4.15.0-0.okd-2024-11-24-223028

New features since version 4.14.0-0.okd-scos-2024-08-05-223930

Download installer and client with:

oc adm release extract --tools registry.ci.openshift.org/origin/release:4.15.0-0.okd-2024-11-24-223028

Team Approvals:

Tests:

Blocking jobs
- aws Failed (2 retries) periodic-ci-openshift-release-master-okd-4.15-e2e-aws-ovn
Informing jobs
- aws-upgrade Failed (2 retries) periodic-ci-openshift-release-master-okd-4.15-e2e-aws-ovn-upgrade

Upgrades from:

4.15.0-0.okd-2024-03-27-110901 - F F F

Loading changelog, this may take a while ...

Changes from 4.15.0-0.okd-2024-03-27-110901

Created: 2024-11-24 22:31:56 +0000 UTC

Image Digest: sha256:3bb62dbe7feb4e8ae822dae972a02101f82eaf4a2e18b57be36f3380ddf283b9

Components

Kubernetes 1.28.7
Fedora CoreOS 39.20240210.3

baremetal-installer, installer, installer-artifacts, ovirt-installer

OCPBUGS-44035: IBMCloud: Handle pagination for subnets #9160
OCPBUGS-43760: azure: use filter when listing SKUs #9135
OCPBUGS-42139: add tested instance type for IBMCloud #9032
OCPBUGS-42335: Bump extract-machine-os timout to 20m #9051
OCPBUGS-42180: Add AWS r8g to arm tested instance types #9040
OCPBUGS-39288, OCPBUGS-42011: Openstack UPI - Reintroduce unique resource names #9047
OCPBUGS-38198: Remove timed context for gcp client #8824
OCPBUGS-29591: vsphere-fix convert if only provided name #8034
OCPBUGS-32179: Fix task for attaching IPv6 subnet to router. #8262
OCPBUGS-34721: fix usage of host and user CA bundle in the agent ignition #8512
OCPBUGS-36090: [release-4.15]: bump go-retryablehttp for CVE fix #8655
OCPBUGS-37064: Changed vsphere CPMS to not include fields controlled by failure domains. #8735
OCPBUGS-37182: ic: fix typo in warning message #8770
OCPBUGS-37067: update RHCOS 4.15 bootimage metadata to 415.92.202407091355-0 #8746
OCPBUGS-33354, OCPBUGS-33402: Use assisted-image-service for ignition editing #8635
: OCPBUGS-36400: PowerVS: add ibmcloud plugins #8687
OCPBUGS-36225: Make vSphere default ResourcePool formatting not contain double slash. #8664
OCPBUGS-35131, OCPBUGS-35141, OCPBUGS-35144: [CVE-2023-48795] Bump golang.org/x/crypto to v0.21.0 #8646
OCPBUGS-35359: GCP: Prevent cluster installation with mismatched worker assets and worker replicas #8581
OCPBUGS-35502: [release-4.15] azure: bump profile used for network #8607
OCPBUGS-35586: [release-4.15] bump github.com/containers/image for CVE fix #8621
OCPBUGS-31387: If host is offline or disconnected don’t check ver #8208
OCPBUGS-35355: baremetal: Don’t always enable provisioning-interface.service #8580
OCPBUGS-35032: [release-4.15] aws: terraform: add spot instance support for masters #8540
OCPBUGS-35059: images: change libvirt-installer base #8550
OCPBUGS-33672: add quota support to ca-west-1 #8412
OCPBUGS-33454: go.mod: bump aws-sdk-go for ca-west-1 support #8381
OCPBUGS-33205: Gcp bootstraping release 4.15 #8339
OCPBUGS-33542: images: do not force terraform-providers to be statically linked #8392
OCPBUGS-29929: GCP Destroy cleanup correct zones/records #8062
OCPBUGS-32383: sdk/aws: add ssh security group rule for compute #8282
OCPBUGS-32690: AWS: bump CCO for permission fix #8302
OCPBUGS-32264: always save serial logs if they were gathered #8274
OCPBUGS-30944: Don’t run libvirt validations in agent installer #8167
NO-ISSUE: test fix to support slightly different nmstate error messages #8285
OCPBUGS-32259: escape ‘%’ in proxy settings #8272
OCPBUGS-32355: Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility #8277
OCPBUGS-31335: openstack: Honour worker server group policy #8202
: OCPBUGS-31590: GCP: Skip populating Private/Public Zones within DNS manifest #8220
OCPBUGS-30922: coreos-installer iso kargs show broken on Agent ISO #8163
OCPBUGS-30822: Validate control plane replicas #8143
Full changelog

cluster-samples-operator

OCPBUGS-37464: Set required-scc for openshift workloads #548
OCPBUGS-38157: add mfrancisc and metlos as owners add owners 4.15 #550
OCPBUGS-22034: bump K8s version to 29.2 #538
Full changelog

cluster-update-keys

OCPBUGS-43626: keys: Update Red Hat keys to use SHA256 signatures #65
Full changelog

ironic

OCPBUGS-39018: Bump ironic-lib to fix utf8 decoding issue #570
OCPBUGS-38798: redfish-virtualmedia fails on XFusion nodes #565
OCPBUGS-37761, OCPBUGS-39381: Include fixes for CVE-2024-44082 #583
OCPBUGS-38512: set min version for python3-webob #554
OCPBUGS-33332: bump werkzeug #536
OCPBUGS-37407: bump jinja2 #529
OCPBUGS-37113: Update eventlet version #523
Bug OCPBUGS-33736: Disable installation of .pyc files through pip #511
OCPBUGS-32365: [4.15] Remove unused prometheus exporter #485
OCPBUGS-32351: [4.15] Update to include fixes for ironic servicing feature #479
OCPBUGS-32389: Use unix sockets by default for reverse proxy communication #474
OCPBUGS-31686, OCPBUGS-31802, OCPBUGS-31830: [4.15] install ironic projects from source #470
OCPBUGS-31802: [4.15] Add requirements placeholders for cachito #467
OCPBUGS-27772: Update packages to include most recent bug fixes #450
Full changelog

ironic-agent

OCPBUGS-39018: Bump ironic-lib to fix utf8 decoding issue #157
OCPBUGS-39381: Include fixes for CVE-2024-44082 #162
OCPBUGS-38512: set webob and bump werkzeug #150
OCPBUGS-33133: update ironic-lib with latest fixes #131
OCPBUGS-32173: [4.15] Fix name in setup.cfg #123
OCPBUGS-31811: [4.15] Add makefile #126
OCPBUGS-31811: [4.15] Install ironic-python-agent from source #125
OCPBUGS-31811: [4.15] Add requirements placeholders for cachito #121
Full changelog

machine-config-operator

OCPBUGS-42137: Removal of additionalTrustBundle CA does not remove certificate from node backport #4687
OCPBUGS-44240: Disable ESP offload for OVS attached interfaces #4684
MCO-1341: Backport Telemetry to 4.15 #4648
OCPBUGS-42110: Do not use ‘restart’ for ‘oneshot’ service #4621
OCPBUGS-43582: Panic seen in CI job for MCC pod #4653
OCPBUGS-43575: MCPs report wrong number of nodes when we move nodes from one custom MCP to another custom MCP #4647
OCPBUGS-37704: Make logging configurable for on-prem components #4501
OCPBUGS-32329: Fix configure-ip-forwarding.sh #4324
OCPBUGS-37551: On-Prem resolv prepender to watch for NM changes #4499
OCPBUGS-38712: SCC-pinning for openshift workloads #4540
OCPBUGS-38370: Revert “MCD-pull: run after network-online.target in Azure” #4525
OCPBUGS-37768: Move StartLimitIntervalSec to Unit section #4506
OCPBUGS-37629: Openshift uncordoned compute-node that was intentionally cordoned #4495
OCPBUGS-36863: Copy RHEL9 binaries used in HCP #4476
OCPBUGS-35220: Check both ready and health ingress endpoints #4398
OCPBUGS-30139: [release-4.15] Use NM’s dns-change event for resolv.conf #4220
OCPBUGS-36769: daemon: Handle correctly OS Version for 4.1 and 4.2 bootimages #4461
OCPBUGS-36550: MCD-pull: run after network-online.target in Azure #4454
OCPBUGS-27436: Fix mirrorSourcePolicy error prompt imagecontentsourcepolicies #4431
OCPBUGS-36258: daemon/update: disable systemd unit before overwriting #4441
OCPBUGS-32092: Decrease logs of haproxy #4313
OCPBUGS-35010: set required-scc for openshift workloads #4393
OCPBUGS-31461: Remove weights from ingress check script #4290
OCPBUGS-33847: If multiple hostnames are returned, use the first one for the Node name #4373
OCPBUGS-20152: Don’t error if the certs.d dir doesn’t exist yet #4358
OCPBUGS-32922: [release-4.15] add cluster fleet evaluation support to mco #4334
OCPBUGS-28926: [4.15] crio: update pids limit to be -1 #4163
OCPBUGS-28545: Delete state files on reboot only #4311
OCPBUGS-31820: Remove the condition for checking the multiple ovs-if-br-ex profiles #4309
OCPBUGS-27029: Log network service output to console #4113
OCPBUGS-31646: fix: resources were in the wrong indentation level #4301
: OCPBUGS-31576: kubelet: restorecon necessary files on kubelet’s prestart #4297
OCPBUGS-30884: Prevent OVS-configuration to run before kdump #4259
OCPBUGS-31383: make verify should use MCO’s kube version #4282
OCPBUGS-30971: add preferredduringscheduling annotation to kube-rbac-proxy-crio #4264
Full changelog

operator-marketplace

OCPBUGS-37524: Set required-scc for openshift workloads #570
OCPBUGS-32060: update golang.org/x/net for CVE-2023-45288 #564
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github