# 4.17.0-okd-scos.ec.4

Created: 2024-11-22 16:53:19 +0000 UTC

Image Digest: `sha256:6fb3654e83c2b5d6aba11f5c19caeaa13e4c0840146907c8bea09697072932e8`

Promoted from registry.ci.openshift.org/origin/release-scos:4.17.0-0.okd-scos-2024-11-22-111428


## Changes from 4.17.0-okd-scos.ec.3

### Components

* Kubectl 1.30.5
* Kubernetes upgraded from 1.30.5 to 1.30.6
* Kubernetes Tests 1.30.0
* CentOS Stream CoreOS upgraded from 417.9.202410282133-0 to 417.9.202411212033-0


### Rebuilt images without code change

* stream-coreos `sha256:cc0ff8094020b8388febbfb841b7e4dc8fe28e6c123de472c5fc6303476e1fd5`
* stream-coreos-extensions `sha256:5c0fe43f1ca1cb2585aff7cfdfbbafccdf39f28af7cd407e8881b23d9c299c07`


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator](https://github.com/openshift/csi-operator/tree/d27753a267f723bab2ce7b28f5d164024f847feb)

* [OCPBUGS-42949](https://issues.redhat.com/browse/OCPBUGS-42949): add tag matching to Azure File storage class [#291](https://github.com/openshift/csi-operator/pull/291)
* [OCPBUGS-43789](https://issues.redhat.com/browse/OCPBUGS-43789): add ability to control kube rbac proxy container image… [#310](https://github.com/openshift/csi-operator/pull/310)
* [Full changelog](https://github.com/openshift/csi-operator/compare/b6ab34020d440c3a07f60dcbd31682bd117f112e...d27753a267f723bab2ce7b28f5d164024f847feb)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/77b3f596ded29b413a09cf0b1ebea647f17bb68b)

* [OCPBUGS-44230](https://issues.redhat.com/browse/OCPBUGS-44230): Add C4A instance types [#9181](https://github.com/openshift/installer/pull/9181)
* [OCPBUGS-44231](https://issues.redhat.com/browse/OCPBUGS-44231): [release-4.17]  capi/aws: bump provider for LB DNS lookup fix [#9179](https://github.com/openshift/installer/pull/9179)
* [OCPBUGS-44261](https://issues.redhat.com/browse/OCPBUGS-44261): Ensure rendezvousIP is checked against host IP [#9184](https://github.com/openshift/installer/pull/9184)
* [OCPBUGS-43972](https://issues.redhat.com/browse/OCPBUGS-43972): Cherrypick oci ccm fix to 4.17 [#9152](https://github.com/openshift/installer/pull/9152)
* [Full changelog](https://github.com/openshift/installer/compare/6339911b42825bbae9868d39c7d400abf1d8e1c9...77b3f596ded29b413a09cf0b1ebea647f17bb68b)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/246d3726b1c541ef2bbe6def95783bee60b12a58)

* [OCPBUGS-43657](https://issues.redhat.com/browse/OCPBUGS-43657): audit: do not log requests to /livez [#724](https://github.com/openshift/cluster-authentication-operator/pull/724)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/0ba43254571fa060b1518153c8d701f891589171...246d3726b1c541ef2bbe6def95783bee60b12a58)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/15bded36cc8392cd88e28634b8b63dd83934867c)

* [OCPBUGS-44003](https://issues.redhat.com/browse/OCPBUGS-44003): fix(monitoring-plugin): disable emitting nginx version on error pages [#2511](https://github.com/openshift/cluster-monitoring-operator/pull/2511)
* [OCPBUGS-43690](https://issues.redhat.com/browse/OCPBUGS-43690): chore: introduce a config parsing check via a strict unmarshaller for… [#2494](https://github.com/openshift/cluster-monitoring-operator/pull/2494)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/ae150000fe5529474786a10d7ef2f98a5cb571f3...15bded36cc8392cd88e28634b8b63dd83934867c)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/3f16413f4358f12d36e8fe60484c33654a24e95c)

* [OCPBUGS-44807](https://issues.redhat.com/browse/OCPBUGS-44807), [SDN-5297](https://issues.redhat.com/browse/SDN-5297), [SDN-5472](https://issues.redhat.com/browse/SDN-5472): bindata, ovn-k: Add ClusterUserDefinedNetwork CRD and RBAC [#2566](https://github.com/openshift/cluster-network-operator/pull/2566)
* [OCPBUGS-44807](https://issues.redhat.com/browse/OCPBUGS-44807), [SDN-4930](https://issues.redhat.com/browse/SDN-4930), [SDN-5297](https://issues.redhat.com/browse/SDN-5297): ovn-k, udn: Update UserDefinedNetwork CRD [#2551](https://github.com/openshift/cluster-network-operator/pull/2551)
* [OCPBUGS-44807](https://issues.redhat.com/browse/OCPBUGS-44807), [SDN-4930](https://issues.redhat.com/browse/SDN-4930), [SDN-5297](https://issues.redhat.com/browse/SDN-5297): Adds UDN list/watch to ovnknode rbac [#2540](https://github.com/openshift/cluster-network-operator/pull/2540)
* [OCPBUGS-44779](https://issues.redhat.com/browse/OCPBUGS-44779), [SDN-5436](https://issues.redhat.com/browse/SDN-5436): Provide support for user owned IPsec machine configs [#2564](https://github.com/openshift/cluster-network-operator/pull/2564)
* [OCPBUGS-44330](https://issues.redhat.com/browse/OCPBUGS-44330): Add controlplane cli image envar for use with hypershift [#2542](https://github.com/openshift/cluster-network-operator/pull/2542)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/950651d28fadb5b058ac4652c44eca1b9ac04fbb...3f16413f4358f12d36e8fe60484c33654a24e95c)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/222249d39165d5ed01702e70f2e32e61483ee2ae)

* e2e: wait for node inspector deletion (#1205) [#1205](https://github.com/openshift/cluster-node-tuning-operator/pull/1205)
* Fixing empty tuned submodule when using Dockerfile (#1211) [#1211](https://github.com/openshift/cluster-node-tuning-operator/pull/1211)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/86d8984ed6ec5f4d716fdfe39de5043001a2d727...222249d39165d5ed01702e70f2e32e61483ee2ae)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/bb40448723a3906ab80250e4601d431b66499f50)

* [OCPBUGS-43794](https://issues.redhat.com/browse/OCPBUGS-43794): add ability to control kube rbac proxy container image on controlplane [#529](https://github.com/openshift/cluster-storage-operator/pull/529)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/1490ce00ea780369acae6bd54e06f2fc60e53249...bb40448723a3906ab80250e4601d431b66499f50)


### [console](https://github.com/openshift/console/tree/f7ad40e27f0c6e416f3defd3a0094919e2428ad1)

* [OCPBUGS-43795](https://issues.redhat.com/browse/OCPBUGS-43795): While upgrading the cluster from UI observed `Warning alert:Admission Webhook Warning` [#14433](https://github.com/openshift/console/pull/14433)
* [OCPBUGS-44722](https://issues.redhat.com/browse/OCPBUGS-44722): include external labels so silenced alerts not displayed in notifications [#14511](https://github.com/openshift/console/pull/14511)
* [OCPBUGS-44358](https://issues.redhat.com/browse/OCPBUGS-44358): BuildConfig form breaks on manually enter the Git URL [#14478](https://github.com/openshift/console/pull/14478)
* [OCPBUGS-43073](https://issues.redhat.com/browse/OCPBUGS-43073): Telemetry userPreference results in empty nodes output to the DOM [#14392](https://github.com/openshift/console/pull/14392)
* [OCPBUGS-44587](https://issues.redhat.com/browse/OCPBUGS-44587): Start last run do not work in buildConfig details page [#14499](https://github.com/openshift/console/pull/14499)
* [OCPBUGS-44586](https://issues.redhat.com/browse/OCPBUGS-44586): Collapse/Expand Feature Added, Removal Option Removed in Version 4.16 [#14498](https://github.com/openshift/console/pull/14498)
* [OCPBUGS-44450](https://issues.redhat.com/browse/OCPBUGS-44450): Don't request user settings configmap if no user has been loaded. [#14482](https://github.com/openshift/console/pull/14482)
* [OCPBUGS-44479](https://issues.redhat.com/browse/OCPBUGS-44479): conditionally display MachineConfig details page Confi… [#14488](https://github.com/openshift/console/pull/14488)
* [Full changelog](https://github.com/openshift/console/compare/bba72844a6de199a4fb82184e5889569ddcc38f6...f7ad40e27f0c6e416f3defd3a0094919e2428ad1)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/f5b13c522e62538892fa90e1e5ddc89fc31dc538)

* [OCPBUGS-43427](https://issues.redhat.com/browse/OCPBUGS-43427): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.30 into release-4.17 [#302](https://github.com/openshift/cloud-provider-openstack/pull/302)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/a13ed564f36bd295b53afde59f4ac90a92cb75b3...f5b13c522e62538892fa90e1e5ddc89fc31dc538)


### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/027a8c4e106d7c02e1688c38015b8fd2bd94a304)

* [OCPBUGS-34217](https://issues.redhat.com/browse/OCPBUGS-34217): Updating ose-csi-driver-shared-resource-container image to be consistent with ART for 4.17 [#188](https://github.com/openshift/csi-driver-shared-resource/pull/188)
* [OCPBUGS-44510](https://issues.redhat.com/browse/OCPBUGS-44510): Updating ose-csi-driver-shared-resource-webhook-container image to be consistent with ART for 4.17 [#233](https://github.com/openshift/csi-driver-shared-resource/pull/233)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/abbeb17206231cd9d7d8c32bf7cbdc592e121aa4...027a8c4e106d7c02e1688c38015b8fd2bd94a304)


### [hyperkube, installer-kube-apiserver-artifacts, pod](https://github.com/openshift/kubernetes/tree/5a24e858060a609366c5ff1402ec1424e9f7e403)

* [OCPBUGS-44512](https://issues.redhat.com/browse/OCPBUGS-44512): Bump k8s api to 1.30.6 [#2134](https://github.com/openshift/kubernetes/pull/2134)
* [OCPBUGS-42427](https://issues.redhat.com/browse/OCPBUGS-42427): UPSTREAM: 125398: Fix issue with scheduler failing on hostname mismatch [#2097](https://github.com/openshift/kubernetes/pull/2097)
* [Full changelog](https://github.com/openshift/kubernetes/compare/6816ea6a977365195404d43756efd1c42ac0b2a7...5a24e858060a609366c5ff1402ec1424e9f7e403)


### [hypershift](https://github.com/openshift/hypershift/tree/680a489270b53fd700b4e6b660fb9e9bf7be9f63)

* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5154](https://github.com/openshift/hypershift/pull/5154)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5144](https://github.com/openshift/hypershift/pull/5144)
* [OCPBUGS-44184](https://issues.redhat.com/browse/OCPBUGS-44184): dont use registryOverrides on kube rbac proxy image be… [#5033](https://github.com/openshift/hypershift/pull/5033)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5113](https://github.com/openshift/hypershift/pull/5113)
* [OCPBUGS-43929](https://issues.redhat.com/browse/OCPBUGS-43929): Return the right tagReference on Catalogs ImageStream [#4993](https://github.com/openshift/hypershift/pull/4993)
* [OCPBUGS-44276](https://issues.redhat.com/browse/OCPBUGS-44276): Configure OAuth https proxy to dial cloud endpoints directly [#5070](https://github.com/openshift/hypershift/pull/5070)
* [OCPBUGS-44268](https://issues.redhat.com/browse/OCPBUGS-44268): Fix order rendering HCP objects [#5064](https://github.com/openshift/hypershift/pull/5064)
* NO-JIRA: Update Konflux references (release-4.17) [#5098](https://github.com/openshift/hypershift/pull/5098)
* chore(deps): update konflux references (release-4.17) [#5075](https://github.com/openshift/hypershift/pull/5075)
* [HOSTEDCP-2046](https://issues.redhat.com/browse/HOSTEDCP-2046): CPO 4.17 tekton builds [#5006](https://github.com/openshift/hypershift/pull/5006)
* [Full changelog](https://github.com/openshift/hypershift/compare/56deb3a2249d8a8b3ed71d66ada138298579dccd...680a489270b53fd700b4e6b660fb9e9bf7be9f63)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/238348d2d06feb540a360aeba81416c1134f86e9)

* [OCPBUGS-37379](https://issues.redhat.com/browse/OCPBUGS-37379): Bump dependency for CVE [#49](https://github.com/openshift/machine-api-provider-ibmcloud/pull/49)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/dce9d33e91d0f6eae88da8d233e7b4b002c5c1b0...238348d2d06feb540a360aeba81416c1134f86e9)


### [ironic](https://github.com/openshift/ironic-image/tree/073486f10e7f657b5082a1b1d06196a19c8f69be)

* [OCPBUGS-43955](https://issues.redhat.com/browse/OCPBUGS-43955), [OCPBUGS-43963](https://issues.redhat.com/browse/OCPBUGS-43963): Bump python-waitress [4.17] [#603](https://github.com/openshift/ironic-image/pull/603)
* [Full changelog](https://github.com/openshift/ironic-image/compare/90a9bc5f9dd3ad4d65834c3b819054dfa477e9c2...073486f10e7f657b5082a1b1d06196a19c8f69be)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/fd148574acf50271171c33570a4ba80fd9e9e617)

* [OCPBUGS-38292](https://issues.redhat.com/browse/OCPBUGS-38292): controller: default to runc when upgrading clusters from 4.17 to 4.18 [#4635](https://github.com/openshift/machine-config-operator/pull/4635)
* [OCPBUGS-44561](https://issues.redhat.com/browse/OCPBUGS-44561): Disable tx chksum for driver IDPF on GCP C3/C4 [#4701](https://github.com/openshift/machine-config-operator/pull/4701)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/5ea53a326ccda8712e2d5c93ba503e17e4a7c385...fd148574acf50271171c33570a4ba80fd9e9e617)


### [must-gather](https://github.com/openshift/must-gather/tree/d785c127c87271f3f3823d5000e6e4352ac9b88f)

* [OCPBUGS-42835](https://issues.redhat.com/browse/OCPBUGS-42835): Removes reference to gather_multus_logs in 4.17 [#459](https://github.com/openshift/must-gather/pull/459)
* [OCPBUGS-42964](https://issues.redhat.com/browse/OCPBUGS-42964): Collect etcd object count [#453](https://github.com/openshift/must-gather/pull/453)
* [Full changelog](https://github.com/openshift/must-gather/compare/cd767264beedca7d5554ccd0f6bf736861710c04...d785c127c87271f3f3823d5000e6e4352ac9b88f)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/ffb990b4923b80a001b6544eb3a2197dcd871b98)

* [OCPBUGS-44650](https://issues.redhat.com/browse/OCPBUGS-44650): Routes list page shows correct status and location [#139](https://github.com/openshift/networking-console-plugin/pull/139)
* [OCPBUGS-44648](https://issues.redhat.com/browse/OCPBUGS-44648): Add Route Filter in route list [#138](https://github.com/openshift/networking-console-plugin/pull/138)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/d747e371f8e4b02a8e4a1614b3a56c50d0745960...ffb990b4923b80a001b6544eb3a2197dcd871b98)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/d17a4a051a39095deb3fc781efee4a565d970a1a)

* [OCPBUGS-44455](https://issues.redhat.com/browse/OCPBUGS-44455): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.17 [#329](https://github.com/openshift/cluster-api-provider-openstack/pull/329)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/c40e3df6e718f40d6c155d328a06e3d629abb7e8...d17a4a051a39095deb3fc781efee4a565d970a1a)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/649dfc4dc0a7fca1c25c7678665a55ad8ce53040)

* [OCPBUGS-44760](https://issues.redhat.com/browse/OCPBUGS-44760): fix: call TokenRequest API when service account token secret is missing [#898](https://github.com/openshift/operator-framework-olm/pull/898)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/4cbfa455ffbd86afc26471f29bf46fed9f4779e3...649dfc4dc0a7fca1c25c7678665a55ad8ce53040)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/01d8c97267775c0212c64e6d5ddc176c9354eae8)

* [OCPBUGS-44303](https://issues.redhat.com/browse/OCPBUGS-44303): Add hybird overlay pod IPs to the namespace address_set [#2340](https://github.com/openshift/ovn-kubernetes/pull/2340)
* [OCPBUGS-42931](https://issues.redhat.com/browse/OCPBUGS-42931): Add static route to the hairpin masquerade IPs to pod [#2315](https://github.com/openshift/ovn-kubernetes/pull/2315)
* [OCPBUGS-39200](https://issues.redhat.com/browse/OCPBUGS-39200): Dockerfile: Bump OVS to 3.4.0-1 [#2287](https://github.com/openshift/ovn-kubernetes/pull/2287)
* [OCPBUGS-42940](https://issues.redhat.com/browse/OCPBUGS-42940): Fix egress gateway pod cleanup for remote zone pods. [#2316](https://github.com/openshift/ovn-kubernetes/pull/2316)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/62451d12851aebdd1a3b009a9829f8df796998ad...01d8c97267775c0212c64e6d5ddc176c9354eae8)


### [prometheus](https://github.com/openshift/prometheus/tree/e2fb74187b1858a31e3bf75cc5ab02c75ad8abe8)

* [OCPBUGS-43667](https://issues.redhat.com/browse/OCPBUGS-43667): fix(discovery): Handle cache.DeletedFinalStateUnknown in node informers' DeleteFunc [#230](https://github.com/openshift/prometheus/pull/230)
* [Full changelog](https://github.com/openshift/prometheus/compare/6853164ae2073146f78cbe9cbda92ebfe1e744d7...e2fb74187b1858a31e3bf75cc5ab02c75ad8abe8)


### [tests](https://github.com/openshift/origin/tree/b250e34f70e146f967abbae993bc350241bdd4a6)

* [OCPBUGS-43576](https://issues.redhat.com/browse/OCPBUGS-43576), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): Set startup probe for UDN tests [#29244](https://github.com/openshift/origin/pull/29244)
* [OCPBUGS-43576](https://issues.redhat.com/browse/OCPBUGS-43576), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): UserDefinedPrimaryNetworks: curl the KAPI IP through eth0 [#29241](https://github.com/openshift/origin/pull/29241)
* [OCPBUGS-44795](https://issues.redhat.com/browse/OCPBUGS-44795): fix: adding oslat updates and outputting test results to the artifacts [#29193](https://github.com/openshift/origin/pull/29193)
* [OCPBUGS-43576](https://issues.redhat.com/browse/OCPBUGS-43576), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): network_segmentation: allow multiple UDN status conditions [#29259](https://github.com/openshift/origin/pull/29259)
* [OCPBUGS-44494](https://issues.redhat.com/browse/OCPBUGS-44494): removing rteval from the realtime test suite [#29194](https://github.com/openshift/origin/pull/29194)
* [OCPBUGS-44496](https://issues.redhat.com/browse/OCPBUGS-44496): fix: adding in a SNO time override for AWS Metal [#29192](https://github.com/openshift/origin/pull/29192)
* [Full changelog](https://github.com/openshift/origin/compare/b231f7618836468e5006239cdb71cc290c579472...b250e34f70e146f967abbae993bc350241bdd4a6)