Back to index

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.15.19-x86_64

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
  • upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
• Informing jobs
  • aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-aws-ovn-serial
  • aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.15-e2e-aws-ovn-upgrade
  • aws-sdn-upgrade-4.15-micro Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-aws-sdn-upgrade
  • azure-ovn-upgrade-4.15-micro Succeeded periodic-ci-openshift-release-master-ci-4.15-e2e-azure-ovn-upgrade
  • gcp-ovn-rt-upgrade-4.15-minor Succeeded periodic-ci-openshift-release-master-ci-4.15-upgrade-from-stable-4.14-e2e-gcp-ovn-rt-upgrade
  • hypershift-ovn-conformance-4.15 Succeeded periodic-ci-openshift-hypershift-release-4.15-periodics-e2e-aws-ovn-conformance
  • metal-ipi-ovn-dualstack Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-metal-ipi-ovn-dualstack
  • metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-metal-ipi-ovn-ipv6
  • metal-ipi-sdn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-metal-ipi-sdn-bm

Upgrades from:

• 4.15.18 (changes) - S S S S S
• 4.15.17 (changes) - Success
• 4.15.16 (changes) - Success
• 4.15.12 (changes) - Success
• 4.15.9 (changes) - Success
• 4.15.6 (changes) - Success
• 4.15.3 - Success
• 4.15.2 (changes) - Success
• 4.15.0 (changes) - Success
• 4.14.31 (changes) - Success Success
• 4.14.30 (changes) - Success
• 4.14.29 (changes) - Failed
• 4.14.24 (changes) - Success
• 4.14.23 (changes) - Success
• 4.14.19 (changes) - Success
• 4.14.18 (changes) - Success
• 4.14.17 (changes) - Success
• 4.14.16 (changes) - Success
• 4.14.0-0.nightly-2024-06-20-030041 (changes) - Success

Upgrades to:

• 4.16.26 (changes) - Success
• 4.16.6 (changes) - Pending
• 4.16.5 (changes) - Failed
• 4.16.4 (changes) - Failed
• 4.16.3 (changes) - Success
• 4.16.2 (changes) - Failed
• 4.16.1 (changes) - Success Failed
• 4.16.0 (changes) - Success
• 4.16.0-rc.9 (changes) - F F S S S
• 4.16.0-rc.8 (changes) - Success Success
• 4.16.0-rc.7 (changes) - Success Success
• 4.15.22 (changes) - Failed
• 4.15.21 (changes) - Failed
• 4.15.20 (changes) - F S F F F F F S F S

---

Loading changelog, this may take a while ...

Changes from 4.15.3

Created: 2024-06-20 20:18:12 +0000 UTC

Image Digest: sha256:72dbe160063b42a23ba1b97eca3e22d75d0c757947890afaf4b27720c605e648

Release 4.15.19 was created from registry.ci.openshift.org/ocp/release:4.15.0-0.nightly-2024-06-20-070602

Components

• Kubernetes upgraded from 1.28.7 to 1.28.10
• Red Hat Enterprise Linux CoreOS upgraded from 415.92.202403080220-0 to 415.92.202406190406-0 (diff)

Rebuilt images without code change

• agent-installer-utils git 33b7d855 sha256:c1999e384e731570b0532802c273f7612035eace2b4556a70b1b03f7940f09e1
• alibaba-cloud-controller-manager git abf4fa96 sha256:d890833d409ba444af6dfb81c00cd1e932983d18366e08665553b39248580d08
• alibaba-cloud-csi-driver git be4888d3 sha256:389e04ca9686deccb1805cde015e0939a1c2642af1fac546dfbc534e13123680
• alibaba-disk-csi-driver-operator git 41b367ae sha256:a9dad6038c783164b1c7ef283a2fd5f8330b073571f2298a3b4f6cd459ea8f73
• alibaba-machine-controllers git d3ba04c3 sha256:968ef81e79c74797df4f32de98b5b647671d62e7d64907bb9b1aee86bb2bdd82
• aws-machine-controllers git 0129b1e3 sha256:623318d3b8b5328729d81bce27fb5e0579f7184082f45a0fb0c6ecc00bed9580
• azure-disk-csi-driver git dcb7e1c7 sha256:b07ae705c8fa2c4ae2dac23015af3ce7ca593dff536b5f39e81091690e48096a
• azure-disk-csi-driver-operator git 160cf624 sha256:ad5d47a8e5845c41e68634207f14346d6ca73f4cd289a749a599c0990038c9e6
• cluster-baremetal-operator git fdce2d08 sha256:c46af7737156dd8bf905589bb5bce3c99ec25177d27ae02c3b011aff6e4f5af2
• cluster-bootstrap git 0849c462 sha256:6baa1624777c5eefaed04df27ff1197dbf74ee600f8191266776034198a20eef
• cluster-kube-cluster-api-operator git 128d8e08 sha256:0f6b642f75201d32dd3e8c360277be6539ce9a16baf613d4e1b836f1ded41742
• cluster-kube-storage-version-migrator-operator git 37015e87 sha256:9012b84ff14e08d73ce1ac6ee0e2d78f4e82a6f97797ede2a29a5eb50c6aa1b5
• cluster-machine-approver git 3a6b6ae6 sha256:434bab89b7d3f3b208ce08bdf6ce58145286510dc797522d2d4789dd18f58af9
• cluster-olm-operator git a7ba8987 sha256:3d804164689813b4ead1130b7d36eb73011d95804b504d41451aec4a45d088e9
• cluster-openshift-apiserver-operator git 74013916 sha256:403e34d0c79e566244708905cb206cf595f23040656e8a07636ea0bc53a79aeb
• cluster-platform-operators-manager git 37a0a919 sha256:238733a82c994c67209abc55b6379279481a5466250c01e567884cc4e809ab2d
• cluster-policy-controller git cc48f315 sha256:d2735c8c074d67a6fbd10871da971fcf49b41cb2900d5e97f3dafcb85bf3402c
• cluster-update-keys git be6ba5b0 sha256:7b701406568c35ecd780b5ecc0ad69283fa34493f1239a280406dfbcef6e1452
• configmap-reloader git 617398f5 sha256:ec8088e083fd3d527e348c75a289096341e8f517f08dd945172a080d7962038c
• coredns git 22f950ea sha256:9508a871e104890826a0c7f08890b57f5dd9d1549e0caee610112aa3a5c90f4e
• csi-driver-manila-operator git 2fc4a7cc sha256:aa8ed6483f83a8cc0c39e8377a5c5d9e14816bc86f7148562a37bcd13163d6cc
• csi-driver-nfs git d032dc10 sha256:1cf868f930e2a903d4cc76e56209586e7058fb284aeaa845bc27c981a31d88c0
• csi-driver-shared-resource git 260a085a sha256:5bdb8a9b20115af704b4c9aa7b7fcf7aefd740701cb6da5d83179ecaed352b41
• csi-driver-shared-resource-operator git 8d017b7f sha256:df8d0f78a034504a2904abaef4f3cfd37cc807a638d0f50c0d7fa10c05dc1a87
• csi-driver-shared-resource-webhook git 260a085a sha256:f6f350143ce8856fc5ac36e3ae58e6df394e273a62fee87efdbbaf50e2d99b3d
• csi-external-attacher git f806f266 sha256:c1885d0bb81cc7f30a5f22676bdff2985613b15300e8779c2dda6dcf894c75a1
• csi-external-provisioner git ce5a1a33 sha256:2e2e16ed863d85008fdd9d23e601f620ec149ea4f1d79bc44449ba7a8ad6d2b8
• csi-external-resizer git 3b4236d3 sha256:c6c971e7f994869e2c4fb084d336ef41f3e0fb170468813c2454eda21b274b8a
• csi-livenessprobe git 240bb8c0 sha256:e79d574eda09fd6b39c17759605e5ea1e577b8008347c7824ec7a47fd1f8f815
• csi-node-driver-registrar git 9005584e sha256:d4ae187242ec50188e765b3cad94c07706548600d888059acf9f18cc4e996dc6
• driver-toolkit git 7a448c2e sha256:d37a0fd58d82cf599925bfbd2579c6490123dbaa83967514b2fe642e6ed332fc
• egress-router-cni git 39ea8ee1 sha256:55e40cba290fadafc1b7b420fa7113a2d9299a8b1901a00bd7b233ac54867899
• gcp-machine-controllers git b15daaf5 sha256:3822f744484ef8333ca2c05489636ec05528d8307f284a2bc41e0b63f28db77b
• gcp-pd-csi-driver git 856ee3e2 sha256:3f56bc67986536262b4b161844d062ae287be2cbcb3dd22808cb2a749279c65b
• gcp-pd-csi-driver-operator git 3b91ee31 sha256:14db505d822eb3980bc5013508ef202ea23fa947c06efd2d1c3ee555d79b280e
• ibm-cloud-controller-manager git 19e64d5c sha256:ee715d4636d3bd0ac997b0ff1ea39995020a0a1ef442bd3a164acca8e2ed1d9b
• ibm-vpc-block-csi-driver git ce7f53cd sha256:106d77c24a5f664e1dd0585d88b32547f8e3f96dec86cf365b1a7135f5e5f6aa
• ibm-vpc-node-label-updater git e1a0adca sha256:1a41dcde59f7edf59701ffef472fd70cd821fe38a94f634624f536648a0a5a8a
• ibmcloud-cluster-api-controllers git 34fb6252 sha256:33f61a10a06cad22166cd3c46b21feccdedff80a98d156f4395d2919e26b2f09
• ibmcloud-machine-controllers git 6b0b8ea7 sha256:35d00c7763a5fe26d51a34f221513521178c9fbf1f5be0ff2420868b82d28266
• ironic-machine-os-downloader git bcbcd95b sha256:f5be3b297157b981f17f24295d469ecc94de750becbc0a7bf3f5eab044e85a02
• ironic-static-ip-manager git 47200021 sha256:41ddfeca64804ad2742ae868642a3d60112438fc94c9964d8c886b447afa535b
• kube-metrics-server git bcbf241c sha256:f47ceabd682086fccef4b2218e8c36072f40644f1651d755c3b5044f22024717
• kube-proxy git 71a6f28d sha256:7f375fcb022e913a7bced0022c13e0118347336782f9baeea7e04fb9f68bb203
• kube-rbac-proxy git e8e8c84b sha256:f15be2dc3d6d2c1848f997b7921d11bf4c0873c129cdf182155ac133880b0a89
• kube-state-metrics git 037b59c2 sha256:8704d2c1da1c62610746457b6e1164d9bc80332e97c0713e90e9d3add35cb895
• kube-storage-version-migrator git e8749689 sha256:42874dc069f0b6563b3523cdebb0d0789b04f125afd35c27b9a350ab86617849
• libvirt-machine-controllers git 1e096cdf sha256:64f9942fe8909c8eb810c639466346ff68efaa45cc16f12007a72c2068f74cbf
• machine-image-customization-controller git 97d87657 sha256:d504bf6ab9372f83ca27150e7cc381bbcd83cbadc4ad4d5967db5e341aa2e646
• machine-os-content sha256:366758609eb488bca40eddc2038bbfd7c32f70073508983cdc52e9d8b7da5efd
• machine-os-images git 9e9c920f sha256:2ea6b14933997476b0f1a2e090cb7d9a23610ab61cab0a7cb93aa402d45ba2b6
• multus-admission-controller git 23a7cfe4 sha256:bf7178a8abce655f50c36276fb4973255dad1b3d28b7edb446267220182ed195
• multus-networkpolicy git 6212406b sha256:4d2d9b6cd5d0f326f1ae6391bbdbbe0f0a2529f593dff8c98686709e1a04d00e
• multus-route-override-cni git a5b755b5 sha256:4b8ccd58fa99842e5222b5eb5e85ea18912acd807d1c51fafa1932a65a932562
• must-gather git 47335065 sha256:0ca95d38c2dc199dc336991818af4ade67286fd227b725d709233e81010f55b6
• network-interface-bond-cni git f91decaa sha256:7264244bf893fd9134eda9cbabf3a28d10c8e40c9261c8646b319d553f520149
• network-metrics-daemon git 0288f362 sha256:fd5d7fb8ef5cbe83a6f8aff31a624d482595c7934fdb9b44ee0f62045246ccf2
• nutanix-cloud-controller-manager git 33fb22c1 sha256:afc6e3c5ef38bd9bc0bbdff0bbb547295e941b4e84d306c0953d5bb309cf8297
• nutanix-machine-controllers git f02b1a28 sha256:2cc370a3d1973cae05a42c9cd3db96511d3f9340eef00f61939c4e40b2d9c337
• oauth-proxy git 241a88c4 sha256:d8276d23009d5fa55bf0b552a4dff528ee2a9469b14512e5f4148ca30b0e42ae
• olm-catalogd git 2724be3e sha256:e21d5abd0111b874909412ff42c71c7b1b0cefa9488195f303bb499b52903a5e
• olm-operator-controller git e2906934 sha256:d0742e8d8b80b1fba42ebde599d09f4ebf7a4519bf689759eccc2da8ae11a474
• olm-rukpak git 5b09cd44 sha256:f26cb69a55dbeff21c4e768bd3e712dd529e7c2ffc826cb834ffd1d5bddb6e20
• openshift-state-metrics git 1915f645 sha256:bc29608ce77c7028607d47a685ff6c76fa212666c628f160dd01ee73a7d79207
• ovirt-csi-driver git b8d25ad6 sha256:29a71c0b1141a149950c63c1241d93c4ebef87d095566945d966253fb31845fe
• ovirt-csi-driver-operator git e9b0fa23 sha256:724fada8b45990d571a3caf79958f57629f7990021a8cf1ad7b0553cf6d52338
• ovirt-machine-controllers git 5d708631 sha256:d3de5f5ff6a65619d82d5f02f6b4ca7e6eba60bacb9bab24acdf2fa180928384
• powervs-block-csi-driver-operator git a3729dcb sha256:57800c5210442ff8cf5a1f4212fc2a2f1fb424ba1807d67a37f340ef5db9bafd
• powervs-cloud-controller-manager git 521b80df sha256:953bf9f64417318e63f745a5d1f6bbc11a201f856d9b273f539e89f5c1291979
• powervs-machine-controllers git 07e8f8b8 sha256:80e261561f3a5329ff54589fd8aa829b920a578a16a5c618a2caed15941e340a
• prom-label-proxy git f3f1f5d1 sha256:85f9a485b73d32528862074ddf199f767e0299bc99ce1401b1b90729c49206ff
• prometheus git 6828e446 sha256:38bd10b6a28c9ba6813a591b51d1ba851735ba9b8983cc4182428f06ff863b8b
• prometheus-alertmanager git 870ade52 sha256:f0021faf49ceb0d02be6f2c9e17976f74af57863806f832a0ae958576164a9bb
• prometheus-config-reloader git faad27f9 sha256:cdd305e3b49f9e1f45f749a17f16579a4f5abdc1ab9c80d2272ea524c7af1744
• prometheus-node-exporter git aed837c3 sha256:ec1cfa62ba3dd3edb6603ac11c909109552824655e73b12fdcf6688b0a4dacf6
• prometheus-operator git faad27f9 sha256:c0540db6904752391f9c926ecfb1b1fa2f9b6b3b5ff1106ff06360a6048dfd44
• prometheus-operator-admission-webhook git faad27f9 sha256:db735dcf10113fb7e3b26cb2af108b50e2cf66a270c9ab306f99ab58cfe56e06
• rhel-coreos sha256:a0feb7d16d7885ee1a363a9a1cba359ac4365d6a25ba4433afe9d737f838cf93
• rhel-coreos-extensions sha256:617e3e6c20701e2fdd669e6cb7498ff46b9ddbc7ea7382cb386013a8bcada7e3
• route-controller-manager git c5cc7a73 sha256:72025440f89c39b0264f23ce1b2f48ad2d154635bf5a8cca73c224c3d0bf0dc4
• sdn git 71a6f28d sha256:4629ca6f9e617e661417918e0d380c1ad96d550ade1b407eb0bde7985cb85729
• thanos git 66161ad4 sha256:7e9a08f28ad8862b17957ca4bd4747436d1957dfc78caf6a5b8dae0378c215c5
• vsphere-cloud-controller-manager git d2af6982 sha256:8e6e9e2bb77eaa122219614291d4d469937fc0eed05c6e728b287e0218c7dc5e
• vsphere-csi-driver-operator git e0d46570 sha256:6a2c9e4a314361ff69085072b50e1d479c4ed13ea6ee8864e8be113ebcd782e3
• vsphere-problem-detector git de02a75d sha256:81929809b099083429b002d827068ada1416ca116f5d85a589f00807e7ee90fe

agent-installer-api-server

• OCPBUGS-34641: Invalid Pull-Secret when using password which contains a colon character (#6381) #6381
• OCPBUGS-31631: Deploy dual stack with IPv6 on top of bond/vlan fails (#6245) #6245
• MGMT-17593: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#6217) #6217
• 17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6211) #6211
• Revert “MGMT-17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6194)” (#6208) #6194
• MGMT-17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6194) #6194
• MGMT-17541: Replace broken golangci reference (#6191) #6191
• OCPBUGS-30232: Handle skipping hostPrefix validation for IPv6 For non-OVN/SDN networkTypes, the hostPrefix validation is not required and it is skipped. This fixes a regression introduced in the fix for https://issues.redhat.com/browse/OCPBUGS-23069 in which IPv6 CIDRs were not using the correct default hostPrefix. In addition, all cases where the validation is used are now covered. (#6137) #6137
• NO-ISSUE: replace postgres images as current one disappeared from quay (#6135) #6135
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• MGMT-16843: Use hostnamectl to replace illegal hostname (#851) #851
• MGMT-17593: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#833) #833
• MGMT-17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#827) #827
• MGMT-17541: Replace broken golangci reference (#824) #824
• Full changelog

agent-installer-node-agent

• OCPBUGS-33404: Make removable disks eligible (#718) #718
• MGMT-17593: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#704) #704
• MGMT-17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#699) #699
• MGMT-17541: Replace broken golangci reference (#695) #695
• Full changelog

apiserver-network-proxy

• OCPBUGS-31953: Bump golang.org/x/net to v0.23.0 #51
• Full changelog

aws-cloud-controller-manager

• OCPBUGS-31954: update for CVE-2023-45288 [release-4.15] #81
• OCPBUGS-29079: Updates build-rpm.sh to set release to build time #76
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-30117: manifests: Add in CustomNoUpgrade #511
• OCPBUGS-32114: UPSTREAM: <carry>: Fix instance PrivateDNSName when domain-name is set in dhcpOpts #508
• OCPBUGS-31036: UPSTREAM: 4670:Update awsmachine providerID and instanceID immediately after ec2:RunInstances is called #501
• OCPBUGS-30595: fix e2e tests on release branches #504
• Full changelog

aws-ebs-csi-driver

• OCPBUGS-33043: UPSTREAM: 1919: Add reserved-volume-attachments #263
• Full changelog

aws-ebs-csi-driver-operator

• OCPBUGS-33043: Explicitly reserve 1 attachment for the root disk #222
• OCPBUGS-30621: remove legacy directory and duplicate Dockerfile.*.test files #201
• OCPBUGS-30621: move test manifest to top-level directory #195
• Full changelog

aws-pod-identity-webhook

• OCPBUGS-32886: Upgrade go-jose module to 2.6.3 #188
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPBUGS-33127: Improvements to client timeouts to prevent hangs #118
• OCPBUGS-33092: Bump otelgrpc #117
• OCPBUGS-30970: Update acr-credential-provider.spec #115
• OCPBUGS-30970: Adds acr-credential-provider spec file and build script #114
• Full changelog

azure-cluster-api-controllers

• OCPBUGS-29502: Bump helm to v3.14.4 #303
• Full changelog

azure-file-csi-driver

• OCPBUGS-33038: Rebase v1.29.5 for OCP 4.15 #65
• Full changelog

azure-file-csi-driver-operator

• OCPBUGS-33038: add token audience for Azure File #103
• Full changelog

azure-machine-controllers

• OCPBUGS-30215: Remove startupScript vmextension lookup #103
• Full changelog

azure-workload-identity-webhook

• OCPBUGS-32895: Upgrade go-jose module to 2.6.3 #17
• Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

• OCPBUGS-35586: [release-4.15] bump github.com/containers/image for CVE fix #8621
• OCPBUGS-31387: If host is offline or disconnected don’t check ver #8208
• OCPBUGS-35355: baremetal: Don’t always enable provisioning-interface.service #8580
• OCPBUGS-35032: [release-4.15] aws: terraform: add spot instance support for masters #8540
• OCPBUGS-35059: images: change libvirt-installer base #8550
• OCPBUGS-33672: add quota support to ca-west-1 #8412
• OCPBUGS-33454: go.mod: bump aws-sdk-go for ca-west-1 support #8381
• OCPBUGS-33205: Gcp bootstraping release 4.15 #8339
• OCPBUGS-33542: images: do not force terraform-providers to be statically linked #8392
• OCPBUGS-29929: GCP Destroy cleanup correct zones/records #8062
• OCPBUGS-32383: sdk/aws: add ssh security group rule for compute #8282
• OCPBUGS-32690: AWS: bump CCO for permission fix #8302
• OCPBUGS-32264: always save serial logs if they were gathered #8274
• OCPBUGS-30944: Don’t run libvirt validations in agent installer #8167
• NO-ISSUE: test fix to support slightly different nmstate error messages #8285
• OCPBUGS-32259: escape ‘%’ in proxy settings #8272
• OCPBUGS-32355: Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility #8277
• OCPBUGS-31335: openstack: Honour worker server group policy #8202
• : OCPBUGS-31590: GCP: Skip populating Private/Public Zones within DNS manifest #8220
• OCPBUGS-30922: coreos-installer iso kargs show broken on Agent ISO #8163
• OCPBUGS-30822: Validate control plane replicas #8143
• OCPBUGS-31274: IBMCloud: Restrict CIS and DNS Service lookup #8197
• OCPBUGS-30605: upi: aws: fix typo in worker templates #8125
• Bug OCPBUGS-31284: OpenStack: enable 30000:32767 nodePort IPv6 traffic #8199
• OCPBUGS-31087: Fix vsi image missing #8186
• OCPBUGS-30098: feat: add check for SNO bootstrap condition #8089
• OCPBUGS-30601: update RHCOS 4.15 bootimage metadata to 415.92.202402201450-0 #8122
• OCPBUGS-30854: Power VS: Fix wait_for_workspace #8159
• OCPBUGS-29964: fix Azure API SKU calls timing out #8086
• OCPBUGS-30792: Enable deploy by Service ID on PowerVS #8138
• OCPBUGS-30577: Authn with platform-services-go-sdk for PowerVS #8118
• Full changelog

baremetal-machine-controllers

• OCPBUGS-30876: Bump golang-protobuf version #214
• Full changelog

baremetal-operator

• OCPBUGS-34682: PreprovisioningImage should not be created on poweroff #358
• Full changelog

baremetal-runtimecfg

• OCPBUGS-35543: Add support for OVN HostCidrs annotation #319
• OCPBUGS-32024: Decrease log level when detecting node IP #304
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-35201: Bump joelanford/ignore to bump go-git to 5.11.0 #1798
• OCPBUGS-32840: Bump go-jose indirect reference to 2.6.3 #1749
• OCPBUGS-31879: Add OIDC specific certificate authority bundle flag #1730
• OCPBUGS-31726: Remove some of newapp unit tests relying on external deprecated images #1726
• OCPBUGS-30286: oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators #1698
• Full changelog

cloud-credential-operator

• OCPBUGS-32900: Upgrade go-jose module to 2.6.3 #696
• OCPBUGS-31924: aws: remove non-existent permission #691
• Full changelog

cloud-network-config-controller

• OCPBUGS-33780: Avoid panic when looking up attachedOutboundRule.ID in azure #145
• OCPBUGS-31754: Avoid nil pointer panic while assigning private IP on Azure #137
• Full changelog

cluster-authentication-operator

• OCPBUGS-34795: set required-scc for openshift workloads #675
• Full changelog

cluster-autoscaler

• OCPBUGS-31464: add check for taint.value == nil #293
• Full changelog

cluster-autoscaler-operator

• OCPBUGS-31947: Update x/net to v0.24.0 #319
• Full changelog

cluster-capi-controllers

• OCPBUGS-30117: manifests: Add in CustomNoUpgrade #206
• OCPBUGS-33200: Bump protobuf to v1.33.0 #204
• OCPBUGS-30595: fix e2e tests on release branches #201
• Full changelog

cluster-capi-operator

• OCPBUGS-30117: manifests-gen: also add CustomNoUpgrade annotation value #166
• OCPBUGS-30118: create openshift-cluster-api namespace in CustomNoUpgrade #167
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-33547: update azure and ash tolerations on node manager #343
• Bug OCPBUGS-32246: Allow to patch events in OpenStack RBAC #339
• Full changelog

cluster-config-api

• OCPBUGS-35214: [Release 4-15] Add transit switch config to 4.15 #1872
• OCPBUGS-28928: Add UnservableInFutureVersions route status condition type #1751
• Full changelog

cluster-config-operator

• OCPBUGS-26542: remove duplicate manifests in image #395
• Full changelog

cluster-control-plane-machine-set-operator

• OCPBUGS-34971: Add unreadyNodeGracePeriod for allowing brief node hiccups #299
• OCPBUGS-35496: Wait for ControlPlaneMachineSet to be created when waiting for it to be updated #308
• OCPBUGS-35255: Improved debugging of API listing errors #301
• [Release 4.15] OCPBUGS-32414: Fix ExportFailureDomain to handle empty platform spec #290
• [Release 4.15] OCPBUGS-32357: Modified webhook to allow templates by name instead of just by path. #289
• Full changelog

cluster-csi-snapshot-controller-operator

• OCPBUGS-31599: create suitable role and roleBinding for csi-snapshot-webhook #203
• Full changelog

cluster-dns-operator

• OCPBUGS-32093: Add RBAC related to featuregates to fix hypershift upgrade #407
• Full changelog

cluster-etcd-operator

• OCPBUGS-33564: return errors in wait-for-ceo #1261
• OCPBUGS-32952: remove etcd-health-probe log #1257
• OCPBUGS-31942: update golang x net #1253
• OCPBUGS-31865: bump(library-go)=release-4.15 #1220
• OCPBUGS-30915: CEO aliveness check should only detect deadlocks #1225
• Full changelog

cluster-image-registry-operator

• OCPBUGS-34571: azure-path-fix: get client secret from k8s secret #1049
• OCPBUGS-34539: pkg/storage/s3: use force path style in favour of virtual hosted style config #1048
• OCPBUGS-33208: azurepathfix: check if platform status is nil before accessing it #1031
• OCPBUGS-32396: azure-path-fix: support auth via account key (without clientID) #1022
• OCPBUGS-31641: bump aws-sdk-go from v1.44 to v1.50 #1014
• Full changelog

cluster-ingress-operator

• OCPBUGS-28928: Prevent upgrades for SHA1 default cert and SHA1 route certs #1014
• OCPBUGS-35028: internalServiceChanged: Fix target port logic #1081
• OCPBUGS-34887: TestHostNetworkPortBinding: Delete t.Parallel() #1075
• OCPBUGS-34252: Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1058
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-29361: operator: stop removing kube-apiserver-slos asset #1643
• OCPBUGS-34492: Create one-shot migrations for the flowcontrol group. #1692
• OCPBUGS-33697: add a controller that reconciles SCCs’ volumes #1679
• OCPBUGS-33277: Fix incorrect name for hostmount-anyuid SCC ClusterRole #1672
• OCPBUGS-31807: Use RotatedSigningCASecret in update only mode #1662
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-31807: use RotatedSigningCASecret and RotatedSelfSignedCertKeySecret only in update mode #801
• OCPBUGS-31865: bump(library-go)=release-4.15 #797
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-31865: bump(library-go)=release-4.15 #537
• Full changelog

cluster-monitoring-operator

• OCPBUGS-33512: fix Thanos ruler alert generator url #2343
• OCPBUGS-32055: backport ols metric allowlist to 4.15 #2313
• OCPBUGS-28769: fix generation of telemeter token hash #2303
• Full changelog

cluster-network-operator

• OCPBUGS-29739: Run dhcp-daemon pods as system-node-critical priority #2283
• OCPBUGS-34596: Add ipsec state metric #2389
• OCPBUGS-32515: Fix wait logic for IPsec certificate signing request #2348
• OCPBUGS-29092: Add probes to node-network-identity #2253
• OCPBUGS-29654: Fully disable network-node-identity on ROKS #2314
• OCPBUGS-30927: ensure local networking deployments within hypershift use the client side load balancer to be resilient to control plane node failures #2310
• OCPBUGS-30615: Fix managed cluster detection on ARO #2304
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-33929: Negative net interface name does not reduce queues (#1066) #1066
• Add a ‘.snyk’ to silence static code analysis warnings (#1001) #1001
• fix extra-reboot on upgrade with paused mcp worker (#1049) #1049
• fix rendering extra ctrcfgs (#975) #975
• OCPBUGS-31694: E2E: Workload hints test cases fixes (#1012) (#1043) #1012
• Reduce number of reboots in offline tests (#1014) #1014
• Systemd processes not being moved to cpuset/systemd.slice fix (#1016) #1016
• Scheduler plugin: ignore IRQs (#983) #983
• e2e: when crun is enabled by default skip checking runc config (#1013) #1013
• OCPBUGS-30507: Add performance real time tuned template (#984) #984
• Report duplicate priority only for multiple matching profiles (#965) #965
• hack: fix backport of render-sync.sh (#996) #996
• Full changelog

cluster-openshift-controller-manager-operator

• OCPBUGS-31708: Update opentelemetry dependency 415 #342
• OCPBUGS-25985: Disable deployer-controller when deploymentconfig is disabled #322
• Full changelog

cluster-samples-operator

• OCPBUGS-22034: bump K8s version to 29.2 #538
• Full changelog

cluster-storage-operator

• OCPBUGS-33466: Fix problem-detector proxy setting #471
• Full changelog

cluster-version-operator

• OCPBUGS-33984: Add admin-gate for OCP 4.16 #1049
• Full changelog

console

• OCPBUGS-34350: Create Serverless form does not create BuildConfig #13891
• OCPBUGS-32029: Use UserInfo username field when logging out as kubeadmin #13748
• OCPBUGS-30208: Fix asynccache bugs #13807
• OCPBUGS-33838: TaskRuns should not be fetched for Failed PLR’s #13863
• OCPBUGS-34703: fix bug where textarea is not resizable #13913
• Revert “OCPBUGS-34550: Dont render ARN mode role field and warning for HyperShift clusters” #13905
• OCPBUGS-33263: Pipeline list page is crashed when navigating from Search page #13819
• OCPBUGS-33166: Fix NAD always on default namespace #13865
• OCPBUGS-31863: make sure folder is encapsulated with quotas #13737
• OCPBUGS-33506: Fix Pipeline details page with when expression using CEL expression #13835
• OCPBUGS-32505: Add visual connector between VMs and non VMs workloads #13782
• OCPBUGS-33548: restrict Masthead logo to max-height #13839
• OCPBUGS-32497: Improve Create serverless function error message #13778
• OCPBUGS-33191: Hide dev perspective Pipelines nav option if dynamic plugin nav option is enable #13810
• OCPBUGS-33058: fix issues with Edit Route form #13800
• OCPBUGS-32187: Add flag to hide Output tab contributed by pipelines-plugin #13756
• OCPBUGS-32716: Helm Plugin’s Catalog incorrectly renders a single index entry into multiple tiles #13788
• OCPBUGS-32506: setting correct image trigger annotation #13783
• OCPBUGS-32933: change OperatorHub filter FIPS Mode to Designed for FIPS #13796
• OCPBUGS-31799: Improve PipelineRun list view performance #13731
• OCPBUGS-32796: auth: fix OIDC logging out #13793
• OCPBUGS-31445: Upgrade Pipeline trigger resources to v1beta1 #13704
• OCPBUGS-31045: fix for execute inline markdown syntax issue #13681
• OCPBUGS-32518: Add warning about service binding operator will not be supported from 4.15 #13784
• OCPBUGS-32391: Routes created by devfiles do not always use HTTPS #13771
• OCPBUGS-32340: Increased max nodes limit to 200 in topology page #13767
• OCPBUGS-32399: Update devfile library to v2.2.2 #13762
• OCPBUGS-32156: TaskRun status is not displayed near the name #13752
• OCPBUGS-31806: Use bearer-token for local dev with auth #13732
• OCPBUGS-31839: fix bug where paused MCPs were incorrectly unpausing w… #13735
• OCPBUGS-31105: Update to pf5.2 to fix quick starts #13686
• OCPBUGS-31476: Requesting for country codes in localization of openshift - webconsole #13707
• OCPBUGS-31046: Application creation fail when manually entering input scaling value in local setup #13682
• OCPBUGS-30916, OCPBUGS-30917: PipelineRuns in Console show wrong status or load indefinitely #13672
• OCPBUGS-30869: TaskRun with same name in different project don’t show 2 entries when listing in all namespace #13668
• OCPBUGS-31107: Upload Jar form’s Clear button is not functioning #13688
• OCPBUGS-30759: Fix bugs in Console dynamic plugin SDK webpack code #13678
• OCPBUGS-30871: fix Configure link in AlertmanagerReceiversNotConfigur… #13669
• OCPBUGS-29963: i18n upload/download routine task - chore(i18n): update translations #13670
• OCPBUGS-30801: Switch to service to get the PLR and TR logs from the Tekton results summary API #13663
• OCPBUGS-30275: adjusting documentation links for 4.15 #13648
• OCPBUGS-30870: chore(i18n): update translations: Completed OCP-4.15/Master Branch/Sprint 245 #13641
• Full changelog

console-operator

• OCPBUGS-31520: oidc: synchronize the CM with a CA to trust the issuer, if configured #881
• OCPBUGS-33720: Add missing return statement to fix crash in healthcheck controller #903
• OCPBUGS-31499: Update RHDH QuickStarts and add CR examples #880
• OCPBUGS-31619: use InfrastructureTopology for clusters using external CP as the console deploys on the worker nodes #882
• OCPBUGS-29332: Remove Janus IDP and update RHDH quickstarts #863
• Full changelog

container-networking-plugins

• OCPBUGS-30045: [4.15] cherry-pick containernetworking/plugins#997 #155
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-32246: Remove enforcement of IPv6 LB as internal #277
• Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

• OCPBUGS-31599: add cmdline args to enable group snapshot webhooks #147
• Full changelog

docker-builder

• OCPBUGS-32845: bump go-jose to fix CVE-2024-28180 #396
• BUILD-854: Add adambkaplan as approver #381
• Full changelog

docker-registry

• OCPBUGS-31641: vendor: bump aws-sdk-go to support ca-west-1 #396
• Full changelog

etcd

• OCPBUGS-32768: Revert “OCPBUGS-31644: Rebase etcd 3.5.13 openshift 4.15” #264
• OCPBUGS-31644: Rebase etcd 3.5.13 openshift 4.15 #260
• OCPBUGS-28731: Rebase etcd 3.5.12 openshift 4.15 #243
• Full changelog

gcp-cloud-controller-manager

• OCPBUGS-30970: Update gcr-credential-provider.spec #60
• OCPBUGS-30970: Adds auth-provider-gcp .spec file and build script #59
• Full changelog

gcp-cluster-api-controllers

• OCPBUGS-30117: manifests: Add in CustomNoUpgrade #225
• OCPBUGS-30595: fix e2e tests on release branches #223
• Full changelog

haproxy-router

• OCPBUGS-28928: Upgrade Validation plugin for SHA1 certs #585
• OCPBUGS-32977: Count active services before setting weight to 1 #586
• OCPBUGS-32693: Reject routes with MD5 certs #584
• OCPBUGS-32435: Introduce ‘idle-close-on-response’ option for frontends #579
• OCPBUGS-31544: Properly handle rewrite-target annotation #569
• Full changelog

hyperkube, pod

• OCPBUGS-33711: Bump to Kubernetes v1.28.10 #1969
• OCPBUGS-33347: Provide SCC access via RBAC #1962
• OCPBUGS-29613: UPSTREAM: <carry>: bump structured-merge-diff #1893
• OCPBUGS-32299: Bump to k8s 1.28.9 #1946
• OCPBUGS-29922: UPSTREAM: <carry>: openshift-kube-apiserver: pod .spec.nodeName should not override project node selector in podNodeEnvironment admission plugin #1897
• OCPBUGS-31807: UPSTREAM: <carry>: allow type mutation for specific secrets #1939
• UPSTREAM: <carry>: OCPBUGS-31348: fix cpu manager cpuset check #1915
• OCPBUGS-31740: 4.15: UPSTREAM: 124048: Use the right feature gate when updating uncertain volumes #1935
• OCPBUGS-31503: Bump to 1.28.8 #1926
• Address CVE #11
• OCPBUGS-30963: Set up CEL IP/CIDR library from 4.14 onwards #1912
• Full changelog

hypershift

• OCPBUGS-32404: Fix failure to create a second hostedcluster in the same namespace #3907
• NO-JIRA: chore(deps): update konflux references to ff44cf3 (release-4.15) #4246
• NO-JIRA: feat(olm): Set packageserver replicas to 2 for IBMCloudPlatform #4231
• chore(deps): update konflux references to 2be7c9c (release-4.15) #4224
• OCPBUGS-34580: Add TrustedBundles to OAS container #4211
• NO-JIRA: hack: make the e2e script generic #4199
• OCPBUGS-33627: Restrict image registry overrides to control plane components #4131
• OCPBUGS-34156: fix router on 4.14 y-stream upgrade #4077
• OCPBUGS-35002: [release-4.15] HOSTEDCP-1122: Backport etcd defrag controller #4162
• NO-JIRA: Update Konflux references to 1025001 (release-4.15) #4180
• NO-JIRA: chore(deps): update konflux references (release-4.15) #4167
• OCPBUGS-34997: add AWS STS URL to OIDC provider audiences #4157
• OCPBUGS-35074: Fix disconnected metadata inspection for nodepool #4175
• HOSTEDCP-1708: remove liveness and readiness probes that use the metrics #4128
• OCPBUGS-34423: Fixed audit-logs sigterm failing to terminate gracefully #4089
• OCPBUGS-33526: Disable DNS resolving for CNO #4148
• OCPBUGS-34904: remove weak cipher #4156
• OCPBUGS-34510: Reconcile KAS endpoints and endpoint slice #4097
• NO-JIRA: test/e2e: fix prometheus serviceaccount handling against 4.16+ #4151
• NO-JIRA: chore(deps): update rhtap references (release-4.15) #4120
• NO-JIRA: chore(deps): update rhtap references (release-4.15) #4072
• OCPBUGS-33510: Run haproxy to connect to kas from data plane if noproxy settings contain kas #4014
• NO-JIRA: chore(deps): update rhtap references to 7cd8020 (release-4.15) #4064
• NO-JIRA: Remove CLI inspection of release image #4056
• HOSTEDCP-1518: Preserve container resource requests and limits #4032
• NO-JIRA: Update RHTAP references (release-4.15) #4041
• OCPBUGS-33118: Recycler-pod image now points to the OCP Payload reference #3963
• OCPBUGS-32220: Fix disconnected metadata inspection #3881
• NO-JIRA: Update RHTAP references to 1f62eaf (release-4.15) #4030
• OCPBUGS-33117: Reconcile over ICSP/IDMS #3962
• NO-JIRA: Update RHTAP references to 2d39df1 (release-4.15) #4022
• HOSTEDCP-1480: Update TLS cert hash creation with sha512 #4017
• HOSTEDCP-1513: Support hypershift-operator scoping for hostedclusters #3998
• Revert “[release-4.15] OCPBUGS-32013: Set OPERATOR_IMAGE environment variable” #3939
• OCPBUGS-33207: Remove kube-scheduler readiness probe #3955
• NO-JIRA: chore(deps): update rhtap references to c6fdbf4 (release-4.15) #3989
• OCPBUGS-25858: Improve description for agent APIServerAddress CLI flag #3977
• OCPBUGS-33224: disable OCM pull secret controller when imageregistry config managementstate is Removed #3976
• NO-JIRA: chore(deps): update rhtap references (release-4.15) #3982
• OCPBUGS-31747: update desired image even when HCP doesn’t exist yet #3839
• NO-JIRA: chore(deps): update rhtap references to e9efe99 (release-4.15) #3974
• OCPBUGS-32229: disable autoscaler when no nodepool require it #3884
• NO-JIRA: chore(deps): update rhtap references (release-4.15) #3967
• HOSTEDCP-1552: Update RHTAP tekton files for 0.3 -> 0.4 migration #3957
• OCPBUGS-31826: use dnsPolicy: Default for konnectivity-agent in data plane #3845
• NO-JIRA: Update RHTAP references (release-4.15) #3935
• OCPBUGS-32715: Fix OLM intilization args #3923
• HOSTEDCP-1519: [release-4.15] feat(api): Add ingress-controller-load-balancer-scope annotation #3908
• NO-JIRA: chore(deps): update rhtap references (release-4.15) #3921
• OCPBUGS-32164: Fix ICSP and IDMS inclusion as registriesOverrides #3870
• NO-JIRA: chore(deps): update rhtap references (release-4.15) #3904
• OCPBUGS-30280: Switch to use service endpoint for Konnectivity #3692
• OCPBUGS-32191: Kas disable audit cherry pick release 4.15 #3875
• OCPBUGS-32114: Add new permission required in CAPA #3861
• NO-JIRA: Update RHTAP references (release-4.15) #3887
• NO-JIRA: [release-4.15] [e2e test framework] Add a flag to add an annotation to HostedCluster #3893
• HOSTEDCP-1524: [release-4.15] Support additional node selectors for request serving nodes #3883
• NO-JIRA: chore(deps): update rhtap references (release-4.15) #3873
• NO-JIRA: chore(deps): update rhtap references (release-4.15) #3868
• OCPBUGS-32013: Set OPERATOR_IMAGE environment variable #3853
• NO-JIRA: chore(deps): update rhtap references (release-4.15) #3857
• NO-JIRA: Update RHTAP references (release-4.15) #3835
• OCPBUGS-31766: include hostnetwork SCC CPO role for 4.13 and earlier #3840
• HOSTEDCP-1438: [release-4.15] Preserve container resources for more hosted control plane components #3828
• OCPBUGS-31324: Add missing PodSecurityViolation alert #3798
• NO-JIRA: Increase stability in autoscaled environments #3777
• OCPBUGS-31471: Reduce log file size for hypershift apiservers #3816
• OCPBUGS-31604: disable http2 for ignition server and proxy #3825
• OCPBUGS-31426: copy issuerCertificateAuthority configmap into HC openshift-config #3808
• OCPBUGS-31265: inject built-in MCP selector for KubeletConfigs and ContainerRuntimeConfigs #3802
• NO-JIRA: Update RHTAP references (release-4.15) #3812
• NO-JIRA: Remove unused ref to hostnetwork in cpo role #3796
• OCPBUGS-31064: ibmcloud KMS: remove breaking image check and enable KMS v2 support #3774
• OCPBUGS-31377: Manually cherry pick #3782 to 4.15 #3803
• OCPBUGS-31326: fix(ignition): Fix priority class override #3800
• OCPBUGS-30804: honor HC image configuration #3730
• ”[release-4.15] OCPBUGS-30164: Ensure cloud resources are destroyed for all platforms when –destroy-cloud-resources is used” #3677
• OCPBUGS-31116: external OIDC: fix certificateAuthority field in structured auth config #3783
• OCPBUGS-30862: Manual cherry pick 3685&3727 to release 4.15 #3740
• NO-JIRA: chore(deps): update rhtap references (release-4.15) #3791
• NO-JIRA: Update RHTAP references (release-4.15) #3785
• OCPBUGS-29881: feat(ho): Add flag for dedicated request serving isolation #3633
• OCPBUGS-30742: [4.15] HCP deletion can get stuck if CPO is unable to delete the default worker security group #3726
• OCPBUGS-30650: Set KAS config pod security Enforce to privileged #3719
• NO-JIRA: Bump CPO API budget to 4000 in EnsureApiBudget #3741
• OCPBUGS-30651: Remove EnsurePSANotPrivileged #3744
• NO-JIRA: Update RHTAP references (release-4.15) #3754
• HOSTEDCP-1488: Use regionalized STS endpoints in AWS #3747
• NO-JIRA: Update RHTAP references (release-4.15) #3738
• OCPBUGS-30581: [release-4.15] OCPBUGS-30220: Align PSA labels on guest cluster namespaces with standalone OCP #3684
• OCPBUGS-30572: [release-4.15] Update OLM Default Catalog Sources to 4.15 #3696
• Full changelog

ibm-vpc-block-csi-driver-operator

• OCPBUGS-33641: [ibm-vpc] Scheduling issue on IBM Cloud Bare Metal nodes #116
• Full changelog

insights-operator

• OCPBUGS-32702: anonymization - externalIP can be nil (#931) #931
• OCPBUGS-31946: bump golang.org/x/net version (#925) #925
• Full changelog

ironic

• Bug OCPBUGS-33736: Disable installation of .pyc files through pip #511
• OCPBUGS-32365: [4.15] Remove unused prometheus exporter #485
• OCPBUGS-32351: [4.15] Update to include fixes for ironic servicing feature #479
• OCPBUGS-32389: Use unix sockets by default for reverse proxy communication #474
• OCPBUGS-31686, OCPBUGS-31802, OCPBUGS-31830: [4.15] install ironic projects from source #470
• OCPBUGS-31802: [4.15] Add requirements placeholders for cachito #467
• Full changelog

ironic-agent

• OCPBUGS-33133: update ironic-lib with latest fixes #131
• OCPBUGS-32173: [4.15] Fix name in setup.cfg #123
• OCPBUGS-31811: [4.15] Add makefile #126
• OCPBUGS-31811: [4.15] Install ironic-python-agent from source #125
• OCPBUGS-31811: [4.15] Add requirements placeholders for cachito #121
• Full changelog

k8s-prometheus-adapter

• OCPBUGS-32214, OCPBUGS-32215: upgrade deps #102
• Full changelog

keepalived-ipfailover

• OCPBUGS-30413: update unit tests in egress/dns-proxy #168
• Full changelog

kubevirt-cloud-controller-manager

• OCPBUGS-31801: Bump opentelemetry #39
• OCPBUGS-24118: Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART #28
• OCPBUGS-22061: Bump golang.org/x/net to v0.18.0 #34
• Full changelog

kubevirt-csi-driver

• OCPBUGS-29793: [release-4.15] Address https://github.com/advisories/GHSA-fg9q-5cw2-p6r9: Restrict access to infrastructure PVCs by requiring matching infraClusterLabels on tenant PVCs #33
• Full changelog

machine-api-operator

• OCPBUGS-31949: Update x/net to v0.24.0 #1231
• OCPBUGS-30215: Azure MAO CredentialsRequest Contains Unnecessary virtualMachines/extensions Permissions #1222
• Full changelog

machine-config-operator

• OCPBUGS-32092: Decrease logs of haproxy #4313
• OCPBUGS-35010: set required-scc for openshift workloads #4393
• OCPBUGS-31461: Remove weights from ingress check script #4290
• OCPBUGS-33847: If multiple hostnames are returned, use the first one for the Node name #4373
• OCPBUGS-20152: Don’t error if the certs.d dir doesn’t exist yet #4358
• OCPBUGS-32922: [release-4.15] add cluster fleet evaluation support to mco #4334
• OCPBUGS-28926: [4.15] crio: update pids limit to be -1 #4163
• OCPBUGS-28545: Delete state files on reboot only #4311
• OCPBUGS-31820: Remove the condition for checking the multiple ovs-if-br-ex profiles #4309
• OCPBUGS-27029: Log network service output to console #4113
• OCPBUGS-31646: fix: resources were in the wrong indentation level #4301
• : OCPBUGS-31576: kubelet: restorecon necessary files on kubelet’s prestart #4297
• OCPBUGS-30884: Prevent OVS-configuration to run before kdump #4259
• OCPBUGS-31383: make verify should use MCO’s kube version #4282
• OCPBUGS-30971: add preferredduringscheduling annotation to kube-rbac-proxy-crio #4264
• OCPBUGS-29731: Delete image openshift/openshift-proxy-pull-test #4199
• OCPBUGS-30093: Mount /run/nodeip-configuration into coredns containers #4229
• Full changelog

monitoring-plugin

• OU-417: throw an error when a custom datasource is not found #118
• OU-415: Add datasource parameter to handle metrics from custom datasources #116
• OCPBUGS-32097: make createdBy mandatory and auto fill with the current user #115
• OCPBUGS-31310: upgrade sanitize-html vulnerable dependency #107
• Full changelog

multus-cni

• OCPBUGS-35047: Update owners file #240
• OCPBUGS-35258: Thick plugin should not wait for API readiness on CNI DEL #242
• OCPBUGS-33477: Fix CNI cache update function to prevent nil access #234
• OCPBUGS-30237: Reload bootstrap kubeconfig if cert mgr failed to load valid certs #223
• Full changelog

multus-whereabouts-ipam-cni

• OCPBUGS-35081: [release-4.15] Use IP to identify orphaned allocation to be deleted #288
• Full changelog

network-tools

• OCPBUGS-31764: replace wireshark with wireshark-cli #118
• Full changelog

oauth-apiserver

• OCPBUGS-33210: bump lib-go to fix SAs acting as OAuth2 clients #114
• OCPBUGS-31951: bump x/net to 0.24.0 #109
• Full changelog

oauth-server

• OCPBUGS-33210: bump lib-go to fix SAs acting as OAuth2 clients #148
• Full changelog

oc-mirror

• OCPBUGS-34521: Fix DiskToMirror without internet connection without rebuild catalog (#866) #866
• OCPBUGS-33575: Change default behavior to not rebuild catalogs for V1 (#849) #849
• OCPBUGS-31466: Fix for oc-mirror new defaultChannel override (#846) #846
• Bump version to include v5.11.0 of go-git (#819) #819
• Full changelog

openshift-apiserver

• OCPBUGS-28928: Bump openshift/api to get updated docs for UnservableInFutureVersions #436
• OCPBUGS-31469: vendor upgrade runtime-utils #422
• Full changelog

openshift-controller-manager

• OCPBUGS-32807, OCPBUGS-33371: Rollback state of managed image pull secrets after downgrade #303
• OCPBUGS-31490: Bumps opentelemetry dependencies #294
• Full changelog

openstack-cinder-csi-driver-operator

• OCPBUGS-34927: Correct out-of-bounds check #172
• OCPBUGS-32744: Relax requirement to enable topology #165
• Full changelog

openstack-cluster-api-controllers

• OCPBUGS-25859: CARRY: Add Snyk security scan config #299
• OCPBUGS-26208: openshift/manifests: CloudCredential capability for CredentialsRequest #297
• Full changelog

openstack-machine-api-provider

• OCPBUGS-30857: Ensure portSecurity is correctly set in the Port #108
• OCPBUGS-28326: Add snyk configuration file #105
• Full changelog

operator-lifecycle-manager, operator-registry

• OCPBUGS-35720: Warn and allow CRD upgrade if validation fails but webhook is specified #789
• OCPBUGS-31939, OCPBUGS-31940: UPSTREAM: <carry>: update golang.org/x/net for CVE-2023-45288 #747
• OCPBUGS-35229: Unblock CI #768
• OCPBUGS-32860: UPSTREAM: <carry>: bump go-jose #740
• OCPBUGS-32311: [release-4.15]: Update if AlreadyExists #736
• OCPBUGS-31842: copy-content: delete destination dirs before copying (#3197) #728
• OCPBUGS-31651: [release-4.15] Correctly detect catalog image ID for extractContent catalog pods #726
• OCPBUGS-30219: bump otelgrpc to 0.46.0 #712
• Full changelog

operator-marketplace

• OCPBUGS-32060: update golang.org/x/net for CVE-2023-45288 #564
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-33623, OCPBUGS-33624: Improve CI signal by removing/suppressing signals #2168
• OCPBUGS-31814: ipv6+all protocols conntrack flush #2131
• OCPBUGS-34404: [release-4.15] dns: fix deadlock in case of error #2182
• OCPBUGS-33294: Reuse node-subnet from cache if exists #2163
• OCPBUGS-33960: Egressip garp fix 4.15 #2175
• OCPBUGS-30899: use a forked version of j-keck/arping that fixes a threading issue #2105
• OCPBUGS-32426: [release-4.15] Improves service iptables efficiency on start up #2156
• [Release 4.15] OCPBUGS-32986: Bump OVS #2147
• OCPBUGS-27852: [release-4.15] Full implementation of KEP-1669 ProxyTerminatingEndpoints + ETP=local fix #2025
• OCPBUGS-29316: [release-4.15] Ignore missing live migratable pod annotation on AddNode #2065
• OCPBUGS-32202: [release-4.15] Bump OVN to 23.09.0-139 #2121
• OCPBUGS-33020: drop-forwarding: Add ClusterSubnets to allowed forwarding CIDRs #2141
• OCPBUGS-32154: Custom v4 and v6 transit switch subnets while creating kind cluster #2094
• OCPBUGS-31081: Periodically check the ovnkube-node certificate is not expired #2099
• OCPBUGS-31033: Remove OVN topology version reporting/detection #2098
• OCPBUGS-31500, OCPBUGS-31501: EIP multi NIC IPv6 support and default route with next hop #2103
• Full changelog

powervs-block-csi-driver

• OCPBUGS-33622: Fix CVE2023-45288 by bumping x/net to v0.24.0 -4.15 #80
• Full changelog

service-ca-operator

• OCPBUGS-34797: set required-scc for openshift workloads #243
• Full changelog

telemeter

• : OCPBUGS-35076: Release Fix CVE go-jose #542
• OCPBUGS-32890: CVE-2024-28180 bump go-jose to v3.0.3 #531
• Full changelog

tests

• OCPBUGS-28928: Add test for UpgradeValidation contention #28820
• OCPBUGS-33368: [release-4.15] monitor test service-type-load-balancer-availability setup fails frequently in 4.14 & 4.15 PowerVS CI jobs #28821
• #28776 FIX [release-4.15] OCPBUGS-33368: monitor test fix to wait before connecting to a non-existent dns on PowerVS and IBMCloud platforms #28791
• OCPBUGS-26520: Kuryr: Ignore Upgradeable=False on operators tests #28512
• OCPBUGS-33347: Provide SCC access via RBAC #28780
• OCPBUGS-33541: Adjust the method of get the apiServer (release-4.15) #28762
• OCPBUGS-33473: [release-4.15] MULTIARCH-4352: Censor private key from pod dump logs #28666
• : OCPBUGS-32554: Also rely on oomkilled exit code 137 in build test #28724
• OCPBUGS-31726: Use centos7 tag instead of latest for cmd images tests #28688
• OCPBUGS-30892: fix panic on non-standard node-role labels #28656
• Full changelog

vsphere-cluster-api-controllers

• OCPBUGS-30117: manifests: Add in CustomNoUpgrade #38
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• OCPBUGS-33604: FailedPrecondition volume does not appear staged #118
• Full changelog

---

View changelog in Markdown or change previous release: 4.15.184.15.174.15.164.15.154.15.144.15.134.15.124.15.114.15.104.15.94.15.84.15.74.15.64.15.54.15.44.15.34.15.24.15.14.15.04.15.0-rc.84.15.0-rc.74.15.0-rc.54.15.0-rc.44.15.0-rc.34.15.0-rc.24.15.0-rc.14.15.0-rc.04.14.424.14.414.14.404.14.394.14.384.14.374.14.364.14.354.14.344.14.334.14.324.14.314.14.304.14.294.14.284.14.274.14.264.14.254.14.244.14.234.14.224.14.214.14.204.14.194.14.184.14.174.14.164.14.154.14.144.14.134.14.124.14.114.14.104.14.94.14.84.14.74.14.64.14.54.14.44.14.34.14.24.14.14.14.04.14.0-rc.74.14.0-rc.64.14.0-rc.54.14.0-rc.44.14.0-rc.34.14.0-rc.24.14.0-rc.14.14.0-rc.04.13.544.13.534.13.524.13.514.13.504.13.494.13.484.13.474.13.464.13.454.13.444.13.434.13.424.13.414.13.404.13.394.13.384.13.374.13.364.13.354.13.344.13.334.13.324.13.314.13.304.13.294.13.284.13.274.13.264.13.254.13.244.13.234.13.224.13.214.13.194.13.184.13.174.13.164.13.154.13.144.13.134.13.124.13.114.13.104.13.94.13.84.13.74.13.64.13.54.13.44.13.34.13.24.13.14.13.04.13.0-rc.84.13.0-rc.74.13.0-rc.64.13.0-rc.54.13.0-rc.44.13.0-rc.34.13.0-rc.24.13.0-rc.04.12.704.12.694.12.684.12.674.12.664.12.654.12.644.12.634.12.624.12.614.12.604.12.594.12.584.12.574.12.564.12.554.12.544.12.534.12.524.12.514.12.504.12.494.12.484.12.474.12.464.12.454.12.444.12.434.12.424.12.414.12.404.12.394.12.384.12.374.12.364.12.354.12.344.12.334.12.324.12.314.12.304.12.294.12.284.12.274.12.264.12.254.12.244.12.234.12.224.12.214.12.204.12.194.12.184.12.174.12.164.12.154.12.144.12.134.12.124.12.114.12.104.12.94.12.84.12.74.12.64.12.54.12.44.12.34.12.24.12.14.12.04.12.0-rc.84.12.0-rc.74.12.0-rc.64.12.0-rc.54.12.0-rc.44.12.0-rc.34.12.0-rc.24.12.0-rc.14.12.0-rc.04.11.594.11.584.11.574.11.564.11.554.11.544.11.534.11.524.11.514.11.504.11.494.11.484.11.474.11.464.11.454.11.444.11.434.11.424.11.414.11.404.11.394.11.384.11.374.11.364.11.354.11.344.11.334.11.324.11.314.11.304.11.294.11.284.11.274.11.264.11.254.11.244.11.234.11.224.11.214.11.204.11.194.11.184.11.174.11.164.11.154.11.144.11.134.11.124.11.114.11.104.11.94.11.84.11.74.11.64.11.54.11.44.11.34.11.24.11.14.11.04.11.0-rc.74.11.0-rc.64.11.0-rc.54.11.0-rc.44.11.0-rc.34.11.0-rc.24.11.0-rc.14.11.0-rc.04.11.0-fc.34.11.0-fc.24.11.0-fc.0───4.19.0-0.nightly-2024-12-04-1843504.19.0-0.nightly-2024-12-04-1031394.19.0-0.nightly-2024-12-04-0312294.19.0-0.nightly-2024-12-03-1950444.19.0-0.nightly-2024-12-03-1155564.19.0-0.nightly-2024-12-03-0437014.19.0-0.nightly-2024-12-02-2101064.19.0-0.nightly-2024-12-02-0457054.19.0-0.nightly-2024-12-01-2148574.19.0-0.nightly-2024-12-01-1442294.19.0-0.nightly-2024-11-30-0016334.19.0-0.nightly-2024-11-26-1103084.19.0-0.nightly-2024-11-23-021157───4.19.0-0.ci-2024-12-05-1801524.19.0-0.ci-2024-12-05-1201504.19.0-0.ci-2024-12-05-0601494.19.0-0.ci-2024-12-05-0001484.19.0-0.ci-2024-12-04-1801484.19.0-0.ci-2024-12-04-1201464.19.0-0.ci-2024-12-04-0601464.19.0-0.ci-2024-12-04-0001464.19.0-0.ci-2024-12-03-1801464.19.0-0.ci-2024-12-03-1201464.19.0-0.ci-2024-12-03-060146───4.18.0-0.nightly-2024-12-05-1913554.18.0-0.nightly-2024-12-05-1036444.18.0-0.nightly-2024-12-04-2039104.18.0-0.nightly-2024-12-04-1130144.18.0-0.nightly-2024-12-04-0103114.18.0-0.nightly-2024-12-03-1746394.18.0-0.nightly-2024-12-03-1143554.18.0-0.nightly-2024-12-03-0450064.18.0-0.nightly-2024-12-02-2111054.18.0-0.nightly-2024-12-02-1238324.18.0-0.nightly-2024-12-02-0343544.18.0-0.nightly-2024-11-30-1417164.18.0-0.nightly-2024-11-29-2037484.18.0-0.nightly-2024-11-27-1624074.18.0-0.nightly-2024-11-27-0859274.18.0-0.nightly-2024-11-27-0127164.18.0-0.nightly-2024-11-26-0756484.18.0-0.nightly-2024-11-22-231049───4.18.0-0.ci-2024-12-05-2015084.18.0-0.ci-2024-12-05-1415084.18.0-0.ci-2024-12-05-0815064.18.0-0.ci-2024-12-05-0215064.18.0-0.ci-2024-12-04-2015064.18.0-0.ci-2024-12-04-1415064.18.0-0.ci-2024-12-04-0815064.18.0-0.ci-2024-12-04-0215064.18.0-0.ci-2024-12-03-2015064.18.0-0.ci-2024-12-03-1415064.18.0-0.ci-2024-12-03-0815064.18.0-0.ci-2024-12-03-021506───4.17.0-0.nightly-2024-12-05-1526144.17.0-0.nightly-2024-12-04-1922574.17.0-0.nightly-2024-12-04-0523554.17.0-0.nightly-2024-12-03-1833574.17.0-0.nightly-2024-12-03-1406504.17.0-0.nightly-2024-12-03-0825234.17.0-0.nightly-2024-12-02-2235324.17.0-0.nightly-2024-12-02-1750164.17.0-0.nightly-2024-12-02-1035244.17.0-0.nightly-2024-12-02-0251264.17.0-0.nightly-2024-12-01-1349274.17.0-0.nightly-2024-11-30-1420344.17.0-0.nightly-2024-11-29-1224044.17.0-0.nightly-2024-11-28-2011024.17.0-0.nightly-2024-11-28-1323414.17.0-0.nightly-2024-11-28-0736314.17.0-0.nightly-2024-11-28-0026464.17.0-0.nightly-2024-11-27-1802324.17.0-0.nightly-2024-11-27-0920154.17.0-0.nightly-2024-11-27-0329454.17.0-0.nightly-2024-11-26-1919584.17.0-0.nightly-2024-11-26-1144564.17.0-0.nightly-2024-11-25-2054014.17.0-0.nightly-2024-11-25-1420204.17.0-0.nightly-2024-11-24-0154114.17.0-0.nightly-2024-11-23-1924384.17.0-0.nightly-2024-11-23-1153134.17.0-0.nightly-2024-11-23-0446444.17.0-0.nightly-2024-11-22-2215204.17.0-0.nightly-2024-11-22-1300354.17.0-0.nightly-2024-11-22-045157───4.17.0-0.ci-2024-12-05-2043554.17.0-0.ci-2024-12-05-1443334.17.0-0.ci-2024-12-05-0843174.17.0-0.ci-2024-12-05-0243174.17.0-0.ci-2024-12-04-2006194.17.0-0.ci-2024-12-04-0904064.17.0-0.ci-2024-12-04-0221544.17.0-0.ci-2024-12-03-2021544.17.0-0.ci-2024-12-03-1421544.17.0-0.ci-2024-12-02-1724124.17.0-0.ci-2024-12-02-112412───4.16.0-0.nightly-2024-12-05-1111034.16.0-0.nightly-2024-12-05-0622194.16.0-0.nightly-2024-12-04-1926204.16.0-0.nightly-2024-12-04-0242044.16.0-0.nightly-2024-12-03-1450284.16.0-0.nightly-2024-12-03-0144314.16.0-0.nightly-2024-12-02-1835364.16.0-0.nightly-2024-12-02-1114164.16.0-0.nightly-2024-12-02-0258204.16.0-0.nightly-2024-11-29-1940114.16.0-0.nightly-2024-11-29-1441544.16.0-0.nightly-2024-11-28-2134254.16.0-0.nightly-2024-11-28-1153354.16.0-0.nightly-2024-11-27-1651504.16.0-0.nightly-2024-11-27-1205574.16.0-0.nightly-2024-11-26-2129134.16.0-0.nightly-2024-11-26-0409344.16.0-0.nightly-2024-11-25-2305244.16.0-0.nightly-2024-11-23-1456194.16.0-0.nightly-2024-11-23-0425104.16.0-0.nightly-2024-11-22-072758───4.16.0-0.ci-2024-12-05-1753344.16.0-0.ci-2024-12-05-1153344.16.0-0.ci-2024-12-05-0553244.16.0-0.ci-2024-12-04-2239234.16.0-0.ci-2024-12-04-1639234.16.0-0.ci-2024-12-04-0408054.16.0-0.ci-2024-12-03-1611144.16.0-0.ci-2024-12-03-1011144.16.0-0.ci-2024-12-02-2303004.16.0-0.ci-2024-12-02-095938───4.15.0-0.nightly-2024-12-05-1413534.15.0-0.nightly-2024-12-05-0404544.15.0-0.nightly-2024-12-04-1640054.15.0-0.nightly-2024-12-04-0605224.15.0-0.nightly-2024-12-03-2219154.15.0-0.nightly-2024-12-03-1330174.15.0-0.nightly-2024-12-03-0314144.15.0-0.nightly-2024-12-02-201926───4.15.0-0.ci-2024-12-05-2114384.15.0-0.ci-2024-12-05-1138184.15.0-0.ci-2024-12-05-0227144.15.0-0.ci-2024-12-04-2027144.15.0-0.ci-2024-12-04-1343474.15.0-0.ci-2024-12-04-0653254.15.0-0.ci-2024-12-03-2021014.15.0-0.ci-2024-12-03-1227314.15.0-0.ci-2024-12-03-054701───4.14.0-0.nightly-2024-12-05-0239284.14.0-0.nightly-2024-12-04-1653194.14.0-0.nightly-2024-12-04-0422074.14.0-0.nightly-2024-12-03-2145544.14.0-0.nightly-2024-12-03-1327534.14.0-0.nightly-2024-12-02-205011───4.14.0-0.ci-2024-12-05-1428184.14.0-0.ci-2024-12-04-2220284.14.0-0.ci-2024-12-04-1524424.14.0-0.ci-2024-12-04-0924424.14.0-0.ci-2024-12-03-2158004.14.0-0.ci-2024-12-03-1334144.14.0-0.ci-2024-12-03-070439───4.13.0-0.nightly-2024-11-30-0419004.13.0-0.nightly-2024-11-23-1013054.13.0-0.nightly-2024-11-20-0919214.13.0-0.nightly-2024-11-19-0924194.13.0-0.nightly-2024-11-18-041323───4.13.0-0.ci-2024-12-05-1556344.13.0-0.ci-2024-12-05-0547324.13.0-0.ci-2024-12-04-2009524.13.0-0.ci-2024-12-03-0730394.13.0-0.ci-2024-12-02-1947584.13.0-0.ci-2024-12-02-0659564.13.0-0.ci-2024-11-30-040420───4.12.0-0.nightly-2024-12-04-0119504.12.0-0.nightly-2024-12-02-1832084.12.0-0.nightly-2024-12-02-0443584.12.0-0.nightly-2024-11-28-0022544.12.0-0.nightly-2024-11-27-1038174.12.0-0.nightly-2024-11-27-0039294.12.0-0.nightly-2024-11-25-1001394.12.0-0.nightly-2024-11-20-1247564.12.0-0.nightly-2024-11-18-021414───4.12.0-0.ci-2024-12-03-0259324.12.0-0.ci-2024-12-02-1735344.12.0-0.ci-2024-12-02-0430344.12.0-0.ci-2024-11-28-1234364.12.0-0.ci-2024-11-28-0232474.12.0-0.ci-2024-11-27-2032474.12.0-0.ci-2024-11-27-1432474.12.0-0.ci-2024-11-27-0039214.12.0-0.ci-2024-11-26-155836───4.11.0-0.nightly-2024-07-06-0140574.11.0-0.nightly-2024-07-01-0855474.11.0-0.nightly-2024-04-20-1326214.11.0-0.nightly-2024-04-15-1237064.11.0-0.nightly-2024-04-15-0346274.11.0-0.nightly-2024-03-18-1654324.11.0-0.nightly-2024-03-12-2229304.11.0-0.nightly-2024-02-01-0446274.11.0-0.nightly-2024-01-19-1107024.11.0-0.nightly-2024-01-15-0229494.11.0-0.nightly-2024-01-10-203533───4.11.0-0.ci-2024-11-14-2201374.11.0-0.ci-2024-11-14-1432224.11.0-0.ci-2024-09-18-0735584.11.0-0.ci-2024-09-17-2036254.11.0-0.ci-2024-07-30-2032534.11.0-0.ci-2024-07-23-1708064.11.0-0.ci-2024-07-01-0910384.11.0-0.ci-2024-06-07-1944004.11.0-0.ci-2024-06-05-1627184.11.0-0.ci-2024-06-01-042714───4.18.0-ec.44.18.0-ec.34.18.0-ec.24.18.0-ec.14.18.0-ec.0

Source code for this page located on github