Back to index

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.15.20-x86_64

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
  • upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
• Informing jobs
  • aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-aws-ovn-serial
  • aws-ovn-upgrade-micro Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.15-e2e-aws-ovn-upgrade
  • aws-sdn-upgrade-4.15-micro Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.15-e2e-aws-sdn-upgrade
  • azure-ovn-upgrade-4.15-micro Failed (3 retries) periodic-ci-openshift-release-master-ci-4.15-e2e-azure-ovn-upgrade
  • gcp-ovn-rt-upgrade-4.15-minor Succeeded (2 retries) periodic-ci-openshift-release-master-ci-4.15-upgrade-from-stable-4.14-e2e-gcp-ovn-rt-upgrade
  • hypershift-ovn-conformance-4.15 Succeeded periodic-ci-openshift-hypershift-release-4.15-periodics-e2e-aws-ovn-conformance
  • metal-ipi-ovn-dualstack Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-metal-ipi-ovn-dualstack
  • metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-metal-ipi-ovn-ipv6
  • metal-ipi-sdn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-metal-ipi-sdn-bm

Upgrades from:

• 4.15.19 (changes) - F S F F F F F S F S
• 4.15.18 (changes) - Success
• 4.15.17 (changes) - Success
• 4.15.14 (changes) - Success
• 4.15.12 (changes) - Success
• 4.15.5 (changes) - Success
• 4.15.3 (changes) - Success
• 4.15.2 - Failed
• 4.15.0 (changes) - Success
• 4.14.31 (changes) - Success Success
• 4.14.30 (changes) - Failed
• 4.14.29 (changes) - Success
• 4.14.28 (changes) - Failed
• 4.14.27 (changes) - Failed
• 4.14.24 (changes) - Success
• 4.14.18 (changes) - Success
• 4.14.17 (changes) - Failed
• 4.14.16 (changes) - Success
• 4.14.0-0.nightly-2024-06-26-153544 (changes) - F F S

Upgrades to:

• 4.16.6 (changes) - Pending
• 4.16.5 (changes) - Success
• 4.16.4 (changes) - Success
• 4.16.3 (changes) - Success
• 4.16.2 (changes) - Success Success
• 4.16.1 (changes) - Success
• 4.15.23 (changes) - Success
• 4.15.22 (changes) - Failed
• 4.15.21 (changes) - S S S S S

---

Loading changelog, this may take a while ...

Changes from 4.15.2

Created: 2024-06-27 08:19:34 +0000 UTC

Image Digest: sha256:478d9f5a1b496ebd69ecd0d7a7fc961f6318290ac9242ff65e1e2bdb88ff3097

Release 4.15.20 was created from registry.ci.openshift.org/ocp/release:4.15.0-0.nightly-2024-06-26-101724

Components

• Kubernetes upgraded from 1.28.6 to 1.28.10
• Red Hat Enterprise Linux CoreOS upgraded from 415.92.202403061641-0 to 415.92.202406251950-0 (diff)

Rebuilt images without code change

• agent-installer-utils git 33b7d855 sha256:df285e408022dd00ca22c045197cf6be84cfbeedfef890b2795c576496de99de
• alibaba-cloud-controller-manager git abf4fa96 sha256:f840352d74fcc77b4d2eb28fb1c9a2f5e545bf4dd9977e018d63d8df3644dd0a
• alibaba-cloud-csi-driver git be4888d3 sha256:c09d583512fc25fa06649494cdd87813ba1baa982b2121b92ace2c8367f32795
• alibaba-disk-csi-driver-operator git 41b367ae sha256:44d67e93f84ecec16cc3df40121c4665560ca1d762060de94ee122d60b752802
• alibaba-machine-controllers git d3ba04c3 sha256:50ee2a7de59191ea04c7ae44284c470ea688921dcc9443f9bd100cd2a87df372
• aws-machine-controllers git 0129b1e3 sha256:f55905d48ee7f447f754b3452d402aa5d162fd0949eab14e76266e771b6ebef6
• azure-disk-csi-driver git dcb7e1c7 sha256:c8b30d4636cdf15e1b862573c22b9326990cac4550955ffccea4dbbd6ce5adaf
• azure-disk-csi-driver-operator git 160cf624 sha256:44dddfb44b8107cd3a8d7b48470c16269b04cca4e62492efa9a8278268f75863
• cluster-baremetal-operator git fdce2d08 sha256:d100659d3fa265d2b156c8b6dcc3078574c7d8440e3ea2d7bbb435549165fc25
• cluster-bootstrap git 0849c462 sha256:4a738e46c79824fd4c9e93036db36032d7151e5b1ca51fd333d80994ad593afe
• cluster-kube-cluster-api-operator git 128d8e08 sha256:80b0586bdc762e5b99904f7ef4b91a4cfbfcb090c7d2ca4b161f0814c74a7ca0
• cluster-kube-storage-version-migrator-operator git 37015e87 sha256:8b6e0312e6468fea472194c87427255e10c627537349a240b968b3e257082fb7
• cluster-machine-approver git 3a6b6ae6 sha256:0b453871605e388801342a08028e7bbcf0703c1d51154ebd49164f457c6cccd4
• cluster-olm-operator git a7ba8987 sha256:cb24bc61b6c34fc793bc457252bfbfbe7a431f97de9e3f541dfaa85aac25253f
• cluster-openshift-apiserver-operator git 74013916 sha256:3e5d78952785d1b278d572066237bbc2650a71207f9001ff1da13989dbfeddc6
• cluster-platform-operators-manager git 37a0a919 sha256:2fa049dd8a1d2374e33862ea2fad081752b1d29b6a02a3c31bdd7bd5a3d7329b
• cluster-policy-controller git cc48f315 sha256:f8342eb00f795d10057a63372c5f7a5f7b8100ce96805c26bfdeb08e6307b79b
• cluster-update-keys git be6ba5b0 sha256:bcb8b151e645e985b9afccc0a182792efac61d32c5ac4d1f599ff2ec618f4901
• configmap-reloader git 617398f5 sha256:18e6dfb09a04df148f589e1cbda85badfaaf4d18d4f41b0a5dab0ae61d30c48e
• coredns git 22f950ea sha256:520726bb54af469b391d49262467b346fe2a80a83f44e3ad8dd96a4fea09b3e0
• csi-driver-manila-operator git 2fc4a7cc sha256:b119893b857f7e52b230b548255ae9b882869d368fa89194ea8529dcd3f0df76
• csi-driver-nfs git d032dc10 sha256:74711ea1233eca0fecacaa32cdcd188fdbd76c8c59906793d79da3d7f7466655
• csi-driver-shared-resource git 260a085a sha256:702802529eeb6bad180b647329c0bad3d6b148a37b278f8b5e4cffc692c98607
• csi-driver-shared-resource-operator git 8d017b7f sha256:8704287c6087b631c34184ea8378575fad2f965628cc2e187da29b5f5ffd5294
• csi-driver-shared-resource-webhook git 260a085a sha256:3ddeb66261d5a1a4609e4820c372573be57db6a5eb7200aa9b5555b464378347
• csi-external-attacher git f806f266 sha256:ebe6b04e100d97444f050c698ba0e19427171da8e374b104b5d3ec35ed0351a6
• csi-external-provisioner git ce5a1a33 sha256:13309b8d4e6a39542cb5758f17d881b4db491504755f8636840c8bdfeba944ee
• csi-external-resizer git 3b4236d3 sha256:3dd414bcabb2453b9f5cf648ba51bae7a2770ed1a66b070ee57871d8216a9ff5
• csi-livenessprobe git 240bb8c0 sha256:b504ca752a6f565a0b827ebdd5a1c9b976c1920a95e43dd54d7d7cd434c46c96
• csi-node-driver-registrar git 9005584e sha256:ccb972cc8d96759a08131c851bd4f5061279a97f176f8aa2df8114230ffa8306
• driver-toolkit git 7a448c2e sha256:856320402a94cab6c80f8870e45d49c4c54fcc96cb7b636dfc633080d2190295
• egress-router-cni git 39ea8ee1 sha256:ad733f6c1c08b610a00c9af5755a7dba1df8bed88911fa3973cc705c09cdad8c
• gcp-machine-controllers git b15daaf5 sha256:eaa025cae4b47baa33d2a36da053589303955e4bbae52a38e1686e34551e08cc
• gcp-pd-csi-driver git 856ee3e2 sha256:d5c530d1fcd25ab92389f889a64e293b3c66251b6881e19cc7439997da712de2
• gcp-pd-csi-driver-operator git 3b91ee31 sha256:0971917dab8d36fd1f567c8b9b9935ef787436b036b044deacd83e9f62b81d09
• ibm-cloud-controller-manager git 19e64d5c sha256:0088800b1b69348e457d9c2f0c3d605f09048679b901f09ac60dcf241dbddf2f
• ibm-vpc-block-csi-driver git ce7f53cd sha256:336d506a45298b078e99f40133841df826b1752b9889a979c314aa67ca7c935b
• ibm-vpc-node-label-updater git e1a0adca sha256:814fe4e90e24f12aa70c7cf61f0403d41e0a164494429eab29ebb41904f21600
• ibmcloud-cluster-api-controllers git 34fb6252 sha256:8951797e4ac92707bbf6b15ea75860bd3c5569513824beff6b8131c3f8b00719
• ibmcloud-machine-controllers git 6b0b8ea7 sha256:47ed01e3647ade0d60b2fc440cf161d34d8d97a8098941e4153113a01c3e39ad
• ironic-machine-os-downloader git bcbcd95b sha256:8b001631fdb3d1bbec2580ffc988d71a227283a3ae2f53bf49e27e01fef30899
• ironic-static-ip-manager git 47200021 sha256:f222e1b5417bc96ab4f1c38a8ac2bcea7013f033f729a847848a58041565f2e8
• kube-metrics-server git bcbf241c sha256:334097fc47edc8183acfd2f569c4c516e4e080bcea92a2975b194ee40056c2e3
• kube-proxy git 71a6f28d sha256:4c21bc2515133356355f9068ba98373026677247c6855abc85e2c281ee9fdac0
• kube-rbac-proxy git e8e8c84b sha256:7c9c5e0f0c24722f3862c76b070e0de0eca6eff3c3a6319062993e8645132087
• kube-state-metrics git 037b59c2 sha256:eab40b911693c12a78e3bed924ba4600e2648a0065ee04847eee928546f6ea23
• kube-storage-version-migrator git e8749689 sha256:fdca25cca1fa4895b58f9193603d4f1089fad29a889fc59ec205e286f23e9071
• libvirt-machine-controllers git 1e096cdf sha256:2953bf61f5b0fb59621c4ee9f0a6da2e9752a0e5f45ccf6ecf17f8e5ea5661b4
• machine-image-customization-controller git 97d87657 sha256:bc6939f92d26ee8563ef35f9b7db76308c88aeba8e2fc300191dfa8c8289cb4e
• machine-os-content sha256:18fbd71465da4f085b3e07867bb2c8220324904bc999592fa5464e166d780514
• machine-os-images git 9e9c920f sha256:61dac77bcd734c6cc6fc1f442182c63cc4edeedcb3d9db2e46c8f01d6d5ca136
• multus-admission-controller git 23a7cfe4 sha256:cb2900caa700e1844fd2a3fbf3738e726dd8cd47b8cda54573f285a90151849d
• multus-networkpolicy git 6212406b sha256:6ae490d7f5bea9c8a6a0dfeb383f8f1453568be4ebe68f3d3f8b9dff027aab27
• multus-route-override-cni git a5b755b5 sha256:5a72b199b00eef9968c80d6bc5937fe84ee7f391d0675aaf2a5d377d0bfb5daa
• must-gather git 47335065 sha256:faff78374399e5b634d5f7e39c3b266f056d643793b3e03335ff43447eace68b
• network-interface-bond-cni git f91decaa sha256:e0e971828b2b2c995a6a6ec14f20f159b6876e9d3b09d2d6881badb7a999af12
• network-metrics-daemon git 0288f362 sha256:49b24b1514505f2a237e41a939b5932610ef9a92814eb0c3fb8efec8c2ecd18a
• nutanix-cloud-controller-manager git 33fb22c1 sha256:b64d144f634824748f5f28572423210a44ae63244a28a8fa626cb67be7d22673
• nutanix-machine-controllers git f02b1a28 sha256:c5b78654523f80db28ea7096cc34661bb1d261e9dbea28c01ae530c5ef0ec4b1
• oauth-proxy git 241a88c4 sha256:66e0a4fdb6ed45eec731e57363bb1fc5294888ab6086f8c59547a8918aacbf61
• olm-catalogd git 2724be3e sha256:05a95fb41ca1cf52c64df1fa42f4a0dca3e2653e1b8f59d932608965eb37045c
• olm-operator-controller git e2906934 sha256:28ae4c30225f5f063eeb84ce8268ac66346b62d217e0f0b1664d5881fd01ebd5
• openshift-state-metrics git 1915f645 sha256:431d740de9506ddffca0dab65ad15de85925028148fad6455c5a2885e67dffbb
• ovirt-csi-driver git b8d25ad6 sha256:da355903c91e7e07c077d768d023ae71847df7c1d96bc391365a2b3fa7b54389
• ovirt-csi-driver-operator git e9b0fa23 sha256:06b2d6e6d0c7b1e304a4f0b9f95f136c2c9515ffb51d7644dd4c8e1229b178b1
• ovirt-machine-controllers git 5d708631 sha256:92e726256c76c384386634698572beb183837471dfdf34d62a583b8935d216b7
• powervs-block-csi-driver-operator git a3729dcb sha256:a53f93443b3fb6f0df55840b860b0c8c1d6c144369a270607dd8ca591b3da7b7
• powervs-cloud-controller-manager git 521b80df sha256:cb8f0d6eb1ede6e5fbc9b45da98bf9fd8f76a49f66c2784bfd29c47f63372ff1
• powervs-machine-controllers git 07e8f8b8 sha256:b737c7266316b8e1fffc8bbc475594b8b849176da7951c3b04eb7124d593abad
• prom-label-proxy git f3f1f5d1 sha256:f287201db5ab2a813ec9f63ff7e96b08e9edf75bfc8be396300489545ba5532d
• prometheus git 6828e446 sha256:995c2030b959fe712e687fb5ecf3179a13d94a13167d66bf7477ee41d17c003a
• prometheus-alertmanager git 870ade52 sha256:a075043f9ae08840dcc5133f5330fba578be8ad9391af39bed1d1516574a350d
• prometheus-config-reloader git faad27f9 sha256:a41b788c00a27b2278b1fa3efbcb28d069f11db7bda5e5a781815acc3f1e8041
• prometheus-node-exporter git aed837c3 sha256:db063a24b27c09c4239b66cd5e3e4975b70042cf560197b4a97d633058a17cd3
• prometheus-operator git faad27f9 sha256:c89c925fa91dc1c94ff696c213ec9653352b5a85ccb78e41d52c47015226b62a
• prometheus-operator-admission-webhook git faad27f9 sha256:a7d9227f67b1bdb8804c7f7b1974ae4f9644a232709790934363336bd132e6df
• rhel-coreos sha256:527804a5f29b41e3b20638bfa5c97997d111866b57b1fc1d924a2f0175d977d0
• rhel-coreos-extensions sha256:8a1201c94fcb84507c212d296254209b9429cee291ba4d2fc697159bf0c3b284
• route-controller-manager git c5cc7a73 sha256:8aca29e39b57f1b121c0dfce0f93b8aa158c0150d2c709fce267a859a0482070
• sdn git 71a6f28d sha256:4579d62a49d4ff2c7b5abe03319231441323ddd5de23f7ce32deefdb1a79c008
• thanos git 66161ad4 sha256:d41993a3002c23478be679b1053c247358191b6e28d0c57f066dedab30436e46
• vsphere-cloud-controller-manager git d2af6982 sha256:68ee96cf63e43fd8a7419266460d76323793f58890142233289215a968d2c7cb
• vsphere-csi-driver-operator git e0d46570 sha256:8ae53193004fa185d203f2f2e47776755ca15da0382594248afd7fec3f2e2715

agent-installer-api-server

• OCPBUGS-34641: Invalid Pull-Secret when using password which contains a colon character (#6381) #6381
• OCPBUGS-31631: Deploy dual stack with IPv6 on top of bond/vlan fails (#6245) #6245
• MGMT-17593: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#6217) #6217
• 17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6211) #6211
• Revert “MGMT-17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6194)” (#6208) #6194
• MGMT-17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6194) #6194
• MGMT-17541: Replace broken golangci reference (#6191) #6191
• OCPBUGS-30232: Handle skipping hostPrefix validation for IPv6 For non-OVN/SDN networkTypes, the hostPrefix validation is not required and it is skipped. This fixes a regression introduced in the fix for https://issues.redhat.com/browse/OCPBUGS-23069 in which IPv6 CIDRs were not using the correct default hostPrefix. In addition, all cases where the validation is used are now covered. (#6137) #6137
• NO-ISSUE: replace postgres images as current one disappeared from quay (#6135) #6135
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• OCPBUGS-35894: Fix race to mark node Joined (#859) #859
• MGMT-16843: Use hostnamectl to replace illegal hostname (#851) #851
• MGMT-17593: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#833) #833
• MGMT-17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#827) #827
• MGMT-17541: Replace broken golangci reference (#824) #824
• Full changelog

agent-installer-node-agent

• OCPBUGS-33404: Make removable disks eligible (#718) #718
• MGMT-17593: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#704) #704
• MGMT-17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#699) #699
• MGMT-17541: Replace broken golangci reference (#695) #695
• Full changelog

apiserver-network-proxy

• OCPBUGS-31953: Bump golang.org/x/net to v0.23.0 #51
• Full changelog

aws-cloud-controller-manager

• OCPBUGS-31954: update for CVE-2023-45288 [release-4.15] #81
• OCPBUGS-29079: Updates build-rpm.sh to set release to build time #76
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-30117: manifests: Add in CustomNoUpgrade #511
• OCPBUGS-32114: UPSTREAM: <carry>: Fix instance PrivateDNSName when domain-name is set in dhcpOpts #508
• OCPBUGS-31036: UPSTREAM: 4670:Update awsmachine providerID and instanceID immediately after ec2:RunInstances is called #501
• OCPBUGS-30595: fix e2e tests on release branches #504
• Full changelog

aws-ebs-csi-driver

• OCPBUGS-33043: UPSTREAM: 1919: Add reserved-volume-attachments #263
• Full changelog

aws-ebs-csi-driver-operator

• OCPBUGS-33043: Explicitly reserve 1 attachment for the root disk #222
• OCPBUGS-30621: remove legacy directory and duplicate Dockerfile.*.test files #201
• OCPBUGS-30621: move test manifest to top-level directory #195
• Full changelog

aws-pod-identity-webhook

• OCPBUGS-32886: Upgrade go-jose module to 2.6.3 #188
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPBUGS-33127: Improvements to client timeouts to prevent hangs #118
• OCPBUGS-33092: Bump otelgrpc #117
• OCPBUGS-30970: Update acr-credential-provider.spec #115
• OCPBUGS-30970: Adds acr-credential-provider spec file and build script #114
• Full changelog

azure-cluster-api-controllers

• OCPBUGS-29502: Bump helm to v3.14.4 #303
• Full changelog

azure-file-csi-driver

• OCPBUGS-33038: Rebase v1.29.5 for OCP 4.15 #65
• Full changelog

azure-file-csi-driver-operator

• OCPBUGS-33038: add token audience for Azure File #103
• Full changelog

azure-machine-controllers

• OCPBUGS-30215: Remove startupScript vmextension lookup #103
• Full changelog

azure-workload-identity-webhook

• OCPBUGS-32895: Upgrade go-jose module to 2.6.3 #17
• Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

• OCPBUGS-35131, OCPBUGS-35141, OCPBUGS-35144: [CVE-2023-48795] Bump golang.org/x/crypto to v0.21.0 #8646
• OCPBUGS-35359: GCP: Prevent cluster installation with mismatched worker assets and worker replicas #8581
• OCPBUGS-35502: [release-4.15] azure: bump profile used for network #8607
• OCPBUGS-35586: [release-4.15] bump github.com/containers/image for CVE fix #8621
• OCPBUGS-31387: If host is offline or disconnected don’t check ver #8208
• OCPBUGS-35355: baremetal: Don’t always enable provisioning-interface.service #8580
• OCPBUGS-35032: [release-4.15] aws: terraform: add spot instance support for masters #8540
• OCPBUGS-35059: images: change libvirt-installer base #8550
• OCPBUGS-33672: add quota support to ca-west-1 #8412
• OCPBUGS-33454: go.mod: bump aws-sdk-go for ca-west-1 support #8381
• OCPBUGS-33205: Gcp bootstraping release 4.15 #8339
• OCPBUGS-33542: images: do not force terraform-providers to be statically linked #8392
• OCPBUGS-29929: GCP Destroy cleanup correct zones/records #8062
• OCPBUGS-32383: sdk/aws: add ssh security group rule for compute #8282
• OCPBUGS-32690: AWS: bump CCO for permission fix #8302
• OCPBUGS-32264: always save serial logs if they were gathered #8274
• OCPBUGS-30944: Don’t run libvirt validations in agent installer #8167
• NO-ISSUE: test fix to support slightly different nmstate error messages #8285
• OCPBUGS-32259: escape ‘%’ in proxy settings #8272
• OCPBUGS-32355: Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility #8277
• OCPBUGS-31335: openstack: Honour worker server group policy #8202
• : OCPBUGS-31590: GCP: Skip populating Private/Public Zones within DNS manifest #8220
• OCPBUGS-30922: coreos-installer iso kargs show broken on Agent ISO #8163
• OCPBUGS-30822: Validate control plane replicas #8143
• OCPBUGS-31274: IBMCloud: Restrict CIS and DNS Service lookup #8197
• OCPBUGS-30605: upi: aws: fix typo in worker templates #8125
• Bug OCPBUGS-31284: OpenStack: enable 30000:32767 nodePort IPv6 traffic #8199
• OCPBUGS-31087: Fix vsi image missing #8186
• OCPBUGS-30098: feat: add check for SNO bootstrap condition #8089
• OCPBUGS-30601: update RHCOS 4.15 bootimage metadata to 415.92.202402201450-0 #8122
• OCPBUGS-30854: Power VS: Fix wait_for_workspace #8159
• OCPBUGS-29964: fix Azure API SKU calls timing out #8086
• OCPBUGS-30792: Enable deploy by Service ID on PowerVS #8138
• OCPBUGS-30577: Authn with platform-services-go-sdk for PowerVS #8118
• Full changelog

baremetal-machine-controllers

• OCPBUGS-30876: Bump golang-protobuf version #214
• Full changelog

baremetal-operator

• OCPBUGS-34682: PreprovisioningImage should not be created on poweroff #358
• Full changelog

baremetal-runtimecfg

• OCPBUGS-35543: Add support for OVN HostCidrs annotation #319
• OCPBUGS-32024: Decrease log level when detecting node IP #304
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-35201: Bump joelanford/ignore to bump go-git to 5.11.0 #1798
• OCPBUGS-32840: Bump go-jose indirect reference to 2.6.3 #1749
• OCPBUGS-31879: Add OIDC specific certificate authority bundle flag #1730
• OCPBUGS-31726: Remove some of newapp unit tests relying on external deprecated images #1726
• OCPBUGS-30286: oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators #1698
• Full changelog

cloud-credential-operator

• OCPBUGS-32900: Upgrade go-jose module to 2.6.3 #696
• OCPBUGS-31924: aws: remove non-existent permission #691
• OCPBUGS-30412: gcp actuator update check to consider custom roles #686
• Full changelog

cloud-network-config-controller

• OCPBUGS-33780: Avoid panic when looking up attachedOutboundRule.ID in azure #145
• OCPBUGS-31754: Avoid nil pointer panic while assigning private IP on Azure #137
• Full changelog

cluster-authentication-operator

• OCPBUGS-34795: set required-scc for openshift workloads #675
• Full changelog

cluster-autoscaler

• OCPBUGS-33885: fix: scale up broken for providers not implementing NodeGroup.GetOptions() #301
• OCPBUGS-31464: add check for taint.value == nil #293
• Full changelog

cluster-autoscaler-operator

• OCPBUGS-31947: Update x/net to v0.24.0 #319
• Full changelog

cluster-capi-controllers

• OCPBUGS-30117: manifests: Add in CustomNoUpgrade #206
• OCPBUGS-33200: Bump protobuf to v1.33.0 #204
• OCPBUGS-30595: fix e2e tests on release branches #201
• Full changelog

cluster-capi-operator

• OCPBUGS-30117: manifests-gen: also add CustomNoUpgrade annotation value #166
• OCPBUGS-30118: create openshift-cluster-api namespace in CustomNoUpgrade #167
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-33547: update azure and ash tolerations on node manager #343
• Bug OCPBUGS-32246: Allow to patch events in OpenStack RBAC #339
• Full changelog

cluster-config-api

• OCPBUGS-35214: [Release 4-15] Add transit switch config to 4.15 #1872
• OCPBUGS-28928: Add UnservableInFutureVersions route status condition type #1751
• Full changelog

cluster-config-operator

• OCPBUGS-26542: remove duplicate manifests in image #395
• Full changelog

cluster-control-plane-machine-set-operator

• OCPBUGS-34971: Add unreadyNodeGracePeriod for allowing brief node hiccups #299
• OCPBUGS-35496: Wait for ControlPlaneMachineSet to be created when waiting for it to be updated #308
• OCPBUGS-35255: Improved debugging of API listing errors #301
• [Release 4.15] OCPBUGS-32414: Fix ExportFailureDomain to handle empty platform spec #290
• [Release 4.15] OCPBUGS-32357: Modified webhook to allow templates by name instead of just by path. #289
• Full changelog

cluster-csi-snapshot-controller-operator

• OCPBUGS-31599: create suitable role and roleBinding for csi-snapshot-webhook #203
• Full changelog

cluster-dns-operator

• OCPBUGS-32093: Add RBAC related to featuregates to fix hypershift upgrade #407
• Full changelog

cluster-etcd-operator

• OCPBUGS-33564: return errors in wait-for-ceo #1261
• OCPBUGS-32952: remove etcd-health-probe log #1257
• OCPBUGS-31942: update golang x net #1253
• OCPBUGS-31865: bump(library-go)=release-4.15 #1220
• OCPBUGS-30915: CEO aliveness check should only detect deadlocks #1225
• Full changelog

cluster-image-registry-operator

• OCPBUGS-34571: azure-path-fix: get client secret from k8s secret #1049
• OCPBUGS-34539: pkg/storage/s3: use force path style in favour of virtual hosted style config #1048
• OCPBUGS-33208: azurepathfix: check if platform status is nil before accessing it #1031
• OCPBUGS-32396: azure-path-fix: support auth via account key (without clientID) #1022
• OCPBUGS-31641: bump aws-sdk-go from v1.44 to v1.50 #1014
• Full changelog

cluster-ingress-operator

• OCPBUGS-28928: Prevent upgrades for SHA1 default cert and SHA1 route certs #1014
• OCPBUGS-35028: internalServiceChanged: Fix target port logic #1081
• OCPBUGS-34887: TestHostNetworkPortBinding: Delete t.Parallel() #1075
• OCPBUGS-34252: Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1058
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-29361: operator: stop removing kube-apiserver-slos asset #1643
• OCPBUGS-34492: Create one-shot migrations for the flowcontrol group. #1692
• OCPBUGS-33697: add a controller that reconciles SCCs’ volumes #1679
• OCPBUGS-33277: Fix incorrect name for hostmount-anyuid SCC ClusterRole #1672
• OCPBUGS-31807: Use RotatedSigningCASecret in update only mode #1662
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-31807: use RotatedSigningCASecret and RotatedSelfSignedCertKeySecret only in update mode #801
• OCPBUGS-31865: bump(library-go)=release-4.15 #797
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-31865: bump(library-go)=release-4.15 #537
• Full changelog

cluster-monitoring-operator

• OCPBUGS-33512: fix Thanos ruler alert generator url #2343
• OCPBUGS-32055: backport ols metric allowlist to 4.15 #2313
• OCPBUGS-28769: fix generation of telemeter token hash #2303
• Full changelog

cluster-network-operator

• OCPBUGS-29739: Run dhcp-daemon pods as system-node-critical priority #2283
• OCPBUGS-34596: Add ipsec state metric #2389
• OCPBUGS-32515: Fix wait logic for IPsec certificate signing request #2348
• OCPBUGS-29092: Add probes to node-network-identity #2253
• OCPBUGS-29654: Fully disable network-node-identity on ROKS #2314
• OCPBUGS-30927: ensure local networking deployments within hypershift use the client side load balancer to be resilient to control plane node failures #2310
• OCPBUGS-30615: Fix managed cluster detection on ARO #2304
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-33929: Negative net interface name does not reduce queues (#1066) #1066
• Add a ‘.snyk’ to silence static code analysis warnings (#1001) #1001
• fix extra-reboot on upgrade with paused mcp worker (#1049) #1049
• fix rendering extra ctrcfgs (#975) #975
• OCPBUGS-31694: E2E: Workload hints test cases fixes (#1012) (#1043) #1012
• Reduce number of reboots in offline tests (#1014) #1014
• Systemd processes not being moved to cpuset/systemd.slice fix (#1016) #1016
• Scheduler plugin: ignore IRQs (#983) #983
• e2e: when crun is enabled by default skip checking runc config (#1013) #1013
• OCPBUGS-30507: Add performance real time tuned template (#984) #984
• Report duplicate priority only for multiple matching profiles (#965) #965
• hack: fix backport of render-sync.sh (#996) #996
• Full changelog

cluster-openshift-controller-manager-operator

• OCPBUGS-31708: Update opentelemetry dependency 415 #342
• OCPBUGS-25985: Disable deployer-controller when deploymentconfig is disabled #322
• Full changelog

cluster-samples-operator

• OCPBUGS-22034: bump K8s version to 29.2 #538
• Full changelog

cluster-storage-operator

• OCPBUGS-33466: Fix problem-detector proxy setting #471
• Full changelog

cluster-version-operator

• OCPBUGS-33984: Add admin-gate for OCP 4.16 #1049
• Full changelog

console

• OCPBUGS-33642: Patch PF dynamic module parser to exclude ‘next’ modules #13849
• OCPBUGS-32501: Pipeline details page Metrics tab crashed due to no custom data #13781
• OCPBUGS-34478: UI inconsistency in topology when application grouping is collapsed #13898
• OCPBUGS-34350: Create Serverless form does not create BuildConfig #13891
• OCPBUGS-32029: Use UserInfo username field when logging out as kubeadmin #13748
• OCPBUGS-30208: Fix asynccache bugs #13807
• OCPBUGS-33838: TaskRuns should not be fetched for Failed PLR’s #13863
• OCPBUGS-34703: fix bug where textarea is not resizable #13913
• Revert “OCPBUGS-34550: Dont render ARN mode role field and warning for HyperShift clusters” #13905
• OCPBUGS-33263: Pipeline list page is crashed when navigating from Search page #13819
• OCPBUGS-33166: Fix NAD always on default namespace #13865
• OCPBUGS-31863: make sure folder is encapsulated with quotas #13737
• OCPBUGS-33506: Fix Pipeline details page with when expression using CEL expression #13835
• OCPBUGS-32505: Add visual connector between VMs and non VMs workloads #13782
• OCPBUGS-33548: restrict Masthead logo to max-height #13839
• OCPBUGS-32497: Improve Create serverless function error message #13778
• OCPBUGS-33191: Hide dev perspective Pipelines nav option if dynamic plugin nav option is enable #13810
• OCPBUGS-33058: fix issues with Edit Route form #13800
• OCPBUGS-32187: Add flag to hide Output tab contributed by pipelines-plugin #13756
• OCPBUGS-32716: Helm Plugin’s Catalog incorrectly renders a single index entry into multiple tiles #13788
• OCPBUGS-32506: setting correct image trigger annotation #13783
• OCPBUGS-32933: change OperatorHub filter FIPS Mode to Designed for FIPS #13796
• OCPBUGS-31799: Improve PipelineRun list view performance #13731
• OCPBUGS-32796: auth: fix OIDC logging out #13793
• OCPBUGS-31445: Upgrade Pipeline trigger resources to v1beta1 #13704
• OCPBUGS-31045: fix for execute inline markdown syntax issue #13681
• OCPBUGS-32518: Add warning about service binding operator will not be supported from 4.15 #13784
• OCPBUGS-32391: Routes created by devfiles do not always use HTTPS #13771
• OCPBUGS-32340: Increased max nodes limit to 200 in topology page #13767
• OCPBUGS-32399: Update devfile library to v2.2.2 #13762
• OCPBUGS-32156: TaskRun status is not displayed near the name #13752
• OCPBUGS-31806: Use bearer-token for local dev with auth #13732
• OCPBUGS-31839: fix bug where paused MCPs were incorrectly unpausing w… #13735
• OCPBUGS-31105: Update to pf5.2 to fix quick starts #13686
• OCPBUGS-31476: Requesting for country codes in localization of openshift - webconsole #13707
• OCPBUGS-31046: Application creation fail when manually entering input scaling value in local setup #13682
• OCPBUGS-30916, OCPBUGS-30917: PipelineRuns in Console show wrong status or load indefinitely #13672
• OCPBUGS-30869: TaskRun with same name in different project don’t show 2 entries when listing in all namespace #13668
• OCPBUGS-31107: Upload Jar form’s Clear button is not functioning #13688
• OCPBUGS-30759: Fix bugs in Console dynamic plugin SDK webpack code #13678
• OCPBUGS-30871: fix Configure link in AlertmanagerReceiversNotConfigur… #13669
• OCPBUGS-29963: i18n upload/download routine task - chore(i18n): update translations #13670
• OCPBUGS-30801: Switch to service to get the PLR and TR logs from the Tekton results summary API #13663
• OCPBUGS-30275: adjusting documentation links for 4.15 #13648
• OCPBUGS-30870: chore(i18n): update translations: Completed OCP-4.15/Master Branch/Sprint 245 #13641
• OCPBUGS-25831: Date&Time values are not showing as per browser default language #13467
• OCPBUGS-29080: make getGroupVersionKindForResource null safe #13582
• Full changelog

console-operator

• OCPBUGS-31520: oidc: synchronize the CM with a CA to trust the issuer, if configured #881
• OCPBUGS-33720: Add missing return statement to fix crash in healthcheck controller #903
• OCPBUGS-31499: Update RHDH QuickStarts and add CR examples #880
• OCPBUGS-31619: use InfrastructureTopology for clusters using external CP as the console deploys on the worker nodes #882
• OCPBUGS-29332: Remove Janus IDP and update RHDH quickstarts #863
• Full changelog

container-networking-plugins

• OCPBUGS-30045: [4.15] cherry-pick containernetworking/plugins#997 #155
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-32246: Remove enforcement of IPv6 LB as internal #277
• Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

• OCPBUGS-31599: add cmdline args to enable group snapshot webhooks #147
• Full changelog

docker-builder

• OCPBUGS-32845: bump go-jose to fix CVE-2024-28180 #396
• BUILD-854: Add adambkaplan as approver #381
• Full changelog

docker-registry

• OCPBUGS-31641: vendor: bump aws-sdk-go to support ca-west-1 #396
• Full changelog

etcd

• OCPBUGS-32768: Revert “OCPBUGS-31644: Rebase etcd 3.5.13 openshift 4.15” #264
• OCPBUGS-31644: Rebase etcd 3.5.13 openshift 4.15 #260
• OCPBUGS-28731: Rebase etcd 3.5.12 openshift 4.15 #243
• Full changelog

gcp-cloud-controller-manager

• OCPBUGS-30970: Update gcr-credential-provider.spec #60
• OCPBUGS-30970: Adds auth-provider-gcp .spec file and build script #59
• Full changelog

gcp-cluster-api-controllers

• OCPBUGS-30117: manifests: Add in CustomNoUpgrade #225
• OCPBUGS-30595: fix e2e tests on release branches #223
• Full changelog

haproxy-router

• OCPBUGS-28928: Upgrade Validation plugin for SHA1 certs #585
• OCPBUGS-32977: Count active services before setting weight to 1 #586
• OCPBUGS-32693: Reject routes with MD5 certs #584
• OCPBUGS-32435: Introduce ‘idle-close-on-response’ option for frontends #579
• OCPBUGS-31544: Properly handle rewrite-target annotation #569
• Full changelog

hyperkube, pod

• OCPBUGS-33711: Bump to Kubernetes v1.28.10 #1969
• OCPBUGS-33347: Provide SCC access via RBAC #1962
• OCPBUGS-29613: UPSTREAM: <carry>: bump structured-merge-diff #1893
• OCPBUGS-32299: Bump to k8s 1.28.9 #1946
• OCPBUGS-29922: UPSTREAM: <carry>: openshift-kube-apiserver: pod .spec.nodeName should not override project node selector in podNodeEnvironment admission plugin #1897
• OCPBUGS-31807: UPSTREAM: <carry>: allow type mutation for specific secrets #1939
• UPSTREAM: <carry>: OCPBUGS-31348: fix cpu manager cpuset check #1915
• OCPBUGS-31740: 4.15: UPSTREAM: 124048: Use the right feature gate when updating uncertain volumes #1935
• OCPBUGS-31503: Bump to 1.28.8 #1926
• Address CVE #11
• OCPBUGS-30963: Set up CEL IP/CIDR library from 4.14 onwards #1912
• OCPBUGS-29661: Bump to 1.28.7 #1891
• Full changelog

hypershift

• NO-JIRA: chore(deps): update konflux references (release-4.15) #4259
• OCPBUGS-35714: Generate default worker security group rules based on machineCIDR #4266
• NO-JIRA: chore(deps): update konflux references (release-4.15) #4252
• OCPBUGS-32404: Fix failure to create a second hostedcluster in the same namespace #3907
• NO-JIRA: chore(deps): update konflux references to ff44cf3 (release-4.15) #4246
• NO-JIRA: feat(olm): Set packageserver replicas to 2 for IBMCloudPlatform #4231
• chore(deps): update konflux references to 2be7c9c (release-4.15) #4224
• OCPBUGS-34580: Add TrustedBundles to OAS container #4211
• NO-JIRA: hack: make the e2e script generic #4199
• OCPBUGS-33627: Restrict image registry overrides to control plane components #4131
• OCPBUGS-34156: fix router on 4.14 y-stream upgrade #4077
• OCPBUGS-35002: [release-4.15] HOSTEDCP-1122: Backport etcd defrag controller #4162
• NO-JIRA: Update Konflux references to 1025001 (release-4.15) #4180
• NO-JIRA: chore(deps): update konflux references (release-4.15) #4167
• OCPBUGS-34997: add AWS STS URL to OIDC provider audiences #4157
• OCPBUGS-35074: Fix disconnected metadata inspection for nodepool #4175
• HOSTEDCP-1708: remove liveness and readiness probes that use the metrics #4128
• OCPBUGS-34423: Fixed audit-logs sigterm failing to terminate gracefully #4089
• OCPBUGS-33526: Disable DNS resolving for CNO #4148
• OCPBUGS-34904: remove weak cipher #4156
• OCPBUGS-34510: Reconcile KAS endpoints and endpoint slice #4097
• NO-JIRA: test/e2e: fix prometheus serviceaccount handling against 4.16+ #4151
• NO-JIRA: chore(deps): update rhtap references (release-4.15) #4120
• NO-JIRA: chore(deps): update rhtap references (release-4.15) #4072
• OCPBUGS-33510: Run haproxy to connect to kas from data plane if noproxy settings contain kas #4014
• NO-JIRA: chore(deps): update rhtap references to 7cd8020 (release-4.15) #4064
• NO-JIRA: Remove CLI inspection of release image #4056
• HOSTEDCP-1518: Preserve container resource requests and limits #4032
• NO-JIRA: Update RHTAP references (release-4.15) #4041
• OCPBUGS-33118: Recycler-pod image now points to the OCP Payload reference #3963
• OCPBUGS-32220: Fix disconnected metadata inspection #3881
• NO-JIRA: Update RHTAP references to 1f62eaf (release-4.15) #4030
• OCPBUGS-33117: Reconcile over ICSP/IDMS #3962
• NO-JIRA: Update RHTAP references to 2d39df1 (release-4.15) #4022
• HOSTEDCP-1480: Update TLS cert hash creation with sha512 #4017
• HOSTEDCP-1513: Support hypershift-operator scoping for hostedclusters #3998
• Revert “[release-4.15] OCPBUGS-32013: Set OPERATOR_IMAGE environment variable” #3939
• OCPBUGS-33207: Remove kube-scheduler readiness probe #3955
• NO-JIRA: chore(deps): update rhtap references to c6fdbf4 (release-4.15) #3989
• OCPBUGS-25858: Improve description for agent APIServerAddress CLI flag #3977
• OCPBUGS-33224: disable OCM pull secret controller when imageregistry config managementstate is Removed #3976
• NO-JIRA: chore(deps): update rhtap references (release-4.15) #3982
• OCPBUGS-31747: update desired image even when HCP doesn’t exist yet #3839
• NO-JIRA: chore(deps): update rhtap references to e9efe99 (release-4.15) #3974
• OCPBUGS-32229: disable autoscaler when no nodepool require it #3884
• NO-JIRA: chore(deps): update rhtap references (release-4.15) #3967
• HOSTEDCP-1552: Update RHTAP tekton files for 0.3 -> 0.4 migration #3957
• OCPBUGS-31826: use dnsPolicy: Default for konnectivity-agent in data plane #3845
• NO-JIRA: Update RHTAP references (release-4.15) #3935
• OCPBUGS-32715: Fix OLM intilization args #3923
• HOSTEDCP-1519: [release-4.15] feat(api): Add ingress-controller-load-balancer-scope annotation #3908
• NO-JIRA: chore(deps): update rhtap references (release-4.15) #3921
• OCPBUGS-32164: Fix ICSP and IDMS inclusion as registriesOverrides #3870
• NO-JIRA: chore(deps): update rhtap references (release-4.15) #3904
• OCPBUGS-30280: Switch to use service endpoint for Konnectivity #3692
• OCPBUGS-32191: Kas disable audit cherry pick release 4.15 #3875
• OCPBUGS-32114: Add new permission required in CAPA #3861
• NO-JIRA: Update RHTAP references (release-4.15) #3887
• NO-JIRA: [release-4.15] [e2e test framework] Add a flag to add an annotation to HostedCluster #3893
• HOSTEDCP-1524: [release-4.15] Support additional node selectors for request serving nodes #3883
• NO-JIRA: chore(deps): update rhtap references (release-4.15) #3873
• NO-JIRA: chore(deps): update rhtap references (release-4.15) #3868
• OCPBUGS-32013: Set OPERATOR_IMAGE environment variable #3853
• NO-JIRA: chore(deps): update rhtap references (release-4.15) #3857
• NO-JIRA: Update RHTAP references (release-4.15) #3835
• OCPBUGS-31766: include hostnetwork SCC CPO role for 4.13 and earlier #3840
• HOSTEDCP-1438: [release-4.15] Preserve container resources for more hosted control plane components #3828
• OCPBUGS-31324: Add missing PodSecurityViolation alert #3798
• NO-JIRA: Increase stability in autoscaled environments #3777
• OCPBUGS-31471: Reduce log file size for hypershift apiservers #3816
• OCPBUGS-31604: disable http2 for ignition server and proxy #3825
• OCPBUGS-31426: copy issuerCertificateAuthority configmap into HC openshift-config #3808
• OCPBUGS-31265: inject built-in MCP selector for KubeletConfigs and ContainerRuntimeConfigs #3802
• NO-JIRA: Update RHTAP references (release-4.15) #3812
• NO-JIRA: Remove unused ref to hostnetwork in cpo role #3796
• OCPBUGS-31064: ibmcloud KMS: remove breaking image check and enable KMS v2 support #3774
• OCPBUGS-31377: Manually cherry pick #3782 to 4.15 #3803
• OCPBUGS-31326: fix(ignition): Fix priority class override #3800
• OCPBUGS-30804: honor HC image configuration #3730
• ”[release-4.15] OCPBUGS-30164: Ensure cloud resources are destroyed for all platforms when –destroy-cloud-resources is used” #3677
• OCPBUGS-31116: external OIDC: fix certificateAuthority field in structured auth config #3783
• OCPBUGS-30862: Manual cherry pick 3685&3727 to release 4.15 #3740
• NO-JIRA: chore(deps): update rhtap references (release-4.15) #3791
• NO-JIRA: Update RHTAP references (release-4.15) #3785
• OCPBUGS-29881: feat(ho): Add flag for dedicated request serving isolation #3633
• OCPBUGS-30742: [4.15] HCP deletion can get stuck if CPO is unable to delete the default worker security group #3726
• OCPBUGS-30650: Set KAS config pod security Enforce to privileged #3719
• NO-JIRA: Bump CPO API budget to 4000 in EnsureApiBudget #3741
• OCPBUGS-30651: Remove EnsurePSANotPrivileged #3744
• NO-JIRA: Update RHTAP references (release-4.15) #3754
• HOSTEDCP-1488: Use regionalized STS endpoints in AWS #3747
• NO-JIRA: Update RHTAP references (release-4.15) #3738
• OCPBUGS-30581: [release-4.15] OCPBUGS-30220: Align PSA labels on guest cluster namespaces with standalone OCP #3684
• OCPBUGS-30572: [release-4.15] Update OLM Default Catalog Sources to 4.15 #3696
• NO-JIRA: chore(deps): update rhtap references (release-4.15) #3705
• OCPBUGS-30189: set Konnectivity cipher suites #3673
• Full changelog

ibm-vpc-block-csi-driver-operator

• OCPBUGS-33641: [ibm-vpc] Scheduling issue on IBM Cloud Bare Metal nodes #116
• Full changelog

insights-operator

• OCPBUGS-35865: Collect aggregated Prometheus Alertmanager instances (#950) #950
• OCPBUGS-32702: anonymization - externalIP can be nil (#931) #931
• OCPBUGS-31946: bump golang.org/x/net version (#925) #925
• Full changelog

ironic

• Bug OCPBUGS-33736: Disable installation of .pyc files through pip #511
• OCPBUGS-32365: [4.15] Remove unused prometheus exporter #485
• OCPBUGS-32351: [4.15] Update to include fixes for ironic servicing feature #479
• OCPBUGS-32389: Use unix sockets by default for reverse proxy communication #474
• OCPBUGS-31686, OCPBUGS-31802, OCPBUGS-31830: [4.15] install ironic projects from source #470
• OCPBUGS-31802: [4.15] Add requirements placeholders for cachito #467
• Full changelog

ironic-agent

• OCPBUGS-33133: update ironic-lib with latest fixes #131
• OCPBUGS-32173: [4.15] Fix name in setup.cfg #123
• OCPBUGS-31811: [4.15] Add makefile #126
• OCPBUGS-31811: [4.15] Install ironic-python-agent from source #125
• OCPBUGS-31811: [4.15] Add requirements placeholders for cachito #121
• Full changelog

k8s-prometheus-adapter

• OCPBUGS-32214, OCPBUGS-32215: upgrade deps #102
• Full changelog

keepalived-ipfailover

• OCPBUGS-30413: update unit tests in egress/dns-proxy #168
• Full changelog

kubevirt-cloud-controller-manager

• OCPBUGS-31801: Bump opentelemetry #39
• OCPBUGS-24118: Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART #28
• OCPBUGS-22061: Bump golang.org/x/net to v0.18.0 #34
• Full changelog

kubevirt-csi-driver

• OCPBUGS-29793: [release-4.15] Address https://github.com/advisories/GHSA-fg9q-5cw2-p6r9: Restrict access to infrastructure PVCs by requiring matching infraClusterLabels on tenant PVCs #33
• Full changelog

machine-api-operator

• OCPBUGS-31949: Update x/net to v0.24.0 #1231
• OCPBUGS-30215: Azure MAO CredentialsRequest Contains Unnecessary virtualMachines/extensions Permissions #1222
• Full changelog

machine-config-operator

• OCPBUGS-32092: Decrease logs of haproxy #4313
• OCPBUGS-35010: set required-scc for openshift workloads #4393
• OCPBUGS-31461: Remove weights from ingress check script #4290
• OCPBUGS-33847: If multiple hostnames are returned, use the first one for the Node name #4373
• OCPBUGS-20152: Don’t error if the certs.d dir doesn’t exist yet #4358
• OCPBUGS-32922: [release-4.15] add cluster fleet evaluation support to mco #4334
• OCPBUGS-28926: [4.15] crio: update pids limit to be -1 #4163
• OCPBUGS-28545: Delete state files on reboot only #4311
• OCPBUGS-31820: Remove the condition for checking the multiple ovs-if-br-ex profiles #4309
• OCPBUGS-27029: Log network service output to console #4113
• OCPBUGS-31646: fix: resources were in the wrong indentation level #4301
• : OCPBUGS-31576: kubelet: restorecon necessary files on kubelet’s prestart #4297
• OCPBUGS-30884: Prevent OVS-configuration to run before kdump #4259
• OCPBUGS-31383: make verify should use MCO’s kube version #4282
• OCPBUGS-30971: add preferredduringscheduling annotation to kube-rbac-proxy-crio #4264
• OCPBUGS-29731: Delete image openshift/openshift-proxy-pull-test #4199
• OCPBUGS-30093: Mount /run/nodeip-configuration into coredns containers #4229
• OCPBUGS-30761: add static pods for rbacproxy #4252
• Full changelog

monitoring-plugin

• OU-417: throw an error when a custom datasource is not found #118
• OU-415: Add datasource parameter to handle metrics from custom datasources #116
• OCPBUGS-32097: make createdBy mandatory and auto fill with the current user #115
• OCPBUGS-31310: upgrade sanitize-html vulnerable dependency #107
• Full changelog

multus-cni

• OCPBUGS-35047: Update owners file #240
• OCPBUGS-35258: Thick plugin should not wait for API readiness on CNI DEL #242
• OCPBUGS-33477: Fix CNI cache update function to prevent nil access #234
• OCPBUGS-30237: Reload bootstrap kubeconfig if cert mgr failed to load valid certs #223
• Full changelog

multus-whereabouts-ipam-cni

• OCPBUGS-35081: [release-4.15] Use IP to identify orphaned allocation to be deleted #288
• Full changelog

network-tools

• OCPBUGS-31764: replace wireshark with wireshark-cli #118
• Full changelog

oauth-apiserver

• OCPBUGS-33210: bump lib-go to fix SAs acting as OAuth2 clients #114
• OCPBUGS-31951: bump x/net to 0.24.0 #109
• Full changelog

oauth-server

• OCPBUGS-33210: bump lib-go to fix SAs acting as OAuth2 clients #148
• Full changelog

oc-mirror

• OCPBUGS-34521: Fix DiskToMirror without internet connection without rebuild catalog (#866) #866
• OCPBUGS-33575: Change default behavior to not rebuild catalogs for V1 (#849) #849
• OCPBUGS-31466: Fix for oc-mirror new defaultChannel override (#846) #846
• Bump version to include v5.11.0 of go-git (#819) #819
• Full changelog

olm-rukpak

• : OCPBUGS-30264: Bump Helm & K8s dependencies #79
• Full changelog

openshift-apiserver

• OCPBUGS-28928: Bump openshift/api to get updated docs for UnservableInFutureVersions #436
• OCPBUGS-31469: vendor upgrade runtime-utils #422
• Full changelog

openshift-controller-manager

• OCPBUGS-32807, OCPBUGS-33371: Rollback state of managed image pull secrets after downgrade #303
• OCPBUGS-31490: Bumps opentelemetry dependencies #294
• OCPBUGS-24086: Updating ose-openshift-controller-manager-container image to be consistent with ART #281
• Full changelog

openstack-cinder-csi-driver-operator

• OCPBUGS-34927: Correct out-of-bounds check #172
• OCPBUGS-32744: Relax requirement to enable topology #165
• Full changelog

openstack-cluster-api-controllers

• OCPBUGS-25859: CARRY: Add Snyk security scan config #299
• OCPBUGS-26208: openshift/manifests: CloudCredential capability for CredentialsRequest #297
• Full changelog

openstack-machine-api-provider

• OCPBUGS-30857: Ensure portSecurity is correctly set in the Port #108
• OCPBUGS-28326: Add snyk configuration file #105
• Full changelog

operator-lifecycle-manager, operator-registry

• OCPBUGS-35305: [release-4.15] catalog-operator: delete catalog pods stuck in Terminating state due to unreachable node #779
• OCPBUGS-35720: Warn and allow CRD upgrade if validation fails but webhook is specified #789
• OCPBUGS-31939, OCPBUGS-31940: UPSTREAM: <carry>: update golang.org/x/net for CVE-2023-45288 #747
• OCPBUGS-35229: Unblock CI #768
• OCPBUGS-32860: UPSTREAM: <carry>: bump go-jose #740
• OCPBUGS-32311: [release-4.15]: Update if AlreadyExists #736
• OCPBUGS-31842: copy-content: delete destination dirs before copying (#3197) #728
• OCPBUGS-31651: [release-4.15] Correctly detect catalog image ID for extractContent catalog pods #726
• OCPBUGS-30219: bump otelgrpc to 0.46.0 #712
• Full changelog

operator-marketplace

• OCPBUGS-32060: update golang.org/x/net for CVE-2023-45288 #564
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-33623, OCPBUGS-33624: Improve CI signal by removing/suppressing signals #2168
• OCPBUGS-31814: ipv6+all protocols conntrack flush #2131
• OCPBUGS-34404: [release-4.15] dns: fix deadlock in case of error #2182
• OCPBUGS-33294: Reuse node-subnet from cache if exists #2163
• OCPBUGS-33960: Egressip garp fix 4.15 #2175
• OCPBUGS-30899: use a forked version of j-keck/arping that fixes a threading issue #2105
• OCPBUGS-32426: [release-4.15] Improves service iptables efficiency on start up #2156
• [Release 4.15] OCPBUGS-32986: Bump OVS #2147
• OCPBUGS-27852: [release-4.15] Full implementation of KEP-1669 ProxyTerminatingEndpoints + ETP=local fix #2025
• OCPBUGS-29316: [release-4.15] Ignore missing live migratable pod annotation on AddNode #2065
• OCPBUGS-32202: [release-4.15] Bump OVN to 23.09.0-139 #2121
• OCPBUGS-33020: drop-forwarding: Add ClusterSubnets to allowed forwarding CIDRs #2141
• OCPBUGS-32154: Custom v4 and v6 transit switch subnets while creating kind cluster #2094
• OCPBUGS-31081: Periodically check the ovnkube-node certificate is not expired #2099
• OCPBUGS-31033: Remove OVN topology version reporting/detection #2098
• OCPBUGS-31500, OCPBUGS-31501: EIP multi NIC IPv6 support and default route with next hop #2103
• Full changelog

powervs-block-csi-driver

• OCPBUGS-33622: Fix CVE2023-45288 by bumping x/net to v0.24.0 -4.15 #80
• Full changelog

service-ca-operator

• OCPBUGS-34797: set required-scc for openshift workloads #243
• Full changelog

telemeter

• OCPBUGS-34831: fix issuer check during JWT authentication for 4.15 #538
• : OCPBUGS-35076: Release Fix CVE go-jose #542
• OCPBUGS-32890: CVE-2024-28180 bump go-jose to v3.0.3 #531
• Full changelog

tests

• OCPBUGS-28928: Add test for UpgradeValidation contention #28820
• OCPBUGS-33368: [release-4.15] monitor test service-type-load-balancer-availability setup fails frequently in 4.14 & 4.15 PowerVS CI jobs #28821
• #28776 FIX [release-4.15] OCPBUGS-33368: monitor test fix to wait before connecting to a non-existent dns on PowerVS and IBMCloud platforms #28791
• OCPBUGS-26520: Kuryr: Ignore Upgradeable=False on operators tests #28512
• OCPBUGS-33347: Provide SCC access via RBAC #28780
• OCPBUGS-33541: Adjust the method of get the apiServer (release-4.15) #28762
• OCPBUGS-33473: [release-4.15] MULTIARCH-4352: Censor private key from pod dump logs #28666
• : OCPBUGS-32554: Also rely on oomkilled exit code 137 in build test #28724
• OCPBUGS-31726: Use centos7 tag instead of latest for cmd images tests #28688
• OCPBUGS-30892: fix panic on non-standard node-role labels #28656
• OCPNODE-2101: add kube-rbac-proxy-crio toleration change #28637
• Full changelog

vsphere-cluster-api-controllers

• OCPBUGS-30117: manifests: Add in CustomNoUpgrade #38
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• OCPBUGS-33604: FailedPrecondition volume does not appear staged #118
• Full changelog

vsphere-problem-detector

• OCPBUGS-35732: Fix missing failure-domains #161
• Full changelog

---

View changelog in Markdown or change previous release: 4.15.194.15.184.15.174.15.164.15.154.15.144.15.134.15.124.15.114.15.104.15.94.15.84.15.74.15.64.15.54.15.44.15.34.15.24.15.14.15.04.15.0-rc.84.15.0-rc.74.15.0-rc.54.15.0-rc.44.15.0-rc.34.15.0-rc.24.15.0-rc.14.15.0-rc.04.14.424.14.414.14.404.14.394.14.384.14.374.14.364.14.354.14.344.14.334.14.324.14.314.14.304.14.294.14.284.14.274.14.264.14.254.14.244.14.234.14.224.14.214.14.204.14.194.14.184.14.174.14.164.14.154.14.144.14.134.14.124.14.114.14.104.14.94.14.84.14.74.14.64.14.54.14.44.14.34.14.24.14.14.14.04.14.0-rc.74.14.0-rc.64.14.0-rc.54.14.0-rc.44.14.0-rc.34.14.0-rc.24.14.0-rc.14.14.0-rc.04.13.534.13.524.13.514.13.504.13.494.13.484.13.474.13.464.13.454.13.444.13.434.13.424.13.414.13.404.13.394.13.384.13.374.13.364.13.354.13.344.13.334.13.324.13.314.13.304.13.294.13.284.13.274.13.264.13.254.13.244.13.234.13.224.13.214.13.194.13.184.13.174.13.164.13.154.13.144.13.134.13.124.13.114.13.104.13.94.13.84.13.74.13.64.13.54.13.44.13.34.13.24.13.14.13.04.13.0-rc.84.13.0-rc.74.13.0-rc.64.13.0-rc.54.13.0-rc.44.13.0-rc.34.13.0-rc.24.13.0-rc.04.12.704.12.694.12.684.12.674.12.664.12.654.12.644.12.634.12.624.12.614.12.604.12.594.12.584.12.574.12.564.12.554.12.544.12.534.12.524.12.514.12.504.12.494.12.484.12.474.12.464.12.454.12.444.12.434.12.424.12.414.12.404.12.394.12.384.12.374.12.364.12.354.12.344.12.334.12.324.12.314.12.304.12.294.12.284.12.274.12.264.12.254.12.244.12.234.12.224.12.214.12.204.12.194.12.184.12.174.12.164.12.154.12.144.12.134.12.124.12.114.12.104.12.94.12.84.12.74.12.64.12.54.12.44.12.34.12.24.12.14.12.04.12.0-rc.84.12.0-rc.74.12.0-rc.64.12.0-rc.54.12.0-rc.44.12.0-rc.34.12.0-rc.24.12.0-rc.14.12.0-rc.04.11.594.11.584.11.574.11.564.11.554.11.544.11.534.11.524.11.514.11.504.11.494.11.484.11.474.11.464.11.454.11.444.11.434.11.424.11.414.11.404.11.394.11.384.11.374.11.364.11.354.11.344.11.334.11.324.11.314.11.304.11.294.11.284.11.274.11.264.11.254.11.244.11.234.11.224.11.214.11.204.11.194.11.184.11.174.11.164.11.154.11.144.11.134.11.124.11.114.11.104.11.94.11.84.11.74.11.64.11.54.11.44.11.34.11.24.11.14.11.04.11.0-rc.74.11.0-rc.64.11.0-rc.54.11.0-rc.44.11.0-rc.34.11.0-rc.24.11.0-rc.14.11.0-rc.04.11.0-fc.34.11.0-fc.24.11.0-fc.0───4.19.0-0.nightly-2024-12-03-1950444.19.0-0.nightly-2024-12-03-1155564.19.0-0.nightly-2024-12-03-0437014.19.0-0.nightly-2024-12-02-2101064.19.0-0.nightly-2024-12-02-1248524.19.0-0.nightly-2024-12-02-0457054.19.0-0.nightly-2024-12-01-2148574.19.0-0.nightly-2024-12-01-1442294.19.0-0.nightly-2024-11-30-1821154.19.0-0.nightly-2024-11-30-1139224.19.0-0.nightly-2024-11-30-0016334.19.0-0.nightly-2024-11-26-1103084.19.0-0.nightly-2024-11-23-0211574.19.0-0.nightly-2024-11-20-014652───4.19.0-0.ci-2024-12-04-0001464.19.0-0.ci-2024-12-03-1801464.19.0-0.ci-2024-12-03-1201464.19.0-0.ci-2024-12-03-0601464.19.0-0.ci-2024-12-03-0001364.19.0-0.ci-2024-12-02-1801364.19.0-0.ci-2024-12-02-1201364.19.0-0.ci-2024-12-02-0601364.19.0-0.ci-2024-12-02-0001364.19.0-0.ci-2024-12-01-180136───4.18.0-0.nightly-2024-12-03-1746394.18.0-0.nightly-2024-12-03-1143554.18.0-0.nightly-2024-12-03-0450064.18.0-0.nightly-2024-12-02-2111054.18.0-0.nightly-2024-12-02-1238324.18.0-0.nightly-2024-12-02-0343544.18.0-0.nightly-2024-11-30-1417164.18.0-0.nightly-2024-11-29-2037484.18.0-0.nightly-2024-11-29-1034024.18.0-0.nightly-2024-11-27-1624074.18.0-0.nightly-2024-11-27-0859274.18.0-0.nightly-2024-11-27-0127164.18.0-0.nightly-2024-11-26-0756484.18.0-0.nightly-2024-11-22-2310494.18.0-0.nightly-2024-11-21-131835───4.18.0-0.ci-2024-12-03-2015064.18.0-0.ci-2024-12-03-1415064.18.0-0.ci-2024-12-03-0815064.18.0-0.ci-2024-12-03-0215064.18.0-0.ci-2024-12-02-2015064.18.0-0.ci-2024-12-02-1415064.18.0-0.ci-2024-12-02-0815054.18.0-0.ci-2024-12-02-0215054.18.0-0.ci-2024-11-29-2059054.18.0-0.ci-2024-11-29-1459054.18.0-0.ci-2024-11-27-141005───4.17.0-0.nightly-2024-12-03-1833574.17.0-0.nightly-2024-12-03-1406504.17.0-0.nightly-2024-12-03-0825234.17.0-0.nightly-2024-12-02-2235324.17.0-0.nightly-2024-12-02-1750164.17.0-0.nightly-2024-12-02-1035244.17.0-0.nightly-2024-12-02-0251264.17.0-0.nightly-2024-12-01-1349274.17.0-0.nightly-2024-11-30-1420344.17.0-0.nightly-2024-11-29-1224044.17.0-0.nightly-2024-11-28-2011024.17.0-0.nightly-2024-11-28-1323414.17.0-0.nightly-2024-11-28-0736314.17.0-0.nightly-2024-11-28-0026464.17.0-0.nightly-2024-11-27-1802324.17.0-0.nightly-2024-11-27-0920154.17.0-0.nightly-2024-11-27-0329454.17.0-0.nightly-2024-11-26-1919584.17.0-0.nightly-2024-11-26-1144564.17.0-0.nightly-2024-11-25-2054014.17.0-0.nightly-2024-11-25-1420204.17.0-0.nightly-2024-11-24-0154114.17.0-0.nightly-2024-11-23-1924384.17.0-0.nightly-2024-11-23-1153134.17.0-0.nightly-2024-11-23-0446444.17.0-0.nightly-2024-11-22-2215204.17.0-0.nightly-2024-11-22-1300354.17.0-0.nightly-2024-11-22-0451574.17.0-0.nightly-2024-11-21-1531584.17.0-0.nightly-2024-11-21-0523464.17.0-0.nightly-2024-11-20-0617254.17.0-0.nightly-2024-11-20-014313───4.17.0-0.ci-2024-12-03-2021544.17.0-0.ci-2024-12-03-1421544.17.0-0.ci-2024-12-03-0821544.17.0-0.ci-2024-12-03-0221544.17.0-0.ci-2024-12-02-1724124.17.0-0.ci-2024-12-02-1124124.17.0-0.ci-2024-12-02-0524124.17.0-0.ci-2024-12-01-1305154.17.0-0.ci-2024-11-30-142341───4.16.0-0.nightly-2024-12-03-1450284.16.0-0.nightly-2024-12-03-0144314.16.0-0.nightly-2024-12-02-1835364.16.0-0.nightly-2024-12-02-1114164.16.0-0.nightly-2024-12-02-0258204.16.0-0.nightly-2024-11-29-1940114.16.0-0.nightly-2024-11-29-1441544.16.0-0.nightly-2024-11-28-2134254.16.0-0.nightly-2024-11-28-1153354.16.0-0.nightly-2024-11-27-1651504.16.0-0.nightly-2024-11-27-1205574.16.0-0.nightly-2024-11-26-2129134.16.0-0.nightly-2024-11-26-0409344.16.0-0.nightly-2024-11-25-2305244.16.0-0.nightly-2024-11-23-1456194.16.0-0.nightly-2024-11-23-0425104.16.0-0.nightly-2024-11-22-0727584.16.0-0.nightly-2024-11-21-1634284.16.0-0.nightly-2024-11-20-023013───4.16.0-0.ci-2024-12-03-1611144.16.0-0.ci-2024-12-03-1011144.16.0-0.ci-2024-12-02-2303004.16.0-0.ci-2024-12-02-0959384.16.0-0.ci-2024-11-29-215039───4.15.0-0.nightly-2024-12-03-2219154.15.0-0.nightly-2024-12-03-1330174.15.0-0.nightly-2024-12-03-0314144.15.0-0.nightly-2024-12-02-2019264.15.0-0.nightly-2024-12-02-1314454.15.0-0.nightly-2024-11-29-1920434.15.0-0.nightly-2024-11-28-0422374.15.0-0.nightly-2024-11-27-131420───4.15.0-0.ci-2024-12-03-2021014.15.0-0.ci-2024-12-03-1227314.15.0-0.ci-2024-12-03-0547014.15.0-0.ci-2024-12-02-1434034.15.0-0.ci-2024-12-02-0833564.15.0-0.ci-2024-11-30-0001454.15.0-0.ci-2024-11-29-1801454.15.0-0.ci-2024-11-28-101034───4.14.0-0.nightly-2024-12-03-2145544.14.0-0.nightly-2024-12-03-1327534.14.0-0.nightly-2024-12-02-2050114.14.0-0.nightly-2024-12-02-1313024.14.0-0.nightly-2024-11-29-0819384.14.0-0.nightly-2024-11-27-0735074.14.0-0.nightly-2024-11-27-0155434.14.0-0.nightly-2024-11-26-165121───4.14.0-0.ci-2024-12-03-2158004.14.0-0.ci-2024-12-03-1334144.14.0-0.ci-2024-12-03-0704394.14.0-0.ci-2024-12-02-1731234.14.0-0.ci-2024-11-29-1706004.14.0-0.ci-2024-11-29-0714314.14.0-0.ci-2024-11-28-142545───4.13.0-0.nightly-2024-11-30-0419004.13.0-0.nightly-2024-11-23-1013054.13.0-0.nightly-2024-11-20-0919214.13.0-0.nightly-2024-11-19-0924194.13.0-0.nightly-2024-11-18-041323───4.13.0-0.ci-2024-12-03-0730394.13.0-0.ci-2024-12-02-1947584.13.0-0.ci-2024-12-02-0659564.13.0-0.ci-2024-11-30-0404204.13.0-0.ci-2024-11-28-1135494.13.0-0.ci-2024-11-27-2323474.13.0-0.ci-2024-11-27-1108454.13.0-0.ci-2024-11-26-2223204.13.0-0.ci-2024-11-26-132716───4.12.0-0.nightly-2024-12-02-1832084.12.0-0.nightly-2024-12-02-0443584.12.0-0.nightly-2024-11-28-0022544.12.0-0.nightly-2024-11-27-1038174.12.0-0.nightly-2024-11-27-0039294.12.0-0.nightly-2024-11-25-1001394.12.0-0.nightly-2024-11-20-1247564.12.0-0.nightly-2024-11-18-021414───4.12.0-0.ci-2024-12-03-0259324.12.0-0.ci-2024-12-02-1735344.12.0-0.ci-2024-12-02-0430344.12.0-0.ci-2024-11-28-1234364.12.0-0.ci-2024-11-28-0232474.12.0-0.ci-2024-11-27-2032474.12.0-0.ci-2024-11-27-1432474.12.0-0.ci-2024-11-27-0039214.12.0-0.ci-2024-11-26-155836───4.11.0-0.nightly-2024-07-06-0140574.11.0-0.nightly-2024-07-01-0855474.11.0-0.nightly-2024-04-20-1326214.11.0-0.nightly-2024-04-15-1237064.11.0-0.nightly-2024-04-15-0346274.11.0-0.nightly-2024-03-18-1654324.11.0-0.nightly-2024-03-12-2229304.11.0-0.nightly-2024-02-01-0446274.11.0-0.nightly-2024-01-19-1107024.11.0-0.nightly-2024-01-15-0229494.11.0-0.nightly-2024-01-10-203533───4.11.0-0.ci-2024-11-14-2201374.11.0-0.ci-2024-11-14-1432224.11.0-0.ci-2024-09-18-0735584.11.0-0.ci-2024-09-17-2036254.11.0-0.ci-2024-07-30-2032534.11.0-0.ci-2024-07-23-1708064.11.0-0.ci-2024-07-01-0910384.11.0-0.ci-2024-06-07-1944004.11.0-0.ci-2024-06-05-1627184.11.0-0.ci-2024-06-01-042714───4.18.0-ec.44.18.0-ec.34.18.0-ec.24.18.0-ec.14.18.0-ec.04.17.0-ec.1

Source code for this page located on github