# 4.15.0-rc.2

Created: 2024-01-12 19:43:20 +0000 UTC

Image Digest: `sha256:9f71d8b3765a675e6deb6a745aecdeddd30bcdc9f64e30dd3bccf343c038b0e9`

Promoted from registry.ci.openshift.org/ocp-arm64/release-arm64:4.15.0-0.nightly-arm64-2024-01-10-070951


## Changes from 4.15.0-rc.1

### Components

* Kubernetes upgraded from 1.28.4 to 1.28.5
* Red Hat Enterprise Linux CoreOS upgraded from 415.92.202312250243-0 to 415.92.202401100144-0


### Rebuilt images without code change

* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [bbe9ffce](https://github.com/openshift/driver-toolkit/commit/bbe9ffce3797fc0d9d4efcb2677867f43ce69e97) `sha256:2e01549f0be73dedf6d43f1cfa38d944a7f6ee257909b7026ff42a6aebad40c8`
* [ironic](https://github.com/openshift/ironic-image) git [b3206358](https://github.com/openshift/ironic-image/commit/b320635825fcdfa9d692e3143e8ccf2fe34a8fb9) `sha256:17e2994a93ca62b97a07620d46d80316f4d748f2de023508168919bdce26d8f5`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [bcbcd95b](https://github.com/openshift/ironic-rhcos-downloader/commit/bcbcd95b6209afc8248b34c55294686dbd3831a3) `sha256:56c245dcc9dcd672fdb6852bbaa887879a2c50c34af6ba5cdd96b2035de3fe2d`
* machine-os-content `sha256:3bfe7daec1cbfcc1789627e5ed36e7dd0499cfecfd9e31ce4595fe302fe1ade0`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [9e9c920f](https://github.com/openshift/machine-os-images/commit/9e9c920f985a375536e8d4caafd2d7ed579e27f3) `sha256:e85c054306d70140cae99ced63f042450afb0f5a6f658b1e38a6d46965f3dcda`
* rhel-coreos `sha256:5b1d48868e5079966d3f9f330feb715802f8cb02d70ace9a484339850b8bd97f`
* rhel-coreos-extensions `sha256:54eb7c92d099e01ed00839605d1040ee0e844c0fc0ed229b4b17a93f607031dd`


### [alibaba-cloud-controller-manager, alibaba-cloud-csi-driver, alibaba-disk-csi-driver-operator, alibaba-machine-controllers, csi-driver-manila, csi-driver-manila-operator, csi-driver-nfs, hyperkube, ibm-cloud-controller-manager, ibm-vpc-block-csi-driver, ibm-vpc-block-csi-driver-operator, ibm-vpc-node-label-updater, ibmcloud-cluster-api-controllers, ibmcloud-machine-controllers, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, powervs-block-csi-driver, powervs-block-csi-driver-operator, powervs-cloud-controller-manager, powervs-machine-controllers, vsphere-cloud-controller-manager, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector](https://github.com/openshift/kubernetes/tree/b400f2077ca1e5191282c53a64bd650209a430af)

* [OCPBUGS-26068](https://issues.redhat.com/browse/OCPBUGS-26068): Backport CEL IP and CIDR validations [#1843](https://github.com/openshift/kubernetes/pull/1843)
* [OCPBUGS-26005](https://issues.redhat.com/browse/OCPBUGS-26005): Update to Kubernetes 1.28.5 [#1837](https://github.com/openshift/kubernetes/pull/1837)
* [Full changelog](https://github.com/openshift/kubernetes/compare/7aa0a745c4363fdecb2b5afc69a8a647471d8651...b400f2077ca1e5191282c53a64bd650209a430af)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/dc30b80c9931de88a841eb0677dadbd1d63c27a6)

* [OCPBUGS-24165](https://issues.redhat.com/browse/OCPBUGS-24165): Updating ose-apiserver-network-proxy-container image to be consistent with ART [#44](https://github.com/openshift/apiserver-network-proxy/pull/44)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/f0caebbab59ca8e8907f3eb8eb48f15c2a341228...dc30b80c9931de88a841eb0677dadbd1d63c27a6)


### [aws-ebs-csi-driver-operator](https://github.com/openshift/csi-operator/tree/f258bd0bf4e0ed13d6f555962d594818bd756f2d)

* [OCPBUGS-26195](https://issues.redhat.com/browse/OCPBUGS-26195): Create RBAC objects first [#93](https://github.com/openshift/csi-operator/pull/93)
* [OCPBUGS-25995](https://issues.redhat.com/browse/OCPBUGS-25995): Add selinux [#91](https://github.com/openshift/csi-operator/pull/91)
* [Full changelog](https://github.com/openshift/csi-operator/compare/700ced884a03c61a60a95a44bd252c9ffb89397e...f258bd0bf4e0ed13d6f555962d594818bd756f2d)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/1fd2e4e8c0a56e5a5e9367f11b3dafbb79d31ea1)

* [OCPBUGS-22003](https://issues.redhat.com/browse/OCPBUGS-22003): Upgrade golang/x/net for CVE-2023-39325 (4.15) [#13](https://github.com/openshift/azure-workload-identity/pull/13)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/2872dbac3b8ceee33490d974c979d309d266521d...1fd2e4e8c0a56e5a5e9367f11b3dafbb79d31ea1)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/c20bcb355061fc9055992b18cca08683511b676c)

* [OCPBUGS-26511](https://issues.redhat.com/browse/OCPBUGS-26511): Bump default channel to 4.15 [#7883](https://github.com/openshift/installer/pull/7883)
* [OCPBUGS-26051](https://issues.redhat.com/browse/OCPBUGS-26051): aws: validate instance arch [#7868](https://github.com/openshift/installer/pull/7868)
* [OCPBUGS-25990](https://issues.redhat.com/browse/OCPBUGS-25990): Fixes for the OpensStack UPI playbooks. [#7863](https://github.com/openshift/installer/pull/7863)
* [Full changelog](https://github.com/openshift/installer/compare/2b894776f1653ab818e368fa625019a6de82a8c7...c20bcb355061fc9055992b18cca08683511b676c)


### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/0849c462de13b9a5765b9a8c882acb9e6e8bf39e)

* [OCPBUGS-24147](https://issues.redhat.com/browse/OCPBUGS-24147): Updating ose-cluster-bootstrap-container image to be consistent with ART [#101](https://github.com/openshift/cluster-bootstrap/pull/101)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/68b3168fbb4a1e5ce19e2233ee05f5a53db20f51...0849c462de13b9a5765b9a8c882acb9e6e8bf39e)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/fc98dca3226e7ed5667e03284d685a190fd82811)

* [OCPBUGS-26413](https://issues.redhat.com/browse/OCPBUGS-26413), [OCPCLOUD-1726](https://issues.redhat.com/browse/OCPCLOUD-1726): GCP Credential Req. manifest for CAPI to use new API field [#155](https://github.com/openshift/cluster-capi-operator/pull/155)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/c0448925b8dda2493032379953105e923a416c88...fc98dca3226e7ed5667e03284d685a190fd82811)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/51fb8a64880a81d94c83643bc73cd8b3a9986dff)

* [OCPBUGS-26480](https://issues.redhat.com/browse/OCPBUGS-26480), [OCPCLOUD-1724](https://issues.redhat.com/browse/OCPCLOUD-1724): GCP Credentials req. manifest of CCMO to use new API field [#320](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/320)
* [OCPBUGS-26210](https://issues.redhat.com/browse/OCPBUGS-26210): Adds CloudConfigTransformer for Azure [#319](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/319)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/ac7b0ea83f3968daad19e9088460f71c600a3e67...51fb8a64880a81d94c83643bc73cd8b3a9986dff)


### [cluster-config-api](https://github.com/openshift/api/tree/44756aa368798f4feea1bdc047e6df13174e88d9)

* [OCPBUGS-26441](https://issues.redhat.com/browse/OCPBUGS-26441): disable psa [#1717](https://github.com/openshift/api/pull/1717)
* [CORS-3029](https://issues.redhat.com/browse/CORS-3029): Add Cloud LB IPs to GCP PlatformStatus of Infrastructure CR [#1705](https://github.com/openshift/api/pull/1705)
* [Full changelog](https://github.com/openshift/api/compare/7cca8a108d7b6b13001564420688f4e06a6dd320...44756aa368798f4feea1bdc047e6df13174e88d9)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/9eb983497cd90c4115d7dc476e4bcf0dfb5ee002)

* [OCPBUGS-20024](https://issues.redhat.com/browse/OCPBUGS-20024): Enable topology-aware hints iff nodes in >=2 zones [#399](https://github.com/openshift/cluster-dns-operator/pull/399)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/b8c175340dcc27ec1b7bff3da69ac9d52af6592a...9eb983497cd90c4115d7dc476e4bcf0dfb5ee002)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/0fcdb4f22df3e1fa151815c31fec47cb4b676238)

* [OCPBUGS-26063](https://issues.redhat.com/browse/OCPBUGS-26063): IBMCloud - Add support for endpoint overrides [#984](https://github.com/openshift/cluster-image-registry-operator/pull/984)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/09884b538029322fd09d242f4a20bc959666bb80...0fcdb4f22df3e1fa151815c31fec47cb4b676238)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/37015e879a7ef647d7a953edea902d67e2ae91a7)

* [OCPBUGS-24156](https://issues.redhat.com/browse/OCPBUGS-24156): Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART [#100](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/100)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/e55e78a941daa4f3ac10aec8faf68caef7f4d8b7...37015e879a7ef647d7a953edea902d67e2ae91a7)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/46c093451347d31a7461cd2c116db85587da9c6f)

* [OCPBUGS-24036](https://issues.redhat.com/browse/OCPBUGS-24036): remove all managed fields used by old manager [#2167](https://github.com/openshift/cluster-network-operator/pull/2167)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/a95196b86afae84c7a47558e8283c33ff9cbb217...46c093451347d31a7461cd2c116db85587da9c6f)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/b4be0464700b4597bab8f7f083d116d357caa841)

* [OCPBUGS-25982](https://issues.redhat.com/browse/OCPBUGS-25982): E2E: Add tests for Dynamic ovs pinning (#904) [#904](https://github.com/openshift/cluster-node-tuning-operator/pull/904)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/b557b01c5ce3dac60dae45407aa8f4114a8891df...b4be0464700b4597bab8f7f083d116d357caa841)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/5ae83b0e51342ca99c242c6993efc1e8c01ef17e)

* [OCPBUGS-25949](https://issues.redhat.com/browse/OCPBUGS-25949): pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls [#1013](https://github.com/openshift/cluster-version-operator/pull/1013)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/1f8f3b1f94690c8d5b3b1ee7e46e77d6bb7b64af...5ae83b0e51342ca99c242c6993efc1e8c01ef17e)


### [console](https://github.com/openshift/console/tree/f391957d34874041bb876c0b6ce06c9af8513ef9)

* [OCPBUGS-24812](https://issues.redhat.com/browse/OCPBUGS-24812): Add missing https:// check for an external link [#13433](https://github.com/openshift/console/pull/13433)
* [OCPBUGS-26516](https://issues.redhat.com/browse/OCPBUGS-26516): bump helm version to 3.13.2 for OCP 4.15 [#13465](https://github.com/openshift/console/pull/13465)
* [OCPBUGS-26041](https://issues.redhat.com/browse/OCPBUGS-26041): fix bug where Update cluster modal will not open [#13479](https://github.com/openshift/console/pull/13479)
* [OCPBUGS-26209](https://issues.redhat.com/browse/OCPBUGS-26209): Fix PipelineRun Logs tab navigation [#13484](https://github.com/openshift/console/pull/13484)
* [Full changelog](https://github.com/openshift/console/compare/29ba7a7ed4f4564334b568a8bee7ef830d1123c1...f391957d34874041bb876c0b6ce06c9af8513ef9)


### [etcd](https://github.com/openshift/etcd/tree/5acb4f3078adbea40d050365ac5294229e574c67)

* [OCPBUGS-24933](https://issues.redhat.com/browse/OCPBUGS-24933): Rebase etcd 3.5.11 openshift 4.15 [#232](https://github.com/openshift/etcd/pull/232)
* [Full changelog](https://github.com/openshift/etcd/compare/969d7afab8258b4610569d001e9a06b677acd021...5acb4f3078adbea40d050365ac5294229e574c67)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/118209dfa2ee7ce8acea2872db4544068aa9e1a1)

* [OCPBUGS-25947](https://issues.redhat.com/browse/OCPBUGS-25947): Fix changing load balancer scope [#56](https://github.com/openshift/cloud-provider-gcp/pull/56)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/b4b418c1bf3fe99aff4073f1a91ea4cb89844696...118209dfa2ee7ce8acea2872db4544068aa9e1a1)


### [hypershift](https://github.com/openshift/hypershift/tree/3ab6c267bf4512f67fd5d10d868effaa73256032)

* [OCPBUGS-26412](https://issues.redhat.com/browse/OCPBUGS-26412): Set new condition on SG deletion. [#3381](https://github.com/openshift/hypershift/pull/3381)
* [OCPBUGS-26410](https://issues.redhat.com/browse/OCPBUGS-26410): Disable UWM Telemetry remote writer when MGMT cluster is disconnected [#3380](https://github.com/openshift/hypershift/pull/3380)
* [OCPBUGS-26410](https://issues.redhat.com/browse/OCPBUGS-26410): Disable UWM Telemetry writer when telemeter-client cm not exists [#3379](https://github.com/openshift/hypershift/pull/3379)
* [OCPBUGS-26223](https://issues.redhat.com/browse/OCPBUGS-26223): hostedcontrolplane: don't start pki operator when disabled [#3376](https://github.com/openshift/hypershift/pull/3376)
* [Full changelog](https://github.com/openshift/hypershift/compare/9ed5485262179e1183aee4880adfbe7678f6cba4...3ab6c267bf4512f67fd5d10d868effaa73256032)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/e8749689edb8e7fea42eca5f2b67c3187192cdeb)

* [OCPBUGS-24142](https://issues.redhat.com/browse/OCPBUGS-24142): Updating ose-kube-storage-version-migrator-container image to be consistent with ART [#201](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/201)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/95ad20fc390cd34e0e5ba5135d5048bc0f008c0d...e8749689edb8e7fea42eca5f2b67c3187192cdeb)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/1e096cdf1bfd60e9bf5ee6c90585a8f96cc0c09a)

* [OCPBUGS-26045](https://issues.redhat.com/browse/OCPBUGS-26045): Replace genisoimage with xorriso in 4.15 to allow rhel9 bump [#272](https://github.com/openshift/cluster-api-provider-libvirt/pull/272)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/71cb911bb02c5728c3ccf7738c8082e36416fa10...1e096cdf1bfd60e9bf5ee6c90585a8f96cc0c09a)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/2886a920caee53f77523f785d8d92c88f71f10d0)

* [OCPBUGS-26406](https://issues.redhat.com/browse/OCPBUGS-26406), [OCPCLOUD-1725](https://issues.redhat.com/browse/OCPCLOUD-1725): Add GCP custom roles [#1196](https://github.com/openshift/machine-api-operator/pull/1196)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/9e4c3a3a1c68f040c602dc783415f7fa0bfa417f...2886a920caee53f77523f785d8d92c88f71f10d0)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/860ecd31f1b68d021b316a0793b6cc3eadacece1)

* [OCPBUGS-26240](https://issues.redhat.com/browse/OCPBUGS-26240): Azure Run ovs-configuration.service before dnsmasq.service [#4101](https://github.com/openshift/machine-config-operator/pull/4101)
* [OCPBUGS-25948](https://issues.redhat.com/browse/OCPBUGS-25948): kubelet: fix kubelet labels [#4090](https://github.com/openshift/machine-config-operator/pull/4090)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/6457fc9a0c23702f8b0756b543a286ed4d2f9874...860ecd31f1b68d021b316a0793b6cc3eadacece1)


### [multus-cni](https://github.com/openshift/multus-cni/tree/5cfe4aead61e1c07b7ddc014c6f6baf4ccccb28a)

* [OCPBUGS-26535](https://issues.redhat.com/browse/OCPBUGS-26535): Revert #206 "Adds a wait on unix socket readiness [backport 4.15]" [#209](https://github.com/openshift/multus-cni/pull/209)
* [OCPBUGS-22839](https://issues.redhat.com/browse/OCPBUGS-22839): Adds a wait on unix socket readiness [backport 4.15] [#206](https://github.com/openshift/multus-cni/pull/206)
* [Full changelog](https://github.com/openshift/multus-cni/compare/473da983ccafa7d14198594b498fa125cd8018df...5cfe4aead61e1c07b7ddc014c6f6baf4ccccb28a)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/a55daf619fc97ff5c0c0b61edd320381c943bc8f)

* [OCPBUGS-24090](https://issues.redhat.com/browse/OCPBUGS-24090): Updating ose-openshift-apiserver-container image to be consistent with ART [#406](https://github.com/openshift/openshift-apiserver/pull/406)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/0c311d3c194446a863726f5b6d5c6abe9a2a4915...a55daf619fc97ff5c0c0b61edd320381c943bc8f)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/2367f2c22bc3edf8e5ebbb9fd20b0a9690d05c80)

* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#154](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/154)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/469c7afbff41f02ca3498fcd87cb675f5a6217d4...2367f2c22bc3edf8e5ebbb9fd20b0a9690d05c80)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/c17320571b51e06e023926aef3edfe7a8fedd2d7)

* [OCPBUGS-26066](https://issues.redhat.com/browse/OCPBUGS-26066): [release-4.15] NO-ISSUE: Synchronize From Upstream Repositories [#648](https://github.com/openshift/operator-framework-olm/pull/648)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/2fa64b105baa03c5c0a48e92e1663e312ebef535...c17320571b51e06e023926aef3edfe7a8fedd2d7)


### [tests](https://github.com/openshift/origin/tree/6d5063bb04e0395cc93d4c2591e5e1372d8e5119)

* [OCPBUGS-26239](https://issues.redhat.com/browse/OCPBUGS-26239): Properly ignore kube guard probe events [#28504](https://github.com/openshift/origin/pull/28504)
* [OCPBUGS-26206](https://issues.redhat.com/browse/OCPBUGS-26206): Update cluster-monitoring-operator request limits [#28506](https://github.com/openshift/origin/pull/28506)
* [Full changelog](https://github.com/openshift/origin/compare/ecca9c7c8212677dd28aa93d328849885221fb23...6d5063bb04e0395cc93d4c2591e5e1372d8e5119)