4.17.0-rc.5

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.17.0-rc.5-s390x

Team Approvals:

No tests for this release

Upgrades from:

Untested upgrades: 4.16.10, 4.16.11, 4.16.12, 4.16.13, 4.16.8, 4.16.9, 4.17.0-ec.0, 4.17.0-ec.1, 4.17.0-ec.2, 4.17.0-ec.3, 4.17.0-rc.0, 4.17.0-rc.1, 4.17.0-rc.2, 4.17.0-rc.3, 4.17.0-rc.4

Changes from 4.17.0-rc.4

Created: 2024-09-20 03:40:13 +0000 UTC

Image Digest: sha256:8ea9286c443f7345e30bc36498ce5de43f5a59650b154cb8eeb152d499232fb1

Components

Kubectl 1.30.2
Kubernetes 1.30.4
Kubernetes Tests 1.30.0
Red Hat Enterprise Linux CoreOS 417.94.202409120353-0

docker-builder

OCPBUGS-41225: Prevent Build Inputs “Zip-Slip” #2
OCPBUGS-33215: Bumps openshift/api & related dependencies #394
OCPBUGS-25495: Upgrade s2i and buildah #392
OCPBUGS-30672: bump go-jose to fix CVE-2024-28176 #386
OCPBUGS-31930: Updating openshift-enterprise-builder-container image to be consistent with ART for 4.16 #385
OCPBUGS-24746: Updating openshift-enterprise-builder-container image to be consistent with ART for 4.16 #382
BUILD-854: Add adambkaplan as approver #380
OCPBUGS-28661: Replace ‘coreydaley’ with ‘sayan-biswas’ #377
OCPBUGS-23128: bump github.com/containers/buildah to fix transient mounting in chroot isolation #358
OCPBUGS-22497: Add -p flag to cp command to preserve timestamps #369
OCPBUGS-21969: Mitigate CVE-2023-39325 #361
OCPBUGS-20407: drop the Overlay setting from transient mounts #359
OCPBUGS-18855: Updating openshift-enterprise-builder images to be consistent with ART #357
BUILD-432: mount secrets as “overlay” mounts #349
OCPBUGS-16070: Updating Kubernetes and other associated dependencies #356
OCPBUGS-15497: Add the git-lfs package #350
OCPBUGS-14798: Adds reference to contributing.md #346
OCPBUGS-14484: Kubernetes 0.27 #347
OCPBUGS-1973: pass CPU limits for Docker strategy builds #341
Updating openshift-enterprise-builder images to be consistent with ART #345
Updating openshift-enterprise-builder images to be consistent with ART #344
Updating openshift-enterprise-builder images to be consistent with ART #343
OCPBUGS-3064: normalize locations in pull/push secrets which might look like URLs #330
Bump golang.org/x/net from 0.5.0 to 0.7.0 #338
Bump github.com/opencontainers/runc from 1.1.4 to 1.1.5 #337
OCPBUGS-7782: bump(github.com/containers/common) to v0.51.2 #335
Adding Divyanshu Agrawal as a reviewer #334
Replacing openshift-goimports with goio #333
Updating development setup steps #331
Updating openshift-enterprise-builder images to be consistent with ART #332
Update CONTRIBUTING.md #329
OCPBUGS-7412: Fix k8s.io/dynamic-resource-allocation error #328
Modified clusterversion patch command #327
BUILD-549: bump(*) kubernetes-1.26 #326
OCPBUGS-597: bump(github.com/containers/buildah) to v1.29.0 #307
OCPBUGS-6014: manage-dockerfile: use the original form of HEALTHCHECK #323
Updating openshift-enterprise-builder images to be consistent with ART #319
Update to go1.19 #320
BUILD-530: Rebase to k8s.io 1.25 #316
bump(github.com/containers/buildah) to v1.26.4 #306
bump github.com/containers/buildah to v1.26.2 #304
Attempt to create /dev/fuse at startup #305
Bug 2099991: Add support for BUILDAH_QUIET environment variable #303
Set _CONTAINERS_USERNS_CONFIGURED if we create a user namespace #301
Updating openshift-enterprise-builder images to be consistent with ART #302
BUILD-416: Rebase k8s 1.24 #299
Update OWNERS file #298
Updating openshift-enterprise-builder images to be consistent with ART #297
Bug 2075145: Revert using –quiet with log levels below 2 #296
Bug 2067775: Update prometheus client_golang from 1.11.0 => 1.11.1 #294
main(): accept –loglevel as an alias for -v #283
Bug 2071364: invalid syntax when parsing empty BUILD_LOGLEVEL #293
Bug 1996883: Add –quiet option to buildah if log level is less than 2 #288
BUILD-433: use the right mappings when we don’t need to set any #291
Updating openshift-enterprise-builder images to be consistent with ART #284
Bug 2026063: Update buildah to v1.24.2 #282
Add openshift goimports #287
Bug 2044244: bump(github.com/containers/buildah) to v1.22.4 #281
Bug 2037638: Add support for build csi volume source #273
Bug 2034650: Rebase to k8s 1.23.0 #277
Report User/Group ID when they cannot be parsed #276
Bug 1979966: Update containers/storage to address incorrect overlay options being set on rhel7 nodes #275
Bug 2021551: getAssembleUser(): strip the group part out before checking the UID #270
Bug 2011293: add Red Hat registries to the default registries.conf included in the builder image #266
Updating openshift-enterprise-builder images to be consistent with ART #264
Bug 1964327: bump github.com/containers/buildah to v1.22.3 #265
Dockerfiles: run rpm --setcaps shadow-utils during build #256
Update OWNERS file #260
BUILD-278: fix cgroupv2 memory max defaulting #252
Bug 1986003: Rebase to Kubernetes 1.22 #262
Bug 1971332: bump(s2i): revert incorrect ssh scp fix #257
Let the serviceability package determine how to tie logrus to klog #255
unprivileged: don’t try to set up user namespaces for manage-dockerfile/git-clone #254
Bug 1964327: bump github.com/containers/common to v0.40.0 #253
unprivileged: add CLI options for isolation and storage #220
Updating openshift-enterprise-builder images to be consistent with ART #248
BUILD-278: Check cgroup v1 and cgroup v2 Files for Quota #246
bump(*) to get updates from openshift/api#954 #250
BUILD-87: secret configmap volume mounts in builds #245
Updating .ci-operator.yaml build_root_image from openshift/release #247
Bug 1925412: update dependencies affected by CVE-2021-3121 #244
Bug 1951084: remove mounts.conf again, but patch buildah change needed to make transient mounts work for us #239
Bug 1940479: bump(containers/buildah) 1.20.0 #243
Bug 1947164: Print “Successfully pushed” only if push succeeded #232
Bug 1940488: move entitlement related secrets back to mounts.conf #238
Bug 1943614: add explict exit log after buildah pull image; tweak existing start log priot to buildah pull image call #236
Bug 1943614: add enter/exit logging around buildah pull image #233
Bug 1940488: add etc-pki-entitlements from pod secrets if available to build container #228
Bug 1926021: Update buildah to v1.19.8, containernetworking/cni to v0.8.1 #229
Updating openshift-enterprise-builder builder & base images to be consistent with ART #217
Bug 1905095: bump github.com/containers/image #221
Bug 1937535: retry image pulls during builds #222
Bug 1895053: Mount CA trust store in builds #218
Bug 1918153: incorrect escaping of HTML symbols in envars #215
Bug 1905095: bump github.com/containers/image to v5.10.1 #213
Bug 1916897: narrow scope of rhsm transient bind mount #206
Bug 1918879: better surface dockerconfigjson errors causing image pull errors #200
Force use of runc, since we know we’re privileged, and customize our seccomp filter #202
Bug 1916897: more automount of cluster trust bundle reverts; no longer automount /run/secrets #204
Bug 1908361: BUILD-150: bump(*): k8s 1.20.0 #197
Bug 1907407: Use -mod=vendor to determine buildah version #199
Bug 1907407: Print buildah version #196
Bug 1896446: Fix private git clones behind a proxy #189
Move dev Dockerfile to Fedora 33 #191
Bug 1891759: Do not mount /etc/pki/ca-trust in builds #185
Bug 1889957: Bump dependencies to mitigate CVE-2020-8564 #182
Bug 1883803: Fixes to merging node credentials #180
Bug 1884270: bump(*): s2i, klog #179
Bug 1884610: Upgrade buildah to v1.16.4 #177
Bug 1878163: Updating Dockerfile.rhel8 baseimages to mach ocp-build-data config #176
Bug 1843727: bump github.com/openshift/imagebuilder to v1.1.7 #175
Bug 1872080: Updating Dockerfile.rhel8 baseimages to mach ocp-build-data config #171
Bug 1833328: bump buildah to v1.16.0 #172
Bug 1876913: Configure proxy via git config #174
Bug 1720730: bump github.com/containers/buildah to v1.14.11 #168
Kubernetes v0.19.0 #167
Add Dockerfile.rhel8 #165
Bump containers/storage to v1.20.2 #164
Bug 1826183: Run update-ca-trust if CA is non-empty #163
Bug 1839683: bump github.com/openshift/imagebuilder to v1.1.6 #162
Bug 1844596: Bump buildah to v1.14.10 #160
builder/common.replaceLastFrom: Remove always-nil error return #161
Bug 1826183: Generate trust bundle for builds #158
Bug 1816578: upgrade buildah to v1.14.9 #157
Clean up imports #155
Add component to OWNERS #147
Bug 1842982: preserve ARG values that come before the first FROM #132
DEVEXP-423: Leveraging node pull credentials. #143
DEVEXP-558: bldr k8s 118, openshif/api,*-go bump #146
Bug 1810174: bump github.com/containers/buildah and dependencies #141
Bug 1809861: leverage new failed build status reasons/messages #142
hack/lib/build/version: Use BUILD_VERSION and SOURCE_GIT_COMMIT if non-empty #133
Bug 1802868: bump(github.com/mtrmac/gpgme): v0.1.2 #135
manage-dockerfile: use the original form of ENV/LABEL #134
Bug 1801388: use of ARG step in Dockerfile causes panic in imagebuilder (openshift… #130
Bug 1788982: bump github.com/containers/{storage,image,buildah} #126
Bug 1774492: turn off forcepull after the special incremental/forcepull pre-build … #116
bump github.com/containers/storage and dependencies for go 1.13 #123
Bug 1781793: bump revert s2i bump for 1758305 #120
Bug 1772179: bump github.com/containers/{storage,buildah} #119
DEVEXP-488: bump k8s 1.17.0-rc.1 #118
Bug 1771335: set .dockerconfigjson into containers/image auth file path instead of… #115
Bug 1755140: do not force skip tls verify to true on image source injection #110
Bump docker/swarmkit and remove logrus #109
move to containers/image v5, buildah v1.11.4 #108
Bug 1758305: Bump s2i #106
Bump k8s 1.16.2 #105
Bump golang version to 1.12 #104
Bug 1745192: seed containers/image with entire dockerconfig for authentication in … #102
Bug 1753247: listen for sigterm and terminate #101
Bug 1745789: toggle ssh parameters if ssh-auth source secret includes a known_host… #96
Bug 1747937: Forwarding HTTPProxy environment variables. #95
Bug 1716697: Strip the tag from the reference we print after pushing an image #89
Bump github.com/containers/{storage,image,buildah} #93
Adding LICENSE file to project #85
Bug 1746499: Add “:latest” to push tag if none is specified #92
Rebase k8s to 1.14 #86
Remove fuse-overlayfs from Dockerfiles #88
clean up of some CA mount logic that is now handled by the build controller #87
Change containers to allow building without privilege. #79
bump(*): Remove origin dependency #82
Fixed small typo on documentation. #81
Process $DROP_CAPS #43
retryImageAction: strip error wrappings for MultiError members #68
Parse $BUILD_STORAGE_OPTIONS to set storage options #74
Start using Buildah versus Docker for building container images #80
Bump github.com/containers/{storage,buildah} #78
Heed the ImageOptimizationPolicy #35
Bug 1712245: bump github.com/containers/buildah and github.com/openshift/source-to-image #76
push: log the image’s canonical reference #75
Bug 1707941, 1709945: bump github.com/containers/{storage,image,buildah} #72
Contributing guide #62
Bug 1704767: S2I incremental build not working #70
Bug 1695622, 1699129: bump buildah to v1.8.2, pin most dependencies #67
Raise file and process limits before building an image #69
retryImageAction: strip error wrappings for ErrUnauthorizedForCredentials #66
Bug 1698152: fix image source extraction with trailing “/.” #59
Bug 1696756: Fix Assemble User in S2I builds #61
Do not print credentials into build log #60
bug: 1694871 bump(*): pin glog level #58
bug: 1694864 - only log error if there is one #57
Fix empty name in status update #56
Add verbose output for bsdtar #55
fix up owners files #53
Bug 1688779: Ensure image exists for incremental builds #52
Switch back to the openshift docker fork #51
Drop unused copyImageSource() function #50
bump(*): bump buildah to v1.7.1 #49
S2IBuilder.pullImage: retry pulls #46
Bug 1682978: Report builder version #47
Add adambkaplan as approver #48
Workaround bug 1677818 in microdnf for new UBI base images #44
bump(*) #42
bump(*) - s2i fix for bad ScriptsURL #37
Limit Default Search to docker.io #36
Enable blob caching and blobInfo caching #34
Restore “copy build certificates to /etc/docker/certs.d” #31
Revert “copy build certificates to /etc/docker/certs.d” #30
copy build certificates to /etc/docker/certs.d #29
always retry up to twice #28
add retry logic for s2i pushes #27
bump(*) #26
stop marking internal registry as insecure #25
ADd a RHEL7 dockerfile and standardize format #23
imagecontent/storage.conf: remove nodev from mountopt #24
Renaming additional ca file #21
remove vestiges of docker daemon codepaths #20
Updating S2I to use Dockerfile postCommit hooks #13
delete networking management code #19
bump(*) #17
Copy CAs mounted via ConfigMap #15
add the new registry service to the insecure list #16
only enable logrus debug at higher loglevels #14
Retry pulling or pushing images, for certain errors #12
callback-based retryImageAction + Don’t ignore errors reported during Docker push/pull #10
Add ability to set image tag from make command #9
remove multistage logic since buildah supports it implicitly #8
update deps to pick up buildah multistage fixes #7
switch the builder image to use buildah instead of docker daemon #5
add a verify target+test #6
initial population of builder repo #2
initial owners file #1
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github