# 4.15.0-0.okd-2024-02-23-163410 Created: 2024-02-25 09:36:22 +0000 UTC Image Digest: `sha256:75045c88a94bbfd4a390fdd4859bb58b1f222cf71e5b85c0c086526a734ea37d` Promoted from registry.ci.openshift.org/origin/release:4.15.0-0.okd-2024-02-23-163410 ## Changes from 4.15.0-0.okd-2024-02-10-035534 ### Components * Kubernetes 1.28.6 * Fedora CoreOS upgraded from 39.20240112.3 to 39.20240128.3 ### Rebuilt images without code change * [machine-api-operator](https://github.com/openshift/machine-api-operator) git [e2b4537e](https://github.com/openshift/machine-api-operator/commit/e2b4537e57f4407e5469ad673dda126df5bb2a8b) `sha256:386c929913089299adc9cce7a7ea277512dac593bcf910f2bf8cd2319796e6c9` ### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/d60e80f8658cf8a756ff4aa318983ddcf0e70bca) * [MGMT-16517](https://issues.redhat.com/browse/MGMT-16517): Add Env Var Deployment Type & Set ABI (#6016) [#6016](https://github.com/openshift/assisted-service/pull/6016) * [MGMT-16980](https://issues.redhat.com/browse/MGMT-16980): Change the default value of ENABLE_SKIP_MCO_REBOOT to false (#6005) [#6005](https://github.com/openshift/assisted-service/pull/6005) * [Full changelog](https://github.com/openshift/assisted-service/compare/07e76eecfdf2f89b031e66a78325ccf9b6d9072c...d60e80f8658cf8a756ff4aa318983ddcf0e70bca) ### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/550f2a568d4b4a494b3637ebba725bdd9c26ecd9) * [MGMT-16843](https://issues.redhat.com/browse/MGMT-16843): Ensure valid hostname during install (#791) [#791](https://github.com/openshift/assisted-installer/pull/791) * [OCPBUGS-25718](https://issues.redhat.com/browse/OCPBUGS-25718): Do not remove uninitialized taints if vSphere (#785) [#785](https://github.com/openshift/assisted-installer/pull/785) * [Full changelog](https://github.com/openshift/assisted-installer/compare/81ef8544529e59cafebaa094dc34cc0d6dd6bc88...550f2a568d4b4a494b3637ebba725bdd9c26ecd9) ### [baremetal-installer, installer, installer-altinfra, installer-artifacts, ovirt-installer](https://github.com/openshift/installer/tree/e8c70b7db9e64cafa7fe3182c365257c3e53fbb6) * [OCPBUGS-29585](https://issues.redhat.com/browse/OCPBUGS-29585): PowerVS: handle composite_instance [#8032](https://github.com/openshift/installer/pull/8032) * [OCPBUGS-29620](https://issues.redhat.com/browse/OCPBUGS-29620): Power VS: Fix service instance list [#8035](https://github.com/openshift/installer/pull/8035) * [OCPBUGS-29523](https://issues.redhat.com/browse/OCPBUGS-29523): Bump terraform-provider-ibm to v1.61.0 [#8026](https://github.com/openshift/installer/pull/8026) * [OCPBUGS-29436](https://issues.redhat.com/browse/OCPBUGS-29436): PowerVS Fix next start search [#8013](https://github.com/openshift/installer/pull/8013) * [OCPBUGS-29442](https://issues.redhat.com/browse/OCPBUGS-29442): update RHCOS 4.15 bootimage metadata to 415.92.202402130021-0 [#8016](https://github.com/openshift/installer/pull/8016) * [Full changelog](https://github.com/openshift/installer/compare/3f9c6463d7111e468d8efbc3b1c2f1810d83ac08...e8c70b7db9e64cafa7fe3182c365257c3e53fbb6) ### [cluster-config-api](https://github.com/openshift/api/tree/be926bb0d7511bd4e11519f794cd71df60454a31) * [OCPBUGS-29435](https://issues.redhat.com/browse/OCPBUGS-29435): allow multiple audiences to be configured for kube-apiserver [#1772](https://github.com/openshift/api/pull/1772) * [Full changelog](https://github.com/openshift/api/compare/8ec9b53f66b6f0925a81dfc17b96c4f86a52ed01...be926bb0d7511bd4e11519f794cd71df60454a31) ### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/cc1fb201a307c049036c8307d950e5cde9e565ca) * [OCPBUGS-28622](https://issues.redhat.com/browse/OCPBUGS-28622): Add required PSa labels [#402](https://github.com/openshift/cluster-config-operator/pull/402) * [Full changelog](https://github.com/openshift/cluster-config-operator/compare/c436b7ae2fe1372112d58eae29a75cc8d48e8193...cc1fb201a307c049036c8307d950e5cde9e565ca) ### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/5da92bdb6eeb08abf096989d1383d56e6a6098a3) * [OCPBUGS-29638](https://issues.redhat.com/browse/OCPBUGS-29638): azurepathfix: fix stack hub, government and workload identity setup [#1004](https://github.com/openshift/cluster-image-registry-operator/pull/1004) * [OCPBUGS-29525](https://issues.redhat.com/browse/OCPBUGS-29525): move azure storage blobs from `docker` back into `/docker` [#1000](https://github.com/openshift/cluster-image-registry-operator/pull/1000) * [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/5ce78e7671fef460060c2c77c4cee6b4024e4dd2...5da92bdb6eeb08abf096989d1383d56e6a6098a3) ### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/689a2bdc377383c774cc353c8e643dfcbb40159e) * [OCPBUGS-28882](https://issues.redhat.com/browse/OCPBUGS-28882): Add sno section to alert description [#1636](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1636) * [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/90d35d617b6b87004530fb974cbc6eb39bc3fe3b...689a2bdc377383c774cc353c8e643dfcbb40159e) ### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/128d8e08c48e2002c416e84d0dec816bf5999c7e) * [OCPBUGS-23711](https://issues.redhat.com/browse/OCPBUGS-23711): Add Snyk file to exclude vendor directory on scan [#34](https://github.com/openshift/cluster-api-operator/pull/34) * [Full changelog](https://github.com/openshift/cluster-api-operator/compare/097921fbf0741446d0f4297a71f0765dfcd7eeea...128d8e08c48e2002c416e84d0dec816bf5999c7e) ### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/c1d987e7a93910a4f09c4183f9434e0f697f8c3f) * [OCPBUGS-29299](https://issues.redhat.com/browse/OCPBUGS-29299): Update ingressconfig_controller to use field Manager [#2265](https://github.com/openshift/cluster-network-operator/pull/2265) * [OCPBUGS-28902](https://issues.redhat.com/browse/OCPBUGS-28902): Fix CloudPrivateIPConfig CRD in common [#2263](https://github.com/openshift/cluster-network-operator/pull/2263) * [Full changelog](https://github.com/openshift/cluster-network-operator/compare/b0afc41a96918ec441cfa4ac495c1e850244f237...c1d987e7a93910a4f09c4183f9434e0f697f8c3f) ### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/01fc8d9a765c7aa4dd6ae8f8c8e7e41fa03f1f05) * [OCPBUGS-29376](https://issues.redhat.com/browse/OCPBUGS-29376): Mixed CPUs e2e tests (#952) [#952](https://github.com/openshift/cluster-node-tuning-operator/pull/952) * [OCPBUGS-27227](https://issues.redhat.com/browse/OCPBUGS-27227): irqbalance: set banned cpus list to '0' (#953) [#953](https://github.com/openshift/cluster-node-tuning-operator/pull/953) * [OCPBUGS-29396](https://issues.redhat.com/browse/OCPBUGS-29396): Labels for e2e testing (#949) [#949](https://github.com/openshift/cluster-node-tuning-operator/pull/949) * [OCPBUGS-29376](https://issues.redhat.com/browse/OCPBUGS-29376): e2e: cgroups: introduce cgroup package (#942) [#942](https://github.com/openshift/cluster-node-tuning-operator/pull/942) * makefile: add target to trigger mixedcpus e2e test (#941) [#941](https://github.com/openshift/cluster-node-tuning-operator/pull/941) * [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/a8d42a79c8e1d4025b55b685e30f233e3a2a21dd...01fc8d9a765c7aa4dd6ae8f8c8e7e41fa03f1f05) ### [cluster-platform-operators-manager](https://github.com/openshift/platform-operators/tree/37a0a919b1032f7affa49b756eda4762d77751d5) * [OCPBUGS-24077](https://issues.redhat.com/browse/OCPBUGS-24077): Updating ose-cluster-platform-operators-manager-container image to be consistent with ART [#104](https://github.com/openshift/platform-operators/pull/104) * [Full changelog](https://github.com/openshift/platform-operators/compare/25dbb307143ea9576fc977f737c0331a9b8e879f...37a0a919b1032f7affa49b756eda4762d77751d5) ### [console](https://github.com/openshift/console/tree/803df88843fa8a4011ecadcaf29b530fa34851ed) * [OCPBUGS-29345](https://issues.redhat.com/browse/OCPBUGS-29345): Any namespace after deletion is still visible on UI if it is the default selection in namespace dropdown [#13599](https://github.com/openshift/console/pull/13599) * [OCPBUGS-29096](https://issues.redhat.com/browse/OCPBUGS-29096): Add TaskRun tab in PLR details page using plugin [#13584](https://github.com/openshift/console/pull/13584) * [OCPBUGS-29217](https://issues.redhat.com/browse/OCPBUGS-29217): Revision tab and routes tab in serving details page showing no resource found [#13590](https://github.com/openshift/console/pull/13590) * [OCPBUGS-26411](https://issues.redhat.com/browse/OCPBUGS-26411): Logs for PipelineRuns fetched from the Tekton Results API is not loading [#13486](https://github.com/openshift/console/pull/13486) * [OCPBUGS-28537](https://issues.redhat.com/browse/OCPBUGS-28537): remove "openshift-storage" namespace usage from the console [#13548](https://github.com/openshift/console/pull/13548) * [OCPBUGS-29283](https://issues.redhat.com/browse/OCPBUGS-29283): Error in displaying BuildRun logs in Console [#13595](https://github.com/openshift/console/pull/13595) * [Full changelog](https://github.com/openshift/console/compare/38dd67f7646f7851fcc94cce41e47206f67383fa...803df88843fa8a4011ecadcaf29b530fa34851ed) ### [console-operator](https://github.com/openshift/console-operator/tree/8f7bdec82b1e297fc558dc1dc81415e9678cba6d) * [OCPBUGS-29658](https://issues.redhat.com/browse/OCPBUGS-29658): oauthclients: further split oidc and integrated oauth handling [#870](https://github.com/openshift/console-operator/pull/870) * [Full changelog](https://github.com/openshift/console-operator/compare/66b2656b3eefa30b3622386a9dbac9608416dba1...8f7bdec82b1e297fc558dc1dc81415e9678cba6d) ### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/50fa049ccaa48d7f7dcb165fb6e20c185a0cbd13) * [OCPBUGS-29336](https://issues.redhat.com/browse/OCPBUGS-29336): cherry-pick:release-4.15: OCPBUGS-29244 Update VolumeSnapshot and VolumeSnapshotContent using JSON patch [#143](https://github.com/openshift/csi-external-snapshotter/pull/143) * [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/090cd57847b98aebe42ecd5091c3a626eb870022...50fa049ccaa48d7f7dcb165fb6e20c185a0cbd13) ### [docker-registry](https://github.com/openshift/image-registry/tree/340eda0bfc9a86254d7f0f37cd6a5320779ecf81) * [OCPBUGS-29525](https://issues.redhat.com/browse/OCPBUGS-29525): bump docker-distribution to fix azure path issue [#393](https://github.com/openshift/image-registry/pull/393) * [Full changelog](https://github.com/openshift/image-registry/compare/9c3215bd57d45f58f4178ead0041b71e545a1815...340eda0bfc9a86254d7f0f37cd6a5320779ecf81) ### [fedora-coreos, machine-os-content, okd-rpms](https://github.com/openshift/okd-machine-os/tree/58a702c1edd52e830bccbc53745793e76d84ba29) * Bump fedora-coreos to latest stable [#751](https://github.com/openshift/okd-machine-os/pull/751) * Bump fedora-coreos to latest stable [#748](https://github.com/openshift/okd-machine-os/pull/748) * [OCPBUGS-29079](https://issues.redhat.com/browse/OCPBUGS-29079): Install ecr-credential-provider from artifacts instead of stub script [#747](https://github.com/openshift/okd-machine-os/pull/747) * [Full changelog](https://github.com/openshift/okd-machine-os/compare/bb87154986975e469b43ffbde5c04a57fff2febc...58a702c1edd52e830bccbc53745793e76d84ba29) ### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/6216ea1e51a2126f5b843a4ae7c1f414161cca8b) * [OCPBUGS-29435](https://issues.redhat.com/browse/OCPBUGS-29435): structuredAuthenticationConfig for kube 1.28-ish [#1884](https://github.com/openshift/kubernetes/pull/1884) * [OCPBUGS-27343](https://issues.redhat.com/browse/OCPBUGS-27343): UPSTREAM: <carry>: Update management webhook pod admission logic [#1854](https://github.com/openshift/kubernetes/pull/1854) * [Full changelog](https://github.com/openshift/kubernetes/compare/f1618d54a81f9f1bc0c3bf326454ab8e107eea87...6216ea1e51a2126f5b843a4ae7c1f414161cca8b) ### [hypershift](https://github.com/openshift/hypershift/tree/e04891928c4734cf12ec84a5e194f57595af332c) * [OCPBUGS-29780](https://issues.redhat.com/browse/OCPBUGS-29780): use 2040 for apiserver svc in IBM provider [#3595](https://github.com/openshift/hypershift/pull/3595) * [OCPBUGS-29435](https://issues.redhat.com/browse/OCPBUGS-29435): Use structured authentication config [#3607](https://github.com/openshift/hypershift/pull/3607) * [OCPBUGS-28543](https://issues.redhat.com/browse/OCPBUGS-28543): Include OperatorHubSpec sync with HC when Config is empty [#3480](https://github.com/openshift/hypershift/pull/3480) * [OCPBUGS-29508](https://issues.redhat.com/browse/OCPBUGS-29508): Default NodeUpgradeType on day2 nodepool creation [#3582](https://github.com/openshift/hypershift/pull/3582) * [MULTIARCH-4084](https://issues.redhat.com/browse/MULTIARCH-4084): Reduce the policy access scope to specific instance [#3529](https://github.com/openshift/hypershift/pull/3529) * NO-JIRA: Approvers update [#3579](https://github.com/openshift/hypershift/pull/3579) * [OCPBUGS-27149](https://issues.redhat.com/browse/OCPBUGS-27149): Add storage, csisnapshotcontroller and clustercsidrive… [#3421](https://github.com/openshift/hypershift/pull/3421) * [OCPBUGS-29416](https://issues.redhat.com/browse/OCPBUGS-29416): hypershift-operator: don't create PKI rbac when disabled [#3565](https://github.com/openshift/hypershift/pull/3565) * [OCPBUGS-29418](https://issues.redhat.com/browse/OCPBUGS-29418): control-plane-pki-operator: add a signer for SRE break-glass [#3566](https://github.com/openshift/hypershift/pull/3566) * [OCPBUGS-29089](https://issues.redhat.com/browse/OCPBUGS-29089): Make ControllerAvailabilityPolicy immutable [#3533](https://github.com/openshift/hypershift/pull/3533) * [OCPBUGS-29310](https://issues.redhat.com/browse/OCPBUGS-29310): control-plane-pki-operator: validate CN for CSR [#3558](https://github.com/openshift/hypershift/pull/3558) * [Full changelog](https://github.com/openshift/hypershift/compare/a8479785e49fe6e6008a436c035fd7dbbf51a17a...e04891928c4734cf12ec84a5e194f57595af332c) ### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/34fb625247f6743637b0ef0c5767e000e0ec1e65) * [OCPBUGS-25507](https://issues.redhat.com/browse/OCPBUGS-25507): update golang.org/x/crypto module [#78](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/78) * [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/7c4b63bcc763c822155f3dc8f890792409d8d1cd...34fb625247f6743637b0ef0c5767e000e0ec1e65) ### [insights-operator](https://github.com/openshift/insights-operator/tree/a6923466398b283a68b78fad9b1f2c5ccf9eaded) * Add extra check in ids to bypass validations (#901) [#901](https://github.com/openshift/insights-operator/pull/901) * [Full changelog](https://github.com/openshift/insights-operator/compare/d67d3081e084f1a991ceb0521d2fb7a1d5d36f44...a6923466398b283a68b78fad9b1f2c5ccf9eaded) ### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/cd0769a538f34456728bf1bba9302461c942d5ba) * [OCPBUGS-28756](https://issues.redhat.com/browse/OCPBUGS-28756): Always add ignition to set hostname on /etc/hostname [#108](https://github.com/openshift/ironic-agent-image/pull/108) * [Full changelog](https://github.com/openshift/ironic-agent-image/compare/0145f7ac0b3f7dfa34e7513e63c665d1ab787f27...cd0769a538f34456728bf1bba9302461c942d5ba) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/c7981fcb54fcae3976818479a01f19f3fef40cd9) * [OCPBUGS-29038](https://issues.redhat.com/browse/OCPBUGS-29038): Add existing kubeletconfig/ctrcfg mc-name-suffix annotation [#4166](https://github.com/openshift/machine-config-operator/pull/4166) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/6305fca334948e9ed37b078884d96051f8859b99...c7981fcb54fcae3976818479a01f19f3fef40cd9) ### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/0e8b957251ce3edb82ca8d9139380b18df1fe55c) * NO-ISSUE: [release-4.15] Backport flaky CRD upgrade block e2e test fix [#694](https://github.com/openshift/operator-framework-olm/pull/694) * [Full changelog](https://github.com/openshift/operator-framework-olm/compare/711336ec8ded4b51cc93d5d68b152e5db71aa9a6...0e8b957251ce3edb82ca8d9139380b18df1fe55c) ### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/3fdc9242e361a5e5007556054f5b0cc68a5be3d4) * [OCPBUGS-29185](https://issues.redhat.com/browse/OCPBUGS-29185): Wait for ovnkube controller to start before checking result error. [#2064](https://github.com/openshift/ovn-kubernetes/pull/2064) * [OCPBUGS-28725](https://issues.redhat.com/browse/OCPBUGS-28725): Update netpol namespace address sets usage to the old ways [#2050](https://github.com/openshift/ovn-kubernetes/pull/2050) * [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/519efdbf04d2b02fee49e621f0a256aca9e27686...3fdc9242e361a5e5007556054f5b0cc68a5be3d4) ### [telemeter](https://github.com/openshift/telemeter/tree/80992e54778c3a9728c6db997a7ef0cae504beab) * [OCPBUGS-24153](https://issues.redhat.com/browse/OCPBUGS-24153): Force kill jobs after integration v2 test finish [#515](https://github.com/openshift/telemeter/pull/515) * [Full changelog](https://github.com/openshift/telemeter/compare/e1f625aa31e46a84fb5d9f97c8224b9059e27d8a...80992e54778c3a9728c6db997a7ef0cae504beab) ### [tests](https://github.com/openshift/origin/tree/8be91d0910ffca456fe5de75955f6d6d15b03fd8) * [TRT-1512](https://issues.redhat.com/browse/TRT-1512): Add debug messages to debug openshift-tests hang [#28610](https://github.com/openshift/origin/pull/28610) * [OCPBUGS-27847](https://issues.redhat.com/browse/OCPBUGS-27847): Do not assume there is just a single kubelet systemd service [#28545](https://github.com/openshift/origin/pull/28545) * [Full changelog](https://github.com/openshift/origin/compare/f05b5794430cf7e8bb977bf33b619aad40ff1224...8be91d0910ffca456fe5de75955f6d6d15b03fd8)