Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.15.0-0.okd-scos-2024-01-11-032357

No tests for this release

Upgrades from:

• 4.15.0-0.okd-scos-2024-01-10-152357 (changes) - Success

Upgrades to:

• 4.15.0-0.okd-scos-2024-01-11-152357 (changes) - Success

---

Loading changelog, this may take a while ...

Changes from 4.15.0-0.okd-scos-2023-12-21-061437

Created: 2024-01-11 09:23:49 +0000 UTC

Image Digest: sha256:0203a6750a256e72420af5deac4623da1ce0f8bfaa20f81a9bbec40fa8dacf0f

Release 4.15.0-0.okd-scos-2024-01-11-032357 was created from registry.ci.openshift.org/origin/release-scos:4.15.0-0.okd-scos-2024-01-11-032357

Components

• Kubernetes upgraded from 1.28.4 to 1.28.5
• CentOS Stream CoreOS upgraded from 415.9.202312201452-0 to 415.9.202401101453-0 (diff)

Rebuilt images without code change

• centos-stream-coreos-9 sha256:0daa9576c01b353890a7514b49f7e0468a755d2e5b897274bc9d9f72dd5f55ba
• centos-stream-coreos-9-extensions sha256:46bcef60a70d4a6d708f34f0284f1715d7d1123c3d6af8894a837d23a4b8c41e
• cluster-baremetal-operator git 95e6cbef sha256:e207af56864d8386bad181f7682c0b2953636d245be114812477236efbe6649e
• powervs-block-csi-driver-operator git a3729dcb sha256:557b35dff59e86057ed482eb18df62311dbbc269090c1443c72b566b71eeb42f

alibaba-cloud-controller-manager

• OCPBUGS-23697: Add Snyk file to exclude vendor directory on scan #48
• OCPBUGS-21984: Bump golang.org/x/net to v0.19.0 #41
• Full changelog

alibaba-disk-csi-driver-operator

• OCPBUGS-25355: setting TLSSecurityProfile with no minTLSVersion crashes controller #82
• Full changelog

alibaba-machine-controllers

• OCPBUGS-24124: Updating ose-alibaba-machine-controllers-container image to be consistent with ART #47
• Full changelog

apiserver-network-proxy

• OCPBUGS-24165: Updating ose-apiserver-network-proxy-container image to be consistent with ART #44
• Full changelog

aws-ebs-csi-driver

• OCPBUGS-25824: UPSTREAM: 1877: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #253
• Full changelog

aws-ebs-csi-driver-operator

• OCPBUGS-26195: Create RBAC objects first #93
• OCPBUGS-25995: Add selinux #91
• OCPBUGS-25355: setting TLSSecurityProfile with no minTLSVersion crashes controller #90
• Full changelog

azure-disk-csi-driver

• OCPBUGS-25768: UPSTREAM: 2132: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #72
• Full changelog

azure-disk-csi-driver-operator

• OCPBUGS-25355: setting TLSSecurityProfile with no minTLSVersion crashes controller #121
• Full changelog

azure-file-csi-driver

• OCPBUGS-25697: UPSTREAM: 1626: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #50
• Full changelog

azure-file-csi-driver-operator

• OCPBUGS-25355: setting TLSSecurityProfile with no minTLSVersion crashes controller #95
• Full changelog

azure-workload-identity-webhook

• OCPBUGS-22003: Upgrade golang/x/net for CVE-2023-39325 (4.15) #13
• Full changelog

baremetal-installer, installer, installer-artifacts

• CORS-3190: GCP: Add load balancer info to cluster infra #7888
• MULTIARCH-4072: Power VS: Add eu-de-1, eu-de-2, sao04, and wdc07 as supported zones #7870
• OCPBUGS-24956: Add cloud credential capability validation #7884
• OCPBUGS-25841: preserve category name when trying to find tag category #7876
• ARO-4744: Do not run platform validation on ARO #7865
• OCPBUGS-24956: Add cloud credential capability validation #7875
• OSASINFRA-3280: OpenStack: clarify root volume size requirements #7698
• OCPBUGS-26048: Bump default channel to stable-4.16 #7867
• OCPBUGS-24862: Updating ose-installer-altinfra-container image to be … #7872
• CORS-2852: cmd/create: allow clean shutdown of resources #7864
• OCPBUGS-24820: Updating ose-baremetal-installer-container image to be consistent with ART #7817
• OCPBUGS-24814: Updating ose-installer-container image to be consistent with ART #7816
• OCPBUGS-25600: aws: validate instance arch #7835
• OCPBUGS-25440: ic: aws: add iam:TagInstanceProfile permission requirement #7843
• OCPBUGS-25132: Fixes for the OpensStack UPI playbooks. #7833
• OCPBUGS-24853: Updating ose-installer-artifacts-container image to be consistent with ART #7818
• Full changelog

cluster-autoscaler-operator

• OCPBUGS-23706: Add Snyk file to exclude vendor directory on scan #307
• Full changelog

cluster-bootstrap

• OCPBUGS-24147: Updating ose-cluster-bootstrap-container image to be consistent with ART #101
• Full changelog

cluster-capi-operator

• OCPBUGS-26413, OCPCLOUD-1726: GCP Credential Req. manifest for CAPI to use new API field #155
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-26480, OCPCLOUD-1724: GCP Credentials req. manifest of CCMO to use new API field #320
• OCPBUGS-26210: Adds CloudConfigTransformer for Azure #319
• Full changelog

cluster-config-api

• OCPBUGS-26441: disable psa #1717
• CORS-3029: Add Cloud LB IPs to GCP PlatformStatus of Infrastructure CR #1705
• Full changelog

cluster-dns-operator

• OCPBUGS-20024: Enable topology-aware hints iff nodes in >=2 zones #399
• Full changelog

cluster-image-registry-operator

• OCPBUGS-26063: IBMCloud - Add support for endpoint overrides #984
• Full changelog

cluster-ingress-operator

• OCPBUGS-26544: Replace GCP role with explicit permissions #1015
• Full changelog

cluster-kube-cluster-api-operator

• OCPBUGS-24085: Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART #31
• Full changelog

cluster-kube-storage-version-migrator-operator

• OCPBUGS-24156: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART #100
• Full changelog

cluster-network-operator

• OCPBUGS-24036: remove all managed fields used by old manager #2167
• OCPBUGS-25312, OCPBUGS-25921: Avoid removal of ipsec-host daemonset when node is NotReady #2181
• OCPBUGS-24148: Updating cluster-network-operator-container image to be consistent with ART #2133
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-25982: E2E: Add tests for Dynamic ovs pinning (#904) #904
• rps: fail silently when rps application failed (#897) #897
• Full changelog

cluster-openshift-apiserver-operator

• OCPBUGS-24145: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART #560
• Full changelog

cluster-version-operator

• OCPBUGS-25949: pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls #1013
• OCPBUGS-25664: pkg/cvo/sync_worker: Verification-failure details for unforced updates too #1007
• Full changelog

console

• OCPBUGS-24812: Add missing https:// check for an external link #13433
• OCPBUGS-26516: bump helm version to 3.13.2 for OCP 4.15 #13465
• OCPBUGS-26041: fix bug where Update cluster modal will not open #13479
• OCPBUGS-26209: Fix PipelineRun Logs tab navigation #13484
• OCPBUGS-25726: Re-enable and fix pipelines e2e tests #13463
• OCPBUGS-25706: update the checks for showing Archived to Tekton results icon for PLRs and TRs list and details page #13461
• Full changelog

csi-driver-manila-operator

• OCPBUGS-25355: setting TLSSecurityProfile with no minTLSVersion crashes controller #221
• OCPBUGS-25161: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #216
• Full changelog

csi-external-provisioner

• OCPBUGS-25698: UPSTREAM: 1132: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #86
• Full changelog

etcd

• OCPBUGS-24933: Rebase etcd 3.5.11 openshift 4.15 #232
• Full changelog

gcp-cloud-controller-manager

• OCPBUGS-25947: Fix changing load balancer scope #56
• OCPBUGS-25808: Add Snyk file to exclude vendor directory on scan #55
• Full changelog

gcp-pd-csi-driver-operator

• OCPBUGS-25355: setting TLSSecurityProfile with no minTLSVersion crashes controller #108
• Full changelog

hyperkube, pod

• OCPBUGS-26068: Backport CEL IP and CIDR validations #1843
• OCPBUGS-26005: Update to Kubernetes 1.28.5 #1837
• Full changelog

hypershift

• OCPBUGS-26412: Set new condition on SG deletion. #3381
• OCPBUGS-26410: Disable UWM Telemetry remote writer when MGMT cluster is disconnected #3380
• OCPBUGS-26410: Disable UWM Telemetry writer when telemeter-client cm not exists #3379
• OCPBUGS-26223: hostedcontrolplane: don’t start pki operator when disabled #3376
• OCPBUGS-25782: Added support for OLM Disable default sources on HC creation #3321
• CCO-511: control-plane-operator: reconcile the CCO #3336
• Full changelog

ibmcloud-cluster-api-controllers

• OCPBUGS-23685: Add Snyk file to exclude vendor directory on scan #72
• Full changelog

installer-altinfra

• OCPBUGS-26511: Bump default channel to 4.15 #7883
• OCPBUGS-26051: aws: validate instance arch #7868
• OCPBUGS-25990: Fixes for the OpensStack UPI playbooks. #7863
• Full changelog

kube-storage-version-migrator

• OCPBUGS-24142: Updating ose-kube-storage-version-migrator-container image to be consistent with ART #201
• Full changelog

libvirt-machine-controllers

• OCPBUGS-26045: Replace genisoimage with xorriso in 4.15 to allow rhel9 bump #272
• OCPBUGS-25772: Add Snyk file to exclude vendor directory on scan #278
• Full changelog

machine-api-operator

• OCPBUGS-26406, OCPCLOUD-1725: Add GCP custom roles #1196
• OCPBUGS-25734: Add Snyk file to exclude vendor directory on scan #1193
• Full changelog

machine-config-operator

• OCPBUGS-24416: Sync MCN with node creation and deletion #4062
• NO-ISSUE: pkg: Deduplicate api/machineconfiguration/v1 imports #4091
• MCO-679: MCO-830: Managed boot images MVP #4083
• OCPBUGS-25406: Azure Run ovs-configuration.service before dnsmasq.service #4087
• OCPBUGS-19628: Log network service output to console #3927
• Full changelog

multus-cni

• OCPBUGS-26535: Revert #206 “Adds a wait on unix socket readiness [backport 4.15]” #209
• OCPBUGS-22839: Adds a wait on unix socket readiness [backport 4.15] #206
• Full changelog

openshift-apiserver

• OCPBUGS-24090: Updating ose-openshift-apiserver-container image to be consistent with ART #406
• Full changelog

openstack-cinder-csi-driver-operator

• OCPBUGS-25355: setting TLSSecurityProfile with no minTLSVersion crashes controller #154
• OCPBUGS-25161: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #148
• Full changelog

operator-lifecycle-manager, operator-registry

• OCPBUGS-26066: [release-4.15] NO-ISSUE: Synchronize From Upstream Repositories #648
• OCPBUGS-25818: NO-ISSUE: Synchronize From Upstream Repositories #644
• OCPBUGS-25798, OCPBUGS-25802: [release-4.15] NO-ISSUE: Synchronize From Upstream Repositories #643
• NO-ISSUE: Update verified directories for microshift-manifests #642
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-25486: Fix Egress IP Deletion Handler to Prevent OVN Policy Leaks #1999
• Full changelog

powervs-block-csi-driver

• OCPBUGS-25978: Rebase with upstream: Fix snyk code issue: Path Traversal #71
• Full changelog

powervs-machine-controllers

• OCPBUGS-26555: PowerVS: Bump powervs-utils to v0.0.0-20240105123432-7588e9595c17 #72
• Full changelog

service-ca-operator

• OCPBUGS-24107: Updating ose-service-ca-operator-container image to be consistent with ART #226
• Full changelog

tests

• OCPBUGS-26239: Properly ignore kube guard probe events #28504
• OCPBUGS-26206: Update cluster-monitoring-operator request limits #28506
• Full changelog

vsphere-problem-detector

• OCPBUGS-25648: Fix VPD crash when vm is not found #149
• Full changelog

---

View changelog in Markdown or change previous release: 4.15.0-0.okd-scos-2023-12-21-0614374.15.0-0.okd-scos-2023-11-29-1143554.15.0-0.okd-scos-2023-11-10-1924314.14.0-0.okd-scos-2023-10-19-1232264.14.0-0.okd-scos-2023-10-11-0442584.14.0-0.okd-scos-2023-08-17-0220294.14.0-0.okd-scos-2023-05-23-2245404.13.0-0.okd-scos-2023-05-04-1922524.13.0-0.okd-scos-2023-03-29-1248244.13.0-0.okd-scos-2023-02-13-084859───4.17.0-0.okd-2024-04-22-104002───4.16.0-0.okd-scos-2024-04-27-1840054.16.0-0.okd-scos-2024-04-27-0640054.16.0-0.okd-scos-2024-04-26-1840054.16.0-0.okd-scos-2024-04-26-0640054.16.0-0.okd-scos-2024-04-25-1840054.16.0-0.okd-scos-2024-04-25-0519224.16.0-0.okd-scos-2024-04-24-1719224.16.0-0.okd-scos-2024-04-23-202838───4.16.0-0.okd-2024-04-27-2006114.16.0-0.okd-2024-04-27-0806114.16.0-0.okd-2024-04-26-2006114.16.0-0.okd-2024-04-26-0806114.16.0-0.okd-2024-04-25-2006114.16.0-0.okd-2024-04-25-0806114.16.0-0.okd-2024-04-24-2006114.16.0-0.okd-2024-03-27-0155364.16.0-0.okd-2024-03-26-1355364.16.0-0.okd-2024-03-26-0155364.16.0-0.okd-2024-03-25-1355364.16.0-0.okd-2024-03-23-225022───4.15.0-0.okd-scos-2024-04-25-1837084.15.0-0.okd-scos-2024-04-25-0637084.15.0-0.okd-scos-2024-04-24-1837084.15.0-0.okd-scos-2024-04-24-0637084.15.0-0.okd-scos-2024-04-23-1633134.15.0-0.okd-scos-2024-01-18-2235234.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2024-04-27-0853234.15.0-0.okd-2024-04-26-2053234.15.0-0.okd-2024-04-26-0853234.15.0-0.okd-2024-04-25-2053234.15.0-0.okd-2024-04-23-2015564.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.14.0-0.okd-scos-2024-04-27-1336094.14.0-0.okd-scos-2024-04-26-1336094.14.0-0.okd-scos-2024-04-24-0815334.14.0-0.okd-scos-2024-04-23-0815334.14.0-0.okd-scos-2024-04-20-1242414.14.0-0.okd-scos-2024-01-27-0937454.14.0-0.okd-scos-2024-01-26-0937454.14.0-0.okd-scos-2024-01-25-0937454.14.0-0.okd-scos-2024-01-24-093745───4.14.0-0.okd-2024-04-27-1335174.14.0-0.okd-2024-04-26-1335174.14.0-0.okd-2024-04-24-0817244.14.0-0.okd-2024-04-23-0817244.14.0-0.okd-2024-04-20-1254414.14.0-0.okd-2024-03-18-1648434.14.0-0.okd-2024-03-14-1137094.14.0-0.okd-2024-03-13-1137094.14.0-0.okd-2024-03-12-1137094.14.0-0.okd-2024-03-11-113709───4.13.0-0.okd-scos-2024-04-09-1520214.13.0-0.okd-scos-2024-03-12-1520214.13.0-0.okd-scos-2024-02-13-1520214.13.0-0.okd-scos-2024-01-16-1520214.13.0-0.okd-scos-2023-12-19-1520214.13.0-0.okd-scos-2023-12-19-0942084.13.0-0.okd-scos-2023-12-19-054611───4.13.0-0.okd-2024-04-09-1520224.13.0-0.okd-2024-03-12-1520224.13.0-0.okd-2024-02-13-1520224.13.0-0.okd-2024-01-16-1520224.13.0-0.okd-2023-12-19-152022───4.14.0-0.okd-scos-2024-01-30-0325254.14.0-0.okd-scos-2024-01-10-1518184.14.0-0.okd-scos-2023-12-21-0732124.14.0-0.okd-scos-2023-11-10-0508464.13.0-0.okd-scos-2023-10-19-1112564.13.0-0.okd-scos-2023-10-11-0632524.13.0-0.okd-scos-2023-07-07-0434174.13.0-0.okd-scos-2023-06-23-0414574.13.0-0.okd-scos-2023-06-22-0028524.13.0-0.okd-scos-2023-05-25-085822───4.15.0-0.okd-2024-03-10-0101164.15.0-0.okd-2024-02-23-1634104.15.0-0.okd-2024-02-10-0355344.15.0-0.okd-2024-01-27-0704244.14.0-0.okd-2024-01-26-1756294.14.0-0.okd-2024-01-06-0845174.14.0-0.okd-2023-12-01-2258144.14.0-0.okd-2023-11-14-1019244.14.0-0.okd-2023-11-12-0427034.14.0-0.okd-2023-10-28-0735504.13.0-0.okd-2023-10-28-0654484.13.0-0.okd-2023-09-30-0849374.13.0-0.okd-2023-09-03-0824264.13.0-0.okd-2023-08-18-1358054.13.0-0.okd-2023-08-04-1647264.13.0-0.okd-2023-07-23-0512084.13.0-0.okd-2023-07-09-0620294.13.0-0.okd-2023-06-24-1457504.13.0-0.okd-2023-06-04-0803004.13.0-0.okd-2023-05-22-052007

Source code for this page located on github