4.15.0-0.okd-2024-02-10-035534

New features since version 4.14.0-0.okd-scos-2024-08-05-223930

Download installer and client with:

oc adm release extract --tools quay.io/openshift/okd:4.15.0-0.okd-2024-02-10-035534

Team Approvals:

No tests for this release

Upgrades from:

Upgrades to:

4.15.0-0.okd-2024-03-10-010116 (changes) - Success
4.15.0-0.okd-2024-02-23-163410 (changes) - F S F F F S

Changes from 4.15.0-0.okd-2024-01-27-070424

Created: 2024-02-11 07:15:48 +0000 UTC

Image Digest: sha256:e13d5f24fc0347b51f1144e7f5bb03b48a99b43d3de0a260af171bf7e39a30f7

Release 4.15.0-0.okd-2024-02-10-035534 was created from registry.ci.openshift.org/origin/release:4.15.0-0.okd-2024-02-10-035534

Components

Kubernetes 1.28.6
Fedora CoreOS upgraded from 39.20240104.3 to 39.20240112.3

Rebuilt images without code change

aws-cloud-controller-manager git ba252ab1 sha256:9c4fba3fd355f30240371f44a83f2ef76f07937f9fd4cbec9081c71bc6f642e5
baremetal-runtimecfg git 84581c73 sha256:532dd534a5020c274d3733a55273bc4b5ba36a49a65fc2a32b2661443706af94
cloud-network-config-controller git 81ab2a17 sha256:2aa502d6f082bc89cafdfddf4e92ff6c6e98af06f65291044f10910fc77be90f
cluster-etcd-operator git 85e53769 sha256:1293e284063d8687a5219876bfa69b0844a9153143a832deae77df35e9d24cd2
container-networking-plugins git c6cfbfe3 sha256:a00b9f5d8a2700c0923fd527d6f41d5c9dc2aec08995b047e6369a601a7e85cd
multus-admission-controller git 23a7cfe4 sha256:ee6c272fb093cff52fd906d32b7c53ffcfad94e646387f49ea9d0ec6ac1a0587
multus-cni git f9406f86 sha256:adf13225f7a4e1cafb2d98bb08853518f05a37ee129da68a993d0b6b65424e78
multus-networkpolicy git 6212406b sha256:6d6fd8cb7f91959cb8cb0e0eeb40f6b4b1dde7e05f86169c7848438f7371a0d6
multus-whereabouts-ipam-cni git 2edc45fe sha256:a0026afdc40d1b962a220bca2e7f0c2b7a7a44396d866beb8aa913337c434a07
vsphere-problem-detector git de02a75d sha256:6645df7eb2e46641dcef34f93e429a8fd74eb4452912c82b1268afb3ff896d83

agent-installer-api-server

MGMT-16494: Move ip hint file creation to ignition in order to change it in IBI process (#5926) #5926
OCPBUGS-24428: Redact passwords logged in installConfigOverrides Ensure that any passwords included in installConfigOverrides are redacted in logs. (#5905) #5905
Full changelog

azure-machine-controllers

OCPBUGS-29007: Don’t create availability set when using spot instances #95
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts, ovirt-installer

OCPBUGS-29219: GCP: Skip validation of public and private zones for terraform vars #7994
OCPBUGS-29201: Copy GCP manifests within MCO bootstrap to the correct location #7993
OCPBUGS-28822: aws-edge-zones preventing err before discovering #7973
OCPBUGS-29117: IBMCloud: Handle disk delete errors #7984
OCPBUGS-26036: ic: aws: add iam:TagInstanceProfile permission requirement #7866
OCPBUGS-28779: update tested Azure Arm64 instance type on 4.15 #7971
OCPBUGS-28546: [release-4.15] Bump containerd for vulnerability fix #7957
OCPBUGS-27346: Warn that FeatureSet is not supported #7922
OCPBUGS-27417: baremetal: gather all recently refactored services #7928
OCPBUGS-27380: set the –cluster-profile flag for openshift/api rendering #7955
OCPBUGS-27894: duplicate failure domains in CMPS #7951
OCPBUGS-27329: remove retired serial NCv2 from azure tested instance type list on x86 #7921
Full changelog

baremetal-machine-controllers

OCPBUGS-28838: Extend metal3remediation aggregation role #210
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-28204: Add RHEL9 and RHEL8 based oc as new targets in command extraction #1672
Full changelog

cloud-credential-operator

OCPBUGS-29113: ccoctl - use proxy when validating CloudFront URL #674
OCPBUGS-27910: Resolve all outstanding snyk vulnerabilities #649
OCPBUGS-27901: Use cached clients to avoid client side throttling #660
Full changelog

cluster-authentication-operator

NO-JIRA: _output - remove dir #652
OCPBUGS-27225: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #647
Full changelog

cluster-baremetal-operator

OCPBUGS-29153: manifests/0000_31_cluster-baremetal-operator_06_deployment: Enable leader election #402
Full changelog

cluster-capi-operator

OCPBUGS-28754: Start operator controllers only on supported platforms, add unsupported controller #158
Full changelog

cluster-config-api

OCPBUGS-29074: Move network.config conditions to GA #1756
NP-905: [release-4.15] Promote Live Migration to GA #1749
OCPBUGS-28902: Allow modified IPv6 address as CPIC name #1750
OCPBUGS-27380: add separate authentication config manifest for hypershift #1743
OCPBUGS-27380: respect the cluster profile in rendering #1735
Full changelog

cluster-image-registry-operator

OCPBUGS-28830: pkg/storage/s3: enable bucket key on encryption settings #994
Full changelog

cluster-ingress-operator

CORS-3169: Add Ingress LB IPs to Infra CR and set DNS unmanaged when BYO DNS is enabled #1022
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-27491: webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator #1628
Full changelog

cluster-machine-approver

OCPBUGS-27758: Increase concurrent reconciles to 10 #226
Full changelog

cluster-monitoring-operator

OCPBUGS-28703: rollout metrics-server on cert rotations #2249
Full changelog

cluster-network-operator

OCPBUGS-29082, OCPBUGS-29150: Remove libreswan rpm existence checks #2255
OCPBUGS-28778: add env var in whereabouts-reconciler daemonset #2242
OCPBUGS-27421: Only reconcile on Node updates with Label changes #2212
OCPBUGS-27199: Remove egressip write permissions from ovn-kubernetes-node #2203
OCPBUGS-27174: network node identity: tolarate all taints #2202
NP-905, OCPBUGS-28902: Bump openshift API #2247
OCPBUGS-28904: [release-4.15] Restrict live migration to standalone managed clusters #2243
NO-JIRA: add kyrtapz as reviewer and approver for release 4.15 #2227
OCPBUGS-28214: Not update migration conditions when any MCP is updating #2223
OCPBUGS-27777: Deploy CNO IPsec MC even if user already have one #2215
Full changelog

cluster-node-tuning-operator

OCPBUGS-27948: Tuned rendering and MCP detection improvements (#928) #928
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-28946: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #327
Full changelog

cluster-storage-operator

OCPBUGS-28817: Allow vSphere CSI driver to be disabled #446
Full changelog

console

OCPBUGS-28917: Optimize federation of shared PF5 code for dynamic plugins #13566
OCPBUGS-29022: fix i18n for Remove volume modal #13575
OCPBUGS-28940: AUTH-440: fix usersettings identifier creation #13571
OCPBUGS-27012: update check for the ‘provider’ label on the PackageMa… #13501
AUTH-440: OIDC: refresh sessions with a refresh token if present #13563
OCPBUGS-28591: Fixed bug with user feedback where inform the direction of RedHat was not showing up #13551
CONSOLE-3829, OCPBUGS-27235: backend: use the k8s SelfSubjectReview API to get info about a user #13514
OCPBUGS-27896: Add flags checks to hide Pipeline static plugin List and details pages #13536
AUTH-440: expand options for the OIDC authenticator #13509
OCPBUGS-27909: fix bug where Expand PVC modal assumes pvc.spec.resou… #13542
Full changelog

console-operator

always sync oidcClients in authn status if the field is present #859
OCPBUGS-29010: oauthclients: fix oauthclients degraded condition that never gets removed #856
CONSOLE-3912: OAuthClients: only add oidcClients to authentication status if the field exists #854
CONSOLE-3912: OIDC: setup the volume name properly when custom CA is configured #853
OCPBUGS-22681: Bump documentationBaseURL to 4.15 #807
CONSOLE-3912: Add secrets for session encryption/authentication in OIDC #852
pick of OCPBUGS-27221: make it impossible double set conditions in a single loop #851
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

OCPBUGS-28944: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #166
Full changelog

csi-driver-shared-resource-operator

OCPBUGS-28956: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #102
Full changelog

docker-builder

OCPBUGS-28948: Replace ‘coreydaley’ with ‘sayan-biswas’ #378
Full changelog

fedora-coreos, machine-os-content, okd-rpms

Bump Fedora CoreOS version string #744
Bump fedora-coreos to latest stable #739
Full changelog

hyperkube, pod

OCPBUGS-28209: UPSTREAM <carry>: use snyk file #1873
AUTH-439: loosen authentication.spec.type validation #1878
Full changelog

hypershift

OCPBUGS-29303: release-4.15: revocation controller backport #3532
OCPBUGS-29020: reduce external-dns route53 call volume #3521
OCPBUGS-29179: [4.15] reflect NodePool replica count nil in status #3473
NO-JIRA: remove unneeded code to copy Authentication refs #3537
OCPBUGS-29029: Add ValidatingAdmissionPolicy to KAS config #3523
OCPBUGS-28764: node spread anti-affinity for HA HCP #3495
OCPBUGS-28603: Remove webhook validations that introduce resource ordering #3515
OCPBUGS-28594: backport API moves #3482
HOSTEDCP-1272: Added CLI support to create DualStack clusters using default values #3502
OCPBUGS-27818: Add GC knobs for KAS #3457
OCPBUGS-27103: hcco: use manual mode for CCO #3420
NO-JIRA: kubevirt, e2e Add additional network test #3499
CNV-37394: Remove ‘–attach-default-network’ from productized cli #3500
OCPBUGS-27380: indicate cluster profile to render the correct manifests #3465
OCPBUGS-28235: Required RBAC for network-node-identity is not created when hosted cluster networkType is set to Other. #3467
Full changelog

insights-operator

gather etcd_server_slow metrics (#900) #900
Full changelog

kube-proxy, sdn

OCPBUGS-28580: Move sdn to RHEL9 base image (attempt #2) #617
OCPBUGS-28580: Revert #613 “OCPBUGS-28580: Move sdn to RHEL9 base image” #616
OCPBUGS-28580: Move sdn to RHEL9 base image #613
OCPBUGS-28549: Add Snyk file to exclude directories on scan #614
Full changelog

machine-api-operator

OCPBUGS-28762: Add additional vnet join permission for Azure #1216
OCPBUGS-27758: Set –max-concurrent-reconciles=10 for Azure machine controller #1210
Full changelog

machine-config-operator

OCPSTRAT-1062: [4.15] crio: enable log linking by default in 4.15 #4174
OCPBUGS-29105: On-prem coredns manifests should not be generated for GCP #4169
OCPBUGS-28909, OCPBUGS-28910: Run resolv-prepender entirely async #4161
CORS-3169: Add support for in-cluster DNS on Cloud Platforms when cloud DNS cannot be used #4155
Full changelog

oauth-apiserver

OCPBUGS-21669: bump k8s.io and others (4.15) #99
OCPBUGS-24132: Updating ose-oauth-apiserver-container image to be consistent with ART #93
Full changelog

oc-mirror

OCPBUGS-27946: Capability to override default channel (#786) #786
Full changelog

olm-rukpak

OCPBUGS-27596, OCPBUGS-27681: UPSTREAM: <carry>: Update go-git to v5.11.0 #72
Full changelog

openshift-controller-manager

OCPBUGS-28947: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #285
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-24159: Updating operator-lifecycle-manager-container image to be consistent with ART #623
OCPBUGS-29083: * olm,catalog: only validate the resources we label #683
OCPBUGS-29116: [release-4.15]: Clear (existing) error cond from Subscription, once error resolved #684
OCPBUGS-27566, OCPBUGS-27571, OCPBUGS-27651, OCPBUGS-27656: bump go-git/v5 to 5.11.0 (#1175) #668
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-29230: [release-4.15] separate the handler sync from the informer sync & remove the full service resync during node tracker startup #2060
OCPBUGS-28818: Support Permanent Session Affinity #2045
OCPBUGS-28848: Ignore hybrid-overlay nodes from EgressIP controller #2040
OCPBUGS-29001: kubevirt, Replace routes on migration #2052
OCPBUGS-27947: [release-4.15] Fix LGW ETP=Local on IPv6 #2028
Full changelog

tests

OCPBUGS-29031: Replace ‘coreydaley’ with ‘sayan-biswas’ #28573
OCPBUGS-26487: Increase timeout for pod-network-service #28508
OCPBUGS-27934: fix panic in service-poller #28550
OCPBUGS-26960: updated timeout to 3 seconds to account for network timing issues #28519
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-26013: Revert “Merge pull request #97 from jsafrane/rebase-v3.1.1” #110
OCPBUGS-26074, OCPBUGS-26075, OCPBUGS-26076: [release-4.15]: Fix CVE-2023-45142 and CVE-2023-47108 #109
OCPBUGS-25856: UPSTREAM: 2714: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #107
Full changelog

vsphere-csi-driver-operator

OCPBUGS-28817: Mark the operator as Disabled on connection error #219
OCPBUGS-27378: Rerun checks on reconnect #216
OCPBUGS-26409: CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 #207
OCPBUGS-26013: Enable new features to prevent CSI driver from crash looping (revert OCPBUGS-23970) #205
OCPBUGS-25355: setting TLSSecurityProfile with no minTLSVersion crashes controller #204
OCPBUGS-25161: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #200
OCPBUGS-23970: Enable new features to prevent CSI driver from crash looping #192
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github