Back to index
Download the installer for your operating system or run
oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.15.38-x86_64
Team Approvals:
Tests:
- Blocking jobs
- Informing jobs
Upgrades from:
Untested upgrades:
4.14.16,
4.14.17,
4.14.18,
4.14.19,
4.14.20,
4.14.21,
4.14.22,
4.14.23,
4.14.24,
4.14.25,
4.14.26,
4.14.27,
4.14.28,
4.14.29,
4.14.30,
4.14.31,
4.14.32,
4.14.33,
4.14.34,
4.14.35,
4.14.36,
4.14.37,
4.14.38,
4.14.39,
4.14.40,
4.15.0,
4.15.10,
4.15.11,
4.15.12,
4.15.13,
4.15.14,
4.15.15,
4.15.16,
4.15.17,
4.15.18,
4.15.19,
4.15.2,
4.15.20,
4.15.21,
4.15.22,
4.15.23,
4.15.24,
4.15.25,
4.15.26,
4.15.27,
4.15.28,
4.15.29,
4.15.3,
4.15.30,
4.15.31,
4.15.32,
4.15.33,
4.15.34,
4.15.35,
4.15.36,
4.15.37,
4.15.5,
4.15.6,
4.15.7,
4.15.8,
4.15.9Upgrades to:
Loading changelog, this may take a while ...
Created: 2024-11-07 09:58:56 +0000 UTC
Image Digest: sha256:bcc1b1803a49b9ac876a7dd950138439aacb81f070a64ae0a2f16e01594b7291
Release 4.15.38 was created from registry.ci.openshift.org/ocp/release:4.15.0-0.nightly-2024-11-06-192926
Components
Rebuilt images without code change
- OCPBUGS-22539: Bump otelhttp from 0.35.1 to 0.44.0 using replace approach (#6858) #6858
- OCPBUGS-43022: Update go-jose to v2.6.3 to mitigate CVE-2024-28180 (#6894) #6894
- OCPBUGS-42571: Libraries bump to mitigate CVE-2024-27289 (#6834) #6834
- OCPBUGS-36577: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#6753) #6753
- OCPBUGS-34641: Invalid Pull-Secret when using password which contains a colon character (#6381) #6381
- OCPBUGS-31631: Deploy dual stack with IPv6 on top of bond/vlan fails (#6245) #6245
- MGMT-17593: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#6217) #6217
- 17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6211) #6211
- Revert “MGMT-17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6194)” (#6208) #6194
- Full changelog
- [[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads #57
- Full changelog
- [[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads #326
- OCPBUGS-24632: Prevent rollout due to irrelevant path artifacts #317
- CFE-1087: API Bump for capacity Reservation #318
- OCPBUGS-34971: Add unreadyNodeGracePeriod for allowing brief node hiccups #299
- OCPBUGS-35496: Wait for ControlPlaneMachineSet to be created when waiting for it to be updated #308
- OCPBUGS-35255: Improved debugging of API listing errors #301
- [Release 4.15] OCPBUGS-32414: Fix ExportFailureDomain to handle empty platform spec #290
- [Release 4.15] OCPBUGS-32357: Modified webhook to allow templates by name instead of just by path. #289
- Full changelog
- NO-JIRA: chore(deps): update konflux references (release-4.15) #5054
- NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.44 (release-4.15) #5060
- OCPBUGS-44201: add ValidIDPConfiguration condition to report IDP config issues #5037
- NO-JIRA: Update Konflux references to fedcfe0 (release-4.15) #5040
- chore(deps): update konflux references (release-4.15) #5025
- chore(deps): update konflux references to f53fe54 (release-4.15) #5022
- NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.43 (release-4.15) #5016
- NO-JIRA: Update Konflux references (release-4.15) #5010
- NO-JIRA: chore(deps): update konflux references (release-4.15) #4974
- OCPBUGS-43635: label routes only when HCP router used #4961
- NO-JIRA: chore(deps): update konflux references (release-4.15) #4957
- NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.42 (release-4.15) #4949
- OCPBUGS-43468: Use guest DNS resolution in Konnectivity HTTPS proxy by default #4929
- NO-JIRA: chore(deps): update konflux references (release-4.15) #4932
- NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.41 (release-4.15) #4916
- NO-JIRA: chore(deps): update konflux references (release-4.15) #4922
- NO-JIRA: chore(deps): update konflux references to 674e70f (release-4.15) #4909
- OCPBUGS-42881: Let payload generation pick the release for the NodePool #4867
- OCPBUGS-42992: Conditionally manage kubeconfig secrets for DNS and Ingress operators #4876
- NO-JIRA: chore(deps): update konflux references (release-4.15) #4897
- NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.40 (release-4.15) #4881
- NO-JIRA: chore(deps): update konflux references to 37b9187 (release-4.15) #4850
- NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.39 (release-4.15) #4807
- NO-JIRA: chore(deps): update konflux references (release-4.15) #4815
- NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.37 (release-4.15) #4793
- NO-JIRA: chore(deps): update konflux references (release-4.15) #4777
- chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.4-1227.1726694542 (release-4.15) #4766
- NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9 (release-4.15) #4770
- chore(deps): update squidfunk/mkdocs-material docker tag to v8.5.11 (release-4.15) #4769
- chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21 (release-4.15) #4767
- NO-JIRA: chore(deps): update konflux references (release-4.15) #4762
- OCPBUGS-41373: CPO oauth idp converter: resolve names before dialing #4746
- NO-JIRA: Security fixes for openshift-ci-security job #4751
- OCPBUGS-42214: Make guest cluster components use the correct KAS port #4749
- OCPBUGS-38059: Add HTTP konnectivity proxy to OAuth server #4497
- HOSTEDCP-1956: bump CCO and go-jose version #4697
- NO-JIRA: chore(deps): update konflux references (release-4.15) #4719
- OCPBUGS-41701: cmd: report server version, supported OCP #4702
- OCPBUGS-38065: [release-4.15] Use HTTP proxy for ingress controller #4699
- OCPBUGS-41809: copy image-registry AdditionalTrustedCA configmap into HC openshift-config #4706
- HOSTEDCP-1896: [release-4.15] Allow setting Kube APIServer maximum requests in flight #4552
- OCPBUGS-39463: handle version skewed NodePools that do not have rhel9 binaries #4666
- OCPBUGS-39077: Set KCM node monitor grace period #4628
- OCPBUGS-30465: fix: bump google.golang.org/protobuf #4616
- OCPBUGS-39171: fix: bump github.com/IBM/go-sdk-core/v5 #4625
- OCPBUGS-35815: Add hypershift-cluster-version-operator image to release providers #4243
- NO-JIRA: test: relax mgmt KAS egress check #4631
- NO-JIRA: Tolerate restarts for kubevirt external infra #4200
- NO-JIRA: Flaky cert validation test #4630
- OCPBUGS-38943: copy oapi ca-trust recursively when building trust anchor #4613
- OCPBUGS-39041: set proxy envvars on aws and azure CCMs #4624
- OCPBUGS-38613: hcco: reconcile apiserver config into hosted cluster #4567
- OCPBUGS-38561: Let the CPO oidc check resolve through data plane #4564
- OCPBUGS-34904: remove weak ciphers from security profile #4547
- OCPBUGS-37171: OCPBUGS-35899: Doubled machineHealthCheck timeout on Agent and None #4489
- NO-JIRA: Update Konflux 4.15 and perform migration #4487
- NO-JIRA: [release-4.15] Kubevirt on Azure: Change KAS LB Port to 7443 #4469
- OCPBUGS-36938: [release-4.15]: Add HTTP(s) konnectivity proxy and use it with OpenShift APIServer #4358
- OCPBUGS-37174: Delete IDMS in dataplane once HCP ICS field is removed #4457
- NO-JIRA: [release-4.15] kubevirt-csi-driver: Pass infra kubeconfig in case of external infra #4279
- HOSTEDCP-1795, HOSTEDCP-1796: Customize the self-generated cert validity and rotation #4444
- OCPBUGS-36916: Add newline after TLS certs referenced by image.config #4443
- OCPBUGS-37695: Set right endpointSlice port #4441
- NO-JIRA: Red Hat Konflux update hypershift-release-mce-25 #4433
- NO-JIRA: [release-4.15] test/e2e: remove api budget checks #4413
- OCPBUGS-37266: extract rhel9 MCO binaries for rhel8 based MCO images #4385
- OCPBUGS-36606: enable audit log for oauth-openshift #4320
- HOSTEDCP-1714: Kubernetes API Server Log Verbosity Annotation cherry pick to 4.15 #4178
- OCPBUGS-35736: Complete KAS migration to none endpoint reconciler type #4228
- OCPBUGS-35935: check mgmt cluster for route capability before DeleteIfNeeded for ovn sbdb route #4265
- NO-JIRA: chore(deps): update konflux references (release-4.15) #4259
- OCPBUGS-35714: Generate default worker security group rules based on machineCIDR #4266
- NO-JIRA: chore(deps): update konflux references (release-4.15) #4252
- OCPBUGS-32404: Fix failure to create a second hostedcluster in the same namespace #3907
- NO-JIRA: chore(deps): update konflux references to ff44cf3 (release-4.15) #4246
- NO-JIRA: feat(olm): Set packageserver replicas to 2 for IBMCloudPlatform #4231
- chore(deps): update konflux references to 2be7c9c (release-4.15) #4224
- OCPBUGS-34580: Add TrustedBundles to OAS container #4211
- NO-JIRA: hack: make the e2e script generic #4199
- OCPBUGS-33627: Restrict image registry overrides to control plane components #4131
- OCPBUGS-34156: fix router on 4.14 y-stream upgrade #4077
- OCPBUGS-35002: [release-4.15] HOSTEDCP-1122: Backport etcd defrag controller #4162
- NO-JIRA: Update Konflux references to 1025001 (release-4.15) #4180
- NO-JIRA: chore(deps): update konflux references (release-4.15) #4167
- OCPBUGS-34997: add AWS STS URL to OIDC provider audiences #4157
- OCPBUGS-35074: Fix disconnected metadata inspection for nodepool #4175
- HOSTEDCP-1708: remove liveness and readiness probes that use the metrics #4128
- OCPBUGS-34423: Fixed audit-logs sigterm failing to terminate gracefully #4089
- OCPBUGS-33526: Disable DNS resolving for CNO #4148
- OCPBUGS-34904: remove weak cipher #4156
- OCPBUGS-34510: Reconcile KAS endpoints and endpoint slice #4097
- NO-JIRA: test/e2e: fix prometheus serviceaccount handling against 4.16+ #4151
- NO-JIRA: chore(deps): update rhtap references (release-4.15) #4120
- NO-JIRA: chore(deps): update rhtap references (release-4.15) #4072
- OCPBUGS-33510: Run haproxy to connect to kas from data plane if noproxy settings contain kas #4014
- NO-JIRA: chore(deps): update rhtap references to 7cd8020 (release-4.15) #4064
- NO-JIRA: Remove CLI inspection of release image #4056
- HOSTEDCP-1518: Preserve container resource requests and limits #4032
- NO-JIRA: Update RHTAP references (release-4.15) #4041
- OCPBUGS-33118: Recycler-pod image now points to the OCP Payload reference #3963
- OCPBUGS-32220: Fix disconnected metadata inspection #3881
- NO-JIRA: Update RHTAP references to 1f62eaf (release-4.15) #4030
- OCPBUGS-33117: Reconcile over ICSP/IDMS #3962
- NO-JIRA: Update RHTAP references to 2d39df1 (release-4.15) #4022
- HOSTEDCP-1480: Update TLS cert hash creation with sha512 #4017
- HOSTEDCP-1513: Support hypershift-operator scoping for hostedclusters #3998
- Revert “[release-4.15] OCPBUGS-32013: Set OPERATOR_IMAGE environment variable” #3939
- OCPBUGS-33207: Remove kube-scheduler readiness probe #3955
- NO-JIRA: chore(deps): update rhtap references to c6fdbf4 (release-4.15) #3989
- OCPBUGS-25858: Improve description for agent APIServerAddress CLI flag #3977
- OCPBUGS-33224: disable OCM pull secret controller when imageregistry config managementstate is Removed #3976
- NO-JIRA: chore(deps): update rhtap references (release-4.15) #3982
- OCPBUGS-31747: update desired image even when HCP doesn’t exist yet #3839
- NO-JIRA: chore(deps): update rhtap references to e9efe99 (release-4.15) #3974
- OCPBUGS-32229: disable autoscaler when no nodepool require it #3884
- NO-JIRA: chore(deps): update rhtap references (release-4.15) #3967
- HOSTEDCP-1552: Update RHTAP tekton files for 0.3 -> 0.4 migration #3957
- OCPBUGS-31826: use dnsPolicy: Default for konnectivity-agent in data plane #3845
- NO-JIRA: Update RHTAP references (release-4.15) #3935
- OCPBUGS-32715: Fix OLM intilization args #3923
- HOSTEDCP-1519: [release-4.15] feat(api): Add ingress-controller-load-balancer-scope annotation #3908
- NO-JIRA: chore(deps): update rhtap references (release-4.15) #3921
- OCPBUGS-32164: Fix ICSP and IDMS inclusion as registriesOverrides #3870
- NO-JIRA: chore(deps): update rhtap references (release-4.15) #3904
- OCPBUGS-30280: Switch to use service endpoint for Konnectivity #3692
- OCPBUGS-32191: Kas disable audit cherry pick release 4.15 #3875
- OCPBUGS-32114: Add new permission required in CAPA #3861
- Full changelog
- [[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads #81
- Full changelog
Source code for this page located on github