4.15.61

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.15.61-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Pending periodic-ci-openshift-release-master-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Pending (1 retries) periodic-ci-openshift-release-master-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Pending periodic-ci-openshift-release-master-nightly-4.15-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Pending (1 retries) periodic-ci-openshift-release-master-ci-4.15-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.15-micro Pending (1 retries) periodic-ci-openshift-release-master-nightly-4.15-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.15-micro Pending (1 retries) periodic-ci-openshift-release-master-ci-4.15-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.15-fips-payload-scan
- gcp-ovn-rt-upgrade-4.15-minor Pending (1 retries) periodic-ci-openshift-release-master-ci-4.15-upgrade-from-stable-4.14-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.15 Pending (1 retries) periodic-ci-openshift-hypershift-release-4.15-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-dualstack Pending periodic-ci-openshift-release-master-nightly-4.15-e2e-metal-ipi-ovn-dualstack
- metal-ipi-ovn-ipv6 Pending periodic-ci-openshift-release-master-nightly-4.15-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-bm Pending (2 retries) periodic-ci-openshift-release-master-nightly-4.15-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.14.19, 4.14.20, 4.14.21, 4.14.22, 4.14.23, 4.14.24, 4.14.25, 4.14.26, 4.14.27, 4.14.28, 4.14.30, 4.14.31, 4.14.32, 4.14.34, 4.14.35, 4.14.36, 4.14.37, 4.14.38, 4.14.39, 4.14.40, 4.14.41, 4.14.42, 4.14.43, 4.14.44, 4.14.45, 4.14.46, 4.14.48, 4.14.49, 4.14.50, 4.14.51, 4.14.52, 4.14.53, 4.14.54, 4.14.55, 4.14.56, 4.14.57, 4.15.10, 4.15.11, 4.15.12, 4.15.13, 4.15.14, 4.15.15, 4.15.16, 4.15.17, 4.15.18, 4.15.19, 4.15.21, 4.15.22, 4.15.23, 4.15.24, 4.15.25, 4.15.27, 4.15.28, 4.15.29, 4.15.30, 4.15.31, 4.15.32, 4.15.33, 4.15.34, 4.15.35, 4.15.36, 4.15.37, 4.15.38, 4.15.39, 4.15.40, 4.15.41, 4.15.42, 4.15.43, 4.15.45, 4.15.46, 4.15.47, 4.15.48, 4.15.49, 4.15.5, 4.15.50, 4.15.51, 4.15.52, 4.15.53, 4.15.54, 4.15.55, 4.15.56, 4.15.57, 4.15.6, 4.15.7, 4.15.8, 4.15.9

4.15.60 (changes) - F P F P F P P P
4.15.59 (changes) - Failed
4.15.58 (changes) - Pending
4.15.44 - Failed
4.15.26 (changes) - Pending
4.15.20 (changes) - Failed
4.15.3 (changes) - Failed
4.15.2 (changes) - Failed
4.15.0 (changes) - Failed
4.14.61 (changes) - F F P
4.14.60 (changes) - Failed
4.14.59 (changes) - Pending
4.14.58 (changes) - Failed
4.14.33 (changes) - Failed
4.14.29 (changes) - Failed
4.14.18 (changes) - Pending
4.14.17 (changes) - Failed
4.14.16 (changes) - Failed
4.14.0-0.nightly-2026-01-28-005529 (changes) - Failed Pending

Loading changelog, this may take a while ...

Changes from 4.15.44

Created: 2026-01-29 15:36:15 +0000 UTC

Image Digest: sha256:d517885ee59d46c2aca8be69fdcf916f78a510ae76a5a9f7875c1c5ab3cfc3c1

Components

Kubernetes 1.28.15
Red Hat Enterprise Linux CoreOS upgraded from 415.92.202501152057-0 to 415.92.202601271320-0 (diff)

Removed images

ovirt-machine-controllers

Rebuilt images without code change

agent-installer-utils git 33b7d855 sha256:7f42deee6d5ed50a9ed925346a4c14a65b80a635168113a1d14a7c30569432ee
alibaba-cloud-controller-manager git abf4fa96 sha256:24e0cf019ba5b461ccf4c621bba86fbbe7a6caeef947e1eb7238565e15a8971f
alibaba-disk-csi-driver-operator git 41b367ae sha256:072175522c3e18b5b6f15cd7d7f8ab1c19b396ea37092bd0501515f05488de2d
alibaba-machine-controllers git f7f5eed8 sha256:d57c7bc24f24aa33fd7651307e2427f55128626ae0f2dd95cfb90d46b1902cb5
apiserver-network-proxy git adccbd5c sha256:a9e41851fd4fcd2340fb9d6266f2b17b1a4538f204f56271212b715030ae93ee
aws-cloud-controller-manager git fd77d92c sha256:186685f322ba3d58173ba0e3edd5d69d256317b29feb719805305a8e047c7d28
aws-ebs-csi-driver git 7043c1cc sha256:d0c5b9ea05f89ee993c14d13168805cc00c85557a4da0e92827e49aedba6d36c
aws-pod-identity-webhook git 13385034 sha256:b11f57c569c70a991ea8e3e63a252447283a11821d2fa829e0a76b5cdbaf80ad
azure-cloud-controller-manager git 0d799a26 sha256:5471536a0c290ca89ff4b78e08d8fbd62d9bb4b22f60a3655a9d0d9880138085
azure-cloud-node-manager git 0d799a26 sha256:5dc10e3aea169a1e53116a1ffaec1e1a3db00b5e4a21668d835ea2df2ee820fb
azure-cluster-api-controllers git 44832d2d sha256:fcc0288dfe969a82267127bf92f3beaea3917aed9f943c6808e9dc3cef73866b
azure-disk-csi-driver git dcb7e1c7 sha256:8530e0850f71438e8835cc71717049fc0c1e3cb3c66f881f6cbfd9935feadfad
azure-disk-csi-driver-operator git 160cf624 sha256:6260948a9689493cab37bbb0ec0aa361f55506d3ab60024c5ce15ca6781ea8bf
baremetal-machine-controllers git ec953728 sha256:a9319c4da3bae119c481995d75b87ebf393356479269546f00e8faa147943315
baremetal-runtimecfg git 1fbb2c0c sha256:6a0e04b61de3753ed5b9b068f9fb93a3ba9fbdc84c58e0b66cd9942fede92f20
cli git 82316376 sha256:1172ac79f65babceaee00967da4b23707f6f897a4efc8a13499a0de5c007688e
cli-artifacts git 82316376 sha256:b59abef4f8921d74e23b5118433f7cc598c5df29ffc2992d4849c04b03726cea
cloud-network-config-controller git 6864da06 sha256:d25d0bfe3192d3af00d134afd0d1a9db1562c6c753dd41c7d1f5832244742c7d
cluster-authentication-operator git 7aaa40eb sha256:9e56c8259bf724864efe50250ea6cef8b96d4311c9dc93fa08542675a9718ef3
cluster-autoscaler git 89149896 sha256:3479a0885969564bd7aea0c6af0cded597520d1bc15abf72fbb565062d9390a6
cluster-autoscaler-operator git 8425d88b sha256:afe5d8c3c6456c7a3a9259c6c31adbda2129717b8988e8c094b824fb76617192
cluster-baremetal-operator git 6e850eed sha256:3c6437dd4d4e29a369c445fe1c929770454b9141a6a6aa7601372ee194659d56
cluster-bootstrap git 0849c462 sha256:1698aa327dbb2f897f54d7c5bac4c3a9025a3e85e77cdb3bd135ba0502c7932e
cluster-capi-controllers git 2053e13c sha256:218e840458610deb37d7a339b29c95e50b2ea7e7192d1595497a47a119934064
cluster-capi-operator git 203435ef sha256:820a766a20a58148029bb6590d028eb125ad3ff6519f76af4ab235ea7df0c55d
cluster-config-api git 0a58f8c3 sha256:1c3d32bedb033fcfb0344c5f672eefc1bb39fed140b1c0924e9ca5c1870ad2a9
cluster-config-operator git 0b4c69fd sha256:b3213d0182881c30a5fc9d3924db94a20e6467ae76f9cbff1ac463920068299a
cluster-control-plane-machine-set-operator git e1b692b1 sha256:ceffd19b107d0afdd6c48d90bdde269c9bb3f02064dcdf04140a6df225a29956
cluster-csi-snapshot-controller-operator git 65dbb12b sha256:41fb843f2298cfb77112b9450882f9ed9bcaec566560317f914cb3c1e0b2fa1d
cluster-kube-cluster-api-operator git 128d8e08 sha256:8aba68b1b81a05b0f44facc27e40d834a3735c9cae34059cc21791b0eb680ee1
cluster-kube-controller-manager-operator git ee8cf525 sha256:2b21fe8f0ec6e57ea84503c6a09a1083238fb478a9a816e76603fe54ace43652
cluster-kube-scheduler-operator git f054dfaf sha256:9ddc08abd17272531bdeba8505ddd68fcc9ae4d0e90e4c37f2ead05a5cc479ee
cluster-kube-storage-version-migrator-operator git e76cea5f sha256:a07ffb825760e8e2b67b116099a9d4f9d00c5002dd6446697f19551c560254a9
cluster-machine-approver git 863813ec sha256:ab5c03aa1ce53cf2061d8918fe77072ed4385deff30a83db36b31139c884795b
cluster-node-tuning-operator git e828bd93 sha256:aeac8a53f7487db5fd12be731ffb06d1db6c835cf72f836a01ea553c40773c00
cluster-olm-operator git a7ba8987 sha256:f879c5e6120d1beaa1371e4bc17648c0a3bbbc39b882369d5a745f7681d05e22
cluster-openshift-apiserver-operator git 078c81f6 sha256:b3552d39bdf3e3f2c2a28785f9dda9b1193bc11939a025d933761e4ede490fd5
cluster-platform-operators-manager git 37a0a919 sha256:ff5a8d57aec55e6127c9bf3f27b74b14eca5d555204122c9023ac52a74f57c1b
cluster-policy-controller git cc48f315 sha256:bf9de5be09db7a83cbc0e3d668fed63470e701a3bb880d84ed9551c8b0cc44a2
cluster-update-keys git 802233d8 sha256:f73123baa08845faef6efefc7fbbcab6d4ac42f32b8d5c2125ee865cc422d289
configmap-reloader git 617398f5 sha256:cd3cbf3eafbc38d191529b098e4cbff5cf316daa96403fca0bf001fe45e0cf7d
console-operator git 91f5c970 sha256:4edb1e5b9c15c8848c544fc59d6e13c9ada65a769633620f294de8c24c146095
coredns git 1326282c sha256:fb1183343f4bd44f34ed7a1266cc176acdd28af67a0f0967aa0b9b43baf8a62f
csi-driver-manila-operator git 9bcf382e sha256:c6a6978c52ec98beb6c8f9b99727e89575612ce4937160ed94886b4d2c99924d
csi-driver-nfs git d032dc10 sha256:1068d9cda4e9eac0c62d7a2ba725933762f5d237eb799885da66b75f90a4e025
csi-driver-shared-resource git 260a085a sha256:692565190f4730452f7a6b5a3ba6db896add29b23145bbed30e15967a8b3e4d9
csi-driver-shared-resource-operator git 8d017b7f sha256:6b176c1e148ce09f7d10e1a26163f5393d3e94c0b6c8ed1c6b76b60961754e20
csi-driver-shared-resource-webhook git 260a085a sha256:2461f6236ce5708313967ad5fb5eae21b449a99dd89dbdaa5360ab106ac06bca
csi-external-attacher git f806f266 sha256:eccda48ee3b59b04984ec2c3ee06ab3033133cda0bd3bbb9f70b5c5ff2f76e20
csi-external-provisioner git ce5a1a33 sha256:92b3112d759da2ea3ec9b34a3122d9d3d6ab56e31a8bbcfff6f59c04885cafa6
csi-external-resizer git 3b4236d3 sha256:eb124ad7fc1be3d127c446bd694432a640ea50f6c763e972dbbe49ccf750ac5b
csi-external-snapshotter git 4f2955c7 sha256:cf4a525ae13312c4aae84bfea039b84b5d2205e4a5833f764b696b51785571f9
csi-livenessprobe git 240bb8c0 sha256:c70827d716eb9b2e6cef6df659666fb8028096cb8256f1ca6b122941b08ab130
csi-node-driver-registrar git 9005584e sha256:a3ebf0dd4a7bcd95fccd1f2b23ba8ce971cc2cadd73d8ea836c66aefb764a88a
csi-snapshot-controller git 4f2955c7 sha256:4bb7446772c64a9fd4192f952289f8f32d1e81bffb51cfc83d219cfaf7fa1276
csi-snapshot-validation-webhook git 4f2955c7 sha256:933502ef4590b1214412fb79be81227068c28b945da7d2338269203a4e8617d0
deployer git 82316376 sha256:b3cc164141450d02bc3932f6fd2a9874923cf86396cad563b0067c5574dab7cd
driver-toolkit git 7a448c2e sha256:7c88fe58f7554600091ec517471cb2d177bc753e698ecfc2995de00e1b5bc938
egress-router-cni git f8ec690b sha256:e21df7ff986b0005ff4940c00320cdaa88122a91ac34b6004115d7783c630ca1
etcd git a7005ef1 sha256:a6fce6a56e1af7938fc8ea0613911c7b6775de989b23d6a4de3fec094413f40b
gcp-cloud-controller-manager git fc50272a sha256:56d6b44c55e5253cfe58676b3a5044011b284df330dae721457d40c7162762cc
gcp-cluster-api-controllers git bad54034 sha256:cccf6e21f410de073d63d60c02b6bcd9f86be92fc5002ab2b2ba99ec7dec46f6
gcp-pd-csi-driver git 856ee3e2 sha256:2abdba5d039f7c07471d645e9637cf6413ac3a523d34956cda28603dee57e6fb
ibm-cloud-controller-manager git cc0d5415 sha256:d1fe64a3f23d3af129cfe3e73f3403c45759430aa95e0cb1acd50a3a48392b1d
ibmcloud-machine-controllers git 6846b9a7 sha256:7fb2c75d3637bcc8350c2377fe58b27385c3c6ce2ee2b949cc9e2c96b55b58ac
insights-operator git 975bba98 sha256:76898a4dd5b71dd96dc79a61e7291ccdbb96a90bba9837656992089e57c76408
ironic-machine-os-downloader git bcbcd95b sha256:e81e37d92db062f152103c565b0b7f6d8f60c6b7328c41e57f4f072a32c97595
k8s-prometheus-adapter git 34e20193 sha256:b9462b90c01c2a88affa8217f51c3e53683548d73cfd28ff68300b2d6035124a
keepalived-ipfailover git 87c23b5a sha256:15f381705f7d24199833388c289e4dd05268e29459efef1bb6d189b01114feb9
kube-metrics-server git bcbf241c sha256:acf80c4eea2dbb99f5e3db56118fe574219e96a9d0cb735b2812e3ee6826acfb
kube-rbac-proxy git 9308e7f2 sha256:06f5889c59fb8a5025a28460e087334d455de5cc998ffb90b02b0db688bff19e
kube-state-metrics git 037b59c2 sha256:c7723485f33ffbe4ba2a73a78f1b82378d6a7f74d0d84c7729a4006bff62fe70
kubevirt-cloud-controller-manager git dbaf9ea1 sha256:956af86477d3b7d2aeb3206c5558a2e7097d9b57b97e17b9d44c5c7902a23157
machine-os-content sha256:7e0dc38c15bd4a3d323d84bcd6e981a05301fbb80f038ee547b6843cb384c1f1
monitoring-plugin git 1217bc1e sha256:abf51fd9faf1dbc330eac4caf11e6e314a8d43f85a1e1fe2b15a9fd9d0265a65
multus-cni git 05497ad1 sha256:ce5eb378bc9689e52da1564b95e40906024296fc37f01fa39c5bf3fe72db1e23
multus-networkpolicy git b377b4b5 sha256:659129db49c2cf103dd395e27f5551ed1989bcbe857d4c6f832f3736b57158ff
multus-route-override-cni git 1ccafc34 sha256:2e37aed1a2e4f405d48876c6e67031cd8664e1212b20ce79338974bc7d7612e0
network-interface-bond-cni git f91decaa sha256:d58b4b7593b99af361e2c405f90b1891f2436f4c288bdec13a7537d48b39868f
network-tools git 17536c8d sha256:047d08cf4f96586d174d4518b095d4310761d481d0382a3defe04f10d781d090
nutanix-cloud-controller-manager git 040d4e01 sha256:cfbb7bf9dbf3747e43cc5172f4e8658fc9ea30190dfd0d634bf09b75d00afd8b
oauth-apiserver git 0e158441 sha256:55da596d58ae779864ba673eb671a84d40624262f11813cd217077ddbf540823
oauth-server git c055dbb9 sha256:ea77363b48a566cbe440f7427f2f50acb68afebd44b33b49156c859a312285db
oc-mirror git 55368163 sha256:bf9b176844dc71b813c1f2ddbf5ff9135ac9f586415a4cc7399321556c67dcbd
olm-catalogd git 035d3835 sha256:e5c92d3bde5e88c395a7508a4d6e0b87726707160943a9c0d2eda71121872819
olm-operator-controller git 303b954f sha256:277db74ebeeb4d85b98d94f08e26e9d70bf08a692905d308c716277569dda23e
olm-rukpak git 5b09cd44 sha256:94e23c739d69a383b755ee615a65102a57b0cc74ec758b5017a960f123753908
openshift-state-metrics git 1915f645 sha256:f25e2e19ca76264819893ff974ef22e72cf99019887ff92a23d09b4f050a43ac
openstack-cinder-csi-driver-operator git d0c24077 sha256:97450330b9fb313f0d89ef14eb3e6fad5c12876f1673020e7b27ca88c2761de5
openstack-cluster-api-controllers git 232472ea sha256:d8a280b640c0ccfcf3661d74a26ca8c7e478656ad372ec64286242f6aa118203
openstack-machine-api-provider git 396a09ff sha256:a282fdd9e63e2eb52dbdb44aca2eaf0b4674a118daa4822662f4879d3a7a8481
ovirt-csi-driver git b8d25ad6 sha256:5bec0cf02f39a6a47e3ca27d85510fe08446368964bdf690afcf0e5c9442d6a5
powervs-block-csi-driver git 38bee567 sha256:4afaf72552140d0a1190bcd379c01618f4a49d36ff0eb2a37b7732778023620e
powervs-block-csi-driver-operator git a3729dcb sha256:aa4e0e28acec002602c3a57a074d6479867b5bb0f116cda5220f4a82670e24fa
powervs-cloud-controller-manager git 1d6a7ed9 sha256:89fb5fa80300f2fe9240cd01db0e483e0fd112f05bf12c5e2c0cda7baea18ad5
prom-label-proxy git f3f1f5d1 sha256:2a6a24e889f631cfb8bb7a06a4a4b00b52a24856a0b17824455c5e3dff1166ac
prometheus-alertmanager git 870ade52 sha256:fe5616a21addc31ee7550f62fc62f6295e8072c32ed27de3f83d2e6378ceb295
prometheus-config-reloader git 902436ac sha256:33172c38a3426fd836332be3aec9c65e795f289fd4195654f9ecfb71ea6eb2be
prometheus-node-exporter git aed837c3 sha256:ddbfd61825c34837f5bb3002a52744a06acd2bdb2c4a5f0fc62b525ca9f5eba9
prometheus-operator git 902436ac sha256:d9f963a1b0f02eb461b3ef37aafbe12c7c26e43378fd2e5c41f90c2567b8f92a
prometheus-operator-admission-webhook git 902436ac sha256:fc1d5a141de442b3c50d578946bed3780eeaf245b6920ab316fee211130cb034
rhel-coreos sha256:3cfc4f1b741831b5822457602788fc21c2c40a503ac26368101c082bc9b088f9
rhel-coreos-extensions sha256:bfd54255904b227c712e1451f50238a43b6690ba0bd8ab45682d30cace5480e1
route-controller-manager git c5cc7a73 sha256:b15fc9cdceeba3e319c20e5855a0806e3a609623588921561dc1c57c1c834c9f
service-ca-operator git 19f312e9 sha256:cb523259d2c02530d597424ce9259c8ae054fa4cabae833de8a96c4a68341350
telemeter git 14489f7d sha256:4fbfd4e6139e5c8e99c908cfa0856428ab05a0ad1ce8727c4b5ca9218c831e26
thanos git 66161ad4 sha256:6c3bbb07c163bc0e50809182b364ff35f0bc2599da4c089d99fc0686257a7767
tools git 82316376 sha256:a299919bb26fd5ca12d10bff567d9bff43b3130506f9535fc89697beb4d0db6e
vsphere-cloud-controller-manager git 81ad52ad sha256:8cca8fae9fc034a3cfe91498d0b59a66aad3f8fb44ebc71154827fd212395baa
vsphere-csi-driver git 4b15e93b sha256:3b8f1b354c725b7f87cd8536c2093c7cc058556dea792cee137d755b4ea637cd
vsphere-csi-driver-operator git e0d46570 sha256:23e3f72c8f0673c076588c1b3bd11b7625e3db83fe8ea1085eca54520a23be5e
vsphere-csi-driver-syncer git 4b15e93b sha256:2567840c35d3ddb2fa17fea4af026fac6b9875ba56a314a60e56d1b4b8676d1f

agent-installer-api-server

OCPBUGS-58633, OCPBUGS-58638: Bump glog to v1.2.5 in release-4.15 (#7905) #7905
OCPBUGS-54402: Bump go-jwt to 4.5.2 to fix CVE-30204 (#7487) #7487
OCPBUGS-46940: OCPBUGS-46185: Bump golang.org/x/net to 0.33.0 (#7199) #7199
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-58643: Bump github.com/golang/glog pkg version to 1.2.4 (#1189) #1189
OCPBUGS-53714: Bump jwt to 4.5.2 in release-4.15 (#1092) #1092
Bump golang.org/x/net to 0.33.0 (#1011) #1011
Full changelog

agent-installer-node-agent

run go mod tidy / vendor #1020
And 3 elided commits (e.g. from squash or rebase merges)
Full changelog

alibaba-cloud-csi-driver

OCPBUGS-67910: Bump github.com/sirupsen/logrus to v1.8.3 #47
Full changelog

aws-cluster-api-controllers

OCPBUGS-61943: UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It #573
OCPBUGS-58668, OCPBUGS-58673: bump github.com/golang/glog to v1.2.5 #562
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-67913: Bumped logrus to 1.9.3 #492
Full changelog

aws-machine-controllers

OCPBUGS-63141: client: re-use a single file for building the session instead of randomly named files #153
OCPBUGS-63141: revert: client: re-use a single file for building the session instead of randomly named files #150
OCPBUGS-63141: client: re-use a single file for building the session instead of randomly named files #143
Full changelog

azure-file-csi-driver

ART-13080: Regenerate go.mod to fix build failure #94
Full changelog

azure-file-csi-driver-operator

OCPBUGS-67918: Bump github.com/sirupsen/logrus to v1.9.3 #113
OCPBUGS-60544: add tag matching to Azure File storage class #110
Full changelog

azure-machine-controllers

OCPBUGS-56657: Fix failure when attempting to modify immutable availabilitySet #150
OCPBUGS-53226: dynamically setting the amount of fault domains #134
Full changelog

azure-workload-identity-webhook

OCPBUGS-53794: github.com/golang-jwt/jwt/v4 v4.5.2 #34
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-42554: only allow a single network in failure domain topology #9060
OCPBUGS-62849: Release 4.15 bump terraform provider azurerm #10007
OCPBUGS-62410: Make swift containers removal not fatal for UPI. #9978
OCPBUGS-60497: update resolv.conf every time on bootstrap node #9885
OCPBUGS-39416: OpenStack: Install CI dependencies from rpm #9103
OCPBUGS-54353: aws/edge/byovpc: tag edge subnets with shared value #9612
OCPBUGS-54367: IBMCloud: Move to IBM TF openshift fork #9614
OCPBUGS-45961: Update upi references to api-internal #9298
OCPBUGS-50994: Bump terraform-provider-google version to v5.37.0 to fix consistent issues during cluster creation #9509
OCPBUGS-41815: Validate MTU for custom network #9294
OCPBUGS-28706: [azure] update tested x86 instance type on 4.15 #7966
OCPBUGS-47716: [release-4.15] Power VS: Create region-zone-sysType hierarchy #9340
Full changelog

baremetal-operator

OCPBUGS-53336: BMO can expose any secret via BMCEventSubscription CRD #408
Full changelog

cloud-credential-operator

OCPBUGS-60974: ccoctl: aws to use proper issuer url on subsequent runs #910
OCPBUGS-58678: github.com/golang/glog v1.2.5 #894
OCPBUGS-53417: github.com/golang/glog v1.2.4 #844
OCPBUGS-53818: update github.com/golang-jwt/jwt #840
OCPBUGS-51540: Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #833
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63169: ccm: disable unused secure-serving port and webhook #424
Full changelog

cluster-dns-operator

OCPBUGS-52499: [release-4.15] Add runbook_url for CoreDNSErrorsHigh #432
Full changelog

cluster-etcd-operator

OCPBUGS-53506: fix CVE-2025-30204 #1404
Full changelog

cluster-image-registry-operator

OCPBUGS-53866: bump github.com/golang-jwt/jwt #1220
OCPBUGS-51596: bump golang.org/x/oauth2 #1211
OCPBUGS-51264: ensure that storage names don’t end in dashes #1183
Full changelog

cluster-ingress-operator

OCPBUGS-49392: Block Upgrades in release 4.15 for CA-Signed Certs Using SHA1 #1172
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-50661: Increase waitForFallbackDegradedConditionTimeout #1806
Full changelog

cluster-monitoring-operator

OCPBUGS-66047: test: remove image registry e2e tests #2757
Full changelog

cluster-network-operator

OCPBUGS-62980: Update CNO reviewers/approvers #2817
OCPBUGS-56649: Fix live migration with feature migration configured explicitly #2715
OCPBUGS-36688, OCPBUGS-43099: Unexpected Behavior During Cluster Upgrade for the ovn-ipsec-host pods #2658
OCPBUGS-53282: Not update status.migration of the network.config CR to empty #2669
[Release 4.15] OCPBUGS-51208: Use applyconfigurations for updating network.oprerator status #2653
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-48832: Add new team members to the OWNERS file #379
Full changelog

cluster-samples-operator

OCPBUGS-63517: references to github.com/sclorg/django-ex.git now also refer to the branch #660
OCPBUGS-55475: Adding mutex to func createSamples on handler.go #634
OCPBUGS-54481: add rhdmalone to owners #623
OCPBUGS-49369: add shannon and aroyoredhat as owners #597
Full changelog

cluster-storage-operator

OCPBUGS-67955: bump github.com/sirupsen/logrus to v1.9.3 #654
Full changelog

cluster-version-operator

OCPBUGS-50591: Set openshift.io/required-scc: privileged annotation in version pods #1152
Full changelog

console

OCPBUGS-69767: Disallowed Pipelines-plugin Pipelines navigation section #15864
OCPBUGS-65822: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15749
OCPBUGS-65601: /auth/error?error=missing_state&error_type=auth is showing blank page #15727
OCPBUGS-44159: bump dompurify to latest #15592
OCPBUGS-60672: Secret key with binary file changes when edited via Console #15422
OCPBUGS-59997: Remove the devconsole backend common internet proxy and replace it with dedicated ones #15359
OCPBUGS-59564: Add flags in console static plugin for all the components of this epic #15306
OCPBUGS-60029: fix bug where / in console.tab/horizontalNav href brea… #15353
OCPBUGS-57521: Debug pod logs are not accessible when debugging a node via OpenShift Console #15181
OCPBUGS-58223: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15221
OCPBUGS-57097: Add all files to vendor regardless of gitignore #15134
OCPBUGS-45257: Enabling topology e2e tests on CI #14721
OCPBUGS-55733: fix bug where operator appears twice #15021
OCPBUGS-55174: Add missing pipelines plugin name to known plugins #14982
OCPBUGS-54673: Added token to proxy header #14943
OCPBUGS-54252: Update the monitoring topic used by the console team #14904
OCPBUGS-53138: fix run time error when no completed version exists #14879
OCPBUGS-53055: Show Observe section without PROMETHEUS and MONITORING flags #14867
OCPBUGS-52344: fix alert rule link #14828
OCPBUGS-51332: Do not pass CSV name to operand list page when an exen… #14800
OCPBUGS-49849: include external labels so silenced alerts not displayed in notifications #14718
OCPBUGS-48593: ReRun of Resolver based PipelineRuns fails from UI #14689
OCPBUGS-48592: ImagePullSecret getting duplicated when editing DeploymentConfig in Form View #14688
Full changelog

container-networking-plugins

OCPBUGS-55948: Check error returned by ipv6 SettleAddresses #190
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-58885: CARRY: don’t ignore json files #342
OCPBUGS-43375: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.28 into release-4.15 #297
Full changelog

docker-builder

OCPBUGS-65960: BuildConfig inline Dockerfile fails with heredoc syntax #491
OCPBUGS-58141: S2I build cpu limits observed by assemble are limited to 1 cpu #477
OCPBUGS-42917, OCPBUGS-43294: Bump buildah to 1.33.12 #442
OCPBUGS-43188: runc library bump to 1.1.12 #436
Full changelog

docker-registry

OCPBUGS-53650: bump jwt and oauth dependencies #433
Full changelog

gcp-machine-controllers

OCPBUGS-55410, OCPBUGS-55411: Disable shielded VMs for non-UEFI disks #117
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-67971: bump github.com/sirupsen/logrus to v1.9.3 #161
Full changelog

haproxy-router

OCPBUGS-49392: Block Upgrades for CA-Signed Certs Using SHA1 #641
Full changelog

hyperkube, pod

OCPBUGS-59147: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2358
OCPBUGS-59147: UPSTREAM: <carry>: disable some legacy cloud provider Azure tests #2359
OCPBUGS-52183: UPSTREAM: <carry>: kubelet/cm: fix bug where kubelet restarts from missing cpuset cgroup #2227
OCPBUGS-53139: UPSTREAM: 129180: prevent unnecessary resolving of iscsi/fc devices to dm #2244
Full changelog

hypershift

CNTRLPLANE-1266: Drop extinct mce-2.5 pipeline #6655
CNTRLPLANE-1232: Move CPO pipeline to hermetic builds #6601
OCPBUGS-58506: [release-4.15] Add missing service network DNS entries to KAS cert #6394
OCPBUGS-57553: Add proxy variables for the MCD Pod #6293
OCPBUGS-57121: Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs #6231
OCPBUGS-46467: Consistently look up and dial cloud API hostnames #5300
OCPBUGS-52590: Honor proxy vars in the util insecure http client #5791
CNTRLPLANE-920: Konflux build pipeline service account migration #6086
CNTRLPLANE-920: Konflux build pipeline service account migration #6081
OCPBUGS-55266: [release-4.15] Add konnectivity-proxy sidecar to openshift-oauth-apiserver #6070
OCPBUGS-51800: Fix golang crypto dependency go.mod replacement #5995
OCPBUGS-53898: bump golang-jwt v4 and v5 #5908
Red Hat Konflux update control-plane-operator-4-15 #5955
ART-11792: update go mod dependency for konflux #5923
OCPBUGS-51729, OCPBUGS-51800: Bump dependencies to OCP fork in backports #5902
OCPBUGS-50867: Prevent IgnitionServer from flooding the API server with patch requests #5633
OCPBUGS-52992: [release-4.15] OCPBUGS-52506: refactor aws identity health check into new controller #5815
OCPBUGS-52896: Make managed-trust-bundle optional #5813
OCPBUGS-50699: add region to AWS creds passed to operators managed by CPO #5669
NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.6 #5729
OCPBUGS-51253: OCPBUGS-50692: Fix IsIPv4 function identifying also addresses instead of CIDRs #5701
OCPBUGS-52172: [release-4.15] Add HostedCluster additional trustbundles to konnectivity-https-proxy #5722
NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.5 #5683
chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1739420147 #5624
NO-JIRA: chore(deps): update dependency mkdocs-material to v9 #5642
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1738816775 #5576
NO-JIRA: chore(deps): update konflux references #5588
NO-JIRA: Red Hat Konflux update control-plane-operator-4-15 #5338
NO-JIRA: chore(deps): update dependency mkdocs-mermaid2-plugin to v0.6.0 #5589
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.3 #5586
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.2 #5577
OCPBUGS-49668: fix overwriting PKI operator HCP conditions #5512
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1737480393 #5486
NO-JIRA: chore(deps): update konflux references (release-4.15) #5480
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-58739: bump github.com/golang/glog to version v1.2.4 #107
OCPBUGS-56064: tech debt: rework vendor patches #92
OCPBUGS-53906: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #85
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-59775: [IBM VPC] set offlineExpansion to false in e2e test manifest #150
Full changelog

ibm-vpc-node-label-updater

OCPBUGS-56064: tech debt: rework vendor patches #49
OCPBUGS-53538: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #45
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-67289: [release-4.15] Fix incomplete vendor/ #137
OCPBUGS-51814: CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork #122
Full changelog

ironic

OCPBUGS-69784: Bump eventlet version to 0.33.1-7 #764
OCPBUGS-48148, OCPBUGS-48597: Bump jinja2 to 3.0.1-6.el9.2 #624
Full changelog

ironic-agent

OCPBUGS-69782: Bump eventlet version to 0.33.1-7 #233
Full changelog

ironic-static-ip-manager

OCPBUGS-49836: Fix subnet validation #49
Full changelog

kube-proxy, sdn

OCPBUGS-54868: Handle openshift-host-network namespace as special when it modifies #654
Full changelog

kube-storage-version-migrator

NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-15). #228
Full changelog

kubevirt-csi-driver

fix for OCPBUGS-58587: CVE-2024-45339 openshift4/kubevirt-csi-driver #69
Full changelog

libvirt-machine-controllers

OCPBUGS-26506: Updating ose-libvirt-machine-controllers-container image to be consistent with ART for 4.15 #282
Full changelog

machine-api-operator

OCPBUGS-59861: Updates GCP CredentialsRequest #1397
OCPBUGS-55410, OCPBUGS-55411: Updates GCP credentials request #1356
OCPBUGS-53251: add image/read permissions #1349
OCPBUGS-52481: Drop oVirt support #1340
Full changelog

machine-config-operator

OCPBUGS-60214: [release-4.15] OCPBUGS-53248: Enforce VIPs to be collocated at the same host #4988
OCPBUGS-59737: Remove MachineConfigNode CRD from manifests #5188
OCPBUGS-48284: Do not run resolv-prepender from NM dispatcher #4783
OCPBUGS-57340: Do not enable on-prem-resolv-prepender.path for UPI #5115
OCPBUGS-36688: Add ipsec connect wait service #4937
OCPBUGS-54206: Update format verbs for alert logs #4943
OCPBUGS-54176: Update ObservedGeneration in KubeletConfig #4944
OCPBUGS-43742: Soften haproxy timeout for kubeapi probe #4663
OCPBUGS-50526: Add clarification to invalid maxUnavailable alert #4842
OCPBUGS-48583: trying to wait for sub-contorllers #4796
Full changelog

machine-image-customization-controller

OCPBUGS-67983: [4.15] uplift logrus #154
Full changelog

machine-os-images

OCPBUGS-54170: Change rhcos release browser url #58
Full changelog

multus-admission-controller

OCPBUGS-58769: Update the github.com/golang/glog module to v1.2.4 #104
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-55619: Fixes leftover podref issue #366
Full changelog

must-gather

OCPBUGS-36371: Run ppc node collection in parallel #430
OCPBUGS-42970: Collect etcd object count #456
OCPBUGS-48083: Update owners #474
Full changelog

network-metrics-daemon

OCPBUGS-58779: Bump github.com/golang/glog to v1.2.4 (#114) #114
OCPBUGS-60374: Replace e2e test image (#126) #126
swtich golint install method (#124) #124
Full changelog

nutanix-machine-controllers

OCPBUGS-47264: fixing CVE-2024-45338 #117
OCPBUGS-51850: CVE-2025-22868 #109
Full changelog

oauth-proxy

OCPBUGS-61447: Update x/crypto to v0.31.0 #336
Full changelog

openshift-apiserver

OCPBUGS-58822: Fix image reference in TestImageStreamImportQuayIO #517
OCPBUGS-47766: Pass expected type to deploymentconfig/scale object validation. #466
Full changelog

openshift-controller-manager

OCPBUGS-57761: Set node-pullsecrets volume to read-only to protect image pull credentials #396
OCPBUGS-56474: Empty proxy variables are causing issues during the build #383
OCPBUGS-54344: Unable to look up the service account secrets for build #370
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-61466: [release-4.15] Add NetworkPolicy as a supported kind #1051
OCPBUGS-61389: [4.15] e2e stability fixes #1084
OCPBUGS-57430: reduce cache expiry frequency [release-4.19] #1023
OCPBUGS-56463: fix(olm): improve error logging for missing olm.managed label (#3558) #1010
OCPBUGS-48662: Fix concurrent namespace resolution #948
OCPBUGS-48697: Fix excessive catalog source snapshots cause severe performance regression #958
Full changelog

operator-marketplace

OCPBUGS-62221: Remove Expect func so that the test case can use the retry logic #672
OCPBUGS-62119: Update memoryTarget on catalog source pods #666
OCPBUGS-49428: Upgrade golang.org/x/net [release-4.15] #588
Full changelog

ovirt-csi-driver-operator

OCPBUGS-68032: Bump github.com/sirupsen/logrus to v1.8.3 #144
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-56660, OCPBUGS-58162: Unpin OVS patch versions #2649 #2649
OCPBUGS-56419: Update to FDP25.A.1 24.03.5-40. #2573
OCPBUGS-50583: Bump OVN to 23.09.6-12 to consume fix for FDP-905 #2454
OCPBUGS-53384: [release-4.15] Dockerfile.base: bump OVS version to 3.3 #2492
OCPBUGS-43605: Add SDN node subnet gateway IP to host-network address_set #2419
OCPBUGS-46403: Add static route to the hairpin masquerade IPs to pod #2396
Full changelog

powervs-machine-controllers

OCPBUGS-61702: Use OS_GIT_VERSION in Makefile when found (for Konflux builds) #128
OCPBUGS-54753: Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.15 #115
Full changelog

prometheus

OCPBUGS-56740: BACKPORT: fix promtool analyze block shows metric name with 0 cardinality #256
Full changelog

tests

OCPBUGS-66329: Replace RunHostCmd with Exec function to censor bearer token being exposed #30528
OCPBUGS-57335: Fix regex parser for censoring private key #29913
OCPBUGS-61229: images/tests: Remove rteval #30207
OCPBUGS-57136: aws/edge: prevent test using unschedulable nodes #29897
OCPBUGS-55477: support provider type external #29739
NO-JIRA: Sync OWNERS from main branch #29856
OCPBUGS-55695: [build] Ensure Git Clone Does Not Run Privileged #29752
OCPBUGS-54769: Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com #29664
OCPBUGS-52582: Use payload pullspec for image info test #29590
OCPBUGS-41614: Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token #29502
OCPBUGS-49647: Fixing build s2i ruby test data inline with latest ruby version(>=3.0) #29503
OCPBUGS-48749: Add/remove team members to the OWNERS file for Builds #29551
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-61654: Fix unit tests #73
Full changelog

vsphere-problem-detector

OCPBUGS-68031: bump github.com/sirupsen/logrus to v1.9.3 #201
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github