NO-ISSUE: rebase-release-4.17-4.17.0-0.nightly-2026-02-08-195050_amd64-2026-02-08_arm64-2026-02-08

[microshift-rebase-script]

amd64: 4.17.0-0.nightly-2026-02-08-195050
arm64: 4.17.0-0.nightly-arm64-2026-02-08-203708
prow job: https://prow.ci.openshift.org/view/gs/origin-ci-test/logs/periodic-ci-openshift-microshift-release-4.17-rebase-on-nightlies/2020709538100940800

• cluster-kube-scheduler-operator embedded-component 98ca953ba6955401023e219f37e0af49879355d2 to 0bb0678bead782461b35d7e8671b3e54b9a46788

  • 1e6eff3 2026-02-06T15:43:42+01:00 go mod vendor
  • 70235c6 2026-02-06T15:43:08+01:00 deps: Update library-go and logrus to fix a CVE

• cluster-network-operator embedded-component 5054141c25a5f77788345ca4f0146ab684c21c4e to 1aca832fab45aceebe8026077d67ac6b82b51179

  • be5e225 2026-01-14T15:58:13+00:00 Tweak iptables-alerter to try to avoid crictl bug

• service-ca-operator embedded-component 6ce6cceb6618a193b7a61b9bfbc7f559187dbb9e to 73ca97dd83f69d878cb5059161645f6eb693368a

  • 648a6e0 2026-02-03T10:44:13+01:00 Fix for OCPBUGS-68221: CVE-2025-65637 Denial-of-Service due to large single-line payload

• ovn-kubernetes image-amd64 a7f14dd8b75e92fff6fcac2093641e0d1d4b6c48 to f1ca69af3bf1d2d4a984579aa11a6a491da706fb

  • 039a0e1a 2026-01-27T12:17:55+01:00 Dockerfile: Unpin OVN and consume the latest from FDP.

• service-ca-operator image-amd64 6ce6cceb6618a193b7a61b9bfbc7f559187dbb9e to 73ca97dd83f69d878cb5059161645f6eb693368a

  • 648a6e0 2026-02-03T10:44:13+01:00 Fix for OCPBUGS-68221: CVE-2025-65637 Denial-of-Service due to large single-line payload

• ovn-kubernetes image-arm64 a7f14dd8b75e92fff6fcac2093641e0d1d4b6c48 to f1ca69af3bf1d2d4a984579aa11a6a491da706fb

  • 039a0e1a 2026-01-27T12:17:55+01:00 Dockerfile: Unpin OVN and consume the latest from FDP.

• service-ca-operator image-arm64 6ce6cceb6618a193b7a61b9bfbc7f559187dbb9e to 73ca97dd83f69d878cb5059161645f6eb693368a

  • 648a6e0 2026-02-03T10:44:13+01:00 Fix for OCPBUGS-68221: CVE-2025-65637 Denial-of-Service due to large single-line payload

/label tide/merge-method-squash
/label backport-risk-assessed
/label jira/valid-bug

[microshift-rebase-script]

/verified by automatic-rebase

[openshift-ci-robot]

@microshift-rebase-script[bot]: This pull request explicitly references no jira issue.

Details

In response to this:

amd64: 4.17.0-0.nightly-2026-02-08-195050
arm64: 4.17.0-0.nightly-arm64-2026-02-08-203708
prow job: https://prow.ci.openshift.org/view/gs/origin-ci-test/logs/periodic-ci-openshift-microshift-release-4.17-rebase-on-nightlies/2020709538100940800

• cluster-kube-scheduler-operator embedded-component 98ca953ba6955401023e219f37e0af49879355d2 to 0bb0678bead782461b35d7e8671b3e54b9a46788

• 1e6eff3 2026-02-06T15:43:42+01:00 go mod vendor

• 70235c6 2026-02-06T15:43:08+01:00 deps: Update library-go and logrus to fix a CVE

• cluster-network-operator embedded-component 5054141c25a5f77788345ca4f0146ab684c21c4e to 1aca832fab45aceebe8026077d67ac6b82b51179

• be5e225 2026-01-14T15:58:13+00:00 Tweak iptables-alerter to try to avoid crictl bug

• service-ca-operator embedded-component 6ce6cceb6618a193b7a61b9bfbc7f559187dbb9e to 73ca97dd83f69d878cb5059161645f6eb693368a

• 648a6e0 2026-02-03T10:44:13+01:00 Fix for OCPBUGS-68221: CVE-2025-65637 Denial-of-Service due to large single-line payload

• ovn-kubernetes image-amd64 a7f14dd8b75e92fff6fcac2093641e0d1d4b6c48 to f1ca69af3bf1d2d4a984579aa11a6a491da706fb

• 039a0e1a 2026-01-27T12:17:55+01:00 Dockerfile: Unpin OVN and consume the latest from FDP.

• service-ca-operator image-amd64 6ce6cceb6618a193b7a61b9bfbc7f559187dbb9e to 73ca97dd83f69d878cb5059161645f6eb693368a

• 648a6e0 2026-02-03T10:44:13+01:00 Fix for OCPBUGS-68221: CVE-2025-65637 Denial-of-Service due to large single-line payload

• ovn-kubernetes image-arm64 a7f14dd8b75e92fff6fcac2093641e0d1d4b6c48 to f1ca69af3bf1d2d4a984579aa11a6a491da706fb

• 039a0e1a 2026-01-27T12:17:55+01:00 Dockerfile: Unpin OVN and consume the latest from FDP.

• service-ca-operator image-arm64 6ce6cceb6618a193b7a61b9bfbc7f559187dbb9e to 73ca97dd83f69d878cb5059161645f6eb693368a

• 648a6e0 2026-02-03T10:44:13+01:00 Fix for OCPBUGS-68221: CVE-2025-65637 Denial-of-Service due to large single-line payload

/label tide/merge-method-squash
/label backport-risk-assessed
/label jira/valid-bug

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[openshift-ci-robot]

@microshift-rebase-script[bot]: Jira verification commands are restricted to collaborators for this repo.

Details

In response to this:

/verified by automatic-rebase

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[openshift-ci]

@microshift-rebase-script[bot]: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[ggiguash]

/lgtm
/verified by ci

[openshift-ci-robot]

@ggiguash: This PR has been marked as verified by ci.

Details

In response to this:

/lgtm
/verified by ci

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: ggiguash, microshift-rebase-script[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [ggiguash]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment