# 4.16.17

Created: 2024-10-10 11:16:00 +0000 UTC

Image Digest: `sha256:437aaa6290b7b3b57311ec605308859d3330f09c8604e91d55ea2346b709f8c2`

Promoted from registry.ci.openshift.org/ocp-s390x/release-s390x:4.16.0-0.nightly-s390x-2024-10-09-181834


## Changes from 4.16.16

### Components

* Kubectl 1.29.7
* Kubernetes 1.29.8
* Kubernetes Tests 1.29.0
* Red Hat Enterprise Linux CoreOS upgraded from 416.94.202410020522-0 to 416.94.202410071428-0


### Rebuilt images without code change

* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [342902be](https://github.com/openshift/assisted-installer/commit/342902be223378b4d50b251011a3b3185148545a) `sha256:94617e923e3e16a9fd5311f171acf2094f02f245cf261f361ed490c1126e03c6`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [1d5732f0](https://github.com/openshift/driver-toolkit/commit/1d5732f0209bb7d98661a53c66c5ac265272dce6) `sha256:031c6a571167c24792d27066c233aeb8097102c1cb1cb747c9557a23000fcc7e`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [3cc97098](https://github.com/openshift/machine-os-images/commit/3cc97098ecb9870dcb571f1ed1e26e2f70ce9f8c) `sha256:9f376555298b200a17f8181116cec23772d50a9313a9bb5d4735844f238e27aa`
* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [6a049e3a](https://github.com/openshift/monitoring-plugin/commit/6a049e3acc8e2efd9e7fcfdc4395b14789941b34) `sha256:a36177adc6f6bbc4e78c5cd9110525f089a5115fe134b8ce2ad2cf4f9df10ba4`
* [must-gather](https://github.com/openshift/must-gather) git [aea114c0](https://github.com/openshift/must-gather/commit/aea114c0e263e6148b6a26f69f45af559a4f7bc7) `sha256:27ff0c2308d64f3d0e08d40e63695dca3cf8ec8a2c4171ebd660eee2c1372b7b`
* [network-tools](https://github.com/openshift/network-tools) git [39eca100](https://github.com/openshift/network-tools/commit/39eca100c0978fb59234e21bf549b130914616ac) `sha256:0fa0a3471c5c9af5d33c873d280f9ab96394b724ae72a1bb18ac6134ecfe2238`
* rhel-coreos `sha256:b250db080e0410349c133c2caa886cbb4a6399ac0d21db07c2fd924f0ac02789`
* rhel-coreos-extensions `sha256:e0390498ff64cb697d451251e29c22297f49f6900f529674c772b3d39447e7d9`
* [tests](https://github.com/openshift/origin) git [06403d4d](https://github.com/openshift/origin/commit/06403d4defedd9b48c4a8755389516eeb3be2b13) `sha256:f4df58bcd97488e6bb1cf32bfd7769cf3cc6ee6f5871af020a8e84d8df797ce6`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/aae52d7e3bb80ea0efea327b421e3ee0989919d0)

* [OCPBUGS-42570](https://issues.redhat.com/browse/OCPBUGS-42570): Libraries bump to mitigate CVE-2024-27289 (#6833) [#6833](https://github.com/openshift/assisted-service/pull/6833)
* [Full changelog](https://github.com/openshift/assisted-service/compare/d56975695e809488e8c7a610ff07fac50eb452a1...aae52d7e3bb80ea0efea327b421e3ee0989919d0)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/42753d7581ed4fc8be6cd7d0a70afdff1ec8d596)

* [OCPBUGS-42300](https://issues.redhat.com/browse/OCPBUGS-42300): Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#785) [#785](https://github.com/openshift/assisted-installer-agent/pull/785)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/9ca7b58d937c413f670a26c02435829b1fb3a196...42753d7581ed4fc8be6cd7d0a70afdff1ec8d596)


### [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider/tree/f6bb064636525c59fcf7200e014d9bfdc996e857)

* hack: display diff on verify-mod-tidy failure [#26](https://github.com/openshift/aws-encryption-provider/pull/26)
* [Full changelog](https://github.com/openshift/aws-encryption-provider/compare/da90fb7cb0d9108fb1f365e98f31ce6ab16fd7e0...f6bb064636525c59fcf7200e014d9bfdc996e857)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/e4d53b1281937aa073855fede82b45d41b3883e0)

* [OCPBUGS-41334](https://issues.redhat.com/browse/OCPBUGS-41334): Fix IPv6 security group rule for schedulable master [#8971](https://github.com/openshift/installer/pull/8971)
* [Full changelog](https://github.com/openshift/installer/compare/e8f8bf91b0dc2c0488485bd0777ed7f6c658f771...e4d53b1281937aa073855fede82b45d41b3883e0)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/cf533b548154f7f2e828a44864477bbbb881692d)

* [OCPBUGS-42720](https://issues.redhat.com/browse/OCPBUGS-42720): Check cast result in adm prune deployments to prevent panic [#1891](https://github.com/openshift/oc/pull/1891)
* [Full changelog](https://github.com/openshift/oc/compare/c44c839bcb77d6d41229e2d35e45002fa144cf72...cf533b548154f7f2e828a44864477bbbb881692d)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/3f2ce4889c255391323d8bdf07dece99e87dbccd)

* [OCPBUGS-33673](https://issues.redhat.com/browse/OCPBUGS-33673): rename flowschema to avoid log noise in CVO [#1348](https://github.com/openshift/cluster-etcd-operator/pull/1348)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/11269eceae2b839bf05157c6ca40c2f2ed73bd11...3f2ce4889c255391323d8bdf07dece99e87dbccd)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/c5a5245333832aa171424cadb23ba628ccd5836b)

* [OCPBUGS-42420](https://issues.redhat.com/browse/OCPBUGS-42420): Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) [#1126](https://github.com/openshift/cluster-image-registry-operator/pull/1126)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/9d2162f45590dd0ed0a228b79ec036d6d44a7208...c5a5245333832aa171424cadb23ba628ccd5836b)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/8f39b8c253667d54b3ab83fb91eb3dbf4e266fd2)

* [OCPBUGS-36594](https://issues.redhat.com/browse/OCPBUGS-36594): Set mount propagation to HostToContainer for /var/lib/kubelet [#2430](https://github.com/openshift/cluster-network-operator/pull/2430)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/5e5e21afb9ceabe3c2166fb9b2d5d12196a77b26...8f39b8c253667d54b3ab83fb91eb3dbf4e266fd2)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/329937c1acd693cf754b1e11ef6d1e88fac11aa6)

* E2E: Add test to verify cpuset.cpus.exclusive is writeable (#1153) [#1153](https://github.com/openshift/cluster-node-tuning-operator/pull/1153)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/57a714574b7b33f2f649ad5f62a61b7e97224fb7...329937c1acd693cf754b1e11ef6d1e88fac11aa6)


### [console](https://github.com/openshift/console/tree/21d218a7b2ebce7fb0aba07f9f90df4bca763606)

* [OCPBUGS-37615](https://issues.redhat.com/browse/OCPBUGS-37615): Include PatternFly-4 chart styles so they are available for dynamic plugins that still use PF4 react-charts [#14091](https://github.com/openshift/console/pull/14091)
* [Full changelog](https://github.com/openshift/console/compare/a9acc9a4c44b78b7dbe8552e35e92c958e804b4b...21d218a7b2ebce7fb0aba07f9f90df4bca763606)


### [hypershift](https://github.com/openshift/hypershift/tree/9a2ade91ae269b570d4e9dd8a8430a6cbc7b4e20)

* [OCPBUGS-42342](https://issues.redhat.com/browse/OCPBUGS-42342): Let payload generation pick the release for the NodePool [#4787](https://github.com/openshift/hypershift/pull/4787)
* [OCPBUGS-42431](https://issues.redhat.com/browse/OCPBUGS-42431): Conditionally manage kubeconfig secrets for DNS and Ingress operators [#4798](https://github.com/openshift/hypershift/pull/4798)
* NO-JIRA: [chore(deps): update konflux references (release-4.16)](https://github.com/openshift/hypershift/pull/4853#top) [#4853](https://github.com/openshift/hypershift/pull/4853)
* [OCPBUGS-42608](https://issues.redhat.com/browse/OCPBUGS-42608): Add Annotation to skip deleting hcp namespace [#4830](https://github.com/openshift/hypershift/pull/4830)
* [Full changelog](https://github.com/openshift/hypershift/compare/235766c892a8a1fb7130a422473dec10d540fa54...9a2ade91ae269b570d4e9dd8a8430a6cbc7b4e20)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/aec8163c76a7ba11e02c3ba1e9ce46f770210957)

* [OCPBUGS-42203](https://issues.redhat.com/browse/OCPBUGS-42203): fix UDP conntrack cleanup [#636](https://github.com/openshift/sdn/pull/636)
* [Full changelog](https://github.com/openshift/sdn/compare/807fca22f33bef517b664e314072c3f1b25fbfbc...aec8163c76a7ba11e02c3ba1e9ce46f770210957)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/6f827c3d8c3c5c826b04963a19ad0d79c2ba50ee)

* [OCPBUGS-41293](https://issues.redhat.com/browse/OCPBUGS-41293): Enable the use of Linux Bridge as the ovs default port connection [#4563](https://github.com/openshift/machine-config-operator/pull/4563)
* [OCPBUGS-41256](https://issues.redhat.com/browse/OCPBUGS-41256): Set ESP offloads off in bonds if slaves don't support them [#4627](https://github.com/openshift/machine-config-operator/pull/4627)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/6a425abbe5e330f0e7bc0849f4927d4c55d0c9e5...6f827c3d8c3c5c826b04963a19ad0d79c2ba50ee)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/52c7ebe90417a98c4e276f735e1824ea04b27cf6)

* [OCPBUGS-41551](https://issues.redhat.com/browse/OCPBUGS-41551): Add subnet overlap check for transit switch subnet [#2306](https://github.com/openshift/ovn-kubernetes/pull/2306)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/90d0591637753ab3d3b18535e506c47e91194da9...52c7ebe90417a98c4e276f735e1824ea04b27cf6)