Back to index
Download the installer for your operating system or run
oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.15.41-x86_64
Team Approvals:
Tests:
- Blocking jobs
- Informing jobs
Upgrades from:
Untested upgrades:
4.14.19,
4.14.20,
4.14.21,
4.14.22,
4.14.23,
4.14.24,
4.14.26,
4.14.28,
4.14.29,
4.14.30,
4.14.31,
4.14.32,
4.14.33,
4.14.35,
4.14.36,
4.14.37,
4.14.38,
4.14.39,
4.15.10,
4.15.12,
4.15.13,
4.15.14,
4.15.15,
4.15.16,
4.15.17,
4.15.18,
4.15.19,
4.15.20,
4.15.21,
4.15.22,
4.15.23,
4.15.24,
4.15.26,
4.15.27,
4.15.28,
4.15.29,
4.15.30,
4.15.31,
4.15.33,
4.15.34,
4.15.35,
4.15.36,
4.15.37,
4.15.5,
4.15.6,
4.15.7,
4.15.8,
4.15.9Upgrades to:
Loading changelog, this may take a while ...
Created: 2024-12-09 13:35:22 +0000 UTC
Image Digest: sha256:71cde6728ab074bac6edb972a8ca90c0e85efad27b6a83eac54a931b93f02420
Components
Rebuilt images without code change
- [[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads #57
- Full changelog
- OCPBUGS-44522: Add network policies for konnectivity server and ignition server proxy #5120
- OCPBUGS-43931: Return the right tagReference on Catalogs ImageStream #5187
- NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.47 (release-4.15) #5210
- NO-JIRA: chore(deps): update konflux references (release-4.15) #5208
- NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.46 (release-4.15) #5190
- NO-JIRA: chore(deps): update konflux references to 7779f9e (release-4.15) #5182
- OCPBUGS-44278: Configure OAuth https proxy to dial cloud endpoints directly #5068
- NO-JIRA: chore(deps): update konflux references (release-4.15) #5159
- chore(deps): update konflux references (release-4.15) #5136
- NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1731604394 (release-4.15) #5129
- chore(deps): update konflux references (release-4.15) #5118
- NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1731518200 (release-4.15) #5106
- chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9 (release-4.15) #5110
- NO-JIRA: Update Konflux references (release-4.15) #5109
- NO-JIRA: chore(deps): update konflux references to 11b7f08 (release-4.15) #5101
- chore(deps): update konflux references (release-4.15) #5077
- NO-JIRA: chore(deps): update konflux references (release-4.15) #5054
- NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.44 (release-4.15) #5060
- OCPBUGS-44201: add ValidIDPConfiguration condition to report IDP config issues #5037
- NO-JIRA: Update Konflux references to fedcfe0 (release-4.15) #5040
- chore(deps): update konflux references (release-4.15) #5025
- chore(deps): update konflux references to f53fe54 (release-4.15) #5022
- NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.43 (release-4.15) #5016
- NO-JIRA: Update Konflux references (release-4.15) #5010
- NO-JIRA: chore(deps): update konflux references (release-4.15) #4974
- OCPBUGS-43635: label routes only when HCP router used #4961
- NO-JIRA: chore(deps): update konflux references (release-4.15) #4957
- NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.42 (release-4.15) #4949
- OCPBUGS-43468: Use guest DNS resolution in Konnectivity HTTPS proxy by default #4929
- NO-JIRA: chore(deps): update konflux references (release-4.15) #4932
- NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.41 (release-4.15) #4916
- NO-JIRA: chore(deps): update konflux references (release-4.15) #4922
- NO-JIRA: chore(deps): update konflux references to 674e70f (release-4.15) #4909
- OCPBUGS-42881: Let payload generation pick the release for the NodePool #4867
- OCPBUGS-42992: Conditionally manage kubeconfig secrets for DNS and Ingress operators #4876
- NO-JIRA: chore(deps): update konflux references (release-4.15) #4897
- NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.40 (release-4.15) #4881
- NO-JIRA: chore(deps): update konflux references to 37b9187 (release-4.15) #4850
- NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.39 (release-4.15) #4807
- NO-JIRA: chore(deps): update konflux references (release-4.15) #4815
- NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.37 (release-4.15) #4793
- NO-JIRA: chore(deps): update konflux references (release-4.15) #4777
- chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.4-1227.1726694542 (release-4.15) #4766
- NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9 (release-4.15) #4770
- chore(deps): update squidfunk/mkdocs-material docker tag to v8.5.11 (release-4.15) #4769
- chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21 (release-4.15) #4767
- NO-JIRA: chore(deps): update konflux references (release-4.15) #4762
- OCPBUGS-41373: CPO oauth idp converter: resolve names before dialing #4746
- NO-JIRA: Security fixes for openshift-ci-security job #4751
- OCPBUGS-42214: Make guest cluster components use the correct KAS port #4749
- OCPBUGS-38059: Add HTTP konnectivity proxy to OAuth server #4497
- HOSTEDCP-1956: bump CCO and go-jose version #4697
- NO-JIRA: chore(deps): update konflux references (release-4.15) #4719
- OCPBUGS-41701: cmd: report server version, supported OCP #4702
- OCPBUGS-38065: [release-4.15] Use HTTP proxy for ingress controller #4699
- OCPBUGS-41809: copy image-registry AdditionalTrustedCA configmap into HC openshift-config #4706
- HOSTEDCP-1896: [release-4.15] Allow setting Kube APIServer maximum requests in flight #4552
- OCPBUGS-39463: handle version skewed NodePools that do not have rhel9 binaries #4666
- OCPBUGS-39077: Set KCM node monitor grace period #4628
- OCPBUGS-30465: fix: bump google.golang.org/protobuf #4616
- OCPBUGS-39171: fix: bump github.com/IBM/go-sdk-core/v5 #4625
- OCPBUGS-35815: Add hypershift-cluster-version-operator image to release providers #4243
- NO-JIRA: test: relax mgmt KAS egress check #4631
- NO-JIRA: Tolerate restarts for kubevirt external infra #4200
- NO-JIRA: Flaky cert validation test #4630
- OCPBUGS-38943: copy oapi ca-trust recursively when building trust anchor #4613
- OCPBUGS-39041: set proxy envvars on aws and azure CCMs #4624
- OCPBUGS-38613: hcco: reconcile apiserver config into hosted cluster #4567
- OCPBUGS-38561: Let the CPO oidc check resolve through data plane #4564
- OCPBUGS-34904: remove weak ciphers from security profile #4547
- OCPBUGS-37171: OCPBUGS-35899: Doubled machineHealthCheck timeout on Agent and None #4489
- NO-JIRA: Update Konflux 4.15 and perform migration #4487
- NO-JIRA: [release-4.15] Kubevirt on Azure: Change KAS LB Port to 7443 #4469
- OCPBUGS-36938: [release-4.15]: Add HTTP(s) konnectivity proxy and use it with OpenShift APIServer #4358
- OCPBUGS-37174: Delete IDMS in dataplane once HCP ICS field is removed #4457
- NO-JIRA: [release-4.15] kubevirt-csi-driver: Pass infra kubeconfig in case of external infra #4279
- HOSTEDCP-1795, HOSTEDCP-1796: Customize the self-generated cert validity and rotation #4444
- OCPBUGS-36916: Add newline after TLS certs referenced by image.config #4443
- OCPBUGS-37695: Set right endpointSlice port #4441
- NO-JIRA: Red Hat Konflux update hypershift-release-mce-25 #4433
- NO-JIRA: [release-4.15] test/e2e: remove api budget checks #4413
- OCPBUGS-37266: extract rhel9 MCO binaries for rhel8 based MCO images #4385
- OCPBUGS-36606: enable audit log for oauth-openshift #4320
- HOSTEDCP-1714: Kubernetes API Server Log Verbosity Annotation cherry pick to 4.15 #4178
- OCPBUGS-35736: Complete KAS migration to none endpoint reconciler type #4228
- OCPBUGS-35935: check mgmt cluster for route capability before DeleteIfNeeded for ovn sbdb route #4265
- NO-JIRA: chore(deps): update konflux references (release-4.15) #4259
- OCPBUGS-35714: Generate default worker security group rules based on machineCIDR #4266
- NO-JIRA: chore(deps): update konflux references (release-4.15) #4252
- OCPBUGS-32404: Fix failure to create a second hostedcluster in the same namespace #3907
- NO-JIRA: chore(deps): update konflux references to ff44cf3 (release-4.15) #4246
- NO-JIRA: feat(olm): Set packageserver replicas to 2 for IBMCloudPlatform #4231
- chore(deps): update konflux references to 2be7c9c (release-4.15) #4224
- OCPBUGS-34580: Add TrustedBundles to OAS container #4211
- NO-JIRA: hack: make the e2e script generic #4199
- OCPBUGS-33627: Restrict image registry overrides to control plane components #4131
- OCPBUGS-34156: fix router on 4.14 y-stream upgrade #4077
- OCPBUGS-35002: [release-4.15] HOSTEDCP-1122: Backport etcd defrag controller #4162
- NO-JIRA: Update Konflux references to 1025001 (release-4.15) #4180
- NO-JIRA: chore(deps): update konflux references (release-4.15) #4167
- OCPBUGS-34997: add AWS STS URL to OIDC provider audiences #4157
- OCPBUGS-35074: Fix disconnected metadata inspection for nodepool #4175
- HOSTEDCP-1708: remove liveness and readiness probes that use the metrics #4128
- OCPBUGS-34423: Fixed audit-logs sigterm failing to terminate gracefully #4089
- OCPBUGS-33526: Disable DNS resolving for CNO #4148
- OCPBUGS-34904: remove weak cipher #4156
- OCPBUGS-34510: Reconcile KAS endpoints and endpoint slice #4097
- NO-JIRA: test/e2e: fix prometheus serviceaccount handling against 4.16+ #4151
- NO-JIRA: chore(deps): update rhtap references (release-4.15) #4120
- NO-JIRA: chore(deps): update rhtap references (release-4.15) #4072
- OCPBUGS-33510: Run haproxy to connect to kas from data plane if noproxy settings contain kas #4014
- NO-JIRA: chore(deps): update rhtap references to 7cd8020 (release-4.15) #4064
- NO-JIRA: Remove CLI inspection of release image #4056
- HOSTEDCP-1518: Preserve container resource requests and limits #4032
- NO-JIRA: Update RHTAP references (release-4.15) #4041
- OCPBUGS-33118: Recycler-pod image now points to the OCP Payload reference #3963
- OCPBUGS-32220: Fix disconnected metadata inspection #3881
- NO-JIRA: Update RHTAP references to 1f62eaf (release-4.15) #4030
- OCPBUGS-33117: Reconcile over ICSP/IDMS #3962
- NO-JIRA: Update RHTAP references to 2d39df1 (release-4.15) #4022
- HOSTEDCP-1480: Update TLS cert hash creation with sha512 #4017
- HOSTEDCP-1513: Support hypershift-operator scoping for hostedclusters #3998
- Revert “[release-4.15] OCPBUGS-32013: Set OPERATOR_IMAGE environment variable” #3939
- OCPBUGS-33207: Remove kube-scheduler readiness probe #3955
- NO-JIRA: chore(deps): update rhtap references to c6fdbf4 (release-4.15) #3989
- OCPBUGS-25858: Improve description for agent APIServerAddress CLI flag #3977
- OCPBUGS-33224: disable OCM pull secret controller when imageregistry config managementstate is Removed #3976
- NO-JIRA: chore(deps): update rhtap references (release-4.15) #3982
- OCPBUGS-31747: update desired image even when HCP doesn’t exist yet #3839
- NO-JIRA: chore(deps): update rhtap references to e9efe99 (release-4.15) #3974
- OCPBUGS-32229: disable autoscaler when no nodepool require it #3884
- NO-JIRA: chore(deps): update rhtap references (release-4.15) #3967
- HOSTEDCP-1552: Update RHTAP tekton files for 0.3 -> 0.4 migration #3957
- OCPBUGS-31826: use dnsPolicy: Default for konnectivity-agent in data plane #3845
- NO-JIRA: Update RHTAP references (release-4.15) #3935
- Full changelog
- gather selected clusterroles (#1024) #1024
- OCPBUGS-39565: Not able to enable repositories during entitled build in OCP Cluster on IBM-Z (#1015) #1015
- OCPBUGS-39395: collect some nmstate customresources (#986) (#989) (#995) (#1002) #986
- Add haproxy metric (#983) #983
- OCPBUGS-37672: Ingress controller related certificates’ validate dates gathering (#972) #972
- fix the configmapobserver notifications (#971) #971
- manifests: set required-scc for openshift workloads (#967) #967
- OCPBUGS-35882: properly encode the URL for the advisor links (#958) #958
- OCPBUGS-35865: Collect aggregated Prometheus Alertmanager instances (#950) #950
- OCPBUGS-32702: anonymization - externalIP can be nil (#931) #931
- Full changelog
- [[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads #81
- Full changelog
Source code for this page located on github