RHEA-2024:3997 - Product Enhancement Advisory

Topic

Red Hat OpenShift Pipelines 1.15.0 has been released.

Description

Red Hat OpenShift Pipelines is a cloud-native continuous integration and delivery (CI/CD) solution for building pipelines using Tekton. Tekton is a flexible, Kubernetes-native, open-source CI/CD framework which enables automating deployments across multiple platforms such as Kubernetes, Serverless, and VMs by abstracting away the underlying details.

Red Hat OpenShift Pipelines consists of:

• Tekton Operator 0.71.x
• Tekton Pipelines 0.59.x
• Tekton Triggers 0.27.x
• Tekton tkn CLI 0.37.x
• Tekton Chains 0.20.x (GA)
• Pipelines-as-Code 0.27.x (GA)
• ClusterTasks based on Tekton Catalog
• Tekton Hub 1.17.x (TP)
• Tekton Result 0.10.x (TP)
• Manual-Approval-Gate 0.2.x (TP)

## Features

• Standard CI/CD pipelines definition
• Easy to extend and integrate with existing tools
• Portable across any Kubernetes platform
• Designed for microservices and decentralized teams
• Integrated with OpenShift Developer Console
• Build images with Kubernetes tools such as S2I, Buildah, Buildpacks, Kaniko, etc.
• Deploy applications to multiple platforms such as Kubernetes, Serverless, and VMs
• Scale pipelines on-demand
• Enhance supply chain security with Tekton Chains (Technology Preview)
• Install and deploy Tekton Hub (Technology Preview) with custom catalog on enterprise cluster
• Maintain pipelines definitions as parts of an application repository with Pipelines-as-Code (PAC) (General Availability)

For more information, see the Release Notes on any one of the following platforms:

• Customer Portal: https://access.redhat.com/documentation/en-us/red_hat_openshift_pipelines/1.14/html/about_openshift_pipelines/op-release-notes#op-release-notes-1-14_op-release-notes
• OpenShift documentation: https://docs.openshift.com/pipelines/1.14/about/op-release-notes.html#op-release-notes-1-14_op-release-notes

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenShift Pipelines 1.15 x86_64
• Red Hat OpenShift Pipelines for IBM Power, little endian 1.15 ppc64le
• Red Hat OpenShift Pipelines for IBM Z and LinuxONE 1.15 s390x
• Red Hat OpenShift Pipelines for ARM 1.15 aarch64

Fixes

• SRVKP-3123 - Release OpenShift Pipelines Operator for Pipelines 1.15.0

CVEs

• CVE-2020-15778
• CVE-2023-4408
• CVE-2023-6004
• CVE-2023-6597
• CVE-2023-6918
• CVE-2023-7008
• CVE-2023-45288
• CVE-2023-45289
• CVE-2023-45290
• CVE-2023-50387
• CVE-2023-50868
• CVE-2024-0450
• CVE-2024-22365
• CVE-2024-24783
• CVE-2024-25062
• CVE-2024-26458
• CVE-2024-26461
• CVE-2024-28834
• CVE-2024-28849
• CVE-2024-33599
• CVE-2024-33600
• CVE-2024-33601
• CVE-2024-33602

References

• https://docs.openshift.com/container-platform/4.14/cicd/pipelines/understanding-openshift-pipelines.html