# 4.15.0-rc.1

Created: 2024-01-05 13:03:51 +0000 UTC

Image Digest: `sha256:3f1fc8757c51d7fb0aea2f39038b5aed78fb33e3c7c3f8fa18d4f614f28372dd`

Promoted from registry.ci.openshift.org/ocp-s390x/release-s390x:4.15.0-0.nightly-s390x-2024-01-03-135548


## Changes from 4.15.0-rc.0

### Components

* Kubernetes 1.28.4
* Red Hat Enterprise Linux CoreOS upgraded from 415.92.202312132107-0 to 415.92.202312250243-0


### Rebuilt images without code change

* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [33b7d855](https://github.com/openshift/agent-installer-utils/commit/33b7d855fdebd24a972f32dafafd29e40b117e46) `sha256:8821bbad32a58d71f14b63fecee9a117be7ea56ddbaf7f5330883a5cd27d26eb`
* machine-os-content `sha256:3e741187aaed4fe7f2d510939dbb674e4a46d51a182bde9064331487ac90f792`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [9e9c920f](https://github.com/openshift/machine-os-images/commit/9e9c920f985a375536e8d4caafd2d7ed579e27f3) `sha256:8d5bd96dd360ce4586764d5f51628da81cde4c77f01e2432d4346e8c498fd996`
* [network-tools](https://github.com/openshift/network-tools) git [be5b7d06](https://github.com/openshift/network-tools/commit/be5b7d060d18980e4f54204e5023615d3cd52dae) `sha256:1d359305f3f238a03e93aaaa75c0f3c03ee09c53cf5ea210d4c36b091ca2daec`
* rhel-coreos `sha256:1ca46543284933846e82e105fa2a1e587ab0af779838b7a73e516785358b86bd`
* rhel-coreos-extensions `sha256:a7b669fd477ca8b663c1b3009acdec1ec7326424f0c26a147bd8a48b62724c1c`


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/2b894776f1653ab818e368fa625019a6de82a8c7)

* [OCPBUGS-24679](https://issues.redhat.com/browse/OCPBUGS-24679): Modify the terraform variables to support Nutanix Failure Domains [#7813](https://github.com/openshift/installer/pull/7813)
* [OCPBUGS-25463](https://issues.redhat.com/browse/OCPBUGS-25463): IBMCloud: Set IBM TF visibility based on URLs [#7844](https://github.com/openshift/installer/pull/7844)
* [Full changelog](https://github.com/openshift/installer/compare/6ebbadc72d550a4a20df6c77f868b488e3fbfd02...2b894776f1653ab818e368fa625019a6de82a8c7)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/d90c9299f6699cb26c0598af26cc8f791f8c4f28)

* [OCPBUGS-23706](https://issues.redhat.com/browse/OCPBUGS-23706): Add Snyk file to exclude vendor directory on scan [#307](https://github.com/openshift/cluster-autoscaler-operator/pull/307)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/b9d95b9a418d3678d77008faff53b1052b23c62a...d90c9299f6699cb26c0598af26cc8f791f8c4f28)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/09884b538029322fd09d242f4a20bc959666bb80)

* [OCPBUGS-25460](https://issues.redhat.com/browse/OCPBUGS-25460): add private endpoint permissions to Azure credentials request [#978](https://github.com/openshift/cluster-image-registry-operator/pull/978)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/08f42a978799bf7a6427d8cd98ecfb2b69a80720...09884b538029322fd09d242f4a20bc959666bb80)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/a9c35df9c83f45eea69090311a4ade770be932a6)

* [OCPBUGS-18761](https://issues.redhat.com/browse/OCPBUGS-18761): revert dev cert rotation in 4.15 [#1598](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1598)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/03c5a03d1bd0a952655aa180bd2708802e8cc1a4...a9c35df9c83f45eea69090311a4ade770be932a6)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/097921fbf0741446d0f4297a71f0765dfcd7eeea)

* [OCPBUGS-24085](https://issues.redhat.com/browse/OCPBUGS-24085): Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART [#31](https://github.com/openshift/cluster-api-operator/pull/31)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/4c6b685796e38a41debaa5a6d810f65291bc89b7...097921fbf0741446d0f4297a71f0765dfcd7eeea)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/e04826eb2a14e0cdf51ea399b35444a93dfed0ff)

* [OCPBUGS-25322](https://issues.redhat.com/browse/OCPBUGS-25322): go.mod: bump prometheus-operator to v0.70.0 [#2201](https://github.com/openshift/cluster-monitoring-operator/pull/2201)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/9cf7e00b4f6ad9c7cea904ef1b3261b9651976fb...e04826eb2a14e0cdf51ea399b35444a93dfed0ff)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/a95196b86afae84c7a47558e8283c33ff9cbb217)

* [OCPBUGS-25312](https://issues.redhat.com/browse/OCPBUGS-25312), [OCPBUGS-25921](https://issues.redhat.com/browse/OCPBUGS-25921): Avoid removal of ipsec-host daemonset when node is NotReady [#2181](https://github.com/openshift/cluster-network-operator/pull/2181)
* [OCPBUGS-24148](https://issues.redhat.com/browse/OCPBUGS-24148): Updating cluster-network-operator-container image to be consistent with ART [#2133](https://github.com/openshift/cluster-network-operator/pull/2133)
* [OCPBUGS-22710](https://issues.redhat.com/browse/OCPBUGS-22710): Set enable-multi-external-gateway flag in ovnkube.conf [#2158](https://github.com/openshift/cluster-network-operator/pull/2158)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/371583742c06f2c99d28c33f3fd13942598381b2...a95196b86afae84c7a47558e8283c33ff9cbb217)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/b557b01c5ce3dac60dae45407aa8f4114a8891df)

* rps: fail silently when rps application failed (#897) [#897](https://github.com/openshift/cluster-node-tuning-operator/pull/897)
* [OCPBUGS-25596](https://issues.redhat.com/browse/OCPBUGS-25596): Make MC names deterministic (#888) [#888](https://github.com/openshift/cluster-node-tuning-operator/pull/888)
* [OCPBUGS-25552](https://issues.redhat.com/browse/OCPBUGS-25552): rps: fix mask update for SR-IOV devices (#886) [#886](https://github.com/openshift/cluster-node-tuning-operator/pull/886)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/6fb389c8a78df013b026d7ed204a0368c052c7b0...b557b01c5ce3dac60dae45407aa8f4114a8891df)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/a7ba89874970cd10765e1d0753405e32fb357d84)

* [OCPBUGS-25399](https://issues.redhat.com/browse/OCPBUGS-25399): [release-4.15] NO-ISSUE: Bump k8s.io/apiextensions-apiserver [#40](https://github.com/openshift/cluster-olm-operator/pull/40)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/807652f2ed11bdaa832f330d004834412c1e3fd3...a7ba89874970cd10765e1d0753405e32fb357d84)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/3a6fc9ccce56eda7d27156d35d6256e3de24dcb6)

* [OCPBUGS-24145](https://issues.redhat.com/browse/OCPBUGS-24145): Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART [#560](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/560)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/bb83e65273bd75c5916a0c26307557f9354dec1a...3a6fc9ccce56eda7d27156d35d6256e3de24dcb6)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/1f8f3b1f94690c8d5b3b1ee7e46e77d6bb7b64af)

* [OCPBUGS-25664](https://issues.redhat.com/browse/OCPBUGS-25664): pkg/cvo/sync_worker: Verification-failure details for unforced updates too [#1007](https://github.com/openshift/cluster-version-operator/pull/1007)
* [OCPBUGS-25690](https://issues.redhat.com/browse/OCPBUGS-25690): pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream [#1008](https://github.com/openshift/cluster-version-operator/pull/1008)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/ebe0f346451dbb4464902c286ff25449a41355da...1f8f3b1f94690c8d5b3b1ee7e46e77d6bb7b64af)


### [console](https://github.com/openshift/console/tree/29ba7a7ed4f4564334b568a8bee7ef830d1123c1)

* [OCPBUGS-25726](https://issues.redhat.com/browse/OCPBUGS-25726): Re-enable and fix pipelines e2e tests [#13463](https://github.com/openshift/console/pull/13463)
* [OCPBUGS-25706](https://issues.redhat.com/browse/OCPBUGS-25706): update the checks for showing Archived to Tekton results icon for PLRs and TRs list and details page [#13461](https://github.com/openshift/console/pull/13461)
* [OCPBUGS-25707](https://issues.redhat.com/browse/OCPBUGS-25707): fix Observe tab in Topology overview [#13462](https://github.com/openshift/console/pull/13462)
* [OCPBUGS-24668](https://issues.redhat.com/browse/OCPBUGS-24668): Follow on logic for only showing VPAs associated with a deployment for a specific project [#13447](https://github.com/openshift/console/pull/13447)
* [OCPBUGS-24668](https://issues.redhat.com/browse/OCPBUGS-24668): Only show VPAs that are associated with the selected namespace [#13426](https://github.com/openshift/console/pull/13426)
* [OCPBUGS-25324](https://issues.redhat.com/browse/OCPBUGS-25324): fix preferredTab selection on Pipelines page [#13443](https://github.com/openshift/console/pull/13443)
* [OCPBUGS-24680](https://issues.redhat.com/browse/OCPBUGS-24680): Backport Add support for Azure Workload Identity / Federated Identity [#13428](https://github.com/openshift/console/pull/13428)
* [Full changelog](https://github.com/openshift/console/compare/1e468ccfc6993e57d4e85627015e9fa5c4747e4d...29ba7a7ed4f4564334b568a8bee7ef830d1123c1)


### [console-operator](https://github.com/openshift/console-operator/tree/f5c3f83cc2bc9325d135044eaa8c039189c36dee)

* [OCPBUGS-24104](https://issues.redhat.com/browse/OCPBUGS-24104): Updating openshift-enterprise-console-operator-container image to be consistent with ART [#818](https://github.com/openshift/console-operator/pull/818)
* [Full changelog](https://github.com/openshift/console-operator/compare/b6b184bcc2ebf1caf7b765fc432c41a199723310...f5c3f83cc2bc9325d135044eaa8c039189c36dee)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/ce5a1a33fadf10bba0c90510c09dfc879dcfec87)

* [OCPBUGS-25698](https://issues.redhat.com/browse/OCPBUGS-25698): UPSTREAM: 1132: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#86](https://github.com/openshift/csi-external-provisioner/pull/86)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/3aafbf6ead2d717ebbf09574bbddf9c76447dea8...ce5a1a33fadf10bba0c90510c09dfc879dcfec87)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/090cd57847b98aebe42ecd5091c3a626eb870022)

* [OCPBUGS-25521](https://issues.redhat.com/browse/OCPBUGS-25521): Updating ose-csi-external-snapshotter-container image to be consistent with ART [#134](https://github.com/openshift/csi-external-snapshotter/pull/134)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/202f48ebffc01cb6cce720875b538d7d739844aa...090cd57847b98aebe42ecd5091c3a626eb870022)


### [hypershift](https://github.com/openshift/hypershift/tree/9ed5485262179e1183aee4880adfbe7678f6cba4)

* [OCPBUGS-25782](https://issues.redhat.com/browse/OCPBUGS-25782): Added support for OLM Disable default sources on HC creation [#3321](https://github.com/openshift/hypershift/pull/3321)
* [CCO-511](https://issues.redhat.com/browse/CCO-511): control-plane-operator: reconcile the CCO [#3336](https://github.com/openshift/hypershift/pull/3336)
* NO-JIRA: no-op empty commit publish HO 4.15 to MCE 2.5 [#3338](https://github.com/openshift/hypershift/pull/3338)
* [Full changelog](https://github.com/openshift/hypershift/compare/c575cf677f7885f41d43bc1479489644e2de0cf7...9ed5485262179e1183aee4880adfbe7678f6cba4)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/516264a98d130f9f2a03b20acf33dcc1b556e6a8)

* [OCPBUGS-25604](https://issues.redhat.com/browse/OCPBUGS-25604): Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelgrpc to v0.46 [#103](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/103)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#99](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/99)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/52f179cc012dcf70375ad558fbec812b5ae7a3c8...516264a98d130f9f2a03b20acf33dcc1b556e6a8)


### [insights-operator](https://github.com/openshift/insights-operator/tree/ff5e3ff1e4af5368aa33ac90cb5f4b5ec4ba0f66)

* Updating ose-insights-operator-container image to be consistent with ART (#884) [#884](https://github.com/openshift/insights-operator/pull/884)
* [Full changelog](https://github.com/openshift/insights-operator/compare/2e6175fd72ddec0f4efbae17d7424c3e076f079c...ff5e3ff1e4af5368aa33ac90cb5f4b5ec4ba0f66)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/71cb911bb02c5728c3ccf7738c8082e36416fa10)

* [OCPBUGS-25772](https://issues.redhat.com/browse/OCPBUGS-25772): Add Snyk file to exclude vendor directory on scan [#278](https://github.com/openshift/cluster-api-provider-libvirt/pull/278)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/43b2b82069d4752609f91049d580df2756e570b9...71cb911bb02c5728c3ccf7738c8082e36416fa10)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/9e4c3a3a1c68f040c602dc783415f7fa0bfa417f)

* [OCPBUGS-25734](https://issues.redhat.com/browse/OCPBUGS-25734): Add Snyk file to exclude vendor directory on scan [#1193](https://github.com/openshift/machine-api-operator/pull/1193)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/ffcde1ea9daa32f305d9f803e055e2b0f1144a73...9e4c3a3a1c68f040c602dc783415f7fa0bfa417f)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/54460db56c409e54dc00a2f33472ec18e0d71008)

* [OCPBUGS-25643](https://issues.redhat.com/browse/OCPBUGS-25643): On the alert details page, don't require all alert labels in URL [#89](https://github.com/openshift/monitoring-plugin/pull/89)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/95e6902c0b10278445fd4ef927ae59c09af42615...54460db56c409e54dc00a2f33472ec18e0d71008)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/6212406b49cbcc75a01da85a67469b4872754e1d)

* Updating ose-multus-networkpolicy-container image to be consistent with ART (#44) [#44](https://github.com/openshift/multus-networkpolicy/pull/44)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/d1a8ba7a2669598f7fff0e8dfaec9369fdb3803e...6212406b49cbcc75a01da85a67469b4872754e1d)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/0288f3620532f481ce258f5169b42a67b7f9a0cb)

* Updating ose-network-metrics-daemon-container image to be consistent with ART (#87) [#87](https://github.com/openshift/network-metrics-daemon/pull/87)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/c1b0d95b3575d02e18cee71daa6d5519bc9325f8...0288f3620532f481ce258f5169b42a67b7f9a0cb)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/97e2235691be4522814af11b425ac18acd5189f6)

* [OCPBUGS-25346](https://issues.redhat.com/browse/OCPBUGS-25346): - oc-mirror on RHEL9 Host with FIPS enabled (#764) [#764](https://github.com/openshift/oc-mirror/pull/764)
* [OCPBUGS-24359](https://issues.redhat.com/browse/OCPBUGS-24359): Fix including duplicate blobs in archive (#762) [#762](https://github.com/openshift/oc-mirror/pull/762)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/ce82951ae77750cc64d8486b69709a1f4c8e295a...97e2235691be4522814af11b425ac18acd5189f6)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/469c7afbff41f02ca3498fcd87cb675f5a6217d4)

* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#148](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/148)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/6d5e462c702b53059147af9fdb07a32d25009fd2...469c7afbff41f02ca3498fcd87cb675f5a6217d4)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/2fa64b105baa03c5c0a48e92e1663e312ebef535)

* [OCPBUGS-25818](https://issues.redhat.com/browse/OCPBUGS-25818): NO-ISSUE: Synchronize From Upstream Repositories [#644](https://github.com/openshift/operator-framework-olm/pull/644)
* [OCPBUGS-25798](https://issues.redhat.com/browse/OCPBUGS-25798), [OCPBUGS-25802](https://issues.redhat.com/browse/OCPBUGS-25802): [release-4.15] NO-ISSUE: Synchronize From Upstream Repositories [#643](https://github.com/openshift/operator-framework-olm/pull/643)
* NO-ISSUE: Update verified directories for microshift-manifests [#642](https://github.com/openshift/operator-framework-olm/pull/642)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/8d9fd047c014877b5d3285acb8516a7494a24026...2fa64b105baa03c5c0a48e92e1663e312ebef535)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/e6ba47f4986f2165c09668d97067f011caa0f4cf)

* [OCPBUGS-25486](https://issues.redhat.com/browse/OCPBUGS-25486): Fix Egress IP Deletion Handler to Prevent OVN Policy Leaks [#1999](https://github.com/openshift/ovn-kubernetes/pull/1999)
* [OCPBUGS-25700](https://issues.redhat.com/browse/OCPBUGS-25700), [OCPBUGS-25701](https://issues.redhat.com/browse/OCPBUGS-25701): Dockerfile: Bump OVN to ovn-23.09.0-91.el9fdp [#1994](https://github.com/openshift/ovn-kubernetes/pull/1994)
* [OCPBUGS-24610](https://issues.redhat.com/browse/OCPBUGS-24610): Updating ose-ovn-kubernetes-container image to be consistent with ART [#1963](https://github.com/openshift/ovn-kubernetes/pull/1963)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/2c98ee245fcddadd19863ee4f7e754be8975e7f8...e6ba47f4986f2165c09668d97067f011caa0f4cf)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/f5972cc74670c274bdc2b29d0903c4ed0432b9ca)

* [OCPBUGS-24107](https://issues.redhat.com/browse/OCPBUGS-24107): Updating ose-service-ca-operator-container image to be consistent with ART [#226](https://github.com/openshift/service-ca-operator/pull/226)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/4d3d966edaaafcae7c9d4a1aa87a67ac627a6ebd...f5972cc74670c274bdc2b29d0903c4ed0432b9ca)