Back to index
Download the installer for your operating system or run
oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.15.33-x86_64 Team Approvals:
Tests:
Blocking jobs Informing jobs Upgrades from:
Untested upgrades:
4.14.16 ,
4.14.17 ,
4.14.18 ,
4.14.19 ,
4.14.20 ,
4.14.21 ,
4.14.22 ,
4.14.23 ,
4.14.24 ,
4.14.25 ,
4.14.26 ,
4.14.27 ,
4.14.28 ,
4.14.29 ,
4.14.30 ,
4.14.31 ,
4.14.32 ,
4.14.33 ,
4.14.34 ,
4.14.35 ,
4.14.36 ,
4.14.37 ,
4.15.0 ,
4.15.10 ,
4.15.11 ,
4.15.12 ,
4.15.13 ,
4.15.14 ,
4.15.15 ,
4.15.16 ,
4.15.17 ,
4.15.18 ,
4.15.19 ,
4.15.2 ,
4.15.20 ,
4.15.21 ,
4.15.22 ,
4.15.23 ,
4.15.24 ,
4.15.25 ,
4.15.26 ,
4.15.27 ,
4.15.28 ,
4.15.29 ,
4.15.3 ,
4.15.30 ,
4.15.31 ,
4.15.32 ,
4.15.5 ,
4.15.6 ,
4.15.7 ,
4.15.8 ,
4.15.9 Upgrades to:
Loading changelog, this may take a while ...
Changes from 4.15.7
Created: 2024-09-16 17:17:52 +0000 UTC
Image Digest: sha256:f5bbc3d132a60943b52b4d4c2a34da7f631d5989b27525017c61a45bee61bed2
Components
Rebuilt images without code change
OCPBUGS-34641 : Invalid Pull-Secret when using password which contains a colon character (#6381) #6381 OCPBUGS-31631 : Deploy dual stack with IPv6 on top of bond/vlan fails (#6245) #6245 MGMT-17593 : Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#6217) #6217 17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6211) #6211
Revert “MGMT-17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6194)” (#6208) #6194
MGMT-17549 : Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6194) #6194 MGMT-17541 : Replace broken golangci reference (#6191) #6191 OCPBUGS-30232 : Handle skipping hostPrefix validation for IPv6 For non-OVN/SDN networkTypes, the hostPrefix validation is not required and it is skipped. This fixes a regression introduced in the fix for https://issues.redhat.com/browse/OCPBUGS-23069 in which IPv6 CIDRs were not using the correct default hostPrefix. In addition, all cases where the validation is used are now covered. (#6137) #6137 NO-ISSUE: replace postgres images as current one disappeared from quay (#6135) #6135
Full changelog
OCPBUGS-24632 : Prevent rollout due to irrelevant path artifacts #317 CFE-1087 : API Bump for capacity Reservation #318 OCPBUGS-34971 : Add unreadyNodeGracePeriod for allowing brief node hiccups #299 OCPBUGS-35496 : Wait for ControlPlaneMachineSet to be created when waiting for it to be updated #308 OCPBUGS-35255 : Improved debugging of API listing errors #301 [Release 4.15] OCPBUGS-32414: Fix ExportFailureDomain to handle empty platform spec #290
[Release 4.15] OCPBUGS-32357: Modified webhook to allow templates by name instead of just by path. #289
Full changelog
TuneD prior to kubelet in one-shot mode (#1125) #1125
set required-scc for openshift workloads (#1117) #1117
OCPBUGS-36870 : Remove tuned/rendered object (#1110) #1110 OCPBUGS-36355 : Backport fix for OCPBUGS-30647 (#1095) #1095 OCPBUGS-33929 : Negative net interface name does not reduce queues (#1066) #1066 Add a ‘.snyk’ to silence static code analysis warnings (#1001) #1001
fix extra-reboot on upgrade with paused mcp worker (#1049) #1049
fix rendering extra ctrcfgs (#975) #975
OCPBUGS-31694 : E2E: Workload hints test cases fixes (#1012) (#1043) #1012 Reduce number of reboots in offline tests (#1014) #1014
Systemd processes not being moved to cpuset/systemd.slice fix (#1016) #1016
Scheduler plugin: ignore IRQs (#983) #983
e2e: when crun is enabled by default skip checking runc config (#1013) #1013
OCPBUGS-30507 : Add performance real time tuned template (#984) #984 Report duplicate priority only for multiple matching profiles (#965) #965
Full changelog
HOSTEDCP-1896 : [release-4.15] Allow setting Kube APIServer maximum requests in flight #4552 OCPBUGS-39463 : handle version skewed NodePools that do not have rhel9 binaries #4666 OCPBUGS-39077 : Set KCM node monitor grace period #4628 OCPBUGS-30465 : fix: bump google.golang.org/protobuf #4616 OCPBUGS-39171 : fix: bump github.com/IBM/go-sdk-core/v5 #4625 OCPBUGS-35815 : Add hypershift-cluster-version-operator image to release providers #4243 NO-JIRA: test: relax mgmt KAS egress check #4631
NO-JIRA: Tolerate restarts for kubevirt external infra #4200
NO-JIRA: Flaky cert validation test #4630
OCPBUGS-38943 : copy oapi ca-trust recursively when building trust anchor #4613 OCPBUGS-39041 : set proxy envvars on aws and azure CCMs #4624 OCPBUGS-38613 : hcco: reconcile apiserver config into hosted cluster #4567 OCPBUGS-38561 : Let the CPO oidc check resolve through data plane #4564 OCPBUGS-34904 : remove weak ciphers from security profile #4547 OCPBUGS-37171 : OCPBUGS-35899: Doubled machineHealthCheck timeout on Agent and None #4489 NO-JIRA: Update Konflux 4.15 and perform migration #4487
NO-JIRA: [release-4.15] Kubevirt on Azure: Change KAS LB Port to 7443 #4469
OCPBUGS-36938 : [release-4.15]: Add HTTP(s) konnectivity proxy and use it with OpenShift APIServer #4358 OCPBUGS-37174 : Delete IDMS in dataplane once HCP ICS field is removed #4457 NO-JIRA: [release-4.15] kubevirt-csi-driver: Pass infra kubeconfig in case of external infra #4279
HOSTEDCP-1795 , HOSTEDCP-1796 : Customize the self-generated cert validity and rotation #4444 OCPBUGS-36916 : Add newline after TLS certs referenced by image.config #4443 OCPBUGS-37695 : Set right endpointSlice port #4441 NO-JIRA: Red Hat Konflux update hypershift-release-mce-25 #4433
NO-JIRA: [release-4.15] test/e2e: remove api budget checks #4413
OCPBUGS-37266 : extract rhel9 MCO binaries for rhel8 based MCO images #4385 OCPBUGS-36606 : enable audit log for oauth-openshift #4320 HOSTEDCP-1714 : Kubernetes API Server Log Verbosity Annotation cherry pick to 4.15 #4178 OCPBUGS-35736 : Complete KAS migration to none endpoint reconciler type #4228 OCPBUGS-35935 : check mgmt cluster for route capability before DeleteIfNeeded for ovn sbdb route #4265 NO-JIRA: chore(deps): update konflux references (release-4.15) #4259
OCPBUGS-35714 : Generate default worker security group rules based on machineCIDR #4266 NO-JIRA: chore(deps): update konflux references (release-4.15) #4252
OCPBUGS-32404 : Fix failure to create a second hostedcluster in the same namespace #3907 NO-JIRA: chore(deps): update konflux references to ff44cf3 (release-4.15) #4246
NO-JIRA: feat(olm): Set packageserver replicas to 2 for IBMCloudPlatform #4231
chore(deps): update konflux references to 2be7c9c (release-4.15) #4224
OCPBUGS-34580 : Add TrustedBundles to OAS container #4211 NO-JIRA: hack: make the e2e script generic #4199
OCPBUGS-33627 : Restrict image registry overrides to control plane components #4131 OCPBUGS-34156 : fix router on 4.14 y-stream upgrade #4077 OCPBUGS-35002 : [release-4.15] HOSTEDCP-1122: Backport etcd defrag controller #4162 NO-JIRA: Update Konflux references to 1025001 (release-4.15) #4180
NO-JIRA: chore(deps): update konflux references (release-4.15) #4167
OCPBUGS-34997 : add AWS STS URL to OIDC provider audiences #4157 OCPBUGS-35074 : Fix disconnected metadata inspection for nodepool #4175 HOSTEDCP-1708 : remove liveness and readiness probes that use the metrics #4128 OCPBUGS-34423 : Fixed audit-logs sigterm failing to terminate gracefully #4089 OCPBUGS-33526 : Disable DNS resolving for CNO #4148 OCPBUGS-34904 : remove weak cipher #4156 OCPBUGS-34510 : Reconcile KAS endpoints and endpoint slice #4097 NO-JIRA: test/e2e: fix prometheus serviceaccount handling against 4.16+ #4151
NO-JIRA: chore(deps): update rhtap references (release-4.15) #4120
NO-JIRA: chore(deps): update rhtap references (release-4.15) #4072
OCPBUGS-33510 : Run haproxy to connect to kas from data plane if noproxy settings contain kas #4014 NO-JIRA: chore(deps): update rhtap references to 7cd8020 (release-4.15) #4064
NO-JIRA: Remove CLI inspection of release image #4056
HOSTEDCP-1518 : Preserve container resource requests and limits #4032 NO-JIRA: Update RHTAP references (release-4.15) #4041
OCPBUGS-33118 : Recycler-pod image now points to the OCP Payload reference #3963 OCPBUGS-32220 : Fix disconnected metadata inspection #3881 NO-JIRA: Update RHTAP references to 1f62eaf (release-4.15) #4030
OCPBUGS-33117 : Reconcile over ICSP/IDMS #3962 NO-JIRA: Update RHTAP references to 2d39df1 (release-4.15) #4022
HOSTEDCP-1480 : Update TLS cert hash creation with sha512 #4017 HOSTEDCP-1513 : Support hypershift-operator scoping for hostedclusters #3998 Revert “[release-4.15] OCPBUGS-32013: Set OPERATOR_IMAGE environment variable” #3939
OCPBUGS-33207 : Remove kube-scheduler readiness probe #3955 NO-JIRA: chore(deps): update rhtap references to c6fdbf4 (release-4.15) #3989
OCPBUGS-25858 : Improve description for agent APIServerAddress CLI flag #3977 OCPBUGS-33224 : disable OCM pull secret controller when imageregistry config managementstate is Removed #3976 NO-JIRA: chore(deps): update rhtap references (release-4.15) #3982
OCPBUGS-31747 : update desired image even when HCP doesn’t exist yet #3839 NO-JIRA: chore(deps): update rhtap references to e9efe99 (release-4.15) #3974
OCPBUGS-32229 : disable autoscaler when no nodepool require it #3884 NO-JIRA: chore(deps): update rhtap references (release-4.15) #3967
HOSTEDCP-1552 : Update RHTAP tekton files for 0.3 -> 0.4 migration #3957 OCPBUGS-31826 : use dnsPolicy: Default for konnectivity-agent in data plane #3845 NO-JIRA: Update RHTAP references (release-4.15) #3935
OCPBUGS-32715 : Fix OLM intilization args #3923 HOSTEDCP-1519 : [release-4.15] feat(api): Add ingress-controller-load-balancer-scope annotation #3908 NO-JIRA: chore(deps): update rhtap references (release-4.15) #3921
OCPBUGS-32164 : Fix ICSP and IDMS inclusion as registriesOverrides #3870 NO-JIRA: chore(deps): update rhtap references (release-4.15) #3904
OCPBUGS-30280 : Switch to use service endpoint for Konnectivity #3692 OCPBUGS-32191 : Kas disable audit cherry pick release 4.15 #3875 OCPBUGS-32114 : Add new permission required in CAPA #3861 NO-JIRA: Update RHTAP references (release-4.15) #3887
NO-JIRA: [release-4.15] [e2e test framework] Add a flag to add an annotation to HostedCluster #3893
HOSTEDCP-1524 : [release-4.15] Support additional node selectors for request serving nodes #3883 NO-JIRA: chore(deps): update rhtap references (release-4.15) #3873
NO-JIRA: chore(deps): update rhtap references (release-4.15) #3868
OCPBUGS-32013 : Set OPERATOR_IMAGE environment variable #3853 NO-JIRA: chore(deps): update rhtap references (release-4.15) #3857
NO-JIRA: Update RHTAP references (release-4.15) #3835
OCPBUGS-31766 : include hostnetwork SCC CPO role for 4.13 and earlier #3840 HOSTEDCP-1438 : [release-4.15] Preserve container resources for more hosted control plane components #3828 OCPBUGS-31324 : Add missing PodSecurityViolation alert #3798 NO-JIRA: Increase stability in autoscaled environments #3777
OCPBUGS-31471 : Reduce log file size for hypershift apiservers #3816 OCPBUGS-31604 : disable http2 for ignition server and proxy #3825 OCPBUGS-31426 : copy issuerCertificateAuthority configmap into HC openshift-config #3808 OCPBUGS-31265 : inject built-in MCP selector for KubeletConfigs and ContainerRuntimeConfigs #3802 NO-JIRA: Update RHTAP references (release-4.15) #3812
NO-JIRA: Remove unused ref to hostnetwork in cpo role #3796
OCPBUGS-31064 : ibmcloud KMS: remove breaking image check and enable KMS v2 support #3774 Full changelog
Source code for this page located on github