Back to index
Download the installer for your operating system or run
oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.15.22-x86_64 Team Approvals:
Tests:
Blocking jobs Informing jobs Upgrades from:
Untested upgrades:
4.14.19 ,
4.14.20 ,
4.14.21 ,
4.14.22 ,
4.14.23 ,
4.14.24 ,
4.14.25 ,
4.14.27 ,
4.14.30 ,
4.15.10 ,
4.15.11 ,
4.15.12 ,
4.15.13 ,
4.15.14 ,
4.15.16 ,
4.15.18 ,
4.15.5 ,
4.15.6 ,
4.15.7 ,
4.15.8 Upgrades to:
Changes from 4.15.0
Created: 2024-07-11 11:17:21 +0000 UTC
Image Digest: sha256:f0787207e687538a2d1248f2956b5bd26e304334eeb2f6474833040063377e9a
Release 4.15.22 was created from registry.ci.openshift.org/ocp/release:4.15.0-0.nightly-2024-07-10-185419
Components
Rebuilt images without code change
OCPBUGS-34641 : Invalid Pull-Secret when using password which contains a colon character (#6381) #6381
OCPBUGS-31631 : Deploy dual stack with IPv6 on top of bond/vlan fails (#6245) #6245
MGMT-17593 : Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#6217) #6217
17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6211) #6211
Revert “MGMT-17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6194)” (#6208) #6194
MGMT-17549 : Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6194) #6194
MGMT-17541 : Replace broken golangci reference (#6191) #6191
OCPBUGS-30232 : Handle skipping hostPrefix validation for IPv6 For non-OVN/SDN networkTypes, the hostPrefix validation is not required and it is skipped. This fixes a regression introduced in the fix for https://issues.redhat.com/browse/OCPBUGS-23069 in which IPv6 CIDRs were not using the correct default hostPrefix. In addition, all cases where the validation is used are now covered. (#6137) #6137
NO-ISSUE: replace postgres images as current one disappeared from quay (#6135) #6135
MGMT-16517 : Add Env Var Deployment Type & Set ABI (#6016) #6016
MGMT-16980 : Change the default value of ENABLE_SKIP_MCO_REBOOT to false (#6005) #6005
Full changelog
OCPBUGS-34971 : Add unreadyNodeGracePeriod for allowing brief node hiccups #299
OCPBUGS-35496 : Wait for ControlPlaneMachineSet to be created when waiting for it to be updated #308
OCPBUGS-35255 : Improved debugging of API listing errors #301
[Release 4.15] OCPBUGS-32414: Fix ExportFailureDomain to handle empty platform spec #290
[Release 4.15] OCPBUGS-32357: Modified webhook to allow templates by name instead of just by path. #289
OCPBUGS-29419 : Never delete a Machine when there’s a single Machine in an index #280
OCPBUGS-29236 : Fixed control plane machine set handling of static IPs when AddressesFromPools is not in use. #279
Full changelog
OCPBUGS-36355 : Backport fix for OCPBUGS-30647 (#1095) #1095
OCPBUGS-33929 : Negative net interface name does not reduce queues (#1066) #1066
Add a ‘.snyk’ to silence static code analysis warnings (#1001) #1001
fix extra-reboot on upgrade with paused mcp worker (#1049) #1049
fix rendering extra ctrcfgs (#975) #975
OCPBUGS-31694 : E2E: Workload hints test cases fixes (#1012) (#1043) #1012
Reduce number of reboots in offline tests (#1014) #1014
Systemd processes not being moved to cpuset/systemd.slice fix (#1016) #1016
Scheduler plugin: ignore IRQs (#983) #983
e2e: when crun is enabled by default skip checking runc config (#1013) #1013
OCPBUGS-30507 : Add performance real time tuned template (#984) #984
Report duplicate priority only for multiple matching profiles (#965) #965
hack: fix backport of render-sync.sh (#996) #996
OCPBUGS-29752 : [release-4.15][manual] backport performance profile owner reference ehnancements (#963) #963
Render: Add MCSelector to missing default MCPs (#959) #959
Add support to inject owner-ref argument to render command (#966) #966
Full changelog
OCPBUGS-35736 : Complete KAS migration to none endpoint reconciler type #4228
OCPBUGS-35935 : check mgmt cluster for route capability before DeleteIfNeeded for ovn sbdb route #4265
NO-JIRA: chore(deps): update konflux references (release-4.15) #4259
OCPBUGS-35714 : Generate default worker security group rules based on machineCIDR #4266
NO-JIRA: chore(deps): update konflux references (release-4.15) #4252
OCPBUGS-32404 : Fix failure to create a second hostedcluster in the same namespace #3907
NO-JIRA: chore(deps): update konflux references to ff44cf3 (release-4.15) #4246
NO-JIRA: feat(olm): Set packageserver replicas to 2 for IBMCloudPlatform #4231
chore(deps): update konflux references to 2be7c9c (release-4.15) #4224
OCPBUGS-34580 : Add TrustedBundles to OAS container #4211
NO-JIRA: hack: make the e2e script generic #4199
OCPBUGS-33627 : Restrict image registry overrides to control plane components #4131
OCPBUGS-34156 : fix router on 4.14 y-stream upgrade #4077
OCPBUGS-35002 : [release-4.15] HOSTEDCP-1122: Backport etcd defrag controller #4162
NO-JIRA: Update Konflux references to 1025001 (release-4.15) #4180
NO-JIRA: chore(deps): update konflux references (release-4.15) #4167
OCPBUGS-34997 : add AWS STS URL to OIDC provider audiences #4157
OCPBUGS-35074 : Fix disconnected metadata inspection for nodepool #4175
HOSTEDCP-1708 : remove liveness and readiness probes that use the metrics #4128
OCPBUGS-34423 : Fixed audit-logs sigterm failing to terminate gracefully #4089
OCPBUGS-33526 : Disable DNS resolving for CNO #4148
OCPBUGS-34904 : remove weak cipher #4156
OCPBUGS-34510 : Reconcile KAS endpoints and endpoint slice #4097
NO-JIRA: test/e2e: fix prometheus serviceaccount handling against 4.16+ #4151
NO-JIRA: chore(deps): update rhtap references (release-4.15) #4120
NO-JIRA: chore(deps): update rhtap references (release-4.15) #4072
OCPBUGS-33510 : Run haproxy to connect to kas from data plane if noproxy settings contain kas #4014
NO-JIRA: chore(deps): update rhtap references to 7cd8020 (release-4.15) #4064
NO-JIRA: Remove CLI inspection of release image #4056
HOSTEDCP-1518 : Preserve container resource requests and limits #4032
NO-JIRA: Update RHTAP references (release-4.15) #4041
OCPBUGS-33118 : Recycler-pod image now points to the OCP Payload reference #3963
OCPBUGS-32220 : Fix disconnected metadata inspection #3881
NO-JIRA: Update RHTAP references to 1f62eaf (release-4.15) #4030
OCPBUGS-33117 : Reconcile over ICSP/IDMS #3962
NO-JIRA: Update RHTAP references to 2d39df1 (release-4.15) #4022
HOSTEDCP-1480 : Update TLS cert hash creation with sha512 #4017
HOSTEDCP-1513 : Support hypershift-operator scoping for hostedclusters #3998
Revert “[release-4.15] OCPBUGS-32013: Set OPERATOR_IMAGE environment variable” #3939
OCPBUGS-33207 : Remove kube-scheduler readiness probe #3955
NO-JIRA: chore(deps): update rhtap references to c6fdbf4 (release-4.15) #3989
OCPBUGS-25858 : Improve description for agent APIServerAddress CLI flag #3977
OCPBUGS-33224 : disable OCM pull secret controller when imageregistry config managementstate is Removed #3976
NO-JIRA: chore(deps): update rhtap references (release-4.15) #3982
OCPBUGS-31747 : update desired image even when HCP doesn’t exist yet #3839
NO-JIRA: chore(deps): update rhtap references to e9efe99 (release-4.15) #3974
OCPBUGS-32229 : disable autoscaler when no nodepool require it #3884
NO-JIRA: chore(deps): update rhtap references (release-4.15) #3967
HOSTEDCP-1552 : Update RHTAP tekton files for 0.3 -> 0.4 migration #3957
OCPBUGS-31826 : use dnsPolicy: Default for konnectivity-agent in data plane #3845
NO-JIRA: Update RHTAP references (release-4.15) #3935
OCPBUGS-32715 : Fix OLM intilization args #3923
HOSTEDCP-1519 : [release-4.15] feat(api): Add ingress-controller-load-balancer-scope annotation #3908
NO-JIRA: chore(deps): update rhtap references (release-4.15) #3921
OCPBUGS-32164 : Fix ICSP and IDMS inclusion as registriesOverrides #3870
NO-JIRA: chore(deps): update rhtap references (release-4.15) #3904
OCPBUGS-30280 : Switch to use service endpoint for Konnectivity #3692
OCPBUGS-32191 : Kas disable audit cherry pick release 4.15 #3875
OCPBUGS-32114 : Add new permission required in CAPA #3861
NO-JIRA: Update RHTAP references (release-4.15) #3887
NO-JIRA: [release-4.15] [e2e test framework] Add a flag to add an annotation to HostedCluster #3893
HOSTEDCP-1524 : [release-4.15] Support additional node selectors for request serving nodes #3883
NO-JIRA: chore(deps): update rhtap references (release-4.15) #3873
NO-JIRA: chore(deps): update rhtap references (release-4.15) #3868
OCPBUGS-32013 : Set OPERATOR_IMAGE environment variable #3853
NO-JIRA: chore(deps): update rhtap references (release-4.15) #3857
NO-JIRA: Update RHTAP references (release-4.15) #3835
OCPBUGS-31766 : include hostnetwork SCC CPO role for 4.13 and earlier #3840
HOSTEDCP-1438 : [release-4.15] Preserve container resources for more hosted control plane components #3828
OCPBUGS-31324 : Add missing PodSecurityViolation alert #3798
NO-JIRA: Increase stability in autoscaled environments #3777
OCPBUGS-31471 : Reduce log file size for hypershift apiservers #3816
OCPBUGS-31604 : disable http2 for ignition server and proxy #3825
OCPBUGS-31426 : copy issuerCertificateAuthority configmap into HC openshift-config #3808
OCPBUGS-31265 : inject built-in MCP selector for KubeletConfigs and ContainerRuntimeConfigs #3802
NO-JIRA: Update RHTAP references (release-4.15) #3812
NO-JIRA: Remove unused ref to hostnetwork in cpo role #3796
OCPBUGS-31064 : ibmcloud KMS: remove breaking image check and enable KMS v2 support #3774
OCPBUGS-31377 : Manually cherry pick #3782 to 4.15 #3803
OCPBUGS-31326 : fix(ignition): Fix priority class override #3800
OCPBUGS-30804 : honor HC image configuration #3730
”[release-4.15] OCPBUGS-30164: Ensure cloud resources are destroyed for all platforms when –destroy-cloud-resources is used” #3677
OCPBUGS-31116 : external OIDC: fix certificateAuthority field in structured auth config #3783
OCPBUGS-30862 : Manual cherry pick 3685&3727 to release 4.15 #3740
NO-JIRA: chore(deps): update rhtap references (release-4.15) #3791
NO-JIRA: Update RHTAP references (release-4.15) #3785
OCPBUGS-29881 : feat(ho): Add flag for dedicated request serving isolation #3633
OCPBUGS-30742 : [4.15] HCP deletion can get stuck if CPO is unable to delete the default worker security group #3726
OCPBUGS-30650 : Set KAS config pod security Enforce to privileged #3719
NO-JIRA: Bump CPO API budget to 4000 in EnsureApiBudget #3741
OCPBUGS-30651 : Remove EnsurePSANotPrivileged #3744
NO-JIRA: Update RHTAP references (release-4.15) #3754
HOSTEDCP-1488 : Use regionalized STS endpoints in AWS #3747
NO-JIRA: Update RHTAP references (release-4.15) #3738
OCPBUGS-30581 : [release-4.15] OCPBUGS-30220: Align PSA labels on guest cluster namespaces with standalone OCP #3684
OCPBUGS-30572 : [release-4.15] Update OLM Default Catalog Sources to 4.15 #3696
NO-JIRA: chore(deps): update rhtap references (release-4.15) #3705
OCPBUGS-30189 : set Konnectivity cipher suites #3673
”[release-4.15] OCPBUGS-27500: Fix default release image lookup” #3549
OCPBUGS-30284 : do not set KAS OAuthMetadataFile with Authentication type OIDC #3694
OCPBUGS-30281 : [release-4.15] OCPBUGS-30102: Support to disable machine management components #3670
NO-JIRA: chore(deps): update rhtap references (release-4.15) #3675
Update RHTAP references (release-4.15) #3645
HOSTEDCP-1405 : Remove files not needed #3669
CNV-36056 : Expose NodeSelector for KubeVirt VMs in NodePool #3648
OCPBUGS-30088 : rollout kas on auth config change #3653
NO-JIRA: remove PrivateIngressController cleanup #3646
OCPBUGS-29880 : feat(config): Default RevisionHistoryLimit to 2 for deployments #3632
OCPBUGS-29025 : cpo: honor user provided oauthmetadata configmap passed in Authentication config #3522
OCPBUGS-30029 : sync AuthenticationConfiguration type with o/k 1.28 carry #3644
NO-JIRA: Red Hat Konflux update hypershift-release-mce-25 #3643
NO-JIRA: Remove specific pull secret watch in HCCO #3606
OCPBUGS-29850 : control-plane-pki-operator: fix CA used for SRE client credentials #3626
NO-JIRA: PDB backports #3628
OCPBUGS-29780 : use 2040 for apiserver svc in IBM provider #3595
Full changelog
OCPBUGS-34521 : Fix DiskToMirror without internet connection without rebuild catalog (#866) #866
OCPBUGS-33575 : Change default behavior to not rebuild catalogs for V1 (#849) #849
OCPBUGS-31466 : Fix for oc-mirror new defaultChannel override (#846) #846
Bump version to include v5.11.0 of go-git (#819) #819
OCPBUGS-23550 : Generate both oc-mirror binaries for rhel9 and rhel8 (#804) #804
Fix to ensure operator not found error exits with correct status (#794) #794
Full changelog
Source code for this page located on github