# 4.16.0-0.okd-scos-2025-01-06-143241

Created: 2025-01-06 14:43:21 +0000 UTC

Image Digest: `sha256:3e0bddc0a5b4b99260105d241de9ac07fd6cf9994a70ed82d9820918029e4c7b`


## Changes from 4.16.0-0.okd-scos-2024-11-24-110045

### Components

* Kubectl 1.29.7
* Kubernetes 1.29.10
* Kubernetes Tests 1.29.0
* CentOS Stream CoreOS upgraded from 416.9.202411241032-0 to 416.9.202412051032-0


### Rebuilt images without code change

* stream-coreos `sha256:5e6115c05e2ecdfe8d57a7d562134d3a139603a2343e426d21e6dd65b94635b5`
* stream-coreos-extensions `sha256:9c4bf77eb72b976932f24592ee6c128f2a34c29aa630569426a5715c11cc5ed4`


### [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba/tree/248372a4f668111a7bf134527911cb656c44d47a)

* [OCPBUGS-44242](https://issues.redhat.com/browse/OCPBUGS-44242): change the VERSION makefile variable to use OS_GIT_VERSION [#58](https://github.com/openshift/cluster-api-provider-alibaba/pull/58)
* [Full changelog](https://github.com/openshift/cluster-api-provider-alibaba/compare/064d4624c74d417dd31cf1c173c00c3fa98ffade...248372a4f668111a7bf134527911cb656c44d47a)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/0c8198618609197cc6cbcfd4016ba8400d8c13d5)

* [OCPBUGS-46508](https://issues.redhat.com/browse/OCPBUGS-46508): fix Associate*IpAddress flag on launch EC2 [#121](https://github.com/openshift/machine-api-provider-aws/pull/121)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/61d60f6ca20443df434456c2f3eeba859634e6a2...0c8198618609197cc6cbcfd4016ba8400d8c13d5)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/e5bac3341fce67c12047caaafcf188c3f3049dc3)

* [OCPBUGS-47645](https://issues.redhat.com/browse/OCPBUGS-47645): Prevent panic when informer receives cache.DeletedFinalStateUnknown [#133](https://github.com/openshift/cloud-provider-azure/pull/133)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/0e9553295ecd02d6ef0aff19dfc1dfe680993112...e5bac3341fce67c12047caaafcf188c3f3049dc3)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/9598d638ef8acb62cb963b3a944a8bdced3840f3)

* [OCPBUGS-45669](https://issues.redhat.com/browse/OCPBUGS-45669): aws: fix Node Port Service rule removal [#9312](https://github.com/openshift/installer/pull/9312)
* [OCPBUGS-45669](https://issues.redhat.com/browse/OCPBUGS-45669): [release-4.16] capi/aws: remove allow-all Node Port Service [#9281](https://github.com/openshift/installer/pull/9281)
* [OCPBUGS-39434](https://issues.redhat.com/browse/OCPBUGS-39434): dropping this warning as the move from terraform is transparent to the end user [#8951](https://github.com/openshift/installer/pull/8951)
* [OCPBUGS-45852](https://issues.redhat.com/browse/OCPBUGS-45852): Update upi references to api-internal [#9290](https://github.com/openshift/installer/pull/9290)
* [OCPBUGS-41813](https://issues.redhat.com/browse/OCPBUGS-41813): Validate MTU for custom network [#9104](https://github.com/openshift/installer/pull/9104)
* [ARO-12457](https://issues.redhat.com/browse/ARO-12457): Include bootstrap docker config file in go module [#9259](https://github.com/openshift/installer/pull/9259)
* [OCPBUGS-45181](https://issues.redhat.com/browse/OCPBUGS-45181): add chrony.conf file when additional NTP sources are configured [#9247](https://github.com/openshift/installer/pull/9247)
* [Full changelog](https://github.com/openshift/installer/compare/2951faed3384854eed49d0e81df887456535585e...9598d638ef8acb62cb963b3a944a8bdced3840f3)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/8d7d77e961a7655628cdbb1d8212afeadeb5b7d6)

* [OCPBUGS-45939](https://issues.redhat.com/browse/OCPBUGS-45939): Add AWS region to aws-pod-identity-webhook [#800](https://github.com/openshift/cloud-credential-operator/pull/800)
* [OCPBUGS-45007](https://issues.redhat.com/browse/OCPBUGS-45007): Add retry to ccoctl gcp create functions [#794](https://github.com/openshift/cloud-credential-operator/pull/794)
* [OCPBUGS-45002](https://issues.redhat.com/browse/OCPBUGS-45002): github.com/golang-jwt/jwt/v4 v4.5.1 [#788](https://github.com/openshift/cloud-credential-operator/pull/788)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/4672a9ad086ebcd75ee1ab0fb20af922e26f7029...8d7d77e961a7655628cdbb1d8212afeadeb5b7d6)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/9792e9e8186c728f65f8d02de1daac3ef098dfac)

* [OCPBUGS-45148](https://issues.redhat.com/browse/OCPBUGS-45148): [release-4.16] VPA: Update OWNERS file [#325](https://github.com/openshift/kubernetes-autoscaler/pull/325)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/eecb123a3b02358046a2c2ce52adfc548a5caa17...9792e9e8186c728f65f8d02de1daac3ef098dfac)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/e10e3f56f0435c965007faf82d272b1cbf246dd2)

* [OCPBUGS-45974](https://issues.redhat.com/browse/OCPBUGS-45974): Ensure trailing dots on DNS names do not block serving cert auth [#257](https://github.com/openshift/cluster-machine-approver/pull/257)
* [OCPBUGS-45974](https://issues.redhat.com/browse/OCPBUGS-45974): Client internal DNS checks should ignore trailing dot [#251](https://github.com/openshift/cluster-machine-approver/pull/251)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/7fbf7f22ad6779c17414fc3072e2ea70cc2625c5...e10e3f56f0435c965007faf82d272b1cbf246dd2)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/09963a509301f71679e9c567f06c6a4deda222fd)

* [OCPBUGS-46066](https://issues.redhat.com/browse/OCPBUGS-46066): Add new metrics for OpenShift logging telemetry [#2537](https://github.com/openshift/cluster-monitoring-operator/pull/2537)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/c2c204a1244adc54d7b31ec35766b82bf6db413d...09963a509301f71679e9c567f06c6a4deda222fd)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/aa286367d966f61fe06b4bb107e2b324328450ff)

* [OCPBUGS-43715](https://issues.redhat.com/browse/OCPBUGS-43715): Skip including default crypto policies to avoid authby issue [#2598](https://github.com/openshift/cluster-network-operator/pull/2598)
* [OCPBUGS-44338](https://issues.redhat.com/browse/OCPBUGS-44338): Prevent live migration process from flapping between step-2 and step-3 [#2565](https://github.com/openshift/cluster-network-operator/pull/2565)
* [OCPBUGS-46148](https://issues.redhat.com/browse/OCPBUGS-46148): Remove ip xfrm state when IPsec is disabled [#2595](https://github.com/openshift/cluster-network-operator/pull/2595)
* [OCPBUGS-45593](https://issues.redhat.com/browse/OCPBUGS-45593): Pass transit_switch_subnet options in ovnkube-node pod [#2584](https://github.com/openshift/cluster-network-operator/pull/2584)
* [OCPBUGS-44846](https://issues.redhat.com/browse/OCPBUGS-44846), [SDN-5436](https://issues.redhat.com/browse/SDN-5436): Provide support for user owned IPsec machine configs [#2571](https://github.com/openshift/cluster-network-operator/pull/2571)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/acaf6667986d6cb14ab70578ff34140e3c3b97b0...aa286367d966f61fe06b4bb107e2b324328450ff)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/86529c3935d12fd90f7537ade0db42f4fcb1eeb3)

* [OCPBUGS-46077](https://issues.redhat.com/browse/OCPBUGS-46077): Fix PodStartupStorageOperationsFailing alert [#548](https://github.com/openshift/cluster-storage-operator/pull/548)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/761b62fa95c15dd7fcae6df1dda5876e50a10f2d...86529c3935d12fd90f7537ade0db42f4fcb1eeb3)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/8fa7ac7634969cb57f56324630302b7cc0bc2b31)

* [OCPBUGS-45329](https://issues.redhat.com/browse/OCPBUGS-45329): deps: bump golang.org/x/net to 0.31.0 [#1118](https://github.com/openshift/cluster-version-operator/pull/1118)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/15c87e7e6d56f89fcc2453012e09283e965e71af...8fa7ac7634969cb57f56324630302b7cc0bc2b31)


### [console](https://github.com/openshift/console/tree/6fe3e8b647c8583c662d78fbad134dfb3a526475)

* [OCPBUGS-43672](https://issues.redhat.com/browse/OCPBUGS-43672): Disable GQL introspection [#14638](https://github.com/openshift/console/pull/14638)
* [OCPBUGS-45334](https://issues.redhat.com/browse/OCPBUGS-45334): fix table combination [#14576](https://github.com/openshift/console/pull/14576)
* [OCPBUGS-41342](https://issues.redhat.com/browse/OCPBUGS-41342): fix namespace for networkpolicy [#14244](https://github.com/openshift/console/pull/14244)
* [OCPBUGS-46022](https://issues.redhat.com/browse/OCPBUGS-46022): Plugins that use very old PF4 dropdown or menu components with grouped items have bullets and padding that needs to be removed. [#14612](https://github.com/openshift/console/pull/14612)
* [OCPBUGS-45229](https://issues.redhat.com/browse/OCPBUGS-45229): Unable to remove finally tasks in pipeline builder mode [#14558](https://github.com/openshift/console/pull/14558)
* [OCPBUGS-45245](https://issues.redhat.com/browse/OCPBUGS-45245): use TaskRuns results.tekton.dev/record annotation to get the logs [#14563](https://github.com/openshift/console/pull/14563)
* [OCPBUGS-41523](https://issues.redhat.com/browse/OCPBUGS-41523): i18n upload/download routine task - Sprint 254 [#14258](https://github.com/openshift/console/pull/14258)
* [OCPBUGS-45015](https://issues.redhat.com/browse/OCPBUGS-45015): Remove ClusterTask dependency in console from Pipelines 1.17 [#14537](https://github.com/openshift/console/pull/14537)
* [OCPBUGS-44792](https://issues.redhat.com/browse/OCPBUGS-44792): Collapse/Expand Feature Added, Removal Option Removed in Version 4.16 [#14519](https://github.com/openshift/console/pull/14519)
* [OCPBUGS-44875](https://issues.redhat.com/browse/OCPBUGS-44875): Start last run do not work in buildConfig details page [#14529](https://github.com/openshift/console/pull/14529)
* [OCPBUGS-44874](https://issues.redhat.com/browse/OCPBUGS-44874): Telemetry userPreference results in empty nodes output to the DOM [#14528](https://github.com/openshift/console/pull/14528)
* [OCPBUGS-45124](https://issues.redhat.com/browse/OCPBUGS-45124): Add multiline support to template instantiation [#14545](https://github.com/openshift/console/pull/14545)
* [OCPBUGS-44885](https://issues.redhat.com/browse/OCPBUGS-44885): include external labels so silenced alerts not displayed in notifications [#14530](https://github.com/openshift/console/pull/14530)
* [OCPBUGS-44932](https://issues.redhat.com/browse/OCPBUGS-44932): Add IBM Block Storage CSI driver support for RWX [#14533](https://github.com/openshift/console/pull/14533)
* [OCPBUGS-43447](https://issues.redhat.com/browse/OCPBUGS-43447): Ensure envs are initted upon first load [#14405](https://github.com/openshift/console/pull/14405)
* [Full changelog](https://github.com/openshift/console/compare/749f1f7543100239055d8e774835a804861b9e58...6fe3e8b647c8583c662d78fbad134dfb3a526475)


### [console-operator](https://github.com/openshift/console-operator/tree/2d0c5f37b3ff5a8a9876757d00ad42d7f673bab1)

* [OCPBUGS-46481](https://issues.redhat.com/browse/OCPBUGS-46481): Dont disable console when authConfig type is set to None [#952](https://github.com/openshift/console-operator/pull/952)
* [Full changelog](https://github.com/openshift/console-operator/compare/92447df597eeca8a92bb9019e854619e19736638...2d0c5f37b3ff5a8a9876757d00ad42d7f673bab1)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/1d3aa2baae81b8c15260e87a816650b172c868f8)

* [OCPBUGS-43426](https://issues.redhat.com/browse/OCPBUGS-43426): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.29 into release-4.16 [#303](https://github.com/openshift/cloud-provider-openstack/pull/303)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/b7e9010d795f78f39bf12433599658bbbdd9560e...1d3aa2baae81b8c15260e87a816650b172c868f8)


### [etcd, installer-etcd-artifacts](https://github.com/openshift/etcd/tree/e7911c0d19925c0a67328052a8580a80fb40cb5b)

* NO-ISSUE: Add support for cachi2 based deps [#298](https://github.com/openshift/etcd/pull/298)
* [Full changelog](https://github.com/openshift/etcd/compare/16202ec4ecea353650b3681979ba73c5d8664d8c...e7911c0d19925c0a67328052a8580a80fb40cb5b)


### [hypershift](https://github.com/openshift/hypershift/tree/e3c671d9b45cc580a8f183196f37a490ed27280b)

* NO-JIRA: Update Konflux references (release-4.16) [#5328](https://github.com/openshift/hypershift/pull/5328)
* NO-JIRA: Red Hat Konflux update control-plane-operator-4-16 [#5337](https://github.com/openshift/hypershift/pull/5337)
* [OCPBUGS-47539](https://issues.redhat.com/browse/OCPBUGS-47539): Separate CPO containerfiles [#5333](https://github.com/openshift/hypershift/pull/5333)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.22.7-1733160835 (release-4.16) [#5295](https://github.com/openshift/hypershift/pull/5295)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.49 (release-4.16) [#5297](https://github.com/openshift/hypershift/pull/5297)
* NO-JIRA:  chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.48 (release-4.16) [#5294](https://github.com/openshift/hypershift/pull/5294)
* NO-JIRA: Update Konflux References and Perform Migration for Release-4.16 [#5261](https://github.com/openshift/hypershift/pull/5261)
* [OCPBUGS-39372](https://issues.redhat.com/browse/OCPBUGS-39372): Fixed NodePool version validation [#5219](https://github.com/openshift/hypershift/pull/5219)
* NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.47 (release-4.16) [#5209](https://github.com/openshift/hypershift/pull/5209)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#5207](https://github.com/openshift/hypershift/pull/5207)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.46 (release-4.16) [#5189](https://github.com/openshift/hypershift/pull/5189)
* [Full changelog](https://github.com/openshift/hypershift/compare/bcae46bd0d8c8ab4fd1822b43c41db8246a1d26b...e3c671d9b45cc580a8f183196f37a490ed27280b)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/d29506e7fea609bc8f004256c9c057e5429f72a1)

* [OCPBUGS-44870](https://issues.redhat.com/browse/OCPBUGS-44870): Bump dependency for CVE [#53](https://github.com/openshift/machine-api-provider-ibmcloud/pull/53)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/46c3c741fd44c1160a1f17d360723dc734d64648...d29506e7fea609bc8f004256c9c057e5429f72a1)


### [insights-operator](https://github.com/openshift/insights-operator/tree/5328a858f930153ea34e73afe64dd0ec342ae46f)

* [OCPBUGS-45203](https://issues.redhat.com/browse/OCPBUGS-45203): LokiStack gatherer (#1051) [#1051](https://github.com/openshift/insights-operator/pull/1051)
* [OCPBUGS-45044](https://issues.redhat.com/browse/OCPBUGS-45044): insightsoperator.operator.openshift.io resource is create-only (#1054) [#1054](https://github.com/openshift/insights-operator/pull/1054)
* [Full changelog](https://github.com/openshift/insights-operator/compare/faf70d79e50b62a3e5014c2081ee5203957c0d20...5328a858f930153ea34e73afe64dd0ec342ae46f)


### [ironic](https://github.com/openshift/ironic-image/tree/0323a0fc07d84232e6fec211386a80e8d65c24a2)

* [OCPBUGS-44895](https://issues.redhat.com/browse/OCPBUGS-44895): Bump Ironic [#610](https://github.com/openshift/ironic-image/pull/610)
* [Full changelog](https://github.com/openshift/ironic-image/compare/d56a7dc8465a36357ba4ede63eabc9897a06a657...0323a0fc07d84232e6fec211386a80e8d65c24a2)


### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/9116b918b6b9c2336fcbbf6c7c78c2e28fa2714a)

* : OCPBUGS-46663: Disable HTTP2 [#41](https://github.com/openshift/kubernetes-metrics-server/pull/41)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/8c2920c24c3705e43cefd6c6e65409b7da341ddc...9116b918b6b9c2336fcbbf6c7c78c2e28fa2714a)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/a226c293ab041a5ee7706308b66856ab486fbeae)

* [OCPBUGS-46048](https://issues.redhat.com/browse/OCPBUGS-46048): clean up containernetworking/plugins vendoring in sdn [#645](https://github.com/openshift/sdn/pull/645)
* [OCPBUGS-45806](https://issues.redhat.com/browse/OCPBUGS-45806): Stop checking ruleVersion [4.16] [#643](https://github.com/openshift/sdn/pull/643)
* [Full changelog](https://github.com/openshift/sdn/compare/c4dd04f7cece66d0a237f06cac9253d4e70103a7...a226c293ab041a5ee7706308b66856ab486fbeae)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/ac37878bf75e8b7ee850976663ef6eb61045195a)

* [OCPBUGS-45947](https://issues.redhat.com/browse/OCPBUGS-45947): vSphere klog initialization preventing verbose log messages [#1312](https://github.com/openshift/machine-api-operator/pull/1312)
* [OCPBUGS-45998](https://issues.redhat.com/browse/OCPBUGS-45998): Ensure deletion annotation takes priority and oldestPolicy can distinguish longer ages [#1313](https://github.com/openshift/machine-api-operator/pull/1313)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/0967219612b43f35342c162f5b92733f946bd9be...ac37878bf75e8b7ee850976663ef6eb61045195a)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/64460169e27091d8f8373b0952604ba2700d6d67)

* [OCPBUGS-45974](https://issues.redhat.com/browse/OCPBUGS-45974): Remove trailing periods from AWS provided hostnames [#4744](https://github.com/openshift/machine-config-operator/pull/4744)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/4bb3364914c4dbcdfcc08b0914f402cdd38f014f...64460169e27091d8f8373b0952604ba2700d6d67)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/6cfc2c8aaffbb679bb6caa36db78fb5ccfbb76dd)

* [OCPBUGS-44395](https://issues.redhat.com/browse/OCPBUGS-44395): remove unused package and upgrade vulnerable dependency [#272](https://github.com/openshift/monitoring-plugin/pull/272)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/442ccd10ad05a04f510932082cd5a791d66a997e...6cfc2c8aaffbb679bb6caa36db78fb5ccfbb76dd)


### [must-gather](https://github.com/openshift/must-gather/tree/353cd4b07ecac847c6c384775231dabc2bc44cdd)

* [OCPBUGS-46407](https://issues.redhat.com/browse/OCPBUGS-46407): Support gathering IPsec data [#469](https://github.com/openshift/must-gather/pull/469)
* [OCPBUGS-42969](https://issues.redhat.com/browse/OCPBUGS-42969): Collect etcd object count [#454](https://github.com/openshift/must-gather/pull/454)
* [Full changelog](https://github.com/openshift/must-gather/compare/a30f939e9fec211253eaf1c91d4b5c7401f300a4...353cd4b07ecac847c6c384775231dabc2bc44cdd)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/f1e2ceacdcca25cc6bfe2591ea596d98b83991a3)

* [OCPBUGS-45010](https://issues.redhat.com/browse/OCPBUGS-45010): Pass expected type to deploymentconfig/scale object validation. [#461](https://github.com/openshift/openshift-apiserver/pull/461)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/f09402cfac07d6e5040ac8b6f068703eba3c700f...f1e2ceacdcca25cc6bfe2591ea596d98b83991a3)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/bafa26de94c06009f563c8283ac42a78478667c5)

* [OCPBUGS-44456](https://issues.redhat.com/browse/OCPBUGS-44456): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.16 [#328](https://github.com/openshift/cluster-api-provider-openstack/pull/328)
* [OCPBUGS-44990](https://issues.redhat.com/browse/OCPBUGS-44990): Makefile changes for merge-bot [#341](https://github.com/openshift/cluster-api-provider-openstack/pull/341)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/10aa50e3b19a233c77f18fe6aa616e03874fa511...bafa26de94c06009f563c8283ac42a78478667c5)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/32cbf3f7b400d89e131ac00713cd426afd0fcce5)

* [OCPBUGS-47738](https://issues.redhat.com/browse/OCPBUGS-47738): catalog-operator: Delete Pods that were evicted (#3459) [#925](https://github.com/openshift/operator-framework-olm/pull/925)
* [OCPBUGS-46434](https://issues.redhat.com/browse/OCPBUGS-46434): CRD upgrade existing CR validation fix [#916](https://github.com/openshift/operator-framework-olm/pull/916)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/d718c4c564975f3d4fac468987c4424691201790...32cbf3f7b400d89e131ac00713cd426afd0fcce5)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/b24157b7b38f1be8a6175a2c7cae0fe8ece97f67)

* [OCPBUGS-47634](https://issues.redhat.com/browse/OCPBUGS-47634): Let OVN-northd bind remote ports [#2406](https://github.com/openshift/ovn-kubernetes/pull/2406)
* [OCPBUGS-45958](https://issues.redhat.com/browse/OCPBUGS-45958): bump OVS to 3.3.0-62.el9fdp for OCP 4.16 [#2388](https://github.com/openshift/ovn-kubernetes/pull/2388)
* [OCPBUGS-44457](https://issues.redhat.com/browse/OCPBUGS-44457): Add static route to the hairpin masquerade IPs to pod [#2346](https://github.com/openshift/ovn-kubernetes/pull/2346)
* [OCPBUGS-45942](https://issues.redhat.com/browse/OCPBUGS-45942): pin libreswan to 4.6-3.el9_0.3 [#2386](https://github.com/openshift/ovn-kubernetes/pull/2386)
* [OCPBUGS-45343](https://issues.redhat.com/browse/OCPBUGS-45343): Dockerfile: Update OVN to the 24.03.2-32.el9fdp minor release. [#2377](https://github.com/openshift/ovn-kubernetes/pull/2377)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/cb50d1472dc0bd6ff8d96aa3dd9b68897be85479...b24157b7b38f1be8a6175a2c7cae0fe8ece97f67)