4.15.59

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.15.59-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.15-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.15-micro Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.15-micro Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.15-e2e-azure-ovn-upgrade
- fips-scan Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.15-fips-payload-scan
- gcp-ovn-rt-upgrade-4.15-minor Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.15-upgrade-from-stable-4.14-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.15 Succeeded periodic-ci-openshift-hypershift-release-4.15-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-dualstack Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-metal-ipi-ovn-dualstack
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.14.19, 4.14.21, 4.14.22, 4.14.23, 4.14.24, 4.14.25, 4.14.26, 4.14.28, 4.14.29, 4.14.30, 4.14.31, 4.14.32, 4.14.33, 4.14.34, 4.14.35, 4.14.36, 4.14.37, 4.14.38, 4.14.39, 4.14.40, 4.14.42, 4.14.43, 4.14.44, 4.14.45, 4.14.46, 4.14.48, 4.14.49, 4.14.50, 4.14.51, 4.14.52, 4.14.53, 4.14.54, 4.14.55, 4.15.10, 4.15.11, 4.15.13, 4.15.14, 4.15.15, 4.15.16, 4.15.17, 4.15.18, 4.15.19, 4.15.20, 4.15.21, 4.15.22, 4.15.23, 4.15.24, 4.15.25, 4.15.26, 4.15.27, 4.15.28, 4.15.29, 4.15.30, 4.15.31, 4.15.32, 4.15.33, 4.15.34, 4.15.35, 4.15.36, 4.15.37, 4.15.38, 4.15.39, 4.15.40, 4.15.41, 4.15.42, 4.15.44, 4.15.46, 4.15.47, 4.15.48, 4.15.49, 4.15.5, 4.15.50, 4.15.51, 4.15.52, 4.15.53, 4.15.54, 4.15.55, 4.15.6, 4.15.7, 4.15.8, 4.15.9

4.15.58 (changes) - F S F S S S S
4.15.57 (changes) - Success
4.15.56 (changes) - Success
4.15.45 - Success
4.15.43 (changes) - Success
4.15.12 (changes) - Success
4.15.3 (changes) - Failed
4.15.2 (changes) - Failed
4.15.0 (changes) - Failed
4.14.58 (changes) - Success Success
4.14.57 (changes) - Failed
4.14.56 (changes) - Failed
4.14.41 (changes) - Failed
4.14.27 (changes) - Failed
4.14.20 (changes) - Failed
4.14.18 (changes) - Failed
4.14.17 (changes) - Success
4.14.16 (changes) - Failed
4.14.0-0.nightly-2025-10-30-030329 (changes) - Failed Success

Loading changelog, this may take a while ...

Changes from 4.15.45

Created: 2025-10-31 09:36:21 +0000 UTC

Image Digest: sha256:855c4f8fd6db0a6c7b7ae0f0e02ca5b51720cbac0911725963fa7bc63b943d21

Components

Kubernetes 1.28.15
Red Hat Enterprise Linux CoreOS upgraded from 415.92.202501281917-0 to 415.92.202510280126-0 (diff)

Removed images

ovirt-machine-controllers

Rebuilt images without code change

agent-installer-utils git 33b7d855 sha256:008744686fcf83e9d9d4abd55bf1622d0e9f886570613835d29ac3c8cf9ad648
alibaba-cloud-controller-manager git abf4fa96 sha256:73fb4d147dd798f244e7c6512084a7643985ed73163c07160cfa2b03566de6ea
alibaba-cloud-csi-driver git be4888d3 sha256:557527d76a00f3afdaf2f146bed0d0d28224d8a063b1c9f88431ebb40300be0c
alibaba-disk-csi-driver-operator git 41b367ae sha256:6de7f07ca16a08f783899c687c355837fbe0cde28b8c5c25939524074f717665
alibaba-machine-controllers git f7f5eed8 sha256:d7db2153c58f0081db7446ed10fef94f0dce66b4dc909e65ba2c305161fe06b7
apiserver-network-proxy git adccbd5c sha256:30ff8f03b8eeb4ab60a86f9d72e596712171f4dfbbe7f2f74e747b596c05e3fd
aws-cloud-controller-manager git fd77d92c sha256:680aeaabf1d04ec1242ae9ab0fc577ac095c170301a24cc07b2c20c06d119fb8
aws-ebs-csi-driver git 7043c1cc sha256:6a8d392a88b7be09b2549e4cb5469a5ef748853072bb5354ac34d1c20a9690b0
aws-ebs-csi-driver-operator git 2a2b9dd1 sha256:23fc1a55b530e3104c8674947f67e4e750b9b4fee1e71881148f5f532b558bbb
aws-pod-identity-webhook git 13385034 sha256:809682a7f5db22c4632cde8ec3cd0af3eb3b4a64bbdf95b7330b51acfab69925
azure-cloud-controller-manager git 0d799a26 sha256:a3728c574b252b0830bd1df8e3e92a48c3121276214870a95c76ac12c108aa6a
azure-cloud-node-manager git 0d799a26 sha256:3ed7bf4ae76b1b3deacbfda0f18856b2c149a827c934c68fdb7348387c3148fb
azure-cluster-api-controllers git 44832d2d sha256:f528b1517558b6aefda5c2bf23022ec918207238a0f4b759bafd7d54d0691691
azure-disk-csi-driver git dcb7e1c7 sha256:4899f0b1592431c277642bc16581a656d5e717067da2874bac7c00fa403c06d3
azure-disk-csi-driver-operator git 160cf624 sha256:5971fce447489bb15c3cc4cd9996e321cd8baab37ee170ba335b6ace45bd14f1
baremetal-machine-controllers git ec953728 sha256:9ae218f40503da16a9e065d8812c303a9e349d77be1f1daef1118bb0f0e1ef42
baremetal-runtimecfg git 1fbb2c0c sha256:d223ef0499483832b4f1efec4e1128f8dca303de5fb3ef18a1e9f9817cd4d534
cli git 82316376 sha256:b982e659668e0b6d9feddc5664b34c92de8626965fb973af3fae7a7f3f1f0057
cli-artifacts git 82316376 sha256:8d5b7a2c9c54b30056336db174451e0504a6b70a3ff9376c1d6bb87788f90103
cloud-network-config-controller git 6864da06 sha256:ed014578e5710249c89391fdb17423ffa5e6137de2308facd20d4c45981b4adb
cluster-authentication-operator git 7aaa40eb sha256:6ed4590215d494f1d630556163a47ebfab26a0ea69971862c9864ab0bb370b08
cluster-autoscaler git 89149896 sha256:a05161338c6d7bffbb1b294f00dfe1d3a53cc2f7a97553cf4e050315021b75ba
cluster-autoscaler-operator git 8425d88b sha256:38d300d9926a4fcde7999191efc6d99d6154baed0baa00f3f80db8234ed1f7d2
cluster-baremetal-operator git 6e850eed sha256:1c78469e53ccad316db280cbd0ff4f845a2db0c9986fd7ed101e08ac5c5b8db2
cluster-bootstrap git 0849c462 sha256:c8be479b9223b21c389fde445e2e5d1541a7e60267fe07bfb53d64b6afb00999
cluster-capi-controllers git 2053e13c sha256:8cdf51b679ab14cc5f9ed2d8265e7959b577d3ca1ccd0d698a6fabe5a11ab4d3
cluster-capi-operator git 203435ef sha256:cbed4b61ebdcecfb4c459c7ccfed58a1db918bff994222f639bf2aba73def0d6
cluster-cloud-controller-manager-operator git 56181136 sha256:7f03465e59f1584ad52fed99f2ba8bbad123d1ab885a467fd69bac0ccb9a0923
cluster-config-api git 0a58f8c3 sha256:ed5146205b69538fd31b42b0114cf60015a47f872743a73077ef971d64d64c58
cluster-config-operator git 0b4c69fd sha256:4aa00ab509205843236296fabd03a2c49e021eb135a91da0590c67b79694cd94
cluster-control-plane-machine-set-operator git e1b692b1 sha256:bc3e093b2d1a5e3962b9f02707aaff0d7e0de545a4b7a1887e79538aa2155fc8
cluster-csi-snapshot-controller-operator git 65dbb12b sha256:6251627dcc972c58a39485c410c8a264d140b876f8b47765687a310ee4d28524
cluster-kube-cluster-api-operator git 128d8e08 sha256:1d2c5714949f40e168358c505c0de750f5e2dc7dd0b2e99d31fe3af4cf1e864f
cluster-kube-controller-manager-operator git ee8cf525 sha256:1bbed360cd870566238b6c800e8522f04f02d16712c303eecc361af33fff436e
cluster-kube-scheduler-operator git f054dfaf sha256:f2c98b4bc7bcbb9ade56ab4cfe5d44c32bc140b52a7ee9c5b9cf5957b7ada1ad
cluster-kube-storage-version-migrator-operator git e76cea5f sha256:4896946bdba46feed18276c4f29fe059ede4f60138c966fe9113aa93bbeadee4
cluster-machine-approver git 863813ec sha256:74fb3a4932ce350cd4da33d57a4fab1269bdb5e446fe8f93fada1b304a622ce6
cluster-monitoring-operator git 0496cad1 sha256:dbce5221138c15a4aef2f65c3db8bab5ef127c48f3a446ae085a203d8591730c
cluster-node-tuning-operator git e828bd93 sha256:644f19b57dde50e4588f5cf1c4d72ac8d49dfb396b7c04d59dcdf6e27bb12017
cluster-olm-operator git a7ba8987 sha256:ad58b2585ef510c8f4c8b074085bb6dd3e17ed3248d7b86ad3185c76ec33b899
cluster-openshift-apiserver-operator git 078c81f6 sha256:fcd4846ca63a5c2941046c19d96de0bb06ad4205c4f980c844dbd0d98df00d86
cluster-openshift-controller-manager-operator git 1ae0ba75 sha256:154bd45ca42951efb3bcca14a5fa0bf055fe8c27d2a58e593e11d24abe2f98bd
cluster-platform-operators-manager git 37a0a919 sha256:33eac7aa9a8fc302b48f4541dbbef960aed461f73e42e413c5eeb25691a73905
cluster-policy-controller git cc48f315 sha256:669d559563c8ce25ab835bfbb6d05b7df7fca88a0ea9374d50bf8373265a8bb2
cluster-storage-operator git 4c2b89d6 sha256:8b09b7ddb7949a9db7af4e4d1d8f15083cca65cd704b707d93a7d21a9c9e3c13
cluster-update-keys git 802233d8 sha256:26506524326c64baf2e77da8073ce297d72a583d6ae194516bcb6a32a273059a
configmap-reloader git 617398f5 sha256:b562637dc56ed32a75a444ab2f31d75e7741ccea5b8a3c004df4a42ab1270d6e
console-operator git 91f5c970 sha256:2526b6065d1ccfe1e36fe5b48958a22737b1243b3f0df10ee3d27e0a62fe340d
coredns git 1326282c sha256:287c800f33b7bb17969c93891edc40646cc48acc9b741138795b7f041c82bbc8
csi-driver-manila-operator git 9bcf382e sha256:1a94c20db46917d931dfcbe19595ab6b4ace22f81ad34ea6d329eff8def1f0da
csi-driver-nfs git d032dc10 sha256:299842fdbadf955534b257f3c63126a79fb14a9856c4530df09debde212a2384
csi-driver-shared-resource git 260a085a sha256:170dd5cd1770f1c560d2d0756a619a220d15c91c8d8d51ea322818be40603ed6
csi-driver-shared-resource-operator git 8d017b7f sha256:0b264678a566eb387b44b5e8e2ab61c5e12b594aff4db75532d9fc8cf0cb3a78
csi-driver-shared-resource-webhook git 260a085a sha256:8a13fe639a4db964e30cced1f77214a915489f75b2634356259a03f6f280d856
csi-external-attacher git f806f266 sha256:0a67e292a5b75f818272a3302f4d2d334ec57e5e0acdee47fc6da52625e6fb60
csi-external-provisioner git ce5a1a33 sha256:5e9cda0da90e658e08a08c69480c461701b03323aad484d887f12fa3e11bc9bf
csi-external-resizer git 3b4236d3 sha256:0e598a4bc8097ed172a8e3e8058080ae3db89733c02644047e46cfb65b7d3b76
csi-external-snapshotter git 4f2955c7 sha256:ec1000141bbcf65e1e79f4dbfcc97968b05cb1189cc35974ecda36bd2b8d302a
csi-livenessprobe git 240bb8c0 sha256:2cb477ddcc46f5b57b4e81a8ad1163c0d3a13676e7079647dd2ec4b94281e9b8
csi-node-driver-registrar git 9005584e sha256:a4b5e6597c79fd99492ba89777a51a9a0fa767a9b174aab5ad38eb6f7a195634
csi-snapshot-controller git 4f2955c7 sha256:69a9487a24d400bbf3ab5bed205f622267fd19783a1c159669359d706a76c3f7
csi-snapshot-validation-webhook git 4f2955c7 sha256:8c3c79a3da45f6960f8cb68074488f8c1a97acd2637deab99b23cf5feb3dd831
deployer git 82316376 sha256:4eb82f07e01b4f66e34f933fc4c1ea0f09a8e227a216a732290e62db12641ced
driver-toolkit git 7a448c2e sha256:63b6550720f82b5a98783901d776f3866075896b661958cff3d8ddff44dec214
egress-router-cni git f8ec690b sha256:6e0a2c775267d2f07817788a3ecbdccadbe6377e4d18a0d9dd9c0f0d40c77eaa
etcd git a7005ef1 sha256:b8901c06e9ed87c8998625b99ee186ea5ac8a0a89c0263e210fc77f6b02fc36d
gcp-cloud-controller-manager git fc50272a sha256:92e8805702148fe8bd56ce06cd18da14eca209207633ecd89b3b3db27e784d2e
gcp-cluster-api-controllers git bad54034 sha256:fb673b9cd4bf5792fb1cbdc40d8ae3787b0c371157078ffbd959748ab0c19db6
gcp-pd-csi-driver git 856ee3e2 sha256:a44db4753020da0574e7b2cb486ed690ec6d452d9c9a86f1a35155b3203c3f14
gcp-pd-csi-driver-operator git 3b91ee31 sha256:b1aa6c712d6b2c05c5819d89c96f837a164cc978670d9ce0ca3676c2bf327ab7
haproxy-router git dc38fbd8 sha256:d74b26dbce57d591c118a178762b14e8d3663efedb7e3bf423c134c04361b4e9
ibm-cloud-controller-manager git cc0d5415 sha256:d273edcc6cdb663d54cec22fc7947d30417ebde92772f7613ee71df7e245f8c6
ibmcloud-machine-controllers git 6846b9a7 sha256:3b57a94699fd5667ccb1cade8f56ced7b4c9bc06969da3a9036fe4963a6bec0a
insights-operator git 975bba98 sha256:03d49f30a46c3674fc120b13433e13a2fad082c984014f459ac7f10ab3e9bf97
ironic git 3bf0111b sha256:4f68de2634b2f3650f98ebcda1c5c104a7941710c3ebe83ceb8fff4a0b697b82
ironic-agent git d339f3ff sha256:7f6a13a46ae75cda6eb2d5688c851cbbadb3193ac642494bee3d5d2c5e6ea8fc
ironic-machine-os-downloader git bcbcd95b sha256:4463bd38f33b06d584ebab15f5e2742693130e299590c038416f833e6ac313c5
k8s-prometheus-adapter git 34e20193 sha256:c11fa3e642fa099dd30b99375606f82a4cfbe67017d832f32c8fb1ed58a5aa76
keepalived-ipfailover git 87c23b5a sha256:f3d8cd4459b8271e7718d4c5e97f92cd7db4776e719da5d7c04025e18a622e60
kube-metrics-server git bcbf241c sha256:a3c239970ebc8ba8b547dec72f2f6aeddc12cd19c18d75c493abc85285da48fd
kube-rbac-proxy git 9308e7f2 sha256:a083d6d53630f47a8503a45b639ae5c567d1f724096d1f729082bfdb9d760585
kube-state-metrics git 037b59c2 sha256:eed72f0b204935fc71bbf10495f0e5985e5049bbfada39fe8afa8a60d12833ea
kubevirt-cloud-controller-manager git dbaf9ea1 sha256:a82429314b1c0785c2d46c99440175d0ac8311bec3f31da3418340a2a0a55ac2
machine-image-customization-controller git 97d87657 sha256:d7c0d00e80632f5acfb1c3bc82e579be6b79e15817540e9c91cd6b3a1b3f6ac8
machine-os-content sha256:dff142ff2ae5fc86d5e7f98e2d700990b3a4a7b1c92e3591f7a635b8b119d054
monitoring-plugin git 1217bc1e sha256:cb498e9708e578bbd9feda69340a843f0099ea49abbf4cc88524196c6d5a85b0
multus-cni git 05497ad1 sha256:e7b0213d1a1a9dbd9921ee545de41c263078dd3ebb1f838dfe150e73fb51ed2d
multus-networkpolicy git b377b4b5 sha256:e090cfadfbd9d9587a006ea68407fafb1673b93d6c1f6e77efdd2c658a503669
multus-route-override-cni git 1ccafc34 sha256:4d213b4b7b581e6ca449fa12678b4b75b06b938d16c76c054910bf71c2b65168
network-interface-bond-cni git f91decaa sha256:805ea7427ea3131fab72e43f80c34db682ba3e3603b438f1315146f24f706c01
network-tools git 17536c8d sha256:e109e2c17a3686bad9121716df7ffc7d6ec82419f28b24fad531f96f86df0f32
nutanix-cloud-controller-manager git 040d4e01 sha256:87017af27e74c380225ffcbcc961d2d345b5d997df552a9248d07d8230dab3fd
oauth-apiserver git 0e158441 sha256:a7672e4823bc698d02c4d241c84a57a523b13a267850baf8c1ec44150eac7f7f
oauth-server git c055dbb9 sha256:366278f589efb7c0ff2bdd800b0f6547b8be6acd259782192df2b10a9754945e
oc-mirror git 55368163 sha256:0e033237871e3e7ce2f0c11741dd6ffade3419f95b6b8600f7cb0a024bc89e0d
olm-catalogd git 035d3835 sha256:b2acd795681ddef65394e303c06e022ff54e1e0c53fcb341c381197f7e520b6a
olm-operator-controller git 303b954f sha256:8dd21817e31ef713af9cd67c004c8a6118b62c1dc557f963f28244920ffa9f5d
olm-rukpak git 5b09cd44 sha256:75460db975618d0dfc82f509725522f8151b49a00a210615dc8cbc97f6ed2fb4
openshift-state-metrics git 1915f645 sha256:8ba5133f9697e04a14d866027d8f342efe3bb9732857720393d9bf3e0effa09e
openstack-cinder-csi-driver-operator git d0c24077 sha256:c64fbe8a063ea2f7897ffd9bc2c1882c03c406611f8dffe9b9a885f3e75f105c
openstack-cluster-api-controllers git 232472ea sha256:7b0a4c796681ab9dafc0a708dead6e0a8db3166ec40e380dfb02978eadc7d2e5
openstack-machine-api-provider git 396a09ff sha256:2665982a7b3d16d59f3e11ddf65b1016828d746db8aba950d9094cbc5fc3cd26
ovirt-csi-driver git b8d25ad6 sha256:febeb3a8a0fce4ca039322544cbfeb0c6f60723440ec6c2f60b12b390373418c
ovirt-csi-driver-operator git e9b0fa23 sha256:5504bd98506b057146c643c36a6581cb2be8bcbf82787bef530fb6caf4c16e21
powervs-block-csi-driver git 38bee567 sha256:21d73647d434cea2c398a5c30ee2f92b6f5aee3b1106b961b1d50e8a18825f1a
powervs-block-csi-driver-operator git a3729dcb sha256:09b9ae640fccd4a948ce4835dbe29f65be91484aba6c2afc751761aa9dca541b
powervs-cloud-controller-manager git 1d6a7ed9 sha256:80be0fc1705791db62dbf7b2385021b8e67d0d21a94815fff91c3e87d6e6e238
prom-label-proxy git f3f1f5d1 sha256:e41eb9ea6d0e646c40f43923678913904a2fc8f5f4fa1e9e458c807632e82c9a
prometheus-alertmanager git 870ade52 sha256:e7d08849926e92a0f9516b383ef71dcc2a6e368405f1d5f330042c62fa10685b
prometheus-config-reloader git 902436ac sha256:e6a298a5a4b32e8908f2ea8207f673d1c7f63d654ebd18a7c3dc03bec7019240
prometheus-node-exporter git aed837c3 sha256:f1a979149507ede702bcdcbdc5e49c667b52cb2f5e5f1cc9e0ca18602ba35772
prometheus-operator git 902436ac sha256:c04c13d41b67bf5462d1ac2bbed4b95a53a2b2bbd293b32e7478b5cdd8ec5d5f
prometheus-operator-admission-webhook git 902436ac sha256:b937da6f29b34bba141df41775d61d33df4c81c41a488c0f717d7b05cc85c453
rhel-coreos sha256:1eb3527cfaa5ee0009c3c07f003f07631b2059ef8b6669e65006f07789aad72e
rhel-coreos-extensions sha256:47ae096626aa342b4802ac1f5d374ee02711f39e4c8c88f65f4f9e5d81192637
route-controller-manager git c5cc7a73 sha256:1e22e06efdd0d73b88ec841815eb6ab7c0f1324b98ea6d3c92910c2e9a592c5b
service-ca-operator git 19f312e9 sha256:d23c4af5d88f5f753bf395b24bf1d168570e5f6036c6a6ae8b1bba6bed7ecbc3
telemeter git 14489f7d sha256:0c49b379e40a6fe3a09a21dac8005fd64c3d09c985dc728e1c7f4e57afc464c2
thanos git 66161ad4 sha256:95b856a7497da1ae18ce5789262957edc94bc4cd87a6913e6d16d1cf9154e1de
tools git 82316376 sha256:a20f2c0440231d57eb8db827564604dad20c3656c39acdab469d15ae5ef37c8b
vsphere-cloud-controller-manager git 81ad52ad sha256:435629696ca8750b352c890af863b85ecc6680b8749006fbb56cfc8957db0a25
vsphere-csi-driver git 4b15e93b sha256:5a28ee6abd396c5d957fa863a15cdc834c72a792d895a28415900cafa85c173a
vsphere-csi-driver-operator git e0d46570 sha256:8c60dbf477a0e750d0e4895ae8eda21a7ca74b6ea06e8b428d6eb0e3acccf63a
vsphere-csi-driver-syncer git 4b15e93b sha256:25f55cdb3eb8a59fc5d2f5726a71748bf2d8005307025d16646889342829c8ec
vsphere-problem-detector git 15ed0ae1 sha256:98cdda546009cda7d6a4539bac65d2ac6b365efa697d4e040556ae758235e9c2

agent-installer-api-server

OCPBUGS-58633, OCPBUGS-58638: Bump glog to v1.2.5 in release-4.15 (#7905) #7905
OCPBUGS-54402: Bump go-jwt to 4.5.2 to fix CVE-30204 (#7487) #7487
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-58643: Bump github.com/golang/glog pkg version to 1.2.4 (#1189) #1189
OCPBUGS-53714: Bump jwt to 4.5.2 in release-4.15 (#1092) #1092
Full changelog

agent-installer-node-agent

run go mod tidy / vendor #1020
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

aws-cluster-api-controllers

OCPBUGS-61943: UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It #573
OCPBUGS-58668, OCPBUGS-58673: bump github.com/golang/glog to v1.2.5 #562
Full changelog

aws-machine-controllers

OCPBUGS-63141: client: re-use a single file for building the session instead of randomly named files #153
OCPBUGS-63141: revert: client: re-use a single file for building the session instead of randomly named files #150
OCPBUGS-63141: client: re-use a single file for building the session instead of randomly named files #143
Full changelog

azure-file-csi-driver

ART-13080: Regenerate go.mod to fix build failure #94
Full changelog

azure-file-csi-driver-operator

OCPBUGS-60544: add tag matching to Azure File storage class #110
Full changelog

azure-machine-controllers

OCPBUGS-56657: Fix failure when attempting to modify immutable availabilitySet #150
OCPBUGS-53226: dynamically setting the amount of fault domains #134
Full changelog

azure-workload-identity-webhook

OCPBUGS-53794: github.com/golang-jwt/jwt/v4 v4.5.2 #34
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-62849: Release 4.15 bump terraform provider azurerm #10007
OCPBUGS-62410: Make swift containers removal not fatal for UPI. #9978
OCPBUGS-60497: update resolv.conf every time on bootstrap node #9885
OCPBUGS-39416: OpenStack: Install CI dependencies from rpm #9103
OCPBUGS-54353: aws/edge/byovpc: tag edge subnets with shared value #9612
OCPBUGS-54367: IBMCloud: Move to IBM TF openshift fork #9614
OCPBUGS-45961: Update upi references to api-internal #9298
OCPBUGS-50994: Bump terraform-provider-google version to v5.37.0 to fix consistent issues during cluster creation #9509
OCPBUGS-41815: Validate MTU for custom network #9294
OCPBUGS-28706: [azure] update tested x86 instance type on 4.15 #7966
OCPBUGS-47716: [release-4.15] Power VS: Create region-zone-sysType hierarchy #9340
Full changelog

baremetal-operator

OCPBUGS-53336: BMO can expose any secret via BMCEventSubscription CRD #408
Full changelog

cloud-credential-operator

OCPBUGS-60974: ccoctl: aws to use proper issuer url on subsequent runs #910
OCPBUGS-58678: github.com/golang/glog v1.2.5 #894
OCPBUGS-53417: github.com/golang/glog v1.2.4 #844
OCPBUGS-53818: update github.com/golang-jwt/jwt #840
OCPBUGS-51540: Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #833
Full changelog

cluster-dns-operator

OCPBUGS-52499: [release-4.15] Add runbook_url for CoreDNSErrorsHigh #432
Full changelog

cluster-etcd-operator

OCPBUGS-53506: fix CVE-2025-30204 #1404
Full changelog

cluster-image-registry-operator

OCPBUGS-53866: bump github.com/golang-jwt/jwt #1220
OCPBUGS-51596: bump golang.org/x/oauth2 #1211
OCPBUGS-51264: ensure that storage names don’t end in dashes #1183
Full changelog

cluster-ingress-operator

OCPBUGS-49392: Block Upgrades in release 4.15 for CA-Signed Certs Using SHA1 #1172
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-50661: Increase waitForFallbackDegradedConditionTimeout #1806
Full changelog

cluster-network-operator

OCPBUGS-62980: Update CNO reviewers/approvers #2817
OCPBUGS-56649: Fix live migration with feature migration configured explicitly #2715
OCPBUGS-36688, OCPBUGS-43099: Unexpected Behavior During Cluster Upgrade for the ovn-ipsec-host pods #2658
OCPBUGS-53282: Not update status.migration of the network.config CR to empty #2669
[Release 4.15] OCPBUGS-51208: Use applyconfigurations for updating network.oprerator status #2653
Full changelog

cluster-samples-operator

OCPBUGS-55475: Adding mutex to func createSamples on handler.go #634
OCPBUGS-54481: add rhdmalone to owners #623
Full changelog

cluster-version-operator

OCPBUGS-50591: Set openshift.io/required-scc: privileged annotation in version pods #1152
Full changelog

console

OCPBUGS-44159: bump dompurify to latest #15592
OCPBUGS-60672: Secret key with binary file changes when edited via Console #15422
OCPBUGS-59997: Remove the devconsole backend common internet proxy and replace it with dedicated ones #15359
OCPBUGS-59564: Add flags in console static plugin for all the components of this epic #15306
OCPBUGS-60029: fix bug where / in console.tab/horizontalNav href brea… #15353
OCPBUGS-57521: Debug pod logs are not accessible when debugging a node via OpenShift Console #15181
OCPBUGS-58223: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15221
OCPBUGS-57097: Add all files to vendor regardless of gitignore #15134
OCPBUGS-45257: Enabling topology e2e tests on CI #14721
OCPBUGS-55733: fix bug where operator appears twice #15021
OCPBUGS-55174: Add missing pipelines plugin name to known plugins #14982
OCPBUGS-54673: Added token to proxy header #14943
OCPBUGS-54252: Update the monitoring topic used by the console team #14904
OCPBUGS-53138: fix run time error when no completed version exists #14879
OCPBUGS-53055: Show Observe section without PROMETHEUS and MONITORING flags #14867
OCPBUGS-52344: fix alert rule link #14828
OCPBUGS-51332: Do not pass CSV name to operand list page when an exen… #14800
OCPBUGS-49849: include external labels so silenced alerts not displayed in notifications #14718
Full changelog

container-networking-plugins

OCPBUGS-55948: Check error returned by ipv6 SettleAddresses #190
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-58885: CARRY: don’t ignore json files #342
OCPBUGS-43375: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.28 into release-4.15 #297
Full changelog

docker-builder

OCPBUGS-58141: S2I build cpu limits observed by assemble are limited to 1 cpu #477
OCPBUGS-42917, OCPBUGS-43294: Bump buildah to 1.33.12 #442
OCPBUGS-43188: runc library bump to 1.1.12 #436
Full changelog

docker-registry

OCPBUGS-53650: bump jwt and oauth dependencies #433
Full changelog

gcp-machine-controllers

OCPBUGS-55410, OCPBUGS-55411: Disable shielded VMs for non-UEFI disks #117
Full changelog

hyperkube, pod

OCPBUGS-59147: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2358
OCPBUGS-59147: UPSTREAM: <carry>: disable some legacy cloud provider Azure tests #2359
OCPBUGS-52183: UPSTREAM: <carry>: kubelet/cm: fix bug where kubelet restarts from missing cpuset cgroup #2227
OCPBUGS-53139: UPSTREAM: 129180: prevent unnecessary resolving of iscsi/fc devices to dm #2244
Full changelog

hypershift

CNTRLPLANE-1266: Drop extinct mce-2.5 pipeline #6655
CNTRLPLANE-1232: Move CPO pipeline to hermetic builds #6601
OCPBUGS-58506: [release-4.15] Add missing service network DNS entries to KAS cert #6394
OCPBUGS-57553: Add proxy variables for the MCD Pod #6293
OCPBUGS-57121: Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs #6231
OCPBUGS-46467: Consistently look up and dial cloud API hostnames #5300
OCPBUGS-52590: Honor proxy vars in the util insecure http client #5791
CNTRLPLANE-920: Konflux build pipeline service account migration #6086
CNTRLPLANE-920: Konflux build pipeline service account migration #6081
OCPBUGS-55266: [release-4.15] Add konnectivity-proxy sidecar to openshift-oauth-apiserver #6070
OCPBUGS-51800: Fix golang crypto dependency go.mod replacement #5995
OCPBUGS-53898: bump golang-jwt v4 and v5 #5908
Red Hat Konflux update control-plane-operator-4-15 #5955
ART-11792: update go mod dependency for konflux #5923
OCPBUGS-51729, OCPBUGS-51800: Bump dependencies to OCP fork in backports #5902
OCPBUGS-50867: Prevent IgnitionServer from flooding the API server with patch requests #5633
OCPBUGS-52992: [release-4.15] OCPBUGS-52506: refactor aws identity health check into new controller #5815
OCPBUGS-52896: Make managed-trust-bundle optional #5813
OCPBUGS-50699: add region to AWS creds passed to operators managed by CPO #5669
NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.6 #5729
OCPBUGS-51253: OCPBUGS-50692: Fix IsIPv4 function identifying also addresses instead of CIDRs #5701
OCPBUGS-52172: [release-4.15] Add HostedCluster additional trustbundles to konnectivity-https-proxy #5722
NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.5 #5683
chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1739420147 #5624
NO-JIRA: chore(deps): update dependency mkdocs-material to v9 #5642
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1738816775 #5576
NO-JIRA: chore(deps): update konflux references #5588
NO-JIRA: Red Hat Konflux update control-plane-operator-4-15 #5338
NO-JIRA: chore(deps): update dependency mkdocs-mermaid2-plugin to v0.6.0 #5589
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.3 #5586
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.2 #5577
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-58739: bump github.com/golang/glog to version v1.2.4 #107
OCPBUGS-56064: tech debt: rework vendor patches #92
OCPBUGS-53906: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #85
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-59775: [IBM VPC] set offlineExpansion to false in e2e test manifest #150
Full changelog

ibm-vpc-node-label-updater

OCPBUGS-56064: tech debt: rework vendor patches #49
OCPBUGS-53538: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #45
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-51814: CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork #122
Full changelog

ironic-static-ip-manager

OCPBUGS-49836: Fix subnet validation #49
Full changelog

kube-proxy, sdn

OCPBUGS-54868: Handle openshift-host-network namespace as special when it modifies #654
Full changelog

kube-storage-version-migrator

NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-15). #228
Full changelog

kubevirt-csi-driver

fix for OCPBUGS-58587: CVE-2024-45339 openshift4/kubevirt-csi-driver #69
Full changelog

libvirt-machine-controllers

OCPBUGS-26506: Updating ose-libvirt-machine-controllers-container image to be consistent with ART for 4.15 #282
Full changelog

machine-api-operator

OCPBUGS-55410, OCPBUGS-55411: Updates GCP credentials request #1356
OCPBUGS-53251: add image/read permissions #1349
OCPBUGS-52481: Drop oVirt support #1340
Full changelog

machine-config-operator

OCPBUGS-60214: [release-4.15] OCPBUGS-53248: Enforce VIPs to be collocated at the same host #4988
OCPBUGS-59737: Remove MachineConfigNode CRD from manifests #5188
OCPBUGS-48284: Do not run resolv-prepender from NM dispatcher #4783
OCPBUGS-57340: Do not enable on-prem-resolv-prepender.path for UPI #5115
OCPBUGS-36688: Add ipsec connect wait service #4937
OCPBUGS-54206: Update format verbs for alert logs #4943
OCPBUGS-54176: Update ObservedGeneration in KubeletConfig #4944
OCPBUGS-43742: Soften haproxy timeout for kubeapi probe #4663
OCPBUGS-50526: Add clarification to invalid maxUnavailable alert #4842
Full changelog

machine-os-images

OCPBUGS-54170: Change rhcos release browser url #58
Full changelog

multus-admission-controller

OCPBUGS-58769: Update the github.com/golang/glog module to v1.2.4 #104
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-55619: Fixes leftover podref issue #366
Full changelog

must-gather

OCPBUGS-36371: Run ppc node collection in parallel #430
OCPBUGS-42970: Collect etcd object count #456
OCPBUGS-48083: Update owners #474
Full changelog

network-metrics-daemon

OCPBUGS-58779: Bump github.com/golang/glog to v1.2.4 (#114) #114
OCPBUGS-60374: Replace e2e test image (#126) #126
swtich golint install method (#124) #124
Full changelog

nutanix-machine-controllers

OCPBUGS-47264: fixing CVE-2024-45338 #117
OCPBUGS-51850: CVE-2025-22868 #109
Full changelog

oauth-proxy

OCPBUGS-61447: Update x/crypto to v0.31.0 #336
Full changelog

openshift-apiserver

OCPBUGS-58822: Fix image reference in TestImageStreamImportQuayIO #517
OCPBUGS-47766: Pass expected type to deploymentconfig/scale object validation. #466
Full changelog

openshift-controller-manager

OCPBUGS-57761: Set node-pullsecrets volume to read-only to protect image pull credentials #396
OCPBUGS-56474: Empty proxy variables are causing issues during the build #383
OCPBUGS-54344: Unable to look up the service account secrets for build #370
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-61466: [release-4.15] Add NetworkPolicy as a supported kind #1051
OCPBUGS-61389: [4.15] e2e stability fixes #1084
OCPBUGS-57430: reduce cache expiry frequency [release-4.19] #1023
OCPBUGS-56463: fix(olm): improve error logging for missing olm.managed label (#3558) #1010
OCPBUGS-48662: Fix concurrent namespace resolution #948
Full changelog

operator-marketplace

OCPBUGS-62221: Remove Expect func so that the test case can use the retry logic #672
OCPBUGS-62119: Update memoryTarget on catalog source pods #666
OCPBUGS-49428: Upgrade golang.org/x/net [release-4.15] #588
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-56660, OCPBUGS-58162: Unpin OVS patch versions #2649 #2649
OCPBUGS-56419: Update to FDP25.A.1 24.03.5-40. #2573
OCPBUGS-50583: Bump OVN to 23.09.6-12 to consume fix for FDP-905 #2454
OCPBUGS-53384: [release-4.15] Dockerfile.base: bump OVS version to 3.3 #2492
OCPBUGS-43605: Add SDN node subnet gateway IP to host-network address_set #2419
OCPBUGS-46403: Add static route to the hairpin masquerade IPs to pod #2396
Full changelog

powervs-machine-controllers

OCPBUGS-61702: Use OS_GIT_VERSION in Makefile when found (for Konflux builds) #128
OCPBUGS-54753: Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.15 #115
Full changelog

prometheus

OCPBUGS-56740: BACKPORT: fix promtool analyze block shows metric name with 0 cardinality #256
Full changelog

tests

OCPBUGS-57335: Fix regex parser for censoring private key #29913
OCPBUGS-61229: images/tests: Remove rteval #30207
OCPBUGS-57136: aws/edge: prevent test using unschedulable nodes #29897
OCPBUGS-55477: support provider type external #29739
NO-JIRA: Sync OWNERS from main branch #29856
OCPBUGS-55695: [build] Ensure Git Clone Does Not Run Privileged #29752
OCPBUGS-54769: Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com #29664
OCPBUGS-52582: Use payload pullspec for image info test #29590
OCPBUGS-41614: Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token #29502
OCPBUGS-49647: Fixing build s2i ruby test data inline with latest ruby version(>=3.0) #29503
OCPBUGS-48749: Add/remove team members to the OWNERS file for Builds #29551
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-61654: Fix unit tests #73
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github