# 4.16.0-okd-scos.1

Created: 2024-11-22 16:35:22 +0000 UTC

Image Digest: `sha256:06ffff6c6951046d03df0784bc18132c368a84fe72bcfb529484a58872c3a2e1`

Promoted from registry.ci.openshift.org/origin/release-scos:4.16.0-0.okd-scos-2024-11-22-061845


## Changes from 4.16.0-okd-scos.0

### Components

* Kubectl 1.29.7
* Kubernetes upgraded from 1.29.9 to 1.29.10
* Kubernetes Tests 1.29.0
* CentOS Stream CoreOS upgraded from 416.9.202410282248-0 to 416.9.202411211032-0


### Rebuilt images without code change

* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [e8478585](https://github.com/openshift/cluster-update-keys/commit/e8478585cca88314094112aa5933e5281f4707ea) `sha256:fe40090c77779264f37b8472e50316e7790587bc1df284f27d5f95bf63c979f4`
* stream-coreos `sha256:a1063638f762059609be1f33f4502b734450297c9cd31508d6e41ac1f27e2c04`
* stream-coreos-extensions `sha256:1d0e174a15226ffde389f005b0709e4cfbf6336835f2a6feafec5379bffb04b5`


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/60d797bea7418e10ec26ae1ccef4e42249705b6c)

* [OCPBUGS-44234](https://issues.redhat.com/browse/OCPBUGS-44234): [release-4.16] OSD-25934: Only tag NetworkInterfaces in RunInstances if IAM Allows It [#531](https://github.com/openshift/cluster-api-provider-aws/pull/531)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/aaaf00b18daf45c9eea93bc2924a6a7e22d27766...60d797bea7418e10ec26ae1ccef4e42249705b6c)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/dc63e8f7a7d8bdd9816c20c484a0af8ed28473a0)

* [OCPBUGS-44348](https://issues.redhat.com/browse/OCPBUGS-44348): Cherrypick oci ccm fix to 4.16 [#9188](https://github.com/openshift/installer/pull/9188)
* [OCPBUGS-43967](https://issues.redhat.com/browse/OCPBUGS-43967): Revendor assisted service external platform oci [#9150](https://github.com/openshift/installer/pull/9150)
* [OCPBUGS-38930](https://issues.redhat.com/browse/OCPBUGS-38930): import failure when esxi config is not the same in the cluster [#8898](https://github.com/openshift/installer/pull/8898)
* [OCPBUGS-36290](https://issues.redhat.com/browse/OCPBUGS-36290): IBMCloud: Ignore failed VPC regions [#8674](https://github.com/openshift/installer/pull/8674)
* [OCPBUGS-41885](https://issues.redhat.com/browse/OCPBUGS-41885): vSphere - If template is defined skip downloading [#8999](https://github.com/openshift/installer/pull/8999)
* [OCPBUGS-41490](https://issues.redhat.com/browse/OCPBUGS-41490): Update RHCOS 4.16 bootimage metadata to 416.94.202410211619-0 [#9158](https://github.com/openshift/installer/pull/9158)
* [OCPBUGS-43476](https://issues.redhat.com/browse/OCPBUGS-43476): IBMCloud: Handle pagination for subnets [#9102](https://github.com/openshift/installer/pull/9102)
* [Full changelog](https://github.com/openshift/installer/compare/8b2895457f8c97ea04ff79b9fc84e8561984458f...dc63e8f7a7d8bdd9816c20c484a0af8ed28473a0)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/03738f2d941b836800926fc701202b8d4b9d0605)

* [OCPBUGS-43556](https://issues.redhat.com/browse/OCPBUGS-43556): SCC-pinning for metal3-baremetal-operator [#453](https://github.com/openshift/cluster-baremetal-operator/pull/453)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/8f65ef620e5a47e3cb29167c6b5fb56c7b802627...03738f2d941b836800926fc701202b8d4b9d0605)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/14571e8a2c4e9bf52d7cc94da87959a56dc2a44c)

* [OCPBUGS-44179](https://issues.redhat.com/browse/OCPBUGS-44179): relax validation on delete and if failureDomains not configured [#331](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/331)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/b0cb3dfa22cfd2ba52caec1c73dee5ea765735ec...14571e8a2c4e9bf52d7cc94da87959a56dc2a44c)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/00111bc2e57dfd2c3c1d1da39a2a5ed36de9d068)

* [OCPBUGS-43797](https://issues.redhat.com/browse/OCPBUGS-43797): fix proxy config and leader election test flakes [#1148](https://github.com/openshift/cluster-image-registry-operator/pull/1148)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/d2df71ebce7c9099ab6c688be3b23fd8187743a5...00111bc2e57dfd2c3c1d1da39a2a5ed36de9d068)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/7fbf7f22ad6779c17414fc3072e2ea70cc2625c5)

* [OCPBUGS-44629](https://issues.redhat.com/browse/OCPBUGS-44629): Client internal DNS checks should be case insensitive [#244](https://github.com/openshift/cluster-machine-approver/pull/244)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/3eba7eeda244ea48c520d5384547659e9257cb58...7fbf7f22ad6779c17414fc3072e2ea70cc2625c5)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/c2c204a1244adc54d7b31ec35766b82bf6db413d)

* [OCPBUGS-44005](https://issues.redhat.com/browse/OCPBUGS-44005): fix(monitoring-plugin): disable emitting nginx version on error pages [#2521](https://github.com/openshift/cluster-monitoring-operator/pull/2521)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/1c2403d23e57b4d559f145e0997f554e7284e917...c2c204a1244adc54d7b31ec35766b82bf6db413d)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/179c38004739adde111d2fabf08bc94b0c663d9b)

* [OCPBUGS-43604](https://issues.redhat.com/browse/OCPBUGS-43604): OCPBUGS-42244: Exporting environment varialbe NODE_CNI for live migration [#2538](https://github.com/openshift/cluster-network-operator/pull/2538)
* [OCPBUGS-36210](https://issues.redhat.com/browse/OCPBUGS-36210): Set global IP forwarding sysctl parameters while starting ovnkube-node [#2422](https://github.com/openshift/cluster-network-operator/pull/2422)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/90aba6ff9737c0316f566720242e3f396d836d8a...179c38004739adde111d2fabf08bc94b0c663d9b)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/2280f54414cf403aed0a02b3fdb86ee6bf672410)

* [OCPBUGS-38269](https://issues.redhat.com/browse/OCPBUGS-38269): CVE-2024-24786 infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON [#363](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/363)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/bcc371ccbc9cab9bcb80b3f1a281a40c28011f59...2280f54414cf403aed0a02b3fdb86ee6bf672410)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/15c87e7e6d56f89fcc2453012e09283e965e71af)

* [OCPBUGS-43964](https://issues.redhat.com/browse/OCPBUGS-43964): Fix desired before sync_worker's work is initialized [#1097](https://github.com/openshift/cluster-version-operator/pull/1097)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/617769f980c5b2b59ad6ee821aad511de44a798d...15c87e7e6d56f89fcc2453012e09283e965e71af)


### [console](https://github.com/openshift/console/tree/4c4ea0402f8eacecfe7da1ec75de22e89a715efc)

* [OCPBUGS-44207](https://issues.redhat.com/browse/OCPBUGS-44207): Create RoleBinding will trigger Admission Webhook Warning [#14465](https://github.com/openshift/console/pull/14465)
* [OCPBUGS-44219](https://issues.redhat.com/browse/OCPBUGS-44219): Add flag to hide the pipelines-plugin pipeline builder extensions [#14466](https://github.com/openshift/console/pull/14466)
* [OCPBUGS-41673](https://issues.redhat.com/browse/OCPBUGS-41673): Update vendor imports to include all PatternFly components [#14273](https://github.com/openshift/console/pull/14273)
* [OCPBUGS-43834](https://issues.redhat.com/browse/OCPBUGS-43834): Enabling topology e2e tests on CI [#14438](https://github.com/openshift/console/pull/14438)
* [Full changelog](https://github.com/openshift/console/compare/472f4e84543875266d1ff7813a365aa48c122f5b...4c4ea0402f8eacecfe7da1ec75de22e89a715efc)


### [hyperkube, installer-kube-apiserver-artifacts, pod](https://github.com/openshift/kubernetes/tree/67d33871ba24f0e8c4d2d201a4c4decaabfa1eca)

* [OCPBUGS-44513](https://issues.redhat.com/browse/OCPBUGS-44513): Bump k8s api to 1.29.10 [#2133](https://github.com/openshift/kubernetes/pull/2133)
* [OCPBUGS-42555](https://issues.redhat.com/browse/OCPBUGS-42555): Allow pod to be scheduled if node's name and hostname mismatch [#2099](https://github.com/openshift/kubernetes/pull/2099)
* [Full changelog](https://github.com/openshift/kubernetes/compare/5865c5bb1ae6723901343b4c6274de5c8da9fbe3...67d33871ba24f0e8c4d2d201a4c4decaabfa1eca)


### [hypershift](https://github.com/openshift/hypershift/tree/6e9d513bdec97f2ea34eb41d3fda2e76c2b77e8a)

* NO-JIRA: chore(deps): update konflux references (release-4.16) [#5161](https://github.com/openshift/hypershift/pull/5161)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.45 (release-4.16) [#5163](https://github.com/openshift/hypershift/pull/5163)
* chore(deps): update konflux references (release-4.16) [#5135](https://github.com/openshift/hypershift/pull/5135)
* [OCPBUGS-44277](https://issues.redhat.com/browse/OCPBUGS-44277): Configure OAuth https proxy to dial cloud endpoints directly [#5069](https://github.com/openshift/hypershift/pull/5069)
* chore(deps): update konflux references (release-4.16) [#5119](https://github.com/openshift/hypershift/pull/5119)
* [OCPBUGS-43973](https://issues.redhat.com/browse/OCPBUGS-43973): Add network policies for konnectivity server and ignition server proxy [#4998](https://github.com/openshift/hypershift/pull/4998)
* NO-JIRA: Update Konflux references (release-4.16) [#5112](https://github.com/openshift/hypershift/pull/5112)
* NO-JIRA: Update Konflux references (release-4.16) [#5099](https://github.com/openshift/hypershift/pull/5099)
* chore(deps): update konflux references (release-4.16) [#5078](https://github.com/openshift/hypershift/pull/5078)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.44 (release-4.16) [#5059](https://github.com/openshift/hypershift/pull/5059)
* NO-JIRA: chore(deps): update konflux references (release-4.16) [#5058](https://github.com/openshift/hypershift/pull/5058)
* NO-JIRA: Update Konflux references (release-4.16) [#5042](https://github.com/openshift/hypershift/pull/5042)
* chore(deps): update konflux references (release-4.16) [#5024](https://github.com/openshift/hypershift/pull/5024)
* chore(deps): update konflux references (release-4.16) [#5019](https://github.com/openshift/hypershift/pull/5019)
* NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.43 (release-4.16) [#5017](https://github.com/openshift/hypershift/pull/5017)
* NO-JIRA: Update Konflux references (release-4.16) [#5012](https://github.com/openshift/hypershift/pull/5012)
* [Full changelog](https://github.com/openshift/hypershift/compare/5d2301a5b9f329b75932f22ce43b66ed5d6eaea0...6e9d513bdec97f2ea34eb41d3fda2e76c2b77e8a)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/7d4f93efe65a7c070ded6b889b61ae3d51e259fb)

* [OCPBUGS-43686](https://issues.redhat.com/browse/OCPBUGS-43686): UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.16 [#89](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/89)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/60b7ca98f5121f7e772437823b258a9fd0aa1d99...7d4f93efe65a7c070ded6b889b61ae3d51e259fb)


### [insights-operator](https://github.com/openshift/insights-operator/tree/faf70d79e50b62a3e5014c2081ee5203957c0d20)

* gather selected clusterroles (#1023) [#1023](https://github.com/openshift/insights-operator/pull/1023)
* [Full changelog](https://github.com/openshift/insights-operator/compare/9088c0d70cea4ec1d7f57ad2953430ee47f0fa29...faf70d79e50b62a3e5014c2081ee5203957c0d20)


### [ironic](https://github.com/openshift/ironic-image/tree/d56a7dc8465a36357ba4ede63eabc9897a06a657)

* [OCPBUGS-43950](https://issues.redhat.com/browse/OCPBUGS-43950), [OCPBUGS-43958](https://issues.redhat.com/browse/OCPBUGS-43958): Bump python-waitress [4.16] [#604](https://github.com/openshift/ironic-image/pull/604)
* [Full changelog](https://github.com/openshift/ironic-image/compare/38becaa359fa0cf62e15b35e2740d53a8105241a...d56a7dc8465a36357ba4ede63eabc9897a06a657)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/c4dd04f7cece66d0a237f06cac9253d4e70103a7)

* [OCPBUGS-44301](https://issues.redhat.com/browse/OCPBUGS-44301): Use copy() to duplicate a net.IP [#641](https://github.com/openshift/sdn/pull/641)
* [Full changelog](https://github.com/openshift/sdn/compare/e4a532229b6f12ffe556648fa0319b35acb46fc4...c4dd04f7cece66d0a237f06cac9253d4e70103a7)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/0967219612b43f35342c162f5b92733f946bd9be)

* [OCPBUGS-39028](https://issues.redhat.com/browse/OCPBUGS-39028): Updates message verbs to use %q where appropriate [#1282](https://github.com/openshift/machine-api-operator/pull/1282)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/7d6867c5fef45c08ddce1a95e9e5e7b3bd47ef80...0967219612b43f35342c162f5b92733f946bd9be)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/4bb3364914c4dbcdfcc08b0914f402cdd38f014f)

* [OCPBUGS-44337](https://issues.redhat.com/browse/OCPBUGS-44337): Removal of additionalTrustBundle CA does not remove certificate from node backport [#4688](https://github.com/openshift/machine-config-operator/pull/4688)
* [MCO-1342](https://issues.redhat.com/browse/MCO-1342): Backport Telemetry to 4.16 [#4649](https://github.com/openshift/machine-config-operator/pull/4649)
* [OCPBUGS-44043](https://issues.redhat.com/browse/OCPBUGS-44043): Disable ESP offload for OVS attached interfaces [#4676](https://github.com/openshift/machine-config-operator/pull/4676)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/20e767851f25a12f9be5701012abb881ac33ab25...4bb3364914c4dbcdfcc08b0914f402cdd38f014f)


### [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix/tree/28bf5963c7f82ae8d966a69562a19f038d819950)

* [OCPBUGS-30524](https://issues.redhat.com/browse/OCPBUGS-30524): bump google.golang.org/protobuf to v1.33.0 [#38](https://github.com/openshift/cloud-provider-nutanix/pull/38)
* [Full changelog](https://github.com/openshift/cloud-provider-nutanix/compare/c9bbc44c0200c8061506c465d0eb3c97fe94e197...28bf5963c7f82ae8d966a69562a19f038d819950)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/d718c4c564975f3d4fac468987c4424691201790)

* [OCPBUGS-44802](https://issues.redhat.com/browse/OCPBUGS-44802): fix: call TokenRequest API when service account token secret is missing [#900](https://github.com/openshift/operator-framework-olm/pull/900)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/c50e9ce2b292a188e99e72fc6dc59d1fb5e9e0cb...d718c4c564975f3d4fac468987c4424691201790)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/cb50d1472dc0bd6ff8d96aa3dd9b68897be85479)

* [OCPBUGS-42244](https://issues.redhat.com/browse/OCPBUGS-42244): Add hybird overlay pod IPs to the namespace address_set [#2352](https://github.com/openshift/ovn-kubernetes/pull/2352)
* [OCPBUGS-43344](https://issues.redhat.com/browse/OCPBUGS-43344): Add SDN node subnet gateway IP to host-network address_set [#2328](https://github.com/openshift/ovn-kubernetes/pull/2328)
* [OCPBUGS-42942](https://issues.redhat.com/browse/OCPBUGS-42942): Fix egress gateway pod cleanup for remote zone pods. [#2341](https://github.com/openshift/ovn-kubernetes/pull/2341)
* [OCPBUGS-36210](https://issues.redhat.com/browse/OCPBUGS-36210): Implementation required to enable Forwarding if it is already disabled [#2212](https://github.com/openshift/ovn-kubernetes/pull/2212)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/52c7ebe90417a98c4e276f735e1824ea04b27cf6...cb50d1472dc0bd6ff8d96aa3dd9b68897be85479)


### [tests](https://github.com/openshift/origin/tree/c740dbdf225dfeef7fa9470ae61da2507302116c)

* [OCPBUGS-44105](https://issues.redhat.com/browse/OCPBUGS-44105): Adjust createDNSPod() to support hypershift dual-stack test [#29258](https://github.com/openshift/origin/pull/29258)
* [OCPBUGS-39135](https://issues.redhat.com/browse/OCPBUGS-39135): Bump timeout for the pod-network-service endpoints check [#29052](https://github.com/openshift/origin/pull/29052)
* [Full changelog](https://github.com/openshift/origin/compare/c0f5926b93d95999a44c4237767dae066662b168...c740dbdf225dfeef7fa9470ae61da2507302116c)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/03b7e8ebf2c6347b40a340d892e1a66d47806300)

* [OCPBUGS-43881](https://issues.redhat.com/browse/OCPBUGS-43881): redact sensitive information when logging VCenter config [#134](https://github.com/openshift/vmware-vsphere-csi-driver/pull/134)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/0d0e8432aed0be6af7463dce0c630d3aa4a2ad60...03b7e8ebf2c6347b40a340d892e1a66d47806300)