4.15.36

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.15.36-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.15-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.15-micro Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.15-micro Succeeded periodic-ci-openshift-release-master-ci-4.15-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.15-fips-payload-scan
- gcp-ovn-rt-upgrade-4.15-minor Succeeded periodic-ci-openshift-release-master-ci-4.15-upgrade-from-stable-4.14-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.15 Succeeded periodic-ci-openshift-hypershift-release-4.15-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-dualstack Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-metal-ipi-ovn-dualstack
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.14.16, 4.14.17, 4.14.18, 4.14.19, 4.14.20, 4.14.21, 4.14.22, 4.14.23, 4.14.24, 4.14.25, 4.14.26, 4.14.27, 4.14.28, 4.14.29, 4.14.30, 4.14.31, 4.14.32, 4.14.33, 4.14.34, 4.14.35, 4.14.36, 4.14.37, 4.14.38, 4.15.0, 4.15.10, 4.15.11, 4.15.12, 4.15.13, 4.15.14, 4.15.15, 4.15.16, 4.15.17, 4.15.18, 4.15.19, 4.15.2, 4.15.20, 4.15.21, 4.15.22, 4.15.23, 4.15.24, 4.15.25, 4.15.26, 4.15.27, 4.15.28, 4.15.29, 4.15.3, 4.15.30, 4.15.31, 4.15.32, 4.15.33, 4.15.34, 4.15.35, 4.15.5, 4.15.6, 4.15.7, 4.15.8, 4.15.9

Loading changelog, this may take a while ...

Changes from 4.15.22

Created: 2024-10-03 10:52:36 +0000 UTC

Image Digest: sha256:a8579cdecf1d45d33b5e88d6e1922df3037d05b09bcff7f08556b75898ab2f46

Release 4.15.36 was created from registry.ci.openshift.org/ocp/release:4.15.0-0.nightly-2024-10-02-234522

Components

Kubernetes upgraded from 1.28.11 to 1.28.13
Red Hat Enterprise Linux CoreOS upgraded from 415.92.202407091355-0 to 415.92.202410020020-0 (diff)

Rebuilt images without code change

agent-installer-node-agent git 1f44c026 sha256:3d630196d4ea8d7cc3edcb688e94fa3897c0b8fbbeebf48c581b44a2bbd2a711
agent-installer-utils git 33b7d855 sha256:61311adddae92e4d677f78fd9da415a41799c483fb72032d4e2b526f1b634dd6
alibaba-cloud-controller-manager git abf4fa96 sha256:44003d7d66370a8b12f0429eecce7ff30a872d6998db52d62889bcf81dfa59e6
alibaba-cloud-csi-driver git be4888d3 sha256:2ede7f406f8c08c680959340c00b3d6549acf68f0ea08a7d0d97f166b5ffb745
alibaba-disk-csi-driver-operator git 41b367ae sha256:625b5790f7a2e08d7aa7bcb7418da090fec7195989abab275e662c6807d6295e
aws-cluster-api-controllers git 51e7a81c sha256:8914f35a7af23e427257a0da6248f24631837c3ee16dc03ce48506de267a96ee
aws-ebs-csi-driver git 7043c1cc sha256:e6d2435a06cdbbaec8ad446b3d3998a52e7f7a90802d1a2b24e3ee7213810221
aws-ebs-csi-driver-operator git 2a2b9dd1 sha256:0f660034927180d726740e6465be47fd77c97197fab98001811a9be496c99121
aws-machine-controllers git 0129b1e3 sha256:a8363297dcac012cc8cadfaecffbf20b15a58b65bd875017f3224285cb98ca91
aws-pod-identity-webhook git 13385034 sha256:399a24642071a11469cc453c1f2c718653d0026c42a7dba37b59385ae1f62aaf
azure-cloud-controller-manager git 0d799a26 sha256:aba56d0ec91ae63bfbb1aa162b792bc0abbf92c2f9839ba72f2adfb7152a99bb
azure-cloud-node-manager git 0d799a26 sha256:dc59c6b47210871738b75fd6782252523f84a3cf640549ba2b4939e693d5c85e
azure-cluster-api-controllers git 44832d2d sha256:5d61a08a91dd35ba22bfd59327d78e06eae33125cd320d6a837fcc97bdf8b9e2
azure-disk-csi-driver git dcb7e1c7 sha256:9c51e22c8da444dd1f0a01e05ec1930a6160402b466fd09210f63cea532f8b1d
azure-disk-csi-driver-operator git 160cf624 sha256:1749197d197e324e83bdd143114a8347536873eaf5ee079ebd64e498994dc6c4
azure-file-csi-driver-operator git 367c4e45 sha256:b4c04b76b20b473c7c28ea750819e5799120364d1aa1ec72ca783d2055612f6f
azure-workload-identity-webhook git 2333b7fa sha256:53a485fa5dba0c34bf7a58d9c0dc90f3d03854545216453e1e859f9f70760754
baremetal-machine-controllers git 73a72cc8 sha256:9f736cf6cd5d1adb65f0feb70ff6c069332c80068ce2dac0f8d5d3217bb12aba
cloud-network-config-controller git 6864da06 sha256:793dcc00947c42b49731957a33665c035749eb85401b88c10e1e70ce09bef615
cluster-authentication-operator git 7aaa40eb sha256:56a1b1db86ed4fceb95ac7c53f477313fe16091feecbafb15446e105d47d24d5
cluster-bootstrap git 0849c462 sha256:3161b97ab3f5b70b43406b3749a7f6d6af2c7d92670e425afdf908df853e1790
cluster-capi-controllers git 2053e13c sha256:15d0bf05cd01999fc84b47f482d3c94944f9325367c06bbc5b04a7a96201f214
cluster-config-operator git 0b4c69fd sha256:536e8e5109543cce44a691d0a050ad6eb1f409dd460f9f16416c7008442dc81b
cluster-csi-snapshot-controller-operator git 65dbb12b sha256:5796a03b5e4a52d773f77b66e2e95236c404e58f3ff57e64d0929067db53af69
cluster-dns-operator git 49290d7d sha256:91a4526cca67822c6631a4fc17f68c50bb10124b362b2d9d7b1cbeb49737a8e1
cluster-etcd-operator git b72a596d sha256:e12b42a633476ae57a45280234bdc7467d85ceb6bf29df1e949ae0f95de0737b
cluster-kube-cluster-api-operator git 128d8e08 sha256:489836d3249cbc586866e25191c5c5aee876090487a2665ca897ec12be9cb326
cluster-kube-controller-manager-operator git ee8cf525 sha256:a2083d9c9b9a51c8e7f455e7ff28be37df54b9db2cfb207aa1617ae0b9e532f0
cluster-kube-scheduler-operator git f054dfaf sha256:006bdff367707458ab296c4e5549a08183ca8ae61f69d892eb5e95aa0b339a29
cluster-kube-storage-version-migrator-operator git e76cea5f sha256:a56c87386ae5b10975d917c6781a0a1ca201ee8378d51ca5ced52771989cd999
cluster-machine-approver git 3a6b6ae6 sha256:e8a21e43d5d8c6b49c5bd293612212f832e0e2d0fc626caf04046556eace9f2c
cluster-olm-operator git a7ba8987 sha256:070c9e87e4d7246977781379ef9961b6c8721e464b2ac66e230ffddff681b4a2
cluster-openshift-apiserver-operator git 078c81f6 sha256:5c7b0dab69e28097e67184fa9fffb97c52ff6f5348ebc9ec737ec02b6a26e015
cluster-platform-operators-manager git 37a0a919 sha256:1bd35729083fcb69766674e0e32289c563ada209e0edbf73b40a947859e80ba3
cluster-policy-controller git cc48f315 sha256:5431f03fd28e4c3aec723f50676af98fb31bd1ab128b503ccecb15d4a857d090
cluster-storage-operator git 4c2b89d6 sha256:54ff16bd820d539c47eb7e55c326fdbf7af635a76a6d5541d6e37e69aebe2ad0
cluster-update-keys git be6ba5b0 sha256:21e3037192f1497215579fa615c0eb8309feadd83275001b9f4e4374360ef193
configmap-reloader git 617398f5 sha256:7a9270984e35939edefe1542e0843488500740a11f125a4cf0f488df4029650f
container-networking-plugins git 401d3507 sha256:5e1590ff72874cee8a3337f9f636aee4135ca1da64ad07df382e8cb8377998cd
csi-driver-nfs git d032dc10 sha256:7156152f4fb4b429da645f410dfa1ab5f4fefee66018a7d60efda551e29686c6
csi-driver-shared-resource git 260a085a sha256:2b9f139e58869dd021b713f19888195033c3532d13298c48615d74a02d3f2114
csi-driver-shared-resource-operator git 8d017b7f sha256:3ddcf1f12f12850ab07fd971a21948561eb0e02099f93bbb34db86deb387e920
csi-driver-shared-resource-webhook git 260a085a sha256:79e83695024f1745cc035a611793734a0b97b7c2afd1e40c60c2225345492849
csi-external-attacher git f806f266 sha256:e593a4e644be410c88ec0a9264c1ecdb13de0a780f90b069ab66c8f61e346f2b
csi-external-provisioner git ce5a1a33 sha256:36b6484900147a39098b69ca0a7c5c9180f6a51f257b43b0db9d7215451c8ea2
csi-external-resizer git 3b4236d3 sha256:3cb09b1c82d1cbf00d767711e1e9e6db3e34da123a3241fba039d7f686970c62
csi-external-snapshotter git 4f2955c7 sha256:455df707eeadd526a078232e2ff1a15d753fbf2e42986f77ef3e2f6dc41bb7e7
csi-livenessprobe git 240bb8c0 sha256:7056e04c43e6adecd76fffe179c23e188fe9d003d6a001d00e97cda3d4d81676
csi-node-driver-registrar git 9005584e sha256:f29de2e87e45a71727fb02f38e50d266812b0f31a20dc7a046c3bc7d23d03992
csi-snapshot-controller git 4f2955c7 sha256:eb9643330e3e873daed66e66f3445f13c2323f247cfe590cb6f79b85ad4bf0e8
csi-snapshot-validation-webhook git 4f2955c7 sha256:615c12e57f4d25f295ad4c7327cbd3aa1b646637ed6744e5367306a5d70d2a74
docker-registry git b9de67d8 sha256:f3a099c93e0942268a9e887fe464bfe0d530d7a21610ec5313a071f412327880
driver-toolkit git 7a448c2e sha256:71a665c94a45d289bb8b5e75500f3ae20e0a8dc3ca538f01336c96cbdc90899e
etcd git a7005ef1 sha256:6c3c5928dcdd583ca8e6bd3fce5764791fb7cb615471c3046ea518b707721b15
gcp-cloud-controller-manager git fc50272a sha256:91db3d7165e725f845489f085ed039f642f0068d19c3d2628ea5cd5cd9c53808
gcp-cluster-api-controllers git bad54034 sha256:72ac92b10aa7078c7ba31e2ce63aae96b84e24ecfbc79b71769134be5cb837be
gcp-machine-controllers git b15daaf5 sha256:9b0ea6d44717dcf74583b9d6a2ea6d9108c131cef4b70a89ffabdf696074bbbe
gcp-pd-csi-driver git 856ee3e2 sha256:99a21e5671a442682f3f3e8636297013efa27c37d42a8f89095ac2a0b06ad35c
gcp-pd-csi-driver-operator git 3b91ee31 sha256:8eacfe4ba6d0174f7ba686cc075245eaf8abccfff0c0b9fac5b138232749b789
haproxy-router git dc38fbd8 sha256:e78f52732346b3205c1c440d07a95cf87a01579cfe1a5b550d0140fb97ab2d3b
ibmcloud-cluster-api-controllers git 34fb6252 sha256:4edcf447d155d47961f754769c252267672aa58daceec6c291d9910df4d86722
ibmcloud-machine-controllers git 6b0b8ea7 sha256:2655382a8e6a95fb5a226215748ce8215d3c514857587ad8ae2b69778cdeaec9
ironic-machine-os-downloader git bcbcd95b sha256:964b36f5c228fc62438b03876a41aee5e456913c9ebfa31db4d1cc1d5725a584
ironic-static-ip-manager git 47200021 sha256:697c66f21f6fa9e534a5d3745587e6aa6733f6e42e16fd4eeea0669f43ab3f1c
keepalived-ipfailover git 27f16950 sha256:9fc553d7d942882ffc591150381f8b9be04e07d11787ee61f3b1bc80c0b50d0e
kube-metrics-server git bcbf241c sha256:7f191194d92032c6159255b6e22f401eb6e75f0b182eea83a64d57ad45b42a71
kube-rbac-proxy git e8e8c84b sha256:d96274184340411aebe211a840a71bb8ba86e134e4a2d68828badd1366b9e7c7
kube-state-metrics git 037b59c2 sha256:8d5992c84a2f08e2926c979e32d36ce998612a5c66c2e87b3f42447fa2503eb8
kube-storage-version-migrator git e8749689 sha256:797ac9f9ca9ee8db08ac362cb661328f1a2307380dd6d2add1df043368ef7a1c
kubevirt-cloud-controller-manager git dbaf9ea1 sha256:7a54c68eab86eb2b16b9a0b69541f6bd2bbb9c5662b2033d7524765d576c570d
kubevirt-csi-driver git d3bdbce4 sha256:c89e2a2ce7d8d87b07e0fa013e19c78b9ca1058212cceb31f8ab2fe16bf49c37
libvirt-machine-controllers git 1e096cdf sha256:844b63b72272fc787a7c6ad3f26366320ef7cdb6c0157b33f91522282b1eb186
machine-image-customization-controller git 97d87657 sha256:762e1066eb3598b35a4eda0e8df1eac513e2d588283b0177d0afb0dfc261d08e
machine-os-content sha256:3eaf0a2806cea851f27bb3e2ac7eea31e72eca594ecc39672bd2a4bdc63ccac0
machine-os-images git 9e9c920f sha256:7e32703ea7980d990dcb64770151114ff349f1fcc0fda60f58444fb428eef305
monitoring-plugin git 53c18620 sha256:51ca39984aa411e523f025bc8804fd9fd428ebc59bc5da3f58b12b9bba51cb6d
multus-cni git 05497ad1 sha256:bc5e0e9c135b46645dafa092fb6e222d3ae8cf44e1311a718b080576beb8bdbe
must-gather git 47335065 sha256:9f3843a45fd86fa1288feeb50ec2b7cfaf07e21f1c18b27858dd574b4089ea22
network-interface-bond-cni git f91decaa sha256:3427a5de5c012c56486f405d22437e495adff036561425a11008887fe1c4c26b
network-tools git 17536c8d sha256:d34c04432861d4202ffd01e6397f7b601519757a85212c01f53c7ad9cb42881f
nutanix-cloud-controller-manager git 33fb22c1 sha256:af9a6bc453ac77a86403d948c993cebca19ce23e18eba3619ccf019849f702c0
oauth-apiserver git 0e158441 sha256:5974b41167aa8a29d014f03924fed8d983649cc1752a7e27a79f8283d04f8754
oauth-proxy git 241a88c4 sha256:e768ea8e720c9d852c1a0add618558af9c73182679675f64243a95fcfc299051
oauth-server git c055dbb9 sha256:0c264ec0b850dfb9cb30ccb3ea8900141771e3163982a493d0add608f156d1b1
oc-mirror git e91f573c sha256:2e4071d7f2bc3711cb8b4c5be741514a9fbac0e7d80798369b74b347a329c413
olm-rukpak git 5b09cd44 sha256:7f1aa720fce54c7b37c2485fd61917d9ff9c8b37a1bd3de90890ac8a534b6b73
openshift-state-metrics git 1915f645 sha256:6f8ee07890e8edcf2d4bf119795cb9172d426aa54b92392accfdabe692e33487
openstack-cinder-csi-driver-operator git d0c24077 sha256:01ecd1e694cadd6028331bde5143e377aa3b3fa936bb41937cd647ea5f0254a1
openstack-cluster-api-controllers git 232472ea sha256:934b37233e26733181dd72e4f67049bab70bd44e300dbbd0ccd2d6a6c81a229f
openstack-machine-api-provider git 396a09ff sha256:a62649ac1e9ef8e3c88cd582e5a65ba194535ef8edb16bc63ee9bd2051f1983c
ovirt-csi-driver git b8d25ad6 sha256:890cbbc9a007288665353128f0e01a38416ffb5d50b044ca63940f98b496bdfd
ovirt-csi-driver-operator git e9b0fa23 sha256:5482eef09b3a666df3b2a54f1acda27fb8b12ebd5dcbd911f98f6c0b31d1a4c4
ovirt-machine-controllers git 5d708631 sha256:695d4599e96078847d564f4e419717fb92e797bbfe49b5fc56cf0d9c91982460
powervs-block-csi-driver-operator git a3729dcb sha256:8ce5cb99185ba6f61bffa0c16d2e8f5306536ea72b84f1030566e17e8c9410ee
prom-label-proxy git f3f1f5d1 sha256:ca8b90e4f77b28e03af55e7b33a104443308e9c8636217bae69e89398e72ea42
prometheus git 6828e446 sha256:f464c45b4fdd43a51a68b3f2d21f3371b12c7d1a7bb034b4e0fb5dd86b2be4ca
prometheus-alertmanager git 870ade52 sha256:1b29790b0702ba879eb045a838ad21b95dc0a86c2d770ff2570e7f13f917f91d
prometheus-node-exporter git aed837c3 sha256:c069eab29f16a7107b6450d8753cde6962a5fc2f56ab02712c62e77418f20838
rhel-coreos sha256:0052a3f3d53dfbe1f1a1a6a7d86056bceb23966d0d38b8d0d20aac79963a6b69
rhel-coreos-extensions sha256:40d52a842dd092aacfa53692b0fd07dd9d1ed55c76e78629847a8bfe74c4af07
route-controller-manager git c5cc7a73 sha256:ce25f72e0cf41f0204bd09aaffff670646b69121cc757b7bdad0c72c9c251e47
service-ca-operator git 19f312e9 sha256:389786f71b95450029e22030503ad4253bfca36e263aa845e73a9783316787e4
telemeter git 14489f7d sha256:7fdda406a4cb041a19fc98431968589acc83e135784a3507bf7bf87deadf5a14
thanos git 66161ad4 sha256:cef391a24757a6a39b8852fa0a823013c5ba8b0dc58154486117524a6f49d8c2
vsphere-cluster-api-controllers git 56111686 sha256:63d5cff8933224afd278d8681fb91b18cfd41e495763b74b793cb07cc08ebd50
vsphere-csi-driver git 4b15e93b sha256:381aa83e45903273181352d4227cf36bec748ee5f95a620ab254987f505d754b
vsphere-csi-driver-operator git e0d46570 sha256:7717d5aab7beb63b5e8ec37af4c6a475633e7d0e94d16064cae65eccd81df4c6
vsphere-csi-driver-syncer git 4b15e93b sha256:d8f0c10c0ec13a61cf09bc17d58689701a642b4a0b7299a331db3b37a2d4d063

agent-installer-api-server

OCPBUGS-36577: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#6753) #6753
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-36779: Reload host inventory on conflict (#891) #891
Full changelog

alibaba-machine-controllers

[[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads #57
Full changelog

apiserver-network-proxy

OCPBUGS-38065: Revert “Agent: Respect HTTPS_PROXY env vars for proxied connections” #60
Update golang Docker tag to v1.23.1 #58
Full changelog

aws-cloud-controller-manager

OCPBUGS-38577: Ensure that addresses are added in network device index order #92
Full changelog

azure-file-csi-driver

OCPBUGS-39444: bump mount-utils to treat ENODEV error as corrupted mount #78
Full changelog

azure-machine-controllers

CFE-1050: Added support of capacity reservation group #110
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-42180: Add AWS r8g to arm tested instance types #9040
OCPBUGS-39288, OCPBUGS-42011: Openstack UPI - Reintroduce unique resource names #9047
OCPBUGS-38198: Remove timed context for gcp client #8824
OCPBUGS-29591: vsphere-fix convert if only provided name #8034
OCPBUGS-32179: Fix task for attaching IPv6 subnet to router. #8262
OCPBUGS-34721: fix usage of host and user CA bundle in the agent ignition #8512
OCPBUGS-36090: [release-4.15]: bump go-retryablehttp for CVE fix #8655
OCPBUGS-37064: Changed vsphere CPMS to not include fields controlled by failure domains. #8735
OCPBUGS-37182: ic: fix typo in warning message #8770
OCPBUGS-37067: update RHCOS 4.15 bootimage metadata to 415.92.202407091355-0 #8746
Full changelog

baremetal-operator

OCPBUGS-38939: [OCP] Ability to disable agent power off after deployment #373
Full changelog

baremetal-runtimecfg

OCPBUGS-37704: Change mechanism of debug flag #325
OCPBUGS-36278: Fix handling of ELB Node IP detection #322
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-39426: Ignore pruning when deployment points to replicationcontroller #1865
OCPBUGS-36329: Set required-scc annotation to privileged for node debug pods #1818
Full changelog

cloud-credential-operator

OCPBUGS-41235: List secrets in batches to avoid api timeout #754
OCPBUGS-38377: Update google.golang.org/grpc v1.65.0 #749
OCPBUGS-37461: Set required-scc for openshift workloads #736
OCPBUGS-37277: Update to cloud.google.com/go/storage v1.43.0 #729
OCPBUGS-37288: GCP passthrough permissions check to ignore problematic permissions. #730
OCPBUGS-37419: SNYK ignore go-client misreporting #738
OCPBUGS-37061: Update to azidentity v1.7.0 #728
OCPBUGS-36030: IBM/go-sdk-core update to v5.17.4 #720
Full changelog

cluster-autoscaler

OCPBUGS-40930: update VPA golang.org/x/net for http rapid reset for CVE-2024-8421 #315
Full changelog

cluster-autoscaler-operator

OCPBUGS-41798: set required-scc for openshift workloads #332
Full changelog

cluster-baremetal-operator

[[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads #443
OCPBUGS-31948: bump x/net to 0.23.0 #437
Full changelog

cluster-capi-operator

OCPBUGS-37849: fix: sort CredentialsRequest manifests after namespace #193
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-36821: Increase GCP Concurrent Service Syncs to 10 #359
Full changelog

cluster-config-api

CFE-1047: Added new field for capacityReservationGroupID in AzureMachineProviderSpec #1925
Full changelog

cluster-control-plane-machine-set-operator

[[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads #326
OCPBUGS-24632: Prevent rollout due to irrelevant path artifacts #317
CFE-1087: API Bump for capacity Reservation #318
Full changelog

cluster-image-registry-operator

OCPBUGS-39099: Avoid Shared Access Key usage for Azure Storage Account when using Managed Identity based auth #1111
OCPBUGS-38895: pkg/resource: invoke update-ca-trust extract with –output #1105
OCPBUGS-36325: Set required-scc for openshift workloads #1067
Full changelog

cluster-ingress-operator

OCPBUGS-41635: Refine logging for accurate infra CR status updates #1141
OCPBUGS-36466: Allow operator to update Route spec.subdomain #1100
OCPBUGS-36208: Implement connect timeout tuning option #1097
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-37566: add disabled syncer as reason to CFE for PSA #1716
Full changelog

cluster-monitoring-operator

OCPBUGS-42586: Exclude windows nodes from kubelet servicemonitor #2487
OCPBUGS-41913: filter alerts sent to Telemeter #2472
OCPBUGS-39172: Backport #2441 for 4.15 #2448
OCPBUGS-37608: set required-scc for openshift workloads #2420
OCPBUGS-36563: add runbook_url annotations #2406
OCPBUGS-37194: Making sure proxy settings are correctly forwarded in the generated remote write configs #2413
Full changelog

cluster-network-operator

OCPBUGS-42020: HyperShift: do not use antiaffinity on single replica control planes #2504
OCPBUGS-41947: Add proxy env vars to onvkube-node #2503
OCPBUGS-31447: Tighten the permissions on whereabouts.conf #2324
NP-1064, OCPBUGS-39336: Remove managed cluster checking for live migration #2485
OCPBUGS-34613, OCPBUGS-34726, OCPBUGS-34727: Live migration backports #2393
OCPBUGS-37962: Fix IC distributed control plane alerts #2459
OCPBUGS-35837: Propogate hypershift control plane priority class override to multus and preserve container resource requests #2420
OCPBUGS-37205: Check every MachineConfigPool for IPsec plugin existence #2439
OCPBUGS-34809: Ensure that the node-identity webhook address contains colons for IPv6 #2396
Full changelog

cluster-node-tuning-operator

OCPBUGS-42284: Add cluster-wide proxy env file (#1171) #1171
TuneD prior to kubelet in one-shot mode (#1125) #1125
set required-scc for openshift workloads (#1117) #1117
OCPBUGS-36870: Remove tuned/rendered object (#1110) #1110
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-35922: lots of churn during image registry managed/removed transition #358
OCPBUGS-35869: nil pointer reference in ocm-operator #357
Full changelog

cluster-samples-operator

OCPBUGS-37464: Set required-scc for openshift workloads #548
OCPBUGS-38157: add mfrancisc and metlos as owners add owners 4.15 #550
Full changelog

cluster-version-operator

OCPBUGS-36817: Set required-scc for openshift workloads #1068
Full changelog

console

OCPBUGS-38764: Fix “Auto deploy when new image is available” becomes unchecked when editing a deployment from web console #14177
OCPBUGS-41991: Values entered into the Instantiate Template form are automatically cleared #14294
OCPBUGS-42384: Fix updating the “Until” field on the Silence > Edit page #14322
OCPBUGS-39343: The filepath including leading slash makes error during parsing devfile using Gitlab #14227
OCPBUGS-42144: Use vCenterCluster value from CM as primary resource #14307
OCPBUGS-38537: Include PatternFly-4 chart styles so they are available for dynamic plugins that still use PF4 react-charts #14158
OCPBUGS-38108: Revert - terminal: use username if uid is not present #14114
OCPBUGS-32793: Fix that telemetry events didn’t incl. an userId anymore #13792
OCPBUGS-38970: DeploymentConfigs deprecation info alert should not present on the Edit deployment page #14195
OCPBUGS-38969: Tooltip on Pipeline when expression is not shows #14194
OCPBUGS-39085: Fix utilization card limits/total display #14209
OCPBUGS-33938: Add validation for vSphere fields Handle submit errors correctly #14210
OCPBUGS-39112: Disable Knative e2e tests #14197
OCPBUGS-33076: Remove deprecated resources from spec of the Pipeline #13801
OCPBUGS-35495: fix crash if helm chart metadata is nil #13977
OCPBUGS-37452: Redirects to new PipelineRun logs URL from old PipelineRun logs URL #14083
OCPBUGS-38496: Fix password set to Secret created through Start Pipeline form #14152
OCPBUGS-37399: Add default sorting column for VirtualizedTable component of dynamic plugin sdk #14079
OCPBUGS-37099: fix BMH restart annotation #14071
OCPBUGS-37458: one OAuth.config.openshift.io item on Global Configuration page links to non-existing resource #14085
OCPBUGS-34477: Import from Git allow users to import an app with Build option Pipeline also when no Pipeline is available #13897
OCPBUGS-36971: ensure correct API version for OperandDetails #14058
Full changelog

console-operator

OCPBUGS-37408: set required-scc for openshift workloads #924
Full changelog

coredns

OCPBUGS-37158: UPSTREAM: 6354: openshift: key cache on Checking Disabled (CD) bit #125
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-38170: rebase CPO on 4.15 #274
Full changelog

csi-driver-manila-operator

OCPBUGS-38023: Set required-scc for openshift workloads #236
Full changelog

egress-router-cni

OCPBUGS-35524: update to go 1.20 and k8s.io mods to v0.28.3 #86
Full changelog

hyperkube, pod

OCPBUGS-39016: Update to Kubernetes v1.28.13 #2063
OCPBUGS-31467: Return from EnsureHostInPool on all NIC errors #1964
: OCPBUGS-38861: Upstream: 115702 kubelet: output log even file is rotated #2058
NO-JIRA: update downstream owners #2050
OCPBUGS-37622: Bump to Kubernetes v1.28.12 #2037
Full changelog

hypershift

NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.39 (release-4.15) #4807
NO-JIRA: chore(deps): update konflux references (release-4.15) #4815
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.37 (release-4.15) #4793
NO-JIRA: chore(deps): update konflux references (release-4.15) #4777
chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.4-1227.1726694542 (release-4.15) #4766
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9 (release-4.15) #4770
chore(deps): update squidfunk/mkdocs-material docker tag to v8.5.11 (release-4.15) #4769
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21 (release-4.15) #4767
NO-JIRA: chore(deps): update konflux references (release-4.15) #4762
OCPBUGS-41373: CPO oauth idp converter: resolve names before dialing #4746
NO-JIRA: Security fixes for openshift-ci-security job #4751
OCPBUGS-42214: Make guest cluster components use the correct KAS port #4749
OCPBUGS-38059: Add HTTP konnectivity proxy to OAuth server #4497
HOSTEDCP-1956: bump CCO and go-jose version #4697
NO-JIRA: chore(deps): update konflux references (release-4.15) #4719
OCPBUGS-41701: cmd: report server version, supported OCP #4702
OCPBUGS-38065: [release-4.15] Use HTTP proxy for ingress controller #4699
OCPBUGS-41809: copy image-registry AdditionalTrustedCA configmap into HC openshift-config #4706
HOSTEDCP-1896: [release-4.15] Allow setting Kube APIServer maximum requests in flight #4552
OCPBUGS-39463: handle version skewed NodePools that do not have rhel9 binaries #4666
OCPBUGS-39077: Set KCM node monitor grace period #4628
OCPBUGS-30465: fix: bump google.golang.org/protobuf #4616
OCPBUGS-39171: fix: bump github.com/IBM/go-sdk-core/v5 #4625
OCPBUGS-35815: Add hypershift-cluster-version-operator image to release providers #4243
NO-JIRA: test: relax mgmt KAS egress check #4631
NO-JIRA: Tolerate restarts for kubevirt external infra #4200
NO-JIRA: Flaky cert validation test #4630
OCPBUGS-38943: copy oapi ca-trust recursively when building trust anchor #4613
OCPBUGS-39041: set proxy envvars on aws and azure CCMs #4624
OCPBUGS-38613: hcco: reconcile apiserver config into hosted cluster #4567
OCPBUGS-38561: Let the CPO oidc check resolve through data plane #4564
OCPBUGS-34904: remove weak ciphers from security profile #4547
OCPBUGS-37171: OCPBUGS-35899: Doubled machineHealthCheck timeout on Agent and None #4489
NO-JIRA: Update Konflux 4.15 and perform migration #4487
NO-JIRA: [release-4.15] Kubevirt on Azure: Change KAS LB Port to 7443 #4469
OCPBUGS-36938: [release-4.15]: Add HTTP(s) konnectivity proxy and use it with OpenShift APIServer #4358
OCPBUGS-37174: Delete IDMS in dataplane once HCP ICS field is removed #4457
NO-JIRA: [release-4.15] kubevirt-csi-driver: Pass infra kubeconfig in case of external infra #4279
HOSTEDCP-1795, HOSTEDCP-1796: Customize the self-generated cert validity and rotation #4444
OCPBUGS-36916: Add newline after TLS certs referenced by image.config #4443
OCPBUGS-37695: Set right endpointSlice port #4441
NO-JIRA: Red Hat Konflux update hypershift-release-mce-25 #4433
NO-JIRA: [release-4.15] test/e2e: remove api budget checks #4413
OCPBUGS-37266: extract rhel9 MCO binaries for rhel8 based MCO images #4385
OCPBUGS-36606: enable audit log for oauth-openshift #4320
HOSTEDCP-1714: Kubernetes API Server Log Verbosity Annotation cherry pick to 4.15 #4178
Full changelog

ibm-cloud-controller-manager

: OCPBUGS-37311: Bump otelgrpc to v0.49.0 #74
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-36066: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #72
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-42438: Reorder static resources to create RBAC first #130
OCPBUGS-36072: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #121
Full changelog

ibm-vpc-node-label-updater

OCPBUGS-36012: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #41
Full changelog

insights-operator

OCPBUGS-39395: collect some nmstate customresources (#986) (#989) (#995) (#1002) #986
Add haproxy metric (#983) #983
OCPBUGS-37672: Ingress controller related certificates’ validate dates gathering (#972) #972
fix the configmapobserver notifications (#971) #971
manifests: set required-scc for openshift workloads (#967) #967
Full changelog

ironic

OCPBUGS-38798: redfish-virtualmedia fails on XFusion nodes #565
OCPBUGS-37761, OCPBUGS-39381: Include fixes for CVE-2024-44082 #583
OCPBUGS-38512: set min version for python3-webob #554
OCPBUGS-33332: bump werkzeug #536
OCPBUGS-37407: bump jinja2 #529
OCPBUGS-37113: Update eventlet version #523
Full changelog

ironic-agent

OCPBUGS-39381: Include fixes for CVE-2024-44082 #162
OCPBUGS-38512: set webob and bump werkzeug #150
Full changelog

k8s-prometheus-adapter

OCPBUGS-35820: Fix the podmetrics and nodemetrics command #109
Full changelog

kube-proxy, sdn

OCPBUGS-42171: fix redundant router-default iptables rule [4.15] #634
Full changelog

machine-api-operator

[[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads #1288
CFE-1051: Adding web-hook validation for capacityReservationGroupID #1261
Full changelog

machine-config-operator

OCPBUGS-32329: Fix configure-ip-forwarding.sh #4324
OCPBUGS-37551: On-Prem resolv prepender to watch for NM changes #4499
OCPBUGS-38712: SCC-pinning for openshift workloads #4540
OCPBUGS-38370: Revert “MCD-pull: run after network-online.target in Azure” #4525
OCPBUGS-37768: Move StartLimitIntervalSec to Unit section #4506
OCPBUGS-37629: Openshift uncordoned compute-node that was intentionally cordoned #4495
OCPBUGS-36863: Copy RHEL9 binaries used in HCP #4476
OCPBUGS-35220: Check both ready and health ingress endpoints #4398
OCPBUGS-30139: [release-4.15] Use NM’s dns-change event for resolv.conf #4220
Full changelog

multus-admission-controller

OCPBUGS-37727: Update owners #88
Full changelog

multus-networkpolicy

Update owners (#58) #58
Full changelog

multus-route-override-cni

OCPBUGS-41804: [release-4.15]Update owners #59
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-37729: Update owners #305
OCPBUGS-37813, OCPBUGS-37816: [release-4.15] align api calls timeout and skip pods marked for deletion #308
Full changelog

network-metrics-daemon

Correct 4.16 owners file (#99) #99
Full changelog

nutanix-machine-controllers

[[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads #81
Full changelog

openshift-apiserver

OCPBUGS-32444: Bump golang/x/net to v0.23.0 #428
Full changelog

openshift-controller-manager

OCPBUGS-32871: replaces deprecated square/go-jose wtih go-jose/go-jose #333
OCPBUGS-41949: Add adambkaplan as approver #291
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-42114: add optional schema migrations; default to olm.bundle.object instead of olm.csv.metadata #874
OCPBUGS-41981: (fix) registry pods do not come up again after node failure (#3366) #868
OCPBUGS-41819: [4.17] adds paginating lister for evaluating CRs’ upgrade fitness versus new CRDs. #864
OCPBUGS-41598: Fix e2e flake: upgrade CRD with deprecated version #862
OCPBUGS-38383: (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache #840
OCPBUGS-38323: Update junit report file name to show spec results on Test Grid #839
OCPBUGS-37677: [release-4.15] Update e2e config and backport list of flakes #829
OCPBUGS-37554: Set required-scc for openshift workloads #828
OCPBUGS-37017: Bump github.com/containers/image/v5 #823
OCPBUGS-36812: fix sorting unpack jobs #817
OCPBUGS-36451: Can’t install operator on 4.15 after uninstalling it on a prior version #810
OCPBUGS-36813: [CARRY] perform operator apiService certificate validity checks directly #819
Full changelog

operator-marketplace

OCPBUGS-24144: Updating marketplace-operator-container image to be consistent with ART [4.15] #553
OCPBUGS-37524: Set required-scc for openshift workloads #570
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-41340: Delete EgressIP LRP stale nexthops when node is not found #2288
OCPBUGS-38262: [release-4.15] Bump OVSDBTimeout and make it configurable. #2252
OCPBUGS-37962: Fix registering northd metrics on appropriate nodes #2246
OCPBUGS-37196: [release-4.15] ovspinning: Set affinity of each thread #2235
Full changelog

powervs-block-csi-driver

OCPBUGS-36096: Fix CVE-2024-6104 by updating http-retryable to 0.7.7 #89
Full changelog

powervs-cloud-controller-manager

OCPBUGS-36106: UPSTREAM: <carry>: Fix go-retryablehttp CVE 4.15 #74
Full changelog

powervs-machine-controllers

OCPBUGS-41977: Update go.mod to fix CVE - 4.15 #85
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-38400: feat: sync proxy settings in Alertmanager configuration #300
OCPBUGS-36719: add proxyURL validation for smon,pmon and probe #298
Full changelog

tests

OCPBUGS-38086: vertical scaling test should not rely on CPMS replicas #28985
OCPBUGS-39136: Bump timeout for the pod-network-service endpoints check #29053
OCPBUGS-38787: [4.15] egressfirewall: skip ping tests in case of hypershift kubevirt on Azure infra #28994
OCPBUGS-36264: add Proxy config #28912
OCPBUGS-37630: remove unused in-cluster monitoring code #28956
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-37659: Bump otelgrpc to v0.49.0 #71
Full changelog

vsphere-problem-detector

OCPBUGS-37760: Drop event when CheckDefaultDatastore fails #170
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github