# 4.17.0-okd-scos.ec.1

Created: 2024-10-23 19:37:03 +0000 UTC

Image Digest: `sha256:d43cfe9380a9e4a587a78c7caa042be56179421201e73aa188927d132e1dbca1`

Promoted from registry.ci.openshift.org/origin/release-scos:4.17.0-0.okd-scos-2024-10-23-095546


## Changes from 4.17.0-0.okd-scos-2024-09-24-104828

### Components

* Kubectl 1.30.2
* Kubernetes upgraded from 1.30.4 to 1.30.5
* Kubernetes Tests 1.30.0
* CentOS Stream CoreOS upgraded from 418.9.202409222032-0 to 418.9.202410161643-0


### Rebuilt images without code change

* stream-coreos `sha256:9eb7f8532eae7489a0e8261cb6310e1461358dcbf5894e324bb4ed295f07a11d`
* stream-coreos-extensions `sha256:685b71023578fb134b2c14e3edac3abcb8ae6e117df17c21a22e6e6c402af6dd`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/b2babb90b439acef3b05ccd8400b49b7ef9ecada)

* [OCPBUGS-42525](https://issues.redhat.com/browse/OCPBUGS-42525): Disable pprof for agent-based installer (#6897) [#6897](https://github.com/openshift/assisted-service/pull/6897)
* [OCPBUGS-43020](https://issues.redhat.com/browse/OCPBUGS-43020): Update go-jose to v2.6.3 to mitigate CVE-2024-28180 (#6892) [#6892](https://github.com/openshift/assisted-service/pull/6892)
* Updating ose-agent-installer-api-server-container image to be consistent with ART for 4.17 (#6709) [#6709](https://github.com/openshift/assisted-service/pull/6709)
* [OCPBUGS-42569](https://issues.redhat.com/browse/OCPBUGS-42569): Libraries bump to mitigate CVE-2024-27289 (#6832) [#6832](https://github.com/openshift/assisted-service/pull/6832)
* [MGMT-17805](https://issues.redhat.com/browse/MGMT-17805): Fix MCO reboot error for s390x (#6727) [#6727](https://github.com/openshift/assisted-service/pull/6727)
* [Full changelog](https://github.com/openshift/assisted-service/compare/351c82c9f29ed61cd3566d6d9f03804ea5b69e23...b2babb90b439acef3b05ccd8400b49b7ef9ecada)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/9614e8b4cd8393727d3fc12ff9df9e647c6f694b)

* [OCPBUGS-38466](https://issues.redhat.com/browse/OCPBUGS-38466): Allow controller to continue when assisted-service (#918) [#918](https://github.com/openshift/assisted-installer/pull/918)
* [OCPBUGS-43023](https://issues.redhat.com/browse/OCPBUGS-43023): Pick up latest CVE changes by bumping service (#919) [#919](https://github.com/openshift/assisted-installer/pull/919)
* [OCPBUGS-42156](https://issues.redhat.com/browse/OCPBUGS-42156): Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#904) [#904](https://github.com/openshift/assisted-installer/pull/904)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/4635ddfbe8e93213dc18607b21cd13443929fe6a...9614e8b4cd8393727d3fc12ff9df9e647c6f694b)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/29149b7793e1f15dcb0e39a54e79fddcac744ff8)

* [OCPBUGS-43024](https://issues.redhat.com/browse/OCPBUGS-43024): Pick up latest CVE changes by bumping service (#805) [#805](https://github.com/openshift/assisted-installer-agent/pull/805)
* [OCPBUGS-42157](https://issues.redhat.com/browse/OCPBUGS-42157): Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#783) [#783](https://github.com/openshift/assisted-installer-agent/pull/783)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/ef533920d8ea0cc6c96632d042e9cdd8fa0db7bf...29149b7793e1f15dcb0e39a54e79fddcac744ff8)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator](https://github.com/openshift/csi-operator/tree/b6ab34020d440c3a07f60dcbd31682bd117f112e)

* [OCPBUGS-42997](https://issues.redhat.com/browse/OCPBUGS-42997): Correct aws efs csi driver config as removable [#296](https://github.com/openshift/csi-operator/pull/296)
* [Full changelog](https://github.com/openshift/csi-operator/compare/df0b8234c1233cabc0085a7d63a7fd81bf05fd5a...b6ab34020d440c3a07f60dcbd31682bd117f112e)


### [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider/tree/9d4016701d355cd3a47f5ebe10f266d8971febc6)

* [OCPBUGS-34314](https://issues.redhat.com/browse/OCPBUGS-34314): Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.17 [#19](https://github.com/openshift/aws-encryption-provider/pull/19)
* hack: display diff on verify-mod-tidy failure [#25](https://github.com/openshift/aws-encryption-provider/pull/25)
* [Full changelog](https://github.com/openshift/aws-encryption-provider/compare/003c3caa034c46701157f84989838793683e3fe4...9d4016701d355cd3a47f5ebe10f266d8971febc6)


### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/b7a46ac8f11afa837abb7c419c0e6bf191f34cc4)

* [OCPBUGS-34277](https://issues.redhat.com/browse/OCPBUGS-34277): Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.17 [#7](https://github.com/openshift/azure-kubernetes-kms/pull/7)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/eab1dcfcf4a5758aad6b50dcefe85c93b7bcce59...b7a46ac8f11afa837abb7c419c0e6bf191f34cc4)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/6723dfd18056a6d002f792afce5547fc24874908)

* [OCPBUGS-43547](https://issues.redhat.com/browse/OCPBUGS-43547): Power VS: Fix incorrect error handling for AddSecurityGroupRule [#9112](https://github.com/openshift/installer/pull/9112)
* [OCPBUGS-43088](https://issues.redhat.com/browse/OCPBUGS-43088): GCP Validate Disk and Instance Type [#9091](https://github.com/openshift/installer/pull/9091)
* [OCPBUGS-43329](https://issues.redhat.com/browse/OCPBUGS-43329): IBMCloud: Handle pagination for subnets [#9096](https://github.com/openshift/installer/pull/9096)
* [OCPBUGS-42716](https://issues.redhat.com/browse/OCPBUGS-42716): Update RHCOS 4.17 bootimage metadata to 417.94.202410090854-0 [#9092](https://github.com/openshift/installer/pull/9092)
* [OCPBUGS-42806](https://issues.redhat.com/browse/OCPBUGS-42806): gather: simplify service regex for analyze [#9079](https://github.com/openshift/installer/pull/9079)
* [OCPBUGS-42996](https://issues.redhat.com/browse/OCPBUGS-42996): Power VS Ensure Metadata populated for CAPI/private cluster case on PowerVS [#9086](https://github.com/openshift/installer/pull/9086)
* [OCPBUGS-42115](https://issues.redhat.com/browse/OCPBUGS-42115): Add validation for gcp disk and instance types [#9023](https://github.com/openshift/installer/pull/9023)
* [OCPBUGS-42842](https://issues.redhat.com/browse/OCPBUGS-42842): add new tested azure instance types detected during QE 4.17 full function test [#9080](https://github.com/openshift/installer/pull/9080)
* [OCPBUGS-41812](https://issues.redhat.com/browse/OCPBUGS-41812): Validate MTU for custom network [#9084](https://github.com/openshift/installer/pull/9084)
* [OCPBUGS-42794](https://issues.redhat.com/browse/OCPBUGS-42794): PowerVS: Add support for persistent Transit Gateways [#9078](https://github.com/openshift/installer/pull/9078)
* [OCPBUGS-42699](https://issues.redhat.com/browse/OCPBUGS-42699): machines: don't sort mpool zones [#9065](https://github.com/openshift/installer/pull/9065)
* [OCPBUGS-42483](https://issues.redhat.com/browse/OCPBUGS-42483): PowerVS: update capi ibmcloud c6bcd313 for 4.17 [#9054](https://github.com/openshift/installer/pull/9054)
* [OCPBUGS-39414](https://issues.redhat.com/browse/OCPBUGS-39414): OpenStack: Install CI dependencies from rpm [#8994](https://github.com/openshift/installer/pull/8994)
* [OCPBUGS-42142](https://issues.redhat.com/browse/OCPBUGS-42142): Skip private managed zone creation for xpn installs [#9033](https://github.com/openshift/installer/pull/9033)
* [OCPBUGS-42183](https://issues.redhat.com/browse/OCPBUGS-42183): Add GCP N4 Machine Series to tested instances for OCP [#9041](https://github.com/openshift/installer/pull/9041)
* [OCPBUGS-42126](https://issues.redhat.com/browse/OCPBUGS-42126): add tested IBMCloud instance types in 4.17 test [#9030](https://github.com/openshift/installer/pull/9030)
* [OCPBUGS-42118](https://issues.redhat.com/browse/OCPBUGS-42118): Set default release image to 4.17 [#9026](https://github.com/openshift/installer/pull/9026)
* [OCPBUGS-42116](https://issues.redhat.com/browse/OCPBUGS-42116): Remove bindings for XPN installs [#9024](https://github.com/openshift/installer/pull/9024)
* [OCPBUGS-39409](https://issues.redhat.com/browse/OCPBUGS-39409): Fix IPv6 security group rule for schedulable master [#8970](https://github.com/openshift/installer/pull/8970)
* [OCPBUGS-41622](https://issues.redhat.com/browse/OCPBUGS-41622): update RHCOS 4.17 bootimage metadata to 417.94.202409120353-0 [#9019](https://github.com/openshift/installer/pull/9019)
* [Full changelog](https://github.com/openshift/installer/compare/5faddcb597e086c32fbda6115e2c672e7a246676...6723dfd18056a6d002f792afce5547fc24874908)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/897ef0bc49fb17db0896ce481ec8243894410b3d)

* [OCPBUGS-41642](https://issues.redhat.com/browse/OCPBUGS-41642): vendor: Update openshift/api to pick up the v4.17 capability set [#1876](https://github.com/openshift/oc/pull/1876)
* [OCPBUGS-42176](https://issues.redhat.com/browse/OCPBUGS-42176): Fix copy artifacts for all CPU architectures [#1880](https://github.com/openshift/oc/pull/1880)
* [OCPBUGS-42721](https://issues.redhat.com/browse/OCPBUGS-42721): Update push targets of digest with new appended tags [#1892](https://github.com/openshift/oc/pull/1892)
* [OCPBUGS-42580](https://issues.redhat.com/browse/OCPBUGS-42580): fix outputname flag for node-image create command [#1888](https://github.com/openshift/oc/pull/1888)
* [OCPBUGS-42164](https://issues.redhat.com/browse/OCPBUGS-42164): Check cast result in adm prune deployments to prevent panic [#1879](https://github.com/openshift/oc/pull/1879)
* [Full changelog](https://github.com/openshift/oc/compare/bc58b3a9c70cee7b03d1943e95b48ced9357711b...897ef0bc49fb17db0896ce481ec8243894410b3d)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/3d5dade6a6505d157f1978796894da83a21c1fd5)

* [OCPBUGS-43335](https://issues.redhat.com/browse/OCPBUGS-43335): Update github.com/sirupsen/logrus v1.9.3 [#766](https://github.com/openshift/cloud-credential-operator/pull/766)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/d5b0b95c40f72fc6d8444f86dbc6d65f836702e7...3d5dade6a6505d157f1978796894da83a21c1fd5)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/0ba43254571fa060b1518153c8d701f891589171)

* [OCPBUGS-42784](https://issues.redhat.com/browse/OCPBUGS-42784): manifests should not use APIs that are removed in upcoming releases [#712](https://github.com/openshift/cluster-authentication-operator/pull/712)
* [OCPBUGS-42545](https://issues.redhat.com/browse/OCPBUGS-42545): when no type is specified, don't make illegal condition [#703](https://github.com/openshift/cluster-authentication-operator/pull/703)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/8e8a31d802182c00252221e8233f2d6df609f363...0ba43254571fa060b1518153c8d701f891589171)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/2cc85adaec732c9408ca9d6b37b6b9faabe1d30a)

* [OCPBUGS-41926](https://issues.redhat.com/browse/OCPBUGS-41926): SCC-pinning for metal3-baremetal-operator [#444](https://github.com/openshift/cluster-baremetal-operator/pull/444)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/c09fb7310873c657a15c8541f7cc20cccdbc4ede...2cc85adaec732c9408ca9d6b37b6b9faabe1d30a)


### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/95dd9129fa44410a0103fe087d13e27dddecab19)

* [OCPBUGS-34034](https://issues.redhat.com/browse/OCPBUGS-34034): Updating ose-cluster-bootstrap-container image to be consistent with ART for 4.17 [#108](https://github.com/openshift/cluster-bootstrap/pull/108)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/27bfb59fd0ff399224ee673869b8875ef10f1962...95dd9129fa44410a0103fe087d13e27dddecab19)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/f4bca806981f51160b5e5d69aa87d6e3cee15dac)

* [OCPBUGS-41576](https://issues.redhat.com/browse/OCPBUGS-41576): Use CAPO v0.10 and API v1beta1 [#205](https://github.com/openshift/cluster-capi-operator/pull/205)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/3f893aea1fad5fe124e888453ec0c67c0186da11...f4bca806981f51160b5e5d69aa87d6e3cee15dac)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/32fd83999e7eae9941abe7da915bacae1d50e49c)

* [OCPBUGS-43389](https://issues.redhat.com/browse/OCPBUGS-43389): update goimports targets [#371](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/371)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/f7fa87e4a55cf18a73fa40d2cf56f603d76c8b7f...32fd83999e7eae9941abe7da915bacae1d50e49c)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/975fc013a240a003f23e51b9dcd9bfcdb112e801)

* [OCPBUGS-38574](https://issues.redhat.com/browse/OCPBUGS-38574): use pooled client for etcd single member health checks [#1327](https://github.com/openshift/cluster-etcd-operator/pull/1327)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/8f04f689ce0dd513660e87ce4c12c7f0bf7747eb...975fc013a240a003f23e51b9dcd9bfcdb112e801)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/dd8791c76bd60468f4fb3e357ba061835f2e7c48)

* [OCPBUGS-43350](https://issues.redhat.com/browse/OCPBUGS-43350): pkg/storage/azure: also check for auth failure error code on deletion [#1139](https://github.com/openshift/cluster-image-registry-operator/pull/1139)
* [OCPBUGS-42812](https://issues.redhat.com/browse/OCPBUGS-42812): azureclient: stop validating credentials when creating the client [#1130](https://github.com/openshift/cluster-image-registry-operator/pull/1130)
* [OCPBUGS-42394](https://issues.redhat.com/browse/OCPBUGS-42394): pkg/storage/azure: use cluster-api tag key to discover vnet [#1125](https://github.com/openshift/cluster-image-registry-operator/pull/1125)
* [OCPBUGS-42362](https://issues.redhat.com/browse/OCPBUGS-42362): Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) [#1124](https://github.com/openshift/cluster-image-registry-operator/pull/1124)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/402a511b2d1cbb099f798075ef036180775e95e0...dd8791c76bd60468f4fb3e357ba061835f2e7c48)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/7bcf866a2d3e00b7e5a48e9f3149dba93e49e0ad)

* [OCPBUGS-34310](https://issues.redhat.com/browse/OCPBUGS-34310): Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART for 4.17 [#1738](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1738)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/937f8a77e3274c3ef8907424f4d3294ef642642e...7bcf866a2d3e00b7e5a48e9f3149dba93e49e0ad)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/aed5f6c74a0e174901709f18eecad6573cd80784)

* [OCPBUGS-42612](https://issues.redhat.com/browse/OCPBUGS-42612): Sync Release 4.17 with UPSTREAM [#48](https://github.com/openshift/cluster-api-operator/pull/48)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/b90945e939eb726ffd42a746add7d1e945df5128...aed5f6c74a0e174901709f18eecad6573cd80784)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/32c847111e45313f34d615196d00aeeffd50a281)

* [OCPBUGS-43312](https://issues.redhat.com/browse/OCPBUGS-43312): Client internal DNS checks should be case insensitive [#242](https://github.com/openshift/cluster-machine-approver/pull/242)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/d29c16b2167bdf84f6f4b8fe60517182580e3a18...32c847111e45313f34d615196d00aeeffd50a281)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/6267e06473d93cc32c584d7856c8f3daa1d97854)

* [OCPBUGS-43545](https://issues.redhat.com/browse/OCPBUGS-43545): Fix api doc on Thanos Ruler default retention [#2501](https://github.com/openshift/cluster-monitoring-operator/pull/2501)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/a7ed4a3751af0d5e3d96f07d9b69468397319a2a...6267e06473d93cc32c584d7856c8f3daa1d97854)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/950651d28fadb5b058ac4652c44eca1b9ac04fbb)

* [OCPBUGS-43343](https://issues.redhat.com/browse/OCPBUGS-43343): OCPBUGS-42244: Exporting environment varialbe NODE_CNI for live migration [#2536](https://github.com/openshift/cluster-network-operator/pull/2536)
* [OCPBUGS-43317](https://issues.redhat.com/browse/OCPBUGS-43317): Use CNIConfDir for mounting directory to ovn-ipsec-host pod [#2533](https://github.com/openshift/cluster-network-operator/pull/2533)
* [OCPBUGS-39300](https://issues.redhat.com/browse/OCPBUGS-39300): rebase openshift/api for openshift-sdn removal [4.17] [#2477](https://github.com/openshift/cluster-network-operator/pull/2477)
* [OCPBUGS-39121](https://issues.redhat.com/browse/OCPBUGS-39121): Live migration: report network overlap via live_migration_blocked metric [#2483](https://github.com/openshift/cluster-network-operator/pull/2483)
* [OCPBUGS-42260](https://issues.redhat.com/browse/OCPBUGS-42260): Configure narrowing=yes for IPsec connections [#2510](https://github.com/openshift/cluster-network-operator/pull/2510)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/a3188633549ddd7241484d733f3282bad959482b...950651d28fadb5b058ac4652c44eca1b9ac04fbb)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/d7086bb43aa2ce0fb9f277c170d8d43f5f81be73)

* E2E: wait for ovs services affinity to reset after deployment deletion (#1160) [#1160](https://github.com/openshift/cluster-node-tuning-operator/pull/1160)
* [OCPBUGS-38721](https://issues.redhat.com/browse/OCPBUGS-38721): tuned: distinguish deferred updates (#1149) [#1149](https://github.com/openshift/cluster-node-tuning-operator/pull/1149)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/a4e7efa04c136b354a761508231214ac0fa1db1c...d7086bb43aa2ce0fb9f277c170d8d43f5f81be73)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/3a44b4db39d3ffc8cb2736985e2fa8edeb7868fd)

* [OCPBUGS-39120](https://issues.redhat.com/browse/OCPBUGS-39120): Sync the non-OKD assets from master to release-4.17 [#577](https://github.com/openshift/cluster-samples-operator/pull/577)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/fde847e35856d9974ad8145b33e95bf125906b5f...3a44b4db39d3ffc8cb2736985e2fa8edeb7868fd)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/1490ce00ea780369acae6bd54e06f2fc60e53249)

* [OCPBUGS-43112](https://issues.redhat.com/browse/OCPBUGS-43112): assets: shared-resource: hypershift: add pull-secret to operator SA [#520](https://github.com/openshift/cluster-storage-operator/pull/520)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/eba39ffecf5a7a55a46443c85fd0ecd9ccc0453f...1490ce00ea780369acae6bd54e06f2fc60e53249)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/1e57277c34cb32ee4e5489fb4139a5fe97f338ad)

* [OCPBUGS-41642](https://issues.redhat.com/browse/OCPBUGS-41642): vendor: Update openshift/api to pick up the v4.17 capability sets [#1087](https://github.com/openshift/cluster-version-operator/pull/1087)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/ce6c0b89e14e4d26bc2918f160847fd7e9aeb083...1e57277c34cb32ee4e5489fb4139a5fe97f338ad)


### [console](https://github.com/openshift/console/tree/203b90125b296e5ff11d9e4b673ca2e24bbae6d3)

* [OCPBUGS-42955](https://issues.redhat.com/browse/OCPBUGS-42955): Enabling topology e2e tests on CI [#14402](https://github.com/openshift/console/pull/14402)
* [OCPBUGS-43009](https://issues.redhat.com/browse/OCPBUGS-43009): Project is "Undefined" on "VolumeSnapshot" create page [#14389](https://github.com/openshift/console/pull/14389)
* [OCPBUGS-42607](https://issues.redhat.com/browse/OCPBUGS-42607): add role exclusion to avoid unexpected triggering the namespace menu [#14351](https://github.com/openshift/console/pull/14351)
* [OCPBUGS-42606](https://issues.redhat.com/browse/OCPBUGS-42606): make createdBy mandatory and auto fill with the current user [#14352](https://github.com/openshift/console/pull/14352)
* [OCPBUGS-42585](https://issues.redhat.com/browse/OCPBUGS-42585): Red Hat Camel K Operator installation via cli [#14346](https://github.com/openshift/console/pull/14346)
* [OCPBUGS-42299](https://issues.redhat.com/browse/OCPBUGS-42299): Increase login flow state paramater length/entropy [#14318](https://github.com/openshift/console/pull/14318)
* [OCPBUGS-42391](https://issues.redhat.com/browse/OCPBUGS-42391): change "Partial cluster update" to "Control plane onl… [#14323](https://github.com/openshift/console/pull/14323)
* [OCPBUGS-42380](https://issues.redhat.com/browse/OCPBUGS-42380): Allow operators to enable monitoring by default [#14316](https://github.com/openshift/console/pull/14316)
* [Full changelog](https://github.com/openshift/console/compare/9f7edb66ac0507ebdf53cc65166445f48540cdce...203b90125b296e5ff11d9e4b673ca2e24bbae6d3)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/efc99a2a5e72ec3d3ecd1792fdd9225e74ac6ea8)

* [OCPBUGS-38457](https://issues.redhat.com/browse/OCPBUGS-38457): Add missing healthchecks [#240](https://github.com/openshift/csi-driver-manila-operator/pull/240)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/34052f2570cd39144f7ba9ec2e382644e81dcc07...efc99a2a5e72ec3d3ecd1792fdd9225e74ac6ea8)


### [etcd, installer-etcd-artifacts](https://github.com/openshift/etcd/tree/c82057da87388662904654d4f01acd06595ee22d)

* [OCPBUGS-42680](https://issues.redhat.com/browse/OCPBUGS-42680): Rebase etcd 3.5.16 openshift 4.17 [#291](https://github.com/openshift/etcd/pull/291)
* NO-JIRA: use golang 1.22 image [#286](https://github.com/openshift/etcd/pull/286)
* [Full changelog](https://github.com/openshift/etcd/compare/1fb3165305efc8d986344b555b22592e6e6c1786...c82057da87388662904654d4f01acd06595ee22d)


### [hyperkube, installer-kube-apiserver-artifacts, pod](https://github.com/openshift/kubernetes/tree/6816ea6a977365195404d43756efd1c42ac0b2a7)

* [OCPBUGS-42640](https://issues.redhat.com/browse/OCPBUGS-42640): Unrevert Bump k8s api to 1.30.5" [#2107](https://github.com/openshift/kubernetes/pull/2107)
* [OCPBUGS-42640](https://issues.redhat.com/browse/OCPBUGS-42640): Revert #2089 "OCPBUGS-42167: Bump k8s api to 1.30.5" [#2100](https://github.com/openshift/kubernetes/pull/2100)
* [OCPBUGS-42167](https://issues.redhat.com/browse/OCPBUGS-42167): Bump k8s api to 1.30.5 [#2089](https://github.com/openshift/kubernetes/pull/2089)
* [OCPBUGS-42019](https://issues.redhat.com/browse/OCPBUGS-42019): UPSTREAM: <drop>: bump(github.com/openshift/apiserver-library-go) [#2087](https://github.com/openshift/kubernetes/pull/2087)
* [Full changelog](https://github.com/openshift/kubernetes/compare/d3adea4933c942000ceb2c9ca98b1920814f5b34...6816ea6a977365195404d43756efd1c42ac0b2a7)


### [hypershift](https://github.com/openshift/hypershift/tree/b9e977da802d07591cd9fb8ad91ba24116f4a3a8)

* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4958](https://github.com/openshift/hypershift/pull/4958)
* [OCPBUGS-43464](https://issues.redhat.com/browse/OCPBUGS-43464): Pass feature flags to clusterpolicy controller [#4928](https://github.com/openshift/hypershift/pull/4928)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4931](https://github.com/openshift/hypershift/pull/4931)
* [OCPBUGS-42704](https://issues.redhat.com/browse/OCPBUGS-42704): Run 2 replicas of active/passive HA components [#4843](https://github.com/openshift/hypershift/pull/4843)
* [OCPBUGS-43316](https://issues.redhat.com/browse/OCPBUGS-43316): Enforce privileged PSA by default [#4834](https://github.com/openshift/hypershift/pull/4834)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4921](https://github.com/openshift/hypershift/pull/4921)
* [OCPBUGS-43374](https://issues.redhat.com/browse/OCPBUGS-43374): [release-4.17] (manual backport) openstack/e2e: re-work nodepool tests [#4914](https://github.com/openshift/hypershift/pull/4914)
* NO-JIRA: chore(deps): update konflux references to 674e70f (release-4.17) [#4907](https://github.com/openshift/hypershift/pull/4907)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4895](https://github.com/openshift/hypershift/pull/4895)
* [OCPBUGS-43051](https://issues.redhat.com/browse/OCPBUGS-43051): Use guest DNS resolution in Konnectivity HTTPS proxy by default [#4885](https://github.com/openshift/hypershift/pull/4885)
* [HOSTEDCP-2020](https://issues.redhat.com/browse/HOSTEDCP-2020): [release-4.17] Add support for SharedVPC [#4873](https://github.com/openshift/hypershift/pull/4873)
* [HOSTEDCP-2023](https://issues.redhat.com/browse/HOSTEDCP-2023): [release-4.17] Split worker and vpc endpoint security groups [#4882](https://github.com/openshift/hypershift/pull/4882)
* [OCPBUGS-42974](https://issues.redhat.com/browse/OCPBUGS-42974): [release-4.17] Do not send traffic to local audit-webhook through konnectivity [#4869](https://github.com/openshift/hypershift/pull/4869)
* NO-JIRA: Remove EnsurePSANotPrivileged check [#4855](https://github.com/openshift/hypershift/pull/4855)
* [OCPBUGS-42714](https://issues.redhat.com/browse/OCPBUGS-42714): label routes only when HCP router used [#4845](https://github.com/openshift/hypershift/pull/4845)
* NO-JIRA: chore(deps): update konflux references to 37b9187 (release-4.17) [#4854](https://github.com/openshift/hypershift/pull/4854)
* [OCPBUGS-42390](https://issues.redhat.com/browse/OCPBUGS-42390): Add Annotation to skip deleting hcp namespace [#4792](https://github.com/openshift/hypershift/pull/4792)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4812](https://github.com/openshift/hypershift/pull/4812)
* NO-JIRA: e2e: openstack: fix nil deref in route53 teardown [#4810](https://github.com/openshift/hypershift/pull/4810)
* [OCPBUGS-42261](https://issues.redhat.com/browse/OCPBUGS-42261): Conditionally manage kubeconfig secrets for DNS and Ingress operators [#4764](https://github.com/openshift/hypershift/pull/4764)
* [OCPBUGS-42098](https://issues.redhat.com/browse/OCPBUGS-42098): Use KubeClientCABundle for HostedClusterConfigOperator cluster-signer-ca [#4736](https://github.com/openshift/hypershift/pull/4736)
* chore(deps): update konflux references to 5ac9b24 (release-4.17) [#4780](https://github.com/openshift/hypershift/pull/4780)
* [Full changelog](https://github.com/openshift/hypershift/compare/232a3c1fc0afa8e103a11963afd954c2bf9d20df...b9e977da802d07591cd9fb8ad91ba24116f4a3a8)


### [insights-operator](https://github.com/openshift/insights-operator/tree/4f503fb6f2b83471e24f8418ce57d96ce7e10245)

* Added new translation for architectures (#1005) [#1005](https://github.com/openshift/insights-operator/pull/1005)
* [OCPBUGS-42357](https://issues.redhat.com/browse/OCPBUGS-42357): set the RemoteConfigurationAvailable and RemoteConfigu… (#1001) [#1001](https://github.com/openshift/insights-operator/pull/1001)
* [OCPBUGS-41833](https://issues.redhat.com/browse/OCPBUGS-41833): populate the endpoint parameter when there's an error (#998) [#998](https://github.com/openshift/insights-operator/pull/998)
* [Full changelog](https://github.com/openshift/insights-operator/compare/d44b5f1be3be9c1630b1216cd231e47758dcd30f...4f503fb6f2b83471e24f8418ce57d96ce7e10245)


### [ironic](https://github.com/openshift/ironic-image/tree/90a9bc5f9dd3ad4d65834c3b819054dfa477e9c2)

* [OCPBUGS-42692](https://issues.redhat.com/browse/OCPBUGS-42692): Include fixes for CVE-2024-5569 [#590](https://github.com/openshift/ironic-image/pull/590)
* [OCPBUGS-42509](https://issues.redhat.com/browse/OCPBUGS-42509): Include fix for CVE-2024-47211 [#593](https://github.com/openshift/ironic-image/pull/593)
* [Full changelog](https://github.com/openshift/ironic-image/compare/f70cb6807c16e40bc0937f52e23422142ca19793...90a9bc5f9dd3ad4d65834c3b819054dfa477e9c2)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/f5f742d8df2b1879a565809632ce2b43b965b4d4)

* [OCPBUGS-39013](https://issues.redhat.com/browse/OCPBUGS-39013): Bump ironic-lib to fix utf8 decoding issue [#155](https://github.com/openshift/ironic-agent-image/pull/155)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/8c92604b7557101eb0537c5f99418829948eec26...f5f742d8df2b1879a565809632ce2b43b965b4d4)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/7718265cc7640f6fa0d75eee366e424911d6f00f)

* [OCPBUGS-42697](https://issues.redhat.com/browse/OCPBUGS-42697): protobuf bump [4.17] [#112](https://github.com/openshift/kube-rbac-proxy/pull/112)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/b2d2c462e801d7b8890347c017184153c3c8eaab...7718265cc7640f6fa0d75eee366e424911d6f00f)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/139064c02af33d94baa669cce30967bfea534d13)

* [OCPBUGS-42414](https://issues.redhat.com/browse/OCPBUGS-42414): Ensure deletion annotation takes priority and oldestPolicy can distinguish longer ages [#1293](https://github.com/openshift/machine-api-operator/pull/1293)
* [OCPBUGS-38868](https://issues.redhat.com/browse/OCPBUGS-38868): Updates message verbs to use %q where appropriate [#1278](https://github.com/openshift/machine-api-operator/pull/1278)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/8fda37a8b2da7fccd9c5ccd002edbd5f3a067466...139064c02af33d94baa669cce30967bfea534d13)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/6308e62a4edabb857def36e2ffdaad1f92cc4734)

* [OCPBUGS-42108](https://issues.redhat.com/browse/OCPBUGS-42108): Do not use 'restart' for 'oneshot' service [#4615](https://github.com/openshift/machine-config-operator/pull/4615)
* [OCPBUGS-42979](https://issues.redhat.com/browse/OCPBUGS-42979): Regenerate the rendered MC in use when deleted [#4634](https://github.com/openshift/machine-config-operator/pull/4634)
* [OCPBUGS-42677](https://issues.redhat.com/browse/OCPBUGS-42677): The MCO does not properly degrade when pools are failing to render a new config [#4623](https://github.com/openshift/machine-config-operator/pull/4623)
* [OCPBUGS-42081](https://issues.redhat.com/browse/OCPBUGS-42081): Check for kernel arg diff in updateOnClusterBuild [#4595](https://github.com/openshift/machine-config-operator/pull/4595)
* [OCPBUGS-41255](https://issues.redhat.com/browse/OCPBUGS-41255): Set ESP offloads off in bonds if slaves don't support them [#4598](https://github.com/openshift/machine-config-operator/pull/4598)
* [OCPBUGS-42256](https://issues.redhat.com/browse/OCPBUGS-42256): Panic seen in CI job for MCC pod [#4603](https://github.com/openshift/machine-config-operator/pull/4603)
* [OCPBUGS-42200](https://issues.redhat.com/browse/OCPBUGS-42200): MCPs report wrong number of nodes when we move nodes from one custom MCP to another custom MCP [#4602](https://github.com/openshift/machine-config-operator/pull/4602)
* [OCPBUGS-41357](https://issues.redhat.com/browse/OCPBUGS-41357): Enable the use of Linux Bridge as the ovs default port connection [#4567](https://github.com/openshift/machine-config-operator/pull/4567)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/858c0a2e5965fcff48716c1db01ee76bb1eed9f2...6308e62a4edabb857def36e2ffdaad1f92cc4734)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/9c9c0a02591a627b194e3966679a6fdbbd7718e5)

* [OCPBUGS-43238](https://issues.redhat.com/browse/OCPBUGS-43238): upgrade dynamic plugin sdk to remove vulnerable dependencies 4.17 [#216](https://github.com/openshift/monitoring-plugin/pull/216)
* [OCPBUGS-42408](https://issues.redhat.com/browse/OCPBUGS-42408): fix path-to-regexp dependency [#196](https://github.com/openshift/monitoring-plugin/pull/196)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/ccaf40d66254b328a688abddef841b7763c726d6...9c9c0a02591a627b194e3966679a6fdbbd7718e5)


### [must-gather](https://github.com/openshift/must-gather/tree/cd767264beedca7d5554ccd0f6bf736861710c04)

* [OCPBUGS-42958](https://issues.redhat.com/browse/OCPBUGS-42958): Gather OSUS data [#443](https://github.com/openshift/must-gather/pull/443)
* [OCPBUGS-42835](https://issues.redhat.com/browse/OCPBUGS-42835): [Release-4.17] Network logs collection: skip unready nodes [#445](https://github.com/openshift/must-gather/pull/445)
* [CNF-13837](https://issues.redhat.com/browse/CNF-13837): gather_ppc: fallback option when NTO image not found [#436](https://github.com/openshift/must-gather/pull/436)
* [MON-3108](https://issues.redhat.com/browse/MON-3108): Add gather_metrics for Prometheus fetching [#434](https://github.com/openshift/must-gather/pull/434)
* [OCPBUGS-33959](https://issues.redhat.com/browse/OCPBUGS-33959), [SDN-5066](https://issues.redhat.com/browse/SDN-5066): Remove needless multus log collection [#431](https://github.com/openshift/must-gather/pull/431)
* NO-JIRA: Update dockerfile rename changes [#433](https://github.com/openshift/must-gather/pull/433)
* NO-JIRA: Rename Dockerfile [#432](https://github.com/openshift/must-gather/pull/432)
* [Full changelog](https://github.com/openshift/must-gather/compare/0150d70389e8b68f7aab5195a5e2a3162a31552a...cd767264beedca7d5554ccd0f6bf736861710c04)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/426d13819907247cfcefcdc67d194a2d222e001b)

* [CNV-49305](https://issues.redhat.com/browse/CNV-49305): fix for virt perspective [#128](https://github.com/openshift/networking-console-plugin/pull/128)
* [OCPBUGS-42678](https://issues.redhat.com/browse/OCPBUGS-42678): OCPBUGS-42352: add service weight [#125](https://github.com/openshift/networking-console-plugin/pull/125)
* [OCPBUGS-39390](https://issues.redhat.com/browse/OCPBUGS-39390): fix sorting on lists [#123](https://github.com/openshift/networking-console-plugin/pull/123)
* [OCPBUGS-42582](https://issues.redhat.com/browse/OCPBUGS-42582): fix html in translations [#122](https://github.com/openshift/networking-console-plugin/pull/122)
* [OCPBUGS-42581](https://issues.redhat.com/browse/OCPBUGS-42581): Route edit form [#121](https://github.com/openshift/networking-console-plugin/pull/121)
* [CNV-48190](https://issues.redhat.com/browse/CNV-48190): move title networkpolicies above tabs [#120](https://github.com/openshift/networking-console-plugin/pull/120)
* Fix alert ServiceSelector [#111](https://github.com/openshift/networking-console-plugin/pull/111)
* [CNV-47528](https://issues.redhat.com/browse/CNV-47528): Fix key value in selector [#110](https://github.com/openshift/networking-console-plugin/pull/110)
* Revert IPAM (subnets input) [#115](https://github.com/openshift/networking-console-plugin/pull/115)
* [OCPBUGS-42248](https://issues.redhat.com/browse/OCPBUGS-42248): fix pagination during sorting [#109](https://github.com/openshift/networking-console-plugin/pull/109)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/dbc8e452184fd2cf7b662059dd9d5400bceef30a...426d13819907247cfcefcdc67d194a2d222e001b)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/07714b7c836ec3ad1b776f25b44c3b2c2f083aa2)

* [OCPBUGS-37867](https://issues.redhat.com/browse/OCPBUGS-37867): Use tag only when image by tag and digest (#911) (#932) [#911](https://github.com/openshift/oc-mirror/pull/911)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/c9123030d5df99847cf3779856d90ff83cf64dcb...07714b7c836ec3ad1b776f25b44c3b2c2f083aa2)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/cd1a4bc86137d83c2243c76b069a8ce6785a1658)

* [OCPBUGS-42232](https://issues.redhat.com/browse/OCPBUGS-42232): fail image import when both image and error are nil [#450](https://github.com/openshift/openshift-apiserver/pull/450)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/3c3cb886cb4621e7584156af68bdcf108c27cdaa...cd1a4bc86137d83c2243c76b069a8ce6785a1658)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/fddd93bf30628b15fee660e94faea94b4a222365)

* NO-JIRA: cleanup root and app OWNERS [#346](https://github.com/openshift/openshift-controller-manager/pull/346)
* [OCPBUGS-42362](https://issues.redhat.com/browse/OCPBUGS-42362): Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) [#339](https://github.com/openshift/openshift-controller-manager/pull/339)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/7682a61bedd0db855bb9696bfb08f6078688ea4e...fddd93bf30628b15fee660e94faea94b4a222365)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/c40e3df6e718f40d6c155d328a06e3d629abb7e8)

* [OCPBUGS-43584](https://issues.redhat.com/browse/OCPBUGS-43584): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.17 [#323](https://github.com/openshift/cluster-api-provider-openstack/pull/323)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/9db571c5fc2ce02aa3296ced348d082ee4cddaba...c40e3df6e718f40d6c155d328a06e3d629abb7e8)


### [tests](https://github.com/openshift/origin/tree/13862c13dba55f899d39c2227fc1ab99ded627d8)

* [OCPBUGS-43569](https://issues.redhat.com/browse/OCPBUGS-43569): feat: update to use pullspec image [#29207](https://github.com/openshift/origin/pull/29207)
* [OCPBUGS-43576](https://issues.redhat.com/browse/OCPBUGS-43576): Porting testing for netConfig and UDN and CIDR overlapping tests from upstream [#29181](https://github.com/openshift/origin/pull/29181)
* [OCPBUGS-39606](https://issues.redhat.com/browse/OCPBUGS-39606): Add image registry capability check [#29174](https://github.com/openshift/origin/pull/29174)
* [OCPBUGS-42814](https://issues.redhat.com/browse/OCPBUGS-42814): ruby:3.0-ubi8 => ruby:3.1-ubi8 [#29162](https://github.com/openshift/origin/pull/29162)
* [OCPBUGS-42336](https://issues.redhat.com/browse/OCPBUGS-42336): Fix image ecosystem tests 4.17 [#29126](https://github.com/openshift/origin/pull/29126)
* [Full changelog](https://github.com/openshift/origin/compare/ec6389f0e63380e8ec6d792e20ed1e61473ddbb3...13862c13dba55f899d39c2227fc1ab99ded627d8)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/9ec205c12f5b893065d3c1e944fac78bd2a56aa9)

* [OCPBUGS-42327](https://issues.redhat.com/browse/OCPBUGS-42327): Fix the config loading warning [#259](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/259)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/d97d4cee0769099004a39fcf7ff1d8f48cb0f3cc...9ec205c12f5b893065d3c1e944fac78bd2a56aa9)