4.15.0-ec.3

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.15.0-ec.3-aarch64

Tests:

Informing jobs
- ovn-upgrade Succeeded periodic-ci-openshift-multiarch-master-nightly-4.15-ocp-e2e-upgrade-aws-ovn-arm64

Upgrades from:

Untested upgrades: 4.14.4, 4.14.5, 4.15.0-ec.0, 4.15.0-ec.1

4.15.0-ec.2 - Success

Upgrades to:

Changes from 4.15.0-ec.2

Created: 2023-12-01 16:33:25 +0000 UTC

Image Digest: sha256:3951c63de582a36a647651f5587f9d049a3fb70973290716f326d34f078f79c8

Components

Kubernetes 1.28.3
Red Hat Enterprise Linux CoreOS upgraded from 415.92.202311061558-0 to 415.92.202311271112-0 (diff)

New images

cluster-config-api git d83ab5b2 sha256:af93ddc2344003c9b0df1bfe126e7f8e061aec2e12f2237204758c1165a69426
installer-altinfra git e80d50ac sha256:73e0219922978383292511e45cdc436fd9f476e35afdd4ae62efc80d10b43d87

Rebuilt images without code change

apiserver-network-proxy git f0caebba sha256:61d63f976911bdbf12257cf75d03103235b1d95534ae6196c58a08b18617839e
aws-cloud-controller-manager git 0f5434cb sha256:11cfe4843959e08759f59ecc3ee17f5385fbff47194796944a1bdf8d2f999a70
aws-pod-identity-webhook git ff19b978 sha256:9caf7ca9125b3ad155f2bee9a5036073c5454675d16205d94b049bae139e20f7
azure-cloud-controller-manager git 75ed9a21 sha256:b76336e0c32ab61b6cee814ab3001d604280d3d8f9493386a9682ace4027f3de
azure-cloud-node-manager git 75ed9a21 sha256:3fd1f1c8274456fd29a1a0e03fb5c379c10907654eeddb0e2bc1a6071e6a6739
azure-cluster-api-controllers git 4b2e1b6a sha256:c9b775c4b2bb406fafb8e8c2073dbdb763d809f61b0d5d711a16cbd0c66686c4
azure-file-csi-driver git d2b76326 sha256:a69bec63082c96ea00549764f5fa2c830e472aa9ad844086dfc1fa2f9610eeb7
azure-machine-controllers git 4de2d820 sha256:51f405241191816365eff3ef5f1c18f4542b99c7517a984e6a68777936b88b0c
azure-workload-identity-webhook git 2872dbac sha256:f0aa039b8562c7e8e8e1558bea72d051cab10ba52376e39d7c1f7bb04181b196
baremetal-machine-controllers git 2adf4799 sha256:920d3dc2774d2c7d60fca105f3542d1e82acfcb0ab5237a1e667e3631653395b
cloud-network-config-controller git 81ab2a17 sha256:e3c077c2c9d22f2134f144de1ea87c4f9f93b57beca79e2cdc843377fdf1f6c5
cluster-authentication-operator git d57f7c99 sha256:00d05ca207611e328527102b40a3dd786706c2f696b67f1ec687bced277da00b
cluster-autoscaler git f7e7200c sha256:6247a70d449c85d77277b852254b481bb0834dc8d1a160f355c3ee1d429c2641
cluster-bootstrap git 68b3168f sha256:63118d3462bf7e9bf2fdb7d6beb03d01b40cb25fd76465e5b37cac6aff8c8832
cluster-dns-operator git 25020f49 sha256:327c143176d66b002c1e5615cdd5d1b615ed1bcc92214676cce5c9e35b5926c4
cluster-kube-cluster-api-operator git 4c6b6857 sha256:59f1c62aa148aaf47130d83af586860ab2db0c9af34a03ca7680740e2e98eb0f
cluster-kube-controller-manager-operator git 839167b4 sha256:0a108b064aac785d3d2ce5cff6f91cdcb120179d9a865b01379f504763b07164
cluster-kube-storage-version-migrator-operator git e55e78a9 sha256:ef870726bbdb4cbdb67fb85dbbb35a699ee82c6f4bbfce200b44f798d4b5971d
cluster-olm-operator git a7956af6 sha256:71b03528fed7c7aef8d4bed5f2e9b93f6484052d19e482f1500234c85e2e5aaa
cluster-platform-operators-manager git 25dbb307 sha256:0a27a4d34cbede97409b5409a8d4b1c8bebff8f0d0ad23d9e15e41c796278672
cluster-policy-controller git 50c2a833 sha256:dd215f1b701602308db247a73d2486e04ab80cf7ab27fdbc399e774c14f37f4a
cluster-samples-operator git 05e9bb90 sha256:90b071bfe3e7a1063ab11a30d35654aea36321718a421b2b98df004dc513e623
cluster-update-keys git 804dfece sha256:78a9b32e6d41e7cff12ba202bad40818705cc98c184a0d074cffa98e07f7f761
configmap-reloader git 4b2efe5c sha256:4eca78bf8098c73f8f54dfa3085b934f200d52c6f1511329bba53085c6223101
coredns git 68ef945a sha256:1e99643e329aa72bdf076fcfa77d8b9b4e9a653c005b550d91fe8b76887ce813
csi-external-attacher git 6745e86f sha256:1e4ec8e17ea6320a1757e7fbedd105d04e4d6a53459b49c9dc2035afca6a8337
csi-external-resizer git 3b4236d3 sha256:d9d5eaf031254b41d9c22572ae0a6850f4dd3e05755c8889742b6889f63341dc
csi-livenessprobe git 240bb8c0 sha256:03c455017534e6a1766a2cb1f99f0a4e3f3aa4aec1a945ee34bc41960fbe8b1e
csi-node-driver-registrar git ba09f280 sha256:f64d4d4a0b9223be11363262829f35aa30626f8d1177b6c530a65350bf3f21fa
egress-router-cni git 39ea8ee1 sha256:072fe743003c027578f6932e81351dd4e1b3685c9e672a77356e73fa0cf176f5
haproxy-router git fb70ac4d sha256:3667e22f612aa2c3aadc65d93863b8e8f21bf45f276ff041f2030421264be105
ironic-machine-os-downloader git bcbcd95b sha256:0f4a1d89ecbc91d93fbb0204dd72be106a63e102e8395d71c2e43ea2b5cdb0fb
ironic-static-ip-manager git 47200021 sha256:aec54c0b59f5129240bea1a56e8c3a22862fb699dd0dab6cfce601156822a0ce
keepalived-ipfailover git 16dbf5ee sha256:6aad480ce56ec3b56f9f3acb02181c1bdb9bfc855636a5629c73c6cc10856765
kube-metrics-server git 6a797ce8 sha256:da05de6946a112eab515f89df4134fef87a2826a278b0d9a26ae348b7c0aaff3
kube-rbac-proxy git e8e8c84b sha256:613c113eb76a89f60fa786a087dfb49a8b78a01a79fa93616fe9760155c90ea4
kube-state-metrics git 3653218b sha256:aa3cd19431300bb41a5d99fe270174b1d2c1005862ceeb6e1820ec7e90cc0305
kube-storage-version-migrator git 95ad20fc sha256:5179c00575de39a55532f9f0ec54a0618e837f213a0a0b31ad3e63588598bba2
kubevirt-cloud-controller-manager git e465e606 sha256:508c69c85448833f22d401f36a4e34a35dbb0c041b6026ca35f82fa57796abdd
kubevirt-csi-driver git aea7be8e sha256:c61bd576866881681181c1c0cb80ae84e3d70b9211f26c20d60ac244661b4b06
libvirt-machine-controllers git 43b2b820 sha256:a5618e49a4ef7b4e822a3f076e5fe5532764c8353a52334031f8a9c38a5d8546
machine-image-customization-controller git 4677f060 sha256:41f1b95a9e18681fad75209c7e3829605f29bf0d8e947c87c6b5e336027dcf75
machine-os-content sha256:6d99549c42f264d93f7e35179e0f3a5abd75a8ab6a722efd447af3f8153ebfa3
multus-admission-controller git 0cc54f70 sha256:ae420a2adc6ae5510033597fe0c920895a1a953cea341d39e2766b53623dec0c
multus-cni git 2121697f sha256:dbae26ce3ee71960cb72c2ccc2758372de5626fe6f1e2e76167fb00109471690
multus-networkpolicy git dc646370 sha256:73d7698f402e0fc96babd897598b4c4ef7444ef567c25221ce1e537c2df8f264
multus-route-override-cni git a5b755b5 sha256:4ca004ab06e1496656faecbd2b5121f084360c2915ad25cd966aaae1c6e0b20a
must-gather git c7f5e3f4 sha256:4aa16db9ac70c5af80e6cd8ea45654fec7d50a10c5a23404ca1d5cf717b911e4
network-interface-bond-cni git f91decaa sha256:22acc96a35cc366727b09a06d3258cc712c4b4ae08062ba28c77a28233be1928
network-metrics-daemon git 561753e4 sha256:fdb39a428a07009dc94efd5f82ce4814e9c39cc5c0b655156099e1a6a116152e
oauth-apiserver git a87bd939 sha256:b0dc8c3f02c913f39ea06b3f45cf5941d33b0bf3b301fb2342363fc4605a5faf
oauth-server git 8296c054 sha256:2fbdcfa58fd511e68bf75deaab6603174871162088f2fd470e73b6a84cbe9002
openshift-state-metrics git 899188df sha256:c4a947d19574b6c9f3c3f7c2ad0bcec43d3922a1a7d00e3067a95a946dfbebce
openstack-cinder-csi-driver git b0eea51e sha256:244e9dc1be46c9de3b74b8af5f0857e1da89c3ee7f8ce339fc3c7627c1e48e3f
openstack-cloud-controller-manager git b0eea51e sha256:b0ba4fe69a5f525b16549a6b4231544fac86a00a3ad4f14ddbb74e45ab935514
openstack-cluster-api-controllers git 6fdfd82f sha256:27c12aa854bfbf6ea0ddcf4c012e11310ff66e61edb83f90d0fa1a0386844390
ovirt-csi-driver git b8d25ad6 sha256:2c9e4c70cfac9756a589febbfa3644c1114239aac43d95d6f167fe7549ef0118
ovirt-csi-driver-operator git e9b0fa23 sha256:81b5855de10c7501f3b641a7f21f8564fac0d95e70e6ff5c57eef865ab1b9e7a
ovirt-machine-controllers git 5d708631 sha256:cea5cf855ce99ae8151dd7e4a7e0fcb9e6b700dee01a44f7acd809e0e748a547
prom-label-proxy git f3f1f5d1 sha256:5bf4aceb65d093b2de08f0a6b4459ad6534ef392da728a5ecdd38f7326fdbcea
prometheus-alertmanager git 870ade52 sha256:bcb6390628e351227304b57dd9310f2d80f54da3986caad2c4357f4060c1d18f
rhel-coreos sha256:637f7361b13720583ff31746da6147b83c3a17ee1c27f4f1b7b85c3e5e94fe8f
rhel-coreos-extensions sha256:90dc651a398de379c0fbbdad98989f08e7a262603d2b1eb681abc6fc9eba810a
route-controller-manager git c5cc7a73 sha256:aac38810b6bfad6ef55d02d56fa83251422a4182a2939c1fc39a9c8713f8c416
service-ca-operator git fe887613 sha256:bef2f1cfde3b7974e0b92a240411f767f83bbda8a158852944622807d5da3bf4
thanos git 66161ad4 sha256:ac8b5526691ace8d6e5c522cecec17e1835f826324e1eee22c1a1d0fc6f5ef20

agent-installer-api-server

MGMT-16291: revert default faulty OCP images (#5737) #5737
MGMT-14810: Remove API and Ingress VIP (#5501) #5501
HOSTEDCP-999: Missed service-cidr for capi ipv6 CI test (#5721) #5721
NO-ISSUE: Bump github.com/google/uuid from 1.3.1 to 1.4.0 (#5726) #5726
NO-ISSUE: Bump OCP versions: 4.14, 4.13, 4.12 (#5722) #5722
Update baremetal operator (#5698) #5698
MGMT-16001: Sanitize reclaim agent daemonset name (#5699) #5699
HOSTEDCP-999: Minor fixes for disconnected CAPI CI (#5713) #5713
AGENT-740: Include baremetal host BMC fields in install-config override (#5675) #5675
NO-ISSUE: adding me to owners (#5709) #5709
NO-ISSUE: Cluster code cleanups (#5715) #5715
NO-ISSUE: Bump OCP versions: 4.12 (#5714) #5714
MGMT-16236: remove elastic APM (#5702) #5702
NO-ISSUE: Upgrade debug image to latest delve (#5711) #5711
Update RHTAP references (#5688) #5688
HOSTEDCP-999: Setup CI for disconnected ipv6 CAPI (#5536) #5536
NO-ISSUE: Inventory code cleanups (#5695) #5695
NO-ISSUE: dependabot optimize (#5697) #5697
NO-ISSUE: Bump OCP versions: 4.14, 4.13, 4.15 (#5701) #5701
NO-ISSUE: Remove unused functions (#5696) #5696
NO-ISSUE: BMH and Agent controllers code cleanup (#5693) #5693
NO-ISSUE: Remove unused functions from ctrl event wrapper (#5694) #5694
NO-ISSUE: Bump github.com/Azure/go-autorest/autorest/adal (#5604) #5604
NO-ISSUE: ClusterDeployments controller code cleanup (#5689) #5689
NO-ISSUE: InfraEnv controller code cleanup (#5690) #5690
MGMT-15271: Append kargs to installer for s390x (#5665) #5665
Add missing scheme to ServiceMonitor (#5672) #5672
Updating ose-agent-installer-api-server-container image to be consistent with ART (#5495) #5495
MGMT-15971: Create ManagedCluster CR so that the hub will show up as “Ready” in MCE (#5575) #5575
Update RHTAP references (#5682) #5682
NO-JIRA: Enable skip mco reboot functionality only if openshift version is 4.15 and higher (#5680) #5680
NO-ISSUE: Bump OCP versions: 4.11, 4.12, 4.13 (#5681) #5681
MGMT-16151: allow CORS OPTIONS for s3 presigned url (#5674) #5674
Update RHTAP references (#5654) #5654
MGMT-16151: allow CORS HEAD for s3 presigned url, as UI uses preflight checks (#5671) #5671
MGMT-16061: changing dnsmasq configuration for sno in order to meet single ip installation flow for ibu (#5658) #5658
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

NO-ISSUE: Bump the go-dependencies group with 2 updates (#755) #755
OCPBUGS-20049: Remove uninitialized taint for agent-based installs (#739) #739
MGMT-16258: Partitions naming convetion is different for various disk types (#752) #752
NO-ISSUE: Bump the go-dependencies group with 2 updates (#751) #751
Updating ose-agent-installer-orchestrator images to be consistent with ART (#719) #719
MGMT-15926: Delete failed OLM jobs and subscription install plans in all cases during initialization check, not only in case of not found error (#748) #748
NO-ISSUE: Add my github account as an OWNER for this repository (#749) #749
Full changelog

agent-installer-node-agent

MGMT-15860: add strictfipsruntime to build (#629) #629
NO-ISSUE: Bump the go-dependencies group with 1 update (#626) #626
OCPBUGS-16483: Update apimachinery dependency to remove goproxy dep (#590) #590
MGMT-15271: Get cmdline and set IBM in vendor (#624) #624
Full changelog

agent-installer-utils

OCPBUGS-21874: Update 4.15 ose-agent-installer-utils-container image to be consistent with ART #31
Full changelog

alibaba-cloud-controller-manager, alibaba-cloud-csi-driver, alibaba-disk-csi-driver-operator, alibaba-machine-controllers, csi-driver-manila, csi-driver-manila-operator, csi-driver-nfs, hyperkube, ibm-cloud-controller-manager, ibm-vpc-block-csi-driver, ibm-vpc-block-csi-driver-operator, ibm-vpc-node-label-updater, ibmcloud-cluster-api-controllers, ibmcloud-machine-controllers, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, powervs-block-csi-driver, powervs-block-csi-driver-operator, powervs-cloud-controller-manager, powervs-machine-controllers, vsphere-cloud-controller-manager, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector

OCPBUGS-22724: UPSTREAM: 121881: Use golang library instead of mklink #1800
Full changelog

aws-cluster-api-controllers

OCPCLOUD-2257: Use manifests generation tool from provider repo #471
Full changelog

aws-ebs-csi-driver

STOR-1400: Rebase to v1.25.0 for OCP 4.15 #244
Full changelog

aws-ebs-csi-driver-operator

STOR-1402, STOR-1453: update libraries and specify TLS_MIN_VERSION #71
STOR-1400: Add support for Batch DescribeVolume #74
STOR-1400: Sync sidecar arguments with upstream #72
STOR-1500: Add log for the new operator #70
Pull the latest AWS EBS operator #67
Fix vendoring of golang.org/x/net #68
hack: remove existing path from .gitignore #65
Drop Guest prefix from client names #64
Update all generated assets in a single run #63
Verify generated assets in make verify #62
Move operator config into pkg/drivers #61
Add AWS EBS CSI driver operator starter #58
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #59
STOR-1455: Add asset generator #53
Delegate to aws-ebs-csi-driver-operator for tests and verify #57
Add aws ebs operator legacy #56
Add ci-operator config #54
Clean the repository, it will be reused for all CSI driver operators #52
Obsolete the operator #51
Fix hostpath image sample to support dynamic registration #47
Add kubelet-registration-path flag to csi-driver-registrar #44
Fix golint error #45
Output error message when failed to get CSIDriverDeployment and requeued #46
Add -nometadata to go-bindata to stop updating generated files by every build #43
Disable automatic installation of the operator in OpenShift #41
Pass SecurityContext to sidecar containers #40
Move EBS deployment sample to the right place #39
Use correct context timeouts #38
Add EBS sample deployment file #37
Add leader election to the operator #36
Embed git version into the operator binary #35
Generate bindata during build #34
Add more unit tests #33
Add controller unit tests #32
Fix deletion of non-namespaced objects #31
Fix e2e test #30
Add e2e test #29
Update to operator-sdk 0.1.1 #28
Fix liveness probe version #27
ADd a RHEL7 dockerfile and standardize format #26
Documentation update #23
Add unit test for validation #14
Fix status.conditions json name #11
Add CRD printer columns #12
Add configuration of liveness probe. #9
Increase resync period #10
Add /var/lib/kubelet HostPath directory to node drivers #8
Fix role bindings #7
Add liveness probe. #6
Fix operator images #5
Add OpenShift manifests to operator image #4
Use label selector for informers. #3
Use constants where appropriate #2
Add initial operator #1
Full changelog

aws-machine-controllers

OCPCLOUD-2193: Update k8s to 1.28 #87
Full changelog

azure-disk-csi-driver

OCPBUGS-17542: allow resizing to min required size for performance plus disks #52
Full changelog

azure-disk-csi-driver-operator

STOR-1402, STOR-1453: update libraries and specify TLS_MIN_VERSION #110
Full changelog

azure-file-csi-driver-operator

STOR-1402, STOR-1453: update libraries and specify TLS_MIN_VERSION #84
Full changelog

baremetal-installer, installer, installer-artifacts

no-jira: go.mod: remove unused terraform-providers-nutanix import #7762
CORS-2835: pkg/infrastructure: remove ARO build tag #7745
OCPBUGS-21777: baremetal: populate customDeploy in advance #7674
CORS-2933: IBMCloud: Basic service endpoint override #7632
CORS-2852: Introduce Cluster API Infrastructure manifest generation #7672
OCPBUGS-22840: ic/azure: validate field Plan when for marketplace images #7721
CORS-2604: tag user-provided azure vnet #7611
MULTIARCH-3964: Power VS: Control SMT level with machineconfig #7704
no-jira: destroy/azure: fix dropped negation from error comparison #7758
no-jira: destroy/azure: avoid cancelling main context #7750
OCPCLOUD-2130: Fix Failuredomains check on manifests test #7617
OSASINFRA-3295: OpenStack: fix client used to list flavors #7723
OSASINFRA-3294: OpenStack: fix script to update bootstrap ignition shim #7743
no-jira: images: rename terraform- > infrastructure-providers #7716
OCPBUGS-23376: vSphere - when using RP network path is incorrect #7737
no-jira: Stop rendering networks.config CRD #7732
OCPBUGS-22453: Fixed systemd-resolved’s split dns config in OKD/FCOS #7634
SPLAT-1218: upi/AWS: Templates to provision resources in Wavelength #7722
AGENT-337: Support both VIP and VIPs in AgentClusterInstall #7724
OSASINFRA-3229: Remove support for Kuryr #7675
CORS-2830: Provision AWS Infrastructure with SDK #7676
MULTIARCH-4009: Prepare for varying SysTypes for new datacenters #7717
MULTIARCH-3789: Power VS: Remove cloud connection support #7696
CORS-2876: images/installer-altinfra: initial Dockerfile #7711
Bug OCPBUGS-19462: OpenStack: Fix dual-stack machines Spec to contain network #7694
MULTIARCH-3965: Check if PER is enabled in the target PowerVS workspace #7683
OSASINFRA-3280: openstack: document etcd on local disk #7664
OCPBUGS-23170: Revert #7418 “SPLAT-1141: implement vSphere control plane machinesets” #7708
MULTIARCH-2590: PowerVS create service instance #7695
SPLAT-1141: implement vSphere control plane machinesets #7418
CORS-2428: images: add Dockerfile for a terraform-providers image #7687
OSASINFRA-3237: move controlPlanePort API to GA #7570
Full changelog

baremetal-operator

METAL-376: Re-enable RAID interfaces #319
OCPBUGS-21777: Do not update instance_info and deploy_interface for active nodes #316
Full changelog

baremetal-runtimecfg

OCPBUGS-23432: Use shorter IP label for keepalived VIP #287
Full changelog

cli, cli-artifacts, deployer, tools

WRKLDS-908: Promote some experimental commands, deprecate others #1596
WRKLDS-860: Add volume usage percentage checker script in must-gather’s gather container #1533
OTA-1035: Allow testing adm upgrade status on mock data #1595
Full changelog

cloud-credential-operator

OCPBUGS-20478: Explicitly set the vsphere secret credential data on sync. #628
CCO-440: Bump k8s deps to 0.28.3 #614
CCO-192: Use Leases for leader election #627
Full changelog

cluster-autoscaler-operator

OCPCLOUD-2137: Check scale from zero annotations on MachineSets #294
Full changelog

cluster-baremetal-operator

NO-ISSUE: Fix ordering problem in the unit tests #390
OCPBUGS-23131, OCPBUGS-23149: fix IRONIC_EXTERNAL_URL_V6 #380
MGMT-16047: update dependencies #383
NO-ISSUE: Stop linting when building the image #343
Full changelog

cluster-capi-controllers

OCPCLOUD-2257: Use manifests generation tool from provider repo #179
Full changelog

cluster-capi-operator

OCPCLOUD-2012: Add granular permissions for Azure #124
OCPBUGS-19842: Limit deletion webhook to openshift namespace #135
OCPBUGS-23467: manifests/0000_30_cluster-api_10_webhooks: Deletion manifest for validating-webhook-configuration #145
OCPBUGS-19841: Add format key into the worker-user-data secret #140
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-23308: Set IPFamilyPriority and ExcludeNetworkSubnetCIDR for vSphere IPv6-only #299
OSASINFRA-3289: OpenStack: Remove Kuryr bits #294
Full changelog

cluster-config-operator

create manifest directory during rendering #382
SPLAT-1272: Update for Nutanix failure domains api changes #378
create parent dir for output #381
Allow split rendering between cluster-config and openshift/api #380
MON-3480: Add MetricsServer FeatureGate #377
NO-JIRA: pkg/cmd/render/config: Remove ReadFeatureGateV1OrDie #361
MCO-813: add MCN featuregate #368
Full changelog

cluster-control-plane-machine-set-operator

SPLAT-1129: adding failure domain awareness for vSphere #228
OCPCLOUD-2297: webhook/openstack: validate etcd block device size #264
Full changelog

cluster-csi-snapshot-controller-operator

STOR-1402: Chore: update libraries in all operators [4.15] #175
Full changelog

cluster-etcd-operator

OCPBUGS-23461: Add annotation in the etcd-guard static pod for worklo… #1161
Full changelog

cluster-image-registry-operator

TRT-1368: Revert “Merge pull request #935 from flavianmissi/CCO-248” #965
IR-366, IR-367, IR-411: allow users to configure private storage accounts in Azure #930
IR-408: request individual permissions for gcs #935
Full changelog

cluster-ingress-operator

NE-1402: Add service endpoint override capability to IBM DNS provider #990
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-21836: use external load balancer url for jwks-uri #1578
manifests: set owning component for TLS artifacts #1583
Full changelog

cluster-kube-scheduler-operator

NO-JIRA: README.md: steps for enabling profiling, collecting heap and running go tool pprof #507
OCPNODE-1886: Migrate from kubescheduler.config.k8s.io/v1beta3 to v1 #508
Full changelog

cluster-machine-approver

OCPCLOUD-2277: Ensure Cluster Machine Approver metrics are only available via HTTPS #211
OCPBUGS-21594: Filter non node CSRs in metrics #208
Full changelog

cluster-monitoring-operator

OCPBUGS-21610: Change config to allow ipv6/4 #2166
MON-3511: hack/local-cmo.sh: pass desired version in cmo run command #2168
MON-3211: Implement switching to metrics-server #2022
MON-3505: move aggregated-metrics-reader role to cmo jsonnet #2163
MON-3503: Synchronize versions of the downstream components #2162
OCPBUGS-23495: Change UWM Prometheus’ kube-rbac-proxy-thanos port num… #2164
MON-3479: update Prometheus operator assets to v0.69.1 #2152
MON-3503: Synchronize versions of the downstream components #2150
MON-3421: improve the detection of CMO unavailability/degradation due to U… #2129
MON-3476: Add code block to check FeatureGate status #2151
OCPBUGS-17035: fix KRP permissions for Thanos Querier #2057
Full changelog

cluster-network-operator

SDN-4101: Remove HyperShift API dependency, Bump kubernetes dependencies #2128
NO ISSUE: add ownership of the proxy-ca #2111
OCPBUGS-22869: hypershift, hosted clusters: enable multi-homing and multi-net features #2113
OCPBUGS-23082: set automountServiceAccountToken to false for hypershift managed network-node-identity deploy #2100
Full changelog

cluster-node-tuning-operator

Avoid k8s.io/kubernetes as dep (#848) #848
Remove most //nolint:* overrides (#837) #837
CNF-10294: main: remove deprecated multi ns function (#770) #770
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-18115: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #551
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-22956: Remove blockage of ConfigObserver by build informer HasSynced flag #315
Full changelog

cluster-storage-operator

STOR-1402: Chore: update libraries in all operators [4.15] #421
OCPBUGS-23120: [IBM ROKS] cluster-storage-operator does not set upgradeable=True #417
STOR-1453: Grant permissions to access apiserver to CSI driver operators #415
Full changelog

cluster-version-operator

OCPBUGS-19391: do not reconcile rules if aggregationRule is set #993
Full changelog

console

chore(i18n): update translations: : Completed OCP-4.15/Master Branch/Sprint 243 #13253
OCPBUGS-23923: fix PipelineRun task logs switcher #13369
OCPBUGS-23775: After PatternFly5 update: Form error is missing when import a container image #13365
OCPBUGS-23765: fix dark theme issue for helm release readme modal #13370
ODC-7359: Fix shipwright build e2e tests #13296
OCPBUGS-23787: PatternFly5 update: fix Quickstarts catalog item count alignment #13367
OCPBUGS-23776: After PatternFly5 update: Add page > more button dropdown is too wide #13361
OCPBUGS-23768: After PatternFly5 update: Navigation: Extra space after divider #13362
OCPBUGS-23912, OCPBUGS-23918: Add Vulnerabilities column and signed icon in PAC repository PLR list #13364
ODC-7426: Deletion of pipeline run after tekton result installation should be user-friendly #13353
OCPBUGS-23388: Pipeline Name gets changed to “new-pipeline” on the Edit Pipeline YAML/Builder #13344
ODC-7389: Replace topology graphic with new version for openshift v4.15 #13350
OCPBUGS-23543: Deployment option is missing in ‘Deploy Image’ #13354
ODC-7428: Update quick start name and document links for getting started section #13348
OCPBUGS-22778: Fix for yaml editor that crashes with MCE and ACM plugins enabled #13346
GITOPS-3575: Added disallowed flag to gitops static plugin #13307
ODC-7419: Feature new Quickstarts (RHDH on the admin dashboard and Pipelines/Serverless on the dev add page) #13303
CONSOLE-3693: Upgrade to PFv5 versions #12983
ODC-7425: Add serverless function icon in Add page group header #13338
OCPBUGS-20016: account for useK8sWatchResource returning {} like it does f… #13347
ODC-7383, ODC-7384, ODC-7385: Update the PipelineRun and TaskRun details page to use Tekton Results API to load all the info #13328
ODC-7424: Add e2e tests for vulnerabilities column in pipelinerun list and details page #13335
OCPBUGS-23164: Cannot Edit Shipwright Build #13341
ODC-7382, ODC-7395: add support for tektonresult api to load PipelineRuns #13311
ODC-7421: Show vulnerability column in the pipelinerun list page #13329
ODC-7424: add e2e tests for SBOM section and output tab #13325
OCPBUGS-23292: Webpack-DevServer Hot-Reload Not Working #13331
CONSOLE-3823: Split auth config to its own module #13261
ODC-7423: move pipelinerun results to output tab #13323
ODC-7399: Create getting started content in functions list page #13289
ODC-7422: Add SBOM link and signed badge in PLR details page #13314
CONSOLE-3618: Remove frontend multicluster code #13245
CONSOLE-3777: Update NodeJS v14 to v18 #13213
ODC-7414: Update Shipwright API from v1alpha1 to v1beta1 #13304
OCPBUGS-20016: improve labels and annotations modal display and editi… #13295
CONSOLE-3695: Add details item extension to console dynamic plugin SDK #13240
CONSOLE-3814: Conditionally render “Users” and “Groups” nav items #13287
OCPBUGS-23110: Disable Pipelines E2E Tests #13318
CONSOLE-3740: Address memory issues in CI #13309
Full changelog

console-operator

OCPBUGS-23300: Disable route controller health check for NLB setup #815
ODC-7418: Add Janus IDP and RHDH Quick starts #806
TRT-1361: Revert #808 “CONSOLE-3804: split oauthclient controller from the common logic” #813
CONSOLE-3804: split oauthclient controller from the common logic #808
CONSOLE-3613: Update vendor bundle after removing multicluster code #810
Full changelog

container-networking-plugins

NP-807: Upstream sync Nov 2023 #139
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

OCPBUGS-23108: Should reference configmaps instead of secrets #151
Full changelog

csi-driver-shared-resource-operator

STOR-1402: Chore: update libraries in all operators [4.15] #92
Full changelog

csi-external-provisioner

OCPBUGS-23062: UPSTREAM: 1047: Revert bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.44.0 to 0.45.0 #78
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-23010: UPSTREAM: 958: Re-queue SnapshotContents that are readyToUse: false #114
Full changelog

docker-builder

OCPBUGS-23128: bump github.com/containers/buildah to fix transient mounting in chroot isolation #358
Full changelog

docker-registry

CORS-2985: Add support for il-central-1 region in AWS #386
Full changelog

driver-toolkit

Revert “Start using rhel-coreos image rather than machine-os-content (#135)” (#136) #135
Start using rhel-coreos image rather than machine-os-content (#135) #135
Full changelog

etcd

OCPBUGS-19279: Updating ose-etcd images to be consistent with ART #215
Full changelog

gcp-cloud-controller-manager

OCPBUGS-22043: Bump golang.org/x/net to v0.18.0 #46
OCPBUGS-23094: Fix commit label for commits #41
Full changelog

gcp-cluster-api-controllers

OCPCLOUD-2257: Use manifests generation tool from provider repo #209
Full changelog

gcp-machine-controllers

OCPBUGS-2117: Add extra check to termination handler #71
Full changelog

gcp-pd-csi-driver

STOR-1392: Rebase to v1.12.2 for OCP 4.15 #50
Full changelog

gcp-pd-csi-driver-operator

STOR-1402, STOR-1453: update libraries and specify TLS_MIN_VERSION #97
Full changelog

hypershift

HOSTEDCP-1312: Fixed update-codegen.sh to work locally #3214
OCPBUGS-23555: add CLI oauthclient #3238
HOSTEDCP-1300: Bump k8s.io/client-go to v0.28.3 #3191
OCPBUGS-19834: add watch for HCP pullsecret to HCCO #3237
Update RHTAP references (main) #3230
HOSTEDCP-1236: Enable public router+external DNS for azure #3233
OCPBUGS-23921: Use correct kubeconfig in CCM and remove CCMs access t… #3222
OCPBUGS-22473: Added OLMCatalogPlacement option to the CLI #3206
OSD-19085: New hypershift_cluster_cores metric giving the total number of worker cores #3089
OCPBUGS-20246: Added brackets to IPv6 KAS address on kubeconfig #3207
OCPBUGS-23737: remove machine-approver probes #3227
OCPBUGS-23350: Added IPFamilyPolicy to services exposed at the HCP in DualStack mode #3210
OCPBUGS-23466: Let router use svc ips #3218
HOSTEDCP-1256: api/hypershift: mark more conditions with list key types #3212
OCPBUGS-23472: unset ServiceAccount on ignition-server-proxy #3209
OCPBUGS-23528: Fix error when removing finalizer on cluster destroy #3219
HOSTEDCP-1256: api/v1beta1: annotate hostedcontrolplane conditions #3211
OCPBUGS-23398: Fixed AWS KMS Backup container args #3216
HOSTEDCP-1311: kubevirt, Add support for secondary networks #3066
HOSTEDCP-1256: expose cert rotation scale parameter #3208
OCPBUGS-23314: SetLogger for CLI #3199
HOSTEDCP-1237: Retrieve RHCOS VHD image from release image #3177
HOSTEDCP-1284: Bumps k8s.io/pod-security-admission to v0.28.3 #3181
CNV-23418: Validate jsonpatch annotation + add condition on wrong patch #3197
HOSTEDCP-1285: Kas port svc cleanup #3186
HOSTEDCP-1254: disable deployment of integrated oauth when authentication type is OIDC and set KAS flags #3151
CNV-23418: fix the jsonpath annotation implemetation #3201
HOSTEDCP-1305: Simplify HostedControlPlaneNamespace().Name #2619
OCPBUGS-22912: Set value of elb tag to 1 instead of true #3198
CNV-30444: Document recommended MTU settings for KubeVirt HCP #3129
HOSTEDCP-1306: Bump Golang builder to 1.20 for RHTAP dockerfile #3196
NO-JIRA: chore(deps): update rhtap references #3192
CNV-23418: unsupported escape hatch mechanism custom HS/KV vms #3187
HOSTEDCP-1256: generate typed clients for apis #3179
NO-JIRA: *: Fix “succesfully” -> “successfully” typos #3188
OCPBUGS-20179: Stop defining time series for hosted clusters or node pools which do not exist anymore. #2671
HOSTEDCP-1285: Consume kas Pod port by name #3185
OCPBUGS-23083: adding permission to CNO RBAC Calico path for network-node-identity deploy #3172
HOSTEDCP-1256: Update Dependencies #3154
HOSTEDCP-1283: Fixed Azure nodes not joining #3174
HOSTEDCP-1227: Retrieve CAPZ image from OCP release image #3074
NO-JIRA: fix formatting for releaseImage log #3156
Full changelog

insights-operator

CCXDEV-12194: read configmap during configmap observer init (#864) #864
DVO gatherer - do the retry request as HEAD and not stream (#861) #861
Full changelog

ironic

OCPBUGS-23939: Firmware interface #428
OCPBUGS-23485: Uplift eventlet version #425
OCPBUGS-22425: Upgrade markupsafe and werkzeug dependencies #420
METAL-726: Update packages for OCP 4.15 and pin ironic versions #412
METAL-730: Sync202310 #407
Full changelog

ironic-agent

OCPBUGS-23553: Update packages with latest fixes #95
OCPBUGS-23553: Update packages with latest fixes #94
Full changelog

k8s-prometheus-adapter

MON-3489: Bump openshift/k8s-prometheus-adapter to v0.11.2 #94
Full changelog

kube-proxy, sdn

OCPBUGS-22077: update x/net to v0.17.0 #585
Full changelog

machine-api-operator

SPLAT-1272: Update for Nutanix failure domains api changes #1171
Full changelog

machine-config-operator

OCPBUGS-23255: Add FIPS information to oldconfig when checking if reboot is needed #4033
OCPBUGS-23484: kubevirt, Activate nodeip-configuration.service #4039
OCPBUGS-23432: Use shorter IP label for keepalived VIP #4040
OCPCLOUD-1609: Fix syntax in vsphere-hostname.yaml for CAPI machines #4037
OCPBUGS-23209: workaround nmstate bug by configuring ipv{4,6} addresses #4026
OCPBUGS-22200: Retry fetching OpenStack hostname if it fails #3990
OCPBUGS-22721: Don’t retry node-ip show in resolv-prepender #4017
MCO-772: controller: allow custom pool configs to take priority #4015
Full changelog

machine-os-images

NO-ISSUE: Force updating 4.15 CI images #32
Full changelog

monitoring-plugin

OU-285: add test-id to panel charts to ease e2e tests when titles change #80
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-22075: update golang.org/x/net to v0.17.0 #206
Full changelog

network-tools

SDN-4189: Fix error when nbdb and sbdb leader are located on different nodes #99
SDN-4189: Add flow counter script for ACLs #98
SDN-4182: Script cleanup + track ovnk upstream issues in jira #97
Full changelog

oauth-proxy

OCPBUGS-21718: go.mod: bump golang.org/x/net to v0.17.0 #266
Full changelog

oc-mirror

CFE-981: Create UnArchiver interface and implementation (#738) #738
CFE-977, CFE-980: Introduce Archiver interface and its implementation MirrorArchiver (#734) #734
feat: history file reader and writer (#736) #736
skipping prune failure if manifest not found (#733) #733
Package ioutil is deprecated as of Go 1.16 (#731) #731
CFE-977: Implementation of a blob gatherer for images in the local cache (#732) #732
refactorings (#728) #728
Full changelog

olm-catalogd

NO-ISSUE: UPSTREAM: <drop>: Remove GH activities #35
Full changelog

olm-operator-controller

NO-ISSUE: UPSTREAM: <drop>: Remove GH activities #44
Full changelog

olm-rukpak

NO-ISSUE: UPSTREAM: <drop>: Remove GH activities #57
Full changelog

openshift-apiserver

OCPBUGS-21735: Enable HTTP/2 CVE mitigation #396
Full changelog

openshift-controller-manager

OCPBUGS-22471: Mitigate CVE-2023-30551 (rekor) #280
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-23878: OCPBUGS-22624: CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46.0 #141
STOR-1402, STOR-1453: update libraries and specify TLS_MIN_VERSION #143
Full changelog

openstack-machine-api-provider

OCPBUGS-23668: Bump Kubernetes dependencies #97
OCPBUGS-23913: Fix nil pointer exception when deleting machines without a root volume #98
OSASINFRA-3297: Remove unnecessary retrieval of Network ID #96
OCPBUGS-16597: Don’t build InstanceSpec during delete operations #90
NO-JIRA: Misc linter fixes #94
Full changelog

operator-lifecycle-manager, operator-registry

OPRUN-3063: Microshift manifests remove collection-profiles cronjob from kustomization #615
OPRUN-3063: Microshift manifests: Ignore “*.removed.yaml” files in kustomization.yaml #610
OPECO-3066: Synchronize From Upstream Repositories #612
NO-ISSUE: Synchronize From Upstream Repositories #609
Synchronize From Upstream Repositories #606
OPRUN-3063: Generate OLM microshift manifests #604
OCPBUGS-17041: Release Leader Election on Manager Exit #556
OPRUN-3106: skuznets/bump vendor ii #600
Full changelog

operator-marketplace

OPRUN-3130: use content extraction in default catalog sources #540
OCPBUGS-19710: Update image tag to 4.15 for all but community operators #541
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-21773: Downstream Merge 22nd November 2023 #1958
NHE-805, OCPBUGS-19050, OCPBUGS-22691, OCPBUGS-22767, SDN-4173: [DownstreamMerge] 11 November 2023 #1952
Full changelog

prometheus

OCPBUGS-22743: bump Prometheus to 2.48.0 (manual) #185
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

MON-3479: [bot] Bump openshift/prometheus-operator to v0.69.1 #256
Full changelog

prometheus-node-exporter

MON-3502: [bot] Bump openshift/node_exporter to v1.7.0 #139
Full changelog

telemeter

RHOBS-956: Rename subscription_labels to ocm_subscription #495
Full changelog

tests

TRT-1329: Refactor pathological events framework #28399
SO-117: Removing Ruby 2.7 UBI7-8 tests #28418
trt-1367: Get JobType After Collection Ends #28415
TRT-1235: Add ability to specify alerts that should never fire #28411
TRT-1362: Update disruption/alert test data and fix unit test #28409
make it slightly easy to produce markdown with table of contents #28407
update the TLS ownership files #28394
update cert inspect to skip the rest of proxy-CAs #28406
WRKLDS-908: test: ignore deprecation warnings in command outputs #28404
collect certificate data: rewrite configmap/secret names #28405
Certs 11 fix certs after break #28395
ignore stale condition challenge events #28204
TRT-1274: get azure disk metrics and create relevant intervals #28375
Revert “TRT-1339: Revert #28233 “ignore repeated TopologyAwareHintsDisabled events”” #28386
OCPBUGS-23079: fix: increase watch count for KubeControllerManagerOperator #28388
OCPBUGS-23102: Revert “[sig-instrumentation] tests fail due to JSON parsing error.” #28389
OCPBUGS-23084: expect to not see “git clone” and not just “clone” during a test #28352
TRT-1354: Add support for intervals to have row differentiators #28376
OCPBUGS-18776: [sig-instrumentation] tests fail due to JSON parsing error. #28320
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github