Back to index

Download installer and client with:

oc adm release extract --tools quay.io/openshift/okd:4.15.0-0.okd-2024-03-10-010116

Team Approvals:

No tests for this release

Upgrades from:

• 4.15.0-0.okd-2024-03-09-130115 (changes) - Success
• 4.15.0-0.okd-2024-02-23-163410 - Success
• 4.15.0-0.okd-2024-02-10-035534 (changes) - Success
• 4.15.0-0.okd-2024-01-27-070424 (changes) - Success
• 4.14.0-0.okd-2024-01-26-175629 (changes) - F F S

---

Changes from 4.15.0-0.okd-2024-02-23-163410

Created: 2024-03-10 06:53:44 +0000 UTC

Image Digest: sha256:46b462be1e4c15ce5ab5fba97e713e8824bbb9f614ac5abe1be41fda916920cc

Release 4.15.0-0.okd-2024-03-10-010116 was created from registry.ci.openshift.org/origin/release:4.15.0-0.okd-2024-03-10-010116

Components

• Kubernetes upgraded from 1.28.6 to 1.28.7
• Fedora CoreOS upgraded from 39.20240128.3 to 39.20240210.3

Rebuilt images without code change

• insights-operator git a6923466 sha256:6dccca75e1ec2f31b92ce06e1daad084ac321b8c68b17b0bbc92d9680ddbb5db
• kubevirt-cloud-controller-manager git e465e606 sha256:9e166053d7b8c6ffc87825ac980e8742de371db56357f82a2045f9ba9492d2ef
• powervs-machine-controllers git 07e8f8b8 sha256:3c612d82aa0224fd9cf84c416d668acc9aa0876ad93a57b026bf4c2bdfef09fd

aws-cloud-controller-manager

• OCPBUGS-29079: spec: add Provides: ose-aws-ecr-image-credential-provider #77
• Full changelog

azure-machine-controllers

• OCPBUGS-25510: bump x/crypto #100
• Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts, ovirt-installer

• OCPBUGS-30148: fix “OpenShiftSDN deprecated” error message #8094
• OCPBUGS-30011: PowerVS: remove IBM-Cloud/bluemix-go/api/account/accountv2 in 4.15 #8076
• OCPBUGS-29768: Power VS: Add sleep to allow workspace to configure PER #8052
• Bug OCPBUGS-29726: OpenStack: Fix dualstack with external load-balancer #8050
• OCPBUGS-29495: gcp: better error msg when service accnt missing #8024
• Bug OCPBUGS-29458: OpenStack: fix controlPlanePort validation #8019
• OCPBUGS-29236: Fixed control plane machine set handling of static IPs when AddressesFromPools is not in use. #7996
• OCPBUGS-28841: PowerVS: Add dal12 region #7977
• OCPBUGS-29955: PowerVS: Add debugging to ServiceInstanceNameToGUID #8065
• Full changelog

baremetal-runtimecfg

• OCPBUGS-29338: Ignore egress IP when selecting Node IP #299
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-30270: Introduce –issuer-url flag in oc login #1696
• Full changelog

cloud-credential-operator

• OCPBUGS-30412: gcp actuator update check to consider custom roles #686
• OCPBUGS-29155: Fix the ClusterOperator watch of the status controller #675
• Full changelog

cluster-baremetal-operator

• OCPBUGS-29787: Update the leader election durations to be tolerant #405
• Full changelog

cluster-capi-controllers

• OCPBUGS-29515: openshift: generate separate manifest for core CAPI CRDs #198
• Full changelog

cluster-capi-operator

• OCPBUGS-25505: UPSTREAM: <carry>: bump x/crypto #165
• OCPBUGS-29515: manifests-gen: store core capi crds also in their own manifest #160
• Full changelog

cluster-config-api

• OCPBUGS-29370: Update AWSCSIDriverConfigSpec fields validation to accept all current AWS partitions #1767
• Full changelog

cluster-control-plane-machine-set-operator

• OCPBUGS-29419: Never delete a Machine when there’s a single Machine in an index #280
• OCPBUGS-29236: Fixed control plane machine set handling of static IPs when AddressesFromPools is not in use. #279
• Full changelog

cluster-etcd-operator

• OCPBUGS-30042: fix condition name type #1212
• OCPBUGS-28628: fix panic in health check timeouts #1191
• OCPBUGS-29717: [4.15] Replace nodelister with master nodelister everywhere #1206
• Full changelog

cluster-image-registry-operator

• OCPBUGS-29983: cmd/move-blobs: log and exit 1 on error instead of panic #1009
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-30304: cert rotation: Bump library-go to latest master #1653
• OCPBUGS-29775: webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator #1647
• OCPBUGS-30180: add provider name to cluster_infrastructure_provider when external platform #1639
• Full changelog

cluster-network-operator

• OCPBUGS-29090: network-node-identity mounts secrets with mode 0640 #2251
• OCPBUGS-29390: ipsec: fix openssl typo #2272
• OCPBUGS-29522: Not set CNO to degraded if API server returns conflict error #2275
• OCPBUGS-29654: [release-4.15] Disable network-node-identity on ROKS #2278
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-29752: [release-4.15][manual] backport performance profile owner reference ehnancements (#963) #963
• Render: Add MCSelector to missing default MCPs (#959) #959
• Add support to inject owner-ref argument to render command (#966) #966
• Full changelog

cluster-openshift-controller-manager-operator

• OCPBUGS-24086: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART #319
• Full changelog

cluster-storage-operator

• OCPBUGS-29370: Update AWSCSIDriverConfigSpec fields validation to accept all curren #461
• Full changelog

console

• OCPBUGS-25831: Date&Time values are not showing as per browser default language #13467
• OCPBUGS-29080: make getGroupVersionKindForResource null safe #13582
• OCPBUGS-29781: Fix operands list endpoint. #13633
• OCPBUGS-29812: Changes to prevent yaml editor crash in version 4.15 #13638
• OCPBUGS-29842: Switch to service from external result route endpoint #13627
• OCPBUGS-28889: VolumeSnapshots data not displayed in PVC > VolumeSnapshots tab #13570
• OCPBUGS-27431: Add source maps to production builds #13526
• OCPBUGS-26481: Tab VolumeSnapshots crashed on PVC page #13490
• OCPBUGS-25984: Fix config ini format #13475
• OCPBUGS-29844: Enable catalog source badge to truncate for long names #13629
• OCPBUGS-29846: Prevent complete page reload when changing perspective #13631
• OCPBUGS-29845: Page fails to return to the Secrets list after clicking ‘Cancel’ on any Secret creation page #13630
• OCPBUGS-29843: improve empty state message for Machines and MachineSets page #13628
• OCPBUGS-29679: TaskRuns list page is loading constantly for all projects #13618
• OCPBUGS-29640: Output image url link leads to 404 for Shipwright Builds #13615
• OCPBUGS-28232: do not deduplicate ImageManifestVulns in Overview popover #13545
• chore(i18n) OCPBUGS-28623: update translations: : Completed OCP-4.15/Master Branch/Sprint 244 #13594
• OCPBUGS-26567: Fixed some problems in topology Chinese translation text #13498
• OCPBUGS-29914: [release-4.15] Use selfsubjectreview API from frontend #13636
• Full changelog

console-operator

• OCPBUGS-27113: Prevent healthcheck controller from Available=False blipping #835
• Full changelog

fedora-coreos, machine-os-content, okd-rpms

• Bump Fedora CoreOS version string #759
• Bump fedora-coreos to latest stable #755
• Full changelog

hyperkube, pod

• OCPBUGS-29661: Bump to 1.28.7 #1891
• Full changelog

hypershift

• NO-JIRA: chore(deps): update rhtap references (release-4.15) #3705
• OCPBUGS-30189: set Konnectivity cipher suites #3673
• ”[release-4.15] OCPBUGS-27500: Fix default release image lookup” #3549
• OCPBUGS-30284: do not set KAS OAuthMetadataFile with Authentication type OIDC #3694
• OCPBUGS-30281: [release-4.15] OCPBUGS-30102: Support to disable machine management components #3670
• NO-JIRA: chore(deps): update rhtap references (release-4.15) #3675
• Update RHTAP references (release-4.15) #3645
• HOSTEDCP-1405: Remove files not needed #3669
• CNV-36056: Expose NodeSelector for KubeVirt VMs in NodePool #3648
• OCPBUGS-30088: rollout kas on auth config change #3653
• NO-JIRA: remove PrivateIngressController cleanup #3646
• OCPBUGS-29880: feat(config): Default RevisionHistoryLimit to 2 for deployments #3632
• OCPBUGS-29025: cpo: honor user provided oauthmetadata configmap passed in Authentication config #3522
• OCPBUGS-30029: sync AuthenticationConfiguration type with o/k 1.28 carry #3644
• NO-JIRA: Red Hat Konflux update hypershift-release-mce-25 #3643
• NO-JIRA: Remove specific pull secret watch in HCCO #3606
• OCPBUGS-29850: control-plane-pki-operator: fix CA used for SRE client credentials #3626
• NO-JIRA: PDB backports #3628
• Full changelog

ironic-agent

• OCPBUGS-30078: [release-4.15] OCPBUGS-30078: Fix tripleo url with commit hash for openstack repos config #115
• Full changelog

machine-config-operator

• OCPBUGS-30017: CRI-O: Add missing Devices annotation to CRI-O configuration #4227
• OCPBUGS-29339: annotate on-prem static pods for workload partitioning #4179
• OCPBUGS-29797: set nodeStatusReportFrequency #4211
• OCPBUGS-29166: ovs-configure: fix vlan_parent calculation #4171
• OCPBUGS-29651: nmstate, configure nmstate to keep service yamls #4192
• Full changelog

multus-cni

• OCPBUGS-28271: Fix SAST scan issues for multus-cni-container [4.15] #219
• Full changelog

oc-mirror

• OCPBUGS-23550: Generate both oc-mirror binaries for rhel9 and rhel8 (#804) #804
• Fix to ensure operator not found error exits with correct status (#794) #794
• Full changelog

olm-catalogd

• OCPBUGS-29796: UPSTREAM: 231: make garbage collection a runnable #44
• Full changelog

olm-rukpak

• : OCPBUGS-30264: Bump Helm & K8s dependencies #79
• Full changelog

openshift-controller-manager

• OCPBUGS-24086: Updating ose-openshift-controller-manager-container image to be consistent with ART #281
• Full changelog

operator-lifecycle-manager, operator-registry

• OCPBUGS-30193: Synchronize From Upstream Repositories #711
• OCPBUGS-30141: ClusterRoleBinding + Service SSA cherry-pick #707
• OCPBUGS-30147: Wait for required RBAC before creating packageserver CSV #710
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-29599: Update HostNetworkNamespace address_set for remote zone nodes #2074
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• OCPBUGS-29180: fix: convert continue field between v1beta1 and v1alpha1 #276
• OCPBUGS-29509: fix: don’t fail metadata transform on unknown types (#6298) #278
• Full changelog

telemeter

• OCPBUGS-24153: Updating telemeter-container image to be consistent with ART #496
• Full changelog

tests

• OCPNODE-2101: add kube-rbac-proxy-crio toleration change #28637
• OCPBUGS-30161: Skip tests for image-registry operator with single replica #28633
• OCPBUGS-29927: Only extract node role from properly formatted node-role label #28615
• Full changelog

vsphere-cluster-api-controllers

• OCPBUGS-26476: UPSTREAM: <carry>: bump x/crypto #35
• Full changelog

---

View changelog in Markdown or change previous release: 4.15.0-0.okd-2024-02-23-1634104.15.0-0.okd-2024-02-10-0355344.15.0-0.okd-2024-01-27-070424───4.21.0-0.okd-scos-2025-11-04-0346004.21.0-0.okd-scos-2025-11-03-1546004.21.0-0.okd-scos-2025-11-03-0346004.21.0-0.okd-scos-2025-11-02-1546004.21.0-0.okd-scos-2025-11-02-0035464.21.0-0.okd-scos-2025-11-01-123546───4.20.0-0.okd-scos-2025-11-04-0502054.20.0-0.okd-scos-2025-11-03-1702054.20.0-0.okd-scos-2025-10-31-2338174.20.0-0.okd-scos-2025-10-31-1138174.20.0-0.okd-scos-2025-10-30-2119124.20.0-0.okd-scos-2025-10-30-0919124.20.0-0.okd-scos-2025-10-29-211911───4.19.0-0.okd-scos-2025-10-25-0018304.19.0-0.okd-scos-2025-10-24-1218294.19.0-0.okd-scos-2025-10-24-0018284.19.0-0.okd-scos-2025-10-23-1218284.19.0-0.okd-scos-2025-10-23-001828───4.18.0-0.okd-scos-2025-05-27-0825374.18.0-0.okd-scos-2025-05-26-2025374.18.0-0.okd-scos-2025-05-26-0825374.18.0-0.okd-scos-2025-05-23-0333574.18.0-0.okd-scos-2025-05-22-153357───4.17.0-0.okd-scos-2025-02-25-0904554.17.0-0.okd-scos-2025-02-24-2104554.17.0-0.okd-scos-2025-02-24-0904544.17.0-0.okd-scos-2025-02-23-2104544.17.0-0.okd-scos-2025-02-22-211215───4.16.0-0.okd-scos-2025-01-06-1432414.16.0-0.okd-scos-2025-01-04-1456004.16.0-0.okd-scos-2025-01-04-0142364.16.0-0.okd-scos-2025-01-03-1342364.16.0-0.okd-scos-2025-01-03-0142364.16.0-0.okd-scos-2024-12-17-0222464.16.0-0.okd-scos-2024-11-24-1100454.16.0-0.okd-scos-2024-11-23-1818454.16.0-0.okd-scos-2024-11-23-0618454.16.0-0.okd-scos-2024-11-22-1818454.16.0-0.okd-scos-2024-11-22-061845───4.15.0-0.okd-scos-2024-12-16-1913164.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2025-06-27-1341344.15.0-0.okd-2025-06-17-1652194.15.0-0.okd-2025-05-02-1402244.15.0-0.okd-2025-04-03-2126204.15.0-0.okd-2025-04-02-1800124.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.21.0-okd-scos.ec.64.21.0-okd-scos.ec.54.21.0-okd-scos.ec.44.21.0-okd-scos.ec.34.21.0-okd-scos.ec.24.21.0-okd-scos.ec.14.21.0-okd-scos.ec.0───4.20.0-okd-scos.74.20.0-okd-scos.64.20.0-okd-scos.54.20.0-okd-scos.44.20.0-okd-scos.34.20.0-okd-scos.24.20.0-okd-scos.14.20.0-okd-scos.04.19.0-okd-scos.194.19.0-okd-scos.184.19.0-okd-scos.174.19.0-okd-scos.164.19.0-okd-scos.154.19.0-okd-scos.144.19.0-okd-scos.134.19.0-okd-scos.124.19.0-okd-scos.114.19.0-okd-scos.104.19.0-okd-scos.94.19.0-okd-scos.84.19.0-okd-scos.74.19.0-okd-scos.64.19.0-okd-scos.54.19.0-okd-scos.44.19.0-okd-scos.34.19.0-okd-scos.24.19.0-okd-scos.14.19.0-okd-scos.04.18.0-okd-scos.104.18.0-okd-scos.94.18.0-okd-scos.84.18.0-okd-scos.74.18.0-okd-scos.64.18.0-okd-scos.54.18.0-okd-scos.44.18.0-okd-scos.34.18.0-okd-scos.24.18.0-okd-scos.14.18.0-okd-scos.04.17.0-okd-scos.34.17.0-okd-scos.24.17.0-okd-scos.14.17.0-okd-scos.04.16.0-okd-scos.14.16.0-okd-scos.04.16.0-0.okd-scos-2024-09-24-1517474.16.0-0.okd-scos-2024-08-21-1556134.15.0-0.okd-scos-2024-01-18-223523

Source code for this page located on github