# 4.17.3 Created: 2024-10-24 11:07:23 +0000 UTC Image Digest: `sha256:24fc0f2cd53a451bce994b5f2ef40e0c2c4d221f201d42cd460881481a10cff5` ## Changes from 4.17.2 ### Components * Kubectl 1.30.2 * Kubernetes 1.30.5 * Kubernetes Tests 1.30.0 * Red Hat Enterprise Linux CoreOS upgraded from 417.94.202410160352-0 to 417.94.202410211619-0 ### Rebuilt images without code change * [agent-installer-api-server](https://github.com/openshift/assisted-service) git [b2babb90](https://github.com/openshift/assisted-service/commit/b2babb90b439acef3b05ccd8400b49b7ef9ecada) `sha256:6a44ab3018c4e4958203a77c2e85bd627abf0a436519940a11b80521a9bd99e2` * [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [9614e8b4](https://github.com/openshift/assisted-installer/commit/9614e8b4cd8393727d3fc12ff9df9e647c6f694b) `sha256:75e4061ee3c165999e17e685c66ed98a663f76cb955d661305a7395aff26d0ad` * [driver-toolkit](https://github.com/openshift/driver-toolkit) git [859518f6](https://github.com/openshift/driver-toolkit/commit/859518f6952407a56ddf7d0562c98fe27e9e0efe) `sha256:7248fd64b064250a31b4c6b5de1f80c65ac0d762a5ced2fe9323dd154917c4fb` * [machine-os-images](https://github.com/openshift/machine-os-images) git [9e76dac7](https://github.com/openshift/machine-os-images/commit/9e76dac7c015538cea342bb0d4b226a9ffe58754) `sha256:bc4182ac641a5b734d6525bfb3340a15f32f27b216fb457bcfe41f9f29c7ba3a` * [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [c7bc7fcb](https://github.com/openshift/monitoring-plugin/commit/c7bc7fcb6419b15cf0bf708ad1fb24a4f912e508) `sha256:b7571e2552951648cde63975b6bb5cdb06acbdd32c8e18b1b5637c9165e6ff15` * [must-gather](https://github.com/openshift/must-gather) git [cd767264](https://github.com/openshift/must-gather/commit/cd767264beedca7d5554ccd0f6bf736861710c04) `sha256:949116709d27b9ec53f5d742fa98ebbeb08208b5ff5a8f689bba5d4b6ef1fd7f` * [network-tools](https://github.com/openshift/network-tools) git [8e170b4f](https://github.com/openshift/network-tools/commit/8e170b4f41c9e80f0f8dd42d6cf6c169872b15d1) `sha256:6fe8184040626a8f4bcb5d6b7eb7a8fb7e9d56b0bb864985f2559f5276ede2d5` * [networking-console-plugin](https://github.com/openshift/networking-console-plugin) git [426d1381](https://github.com/openshift/networking-console-plugin/commit/426d13819907247cfcefcdc67d194a2d222e001b) `sha256:b7e5f74c78c4400179cdf51a9a3adf733bd8e20423f62807012e918c26d50415` * [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes) git [62451d12](https://github.com/openshift/ovn-kubernetes/commit/62451d12851aebdd1a3b009a9829f8df796998ad) `sha256:61dad76c218207d8b47d2ed8ecf86c4380ebf7a4fb90928b15219feefc6a1e05` * rhel-coreos `sha256:127fa6ed207f361568e2bacc2d4663c521227a424cad36b65b3d099fe40dca1b` * rhel-coreos-extensions `sha256:27837ba555e95ba6c2527031415b68349972d4edc7235c6eb7745d962d80b8b6` ### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/b7a46ac8f11afa837abb7c419c0e6bf191f34cc4) * [OCPBUGS-34277](https://issues.redhat.com/browse/OCPBUGS-34277): Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.17 [#7](https://github.com/openshift/azure-kubernetes-kms/pull/7) * [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/eab1dcfcf4a5758aad6b50dcefe85c93b7bcce59...b7a46ac8f11afa837abb7c419c0e6bf191f34cc4) ### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/6723dfd18056a6d002f792afce5547fc24874908) * [OCPBUGS-43547](https://issues.redhat.com/browse/OCPBUGS-43547): Power VS: Fix incorrect error handling for AddSecurityGroupRule [#9112](https://github.com/openshift/installer/pull/9112) * [OCPBUGS-43088](https://issues.redhat.com/browse/OCPBUGS-43088): GCP Validate Disk and Instance Type [#9091](https://github.com/openshift/installer/pull/9091) * [OCPBUGS-43329](https://issues.redhat.com/browse/OCPBUGS-43329): IBMCloud: Handle pagination for subnets [#9096](https://github.com/openshift/installer/pull/9096) * [Full changelog](https://github.com/openshift/installer/compare/f8ab1fbb9672112019dae092e9211e51e6eab5f1...6723dfd18056a6d002f792afce5547fc24874908) ### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/897ef0bc49fb17db0896ce481ec8243894410b3d) * [OCPBUGS-41642](https://issues.redhat.com/browse/OCPBUGS-41642): vendor: Update openshift/api to pick up the v4.17 capability set [#1876](https://github.com/openshift/oc/pull/1876) * [Full changelog](https://github.com/openshift/oc/compare/6bf65cc6db4685b4b299e85d71d43d74ce826478...897ef0bc49fb17db0896ce481ec8243894410b3d) ### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/3d5dade6a6505d157f1978796894da83a21c1fd5) * [OCPBUGS-43335](https://issues.redhat.com/browse/OCPBUGS-43335): Update github.com/sirupsen/logrus v1.9.3 [#766](https://github.com/openshift/cloud-credential-operator/pull/766) * [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/d5b0b95c40f72fc6d8444f86dbc6d65f836702e7...3d5dade6a6505d157f1978796894da83a21c1fd5) ### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/32fd83999e7eae9941abe7da915bacae1d50e49c) * [OCPBUGS-43389](https://issues.redhat.com/browse/OCPBUGS-43389): update goimports targets [#371](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/371) * [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/f7fa87e4a55cf18a73fa40d2cf56f603d76c8b7f...32fd83999e7eae9941abe7da915bacae1d50e49c) ### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/dd8791c76bd60468f4fb3e357ba061835f2e7c48) * [OCPBUGS-43350](https://issues.redhat.com/browse/OCPBUGS-43350): pkg/storage/azure: also check for auth failure error code on deletion [#1139](https://github.com/openshift/cluster-image-registry-operator/pull/1139) * [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/944ed01083db89ffda03cb7973084e1fcd0284eb...dd8791c76bd60468f4fb3e357ba061835f2e7c48) ### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/7bcf866a2d3e00b7e5a48e9f3149dba93e49e0ad) * [OCPBUGS-34310](https://issues.redhat.com/browse/OCPBUGS-34310): Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART for 4.17 [#1738](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1738) * [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/937f8a77e3274c3ef8907424f4d3294ef642642e...7bcf866a2d3e00b7e5a48e9f3149dba93e49e0ad) ### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/6267e06473d93cc32c584d7856c8f3daa1d97854) * [OCPBUGS-43545](https://issues.redhat.com/browse/OCPBUGS-43545): Fix api doc on Thanos Ruler default retention [#2501](https://github.com/openshift/cluster-monitoring-operator/pull/2501) * [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/a7ed4a3751af0d5e3d96f07d9b69468397319a2a...6267e06473d93cc32c584d7856c8f3daa1d97854) ### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/950651d28fadb5b058ac4652c44eca1b9ac04fbb) * [OCPBUGS-43343](https://issues.redhat.com/browse/OCPBUGS-43343): OCPBUGS-42244: Exporting environment varialbe NODE_CNI for live migration [#2536](https://github.com/openshift/cluster-network-operator/pull/2536) * [OCPBUGS-43317](https://issues.redhat.com/browse/OCPBUGS-43317): Use CNIConfDir for mounting directory to ovn-ipsec-host pod [#2533](https://github.com/openshift/cluster-network-operator/pull/2533) * [Full changelog](https://github.com/openshift/cluster-network-operator/compare/d9862a44d80e960ae5b3638a081b41671919b6c6...950651d28fadb5b058ac4652c44eca1b9ac04fbb) ### [console](https://github.com/openshift/console/tree/203b90125b296e5ff11d9e4b673ca2e24bbae6d3) * [OCPBUGS-42955](https://issues.redhat.com/browse/OCPBUGS-42955): Enabling topology e2e tests on CI [#14402](https://github.com/openshift/console/pull/14402) * [Full changelog](https://github.com/openshift/console/compare/ff091674f9b3e0cf23d9f1cc12b24ec4f4ae2270...203b90125b296e5ff11d9e4b673ca2e24bbae6d3) ### [hypershift](https://github.com/openshift/hypershift/tree/b9e977da802d07591cd9fb8ad91ba24116f4a3a8) * NO-JIRA: chore(deps): update konflux references (release-4.17) [#4958](https://github.com/openshift/hypershift/pull/4958) * [OCPBUGS-43464](https://issues.redhat.com/browse/OCPBUGS-43464): Pass feature flags to clusterpolicy controller [#4928](https://github.com/openshift/hypershift/pull/4928) * NO-JIRA: chore(deps): update konflux references (release-4.17) [#4931](https://github.com/openshift/hypershift/pull/4931) * [OCPBUGS-42704](https://issues.redhat.com/browse/OCPBUGS-42704): Run 2 replicas of active/passive HA components [#4843](https://github.com/openshift/hypershift/pull/4843) * [OCPBUGS-43316](https://issues.redhat.com/browse/OCPBUGS-43316): Enforce privileged PSA by default [#4834](https://github.com/openshift/hypershift/pull/4834) * NO-JIRA: chore(deps): update konflux references (release-4.17) [#4921](https://github.com/openshift/hypershift/pull/4921) * [OCPBUGS-43374](https://issues.redhat.com/browse/OCPBUGS-43374): [release-4.17] (manual backport) openstack/e2e: re-work nodepool tests [#4914](https://github.com/openshift/hypershift/pull/4914) * [Full changelog](https://github.com/openshift/hypershift/compare/6b836266f68826f83527aefcb2fd2d2d0b83a669...b9e977da802d07591cd9fb8ad91ba24116f4a3a8) ### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/7718265cc7640f6fa0d75eee366e424911d6f00f) * [OCPBUGS-42697](https://issues.redhat.com/browse/OCPBUGS-42697): protobuf bump [4.17] [#112](https://github.com/openshift/kube-rbac-proxy/pull/112) * [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/b2d2c462e801d7b8890347c017184153c3c8eaab...7718265cc7640f6fa0d75eee366e424911d6f00f) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/6308e62a4edabb857def36e2ffdaad1f92cc4734) * [OCPBUGS-42108](https://issues.redhat.com/browse/OCPBUGS-42108): Do not use 'restart' for 'oneshot' service [#4615](https://github.com/openshift/machine-config-operator/pull/4615) * [OCPBUGS-42979](https://issues.redhat.com/browse/OCPBUGS-42979): Regenerate the rendered MC in use when deleted [#4634](https://github.com/openshift/machine-config-operator/pull/4634) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/21453ea63d5d082f8cc3ce56ec3c2355686170e0...6308e62a4edabb857def36e2ffdaad1f92cc4734) ### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/fddd93bf30628b15fee660e94faea94b4a222365) * NO-JIRA: cleanup root and app OWNERS [#346](https://github.com/openshift/openshift-controller-manager/pull/346) * [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/055cf1d48da110fc6fbb02577e6176b80ed9db09...fddd93bf30628b15fee660e94faea94b4a222365) ### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/c40e3df6e718f40d6c155d328a06e3d629abb7e8) * [OCPBUGS-43584](https://issues.redhat.com/browse/OCPBUGS-43584): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.17 [#323](https://github.com/openshift/cluster-api-provider-openstack/pull/323) * [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/9db571c5fc2ce02aa3296ced348d082ee4cddaba...c40e3df6e718f40d6c155d328a06e3d629abb7e8) ### [tests](https://github.com/openshift/origin/tree/13862c13dba55f899d39c2227fc1ab99ded627d8) * [OCPBUGS-43569](https://issues.redhat.com/browse/OCPBUGS-43569): feat: update to use pullspec image [#29207](https://github.com/openshift/origin/pull/29207) * [OCPBUGS-43576](https://issues.redhat.com/browse/OCPBUGS-43576): Porting testing for netConfig and UDN and CIDR overlapping tests from upstream [#29181](https://github.com/openshift/origin/pull/29181) * [Full changelog](https://github.com/openshift/origin/compare/ca5b14bc70c6868f419247ee333b5b81e2d2cf98...13862c13dba55f899d39c2227fc1ab99ded627d8)