# 4.16.40

Created: 2025-05-08 12:19:07 +0000 UTC

Image Digest: `sha256:dc9d4bc316dd088f6e5e3c5e944da3dcee5d17d2c6c41d43a24865332d49a78a`


## Changes from 4.16.39

### Components

* Kubectl 1.29.7
* Kubernetes 1.29.14
* Kubernetes Tests 1.29.0
* Red Hat Enterprise Linux CoreOS upgraded from 416.94.202504151456-0 to 416.94.202505051351-0


### Rebuilt images without code change

* [agent-installer-api-server](https://github.com/openshift/assisted-service) git [cf4e24ce](https://github.com/openshift/assisted-service/commit/cf4e24ce161365e4f0bc4286dedef3891041f7ba) `sha256:2a9db51050d91e01c42d97066c453c6d092c63a80774e2f7b5e3a843e1f437e7`
* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [6e6bb40d](https://github.com/openshift/agent-installer-utils/commit/6e6bb40d95bd966eb6b152e66c5b91794806c4bc) `sha256:30e0a477fa0468046efa7bc0dfa1532e0ccdf834e616623ac50b6a7bec94746d`
* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [eacd6ee9](https://github.com/openshift/cluster-node-tuning-operator/commit/eacd6ee98ab26722603083768d4f58727a390dbe) `sha256:7a835696eed08d852f85979051e0f01f70f932bcdee6d5f664340a11b1384e8f`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [1d5732f0](https://github.com/openshift/driver-toolkit/commit/1d5732f0209bb7d98661a53c66c5ac265272dce6) `sha256:a9d19540219faa65f48a4e94177e6fd8da3c358e6e2ac05be96619c580193dd9`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [a99847b4](https://github.com/openshift/machine-os-images/commit/a99847b4450d58dbd0e487dd7e834586cd3e9289) `sha256:12a1554e487c476de1331fcbf6aa6ce3009090c9ea5765bf7f9a3f7ebcfe53e3`
* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [fcd3a8cc](https://github.com/openshift/monitoring-plugin/commit/fcd3a8cc6a5d5fcce5222a29c8de09fa04d8fc24) `sha256:66ad143016d700f23b3cf9fbf5cd1a134e27ab49275e597168599f791d9819ae`
* [network-tools](https://github.com/openshift/network-tools) git [234ed43e](https://github.com/openshift/network-tools/commit/234ed43e3e7b2cfcb76a19c80fcdb573a625309f) `sha256:261465289dc4d63a530f77027dd35bf504dc2652174be990c92eee8987b939d0`
* rhel-coreos `sha256:930a4bf5f0988b84c507b9c0264e4e68ee8771fd47381d18a08800f8e7a0d0fc`
* rhel-coreos-extensions `sha256:3cfc974d614a3c2a18c506229b1300532c69dcee53dc21e754afa52d286e7522`
* [sdn](https://github.com/openshift/sdn) git [cbddb0be](https://github.com/openshift/sdn/commit/cbddb0bee05ec89d1379ced8d1aab7269d55daf2) `sha256:ea3bed93c33556eade81a7dd59806be6b1b488c0a7a1a0c8558b90531ab45535`
* [tools](https://github.com/openshift/oc) git [ee354f66](https://github.com/openshift/oc/commit/ee354f66de43b037ef8b0ed55ce65c6c42aa7b9c) `sha256:08ca1c43e37015b466a7659fa1fe79e7aac743d9d7e68a2836c0bc3324e6cf84`


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/69f77762a6f8ba6bcdc185c4ed6e7a88fb8a5154)

* [OCPBUGS-53718](https://issues.redhat.com/browse/OCPBUGS-53718): Bump jwt to 4.5.2 in release-4.16 (#1091) [#1091](https://github.com/openshift/assisted-installer/pull/1091)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/27db6d764cbb244b6b817b0ddc289f0bd79f1930...69f77762a6f8ba6bcdc185c4ed6e7a88fb8a5154)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/05bd7e0cbf7f29c61f9d9daa969d809d13bb3dc9)

* [OCPBUGS-53710](https://issues.redhat.com/browse/OCPBUGS-53710): Bump jwt to 4.5.2 in release-4.16 (#971) [#971](https://github.com/openshift/assisted-installer-agent/pull/971)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/5d581421e2cb97db33a111c82d06cb1d275139a7...05bd7e0cbf7f29c61f9d9daa969d809d13bb3dc9)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/91f0e415cc77531d7b6d6108b4a78aff779c2a40)

* [OCPBUGS-35040](https://issues.redhat.com/browse/OCPBUGS-35040): Power VS: Add ports needed for private clusters to security group [#8546](https://github.com/openshift/installer/pull/8546)
* [Full changelog](https://github.com/openshift/installer/compare/40d677664f1f9e55ea27a9f6faa3fa8f763bc823...91f0e415cc77531d7b6d6108b4a78aff779c2a40)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/9989e43ffd2a2b17dd14d7cd6204558507e1f1b1)

* [OCPBUGS-53510](https://issues.redhat.com/browse/OCPBUGS-53510): fix CVE-2025-30204 [#1403](https://github.com/openshift/cluster-etcd-operator/pull/1403)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/3f2ce4889c255391323d8bdf07dece99e87dbccd...9989e43ffd2a2b17dd14d7cd6204558507e1f1b1)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/db952dd8188afc450be6f8c60d00e9068377c266)

* [OCPBUGS-53317](https://issues.redhat.com/browse/OCPBUGS-53317): Fix feature migration for EgressIP [#2673](https://github.com/openshift/cluster-network-operator/pull/2673)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/10162672f39b812dbfdbc3fa51f634c7851c1df1...db952dd8188afc450be6f8c60d00e9068377c266)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/6dde5732618244c79b4481f6a3b7a6e7dd5c28f4)

* [OCPBUGS-55457](https://issues.redhat.com/browse/OCPBUGS-55457): Adding mutex to func createSamples on handler.go [#633](https://github.com/openshift/cluster-samples-operator/pull/633)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/7ee5f8f5eed5351627709eade6e5916790c6f8c5...6dde5732618244c79b4481f6a3b7a6e7dd5c28f4)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/d0d0d6e7614148e497a10001ac16af689506c626)

* [OCPBUGS-55156](https://issues.redhat.com/browse/OCPBUGS-55156): Fix a panic caused by a data race [#1178](https://github.com/openshift/cluster-version-operator/pull/1178)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/6af06e02dd84880a6389284840a8d95c91bf226b...d0d0d6e7614148e497a10001ac16af689506c626)


### [console](https://github.com/openshift/console/tree/4a7dc548a3d29a915107925ae8f404bbeadf021c)

* [OCPBUGS-55378](https://issues.redhat.com/browse/OCPBUGS-55378): Do not load CSRs if user does not have permissions [#15000](https://github.com/openshift/console/pull/15000)
* [OCPBUGS-55644](https://issues.redhat.com/browse/OCPBUGS-55644): fix bug where operator appears twice [#15016](https://github.com/openshift/console/pull/15016)
* [OCPBUGS-45142](https://issues.redhat.com/browse/OCPBUGS-45142): Add missing pipelines plugin name to known plugins [#14550](https://github.com/openshift/console/pull/14550)
* [Full changelog](https://github.com/openshift/console/compare/96eb186d35ee5fea1f136951afdc52609b12faf1...4a7dc548a3d29a915107925ae8f404bbeadf021c)


### [hypershift](https://github.com/openshift/hypershift/tree/ba952e163ff6021327d0ab9fff6c6570062f00c8)

* [OCPBUGS-51804](https://issues.redhat.com/browse/OCPBUGS-51804): Fix golang crypto dependency go.mod replacement [#5994](https://github.com/openshift/hypershift/pull/5994)
* [OCPBUGS-54914](https://issues.redhat.com/browse/OCPBUGS-54914): Add konnectivity-proxy sidecar to openshift-oauth-apiserver [#6026](https://github.com/openshift/hypershift/pull/6026)
* [Full changelog](https://github.com/openshift/hypershift/compare/64381e4e4e3c8bff6f469b7e149fdaa5a9ba4032...ba952e163ff6021327d0ab9fff6c6570062f00c8)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/f58519f1aaf9d686a44e3acb2c4952fd6a3535fc)

* [OCPBUGS-55248](https://issues.redhat.com/browse/OCPBUGS-55248), [OCPBUGS-55249](https://issues.redhat.com/browse/OCPBUGS-55249): Updates GCP credentials request [#1355](https://github.com/openshift/machine-api-operator/pull/1355)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/693374418a09d902fa9e10c909b0c38b5a513505...f58519f1aaf9d686a44e3acb2c4952fd6a3535fc)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/19d2a0275bf5e566dff786fbc88fe97c69d131d9)

* [OCPBUGS-54831](https://issues.redhat.com/browse/OCPBUGS-54831): Make mtu-migration run after wait-for-primary-ip [#4990](https://github.com/openshift/machine-config-operator/pull/4990)
* [OCPBUGS-55684](https://issues.redhat.com/browse/OCPBUGS-55684): MSBIC should not update windows machinesets [#5028](https://github.com/openshift/machine-config-operator/pull/5028)
* [OCPBUGS-35921](https://issues.redhat.com/browse/OCPBUGS-35921): userCA and cloudCA certfiicates are not removed from nodes and ignition config [#4419](https://github.com/openshift/machine-config-operator/pull/4419)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/d00398e9d7c250a6361222a1024209ca4f73f79d...19d2a0275bf5e566dff786fbc88fe97c69d131d9)


### [prometheus](https://github.com/openshift/prometheus/tree/396e723fdbfb6ef53431dcb35c0c3f84de0712c1)

* [OCPBUGS-54942](https://issues.redhat.com/browse/OCPBUGS-54942): Scraping: Bump cache iteration after error to avoid false duplicate detection. [#250](https://github.com/openshift/prometheus/pull/250)
* [Full changelog](https://github.com/openshift/prometheus/compare/09479fe37af9d9f187cb21796e73213c80c902fc...396e723fdbfb6ef53431dcb35c0c3f84de0712c1)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/9ff2408eb11efe30253ba6a7e9ad4bf92dcb8fab)

* [OCPBUGS-55201](https://issues.redhat.com/browse/OCPBUGS-55201): ingress: Reset metrics when ingress is deleted [#58](https://github.com/openshift/route-controller-manager/pull/58)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/3112b458983c6fca6f77d5a945fb0026186dace6...9ff2408eb11efe30253ba6a7e9ad4bf92dcb8fab)


### [tests](https://github.com/openshift/origin/tree/3073d4b11e064d854be2d2ebae0a97ab37d5043d)

* [OCPBUGS-55636](https://issues.redhat.com/browse/OCPBUGS-55636): [build] Ensure Git Clone Does Not Run Privileged [#29746](https://github.com/openshift/origin/pull/29746)
* [Full changelog](https://github.com/openshift/origin/compare/e47256fe8ed6c66675f23ea8d631b7cb7881a6a5...3073d4b11e064d854be2d2ebae0a97ab37d5043d)