Back to index

Download installer and client with:

oc adm release extract --tools quay.io/openshift/okd:4.15.0-0.okd-2024-02-10-035534

Team Approvals:

No tests for this release

Upgrades from:

• 4.15.0-0.okd-2024-02-09-155533 (changes) - Success
• 4.15.0-0.okd-2024-01-27-070424 - Success Success
• 4.14.0-0.okd-2024-01-26-175629 (changes) - Failed Success
• 4.14.0-0.okd-2024-01-06-084517 (changes) - Success Success
• 4.14.0-0.okd-2023-12-01-225814 (changes) - Failed Failed
• 4.14.0-0.okd-2023-11-14-101924 (changes) - Success Success
• 4.14.0-0.okd-2023-11-12-042703 (changes) - Success Success

Upgrades to:

• 4.15.0-0.okd-2024-03-10-010116 (changes) - Success
• 4.15.0-0.okd-2024-02-23-163410 (changes) - F S F F F S

---

Loading changelog, this may take a while ...

Changes from 4.15.0-0.okd-2024-01-27-070424

Created: 2024-02-11 07:15:48 +0000 UTC

Image Digest: sha256:e13d5f24fc0347b51f1144e7f5bb03b48a99b43d3de0a260af171bf7e39a30f7

Release 4.15.0-0.okd-2024-02-10-035534 was created from registry.ci.openshift.org/origin/release:4.15.0-0.okd-2024-02-10-035534

Components

• Kubernetes 1.28.6
• Fedora CoreOS upgraded from 39.20240104.3 to 39.20240112.3

Rebuilt images without code change

• aws-cloud-controller-manager git ba252ab1 sha256:9c4fba3fd355f30240371f44a83f2ef76f07937f9fd4cbec9081c71bc6f642e5
• baremetal-runtimecfg git 84581c73 sha256:532dd534a5020c274d3733a55273bc4b5ba36a49a65fc2a32b2661443706af94
• cloud-network-config-controller git 81ab2a17 sha256:2aa502d6f082bc89cafdfddf4e92ff6c6e98af06f65291044f10910fc77be90f
• cluster-etcd-operator git 85e53769 sha256:1293e284063d8687a5219876bfa69b0844a9153143a832deae77df35e9d24cd2
• container-networking-plugins git c6cfbfe3 sha256:a00b9f5d8a2700c0923fd527d6f41d5c9dc2aec08995b047e6369a601a7e85cd
• multus-admission-controller git 23a7cfe4 sha256:ee6c272fb093cff52fd906d32b7c53ffcfad94e646387f49ea9d0ec6ac1a0587
• multus-cni git f9406f86 sha256:adf13225f7a4e1cafb2d98bb08853518f05a37ee129da68a993d0b6b65424e78
• multus-networkpolicy git 6212406b sha256:6d6fd8cb7f91959cb8cb0e0eeb40f6b4b1dde7e05f86169c7848438f7371a0d6
• multus-whereabouts-ipam-cni git 2edc45fe sha256:a0026afdc40d1b962a220bca2e7f0c2b7a7a44396d866beb8aa913337c434a07
• vsphere-problem-detector git de02a75d sha256:6645df7eb2e46641dcef34f93e429a8fd74eb4452912c82b1268afb3ff896d83

agent-installer-api-server

• MGMT-16494: Move ip hint file creation to ignition in order to change it in IBI process (#5926) #5926
• OCPBUGS-24428: Redact passwords logged in installConfigOverrides Ensure that any passwords included in installConfigOverrides are redacted in logs. (#5905) #5905
• Full changelog

azure-machine-controllers

• OCPBUGS-29007: Don’t create availability set when using spot instances #95
• Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts, ovirt-installer

• OCPBUGS-29219: GCP: Skip validation of public and private zones for terraform vars #7994
• OCPBUGS-29201: Copy GCP manifests within MCO bootstrap to the correct location #7993
• OCPBUGS-28822: aws-edge-zones preventing err before discovering #7973
• OCPBUGS-29117: IBMCloud: Handle disk delete errors #7984
• OCPBUGS-26036: ic: aws: add iam:TagInstanceProfile permission requirement #7866
• OCPBUGS-28779: update tested Azure Arm64 instance type on 4.15 #7971
• OCPBUGS-28546: [release-4.15] Bump containerd for vulnerability fix #7957
• OCPBUGS-27346: Warn that FeatureSet is not supported #7922
• OCPBUGS-27417: baremetal: gather all recently refactored services #7928
• OCPBUGS-27380: set the –cluster-profile flag for openshift/api rendering #7955
• OCPBUGS-27894: duplicate failure domains in CMPS #7951
• OCPBUGS-27329: remove retired serial NCv2 from azure tested instance type list on x86 #7921
• Full changelog

baremetal-machine-controllers

• OCPBUGS-28838: Extend metal3remediation aggregation role #210
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-28204: Add RHEL9 and RHEL8 based oc as new targets in command extraction #1672
• Full changelog

cloud-credential-operator

• OCPBUGS-29113: ccoctl - use proxy when validating CloudFront URL #674
• OCPBUGS-27910: Resolve all outstanding snyk vulnerabilities #649
• OCPBUGS-27901: Use cached clients to avoid client side throttling #660
• Full changelog

cluster-authentication-operator

• NO-JIRA: _output - remove dir #652
• OCPBUGS-27225: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #647
• Full changelog

cluster-baremetal-operator

• OCPBUGS-29153: manifests/0000_31_cluster-baremetal-operator_06_deployment: Enable leader election #402
• Full changelog

cluster-capi-operator

• OCPBUGS-28754: Start operator controllers only on supported platforms, add unsupported controller #158
• Full changelog

cluster-config-api

• OCPBUGS-29074: Move network.config conditions to GA #1756
• NP-905: [release-4.15] Promote Live Migration to GA #1749
• OCPBUGS-28902: Allow modified IPv6 address as CPIC name #1750
• OCPBUGS-27380: add separate authentication config manifest for hypershift #1743
• OCPBUGS-27380: respect the cluster profile in rendering #1735
• Full changelog

cluster-image-registry-operator

• OCPBUGS-28830: pkg/storage/s3: enable bucket key on encryption settings #994
• Full changelog

cluster-ingress-operator

• CORS-3169: Add Ingress LB IPs to Infra CR and set DNS unmanaged when BYO DNS is enabled #1022
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-27491: webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator #1628
• Full changelog

cluster-machine-approver

• OCPBUGS-27758: Increase concurrent reconciles to 10 #226
• Full changelog

cluster-monitoring-operator

• OCPBUGS-28703: rollout metrics-server on cert rotations #2249
• Full changelog

cluster-network-operator

• OCPBUGS-29082, OCPBUGS-29150: Remove libreswan rpm existence checks #2255
• OCPBUGS-28778: add env var in whereabouts-reconciler daemonset #2242
• OCPBUGS-27421: Only reconcile on Node updates with Label changes #2212
• OCPBUGS-27199: Remove egressip write permissions from ovn-kubernetes-node #2203
• OCPBUGS-27174: network node identity: tolarate all taints #2202
• NP-905, OCPBUGS-28902: Bump openshift API #2247
• OCPBUGS-28904: [release-4.15] Restrict live migration to standalone managed clusters #2243
• NO-JIRA: add kyrtapz as reviewer and approver for release 4.15 #2227
• OCPBUGS-28214: Not update migration conditions when any MCP is updating #2223
• OCPBUGS-27777: Deploy CNO IPsec MC even if user already have one #2215
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-27948: Tuned rendering and MCP detection improvements (#928) #928
• Full changelog

cluster-openshift-controller-manager-operator

• OCPBUGS-28946: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #327
• Full changelog

cluster-storage-operator

• OCPBUGS-28817: Allow vSphere CSI driver to be disabled #446
• Full changelog

console

• OCPBUGS-28917: Optimize federation of shared PF5 code for dynamic plugins #13566
• OCPBUGS-29022: fix i18n for Remove volume modal #13575
• OCPBUGS-28940: AUTH-440: fix usersettings identifier creation #13571
• OCPBUGS-27012: update check for the ‘provider’ label on the PackageMa… #13501
• AUTH-440: OIDC: refresh sessions with a refresh token if present #13563
• OCPBUGS-28591: Fixed bug with user feedback where inform the direction of RedHat was not showing up #13551
• CONSOLE-3829, OCPBUGS-27235: backend: use the k8s SelfSubjectReview API to get info about a user #13514
• OCPBUGS-27896: Add flags checks to hide Pipeline static plugin List and details pages #13536
• AUTH-440: expand options for the OIDC authenticator #13509
• OCPBUGS-27909: fix bug where Expand PVC modal assumes pvc.spec.resou… #13542
• Full changelog

console-operator

• always sync oidcClients in authn status if the field is present #859
• OCPBUGS-29010: oauthclients: fix oauthclients degraded condition that never gets removed #856
• CONSOLE-3912: OAuthClients: only add oidcClients to authentication status if the field exists #854
• CONSOLE-3912: OIDC: setup the volume name properly when custom CA is configured #853
• OCPBUGS-22681: Bump documentationBaseURL to 4.15 #807
• CONSOLE-3912: Add secrets for session encryption/authentication in OIDC #852
• pick of OCPBUGS-27221: make it impossible double set conditions in a single loop #851
• Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

• OCPBUGS-28944: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #166
• Full changelog

csi-driver-shared-resource-operator

• OCPBUGS-28956: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #102
• Full changelog

docker-builder

• OCPBUGS-28948: Replace ‘coreydaley’ with ‘sayan-biswas’ #378
• Full changelog

fedora-coreos, machine-os-content, okd-rpms

• Bump Fedora CoreOS version string #744
• Bump fedora-coreos to latest stable #739
• Full changelog

hyperkube, pod

• OCPBUGS-28209: UPSTREAM <carry>: use snyk file #1873
• AUTH-439: loosen authentication.spec.type validation #1878
• Full changelog

hypershift

• OCPBUGS-29303: release-4.15: revocation controller backport #3532
• OCPBUGS-29020: reduce external-dns route53 call volume #3521
• OCPBUGS-29179: [4.15] reflect NodePool replica count nil in status #3473
• NO-JIRA: remove unneeded code to copy Authentication refs #3537
• OCPBUGS-29029: Add ValidatingAdmissionPolicy to KAS config #3523
• OCPBUGS-28764: node spread anti-affinity for HA HCP #3495
• OCPBUGS-28603: Remove webhook validations that introduce resource ordering #3515
• OCPBUGS-28594: backport API moves #3482
• HOSTEDCP-1272: Added CLI support to create DualStack clusters using default values #3502
• OCPBUGS-27818: Add GC knobs for KAS #3457
• OCPBUGS-27103: hcco: use manual mode for CCO #3420
• NO-JIRA: kubevirt, e2e Add additional network test #3499
• CNV-37394: Remove ‘–attach-default-network’ from productized cli #3500
• OCPBUGS-27380: indicate cluster profile to render the correct manifests #3465
• OCPBUGS-28235: Required RBAC for network-node-identity is not created when hosted cluster networkType is set to Other. #3467
• Full changelog

insights-operator

• gather etcd_server_slow metrics (#900) #900
• Full changelog

kube-proxy, sdn

• OCPBUGS-28580: Move sdn to RHEL9 base image (attempt #2) #617
• OCPBUGS-28580: Revert #613 “OCPBUGS-28580: Move sdn to RHEL9 base image” #616
• OCPBUGS-28580: Move sdn to RHEL9 base image #613
• OCPBUGS-28549: Add Snyk file to exclude directories on scan #614
• Full changelog

machine-api-operator

• OCPBUGS-28762: Add additional vnet join permission for Azure #1216
• OCPBUGS-27758: Set –max-concurrent-reconciles=10 for Azure machine controller #1210
• Full changelog

machine-config-operator

• OCPSTRAT-1062: [4.15] crio: enable log linking by default in 4.15 #4174
• OCPBUGS-29105: On-prem coredns manifests should not be generated for GCP #4169
• OCPBUGS-28909, OCPBUGS-28910: Run resolv-prepender entirely async #4161
• CORS-3169: Add support for in-cluster DNS on Cloud Platforms when cloud DNS cannot be used #4155
• Full changelog

oauth-apiserver

• OCPBUGS-21669: bump k8s.io and others (4.15) #99
• OCPBUGS-24132: Updating ose-oauth-apiserver-container image to be consistent with ART #93
• Full changelog

oc-mirror

• OCPBUGS-27946: Capability to override default channel (#786) #786
• Full changelog

olm-rukpak

• OCPBUGS-27596, OCPBUGS-27681: UPSTREAM: <carry>: Update go-git to v5.11.0 #72
• Full changelog

openshift-controller-manager

• OCPBUGS-28947: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #285
• Full changelog

operator-lifecycle-manager, operator-registry

• OCPBUGS-24159: Updating operator-lifecycle-manager-container image to be consistent with ART #623
• OCPBUGS-29083: * olm,catalog: only validate the resources we label #683
• OCPBUGS-29116: [release-4.15]: Clear (existing) error cond from Subscription, once error resolved #684
• OCPBUGS-27566, OCPBUGS-27571, OCPBUGS-27651, OCPBUGS-27656: bump go-git/v5 to 5.11.0 (#1175) #668
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-29230: [release-4.15] separate the handler sync from the informer sync & remove the full service resync during node tracker startup #2060
• OCPBUGS-28818: Support Permanent Session Affinity #2045
• OCPBUGS-28848: Ignore hybrid-overlay nodes from EgressIP controller #2040
• OCPBUGS-29001: kubevirt, Replace routes on migration #2052
• OCPBUGS-27947: [release-4.15] Fix LGW ETP=Local on IPv6 #2028
• Full changelog

tests

• OCPBUGS-29031: Replace ‘coreydaley’ with ‘sayan-biswas’ #28573
• OCPBUGS-26487: Increase timeout for pod-network-service #28508
• OCPBUGS-27934: fix panic in service-poller #28550
• OCPBUGS-26960: updated timeout to 3 seconds to account for network timing issues #28519
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• OCPBUGS-26013: Revert “Merge pull request #97 from jsafrane/rebase-v3.1.1” #110
• OCPBUGS-26074, OCPBUGS-26075, OCPBUGS-26076: [release-4.15]: Fix CVE-2023-45142 and CVE-2023-47108 #109
• OCPBUGS-25856: UPSTREAM: 2714: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #107
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-28817: Mark the operator as Disabled on connection error #219
• OCPBUGS-27378: Rerun checks on reconnect #216
• OCPBUGS-26409: CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 #207
• OCPBUGS-26013: Enable new features to prevent CSI driver from crash looping (revert OCPBUGS-23970) #205
• OCPBUGS-25355: setting TLSSecurityProfile with no minTLSVersion crashes controller #204
• OCPBUGS-25161: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #200
• OCPBUGS-23970: Enable new features to prevent CSI driver from crash looping #192
• Full changelog

---

View changelog in Markdown or change previous release: 4.15.0-0.okd-2024-01-27-070424───4.18.0-0.okd-scos-2024-11-21-0211394.18.0-0.okd-scos-2024-11-20-1411384.18.0-0.okd-scos-2024-11-20-0209584.18.0-0.okd-scos-2024-11-19-1409574.18.0-0.okd-scos-2024-11-19-0209564.18.0-0.okd-scos-2024-11-18-140955───4.17.0-0.okd-scos-2024-11-20-2214034.17.0-0.okd-scos-2024-11-20-1014034.17.0-0.okd-scos-2024-11-19-2214034.17.0-0.okd-scos-2024-11-19-1014034.17.0-0.okd-scos-2024-11-18-2214034.17.0-0.okd-scos-2024-11-18-101403───4.16.0-0.okd-scos-2024-11-21-0014434.16.0-0.okd-scos-2024-11-20-1214434.16.0-0.okd-scos-2024-11-20-0014434.16.0-0.okd-scos-2024-11-19-1214434.16.0-0.okd-scos-2024-11-19-0014434.16.0-0.okd-scos-2024-11-18-121443───4.15.0-0.okd-scos-2024-05-13-2236094.15.0-0.okd-scos-2024-04-25-1837084.15.0-0.okd-scos-2024-04-25-0637084.15.0-0.okd-scos-2024-04-24-1837084.15.0-0.okd-scos-2024-04-24-0637084.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2024-11-14-2031284.15.0-0.okd-2024-11-09-0406444.15.0-0.okd-2024-11-08-1606444.15.0-0.okd-2024-11-05-1344204.15.0-0.okd-2024-11-05-0144204.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.16.0-okd-scos.04.16.0-0.okd-scos-2024-09-24-1517474.16.0-0.okd-scos-2024-08-21-1556134.15.0-0.okd-scos-2024-01-18-223523───4.17.0-okd-scos.ec.34.17.0-okd-scos.ec.24.17.0-okd-scos.ec.14.17.0-okd-scos.ec.04.17.0-0.okd-scos-2024-09-30-1017394.17.0-0.okd-scos-2024-09-26-2248284.17.0-0.okd-scos-2024-09-24-1048284.17.0-0.okd-scos-2024-08-21-100712

Source code for this page located on github