Back to index

Download installer and client with:

oc adm release extract --tools quay.io/openshift/okd:4.15.0-0.okd-2024-03-10-010116

Team Approvals:

No tests for this release

Upgrades from:

• 4.15.0-0.okd-2024-03-09-130115 (changes) - Success
• 4.15.0-0.okd-2024-02-23-163410 (changes) - Success
• 4.15.0-0.okd-2024-02-10-035534 - Success
• 4.15.0-0.okd-2024-01-27-070424 (changes) - Success
• 4.14.0-0.okd-2024-01-26-175629 (changes) - F F S

---

Loading changelog, this may take a while ...

Changes from 4.15.0-0.okd-2024-02-10-035534

Created: 2024-03-10 06:53:44 +0000 UTC

Image Digest: sha256:46b462be1e4c15ce5ab5fba97e713e8824bbb9f614ac5abe1be41fda916920cc

Release 4.15.0-0.okd-2024-03-10-010116 was created from registry.ci.openshift.org/origin/release:4.15.0-0.okd-2024-03-10-010116

Components

• Kubernetes upgraded from 1.28.6 to 1.28.7
• Fedora CoreOS upgraded from 39.20240112.3 to 39.20240210.3

Rebuilt images without code change

• kubevirt-cloud-controller-manager git e465e606 sha256:9e166053d7b8c6ffc87825ac980e8742de371db56357f82a2045f9ba9492d2ef
• machine-api-operator git e2b4537e sha256:386c929913089299adc9cce7a7ea277512dac593bcf910f2bf8cd2319796e6c9
• powervs-machine-controllers git 07e8f8b8 sha256:3c612d82aa0224fd9cf84c416d668acc9aa0876ad93a57b026bf4c2bdfef09fd

agent-installer-api-server

• MGMT-16517: Add Env Var Deployment Type & Set ABI (#6016) #6016
• MGMT-16980: Change the default value of ENABLE_SKIP_MCO_REBOOT to false (#6005) #6005
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• MGMT-16843: Ensure valid hostname during install (#791) #791
• OCPBUGS-25718: Do not remove uninitialized taints if vSphere (#785) #785
• Full changelog

aws-cloud-controller-manager

• OCPBUGS-29079: spec: add Provides: ose-aws-ecr-image-credential-provider #77
• Full changelog

azure-machine-controllers

• OCPBUGS-25510: bump x/crypto #100
• Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts, ovirt-installer

• OCPBUGS-30148: fix “OpenShiftSDN deprecated” error message #8094
• OCPBUGS-30011: PowerVS: remove IBM-Cloud/bluemix-go/api/account/accountv2 in 4.15 #8076
• OCPBUGS-29768: Power VS: Add sleep to allow workspace to configure PER #8052
• Bug OCPBUGS-29726: OpenStack: Fix dualstack with external load-balancer #8050
• OCPBUGS-29495: gcp: better error msg when service accnt missing #8024
• Bug OCPBUGS-29458: OpenStack: fix controlPlanePort validation #8019
• OCPBUGS-29236: Fixed control plane machine set handling of static IPs when AddressesFromPools is not in use. #7996
• OCPBUGS-28841: PowerVS: Add dal12 region #7977
• OCPBUGS-29955: PowerVS: Add debugging to ServiceInstanceNameToGUID #8065
• OCPBUGS-29585: PowerVS: handle composite_instance #8032
• OCPBUGS-29620: Power VS: Fix service instance list #8035
• OCPBUGS-29523: Bump terraform-provider-ibm to v1.61.0 #8026
• OCPBUGS-29436: PowerVS Fix next start search #8013
• OCPBUGS-29442: update RHCOS 4.15 bootimage metadata to 415.92.202402130021-0 #8016
• Full changelog

baremetal-runtimecfg

• OCPBUGS-29338: Ignore egress IP when selecting Node IP #299
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-30270: Introduce –issuer-url flag in oc login #1696
• Full changelog

cloud-credential-operator

• OCPBUGS-30412: gcp actuator update check to consider custom roles #686
• OCPBUGS-29155: Fix the ClusterOperator watch of the status controller #675
• Full changelog

cluster-baremetal-operator

• OCPBUGS-29787: Update the leader election durations to be tolerant #405
• Full changelog

cluster-capi-controllers

• OCPBUGS-29515: openshift: generate separate manifest for core CAPI CRDs #198
• Full changelog

cluster-capi-operator

• OCPBUGS-25505: UPSTREAM: <carry>: bump x/crypto #165
• OCPBUGS-29515: manifests-gen: store core capi crds also in their own manifest #160
• Full changelog

cluster-config-api

• OCPBUGS-29370: Update AWSCSIDriverConfigSpec fields validation to accept all current AWS partitions #1767
• OCPBUGS-29435: allow multiple audiences to be configured for kube-apiserver #1772
• Full changelog

cluster-config-operator

• OCPBUGS-28622: Add required PSa labels #402
• Full changelog

cluster-control-plane-machine-set-operator

• OCPBUGS-29419: Never delete a Machine when there’s a single Machine in an index #280
• OCPBUGS-29236: Fixed control plane machine set handling of static IPs when AddressesFromPools is not in use. #279
• Full changelog

cluster-etcd-operator

• OCPBUGS-30042: fix condition name type #1212
• OCPBUGS-28628: fix panic in health check timeouts #1191
• OCPBUGS-29717: [4.15] Replace nodelister with master nodelister everywhere #1206
• Full changelog

cluster-image-registry-operator

• OCPBUGS-29983: cmd/move-blobs: log and exit 1 on error instead of panic #1009
• OCPBUGS-29638: azurepathfix: fix stack hub, government and workload identity setup #1004
• OCPBUGS-29525: move azure storage blobs from docker back into /docker #1000
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-30304: cert rotation: Bump library-go to latest master #1653
• OCPBUGS-29775: webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator #1647
• OCPBUGS-30180: add provider name to cluster_infrastructure_provider when external platform #1639
• OCPBUGS-28882: Add sno section to alert description #1636
• Full changelog

cluster-kube-cluster-api-operator

• OCPBUGS-23711: Add Snyk file to exclude vendor directory on scan #34
• Full changelog

cluster-network-operator

• OCPBUGS-29090: network-node-identity mounts secrets with mode 0640 #2251
• OCPBUGS-29390: ipsec: fix openssl typo #2272
• OCPBUGS-29522: Not set CNO to degraded if API server returns conflict error #2275
• OCPBUGS-29654: [release-4.15] Disable network-node-identity on ROKS #2278
• OCPBUGS-29299: Update ingressconfig_controller to use field Manager #2265
• OCPBUGS-28902: Fix CloudPrivateIPConfig CRD in common #2263
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-29752: [release-4.15][manual] backport performance profile owner reference ehnancements (#963) #963
• Render: Add MCSelector to missing default MCPs (#959) #959
• Add support to inject owner-ref argument to render command (#966) #966
• OCPBUGS-29376: Mixed CPUs e2e tests (#952) #952
• OCPBUGS-27227: irqbalance: set banned cpus list to ‘0’ (#953) #953
• OCPBUGS-29396: Labels for e2e testing (#949) #949
• OCPBUGS-29376: e2e: cgroups: introduce cgroup package (#942) #942
• makefile: add target to trigger mixedcpus e2e test (#941) #941
• Full changelog

cluster-openshift-controller-manager-operator

• OCPBUGS-24086: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART #319
• Full changelog

cluster-platform-operators-manager

• OCPBUGS-24077: Updating ose-cluster-platform-operators-manager-container image to be consistent with ART #104
• Full changelog

cluster-storage-operator

• OCPBUGS-29370: Update AWSCSIDriverConfigSpec fields validation to accept all curren #461
• Full changelog

console

• OCPBUGS-25831: Date&Time values are not showing as per browser default language #13467
• OCPBUGS-29080: make getGroupVersionKindForResource null safe #13582
• OCPBUGS-29781: Fix operands list endpoint. #13633
• OCPBUGS-29812: Changes to prevent yaml editor crash in version 4.15 #13638
• OCPBUGS-29842: Switch to service from external result route endpoint #13627
• OCPBUGS-28889: VolumeSnapshots data not displayed in PVC > VolumeSnapshots tab #13570
• OCPBUGS-27431: Add source maps to production builds #13526
• OCPBUGS-26481: Tab VolumeSnapshots crashed on PVC page #13490
• OCPBUGS-25984: Fix config ini format #13475
• OCPBUGS-29844: Enable catalog source badge to truncate for long names #13629
• OCPBUGS-29846: Prevent complete page reload when changing perspective #13631
• OCPBUGS-29845: Page fails to return to the Secrets list after clicking ‘Cancel’ on any Secret creation page #13630
• OCPBUGS-29843: improve empty state message for Machines and MachineSets page #13628
• OCPBUGS-29679: TaskRuns list page is loading constantly for all projects #13618
• OCPBUGS-29640: Output image url link leads to 404 for Shipwright Builds #13615
• OCPBUGS-28232: do not deduplicate ImageManifestVulns in Overview popover #13545
• chore(i18n) OCPBUGS-28623: update translations: : Completed OCP-4.15/Master Branch/Sprint 244 #13594
• OCPBUGS-26567: Fixed some problems in topology Chinese translation text #13498
• OCPBUGS-29914: [release-4.15] Use selfsubjectreview API from frontend #13636
• OCPBUGS-29345: Any namespace after deletion is still visible on UI if it is the default selection in namespace dropdown #13599
• OCPBUGS-29096: Add TaskRun tab in PLR details page using plugin #13584
• OCPBUGS-29217: Revision tab and routes tab in serving details page showing no resource found #13590
• OCPBUGS-26411: Logs for PipelineRuns fetched from the Tekton Results API is not loading #13486
• OCPBUGS-28537: remove “openshift-storage” namespace usage from the console #13548
• OCPBUGS-29283: Error in displaying BuildRun logs in Console #13595
• Full changelog

console-operator

• OCPBUGS-27113: Prevent healthcheck controller from Available=False blipping #835
• OCPBUGS-29658: oauthclients: further split oidc and integrated oauth handling #870
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• Make sure we don’t mask LB tests failures and fix what was failing (#2360) (#2537) #2360
• Remove handling code for glog (#2534) #2534
• Bump golangci-lint for go 1.22 (#2545) #2545
• Delete LB that gone into ERROR state (#2536) #2536
• Add ability to add Events by OCCM (#2539) #2539
• Lookup ports by SG and not tags (#2355) (#2538) #2355
• retry ubuntu image download on temp error (#2506) #2506
• update k8s.io/kubernetes to v1.28.4 in go.mod (#2496) #2496
• Implement imagePullSecret support for release 1.28 (#2445) #2445
• fix: octavia tlsContainerRef validation for barbican secrets (#2458) #2458
• Remove duplicate pflag.Parse calls (#2467) #2467
• manage-security-groups: Only add SGs to LB members (#2455) (#2466) #2455
• Use standard service account name in OCCM helm chart (#2447) #2447
• 1.28.1 release (#2426) #2426
• delete barbican secret after the LB deletetion (#2424) #2424
• ensure octavia monitor is always updated (#2382) #2382
• add max_retries_down support for octavia health monitors (#2379) #2379
• Fix multiarch builds of Cinder CSI (#2342) #2342
• update tags (#2336) #2336
• Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

• OCPBUGS-29336: cherry-pick:release-4.15: OCPBUGS-29244 Update VolumeSnapshot and VolumeSnapshotContent using JSON patch #143
• Full changelog

docker-registry

• OCPBUGS-29525: bump docker-distribution to fix azure path issue #393
• Full changelog

fedora-coreos, machine-os-content, okd-rpms

• Bump Fedora CoreOS version string #759
• Bump fedora-coreos to latest stable #755
• Bump fedora-coreos to latest stable #751
• Bump fedora-coreos to latest stable #748
• OCPBUGS-29079: Install ecr-credential-provider from artifacts instead of stub script #747
• Full changelog

hyperkube, pod

• OCPBUGS-29661: Bump to 1.28.7 #1891
• OCPBUGS-29435: structuredAuthenticationConfig for kube 1.28-ish #1884
• OCPBUGS-27343: UPSTREAM: <carry>: Update management webhook pod admission logic #1854
• Full changelog

hypershift

• NO-JIRA: chore(deps): update rhtap references (release-4.15) #3705
• OCPBUGS-30189: set Konnectivity cipher suites #3673
• ”[release-4.15] OCPBUGS-27500: Fix default release image lookup” #3549
• OCPBUGS-30284: do not set KAS OAuthMetadataFile with Authentication type OIDC #3694
• OCPBUGS-30281: [release-4.15] OCPBUGS-30102: Support to disable machine management components #3670
• NO-JIRA: chore(deps): update rhtap references (release-4.15) #3675
• Update RHTAP references (release-4.15) #3645
• HOSTEDCP-1405: Remove files not needed #3669
• CNV-36056: Expose NodeSelector for KubeVirt VMs in NodePool #3648
• OCPBUGS-30088: rollout kas on auth config change #3653
• NO-JIRA: remove PrivateIngressController cleanup #3646
• OCPBUGS-29880: feat(config): Default RevisionHistoryLimit to 2 for deployments #3632
• OCPBUGS-29025: cpo: honor user provided oauthmetadata configmap passed in Authentication config #3522
• OCPBUGS-30029: sync AuthenticationConfiguration type with o/k 1.28 carry #3644
• NO-JIRA: Red Hat Konflux update hypershift-release-mce-25 #3643
• NO-JIRA: Remove specific pull secret watch in HCCO #3606
• OCPBUGS-29850: control-plane-pki-operator: fix CA used for SRE client credentials #3626
• NO-JIRA: PDB backports #3628
• OCPBUGS-29780: use 2040 for apiserver svc in IBM provider #3595
• OCPBUGS-29435: Use structured authentication config #3607
• OCPBUGS-28543: Include OperatorHubSpec sync with HC when Config is empty #3480
• OCPBUGS-29508: Default NodeUpgradeType on day2 nodepool creation #3582
• MULTIARCH-4084: Reduce the policy access scope to specific instance #3529
• NO-JIRA: Approvers update #3579
• OCPBUGS-27149: Add storage, csisnapshotcontroller and clustercsidrive… #3421
• OCPBUGS-29416: hypershift-operator: don’t create PKI rbac when disabled #3565
• OCPBUGS-29418: control-plane-pki-operator: add a signer for SRE break-glass #3566
• OCPBUGS-29089: Make ControllerAvailabilityPolicy immutable #3533
• OCPBUGS-29310: control-plane-pki-operator: validate CN for CSR #3558
• Full changelog

ibmcloud-cluster-api-controllers

• OCPBUGS-25507: update golang.org/x/crypto module #78
• Full changelog

insights-operator

• Add extra check in ids to bypass validations (#901) #901
• Full changelog

ironic-agent

• OCPBUGS-30078: [release-4.15] OCPBUGS-30078: Fix tripleo url with commit hash for openstack repos config #115
• OCPBUGS-28756: Always add ignition to set hostname on /etc/hostname #108
• Full changelog

machine-config-operator

• OCPBUGS-30017: CRI-O: Add missing Devices annotation to CRI-O configuration #4227
• OCPBUGS-29339: annotate on-prem static pods for workload partitioning #4179
• OCPBUGS-29797: set nodeStatusReportFrequency #4211
• OCPBUGS-29166: ovs-configure: fix vlan_parent calculation #4171
• OCPBUGS-29651: nmstate, configure nmstate to keep service yamls #4192
• OCPBUGS-29038: Add existing kubeletconfig/ctrcfg mc-name-suffix annotation #4166
• Full changelog

multus-cni

• OCPBUGS-28271: Fix SAST scan issues for multus-cni-container [4.15] #219
• Full changelog

oc-mirror

• OCPBUGS-23550: Generate both oc-mirror binaries for rhel9 and rhel8 (#804) #804
• Fix to ensure operator not found error exits with correct status (#794) #794
• Full changelog

olm-catalogd

• OCPBUGS-29796: UPSTREAM: 231: make garbage collection a runnable #44
• Full changelog

olm-rukpak

• : OCPBUGS-30264: Bump Helm & K8s dependencies #79
• Full changelog

openshift-controller-manager

• OCPBUGS-24086: Updating ose-openshift-controller-manager-container image to be consistent with ART #281
• Full changelog

openstack-cluster-api-controllers

• 🐛 Persist API FloatingIP immediately on creation #1846
• :bug: Fix potential panic during instance create #1808
• fix –short flag is removed issue for CI #1811
• Full changelog

operator-lifecycle-manager, operator-registry

• OCPBUGS-30193: Synchronize From Upstream Repositories #711
• OCPBUGS-30141: ClusterRoleBinding + Service SSA cherry-pick #707
• OCPBUGS-30147: Wait for required RBAC before creating packageserver CSV #710
• NO-ISSUE: [release-4.15] Backport flaky CRD upgrade block e2e test fix #694
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-29599: Update HostNetworkNamespace address_set for remote zone nodes #2074
• OCPBUGS-29185: Wait for ovnkube controller to start before checking result error. #2064
• OCPBUGS-28725: Update netpol namespace address sets usage to the old ways #2050
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• OCPBUGS-29180: fix: convert continue field between v1beta1 and v1alpha1 #276
• OCPBUGS-29509: fix: don’t fail metadata transform on unknown types (#6298) #278
• Full changelog

telemeter

• OCPBUGS-24153: Updating telemeter-container image to be consistent with ART #496
• OCPBUGS-24153: Force kill jobs after integration v2 test finish #515
• Full changelog

tests

• OCPNODE-2101: add kube-rbac-proxy-crio toleration change #28637
• OCPBUGS-30161: Skip tests for image-registry operator with single replica #28633
• OCPBUGS-29927: Only extract node role from properly formatted node-role label #28615
• TRT-1512: Add debug messages to debug openshift-tests hang #28610
• OCPBUGS-27847: Do not assume there is just a single kubelet systemd service #28545
• Full changelog

vsphere-cluster-api-controllers

• OCPBUGS-26476: UPSTREAM: <carry>: bump x/crypto #35
• Full changelog

---

View changelog in Markdown or change previous release: 4.15.0-0.okd-2024-02-23-1634104.15.0-0.okd-2024-02-10-0355344.15.0-0.okd-2024-01-27-070424───4.18.0-0.okd-scos-2024-11-21-0211394.18.0-0.okd-scos-2024-11-20-1411384.18.0-0.okd-scos-2024-11-20-0209584.18.0-0.okd-scos-2024-11-19-1409574.18.0-0.okd-scos-2024-11-19-0209564.18.0-0.okd-scos-2024-11-18-140955───4.17.0-0.okd-scos-2024-11-20-2214034.17.0-0.okd-scos-2024-11-20-1014034.17.0-0.okd-scos-2024-11-19-2214034.17.0-0.okd-scos-2024-11-19-1014034.17.0-0.okd-scos-2024-11-18-2214034.17.0-0.okd-scos-2024-11-18-101403───4.16.0-0.okd-scos-2024-11-21-0014434.16.0-0.okd-scos-2024-11-20-1214434.16.0-0.okd-scos-2024-11-20-0014434.16.0-0.okd-scos-2024-11-19-1214434.16.0-0.okd-scos-2024-11-19-0014434.16.0-0.okd-scos-2024-11-18-121443───4.15.0-0.okd-scos-2024-05-13-2236094.15.0-0.okd-scos-2024-04-25-1837084.15.0-0.okd-scos-2024-04-25-0637084.15.0-0.okd-scos-2024-04-24-1837084.15.0-0.okd-scos-2024-04-24-0637084.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2024-11-14-2031284.15.0-0.okd-2024-11-09-0406444.15.0-0.okd-2024-11-08-1606444.15.0-0.okd-2024-11-05-1344204.15.0-0.okd-2024-11-05-0144204.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.17.0-okd-scos.ec.34.17.0-okd-scos.ec.24.17.0-okd-scos.ec.14.17.0-okd-scos.ec.04.17.0-0.okd-scos-2024-09-30-1017394.17.0-0.okd-scos-2024-09-26-2248284.17.0-0.okd-scos-2024-09-24-1048284.17.0-0.okd-scos-2024-08-21-100712───4.16.0-okd-scos.04.16.0-0.okd-scos-2024-09-24-1517474.16.0-0.okd-scos-2024-08-21-1556134.15.0-0.okd-scos-2024-01-18-223523

Source code for this page located on github