4.15.44

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.15.44-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.15-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.15-micro Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.15-micro Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.15-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.15-fips-payload-scan
- gcp-ovn-rt-upgrade-4.15-minor Succeeded periodic-ci-openshift-release-master-ci-4.15-upgrade-from-stable-4.14-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.15 Succeeded periodic-ci-openshift-hypershift-release-4.15-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-dualstack Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-metal-ipi-ovn-dualstack
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-bm Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.15-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.14.19, 4.14.20, 4.14.21, 4.14.22, 4.14.23, 4.14.24, 4.14.27, 4.14.28, 4.14.29, 4.14.30, 4.14.32, 4.14.33, 4.14.34, 4.14.35, 4.14.36, 4.14.37, 4.14.38, 4.14.39, 4.14.40, 4.14.41, 4.14.42, 4.15.10, 4.15.11, 4.15.12, 4.15.13, 4.15.14, 4.15.15, 4.15.16, 4.15.17, 4.15.18, 4.15.19, 4.15.20, 4.15.21, 4.15.22, 4.15.23, 4.15.24, 4.15.25, 4.15.27, 4.15.28, 4.15.29, 4.15.30, 4.15.32, 4.15.33, 4.15.34, 4.15.35, 4.15.36, 4.15.37, 4.15.38, 4.15.39, 4.15.40, 4.15.5, 4.15.6, 4.15.8, 4.15.9

4.15.43 (changes) - S F S S S S
4.15.42 (changes) - Success
4.15.41 (changes) - Failed
4.15.31 - Failed
4.15.26 (changes) - Success
4.15.7 (changes) - Failed
4.15.3 (changes) - Success
4.15.2 (changes) - Success
4.15.0 (changes) - Failed
4.14.45 (changes) - Failed Success
4.14.44 (changes) - Success
4.14.43 (changes) - Failed
4.14.31 (changes) - Success
4.14.26 (changes) - Success
4.14.25 (changes) - Failed
4.14.18 (changes) - Success
4.14.17 (changes) - Failed
4.14.16 (changes) - Failed
4.14.0-0.nightly-2025-01-22-024525 (changes) - Success

Upgrades to:

4.16.33 (changes) - Success Success
4.16.32 (changes) - Failed

Loading changelog, this may take a while ...

Changes from 4.15.31

Created: 2025-01-23 09:21:40 +0000 UTC

Image Digest: sha256:a42b52fe6d1521debfab6aa72fdbce79b9077bb8fdc6392608d07f1f5dbed3cb

Components

Kubernetes upgraded from 1.28.12 to 1.28.15
Red Hat Enterprise Linux CoreOS upgraded from 415.92.202409031652-0 to 415.92.202501152057-0 (diff)

Rebuilt images without code change

agent-installer-utils git 33b7d855 sha256:50ee4e65d83f3733e5ecade5050a63ef3d55bf57fc9154ca6deade1ec0256bf6
alibaba-cloud-controller-manager git abf4fa96 sha256:e78d772f393dac9b0fc10c056306cc84a61510b5c313faa9ba07d0a31d39ad59
alibaba-cloud-csi-driver git be4888d3 sha256:a3758e2f1343e66e07a7d718d7a0422613af5036f3cdacd1377ca7c8bcc0eb3a
alibaba-disk-csi-driver-operator git 41b367ae sha256:2e5dfc1e1fad5f3b6e1543fe701bd0a0781c56ae4f49a9c75055c0deb5493c6c
aws-cloud-controller-manager git fd77d92c sha256:d854b4fd98953ec634d5afa3b36f5a049e07c10fe023e54f5ccd1098e91edfb4
aws-ebs-csi-driver git 7043c1cc sha256:86dd4ef986f6bdd9e9a1568dfed0be506f45795816174e1618c0fef77313509a
aws-ebs-csi-driver-operator git 2a2b9dd1 sha256:696dbb03aafaaf9fb3caa31f86ff3fd6cf4d0adc916e26f79464e49ac498d0b0
aws-pod-identity-webhook git 13385034 sha256:4409b729b670ab2ab20214ec5c8b84182693766fd8069705fed6a2b57dbe6c47
azure-cloud-controller-manager git 0d799a26 sha256:3ee3b64ebf2654548935b651e0c17d0f7b584e52e5cc01dbd8a82ce60b6413df
azure-cloud-node-manager git 0d799a26 sha256:be305a4eaa0ab914861427eb0c5a0ebb4c565f4691927399034aef0ee1edd629
azure-cluster-api-controllers git 44832d2d sha256:dbc23f3affe1d350fa8883ba07336c1d46d1e26e6e5c54cbf7e6f3915b3b9380
azure-disk-csi-driver git dcb7e1c7 sha256:384885f84bf9d310b5cdaee78be71266bd64d02c660ecae05bbbc05025ce9167
azure-disk-csi-driver-operator git 160cf624 sha256:573b39b11ffb0c8e2001c48e244422b7cb08d58a6bbe1ed1ce714b593212d17a
azure-file-csi-driver-operator git 367c4e45 sha256:0077317a5dbd9b342e3de162111816ee32d01bdb656e450dc5be09cc99eecf26
azure-machine-controllers git 615b457b sha256:d2585ba47291e67e00a67e4fccb28f3713c4465c66db3f9ddd4eae36c0e854fb
azure-workload-identity-webhook git 2333b7fa sha256:0ae45cc538be1da21b3173e912d75675b388613bab873ad013d76456aa6b969e
baremetal-operator git 62a7d56e sha256:7baf8239290e6b5dc9a65e10d1ea9a9eb3ad5cce4cac8d76eb120193ada53429
baremetal-runtimecfg git 1fbb2c0c sha256:c8cf9463de6a09ee2d54916f4941e48e9ea89252e9b6103cac9d460aca6a1575
cloud-network-config-controller git 6864da06 sha256:e4d83cfa02962d9e6bba318a6a226f35daa73a3776c0c88311615e2e26e1f9c2
cluster-authentication-operator git 7aaa40eb sha256:dc3389845070d3debd44b35ab366c3d8a8e43ef0a7e2cdeb76eb8ee75d4969b2
cluster-bootstrap git 0849c462 sha256:dd295795dfce5af35e9331fec567b6e55782d83795d86c2f6cd2b038ec11a491
cluster-capi-controllers git 2053e13c sha256:54cc894f59a2e312c89d57cb3f17e01bc25e345258da32d16316d6e8783a7fc6
cluster-capi-operator git 203435ef sha256:6063021499517f0e5585e2fc73272b190969de914b35e2380ec92e4aaf402ab7
cluster-cloud-controller-manager-operator git 56181136 sha256:f937eead969bada79533536fa3fe743ae9d2fc8991cd84d52bef5e056f86bf57
cluster-config-api git 0a58f8c3 sha256:dc6edbe0e468dfaf47edf4240ba414f79606a855aa50c3ab25d5e0f8c2328d52
cluster-config-operator git 0b4c69fd sha256:eaa809e49d898339bf7b1ddc2b79b8fe0c9acbdc2d974cc3ef427e3caef52342
cluster-csi-snapshot-controller-operator git 65dbb12b sha256:a408156ac3e83ab68c0fa967dea42bfc260c8b2d8bcb8bf4e6d67d503ddc181a
cluster-dns-operator git 49290d7d sha256:a7a0b2501e953fdf7537b5c87d51559c5f9474e7ea1e9aacf497881cfeb9794d
cluster-etcd-operator git b72a596d sha256:f61e1a4349c1a5a618242d117ff16df0cc09990071beb72593bd6629b2b892e0
cluster-kube-apiserver-operator git aabc7863 sha256:c65136f85dd81239edd4109e6b137542fa81a3eca97c9e8eef3486cbc234a155
cluster-kube-cluster-api-operator git 128d8e08 sha256:bbeb808d73ba58fd09ca8abfcaa7264a841539f26126b436fea90d1da9ba17bc
cluster-kube-controller-manager-operator git ee8cf525 sha256:4930ebd0c89baa66e210e48c336a0a4738de85de63ecc7ed4d9b1df9acba92f6
cluster-kube-scheduler-operator git f054dfaf sha256:86add252e66e388a11e753d3a9d447b803d91a86a08f9c2c176bbedf27acbe0c
cluster-kube-storage-version-migrator-operator git e76cea5f sha256:f341fbec8714ba114337f9bd853ecca9291a79bb5968f3fb08320d3df231154a
cluster-olm-operator git a7ba8987 sha256:65db2f64a69ceb6b2e805b5d9e08dfaadfabf5750d3895ffdc5a22813f8f7dc3
cluster-openshift-apiserver-operator git 078c81f6 sha256:c8618bf09b7340b5815b01d5bb0030b54025ee36f2ddb8d6ca75631b2afc1546
cluster-openshift-controller-manager-operator git 68e8bcd5 sha256:ce8054b07cb5321407772ce024ccd735e359a09fae382b7bee03063bad8d1618
cluster-platform-operators-manager git 37a0a919 sha256:8899bb592362323d8505f0fff5827307099e9a8de51e35fc1e4dbb5c68758946
cluster-policy-controller git cc48f315 sha256:5cdbb9784502ea54539d8dd5a4941da68736acd830fe88feb7719c22118828dd
cluster-samples-operator git dac17316 sha256:6d9cf921ef6f1d827656f7b9d30679bf3a9df404ec3b4cfa8235ac084f7fcf46
cluster-storage-operator git 4c2b89d6 sha256:60ce7d72b5c99151151113331dd2731ad0d3a81167a847f91eba3529b7d84f81
configmap-reloader git 617398f5 sha256:7a60e7e6d309a74a357f49c3ebc575fd2f264e7857e204ceff3c7f89ade3a35b
coredns git 1326282c sha256:d35ddbc5be78cab677fcd6cdb3a0e3c0d2668d1abc3538d5c63aafaba090c539
csi-driver-manila git 6ab1226a sha256:1d0d777b68b368df45d1a5016519f73435f0b44bfc69b250cbe212f336c66f4f
csi-driver-manila-operator git 9bcf382e sha256:9aa5afb8ee123783105b750a27277d587d2a9542816c9da84d42f6caae95c854
csi-driver-nfs git d032dc10 sha256:d64a4a3864bde7d65bb1212f2ad8549d4b0554841156d8bd275c18071b6ed4e7
csi-driver-shared-resource git 260a085a sha256:7d325ad92f081bbf39237580b8faf2e33a33f9972b737b463e082798b2c150b9
csi-driver-shared-resource-operator git 8d017b7f sha256:5d6fabdbf12999fd56a928b7127f3afc2c3830499a4cf3e8311922e6b23369a9
csi-driver-shared-resource-webhook git 260a085a sha256:c9c9dcf899a8c044e907589cbe268bef5fc4b0924602f23bc1d6b51de2980aac
csi-external-attacher git f806f266 sha256:bff58bf534619e113d9b9a9b389a3925f6a9e2f2ce95d33abe2beea0d67dbe1f
csi-external-provisioner git ce5a1a33 sha256:96641bed11c50f458a89cae6d7c7973cad8bffb71488f80b732108025160e021
csi-external-resizer git 3b4236d3 sha256:e595f667614fcc85a321adaa921ead16a5c4cde0f1f43b537f8708dcb6e3cf8a
csi-external-snapshotter git 4f2955c7 sha256:f9279d0edcceb4090afcac7180f47a286df5894a94140a8512f4d55de9101f4b
csi-livenessprobe git 240bb8c0 sha256:6522d750818044ed61ce42148d6f45c25eed7b3635060e3b60f950ddc92a2152
csi-node-driver-registrar git 9005584e sha256:ad649eb1803f5bbab1ec229c16f74fbbc87518aa0718554af0f8aac3ff62a339
csi-snapshot-controller git 4f2955c7 sha256:0a5c62fa755016fa7a667052c22c38bf59c8734e62979e2ce7b093d783943f94
csi-snapshot-validation-webhook git 4f2955c7 sha256:fde1870f06257c3f4fdec4929bf78991e1ac038b40b5bbf247b538e2387c488f
docker-registry git b9de67d8 sha256:b286bc0482f4abd97cf2f7364dbe5841bf088590cde04561468399ce8aabeb91
driver-toolkit git 7a448c2e sha256:fc0537905c0c98581f1779858c1716ab056f2462b4214bd04fa1acb5f95e1d55
egress-router-cni git f8ec690b sha256:0781547566c253acd49a35bdaf4bdd89d33c07ec804b3379e89b2f5cbdc916ce
etcd git a7005ef1 sha256:0462f04b4cea5eee11c6fe24575e097a0175c347dd69f8062567d6e57846126f
gcp-cloud-controller-manager git fc50272a sha256:deb56f78c385c53849f3c5ff5ed6928a623daafaf4dcb654ec7fd4619feae769
gcp-cluster-api-controllers git bad54034 sha256:2fb409561589962ffe360b126ad9af57e95896941317de01900ee788a3603a9f
gcp-machine-controllers git b15daaf5 sha256:01085d9bcb75ce842f0ec56782cff5f5c0e143025934fac46a9bc6784f7fb792
gcp-pd-csi-driver git 856ee3e2 sha256:cbce4aeb5a5454e3fb0dd36ae6d0d9faef37b97c83a654e3dd8c7ba4bf3269e6
gcp-pd-csi-driver-operator git 3b91ee31 sha256:9ee20103cf1a67c12e7d0b5f01075868d2029c4f4be5ba41dd3e252e14530c5a
haproxy-router git dc38fbd8 sha256:b6d98b423f490d45c47d59bd77fd1da6a4a0c0121b61751f15c145998c91c51e
ibm-cloud-controller-manager git cc0d5415 sha256:8f16676865c2bd52cdc780d154f6bb661ef9d48fddd4a46cd3b8e8a1c26eda82
ibm-vpc-block-csi-driver git 81877ac8 sha256:21c025219d6ec148a2a0853a7ca2a5ed2099939e27b10bee030f2baafb1013e1
ibm-vpc-node-label-updater git 5d72ced5 sha256:57efa96edcba7f80a364e0432e8cdce5f16ac9f3b24b8d3b42b87e75c82ed1ea
ironic-machine-os-downloader git bcbcd95b sha256:835d837507cc6f1427a4cfaf2c6c569f45296e587a9229c78d19ccc462dfef05
ironic-static-ip-manager git 47200021 sha256:b584074a5f61626d0205e2e68df5695f7f2221cf87368daf5633a23c22787268
kube-metrics-server git bcbf241c sha256:c2c57c95d20a4e40f140287d1b2a6c59d719f4b32d8ad44bf7496aa4bbc1d427
kube-state-metrics git 037b59c2 sha256:026964bbc41824c0e37e7c99b88dfca948a457f99e75f31edbe808268ce812ec
kube-storage-version-migrator git e8749689 sha256:6b22596b31f6f1c4a7a840fb8bfe97d61267d1b94287b1583dc8b0bd706b89dd
kubevirt-cloud-controller-manager git dbaf9ea1 sha256:fa8847da6a0239913e2aa8d605a8dc08f25942ba5ab204efc8366d0650e6b2bc
kubevirt-csi-driver git d3bdbce4 sha256:07251e2511c41d83f5e1d970f61b9e78994b1bb19f8e4d8b94abf201879f47ad
libvirt-machine-controllers git 1e096cdf sha256:47423a28101f4e78b49b17e376b834e7c93d37610654602b8560172ac0ce0a13
machine-image-customization-controller git 97d87657 sha256:3c7cd07feede72a2d8363cb94e4c168b57d25c4ffb07761c5f8576450e5b0681
machine-os-content sha256:9cb036995f72f657410382ac6717dcf2588d73d26f1bb2491c60d49695ec8029
machine-os-images git 9e9c920f sha256:566a549549dc5005b0768c78d1796d6b8770155c42974f6a9a114e314d9f05bf
multus-cni git 05497ad1 sha256:61496be85107a70768f71bc0e1d4abe9a67f2fc3d53449bd8d94b44da8fdae36
network-interface-bond-cni git f91decaa sha256:aef4c038195cea80557677fc6eb095378147d44bbc6664f62ef4249bad401dd2
network-metrics-daemon git 9e217402 sha256:7b4e02668aafe00ace781f07037a69bb24b9003e684fe455c5db58e45f3f38bd
network-tools git 17536c8d sha256:e55890a2686c0d63694a43644a123583e8ed4b84212b050f21508ae1a876c437
oauth-apiserver git 0e158441 sha256:2b5dbab4857a1ddd419b13c22a264dcc655a90512abbe40022d1cfaa5e3e7c28
oauth-proxy git 241a88c4 sha256:c2728f324baf36227168099e4d7bb97cfff52649360e9b599a7d929c8f5a10aa
oauth-server git c055dbb9 sha256:ed7fa1c474d86bf1e4a64488ee04465442d378a4565d2c514e2460d134e6fc09
olm-catalogd git 035d3835 sha256:0cc8d72a7208348ba1c730fb0f3204f3f5888ca5ffb952e5938e56de9cf9c418
olm-operator-controller git 303b954f sha256:8d281c8d60908f47d63e4e2726ee61e09da14c0863cf0660c1deeed2570948e7
olm-rukpak git 5b09cd44 sha256:8576e400f88e9df3511a0f1f9ba11aee71d12b9b79f6b1d17039c2d8e2a597a2
openshift-apiserver git 08f4c422 sha256:fc8f4d24a09e23e902e5c76f9a67b7b04ff2dc5ed06c80e09e53643e25569946
openshift-state-metrics git 1915f645 sha256:07c59f0bcf740b27abab98f09ed9dd1b8409665d6833bcd1423ecc4fccd0b3f1
openstack-cinder-csi-driver git 6ab1226a sha256:c5a6334017325953d0372f3d0d74a7f56ac2cebd92d57a33fa7861b5754bfcc6
openstack-cinder-csi-driver-operator git d0c24077 sha256:fc418deeac556b8af2b9be13e992ab786c2c51bfa7178ed8346a1f58e766eafa
openstack-cloud-controller-manager git 6ab1226a sha256:c52de7e7d10aaa4a8b6fb12033baf3c53d45dde472fbb7435b1cec4ee70174c8
openstack-cluster-api-controllers git 232472ea sha256:b1920304394795cc0a6c40be75488b01b8fb43c096c7e6de0088bdef7dbfa2b2
openstack-machine-api-provider git 396a09ff sha256:9aa4c3ca377242a070e87b1857e5230a8c808053397057af4fc6d4d0d545970f
operator-marketplace git 1f1bc198 sha256:4af55c56892ea381bfa813810435822f42ee5dc50ffa10470975d92491c22857
ovirt-csi-driver git b8d25ad6 sha256:abf43a8e6d2b8680ccffe83642c48fb54596799bc66ec410f2340c6a1b50aeb4
ovirt-csi-driver-operator git e9b0fa23 sha256:8f0e7af66e90b9217ade17f12a8cde823c540f9be50afb1323f63f8bbd46803b
ovirt-machine-controllers git 5d708631 sha256:ed1feb528be7d661db14fcca5322f58b2a306569fa93627d857c5ad317075622
powervs-block-csi-driver git 38bee567 sha256:d1dbb94a4d14aa90222093b0c13ad1a865eb4e728d662ab6241bdefe382a8b33
powervs-block-csi-driver-operator git a3729dcb sha256:7961e3521651b44badf845f46b3bfeb7bbf6a03b0c9e74ca1c086ac98798e7f7
prom-label-proxy git f3f1f5d1 sha256:312d4285f0d2cf6224a7ee24bf7d7d6100bba7ed120ca4599313e5ac79baa0d3
prometheus-alertmanager git 870ade52 sha256:04cbccc66df2ed2fbd726be3198bd973db9dab74c602ae27d3baac6be54b5a40
prometheus-config-reloader git 902436ac sha256:fd69f3c1618ae51d0d93a6549ed0ea4e57a363c094ea3ab4333ef198a306bd2b
prometheus-node-exporter git aed837c3 sha256:30998cf95b60f8ef96d08f37c73ead96a62cb0ca8fc807f53c00c333011cc7f9
prometheus-operator git 902436ac sha256:6fd8f8451d474fe12bd47cb5ddb0851400ba9fe554df82d650a2b74b62787832
prometheus-operator-admission-webhook git 902436ac sha256:c1690bf73dd6a7dd98588c35e5340883f6bacf0634d1e13dc8114cb310f38138
rhel-coreos sha256:b406461b4a1a1c02d795fd49138baa7bc4172ce7a1c6654ae0fd63404a9d9865
rhel-coreos-extensions sha256:67a28236bd37bb8e75d725ffd35e2e9fdb8d6fb99958d085c5b2a5294a7fb9fe
route-controller-manager git c5cc7a73 sha256:5ae1c8c2688cae2cae7f0fca0d077e1ad998c30298dd5d907ab99a47ba948bae
service-ca-operator git 19f312e9 sha256:bcd3d9a1d9515b2439fadde6ea0653fc67b32d1b55d4ab17874a90dfa3eeeaa9
telemeter git 14489f7d sha256:5dac1c61aec5578f36a5907648e1a2710dffb018dfc3675a12c297dfbff5a73a
thanos git 66161ad4 sha256:acaee061012fd50204892699c03922026c73bf766be4f904a735e5bf9cc43649
vsphere-cluster-api-controllers git 56111686 sha256:c8da92cd38a6b4b764d71d211d48d787c411fe0fbebe6f426f1fa9fe5869bcbc
vsphere-csi-driver git 4b15e93b sha256:95ff8695c7ef63635eaa0d77767d78c4617da4ab6b7b508fdea184d1cb204dc1
vsphere-csi-driver-operator git e0d46570 sha256:1c2ab79a2fabb1a90c72c968b07dd5e7926beef9193d2d44ffb41a7fcfb99389
vsphere-csi-driver-syncer git 4b15e93b sha256:3f4d30facb1009ed37e14e197067692fb05dc69b21ddb85701ee5e0becb2abd3
vsphere-problem-detector git 15ed0ae1 sha256:dd72e5d46ea0855bbad0ffd95ebc153db8399f792b8b4cde1ab9cf5f171b65c0

agent-installer-api-server

OCPBUGS-22539: Bump otelhttp from 0.35.1 to 0.44.0 using replace approach (#6858) #6858
OCPBUGS-43022: Update go-jose to v2.6.3 to mitigate CVE-2024-28180 (#6894) #6894
OCPBUGS-42571: Libraries bump to mitigate CVE-2024-27289 (#6834) #6834
OCPBUGS-36577: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#6753) #6753
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-43026: Pick up latest CVE changes by bumping service (#921) #921
OCPBUGS-42301: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#907) #907
OCPBUGS-36779: Reload host inventory on conflict (#891) #891
Full changelog

agent-installer-node-agent

OCPBUGS-43032: Pick up latest CVE changes by bumping service (#803) #803
OCPBUGS-42304: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#786) #786
Full changelog

alibaba-machine-controllers

[[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads #57
Full changelog

apiserver-network-proxy

OCPBUGS-38065: Revert “Agent: Respect HTTPS_PROXY env vars for proxied connections” #60
Update golang Docker tag to v1.23.1 #58
Full changelog

aws-cluster-api-controllers

OCPBUGS-44294: [release-4.15] OSD-25934: Only tag NetworkInterfaces in RunInstances if IAM Allows It #532
Full changelog

aws-machine-controllers

OCPBUGS-47680: fix Associate*IpAddress flag on launch EC2 #122
Full changelog

azure-file-csi-driver

OCPBUGS-39444: bump mount-utils to treat ENODEV error as corrupted mount #78
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-44259: IBMCloud: Ignore failed VPC regions #9183
ARO-12457: Include bootstrap docker config file in go module #9260
OCPBUGS-45207: add chrony.conf file when additional NTP sources are configured #9251
CORS-3753: Allow mocking of the Azure client everywhere #9221
OCPBUGS-44035: IBMCloud: Handle pagination for subnets #9160
OCPBUGS-43760: azure: use filter when listing SKUs #9135
OCPBUGS-42139: add tested instance type for IBMCloud #9032
OCPBUGS-42335: Bump extract-machine-os timout to 20m #9051
OCPBUGS-42180: Add AWS r8g to arm tested instance types #9040
OCPBUGS-39288, OCPBUGS-42011: Openstack UPI - Reintroduce unique resource names #9047
Full changelog

baremetal-machine-controllers

OCPBUGS-46641: Bump x/net to 0.33.0 #227
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-42726: Check cast result in adm prune deployments to prevent panic #1893
OCPBUGS-39426: Ignore pruning when deployment points to replicationcontroller #1865
Full changelog

cloud-credential-operator

OCPBUGS-47068: golang.org/x/net v0.33.0 #806
OCPBUGS-45940: Add AWS region to aws-pod-identity-webhook #802
OCPBUGS-45008: Add retry to ccoctl gcp create functions #795
OCPBUGS-45003: github.com/golang-jwt/jwt/v4 v4.5.1 #784
OCPBUGS-43646: Only attempt timed token credentials on supported platforms. #774
OCPBUGS-43338: Update github.com/sirupsen/logrus v1.9.3 #768
OCPBUGS-41235: List secrets in batches to avoid api timeout #754
Full changelog

cluster-autoscaler

OCPBUGS-45149: [release-4.15] VPA: Update OWNERS file #326
OCPBUGS-40930: update VPA golang.org/x/net for http rapid reset for CVE-2024-8421 #315
Full changelog

cluster-autoscaler-operator

OCPBUGS-41798: set required-scc for openshift workloads #332
Full changelog

cluster-baremetal-operator

OCPBUGS-44046: SCC-pinning for metal3-baremetal-operator #454
[[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads #443
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-45839: relax validation on delete and if failureDomains not configured #336
[[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads #326
OCPBUGS-24632: Prevent rollout due to irrelevant path artifacts #317
Full changelog

cluster-image-registry-operator

OCPBUGS-43918: fix proxy config and leader election test flakes #1150
OCPBUGS-42930: Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) #1136
OCPBUGS-43656: pkg/storage/azure: also check for auth failure error code on deletion #1146
OCPBUGS-42934: azureclient: stop validating credentials when creating the client #1135
Full changelog

cluster-ingress-operator

OCPBUGS-42480: Limit SHA-1 check to the leaf cert in default cert chain #1154
OCPBUGS-41635: Refine logging for accurate infra CR status updates #1141
Full changelog

cluster-machine-approver

OCPBUGS-46034: Ensure trailing dots on DNS names do not block serving cert auth #258
OCPBUGS-46034: Client internal DNS checks should ignore trailing dot #252
OCPBUGS-44705: Client internal DNS checks should be case insensitive #245
Full changelog

cluster-monitoring-operator

OCPBUGS-46570: Add new metrics for OpenShift logging telemetry #2541
OCPBUGS-44006: fix(monitoring-plugin): disable emitting nginx version on error pages #2519
OCPBUGS-43876: Add runbook url for TelemeterClientFail… #2509
OCPBUGS-42586: Exclude windows nodes from kubelet servicemonitor #2487
OCPBUGS-41913: filter alerts sent to Telemeter #2472
Full changelog

cluster-network-operator

OCPBUGS-47633: Prevent live migration process from flapping between step-2 and step-3 #2609
OCPBUGS-45890: Pass transit_switch_subnet options in ovnkube-node pod #2587
OCPBUGS-43716: Skip including default crypto policies to avoid authby issue #2599
OCPBUGS-46149: Remove ip xfrm state when IPsec is disabled #2596
OCPBUGS-43605: OCPBUGS-42244: Exporting environment varialbe NODE_CNI for live migration #2539
OCPBUGS-44973, SDN-5436: Provide support for user owned IPsec machine configs #2576
OCPBUGS-42753: Set mount propagation to HostToContainer for /var/lib/kubelet #2520
OCPBUGS-42865: Add configurable subnets while running hybrid-overlay-node binary #2523
OCPBUGS-43268: Update network operator status for IPsec #2530
OCPBUGS-43099: Configure narrowing=yes for IPsec connections #2529
OCPBUGS-42020: HyperShift: do not use antiaffinity on single replica control planes #2504
OCPBUGS-41947: Add proxy env vars to onvkube-node #2503
OCPBUGS-31447: Tighten the permissions on whereabouts.conf #2324
Full changelog

cluster-node-tuning-operator

e2e:performance: decode to valid kubeletconfig object (#1275) #1275
Fix context deadlines in ExecCommandOnPod() (#1265) #1265
OCPBUGS-44275: Drop sched_migration_cost_ns setting (#1207) #1207
OCPBUGS-44283: right-hand-side profile_dirs take precedence (#1208) #1208
OCPBUGS-42284: Add cluster-wide proxy env file (#1171) #1171
Full changelog

cluster-update-keys

OCPBUGS-43626: keys: Update Red Hat keys to use SHA256 signatures #65
Full changelog

cluster-version-operator

OCPBUGS-45330: deps: bump golang.org/x/net to 0.31.0 #1119
OCPBUGS-44328: Fix desired before sync_worker’s work is initialized #1104
Full changelog

console

OCPBUGS-48048: Update vendor imports to include all PatternFly components #14662
OCPBUGS-47646: fix table combination #14649
OCPBUGS-46430: Plugins that use very old PF4 dropdown or menu components with grouped items have bullets and padding that needs to be removed. #14626
OCPBUGS-45950: Unable to remove finally tasks in pipeline builder mode #14606
OCPBUGS-46389: use TaskRuns results.tekton.dev/record annotation to get the logs #14622
OCPBUGS-45248: Remove ClusterTask dependency in console from Pipelines 1.17 #14564
OCPBUGS-44979: Don’t request user settings configmap if no user has been loaded. #14534
OCPBUGS-37397: RWOP accessMode is not available on OpenShift console UI #14078
OCPBUGS-44998: Add IBM Block Storage CSI driver support for RWX #14536
OCPBUGS-44738: Add flag to hide the pipelines-plugin pipeline builder extensions #14513
OCPBUGS-44355: A value submitted in From view is wrapped with single quotation after switching to Yaml view. #14476
OCPBUGS-42355: Fix TypeError: Cannot read properties of null (reading ‘metadata’) in Topology view #14319
OCPBUGS-43414: Console crashes when ssh is selected in add secret for starting a pipeline run #14401
OCPBUGS-36559: Increase login flow state paramater length/entropy #14422
OCPBUGS-37202: Bump github.com/cloudevents/sdk-go/v2 to 2.15.2 #14073
OCPBUGS-42470: List of default Camel K event sources disappears when adding a custom event source #14331
OCPBUGS-42471: Need to allow blank for Project/namespace when setting SA Subject in ‘Project access tab’ #14332
OCPBUGS-33283: Adjust NAD name to “network-xxx-xxx” when creating #14020
OCPBUGS-42611: Topology screen crashes when completed pod is selected #14353
OCPBUGS-42648: Switch to use annotations as labels from PipelineRuns created through Pipelines as Code is deprecated #14358
OCPBUGS-38764: Fix “Auto deploy when new image is available” becomes unchecked when editing a deployment from web console #14177
OCPBUGS-41991: Values entered into the Instantiate Template form are automatically cleared #14294
OCPBUGS-42384: Fix updating the “Until” field on the Silence > Edit page #14322
OCPBUGS-39343: The filepath including leading slash makes error during parsing devfile using Gitlab #14227
OCPBUGS-42144: Use vCenterCluster value from CM as primary resource #14307
OCPBUGS-38537: Include PatternFly-4 chart styles so they are available for dynamic plugins that still use PF4 react-charts #14158
OCPBUGS-38108: Revert - terminal: use username if uid is not present #14114
OCPBUGS-32793: Fix that telemetry events didn’t incl. an userId anymore #13792
OCPBUGS-38970: DeploymentConfigs deprecation info alert should not present on the Edit deployment page #14195
OCPBUGS-38969: Tooltip on Pipeline when expression is not shows #14194
Full changelog

console-operator

OCPBUGS-46482: Dont disable console when authConfig type is set to None #953
Full changelog

container-networking-plugins

OCPBUGS-37732: Update owners #167
Full changelog

docker-builder

OCPBUGS-48298: skipping some unit tests to avoid failures as they are duplicate #428
OCPBUGS-48281: Add team members to the OWNERS file #427
Full changelog

hyperkube, pod

OCPBUGS-44514: Bump k8s api to 1.28.15 #2132
OCPBUGS-42169: Bump k8s api to 1.28.14 #2091
OCPBUGS-39016: Update to Kubernetes v1.28.13 #2063
Full changelog

hypershift

NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.50 (release-4.15) #5434
NO-JIRA: Update dependency mkdocs-material to v8.5.11 (release-4.15) #5429
NO-JIRA: chore(deps): update konflux references (release-4.15) #5425
NO-JIRA: chore(deps): update konflux references (release-4.15) #5386
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1736729788 (release-4.15) - abandoned #5380
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1736404155 (release-4.15) #5379
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.49 (release-4.15) #5385
NO-JIRA: [release-4.15] Bump golang.org/x/crypto and golang.org/x/net #5371
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1734626445 (release-4.15) - abandoned #5344
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1734497536 (release-4.15) #5343
OCPBUGS-46075: Do not send traffic to local audit-webhook through konnectivity #5274
NO-JIRA: Update dependency mkdocs-glightbox to v0.4.0 (release-4.15) #5327
NO-JIRA: Update Konflux references (release-4.15) #5326
OCPBUGS-47545: Separate CPO containerfiles #5334
NO-JIRA: chore(deps): update dependency mkdocs to v1.6.1 (release-4.15) #5292
NO-JIRA: chore(deps): update konflux references (release-4.15) #5291
NO-JIRA: chore(deps): update konflux references (release-4.15) #5251
OCPBUGS-44522: Add network policies for konnectivity server and ignition server proxy #5120
OCPBUGS-43931: Return the right tagReference on Catalogs ImageStream #5187
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.47 (release-4.15) #5210
NO-JIRA: chore(deps): update konflux references (release-4.15) #5208
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.46 (release-4.15) #5190
NO-JIRA: chore(deps): update konflux references to 7779f9e (release-4.15) #5182
OCPBUGS-44278: Configure OAuth https proxy to dial cloud endpoints directly #5068
NO-JIRA: chore(deps): update konflux references (release-4.15) #5159
chore(deps): update konflux references (release-4.15) #5136
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1731604394 (release-4.15) #5129
chore(deps): update konflux references (release-4.15) #5118
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1731518200 (release-4.15) #5106
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9 (release-4.15) #5110
NO-JIRA: Update Konflux references (release-4.15) #5109
NO-JIRA: chore(deps): update konflux references to 11b7f08 (release-4.15) #5101
chore(deps): update konflux references (release-4.15) #5077
NO-JIRA: chore(deps): update konflux references (release-4.15) #5054
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.44 (release-4.15) #5060
OCPBUGS-44201: add ValidIDPConfiguration condition to report IDP config issues #5037
NO-JIRA: Update Konflux references to fedcfe0 (release-4.15) #5040
chore(deps): update konflux references (release-4.15) #5025
chore(deps): update konflux references to f53fe54 (release-4.15) #5022
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.43 (release-4.15) #5016
NO-JIRA: Update Konflux references (release-4.15) #5010
NO-JIRA: chore(deps): update konflux references (release-4.15) #4974
OCPBUGS-43635: label routes only when HCP router used #4961
NO-JIRA: chore(deps): update konflux references (release-4.15) #4957
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.42 (release-4.15) #4949
OCPBUGS-43468: Use guest DNS resolution in Konnectivity HTTPS proxy by default #4929
NO-JIRA: chore(deps): update konflux references (release-4.15) #4932
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.41 (release-4.15) #4916
NO-JIRA: chore(deps): update konflux references (release-4.15) #4922
NO-JIRA: chore(deps): update konflux references to 674e70f (release-4.15) #4909
OCPBUGS-42881: Let payload generation pick the release for the NodePool #4867
OCPBUGS-42992: Conditionally manage kubeconfig secrets for DNS and Ingress operators #4876
NO-JIRA: chore(deps): update konflux references (release-4.15) #4897
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.40 (release-4.15) #4881
NO-JIRA: chore(deps): update konflux references to 37b9187 (release-4.15) #4850
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.39 (release-4.15) #4807
NO-JIRA: chore(deps): update konflux references (release-4.15) #4815
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.37 (release-4.15) #4793
NO-JIRA: chore(deps): update konflux references (release-4.15) #4777
chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.4-1227.1726694542 (release-4.15) #4766
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9 (release-4.15) #4770
chore(deps): update squidfunk/mkdocs-material docker tag to v8.5.11 (release-4.15) #4769
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21 (release-4.15) #4767
NO-JIRA: chore(deps): update konflux references (release-4.15) #4762
OCPBUGS-41373: CPO oauth idp converter: resolve names before dialing #4746
NO-JIRA: Security fixes for openshift-ci-security job #4751
OCPBUGS-42214: Make guest cluster components use the correct KAS port #4749
OCPBUGS-38059: Add HTTP konnectivity proxy to OAuth server #4497
HOSTEDCP-1956: bump CCO and go-jose version #4697
NO-JIRA: chore(deps): update konflux references (release-4.15) #4719
OCPBUGS-41701: cmd: report server version, supported OCP #4702
OCPBUGS-38065: [release-4.15] Use HTTP proxy for ingress controller #4699
OCPBUGS-41809: copy image-registry AdditionalTrustedCA configmap into HC openshift-config #4706
HOSTEDCP-1896: [release-4.15] Allow setting Kube APIServer maximum requests in flight #4552
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-42438: Reorder static resources to create RBAC first #130
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-36078: UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.15 #87
Full changelog

ibmcloud-machine-controllers

OCPBUGS-36084: Bump dependency for CVE #54
OCPBUGS-43675: IBMCloud: Handle pagination for subnets #48
Full changelog

insights-operator

Ignore previous status when disabling alerts (#1060) #1060
OCPBUGS-45204: LokiStack gatherer (#1057) #1057
OCPBUGS-45044: insightsoperator.operator.openshift.io resource is create-only (#1056) #1056
gather selected clusterroles (#1024) #1024
OCPBUGS-39565: Not able to enable repositories during entitled build in OCP Cluster on IBM-Z (#1015) #1015
OCPBUGS-39395: collect some nmstate customresources (#986) (#989) (#995) (#1002) #986
Add haproxy metric (#983) #983
Full changelog

ironic

OCPBUGS-43953, OCPBUGS-43961: Bump python-waitress [4.15] #605
OCPBUGS-39018: Bump ironic-lib to fix utf8 decoding issue #570
OCPBUGS-38798: redfish-virtualmedia fails on XFusion nodes #565
OCPBUGS-37761, OCPBUGS-39381: Include fixes for CVE-2024-44082 #583
OCPBUGS-38512: set min version for python3-webob #554
Full changelog

ironic-agent

OCPBUGS-39018: Bump ironic-lib to fix utf8 decoding issue #157
OCPBUGS-39381: Include fixes for CVE-2024-44082 #162
OCPBUGS-38512: set webob and bump werkzeug #150
Full changelog

k8s-prometheus-adapter

OCPBUGS-35820: Fix the podmetrics and nodemetrics command #109
Full changelog

keepalived-ipfailover

OCPBUGS-19254: Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #152
Full changelog

kube-proxy, sdn

OCPBUGS-46576: Get rid of deps.diff so it doesn’t keep causing problems [4.15] #646
OCPBUGS-45955: Stop checking ruleVersion [4.16] #644
OCPBUGS-43605: backport fix for network policy during live migration #642
OCPBUGS-42171: fix redundant router-default iptables rule [4.15] #634
Full changelog

kube-rbac-proxy

OCPBUGS-31941: bump golang.org/x/net [4.15] #109
Full changelog

machine-api-operator

OCPBUGS-48105: Vsphere: Handle cloned instance with lost taskID #1321
OCPBUGS-46080: Ensure deletion annotation takes priority and oldestPolicy can distinguish longer ages #1314
[[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads #1288
Full changelog

machine-config-operator

OCPBUGS-46034: Remove trailing periods from AWS provided hostnames #4745
OCPBUGS-44565: Post upgrading from 4.14 to 4.15.36, the observedGeneration count increased tremendously #4702
OCPBUGS-42137: Removal of additionalTrustBundle CA does not remove certificate from node backport #4687
OCPBUGS-44240: Disable ESP offload for OVS attached interfaces #4684
MCO-1341: Backport Telemetry to 4.15 #4648
OCPBUGS-42110: Do not use ‘restart’ for ‘oneshot’ service #4621
OCPBUGS-43582: Panic seen in CI job for MCC pod #4653
OCPBUGS-43575: MCPs report wrong number of nodes when we move nodes from one custom MCP to another custom MCP #4647
OCPBUGS-37704: Make logging configurable for on-prem components #4501
OCPBUGS-32329: Fix configure-ip-forwarding.sh #4324
OCPBUGS-37551: On-Prem resolv prepender to watch for NM changes #4499
Full changelog

monitoring-plugin

OCPBUGS-44393: Manual cherry pick cross spawn 4.15 #277
OCPBUGS-43242: upgrade dynamic plugin sdk to remove vulnerable dependencies 4.15 #218
Full changelog

multus-admission-controller

OCPBUGS-37727: Update owners #88
Full changelog

multus-networkpolicy

Update owners (#58) #58
Full changelog

multus-route-override-cni

OCPBUGS-41804: [release-4.15]Update owners #59
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-37729: Update owners #305
Full changelog

must-gather

OCPBUGS-46451: Support gathering IPsec data #471
OCPBUGS-43057: [Relase-4.15] Multus is now a Pod and will be captured by normal #450
Full changelog

nutanix-cloud-controller-manager

OCPBUGS-22078: bump golang.org/x/net to v0.17.0 #40
Full changelog

nutanix-machine-controllers

[[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads #81
Full changelog

oc-mirror

changes the owners file (#1014) #1014
OCPBUGS-48513: e2e: use same version of crane as in go.mod (#1022) #1022
Full changelog

openshift-controller-manager

OCPBUGS-48280: Add team members to the OWNERS file #359
NO-JIRA: cleanup root and app OWNERS #348
OCPBUGS-32871: replaces deprecated square/go-jose wtih go-jose/go-jose #333
OCPBUGS-41949: Add adambkaplan as approver #291
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-46926, OCPBUGS-46933, OCPBUGS-47313: x/net bump to v0.34.0 [release-4.15] #940
OCPBUGS-46479: CRD upgrade existing CR validation fix #917
OCPBUGS-42114: add optional schema migrations; default to olm.bundle.object instead of olm.csv.metadata #874
OCPBUGS-41981: (fix) registry pods do not come up again after node failure (#3366) #868
OCPBUGS-41819: [4.17] adds paginating lister for evaluating CRs’ upgrade fitness versus new CRDs. #864
OCPBUGS-41598: Fix e2e flake: upgrade CRD with deprecated version #862
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-47799: Let OVN-northd bind remote ports #2407
OCPBUGS-44708: Add hybird overlay pod IPs to the namespace address_set #2399
OCPBUGS-45097: pin libreswan to 4.6-3.el9_0.3 #2374
OCPBUGS-44782: Bump ovs to 3.1.0-137 #2359
OCPBUGS-42943: Fix egress gateway pod cleanup for remote zone pods. #2342
OCPBUGS-41838: Use more exact name match when deleting static routes to HO nodes. #2298
OCPBUGS-42780: Add subnet overlap check for transit switch subnet #2313
OCPBUGS-41340: Delete EgressIP LRP stale nexthops when node is not found #2288
Full changelog

powervs-cloud-controller-manager

OCPBUGS-36106: UPSTREAM: <carry>: Fix go-retryablehttp CVE 4.15 #74
Full changelog

powervs-machine-controllers

OCPBUGS-41977: Update go.mod to fix CVE - 4.15 #85
Full changelog

prometheus

OCPBUGS-43669: fix(discovery): Handle cache.DeletedFinalStateUnknown in node informers’ DeleteFunc #233
Full changelog

tests

OCPBUGS-44106: Adjust createDNSPod() to support hypershift dual-stack test #29257
OCPBUGS-38086: vertical scaling test should not rely on CPMS replicas #28985
OCPBUGS-39136: Bump timeout for the pod-network-service endpoints check #29053
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-37659: Bump otelgrpc to v0.49.0 #71
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github