Back to index

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.15.0-x86_64

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
  • upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
• Informing jobs
  • aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-aws-ovn-serial
  • aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.15-e2e-aws-ovn-upgrade
  • metal-ipi-ovn-dualstack Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-metal-ipi-ovn-dualstack
  • metal-ipi-ovn-ipv6 Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.15-e2e-metal-ipi-ovn-ipv6
  • metal-ipi-sdn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-metal-ipi-sdn-bm

Upgrades from:

• 4.15.0-rc.8 (changes) - S S S
• 4.15.0-rc.7 (changes) - Failed
• 4.15.0-rc.5 (changes) - Success
• 4.15.0-rc.4 (changes) - Success
• 4.15.0-rc.1 (changes) - Success
• 4.15.0-rc.0 - Success
• 4.15.0-ec.2 (changes) - Failed
• 4.15.0-ec.1 (changes) - Failed
• 4.15.0-ec.0 (changes) - Failed
• 4.14.14 (changes) - Success Failed

Upgrades to:

• 4.15.40 (changes) - Failed
• 4.15.24 (changes) - Success
• 4.15.23 (changes) - Failed
• 4.15.22 (changes) - Success
• 4.15.21 (changes) - Success
• 4.15.20 (changes) - Success
• 4.15.19 (changes) - Success
• 4.15.18 (changes) - Success
• 4.15.17 (changes) - Success
• 4.15.16 (changes) - Success Success
• 4.15.15 (changes) - Success
• 4.15.14 (changes) - Failed
• 4.15.13 (changes) - Failed
• 4.15.12 (changes) - Success
• 4.15.11 (changes) - Success
• 4.15.10 (changes) - Success
• 4.15.9 (changes) - Success
• 4.15.8 (changes) - Success
• 4.15.7 (changes) - Success
• 4.15.6 (changes) - Success
• 4.15.5 (changes) - Failed
• 4.15.4 (changes) - Success
• 4.15.3 (changes) - Success
• 4.15.2 (changes) - Failed
• 4.15.1 (changes) - S S F S S S

---

Loading changelog, this may take a while ...

Changes from 4.15.0-rc.0

Created: 2024-02-26 07:18:25 +0000 UTC

Image Digest: sha256:0da6316466d60a3a4535d5fed3589feb0391989982fba59d47d4c729912d6363

Release 4.15.0 was created from registry.ci.openshift.org/ocp/release:4.15.0-0.nightly-2024-02-21-153906

Components

• Kubernetes upgraded from 1.28.4 to 1.28.6
• Red Hat Enterprise Linux CoreOS upgraded from 415.92.202312132107-0 to 415.92.202402201450-0 (diff)

Rebuilt images without code change

• agent-installer-node-agent git b0beda7b sha256:33815dadf3a064cb844e7e5457f6724d8bdca76655a869d9b91058cd9446ca3b
• agent-installer-utils git 33b7d855 sha256:833f5b20b5431d9a85bb9d5dd096ddb9aa7bcba640f18872afced55ff0db07f4
• alibaba-cloud-csi-driver git be4888d3 sha256:2c6fd1f4b4fdbfbe34117e0477ad03b95792bb1eafa77f22608c107d7e2b8f19
• aws-cluster-api-controllers git 3e23a968 sha256:a2aebb4e911ae56894fab83e1712d518376380d938cbd50a2b63249676662ddb
• aws-machine-controllers git 0129b1e3 sha256:2b1bf816cad7f56d6ecb136d5b9a6feaee021e1536276407a471b275327e83a1
• aws-pod-identity-webhook git a63743af sha256:36c42dc80dd2e95f91044372fd0bc6e2c328f4d70df34acba73157a9c01b6c73
• azure-cloud-controller-manager git 5beac87d sha256:94315c4eae8b97376b4ed0079a27bcede3e7ecfef80f6496fee60a7dce0aaa4f
• azure-cloud-node-manager git 5beac87d sha256:d22e7d67a428eb0d8e70642a379640a8a54140f7f4f48c06c12b70a5cd67efff
• azure-cluster-api-controllers git 84ef752b sha256:78ee55474bbcc2f7714e790fe2686ec2045d2a5534603f69e006f152ad88360a
• baremetal-operator git c17023eb sha256:47a032ad837a7d0224d7386eddf388552af39c078ce22bb39b2e6575e6953ec7
• cloud-network-config-controller git 81ab2a17 sha256:1b919d0d7cddccef32fa4a5c2fecba62b328022dfe3eb5e20778a292352301d9
• cluster-capi-controllers git db1841a6 sha256:6df25d7fb2f579e84970291f18f68b8ed655e4bec1a65fc28bfb377615bcf642
• cluster-control-plane-machine-set-operator git d3e0fe7d sha256:bb7fabf55691642c4b49a564ad31b0151d341395d68d8c618ed0f7c63e96fa48
• cluster-csi-snapshot-controller-operator git 1afe553a sha256:61c61746c35b208ad226767613d0f1e79e340fd39b135ae2aa2728966918a827
• cluster-kube-scheduler-operator git e1a1e3a8 sha256:83196de96456649b72ffd016a84448fd3cea637a216f5195f736d56401f715c3
• cluster-policy-controller git cc48f315 sha256:1130e33c0fbb7fed49b187934a49a64319fbdd30be9a62ad72ca3f4efbc22119
• cluster-samples-operator git d546ec2c sha256:010fec71f42f4b5e65f3f56f10af94a7c05c9c271a9bbc3026684ba170698cb5
• cluster-update-keys git be6ba5b0 sha256:ab6226a85479d61d4196999883faa353546cdf8a654494837d77fca6a63a3a62
• configmap-reloader git 617398f5 sha256:7fae833a63238220faa2ca1fa7c6e18f45f7417152f1381f9535607bd3d47e8b
• container-networking-plugins git c6cfbfe3 sha256:0ae437f7fe928a5b256b3c8bc23c710d9b34920a142dc61bea0672cf3b9238b9
• csi-driver-nfs git d032dc10 sha256:013c9fb4aeba3b164499da3ff54ecb812b297ea53e7919a1bc6cec7785fcb475
• csi-external-attacher git f806f266 sha256:81ba10c40b9b2e0f0634c09d271bef764957de55612399fb25f77a996b49b97b
• csi-external-resizer git 3b4236d3 sha256:7a6900714178b335114651b20993a0fb18c52a5fb27333ad480b04693efb9e4b
• csi-livenessprobe git 240bb8c0 sha256:109f075621271bfc18732e044765c15542ad7d4f7729c409a00e4cd4bbf1642b
• csi-node-driver-registrar git 9005584e sha256:3d86b41c3042e71969d8d43398d6af7a7d13406714cc6dbfbf58ce8ed9198758
• egress-router-cni git 39ea8ee1 sha256:1082e7c205f29034031ed11d3a45e53e9b98e7076a221d5c0bbc74d403938bc0
• gcp-machine-controllers git b15daaf5 sha256:08c6409409230db22ba5962fbeeba95368f659ae514f52b79d4fe94d4dfda774
• gcp-pd-csi-driver git 856ee3e2 sha256:9c9c588a33cb519c76e6a972480d75aeadf51e25790c51bc25aa9916f3c384f8
• haproxy-router git b7001137 sha256:d13a78f6da1a924beb5178da7e509335a38a918474f1b6f791dcdfd6d93239a4
• ibm-vpc-block-csi-driver git ce7f53cd sha256:7bd69dd09c1e1016f1d9eb56e10b1e2e44463e819bf771c40eab1442cb5f075b
• ibm-vpc-node-label-updater git e1a0adca sha256:3ed4176d476819948bdb1b6da2b7794dd3ace5b39bf92585f5462b82634adac5
• ibmcloud-machine-controllers git 6b0b8ea7 sha256:f34d42a1a884a0446c61c00db835c58e0762e86d248f6e8a2daf303da8ee1390
• ironic-machine-os-downloader git bcbcd95b sha256:eb88af557b11af855005b8183814ee334e1b1ae68e193662ce1d56ff2e924d04
• ironic-static-ip-manager git 47200021 sha256:0e4979748716925042555013c6b146389cd1ca9e0403c4c5197ef69d35e74930
• k8s-prometheus-adapter git c38187e7 sha256:0a1753a57453c8c2ebe161e9cb9e397c38e43a0706863943302c73c4ca8e52bf
• keepalived-ipfailover git 5d1de7f1 sha256:accd8d1ee0ead091e6505e90a2a62aec9b039da213e6868ed6a5a18e376f1f69
• kube-metrics-server git bcbf241c sha256:971eba9b22e1b6a21371607cf51da2673537ea186d7cef446d549adf334dfc8b
• kube-rbac-proxy git e8e8c84b sha256:e5f868e7542c8811bce53bb1bd928693e16e41d91f3495d233908f96f8e2a77b
• kube-state-metrics git 037b59c2 sha256:7c840bf1cfbcce34df248f96497efdf48d085ae2d2fcae89d8f82609f381168e
• kubevirt-cloud-controller-manager git e465e606 sha256:bc943eda8302fd872143c3b8a068793849fa6e8a19e7a87ea801aad6510f60f9
• kubevirt-csi-driver git aea7be8e sha256:755c08ed2a02c0218f3ab49fa6c61e743534065944ea0331f91bf5a32d339fbb
• machine-image-customization-controller git 97d87657 sha256:8dfb530b48353bb04db90cfbc742314ee920309d83f5b50195952802111d2a1d
• machine-os-content sha256:c1f26da1dbc62b8f4558560b8e617bfb4bdb4cb9c3bae7ff1a8887e61c1b533a
• machine-os-images git 9e9c920f sha256:494c4219045dd6201d7be8310a283980b8f2c51002c0b5e4ea7f38ca610ece03
• multus-admission-controller git 23a7cfe4 sha256:0d209b03a94871f515f7ca374e3454d424c4471fd634e1e0e619000df70cb449
• multus-route-override-cni git a5b755b5 sha256:2821f0c082ad168e1002cf00e74536e124db6e88d1388558ca4841b7bcf99d22
• must-gather git 47335065 sha256:307c4fd2a20b2139abd26dbd00bdfec923ff8fc2cde992ff8f4f487b4bbb167d
• network-interface-bond-cni git f91decaa sha256:90ee7e7edb841720c5eb9fc92e03adf4441800220d58cc20233ca034d2e1ec87
• network-tools git be5b7d06 sha256:04b4d43c1a1e1cf3b4b7ecf87d3a4028439066b3ca1279945281d15f2babd02a
• nutanix-machine-controllers git d422f92e sha256:d3c44402eaf04b7fdbd3637f01d04f63e40fc086c59c835fdc77f4e0d0ed601a
• oauth-proxy git 241a88c4 sha256:d7f9e38f989730cfe26ca5c15af9cfe4ff4c22264dad2b41a783950c3355cf84
• oauth-server git 8296c054 sha256:09147d52771a6f9bfcd97cd86d365e3f0dea6a542e9ca054aa3c040c58fd6fdf
• openshift-state-metrics git 1915f645 sha256:68cbf1872625f6e40b80954f344e2552ec1c54aff2d4113b810354b53f93857f
• openstack-machine-api-provider git 316f6cb6 sha256:47026e5a52843d4e5fa4ecef141ac6a6d188dad9276a27de55c01b01938fa3e9
• operator-marketplace git 53c124a3 sha256:86d63a1083f5ba6aaf57db4b81ca89b299b30ff342c378da3269adcd0247aeab
• ovirt-csi-driver git b8d25ad6 sha256:6823ecb32af29a7bde9c7c798d9d13d90ba6fa21b5572756d4f4c6232541a2be
• ovirt-csi-driver-operator git e9b0fa23 sha256:985b50fb4aa801b7485d0d7dca4d2961a5d6aa442831453c0bda97e33b3d3c0b
• ovirt-machine-controllers git 5d708631 sha256:3a2a6363a2ed12f79f1ea00907783f21bffe7d06208ba016cfd52fd99be26c0c
• powervs-cloud-controller-manager git 521b80df sha256:ddc75fb5537dddca396d83256aa98af268a5873ae0ff81f0f873bef4f9403768
• prom-label-proxy git f3f1f5d1 sha256:2ea7226ab269e7f01a26f6744a34b92a0d91f71ea7ea35833943b9d407c17616
• prometheus git 6828e446 sha256:9e285e316dd9c7cd3ed220309ddd2a5fa6e67faad1121e0344267fa8c9f644c5
• prometheus-alertmanager git 870ade52 sha256:82d2e44213ea038a5f6622a742dd7efeed4d26d3c8a21f8909f6fde1581e4c5e
• prometheus-config-reloader git b558bb39 sha256:e9b19f468a64610f1d13a53161f869964334aee64f8728a1cd9494f962c36923
• prometheus-node-exporter git aed837c3 sha256:0a6c78bb69e1e5e2e9d0a7b4ab46d0209ba87335dbaac5359b289cccbe9170ab
• prometheus-operator git b558bb39 sha256:b9571fbd4cd99015d4ae011fe688f4d26dddfe707ade72b44b07e552bd3370dd
• prometheus-operator-admission-webhook git b558bb39 sha256:85fa86df1ed46235127d485e9617fffd66f030075bb6b5b5a2d1fce5ac2bf014
• rhel-coreos sha256:a0bbd3520a99b3cc5357bbe2ad0ba754768d305f47ea53491941b7e6d427d2e8
• rhel-coreos-extensions sha256:6d5c68432047d2d22507490445e4565cee7dad3c08554925e5670c4473897734
• route-controller-manager git c5cc7a73 sha256:cfa1b66f9f10488a33c4a8ae31749a2cd01a6e5a6b9ef510e9211b9412e1bba0
• thanos git 66161ad4 sha256:3f54b521d26c2235c842b60e1296be5aaaeb8950e06d0527d80950df393a84b7
• vsphere-cloud-controller-manager git d2af6982 sha256:5b6fb6eb3656ed4170e3b73a0a2e456d0a6f4d6f296f4d91609921df5955998d
• vsphere-cluster-api-controllers git b21c0ba9 sha256:5b575f7a3eee8fc847ee41fcc4e9a42979d07a17a56b1611880603017172afd6

agent-installer-api-server

• MGMT-16494: Move ip hint file creation to ignition in order to change it in IBI process (#5926) #5926
• OCPBUGS-24428: Redact passwords logged in installConfigOverrides Ensure that any passwords included in installConfigOverrides are redacted in logs. (#5905) #5905
• MGMT-16414: When trying to create cluster with s390x architecture, an error occurs that stops cluster creation (#5876) #5876
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• OCPBUGS-25718: Do not remove uninitialized taints if vSphere (#785) #785
• Full changelog

alibaba-cloud-controller-manager

• OCPBUGS-23697: Add Snyk file to exclude vendor directory on scan #48
• OCPBUGS-21984: Bump golang.org/x/net to v0.19.0 #41
• Full changelog

alibaba-disk-csi-driver-operator

• OCPBUGS-25355: setting TLSSecurityProfile with no minTLSVersion crashes controller #82
• OCPBUGS-25161: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #76
• Full changelog

alibaba-machine-controllers

• OCPBUGS-24124: Updating ose-alibaba-machine-controllers-container image to be consistent with ART #47
• Full changelog

apiserver-network-proxy

• OCPBUGS-24165: Updating ose-apiserver-network-proxy-container image to be consistent with ART #44
• Full changelog

aws-cloud-controller-manager

• OCPBUGS-27486: Adds ecr-credential-plugin .spec #70
• OCPBUGS-26060: bump go.opentelemetry.io #64
• Full changelog

aws-ebs-csi-driver

• OCPBUGS-25824: UPSTREAM: 1877: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #253
• OCPBUGS-25601: UPSTREAM: 1858: Bump otelhttp to fix CVE-2023-45142 #251
• Full changelog

aws-ebs-csi-driver-operator

• OCPBUGS-26195: Create RBAC objects first #93
• OCPBUGS-25995: Add selinux #91
• OCPBUGS-25355: setting TLSSecurityProfile with no minTLSVersion crashes controller #90
• OCPBUGS-25161: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #82
• Full changelog

azure-disk-csi-driver

• OCPBUGS-25768: UPSTREAM: 2132: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #72
• Full changelog

azure-disk-csi-driver-operator

• OCPBUGS-25355: setting TLSSecurityProfile with no minTLSVersion crashes controller #121
• OCPBUGS-25161: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #114
• Full changelog

azure-file-csi-driver

• OCPBUGS-25697: UPSTREAM: 1626: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #50
• Full changelog

azure-file-csi-driver-operator

• OCPBUGS-25355: setting TLSSecurityProfile with no minTLSVersion crashes controller #95
• OCPBUGS-25161: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #89
• Full changelog

azure-machine-controllers

• OCPBUGS-29007: Don’t create availability set when using spot instances #95
• OCPBUGS-27758: Improving performance of VMs created in Azure #93
• Full changelog

azure-workload-identity-webhook

• OCPBUGS-22003: Upgrade golang/x/net for CVE-2023-39325 (4.15) #13
• Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

• OCPBUGS-29585: PowerVS: handle composite_instance #8032
• OCPBUGS-29620: Power VS: Fix service instance list #8035
• OCPBUGS-29523: Bump terraform-provider-ibm to v1.61.0 #8026
• OCPBUGS-29436: PowerVS Fix next start search #8013
• OCPBUGS-29442: update RHCOS 4.15 bootimage metadata to 415.92.202402130021-0 #8016
• OCPBUGS-29219: GCP: Skip validation of public and private zones for terraform vars #7994
• OCPBUGS-29201: Copy GCP manifests within MCO bootstrap to the correct location #7993
• OCPBUGS-28822: aws-edge-zones preventing err before discovering #7973
• OCPBUGS-29117: IBMCloud: Handle disk delete errors #7984
• OCPBUGS-26036: ic: aws: add iam:TagInstanceProfile permission requirement #7866
• OCPBUGS-28779: update tested Azure Arm64 instance type on 4.15 #7971
• OCPBUGS-28546: [release-4.15] Bump containerd for vulnerability fix #7957
• OCPBUGS-27346: Warn that FeatureSet is not supported #7922
• OCPBUGS-27417: baremetal: gather all recently refactored services #7928
• OCPBUGS-27380: set the –cluster-profile flag for openshift/api rendering #7955
• OCPBUGS-27894: duplicate failure domains in CMPS #7951
• OCPBUGS-27329: remove retired serial NCv2 from azure tested instance type list on x86 #7921
• OCPBUGS-27850: PowerVS: COS region configurable #7948
• OCPBUGS-27814: [release-4.15] CORS-2950: Remove openshift-sdn as an install-time option #7935
• OCPBUGS-25251: Changed OKD/FCOS workaround to also support Agent-based Installer #7830
• OCPBUGS-27299: Power VS: Add eu-de-1, eu-de-2, sao04, and wdc07 as supported zones #7913
• OCPBUGS-26515: preserve category name when trying to find tag category #7885
• OCPBUGS-27311: Fix depreciated typo #7912
• OCPBUGS-26495: Fix typo in CloudCredential validation #7916
• CORS-3166: GCP: Add load balancer info to cluster infra #7903
• OCPBUGS-27188: Redact platform passwords in agent-gather output #7910
• CORS-3168: build: only rebuild terraform providers if needed #7853
• OCPBUGS-27148: baremetal: correct external_http_url for v6-only BMCs #7906
• CORS-3166: GCP: Update DNSType within GCP PlatformStatus based on UserProvisionedDNS #7882
• OCPBUGS-26495: Add cloud credential capability validation #7890
• OCPBUGS-26511: Bump default channel to 4.15 #7883
• OCPBUGS-26051: aws: validate instance arch #7868
• OCPBUGS-25990: Fixes for the OpensStack UPI playbooks. #7863
• OCPBUGS-24679: Modify the terraform variables to support Nutanix Failure Domains #7813
• OCPBUGS-25463: IBMCloud: Set IBM TF visibility based on URLs #7844
• Full changelog

baremetal-machine-controllers

• OCPBUGS-28838: Extend metal3remediation aggregation role #210
• Full changelog

baremetal-runtimecfg

• OCPBUGS-24070: Updating ose-baremetal-runtimecfg-container image to be consistent with ART #289
• OCPBUGS-26927: Add .snyk file to ignore vendor and test files #293
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-28204: Add RHEL9 and RHEL8 based oc as new targets in command extraction #1672
• WRKLDS-1041: oc login: Built-in cred exec plugin implementation and wiring #1658
• Full changelog

cloud-credential-operator

• OCPBUGS-29113: ccoctl - use proxy when validating CloudFront URL #674
• OCPBUGS-27910: Resolve all outstanding snyk vulnerabilities #649
• OCPBUGS-27901: Use cached clients to avoid client side throttling #660
• OCPBUGS-27919: Report manualpodidentity mode in metrics when using Azure Workload Identity #661
• OCPBUGS-27117: Write manifests when AWS IAM roles already exist. #653
• OCPBUGS-26510: Use live client for metrics #646
• Full changelog

cluster-authentication-operator

• NO-JIRA: _output - remove dir #652
• OCPBUGS-27225: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #647
• OCPBUGS-24081: Updating ose-cluster-authentication-operator-container image to be consistent with ART #643
• Full changelog

cluster-autoscaler

• OCPBUGS-27750: Fix unstructured taint parsing in Cluster API provider #282
• OCPBUGS-23576: Add Snyk file to exclude vendor directory on scan #275
• Full changelog

cluster-autoscaler-operator

• OCPBUGS-23706: Add Snyk file to exclude vendor directory on scan #307
• Full changelog

cluster-baremetal-operator

• OCPBUGS-29153: manifests/0000_31_cluster-baremetal-operator_06_deployment: Enable leader election #402
• Full changelog

cluster-bootstrap

• OCPBUGS-24147: Updating ose-cluster-bootstrap-container image to be consistent with ART #101
• Full changelog

cluster-capi-operator

• OCPBUGS-28754: Start operator controllers only on supported platforms, add unsupported controller #158
• OCPBUGS-26413, OCPCLOUD-1726: GCP Credential Req. manifest for CAPI to use new API field #155
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-25751: Add Snyk file to exclude vendor directory on scan #314
• OCPBUGS-26480, OCPCLOUD-1724: GCP Credentials req. manifest of CCMO to use new API field #320
• OCPBUGS-26210: Adds CloudConfigTransformer for Azure #319
• Full changelog

cluster-config-api

• OCPBUGS-29435: allow multiple audiences to be configured for kube-apiserver #1772
• OCPBUGS-29074: Move network.config conditions to GA #1756
• NP-905: [release-4.15] Promote Live Migration to GA #1749
• OCPBUGS-28902: Allow modified IPv6 address as CPIC name #1750
• OCPBUGS-27380: add separate authentication config manifest for hypershift #1743
• OCPBUGS-27380: respect the cluster profile in rendering #1735
• OCPBUGS-27186: CNO IPsec API #1719
• Add generated featuregate files inertly to payloads #1723
• OCPBUGS-26441: disable psa #1717
• CORS-3029: Add Cloud LB IPs to GCP PlatformStatus of Infrastructure CR #1705
• Full changelog

cluster-config-operator

• OCPBUGS-28622: Add required PSa labels #402
• Full changelog

cluster-dns-operator

• OCPBUGS-20024: Enable topology-aware hints iff nodes in >=2 zones #399
• Full changelog

cluster-etcd-operator

• OCPBUGS-24087: Updating cluster-etcd-operator-container image to be consistent with ART #1169
• Full changelog

cluster-image-registry-operator

• OCPBUGS-29638: azurepathfix: fix stack hub, government and workload identity setup #1004
• OCPBUGS-29525: move azure storage blobs from docker back into /docker #1000
• OCPBUGS-28830: pkg/storage/s3: enable bucket key on encryption settings #994
• OCPBUGS-26936: MULTIARCH-4074: PowerVS: update supported regions #988
• OCPBUGS-26063: IBMCloud - Add support for endpoint overrides #984
• OCPBUGS-25460: add private endpoint permissions to Azure credentials request #978
• Full changelog

cluster-ingress-operator

• CORS-3169: Add Ingress LB IPs to Infra CR and set DNS unmanaged when BYO DNS is enabled #1022
• OCPBUGS-26544: Replace GCP role with explicit permissions #1015
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-28882: Add sno section to alert description #1636
• OCPBUGS-27491: webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator #1628
• OCPBUGS-24098: Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART #1589
• OCPBUGS-18761: revert dev cert rotation in 4.15 #1598
• Full changelog

cluster-kube-cluster-api-operator

• OCPBUGS-23711: Add Snyk file to exclude vendor directory on scan #34
• OCPBUGS-24085: Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART #31
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-27225: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #790
• Full changelog

cluster-kube-storage-version-migrator-operator

• OCPBUGS-24156: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART #100
• Full changelog

cluster-machine-approver

• OCPBUGS-27758: Increase concurrent reconciles to 10 #226
• Full changelog

cluster-monitoring-operator

• OCPBUGS-28703: rollout metrics-server on cert rotations #2249
• OCPBUGS-25322: go.mod: bump prometheus-operator to v0.70.0 #2201
• Full changelog

cluster-network-operator

• OCPBUGS-29299: Update ingressconfig_controller to use field Manager #2265
• OCPBUGS-28902: Fix CloudPrivateIPConfig CRD in common #2263
• OCPBUGS-29082, OCPBUGS-29150: Remove libreswan rpm existence checks #2255
• OCPBUGS-28778: add env var in whereabouts-reconciler daemonset #2242
• OCPBUGS-27421: Only reconcile on Node updates with Label changes #2212
• OCPBUGS-27199: Remove egressip write permissions from ovn-kubernetes-node #2203
• OCPBUGS-27174: network node identity: tolarate all taints #2202
• NP-905, OCPBUGS-28902: Bump openshift API #2247
• OCPBUGS-28904: [release-4.15] Restrict live migration to standalone managed clusters #2243
• NO-JIRA: add kyrtapz as reviewer and approver for release 4.15 #2227
• OCPBUGS-28214: Not update migration conditions when any MCP is updating #2223
• OCPBUGS-27777: Deploy CNO IPsec MC even if user already have one #2215
• OCPBUGS-25652: fix whereabouts conformance test failures #2168
• OCPBUGS-27748: [release-4.15] Add ConfigMap mount to the whereabouts-reconciler #2214
• OCPBUGS-27198: [release-4.15] Update ovn-k managed control-plane RBAC #2204
• OCPBUGS-27286: Use specific permissions for CNCC in GCP #2190
• OCPBUGS-27001: Keep the live migration annotation consistant with the enhancement doc #2194
• OCPBUGS-27186: Ns ipsec 4.15 #2200
• OCPBUGS-25864: HyperShift, network-node-identity: Check the deployment in the management cluster #2180
• OCPBUGS-24036: remove all managed fields used by old manager #2167
• OCPBUGS-25312, OCPBUGS-25921: Avoid removal of ipsec-host daemonset when node is NotReady #2181
• OCPBUGS-24148: Updating cluster-network-operator-container image to be consistent with ART #2133
• OCPBUGS-22710: Set enable-multi-external-gateway flag in ovnkube.conf #2158
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-29376: Mixed CPUs e2e tests (#952) #952
• OCPBUGS-27227: irqbalance: set banned cpus list to ‘0’ (#953) #953
• OCPBUGS-29396: Labels for e2e testing (#949) #949
• OCPBUGS-29376: e2e: cgroups: introduce cgroup package (#942) #942
• makefile: add target to trigger mixedcpus e2e test (#941) #941
• OCPBUGS-27948: Tuned rendering and MCP detection improvements (#928) #928
• OCPBUGS-25982: E2E: Add tests for Dynamic ovs pinning (#904) #904
• rps: fail silently when rps application failed (#897) #897
• OCPBUGS-25596: Make MC names deterministic (#888) #888
• OCPBUGS-25552: rps: fix mask update for SR-IOV devices (#886) #886
• Full changelog

cluster-olm-operator

• OCPBUGS-25399: [release-4.15] NO-ISSUE: Bump k8s.io/apiextensions-apiserver #40
• Full changelog

cluster-openshift-apiserver-operator

• OCPBUGS-27225: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #567
• OCPBUGS-24145: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART #560
• Full changelog

cluster-openshift-controller-manager-operator

• OCPBUGS-28946: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #327
• Full changelog

cluster-platform-operators-manager

• OCPBUGS-24077: Updating ose-cluster-platform-operators-manager-container image to be consistent with ART #104
• Full changelog

cluster-storage-operator

• OCPBUGS-28817: Allow vSphere CSI driver to be disabled #446
• OCPBUGS-27017: replace instanceAdmin role with specific compute permissions #439
• Full changelog

cluster-version-operator

• OCPBUGS-27359: CO health: only track current in-progress upgrade start #1023
• OCPBUGS-26607: clusterOperatorBuilder: Reconcile metadata on COs #1017
• OCPBUGS-25949: pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls #1013
• OCPBUGS-25664: pkg/cvo/sync_worker: Verification-failure details for unforced updates too #1007
• OCPBUGS-25690: pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream #1008
• Full changelog

console

• OCPBUGS-29345: Any namespace after deletion is still visible on UI if it is the default selection in namespace dropdown #13599
• OCPBUGS-29096: Add TaskRun tab in PLR details page using plugin #13584
• OCPBUGS-29217: Revision tab and routes tab in serving details page showing no resource found #13590
• OCPBUGS-26411: Logs for PipelineRuns fetched from the Tekton Results API is not loading #13486
• OCPBUGS-28537: remove “openshift-storage” namespace usage from the console #13548
• OCPBUGS-29283: Error in displaying BuildRun logs in Console #13595
• OCPBUGS-28917: Optimize federation of shared PF5 code for dynamic plugins #13566
• OCPBUGS-29022: fix i18n for Remove volume modal #13575
• OCPBUGS-28940: AUTH-440: fix usersettings identifier creation #13571
• OCPBUGS-27012: update check for the ‘provider’ label on the PackageMa… #13501
• AUTH-440: OIDC: refresh sessions with a refresh token if present #13563
• OCPBUGS-28591: Fixed bug with user feedback where inform the direction of RedHat was not showing up #13551
• CONSOLE-3829, OCPBUGS-27235: backend: use the k8s SelfSubjectReview API to get info about a user #13514
• OCPBUGS-27896: Add flags checks to hide Pipeline static plugin List and details pages #13536
• AUTH-440: expand options for the OIDC authenticator #13509
• OCPBUGS-27909: fix bug where Expand PVC modal assumes pvc.spec.resou… #13542
• OCPBUGS-26439: Add support for custom segment domains (to load JS and make API calls) #13489
• OCPBUGS-27177: fix bug where Clone PVC modal assumes pvc.spec.resourc… #13508
• OCPBUGS-27306: Copy response code from proxied plugin requests #13518
• OCPBUGS-26591: add additional check to determine if file is binary #13499
• OCPBUGS-24812: Add missing https:// check for an external link #13433
• OCPBUGS-26516: bump helm version to 3.13.2 for OCP 4.15 #13465
• OCPBUGS-26041: fix bug where Update cluster modal will not open #13479
• OCPBUGS-26209: Fix PipelineRun Logs tab navigation #13484
• OCPBUGS-25726: Re-enable and fix pipelines e2e tests #13463
• OCPBUGS-25706: update the checks for showing Archived to Tekton results icon for PLRs and TRs list and details page #13461
• OCPBUGS-25707: fix Observe tab in Topology overview #13462
• OCPBUGS-24668: Follow on logic for only showing VPAs associated with a deployment for a specific project #13447
• OCPBUGS-24668: Only show VPAs that are associated with the selected namespace #13426
• OCPBUGS-25324: fix preferredTab selection on Pipelines page #13443
• OCPBUGS-24680: Backport Add support for Azure Workload Identity / Federated Identity #13428
• Full changelog

console-operator

• OCPBUGS-29658: oauthclients: further split oidc and integrated oauth handling #870
• always sync oidcClients in authn status if the field is present #859
• OCPBUGS-29010: oauthclients: fix oauthclients degraded condition that never gets removed #856
• CONSOLE-3912: OAuthClients: only add oidcClients to authentication status if the field exists #854
• CONSOLE-3912: OIDC: setup the volume name properly when custom CA is configured #853
• OCPBUGS-22681: Bump documentationBaseURL to 4.15 #807
• CONSOLE-3912: Add secrets for session encryption/authentication in OIDC #852
• pick of OCPBUGS-27221: make it impossible double set conditions in a single loop #851
• OCPBUGS-27221: Bump library-go to deal with GET conflict #837
• OCPBUGS-24104: Updating openshift-enterprise-console-operator-container image to be consistent with ART #818
• Full changelog

coredns

• OCPBUGS-27904: UPSTREAM: 6277: openshift: Fix OCPBUGS-27904 #110
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• Make sure we don’t mask LB tests failures and fix what was failing (#2360) (#2537) #2360
• Remove handling code for glog (#2534) #2534
• Bump golangci-lint for go 1.22 (#2545) #2545
• Delete LB that gone into ERROR state (#2536) #2536
• Add ability to add Events by OCCM (#2539) #2539
• Lookup ports by SG and not tags (#2355) (#2538) #2355
• retry ubuntu image download on temp error (#2506) #2506
• update k8s.io/kubernetes to v1.28.4 in go.mod (#2496) #2496
• Implement imagePullSecret support for release 1.28 (#2445) #2445
• fix: octavia tlsContainerRef validation for barbican secrets (#2458) #2458
• Remove duplicate pflag.Parse calls (#2467) #2467
• manage-security-groups: Only add SGs to LB members (#2455) (#2466) #2455
• Use standard service account name in OCCM helm chart (#2447) #2447
• 1.28.1 release (#2426) #2426
• delete barbican secret after the LB deletetion (#2424) #2424
• ensure octavia monitor is always updated (#2382) #2382
• add max_retries_down support for octavia health monitors (#2379) #2379
• Fix multiarch builds of Cinder CSI (#2342) #2342
• update tags (#2336) #2336
• Full changelog

csi-driver-manila-operator

• OCPBUGS-25355: setting TLSSecurityProfile with no minTLSVersion crashes controller #221
• OCPBUGS-25161: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #216
• Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

• OCPBUGS-28944: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #166
• OCPBUGS-26758, OCPBUGS-26759: add snyk config file for SAST scan #162
• Full changelog

csi-driver-shared-resource-operator

• OCPBUGS-28956: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #102
• OCPBUGS-27035: add snyk config file for SAST scan #96
• Full changelog

csi-external-provisioner

• OCPBUGS-25698: UPSTREAM: 1132: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #86
• Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

• OCPBUGS-29336: cherry-pick:release-4.15: OCPBUGS-29244 Update VolumeSnapshot and VolumeSnapshotContent using JSON patch #143
• OCPBUGS-25521: Updating ose-csi-external-snapshotter-container image to be consistent with ART #134
• Full changelog

docker-builder

• OCPBUGS-28948: Replace ‘coreydaley’ with ‘sayan-biswas’ #378
• Full changelog

docker-registry

• OCPBUGS-29525: bump docker-distribution to fix azure path issue #393
• Full changelog

driver-toolkit

• Add support for 64k pages with ARM64 (#141) #141
• Full changelog

etcd

• OCPBUGS-24933: Rebase etcd 3.5.11 openshift 4.15 #232
• Full changelog

gcp-cloud-controller-manager

• OCPBUGS-25947: Fix changing load balancer scope #56
• OCPBUGS-25808: Add Snyk file to exclude vendor directory on scan #55
• Full changelog

gcp-cluster-api-controllers

• OCPBUGS-23650: Add Snyk file to exclude vendor directory on scan #217
• Full changelog

gcp-pd-csi-driver-operator

• OCPBUGS-26993: Increase data source provision timeout #114
• OCPBUGS-25355: setting TLSSecurityProfile with no minTLSVersion crashes controller #108
• OCPBUGS-25161: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #102
• Full changelog

hyperkube, pod

• OCPBUGS-29435: structuredAuthenticationConfig for kube 1.28-ish #1884
• OCPBUGS-27343: UPSTREAM: <carry>: Update management webhook pod admission logic #1854
• OCPBUGS-28209: UPSTREAM <carry>: use snyk file #1873
• AUTH-439: loosen authentication.spec.type validation #1878
• OCPBUGS-27368: Update to kubernetes 1.28.6 #1857
• OCPBUGS-25812: Fix device uncertain errors on reboot - 4.15 #1832
• OCPBUGS-26068: Backport CEL IP and CIDR validations #1843
• OCPBUGS-26005: Update to Kubernetes 1.28.5 #1837
• Full changelog

hypershift

• OCPBUGS-29435: Use structured authentication config #3607
• OCPBUGS-28543: Include OperatorHubSpec sync with HC when Config is empty #3480
• OCPBUGS-29508: Default NodeUpgradeType on day2 nodepool creation #3582
• MULTIARCH-4084: Reduce the policy access scope to specific instance #3529
• NO-JIRA: Approvers update #3579
• OCPBUGS-27149: Add storage, csisnapshotcontroller and clustercsidrive… #3421
• OCPBUGS-29416: hypershift-operator: don’t create PKI rbac when disabled #3565
• OCPBUGS-29418: control-plane-pki-operator: add a signer for SRE break-glass #3566
• OCPBUGS-29089: Make ControllerAvailabilityPolicy immutable #3533
• OCPBUGS-29310: control-plane-pki-operator: validate CN for CSR #3558
• OCPBUGS-29303: release-4.15: revocation controller backport #3532
• OCPBUGS-29020: reduce external-dns route53 call volume #3521
• OCPBUGS-29179: [4.15] reflect NodePool replica count nil in status #3473
• NO-JIRA: remove unneeded code to copy Authentication refs #3537
• OCPBUGS-29029: Add ValidatingAdmissionPolicy to KAS config #3523
• OCPBUGS-28764: node spread anti-affinity for HA HCP #3495
• OCPBUGS-28603: Remove webhook validations that introduce resource ordering #3515
• OCPBUGS-28594: backport API moves #3482
• HOSTEDCP-1272: Added CLI support to create DualStack clusters using default values #3502
• OCPBUGS-27818: Add GC knobs for KAS #3457
• OCPBUGS-27103: hcco: use manual mode for CCO #3420
• NO-JIRA: kubevirt, e2e Add additional network test #3499
• CNV-37394: Remove ‘–attach-default-network’ from productized cli #3500
• OCPBUGS-27380: indicate cluster profile to render the correct manifests #3465
• OCPBUGS-28235: Required RBAC for network-node-identity is not created when hosted cluster networkType is set to Other. #3467
• OCPBUGS-27432: consider HCP upgradeable if CVO has no upgradable condition #3444
• HOSTEDCP-1374: external OIDC: copy Authentication OIDC client secrets through to guest #3393
• OCPBUGS-27076: availability-prober: wait for infrastructure name to be set #3419
• OCPBUGS-27155: Change KAS bootstrap image to cluster-config-api #3423
• OCPBUGS-27071: Apply Scheduling Configuration for kCCM #3417
• OCPBUGS-26600: set KAS runtime-config in alignment with feature gates #3399
• OCPBUGS-26412: Set new condition on SG deletion. #3381
• OCPBUGS-26410: Disable UWM Telemetry remote writer when MGMT cluster is disconnected #3380
• OCPBUGS-26410: Disable UWM Telemetry writer when telemeter-client cm not exists #3379
• OCPBUGS-26223: hostedcontrolplane: don’t start pki operator when disabled #3376
• OCPBUGS-25782: Added support for OLM Disable default sources on HC creation #3321
• CCO-511: control-plane-operator: reconcile the CCO #3336
• NO-JIRA: no-op empty commit publish HO 4.15 to MCE 2.5 #3338
• Full changelog

ibm-cloud-controller-manager

• OCPBUGS-23610: Add Snyk file to exclude vendor directory on scan #64
• Full changelog

ibm-vpc-block-csi-driver-operator

• OCPBUGS-25604: Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelgrpc to v0.46 #103
• OCPBUGS-25161: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #99
• Full changelog

ibmcloud-cluster-api-controllers

• OCPBUGS-25507: update golang.org/x/crypto module #78
• OCPBUGS-23685: Add Snyk file to exclude vendor directory on scan #72
• Full changelog

insights-operator

• Add extra check in ids to bypass validations (#901) #901
• gather etcd_server_slow metrics (#900) #900
• Updating ose-insights-operator-container image to be consistent with ART (#884) #884
• Full changelog

ironic

• OCPBUGS-27772: Update packages to include most recent bug fixes #450
• OCPBUGS-27060: Fix Inspector iPXE config for IPv6 addresses #447
• OCPBUGS-24648: Stuck deployment #439
• OCPBUGS-25606: Relax packages requirements #442
• Full changelog

ironic-agent

• OCPBUGS-28756: Always add ignition to set hostname on /etc/hostname #108
• OCPBUGS-27781: Update ironic-python-agent with latest bug fixes #105
• OCPBUGS-25351: 502 proxy error #99
• OCPBUGS-25684: Relax packages requirements #102
• Full changelog

kube-proxy, sdn

• OCPBUGS-28580: Move sdn to RHEL9 base image (attempt #2) #617
• OCPBUGS-28580: Revert #613 “OCPBUGS-28580: Move sdn to RHEL9 base image” #616
• OCPBUGS-28580: Move sdn to RHEL9 base image #613
• OCPBUGS-28549: Add Snyk file to exclude directories on scan #614
• OCPBUGS-27459: Metrics: Add metric for multicast enabled netnamespaces #606
• Full changelog

kube-storage-version-migrator

• OCPBUGS-24142: Updating ose-kube-storage-version-migrator-container image to be consistent with ART #201
• Full changelog

libvirt-machine-controllers

• OCPBUGS-26045: Replace genisoimage with xorriso in 4.15 to allow rhel9 bump #272
• OCPBUGS-25772: Add Snyk file to exclude vendor directory on scan #278
• Full changelog

machine-api-operator

• OCPBUGS-28762: Add additional vnet join permission for Azure #1216
• OCPBUGS-27758: Set –max-concurrent-reconciles=10 for Azure machine controller #1210
• OCPBUGS-27758: Add AddWithActuatorOpts to allow overriding Machine controller options #1209
• OCPBUGS-27405: Add useExternalIp gcp permission #1207
• OCPBUGS-26406, OCPCLOUD-1725: Add GCP custom roles #1196
• OCPBUGS-25734: Add Snyk file to exclude vendor directory on scan #1193
• Full changelog

machine-config-operator

• OCPBUGS-29038: Add existing kubeletconfig/ctrcfg mc-name-suffix annotation #4166
• OCPSTRAT-1062: [4.15] crio: enable log linking by default in 4.15 #4174
• OCPBUGS-29105: On-prem coredns manifests should not be generated for GCP #4169
• OCPBUGS-28909, OCPBUGS-28910: Run resolv-prepender entirely async #4161
• CORS-3169: Add support for in-cluster DNS on Cloud Platforms when cloud DNS cannot be used #4155
• OCPBUGS-28237: daemon: allow the user to override drains on IR changes #4148
• OCPBUGS-27486: Add Image Credential Provider flags for Kubelet on AWS #4134
• OCPBUGS-27307: Fix typo in AWS node env unit #4130
• OCPBUGS-25424: Add \n in cert_writer for old cert methods and skip cloudCA validation #4077
• OCPBUGS-26240: Azure Run ovs-configuration.service before dnsmasq.service #4101
• OCPBUGS-25948: kubelet: fix kubelet labels #4090
• Full changelog

monitoring-plugin

• OCPBUGS-27202: upgrade follow-redirects parent dependency #94
• OU-318: consider all metric keys to display all results on dashboards tables #97
• OU-312: Revert “fix default nginx path to look for static files” #93
• OCPBUGS-25643: On the alert details page, don’t require all alert labels in URL #89
• Full changelog

multus-cni

• OCPBUGS-22839: Adds a wait on unix socket readiness [backport 4.15] #210
• OCPBUGS-26535: Revert #206 “Adds a wait on unix socket readiness [backport 4.15]” #209
• OCPBUGS-22839: Adds a wait on unix socket readiness [backport 4.15] #206
• Full changelog

multus-networkpolicy

• Updating ose-multus-networkpolicy-container image to be consistent with ART (#44) #44
• Full changelog

multus-whereabouts-ipam-cni

• OCPBUGS-27748: Enable whereabouts-reconciler configuration 4.15 #239
• OCPBUGS-18893: Assignment error fix #228
• Full changelog

network-metrics-daemon

• Updating ose-network-metrics-daemon-container image to be consistent with ART (#87) #87
• Full changelog

nutanix-cloud-controller-manager

• OCPBUGS-23652: Add Snyk file to exclude vendor directory on scan #27
• Full changelog

oauth-apiserver

• OCPBUGS-21669: bump k8s.io and others (4.15) #99
• OCPBUGS-24132: Updating ose-oauth-apiserver-container image to be consistent with ART #93
• OCPBUGS-27101: UPSTREAM: <carry>: retry etcd Unavailable errors #96
• Full changelog

oc-mirror

• OCPBUGS-27946: Capability to override default channel (#786) #786
• OCPBUGS-27252: Add Type for CopyImageSchema; Skip graph for IDMS; Fix UpdateService (#780) #780
• OCPBUGS-16801: fix: fixes the bug on catalog when using field archiveSize: 1 (#774) #774
• Updating oc-mirror-plugin-container image to be consistent with ART for 4.15 (#776) #776
• OCPBUGS-25346: - oc-mirror on RHEL9 Host with FIPS enabled (#764) #764
• OCPBUGS-24359: Fix including duplicate blobs in archive (#762) #762
• Full changelog

olm-catalogd

• OCPBUGS-27586, OCPBUGS-27671: [release-4.15] bump github.com/go-git/go-git/v5 to v5.11.0 #39
• Full changelog

olm-operator-controller

• OCPBUGS-27591, OCPBUGS-27676: [release-4.15] bump github.com/go-git/go-git/v5 to v5.11.0 #68
• Full changelog

olm-rukpak

• OCPBUGS-27596, OCPBUGS-27681: UPSTREAM: <carry>: Update go-git to v5.11.0 #72
• Full changelog

openshift-apiserver

• OCPBUGS-27101: UPSTREAM: <carry>: retry etcd Unavailable errors #413
• OCPBUGS-24090: Updating ose-openshift-apiserver-container image to be consistent with ART #406
• Full changelog

openshift-controller-manager

• OCPBUGS-28947: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #285
• Full changelog

openstack-cinder-csi-driver-operator

• OCPBUGS-25355: setting TLSSecurityProfile with no minTLSVersion crashes controller #154
• OCPBUGS-25161: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #148
• Full changelog

openstack-cluster-api-controllers

• 🐛 Persist API FloatingIP immediately on creation #1846
• :bug: Fix potential panic during instance create #1808
• fix –short flag is removed issue for CI #1811
• Full changelog

operator-lifecycle-manager, operator-registry

• NO-ISSUE: [release-4.15] Backport flaky CRD upgrade block e2e test fix #694
• OCPBUGS-24159: Updating operator-lifecycle-manager-container image to be consistent with ART #623
• OCPBUGS-29083: * olm,catalog: only validate the resources we label #683
• OCPBUGS-29116: [release-4.15]: Clear (existing) error cond from Subscription, once error resolved #684
• OCPBUGS-27566, OCPBUGS-27571, OCPBUGS-27651, OCPBUGS-27656: bump go-git/v5 to 5.11.0 (#1175) #668
• OCPBUGS-25798: Fix snapshot failure, backport e2es #670
• OCPBUGS-27435: OCPBUGS-25989: operators/olm: filter RBAC lists by namespace #664
• OCPBUGS-26066: [release-4.15] NO-ISSUE: Synchronize From Upstream Repositories #648
• OCPBUGS-25818: NO-ISSUE: Synchronize From Upstream Repositories #644
• OCPBUGS-25798, OCPBUGS-25802: [release-4.15] NO-ISSUE: Synchronize From Upstream Repositories #643
• NO-ISSUE: Update verified directories for microshift-manifests #642
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-29185: Wait for ovnkube controller to start before checking result error. #2064
• OCPBUGS-28725: Update netpol namespace address sets usage to the old ways #2050
• OCPBUGS-29230: [release-4.15] separate the handler sync from the informer sync & remove the full service resync during node tracker startup #2060
• OCPBUGS-28818: Support Permanent Session Affinity #2045
• OCPBUGS-28848: Ignore hybrid-overlay nodes from EgressIP controller #2040
• OCPBUGS-29001: kubevirt, Replace routes on migration #2052
• OCPBUGS-27947: [release-4.15] Fix LGW ETP=Local on IPv6 #2028
• OCPBUGS-27255: Ensure session affinity cleanup on backend removal #2020
• OCPBUGS-25938: CARRY: Updates owners and adds Surya #2005
• OCPBUGS-25395: [release-4.15] Update namespace-owned port group (that used to be managed by multicast) #1998
• OCPBUGS-25486: Fix Egress IP Deletion Handler to Prevent OVN Policy Leaks #1999
• OCPBUGS-25700, OCPBUGS-25701: Dockerfile: Bump OVN to ovn-23.09.0-91.el9fdp #1994
• OCPBUGS-24610: Updating ose-ovn-kubernetes-container image to be consistent with ART #1963
• Full changelog

powervs-block-csi-driver

• OCPBUGS-25978: Rebase with upstream: Fix snyk code issue: Path Traversal #71
• Full changelog

powervs-block-csi-driver-operator

• OCPBUGS-25714: snyk: ignore vendor dir #59
• OCPBUGS-25161: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #56
• Full changelog

powervs-machine-controllers

• OCPBUGS-26555: PowerVS: Bump powervs-utils to v0.0.0-20240105123432-7588e9595c17 #72
• Full changelog

service-ca-operator

• OCPBUGS-24107: Updating ose-service-ca-operator-container image to be consistent with ART #226
• Full changelog

telemeter

• OCPBUGS-24153: Force kill jobs after integration v2 test finish #515
• Full changelog

tests

• OCPBUGS-27847: Do not assume there is just a single kubelet systemd service #28545
• OCPBUGS-29031: Replace ‘coreydaley’ with ‘sayan-biswas’ #28573
• OCPBUGS-26487: Increase timeout for pod-network-service #28508
• OCPBUGS-27934: fix panic in service-poller #28550
• OCPBUGS-26960: updated timeout to 3 seconds to account for network timing issues #28519
• OCPBUGS-27373: pathologicalevents: fix regex in LeakyStatefulsetEvents matcher and add test #28549
• OCPBUGS-27348: pkg/monitortests/clusterversionoperator: Add an exception for ingress going Available=False on IngressUnavailable #28531
• fix jira components to match actual jira components #28455
• OCPBUGS-27373: pathologicalevents: Ignore leaky RecreatingTerminatedP… #28533
• OCPBUGS-27217: [4.15] Live migration suite e2e #28524
• OCPBUGS-26043: Adding test case for when exceed openshift.io/image-tags will ban to … #28492
• OCPBUGS-25724: Cherrypick Ruby 3.0 ImageStream Fix #28483
• TRT-1408: Disable TopologyAwareHintsDisabled check whenever NoExecuteTaintManag… #28520
• OCPBUGS-26239: Properly ignore kube guard probe events #28504
• OCPBUGS-26206: Update cluster-monitoring-operator request limits #28506
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• OCPBUGS-26013: Revert “Merge pull request #97 from jsafrane/rebase-v3.1.1” #110
• OCPBUGS-26074, OCPBUGS-26075, OCPBUGS-26076: [release-4.15]: Fix CVE-2023-45142 and CVE-2023-47108 #109
• OCPBUGS-25856: UPSTREAM: 2714: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #107
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-28817: Mark the operator as Disabled on connection error #219
• OCPBUGS-27378: Rerun checks on reconnect #216
• OCPBUGS-26409: CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 #207
• OCPBUGS-26013: Enable new features to prevent CSI driver from crash looping (revert OCPBUGS-23970) #205
• OCPBUGS-25355: setting TLSSecurityProfile with no minTLSVersion crashes controller #204
• OCPBUGS-25161: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #200
• Full changelog

vsphere-problem-detector

• OCPBUGS-25648: Fix VPD crash when vm is not found #149
• Full changelog

---

View changelog in Markdown or change previous release: 4.15.0-rc.84.15.0-rc.74.15.0-rc.54.15.0-rc.44.15.0-rc.34.15.0-rc.24.15.0-rc.14.15.0-rc.04.14.424.14.414.14.404.14.394.14.384.14.374.14.364.14.354.14.344.14.334.14.324.14.314.14.304.14.294.14.284.14.274.14.264.14.254.14.244.14.234.14.224.14.214.14.204.14.194.14.184.14.174.14.164.14.154.14.144.14.134.14.124.14.114.14.104.14.94.14.84.14.74.14.64.14.54.14.44.14.34.14.24.14.14.14.04.14.0-rc.74.14.0-rc.64.14.0-rc.54.14.0-rc.44.14.0-rc.34.14.0-rc.24.14.0-rc.14.14.0-rc.04.13.544.13.534.13.524.13.514.13.504.13.494.13.484.13.474.13.464.13.454.13.444.13.434.13.424.13.414.13.404.13.394.13.384.13.374.13.364.13.354.13.344.13.334.13.324.13.314.13.304.13.294.13.284.13.274.13.264.13.254.13.244.13.234.13.224.13.214.13.194.13.184.13.174.13.164.13.154.13.144.13.134.13.124.13.114.13.104.13.94.13.84.13.74.13.64.13.54.13.44.13.34.13.24.13.14.13.04.13.0-rc.84.13.0-rc.74.13.0-rc.64.13.0-rc.54.13.0-rc.44.13.0-rc.34.13.0-rc.24.13.0-rc.04.12.704.12.694.12.684.12.674.12.664.12.654.12.644.12.634.12.624.12.614.12.604.12.594.12.584.12.574.12.564.12.554.12.544.12.534.12.524.12.514.12.504.12.494.12.484.12.474.12.464.12.454.12.444.12.434.12.424.12.414.12.404.12.394.12.384.12.374.12.364.12.354.12.344.12.334.12.324.12.314.12.304.12.294.12.284.12.274.12.264.12.254.12.244.12.234.12.224.12.214.12.204.12.194.12.184.12.174.12.164.12.154.12.144.12.134.12.124.12.114.12.104.12.94.12.84.12.74.12.64.12.54.12.44.12.34.12.24.12.14.12.04.12.0-rc.84.12.0-rc.74.12.0-rc.64.12.0-rc.54.12.0-rc.44.12.0-rc.34.12.0-rc.24.12.0-rc.14.12.0-rc.04.11.594.11.584.11.574.11.564.11.554.11.544.11.534.11.524.11.514.11.504.11.494.11.484.11.474.11.464.11.454.11.444.11.434.11.424.11.414.11.404.11.394.11.384.11.374.11.364.11.354.11.344.11.334.11.324.11.314.11.304.11.294.11.284.11.274.11.264.11.254.11.244.11.234.11.224.11.214.11.204.11.194.11.184.11.174.11.164.11.154.11.144.11.134.11.124.11.114.11.104.11.94.11.84.11.74.11.64.11.54.11.44.11.34.11.24.11.14.11.04.11.0-rc.74.11.0-rc.64.11.0-rc.54.11.0-rc.44.11.0-rc.34.11.0-rc.24.11.0-rc.14.11.0-rc.04.11.0-fc.34.11.0-fc.24.11.0-fc.0───4.19.0-0.nightly-2024-12-07-1158164.19.0-0.nightly-2024-12-06-1019304.19.0-0.nightly-2024-12-05-2226524.19.0-0.nightly-2024-12-04-1843504.19.0-0.nightly-2024-12-04-1031394.19.0-0.nightly-2024-12-04-0312294.19.0-0.nightly-2024-12-03-1950444.19.0-0.nightly-2024-12-03-1155564.19.0-0.nightly-2024-12-03-0437014.19.0-0.nightly-2024-12-02-0457054.19.0-0.nightly-2024-12-01-2148574.19.0-0.nightly-2024-12-01-1442294.19.0-0.nightly-2024-11-30-0016334.19.0-0.nightly-2024-11-26-110308───4.19.0-0.ci-2024-12-09-0030364.19.0-0.ci-2024-12-08-1830364.19.0-0.ci-2024-12-08-1230364.19.0-0.ci-2024-12-08-0630364.19.0-0.ci-2024-12-08-0030364.19.0-0.ci-2024-12-07-1830364.19.0-0.ci-2024-12-07-1230364.19.0-0.ci-2024-12-07-0630364.19.0-0.ci-2024-12-07-0030364.19.0-0.ci-2024-12-06-1830364.19.0-0.ci-2024-12-06-123036───4.18.0-0.nightly-2024-12-07-1306354.18.0-0.nightly-2024-12-06-2345344.18.0-0.nightly-2024-12-06-1102174.18.0-0.nightly-2024-12-06-0331184.18.0-0.nightly-2024-12-05-1913554.18.0-0.nightly-2024-12-05-1036444.18.0-0.nightly-2024-12-04-2039104.18.0-0.nightly-2024-12-04-1130144.18.0-0.nightly-2024-12-04-0103114.18.0-0.nightly-2024-12-03-1746394.18.0-0.nightly-2024-12-03-0450064.18.0-0.nightly-2024-11-30-1417164.18.0-0.nightly-2024-11-29-2037484.18.0-0.nightly-2024-11-27-1624074.18.0-0.nightly-2024-11-27-0859274.18.0-0.nightly-2024-11-27-0127164.18.0-0.nightly-2024-11-26-075648───4.18.0-0.ci-2024-12-08-2109014.18.0-0.ci-2024-12-08-1509014.18.0-0.ci-2024-12-08-0909014.18.0-0.ci-2024-12-08-0309014.18.0-0.ci-2024-12-07-2015154.18.0-0.ci-2024-12-07-1415154.18.0-0.ci-2024-12-07-0815134.18.0-0.ci-2024-12-07-0215134.18.0-0.ci-2024-12-06-2015134.18.0-0.ci-2024-12-06-1415114.18.0-0.ci-2024-12-06-0815114.18.0-0.ci-2024-12-06-021509───4.17.0-0.nightly-2024-12-08-1617574.17.0-0.nightly-2024-12-06-0127054.17.0-0.nightly-2024-12-05-1526144.17.0-0.nightly-2024-12-04-1922574.17.0-0.nightly-2024-12-04-0523554.17.0-0.nightly-2024-12-03-1833574.17.0-0.nightly-2024-12-03-1406504.17.0-0.nightly-2024-12-03-0825234.17.0-0.nightly-2024-12-02-2235324.17.0-0.nightly-2024-12-02-1750164.17.0-0.nightly-2024-12-02-1035244.17.0-0.nightly-2024-12-02-0251264.17.0-0.nightly-2024-12-01-1349274.17.0-0.nightly-2024-11-30-1420344.17.0-0.nightly-2024-11-29-1224044.17.0-0.nightly-2024-11-28-2011024.17.0-0.nightly-2024-11-28-1323414.17.0-0.nightly-2024-11-28-0736314.17.0-0.nightly-2024-11-28-0026464.17.0-0.nightly-2024-11-27-1802324.17.0-0.nightly-2024-11-27-0920154.17.0-0.nightly-2024-11-27-0329454.17.0-0.nightly-2024-11-26-1919584.17.0-0.nightly-2024-11-26-1144564.17.0-0.nightly-2024-11-25-2054014.17.0-0.nightly-2024-11-25-142020───4.17.0-0.ci-2024-12-08-2234214.17.0-0.ci-2024-12-08-1158234.17.0-0.ci-2024-12-08-0558234.17.0-0.ci-2024-12-07-2358234.17.0-0.ci-2024-12-07-1443554.17.0-0.ci-2024-12-07-0843554.17.0-0.ci-2024-12-07-0243554.17.0-0.ci-2024-12-06-2043554.17.0-0.ci-2024-12-06-144355───4.16.0-0.nightly-2024-12-06-0728484.16.0-0.nightly-2024-12-05-1111034.16.0-0.nightly-2024-12-05-0622194.16.0-0.nightly-2024-12-04-1926204.16.0-0.nightly-2024-12-04-0242044.16.0-0.nightly-2024-12-03-1450284.16.0-0.nightly-2024-12-03-0144314.16.0-0.nightly-2024-12-02-1835364.16.0-0.nightly-2024-12-02-1114164.16.0-0.nightly-2024-12-02-0258204.16.0-0.nightly-2024-11-29-1940114.16.0-0.nightly-2024-11-29-1441544.16.0-0.nightly-2024-11-28-2134254.16.0-0.nightly-2024-11-28-1153354.16.0-0.nightly-2024-11-27-1651504.16.0-0.nightly-2024-11-27-1205574.16.0-0.nightly-2024-11-26-2129134.16.0-0.nightly-2024-11-26-040934───4.16.0-0.ci-2024-12-06-1221354.16.0-0.ci-2024-12-06-0621354.16.0-0.ci-2024-12-05-1753344.16.0-0.ci-2024-12-05-1153344.16.0-0.ci-2024-12-05-0553244.16.0-0.ci-2024-12-04-2239234.16.0-0.ci-2024-12-04-0408054.16.0-0.ci-2024-12-03-1611144.16.0-0.ci-2024-12-03-1011144.16.0-0.ci-2024-12-02-230300───4.15.0-0.nightly-2024-12-06-1018494.15.0-0.nightly-2024-12-05-1413534.15.0-0.nightly-2024-12-05-0404544.15.0-0.nightly-2024-12-04-1640054.15.0-0.nightly-2024-12-04-0605224.15.0-0.nightly-2024-12-03-221915───4.15.0-0.ci-2024-12-07-0736154.15.0-0.ci-2024-12-06-1417094.15.0-0.ci-2024-12-06-0732074.15.0-0.ci-2024-12-05-2114384.15.0-0.ci-2024-12-05-113818───4.14.0-0.nightly-2024-12-06-2109444.14.0-0.nightly-2024-12-06-0424334.14.0-0.nightly-2024-12-05-0239284.14.0-0.nightly-2024-12-04-1653194.14.0-0.nightly-2024-12-04-0422074.14.0-0.nightly-2024-12-03-214554───4.14.0-0.ci-2024-12-06-1857424.14.0-0.ci-2024-12-06-1257424.14.0-0.ci-2024-12-06-0341094.14.0-0.ci-2024-12-05-1428184.14.0-0.ci-2024-12-04-2220284.14.0-0.ci-2024-12-04-152442───4.13.0-0.nightly-2024-12-08-1610434.13.0-0.nightly-2024-11-30-0419004.13.0-0.nightly-2024-11-23-1013054.13.0-0.nightly-2024-11-20-0919214.13.0-0.nightly-2024-11-19-0924194.13.0-0.nightly-2024-11-18-041323───4.13.0-0.ci-2024-12-08-1612014.13.0-0.ci-2024-12-06-1507024.13.0-0.ci-2024-12-06-0841374.13.0-0.ci-2024-12-05-1556344.13.0-0.ci-2024-12-05-054732───4.12.0-0.nightly-2024-12-04-0119504.12.0-0.nightly-2024-12-02-1832084.12.0-0.nightly-2024-12-02-0443584.12.0-0.nightly-2024-11-28-0022544.12.0-0.nightly-2024-11-27-1038174.12.0-0.nightly-2024-11-27-0039294.12.0-0.nightly-2024-11-25-1001394.12.0-0.nightly-2024-11-20-1247564.12.0-0.nightly-2024-11-18-021414───4.12.0-0.ci-2024-12-03-0259324.12.0-0.ci-2024-12-02-1735344.12.0-0.ci-2024-12-02-0430344.12.0-0.ci-2024-11-28-1234364.12.0-0.ci-2024-11-28-0232474.12.0-0.ci-2024-11-27-2032474.12.0-0.ci-2024-11-27-1432474.12.0-0.ci-2024-11-27-0039214.12.0-0.ci-2024-11-26-155836───4.11.0-0.nightly-2024-07-06-0140574.11.0-0.nightly-2024-07-01-0855474.11.0-0.nightly-2024-04-20-1326214.11.0-0.nightly-2024-04-15-1237064.11.0-0.nightly-2024-04-15-0346274.11.0-0.nightly-2024-03-18-1654324.11.0-0.nightly-2024-03-12-2229304.11.0-0.nightly-2024-02-01-0446274.11.0-0.nightly-2024-01-19-1107024.11.0-0.nightly-2024-01-15-0229494.11.0-0.nightly-2024-01-10-203533───4.11.0-0.ci-2024-11-14-2201374.11.0-0.ci-2024-11-14-1432224.11.0-0.ci-2024-09-18-0735584.11.0-0.ci-2024-09-17-2036254.11.0-0.ci-2024-07-30-2032534.11.0-0.ci-2024-07-23-1708064.11.0-0.ci-2024-07-01-0910384.11.0-0.ci-2024-06-07-1944004.11.0-0.ci-2024-06-05-1627184.11.0-0.ci-2024-06-01-042714───4.18.0-ec.44.18.0-ec.34.18.0-ec.24.18.0-ec.14.18.0-ec.0

Source code for this page located on github