Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.17.0-okd-scos.3

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable
  • upgrade-minor Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable

Upgrades from:

• 4.17.0-okd-scos.ec.4 - Success
• 4.17.0-okd-scos.2 (changes) - Success
• 4.17.0-okd-scos.1 (changes) - Success
• 4.16.0-okd-scos.1 (changes) - Success

---

Loading changelog, this may take a while ...

Changes from 4.17.0-okd-scos.ec.4

Created: 2025-02-03 21:58:33 +0000 UTC

Image Digest: sha256:d638434482dfa76b3486c28be4a204a605c13fb9c4dd820ca468fe46f5bfd407

Release 4.17.0-okd-scos.3 was created from registry.ci.openshift.org/origin/release-scos:4.17.0-0.okd-scos-2025-02-03-041558

Components

• Kubectl 1.30.5
• Kubernetes upgraded from 1.30.6 to 1.30.7
• Kubernetes Tests 1.30.0
• CentOS Stream CoreOS upgraded from 417.9.202411212033-0 to 417.9.202501302032-0 (diff)

Rebuilt images without code change

• stream-coreos sha256:0addec4838a304de07ff2874bd1372bf2d033853093ececf42944e0f822a5e38
• stream-coreos-extensions sha256:fb7cd62aba6cc1eb4c2d48785e7180d4134311d6a464d1f41ad1201bf466db37

agent-installer-api-server

• OCPBUGS-48390: Bump moby from v26.0.0 to v27.2.1 (#7188) #7188
• MGMT-19537: Bump golang.org/x/net to 0.33.0 (#7129) #7129
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• OCPBUGS-47493: MGMT-19537: Bump golang.org/x/net to 0.33.0 (#989) #989
• OCPBUGS-44904: Rhcos fails to reboot for skip mco reboot on s390x (#942) #942
• Full changelog

agent-installer-node-agent

• MGMT-19537: Bump golang.org/x/net to 0.33.0 (#873) #873
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator

• OCPBUGS-46512: remove EFS driver metrics #350
• OCPBUGS-44974: Set separate secrets for file and disk config on HyperShift #331
• Full changelog

aws-machine-controllers

• OCPBUGS-45186: fix Associate*IpAddress flag when launch EC2 #118
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPBUGS-46039: Prevent panic when informer receives cache.DeletedFinalStateUnknown #132
• Full changelog

baremetal-cluster-api-controllers

• OCPBUGS-47049: Bump x/net to 0.33.0 #32
• Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

• OCPBUGS-41300: Azure: Update SecurityType passed in at Image creation #9409
• OCPBUGS-49362: [Nutanix] Installation failed with timeout when uploading images to PC #9406
• OCPBUGS-48645: azure: use separate /var to avoid growfs timeouts #9381
• OCPBUGS-45340: move GCP zone filtering client-side #9264
• OCPBUGS-48257: remove the types which failed by RHEL-59521 and add the new gpu vm type #9354
• OCPBUGS-45813: Remove unused variable from ASH arm template 06_workers.json #9285
• OCPBUGS-48359: Allow more time for Service Account Creation #9362
• OCPBUGS-45344: support additionalNTPSources in node-joiner tool #9265
• OCPBUGS-48119: Always set AllowCrossTenantReplication parameter to false #9346
• OCPBUGS-46432: Power VS: Create region-zone-sysType hierarchy #9319
• OCPBUGS-46360: aws: add ec2:AllocateAddress perm requirement. #9313
• no-jira: Collect bootstrap logs when control plane provisioning fails #9308
• OCPBUGS-45726: IBMCloud: Add service overrides #9267
• OCPBUGS-42117: Remove destroy search for regional target tcp proxies #9025
• OCPBUGS-45484: PowerVS: Listen to machineNetwork #9271
• OCPBUGS-44848: aws: user right perm for untagging BYO IAM profiles #9228
• OCPBUGS-45276: Bump Azure Machine Timeout #9257
• ARO-12457: Include bootstrap docker config file in go module #9258
• OCPBUGS-43047: fix slice init length #9089
• OCPBUGS-43800: pkg/asset/installconfig/azure: send full certifcate chain #9140
• CORS-3753: Allow mocking of the Azure client everywhere #9219
• OCPBUGS-44611: [release-4.17] capi/aws: set Node Port Service CIDR override #9209
• Full changelog

baremetal-machine-controllers

• OCPBUGS-46646: Bump x/net to 0.33.0 #225
• Full changelog

baremetal-runtimecfg

• OCPBUGS-48766: Extend haproxy-monitor fall time #340
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-45344: additional rbac policy rules #1937
• OCPBUGS-45517: add retry in case of image pull error #1940
• OCPBUGS-44508: Show node-joiner container logs when error occurs #1912
• OCPBUGS-44830: Fix newapp unit test failure by using different image #1913
• Full changelog

cloud-credential-operator

• OCPBUGS-47071: golang.org/x/net v0.33.0 #804
• OCPBUGS-45938: Add AWS region to aws-pod-identity-webhook #799
• OCPBUGS-45006: Add retry to ccoctl gcp create functions #793
• OCPBUGS-45001: github.com/golang-jwt/jwt/v4 v4.5.1 #787
• Full changelog

cluster-autoscaler

• OCPBUGS-48606: UPSTREAM: <carry>: 🐛(metrics) Initialize metrics for autoscaler errors, scale events, and pod evictions #337
• OCPBUGS-45147: [release-4.17] VPA: Update OWNERS file #324
• Full changelog

cluster-autoscaler-operator

• OCPBUGS-45929: set max soft bulk taint count to zero #337
• Full changelog

cluster-capi-operator

• OCPBUGS-48493: fix: always update clusteroperator status versions when differing #250
• Full changelog

cluster-kube-storage-version-migrator-operator

• OCPBUGS-46593: “gracefully” shutdown KSVM pod. #123
• Full changelog

cluster-machine-approver

• OCPBUGS-48155: Fix race condition in CO status controller test #266
• OCPBUGS-46429: Filter CSRs by signerName #261
• OCPBUGS-45918: Ensure trailing dots on DNS names do not block serving cert auth #256
• OCPBUGS-45918: Client internal DNS checks should ignore trailing dot #250
• Full changelog

cluster-monitoring-operator

• OCPBUGS-44971: Add new metrics for OpenShift logging telemetry #2526
• Full changelog

cluster-network-operator

• OCPBUGS-44807: ovn-k, cudn: Add missing permissions to ovnkube-node #2575
• OCPBUGS-43714: Skip including default crypto policies to avoid authby issue #2597
• OCPBUGS-46146: Remove ip xfrm state when IPsec is disabled #2594
• OCPBUGS-44415: Pass transit_switch_subnet options in ovnkube-node pod #2561
• OCPBUGS-44807, SDN-4930, SDN-5297: OVN-Kubernetes node RBAC tightening #2568
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-43664: Add vendor and architecture specific tuning options (#1191) #1191
• OCPBUGS-44644: cmd: PPC: support tolerating heterogeneous core IDs (#1252) #1252
• OCPBUGS-45264: Normalize cpu sets when rendering to Tuned profiles (#1238) (#1248) #1238
• Full changelog

cluster-openshift-controller-manager-operator

• OCPBUGS-47770: Add team members to the OWNERS file #375
• Full changelog

cluster-samples-operator

• OCPBUGS-48786: add shannon and aroyoredhat as owners #595
• Full changelog

cluster-storage-operator

• OCPBUGS-44997: Fix PodStartupStorageOperationsFailing alert #543
• Full changelog

cluster-version-operator

• OCPBUGS-39558: Filter out shallowly UpdateEffectNone errors from a MultipleErrors message in the Failing condition #1114
• OCPBUGS-45328: deps: bump golang.org/x/net to 0.31.0 #1117
• Full changelog

console

• OCPBUGS-44220: disable flaking and change pre-condition test for knative e2e #14467
• OCPBUGS-43751: Added token to proxy header #14430
• OCPBUGS-48161: ERROR in search tool: Cannot read properties of undefined (reading ‘state’) #14667
• OCPBUGS-48227: fix navigation from non-General User Preference tab to… #14674
• OCPBUGS-41672: Update vendor imports to include all PatternFly components #14272
• OCPBUGS-46344: OCP web console show pod status as Init:0/1 after using Native sidecars #14616
• OCPBUGS-47497: Getting Oh no, something went wrong error when trying to install operator. #14645
• OCPBUGS-43673: Disable GQL introspection #14640
• OCPBUGS-45949: ReRun of Resolver based PipelineRuns fails from UI #14605
• OCPBUGS-45954: Fixed capitalization in OpenShift Lightspeed #14607
• OCPBUGS-45948: ImagePullSecret getting duplicated when editing DeploymentConfig in Form View #14604
• OCPBUGS-45667: Do not pass CSV name to operand list page when an exen… #14591
• OCPBUGS-46000: The description and name for GCP Pool ID is not consist #14611
• OCPBUGS-42558: Plugins that use very old PF4 dropdown or menu components with grouped items have bullets and padding that needs to be removed. #14344
• OCPBUGS-44656: update ConditionalUpdates release type #14505
• OCPBUGS-43888: While accessing the node terminal from UI observed ‘Warning alert:Admission Webhook Warning` #14444
• OCPBUGS-43441: fix table combination #14546
• OCPBUGS-44169: use TaskRuns results.tekton.dev/record annotation to get the logs #14538
• OCPBUGS-44873: Unable to remove finally tasks in pipeline builder mode #14527
• OCPBUGS-42791: Add missing pipelines plugin name to known plugins #14377
• OCPBUGS-44699: Add multiline support to template instantiation #14508
• OCPBUGS-44183: Remove ClusterTask dependency in console from Pipelines 1.17 #14512
• OCPBUGS-44764: Add IBM Block Storage CSI driver support for RWX #14517
• Full changelog

console-operator

• OCPBUGS-45302: console/status: set initial value of Message field #943
• OCPBUGS-46390: Dont disable console when authConfig type is set to None #951
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-43427: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.30 into release-4.17 #314
• Full changelog

docker-builder

• OCPBUGS-33889: Updating openshift-enterprise-builder-container image to be consistent with ART for 4.17 #393
• OCPBUGS-47768: Add team members to the OWNERS file #423
• OCPBUGS-47712: skipping some unit tests to avoid failures as they are duplicate #421
• Full changelog

etcd, installer-etcd-artifacts

• NO-ISSUE: Add support for cachi2 based deps #297
• Full changelog

gcp-machine-controllers

• OCPBUGS-48064: Refactor exists() to handle gcp API change #105
• OCPBUGS-46082: update a2 gpu detection logic to be dynamic #100
• Full changelog

hyperkube, installer-kube-apiserver-artifacts, pod

• : OCPBUGS-46364: Fix grace period used for immediate evictions #2164
• OCPBUGS-46002: Bump k8s api to 1.30.7 #2160
• OCPBUGS-39318: UPSTREAM: 126994: Add required FieldManager for validatingadmissionpolicy e2e #2070
• OCPBUGS-43820: UPSTREAM: <carry>: kubelet/cm: fix bug where kubelet restarts from missing cpuset cgroup #2126
• OCPBUGS-44897: Backport format library to enable usage in 4.18 #2140
• Full changelog

hypershift

• OCPBUGS-49638: fix overwriting PKI operator HCP conditions #5504
• OCPBUGS-46440: Allow ARM64 arch deployment on Agent platform #5296
• OCPBUGS-48170: fix disconnected via CLI #5465
• OCPBUGS-38810: nodepoolcontroller: List() PerformanceProfile status per NodePool #4585
• NO-JIRA: Update dependency mkdocs-mermaid2-plugin to v1.2.1 (release-4.17) #5428
• NO-JIRA: Update dependency mkdocs-material to v9.5.50 (release-4.17) #5427
• OCPBUGS-44927: Add multi-arch validation for HC/NodePool compatibility #5238
• NO-JIRA: [release-4.17] Bump golang.org/x/crypto and golang.org/x/net #5368
• NO-JIRA: Update Konflux references (release-4.17) #5329
• OCPBUGS-46412: Separate CPO containerfiles #5285
• NO-JIRA: chore(deps): update konflux references (release-4.17) #5289
• NO-JIRA: chore(deps): update dependency mkdocs to v1.6.1 (release-4.17) #5290
• OCPBUGS-44114: Add external kas address to no proxy skip list #5028
• NO-JIRA: Red Hat Konflux update hypershift-release-mce-28 #5174
• NO-JIRA: chore(deps): update konflux references (release-4.17) #5249
• OCPBUGS-44630: Use ingress role in private link controller for DNS operations #5142
• NO-JIRA: chore(deps): update konflux references (release-4.17) #5183
• Full changelog

ibmcloud-cluster-api-controllers

• OCPBUGS-44880: Fetch service instance id from spec of IBMPowerVSCluster object while setting provider id #94
• Full changelog

insights-operator

• AUTH-482: set required-scc for dataGahtering jobs & pods #1049
• Full changelog

ironic

• OCPBUGS-48149: Bump jinja2 to 3.1.5 #622
• Full changelog

ironic-static-ip-manager

• OCPBUGS-49350: Fix subnet validation #47
• Full changelog

kube-metrics-server

• : OCPBUGS-46491: Disable HTTP2 #40
• Full changelog

kube-proxy

• OCPBUGS-43807: Revendor to a patched k/k with our prefer-local-DNS hack #640
• Full changelog

machine-api-operator

• OCPBUGS-43851: vSphere klog initialization preventing verbose log messages #1302
• Full changelog

machine-config-operator

• OCPBUGS-47475: Pausing Master MCP results in Alerts #4769
• OCPBUGS-47802: OCPBUGS-47801: trying to wait for sub-controllers #4775
• OCPBUGS-38292: controller: default to runc when upgrading clusters from 4.17 to 4.18 #4715
• OCPBUGS-45918: Remove trailing periods from AWS provided hostnames #4738
• OCPBUGS-39223: Do not enable on-prem-resolv-prepender.path for UPI #4572
• OCPBUGS-38292: Revert “controller: default to runc when upgrading clusters from 4.17 to 4.18” #4716
• Full changelog

monitoring-plugin

• OCPBUGS-44394: remove unused package and upgrade vulnerable dependency #271
• Full changelog

multus-whereabouts-ipam-cni

• OCPBUGS-48745: [Release-4.17]Kubeconfig loop #334
• Full changelog

must-gather

• OCPBUGS-48068: Update owners #452
• OCPBUGS-46281: Support gathering IPsec data #467
• Full changelog

networking-console-plugin

• OCPBUGS-45791: fix path-to-regex CVE #196
• OCPBUGS-48704: fix service name #188
• OCPBUGS-48267: UI crash accessing a Service in pending state #168
• OCPBUGS-46553: fix ports as number instead of strings #169
• OCPBUGS-45876: Bump nanoid from 3.3.7 to 3.3.8 #172
• OCPBUGS-44140: Bump dompurify from 2.4.9 to 2.5.8 #166
• OCPBUGS-44397: OCPBUGS-44679: upgrade packages for cve #141
• Full changelog

oauth-apiserver

• OCPBUGS-46044: Update dependencies to address CVE-2024-24786 #127
• Full changelog

oauth-proxy

• OCPBUGS-46659: Fix oauth-proxy e2e-component tests #303
• Full changelog

oc-mirror

• fixes CVEs upgrading go-git dependency (#1033) #1033
• OCPBUGS-47453: Use one of the newer sha256 keys to verify release signatures (#1000) (#1024) #1000
• changes the owners file (#1017) #1017
• OCPBUGS-48513: e2e: use same version of crane as in go.mod (#1020) #1020
• Full changelog

openshift-apiserver

• OCPBUGS-49399: validate image property isn’t nil before using #489
• OCPBUGS-49399: move on to the next digest/tag during failures #487
• OCPBUGS-42752: Pass expected type to deploymentconfig/scale object validation. #457
• Full changelog

openshift-controller-manager

• OCPBUGS-47769: Add team members to the OWNERS file #357
• Full changelog

openstack-cluster-api-controllers

• OCPBUGS-44455: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.17 #342
• OCPBUGS-44959: Makefile changes for merge-bot #340
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• OCPBUGS-48695: Fix excessive catalog source snapshots cause severe performance regression #956
• OCPBUGS-45845: Fix concurrent namespace resolution #944
• OCPBUGS-46929, OCPBUGS-46936, OCPBUGS-47316: x/net bump to v0.34.0 [release-4.17] #938
• OCPBUGS-46598: catalog-operator: Delete Pods that were evicted (#3459) #922
• OCPBUGS-46054: CRD upgrade existing CR validation fix #913
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-47506: Let OVN-northd bind remote ports #2404
• OCPBUGS-45953: bump OVS version to 3.4.0-18 #2393
• OCPBUGS-45312: pin libreswan to 4.6-3.el9_0.3 #2384
• OCPBUGS-45339: Dockerfile: Update OVN to the 24.03.2-32.el9fdp minor release. #2376
• OCPBUGS-43454: Ignore cluster manager topology not managed errors for localnet with no subnets #2362
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• OCPBUGS-48069: fix: validate smtp smarthost and smtp from fields #323
• Full changelog

tests

• OCPBUGS-49411: Add a monitor test to detect concurrent installer pod or static pod #29487
• OCPBUGS-48634: Revert “[release-4.17] OCPBUGS-48459, SDN-4930: ovn-k, udn crd e2e: Fix status report consumer assertion” #29453
• OCPBUGS-48459, SDN-4930: ovn-k, udn crd e2e: Fix status report consumer assertion #29301
• OCPBUGS-48345: Add team members to the OWNERS file for PR approvals #29430
• OCPBUGS-48188: Fixing build s2i ruby test data inline with latest ruby version(>=3.0) #29409
• : OCPBUGS-48093: fix unit test for compare against string #29405
• OCPBUGS-44190: Fix UnexpectedNodeNotReady and UnexpectedNodeUnreachable #29306
• OCPBUGS-43576, SDN-4930: Don’t modify pod routes in tests #29250
• Full changelog

vsphere-cloud-controller-manager

• OCPBUGS-43432: update check-fmt goimports command #78
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-49685: List only linux nodes #285
• Full changelog

---

View changelog in Markdown or change previous release: 4.17.0-okd-scos.24.17.0-okd-scos.14.17.0-okd-scos.04.16.0-okd-scos.14.16.0-okd-scos.04.16.0-0.okd-scos-2024-09-24-1517474.16.0-0.okd-scos-2024-08-21-1556134.15.0-0.okd-scos-2024-01-18-223523───4.19.0-0.okd-scos-2025-02-05-0754324.19.0-0.okd-scos-2025-02-04-1954324.19.0-0.okd-scos-2025-02-04-0754324.19.0-0.okd-scos-2025-02-03-1954324.19.0-0.okd-scos-2025-02-03-0754324.19.0-0.okd-scos-2025-02-02-1954324.19.0-0.okd-scos-2025-02-02-075432───4.18.0-0.okd-scos-2025-02-05-0957014.18.0-0.okd-scos-2025-02-04-2157014.18.0-0.okd-scos-2025-02-04-0957014.18.0-0.okd-scos-2025-02-03-2157014.18.0-0.okd-scos-2025-02-03-0957014.18.0-0.okd-scos-2025-02-02-1750574.18.0-0.okd-scos-2025-02-02-055057───4.17.0-0.okd-scos-2025-02-05-0415584.17.0-0.okd-scos-2025-02-04-1615584.17.0-0.okd-scos-2025-02-04-0415584.17.0-0.okd-scos-2025-02-03-1615584.17.0-0.okd-scos-2025-02-03-0415584.17.0-0.okd-scos-2025-02-02-052429───4.16.0-0.okd-scos-2025-01-06-1432414.16.0-0.okd-scos-2025-01-04-1456004.16.0-0.okd-scos-2025-01-04-0142364.16.0-0.okd-scos-2025-01-03-1342364.16.0-0.okd-scos-2025-01-03-0142364.16.0-0.okd-scos-2024-12-17-0222464.16.0-0.okd-scos-2024-11-24-1100454.16.0-0.okd-scos-2024-11-23-1818454.16.0-0.okd-scos-2024-11-23-0618454.16.0-0.okd-scos-2024-11-22-1818454.16.0-0.okd-scos-2024-11-22-061845───4.15.0-0.okd-scos-2024-12-16-1913164.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2025-01-28-0547464.15.0-0.okd-2025-01-23-1504044.15.0-0.okd-2024-12-16-1952254.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.15.0-0.okd-2024-03-10-0101164.15.0-0.okd-2024-02-23-1634104.15.0-0.okd-2024-02-10-0355344.15.0-0.okd-2024-01-27-070424───4.18.0-okd-scos.ec.34.18.0-okd-scos.ec.24.18.0-okd-scos.ec.14.18.0-okd-scos.ec.04.17.0-okd-scos.ec.44.17.0-okd-scos.ec.34.17.0-okd-scos.ec.24.17.0-okd-scos.ec.14.17.0-okd-scos.ec.04.17.0-0.okd-scos-2024-09-30-1017394.17.0-0.okd-scos-2024-09-26-2248284.17.0-0.okd-scos-2024-09-24-1048284.17.0-0.okd-scos-2024-08-21-100712

Source code for this page located on github