4.15.19

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.15.19-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.15-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.15-micro Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.15-micro Succeeded periodic-ci-openshift-release-master-ci-4.15-e2e-azure-ovn-upgrade
- gcp-ovn-rt-upgrade-4.15-minor Succeeded periodic-ci-openshift-release-master-ci-4.15-upgrade-from-stable-4.14-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.15 Succeeded periodic-ci-openshift-hypershift-release-4.15-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-dualstack Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-metal-ipi-ovn-dualstack
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.14.20, 4.14.21, 4.14.22, 4.14.25, 4.14.26, 4.14.27, 4.14.28, 4.15.10, 4.15.11, 4.15.13, 4.15.14, 4.15.15, 4.15.5, 4.15.7, 4.15.8

4.15.18 (changes) - S S S S S
4.15.17 (changes) - Success
4.15.16 (changes) - Success
4.15.12 (changes) - Success
4.15.9 (changes) - Success
4.15.6 (changes) - Success
4.15.3 - Success
4.15.2 (changes) - Success
4.15.0 (changes) - Success
4.14.31 (changes) - Success Success
4.14.30 (changes) - Success
4.14.29 (changes) - Failed
4.14.24 (changes) - Success
4.14.23 (changes) - Success
4.14.19 (changes) - Success
4.14.18 (changes) - Success
4.14.17 (changes) - Success
4.14.16 (changes) - Success
4.14.0-0.nightly-2024-06-20-030041 (changes) - Success

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.15.3

Created: 2024-06-20 20:18:12 +0000 UTC

Image Digest: sha256:72dbe160063b42a23ba1b97eca3e22d75d0c757947890afaf4b27720c605e648

Release 4.15.19 was created from registry.ci.openshift.org/ocp/release:4.15.0-0.nightly-2024-06-20-070602

Components

Kubernetes upgraded from 1.28.7 to 1.28.10
Red Hat Enterprise Linux CoreOS upgraded from 415.92.202403080220-0 to 415.92.202406190406-0 (diff)

Rebuilt images without code change

agent-installer-utils git 33b7d855 sha256:c1999e384e731570b0532802c273f7612035eace2b4556a70b1b03f7940f09e1
alibaba-cloud-controller-manager git abf4fa96 sha256:d890833d409ba444af6dfb81c00cd1e932983d18366e08665553b39248580d08
alibaba-cloud-csi-driver git be4888d3 sha256:389e04ca9686deccb1805cde015e0939a1c2642af1fac546dfbc534e13123680
alibaba-disk-csi-driver-operator git 41b367ae sha256:a9dad6038c783164b1c7ef283a2fd5f8330b073571f2298a3b4f6cd459ea8f73
alibaba-machine-controllers git d3ba04c3 sha256:968ef81e79c74797df4f32de98b5b647671d62e7d64907bb9b1aee86bb2bdd82
aws-machine-controllers git 0129b1e3 sha256:623318d3b8b5328729d81bce27fb5e0579f7184082f45a0fb0c6ecc00bed9580
azure-disk-csi-driver git dcb7e1c7 sha256:b07ae705c8fa2c4ae2dac23015af3ce7ca593dff536b5f39e81091690e48096a
azure-disk-csi-driver-operator git 160cf624 sha256:ad5d47a8e5845c41e68634207f14346d6ca73f4cd289a749a599c0990038c9e6
cluster-baremetal-operator git fdce2d08 sha256:c46af7737156dd8bf905589bb5bce3c99ec25177d27ae02c3b011aff6e4f5af2
cluster-bootstrap git 0849c462 sha256:6baa1624777c5eefaed04df27ff1197dbf74ee600f8191266776034198a20eef
cluster-kube-cluster-api-operator git 128d8e08 sha256:0f6b642f75201d32dd3e8c360277be6539ce9a16baf613d4e1b836f1ded41742
cluster-kube-storage-version-migrator-operator git 37015e87 sha256:9012b84ff14e08d73ce1ac6ee0e2d78f4e82a6f97797ede2a29a5eb50c6aa1b5
cluster-machine-approver git 3a6b6ae6 sha256:434bab89b7d3f3b208ce08bdf6ce58145286510dc797522d2d4789dd18f58af9
cluster-olm-operator git a7ba8987 sha256:3d804164689813b4ead1130b7d36eb73011d95804b504d41451aec4a45d088e9
cluster-openshift-apiserver-operator git 74013916 sha256:403e34d0c79e566244708905cb206cf595f23040656e8a07636ea0bc53a79aeb
cluster-platform-operators-manager git 37a0a919 sha256:238733a82c994c67209abc55b6379279481a5466250c01e567884cc4e809ab2d
cluster-policy-controller git cc48f315 sha256:d2735c8c074d67a6fbd10871da971fcf49b41cb2900d5e97f3dafcb85bf3402c
cluster-update-keys git be6ba5b0 sha256:7b701406568c35ecd780b5ecc0ad69283fa34493f1239a280406dfbcef6e1452
configmap-reloader git 617398f5 sha256:ec8088e083fd3d527e348c75a289096341e8f517f08dd945172a080d7962038c
coredns git 22f950ea sha256:9508a871e104890826a0c7f08890b57f5dd9d1549e0caee610112aa3a5c90f4e
csi-driver-manila-operator git 2fc4a7cc sha256:aa8ed6483f83a8cc0c39e8377a5c5d9e14816bc86f7148562a37bcd13163d6cc
csi-driver-nfs git d032dc10 sha256:1cf868f930e2a903d4cc76e56209586e7058fb284aeaa845bc27c981a31d88c0
csi-driver-shared-resource git 260a085a sha256:5bdb8a9b20115af704b4c9aa7b7fcf7aefd740701cb6da5d83179ecaed352b41
csi-driver-shared-resource-operator git 8d017b7f sha256:df8d0f78a034504a2904abaef4f3cfd37cc807a638d0f50c0d7fa10c05dc1a87
csi-driver-shared-resource-webhook git 260a085a sha256:f6f350143ce8856fc5ac36e3ae58e6df394e273a62fee87efdbbaf50e2d99b3d
csi-external-attacher git f806f266 sha256:c1885d0bb81cc7f30a5f22676bdff2985613b15300e8779c2dda6dcf894c75a1
csi-external-provisioner git ce5a1a33 sha256:2e2e16ed863d85008fdd9d23e601f620ec149ea4f1d79bc44449ba7a8ad6d2b8
csi-external-resizer git 3b4236d3 sha256:c6c971e7f994869e2c4fb084d336ef41f3e0fb170468813c2454eda21b274b8a
csi-livenessprobe git 240bb8c0 sha256:e79d574eda09fd6b39c17759605e5ea1e577b8008347c7824ec7a47fd1f8f815
csi-node-driver-registrar git 9005584e sha256:d4ae187242ec50188e765b3cad94c07706548600d888059acf9f18cc4e996dc6
driver-toolkit git 7a448c2e sha256:d37a0fd58d82cf599925bfbd2579c6490123dbaa83967514b2fe642e6ed332fc
egress-router-cni git 39ea8ee1 sha256:55e40cba290fadafc1b7b420fa7113a2d9299a8b1901a00bd7b233ac54867899
gcp-machine-controllers git b15daaf5 sha256:3822f744484ef8333ca2c05489636ec05528d8307f284a2bc41e0b63f28db77b
gcp-pd-csi-driver git 856ee3e2 sha256:3f56bc67986536262b4b161844d062ae287be2cbcb3dd22808cb2a749279c65b
gcp-pd-csi-driver-operator git 3b91ee31 sha256:14db505d822eb3980bc5013508ef202ea23fa947c06efd2d1c3ee555d79b280e
ibm-cloud-controller-manager git 19e64d5c sha256:ee715d4636d3bd0ac997b0ff1ea39995020a0a1ef442bd3a164acca8e2ed1d9b
ibm-vpc-block-csi-driver git ce7f53cd sha256:106d77c24a5f664e1dd0585d88b32547f8e3f96dec86cf365b1a7135f5e5f6aa
ibm-vpc-node-label-updater git e1a0adca sha256:1a41dcde59f7edf59701ffef472fd70cd821fe38a94f634624f536648a0a5a8a
ibmcloud-cluster-api-controllers git 34fb6252 sha256:33f61a10a06cad22166cd3c46b21feccdedff80a98d156f4395d2919e26b2f09
ibmcloud-machine-controllers git 6b0b8ea7 sha256:35d00c7763a5fe26d51a34f221513521178c9fbf1f5be0ff2420868b82d28266
ironic-machine-os-downloader git bcbcd95b sha256:f5be3b297157b981f17f24295d469ecc94de750becbc0a7bf3f5eab044e85a02
ironic-static-ip-manager git 47200021 sha256:41ddfeca64804ad2742ae868642a3d60112438fc94c9964d8c886b447afa535b
kube-metrics-server git bcbf241c sha256:f47ceabd682086fccef4b2218e8c36072f40644f1651d755c3b5044f22024717
kube-proxy git 71a6f28d sha256:7f375fcb022e913a7bced0022c13e0118347336782f9baeea7e04fb9f68bb203
kube-rbac-proxy git e8e8c84b sha256:f15be2dc3d6d2c1848f997b7921d11bf4c0873c129cdf182155ac133880b0a89
kube-state-metrics git 037b59c2 sha256:8704d2c1da1c62610746457b6e1164d9bc80332e97c0713e90e9d3add35cb895
kube-storage-version-migrator git e8749689 sha256:42874dc069f0b6563b3523cdebb0d0789b04f125afd35c27b9a350ab86617849
libvirt-machine-controllers git 1e096cdf sha256:64f9942fe8909c8eb810c639466346ff68efaa45cc16f12007a72c2068f74cbf
machine-image-customization-controller git 97d87657 sha256:d504bf6ab9372f83ca27150e7cc381bbcd83cbadc4ad4d5967db5e341aa2e646
machine-os-content sha256:366758609eb488bca40eddc2038bbfd7c32f70073508983cdc52e9d8b7da5efd
machine-os-images git 9e9c920f sha256:2ea6b14933997476b0f1a2e090cb7d9a23610ab61cab0a7cb93aa402d45ba2b6
multus-admission-controller git 23a7cfe4 sha256:bf7178a8abce655f50c36276fb4973255dad1b3d28b7edb446267220182ed195
multus-networkpolicy git 6212406b sha256:4d2d9b6cd5d0f326f1ae6391bbdbbe0f0a2529f593dff8c98686709e1a04d00e
multus-route-override-cni git a5b755b5 sha256:4b8ccd58fa99842e5222b5eb5e85ea18912acd807d1c51fafa1932a65a932562
must-gather git 47335065 sha256:0ca95d38c2dc199dc336991818af4ade67286fd227b725d709233e81010f55b6
network-interface-bond-cni git f91decaa sha256:7264244bf893fd9134eda9cbabf3a28d10c8e40c9261c8646b319d553f520149
network-metrics-daemon git 0288f362 sha256:fd5d7fb8ef5cbe83a6f8aff31a624d482595c7934fdb9b44ee0f62045246ccf2
nutanix-cloud-controller-manager git 33fb22c1 sha256:afc6e3c5ef38bd9bc0bbdff0bbb547295e941b4e84d306c0953d5bb309cf8297
nutanix-machine-controllers git f02b1a28 sha256:2cc370a3d1973cae05a42c9cd3db96511d3f9340eef00f61939c4e40b2d9c337
oauth-proxy git 241a88c4 sha256:d8276d23009d5fa55bf0b552a4dff528ee2a9469b14512e5f4148ca30b0e42ae
olm-catalogd git 2724be3e sha256:e21d5abd0111b874909412ff42c71c7b1b0cefa9488195f303bb499b52903a5e
olm-operator-controller git e2906934 sha256:d0742e8d8b80b1fba42ebde599d09f4ebf7a4519bf689759eccc2da8ae11a474
olm-rukpak git 5b09cd44 sha256:f26cb69a55dbeff21c4e768bd3e712dd529e7c2ffc826cb834ffd1d5bddb6e20
openshift-state-metrics git 1915f645 sha256:bc29608ce77c7028607d47a685ff6c76fa212666c628f160dd01ee73a7d79207
ovirt-csi-driver git b8d25ad6 sha256:29a71c0b1141a149950c63c1241d93c4ebef87d095566945d966253fb31845fe
ovirt-csi-driver-operator git e9b0fa23 sha256:724fada8b45990d571a3caf79958f57629f7990021a8cf1ad7b0553cf6d52338
ovirt-machine-controllers git 5d708631 sha256:d3de5f5ff6a65619d82d5f02f6b4ca7e6eba60bacb9bab24acdf2fa180928384
powervs-block-csi-driver-operator git a3729dcb sha256:57800c5210442ff8cf5a1f4212fc2a2f1fb424ba1807d67a37f340ef5db9bafd
powervs-cloud-controller-manager git 521b80df sha256:953bf9f64417318e63f745a5d1f6bbc11a201f856d9b273f539e89f5c1291979
powervs-machine-controllers git 07e8f8b8 sha256:80e261561f3a5329ff54589fd8aa829b920a578a16a5c618a2caed15941e340a
prom-label-proxy git f3f1f5d1 sha256:85f9a485b73d32528862074ddf199f767e0299bc99ce1401b1b90729c49206ff
prometheus git 6828e446 sha256:38bd10b6a28c9ba6813a591b51d1ba851735ba9b8983cc4182428f06ff863b8b
prometheus-alertmanager git 870ade52 sha256:f0021faf49ceb0d02be6f2c9e17976f74af57863806f832a0ae958576164a9bb
prometheus-config-reloader git faad27f9 sha256:cdd305e3b49f9e1f45f749a17f16579a4f5abdc1ab9c80d2272ea524c7af1744
prometheus-node-exporter git aed837c3 sha256:ec1cfa62ba3dd3edb6603ac11c909109552824655e73b12fdcf6688b0a4dacf6
prometheus-operator git faad27f9 sha256:c0540db6904752391f9c926ecfb1b1fa2f9b6b3b5ff1106ff06360a6048dfd44
prometheus-operator-admission-webhook git faad27f9 sha256:db735dcf10113fb7e3b26cb2af108b50e2cf66a270c9ab306f99ab58cfe56e06
rhel-coreos sha256:a0feb7d16d7885ee1a363a9a1cba359ac4365d6a25ba4433afe9d737f838cf93
rhel-coreos-extensions sha256:617e3e6c20701e2fdd669e6cb7498ff46b9ddbc7ea7382cb386013a8bcada7e3
route-controller-manager git c5cc7a73 sha256:72025440f89c39b0264f23ce1b2f48ad2d154635bf5a8cca73c224c3d0bf0dc4
sdn git 71a6f28d sha256:4629ca6f9e617e661417918e0d380c1ad96d550ade1b407eb0bde7985cb85729
thanos git 66161ad4 sha256:7e9a08f28ad8862b17957ca4bd4747436d1957dfc78caf6a5b8dae0378c215c5
vsphere-cloud-controller-manager git d2af6982 sha256:8e6e9e2bb77eaa122219614291d4d469937fc0eed05c6e728b287e0218c7dc5e
vsphere-csi-driver-operator git e0d46570 sha256:6a2c9e4a314361ff69085072b50e1d479c4ed13ea6ee8864e8be113ebcd782e3
vsphere-problem-detector git de02a75d sha256:81929809b099083429b002d827068ada1416ca116f5d85a589f00807e7ee90fe

agent-installer-api-server

OCPBUGS-34641: Invalid Pull-Secret when using password which contains a colon character (#6381) #6381
OCPBUGS-31631: Deploy dual stack with IPv6 on top of bond/vlan fails (#6245) #6245
MGMT-17593: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#6217) #6217
17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6211) #6211
Revert “MGMT-17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6194)” (#6208) #6194
MGMT-17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6194) #6194
MGMT-17541: Replace broken golangci reference (#6191) #6191
OCPBUGS-30232: Handle skipping hostPrefix validation for IPv6 For non-OVN/SDN networkTypes, the hostPrefix validation is not required and it is skipped. This fixes a regression introduced in the fix for https://issues.redhat.com/browse/OCPBUGS-23069 in which IPv6 CIDRs were not using the correct default hostPrefix. In addition, all cases where the validation is used are now covered. (#6137) #6137
NO-ISSUE: replace postgres images as current one disappeared from quay (#6135) #6135
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

MGMT-16843: Use hostnamectl to replace illegal hostname (#851) #851
MGMT-17593: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#833) #833
MGMT-17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#827) #827
MGMT-17541: Replace broken golangci reference (#824) #824
Full changelog

agent-installer-node-agent

OCPBUGS-33404: Make removable disks eligible (#718) #718
MGMT-17593: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#704) #704
MGMT-17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#699) #699
MGMT-17541: Replace broken golangci reference (#695) #695
Full changelog

apiserver-network-proxy

OCPBUGS-31953: Bump golang.org/x/net to v0.23.0 #51
Full changelog

aws-cloud-controller-manager

OCPBUGS-31954: update for CVE-2023-45288 [release-4.15] #81
OCPBUGS-29079: Updates build-rpm.sh to set release to build time #76
Full changelog

aws-cluster-api-controllers

OCPBUGS-30117: manifests: Add in CustomNoUpgrade #511
OCPBUGS-32114: UPSTREAM: <carry>: Fix instance PrivateDNSName when domain-name is set in dhcpOpts #508
OCPBUGS-31036: UPSTREAM: 4670:Update awsmachine providerID and instanceID immediately after ec2:RunInstances is called #501
OCPBUGS-30595: fix e2e tests on release branches #504
Full changelog

aws-ebs-csi-driver

OCPBUGS-33043: UPSTREAM: 1919: Add reserved-volume-attachments #263
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-33043: Explicitly reserve 1 attachment for the root disk #222
OCPBUGS-30621: remove legacy directory and duplicate Dockerfile.*.test files #201
OCPBUGS-30621: move test manifest to top-level directory #195
Full changelog

aws-pod-identity-webhook

OCPBUGS-32886: Upgrade go-jose module to 2.6.3 #188
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-33127: Improvements to client timeouts to prevent hangs #118
OCPBUGS-33092: Bump otelgrpc #117
OCPBUGS-30970: Update acr-credential-provider.spec #115
OCPBUGS-30970: Adds acr-credential-provider spec file and build script #114
Full changelog

azure-cluster-api-controllers

OCPBUGS-29502: Bump helm to v3.14.4 #303
Full changelog

azure-file-csi-driver

OCPBUGS-33038: Rebase v1.29.5 for OCP 4.15 #65
Full changelog

azure-file-csi-driver-operator

OCPBUGS-33038: add token audience for Azure File #103
Full changelog

azure-machine-controllers

OCPBUGS-30215: Remove startupScript vmextension lookup #103
Full changelog

azure-workload-identity-webhook

OCPBUGS-32895: Upgrade go-jose module to 2.6.3 #17
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-35586: [release-4.15] bump github.com/containers/image for CVE fix #8621
OCPBUGS-31387: If host is offline or disconnected don’t check ver #8208
OCPBUGS-35355: baremetal: Don’t always enable provisioning-interface.service #8580
OCPBUGS-35032: [release-4.15] aws: terraform: add spot instance support for masters #8540
OCPBUGS-35059: images: change libvirt-installer base #8550
OCPBUGS-33672: add quota support to ca-west-1 #8412
OCPBUGS-33454: go.mod: bump aws-sdk-go for ca-west-1 support #8381
OCPBUGS-33205: Gcp bootstraping release 4.15 #8339
OCPBUGS-33542: images: do not force terraform-providers to be statically linked #8392
OCPBUGS-29929: GCP Destroy cleanup correct zones/records #8062
OCPBUGS-32383: sdk/aws: add ssh security group rule for compute #8282
OCPBUGS-32690: AWS: bump CCO for permission fix #8302
OCPBUGS-32264: always save serial logs if they were gathered #8274
OCPBUGS-30944: Don’t run libvirt validations in agent installer #8167
NO-ISSUE: test fix to support slightly different nmstate error messages #8285
OCPBUGS-32259: escape ‘%’ in proxy settings #8272
OCPBUGS-32355: Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility #8277
OCPBUGS-31335: openstack: Honour worker server group policy #8202
: OCPBUGS-31590: GCP: Skip populating Private/Public Zones within DNS manifest #8220
OCPBUGS-30922: coreos-installer iso kargs show broken on Agent ISO #8163
OCPBUGS-30822: Validate control plane replicas #8143
OCPBUGS-31274: IBMCloud: Restrict CIS and DNS Service lookup #8197
OCPBUGS-30605: upi: aws: fix typo in worker templates #8125
Bug OCPBUGS-31284: OpenStack: enable 30000:32767 nodePort IPv6 traffic #8199
OCPBUGS-31087: Fix vsi image missing #8186
OCPBUGS-30098: feat: add check for SNO bootstrap condition #8089
OCPBUGS-30601: update RHCOS 4.15 bootimage metadata to 415.92.202402201450-0 #8122
OCPBUGS-30854: Power VS: Fix wait_for_workspace #8159
OCPBUGS-29964: fix Azure API SKU calls timing out #8086
OCPBUGS-30792: Enable deploy by Service ID on PowerVS #8138
OCPBUGS-30577: Authn with platform-services-go-sdk for PowerVS #8118
Full changelog

baremetal-machine-controllers

OCPBUGS-30876: Bump golang-protobuf version #214
Full changelog

baremetal-operator

OCPBUGS-34682: PreprovisioningImage should not be created on poweroff #358
Full changelog

baremetal-runtimecfg

OCPBUGS-35543: Add support for OVN HostCidrs annotation #319
OCPBUGS-32024: Decrease log level when detecting node IP #304
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-35201: Bump joelanford/ignore to bump go-git to 5.11.0 #1798
OCPBUGS-32840: Bump go-jose indirect reference to 2.6.3 #1749
OCPBUGS-31879: Add OIDC specific certificate authority bundle flag #1730
OCPBUGS-31726: Remove some of newapp unit tests relying on external deprecated images #1726
OCPBUGS-30286: oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators #1698
Full changelog

cloud-credential-operator

OCPBUGS-32900: Upgrade go-jose module to 2.6.3 #696
OCPBUGS-31924: aws: remove non-existent permission #691
Full changelog

cloud-network-config-controller

OCPBUGS-33780: Avoid panic when looking up attachedOutboundRule.ID in azure #145
OCPBUGS-31754: Avoid nil pointer panic while assigning private IP on Azure #137
Full changelog

cluster-authentication-operator

OCPBUGS-34795: set required-scc for openshift workloads #675
Full changelog

cluster-autoscaler

OCPBUGS-31464: add check for taint.value == nil #293
Full changelog

cluster-autoscaler-operator

OCPBUGS-31947: Update x/net to v0.24.0 #319
Full changelog

cluster-capi-controllers

OCPBUGS-30117: manifests: Add in CustomNoUpgrade #206
OCPBUGS-33200: Bump protobuf to v1.33.0 #204
OCPBUGS-30595: fix e2e tests on release branches #201
Full changelog

cluster-capi-operator

OCPBUGS-30117: manifests-gen: also add CustomNoUpgrade annotation value #166
OCPBUGS-30118: create openshift-cluster-api namespace in CustomNoUpgrade #167
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-33547: update azure and ash tolerations on node manager #343
Bug OCPBUGS-32246: Allow to patch events in OpenStack RBAC #339
Full changelog

cluster-config-api

OCPBUGS-35214: [Release 4-15] Add transit switch config to 4.15 #1872
OCPBUGS-28928: Add UnservableInFutureVersions route status condition type #1751
Full changelog

cluster-config-operator

OCPBUGS-26542: remove duplicate manifests in image #395
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-34971: Add unreadyNodeGracePeriod for allowing brief node hiccups #299
OCPBUGS-35496: Wait for ControlPlaneMachineSet to be created when waiting for it to be updated #308
OCPBUGS-35255: Improved debugging of API listing errors #301
[Release 4.15] OCPBUGS-32414: Fix ExportFailureDomain to handle empty platform spec #290
[Release 4.15] OCPBUGS-32357: Modified webhook to allow templates by name instead of just by path. #289
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-31599: create suitable role and roleBinding for csi-snapshot-webhook #203
Full changelog

cluster-dns-operator

OCPBUGS-32093: Add RBAC related to featuregates to fix hypershift upgrade #407
Full changelog

cluster-etcd-operator

OCPBUGS-33564: return errors in wait-for-ceo #1261
OCPBUGS-32952: remove etcd-health-probe log #1257
OCPBUGS-31942: update golang x net #1253
OCPBUGS-31865: bump(library-go)=release-4.15 #1220
OCPBUGS-30915: CEO aliveness check should only detect deadlocks #1225
Full changelog

cluster-image-registry-operator

OCPBUGS-34571: azure-path-fix: get client secret from k8s secret #1049
OCPBUGS-34539: pkg/storage/s3: use force path style in favour of virtual hosted style config #1048
OCPBUGS-33208: azurepathfix: check if platform status is nil before accessing it #1031
OCPBUGS-32396: azure-path-fix: support auth via account key (without clientID) #1022
OCPBUGS-31641: bump aws-sdk-go from v1.44 to v1.50 #1014
Full changelog

cluster-ingress-operator

OCPBUGS-28928: Prevent upgrades for SHA1 default cert and SHA1 route certs #1014
OCPBUGS-35028: internalServiceChanged: Fix target port logic #1081
OCPBUGS-34887: TestHostNetworkPortBinding: Delete t.Parallel() #1075
OCPBUGS-34252: Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1058
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-29361: operator: stop removing kube-apiserver-slos asset #1643
OCPBUGS-34492: Create one-shot migrations for the flowcontrol group. #1692
OCPBUGS-33697: add a controller that reconciles SCCs’ volumes #1679
OCPBUGS-33277: Fix incorrect name for hostmount-anyuid SCC ClusterRole #1672
OCPBUGS-31807: Use RotatedSigningCASecret in update only mode #1662
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-31807: use RotatedSigningCASecret and RotatedSelfSignedCertKeySecret only in update mode #801
OCPBUGS-31865: bump(library-go)=release-4.15 #797
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-31865: bump(library-go)=release-4.15 #537
Full changelog

cluster-monitoring-operator

OCPBUGS-33512: fix Thanos ruler alert generator url #2343
OCPBUGS-32055: backport ols metric allowlist to 4.15 #2313
OCPBUGS-28769: fix generation of telemeter token hash #2303
Full changelog

cluster-network-operator

OCPBUGS-29739: Run dhcp-daemon pods as system-node-critical priority #2283
OCPBUGS-34596: Add ipsec state metric #2389
OCPBUGS-32515: Fix wait logic for IPsec certificate signing request #2348
OCPBUGS-29092: Add probes to node-network-identity #2253
OCPBUGS-29654: Fully disable network-node-identity on ROKS #2314
OCPBUGS-30927: ensure local networking deployments within hypershift use the client side load balancer to be resilient to control plane node failures #2310
OCPBUGS-30615: Fix managed cluster detection on ARO #2304
Full changelog

cluster-node-tuning-operator

OCPBUGS-33929: Negative net interface name does not reduce queues (#1066) #1066
Add a ‘.snyk’ to silence static code analysis warnings (#1001) #1001
fix extra-reboot on upgrade with paused mcp worker (#1049) #1049
fix rendering extra ctrcfgs (#975) #975
OCPBUGS-31694: E2E: Workload hints test cases fixes (#1012) (#1043) #1012
Reduce number of reboots in offline tests (#1014) #1014
Systemd processes not being moved to cpuset/systemd.slice fix (#1016) #1016
Scheduler plugin: ignore IRQs (#983) #983
e2e: when crun is enabled by default skip checking runc config (#1013) #1013
OCPBUGS-30507: Add performance real time tuned template (#984) #984
Report duplicate priority only for multiple matching profiles (#965) #965
hack: fix backport of render-sync.sh (#996) #996
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-31708: Update opentelemetry dependency 415 #342
OCPBUGS-25985: Disable deployer-controller when deploymentconfig is disabled #322
Full changelog

cluster-samples-operator

OCPBUGS-22034: bump K8s version to 29.2 #538
Full changelog

cluster-storage-operator

OCPBUGS-33466: Fix problem-detector proxy setting #471
Full changelog

cluster-version-operator

OCPBUGS-33984: Add admin-gate for OCP 4.16 #1049
Full changelog

console

OCPBUGS-34350: Create Serverless form does not create BuildConfig #13891
OCPBUGS-32029: Use UserInfo username field when logging out as kubeadmin #13748
OCPBUGS-30208: Fix asynccache bugs #13807
OCPBUGS-33838: TaskRuns should not be fetched for Failed PLR’s #13863
OCPBUGS-34703: fix bug where textarea is not resizable #13913
Revert “OCPBUGS-34550: Dont render ARN mode role field and warning for HyperShift clusters” #13905
OCPBUGS-33263: Pipeline list page is crashed when navigating from Search page #13819
OCPBUGS-33166: Fix NAD always on default namespace #13865
OCPBUGS-31863: make sure folder is encapsulated with quotas #13737
OCPBUGS-33506: Fix Pipeline details page with when expression using CEL expression #13835
OCPBUGS-32505: Add visual connector between VMs and non VMs workloads #13782
OCPBUGS-33548: restrict Masthead logo to max-height #13839
OCPBUGS-32497: Improve Create serverless function error message #13778
OCPBUGS-33191: Hide dev perspective Pipelines nav option if dynamic plugin nav option is enable #13810
OCPBUGS-33058: fix issues with Edit Route form #13800
OCPBUGS-32187: Add flag to hide Output tab contributed by pipelines-plugin #13756
OCPBUGS-32716: Helm Plugin’s Catalog incorrectly renders a single index entry into multiple tiles #13788
OCPBUGS-32506: setting correct image trigger annotation #13783
OCPBUGS-32933: change OperatorHub filter FIPS Mode to Designed for FIPS #13796
OCPBUGS-31799: Improve PipelineRun list view performance #13731
OCPBUGS-32796: auth: fix OIDC logging out #13793
OCPBUGS-31445: Upgrade Pipeline trigger resources to v1beta1 #13704
OCPBUGS-31045: fix for execute inline markdown syntax issue #13681
OCPBUGS-32518: Add warning about service binding operator will not be supported from 4.15 #13784
OCPBUGS-32391: Routes created by devfiles do not always use HTTPS #13771
OCPBUGS-32340: Increased max nodes limit to 200 in topology page #13767
OCPBUGS-32399: Update devfile library to v2.2.2 #13762
OCPBUGS-32156: TaskRun status is not displayed near the name #13752
OCPBUGS-31806: Use bearer-token for local dev with auth #13732
OCPBUGS-31839: fix bug where paused MCPs were incorrectly unpausing w… #13735
OCPBUGS-31105: Update to pf5.2 to fix quick starts #13686
OCPBUGS-31476: Requesting for country codes in localization of openshift - webconsole #13707
OCPBUGS-31046: Application creation fail when manually entering input scaling value in local setup #13682
OCPBUGS-30916, OCPBUGS-30917: PipelineRuns in Console show wrong status or load indefinitely #13672
OCPBUGS-30869: TaskRun with same name in different project don’t show 2 entries when listing in all namespace #13668
OCPBUGS-31107: Upload Jar form’s Clear button is not functioning #13688
OCPBUGS-30759: Fix bugs in Console dynamic plugin SDK webpack code #13678
OCPBUGS-30871: fix Configure link in AlertmanagerReceiversNotConfigur… #13669
OCPBUGS-29963: i18n upload/download routine task - chore(i18n): update translations #13670
OCPBUGS-30801: Switch to service to get the PLR and TR logs from the Tekton results summary API #13663
OCPBUGS-30275: adjusting documentation links for 4.15 #13648
OCPBUGS-30870: chore(i18n): update translations: Completed OCP-4.15/Master Branch/Sprint 245 #13641
Full changelog

console-operator

OCPBUGS-31520: oidc: synchronize the CM with a CA to trust the issuer, if configured #881
OCPBUGS-33720: Add missing return statement to fix crash in healthcheck controller #903
OCPBUGS-31499: Update RHDH QuickStarts and add CR examples #880
OCPBUGS-31619: use InfrastructureTopology for clusters using external CP as the console deploys on the worker nodes #882
OCPBUGS-29332: Remove Janus IDP and update RHDH quickstarts #863
Full changelog

container-networking-plugins

OCPBUGS-30045: [4.15] cherry-pick containernetworking/plugins#997 #155
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-32246: Remove enforcement of IPv6 LB as internal #277
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-31599: add cmdline args to enable group snapshot webhooks #147
Full changelog

docker-builder

OCPBUGS-32845: bump go-jose to fix CVE-2024-28180 #396
BUILD-854: Add adambkaplan as approver #381
Full changelog

docker-registry

OCPBUGS-31641: vendor: bump aws-sdk-go to support ca-west-1 #396
Full changelog

etcd

OCPBUGS-32768: Revert “OCPBUGS-31644: Rebase etcd 3.5.13 openshift 4.15” #264
OCPBUGS-31644: Rebase etcd 3.5.13 openshift 4.15 #260
OCPBUGS-28731: Rebase etcd 3.5.12 openshift 4.15 #243
Full changelog

gcp-cloud-controller-manager

OCPBUGS-30970: Update gcr-credential-provider.spec #60
OCPBUGS-30970: Adds auth-provider-gcp .spec file and build script #59
Full changelog

gcp-cluster-api-controllers

OCPBUGS-30117: manifests: Add in CustomNoUpgrade #225
OCPBUGS-30595: fix e2e tests on release branches #223
Full changelog

haproxy-router

OCPBUGS-28928: Upgrade Validation plugin for SHA1 certs #585
OCPBUGS-32977: Count active services before setting weight to 1 #586
OCPBUGS-32693: Reject routes with MD5 certs #584
OCPBUGS-32435: Introduce ‘idle-close-on-response’ option for frontends #579
OCPBUGS-31544: Properly handle rewrite-target annotation #569
Full changelog

hyperkube, pod

OCPBUGS-33711: Bump to Kubernetes v1.28.10 #1969
OCPBUGS-33347: Provide SCC access via RBAC #1962
OCPBUGS-29613: UPSTREAM: <carry>: bump structured-merge-diff #1893
OCPBUGS-32299: Bump to k8s 1.28.9 #1946
OCPBUGS-29922: UPSTREAM: <carry>: openshift-kube-apiserver: pod .spec.nodeName should not override project node selector in podNodeEnvironment admission plugin #1897
OCPBUGS-31807: UPSTREAM: <carry>: allow type mutation for specific secrets #1939
UPSTREAM: <carry>: OCPBUGS-31348: fix cpu manager cpuset check #1915
OCPBUGS-31740: 4.15: UPSTREAM: 124048: Use the right feature gate when updating uncertain volumes #1935
OCPBUGS-31503: Bump to 1.28.8 #1926
Address CVE #11
OCPBUGS-30963: Set up CEL IP/CIDR library from 4.14 onwards #1912
Full changelog

hypershift

OCPBUGS-32404: Fix failure to create a second hostedcluster in the same namespace #3907
NO-JIRA: chore(deps): update konflux references to ff44cf3 (release-4.15) #4246
NO-JIRA: feat(olm): Set packageserver replicas to 2 for IBMCloudPlatform #4231
chore(deps): update konflux references to 2be7c9c (release-4.15) #4224
OCPBUGS-34580: Add TrustedBundles to OAS container #4211
NO-JIRA: hack: make the e2e script generic #4199
OCPBUGS-33627: Restrict image registry overrides to control plane components #4131
OCPBUGS-34156: fix router on 4.14 y-stream upgrade #4077
OCPBUGS-35002: [release-4.15] HOSTEDCP-1122: Backport etcd defrag controller #4162
NO-JIRA: Update Konflux references to 1025001 (release-4.15) #4180
NO-JIRA: chore(deps): update konflux references (release-4.15) #4167
OCPBUGS-34997: add AWS STS URL to OIDC provider audiences #4157
OCPBUGS-35074: Fix disconnected metadata inspection for nodepool #4175
HOSTEDCP-1708: remove liveness and readiness probes that use the metrics #4128
OCPBUGS-34423: Fixed audit-logs sigterm failing to terminate gracefully #4089
OCPBUGS-33526: Disable DNS resolving for CNO #4148
OCPBUGS-34904: remove weak cipher #4156
OCPBUGS-34510: Reconcile KAS endpoints and endpoint slice #4097
NO-JIRA: test/e2e: fix prometheus serviceaccount handling against 4.16+ #4151
NO-JIRA: chore(deps): update rhtap references (release-4.15) #4120
NO-JIRA: chore(deps): update rhtap references (release-4.15) #4072
OCPBUGS-33510: Run haproxy to connect to kas from data plane if noproxy settings contain kas #4014
NO-JIRA: chore(deps): update rhtap references to 7cd8020 (release-4.15) #4064
NO-JIRA: Remove CLI inspection of release image #4056
HOSTEDCP-1518: Preserve container resource requests and limits #4032
NO-JIRA: Update RHTAP references (release-4.15) #4041
OCPBUGS-33118: Recycler-pod image now points to the OCP Payload reference #3963
OCPBUGS-32220: Fix disconnected metadata inspection #3881
NO-JIRA: Update RHTAP references to 1f62eaf (release-4.15) #4030
OCPBUGS-33117: Reconcile over ICSP/IDMS #3962
NO-JIRA: Update RHTAP references to 2d39df1 (release-4.15) #4022
HOSTEDCP-1480: Update TLS cert hash creation with sha512 #4017
HOSTEDCP-1513: Support hypershift-operator scoping for hostedclusters #3998
Revert “[release-4.15] OCPBUGS-32013: Set OPERATOR_IMAGE environment variable” #3939
OCPBUGS-33207: Remove kube-scheduler readiness probe #3955
NO-JIRA: chore(deps): update rhtap references to c6fdbf4 (release-4.15) #3989
OCPBUGS-25858: Improve description for agent APIServerAddress CLI flag #3977
OCPBUGS-33224: disable OCM pull secret controller when imageregistry config managementstate is Removed #3976
NO-JIRA: chore(deps): update rhtap references (release-4.15) #3982
OCPBUGS-31747: update desired image even when HCP doesn’t exist yet #3839
NO-JIRA: chore(deps): update rhtap references to e9efe99 (release-4.15) #3974
OCPBUGS-32229: disable autoscaler when no nodepool require it #3884
NO-JIRA: chore(deps): update rhtap references (release-4.15) #3967
HOSTEDCP-1552: Update RHTAP tekton files for 0.3 -> 0.4 migration #3957
OCPBUGS-31826: use dnsPolicy: Default for konnectivity-agent in data plane #3845
NO-JIRA: Update RHTAP references (release-4.15) #3935
OCPBUGS-32715: Fix OLM intilization args #3923
HOSTEDCP-1519: [release-4.15] feat(api): Add ingress-controller-load-balancer-scope annotation #3908
NO-JIRA: chore(deps): update rhtap references (release-4.15) #3921
OCPBUGS-32164: Fix ICSP and IDMS inclusion as registriesOverrides #3870
NO-JIRA: chore(deps): update rhtap references (release-4.15) #3904
OCPBUGS-30280: Switch to use service endpoint for Konnectivity #3692
OCPBUGS-32191: Kas disable audit cherry pick release 4.15 #3875
OCPBUGS-32114: Add new permission required in CAPA #3861
NO-JIRA: Update RHTAP references (release-4.15) #3887
NO-JIRA: [release-4.15] [e2e test framework] Add a flag to add an annotation to HostedCluster #3893
HOSTEDCP-1524: [release-4.15] Support additional node selectors for request serving nodes #3883
NO-JIRA: chore(deps): update rhtap references (release-4.15) #3873
NO-JIRA: chore(deps): update rhtap references (release-4.15) #3868
OCPBUGS-32013: Set OPERATOR_IMAGE environment variable #3853
NO-JIRA: chore(deps): update rhtap references (release-4.15) #3857
NO-JIRA: Update RHTAP references (release-4.15) #3835
OCPBUGS-31766: include hostnetwork SCC CPO role for 4.13 and earlier #3840
HOSTEDCP-1438: [release-4.15] Preserve container resources for more hosted control plane components #3828
OCPBUGS-31324: Add missing PodSecurityViolation alert #3798
NO-JIRA: Increase stability in autoscaled environments #3777
OCPBUGS-31471: Reduce log file size for hypershift apiservers #3816
OCPBUGS-31604: disable http2 for ignition server and proxy #3825
OCPBUGS-31426: copy issuerCertificateAuthority configmap into HC openshift-config #3808
OCPBUGS-31265: inject built-in MCP selector for KubeletConfigs and ContainerRuntimeConfigs #3802
NO-JIRA: Update RHTAP references (release-4.15) #3812
NO-JIRA: Remove unused ref to hostnetwork in cpo role #3796
OCPBUGS-31064: ibmcloud KMS: remove breaking image check and enable KMS v2 support #3774
OCPBUGS-31377: Manually cherry pick #3782 to 4.15 #3803
OCPBUGS-31326: fix(ignition): Fix priority class override #3800
OCPBUGS-30804: honor HC image configuration #3730
”[release-4.15] OCPBUGS-30164: Ensure cloud resources are destroyed for all platforms when –destroy-cloud-resources is used” #3677
OCPBUGS-31116: external OIDC: fix certificateAuthority field in structured auth config #3783
OCPBUGS-30862: Manual cherry pick 3685&3727 to release 4.15 #3740
NO-JIRA: chore(deps): update rhtap references (release-4.15) #3791
NO-JIRA: Update RHTAP references (release-4.15) #3785
OCPBUGS-29881: feat(ho): Add flag for dedicated request serving isolation #3633
OCPBUGS-30742: [4.15] HCP deletion can get stuck if CPO is unable to delete the default worker security group #3726
OCPBUGS-30650: Set KAS config pod security Enforce to privileged #3719
NO-JIRA: Bump CPO API budget to 4000 in EnsureApiBudget #3741
OCPBUGS-30651: Remove EnsurePSANotPrivileged #3744
NO-JIRA: Update RHTAP references (release-4.15) #3754
HOSTEDCP-1488: Use regionalized STS endpoints in AWS #3747
NO-JIRA: Update RHTAP references (release-4.15) #3738
OCPBUGS-30581: [release-4.15] OCPBUGS-30220: Align PSA labels on guest cluster namespaces with standalone OCP #3684
OCPBUGS-30572: [release-4.15] Update OLM Default Catalog Sources to 4.15 #3696
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-33641: [ibm-vpc] Scheduling issue on IBM Cloud Bare Metal nodes #116
Full changelog

insights-operator

OCPBUGS-32702: anonymization - externalIP can be nil (#931) #931
OCPBUGS-31946: bump golang.org/x/net version (#925) #925
Full changelog

ironic

Bug OCPBUGS-33736: Disable installation of .pyc files through pip #511
OCPBUGS-32365: [4.15] Remove unused prometheus exporter #485
OCPBUGS-32351: [4.15] Update to include fixes for ironic servicing feature #479
OCPBUGS-32389: Use unix sockets by default for reverse proxy communication #474
OCPBUGS-31686, OCPBUGS-31802, OCPBUGS-31830: [4.15] install ironic projects from source #470
OCPBUGS-31802: [4.15] Add requirements placeholders for cachito #467
Full changelog

ironic-agent

OCPBUGS-33133: update ironic-lib with latest fixes #131
OCPBUGS-32173: [4.15] Fix name in setup.cfg #123
OCPBUGS-31811: [4.15] Add makefile #126
OCPBUGS-31811: [4.15] Install ironic-python-agent from source #125
OCPBUGS-31811: [4.15] Add requirements placeholders for cachito #121
Full changelog

k8s-prometheus-adapter

OCPBUGS-32214, OCPBUGS-32215: upgrade deps #102
Full changelog

keepalived-ipfailover

OCPBUGS-30413: update unit tests in egress/dns-proxy #168
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-31801: Bump opentelemetry #39
OCPBUGS-24118: Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART #28
OCPBUGS-22061: Bump golang.org/x/net to v0.18.0 #34
Full changelog

kubevirt-csi-driver

OCPBUGS-29793: [release-4.15] Address https://github.com/advisories/GHSA-fg9q-5cw2-p6r9: Restrict access to infrastructure PVCs by requiring matching infraClusterLabels on tenant PVCs #33
Full changelog

machine-api-operator

OCPBUGS-31949: Update x/net to v0.24.0 #1231
OCPBUGS-30215: Azure MAO CredentialsRequest Contains Unnecessary virtualMachines/extensions Permissions #1222
Full changelog

machine-config-operator

OCPBUGS-32092: Decrease logs of haproxy #4313
OCPBUGS-35010: set required-scc for openshift workloads #4393
OCPBUGS-31461: Remove weights from ingress check script #4290
OCPBUGS-33847: If multiple hostnames are returned, use the first one for the Node name #4373
OCPBUGS-20152: Don’t error if the certs.d dir doesn’t exist yet #4358
OCPBUGS-32922: [release-4.15] add cluster fleet evaluation support to mco #4334
OCPBUGS-28926: [4.15] crio: update pids limit to be -1 #4163
OCPBUGS-28545: Delete state files on reboot only #4311
OCPBUGS-31820: Remove the condition for checking the multiple ovs-if-br-ex profiles #4309
OCPBUGS-27029: Log network service output to console #4113
OCPBUGS-31646: fix: resources were in the wrong indentation level #4301
: OCPBUGS-31576: kubelet: restorecon necessary files on kubelet’s prestart #4297
OCPBUGS-30884: Prevent OVS-configuration to run before kdump #4259
OCPBUGS-31383: make verify should use MCO’s kube version #4282
OCPBUGS-30971: add preferredduringscheduling annotation to kube-rbac-proxy-crio #4264
OCPBUGS-29731: Delete image openshift/openshift-proxy-pull-test #4199
OCPBUGS-30093: Mount /run/nodeip-configuration into coredns containers #4229
Full changelog

monitoring-plugin

OU-417: throw an error when a custom datasource is not found #118
OU-415: Add datasource parameter to handle metrics from custom datasources #116
OCPBUGS-32097: make createdBy mandatory and auto fill with the current user #115
OCPBUGS-31310: upgrade sanitize-html vulnerable dependency #107
Full changelog

multus-cni

OCPBUGS-35047: Update owners file #240
OCPBUGS-35258: Thick plugin should not wait for API readiness on CNI DEL #242
OCPBUGS-33477: Fix CNI cache update function to prevent nil access #234
OCPBUGS-30237: Reload bootstrap kubeconfig if cert mgr failed to load valid certs #223
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-35081: [release-4.15] Use IP to identify orphaned allocation to be deleted #288
Full changelog

network-tools

OCPBUGS-31764: replace wireshark with wireshark-cli #118
Full changelog

oauth-apiserver

OCPBUGS-33210: bump lib-go to fix SAs acting as OAuth2 clients #114
OCPBUGS-31951: bump x/net to 0.24.0 #109
Full changelog

oauth-server

OCPBUGS-33210: bump lib-go to fix SAs acting as OAuth2 clients #148
Full changelog

oc-mirror

OCPBUGS-34521: Fix DiskToMirror without internet connection without rebuild catalog (#866) #866
OCPBUGS-33575: Change default behavior to not rebuild catalogs for V1 (#849) #849
OCPBUGS-31466: Fix for oc-mirror new defaultChannel override (#846) #846
Bump version to include v5.11.0 of go-git (#819) #819
Full changelog

openshift-apiserver

OCPBUGS-28928: Bump openshift/api to get updated docs for UnservableInFutureVersions #436
OCPBUGS-31469: vendor upgrade runtime-utils #422
Full changelog

openshift-controller-manager

OCPBUGS-32807, OCPBUGS-33371: Rollback state of managed image pull secrets after downgrade #303
OCPBUGS-31490: Bumps opentelemetry dependencies #294
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-34927: Correct out-of-bounds check #172
OCPBUGS-32744: Relax requirement to enable topology #165
Full changelog

openstack-cluster-api-controllers

OCPBUGS-25859: CARRY: Add Snyk security scan config #299
OCPBUGS-26208: openshift/manifests: CloudCredential capability for CredentialsRequest #297
Full changelog

openstack-machine-api-provider

OCPBUGS-30857: Ensure portSecurity is correctly set in the Port #108
OCPBUGS-28326: Add snyk configuration file #105
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-35720: Warn and allow CRD upgrade if validation fails but webhook is specified #789
OCPBUGS-31939, OCPBUGS-31940: UPSTREAM: <carry>: update golang.org/x/net for CVE-2023-45288 #747
OCPBUGS-35229: Unblock CI #768
OCPBUGS-32860: UPSTREAM: <carry>: bump go-jose #740
OCPBUGS-32311: [release-4.15]: Update if AlreadyExists #736
OCPBUGS-31842: copy-content: delete destination dirs before copying (#3197) #728
OCPBUGS-31651: [release-4.15] Correctly detect catalog image ID for extractContent catalog pods #726
OCPBUGS-30219: bump otelgrpc to 0.46.0 #712
Full changelog

operator-marketplace

OCPBUGS-32060: update golang.org/x/net for CVE-2023-45288 #564
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-33623, OCPBUGS-33624: Improve CI signal by removing/suppressing signals #2168
OCPBUGS-31814: ipv6+all protocols conntrack flush #2131
OCPBUGS-34404: [release-4.15] dns: fix deadlock in case of error #2182
OCPBUGS-33294: Reuse node-subnet from cache if exists #2163
OCPBUGS-33960: Egressip garp fix 4.15 #2175
OCPBUGS-30899: use a forked version of j-keck/arping that fixes a threading issue #2105
OCPBUGS-32426: [release-4.15] Improves service iptables efficiency on start up #2156
[Release 4.15] OCPBUGS-32986: Bump OVS #2147
OCPBUGS-27852: [release-4.15] Full implementation of KEP-1669 ProxyTerminatingEndpoints + ETP=local fix #2025
OCPBUGS-29316: [release-4.15] Ignore missing live migratable pod annotation on AddNode #2065
OCPBUGS-32202: [release-4.15] Bump OVN to 23.09.0-139 #2121
OCPBUGS-33020: drop-forwarding: Add ClusterSubnets to allowed forwarding CIDRs #2141
OCPBUGS-32154: Custom v4 and v6 transit switch subnets while creating kind cluster #2094
OCPBUGS-31081: Periodically check the ovnkube-node certificate is not expired #2099
OCPBUGS-31033: Remove OVN topology version reporting/detection #2098
OCPBUGS-31500, OCPBUGS-31501: EIP multi NIC IPv6 support and default route with next hop #2103
Full changelog

powervs-block-csi-driver

OCPBUGS-33622: Fix CVE2023-45288 by bumping x/net to v0.24.0 -4.15 #80
Full changelog

service-ca-operator

OCPBUGS-34797: set required-scc for openshift workloads #243
Full changelog

telemeter

: OCPBUGS-35076: Release Fix CVE go-jose #542
OCPBUGS-32890: CVE-2024-28180 bump go-jose to v3.0.3 #531
Full changelog

tests

OCPBUGS-28928: Add test for UpgradeValidation contention #28820
OCPBUGS-33368: [release-4.15] monitor test service-type-load-balancer-availability setup fails frequently in 4.14 & 4.15 PowerVS CI jobs #28821
#28776 FIX [release-4.15] OCPBUGS-33368: monitor test fix to wait before connecting to a non-existent dns on PowerVS and IBMCloud platforms #28791
OCPBUGS-26520: Kuryr: Ignore Upgradeable=False on operators tests #28512
OCPBUGS-33347: Provide SCC access via RBAC #28780
OCPBUGS-33541: Adjust the method of get the apiServer (release-4.15) #28762
OCPBUGS-33473: [release-4.15] MULTIARCH-4352: Censor private key from pod dump logs #28666
: OCPBUGS-32554: Also rely on oomkilled exit code 137 in build test #28724
OCPBUGS-31726: Use centos7 tag instead of latest for cmd images tests #28688
OCPBUGS-30892: fix panic on non-standard node-role labels #28656
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-30117: manifests: Add in CustomNoUpgrade #38
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-33604: FailedPrecondition volume does not appear staged #118
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github