okd-scos-2024-08-29-1007254.17.0-0.okd-scos-2024-08-28-2207244.17.0-0.okd-scos-2024-08-28-100723───4.18.0-0.okd-scos-2024-09-19-2034394.18.0-0.okd-scos-2024-09-19-0834394.18.0-0.okd-scos-2024-09-18-2034394.18.0-0.okd-scos-2024-09-18-0834394.18.0-0.okd-scos-2024-09-17-2034394.18.0-0.okd-scos-2024-09-17-0834394.18.0-0.okd-scos-2024-08-26-2109074.18.0-0.okd-scos-2024-08-26-0909074.18.0-0.okd-scos-2024-08-25-2109074.18.0-0.okd-scos-2024-08-24-1013214.18.0-0.okd-scos-2024-08-23-221321───4.16.0-0.okd-scos-2024-09-19-1453544.16.0-0.okd-scos-2024-09-19-1047004.16.0-0.okd-scos-2024-09-18-2236504.16.0-0.okd-scos-2024-09-18-1825084.16.0-0.okd-scos-2024-09-18-1247064.16.0-0.okd-scos-2024-09-18-0731414.16.0-0.okd-scos-2024-08-30-1311554.16.0-0.okd-scos-2024-08-30-0907544.16.0-0.okd-scos-2024-08-30-0502244.16.0-0.okd-scos-2024-08-30-0052004.16.0-0.okd-scos-2024-08-29-173831───4.15.0-0.okd-scos-2024-05-13-2236094.15.0-0.okd-scos-2024-04-25-1837084.15.0-0.okd-scos-2024-04-25-0637084.15.0-0.okd-scos-2024-04-24-1837084.15.0-0.okd-scos-2024-04-24-0637084.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2024-09-19-1327274.15.0-0.okd-2024-09-09-0346264.15.0-0.okd-2024-09-04-1828354.15.0-0.okd-2024-08-27-1743134.15.0-0.okd-2024-08-27-0543134.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.16.0-0.okd-scos-2024-08-21-1556134.15.0-0.okd-scos-2024-01-18-223523───4.15.0-0.okd-2024-03-10-0101164.15.0-0.okd-2024-02-23-1634104.15.0-0.okd-2024-02-10-0355344.15.0-0.okd-2024-01-27-070424───4.17.0-0.okd-scos-2024-08-21-100712

Source code for this page located on github