Back to index

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.15.16-x86_64

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
  • upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
• Informing jobs
  • aws-ovn-serial Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.15-e2e-aws-ovn-serial
  • aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.15-e2e-aws-ovn-upgrade
  • aws-sdn-upgrade-4.15-micro Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-aws-sdn-upgrade
  • azure-ovn-upgrade-4.15-micro Failed (3 retries) periodic-ci-openshift-release-master-ci-4.15-e2e-azure-ovn-upgrade
  • gcp-ovn-rt-upgrade-4.15-minor Succeeded periodic-ci-openshift-release-master-ci-4.15-upgrade-from-stable-4.14-e2e-gcp-ovn-rt-upgrade
  • hypershift-ovn-conformance-4.15 Succeeded periodic-ci-openshift-hypershift-release-4.15-periodics-e2e-aws-ovn-conformance
  • metal-ipi-ovn-dualstack Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-metal-ipi-ovn-dualstack
  • metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-metal-ipi-ovn-ipv6
  • metal-ipi-sdn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-metal-ipi-sdn-bm

Upgrades from:

• 4.15.15 (changes) - S F F F F S S S S
• 4.15.14 (changes) - Success Success
• 4.15.13 (changes) - Success Success
• 4.15.12 (changes) - Success
• 4.15.11 (changes) - Success
• 4.15.10 (changes) - Failed
• 4.15.3 - Failed Success
• 4.15.2 (changes) - Failed Success
• 4.15.0 (changes) - Success Success
• 4.14.28 (changes) - Failed Failed
• 4.14.27 (changes) - S S S
• 4.14.26 (changes) - Success Success
• 4.14.25 (changes) - Success Failed
• 4.14.23 (changes) - Success Success
• 4.14.22 (changes) - Failed Success
• 4.14.18 (changes) - Failed Success
• 4.14.17 (changes) - Failed Failed
• 4.14.16 (changes) - Failed Success
• 4.14.0-0.nightly-2024-05-29-074652 (changes) - Success

Upgrades to:

• 4.16.0-rc.3 (changes) - Success Success
• 4.15.19 (changes) - Success
• 4.15.18 (changes) - Failed
• 4.15.17 (changes) - S S S F S

---

Loading changelog, this may take a while ...

Changes from 4.15.3

Created: 2024-05-30 08:14:55 +0000 UTC

Image Digest: sha256:4bdebcbc36c2b4c383b70cf5e23b168f8bf445eba42fc8f331643608a60398e8

Release 4.15.16 was created from registry.ci.openshift.org/ocp/release:4.15.0-0.nightly-2024-05-29-210405

Components

• Kubernetes upgraded from 1.28.7 to 1.28.10
• Red Hat Enterprise Linux CoreOS upgraded from 415.92.202403080220-0 to 415.92.202405281402-0 (diff)

Rebuilt images without code change

• agent-installer-utils git 33b7d855 sha256:72fe4c3b915898543baddfa748f23e02fdbb69f91aa493d2fcaa212f1d291fe9
• alibaba-cloud-controller-manager git abf4fa96 sha256:0831ab2c504094121e3356b27a9a06da494ea4b94597a69a7b37fae7c0b6bec4
• alibaba-cloud-csi-driver git be4888d3 sha256:515c5e29a2fcede8e9cae1d47ed940771f0e346c7885e4b7e36d535057e866c8
• alibaba-disk-csi-driver-operator git 41b367ae sha256:c78e571ba00949e134bac1fbd1cf362427d4c511e17101aa1b24febbb4d6b04d
• alibaba-machine-controllers git d3ba04c3 sha256:c0fc9d9567c10963a7197d3fa233e576f9d2893531bb919593def03e7c74f1b3
• aws-machine-controllers git 0129b1e3 sha256:7db7746a8f057eebbdb937337261f67ea96c75e21a01f762f8ef7b1668d14630
• azure-disk-csi-driver git dcb7e1c7 sha256:95fa69be1cd4ce344723a74bd56d819d96589e3b8662c949f8a1f03ddbdc5153
• azure-disk-csi-driver-operator git 160cf624 sha256:9ca9f79307f584a591af8d4dce79fff23955865e29b47b93f46ac41976399c70
• baremetal-operator git c17023eb sha256:d3c023002002f1cd5b932392d637ae7feb505da3080c0b96383591c1b86d20a0
• cluster-authentication-operator git 52a7d25a sha256:675560b505ba4bffca76b15eeeff638b71c330b3edf771506079e12ad11b1c24
• cluster-baremetal-operator git fdce2d08 sha256:8f5c4b408cff27d45acfd6dc728fa502a9fad5a0c5bb853d3708253ba5dc9b9e
• cluster-bootstrap git 0849c462 sha256:4405f5809197546f29ca537aa945b647d24a7d193ed87d3a0ec73cf332bb018f
• cluster-kube-cluster-api-operator git 128d8e08 sha256:05852045880239f64f6fb23fd47d4622e5cbf227dc5ebeeec13fefbbe3e0322a
• cluster-kube-storage-version-migrator-operator git 37015e87 sha256:f513d607a06caeb970189c43014e45496a3e28d00b64ea994f9c0dfb6a0387b5
• cluster-machine-approver git 3a6b6ae6 sha256:20b0b0ba69d1806471a129e5b49555194425e2f1e30bcc6bc924d582288fcbcb
• cluster-olm-operator git a7ba8987 sha256:af759fbf213947137d467ec96ffe1d9c4ea68c121404276f69cbe532df4dca11
• cluster-openshift-apiserver-operator git 74013916 sha256:5bca3348b250ba20cad24440e72807518c3b03501970b8131a148fe971b62eca
• cluster-platform-operators-manager git 37a0a919 sha256:d363db8468be50dbd218a7957f28dbc5db4f4d96aa8279429d08dfb028e07658
• cluster-policy-controller git cc48f315 sha256:ccba26132ff22274400aebcd0b7bc785c0b45baafe22aa8b0cdb087051fc0f62
• cluster-update-keys git be6ba5b0 sha256:97863763849f7c08e6c042e2e2ad0dd813c7b4d5614429e785ebb5c8d6682a4f
• cluster-version-operator git 705f11a2 sha256:05c3a7577a97aa70388fd21c4b8d9c3902d486640bf4bb3ef62bf7d5a83a2b6f
• configmap-reloader git 617398f5 sha256:52fc123973640335122e47eb3ead636226fcdc907a8b55df8d00f0506d748f2a
• coredns git 22f950ea sha256:edb67624164c2acd6b4ef8057f8966e98eac147748a0259d72805b0328232fcc
• csi-driver-manila-operator git 2fc4a7cc sha256:a7b2de3096d37c557b70d0cb742061b8630caddcddd507373c18e646772c12e3
• csi-driver-nfs git d032dc10 sha256:93a0ffaee1215af34566f80aa2689751dbc906597ded131b5523b131d27b2c39
• csi-driver-shared-resource git 260a085a sha256:b2f8432cfe0d12bb2b84f1c35e1e3067ce163100101c222576d2bd49207213d4
• csi-driver-shared-resource-operator git 8d017b7f sha256:4ac39e0fa8e6c158985dab1fcf78a2599c275100b83bb52306b6004139407186
• csi-driver-shared-resource-webhook git 260a085a sha256:6c6f367ce78322250e75bbda4bf13bab99bdc81caf6e7f088af79c6dd7b6adbf
• csi-external-attacher git f806f266 sha256:c00130086f9e8c995638108ec61322fa394946ec2001b766709eac0a168491b1
• csi-external-provisioner git ce5a1a33 sha256:f04b5b823adb4b97365b439fe895aa075114fca948b03f5052e1cd8cdcbdeb62
• csi-external-resizer git 3b4236d3 sha256:6c539da92af1a88bbf43fdcf8c0b4bac8c1a1f3cd63a24fb64ca210fa94bad3f
• csi-livenessprobe git 240bb8c0 sha256:a4e3cfb8d60c46d9eb76c21fb84a441eb123ffc5f0bfbc71f6780c3b8be09426
• csi-node-driver-registrar git 9005584e sha256:cc525470cbafa6ad3cdb4c36642f752b2c53d995e03865850462c4bfe56095ac
• driver-toolkit git 7a448c2e sha256:d493e0bd8959e0d117493453db9c183e8bca34f73eb89b091134a087554fa0e8
• egress-router-cni git 39ea8ee1 sha256:b79caf19dda6191921431d1cad31f979b94e37ab82eb505c9bce99c2173bacaf
• gcp-machine-controllers git b15daaf5 sha256:5e111f1d7213ac97ba5e956f720cb5ffdd54838bad852e808bee985a3cb51923
• gcp-pd-csi-driver git 856ee3e2 sha256:79d5bda03de9f4f43de8a87e9208b4c3253092407dc248b554756f3bb9ee8d0a
• gcp-pd-csi-driver-operator git 3b91ee31 sha256:e380072a7c8d948be7e8df9837325073e2f16eff26655f7bafd1a96c57378749
• ibm-cloud-controller-manager git 19e64d5c sha256:dc2a635f311687b15edab40f301d3602948aa28d469bc3fc47fdf91d11f47eb0
• ibm-vpc-block-csi-driver git ce7f53cd sha256:43ea19e1969c10cf04e615100b793ab989cd3537c5c351cbddbfcf071f7e3ba0
• ibm-vpc-node-label-updater git e1a0adca sha256:900b215290175107dc816d1159fcbbdda131f84a96380116087b26a345b0df85
• ibmcloud-cluster-api-controllers git 34fb6252 sha256:fff1ed3566aacfde185eae2ee1884b68331b77cdde1a5482489af8b176e8a54b
• ibmcloud-machine-controllers git 6b0b8ea7 sha256:7e353aad550d798b47424b3f287998b74b42e1c1bbdd59828c49ae74f24145c8
• ironic-machine-os-downloader git bcbcd95b sha256:dd195be35f85ce70bda1556d129d13deb3703db30e6dd0036c88b878d49b505e
• ironic-static-ip-manager git 47200021 sha256:6e16122930b4ace107bf76b1b2139fbe537b8f3e6b23f51e458dd88593084955
• kube-metrics-server git bcbf241c sha256:a7fffe4b6f20ef5e91eee2c2af92d5511d2127592919af4825de4a1170eb43a5
• kube-proxy git 71a6f28d sha256:eecb3828c06ab7ff3788f8b522e0b41df0f0e1c2f86fe9698ae7faae415aa429
• kube-rbac-proxy git e8e8c84b sha256:824678e67933576425598c760040f103341699de6a171f6f6d1048b8d6602087
• kube-state-metrics git 037b59c2 sha256:cc7f61476e23a81396be416a0e4a74f08dd4353d4c6d775a70b6eb02c592c67e
• kube-storage-version-migrator git e8749689 sha256:698fd76f2533712a522e8e26f8ba44c5c44ad544ccb600c4f1f6719be1f40cdb
• libvirt-machine-controllers git 1e096cdf sha256:f93cddb732672fb3893f22d892156cc075adc1607ce5028537cae6dc77084177
• machine-image-customization-controller git 97d87657 sha256:d7468630cb88f26c14a30da636f38e8f79eb1d9d312f60fb07f016cd38c55ee5
• machine-os-content sha256:7f6bd7fd0ef9eb06509d74dfce17d5466c0de158019b68a7b43f5e8635565ab5
• machine-os-images git 9e9c920f sha256:274a0cfe5034bf55b44f73b1ebe32637e5f2bbb41029fd6a29c97b60d8918786
• multus-admission-controller git 23a7cfe4 sha256:2bd1b6ae6564d3c32fb038d8887caad786b88f7cf3ee1b9da696ea0b20448d1f
• multus-networkpolicy git 6212406b sha256:54c29600da28ad018600886d1c0ad62471eea2c47487f2d668323b68c4d306d0
• multus-route-override-cni git a5b755b5 sha256:72260334bcd3a2a2b8fc41a2b730dcfe3408bb702d8cfed0aa9a0c4a45c08ace
• multus-whereabouts-ipam-cni git 2edc45fe sha256:b4afd52a32d11b43733dcfa827b55992c386e481664af31dd61e5bbc665a8815
• must-gather git 47335065 sha256:a3f3aeecd5695f7e374988043eba834b956657f245b230a2d1cf48ce299ff8ed
• network-interface-bond-cni git f91decaa sha256:9fb85269a43c579c5be076865a2a14c48affa14fc9d412b384e09c0c5965d2d6
• network-metrics-daemon git 0288f362 sha256:6912d251145a14eee390cf3792ae8584b80b435764504c02cd8993a29a3ac6cc
• nutanix-cloud-controller-manager git 33fb22c1 sha256:3a334012b9ea9a00d71e468feaef056c9296ea268ab41eabbde1b586d901279e
• nutanix-machine-controllers git f02b1a28 sha256:9e8c0a8c880d3cd2b3d4eea40cbf97925bc5e4701a07d23deb43cf06ca18540c
• oauth-proxy git 241a88c4 sha256:127583f838a9227373cf8d1c8d46bf992a2d9075a2edfec4ea6594b410693322
• olm-catalogd git 2724be3e sha256:63994f873a491ea430f2f0d5440a585552c311a6bc3939fb81a50a24411a180e
• olm-operator-controller git e2906934 sha256:6fb9aaecc5ab93ab8adb0b8142ed3b5d77444b9a4aa008fc33b9d85f20704db8
• olm-rukpak git 5b09cd44 sha256:03ca6aac7ab93976e0f6c2ef539925d2eec601ef6baeb16d1315ef68ac0fd485
• openshift-state-metrics git 1915f645 sha256:46b379f7dfea13be6f7bf2fddff2d49bbb393590b208d82c1b2b1b48e45ae725
• operator-marketplace git 53c124a3 sha256:d8f924d6a36f4fe259e2755aa012186f48bcb38e1aaf41bb93004ff62b184e24
• ovirt-csi-driver git b8d25ad6 sha256:13ebd84a131406d9290e60afbbf9c9958029206771e1e254206e4033b76978e0
• ovirt-csi-driver-operator git e9b0fa23 sha256:141a1fe2a08f38e0e00f25c804b128e345cfe417a22ec91654df73ca44e9426a
• ovirt-machine-controllers git 5d708631 sha256:05383109d9df446b75799c4e7a8ce187391f22daf364deca9b4d4e5f70b927a8
• powervs-block-csi-driver-operator git a3729dcb sha256:617c46f7e6df0350c3fc45fdecf717b785d1ef698f2e0ee12b64c75fe76013c6
• powervs-cloud-controller-manager git 521b80df sha256:12cc27aaf506ee2d455172a0bab0d4603b9f1787e55a7a5f2ed5c806b7a0829b
• powervs-machine-controllers git 07e8f8b8 sha256:1d439502a3462a742f26e452cf8b0042a14e632b1333f79ef2543999804b40bd
• prom-label-proxy git f3f1f5d1 sha256:1447654f95226f5d54dd3199aa46970173782a37ccfa7968fe6e382031b67dbc
• prometheus git 6828e446 sha256:845c9c9bcd0e8b36ae90ab0462af73d4434f339560db96bf4d458eb269218487
• prometheus-alertmanager git 870ade52 sha256:bf09d8508e1ff6b75edb0b559fac9ce9a8f8785f9cac951011d1db037103ad65
• prometheus-config-reloader git faad27f9 sha256:1b14735004b83da58f58d36999cf27cd4907d71d37c040dae2f9ece102e1df68
• prometheus-node-exporter git aed837c3 sha256:32a95f18b5d680b21af54970294f7d8cfa84e5a9e3520b410c71dbc17ad56e4b
• prometheus-operator git faad27f9 sha256:2c24bce3969dc467af4321aaf57e1be27bad4e24af414b004aa4832c3cd4e7b4
• prometheus-operator-admission-webhook git faad27f9 sha256:00aa9912927d2f6b654e5f1769ef637417c8a629bac2dbd93a49c6bdb329bc23
• rhel-coreos sha256:312593886b8aafdda5776143e746627dbd939d30132da59216b3135a14b85614
• rhel-coreos-extensions sha256:7c75f01cd1f311b3658f4be5e29fcdbc5224c6108f897b504711ead40957d307
• route-controller-manager git c5cc7a73 sha256:c317040fb880b1d2ad8eeb3ea8ad60eef86befec5056e8039c0b642b06555e51
• sdn git 71a6f28d sha256:149c5462d78d16b7e14665f9382253ac6ca6f0883bede3fcf42e5d8ae23ecb65
• service-ca-operator git f5972cc7 sha256:b7b7a8752e71d0c659c92c8c254dd2349851815b7583ca4a22cb8e2f42a090f0
• thanos git 66161ad4 sha256:b10f00242348392b1e3b3921fbbff93e4dfb56c3daf46f18c71563688dda51a9
• vsphere-cloud-controller-manager git d2af6982 sha256:1e4b894a7a0a9d8c0cc059f284f4552d1ea13073ba0440c844f35ba232eab801
• vsphere-csi-driver-operator git e0d46570 sha256:1a0b2f9b4beb9af2a97481b5b96e92296be33f78a48d05ba916e7e8a4b395f22
• vsphere-problem-detector git de02a75d sha256:779e52728d74b057ff9128a170f2e0806fb4429258ce8f4d8fa7ccfcd1820d31

agent-installer-api-server

• OCPBUGS-31631: Deploy dual stack with IPv6 on top of bond/vlan fails (#6245) #6245
• MGMT-17593: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#6217) #6217
• 17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6211) #6211
• Revert “MGMT-17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6194)” (#6208) #6194
• MGMT-17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6194) #6194
• MGMT-17541: Replace broken golangci reference (#6191) #6191
• OCPBUGS-30232: Handle skipping hostPrefix validation for IPv6 For non-OVN/SDN networkTypes, the hostPrefix validation is not required and it is skipped. This fixes a regression introduced in the fix for https://issues.redhat.com/browse/OCPBUGS-23069 in which IPv6 CIDRs were not using the correct default hostPrefix. In addition, all cases where the validation is used are now covered. (#6137) #6137
• NO-ISSUE: replace postgres images as current one disappeared from quay (#6135) #6135
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• MGMT-17593: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#833) #833
• MGMT-17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#827) #827
• MGMT-17541: Replace broken golangci reference (#824) #824
• Full changelog

agent-installer-node-agent

• MGMT-17593: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#704) #704
• MGMT-17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#699) #699
• MGMT-17541: Replace broken golangci reference (#695) #695
• Full changelog

apiserver-network-proxy

• OCPBUGS-31953: Bump golang.org/x/net to v0.23.0 #51
• Full changelog

aws-cloud-controller-manager

• OCPBUGS-29079: Updates build-rpm.sh to set release to build time #76
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-30117: manifests: Add in CustomNoUpgrade #511
• OCPBUGS-32114: UPSTREAM: <carry>: Fix instance PrivateDNSName when domain-name is set in dhcpOpts #508
• OCPBUGS-31036: UPSTREAM: 4670:Update awsmachine providerID and instanceID immediately after ec2:RunInstances is called #501
• OCPBUGS-30595: fix e2e tests on release branches #504
• Full changelog

aws-ebs-csi-driver

• OCPBUGS-33043: UPSTREAM: 1919: Add reserved-volume-attachments #263
• Full changelog

aws-ebs-csi-driver-operator

• OCPBUGS-33043: Explicitly reserve 1 attachment for the root disk #222
• OCPBUGS-30621: remove legacy directory and duplicate Dockerfile.*.test files #201
• OCPBUGS-30621: move test manifest to top-level directory #195
• Full changelog

aws-pod-identity-webhook

• OCPBUGS-32886: Upgrade go-jose module to 2.6.3 #188
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPBUGS-33127: Improvements to client timeouts to prevent hangs #118
• OCPBUGS-33092: Bump otelgrpc #117
• OCPBUGS-30970: Update acr-credential-provider.spec #115
• OCPBUGS-30970: Adds acr-credential-provider spec file and build script #114
• Full changelog

azure-cluster-api-controllers

• OCPBUGS-29502: Bump helm to v3.14.4 #303
• Full changelog

azure-file-csi-driver

• OCPBUGS-33038: Rebase v1.29.5 for OCP 4.15 #65
• Full changelog

azure-file-csi-driver-operator

• OCPBUGS-33038: add token audience for Azure File #103
• Full changelog

azure-machine-controllers

• OCPBUGS-30215: Remove startupScript vmextension lookup #103
• Full changelog

azure-workload-identity-webhook

• OCPBUGS-32895: Upgrade go-jose module to 2.6.3 #17
• Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

• OCPBUGS-33672: add quota support to ca-west-1 #8412
• OCPBUGS-33454: go.mod: bump aws-sdk-go for ca-west-1 support #8381
• OCPBUGS-33205: Gcp bootstraping release 4.15 #8339
• OCPBUGS-33542: images: do not force terraform-providers to be statically linked #8392
• OCPBUGS-29929: GCP Destroy cleanup correct zones/records #8062
• OCPBUGS-32383: sdk/aws: add ssh security group rule for compute #8282
• OCPBUGS-32690: AWS: bump CCO for permission fix #8302
• OCPBUGS-32264: always save serial logs if they were gathered #8274
• OCPBUGS-30944: Don’t run libvirt validations in agent installer #8167
• NO-ISSUE: test fix to support slightly different nmstate error messages #8285
• OCPBUGS-32259: escape ‘%’ in proxy settings #8272
• OCPBUGS-32355: Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility #8277
• OCPBUGS-31335: openstack: Honour worker server group policy #8202
• : OCPBUGS-31590: GCP: Skip populating Private/Public Zones within DNS manifest #8220
• OCPBUGS-30922: coreos-installer iso kargs show broken on Agent ISO #8163
• OCPBUGS-30822: Validate control plane replicas #8143
• OCPBUGS-31274: IBMCloud: Restrict CIS and DNS Service lookup #8197
• OCPBUGS-30605: upi: aws: fix typo in worker templates #8125
• Bug OCPBUGS-31284: OpenStack: enable 30000:32767 nodePort IPv6 traffic #8199
• OCPBUGS-31087: Fix vsi image missing #8186
• OCPBUGS-30098: feat: add check for SNO bootstrap condition #8089
• OCPBUGS-30601: update RHCOS 4.15 bootimage metadata to 415.92.202402201450-0 #8122
• OCPBUGS-30854: Power VS: Fix wait_for_workspace #8159
• OCPBUGS-29964: fix Azure API SKU calls timing out #8086
• OCPBUGS-30792: Enable deploy by Service ID on PowerVS #8138
• OCPBUGS-30577: Authn with platform-services-go-sdk for PowerVS #8118
• Full changelog

baremetal-machine-controllers

• OCPBUGS-30876: Bump golang-protobuf version #214
• Full changelog

baremetal-runtimecfg

• OCPBUGS-32024: Decrease log level when detecting node IP #304
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-32840: Bump go-jose indirect reference to 2.6.3 #1749
• OCPBUGS-31879: Add OIDC specific certificate authority bundle flag #1730
• OCPBUGS-31726: Remove some of newapp unit tests relying on external deprecated images #1726
• OCPBUGS-30286: oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators #1698
• Full changelog

cloud-credential-operator

• OCPBUGS-32900: Upgrade go-jose module to 2.6.3 #696
• OCPBUGS-31924: aws: remove non-existent permission #691
• Full changelog

cloud-network-config-controller

• OCPBUGS-33780: Avoid panic when looking up attachedOutboundRule.ID in azure #145
• OCPBUGS-31754: Avoid nil pointer panic while assigning private IP on Azure #137
• Full changelog

cluster-autoscaler

• OCPBUGS-31464: add check for taint.value == nil #293
• Full changelog

cluster-autoscaler-operator

• OCPBUGS-31947: Update x/net to v0.24.0 #319
• Full changelog

cluster-capi-controllers

• OCPBUGS-30117: manifests: Add in CustomNoUpgrade #206
• OCPBUGS-33200: Bump protobuf to v1.33.0 #204
• OCPBUGS-30595: fix e2e tests on release branches #201
• Full changelog

cluster-capi-operator

• OCPBUGS-30117: manifests-gen: also add CustomNoUpgrade annotation value #166
• OCPBUGS-30118: create openshift-cluster-api namespace in CustomNoUpgrade #167
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-33547: update azure and ash tolerations on node manager #343
• Bug OCPBUGS-32246: Allow to patch events in OpenStack RBAC #339
• Full changelog

cluster-config-api

• OCPBUGS-28928: Add UnservableInFutureVersions route status condition type #1751
• Full changelog

cluster-config-operator

• OCPBUGS-26542: remove duplicate manifests in image #395
• Full changelog

cluster-control-plane-machine-set-operator

• [Release 4.15] OCPBUGS-32414: Fix ExportFailureDomain to handle empty platform spec #290
• [Release 4.15] OCPBUGS-32357: Modified webhook to allow templates by name instead of just by path. #289
• Full changelog

cluster-csi-snapshot-controller-operator

• OCPBUGS-31599: create suitable role and roleBinding for csi-snapshot-webhook #203
• Full changelog

cluster-dns-operator

• OCPBUGS-32093: Add RBAC related to featuregates to fix hypershift upgrade #407
• Full changelog

cluster-etcd-operator

• OCPBUGS-33564: return errors in wait-for-ceo #1261
• OCPBUGS-32952: remove etcd-health-probe log #1257
• OCPBUGS-31942: update golang x net #1253
• OCPBUGS-31865: bump(library-go)=release-4.15 #1220
• OCPBUGS-30915: CEO aliveness check should only detect deadlocks #1225
• Full changelog

cluster-image-registry-operator

• OCPBUGS-33208: azurepathfix: check if platform status is nil before accessing it #1031
• OCPBUGS-32396: azure-path-fix: support auth via account key (without clientID) #1022
• OCPBUGS-31641: bump aws-sdk-go from v1.44 to v1.50 #1014
• Full changelog

cluster-ingress-operator

• OCPBUGS-34252: Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1058
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-34492: Create one-shot migrations for the flowcontrol group. #1692
• OCPBUGS-33697: add a controller that reconciles SCCs’ volumes #1679
• OCPBUGS-33277: Fix incorrect name for hostmount-anyuid SCC ClusterRole #1672
• OCPBUGS-31807: Use RotatedSigningCASecret in update only mode #1662
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-31807: use RotatedSigningCASecret and RotatedSelfSignedCertKeySecret only in update mode #801
• OCPBUGS-31865: bump(library-go)=release-4.15 #797
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-31865: bump(library-go)=release-4.15 #537
• Full changelog

cluster-monitoring-operator

• OCPBUGS-33512: fix Thanos ruler alert generator url #2343
• OCPBUGS-32055: backport ols metric allowlist to 4.15 #2313
• OCPBUGS-28769: fix generation of telemeter token hash #2303
• Full changelog

cluster-network-operator

• OCPBUGS-32515: Fix wait logic for IPsec certificate signing request #2348
• OCPBUGS-29092: Add probes to node-network-identity #2253
• OCPBUGS-29654: Fully disable network-node-identity on ROKS #2314
• OCPBUGS-30927: ensure local networking deployments within hypershift use the client side load balancer to be resilient to control plane node failures #2310
• OCPBUGS-30615: Fix managed cluster detection on ARO #2304
• Full changelog

cluster-node-tuning-operator

• Add a ‘.snyk’ to silence static code analysis warnings (#1001) #1001
• fix extra-reboot on upgrade with paused mcp worker (#1049) #1049
• fix rendering extra ctrcfgs (#975) #975
• OCPBUGS-31694: E2E: Workload hints test cases fixes (#1012) (#1043) #1012
• Reduce number of reboots in offline tests (#1014) #1014
• Systemd processes not being moved to cpuset/systemd.slice fix (#1016) #1016
• Scheduler plugin: ignore IRQs (#983) #983
• e2e: when crun is enabled by default skip checking runc config (#1013) #1013
• OCPBUGS-30507: Add performance real time tuned template (#984) #984
• Report duplicate priority only for multiple matching profiles (#965) #965
• hack: fix backport of render-sync.sh (#996) #996
• Full changelog

cluster-openshift-controller-manager-operator

• OCPBUGS-31708: Update opentelemetry dependency 415 #342
• OCPBUGS-25985: Disable deployer-controller when deploymentconfig is disabled #322
• Full changelog

cluster-samples-operator

• OCPBUGS-22034: bump K8s version to 29.2 #538
• Full changelog

cluster-storage-operator

• OCPBUGS-33466: Fix problem-detector proxy setting #471
• Full changelog

console

• OCPBUGS-33263: Pipeline list page is crashed when navigating from Search page #13819
• OCPBUGS-33166: Fix NAD always on default namespace #13865
• OCPBUGS-31863: make sure folder is encapsulated with quotas #13737
• OCPBUGS-33506: Fix Pipeline details page with when expression using CEL expression #13835
• OCPBUGS-32505: Add visual connector between VMs and non VMs workloads #13782
• OCPBUGS-33548: restrict Masthead logo to max-height #13839
• OCPBUGS-32497: Improve Create serverless function error message #13778
• OCPBUGS-33191: Hide dev perspective Pipelines nav option if dynamic plugin nav option is enable #13810
• OCPBUGS-33058: fix issues with Edit Route form #13800
• OCPBUGS-32187: Add flag to hide Output tab contributed by pipelines-plugin #13756
• OCPBUGS-32716: Helm Plugin’s Catalog incorrectly renders a single index entry into multiple tiles #13788
• OCPBUGS-32506: setting correct image trigger annotation #13783
• OCPBUGS-32933: change OperatorHub filter FIPS Mode to Designed for FIPS #13796
• OCPBUGS-31799: Improve PipelineRun list view performance #13731
• OCPBUGS-32796: auth: fix OIDC logging out #13793
• OCPBUGS-31445: Upgrade Pipeline trigger resources to v1beta1 #13704
• OCPBUGS-31045: fix for execute inline markdown syntax issue #13681
• OCPBUGS-32518: Add warning about service binding operator will not be supported from 4.15 #13784
• OCPBUGS-32391: Routes created by devfiles do not always use HTTPS #13771
• OCPBUGS-32340: Increased max nodes limit to 200 in topology page #13767
• OCPBUGS-32399: Update devfile library to v2.2.2 #13762
• OCPBUGS-32156: TaskRun status is not displayed near the name #13752
• OCPBUGS-31806: Use bearer-token for local dev with auth #13732
• OCPBUGS-31839: fix bug where paused MCPs were incorrectly unpausing w… #13735
• OCPBUGS-31105: Update to pf5.2 to fix quick starts #13686
• OCPBUGS-31476: Requesting for country codes in localization of openshift - webconsole #13707
• OCPBUGS-31046: Application creation fail when manually entering input scaling value in local setup #13682
• OCPBUGS-30916, OCPBUGS-30917: PipelineRuns in Console show wrong status or load indefinitely #13672
• OCPBUGS-30869: TaskRun with same name in different project don’t show 2 entries when listing in all namespace #13668
• OCPBUGS-31107: Upload Jar form’s Clear button is not functioning #13688
• OCPBUGS-30759: Fix bugs in Console dynamic plugin SDK webpack code #13678
• OCPBUGS-30871: fix Configure link in AlertmanagerReceiversNotConfigur… #13669
• OCPBUGS-29963: i18n upload/download routine task - chore(i18n): update translations #13670
• OCPBUGS-30801: Switch to service to get the PLR and TR logs from the Tekton results summary API #13663
• OCPBUGS-30275: adjusting documentation links for 4.15 #13648
• OCPBUGS-30870: chore(i18n): update translations: Completed OCP-4.15/Master Branch/Sprint 245 #13641
• Full changelog

console-operator

• OCPBUGS-33720: Add missing return statement to fix crash in healthcheck controller #903
• OCPBUGS-31499: Update RHDH QuickStarts and add CR examples #880
• OCPBUGS-31619: use InfrastructureTopology for clusters using external CP as the console deploys on the worker nodes #882
• OCPBUGS-29332: Remove Janus IDP and update RHDH quickstarts #863
• Full changelog

container-networking-plugins

• OCPBUGS-30045: [4.15] cherry-pick containernetworking/plugins#997 #155
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-32246: Remove enforcement of IPv6 LB as internal #277
• Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

• OCPBUGS-31599: add cmdline args to enable group snapshot webhooks #147
• Full changelog

docker-builder

• BUILD-854: Add adambkaplan as approver #381
• Full changelog

docker-registry

• OCPBUGS-31641: vendor: bump aws-sdk-go to support ca-west-1 #396
• Full changelog

etcd

• OCPBUGS-32768: Revert “OCPBUGS-31644: Rebase etcd 3.5.13 openshift 4.15” #264
• OCPBUGS-31644: Rebase etcd 3.5.13 openshift 4.15 #260
• OCPBUGS-28731: Rebase etcd 3.5.12 openshift 4.15 #243
• Full changelog

gcp-cloud-controller-manager

• OCPBUGS-30970: Update gcr-credential-provider.spec #60
• OCPBUGS-30970: Adds auth-provider-gcp .spec file and build script #59
• Full changelog

gcp-cluster-api-controllers

• OCPBUGS-30117: manifests: Add in CustomNoUpgrade #225
• OCPBUGS-30595: fix e2e tests on release branches #223
• Full changelog

haproxy-router

• OCPBUGS-32977: Count active services before setting weight to 1 #586
• OCPBUGS-32693: Reject routes with MD5 certs #584
• OCPBUGS-32435: Introduce ‘idle-close-on-response’ option for frontends #579
• OCPBUGS-31544: Properly handle rewrite-target annotation #569
• Full changelog

hyperkube, pod

• OCPBUGS-33711: Bump to Kubernetes v1.28.10 #1969
• OCPBUGS-33347: Provide SCC access via RBAC #1962
• OCPBUGS-29613: UPSTREAM: <carry>: bump structured-merge-diff #1893
• OCPBUGS-32299: Bump to k8s 1.28.9 #1946
• OCPBUGS-29922: UPSTREAM: <carry>: openshift-kube-apiserver: pod .spec.nodeName should not override project node selector in podNodeEnvironment admission plugin #1897
• OCPBUGS-31807: UPSTREAM: <carry>: allow type mutation for specific secrets #1939
• UPSTREAM: <carry>: OCPBUGS-31348: fix cpu manager cpuset check #1915
• OCPBUGS-31740: 4.15: UPSTREAM: 124048: Use the right feature gate when updating uncertain volumes #1935
• OCPBUGS-31503: Bump to 1.28.8 #1926
• Address CVE #11
• OCPBUGS-30963: Set up CEL IP/CIDR library from 4.14 onwards #1912
• Full changelog

hypershift

• OCPBUGS-33510: Run haproxy to connect to kas from data plane if noproxy settings contain kas #4014
• NO-JIRA: chore(deps): update rhtap references to 7cd8020 (release-4.15) #4064
• NO-JIRA: Remove CLI inspection of release image #4056
• HOSTEDCP-1518: Preserve container resource requests and limits #4032
• NO-JIRA: Update RHTAP references (release-4.15) #4041
• OCPBUGS-33118: Recycler-pod image now points to the OCP Payload reference #3963
• OCPBUGS-32220: Fix disconnected metadata inspection #3881
• NO-JIRA: Update RHTAP references to 1f62eaf (release-4.15) #4030
• OCPBUGS-33117: Reconcile over ICSP/IDMS #3962
• NO-JIRA: Update RHTAP references to 2d39df1 (release-4.15) #4022
• HOSTEDCP-1480: Update TLS cert hash creation with sha512 #4017
• HOSTEDCP-1513: Support hypershift-operator scoping for hostedclusters #3998
• Revert “[release-4.15] OCPBUGS-32013: Set OPERATOR_IMAGE environment variable” #3939
• OCPBUGS-33207: Remove kube-scheduler readiness probe #3955
• NO-JIRA: chore(deps): update rhtap references to c6fdbf4 (release-4.15) #3989
• OCPBUGS-25858: Improve description for agent APIServerAddress CLI flag #3977
• OCPBUGS-33224: disable OCM pull secret controller when imageregistry config managementstate is Removed #3976
• NO-JIRA: chore(deps): update rhtap references (release-4.15) #3982
• OCPBUGS-31747: update desired image even when HCP doesn’t exist yet #3839
• NO-JIRA: chore(deps): update rhtap references to e9efe99 (release-4.15) #3974
• OCPBUGS-32229: disable autoscaler when no nodepool require it #3884
• NO-JIRA: chore(deps): update rhtap references (release-4.15) #3967
• HOSTEDCP-1552: Update RHTAP tekton files for 0.3 -> 0.4 migration #3957
• OCPBUGS-31826: use dnsPolicy: Default for konnectivity-agent in data plane #3845
• NO-JIRA: Update RHTAP references (release-4.15) #3935
• OCPBUGS-32715: Fix OLM intilization args #3923
• HOSTEDCP-1519: [release-4.15] feat(api): Add ingress-controller-load-balancer-scope annotation #3908
• NO-JIRA: chore(deps): update rhtap references (release-4.15) #3921
• OCPBUGS-32164: Fix ICSP and IDMS inclusion as registriesOverrides #3870
• NO-JIRA: chore(deps): update rhtap references (release-4.15) #3904
• OCPBUGS-30280: Switch to use service endpoint for Konnectivity #3692
• OCPBUGS-32191: Kas disable audit cherry pick release 4.15 #3875
• OCPBUGS-32114: Add new permission required in CAPA #3861
• NO-JIRA: Update RHTAP references (release-4.15) #3887
• NO-JIRA: [release-4.15] [e2e test framework] Add a flag to add an annotation to HostedCluster #3893
• HOSTEDCP-1524: [release-4.15] Support additional node selectors for request serving nodes #3883
• NO-JIRA: chore(deps): update rhtap references (release-4.15) #3873
• NO-JIRA: chore(deps): update rhtap references (release-4.15) #3868
• OCPBUGS-32013: Set OPERATOR_IMAGE environment variable #3853
• NO-JIRA: chore(deps): update rhtap references (release-4.15) #3857
• NO-JIRA: Update RHTAP references (release-4.15) #3835
• OCPBUGS-31766: include hostnetwork SCC CPO role for 4.13 and earlier #3840
• HOSTEDCP-1438: [release-4.15] Preserve container resources for more hosted control plane components #3828
• OCPBUGS-31324: Add missing PodSecurityViolation alert #3798
• NO-JIRA: Increase stability in autoscaled environments #3777
• OCPBUGS-31471: Reduce log file size for hypershift apiservers #3816
• OCPBUGS-31604: disable http2 for ignition server and proxy #3825
• OCPBUGS-31426: copy issuerCertificateAuthority configmap into HC openshift-config #3808
• OCPBUGS-31265: inject built-in MCP selector for KubeletConfigs and ContainerRuntimeConfigs #3802
• NO-JIRA: Update RHTAP references (release-4.15) #3812
• NO-JIRA: Remove unused ref to hostnetwork in cpo role #3796
• OCPBUGS-31064: ibmcloud KMS: remove breaking image check and enable KMS v2 support #3774
• OCPBUGS-31377: Manually cherry pick #3782 to 4.15 #3803
• OCPBUGS-31326: fix(ignition): Fix priority class override #3800
• OCPBUGS-30804: honor HC image configuration #3730
• ”[release-4.15] OCPBUGS-30164: Ensure cloud resources are destroyed for all platforms when –destroy-cloud-resources is used” #3677
• OCPBUGS-31116: external OIDC: fix certificateAuthority field in structured auth config #3783
• OCPBUGS-30862: Manual cherry pick 3685&3727 to release 4.15 #3740
• NO-JIRA: chore(deps): update rhtap references (release-4.15) #3791
• NO-JIRA: Update RHTAP references (release-4.15) #3785
• OCPBUGS-29881: feat(ho): Add flag for dedicated request serving isolation #3633
• OCPBUGS-30742: [4.15] HCP deletion can get stuck if CPO is unable to delete the default worker security group #3726
• OCPBUGS-30650: Set KAS config pod security Enforce to privileged #3719
• NO-JIRA: Bump CPO API budget to 4000 in EnsureApiBudget #3741
• OCPBUGS-30651: Remove EnsurePSANotPrivileged #3744
• NO-JIRA: Update RHTAP references (release-4.15) #3754
• HOSTEDCP-1488: Use regionalized STS endpoints in AWS #3747
• NO-JIRA: Update RHTAP references (release-4.15) #3738
• OCPBUGS-30581: [release-4.15] OCPBUGS-30220: Align PSA labels on guest cluster namespaces with standalone OCP #3684
• OCPBUGS-30572: [release-4.15] Update OLM Default Catalog Sources to 4.15 #3696
• Full changelog

ibm-vpc-block-csi-driver-operator

• OCPBUGS-33641: [ibm-vpc] Scheduling issue on IBM Cloud Bare Metal nodes #116
• Full changelog

insights-operator

• OCPBUGS-32702: anonymization - externalIP can be nil (#931) #931
• OCPBUGS-31946: bump golang.org/x/net version (#925) #925
• Full changelog

ironic

• OCPBUGS-32365: [4.15] Remove unused prometheus exporter #485
• OCPBUGS-32351: [4.15] Update to include fixes for ironic servicing feature #479
• OCPBUGS-32389: Use unix sockets by default for reverse proxy communication #474
• OCPBUGS-31686, OCPBUGS-31802, OCPBUGS-31830: [4.15] install ironic projects from source #470
• OCPBUGS-31802: [4.15] Add requirements placeholders for cachito #467
• Full changelog

ironic-agent

• OCPBUGS-33133: update ironic-lib with latest fixes #131
• OCPBUGS-32173: [4.15] Fix name in setup.cfg #123
• OCPBUGS-31811: [4.15] Add makefile #126
• OCPBUGS-31811: [4.15] Install ironic-python-agent from source #125
• OCPBUGS-31811: [4.15] Add requirements placeholders for cachito #121
• Full changelog

k8s-prometheus-adapter

• OCPBUGS-32214, OCPBUGS-32215: upgrade deps #102
• Full changelog

keepalived-ipfailover

• OCPBUGS-30413: update unit tests in egress/dns-proxy #168
• Full changelog

kubevirt-cloud-controller-manager

• OCPBUGS-31801: Bump opentelemetry #39
• OCPBUGS-24118: Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART #28
• OCPBUGS-22061: Bump golang.org/x/net to v0.18.0 #34
• Full changelog

kubevirt-csi-driver

• OCPBUGS-29793: [release-4.15] Address https://github.com/advisories/GHSA-fg9q-5cw2-p6r9: Restrict access to infrastructure PVCs by requiring matching infraClusterLabels on tenant PVCs #33
• Full changelog

machine-api-operator

• OCPBUGS-31949: Update x/net to v0.24.0 #1231
• OCPBUGS-30215: Azure MAO CredentialsRequest Contains Unnecessary virtualMachines/extensions Permissions #1222
• Full changelog

machine-config-operator

• OCPBUGS-20152: Don’t error if the certs.d dir doesn’t exist yet #4358
• OCPBUGS-32922: [release-4.15] add cluster fleet evaluation support to mco #4334
• OCPBUGS-28926: [4.15] crio: update pids limit to be -1 #4163
• OCPBUGS-28545: Delete state files on reboot only #4311
• OCPBUGS-31820: Remove the condition for checking the multiple ovs-if-br-ex profiles #4309
• OCPBUGS-27029: Log network service output to console #4113
• OCPBUGS-31646: fix: resources were in the wrong indentation level #4301
• : OCPBUGS-31576: kubelet: restorecon necessary files on kubelet’s prestart #4297
• OCPBUGS-30884: Prevent OVS-configuration to run before kdump #4259
• OCPBUGS-31383: make verify should use MCO’s kube version #4282
• OCPBUGS-30971: add preferredduringscheduling annotation to kube-rbac-proxy-crio #4264
• OCPBUGS-29731: Delete image openshift/openshift-proxy-pull-test #4199
• OCPBUGS-30093: Mount /run/nodeip-configuration into coredns containers #4229
• Full changelog

monitoring-plugin

• OU-417: throw an error when a custom datasource is not found #118
• OU-415: Add datasource parameter to handle metrics from custom datasources #116
• OCPBUGS-32097: make createdBy mandatory and auto fill with the current user #115
• OCPBUGS-31310: upgrade sanitize-html vulnerable dependency #107
• Full changelog

multus-cni

• OCPBUGS-33477: Fix CNI cache update function to prevent nil access #234
• OCPBUGS-30237: Reload bootstrap kubeconfig if cert mgr failed to load valid certs #223
• Full changelog

network-tools

• OCPBUGS-31764: replace wireshark with wireshark-cli #118
• Full changelog

oauth-apiserver

• OCPBUGS-33210: bump lib-go to fix SAs acting as OAuth2 clients #114
• OCPBUGS-31951: bump x/net to 0.24.0 #109
• Full changelog

oauth-server

• OCPBUGS-33210: bump lib-go to fix SAs acting as OAuth2 clients #148
• Full changelog

oc-mirror

• OCPBUGS-33575: Change default behavior to not rebuild catalogs for V1 (#849) #849
• OCPBUGS-31466: Fix for oc-mirror new defaultChannel override (#846) #846
• Bump version to include v5.11.0 of go-git (#819) #819
• Full changelog

openshift-apiserver

• OCPBUGS-31469: vendor upgrade runtime-utils #422
• Full changelog

openshift-controller-manager

• OCPBUGS-32807, OCPBUGS-33371: Rollback state of managed image pull secrets after downgrade #303
• OCPBUGS-31490: Bumps opentelemetry dependencies #294
• Full changelog

openstack-cinder-csi-driver-operator

• OCPBUGS-32744: Relax requirement to enable topology #165
• Full changelog

openstack-cluster-api-controllers

• OCPBUGS-25859: CARRY: Add Snyk security scan config #299
• OCPBUGS-26208: openshift/manifests: CloudCredential capability for CredentialsRequest #297
• Full changelog

openstack-machine-api-provider

• OCPBUGS-30857: Ensure portSecurity is correctly set in the Port #108
• OCPBUGS-28326: Add snyk configuration file #105
• Full changelog

operator-lifecycle-manager, operator-registry

• OCPBUGS-32860: UPSTREAM: <carry>: bump go-jose #740
• OCPBUGS-32311: [release-4.15]: Update if AlreadyExists #736
• OCPBUGS-31842: copy-content: delete destination dirs before copying (#3197) #728
• OCPBUGS-31651: [release-4.15] Correctly detect catalog image ID for extractContent catalog pods #726
• OCPBUGS-30219: bump otelgrpc to 0.46.0 #712
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-34404: [release-4.15] dns: fix deadlock in case of error #2182
• OCPBUGS-33294: Reuse node-subnet from cache if exists #2163
• OCPBUGS-33960: Egressip garp fix 4.15 #2175
• OCPBUGS-30899: use a forked version of j-keck/arping that fixes a threading issue #2105
• OCPBUGS-32426: [release-4.15] Improves service iptables efficiency on start up #2156
• [Release 4.15] OCPBUGS-32986: Bump OVS #2147
• OCPBUGS-27852: [release-4.15] Full implementation of KEP-1669 ProxyTerminatingEndpoints + ETP=local fix #2025
• OCPBUGS-29316: [release-4.15] Ignore missing live migratable pod annotation on AddNode #2065
• OCPBUGS-32202: [release-4.15] Bump OVN to 23.09.0-139 #2121
• OCPBUGS-33020: drop-forwarding: Add ClusterSubnets to allowed forwarding CIDRs #2141
• OCPBUGS-32154: Custom v4 and v6 transit switch subnets while creating kind cluster #2094
• OCPBUGS-31081: Periodically check the ovnkube-node certificate is not expired #2099
• OCPBUGS-31033: Remove OVN topology version reporting/detection #2098
• OCPBUGS-31500, OCPBUGS-31501: EIP multi NIC IPv6 support and default route with next hop #2103
• Full changelog

powervs-block-csi-driver

• OCPBUGS-33622: Fix CVE2023-45288 by bumping x/net to v0.24.0 -4.15 #80
• Full changelog

telemeter

• OCPBUGS-32890: CVE-2024-28180 bump go-jose to v3.0.3 #531
• Full changelog

tests

• #28776 FIX [release-4.15] OCPBUGS-33368: monitor test fix to wait before connecting to a non-existent dns on PowerVS and IBMCloud platforms #28791
• OCPBUGS-26520: Kuryr: Ignore Upgradeable=False on operators tests #28512
• OCPBUGS-33347: Provide SCC access via RBAC #28780
• OCPBUGS-33541: Adjust the method of get the apiServer (release-4.15) #28762
• OCPBUGS-33473: [release-4.15] MULTIARCH-4352: Censor private key from pod dump logs #28666
• : OCPBUGS-32554: Also rely on oomkilled exit code 137 in build test #28724
• OCPBUGS-31726: Use centos7 tag instead of latest for cmd images tests #28688
• OCPBUGS-30892: fix panic on non-standard node-role labels #28656
• Full changelog

vsphere-cluster-api-controllers

• OCPBUGS-30117: manifests: Add in CustomNoUpgrade #38
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• OCPBUGS-33604: FailedPrecondition volume does not appear staged #118
• Full changelog

---

View changelog in Markdown or change previous release: 4.15.154.15.144.15.134.15.124.15.114.15.104.15.94.15.84.15.74.15.64.15.54.15.44.15.34.15.24.15.14.15.04.15.0-rc.84.15.0-rc.74.15.0-rc.54.15.0-rc.44.15.0-rc.34.15.0-rc.24.15.0-rc.14.15.0-rc.04.14.424.14.414.14.404.14.394.14.384.14.374.14.364.14.354.14.344.14.334.14.324.14.314.14.304.14.294.14.284.14.274.14.264.14.254.14.244.14.234.14.224.14.214.14.204.14.194.14.184.14.174.14.164.14.154.14.144.14.134.14.124.14.114.14.104.14.94.14.84.14.74.14.64.14.54.14.44.14.34.14.24.14.14.14.04.14.0-rc.74.14.0-rc.64.14.0-rc.54.14.0-rc.44.14.0-rc.34.14.0-rc.24.14.0-rc.14.14.0-rc.04.13.544.13.534.13.524.13.514.13.504.13.494.13.484.13.474.13.464.13.454.13.444.13.434.13.424.13.414.13.404.13.394.13.384.13.374.13.364.13.354.13.344.13.334.13.324.13.314.13.304.13.294.13.284.13.274.13.264.13.254.13.244.13.234.13.224.13.214.13.194.13.184.13.174.13.164.13.154.13.144.13.134.13.124.13.114.13.104.13.94.13.84.13.74.13.64.13.54.13.44.13.34.13.24.13.14.13.04.13.0-rc.84.13.0-rc.74.13.0-rc.64.13.0-rc.54.13.0-rc.44.13.0-rc.34.13.0-rc.24.13.0-rc.04.12.704.12.694.12.684.12.674.12.664.12.654.12.644.12.634.12.624.12.614.12.604.12.594.12.584.12.574.12.564.12.554.12.544.12.534.12.524.12.514.12.504.12.494.12.484.12.474.12.464.12.454.12.444.12.434.12.424.12.414.12.404.12.394.12.384.12.374.12.364.12.354.12.344.12.334.12.324.12.314.12.304.12.294.12.284.12.274.12.264.12.254.12.244.12.234.12.224.12.214.12.204.12.194.12.184.12.174.12.164.12.154.12.144.12.134.12.124.12.114.12.104.12.94.12.84.12.74.12.64.12.54.12.44.12.34.12.24.12.14.12.04.12.0-rc.84.12.0-rc.74.12.0-rc.64.12.0-rc.54.12.0-rc.44.12.0-rc.34.12.0-rc.24.12.0-rc.14.12.0-rc.04.11.594.11.584.11.574.11.564.11.554.11.544.11.534.11.524.11.514.11.504.11.494.11.484.11.474.11.464.11.454.11.444.11.434.11.424.11.414.11.404.11.394.11.384.11.374.11.364.11.354.11.344.11.334.11.324.11.314.11.304.11.294.11.284.11.274.11.264.11.254.11.244.11.234.11.224.11.214.11.204.11.194.11.184.11.174.11.164.11.154.11.144.11.134.11.124.11.114.11.104.11.94.11.84.11.74.11.64.11.54.11.44.11.34.11.24.11.14.11.04.11.0-rc.74.11.0-rc.64.11.0-rc.54.11.0-rc.44.11.0-rc.34.11.0-rc.24.11.0-rc.14.11.0-rc.04.11.0-fc.34.11.0-fc.24.11.0-fc.0───4.19.0-0.nightly-2024-12-05-2226524.19.0-0.nightly-2024-12-04-1843504.19.0-0.nightly-2024-12-04-1031394.19.0-0.nightly-2024-12-04-0312294.19.0-0.nightly-2024-12-03-1950444.19.0-0.nightly-2024-12-03-1155564.19.0-0.nightly-2024-12-03-0437014.19.0-0.nightly-2024-12-02-2101064.19.0-0.nightly-2024-12-02-0457054.19.0-0.nightly-2024-12-01-2148574.19.0-0.nightly-2024-12-01-1442294.19.0-0.nightly-2024-11-30-0016334.19.0-0.nightly-2024-11-26-1103084.19.0-0.nightly-2024-11-23-021157───4.19.0-0.ci-2024-12-05-1801524.19.0-0.ci-2024-12-05-1201504.19.0-0.ci-2024-12-05-0601494.19.0-0.ci-2024-12-05-0001484.19.0-0.ci-2024-12-04-1801484.19.0-0.ci-2024-12-04-1201464.19.0-0.ci-2024-12-04-0601464.19.0-0.ci-2024-12-04-0001464.19.0-0.ci-2024-12-03-1801464.19.0-0.ci-2024-12-03-1201464.19.0-0.ci-2024-12-03-060146───4.18.0-0.nightly-2024-12-05-1913554.18.0-0.nightly-2024-12-05-1036444.18.0-0.nightly-2024-12-04-2039104.18.0-0.nightly-2024-12-04-1130144.18.0-0.nightly-2024-12-04-0103114.18.0-0.nightly-2024-12-03-1746394.18.0-0.nightly-2024-12-03-1143554.18.0-0.nightly-2024-12-03-0450064.18.0-0.nightly-2024-12-02-2111054.18.0-0.nightly-2024-12-02-1238324.18.0-0.nightly-2024-12-02-0343544.18.0-0.nightly-2024-11-30-1417164.18.0-0.nightly-2024-11-29-2037484.18.0-0.nightly-2024-11-27-1624074.18.0-0.nightly-2024-11-27-0859274.18.0-0.nightly-2024-11-27-0127164.18.0-0.nightly-2024-11-26-0756484.18.0-0.nightly-2024-11-22-231049───4.18.0-0.ci-2024-12-05-2015084.18.0-0.ci-2024-12-05-1415084.18.0-0.ci-2024-12-05-0815064.18.0-0.ci-2024-12-05-0215064.18.0-0.ci-2024-12-04-2015064.18.0-0.ci-2024-12-04-1415064.18.0-0.ci-2024-12-04-0815064.18.0-0.ci-2024-12-04-0215064.18.0-0.ci-2024-12-03-2015064.18.0-0.ci-2024-12-03-1415064.18.0-0.ci-2024-12-03-0815064.18.0-0.ci-2024-12-03-021506───4.17.0-0.nightly-2024-12-05-1526144.17.0-0.nightly-2024-12-04-1922574.17.0-0.nightly-2024-12-04-0523554.17.0-0.nightly-2024-12-03-1833574.17.0-0.nightly-2024-12-03-1406504.17.0-0.nightly-2024-12-03-0825234.17.0-0.nightly-2024-12-02-2235324.17.0-0.nightly-2024-12-02-1750164.17.0-0.nightly-2024-12-02-1035244.17.0-0.nightly-2024-12-02-0251264.17.0-0.nightly-2024-12-01-1349274.17.0-0.nightly-2024-11-30-1420344.17.0-0.nightly-2024-11-29-1224044.17.0-0.nightly-2024-11-28-2011024.17.0-0.nightly-2024-11-28-1323414.17.0-0.nightly-2024-11-28-0736314.17.0-0.nightly-2024-11-28-0026464.17.0-0.nightly-2024-11-27-1802324.17.0-0.nightly-2024-11-27-0920154.17.0-0.nightly-2024-11-27-0329454.17.0-0.nightly-2024-11-26-1919584.17.0-0.nightly-2024-11-26-1144564.17.0-0.nightly-2024-11-25-2054014.17.0-0.nightly-2024-11-25-1420204.17.0-0.nightly-2024-11-24-0154114.17.0-0.nightly-2024-11-23-1924384.17.0-0.nightly-2024-11-23-1153134.17.0-0.nightly-2024-11-23-0446444.17.0-0.nightly-2024-11-22-2215204.17.0-0.nightly-2024-11-22-1300354.17.0-0.nightly-2024-11-22-045157───4.17.0-0.ci-2024-12-05-2043554.17.0-0.ci-2024-12-05-1443334.17.0-0.ci-2024-12-05-0843174.17.0-0.ci-2024-12-05-0243174.17.0-0.ci-2024-12-04-2006194.17.0-0.ci-2024-12-04-0904064.17.0-0.ci-2024-12-04-0221544.17.0-0.ci-2024-12-03-2021544.17.0-0.ci-2024-12-03-1421544.17.0-0.ci-2024-12-02-1724124.17.0-0.ci-2024-12-02-112412───4.16.0-0.nightly-2024-12-05-1111034.16.0-0.nightly-2024-12-05-0622194.16.0-0.nightly-2024-12-04-1926204.16.0-0.nightly-2024-12-04-0242044.16.0-0.nightly-2024-12-03-1450284.16.0-0.nightly-2024-12-03-0144314.16.0-0.nightly-2024-12-02-1835364.16.0-0.nightly-2024-12-02-1114164.16.0-0.nightly-2024-12-02-0258204.16.0-0.nightly-2024-11-29-1940114.16.0-0.nightly-2024-11-29-1441544.16.0-0.nightly-2024-11-28-2134254.16.0-0.nightly-2024-11-28-1153354.16.0-0.nightly-2024-11-27-1651504.16.0-0.nightly-2024-11-27-1205574.16.0-0.nightly-2024-11-26-2129134.16.0-0.nightly-2024-11-26-0409344.16.0-0.nightly-2024-11-25-2305244.16.0-0.nightly-2024-11-23-1456194.16.0-0.nightly-2024-11-23-0425104.16.0-0.nightly-2024-11-22-072758───4.16.0-0.ci-2024-12-05-1753344.16.0-0.ci-2024-12-05-1153344.16.0-0.ci-2024-12-05-0553244.16.0-0.ci-2024-12-04-2239234.16.0-0.ci-2024-12-04-1639234.16.0-0.ci-2024-12-04-0408054.16.0-0.ci-2024-12-03-1611144.16.0-0.ci-2024-12-03-1011144.16.0-0.ci-2024-12-02-2303004.16.0-0.ci-2024-12-02-095938───4.15.0-0.nightly-2024-12-05-1413534.15.0-0.nightly-2024-12-05-0404544.15.0-0.nightly-2024-12-04-1640054.15.0-0.nightly-2024-12-04-0605224.15.0-0.nightly-2024-12-03-2219154.15.0-0.nightly-2024-12-03-1330174.15.0-0.nightly-2024-12-03-0314144.15.0-0.nightly-2024-12-02-201926───4.15.0-0.ci-2024-12-05-2114384.15.0-0.ci-2024-12-05-1138184.15.0-0.ci-2024-12-05-0227144.15.0-0.ci-2024-12-04-2027144.15.0-0.ci-2024-12-04-1343474.15.0-0.ci-2024-12-04-0653254.15.0-0.ci-2024-12-03-2021014.15.0-0.ci-2024-12-03-1227314.15.0-0.ci-2024-12-03-054701───4.14.0-0.nightly-2024-12-05-0239284.14.0-0.nightly-2024-12-04-1653194.14.0-0.nightly-2024-12-04-0422074.14.0-0.nightly-2024-12-03-2145544.14.0-0.nightly-2024-12-03-1327534.14.0-0.nightly-2024-12-02-205011───4.14.0-0.ci-2024-12-05-1428184.14.0-0.ci-2024-12-04-2220284.14.0-0.ci-2024-12-04-1524424.14.0-0.ci-2024-12-04-0924424.14.0-0.ci-2024-12-03-2158004.14.0-0.ci-2024-12-03-1334144.14.0-0.ci-2024-12-03-070439───4.13.0-0.nightly-2024-11-30-0419004.13.0-0.nightly-2024-11-23-1013054.13.0-0.nightly-2024-11-20-0919214.13.0-0.nightly-2024-11-19-0924194.13.0-0.nightly-2024-11-18-041323───4.13.0-0.ci-2024-12-05-1556344.13.0-0.ci-2024-12-05-0547324.13.0-0.ci-2024-12-04-2009524.13.0-0.ci-2024-12-03-0730394.13.0-0.ci-2024-12-02-1947584.13.0-0.ci-2024-12-02-0659564.13.0-0.ci-2024-11-30-040420───4.12.0-0.nightly-2024-12-04-0119504.12.0-0.nightly-2024-12-02-1832084.12.0-0.nightly-2024-12-02-0443584.12.0-0.nightly-2024-11-28-0022544.12.0-0.nightly-2024-11-27-1038174.12.0-0.nightly-2024-11-27-0039294.12.0-0.nightly-2024-11-25-1001394.12.0-0.nightly-2024-11-20-1247564.12.0-0.nightly-2024-11-18-021414───4.12.0-0.ci-2024-12-03-0259324.12.0-0.ci-2024-12-02-1735344.12.0-0.ci-2024-12-02-0430344.12.0-0.ci-2024-11-28-1234364.12.0-0.ci-2024-11-28-0232474.12.0-0.ci-2024-11-27-2032474.12.0-0.ci-2024-11-27-1432474.12.0-0.ci-2024-11-27-0039214.12.0-0.ci-2024-11-26-155836───4.11.0-0.nightly-2024-07-06-0140574.11.0-0.nightly-2024-07-01-0855474.11.0-0.nightly-2024-04-20-1326214.11.0-0.nightly-2024-04-15-1237064.11.0-0.nightly-2024-04-15-0346274.11.0-0.nightly-2024-03-18-1654324.11.0-0.nightly-2024-03-12-2229304.11.0-0.nightly-2024-02-01-0446274.11.0-0.nightly-2024-01-19-1107024.11.0-0.nightly-2024-01-15-0229494.11.0-0.nightly-2024-01-10-203533───4.11.0-0.ci-2024-11-14-2201374.11.0-0.ci-2024-11-14-1432224.11.0-0.ci-2024-09-18-0735584.11.0-0.ci-2024-09-17-2036254.11.0-0.ci-2024-07-30-2032534.11.0-0.ci-2024-07-23-1708064.11.0-0.ci-2024-07-01-0910384.11.0-0.ci-2024-06-07-1944004.11.0-0.ci-2024-06-05-1627184.11.0-0.ci-2024-06-01-042714───4.18.0-ec.44.18.0-ec.34.18.0-ec.24.18.0-ec.14.18.0-ec.0

Source code for this page located on github