ACM add-on version change log
- Patch updates
- Patch updates are delivered automatically by IBM and don't contain any feature updates or changes in the supported add-on and cluster versions.
- Release updates
- Release updates contain new features or changes in the supported add-on or cluster versions. You must manually apply release updates to your cluster autoscaler add-on.
To view a list of add-ons and the supported cluster versions, run the following command or see the Supported cluster add-ons table.
ibmcloud oc cluster addon versions
Review the version history for ACM.
Version 2.17.0
13 October 2026, Version 2.17.0 - 2.17.8
- Resolves the following CVEs: CVE-2026-78669, CVE-2026-97031, CVE-2026-56866, CVE-2026-78663, CVE-2026-94439, and CVE-2026-97032.
- Updates Go to version
1.26.9. - VA fixes. Bumped Go to 1.26.9 and golang.org/x/net to v0.61.0 (along with golang.org/x/crypto, sys, text, sync, term, mod and tools).
- Periodic billing agent (acm-agent) now runs the storage-secret-sidecar so the IAM API key fallback works for periodic billing. The pod runs as UID 1000, matching the operator pod.
- Fixed misleading "Initial billing cycle completed successfully" log being printed when the initial billing cycle failed.
- Added startup log of the sidecar endpoint in acm-agent.
06 October 2026, Version 2.17.0 - 2.17.7
- Updates Go to version
1.26.6. - Billing IAM API key fallback when Trusted Profile is unavailable.
30 September 2026, Version 2.17.0 - 2.17.6
- Resolves the following CVEs: CVE-2026-84445, and CVE-2026-63209.
- Updates Go to version
1.26.6. - VA fixes. Bumped builder image to v9.8.145. Removed shell and utility binaries from runtime image.
29 September 2026, Version 2.17.0 - 2.17.4
- Resolves the following CVEs: CVE-2026-88031, CVE-2026-2303, CVE-2026-78662, CVE-2026-56855, CVE-2026-56854, CVE-2026-84445, CVE-2026-84304, CVE-2026-84303, and CVE-2026-33186.
- Updates Go to version
1.26.6. - VA fixes.
29 September 2026, Version 2.17.0 - 2.17.5
- Resolves the following CVEs: CVE-2026-88031, CVE-2026-2303, CVE-2026-78662, CVE-2026-56855, CVE-2026-56854, CVE-2026-84445, CVE-2026-84304, CVE-2026-84303, and CVE-2026-33186.
- Updates Go to version
1.26.6. - VA fixes.
01 September 2026, Version 2.17.0 - 2.17.3
- Updates Go to version
1.26.6. - VA fixes. Bumped Go to 1.26.6 and builder image to v9.8.88.
04 August 2026, Version 2.17.0 - 2.17.1
- Updates Go to version
1.25.11. - Initial release of ACM 2.17.
04 August 2026, Version 2.17.0 - 2.17.2
- Updates Go to version
1.25.11. - VA fixes.
Version 2.16.0
13 October 2026, Version 2.16.0 - 2.16.19
- Resolves the following CVEs: CVE-2026-78669, CVE-2026-97031, CVE-2026-56866, CVE-2026-78663, CVE-2026-94439, and CVE-2026-97032.
- Updates Go to version
1.26.9. - VA fixes. Bumped Go to 1.26.9 and golang.org/x/net to v0.61.0 (along with golang.org/x/crypto, sys, text, sync, term, mod and tools).
- Periodic billing agent (acm-agent) now runs the storage-secret-sidecar so the IAM API key fallback works for periodic billing. The pod runs as UID 1000, matching the operator pod.
- Fixed misleading "Initial billing cycle completed successfully" log being printed when the initial billing cycle failed.
- Added startup log of the sidecar endpoint in acm-agent.
06 October 2026, Version 2.16.0 - 2.16.18
- Updates Go to version
1.26.6. - Billing IAM API key fallback when Trusted Profile is unavailable.
30 September 2026, Version 2.16.0 - 2.16.17
- Resolves the following CVEs: CVE-2026-84445, and CVE-2026-63209.
- Updates Go to version
1.26.6. - VA fixes. Bumped builder image to v9.8.145. Removed shell and utility binaries from runtime image.
29 September 2026, Version 2.16.0 - 2.16.16
- Resolves the following CVEs: CVE-2026-88031, CVE-2026-2303, CVE-2026-78662, CVE-2026-56855, CVE-2026-56854, CVE-2026-84445, CVE-2026-84304, CVE-2026-84303, and CVE-2026-33186.
- Updates Go to version
1.26.6. - VA fixes.
01 September 2026, Version 2.16.0 - 2.16.15
- Updates Go to version
1.26.6. - VA fixes. Bumped Go to 1.26.6 and builder image to v9.8.88.
16 June 2026, Version 2.16.0 - 2.16.12
- Updates Go to version
1.25.11. - VA fixes. Bumped Go to 1.25.11 and builder image to v9.8.37.
16 June 2026, Version 2.16.0 - 2.16.13
- Updates Go to version
1.25.11. - VA fixes. Bumped Go to 1.25.11 and builder image to v9.8.37.
03 June 2026, Version 2.16.0 - 2.16.10
- Updates Go to version
1.23.7. - Disabled plan change.
03 June 2026, Version 2.16.0 - 2.16.11
- Updates Go to version
1.23.7. - Disabled plan change.
02 June 2026, Version 2.16.0 - 2.16.7
- Updates Go to version
1.23.7. - Virtualisation support re-enabled. Upgrade blocked.
02 June 2026, Version 2.16.0 - 2.16.8
- Updates Go to version
1.23.7. - Virtualisation support re-enabled. Upgrade blocked.
02 June 2026, Version 2.16.0 - 2.16.9
- Updates Go to version
1.23.7. - VA fixes.
11 May 2026, Version 2.16.0 - 2.16.4
- Updates Go to version
1.23.7. - Removed virtualisation support.
11 May 2026, Version 2.16.0 - 2.16.5
- Updates Go to version
1.23.7. - Removed virtualisation support.
11 May 2026, Version 2.16.0 - 2.16.6
- Updates Go to version
1.23.7. - Removed virtualisation support.
07 May 2026, Version 2.16.0 - 2.16.3
- Updates Go to version
1.23.7. - BM naming changes and billing calculation fix.
15 April 2026, Version 2.16.0 - 2.16.1
- Updates Go to version
1.23.7. - E2E fixes.
15 April 2026, Version 2.16.0 - 2.16.2
- Updates Go to version
1.23.7. - E2E fixes.
06 April 2026, Version 2.16.0
- Updates Go to version
1.23.7. - Initial release of ACM 2.16.