diff --git a/streams/candidate-4.16.json b/streams/candidate-4.16.json
index b95662910..4d0757d81 100644
--- a/streams/candidate-4.16.json
+++ b/streams/candidate-4.16.json
@@ -1 +1 @@
-{"version":1,"nodes":[{"version":"4.15.13","payload":"quay.io/openshift-release-dev/ocp-release@sha256:e7e6e89eeaf682eb2f9987a900386e950e433fe909eff779c27216919c8d5f2e","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:e7e6e89eeaf682eb2f9987a900386e950e433fe909eff779c27216919c8d5f2e","url":"https://access.redhat.com/errata/RHSA-2024:2773"}},{"version":"4.16.0-ec.6","payload":"quay.io/openshift-release-dev/ocp-release@sha256:d9729e9efb83d1181482035a64bc2fc598623cbd62142c027043c9149314e23d","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"^4[.]15[.]([0-9]|10)[+].*$|4[.]15[.].*|.*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:d9729e9efb83d1181482035a64bc2fc598623cbd62142c027043c9149314e23d"}},{"version":"4.15.14","payload":"quay.io/openshift-release-dev/ocp-release@sha256:234ccdfa4adabcfa7490785bad7108a3c7d622f19cd5b8f4b241dfba96c09be0","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:234ccdfa4adabcfa7490785bad7108a3c7d622f19cd5b8f4b241dfba96c09be0","url":"https://access.redhat.com/errata/RHSA-2024:2865"}},{"version":"4.16.0-ec.0","payload":"quay.io/openshift-release-dev/ocp-release@sha256:6bc8bf6309779c3fae09c2ad61d52948235da0960ded92951615603f235740e8","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"^4[.]15[.]([0-9]|10)[+].*$|4[.]15[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:6bc8bf6309779c3fae09c2ad61d52948235da0960ded92951615603f235740e8"}},{"version":"4.15.2","payload":"quay.io/openshift-release-dev/ocp-release@sha256:8e5ebf5d648eeab2d440036ce0f94ab73743aed85f9f5a4725a6aefad8f842e9","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.](14|15)|4[.]14[.]([0-9]|1[0-4])[+].*|4[.]14[.](1[0-3]|[0-9])[+].*|4[.]14[.].*|4[.]14[.]*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:8e5ebf5d648eeab2d440036ce0f94ab73743aed85f9f5a4725a6aefad8f842e9","url":"https://access.redhat.com/errata/RHSA-2024:1210"}},{"version":"4.15.0-rc.8","payload":"quay.io/openshift-release-dev/ocp-release@sha256:27323555f9b049b42a52b6a670e85d0e5facef9814c524ee29f27b75c3c4a3ed","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.].*|4[.](14|15[.]0-ec)[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,candidate-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:27323555f9b049b42a52b6a670e85d0e5facef9814c524ee29f27b75c3c4a3ed","url":"https://access.redhat.com/errata/RHSA-2023:7198"}},{"version":"4.15.15","payload":"quay.io/openshift-release-dev/ocp-release@sha256:bb1182cd9001d6811dea8c5823235c17b9a316cce3bb13c51325250c14b46787","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":".*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:bb1182cd9001d6811dea8c5823235c17b9a316cce3bb13c51325250c14b46787","url":"https://access.redhat.com/errata/RHSA-2024:3327"}},{"version":"4.15.0-ec.3","payload":"quay.io/openshift-release-dev/ocp-release@sha256:a70f1994591681f58dfbdc3ea6c6699e9061b45547d7bff8baf21105d1b2e9fc","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":".*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,candidate-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:a70f1994591681f58dfbdc3ea6c6699e9061b45547d7bff8baf21105d1b2e9fc"}},{"version":"4.15.12","payload":"quay.io/openshift-release-dev/ocp-release@sha256:86575d1def95bc8944081b3201f1a7d9f408a5c966faf42f236c1dc83b6cc562","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.](1[0-3]|[0-9])[+].*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:86575d1def95bc8944081b3201f1a7d9f408a5c966faf42f236c1dc83b6cc562","url":"https://access.redhat.com/errata/RHSA-2024:2664"}},{"version":"4.15.0-ec.0","payload":"quay.io/openshift-release-dev/ocp-release@sha256:217c3265267f7695bba068d328ab513c5f6c607d936abb884e84e9b615bb8841","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":".*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,candidate-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:217c3265267f7695bba068d328ab513c5f6c607d936abb884e84e9b615bb8841"}},{"version":"4.16.0-rc.3","payload":"quay.io/openshift-release-dev/ocp-release@sha256:31cdf34b1957996d5c79c48466abab2fcfb9d984369d2e14723e4edfe3e727ce","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]15[.].*|4[.]15[.].*|.*|.*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:31cdf34b1957996d5c79c48466abab2fcfb9d984369d2e14723e4edfe3e727ce","url":"https://access.redhat.com/errata/RHEA-2024:0041"}},{"version":"4.16.1","payload":"quay.io/openshift-release-dev/ocp-release@sha256:c17d4489c1b283ee71c76dda559e66a546e16b208a57eb156ef38fb30098903a","metadata":{"io.openshift.upgrades.graph.release.channels":"candidate-4.16,fast-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:c17d4489c1b283ee71c76dda559e66a546e16b208a57eb156ef38fb30098903a","url":"https://access.redhat.com/errata/RHSA-2024:4156"}},{"version":"4.15.0-rc.5","payload":"quay.io/openshift-release-dev/ocp-release@sha256:87e82b1b7e865ffa1cf64bb17cfb514943cfdf54bbdc37144bf0984c915dd4da","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.].*|4[.](14|15[.]0-ec)[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,candidate-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:87e82b1b7e865ffa1cf64bb17cfb514943cfdf54bbdc37144bf0984c915dd4da","url":"https://access.redhat.com/errata/RHSA-2023:7198"}},{"version":"4.15.16","payload":"quay.io/openshift-release-dev/ocp-release@sha256:4bdebcbc36c2b4c383b70cf5e23b168f8bf445eba42fc8f331643608a60398e8","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":".*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:4bdebcbc36c2b4c383b70cf5e23b168f8bf445eba42fc8f331643608a60398e8","url":"https://access.redhat.com/errata/RHBA-2024:3488"}},{"version":"4.15.0-rc.1","payload":"quay.io/openshift-release-dev/ocp-release@sha256:c7c3d2b39681c37817fb99c6f05140ee92a52920b7909d6e973d0025e6b60568","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.].*|4[.]14[.][3-8]|4[.](14|15[.]0-ec)[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,candidate-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:c7c3d2b39681c37817fb99c6f05140ee92a52920b7909d6e973d0025e6b60568","url":"https://access.redhat.com/errata/RHSA-2023:7198"}},{"version":"4.16.0-ec.1","payload":"quay.io/openshift-release-dev/ocp-release@sha256:0ed362d46466541178ad24c849e9aeacb0c622b5a2cab85cba820330e01a29a1","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"^4[.]15[.]([0-9]|10)[+].*$|4[.]15[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:0ed362d46466541178ad24c849e9aeacb0c622b5a2cab85cba820330e01a29a1"}},{"version":"4.15.0","payload":"quay.io/openshift-release-dev/ocp-release@sha256:0da6316466d60a3a4535d5fed3589feb0391989982fba59d47d4c729912d6363","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.](14|15)|4[.]14[.]([0-9]|1[0-4])[+].*|4[.]14[.](1[0-3]|[0-9])[+].*|4[.]14[.].*|4[.]14[.]*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:0da6316466d60a3a4535d5fed3589feb0391989982fba59d47d4c729912d6363","url":"https://access.redhat.com/errata/RHSA-2023:7198"}},{"version":"4.16.0-rc.4","payload":"quay.io/openshift-release-dev/ocp-release@sha256:6c236c400d3bad9b2b54d8a3b247c508f6f13511d37666de1eecca8e43bce0f6","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]15[.].*|.*|.*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:6c236c400d3bad9b2b54d8a3b247c508f6f13511d37666de1eecca8e43bce0f6","url":"https://access.redhat.com/errata/RHEA-2024:0041"}},{"version":"4.16.0","payload":"quay.io/openshift-release-dev/ocp-release@sha256:3717338045df06e31effea46761b2c7e90f543cc4f00547af8158dd6aea868c3","metadata":{"io.openshift.upgrades.graph.release.channels":"candidate-4.16,eus-4.16,fast-4.16,stable-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:3717338045df06e31effea46761b2c7e90f543cc4f00547af8158dd6aea868c3","url":"https://access.redhat.com/errata/RHSA-2024:0041"}},{"version":"4.15.0-rc.3","payload":"quay.io/openshift-release-dev/ocp-release@sha256:8d75c2f67cc8beebcc3e7155297614f238987708fae4cf1393d116765b72e05f","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.].*|4[.](14|15[.]0-ec)[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,candidate-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:8d75c2f67cc8beebcc3e7155297614f238987708fae4cf1393d116765b72e05f","url":"https://access.redhat.com/errata/RHSA-2023:7198"}},{"version":"4.16.0-rc.5","payload":"quay.io/openshift-release-dev/ocp-release@sha256:19f29913bacdebaad17dea58a617141c3f6c3a072d0e00a35473943993c78d2d","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]15[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:19f29913bacdebaad17dea58a617141c3f6c3a072d0e00a35473943993c78d2d","url":"https://access.redhat.com/errata/RHEA-2024:0041"}},{"version":"4.15.17","payload":"quay.io/openshift-release-dev/ocp-release@sha256:c7e0adf82092568ff2f4b42d2183486efe311066d6f5ae983f23c1b19f890c3d","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":".*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:c7e0adf82092568ff2f4b42d2183486efe311066d6f5ae983f23c1b19f890c3d","url":"https://access.redhat.com/errata/RHBA-2024:3673"}},{"version":"4.15.5","payload":"quay.io/openshift-release-dev/ocp-release@sha256:b17bc935bfb0fb250e738733af5d3d4ea1f27065de8e2622890782780b36320c","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.](14|15)|4[.]14[.]([0-9]|1[0-4])[+].*|4[.]14[.](1[0-3]|[0-9])[+].*|4[.]14[.].*|4[.]14[.]*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:b17bc935bfb0fb250e738733af5d3d4ea1f27065de8e2622890782780b36320c","url":"https://access.redhat.com/errata/RHSA-2024:1449"}},{"version":"4.16.0-rc.0","payload":"quay.io/openshift-release-dev/ocp-release@sha256:c56b01191de4cbb4b97c6eeaf61c5c122fcd465d1d0d671db640d877638ed790","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"^4[.]15[.]([0-9]|10)[+].*$|4[.]15[.].*|4[.]15[.].*|.*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:c56b01191de4cbb4b97c6eeaf61c5c122fcd465d1d0d671db640d877638ed790","url":"https://access.redhat.com/errata/RHEA-2024:0041"}},{"version":"4.15.18","payload":"quay.io/openshift-release-dev/ocp-release@sha256:0f55261077557d1bb909c06b115e0c79b0025677be57ba2f045495c11e2443ee","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":".*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:0f55261077557d1bb909c06b115e0c79b0025677be57ba2f045495c11e2443ee","url":"https://access.redhat.com/errata/RHSA-2024:3889"}},{"version":"4.15.0-ec.1","payload":"quay.io/openshift-release-dev/ocp-release@sha256:914677337308f1cd27e02514dde7e09f22b4af1b7bf9be7938a3e8e6340c5124","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":".*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,candidate-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:914677337308f1cd27e02514dde7e09f22b4af1b7bf9be7938a3e8e6340c5124"}},{"version":"4.16.0-ec.3","payload":"quay.io/openshift-release-dev/ocp-release@sha256:6de9a3052bd88299a4179a97d53817205e8465345e990879c2237787490b45c3","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"^4[.]15[.]([0-9]|10)[+].*$|4[.]15[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:6de9a3052bd88299a4179a97d53817205e8465345e990879c2237787490b45c3"}},{"version":"4.15.6","payload":"quay.io/openshift-release-dev/ocp-release@sha256:2cd97b739de42a8fcba965f6e4e5cf868b8d057a1c5717731c20e15d28726572","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.](14|15)|4[.]14[.]([0-9]|1[0-4])[+].*|4[.]14[.](1[0-3]|[0-9])[+].*|4[.]14[.].*|4[.]14[.]*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:2cd97b739de42a8fcba965f6e4e5cf868b8d057a1c5717731c20e15d28726572","url":"https://access.redhat.com/errata/RHSA-2024:1559"}},{"version":"4.15.0-rc.7","payload":"quay.io/openshift-release-dev/ocp-release@sha256:91edccfcd03f3b5f80bb5dbf5dad66b6d495282655fcc85f8991be62e86fc7aa","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.].*|4[.](14|15[.]0-ec)[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,candidate-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:91edccfcd03f3b5f80bb5dbf5dad66b6d495282655fcc85f8991be62e86fc7aa","url":"https://access.redhat.com/errata/RHSA-2023:7198"}},{"version":"4.16.0-ec.2","payload":"quay.io/openshift-release-dev/ocp-release@sha256:f8792bafedcdfb4a706a19b2f69d0acef5af6db57bc79d2cc13d75ff82630e1b","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"^4[.]15[.]([0-9]|10)[+].*$|4[.]15[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:f8792bafedcdfb4a706a19b2f69d0acef5af6db57bc79d2cc13d75ff82630e1b"}},{"version":"4.16.0-rc.1","payload":"quay.io/openshift-release-dev/ocp-release@sha256:21e2c79f5e7f61e0eb7ab83dd3475eeff063af571218ca93acb781ddcf6a6e31","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]15[.].*|4[.]15[.].*|.*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:21e2c79f5e7f61e0eb7ab83dd3475eeff063af571218ca93acb781ddcf6a6e31","url":"https://access.redhat.com/errata/RHEA-2024:0041"}},{"version":"4.15.7","payload":"quay.io/openshift-release-dev/ocp-release@sha256:7185f5f8846090b18e18a6b2deb59b04098d7bc388d0d388ae2b9147254aaf2f","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.]([0-9]|1[0-4])[+].*|4[.]14[.](1[0-3]|[0-9])[+].*|4[.]14[.].*|4[.]14[.]*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,candidate-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:7185f5f8846090b18e18a6b2deb59b04098d7bc388d0d388ae2b9147254aaf2f","url":"https://access.redhat.com/errata/RHSA-2024:1668"}},{"version":"4.16.0-rc.9","payload":"quay.io/openshift-release-dev/ocp-release@sha256:fbe0dc514996a2742dcbb616e39cca33594c1cce55357abb78e80dde29fecccc","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":".*","io.openshift.upgrades.graph.release.channels":"candidate-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:fbe0dc514996a2742dcbb616e39cca33594c1cce55357abb78e80dde29fecccc","url":"https://access.redhat.com/errata/RHSA-2024:0041"}},{"version":"4.15.0-rc.0","payload":"quay.io/openshift-release-dev/ocp-release@sha256:a3b96bf3aef71d4062cae3961fcba3bb3019b52ab2da60b2997d4842f9cdcf07","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.].*|4[.]14[.][3-8]|4[.](14|15[.]0-ec)[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,candidate-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:a3b96bf3aef71d4062cae3961fcba3bb3019b52ab2da60b2997d4842f9cdcf07","url":"https://access.redhat.com/errata/RHSA-2023:7198"}},{"version":"4.15.0-ec.2","payload":"quay.io/openshift-release-dev/ocp-release@sha256:7dbe1d710f739ae2c73187330788f5c36cbe8b315d816510ded767fb162ffd0c","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":".*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,candidate-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:7dbe1d710f739ae2c73187330788f5c36cbe8b315d816510ded767fb162ffd0c"}},{"version":"4.15.19","payload":"quay.io/openshift-release-dev/ocp-release@sha256:72dbe160063b42a23ba1b97eca3e22d75d0c757947890afaf4b27720c605e648","metadata":{"io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:72dbe160063b42a23ba1b97eca3e22d75d0c757947890afaf4b27720c605e648","url":"https://access.redhat.com/errata/RHSA-2024:4041"}},{"version":"4.15.10","payload":"quay.io/openshift-release-dev/ocp-release@sha256:7111fb4cec202cb758f58d9bed95a67e7fdc417353ef15be56d7bf96356909d4","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.](1[0-3]|[0-9])[+].*|4[.]14[.]*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:7111fb4cec202cb758f58d9bed95a67e7fdc417353ef15be56d7bf96356909d4","url":"https://access.redhat.com/errata/RHSA-2024:1887"}},{"version":"4.16.0-ec.4","payload":"quay.io/openshift-release-dev/ocp-release@sha256:1d715a60966e3c3215c046ac2c70efbe81dcb288d0b0223597cdae35c0c89d61","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"^4[.]15[.]([0-9]|10)[+].*$|.*|4[.]15[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:1d715a60966e3c3215c046ac2c70efbe81dcb288d0b0223597cdae35c0c89d61"}},{"version":"4.16.0-rc.6","payload":"quay.io/openshift-release-dev/ocp-release@sha256:f3bafdd925d51899e6715edc47869c94990954b4d330804c4114a7992af54d1d","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]15[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:f3bafdd925d51899e6715edc47869c94990954b4d330804c4114a7992af54d1d","url":"https://access.redhat.com/errata/RHSA-2024:0041"}},{"version":"4.15.20","payload":"quay.io/openshift-release-dev/ocp-release@sha256:478d9f5a1b496ebd69ecd0d7a7fc961f6318290ac9242ff65e1e2bdb88ff3097","metadata":{"io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:478d9f5a1b496ebd69ecd0d7a7fc961f6318290ac9242ff65e1e2bdb88ff3097","url":"https://access.redhat.com/errata/RHSA-2024:4151"}},{"version":"4.15.0-rc.4","payload":"quay.io/openshift-release-dev/ocp-release@sha256:e2447e71a94edd82169951ce5f6d090bc5873956ff5f967737f5ed5b83e0156f","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.].*|4[.](14|15[.]0-ec)[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,candidate-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:e2447e71a94edd82169951ce5f6d090bc5873956ff5f967737f5ed5b83e0156f","url":"https://access.redhat.com/errata/RHSA-2023:7198"}},{"version":"4.15.8","payload":"quay.io/openshift-release-dev/ocp-release@sha256:8032c4248d7ae032d5e79debf975d08683cc34d5f08ab2e937ce2d1e940c007b","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.](14|15)|4[.]14[.]([0-9]|1[0-4])[+].*|4[.]14[.](1[0-3]|[0-9])[+].*|4[.]14[.].*|4[.]14[.]*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:8032c4248d7ae032d5e79debf975d08683cc34d5f08ab2e937ce2d1e940c007b","url":"https://access.redhat.com/errata/RHSA-2024:1668"}},{"version":"4.16.0-rc.2","payload":"quay.io/openshift-release-dev/ocp-release@sha256:d93db95ec59b2f51ff45fdecd54b4dd9144521e3d099fef151c189598200cf24","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]15[.].*|4[.]15[.].*|.*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:d93db95ec59b2f51ff45fdecd54b4dd9144521e3d099fef151c189598200cf24","url":"https://access.redhat.com/errata/RHEA-2024:0041"}},{"version":"4.15.21","payload":"quay.io/openshift-release-dev/ocp-release@sha256:743d8d1bc98345a3f6b21f0af9c5ec252bbc6950d273afae5d9279a7714239b0","metadata":{"io.openshift.upgrades.graph.release.channels":"candidate-4.15,candidate-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:743d8d1bc98345a3f6b21f0af9c5ec252bbc6950d273afae5d9279a7714239b0","url":"https://access.redhat.com/errata/RHSA-2024:4321"}},{"version":"4.15.9","payload":"quay.io/openshift-release-dev/ocp-release@sha256:4c57e9589ac8d96ad74fd8c9fce35c5e507a20a88a6871d8a731c3b295abc79a","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.](1[0-3]|[0-9])[+].*|4[.]14[.].*|4[.]14[.]*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:4c57e9589ac8d96ad74fd8c9fce35c5e507a20a88a6871d8a731c3b295abc79a","url":"https://access.redhat.com/errata/RHSA-2024:1770"}},{"version":"4.15.0-rc.2","payload":"quay.io/openshift-release-dev/ocp-release@sha256:baed442e1faf17a500b0f0952ecbcfad66e03074c33fb4f08fa95f49bd8fc4ff","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.].*|4[.]14[.][3-8]|4[.](14|15[.]0-ec)[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,candidate-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:baed442e1faf17a500b0f0952ecbcfad66e03074c33fb4f08fa95f49bd8fc4ff","url":"https://access.redhat.com/errata/RHSA-2023:7198"}},{"version":"4.16.0-ec.5","payload":"quay.io/openshift-release-dev/ocp-release@sha256:f5c9cf5a461434e775af2b946fc2a8aee7240f5b05d4141a588e527adcad7af9","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"^4[.]15[.]([0-9]|10)[+].*$|4[.]15[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:f5c9cf5a461434e775af2b946fc2a8aee7240f5b05d4141a588e527adcad7af9"}},{"version":"4.15.11","payload":"quay.io/openshift-release-dev/ocp-release@sha256:54bf0a80b3bbace603d824ae5dac687e3bd7591ed4f629ce70adb8a01654585c","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.](1[0-3]|[0-9])[+].*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:54bf0a80b3bbace603d824ae5dac687e3bd7591ed4f629ce70adb8a01654585c","url":"https://access.redhat.com/errata/RHSA-2024:2068"}},{"version":"4.15.3","payload":"quay.io/openshift-release-dev/ocp-release@sha256:8e8c6c2645553e6df8eb7985d8cb322f333a4152453e2aa85fff24ac5e0755b0","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.](14|15)|4[.]14[.]([0-9]|1[0-4])[+].*|4[.]14[.](1[0-3]|[0-9])[+].*|4[.]14[.].*|4[.]14[.]*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:8e8c6c2645553e6df8eb7985d8cb322f333a4152453e2aa85fff24ac5e0755b0","url":"https://access.redhat.com/errata/RHSA-2024:1255"}}],"edges":[[41,47],[48,43],[41,44],[8,2],[25,16],[27,0],[13,35],[26,11],[47,0],[47,35],[22,27],[28,16],[6,39],[23,11],[15,18],[4,31],[0,39],[16,41],[8,39],[23,18],[4,2],[48,35],[22,44],[48,39],[16,36],[16,0],[46,18],[16,8],[31,39],[4,0],[41,8],[1,11],[20,18],[22,36],[26,18],[14,16],[30,11],[21,43],[44,2],[1,18],[27,31],[39,11],[4,44],[13,43],[36,0],[44,36],[30,18],[48,47],[42,11],[8,43],[24,35],[48,0],[2,39],[22,0],[21,35],[16,22],[22,39],[32,11],[40,16],[22,31],[8,35],[17,11],[4,36],[48,22],[5,16],[36,39],[34,16],[32,18],[4,35],[24,39],[22,43],[24,43],[46,11],[0,35],[8,0],[48,31],[19,16],[4,8],[9,16],[44,8],[16,31],[36,35],[16,43],[41,0],[48,41],[38,11],[22,35],[44,39],[47,2],[31,43],[36,47],[27,43],[44,0],[47,43],[41,39],[10,11],[4,22],[39,43],[29,11],[2,35],[27,35],[31,36],[48,2],[6,35],[22,2],[36,43],[13,39],[16,48],[44,43],[41,2],[16,2],[37,18],[17,18],[4,48],[27,2],[47,39],[33,16],[35,43],[4,27],[4,47],[48,44],[31,2],[31,35],[27,8],[7,16],[48,8],[41,36],[20,11],[12,16],[44,35],[24,11],[21,39],[47,8],[27,44],[22,8],[44,47],[48,27],[31,44],[27,39],[18,11],[16,4],[31,8],[27,36],[27,47],[16,35],[38,18],[0,2],[29,18],[2,43],[10,18],[31,0],[16,47],[24,18],[42,18],[4,39],[16,27],[4,43],[35,39],[22,47],[16,39],[48,36],[41,35],[36,8],[0,43],[45,16],[35,11],[27,41],[22,41],[31,47],[16,44],[6,43],[37,11],[4,41],[41,43],[15,11],[36,2]],"conditionalEdges":[{"edges":[{"from":"4.15.15","to":"4.15.16"},{"from":"4.15.10","to":"4.15.17"},{"from":"4.15.7","to":"4.15.15"},{"from":"4.15.3","to":"4.15.17"},{"from":"4.15.6","to":"4.15.18"},{"from":"4.15.3","to":"4.15.18"},{"from":"4.15.10","to":"4.15.18"},{"from":"4.15.0","to":"4.15.16"},{"from":"4.15.0","to":"4.15.17"},{"from":"4.15.2","to":"4.15.16"},{"from":"4.15.9","to":"4.15.16"},{"from":"4.15.6","to":"4.15.17"},{"from":"4.15.8","to":"4.15.17"},{"from":"4.15.5","to":"4.15.18"},{"from":"4.15.9","to":"4.15.15"},{"from":"4.15.11","to":"4.15.15"},{"from":"4.15.17","to":"4.15.18"},{"from":"4.15.15","to":"4.15.18"},{"from":"4.15.3","to":"4.15.15"},{"from":"4.15.5","to":"4.15.15"},{"from":"4.15.0","to":"4.15.15"},{"from":"4.15.13","to":"4.15.15"},{"from":"4.15.7","to":"4.15.18"},{"from":"4.15.2","to":"4.15.17"},{"from":"4.15.12","to":"4.15.15"},{"from":"4.15.9","to":"4.15.17"},{"from":"4.15.13","to":"4.15.17"},{"from":"4.15.2","to":"4.15.15"},{"from":"4.15.7","to":"4.15.17"},{"from":"4.15.7","to":"4.15.16"},{"from":"4.15.12","to":"4.15.18"},{"from":"4.15.14","to":"4.15.15"},{"from":"4.15.5","to":"4.15.17"},{"from":"4.15.14","to":"4.15.17"},{"from":"4.15.12","to":"4.15.16"},{"from":"4.15.6","to":"4.15.15"},{"from":"4.15.8","to":"4.15.16"},{"from":"4.15.16","to":"4.15.18"},{"from":"4.15.3","to":"4.15.16"},{"from":"4.15.16","to":"4.15.17"},{"from":"4.15.9","to":"4.15.18"},{"from":"4.15.2","to":"4.15.18"},{"from":"4.15.10","to":"4.15.16"},{"from":"4.15.6","to":"4.15.16"},{"from":"4.15.15","to":"4.15.17"},{"from":"4.15.14","to":"4.15.18"},{"from":"4.15.11","to":"4.15.18"},{"from":"4.15.5","to":"4.15.16"},{"from":"4.15.11","to":"4.15.17"},{"from":"4.15.13","to":"4.15.18"},{"from":"4.15.11","to":"4.15.16"},{"from":"4.15.14","to":"4.15.16"},{"from":"4.15.10","to":"4.15.15"},{"from":"4.15.8","to":"4.15.18"},{"from":"4.15.8","to":"4.15.15"},{"from":"4.15.13","to":"4.15.16"},{"from":"4.15.12","to":"4.15.17"},{"from":"4.15.0","to":"4.15.18"}],"risks":[{"url":"https://issues.redhat.com/browse/OSASINFRA-3500","name":"OpenStackAvailabilityZoneOutOfRange","message":"OpenStack clusters with more compute availability zones than storage availability zones can lose the ability to provision or deprovision Cinder CSI volumes.","matchingRules":[{"type":"PromQL","promql":{"promql":"group by (_id, type) (cluster_infrastructure_provider{_id=\"\",type=\"OpenStack\"})\nor on (_id)\n0 * group by (_id, type) (cluster_infrastructure_provider{_id=\"\"})\n"}}]}]},{"edges":[{"from":"4.15.0-ec.1","to":"4.15.0-rc.1"},{"from":"4.15.0-ec.2","to":"4.15.0-rc.3"},{"from":"4.15.0-ec.0","to":"4.15.0-rc.1"},{"from":"4.15.0-ec.0","to":"4.15.0-rc.3"},{"from":"4.15.0-ec.3","to":"4.15.0-rc.4"},{"from":"4.15.0-ec.2","to":"4.15.0-rc.5"},{"from":"4.15.0-ec.3","to":"4.15.0-rc.0"},{"from":"4.15.0-ec.0","to":"4.15.0-rc.4"},{"from":"4.15.0-ec.1","to":"4.15.0-rc.5"},{"from":"4.15.0-ec.0","to":"4.15.0-rc.5"},{"from":"4.15.0-ec.3","to":"4.15.0-rc.2"},{"from":"4.15.0-ec.0","to":"4.15.0-rc.2"},{"from":"4.15.0-ec.1","to":"4.15.0-rc.4"},{"from":"4.15.0-ec.1","to":"4.15.0-rc.7"},{"from":"4.15.0-ec.1","to":"4.15.0-rc.2"},{"from":"4.15.0-ec.1","to":"4.15.0-rc.0"},{"from":"4.15.0-ec.2","to":"4.15.0-rc.2"},{"from":"4.15.0-ec.2","to":"4.15.0-rc.4"},{"from":"4.15.0-ec.3","to":"4.15.0-rc.3"},{"from":"4.15.0-ec.0","to":"4.15.0-rc.0"},{"from":"4.15.0-ec.2","to":"4.15.0-rc.7"},{"from":"4.15.0-ec.2","to":"4.15.0-rc.8"},{"from":"4.15.0-ec.3","to":"4.15.0-rc.5"},{"from":"4.15.0-ec.2","to":"4.15.0-rc.0"},{"from":"4.15.0-ec.1","to":"4.15.0-rc.8"},{"from":"4.15.0-ec.2","to":"4.15.0-rc.1"},{"from":"4.15.0-ec.1","to":"4.15.0-rc.3"},{"from":"4.15.0-ec.3","to":"4.15.0-rc.1"},{"from":"4.15.0-ec.0","to":"4.15.0-rc.8"},{"from":"4.15.0-ec.3","to":"4.15.0-rc.8"},{"from":"4.15.0-ec.0","to":"4.15.0-rc.7"},{"from":"4.15.0-ec.3","to":"4.15.0-rc.7"}],"risks":[{"url":"https://issues.redhat.com/browse/CCO-522","name":"GCPMintModeRoleAdmin","message":"GCP clusters in Mint mode may need additional permissions to provision 4.15 CredentialsRequests.","matchingRules":[{"type":"PromQL","promql":{"promql":"(\n  group by (mode) (cco_credentials_mode{mode=\"mint\"})\n  or\n  0 * group by (mode) (cco_credentials_mode)\n)\n* on () group_left (type)\n(\n  group by (type) (cluster_infrastructure_provider{type=\"GCP\"})\n  or\n  0 * group by (type) (cluster_infrastructure_provider)\n)\n"}}]},{"url":"https://docs.openshift.com/container-platform/4.15/release_notes/ocp-4-15-release-notes.html","name":"PreRelease","message":"This is a prerelease version, and you should update to 4.15.0 or later releases, even if that means updating to a newer 4.14 first.","matchingRules":[{"type":"Always"}]}]},{"edges":[{"from":"4.15.0-ec.0","to":"4.16.0-ec.1"},{"from":"4.15.0-rc.2","to":"4.16.0-ec.3"},{"from":"4.15.0-rc.0","to":"4.16.0-ec.2"},{"from":"4.15.0-rc.0","to":"4.16.0-ec.0"},{"from":"4.15.0-ec.0","to":"4.16.0-ec.0"},{"from":"4.15.0-rc.7","to":"4.16.0-ec.3"},{"from":"4.15.0-rc.2","to":"4.16.0-ec.2"},{"from":"4.15.0-rc.1","to":"4.16.0-ec.3"},{"from":"4.15.0-rc.5","to":"4.16.0-ec.3"},{"from":"4.15.0-rc.5","to":"4.16.0-ec.2"},{"from":"4.15.0-rc.8","to":"4.16.0-ec.3"},{"from":"4.15.0-rc.4","to":"4.16.0-ec.3"},{"from":"4.15.0-ec.2","to":"4.16.0-ec.1"},{"from":"4.15.0-ec.1","to":"4.16.0-ec.0"},{"from":"4.15.0-ec.1","to":"4.16.0-ec.1"},{"from":"4.15.0-rc.4","to":"4.16.0-ec.2"},{"from":"4.15.0-rc.3","to":"4.16.0-ec.3"},{"from":"4.15.0-ec.2","to":"4.16.0-ec.0"},{"from":"4.15.0-rc.0","to":"4.16.0-ec.3"},{"from":"4.15.0-rc.1","to":"4.16.0-ec.1"},{"from":"4.15.0-rc.1","to":"4.16.0-ec.2"},{"from":"4.15.0-ec.3","to":"4.16.0-ec.0"},{"from":"4.15.0-rc.0","to":"4.16.0-ec.1"},{"from":"4.15.0-ec.3","to":"4.16.0-ec.1"},{"from":"4.15.0-rc.3","to":"4.16.0-ec.2"}],"risks":[{"url":"https://issues.redhat.com/browse/API-1813","name":"FlowControlV1Beta3Migration","message":"Clusters installed in 4.8 or earlier can wedge updating into 4.16 unless they have had flowcontrol.apiserver.k8s.io storage version migrations.","matchingRules":[{"type":"PromQL","promql":{"promql":"label_replace(group by (_id, version) (cluster_version{_id=\"\",type=\"initial\",version=~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"yes, so possibly actually born in 4.8 or earlier\", \"\", \"\")\nor on (_id)\nlabel_replace(0 * group by (_id, version) (cluster_version{_id=\"\",type=\"initial\",version!~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"no, born in 4.10 or later\", \"\", \"\")\n"}}]},{"url":"https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html","name":"PreRelease","message":"This is a prerelease version, and you should update to 4.16.0 or later releases, even if that means updating to a newer 4.15 first.","matchingRules":[{"type":"Always"}]}]},{"edges":[{"from":"4.15.0-rc.2","to":"4.15.0-rc.5"},{"from":"4.15.0-rc.7","to":"4.15.0-rc.8"},{"from":"4.15.0-rc.4","to":"4.15.0-rc.5"},{"from":"4.15.0-rc.2","to":"4.15.0-rc.3"},{"from":"4.15.0-ec.2","to":"4.15.0-ec.3"},{"from":"4.15.0-rc.2","to":"4.15.0-rc.7"},{"from":"4.15.0-rc.0","to":"4.15.0-rc.5"},{"from":"4.15.0-rc.1","to":"4.15.0-rc.5"},{"from":"4.15.0-rc.1","to":"4.15.0-rc.2"},{"from":"4.15.0-rc.3","to":"4.15.0-rc.8"},{"from":"4.15.0-ec.1","to":"4.15.0-ec.2"},{"from":"4.15.0-rc.1","to":"4.15.0-rc.8"},{"from":"4.15.0-rc.5","to":"4.15.0-rc.7"},{"from":"4.15.0-rc.3","to":"4.15.0-rc.7"},{"from":"4.15.0-rc.0","to":"4.15.0-rc.4"},{"from":"4.15.0-ec.0","to":"4.15.0-ec.3"},{"from":"4.15.0-rc.2","to":"4.15.0-rc.8"},{"from":"4.15.0-rc.4","to":"4.15.0-rc.7"},{"from":"4.15.0-rc.3","to":"4.15.0-rc.4"},{"from":"4.15.0-rc.0","to":"4.15.0-rc.3"},{"from":"4.15.0-rc.4","to":"4.15.0-rc.8"},{"from":"4.15.0-rc.0","to":"4.15.0-rc.1"},{"from":"4.15.0-rc.3","to":"4.15.0-rc.5"},{"from":"4.15.0-ec.1","to":"4.15.0-ec.3"},{"from":"4.15.0-rc.1","to":"4.15.0-rc.7"},{"from":"4.15.0-ec.0","to":"4.15.0-ec.2"},{"from":"4.15.0-rc.0","to":"4.15.0-rc.8"},{"from":"4.15.0-rc.2","to":"4.15.0-rc.4"},{"from":"4.15.0-ec.0","to":"4.15.0-ec.1"},{"from":"4.15.0-rc.5","to":"4.15.0-rc.8"},{"from":"4.15.0-rc.1","to":"4.15.0-rc.4"},{"from":"4.15.0-rc.0","to":"4.15.0-rc.7"},{"from":"4.15.0-rc.0","to":"4.15.0-rc.2"},{"from":"4.15.0-rc.1","to":"4.15.0-rc.3"}],"risks":[{"url":"https://docs.openshift.com/container-platform/4.15/release_notes/ocp-4-15-release-notes.html","name":"PreRelease","message":"This is a prerelease version, and you should update to 4.15.0 or later releases, even if that means updating to a newer 4.14 first.","matchingRules":[{"type":"Always"}]}]},{"edges":[{"from":"4.15.2","to":"4.16.0-ec.4"},{"from":"4.15.0","to":"4.16.0-ec.4"},{"from":"4.15.3","to":"4.16.0-ec.4"}],"risks":[{"url":"https://issues.redhat.com/browse/OCPCLOUD-2582","name":"CRIAuthPluginRHEL","message":"Azure and GCP clusters with RHEL nodes may fail to start the kubelet until the operating system has been updated.","matchingRules":[{"type":"PromQL","promql":{"promql":"topk(1,\n  group by (type) (cluster_infrastructure_provider{_id=\"\",type=~\"Azure|GCP\"})\n  or\n  0 * group by (type) (cluster_infrastructure_provider{_id=\"\"})\n)\n* on () group_left (label_node_openshift_io_os_id)\ntopk(1,\n  group by (label_node_openshift_io_os_id) (kube_node_labels{_id=\"\",label_node_openshift_io_os_id=\"rhel\"})\n  or\n  0 * group by (label_node_openshift_io_os_id) (kube_node_labels{_id=\"\"})\n)\n"}}]},{"url":"https://issues.redhat.com/browse/MCO-1091","name":"CSRNotApprovedBadCerts","message":"Clusters born in 4.13 and earlier may not have CSRs automatically approved because of missing groups in installer client certificates.","matchingRules":[{"type":"PromQL","promql":{"promql":"topk(1,\n  label_replace(group by (version) (cluster_version{_id=\"\",type=\"initial\",version=~\"4[.]([0-9]|1[0-3])[.].*\"}),\"born_by_4_13\", \"yes, so possibly actually born in 4.13 or earlier\", \"\", \"\")\n  or\n  label_replace(0 * group by (version) (cluster_version{_id=\"\",type=\"initial\",version!~\"4[.]([0-9]|1[0-3])[.].*\"}),\"born_by_4_13\", \"no, born in 4.13 or later\", \"\", \"\")\n)\n"}}]},{"url":"https://issues.redhat.com/browse/API-1813","name":"FlowControlV1Beta3Migration","message":"Clusters installed in 4.8 or earlier can wedge updating into 4.16 unless they have had flowcontrol.apiserver.k8s.io storage version migrations.","matchingRules":[{"type":"PromQL","promql":{"promql":"label_replace(group by (_id, version) (cluster_version{_id=\"\",type=\"initial\",version=~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"yes, so possibly actually born in 4.8 or earlier\", \"\", \"\")\nor on (_id)\nlabel_replace(0 * group by (_id, version) (cluster_version{_id=\"\",type=\"initial\",version!~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"no, born in 4.10 or later\", \"\", \"\")\n"}}]},{"url":"https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html","name":"PreRelease","message":"This is a prerelease version, and you should update to 4.16.0 or later releases, even if that means updating to a newer 4.15 first.","matchingRules":[{"type":"Always"}]}]},{"edges":[{"from":"4.16.0-ec.1","to":"4.16.0-rc.3"},{"from":"4.16.0-ec.5","to":"4.16.0-rc.3"},{"from":"4.16.0-ec.4","to":"4.16.0-rc.4"},{"from":"4.16.0-ec.3","to":"4.16.0-rc.3"},{"from":"4.16.0-rc.1","to":"4.16.0-rc.3"},{"from":"4.16.0-rc.2","to":"4.16.0-rc.4"},{"from":"4.16.0-ec.6","to":"4.16.0-rc.3"},{"from":"4.16.0-ec.2","to":"4.16.0-rc.4"},{"from":"4.16.0-rc.0","to":"4.16.0-rc.3"},{"from":"4.16.0-ec.5","to":"4.16.0-rc.4"},{"from":"4.16.0-ec.4","to":"4.16.0-rc.3"},{"from":"4.16.0-rc.1","to":"4.16.0-rc.4"},{"from":"4.16.0-rc.2","to":"4.16.0-rc.3"},{"from":"4.16.0-rc.0","to":"4.16.0-rc.4"},{"from":"4.16.0-ec.2","to":"4.16.0-rc.3"},{"from":"4.16.0-rc.3","to":"4.16.0-rc.4"},{"from":"4.16.0-ec.1","to":"4.16.0-rc.4"},{"from":"4.16.0-ec.6","to":"4.16.0-rc.4"},{"from":"4.16.0-ec.3","to":"4.16.0-rc.4"}],"risks":[{"url":"https://issues.redhat.com/browse/OSASINFRA-3500","name":"OpenStackAvailabilityZoneOutOfRange","message":"OpenStack clusters with more compute availability zones than storage availability zones can lose the ability to provision or deprovision Cinder CSI volumes.","matchingRules":[{"type":"PromQL","promql":{"promql":"group by (_id, type) (cluster_infrastructure_provider{_id=\"\",type=\"OpenStack\"})\nor on (_id)\n0 * group by (_id, type) (cluster_infrastructure_provider{_id=\"\"})\n"}}]},{"url":"https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html","name":"PreRelease","message":"This is a prerelease version, and you should update to 4.16.0 or later releases, even if that means updating to a newer 4.15 first.","matchingRules":[{"type":"Always"}]},{"url":"https://issues.redhat.com/browse/OTA-1297","name":"TechPreviewSignatureStoresInDefault","message":"Standalone clusters in the default feature set will fail to verify signatures when asked to update out to later releases.","matchingRules":[{"type":"PromQL","promql":{"promql":"0 * group by (invoker) (cluster_installer{_id=\"\",invoker=\"hypershift\"})\nor on (_id)\ngroup by (name) (cluster_feature_set{_id=\"\",name=\"\"})\nor on (_id)\n0 * group by (name) (cluster_feature_set{_id=\"\"})\n"}}]}]},{"edges":[{"from":"4.15.11","to":"4.16.0-ec.6"}],"risks":[{"url":"https://issues.redhat.com/browse/API-1813","name":"FlowControlV1Beta3Migration","message":"Clusters installed in 4.8 or earlier can wedge updating into 4.16 unless they have had flowcontrol.apiserver.k8s.io storage version migrations.","matchingRules":[{"type":"PromQL","promql":{"promql":"label_replace(group by (_id, version) (cluster_version{_id=\"\",type=\"initial\",version=~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"yes, so possibly actually born in 4.8 or earlier\", \"\", \"\")\nor on (_id)\nlabel_replace(0 * group by (_id, version) (cluster_version{_id=\"\",type=\"initial\",version!~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"no, born in 4.10 or later\", \"\", \"\")\n"}}]},{"url":"https://issues.redhat.com/browse/OSASINFRA-3500","name":"OpenStackAvailabilityZoneOutOfRange","message":"OpenStack clusters with more compute availability zones than storage availability zones can lose the ability to provision or deprovision Cinder CSI volumes.","matchingRules":[{"type":"PromQL","promql":{"promql":"group by (_id, type) (cluster_infrastructure_provider{_id=\"\",type=\"OpenStack\"})\nor on (_id)\n0 * group by (_id, type) (cluster_infrastructure_provider{_id=\"\"})\n"}}]},{"url":"https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html","name":"PreRelease","message":"This is a prerelease version, and you should update to 4.16.0 or later releases, even if that means updating to a newer 4.15 first.","matchingRules":[{"type":"Always"}]}]},{"edges":[{"from":"4.15.13","to":"4.16.0-rc.3"},{"from":"4.15.14","to":"4.16.0-rc.3"},{"from":"4.15.11","to":"4.16.0-rc.3"},{"from":"4.15.16","to":"4.16.0-rc.3"},{"from":"4.15.12","to":"4.16.0-rc.3"},{"from":"4.15.15","to":"4.16.0-rc.3"}],"risks":[{"url":"https://issues.redhat.com/browse/API-1813","name":"FlowControlV1Beta3Migration","message":"Clusters installed in 4.8 or earlier can wedge updating into 4.16 unless they have had flowcontrol.apiserver.k8s.io storage version migrations.","matchingRules":[{"type":"PromQL","promql":{"promql":"label_replace(group by (_id, version) (cluster_version{_id=\"\",type=\"initial\",version=~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"yes, so possibly actually born in 4.8 or earlier\", \"\", \"\")\nor on (_id)\nlabel_replace(0 * group by (_id, version) (cluster_version{_id=\"\",type=\"initial\",version!~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"no, born in 4.10 or later\", \"\", \"\")\n"}}]},{"url":"https://issues.redhat.com/browse/SDN-5055","name":"OVNMulticastPacketLoss","message":"Multicast communication fails when multicast receiver and clients run on the same node in clusters that use OVN networking. Clusters that do not use multicast communication are not affected.","matchingRules":[{"type":"PromQL","promql":{"promql":"1 * group by (resource) (max_over_time(apiserver_storage_objects{_id=\"\",resource=\"egressips.k8s.ovn.org\"}[1h]))\nor on (_id)\n0 * group(max_over_time(apiserver_storage_objects{_id=\"\"}[1h]))\n"}}]},{"url":"https://issues.redhat.com/browse/OSASINFRA-3500","name":"OpenStackAvailabilityZoneOutOfRange","message":"OpenStack clusters with more compute availability zones than storage availability zones can lose the ability to provision or deprovision Cinder CSI volumes.","matchingRules":[{"type":"PromQL","promql":{"promql":"group by (_id, type) (cluster_infrastructure_provider{_id=\"\",type=\"OpenStack\"})\nor on (_id)\n0 * group by (_id, type) (cluster_infrastructure_provider{_id=\"\"})\n"}}]},{"url":"https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html","name":"PreRelease","message":"This is a prerelease version, and you should update to 4.16.0 or later releases, even if that means updating to a newer 4.15 first.","matchingRules":[{"type":"Always"}]},{"url":"https://issues.redhat.com/browse/OTA-1297","name":"TechPreviewSignatureStoresInDefault","message":"Standalone clusters in the default feature set will fail to verify signatures when asked to update out to later releases.","matchingRules":[{"type":"PromQL","promql":{"promql":"0 * group by (invoker) (cluster_installer{_id=\"\",invoker=\"hypershift\"})\nor on (_id)\ngroup by (name) (cluster_feature_set{_id=\"\",name=\"\"})\nor on (_id)\n0 * group by (name) (cluster_feature_set{_id=\"\"})\n"}}]}]},{"edges":[{"from":"4.15.11","to":"4.16.0-rc.2"},{"from":"4.15.12","to":"4.16.0-rc.2"},{"from":"4.15.14","to":"4.16.0-rc.2"},{"from":"4.15.13","to":"4.16.0-rc.1"},{"from":"4.15.11","to":"4.16.0-rc.0"},{"from":"4.15.12","to":"4.16.0-rc.1"},{"from":"4.15.13","to":"4.16.0-rc.2"},{"from":"4.15.11","to":"4.16.0-rc.1"}],"risks":[{"url":"https://issues.redhat.com/browse/API-1813","name":"FlowControlV1Beta3Migration","message":"Clusters installed in 4.8 or earlier can wedge updating into 4.16 unless they have had flowcontrol.apiserver.k8s.io storage version migrations.","matchingRules":[{"type":"PromQL","promql":{"promql":"label_replace(group by (_id, version) (cluster_version{_id=\"\",type=\"initial\",version=~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"yes, so possibly actually born in 4.8 or earlier\", \"\", \"\")\nor on (_id)\nlabel_replace(0 * group by (_id, version) (cluster_version{_id=\"\",type=\"initial\",version!~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"no, born in 4.10 or later\", \"\", \"\")\n"}}]},{"url":"https://issues.redhat.com/browse/SDN-5055","name":"OVNMulticastPacketLoss","message":"Multicast communication fails when multicast receiver and clients run on the same node in clusters that use OVN networking. Clusters that do not use multicast communication are not affected.","matchingRules":[{"type":"PromQL","promql":{"promql":"1 * group by (resource) (max_over_time(apiserver_storage_objects{_id=\"\",resource=\"egressips.k8s.ovn.org\"}[1h]))\nor on (_id)\n0 * group(max_over_time(apiserver_storage_objects{_id=\"\"}[1h]))\n"}}]},{"url":"https://issues.redhat.com/browse/OSASINFRA-3500","name":"OpenStackAvailabilityZoneOutOfRange","message":"OpenStack clusters with more compute availability zones than storage availability zones can lose the ability to provision or deprovision Cinder CSI volumes.","matchingRules":[{"type":"PromQL","promql":{"promql":"group by (_id, type) (cluster_infrastructure_provider{_id=\"\",type=\"OpenStack\"})\nor on (_id)\n0 * group by (_id, type) (cluster_infrastructure_provider{_id=\"\"})\n"}}]},{"url":"https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html","name":"PreRelease","message":"This is a prerelease version, and you should update to 4.16.0 or later releases, even if that means updating to a newer 4.15 first.","matchingRules":[{"type":"Always"}]}]},{"edges":[{"from":"4.16.0-ec.6","to":"4.16.0-rc.6"},{"from":"4.16.0-ec.1","to":"4.16.0-rc.6"},{"from":"4.16.0-rc.3","to":"4.16.0-rc.6"},{"from":"4.16.0-rc.4","to":"4.16.0-rc.9"},{"from":"4.16.0-ec.5","to":"4.16.0-rc.9"},{"from":"4.16.0-ec.2","to":"4.16.0-ec.3"},{"from":"4.16.0-rc.2","to":"4.16.0-rc.6"},{"from":"4.16.0-ec.3","to":"4.16.0-ec.5"},{"from":"4.16.0-rc.1","to":"4.16.0-rc.5"},{"from":"4.16.0-ec.3","to":"4.16.0-rc.6"},{"from":"4.16.0-ec.1","to":"4.16.0-ec.5"},{"from":"4.16.0-ec.1","to":"4.16.0-ec.2"},{"from":"4.16.0-ec.4","to":"4.16.0-rc.5"},{"from":"4.16.0-rc.3","to":"4.16.0-rc.9"},{"from":"4.16.0-ec.4","to":"4.16.0-rc.9"},{"from":"4.16.0-rc.5","to":"4.16.0-rc.6"},{"from":"4.16.0-rc.1","to":"4.16.0-rc.6"},{"from":"4.16.0-rc.0","to":"4.16.0-rc.9"},{"from":"4.16.0-ec.5","to":"4.16.0-rc.5"},{"from":"4.16.0-ec.3","to":"4.16.0-rc.5"},{"from":"4.16.0-rc.2","to":"4.16.0-rc.9"},{"from":"4.16.0-ec.4","to":"4.16.0-rc.6"},{"from":"4.16.0-ec.5","to":"4.16.0-rc.6"},{"from":"4.16.0-ec.4","to":"4.16.0-ec.5"},{"from":"4.16.0-rc.5","to":"4.16.0-rc.9"},{"from":"4.16.0-ec.6","to":"4.16.0-rc.5"},{"from":"4.16.0-ec.6","to":"4.16.0-rc.9"},{"from":"4.15.19","to":"4.16.0-rc.9"},{"from":"4.16.0-ec.1","to":"4.16.0-rc.5"},{"from":"4.16.0-rc.1","to":"4.16.0-rc.9"},{"from":"4.16.0-ec.2","to":"4.16.0-rc.9"},{"from":"4.16.0-rc.6","to":"4.16.0-rc.9"},{"from":"4.16.0-ec.2","to":"4.16.0-rc.6"},{"from":"4.16.0-rc.4","to":"4.16.0-rc.6"},{"from":"4.16.0-ec.0","to":"4.16.0-ec.3"},{"from":"4.15.18","to":"4.16.0-rc.9"},{"from":"4.16.0-ec.2","to":"4.16.0-rc.5"},{"from":"4.16.0-rc.0","to":"4.16.0-rc.5"},{"from":"4.16.0-rc.0","to":"4.16.0-rc.6"},{"from":"4.16.0-ec.2","to":"4.16.0-ec.5"},{"from":"4.16.0-ec.1","to":"4.16.0-ec.3"},{"from":"4.16.0-ec.1","to":"4.16.0-rc.9"},{"from":"4.16.0-ec.0","to":"4.16.0-ec.2"},{"from":"4.16.0-rc.2","to":"4.16.0-rc.5"},{"from":"4.16.0-rc.4","to":"4.16.0-rc.5"},{"from":"4.16.0-rc.3","to":"4.16.0-rc.5"},{"from":"4.16.0-ec.3","to":"4.16.0-rc.9"},{"from":"4.16.0-ec.0","to":"4.16.0-ec.1"}],"risks":[{"url":"https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html","name":"PreRelease","message":"This is a prerelease version, and you should update to 4.16.0 or later releases, even if that means updating to a newer 4.15 first.","matchingRules":[{"type":"Always"}]}]},{"edges":[{"from":"4.15.18","to":"4.16.0-rc.5"},{"from":"4.15.18","to":"4.16.0-rc.6"}],"risks":[{"url":"https://issues.redhat.com/browse/SDN-5055","name":"OVNMulticastPacketLoss","message":"Multicast communication fails when multicast receiver and clients run on the same node in clusters that use OVN networking. Clusters that do not use multicast communication are not affected.","matchingRules":[{"type":"PromQL","promql":{"promql":"1 * group by (resource) (max_over_time(apiserver_storage_objects{_id=\"\",resource=\"egressips.k8s.ovn.org\"}[1h]))\nor on (_id)\n0 * group(max_over_time(apiserver_storage_objects{_id=\"\"}[1h]))\n"}}]},{"url":"https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html","name":"PreRelease","message":"This is a prerelease version, and you should update to 4.16.0 or later releases, even if that means updating to a newer 4.15 first.","matchingRules":[{"type":"Always"}]}]},{"edges":[{"from":"4.15.7","to":"4.16.0-ec.5"},{"from":"4.15.2","to":"4.16.0-ec.5"},{"from":"4.15.5","to":"4.16.0-ec.5"},{"from":"4.15.3","to":"4.16.0-ec.5"},{"from":"4.15.0","to":"4.16.0-ec.5"},{"from":"4.15.6","to":"4.16.0-ec.5"},{"from":"4.15.9","to":"4.16.0-ec.5"},{"from":"4.15.0","to":"4.16.0-ec.3"},{"from":"4.15.8","to":"4.16.0-ec.5"}],"risks":[{"url":"https://issues.redhat.com/browse/OCPCLOUD-2582","name":"CRIAuthPluginRHEL","message":"Azure and GCP clusters with RHEL nodes may fail to start the kubelet until the operating system has been updated.","matchingRules":[{"type":"PromQL","promql":{"promql":"topk(1,\n  group by (type) (cluster_infrastructure_provider{_id=\"\",type=~\"Azure|GCP\"})\n  or\n  0 * group by (type) (cluster_infrastructure_provider{_id=\"\"})\n)\n* on () group_left (label_node_openshift_io_os_id)\ntopk(1,\n  group by (label_node_openshift_io_os_id) (kube_node_labels{_id=\"\",label_node_openshift_io_os_id=\"rhel\"})\n  or\n  0 * group by (label_node_openshift_io_os_id) (kube_node_labels{_id=\"\"})\n)\n"}}]},{"url":"https://issues.redhat.com/browse/API-1813","name":"FlowControlV1Beta3Migration","message":"Clusters installed in 4.8 or earlier can wedge updating into 4.16 unless they have had flowcontrol.apiserver.k8s.io storage version migrations.","matchingRules":[{"type":"PromQL","promql":{"promql":"label_replace(group by (_id, version) (cluster_version{_id=\"\",type=\"initial\",version=~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"yes, so possibly actually born in 4.8 or earlier\", \"\", \"\")\nor on (_id)\nlabel_replace(0 * group by (_id, version) (cluster_version{_id=\"\",type=\"initial\",version!~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"no, born in 4.10 or later\", \"\", \"\")\n"}}]},{"url":"https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html","name":"PreRelease","message":"This is a prerelease version, and you should update to 4.16.0 or later releases, even if that means updating to a newer 4.15 first.","matchingRules":[{"type":"Always"}]}]},{"edges":[{"from":"4.16.0-ec.4","to":"4.16.0-ec.6"},{"from":"4.16.0-ec.2","to":"4.16.0-rc.0"},{"from":"4.16.0-rc.0","to":"4.16.0-rc.1"},{"from":"4.16.0-ec.2","to":"4.16.0-rc.2"},{"from":"4.16.0-ec.5","to":"4.16.0-rc.0"},{"from":"4.16.0-ec.4","to":"4.16.0-rc.0"},{"from":"4.16.0-rc.1","to":"4.16.0-rc.2"},{"from":"4.16.0-ec.1","to":"4.16.0-rc.1"},{"from":"4.16.0-ec.1","to":"4.16.0-rc.0"},{"from":"4.16.0-ec.6","to":"4.16.0-rc.1"},{"from":"4.16.0-ec.3","to":"4.16.0-ec.6"},{"from":"4.16.0-ec.5","to":"4.16.0-rc.2"},{"from":"4.16.0-ec.2","to":"4.16.0-ec.6"},{"from":"4.16.0-ec.4","to":"4.16.0-rc.2"},{"from":"4.16.0-ec.5","to":"4.16.0-ec.6"},{"from":"4.16.0-ec.3","to":"4.16.0-rc.2"},{"from":"4.16.0-ec.1","to":"4.16.0-rc.2"},{"from":"4.16.0-ec.1","to":"4.16.0-ec.6"},{"from":"4.16.0-ec.6","to":"4.16.0-rc.2"},{"from":"4.16.0-ec.6","to":"4.16.0-rc.0"},{"from":"4.16.0-ec.5","to":"4.16.0-rc.1"},{"from":"4.16.0-ec.2","to":"4.16.0-rc.1"},{"from":"4.16.0-ec.3","to":"4.16.0-rc.1"},{"from":"4.16.0-ec.3","to":"4.16.0-rc.0"},{"from":"4.16.0-ec.4","to":"4.16.0-rc.1"},{"from":"4.16.0-rc.0","to":"4.16.0-rc.2"}],"risks":[{"url":"https://issues.redhat.com/browse/OSASINFRA-3500","name":"OpenStackAvailabilityZoneOutOfRange","message":"OpenStack clusters with more compute availability zones than storage availability zones can lose the ability to provision or deprovision Cinder CSI volumes.","matchingRules":[{"type":"PromQL","promql":{"promql":"group by (_id, type) (cluster_infrastructure_provider{_id=\"\",type=\"OpenStack\"})\nor on (_id)\n0 * group by (_id, type) (cluster_infrastructure_provider{_id=\"\"})\n"}}]},{"url":"https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html","name":"PreRelease","message":"This is a prerelease version, and you should update to 4.16.0 or later releases, even if that means updating to a newer 4.15 first.","matchingRules":[{"type":"Always"}]}]},{"edges":[{"from":"4.15.17","to":"4.16.0-rc.4"}],"risks":[{"url":"https://issues.redhat.com/browse/SDN-5055","name":"OVNMulticastPacketLoss","message":"Multicast communication fails when multicast receiver and clients run on the same node in clusters that use OVN networking. Clusters that do not use multicast communication are not affected.","matchingRules":[{"type":"PromQL","promql":{"promql":"1 * group by (resource) (max_over_time(apiserver_storage_objects{_id=\"\",resource=\"egressips.k8s.ovn.org\"}[1h]))\nor on (_id)\n0 * group(max_over_time(apiserver_storage_objects{_id=\"\"}[1h]))\n"}}]},{"url":"https://issues.redhat.com/browse/OSASINFRA-3500","name":"OpenStackAvailabilityZoneOutOfRange","message":"OpenStack clusters with more compute availability zones than storage availability zones can lose the ability to provision or deprovision Cinder CSI volumes.","matchingRules":[{"type":"PromQL","promql":{"promql":"group by (_id, type) (cluster_infrastructure_provider{_id=\"\",type=\"OpenStack\"})\nor on (_id)\n0 * group by (_id, type) (cluster_infrastructure_provider{_id=\"\"})\n"}}]},{"url":"https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html","name":"PreRelease","message":"This is a prerelease version, and you should update to 4.16.0 or later releases, even if that means updating to a newer 4.15 first.","matchingRules":[{"type":"Always"}]},{"url":"https://issues.redhat.com/browse/OTA-1297","name":"TechPreviewSignatureStoresInDefault","message":"Standalone clusters in the default feature set will fail to verify signatures when asked to update out to later releases.","matchingRules":[{"type":"PromQL","promql":{"promql":"0 * group by (invoker) (cluster_installer{_id=\"\",invoker=\"hypershift\"})\nor on (_id)\ngroup by (name) (cluster_feature_set{_id=\"\",name=\"\"})\nor on (_id)\n0 * group by (name) (cluster_feature_set{_id=\"\"})\n"}}]}]},{"edges":[{"from":"4.15.5","to":"4.16.0-ec.6"},{"from":"4.15.10","to":"4.16.0-ec.6"},{"from":"4.15.7","to":"4.16.0-ec.6"},{"from":"4.15.8","to":"4.16.0-ec.6"},{"from":"4.15.6","to":"4.16.0-ec.6"},{"from":"4.15.9","to":"4.16.0-ec.6"}],"risks":[{"url":"https://issues.redhat.com/browse/OCPCLOUD-2582","name":"CRIAuthPluginRHEL","message":"Azure and GCP clusters with RHEL nodes may fail to start the kubelet until the operating system has been updated.","matchingRules":[{"type":"PromQL","promql":{"promql":"topk(1,\n  group by (type) (cluster_infrastructure_provider{_id=\"\",type=~\"Azure|GCP\"})\n  or\n  0 * group by (type) (cluster_infrastructure_provider{_id=\"\"})\n)\n* on () group_left (label_node_openshift_io_os_id)\ntopk(1,\n  group by (label_node_openshift_io_os_id) (kube_node_labels{_id=\"\",label_node_openshift_io_os_id=\"rhel\"})\n  or\n  0 * group by (label_node_openshift_io_os_id) (kube_node_labels{_id=\"\"})\n)\n"}}]},{"url":"https://issues.redhat.com/browse/API-1813","name":"FlowControlV1Beta3Migration","message":"Clusters installed in 4.8 or earlier can wedge updating into 4.16 unless they have had flowcontrol.apiserver.k8s.io storage version migrations.","matchingRules":[{"type":"PromQL","promql":{"promql":"label_replace(group by (_id, version) (cluster_version{_id=\"\",type=\"initial\",version=~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"yes, so possibly actually born in 4.8 or earlier\", \"\", \"\")\nor on (_id)\nlabel_replace(0 * group by (_id, version) (cluster_version{_id=\"\",type=\"initial\",version!~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"no, born in 4.10 or later\", \"\", \"\")\n"}}]},{"url":"https://issues.redhat.com/browse/OSASINFRA-3500","name":"OpenStackAvailabilityZoneOutOfRange","message":"OpenStack clusters with more compute availability zones than storage availability zones can lose the ability to provision or deprovision Cinder CSI volumes.","matchingRules":[{"type":"PromQL","promql":{"promql":"group by (_id, type) (cluster_infrastructure_provider{_id=\"\",type=\"OpenStack\"})\nor on (_id)\n0 * group by (_id, type) (cluster_infrastructure_provider{_id=\"\"})\n"}}]},{"url":"https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html","name":"PreRelease","message":"This is a prerelease version, and you should update to 4.16.0 or later releases, even if that means updating to a newer 4.15 first.","matchingRules":[{"type":"Always"}]}]},{"edges":[{"from":"4.15.6","to":"4.16.0-rc.0"},{"from":"4.15.9","to":"4.16.0-rc.0"},{"from":"4.15.10","to":"4.16.0-rc.0"},{"from":"4.15.7","to":"4.16.0-rc.0"},{"from":"4.15.5","to":"4.16.0-rc.0"},{"from":"4.15.8","to":"4.16.0-rc.0"}],"risks":[{"url":"https://issues.redhat.com/browse/OCPCLOUD-2582","name":"CRIAuthPluginRHEL","message":"Azure and GCP clusters with RHEL nodes may fail to start the kubelet until the operating system has been updated.","matchingRules":[{"type":"PromQL","promql":{"promql":"topk(1,\n  group by (type) (cluster_infrastructure_provider{_id=\"\",type=~\"Azure|GCP\"})\n  or\n  0 * group by (type) (cluster_infrastructure_provider{_id=\"\"})\n)\n* on () group_left (label_node_openshift_io_os_id)\ntopk(1,\n  group by (label_node_openshift_io_os_id) (kube_node_labels{_id=\"\",label_node_openshift_io_os_id=\"rhel\"})\n  or\n  0 * group by (label_node_openshift_io_os_id) (kube_node_labels{_id=\"\"})\n)\n"}}]},{"url":"https://issues.redhat.com/browse/API-1813","name":"FlowControlV1Beta3Migration","message":"Clusters installed in 4.8 or earlier can wedge updating into 4.16 unless they have had flowcontrol.apiserver.k8s.io storage version migrations.","matchingRules":[{"type":"PromQL","promql":{"promql":"label_replace(group by (_id, version) (cluster_version{_id=\"\",type=\"initial\",version=~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"yes, so possibly actually born in 4.8 or earlier\", \"\", \"\")\nor on (_id)\nlabel_replace(0 * group by (_id, version) (cluster_version{_id=\"\",type=\"initial\",version!~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"no, born in 4.10 or later\", \"\", \"\")\n"}}]},{"url":"https://issues.redhat.com/browse/SDN-5055","name":"OVNMulticastPacketLoss","message":"Multicast communication fails when multicast receiver and clients run on the same node in clusters that use OVN networking. Clusters that do not use multicast communication are not affected.","matchingRules":[{"type":"PromQL","promql":{"promql":"1 * group by (resource) (max_over_time(apiserver_storage_objects{_id=\"\",resource=\"egressips.k8s.ovn.org\"}[1h]))\nor on (_id)\n0 * group(max_over_time(apiserver_storage_objects{_id=\"\"}[1h]))\n"}}]},{"url":"https://issues.redhat.com/browse/OSASINFRA-3500","name":"OpenStackAvailabilityZoneOutOfRange","message":"OpenStack clusters with more compute availability zones than storage availability zones can lose the ability to provision or deprovision Cinder CSI volumes.","matchingRules":[{"type":"PromQL","promql":{"promql":"group by (_id, type) (cluster_infrastructure_provider{_id=\"\",type=\"OpenStack\"})\nor on (_id)\n0 * group by (_id, type) (cluster_infrastructure_provider{_id=\"\"})\n"}}]},{"url":"https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html","name":"PreRelease","message":"This is a prerelease version, and you should update to 4.16.0 or later releases, even if that means updating to a newer 4.15 first.","matchingRules":[{"type":"Always"}]}]},{"edges":[{"from":"4.16.0-ec.2","to":"4.16.0-ec.4"},{"from":"4.16.0-ec.1","to":"4.16.0-ec.4"},{"from":"4.16.0-ec.0","to":"4.16.0-ec.4"},{"from":"4.16.0-ec.3","to":"4.16.0-ec.4"}],"risks":[{"url":"https://issues.redhat.com/browse/MCO-1091","name":"CSRNotApprovedBadCerts","message":"Clusters born in 4.13 and earlier may not have CSRs automatically approved because of missing groups in installer client certificates.","matchingRules":[{"type":"PromQL","promql":{"promql":"topk(1,\n  label_replace(group by (version) (cluster_version{_id=\"\",type=\"initial\",version=~\"4[.]([0-9]|1[0-3])[.].*\"}),\"born_by_4_13\", \"yes, so possibly actually born in 4.13 or earlier\", \"\", \"\")\n  or\n  label_replace(0 * group by (version) (cluster_version{_id=\"\",type=\"initial\",version!~\"4[.]([0-9]|1[0-3])[.].*\"}),\"born_by_4_13\", \"no, born in 4.13 or later\", \"\", \"\")\n)\n"}}]},{"url":"https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html","name":"PreRelease","message":"This is a prerelease version, and you should update to 4.16.0 or later releases, even if that means updating to a newer 4.15 first.","matchingRules":[{"type":"Always"}]}]}]}
\ No newline at end of file
+{"version":1,"nodes":[{"version":"4.16.0-rc.1","payload":"quay.io/openshift-release-dev/ocp-release@sha256:21e2c79f5e7f61e0eb7ab83dd3475eeff063af571218ca93acb781ddcf6a6e31","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]15[.].*|4[.]15[.].*|.*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:21e2c79f5e7f61e0eb7ab83dd3475eeff063af571218ca93acb781ddcf6a6e31","url":"https://access.redhat.com/errata/RHEA-2024:0041"}},{"version":"4.15.0-ec.3","payload":"quay.io/openshift-release-dev/ocp-release@sha256:a70f1994591681f58dfbdc3ea6c6699e9061b45547d7bff8baf21105d1b2e9fc","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":".*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,candidate-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:a70f1994591681f58dfbdc3ea6c6699e9061b45547d7bff8baf21105d1b2e9fc"}},{"version":"4.15.6","payload":"quay.io/openshift-release-dev/ocp-release@sha256:2cd97b739de42a8fcba965f6e4e5cf868b8d057a1c5717731c20e15d28726572","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.](14|15)|4[.]14[.]([0-9]|1[0-4])[+].*|4[.]14[.](1[0-3]|[0-9])[+].*|4[.]14[.].*|4[.]14[.]*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:2cd97b739de42a8fcba965f6e4e5cf868b8d057a1c5717731c20e15d28726572","url":"https://access.redhat.com/errata/RHSA-2024:1559"}},{"version":"4.15.2","payload":"quay.io/openshift-release-dev/ocp-release@sha256:8e5ebf5d648eeab2d440036ce0f94ab73743aed85f9f5a4725a6aefad8f842e9","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.](14|15)|4[.]14[.]([0-9]|1[0-4])[+].*|4[.]14[.](1[0-3]|[0-9])[+].*|4[.]14[.].*|4[.]14[.]*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:8e5ebf5d648eeab2d440036ce0f94ab73743aed85f9f5a4725a6aefad8f842e9","url":"https://access.redhat.com/errata/RHSA-2024:1210"}},{"version":"4.16.0-rc.2","payload":"quay.io/openshift-release-dev/ocp-release@sha256:d93db95ec59b2f51ff45fdecd54b4dd9144521e3d099fef151c189598200cf24","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]15[.].*|4[.]15[.].*|.*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:d93db95ec59b2f51ff45fdecd54b4dd9144521e3d099fef151c189598200cf24","url":"https://access.redhat.com/errata/RHEA-2024:0041"}},{"version":"4.15.0-rc.8","payload":"quay.io/openshift-release-dev/ocp-release@sha256:27323555f9b049b42a52b6a670e85d0e5facef9814c524ee29f27b75c3c4a3ed","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.].*|4[.](14|15[.]0-ec)[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,candidate-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:27323555f9b049b42a52b6a670e85d0e5facef9814c524ee29f27b75c3c4a3ed","url":"https://access.redhat.com/errata/RHSA-2023:7198"}},{"version":"4.16.0-ec.4","payload":"quay.io/openshift-release-dev/ocp-release@sha256:1d715a60966e3c3215c046ac2c70efbe81dcb288d0b0223597cdae35c0c89d61","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"^4[.]15[.]([0-9]|10)[+].*$|.*|4[.]15[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:1d715a60966e3c3215c046ac2c70efbe81dcb288d0b0223597cdae35c0c89d61"}},{"version":"4.15.0","payload":"quay.io/openshift-release-dev/ocp-release@sha256:0da6316466d60a3a4535d5fed3589feb0391989982fba59d47d4c729912d6363","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.](14|15)|4[.]14[.]([0-9]|1[0-4])[+].*|4[.]14[.](1[0-3]|[0-9])[+].*|4[.]14[.].*|4[.]14[.]*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:0da6316466d60a3a4535d5fed3589feb0391989982fba59d47d4c729912d6363","url":"https://access.redhat.com/errata/RHSA-2023:7198"}},{"version":"4.15.15","payload":"quay.io/openshift-release-dev/ocp-release@sha256:bb1182cd9001d6811dea8c5823235c17b9a316cce3bb13c51325250c14b46787","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":".*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:bb1182cd9001d6811dea8c5823235c17b9a316cce3bb13c51325250c14b46787","url":"https://access.redhat.com/errata/RHSA-2024:3327"}},{"version":"4.15.0-rc.0","payload":"quay.io/openshift-release-dev/ocp-release@sha256:a3b96bf3aef71d4062cae3961fcba3bb3019b52ab2da60b2997d4842f9cdcf07","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.].*|4[.]14[.][3-8]|4[.](14|15[.]0-ec)[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,candidate-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:a3b96bf3aef71d4062cae3961fcba3bb3019b52ab2da60b2997d4842f9cdcf07","url":"https://access.redhat.com/errata/RHSA-2023:7198"}},{"version":"4.16.0-rc.3","payload":"quay.io/openshift-release-dev/ocp-release@sha256:31cdf34b1957996d5c79c48466abab2fcfb9d984369d2e14723e4edfe3e727ce","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]15[.].*|4[.]15[.].*|.*|.*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:31cdf34b1957996d5c79c48466abab2fcfb9d984369d2e14723e4edfe3e727ce","url":"https://access.redhat.com/errata/RHEA-2024:0041"}},{"version":"4.15.3","payload":"quay.io/openshift-release-dev/ocp-release@sha256:8e8c6c2645553e6df8eb7985d8cb322f333a4152453e2aa85fff24ac5e0755b0","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.](14|15)|4[.]14[.]([0-9]|1[0-4])[+].*|4[.]14[.](1[0-3]|[0-9])[+].*|4[.]14[.].*|4[.]14[.]*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:8e8c6c2645553e6df8eb7985d8cb322f333a4152453e2aa85fff24ac5e0755b0","url":"https://access.redhat.com/errata/RHSA-2024:1255"}},{"version":"4.16.2","payload":"quay.io/openshift-release-dev/ocp-release@sha256:198ae5a1e59183511fbdcfeaf4d5c83a16716ed7734ac6cbeea4c47a32bffad6","metadata":{"io.openshift.upgrades.graph.release.channels":"candidate-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:198ae5a1e59183511fbdcfeaf4d5c83a16716ed7734ac6cbeea4c47a32bffad6","url":"https://access.redhat.com/errata/RHSA-2024:4316"}},{"version":"4.15.9","payload":"quay.io/openshift-release-dev/ocp-release@sha256:4c57e9589ac8d96ad74fd8c9fce35c5e507a20a88a6871d8a731c3b295abc79a","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.](1[0-3]|[0-9])[+].*|4[.]14[.].*|4[.]14[.]*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:4c57e9589ac8d96ad74fd8c9fce35c5e507a20a88a6871d8a731c3b295abc79a","url":"https://access.redhat.com/errata/RHSA-2024:1770"}},{"version":"4.16.0-rc.4","payload":"quay.io/openshift-release-dev/ocp-release@sha256:6c236c400d3bad9b2b54d8a3b247c508f6f13511d37666de1eecca8e43bce0f6","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]15[.].*|.*|.*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:6c236c400d3bad9b2b54d8a3b247c508f6f13511d37666de1eecca8e43bce0f6","url":"https://access.redhat.com/errata/RHEA-2024:0041"}},{"version":"4.16.0-ec.5","payload":"quay.io/openshift-release-dev/ocp-release@sha256:f5c9cf5a461434e775af2b946fc2a8aee7240f5b05d4141a588e527adcad7af9","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"^4[.]15[.]([0-9]|10)[+].*$|4[.]15[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:f5c9cf5a461434e775af2b946fc2a8aee7240f5b05d4141a588e527adcad7af9"}},{"version":"4.15.10","payload":"quay.io/openshift-release-dev/ocp-release@sha256:7111fb4cec202cb758f58d9bed95a67e7fdc417353ef15be56d7bf96356909d4","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.](1[0-3]|[0-9])[+].*|4[.]14[.]*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:7111fb4cec202cb758f58d9bed95a67e7fdc417353ef15be56d7bf96356909d4","url":"https://access.redhat.com/errata/RHSA-2024:1887"}},{"version":"4.15.0-rc.1","payload":"quay.io/openshift-release-dev/ocp-release@sha256:c7c3d2b39681c37817fb99c6f05140ee92a52920b7909d6e973d0025e6b60568","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.].*|4[.]14[.][3-8]|4[.](14|15[.]0-ec)[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,candidate-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:c7c3d2b39681c37817fb99c6f05140ee92a52920b7909d6e973d0025e6b60568","url":"https://access.redhat.com/errata/RHSA-2023:7198"}},{"version":"4.15.16","payload":"quay.io/openshift-release-dev/ocp-release@sha256:4bdebcbc36c2b4c383b70cf5e23b168f8bf445eba42fc8f331643608a60398e8","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":".*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:4bdebcbc36c2b4c383b70cf5e23b168f8bf445eba42fc8f331643608a60398e8","url":"https://access.redhat.com/errata/RHBA-2024:3488"}},{"version":"4.16.0-rc.5","payload":"quay.io/openshift-release-dev/ocp-release@sha256:19f29913bacdebaad17dea58a617141c3f6c3a072d0e00a35473943993c78d2d","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]15[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:19f29913bacdebaad17dea58a617141c3f6c3a072d0e00a35473943993c78d2d","url":"https://access.redhat.com/errata/RHEA-2024:0041"}},{"version":"4.16.0-ec.2","payload":"quay.io/openshift-release-dev/ocp-release@sha256:f8792bafedcdfb4a706a19b2f69d0acef5af6db57bc79d2cc13d75ff82630e1b","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"^4[.]15[.]([0-9]|10)[+].*$|4[.]15[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:f8792bafedcdfb4a706a19b2f69d0acef5af6db57bc79d2cc13d75ff82630e1b"}},{"version":"4.15.20","payload":"quay.io/openshift-release-dev/ocp-release@sha256:478d9f5a1b496ebd69ecd0d7a7fc961f6318290ac9242ff65e1e2bdb88ff3097","metadata":{"io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:478d9f5a1b496ebd69ecd0d7a7fc961f6318290ac9242ff65e1e2bdb88ff3097","url":"https://access.redhat.com/errata/RHSA-2024:4151"}},{"version":"4.15.11","payload":"quay.io/openshift-release-dev/ocp-release@sha256:54bf0a80b3bbace603d824ae5dac687e3bd7591ed4f629ce70adb8a01654585c","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.](1[0-3]|[0-9])[+].*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:54bf0a80b3bbace603d824ae5dac687e3bd7591ed4f629ce70adb8a01654585c","url":"https://access.redhat.com/errata/RHSA-2024:2068"}},{"version":"4.16.0","payload":"quay.io/openshift-release-dev/ocp-release@sha256:3717338045df06e31effea46761b2c7e90f543cc4f00547af8158dd6aea868c3","metadata":{"io.openshift.upgrades.graph.release.channels":"candidate-4.16,eus-4.16,fast-4.16,stable-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:3717338045df06e31effea46761b2c7e90f543cc4f00547af8158dd6aea868c3","url":"https://access.redhat.com/errata/RHSA-2024:0041"}},{"version":"4.16.0-rc.6","payload":"quay.io/openshift-release-dev/ocp-release@sha256:f3bafdd925d51899e6715edc47869c94990954b4d330804c4114a7992af54d1d","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]15[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:f3bafdd925d51899e6715edc47869c94990954b4d330804c4114a7992af54d1d","url":"https://access.redhat.com/errata/RHSA-2024:0041"}},{"version":"4.15.0-rc.2","payload":"quay.io/openshift-release-dev/ocp-release@sha256:baed442e1faf17a500b0f0952ecbcfad66e03074c33fb4f08fa95f49bd8fc4ff","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.].*|4[.]14[.][3-8]|4[.](14|15[.]0-ec)[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,candidate-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:baed442e1faf17a500b0f0952ecbcfad66e03074c33fb4f08fa95f49bd8fc4ff","url":"https://access.redhat.com/errata/RHSA-2023:7198"}},{"version":"4.15.17","payload":"quay.io/openshift-release-dev/ocp-release@sha256:c7e0adf82092568ff2f4b42d2183486efe311066d6f5ae983f23c1b19f890c3d","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":".*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:c7e0adf82092568ff2f4b42d2183486efe311066d6f5ae983f23c1b19f890c3d","url":"https://access.redhat.com/errata/RHBA-2024:3673"}},{"version":"4.15.7","payload":"quay.io/openshift-release-dev/ocp-release@sha256:7185f5f8846090b18e18a6b2deb59b04098d7bc388d0d388ae2b9147254aaf2f","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.]([0-9]|1[0-4])[+].*|4[.]14[.](1[0-3]|[0-9])[+].*|4[.]14[.].*|4[.]14[.]*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,candidate-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:7185f5f8846090b18e18a6b2deb59b04098d7bc388d0d388ae2b9147254aaf2f","url":"https://access.redhat.com/errata/RHSA-2024:1668"}},{"version":"4.16.0-rc.9","payload":"quay.io/openshift-release-dev/ocp-release@sha256:fbe0dc514996a2742dcbb616e39cca33594c1cce55357abb78e80dde29fecccc","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":".*","io.openshift.upgrades.graph.release.channels":"candidate-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:fbe0dc514996a2742dcbb616e39cca33594c1cce55357abb78e80dde29fecccc","url":"https://access.redhat.com/errata/RHSA-2024:0041"}},{"version":"4.16.1","payload":"quay.io/openshift-release-dev/ocp-release@sha256:c17d4489c1b283ee71c76dda559e66a546e16b208a57eb156ef38fb30098903a","metadata":{"io.openshift.upgrades.graph.release.channels":"candidate-4.16,fast-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:c17d4489c1b283ee71c76dda559e66a546e16b208a57eb156ef38fb30098903a","url":"https://access.redhat.com/errata/RHSA-2024:4156"}},{"version":"4.15.0-rc.3","payload":"quay.io/openshift-release-dev/ocp-release@sha256:8d75c2f67cc8beebcc3e7155297614f238987708fae4cf1393d116765b72e05f","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.].*|4[.](14|15[.]0-ec)[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,candidate-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:8d75c2f67cc8beebcc3e7155297614f238987708fae4cf1393d116765b72e05f","url":"https://access.redhat.com/errata/RHSA-2023:7198"}},{"version":"4.15.21","payload":"quay.io/openshift-release-dev/ocp-release@sha256:743d8d1bc98345a3f6b21f0af9c5ec252bbc6950d273afae5d9279a7714239b0","metadata":{"io.openshift.upgrades.graph.release.channels":"candidate-4.15,candidate-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:743d8d1bc98345a3f6b21f0af9c5ec252bbc6950d273afae5d9279a7714239b0","url":"https://access.redhat.com/errata/RHSA-2024:4321"}},{"version":"4.15.12","payload":"quay.io/openshift-release-dev/ocp-release@sha256:86575d1def95bc8944081b3201f1a7d9f408a5c966faf42f236c1dc83b6cc562","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.](1[0-3]|[0-9])[+].*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:86575d1def95bc8944081b3201f1a7d9f408a5c966faf42f236c1dc83b6cc562","url":"https://access.redhat.com/errata/RHSA-2024:2664"}},{"version":"4.16.0-rc.0","payload":"quay.io/openshift-release-dev/ocp-release@sha256:c56b01191de4cbb4b97c6eeaf61c5c122fcd465d1d0d671db640d877638ed790","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"^4[.]15[.]([0-9]|10)[+].*$|4[.]15[.].*|4[.]15[.].*|.*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:c56b01191de4cbb4b97c6eeaf61c5c122fcd465d1d0d671db640d877638ed790","url":"https://access.redhat.com/errata/RHEA-2024:0041"}},{"version":"4.15.13","payload":"quay.io/openshift-release-dev/ocp-release@sha256:e7e6e89eeaf682eb2f9987a900386e950e433fe909eff779c27216919c8d5f2e","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:e7e6e89eeaf682eb2f9987a900386e950e433fe909eff779c27216919c8d5f2e","url":"https://access.redhat.com/errata/RHSA-2024:2773"}},{"version":"4.15.0-rc.4","payload":"quay.io/openshift-release-dev/ocp-release@sha256:e2447e71a94edd82169951ce5f6d090bc5873956ff5f967737f5ed5b83e0156f","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.].*|4[.](14|15[.]0-ec)[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,candidate-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:e2447e71a94edd82169951ce5f6d090bc5873956ff5f967737f5ed5b83e0156f","url":"https://access.redhat.com/errata/RHSA-2023:7198"}},{"version":"4.16.0-ec.1","payload":"quay.io/openshift-release-dev/ocp-release@sha256:0ed362d46466541178ad24c849e9aeacb0c622b5a2cab85cba820330e01a29a1","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"^4[.]15[.]([0-9]|10)[+].*$|4[.]15[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:0ed362d46466541178ad24c849e9aeacb0c622b5a2cab85cba820330e01a29a1"}},{"version":"4.15.8","payload":"quay.io/openshift-release-dev/ocp-release@sha256:8032c4248d7ae032d5e79debf975d08683cc34d5f08ab2e937ce2d1e940c007b","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.](14|15)|4[.]14[.]([0-9]|1[0-4])[+].*|4[.]14[.](1[0-3]|[0-9])[+].*|4[.]14[.].*|4[.]14[.]*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:8032c4248d7ae032d5e79debf975d08683cc34d5f08ab2e937ce2d1e940c007b","url":"https://access.redhat.com/errata/RHSA-2024:1668"}},{"version":"4.15.0-ec.0","payload":"quay.io/openshift-release-dev/ocp-release@sha256:217c3265267f7695bba068d328ab513c5f6c607d936abb884e84e9b615bb8841","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":".*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,candidate-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:217c3265267f7695bba068d328ab513c5f6c607d936abb884e84e9b615bb8841"}},{"version":"4.15.18","payload":"quay.io/openshift-release-dev/ocp-release@sha256:0f55261077557d1bb909c06b115e0c79b0025677be57ba2f045495c11e2443ee","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":".*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:0f55261077557d1bb909c06b115e0c79b0025677be57ba2f045495c11e2443ee","url":"https://access.redhat.com/errata/RHSA-2024:3889"}},{"version":"4.15.0-ec.1","payload":"quay.io/openshift-release-dev/ocp-release@sha256:914677337308f1cd27e02514dde7e09f22b4af1b7bf9be7938a3e8e6340c5124","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":".*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,candidate-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:914677337308f1cd27e02514dde7e09f22b4af1b7bf9be7938a3e8e6340c5124"}},{"version":"4.16.0-ec.6","payload":"quay.io/openshift-release-dev/ocp-release@sha256:d9729e9efb83d1181482035a64bc2fc598623cbd62142c027043c9149314e23d","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"^4[.]15[.]([0-9]|10)[+].*$|4[.]15[.].*|.*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:d9729e9efb83d1181482035a64bc2fc598623cbd62142c027043c9149314e23d"}},{"version":"4.15.19","payload":"quay.io/openshift-release-dev/ocp-release@sha256:72dbe160063b42a23ba1b97eca3e22d75d0c757947890afaf4b27720c605e648","metadata":{"io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:72dbe160063b42a23ba1b97eca3e22d75d0c757947890afaf4b27720c605e648","url":"https://access.redhat.com/errata/RHSA-2024:4041"}},{"version":"4.15.14","payload":"quay.io/openshift-release-dev/ocp-release@sha256:234ccdfa4adabcfa7490785bad7108a3c7d622f19cd5b8f4b241dfba96c09be0","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:234ccdfa4adabcfa7490785bad7108a3c7d622f19cd5b8f4b241dfba96c09be0","url":"https://access.redhat.com/errata/RHSA-2024:2865"}},{"version":"4.15.0-rc.5","payload":"quay.io/openshift-release-dev/ocp-release@sha256:87e82b1b7e865ffa1cf64bb17cfb514943cfdf54bbdc37144bf0984c915dd4da","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.].*|4[.](14|15[.]0-ec)[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,candidate-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:87e82b1b7e865ffa1cf64bb17cfb514943cfdf54bbdc37144bf0984c915dd4da","url":"https://access.redhat.com/errata/RHSA-2023:7198"}},{"version":"4.15.0-ec.2","payload":"quay.io/openshift-release-dev/ocp-release@sha256:7dbe1d710f739ae2c73187330788f5c36cbe8b315d816510ded767fb162ffd0c","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":".*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,candidate-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:7dbe1d710f739ae2c73187330788f5c36cbe8b315d816510ded767fb162ffd0c"}},{"version":"4.16.0-ec.0","payload":"quay.io/openshift-release-dev/ocp-release@sha256:6bc8bf6309779c3fae09c2ad61d52948235da0960ded92951615603f235740e8","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"^4[.]15[.]([0-9]|10)[+].*$|4[.]15[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:6bc8bf6309779c3fae09c2ad61d52948235da0960ded92951615603f235740e8"}},{"version":"4.15.5","payload":"quay.io/openshift-release-dev/ocp-release@sha256:b17bc935bfb0fb250e738733af5d3d4ea1f27065de8e2622890782780b36320c","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.](14|15)|4[.]14[.]([0-9]|1[0-4])[+].*|4[.]14[.](1[0-3]|[0-9])[+].*|4[.]14[.].*|4[.]14[.]*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,fast-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:b17bc935bfb0fb250e738733af5d3d4ea1f27065de8e2622890782780b36320c","url":"https://access.redhat.com/errata/RHSA-2024:1449"}},{"version":"4.16.0-ec.3","payload":"quay.io/openshift-release-dev/ocp-release@sha256:6de9a3052bd88299a4179a97d53817205e8465345e990879c2237787490b45c3","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"^4[.]15[.]([0-9]|10)[+].*$|4[.]15[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.16,candidate-4.17","io.openshift.upgrades.graph.release.manifestref":"sha256:6de9a3052bd88299a4179a97d53817205e8465345e990879c2237787490b45c3"}},{"version":"4.15.0-rc.7","payload":"quay.io/openshift-release-dev/ocp-release@sha256:91edccfcd03f3b5f80bb5dbf5dad66b6d495282655fcc85f8991be62e86fc7aa","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.].*|4[.](14|15[.]0-ec)[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,candidate-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:91edccfcd03f3b5f80bb5dbf5dad66b6d495282655fcc85f8991be62e86fc7aa","url":"https://access.redhat.com/errata/RHSA-2023:7198"}}],"edges":[[39,29],[37,13],[9,7],[8,21],[39,31],[44,7],[15,29],[2,21],[11,21],[11,2],[19,29],[43,21],[31,12],[33,29],[34,31],[29,12],[27,13],[40,7],[7,21],[13,32],[13,34],[16,43],[2,34],[48,29],[37,43],[22,32],[24,23],[11,34],[30,7],[2,37],[39,23],[2,42],[36,23],[2,22],[34,42],[27,21],[32,31],[47,16],[11,31],[7,43],[20,23],[47,31],[2,27],[7,47],[11,32],[13,16],[16,21],[13,42],[11,27],[43,31],[5,7],[22,43],[34,21],[18,21],[0,29],[26,31],[3,22],[27,32],[3,43],[24,29],[6,29],[22,21],[17,7],[37,32],[18,42],[16,32],[2,13],[13,22],[7,22],[23,12],[3,31],[3,21],[15,23],[16,42],[47,22],[27,31],[7,37],[21,29],[27,22],[37,34],[28,29],[8,31],[3,13],[27,16],[3,42],[11,13],[18,31],[19,23],[2,43],[22,31],[11,16],[7,34],[7,2],[13,21],[47,32],[47,27],[35,7],[10,29],[26,42],[11,42],[32,43],[3,11],[11,47],[4,23],[48,23],[16,22],[13,43],[7,42],[8,42],[3,34],[45,7],[1,7],[3,2],[22,42],[32,34],[20,29],[47,43],[25,7],[23,29],[3,27],[34,43],[36,29],[7,11],[39,42],[26,21],[42,29],[7,16],[7,32],[47,21],[22,34],[14,29],[27,34],[33,23],[43,42],[0,23],[7,13],[13,31],[3,37],[16,31],[7,27],[37,16],[27,43],[16,34],[6,23],[2,16],[7,3],[47,2],[21,12],[39,21],[41,23],[47,42],[27,42],[28,23],[37,21],[3,32],[47,34],[38,7],[7,31],[42,21],[10,23],[2,31],[47,37],[11,22],[14,23],[3,47],[4,29],[49,7],[47,13],[11,37],[11,43],[3,16],[37,31],[42,31],[41,29],[39,12],[37,42],[21,31],[42,12],[37,22],[32,42],[32,21],[2,32]],"conditionalEdges":[{"edges":[{"from":"4.15.11","to":"4.16.0-rc.3"},{"from":"4.15.12","to":"4.16.0-rc.3"},{"from":"4.15.14","to":"4.16.0-rc.3"},{"from":"4.15.16","to":"4.16.0-rc.3"},{"from":"4.15.13","to":"4.16.0-rc.3"},{"from":"4.15.15","to":"4.16.0-rc.3"}],"risks":[{"url":"https://issues.redhat.com/browse/API-1813","name":"FlowControlV1Beta3Migration","message":"Clusters installed in 4.8 or earlier can wedge updating into 4.16 unless they have had flowcontrol.apiserver.k8s.io storage version migrations.","matchingRules":[{"type":"PromQL","promql":{"promql":"label_replace(group by (_id, version) (cluster_version{_id=\"\",type=\"initial\",version=~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"yes, so possibly actually born in 4.8 or earlier\", \"\", \"\")\nor on (_id)\nlabel_replace(0 * group by (_id, version) (cluster_version{_id=\"\",type=\"initial\",version!~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"no, born in 4.10 or later\", \"\", \"\")\n"}}]},{"url":"https://issues.redhat.com/browse/SDN-5055","name":"OVNMulticastPacketLoss","message":"Multicast communication fails when multicast receiver and clients run on the same node in clusters that use OVN networking. Clusters that do not use multicast communication are not affected.","matchingRules":[{"type":"PromQL","promql":{"promql":"1 * group by (resource) (max_over_time(apiserver_storage_objects{_id=\"\",resource=\"egressips.k8s.ovn.org\"}[1h]))\nor on (_id)\n0 * group(max_over_time(apiserver_storage_objects{_id=\"\"}[1h]))\n"}}]},{"url":"https://issues.redhat.com/browse/OSASINFRA-3500","name":"OpenStackAvailabilityZoneOutOfRange","message":"OpenStack clusters with more compute availability zones than storage availability zones can lose the ability to provision or deprovision Cinder CSI volumes.","matchingRules":[{"type":"PromQL","promql":{"promql":"group by (_id, type) (cluster_infrastructure_provider{_id=\"\",type=\"OpenStack\"})\nor on (_id)\n0 * group by (_id, type) (cluster_infrastructure_provider{_id=\"\"})\n"}}]},{"url":"https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html","name":"PreRelease","message":"This is a prerelease version, and you should update to 4.16.0 or later releases, even if that means updating to a newer 4.15 first.","matchingRules":[{"type":"Always"}]},{"url":"https://issues.redhat.com/browse/OTA-1297","name":"TechPreviewSignatureStoresInDefault","message":"Standalone clusters in the default feature set will fail to verify signatures when asked to update out to later releases.","matchingRules":[{"type":"PromQL","promql":{"promql":"0 * group by (invoker) (cluster_installer{_id=\"\",invoker=\"hypershift\"})\nor on (_id)\ngroup by (name) (cluster_feature_set{_id=\"\",name=\"\"})\nor on (_id)\n0 * group by (name) (cluster_feature_set{_id=\"\"})\n"}}]}]},{"edges":[{"from":"4.16.0-ec.4","to":"4.16.0-rc.4"},{"from":"4.16.0-ec.2","to":"4.16.0-rc.4"},{"from":"4.16.0-rc.3","to":"4.16.0-rc.4"},{"from":"4.16.0-rc.0","to":"4.16.0-rc.4"},{"from":"4.16.0-ec.1","to":"4.16.0-rc.4"},{"from":"4.16.0-ec.3","to":"4.16.0-rc.4"},{"from":"4.16.0-ec.5","to":"4.16.0-rc.4"},{"from":"4.16.0-rc.1","to":"4.16.0-rc.3"},{"from":"4.16.0-ec.6","to":"4.16.0-rc.3"},{"from":"4.16.0-ec.2","to":"4.16.0-rc.3"},{"from":"4.16.0-ec.5","to":"4.16.0-rc.3"},{"from":"4.16.0-ec.6","to":"4.16.0-rc.4"},{"from":"4.16.0-ec.1","to":"4.16.0-rc.3"},{"from":"4.16.0-ec.4","to":"4.16.0-rc.3"},{"from":"4.16.0-rc.1","to":"4.16.0-rc.4"},{"from":"4.16.0-rc.2","to":"4.16.0-rc.3"},{"from":"4.16.0-ec.3","to":"4.16.0-rc.3"},{"from":"4.16.0-rc.0","to":"4.16.0-rc.3"},{"from":"4.16.0-rc.2","to":"4.16.0-rc.4"}],"risks":[{"url":"https://issues.redhat.com/browse/OSASINFRA-3500","name":"OpenStackAvailabilityZoneOutOfRange","message":"OpenStack clusters with more compute availability zones than storage availability zones can lose the ability to provision or deprovision Cinder CSI volumes.","matchingRules":[{"type":"PromQL","promql":{"promql":"group by (_id, type) (cluster_infrastructure_provider{_id=\"\",type=\"OpenStack\"})\nor on (_id)\n0 * group by (_id, type) (cluster_infrastructure_provider{_id=\"\"})\n"}}]},{"url":"https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html","name":"PreRelease","message":"This is a prerelease version, and you should update to 4.16.0 or later releases, even if that means updating to a newer 4.15 first.","matchingRules":[{"type":"Always"}]},{"url":"https://issues.redhat.com/browse/OTA-1297","name":"TechPreviewSignatureStoresInDefault","message":"Standalone clusters in the default feature set will fail to verify signatures when asked to update out to later releases.","matchingRules":[{"type":"PromQL","promql":{"promql":"0 * group by (invoker) (cluster_installer{_id=\"\",invoker=\"hypershift\"})\nor on (_id)\ngroup by (name) (cluster_feature_set{_id=\"\",name=\"\"})\nor on (_id)\n0 * group by (name) (cluster_feature_set{_id=\"\"})\n"}}]}]},{"edges":[{"from":"4.15.5","to":"4.16.0-rc.0"},{"from":"4.15.8","to":"4.16.0-rc.0"},{"from":"4.15.6","to":"4.16.0-rc.0"},{"from":"4.15.7","to":"4.16.0-rc.0"},{"from":"4.15.10","to":"4.16.0-rc.0"},{"from":"4.15.9","to":"4.16.0-rc.0"}],"risks":[{"url":"https://issues.redhat.com/browse/OCPCLOUD-2582","name":"CRIAuthPluginRHEL","message":"Azure and GCP clusters with RHEL nodes may fail to start the kubelet until the operating system has been updated.","matchingRules":[{"type":"PromQL","promql":{"promql":"topk(1,\n  group by (type) (cluster_infrastructure_provider{_id=\"\",type=~\"Azure|GCP\"})\n  or\n  0 * group by (type) (cluster_infrastructure_provider{_id=\"\"})\n)\n* on () group_left (label_node_openshift_io_os_id)\ntopk(1,\n  group by (label_node_openshift_io_os_id) (kube_node_labels{_id=\"\",label_node_openshift_io_os_id=\"rhel\"})\n  or\n  0 * group by (label_node_openshift_io_os_id) (kube_node_labels{_id=\"\"})\n)\n"}}]},{"url":"https://issues.redhat.com/browse/API-1813","name":"FlowControlV1Beta3Migration","message":"Clusters installed in 4.8 or earlier can wedge updating into 4.16 unless they have had flowcontrol.apiserver.k8s.io storage version migrations.","matchingRules":[{"type":"PromQL","promql":{"promql":"label_replace(group by (_id, version) (cluster_version{_id=\"\",type=\"initial\",version=~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"yes, so possibly actually born in 4.8 or earlier\", \"\", \"\")\nor on (_id)\nlabel_replace(0 * group by (_id, version) (cluster_version{_id=\"\",type=\"initial\",version!~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"no, born in 4.10 or later\", \"\", \"\")\n"}}]},{"url":"https://issues.redhat.com/browse/SDN-5055","name":"OVNMulticastPacketLoss","message":"Multicast communication fails when multicast receiver and clients run on the same node in clusters that use OVN networking. Clusters that do not use multicast communication are not affected.","matchingRules":[{"type":"PromQL","promql":{"promql":"1 * group by (resource) (max_over_time(apiserver_storage_objects{_id=\"\",resource=\"egressips.k8s.ovn.org\"}[1h]))\nor on (_id)\n0 * group(max_over_time(apiserver_storage_objects{_id=\"\"}[1h]))\n"}}]},{"url":"https://issues.redhat.com/browse/OSASINFRA-3500","name":"OpenStackAvailabilityZoneOutOfRange","message":"OpenStack clusters with more compute availability zones than storage availability zones can lose the ability to provision or deprovision Cinder CSI volumes.","matchingRules":[{"type":"PromQL","promql":{"promql":"group by (_id, type) (cluster_infrastructure_provider{_id=\"\",type=\"OpenStack\"})\nor on (_id)\n0 * group by (_id, type) (cluster_infrastructure_provider{_id=\"\"})\n"}}]},{"url":"https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html","name":"PreRelease","message":"This is a prerelease version, and you should update to 4.16.0 or later releases, even if that means updating to a newer 4.15 first.","matchingRules":[{"type":"Always"}]}]},{"edges":[{"from":"4.15.0-ec.1","to":"4.15.0-rc.2"},{"from":"4.15.0-ec.2","to":"4.15.0-rc.8"},{"from":"4.15.0-ec.3","to":"4.15.0-rc.5"},{"from":"4.15.0-ec.1","to":"4.15.0-rc.1"},{"from":"4.15.0-ec.3","to":"4.15.0-rc.1"},{"from":"4.15.0-ec.0","to":"4.15.0-rc.7"},{"from":"4.15.0-ec.0","to":"4.15.0-rc.0"},{"from":"4.15.0-ec.1","to":"4.15.0-rc.7"},{"from":"4.15.0-ec.2","to":"4.15.0-rc.5"},{"from":"4.15.0-ec.3","to":"4.15.0-rc.2"},{"from":"4.15.0-ec.0","to":"4.15.0-rc.3"},{"from":"4.15.0-ec.1","to":"4.15.0-rc.8"},{"from":"4.15.0-ec.3","to":"4.15.0-rc.0"},{"from":"4.15.0-ec.2","to":"4.15.0-rc.4"},{"from":"4.15.0-ec.1","to":"4.15.0-rc.4"},{"from":"4.15.0-ec.0","to":"4.15.0-rc.2"},{"from":"4.15.0-ec.2","to":"4.15.0-rc.7"},{"from":"4.15.0-ec.0","to":"4.15.0-rc.1"},{"from":"4.15.0-ec.3","to":"4.15.0-rc.8"},{"from":"4.15.0-ec.0","to":"4.15.0-rc.5"},{"from":"4.15.0-ec.1","to":"4.15.0-rc.3"},{"from":"4.15.0-ec.0","to":"4.15.0-rc.8"},{"from":"4.15.0-ec.3","to":"4.15.0-rc.4"},{"from":"4.15.0-ec.1","to":"4.15.0-rc.0"},{"from":"4.15.0-ec.1","to":"4.15.0-rc.5"},{"from":"4.15.0-ec.2","to":"4.15.0-rc.1"},{"from":"4.15.0-ec.2","to":"4.15.0-rc.3"},{"from":"4.15.0-ec.2","to":"4.15.0-rc.2"},{"from":"4.15.0-ec.2","to":"4.15.0-rc.0"},{"from":"4.15.0-ec.0","to":"4.15.0-rc.4"},{"from":"4.15.0-ec.3","to":"4.15.0-rc.3"},{"from":"4.15.0-ec.3","to":"4.15.0-rc.7"}],"risks":[{"url":"https://issues.redhat.com/browse/CCO-522","name":"GCPMintModeRoleAdmin","message":"GCP clusters in Mint mode may need additional permissions to provision 4.15 CredentialsRequests.","matchingRules":[{"type":"PromQL","promql":{"promql":"(\n  group by (mode) (cco_credentials_mode{mode=\"mint\"})\n  or\n  0 * group by (mode) (cco_credentials_mode)\n)\n* on () group_left (type)\n(\n  group by (type) (cluster_infrastructure_provider{type=\"GCP\"})\n  or\n  0 * group by (type) (cluster_infrastructure_provider)\n)\n"}}]},{"url":"https://docs.openshift.com/container-platform/4.15/release_notes/ocp-4-15-release-notes.html","name":"PreRelease","message":"This is a prerelease version, and you should update to 4.15.0 or later releases, even if that means updating to a newer 4.14 first.","matchingRules":[{"type":"Always"}]}]},{"edges":[{"from":"4.16.0-rc.0","to":"4.16.0-rc.1"},{"from":"4.16.0-ec.4","to":"4.16.0-ec.6"},{"from":"4.16.0-ec.1","to":"4.16.0-rc.2"},{"from":"4.16.0-ec.2","to":"4.16.0-ec.6"},{"from":"4.16.0-ec.3","to":"4.16.0-ec.6"},{"from":"4.16.0-ec.4","to":"4.16.0-rc.0"},{"from":"4.16.0-ec.4","to":"4.16.0-rc.2"},{"from":"4.16.0-ec.5","to":"4.16.0-rc.1"},{"from":"4.16.0-ec.3","to":"4.16.0-rc.2"},{"from":"4.16.0-ec.6","to":"4.16.0-rc.2"},{"from":"4.16.0-ec.6","to":"4.16.0-rc.1"},{"from":"4.16.0-ec.5","to":"4.16.0-rc.2"},{"from":"4.16.0-rc.1","to":"4.16.0-rc.2"},{"from":"4.16.0-ec.1","to":"4.16.0-rc.1"},{"from":"4.16.0-ec.2","to":"4.16.0-rc.2"},{"from":"4.16.0-ec.6","to":"4.16.0-rc.0"},{"from":"4.16.0-ec.1","to":"4.16.0-ec.6"},{"from":"4.16.0-rc.0","to":"4.16.0-rc.2"},{"from":"4.16.0-ec.2","to":"4.16.0-rc.1"},{"from":"4.16.0-ec.1","to":"4.16.0-rc.0"},{"from":"4.16.0-ec.5","to":"4.16.0-ec.6"},{"from":"4.16.0-ec.3","to":"4.16.0-rc.1"},{"from":"4.16.0-ec.3","to":"4.16.0-rc.0"},{"from":"4.16.0-ec.2","to":"4.16.0-rc.0"},{"from":"4.16.0-ec.4","to":"4.16.0-rc.1"},{"from":"4.16.0-ec.5","to":"4.16.0-rc.0"}],"risks":[{"url":"https://issues.redhat.com/browse/OSASINFRA-3500","name":"OpenStackAvailabilityZoneOutOfRange","message":"OpenStack clusters with more compute availability zones than storage availability zones can lose the ability to provision or deprovision Cinder CSI volumes.","matchingRules":[{"type":"PromQL","promql":{"promql":"group by (_id, type) (cluster_infrastructure_provider{_id=\"\",type=\"OpenStack\"})\nor on (_id)\n0 * group by (_id, type) (cluster_infrastructure_provider{_id=\"\"})\n"}}]},{"url":"https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html","name":"PreRelease","message":"This is a prerelease version, and you should update to 4.16.0 or later releases, even if that means updating to a newer 4.15 first.","matchingRules":[{"type":"Always"}]}]},{"edges":[{"from":"4.15.6","to":"4.16.0-ec.6"},{"from":"4.15.7","to":"4.16.0-ec.6"},{"from":"4.15.9","to":"4.16.0-ec.6"},{"from":"4.15.10","to":"4.16.0-ec.6"},{"from":"4.15.5","to":"4.16.0-ec.6"},{"from":"4.15.8","to":"4.16.0-ec.6"}],"risks":[{"url":"https://issues.redhat.com/browse/OCPCLOUD-2582","name":"CRIAuthPluginRHEL","message":"Azure and GCP clusters with RHEL nodes may fail to start the kubelet until the operating system has been updated.","matchingRules":[{"type":"PromQL","promql":{"promql":"topk(1,\n  group by (type) (cluster_infrastructure_provider{_id=\"\",type=~\"Azure|GCP\"})\n  or\n  0 * group by (type) (cluster_infrastructure_provider{_id=\"\"})\n)\n* on () group_left (label_node_openshift_io_os_id)\ntopk(1,\n  group by (label_node_openshift_io_os_id) (kube_node_labels{_id=\"\",label_node_openshift_io_os_id=\"rhel\"})\n  or\n  0 * group by (label_node_openshift_io_os_id) (kube_node_labels{_id=\"\"})\n)\n"}}]},{"url":"https://issues.redhat.com/browse/API-1813","name":"FlowControlV1Beta3Migration","message":"Clusters installed in 4.8 or earlier can wedge updating into 4.16 unless they have had flowcontrol.apiserver.k8s.io storage version migrations.","matchingRules":[{"type":"PromQL","promql":{"promql":"label_replace(group by (_id, version) (cluster_version{_id=\"\",type=\"initial\",version=~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"yes, so possibly actually born in 4.8 or earlier\", \"\", \"\")\nor on (_id)\nlabel_replace(0 * group by (_id, version) (cluster_version{_id=\"\",type=\"initial\",version!~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"no, born in 4.10 or later\", \"\", \"\")\n"}}]},{"url":"https://issues.redhat.com/browse/OSASINFRA-3500","name":"OpenStackAvailabilityZoneOutOfRange","message":"OpenStack clusters with more compute availability zones than storage availability zones can lose the ability to provision or deprovision Cinder CSI volumes.","matchingRules":[{"type":"PromQL","promql":{"promql":"group by (_id, type) (cluster_infrastructure_provider{_id=\"\",type=\"OpenStack\"})\nor on (_id)\n0 * group by (_id, type) (cluster_infrastructure_provider{_id=\"\"})\n"}}]},{"url":"https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html","name":"PreRelease","message":"This is a prerelease version, and you should update to 4.16.0 or later releases, even if that means updating to a newer 4.15 first.","matchingRules":[{"type":"Always"}]}]},{"edges":[{"from":"4.15.2","to":"4.16.0-ec.4"},{"from":"4.15.3","to":"4.16.0-ec.4"},{"from":"4.15.0","to":"4.16.0-ec.4"}],"risks":[{"url":"https://issues.redhat.com/browse/OCPCLOUD-2582","name":"CRIAuthPluginRHEL","message":"Azure and GCP clusters with RHEL nodes may fail to start the kubelet until the operating system has been updated.","matchingRules":[{"type":"PromQL","promql":{"promql":"topk(1,\n  group by (type) (cluster_infrastructure_provider{_id=\"\",type=~\"Azure|GCP\"})\n  or\n  0 * group by (type) (cluster_infrastructure_provider{_id=\"\"})\n)\n* on () group_left (label_node_openshift_io_os_id)\ntopk(1,\n  group by (label_node_openshift_io_os_id) (kube_node_labels{_id=\"\",label_node_openshift_io_os_id=\"rhel\"})\n  or\n  0 * group by (label_node_openshift_io_os_id) (kube_node_labels{_id=\"\"})\n)\n"}}]},{"url":"https://issues.redhat.com/browse/MCO-1091","name":"CSRNotApprovedBadCerts","message":"Clusters born in 4.13 and earlier may not have CSRs automatically approved because of missing groups in installer client certificates.","matchingRules":[{"type":"PromQL","promql":{"promql":"topk(1,\n  label_replace(group by (version) (cluster_version{_id=\"\",type=\"initial\",version=~\"4[.]([0-9]|1[0-3])[.].*\"}),\"born_by_4_13\", \"yes, so possibly actually born in 4.13 or earlier\", \"\", \"\")\n  or\n  label_replace(0 * group by (version) (cluster_version{_id=\"\",type=\"initial\",version!~\"4[.]([0-9]|1[0-3])[.].*\"}),\"born_by_4_13\", \"no, born in 4.13 or later\", \"\", \"\")\n)\n"}}]},{"url":"https://issues.redhat.com/browse/API-1813","name":"FlowControlV1Beta3Migration","message":"Clusters installed in 4.8 or earlier can wedge updating into 4.16 unless they have had flowcontrol.apiserver.k8s.io storage version migrations.","matchingRules":[{"type":"PromQL","promql":{"promql":"label_replace(group by (_id, version) (cluster_version{_id=\"\",type=\"initial\",version=~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"yes, so possibly actually born in 4.8 or earlier\", \"\", \"\")\nor on (_id)\nlabel_replace(0 * group by (_id, version) (cluster_version{_id=\"\",type=\"initial\",version!~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"no, born in 4.10 or later\", \"\", \"\")\n"}}]},{"url":"https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html","name":"PreRelease","message":"This is a prerelease version, and you should update to 4.16.0 or later releases, even if that means updating to a newer 4.15 first.","matchingRules":[{"type":"Always"}]}]},{"edges":[{"from":"4.15.13","to":"4.15.17"},{"from":"4.15.9","to":"4.15.16"},{"from":"4.15.7","to":"4.15.16"},{"from":"4.15.15","to":"4.15.16"},{"from":"4.15.2","to":"4.15.16"},{"from":"4.15.11","to":"4.15.18"},{"from":"4.15.8","to":"4.15.16"},{"from":"4.15.5","to":"4.15.15"},{"from":"4.15.0","to":"4.15.15"},{"from":"4.15.11","to":"4.15.16"},{"from":"4.15.3","to":"4.15.17"},{"from":"4.15.14","to":"4.15.15"},{"from":"4.15.12","to":"4.15.15"},{"from":"4.15.7","to":"4.15.15"},{"from":"4.15.12","to":"4.15.16"},{"from":"4.15.10","to":"4.15.17"},{"from":"4.15.3","to":"4.15.18"},{"from":"4.15.2","to":"4.15.17"},{"from":"4.15.2","to":"4.15.18"},{"from":"4.15.9","to":"4.15.17"},{"from":"4.15.3","to":"4.15.16"},{"from":"4.15.0","to":"4.15.18"},{"from":"4.15.16","to":"4.15.18"},{"from":"4.15.12","to":"4.15.17"},{"from":"4.15.3","to":"4.15.15"},{"from":"4.15.2","to":"4.15.15"},{"from":"4.15.6","to":"4.15.15"},{"from":"4.15.5","to":"4.15.16"},{"from":"4.15.8","to":"4.15.17"},{"from":"4.15.14","to":"4.15.17"},{"from":"4.15.13","to":"4.15.15"},{"from":"4.15.8","to":"4.15.18"},{"from":"4.15.5","to":"4.15.18"},{"from":"4.15.7","to":"4.15.17"},{"from":"4.15.9","to":"4.15.18"},{"from":"4.15.13","to":"4.15.16"},{"from":"4.15.6","to":"4.15.16"},{"from":"4.15.11","to":"4.15.17"},{"from":"4.15.9","to":"4.15.15"},{"from":"4.15.0","to":"4.15.16"},{"from":"4.15.0","to":"4.15.17"},{"from":"4.15.6","to":"4.15.17"},{"from":"4.15.14","to":"4.15.18"},{"from":"4.15.6","to":"4.15.18"},{"from":"4.15.15","to":"4.15.18"},{"from":"4.15.16","to":"4.15.17"},{"from":"4.15.5","to":"4.15.17"},{"from":"4.15.15","to":"4.15.17"},{"from":"4.15.17","to":"4.15.18"},{"from":"4.15.14","to":"4.15.16"},{"from":"4.15.8","to":"4.15.15"},{"from":"4.15.13","to":"4.15.18"},{"from":"4.15.12","to":"4.15.18"},{"from":"4.15.10","to":"4.15.16"},{"from":"4.15.10","to":"4.15.18"},{"from":"4.15.10","to":"4.15.15"},{"from":"4.15.7","to":"4.15.18"},{"from":"4.15.11","to":"4.15.15"}],"risks":[{"url":"https://issues.redhat.com/browse/OSASINFRA-3500","name":"OpenStackAvailabilityZoneOutOfRange","message":"OpenStack clusters with more compute availability zones than storage availability zones can lose the ability to provision or deprovision Cinder CSI volumes.","matchingRules":[{"type":"PromQL","promql":{"promql":"group by (_id, type) (cluster_infrastructure_provider{_id=\"\",type=\"OpenStack\"})\nor on (_id)\n0 * group by (_id, type) (cluster_infrastructure_provider{_id=\"\"})\n"}}]}]},{"edges":[{"from":"4.15.0-rc.0","to":"4.16.0-ec.3"},{"from":"4.15.0-rc.5","to":"4.16.0-ec.2"},{"from":"4.15.0-ec.2","to":"4.16.0-ec.1"},{"from":"4.15.0-rc.4","to":"4.16.0-ec.2"},{"from":"4.15.0-rc.3","to":"4.16.0-ec.3"},{"from":"4.15.0-rc.1","to":"4.16.0-ec.2"},{"from":"4.15.0-ec.1","to":"4.16.0-ec.1"},{"from":"4.15.0-rc.1","to":"4.16.0-ec.1"},{"from":"4.15.0-rc.2","to":"4.16.0-ec.3"},{"from":"4.15.0-ec.1","to":"4.16.0-ec.0"},{"from":"4.15.0-rc.1","to":"4.16.0-ec.3"},{"from":"4.15.0-ec.0","to":"4.16.0-ec.0"},{"from":"4.15.0-rc.5","to":"4.16.0-ec.3"},{"from":"4.15.0-rc.0","to":"4.16.0-ec.1"},{"from":"4.15.0-rc.7","to":"4.16.0-ec.3"},{"from":"4.15.0-ec.3","to":"4.16.0-ec.0"},{"from":"4.15.0-rc.4","to":"4.16.0-ec.3"},{"from":"4.15.0-rc.3","to":"4.16.0-ec.2"},{"from":"4.15.0-rc.0","to":"4.16.0-ec.2"},{"from":"4.15.0-ec.3","to":"4.16.0-ec.1"},{"from":"4.15.0-ec.2","to":"4.16.0-ec.0"},{"from":"4.15.0-rc.0","to":"4.16.0-ec.0"},{"from":"4.15.0-rc.2","to":"4.16.0-ec.2"},{"from":"4.15.0-ec.0","to":"4.16.0-ec.1"},{"from":"4.15.0-rc.8","to":"4.16.0-ec.3"}],"risks":[{"url":"https://issues.redhat.com/browse/API-1813","name":"FlowControlV1Beta3Migration","message":"Clusters installed in 4.8 or earlier can wedge updating into 4.16 unless they have had flowcontrol.apiserver.k8s.io storage version migrations.","matchingRules":[{"type":"PromQL","promql":{"promql":"label_replace(group by (_id, version) (cluster_version{_id=\"\",type=\"initial\",version=~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"yes, so possibly actually born in 4.8 or earlier\", \"\", \"\")\nor on (_id)\nlabel_replace(0 * group by (_id, version) (cluster_version{_id=\"\",type=\"initial\",version!~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"no, born in 4.10 or later\", \"\", \"\")\n"}}]},{"url":"https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html","name":"PreRelease","message":"This is a prerelease version, and you should update to 4.16.0 or later releases, even if that means updating to a newer 4.15 first.","matchingRules":[{"type":"Always"}]}]},{"edges":[{"from":"4.16.0-rc.5","to":"4.16.0-rc.9"},{"from":"4.16.0-ec.1","to":"4.16.0-rc.5"},{"from":"4.16.0-ec.1","to":"4.16.0-ec.3"},{"from":"4.16.0-rc.5","to":"4.16.0-rc.6"},{"from":"4.16.0-rc.4","to":"4.16.0-rc.5"},{"from":"4.16.0-ec.3","to":"4.16.0-rc.6"},{"from":"4.16.0-rc.3","to":"4.16.0-rc.9"},{"from":"4.16.0-ec.2","to":"4.16.0-rc.9"},{"from":"4.16.0-rc.6","to":"4.16.0-rc.9"},{"from":"4.16.0-ec.6","to":"4.16.0-rc.9"},{"from":"4.16.0-ec.1","to":"4.16.0-ec.5"},{"from":"4.16.0-rc.3","to":"4.16.0-rc.5"},{"from":"4.16.0-ec.4","to":"4.16.0-rc.6"},{"from":"4.16.0-ec.2","to":"4.16.0-ec.3"},{"from":"4.16.0-ec.6","to":"4.16.0-rc.5"},{"from":"4.16.0-rc.2","to":"4.16.0-rc.5"},{"from":"4.16.0-ec.2","to":"4.16.0-rc.6"},{"from":"4.16.0-rc.4","to":"4.16.0-rc.9"},{"from":"4.16.0-rc.4","to":"4.16.0-rc.6"},{"from":"4.16.0-ec.3","to":"4.16.0-ec.5"},{"from":"4.16.0-ec.0","to":"4.16.0-ec.3"},{"from":"4.16.0-ec.4","to":"4.16.0-ec.5"},{"from":"4.16.0-ec.3","to":"4.16.0-rc.5"},{"from":"4.16.0-rc.1","to":"4.16.0-rc.9"},{"from":"4.16.0-rc.2","to":"4.16.0-rc.6"},{"from":"4.16.0-ec.6","to":"4.16.0-rc.6"},{"from":"4.16.0-ec.2","to":"4.16.0-ec.5"},{"from":"4.16.0-ec.5","to":"4.16.0-rc.9"},{"from":"4.16.0-rc.3","to":"4.16.0-rc.6"},{"from":"4.15.18","to":"4.16.0-rc.9"},{"from":"4.16.0-ec.1","to":"4.16.0-ec.2"},{"from":"4.16.0-ec.2","to":"4.16.0-rc.5"},{"from":"4.16.0-rc.1","to":"4.16.0-rc.5"},{"from":"4.16.0-ec.0","to":"4.16.0-ec.1"},{"from":"4.16.0-ec.1","to":"4.16.0-rc.9"},{"from":"4.16.0-rc.0","to":"4.16.0-rc.6"},{"from":"4.16.0-ec.5","to":"4.16.0-rc.5"},{"from":"4.16.0-rc.1","to":"4.16.0-rc.6"},{"from":"4.16.0-ec.5","to":"4.16.0-rc.6"},{"from":"4.16.0-rc.0","to":"4.16.0-rc.5"},{"from":"4.16.0-ec.1","to":"4.16.0-rc.6"},{"from":"4.16.0-ec.4","to":"4.16.0-rc.9"},{"from":"4.15.19","to":"4.16.0-rc.9"},{"from":"4.16.0-ec.4","to":"4.16.0-rc.5"},{"from":"4.16.0-rc.0","to":"4.16.0-rc.9"},{"from":"4.16.0-ec.0","to":"4.16.0-ec.2"},{"from":"4.16.0-ec.3","to":"4.16.0-rc.9"},{"from":"4.16.0-rc.2","to":"4.16.0-rc.9"}],"risks":[{"url":"https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html","name":"PreRelease","message":"This is a prerelease version, and you should update to 4.16.0 or later releases, even if that means updating to a newer 4.15 first.","matchingRules":[{"type":"Always"}]}]},{"edges":[{"from":"4.15.12","to":"4.16.0-rc.1"},{"from":"4.15.11","to":"4.16.0-rc.2"},{"from":"4.15.11","to":"4.16.0-rc.0"},{"from":"4.15.14","to":"4.16.0-rc.2"},{"from":"4.15.13","to":"4.16.0-rc.1"},{"from":"4.15.11","to":"4.16.0-rc.1"},{"from":"4.15.12","to":"4.16.0-rc.2"},{"from":"4.15.13","to":"4.16.0-rc.2"}],"risks":[{"url":"https://issues.redhat.com/browse/API-1813","name":"FlowControlV1Beta3Migration","message":"Clusters installed in 4.8 or earlier can wedge updating into 4.16 unless they have had flowcontrol.apiserver.k8s.io storage version migrations.","matchingRules":[{"type":"PromQL","promql":{"promql":"label_replace(group by (_id, version) (cluster_version{_id=\"\",type=\"initial\",version=~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"yes, so possibly actually born in 4.8 or earlier\", \"\", \"\")\nor on (_id)\nlabel_replace(0 * group by (_id, version) (cluster_version{_id=\"\",type=\"initial\",version!~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"no, born in 4.10 or later\", \"\", \"\")\n"}}]},{"url":"https://issues.redhat.com/browse/SDN-5055","name":"OVNMulticastPacketLoss","message":"Multicast communication fails when multicast receiver and clients run on the same node in clusters that use OVN networking. Clusters that do not use multicast communication are not affected.","matchingRules":[{"type":"PromQL","promql":{"promql":"1 * group by (resource) (max_over_time(apiserver_storage_objects{_id=\"\",resource=\"egressips.k8s.ovn.org\"}[1h]))\nor on (_id)\n0 * group(max_over_time(apiserver_storage_objects{_id=\"\"}[1h]))\n"}}]},{"url":"https://issues.redhat.com/browse/OSASINFRA-3500","name":"OpenStackAvailabilityZoneOutOfRange","message":"OpenStack clusters with more compute availability zones than storage availability zones can lose the ability to provision or deprovision Cinder CSI volumes.","matchingRules":[{"type":"PromQL","promql":{"promql":"group by (_id, type) (cluster_infrastructure_provider{_id=\"\",type=\"OpenStack\"})\nor on (_id)\n0 * group by (_id, type) (cluster_infrastructure_provider{_id=\"\"})\n"}}]},{"url":"https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html","name":"PreRelease","message":"This is a prerelease version, and you should update to 4.16.0 or later releases, even if that means updating to a newer 4.15 first.","matchingRules":[{"type":"Always"}]}]},{"edges":[{"from":"4.15.17","to":"4.16.0-rc.4"}],"risks":[{"url":"https://issues.redhat.com/browse/SDN-5055","name":"OVNMulticastPacketLoss","message":"Multicast communication fails when multicast receiver and clients run on the same node in clusters that use OVN networking. Clusters that do not use multicast communication are not affected.","matchingRules":[{"type":"PromQL","promql":{"promql":"1 * group by (resource) (max_over_time(apiserver_storage_objects{_id=\"\",resource=\"egressips.k8s.ovn.org\"}[1h]))\nor on (_id)\n0 * group(max_over_time(apiserver_storage_objects{_id=\"\"}[1h]))\n"}}]},{"url":"https://issues.redhat.com/browse/OSASINFRA-3500","name":"OpenStackAvailabilityZoneOutOfRange","message":"OpenStack clusters with more compute availability zones than storage availability zones can lose the ability to provision or deprovision Cinder CSI volumes.","matchingRules":[{"type":"PromQL","promql":{"promql":"group by (_id, type) (cluster_infrastructure_provider{_id=\"\",type=\"OpenStack\"})\nor on (_id)\n0 * group by (_id, type) (cluster_infrastructure_provider{_id=\"\"})\n"}}]},{"url":"https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html","name":"PreRelease","message":"This is a prerelease version, and you should update to 4.16.0 or later releases, even if that means updating to a newer 4.15 first.","matchingRules":[{"type":"Always"}]},{"url":"https://issues.redhat.com/browse/OTA-1297","name":"TechPreviewSignatureStoresInDefault","message":"Standalone clusters in the default feature set will fail to verify signatures when asked to update out to later releases.","matchingRules":[{"type":"PromQL","promql":{"promql":"0 * group by (invoker) (cluster_installer{_id=\"\",invoker=\"hypershift\"})\nor on (_id)\ngroup by (name) (cluster_feature_set{_id=\"\",name=\"\"})\nor on (_id)\n0 * group by (name) (cluster_feature_set{_id=\"\"})\n"}}]}]},{"edges":[{"from":"4.15.0-rc.1","to":"4.15.0-rc.3"},{"from":"4.15.0-rc.1","to":"4.15.0-rc.4"},{"from":"4.15.0-rc.0","to":"4.15.0-rc.5"},{"from":"4.15.0-rc.2","to":"4.15.0-rc.4"},{"from":"4.15.0-ec.0","to":"4.15.0-ec.2"},{"from":"4.15.0-rc.1","to":"4.15.0-rc.8"},{"from":"4.15.0-ec.1","to":"4.15.0-ec.3"},{"from":"4.15.0-rc.2","to":"4.15.0-rc.3"},{"from":"4.15.0-rc.1","to":"4.15.0-rc.2"},{"from":"4.15.0-rc.0","to":"4.15.0-rc.7"},{"from":"4.15.0-ec.0","to":"4.15.0-ec.3"},{"from":"4.15.0-ec.1","to":"4.15.0-ec.2"},{"from":"4.15.0-rc.0","to":"4.15.0-rc.8"},{"from":"4.15.0-rc.5","to":"4.15.0-rc.8"},{"from":"4.15.0-rc.3","to":"4.15.0-rc.7"},{"from":"4.15.0-rc.2","to":"4.15.0-rc.8"},{"from":"4.15.0-ec.2","to":"4.15.0-ec.3"},{"from":"4.15.0-rc.0","to":"4.15.0-rc.2"},{"from":"4.15.0-rc.2","to":"4.15.0-rc.7"},{"from":"4.15.0-rc.5","to":"4.15.0-rc.7"},{"from":"4.15.0-rc.7","to":"4.15.0-rc.8"},{"from":"4.15.0-rc.0","to":"4.15.0-rc.4"},{"from":"4.15.0-rc.4","to":"4.15.0-rc.7"},{"from":"4.15.0-rc.3","to":"4.15.0-rc.5"},{"from":"4.15.0-rc.3","to":"4.15.0-rc.8"},{"from":"4.15.0-rc.4","to":"4.15.0-rc.5"},{"from":"4.15.0-rc.0","to":"4.15.0-rc.1"},{"from":"4.15.0-rc.1","to":"4.15.0-rc.7"},{"from":"4.15.0-rc.3","to":"4.15.0-rc.4"},{"from":"4.15.0-ec.0","to":"4.15.0-ec.1"},{"from":"4.15.0-rc.2","to":"4.15.0-rc.5"},{"from":"4.15.0-rc.1","to":"4.15.0-rc.5"},{"from":"4.15.0-rc.4","to":"4.15.0-rc.8"},{"from":"4.15.0-rc.0","to":"4.15.0-rc.3"}],"risks":[{"url":"https://docs.openshift.com/container-platform/4.15/release_notes/ocp-4-15-release-notes.html","name":"PreRelease","message":"This is a prerelease version, and you should update to 4.15.0 or later releases, even if that means updating to a newer 4.14 first.","matchingRules":[{"type":"Always"}]}]},{"edges":[{"from":"4.15.11","to":"4.16.0-ec.6"}],"risks":[{"url":"https://issues.redhat.com/browse/API-1813","name":"FlowControlV1Beta3Migration","message":"Clusters installed in 4.8 or earlier can wedge updating into 4.16 unless they have had flowcontrol.apiserver.k8s.io storage version migrations.","matchingRules":[{"type":"PromQL","promql":{"promql":"label_replace(group by (_id, version) (cluster_version{_id=\"\",type=\"initial\",version=~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"yes, so possibly actually born in 4.8 or earlier\", \"\", \"\")\nor on (_id)\nlabel_replace(0 * group by (_id, version) (cluster_version{_id=\"\",type=\"initial\",version!~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"no, born in 4.10 or later\", \"\", \"\")\n"}}]},{"url":"https://issues.redhat.com/browse/OSASINFRA-3500","name":"OpenStackAvailabilityZoneOutOfRange","message":"OpenStack clusters with more compute availability zones than storage availability zones can lose the ability to provision or deprovision Cinder CSI volumes.","matchingRules":[{"type":"PromQL","promql":{"promql":"group by (_id, type) (cluster_infrastructure_provider{_id=\"\",type=\"OpenStack\"})\nor on (_id)\n0 * group by (_id, type) (cluster_infrastructure_provider{_id=\"\"})\n"}}]},{"url":"https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html","name":"PreRelease","message":"This is a prerelease version, and you should update to 4.16.0 or later releases, even if that means updating to a newer 4.15 first.","matchingRules":[{"type":"Always"}]}]},{"edges":[{"from":"4.15.18","to":"4.16.0-rc.5"},{"from":"4.15.18","to":"4.16.0-rc.6"}],"risks":[{"url":"https://issues.redhat.com/browse/SDN-5055","name":"OVNMulticastPacketLoss","message":"Multicast communication fails when multicast receiver and clients run on the same node in clusters that use OVN networking. Clusters that do not use multicast communication are not affected.","matchingRules":[{"type":"PromQL","promql":{"promql":"1 * group by (resource) (max_over_time(apiserver_storage_objects{_id=\"\",resource=\"egressips.k8s.ovn.org\"}[1h]))\nor on (_id)\n0 * group(max_over_time(apiserver_storage_objects{_id=\"\"}[1h]))\n"}}]},{"url":"https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html","name":"PreRelease","message":"This is a prerelease version, and you should update to 4.16.0 or later releases, even if that means updating to a newer 4.15 first.","matchingRules":[{"type":"Always"}]}]},{"edges":[{"from":"4.15.2","to":"4.16.0-ec.5"},{"from":"4.15.6","to":"4.16.0-ec.5"},{"from":"4.15.7","to":"4.16.0-ec.5"},{"from":"4.15.0","to":"4.16.0-ec.5"},{"from":"4.15.3","to":"4.16.0-ec.5"},{"from":"4.15.0","to":"4.16.0-ec.3"},{"from":"4.15.5","to":"4.16.0-ec.5"},{"from":"4.15.8","to":"4.16.0-ec.5"},{"from":"4.15.9","to":"4.16.0-ec.5"}],"risks":[{"url":"https://issues.redhat.com/browse/OCPCLOUD-2582","name":"CRIAuthPluginRHEL","message":"Azure and GCP clusters with RHEL nodes may fail to start the kubelet until the operating system has been updated.","matchingRules":[{"type":"PromQL","promql":{"promql":"topk(1,\n  group by (type) (cluster_infrastructure_provider{_id=\"\",type=~\"Azure|GCP\"})\n  or\n  0 * group by (type) (cluster_infrastructure_provider{_id=\"\"})\n)\n* on () group_left (label_node_openshift_io_os_id)\ntopk(1,\n  group by (label_node_openshift_io_os_id) (kube_node_labels{_id=\"\",label_node_openshift_io_os_id=\"rhel\"})\n  or\n  0 * group by (label_node_openshift_io_os_id) (kube_node_labels{_id=\"\"})\n)\n"}}]},{"url":"https://issues.redhat.com/browse/API-1813","name":"FlowControlV1Beta3Migration","message":"Clusters installed in 4.8 or earlier can wedge updating into 4.16 unless they have had flowcontrol.apiserver.k8s.io storage version migrations.","matchingRules":[{"type":"PromQL","promql":{"promql":"label_replace(group by (_id, version) (cluster_version{_id=\"\",type=\"initial\",version=~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"yes, so possibly actually born in 4.8 or earlier\", \"\", \"\")\nor on (_id)\nlabel_replace(0 * group by (_id, version) (cluster_version{_id=\"\",type=\"initial\",version!~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"no, born in 4.10 or later\", \"\", \"\")\n"}}]},{"url":"https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html","name":"PreRelease","message":"This is a prerelease version, and you should update to 4.16.0 or later releases, even if that means updating to a newer 4.15 first.","matchingRules":[{"type":"Always"}]}]},{"edges":[{"from":"4.16.0-ec.1","to":"4.16.0-ec.4"},{"from":"4.16.0-ec.2","to":"4.16.0-ec.4"},{"from":"4.16.0-ec.0","to":"4.16.0-ec.4"},{"from":"4.16.0-ec.3","to":"4.16.0-ec.4"}],"risks":[{"url":"https://issues.redhat.com/browse/MCO-1091","name":"CSRNotApprovedBadCerts","message":"Clusters born in 4.13 and earlier may not have CSRs automatically approved because of missing groups in installer client certificates.","matchingRules":[{"type":"PromQL","promql":{"promql":"topk(1,\n  label_replace(group by (version) (cluster_version{_id=\"\",type=\"initial\",version=~\"4[.]([0-9]|1[0-3])[.].*\"}),\"born_by_4_13\", \"yes, so possibly actually born in 4.13 or earlier\", \"\", \"\")\n  or\n  label_replace(0 * group by (version) (cluster_version{_id=\"\",type=\"initial\",version!~\"4[.]([0-9]|1[0-3])[.].*\"}),\"born_by_4_13\", \"no, born in 4.13 or later\", \"\", \"\")\n)\n"}}]},{"url":"https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html","name":"PreRelease","message":"This is a prerelease version, and you should update to 4.16.0 or later releases, even if that means updating to a newer 4.15 first.","matchingRules":[{"type":"Always"}]}]}]}
\ No newline at end of file
diff --git a/streams/expanded/candidate-4.16.json b/streams/expanded/candidate-4.16.json
index 3eb22092d..8cc80bff2 100644
--- a/streams/expanded/candidate-4.16.json
+++ b/streams/expanded/candidate-4.16.json
@@ -48,7 +48,8 @@
     "4.16.0-rc.5",
     "4.16.0-rc.6",
     "4.16.0-rc.9",
-    "4.16.1"
+    "4.16.1",
+    "4.16.2"
   ],
   "edges": [
     {
@@ -315,6 +316,10 @@
       "from": "4.15.18",
       "to": "4.16.1"
     },
+    {
+      "from": "4.15.18",
+      "to": "4.16.2"
+    },
     {
       "from": "4.15.19",
       "to": "4.15.20"
@@ -327,6 +332,10 @@
       "from": "4.15.19",
       "to": "4.16.1"
     },
+    {
+      "from": "4.15.19",
+      "to": "4.16.2"
+    },
     {
       "from": "4.15.2",
       "to": "4.15.10"
@@ -391,6 +400,14 @@
       "from": "4.15.20",
       "to": "4.16.1"
     },
+    {
+      "from": "4.15.20",
+      "to": "4.16.2"
+    },
+    {
+      "from": "4.15.21",
+      "to": "4.16.2"
+    },
     {
       "from": "4.15.3",
       "to": "4.15.10"
@@ -643,6 +660,10 @@
       "from": "4.16.0",
       "to": "4.16.1"
     },
+    {
+      "from": "4.16.0",
+      "to": "4.16.2"
+    },
     {
       "from": "4.16.0-ec.1",
       "to": "4.16.0"
@@ -754,6 +775,10 @@
     {
       "from": "4.16.0-rc.9",
       "to": "4.16.1"
+    },
+    {
+      "from": "4.16.1",
+      "to": "4.16.2"
     }
   ]
 }
\ No newline at end of file