# 4.7.0-0.okd-2021-03-28-152009

Created: 2021-03-28 17:21:57 +0000 UTC

Image Digest: `sha256:02c01aaaed9d292376e7808b6365ed38c34856e2a13c99718b54a12958f4e6da`

Promoted from registry.ci.openshift.org/origin/release:4.7.0-0.okd-2021-03-28-152009


## Changes from 4.7.0-0.okd-2021-03-06-124908

### Components

* Kubernetes 1.20.0-beta.2
* Fedora CoreOS 33.20210323.10


### Rebuilt images without code change

* [docker-registry](https://github.com/openshift/image-registry) git [8e0c068a](https://github.com/openshift/image-registry/commit/8e0c068aef607fceffe3e179c3a9701f51c51dff) `sha256:f4d559435197a2061b96af198143f764c43dd59371bb3ddaf190f7f8ae5b5e0f`
* [etcd](https://github.com/openshift/etcd) git [cca97c76](https://github.com/openshift/etcd/commit/cca97c76b915b1d14abd39814995fa1e2d087145) `sha256:3ce8b23a53a473a8bc43f903853249ddefc3bb4ca5a1c340e712af0557d7ff88`


### [aws-machine-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/2d069b7f8bf4a443ba1a7ac8f669ef05ed92a50e)

* [Bug 1935636](https://bugzilla.redhat.com/show_bug.cgi?id=1935636): Ensure response body is closed when we are finished with the request [#391](https://github.com/openshift/cluster-api-provider-aws/pull/391)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/5ffc5f422a80169b342c19f50b22a0c4883cc0e3...2d069b7f8bf4a443ba1a7ac8f669ef05ed92a50e)


### [baremetal-installer, installer-artifacts](https://github.com/vrutkovs/installer/tree/cf35dc04aedf7a80bea5470358025cbe91d232c9)

* [Bug 1933728](https://bugzilla.redhat.com/show_bug.cgi?id=1933728): baremetal: include netmask in DNSMasq dhcp range [#4698](https://github.com/vrutkovs/installer/pull/4698)
* [Bug 1930106](https://bugzilla.redhat.com/show_bug.cgi?id=1930106): bump ignition to v3_2 [#4701](https://github.com/vrutkovs/installer/pull/4701)
* [Bug 1922292](https://bugzilla.redhat.com/show_bug.cgi?id=1922292): [release-4.7] data/rhcos.json: Update boot images [#4635](https://github.com/vrutkovs/installer/pull/4635)
* [Bug 1924701](https://bugzilla.redhat.com/show_bug.cgi?id=1924701): Fix cluster destroy when byo is used with Kuryr [#4616](https://github.com/vrutkovs/installer/pull/4616)
* [Bug 1909978](https://bugzilla.redhat.com/show_bug.cgi?id=1909978): update ignore-volume-az documentation [#4617](https://github.com/vrutkovs/installer/pull/4617)
* [Bug 1916692](https://bugzilla.redhat.com/show_bug.cgi?id=1916692): OpenStack: Delete leftover LBs when destroying cluster [#4563](https://github.com/vrutkovs/installer/pull/4563)
* [Bug 1919407](https://bugzilla.redhat.com/show_bug.cgi?id=1919407): openstack/validation: enforce control plane size [#4585](https://github.com/vrutkovs/installer/pull/4585)
* [Bug 1909978](https://bugzilla.redhat.com/show_bug.cgi?id=1909978): update documentation for ignore-volume-az usage [#4603](https://github.com/vrutkovs/installer/pull/4603)
* [Bug 1896218](https://bugzilla.redhat.com/show_bug.cgi?id=1896218): remove GCP role bindings before service accounts [#4602](https://github.com/vrutkovs/installer/pull/4602)
* [Bug 1921911](https://bugzilla.redhat.com/show_bug.cgi?id=1921911): Revert "Merge pull request #4589 from patrickdillon/bz-1896218-gcp-se… [#4600](https://github.com/vrutkovs/installer/pull/4600)
* [Bug 1921655](https://bugzilla.redhat.com/show_bug.cgi?id=1921655): OpenStack: fix error handling for cloudinfo [#4599](https://github.com/vrutkovs/installer/pull/4599)
* [Bug 1896218](https://bugzilla.redhat.com/show_bug.cgi?id=1896218): remove GCP role bindings before service accounts [#4589](https://github.com/vrutkovs/installer/pull/4589)
* Updating ose-installer-artifacts builder & base images to be consistent with ART [#4546](https://github.com/vrutkovs/installer/pull/4546)
* maintenance: remove pools and volumes [#3620](https://github.com/vrutkovs/installer/pull/3620)
* [Bug 1810438](https://bugzilla.redhat.com/show_bug.cgi?id=1810438): oVirt: Add missing piece for gathering bootstrap IP info [#4524](https://github.com/vrutkovs/installer/pull/4524)
* Updating ose-baremetal-installer builder & base images to be consistent with ART [#4544](https://github.com/vrutkovs/installer/pull/4544)
* Updating ose-installer builder & base images to be consistent with ART [#4543](https://github.com/vrutkovs/installer/pull/4543)
* [Bug 1920243](https://bugzilla.redhat.com/show_bug.cgi?id=1920243): disable anonymous auth on bootstrap nodes [#4590](https://github.com/vrutkovs/installer/pull/4590)
* [Bug 1917101](https://bugzilla.redhat.com/show_bug.cgi?id=1917101): UPI ovirt - remove RHCOS image from Network req [#4577](https://github.com/vrutkovs/installer/pull/4577)
* [Bug 1893117](https://bugzilla.redhat.com/show_bug.cgi?id=1893117): terraform/vsphereprivate: ignore hosts in maintenance mode [#4566](https://github.com/vrutkovs/installer/pull/4566)
* [Bug 1919072](https://bugzilla.redhat.com/show_bug.cgi?id=1919072): AWS cloudformation change protocol from ESP to 50 [#4583](https://github.com/vrutkovs/installer/pull/4583)
* [Bug 1916938](https://bugzilla.redhat.com/show_bug.cgi?id=1916938): tolerate equal APIFloatingIP and LbFloatingIP [#4575](https://github.com/vrutkovs/installer/pull/4575)
* [Bug 1907822](https://bugzilla.redhat.com/show_bug.cgi?id=1907822): Don't panic on bad data in quota validations [#4483](https://github.com/vrutkovs/installer/pull/4483)
* [Bug 1912828](https://bugzilla.redhat.com/show_bug.cgi?id=1912828): Rebase on the latest terraform provider/go-ovirt [#4562](https://github.com/vrutkovs/installer/pull/4562)
* [Bug 1916373](https://bugzilla.redhat.com/show_bug.cgi?id=1916373): upi: allow IPsec ports [#4552](https://github.com/vrutkovs/installer/pull/4552)
* [Bug 1915460](https://bugzilla.redhat.com/show_bug.cgi?id=1915460): ovirt: validate cluster name during install [#4537](https://github.com/vrutkovs/installer/pull/4537)
* [Bug 1910244](https://bugzilla.redhat.com/show_bug.cgi?id=1910244): Go mod update for golang crypto [#4569](https://github.com/vrutkovs/installer/pull/4569)
* [Bug 1915617](https://bugzilla.redhat.com/show_bug.cgi?id=1915617): update boot images for various fixes [#4540](https://github.com/vrutkovs/installer/pull/4540)
* [Bug 1909502](https://bugzilla.redhat.com/show_bug.cgi?id=1909502): pkg/asset/manifests: remove etcd records from proxy config [#4518](https://github.com/vrutkovs/installer/pull/4518)
* [Bug 1915998](https://bugzilla.redhat.com/show_bug.cgi?id=1915998): Set Additional Control Plane Security Groups on Bootstrap Node [#4551](https://github.com/vrutkovs/installer/pull/4551)
* [Bug 1916271](https://bugzilla.redhat.com/show_bug.cgi?id=1916271): openstack known issues: ControlPlane anti-affinity [#4548](https://github.com/vrutkovs/installer/pull/4548)
* [Bug 1813949](https://bugzilla.redhat.com/show_bug.cgi?id=1813949): ignore local env variables when we create a service client [#4426](https://github.com/vrutkovs/installer/pull/4426)
* [Bug 1916505](https://bugzilla.redhat.com/show_bug.cgi?id=1916505): AWS IPI: Add IPsec master-to-worker flows [#4554](https://github.com/vrutkovs/installer/pull/4554)
* [Bug 1908468](https://bugzilla.redhat.com/show_bug.cgi?id=1908468): azure/validation: some memory values are float and not int [#4530](https://github.com/vrutkovs/installer/pull/4530)
* [Bug 1908583](https://bugzilla.redhat.com/show_bug.cgi?id=1908583): Set same additional networks on Bootstrap as Control Plane [#4528](https://github.com/vrutkovs/installer/pull/4528)
* [Bug 1914439](https://bugzilla.redhat.com/show_bug.cgi?id=1914439): OpenStack Port Create Typo in SRIOV Docs [#4529](https://github.com/vrutkovs/installer/pull/4529)
* [Bug 1909587](https://bugzilla.redhat.com/show_bug.cgi?id=1909587): openstack: Create Control plane nodes sequentially [#4522](https://github.com/vrutkovs/installer/pull/4522)
* [Bug 1910127](https://bugzilla.redhat.com/show_bug.cgi?id=1910127): ovirt: UPI doc improvements [#4498](https://github.com/vrutkovs/installer/pull/4498)
* [Bug 1913151](https://bugzilla.redhat.com/show_bug.cgi?id=1913151): KubeVirt user docs: change role example - add "update" verb to VM [#4521](https://github.com/vrutkovs/installer/pull/4521)
* [Bug 1910070](https://bugzilla.redhat.com/show_bug.cgi?id=1910070): Set termination_grace_period_seconds to 10 minutes [#4511](https://github.com/vrutkovs/installer/pull/4511)
* [Bug 1786314](https://bugzilla.redhat.com/show_bug.cgi?id=1786314): bump gophercloud/utils [#4486](https://github.com/vrutkovs/installer/pull/4486)
* [Bug 1911819](https://bugzilla.redhat.com/show_bug.cgi?id=1911819): Fix docs/user/kubevirt/install-config.yaml to pass ./hack/yaml-lint.sh [#4519](https://github.com/vrutkovs/installer/pull/4519)
* [Bug 1911819](https://bugzilla.redhat.com/show_bug.cgi?id=1911819): Add kubevirt user documentation [#4516](https://github.com/vrutkovs/installer/pull/4516)
* [Bug 1908743](https://bugzilla.redhat.com/show_bug.cgi?id=1908743): Add validation that the KubeMacPool component is enabled for the namespace [#4509](https://github.com/vrutkovs/installer/pull/4509)
* [Bug 1910049](https://bugzilla.redhat.com/show_bug.cgi?id=1910049): Revert "openstack UPI: Use ansible-galaxy" [#4506](https://github.com/vrutkovs/installer/pull/4506)
* [Bug 1882022](https://bugzilla.redhat.com/show_bug.cgi?id=1882022): installconfig: enable vsphere folders for datacenters and clusters. [#4493](https://github.com/vrutkovs/installer/pull/4493)
* [Bug 1908782](https://bugzilla.redhat.com/show_bug.cgi?id=1908782): terraform: Add rules to allow internal IPsec traffic [#4491](https://github.com/vrutkovs/installer/pull/4491)
* [Bug 1908171](https://bugzilla.redhat.com/show_bug.cgi?id=1908171): fix Terraform issue with GCP custom machine types [#4496](https://github.com/vrutkovs/installer/pull/4496)
* [Bug 1907947](https://bugzilla.redhat.com/show_bug.cgi?id=1907947): cloud-creds-secret creation with current context info only [#4484](https://github.com/vrutkovs/installer/pull/4484)
* [Bug 1907628](https://bugzilla.redhat.com/show_bug.cgi?id=1907628): OpenStack Documentation for MachineSets with Multiple Networks [#4463](https://github.com/vrutkovs/installer/pull/4463)
* [Bug 1906517](https://bugzilla.redhat.com/show_bug.cgi?id=1906517): OpenStack: Skip collecting info for empty subnet IDs [#4474](https://github.com/vrutkovs/installer/pull/4474)
* [Bug 1908280](https://bugzilla.redhat.com/show_bug.cgi?id=1908280): update docs for Cinder AZs [#4487](https://github.com/vrutkovs/installer/pull/4487)
* [Bug 1907621](https://bugzilla.redhat.com/show_bug.cgi?id=1907621): Bump cluster-api-provider-kubevirt version [#4479](https://github.com/vrutkovs/installer/pull/4479)
* [Bug 1890228](https://bugzilla.redhat.com/show_bug.cgi?id=1890228): pkg/destroy/aws: Pass destroy if HostedZone does not exist [#4477](https://github.com/vrutkovs/installer/pull/4477)
* [Bug 1906459](https://bugzilla.redhat.com/show_bug.cgi?id=1906459): openstack: fix quota checks when they're unlimited [#4470](https://github.com/vrutkovs/installer/pull/4470)
* Update GCP Customization doc to reflect CMEK additions [#4468](https://github.com/vrutkovs/installer/pull/4468)
* Openstack: describes how to enable qemu agent for UPI. [#4441](https://github.com/vrutkovs/installer/pull/4441)
* oVirt: update team members [#4464](https://github.com/vrutkovs/installer/pull/4464)
* [Bug 1904663](https://bugzilla.redhat.com/show_bug.cgi?id=1904663): Fix comparison in pointer ignition customization asset [#4455](https://github.com/vrutkovs/installer/pull/4455)
* openstack: Test Nova AZ manifest generation [#4459](https://github.com/vrutkovs/installer/pull/4459)
* do not generate the cloud cred secret when credentialsMode is Manual [#4416](https://github.com/vrutkovs/installer/pull/4416)
* update gophercloud/utils & terraform/provider-openstack [#4457](https://github.com/vrutkovs/installer/pull/4457)
* hack/verify-vendor.sh: Fail early if error [#4421](https://github.com/vrutkovs/installer/pull/4421)
* [Bug 1899175](https://bugzilla.redhat.com/show_bug.cgi?id=1899175): data/rhcos.json: Update boot images for RHEL 8.3 [#4414](https://github.com/vrutkovs/installer/pull/4414)
* Openstack primary subnet using machine spec [#4346](https://github.com/vrutkovs/installer/pull/4346)
* Deprecate computeFlavor in OpenStack platform [#4321](https://github.com/vrutkovs/installer/pull/4321)
* openstack: Test manifest creation [#4431](https://github.com/vrutkovs/installer/pull/4431)
* openstack: Allow to skip pre-flight validations [#4452](https://github.com/vrutkovs/installer/pull/4452)
* [Bug 1900138](https://bugzilla.redhat.com/show_bug.cgi?id=1900138): Removed support for insecure mode for oVirt/RHV installation [#4404](https://github.com/vrutkovs/installer/pull/4404)
* openstack: check quotas before creating cluster [#4432](https://github.com/vrutkovs/installer/pull/4432)
* OpenStack: Adds clusterOSImageProperties to install-config.yaml [#4401](https://github.com/vrutkovs/installer/pull/4401)
* [Bug 1904125](https://bugzilla.redhat.com/show_bug.cgi?id=1904125): Ensure the bootstrap ignition libvirt pool defaults to <clustername>.<id>.bootstrap rather than 'default' [#4448](https://github.com/vrutkovs/installer/pull/4448)
* [Bug 1868748](https://bugzilla.redhat.com/show_bug.cgi?id=1868748): baremetal: rename JSON field for ClusterProvisioningIP [#4053](https://github.com/vrutkovs/installer/pull/4053)
* Add KubeVirt platform as infrastructure for Openshift installation [#4350](https://github.com/vrutkovs/installer/pull/4350)
* cloudproviderconfig: Refactor openstack [#4447](https://github.com/vrutkovs/installer/pull/4447)
* Pass CLUSTER_PROFILE env var to CVO render [#4444](https://github.com/vrutkovs/installer/pull/4444)
* vSphere Destroy: add log messages for tag destruction [#4407](https://github.com/vrutkovs/installer/pull/4407)
* baremetal: send full ignition to masters [#4427](https://github.com/vrutkovs/installer/pull/4427)
* asset/installconfig/Azure: Validate install-config instance types [#4419](https://github.com/vrutkovs/installer/pull/4419)
* Update MCO doc references [#4445](https://github.com/vrutkovs/installer/pull/4445)
* baremetal: Add ironic logwatch containers [#4437](https://github.com/vrutkovs/installer/pull/4437)
* Create SR-IOV UPI Docs [#4439](https://github.com/vrutkovs/installer/pull/4439)
* docs: update docs/design/resource_dep.svg [#4443](https://github.com/vrutkovs/installer/pull/4443)
* [Bug 1903277](https://bugzilla.redhat.com/show_bug.cgi?id=1903277): destroy/aws: remove rules from default security group [#4440](https://github.com/vrutkovs/installer/pull/4440)
* Set default release image to 4.7 [#4409](https://github.com/vrutkovs/installer/pull/4409)
* baremetal: make cluster provisioning IP optional [#4429](https://github.com/vrutkovs/installer/pull/4429)
* pkg/asset/quota: Typo in warning message presented to user [#4430](https://github.com/vrutkovs/installer/pull/4430)
* Create a machineconfig for IPI pointer ignition customizations [#4413](https://github.com/vrutkovs/installer/pull/4413)
* vSphere Docs: Update to include Permissions [#4393](https://github.com/vrutkovs/installer/pull/4393)
* [OSASINFRA-902](https://issues.redhat.com/browse/OSASINFRA-902): Update OpenStack Custom External LB and DNS Docs [#4389](https://github.com/vrutkovs/installer/pull/4389)
* baremetal: correct the cacheImageURL when we don't have a provisioningIP [#4408](https://github.com/vrutkovs/installer/pull/4408)
* [Bug 1895874](https://bugzilla.redhat.com/show_bug.cgi?id=1895874): Use oVirt Engine certificate verified by the user for installation [#4387](https://github.com/vrutkovs/installer/pull/4387)
* [Bug 1899853](https://bugzilla.redhat.com/show_bug.cgi?id=1899853): openstack: CP nodes port to use addtional SGs [#4411](https://github.com/vrutkovs/installer/pull/4411)
* baremetal: Handle xz filenames for OKD [#4392](https://github.com/vrutkovs/installer/pull/4392)
* Support user provided service-account-signing-key and issuer [#4373](https://github.com/vrutkovs/installer/pull/4373)
* pkg: validation for previously existing ovirt configuration [#4354](https://github.com/vrutkovs/installer/pull/4354)
* [Bug 1898194](https://bugzilla.redhat.com/show_bug.cgi?id=1898194): installconfig/gcp/validation: handle custom machine types [#4386](https://github.com/vrutkovs/installer/pull/4386)
* baremetal: when networking is disabled make the bootstrap provisioning ip optional [#4390](https://github.com/vrutkovs/installer/pull/4390)
* [Bug 1898238](https://bugzilla.redhat.com/show_bug.cgi?id=1898238): Validate the the API and Ingress FIPs are not the same [#4385](https://github.com/vrutkovs/installer/pull/4385)
* [Bug 1848945](https://bugzilla.redhat.com/show_bug.cgi?id=1848945): OpenStack - Documentation for adding worker nodes using ansible [#4205](https://github.com/vrutkovs/installer/pull/4205)
* [Bug 1813012](https://bugzilla.redhat.com/show_bug.cgi?id=1813012): Remove unused etcd discovery domain [#4067](https://github.com/vrutkovs/installer/pull/4067)
* [Bug 1894432](https://bugzilla.redhat.com/show_bug.cgi?id=1894432): oVirt, add timeout to tmp_import_vm [#4341](https://github.com/vrutkovs/installer/pull/4341)
* baremetal: validate that macs are EUI-48 and unicast [#4378](https://github.com/vrutkovs/installer/pull/4378)
* [Bug 1855351](https://bugzilla.redhat.com/show_bug.cgi?id=1855351): standardize interrupt error messages [#4360](https://github.com/vrutkovs/installer/pull/4360)
* Stop validating DefaultMachinePlatform [#4391](https://github.com/vrutkovs/installer/pull/4391)
* [Bug 1889779](https://bugzilla.redhat.com/show_bug.cgi?id=1889779): vSphere destroy: handle failed clusters [#4388](https://github.com/vrutkovs/installer/pull/4388)
* openstack UPI: Use ansible-galaxy [#4379](https://github.com/vrutkovs/installer/pull/4379)
* Updating ose-baremetal-installer builder & base images to be consistent with ART [#4370](https://github.com/vrutkovs/installer/pull/4370)
* Correcting normal typos [#4363](https://github.com/vrutkovs/installer/pull/4363)
* [Bug 1891543](https://bugzilla.redhat.com/show_bug.cgi?id=1891543): openstack: remove platform flavor validation [#4383](https://github.com/vrutkovs/installer/pull/4383)
* baremetal: remove root_gb from tfvars [#4319](https://github.com/vrutkovs/installer/pull/4319)
* Cleanup: make conversion functions private [#4376](https://github.com/vrutkovs/installer/pull/4376)
* [Bug 1888464](https://bugzilla.redhat.com/show_bug.cgi?id=1888464): add tag:UnTagResource perm for aws shared networks [#4371](https://github.com/vrutkovs/installer/pull/4371)
* Remove the secrets directory recursively [#4369](https://github.com/vrutkovs/installer/pull/4369)
* doc/openstack: update quota reqs for kuryr [#4362](https://github.com/vrutkovs/installer/pull/4362)
* Fix 'troubleshooting' typo [#4365](https://github.com/vrutkovs/installer/pull/4365)
* libvirt: Bump bootstrap size (primarily for OKD) [#4364](https://github.com/vrutkovs/installer/pull/4364)
* data/data/aws/route53: use CNAME for us-iso-east-1 region [#4367](https://github.com/vrutkovs/installer/pull/4367)
* [Bug 1886435](https://bugzilla.redhat.com/show_bug.cgi?id=1886435): Fix azure UPI az group deployment deprecation [#4366](https://github.com/vrutkovs/installer/pull/4366)
* asset/installconfig/gcp: Validate install-config instance types [#4329](https://github.com/vrutkovs/installer/pull/4329)
* Use 'kubernetes.io/tls' instead of SecretTypeTLS which is not being substituted [#4342](https://github.com/vrutkovs/installer/pull/4342)
* aws: support custom trust bundle for c2s regions [#4335](https://github.com/vrutkovs/installer/pull/4335)
* pkg/asset/cluster/aws: switch to ec2 tagging API [#4356](https://github.com/vrutkovs/installer/pull/4356)
* [Bug 1867165](https://bugzilla.redhat.com/show_bug.cgi?id=1867165): baremetal: allow configuring bootstrap mac addresses [#4052](https://github.com/vrutkovs/installer/pull/4052)
* doc/openstack/UPI: improvements [#4355](https://github.com/vrutkovs/installer/pull/4355)
* Small corrections in ovirt/install_ipi.md [#4353](https://github.com/vrutkovs/installer/pull/4353)
* data/bootstrap/files/usr/local/bin/installer-gather: Tee logs into tarball [#4345](https://github.com/vrutkovs/installer/pull/4345)
* data/manifests/bootkube/cvo-overrides: Bump default to stable-4.7 [#4347](https://github.com/vrutkovs/installer/pull/4347)
* owners: Add mdbooth to openstack-approvers [#4348](https://github.com/vrutkovs/installer/pull/4348)
* owners: add dhellmann to baremetal-approvers/reviewers [#4343](https://github.com/vrutkovs/installer/pull/4343)
* data/manifests/bootkube/cvo-overrides: Drop the explicit upstream [#4112](https://github.com/vrutkovs/installer/pull/4112)
* [Bug 1891543](https://bugzilla.redhat.com/show_bug.cgi?id=1891543): openstack: consider volumes for storage requirements checks [#4323](https://github.com/vrutkovs/installer/pull/4323)
* Document how to deploy cluster with BM and VM workers [#4336](https://github.com/vrutkovs/installer/pull/4336)
* Wrap errors after OpenStack creds validation [#4338](https://github.com/vrutkovs/installer/pull/4338)
* [Bug 1855351](https://bugzilla.redhat.com/show_bug.cgi?id=1855351): Handle CTRL+C in GCP survey [#4334](https://github.com/vrutkovs/installer/pull/4334)
* [Bug 1894144](https://bugzilla.redhat.com/show_bug.cgi?id=1894144): baremetal: pin libvirt to 4.5.0 [#4339](https://github.com/vrutkovs/installer/pull/4339)
* cmd/openshift-install/create: Use library-go's IngressURI helper [#4245](https://github.com/vrutkovs/installer/pull/4245)
* [Bug 1888378](https://bugzilla.redhat.com/show_bug.cgi?id=1888378): Ignore error if resource group already deleted [#4325](https://github.com/vrutkovs/installer/pull/4325)
* [Bug 1887863](https://bugzilla.redhat.com/show_bug.cgi?id=1887863): Patch Flavor Not Found validation for OpenStack Install Config [#4289](https://github.com/vrutkovs/installer/pull/4289)
* Use authentication for Ironic on baremetal bootstrap host [#4256](https://github.com/vrutkovs/installer/pull/4256)
* [Bug 1841381](https://bugzilla.redhat.com/show_bug.cgi?id=1841381): oVirt, add memoryMB validation [#4309](https://github.com/vrutkovs/installer/pull/4309)
* [Bug 1878374](https://bugzilla.redhat.com/show_bug.cgi?id=1878374): Adding more nitro and the AMD instance types (AWS, UPI) [#4327](https://github.com/vrutkovs/installer/pull/4327)
* [Bug 1866925](https://bugzilla.redhat.com/show_bug.cgi?id=1866925): display Azure destroy auth error [#4331](https://github.com/vrutkovs/installer/pull/4331)
* openstack: fixup markdown [#4328](https://github.com/vrutkovs/installer/pull/4328)
* Revert "[Azure][Destroy] Check if resource group exists" [#4322](https://github.com/vrutkovs/installer/pull/4322)
* Add Encryption Key reference to GCP MachinePool API [#4318](https://github.com/vrutkovs/installer/pull/4318)
* aws: block cluster destroy in c2s region [#4316](https://github.com/vrutkovs/installer/pull/4316)
* aws: ensure users set ami id for c2s regions [#4315](https://github.com/vrutkovs/installer/pull/4315)
* [Bug 1891702](https://bugzilla.redhat.com/show_bug.cgi?id=1891702): pkg/asset/ignition/bootstrap: exit loop if pem.Decode() fails [#4317](https://github.com/vrutkovs/installer/pull/4317)
* [Bug 1888378](https://bugzilla.redhat.com/show_bug.cgi?id=1888378): [Azure][Destroy] Check if resource group exists [#4320](https://github.com/vrutkovs/installer/pull/4320)
* oVirt: change owners [#4311](https://github.com/vrutkovs/installer/pull/4311)
* Code cleanup and optimizations [#4272](https://github.com/vrutkovs/installer/pull/4272)
* [Bug 1889267](https://bugzilla.redhat.com/show_bug.cgi?id=1889267): oVirt, increase terraform template and release image timeout to 20m [#4285](https://github.com/vrutkovs/installer/pull/4285)
* install-approvers: add staebler [#4297](https://github.com/vrutkovs/installer/pull/4297)
* [Bug 1880443](https://bugzilla.redhat.com/show_bug.cgi?id=1880443): allow providing client options when generating OpenStack MachineSets [#4196](https://github.com/vrutkovs/installer/pull/4196)
* openstack: Update CI base image [#4291](https://github.com/vrutkovs/installer/pull/4291)
* pkg/asset/installconfig/aws: Validate install-config instance type [#4258](https://github.com/vrutkovs/installer/pull/4258)
* go.mod Update [#4294](https://github.com/vrutkovs/installer/pull/4294)
* [Bug 1836017](https://bugzilla.redhat.com/show_bug.cgi?id=1836017): Configure haproxy to check /readyz [#4012](https://github.com/vrutkovs/installer/pull/4012)
* [Bug 1870728](https://bugzilla.redhat.com/show_bug.cgi?id=1870728): pkg/asset/ignition/bootstrap: Display warning if certificates are expired [#4287](https://github.com/vrutkovs/installer/pull/4287)
* [Bug 1889852](https://bugzilla.redhat.com/show_bug.cgi?id=1889852): add new AWS regions [#4288](https://github.com/vrutkovs/installer/pull/4288)
* [Bug 1877116](https://bugzilla.redhat.com/show_bug.cgi?id=1877116): aws: use file for bootstrap ign when uploading to s3 [#4281](https://github.com/vrutkovs/installer/pull/4281)
* [Bug 1886553](https://bugzilla.redhat.com/show_bug.cgi?id=1886553): GCP - Increase worker NAT min ports [#4273](https://github.com/vrutkovs/installer/pull/4273)
* cmd: split newlines in logrus stderr output to new entry [#4282](https://github.com/vrutkovs/installer/pull/4282)
* openstack: Add a new team member [#4290](https://github.com/vrutkovs/installer/pull/4290)
* [Bug 1882649](https://bugzilla.redhat.com/show_bug.cgi?id=1882649): Determine Glance disk format based on file extension [#4279](https://github.com/vrutkovs/installer/pull/4279)
* vSphere: Update dockerfile removing certificate [#4274](https://github.com/vrutkovs/installer/pull/4274)
* Update README.md - Broken Link - Spelling [#4278](https://github.com/vrutkovs/installer/pull/4278)
* OpenStack: remove legacy image validation [#4277](https://github.com/vrutkovs/installer/pull/4277)
* [Bug 1882844](https://bugzilla.redhat.com/show_bug.cgi?id=1882844): vsphere destroy: delete tag category created by installer [#4265](https://github.com/vrutkovs/installer/pull/4265)
* [Bug 1878900](https://bugzilla.redhat.com/show_bug.cgi?id=1878900): openstack: Fix error messages in flavor validation [#4269](https://github.com/vrutkovs/installer/pull/4269)
* OpenStack UPI: Custom API and Ingress vip addresses [#4092](https://github.com/vrutkovs/installer/pull/4092)
* [Bug 1888671](https://bugzilla.redhat.com/show_bug.cgi?id=1888671): openstack: Document Cinder's ignore-volume-az [#4271](https://github.com/vrutkovs/installer/pull/4271)
* Bump K8s.io version to v0.19.0 [#4266](https://github.com/vrutkovs/installer/pull/4266)
* destroy: return aws resources that could not be deleted [#4270](https://github.com/vrutkovs/installer/pull/4270)
* install-complete: provide troubleshooting info when operators fail [#4259](https://github.com/vrutkovs/installer/pull/4259)
* OpenStack: add clusterOSImage validations [#3964](https://github.com/vrutkovs/installer/pull/3964)
* [Bug 1887525](https://bugzilla.redhat.com/show_bug.cgi?id=1887525): baremetal: Wait for master-bmh-update script to succeed [#4262](https://github.com/vrutkovs/installer/pull/4262)
* openstack: Bump Ansible to 2.9 in UPI [#4261](https://github.com/vrutkovs/installer/pull/4261)
* [Bug 1874248](https://bugzilla.redhat.com/show_bug.cgi?id=1874248): types/vsphere/validation: ensure vcenter is all lower case [#4254](https://github.com/vrutkovs/installer/pull/4254)
* [Bug 1884691](https://bugzilla.redhat.com/show_bug.cgi?id=1884691): types: allow manual cred mode for gcp and azure [#4238](https://github.com/vrutkovs/installer/pull/4238)
* Updating ose-installer builder & base images to be consistent with ART [#4250](https://github.com/vrutkovs/installer/pull/4250)
* Remove dead code [#4252](https://github.com/vrutkovs/installer/pull/4252)
* Updating ose-installer-artifacts builder & base images to be consistent with ART [#4251](https://github.com/vrutkovs/installer/pull/4251)
* openstack privileges documented [#4214](https://github.com/vrutkovs/installer/pull/4214)
* OpenStack: Rename lbFloatingIP to apiFloatingIP [#4244](https://github.com/vrutkovs/installer/pull/4244)
* [Bug 1882191](https://bugzilla.redhat.com/show_bug.cgi?id=1882191): Add GODEBUG=x509ignoreCN=0 to systemd DefaultEnvironment [#4248](https://github.com/vrutkovs/installer/pull/4248)
* [Bug 1884435](https://bugzilla.redhat.com/show_bug.cgi?id=1884435): vsphere - add delay if resolv.conf is not available; wait for dhcp [#4237](https://github.com/vrutkovs/installer/pull/4237)
* [Bug 1777224](https://bugzilla.redhat.com/show_bug.cgi?id=1777224): pkg/asset: metadata to depend on ignition [#4223](https://github.com/vrutkovs/installer/pull/4223)
* Bump RHCOS images for Ignition entropy fix [#4241](https://github.com/vrutkovs/installer/pull/4241)
* [Bug 1859174](https://bugzilla.redhat.com/show_bug.cgi?id=1859174): Upgrade Terraform provider OpenStack [#4216](https://github.com/vrutkovs/installer/pull/4216)
* Fix json tag for GCP auth service account [#4166](https://github.com/vrutkovs/installer/pull/4166)
* installer/pkg/quota/gcp/limits.go: fix minor typo in comment [#4160](https://github.com/vrutkovs/installer/pull/4160)
* IP address should be specified without underscore. [#3204](https://github.com/vrutkovs/installer/pull/3204)
* Docs: OpenStack: Remove mention of cluster failing to destroy [#4208](https://github.com/vrutkovs/installer/pull/4208)
* [Bug 1876815](https://bugzilla.redhat.com/show_bug.cgi?id=1876815): OpenStack: unset OS_CLOUD [#4231](https://github.com/vrutkovs/installer/pull/4231)
* [Bug 1884558](https://bugzilla.redhat.com/show_bug.cgi?id=1884558): do not use local cacert path in generated clouds.yaml [#4227](https://github.com/vrutkovs/installer/pull/4227)
* [Bug 1878758](https://bugzilla.redhat.com/show_bug.cgi?id=1878758): openstack UPI: Allow for no FIP or router [#4219](https://github.com/vrutkovs/installer/pull/4219)
* [Bug 1876844](https://bugzilla.redhat.com/show_bug.cgi?id=1876844): openstack UPI: Ignition token needs Glance access [#4236](https://github.com/vrutkovs/installer/pull/4236)
* [Bug 1881703](https://bugzilla.redhat.com/show_bug.cgi?id=1881703): Revert "Have the MCO manage the ignition stub config" [#4228](https://github.com/vrutkovs/installer/pull/4228)
* [Bug 1882752](https://bugzilla.redhat.com/show_bug.cgi?id=1882752): openstack BM: Remove MachineSet on separate subnet [#4230](https://github.com/vrutkovs/installer/pull/4230)
* [Bug 1878900](https://bugzilla.redhat.com/show_bug.cgi?id=1878900): openstack: Skip validation for baremetal flavors [#4222](https://github.com/vrutkovs/installer/pull/4222)
* [Bug 1881532](https://bugzilla.redhat.com/show_bug.cgi?id=1881532): openstack: Only list external networks in prompt [#4226](https://github.com/vrutkovs/installer/pull/4226)
* [Bug 1882805](https://bugzilla.redhat.com/show_bug.cgi?id=1882805): Bump bootimages for ppc64le and s390x to 46.82.202009240941-0 and 46.82.202009241338-0 [#4215](https://github.com/vrutkovs/installer/pull/4215)
* [Bug 1881757](https://bugzilla.redhat.com/show_bug.cgi?id=1881757): tls: set mcs cert common name to not-valid-hostname [#4210](https://github.com/vrutkovs/installer/pull/4210)
* [Bug 1882810](https://bugzilla.redhat.com/show_bug.cgi?id=1882810): vsphere - local dns prepender not named with template [#4220](https://github.com/vrutkovs/installer/pull/4220)
* [Bug 1853418](https://bugzilla.redhat.com/show_bug.cgi?id=1853418): Ignore trailing dots in baseDomain [#4146](https://github.com/vrutkovs/installer/pull/4146)
* [Bug 1881487](https://bugzilla.redhat.com/show_bug.cgi?id=1881487): data/rhcos.json: Update to 46.82.202009220041-0 [#4206](https://github.com/vrutkovs/installer/pull/4206)
* [Bug 1877984](https://bugzilla.redhat.com/show_bug.cgi?id=1877984): Fix "OpenShiftSDN" to proper case when generating network config [#4207](https://github.com/vrutkovs/installer/pull/4207)
* [Bug 1879533](https://bugzilla.redhat.com/show_bug.cgi?id=1879533): oVirt UPI - Better explanation of the inventory [#4180](https://github.com/vrutkovs/installer/pull/4180)
* [Bug 1878789](https://bugzilla.redhat.com/show_bug.cgi?id=1878789): Add note about ignition certificates expiration [#4171](https://github.com/vrutkovs/installer/pull/4171)
* [Bug 1877854](https://bugzilla.redhat.com/show_bug.cgi?id=1877854): OpenStack: Support multiple subnets [#4093](https://github.com/vrutkovs/installer/pull/4093)
* [Bug 1879649](https://bugzilla.redhat.com/show_bug.cgi?id=1879649): oVirt UPI - Simplify create templates [#4182](https://github.com/vrutkovs/installer/pull/4182)
* [Bug 1880393](https://bugzilla.redhat.com/show_bug.cgi?id=1880393): OpenStack UPI: Explain how to encode cert to base64 [#4203](https://github.com/vrutkovs/installer/pull/4203)
* [Bug 1880393](https://bugzilla.redhat.com/show_bug.cgi?id=1880393): OpenStack UPI: Trim EOLs from the cacert trustbundle [#4201](https://github.com/vrutkovs/installer/pull/4201)
* [Bug 1878163](https://bugzilla.redhat.com/show_bug.cgi?id=1878163): Updating images/baremetal/Dockerfile.ci baseimages to mach ocp-build-data config [#4186](https://github.com/vrutkovs/installer/pull/4186)
* [Bug 1879891](https://bugzilla.redhat.com/show_bug.cgi?id=1879891): Fix cluster destroy when fip less installation happened [#4191](https://github.com/vrutkovs/installer/pull/4191)
* [Bug 1878163](https://bugzilla.redhat.com/show_bug.cgi?id=1878163): Updating images/installer/Dockerfile.ci baseimages to mach ocp-build-data config [#4185](https://github.com/vrutkovs/installer/pull/4185)
* [Bug 1878163](https://bugzilla.redhat.com/show_bug.cgi?id=1878163): Updating images/installer-artifacts/Dockerfile.rhel baseimages to mach ocp-build-data config [#4184](https://github.com/vrutkovs/installer/pull/4184)
* [Bug 1876815](https://bugzilla.redhat.com/show_bug.cgi?id=1876815): unset OS_CLOUD during config generator [#4177](https://github.com/vrutkovs/installer/pull/4177)
* [Bug 1878108](https://bugzilla.redhat.com/show_bug.cgi?id=1878108): asset/quota/gcp: use GCP api to find CPU count for constraint and guess only on failure [#4163](https://github.com/vrutkovs/installer/pull/4163)
* [Bug 1877486](https://bugzilla.redhat.com/show_bug.cgi?id=1877486): proxy: allow * for noProxy [#4172](https://github.com/vrutkovs/installer/pull/4172)
* [Bug 1880132](https://bugzilla.redhat.com/show_bug.cgi?id=1880132): destroy/gcp: correct extract service account email from IAM policy binding member [#4193](https://github.com/vrutkovs/installer/pull/4193)
* [Bug 1861917](https://bugzilla.redhat.com/show_bug.cgi?id=1861917): Add cpc config to bootstrap [#4178](https://github.com/vrutkovs/installer/pull/4178)
* install: increase timeout to 40 minutes [#4181](https://github.com/vrutkovs/installer/pull/4181)
* [Bug 1879081](https://bugzilla.redhat.com/show_bug.cgi?id=1879081): OpenStack: Switch to train/centos8 repos [#4175](https://github.com/vrutkovs/installer/pull/4175)
* [Bug 1877885](https://bugzilla.redhat.com/show_bug.cgi?id=1877885): oVirt UPI - Add Ansible playbooks download [#4169](https://github.com/vrutkovs/installer/pull/4169)
* [Bug 1878758](https://bugzilla.redhat.com/show_bug.cgi?id=1878758): openstack UPI: Optional floating IPs [#3755](https://github.com/vrutkovs/installer/pull/3755)
* [Bug 1877763](https://bugzilla.redhat.com/show_bug.cgi?id=1877763): oVirt UPI - python code snippets without semicolons [#4170](https://github.com/vrutkovs/installer/pull/4170)
* [Bug 1874747](https://bugzilla.redhat.com/show_bug.cgi?id=1874747): ovirt: dont start the temp VM before template creation [#4168](https://github.com/vrutkovs/installer/pull/4168)
* [Bug 1878243](https://bugzilla.redhat.com/show_bug.cgi?id=1878243): openstack: Upgrade the CI build image [#4161](https://github.com/vrutkovs/installer/pull/4161)
* [Bug 1877440](https://bugzilla.redhat.com/show_bug.cgi?id=1877440): oVirt UPI Assets_dir set according to env var [#4153](https://github.com/vrutkovs/installer/pull/4153)
* [Bug 1874457](https://bugzilla.redhat.com/show_bug.cgi?id=1874457): Add support to clean custom router [#4159](https://github.com/vrutkovs/installer/pull/4159)
* [Bug 1877676](https://bugzilla.redhat.com/show_bug.cgi?id=1877676): OpenStack: Refresh documentation about ingress FIP [#4059](https://github.com/vrutkovs/installer/pull/4059)
* [Bug 1877436](https://bugzilla.redhat.com/show_bug.cgi?id=1877436): oVirt UPI RHCOS explanations, assets env var [#4152](https://github.com/vrutkovs/installer/pull/4152)
* [Bug 1877862](https://bugzilla.redhat.com/show_bug.cgi?id=1877862): oVirt UPI - Fix templates check and optimize image check [#4157](https://github.com/vrutkovs/installer/pull/4157)
* [Bug 1877741](https://bugzilla.redhat.com/show_bug.cgi?id=1877741): installer-masters-gather.sh: gather openshift-{azure,gcp}-routes logs [#4148](https://github.com/vrutkovs/installer/pull/4148)
* [Bug 1873125](https://bugzilla.redhat.com/show_bug.cgi?id=1873125): Fix python syntax for OpenStack UPI scripts [#4154](https://github.com/vrutkovs/installer/pull/4154)
* [Bug 1870038](https://bugzilla.redhat.com/show_bug.cgi?id=1870038): vmware upi: haproxy.service to rm haproxy pod on ExecStop [#4132](https://github.com/vrutkovs/installer/pull/4132)
* [Bug 1866925](https://bugzilla.redhat.com/show_bug.cgi?id=1866925): pkg/destroy/azure: fail fast if unable to list resources for any reason [#4025](https://github.com/vrutkovs/installer/pull/4025)
* [Bug 1873125](https://bugzilla.redhat.com/show_bug.cgi?id=1873125): OpenStack:  UPI missing instructions to update apiVIP and ingressVIP [#4133](https://github.com/vrutkovs/installer/pull/4133)
* [Bug 1875855](https://bugzilla.redhat.com/show_bug.cgi?id=1875855): increase timeout for bootstrap ignition downloading [#4145](https://github.com/vrutkovs/installer/pull/4145)
* [Bug 1856928](https://bugzilla.redhat.com/show_bug.cgi?id=1856928): Fix Non yaml files in manifests/ or openshift/ directories preventing bootstrap from completing [#4091](https://github.com/vrutkovs/installer/pull/4091)
* [Bug 1876825](https://bugzilla.redhat.com/show_bug.cgi?id=1876825): generate lbFloatingIP in OpenStack config [#4147](https://github.com/vrutkovs/installer/pull/4147)
* [Bug 1876792](https://bugzilla.redhat.com/show_bug.cgi?id=1876792): oVirt UPI Move Network Requirements section [#4142](https://github.com/vrutkovs/installer/pull/4142)
* [Bug 1876783](https://bugzilla.redhat.com/show_bug.cgi?id=1876783): oVirt UPI fix python cmd [#4141](https://github.com/vrutkovs/installer/pull/4141)
* [Bug 1876562](https://bugzilla.redhat.com/show_bug.cgi?id=1876562): Small readability improvements to UPI on RHV documentation [#4136](https://github.com/vrutkovs/installer/pull/4136)
* [Bug 1871653](https://bugzilla.redhat.com/show_bug.cgi?id=1871653): baremetal: set root device hints on host resources [#4088](https://github.com/vrutkovs/installer/pull/4088)
* [Bug 1875932](https://bugzilla.redhat.com/show_bug.cgi?id=1875932): Update baremetal DNS design details [#4101](https://github.com/vrutkovs/installer/pull/4101)
* [Bug 1868439](https://bugzilla.redhat.com/show_bug.cgi?id=1868439): openstack UPI: Fix JSON syntax [#4140](https://github.com/vrutkovs/installer/pull/4140)
* [Bug 1874656](https://bugzilla.redhat.com/show_bug.cgi?id=1874656): Bump RHCOS for s390x/ppc64le to fix SSH authentication [#4124](https://github.com/vrutkovs/installer/pull/4124)
* [Bug 1861917](https://bugzilla.redhat.com/show_bug.cgi?id=1861917): bootkube: add image for cluster-policy-controller [#4131](https://github.com/vrutkovs/installer/pull/4131)
* [Bug 1871712](https://bugzilla.redhat.com/show_bug.cgi?id=1871712): pkg/destroy/aws: Detach attached policies during destroy [#4126](https://github.com/vrutkovs/installer/pull/4126)
* [Bug 1867975](https://bugzilla.redhat.com/show_bug.cgi?id=1867975): aws: ensure users set ami id for us-gov and cn regions [#4103](https://github.com/vrutkovs/installer/pull/4103)
* [Bug 1868439](https://bugzilla.redhat.com/show_bug.cgi?id=1868439): openstack UPI: Fix Ingition key error [#4135](https://github.com/vrutkovs/installer/pull/4135)
* [Bug 1872080](https://bugzilla.redhat.com/show_bug.cgi?id=1872080): Updating images/baremetal/Dockerfile.ci baseimages to mach ocp-build-data config [#4086](https://github.com/vrutkovs/installer/pull/4086)
* [Bug 1872080](https://bugzilla.redhat.com/show_bug.cgi?id=1872080): Updating images/installer-artifacts/Dockerfile.rhel baseimages to mach ocp-build-data config [#4085](https://github.com/vrutkovs/installer/pull/4085)
* [Bug 1872080](https://bugzilla.redhat.com/show_bug.cgi?id=1872080): Updating images/installer/Dockerfile.ci baseimages to mach ocp-build-data config [#4087](https://github.com/vrutkovs/installer/pull/4087)
* BUG 1872646: oVirt, remove tmp VM disk on destroy [#4129](https://github.com/vrutkovs/installer/pull/4129)
* hack/update-rhcos-bootimage: update usage example [#4097](https://github.com/vrutkovs/installer/pull/4097)
* [Bug 1813012](https://bugzilla.redhat.com/show_bug.cgi?id=1813012): Remove unused flags previously needed for etcd static pod [#4063](https://github.com/vrutkovs/installer/pull/4063)
* [Bug 1842071](https://bugzilla.redhat.com/show_bug.cgi?id=1842071): Add ppc64le and s390x documentation links [#4115](https://github.com/vrutkovs/installer/pull/4115)
* [Bug 1873448](https://bugzilla.redhat.com/show_bug.cgi?id=1873448): Ensure proper tagging of compute nodes ports [#4118](https://github.com/vrutkovs/installer/pull/4118)
* [Bug 1872861](https://bugzilla.redhat.com/show_bug.cgi?id=1872861): Update cli container image for UPI [#4098](https://github.com/vrutkovs/installer/pull/4098)
* [Bug 1873712](https://bugzilla.redhat.com/show_bug.cgi?id=1873712): Add information about AZs limitations with Kuryr [#4109](https://github.com/vrutkovs/installer/pull/4109)
* [Bug 1871795](https://bugzilla.redhat.com/show_bug.cgi?id=1871795): bump RHCOS images to fix SSH authentication [#4095](https://github.com/vrutkovs/installer/pull/4095)
* [Bug 1873123](https://bugzilla.redhat.com/show_bug.cgi?id=1873123): omit deprecated parameters during config generation [#4100](https://github.com/vrutkovs/installer/pull/4100)
* [Bug 1813012](https://bugzilla.redhat.com/show_bug.cgi?id=1813012): Remove unused etcd host service and endpoints [#4068](https://github.com/vrutkovs/installer/pull/4068)
* [Bug 1871030](https://bugzilla.redhat.com/show_bug.cgi?id=1871030): data/data/gcp: be pedantic about setting the region [#4089](https://github.com/vrutkovs/installer/pull/4089)
* [Bug 1856270](https://bugzilla.redhat.com/show_bug.cgi?id=1856270): Update known issues with info about provisioning state node bug [#4083](https://github.com/vrutkovs/installer/pull/4083)
* [Bug 1870082](https://bugzilla.redhat.com/show_bug.cgi?id=1870082): Use index in MachineSet names for Openstack IPI [#4070](https://github.com/vrutkovs/installer/pull/4070)
* [Bug 1813012](https://bugzilla.redhat.com/show_bug.cgi?id=1813012): Remove legacy code for unmanaged cluster-etcd-operator [#4062](https://github.com/vrutkovs/installer/pull/4062)
* [Bug 1863026](https://bugzilla.redhat.com/show_bug.cgi?id=1863026): docs/user/azure: remove newlines from base64 encoding in UPI install doc [#4090](https://github.com/vrutkovs/installer/pull/4090)
* [Bug 1871048](https://bugzilla.redhat.com/show_bug.cgi?id=1871048): OpenStack: dynamically set end of DHCP allocation pool [#4077](https://github.com/vrutkovs/installer/pull/4077)
* [Bug 1868773](https://bugzilla.redhat.com/show_bug.cgi?id=1868773): Libvirt: Bump bootstrap memory to 4G [#4080](https://github.com/vrutkovs/installer/pull/4080)
* [Bug 1862209](https://bugzilla.redhat.com/show_bug.cgi?id=1862209): aws: fix validation for user tags [#4081](https://github.com/vrutkovs/installer/pull/4081)
* [Bug 1871124](https://bugzilla.redhat.com/show_bug.cgi?id=1871124): OpenStack: Improve snippet for playbooks download [#4079](https://github.com/vrutkovs/installer/pull/4079)
* [Bug 1871124](https://bugzilla.redhat.com/show_bug.cgi?id=1871124): openstack UPI: Provide a way to get the playbooks [#4078](https://github.com/vrutkovs/installer/pull/4078)
* [Bug 1866534](https://bugzilla.redhat.com/show_bug.cgi?id=1866534): fixes bootstrap DNS failure on bare metal [#4015](https://github.com/vrutkovs/installer/pull/4015)
* [Bug 1862957](https://bugzilla.redhat.com/show_bug.cgi?id=1862957): bump RHCOS images for FIPS fix [#4066](https://github.com/vrutkovs/installer/pull/4066)
* [Bug 1870592](https://bugzilla.redhat.com/show_bug.cgi?id=1870592): openstack: Document MachineSet availabilityZone [#4074](https://github.com/vrutkovs/installer/pull/4074)
* Readme.md: Remove experimental tag for OpenStack UPI [#3982](https://github.com/vrutkovs/installer/pull/3982)
* [Bug 1866693](https://bugzilla.redhat.com/show_bug.cgi?id=1866693): docs: drop kernel-devel from supported extensions [#4030](https://github.com/vrutkovs/installer/pull/4030)
* [Bug 1864092](https://bugzilla.redhat.com/show_bug.cgi?id=1864092): baremetal: copy the implementation of rootdevicehints from baremetal-operator [#4002](https://github.com/vrutkovs/installer/pull/4002)
* [Bug 1862290](https://bugzilla.redhat.com/show_bug.cgi?id=1862290): vendor/terraform-provider-vsphere: DiskPostCloneOperation patch carry [#4060](https://github.com/vrutkovs/installer/pull/4060)
* [Bug 1868439](https://bugzilla.redhat.com/show_bug.cgi?id=1868439): openstack UPI: Fix Ignition v3 [#4058](https://github.com/vrutkovs/installer/pull/4058)
* openstack: Known issue: no BMs on Kuryr [#4051](https://github.com/vrutkovs/installer/pull/4051)
* [Bug 1869329](https://bugzilla.redhat.com/show_bug.cgi?id=1869329): OpenStack: Place Bootstrap in one of the master AZs [#4056](https://github.com/vrutkovs/installer/pull/4056)
* Bump rhcos images for s390x [#4050](https://github.com/vrutkovs/installer/pull/4050)
* OpenStack: Fixups to BM workers documentation [#4057](https://github.com/vrutkovs/installer/pull/4057)
* [Bug 1868439](https://bugzilla.redhat.com/show_bug.cgi?id=1868439): openstack upi: fix Ignition key error [#4047](https://github.com/vrutkovs/installer/pull/4047)
* OpenStack: baremetal worker documentation [#3955](https://github.com/vrutkovs/installer/pull/3955)
* [Bug 1866949](https://bugzilla.redhat.com/show_bug.cgi?id=1866949): data/data/aws/route53: use CNAME for gov cloud partition [#4043](https://github.com/vrutkovs/installer/pull/4043)
* [Bug 1862044](https://bugzilla.redhat.com/show_bug.cgi?id=1862044): deleting servers using metadata-based filtering [#4032](https://github.com/vrutkovs/installer/pull/4032)
* [Bug 1867972](https://bugzilla.redhat.com/show_bug.cgi?id=1867972): destroy/aws: setup the resourcetagging api with correct region for gov cloud [#4042](https://github.com/vrutkovs/installer/pull/4042)
* Bump rhcos images for ppc64le [#4021](https://github.com/vrutkovs/installer/pull/4021)
* [Bug 1867519](https://bugzilla.redhat.com/show_bug.cgi?id=1867519): make externalNetwork optional [#4029](https://github.com/vrutkovs/installer/pull/4029)
* [Full changelog](https://github.com/vrutkovs/installer/compare/2ef2b7e490e63e5a8afff6c98fe12505540c2114...cf35dc04aedf7a80bea5470358025cbe91d232c9)


### [branding](https://github.com/openshift/origin-branding/tree/102124a8461a9abf209e8290af47a7a8313d4689)

* [Bug 1935805](https://bugzilla.redhat.com/show_bug.cgi?id=1935805): Fix documentation link for OKD [#12](https://github.com/openshift/origin-branding/pull/12)
* [Full changelog](https://github.com/openshift/origin-branding/compare/334347baf638f786ec1e5236def65a12c2d76586...102124a8461a9abf209e8290af47a7a8313d4689)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/2513fdbb36e2ddf13bc0b17460151c03eb3a3547)

* [Bug 1924453](https://bugzilla.redhat.com/show_bug.cgi?id=1924453): Bump github.com/gogo/protobuf to v1.3.2 [#753](https://github.com/openshift/oc/pull/753)
* [Bug 1942059](https://bugzilla.redhat.com/show_bug.cgi?id=1942059): when mirroring to a file destination, mount images under the index location [#779](https://github.com/openshift/oc/pull/779)
* [Bug 1939477](https://bugzilla.redhat.com/show_bug.cgi?id=1939477): Fix unit test to use new IS [#769](https://github.com/openshift/oc/pull/769)
* [Full changelog](https://github.com/openshift/oc/compare/c66c03f3012a10f16eb86fdce6330433adf6c9ee...2513fdbb36e2ddf13bc0b17460151c03eb3a3547)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/2aec1a53520e4fc9f8def5bd040e3eca917e3d02)

* [Bug 1928151](https://bugzilla.redhat.com/show_bug.cgi?id=1928151): spell fix user-visible string [#301](https://github.com/openshift/cloud-credential-operator/pull/301)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/0427557ed7300864ae0068b92c4c8bfee1629b3b...2aec1a53520e4fc9f8def5bd040e3eca917e3d02)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/ac544d46b0f4aa100e40336d87ec069eca335323)

* Updating vertical-pod-autoscaler builder & base images to be consistent with ART [#190](https://github.com/openshift/kubernetes-autoscaler/pull/190)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/7f1d0ad0b53d17879034597d97dac23c9a23dbcb...ac544d46b0f4aa100e40336d87ec069eca335323)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/0eb71da96f0d4b70aea85c2241e226cda5865b1d)

* [Bug 1937089](https://bugzilla.redhat.com/show_bug.cgi?id=1937089): Configure CoreDNS to shut down gracefully [#247](https://github.com/openshift/cluster-dns-operator/pull/247)
* [Bug 1936587](https://bugzilla.redhat.com/show_bug.cgi?id=1936587): Set CoreDNS's cache's maximum TTL to 900 seconds [#245](https://github.com/openshift/cluster-dns-operator/pull/245)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/b37ee1578d3c2a2b0e32723a17a818174662236a...0eb71da96f0d4b70aea85c2241e226cda5865b1d)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/1d9717b7624acee5c40d9a2f6bffbf7e628fd23d)

* [Bug 1937214](https://bugzilla.redhat.com/show_bug.cgi?id=1937214): Fix spurious reconciliation of NodePort services [#570](https://github.com/openshift/cluster-ingress-operator/pull/570)
* [Bug 1935891](https://bugzilla.redhat.com/show_bug.cgi?id=1935891): Canary: Perform canary test probes over https [#566](https://github.com/openshift/cluster-ingress-operator/pull/566)
* [Bug 1936093](https://bugzilla.redhat.com/show_bug.cgi?id=1936093): Canary: Use cluster-wide proxy for canary client [#568](https://github.com/openshift/cluster-ingress-operator/pull/568)
* [Bug 1934904](https://bugzilla.redhat.com/show_bug.cgi?id=1934904): Canary: Schedule canary server pods to worker and infra nodes [#564](https://github.com/openshift/cluster-ingress-operator/pull/564)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/c7625965839fe53059df5ea3224a867554bf6b86...1d9717b7624acee5c40d9a2f6bffbf7e628fd23d)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/281590936f3a94d4ae1eb008709fda6614fe763b)

* [Bug 1924488](https://bugzilla.redhat.com/show_bug.cgi?id=1924488): Bump github.com/gogo/protobuf to v1.3.2 [#508](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/508)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/d95b6453169b9a43d01e939f060919d2a7a6e94f...281590936f3a94d4ae1eb008709fda6614fe763b)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/b2204ca23a57e9f01af915375e6a18fc86ffecda)

* [Bug 1924490](https://bugzilla.redhat.com/show_bug.cgi?id=1924490): Bump github.com/gogo/protobuf to v1.3.2 [#334](https://github.com/openshift/cluster-kube-scheduler-operator/pull/334)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/776a21927cdedf968dd368638c14b7ba998dbe65...b2204ca23a57e9f01af915375e6a18fc86ffecda)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/54484757581ec26f178c599215715bafd6029582)

* Updating ose-cluster-kube-storage-version-migrator-operator builder & base images to be consistent with ART [#38](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/38)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/572caa117777db92d52564290522be3489f40074...54484757581ec26f178c599215715bafd6029582)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/3b4ba34a9afd6cedf534445d52d279fdd01e36a5)

* [Bug 1926876](https://bugzilla.redhat.com/show_bug.cgi?id=1926876): pkg/manifests: fix prometheus-proxy trustedCA [#1051](https://github.com/openshift/cluster-monitoring-operator/pull/1051)
* [Bug 1932820](https://bugzilla.redhat.com/show_bug.cgi?id=1932820): Remove kube-apiserver-availability.rules [#1069](https://github.com/openshift/cluster-monitoring-operator/pull/1069)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/dea798c5e45e05b431f203bb382fd06bafb88f6d...3b4ba34a9afd6cedf534445d52d279fdd01e36a5)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/fff8ccbf7647d260ca6ce3c075e20014ac255860)

* [Bug 1940806](https://bugzilla.redhat.com/show_bug.cgi?id=1940806): OVN Upgrade: fix upgrade order of node and master [#1029](https://github.com/openshift/cluster-network-operator/pull/1029)
* [Bug 1929371](https://bugzilla.redhat.com/show_bug.cgi?id=1929371): Don't set ClusterOperator Version until rollout is complete [#983](https://github.com/openshift/cluster-network-operator/pull/983)
* [Bug 1937829](https://bugzilla.redhat.com/show_bug.cgi?id=1937829): Cherry-pick dual stack migration [#1017](https://github.com/openshift/cluster-network-operator/pull/1017)
* [Bug 1928028](https://bugzilla.redhat.com/show_bug.cgi?id=1928028): Kuryr: Let Kuryr autodetect primary CNI interface [#978](https://github.com/openshift/cluster-network-operator/pull/978)
* [Bug 1935473](https://bugzilla.redhat.com/show_bug.cgi?id=1935473): Include LB members for Machines created on day-2 operation [#1002](https://github.com/openshift/cluster-network-operator/pull/1002)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/2cf98811eba874f02a2bdcb73844549a454cae8d...fff8ccbf7647d260ca6ce3c075e20014ac255860)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/78e1417e306a54b589c5cfce659f672a74bc0456)

* [Bug 1928614](https://bugzilla.redhat.com/show_bug.cgi?id=1928614): Keep ignition units in sync with [service] plugin. [#215](https://github.com/openshift/cluster-node-tuning-operator/pull/215)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/24392937d275074c73294d3e02ea71b2f1e16299...78e1417e306a54b589c5cfce659f672a74bc0456)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/3193372af4e97dbf504f21ab84fe0d41cd96ec73)

* [Bug 1931856](https://bugzilla.redhat.com/show_bug.cgi?id=1931856): Set registry routes in operand config [#199](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/199)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/7d311b378ea9ccbf486a9fea9bce8ef53345c5ef...3193372af4e97dbf504f21ab84fe0d41cd96ec73)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/42791bac64066daac0922b3d77e4bd86edae3b4e)

* [Bug 1924496](https://bugzilla.redhat.com/show_bug.cgi?id=1924496): Bump github.com/gogo/protobuf to v1.3.2 [#58](https://github.com/openshift/cluster-policy-controller/pull/58)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/3ca5e1497a1d77b5337701087b4bdbcd81283f9f...42791bac64066daac0922b3d77e4bd86edae3b4e)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/7df967b0c2ed0763d6d0fe7f9c8623e9f970a760)

* [Bug 1941217](https://bugzilla.redhat.com/show_bug.cgi?id=1941217): pkg/cvo/sync_worker: Skip precreation of baremetal ClusterOperator [#534](https://github.com/openshift/cluster-version-operator/pull/534)
* [Bug 1926795](https://bugzilla.redhat.com/show_bug.cgi?id=1926795): install/0000_90_cluster-version-operator_02_servicemonitor.yaml: adjust "CannotRetrieveUpdates" to "warning" [#516](https://github.com/openshift/cluster-version-operator/pull/516)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/cf0e3d15edd16777dac91e894af733b1e245d53c...7df967b0c2ed0763d6d0fe7f9c8623e9f970a760)


### [console](https://github.com/openshift/console/tree/5c7d09c9a8d4e4d58e25508cd7103cffadfdba39)

* [Bug 1943441](https://bugzilla.redhat.com/show_bug.cgi?id=1943441): Add 'Roll Back' action for Replication Controllers and Replica Sets [#8475](https://github.com/openshift/console/pull/8475)
* [Bug 1925792](https://bugzilla.redhat.com/show_bug.cgi?id=1925792): Fix translation for edit annotation [#8078](https://github.com/openshift/console/pull/8078)
* [Bug 1941468](https://bugzilla.redhat.com/show_bug.cgi?id=1941468): Change link for not available state [#8431](https://github.com/openshift/console/pull/8431)
* [Bug 1939608](https://bugzilla.redhat.com/show_bug.cgi?id=1939608): Fix null handling in FilterToolbar_ to prevent possible exceptions [#8394](https://github.com/openshift/console/pull/8394)
* [Bug 1937356](https://bugzilla.redhat.com/show_bug.cgi?id=1937356): Fix to show correct internal image-stream name in container image edit flow's internal registry image-stream dropdown for kn service [#8353](https://github.com/openshift/console/pull/8353)
* [Bug 1927198](https://bugzilla.redhat.com/show_bug.cgi?id=1927198): fix pvc string in pvc.view [#8126](https://github.com/openshift/console/pull/8126)
* [Bug 1927311](https://bugzilla.redhat.com/show_bug.cgi?id=1927311): avoid 404 errors attempting to load en-US [#8128](https://github.com/openshift/console/pull/8128)
* [Bug 1931382](https://bugzilla.redhat.com/show_bug.cgi?id=1931382): Hide pipeline section in container image edit flow [#8209](https://github.com/openshift/console/pull/8209)
* [Bug 1933665](https://bugzilla.redhat.com/show_bug.cgi?id=1933665): [release-4.7] Create ImageStream and other resources for samples step by step [#8255](https://github.com/openshift/console/pull/8255)
* [Bug 1935672](https://bugzilla.redhat.com/show_bug.cgi?id=1935672): [release-4.7] fix pipelinerun status icon rendering issue [#8311](https://github.com/openshift/console/pull/8311)
* [Bug 1932272](https://bugzilla.redhat.com/show_bug.cgi?id=1932272): Fix KMS validation error for 4.7 release [#8221](https://github.com/openshift/console/pull/8221)
* [Bug 1937313](https://bugzilla.redhat.com/show_bug.cgi?id=1937313): Removed loaded prop and nested component [#8351](https://github.com/openshift/console/pull/8351)
* [Bug 1936803](https://bugzilla.redhat.com/show_bug.cgi?id=1936803): support service binding operator version 0.5.0 [#8335](https://github.com/openshift/console/pull/8335)
* [Bug 1937469](https://bugzilla.redhat.com/show_bug.cgi?id=1937469): Pod/node/ip/template isn't showing when vm is running [#8357](https://github.com/openshift/console/pull/8357)
* [Bug 1932277](https://bugzilla.redhat.com/show_bug.cgi?id=1932277): Create new pool with arbiter - wrong replica (4.7 release) [#8234](https://github.com/openshift/console/pull/8234)
* [Bug 1930152](https://bugzilla.redhat.com/show_bug.cgi?id=1930152): Do not fail new VM wizard when no storage classes are available [#8190](https://github.com/openshift/console/pull/8190)
* [Bug 1937086](https://bugzilla.redhat.com/show_bug.cgi?id=1937086): Fix topology crash due to selfLink deprecation [#8317](https://github.com/openshift/console/pull/8317)
* [Bug 1928228](https://bugzilla.redhat.com/show_bug.cgi?id=1928228): retry co-fetch on 409 POST or 429 [#8154](https://github.com/openshift/console/pull/8154)
* [Full changelog](https://github.com/openshift/console/compare/e94a2521a10b465c2831174c7747d6c50f638cdb...5c7d09c9a8d4e4d58e25508cd7103cffadfdba39)


### [console-operator](https://github.com/openshift/console-operator/tree/4f933d59784bd37216466ca329ea51fc797b99a1)

* [Bug 1936337](https://bugzilla.redhat.com/show_bug.cgi?id=1936337): Check for error when generating default and user-defined config for the console-config configmap [#512](https://github.com/openshift/console-operator/pull/512)
* [Full changelog](https://github.com/openshift/console-operator/compare/c1efdfc6294cd32c071142da770b9410a97aff3c...4f933d59784bd37216466ca329ea51fc797b99a1)


### [csi-driver-manila, openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack/tree/5202bfdc042bafa732f19dcbec31ca6137fa3fa4)

* [Bug 1933659](https://bugzilla.redhat.com/show_bug.cgi?id=1933659): Add udev to the driver image [#47](https://github.com/openshift/cloud-provider-openstack/pull/47)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/7def9722bc0c3c34336ceee8331eee27ec3f4c7f...5202bfdc042bafa732f19dcbec31ca6137fa3fa4)


### [docker-builder](https://github.com/openshift/builder/tree/14156f392c82ac10a230c313cc93b3951af1f592)

* [Bug 1924554](https://bugzilla.redhat.com/show_bug.cgi?id=1924554): bump(cni) 0.8.1 [#234](https://github.com/openshift/builder/pull/234)
* [Bug 1940052](https://bugzilla.redhat.com/show_bug.cgi?id=1940052): retry image pulls during builds [#226](https://github.com/openshift/builder/pull/226)
* [Bug 1939218](https://bugzilla.redhat.com/show_bug.cgi?id=1939218): bump(containers/*): [#224](https://github.com/openshift/builder/pull/224)
* [Full changelog](https://github.com/openshift/builder/compare/67e88c5fafb9c49f228f48810e34af07db9581f0...14156f392c82ac10a230c313cc93b3951af1f592)


### [gcp-machine-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/7215497c95a43c5f633bc511e3e85dd1d956a931)

* [Bug 1935636](https://bugzilla.redhat.com/show_bug.cgi?id=1935636): Ensure response body is closed when we are finished with the request [#151](https://github.com/openshift/cluster-api-provider-gcp/pull/151)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/186b21520ddb0f1e29d3a709715369135fcaebcd...7215497c95a43c5f633bc511e3e85dd1d956a931)


### [grafana](https://github.com/openshift/grafana/tree/b02c35dc2d01fce696a3edc28839a9f9fd0150a3)

* Updating grafana builder & base images to be consistent with ART [#54](https://github.com/openshift/grafana/pull/54)
* [Full changelog](https://github.com/openshift/grafana/compare/cf0a81cb4b68a2543249def193e1b83e94734725...b02c35dc2d01fce696a3edc28839a9f9fd0150a3)


### [haproxy-router](https://github.com/openshift/router/tree/130b5993726c46e83ca871a97a930d73f2c433a8)

* [Bug 1942534](https://bugzilla.redhat.com/show_bug.cgi?id=1942534): [4.7 backport] Route gets admitted with invalid host name if override annotation is used [#273](https://github.com/openshift/router/pull/273)
* [Bug 1938921](https://bugzilla.redhat.com/show_bug.cgi?id=1938921): router/template: Cache compiled regular expressions [#269](https://github.com/openshift/router/pull/269)
* [Full changelog](https://github.com/openshift/router/compare/30e2fb5b65753e6b6593f61b16768a5229b5bd97...130b5993726c46e83ca871a97a930d73f2c433a8)


### [hello-openshift, tests](https://github.com/openshift/origin/tree/8eaf43f001f50c584d62f267a0030c23daa25ac8)

* [Bug 1941574](https://bugzilla.redhat.com/show_bug.cgi?id=1941574): test/extended/router/idle: skip test on virt platforms [#25999](https://github.com/openshift/origin/pull/25999)
* [Bug 1940866](https://bugzilla.redhat.com/show_bug.cgi?id=1940866): Add BareMetalPlatformType into e2e upgrade service unsupported list [#25989](https://github.com/openshift/origin/pull/25989)
* [Bug 1927953](https://bugzilla.redhat.com/show_bug.cgi?id=1927953): test/extended/router/idle: address flakes/failures seen in CI [#25892](https://github.com/openshift/origin/pull/25892)
* [Bug 1931622](https://bugzilla.redhat.com/show_bug.cgi?id=1931622): test: add vsphere to unsupported platforms for LB service [#25913](https://github.com/openshift/origin/pull/25913)
* [Bug 1932806](https://bugzilla.redhat.com/show_bug.cgi?id=1932806): release-4.7: e2e: test OAuth API connections in the tests by that name [#25894](https://github.com/openshift/origin/pull/25894)
* [Bug 1935707](https://bugzilla.redhat.com/show_bug.cgi?id=1935707): [release-4.7] test: Detect when the master pool is still updating after upgrade [#25941](https://github.com/openshift/origin/pull/25941)
* [Bug 1931401](https://bugzilla.redhat.com/show_bug.cgi?id=1931401): fix sig-cli flakes [#25910](https://github.com/openshift/origin/pull/25910)
* [Bug 1939477](https://bugzilla.redhat.com/show_bug.cgi?id=1939477): Update tests to use Ruby 2.7 [#25966](https://github.com/openshift/origin/pull/25966)
* [Bug 1927554](https://bugzilla.redhat.com/show_bug.cgi?id=1927554): adjust route host for redis/nodejs/cakephp to accomodate new apiserver restrictions [#25884](https://github.com/openshift/origin/pull/25884)
* [Full changelog](https://github.com/openshift/origin/compare/98a759fa802ab87153d0c75b18bc977a91154f69...8eaf43f001f50c584d62f267a0030c23daa25ac8)


### [hyperkube](https://github.com/openshift/kubernetes/tree/bafe72fb05eddc8246040b9945ec242b9f805935)

* [Bug 1931702](https://bugzilla.redhat.com/show_bug.cgi?id=1931702): UPSTREAM: 96958: kubelet: remove periodic messages from log-level 2 [#589](https://github.com/openshift/kubernetes/pull/589)
* [Bug 1931745](https://bugzilla.redhat.com/show_bug.cgi?id=1931745): UPSTREAM: 98956: Fix race when KillPod followed by IsPodPendingTermining [#590](https://github.com/openshift/kubernetes/pull/590)
* [Bug 1929674](https://bugzilla.redhat.com/show_bug.cgi?id=1929674): kubelet: fix create sandbox delete pod race [#591](https://github.com/openshift/kubernetes/pull/591)
* [Bug 1933094](https://bugzilla.redhat.com/show_bug.cgi?id=1933094): UPSTREAM: 98742: Sync completed pods until their containers have been terminated [#595](https://github.com/openshift/kubernetes/pull/595)
* [Full changelog](https://github.com/openshift/kubernetes/compare/5fbfd197c16d3c5facbaa1d7b9f3ea58cf6b36e9...bafe72fb05eddc8246040b9945ec242b9f805935)


### [insights-operator](https://github.com/openshift/insights-operator/tree/23a298922d25de761c8f765625d6ebb63a25774e)

* [Bug 1942068](https://bugzilla.redhat.com/show_bug.cgi?id=1942068): Gahter datahubs.installers.datahub.sap.com resources from SAP clusters (#383) [#383](https://github.com/openshift/insights-operator/pull/383)
* [Bug 1939061](https://bugzilla.redhat.com/show_bug.cgi?id=1939061): Sap license management logs gatherer 4.7 (#372) [#372](https://github.com/openshift/insights-operator/pull/372)
* Adds memory usage to the metadata (#364) [#364](https://github.com/openshift/insights-operator/pull/364)
* [Bug 1935070](https://bugzilla.redhat.com/show_bug.cgi?id=1935070): Extend the OLM operator data with related … (#362) [#362](https://github.com/openshift/insights-operator/pull/362)
* [Bug 1934442](https://bugzilla.redhat.com/show_bug.cgi?id=1934442): Gather info about unhealthy SAP pods (#360) [#360](https://github.com/openshift/insights-operator/pull/360)
* [Bug 1936802](https://bugzilla.redhat.com/show_bug.cgi?id=1936802): Authentication log gatherer - do not scan all the pods in openshfit-authentication (#369) [#369](https://github.com/openshift/insights-operator/pull/369)
* [Bug 1936861](https://bugzilla.redhat.com/show_bug.cgi?id=1936861): Include namespace name in binarydata configmap path & test (#368) (#370) [#368](https://github.com/openshift/insights-operator/pull/368)
* [Full changelog](https://github.com/openshift/insights-operator/compare/4d0bc3a840b801b18270ff614678bacad65d93b8...23a298922d25de761c8f765625d6ebb63a25774e)


### [installer](https://github.com/vrutkovs/installer/tree/cf35dc04aedf7a80bea5470358025cbe91d232c9)

* [Bug 1933728](https://bugzilla.redhat.com/show_bug.cgi?id=1933728): baremetal: include netmask in DNSMasq dhcp range [#4698](https://github.com/vrutkovs/installer/pull/4698)
* [Bug 1930106](https://bugzilla.redhat.com/show_bug.cgi?id=1930106): bump ignition to v3_2 [#4701](https://github.com/vrutkovs/installer/pull/4701)
* [Bug 1922292](https://bugzilla.redhat.com/show_bug.cgi?id=1922292): [release-4.7] data/rhcos.json: Update boot images [#4635](https://github.com/vrutkovs/installer/pull/4635)
* [Full changelog](https://github.com/vrutkovs/installer/compare/a005bb9eddcbc97e4cac2cdf4436fe2d524cc75e...cf35dc04aedf7a80bea5470358025cbe91d232c9)


### [jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/503e5770e622bf78a746628a8b276a2616365135)

* [release 4.7] Bug 1929118: update kubernetes-client-api [#1230](https://github.com/openshift/jenkins/pull/1230)
* [Full changelog](https://github.com/openshift/jenkins/compare/41fc44729e398eac8a06c8222cf653c80f125a2c...503e5770e622bf78a746628a8b276a2616365135)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/9ddcd3669847fba83222504c91506f300bf081e3)

* [Bug 1924830](https://bugzilla.redhat.com/show_bug.cgi?id=1924830): CVE-2021-3121 gogo/protobuf lacks certain index validation [#265](https://github.com/openshift/sdn/pull/265)
* [Bug 1936920](https://bugzilla.redhat.com/show_bug.cgi?id=1936920): networkpolicy: pass traffic through NAT to handle possible tuple collisions [#272](https://github.com/openshift/sdn/pull/272)
* [Full changelog](https://github.com/openshift/sdn/compare/3acf8c465a21c23acb62c50de1aee40f717bf528...9ddcd3669847fba83222504c91506f300bf081e3)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/d49acc455c98dead4995e34add0bf9f3e6e7324b)

* [Bug 1938960](https://bugzilla.redhat.com/show_bug.cgi?id=1938960): Ignore headless services in NP code [#487](https://github.com/openshift/kuryr-kubernetes/pull/487)
* [Bug 1938960](https://bugzilla.redhat.com/show_bug.cgi?id=1938960): Do not default protocol to TCP for allow-all NPs [#480](https://github.com/openshift/kuryr-kubernetes/pull/480)
* [Bug 1930017](https://bugzilla.redhat.com/show_bug.cgi?id=1930017): Narrow connection to the cluster only on namespaceSelector [#460](https://github.com/openshift/kuryr-kubernetes/pull/460)
* [Bug 1928029](https://bugzilla.redhat.com/show_bug.cgi?id=1928029): Get trunks more diligently [#449](https://github.com/openshift/kuryr-kubernetes/pull/449)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/a31d885264e7a68ff49b6baa96bb5868dae9e5a3...d49acc455c98dead4995e34add0bf9f3e6e7324b)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/033be25ca038fe773b23c076e9ac64926de72474)

* [Bug 1938316](https://bugzilla.redhat.com/show_bug.cgi?id=1938316): [release-4.7] Update MAO and set metrics on :8081 address [#219](https://github.com/openshift/cluster-api-provider-libvirt/pull/219)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/b57e18b197838f6d6c377cca00fd47f9af645f3f...033be25ca038fe773b23c076e9ac64926de72474)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/a00ea96d676b2b87a7de6f8ad2cac09ed2f14c67)

* [Bug 1929721](https://bugzilla.redhat.com/show_bug.cgi?id=1929721): Add SecurityProfile.EncryptionAtHost parameter to enable host-based VM encryption [#818](https://github.com/openshift/machine-api-operator/pull/818)
* [Bug 1934798](https://bugzilla.redhat.com/show_bug.cgi?id=1934798): reuse mgr client in webhooks [#821](https://github.com/openshift/machine-api-operator/pull/821)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/96d954d0c1916b44882a3385cdbf5d3322c81dcc...a00ea96d676b2b87a7de6f8ad2cac09ed2f14c67)


### [machine-os-content](https://github.com/openshift/okd-machine-os/tree/b632cfe7be5dc185b8259395daacc82922178fb8)

* overlay: add NetworkManager config to prevent requesting additional MAC [#109](https://github.com/openshift/okd-machine-os/pull/109)
* overlay: add dhcp-client-identifier [#101](https://github.com/openshift/okd-machine-os/pull/101)
* manifests: add include.release annotations [#98](https://github.com/openshift/okd-machine-os/pull/98)
* [Full changelog](https://github.com/openshift/okd-machine-os/compare/421333e9f658dcca306b5207d9e4169a2785e42a...b632cfe7be5dc185b8259395daacc82922178fb8)


### [multus-cni](https://github.com/openshift/multus-cni/tree/1728ddf0d06ef43386aa64aeab41a9e0380c6813)

* [Bug 1936334](https://bugzilla.redhat.com/show_bug.cgi?id=1936334): Updating multus-cni builder & base images to be consistent with ART [#81](https://github.com/openshift/multus-cni/pull/81)
* [Full changelog](https://github.com/openshift/multus-cni/compare/7aa53b3cb5ae0ae4b03906803c7aff37447d4357...1728ddf0d06ef43386aa64aeab41a9e0380c6813)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/dfe6b395b67c0cede73e6edf758976ae208b930c)

* [Bug 1931950](https://bugzilla.redhat.com/show_bug.cgi?id=1931950): [backport 4.7] Fix for IPv6 when leading hextets equal zero [#49](https://github.com/openshift/whereabouts-cni/pull/49)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/900aa4231bd31026b3a305f8077c8959f51d8059...dfe6b395b67c0cede73e6edf758976ae208b930c)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/69f527e90f599e0f509cfce73ba7b95656f03f7f)

* [Bug 1917904](https://bugzilla.redhat.com/show_bug.cgi?id=1917904): bump k8s.io/apiserver to 1.20.4 [#43](https://github.com/openshift/oauth-apiserver/pull/43)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/d00e67a0b5e0d7c303b201a5bbcb943a9bc26774...69f527e90f599e0f509cfce73ba7b95656f03f7f)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/a0f41548179e57e9b184a3e713ac6227cc4385ff)

* [Bug 1917904](https://bugzilla.redhat.com/show_bug.cgi?id=1917904): bump k8s.io/apiserver to 1.20.4 [#187](https://github.com/openshift/openshift-apiserver/pull/187)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/d7ccc71549d84594bfc7f5deda2ed61de7bde100...a0f41548179e57e9b184a3e713ac6227cc4385ff)


### [operator-lifecycle-manager](https://github.com/operator-framework/operator-lifecycle-manager/tree/44f92b8a8e6d8f716eef00b192f4d80441ea160d)

* [Bug 1937375](https://bugzilla.redhat.com/show_bug.cgi?id=1937375): only override deployment resources when explicitly defined in subscription config [#2036](https://github.com/operator-framework/operator-lifecycle-manager/pull/2036)
* [Bug 1933839](https://bugzilla.redhat.com/show_bug.cgi?id=1933839): bump k8s.io/apiserver for webhook authorizer panic fix [#2022](https://github.com/operator-framework/operator-lifecycle-manager/pull/2022)
* [Bug 1936707](https://bugzilla.redhat.com/show_bug.cgi?id=1936707): Allow non-CSV-owned ServiceAccounts to satisfy CSV requirements. [#2034](https://github.com/operator-framework/operator-lifecycle-manager/pull/2034)
* [Bug 1938405](https://bugzilla.redhat.com/show_bug.cgi?id=1938405): Support jittering relatively small resync intervals. [#2041](https://github.com/operator-framework/operator-lifecycle-manager/pull/2041)
* Updating operator-lifecycle-manager builder & base images to be consistent with ART [#2013](https://github.com/operator-framework/operator-lifecycle-manager/pull/2013)
* [Bug 1934724](https://bugzilla.redhat.com/show_bug.cgi?id=1934724): fix(resolver): Allow skipped versions to be installed initially [#2027](https://github.com/operator-framework/operator-lifecycle-manager/pull/2027)
* [Bug 1929904](https://bugzilla.redhat.com/show_bug.cgi?id=1929904): Infer package name property for unannotated CSVs, if possible. [#2033](https://github.com/operator-framework/operator-lifecycle-manager/pull/2033)
* [Full changelog](https://github.com/operator-framework/operator-lifecycle-manager/compare/45ee0b4e47b9cac58c14892f998307a73ab46879...44f92b8a8e6d8f716eef00b192f4d80441ea160d)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/96bab9b9f5bb2c8fce141992230cf75e48f14f78)

* Updating marketplace-operator builder & base images to be consistent with ART [#367](https://github.com/operator-framework/operator-marketplace/pull/367)
* [Bug 1927456](https://bugzilla.redhat.com/show_bug.cgi?id=1927456): update defaults to 4.7 [#382](https://github.com/operator-framework/operator-marketplace/pull/382)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/37d14d1aaaba2cd223469b5d4b2513c1292151a9...96bab9b9f5bb2c8fce141992230cf75e48f14f78)


### [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt/tree/e6fa5e240bca27e126b9de179e8c56220f1a9c44)

* [Bug 1939199](https://bugzilla.redhat.com/show_bug.cgi?id=1939199): move to go 1.15 and registry.ci.openshift.org [#97](https://github.com/openshift/cluster-api-provider-ovirt/pull/97)
* [Bug 1927256](https://bugzilla.redhat.com/show_bug.cgi?id=1927256): Bump K8s dependencies to 1.20 [#92](https://github.com/openshift/cluster-api-provider-ovirt/pull/92)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ovirt/compare/4708c8bbbf01634892f4699dedb3d7a34392903b...e6fa5e240bca27e126b9de179e8c56220f1a9c44)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/1481e2d2b1716fc3abeac8c59bc8ff8ed3457d08)

* [Bug 1931520](https://bugzilla.redhat.com/show_bug.cgi?id=1931520): Backport Fix ACL syntax for dual-stack [#465](https://github.com/openshift/ovn-kubernetes/pull/465)
* [Bug 1943310](https://bugzilla.redhat.com/show_bug.cgi?id=1943310): [4.7] Enable DB memory trimming on compaction [#477](https://github.com/openshift/ovn-kubernetes/pull/477)
* [Bug 1932268](https://bugzilla.redhat.com/show_bug.cgi?id=1932268): detect if the cluster has endpoint slices [#442](https://github.com/openshift/ovn-kubernetes/pull/442)
* [Bug 1935180](https://bugzilla.redhat.com/show_bug.cgi?id=1935180): Backport Fix mcast querier [#468](https://github.com/openshift/ovn-kubernetes/pull/468)
* [Bug 1937829](https://bugzilla.redhat.com/show_bug.cgi?id=1937829): Cherry-pick dual-stack conversion [#460](https://github.com/openshift/ovn-kubernetes/pull/460)
* [Bug 1934645](https://bugzilla.redhat.com/show_bug.cgi?id=1934645): Backport enable support for BFD on external gateway routes [#462](https://github.com/openshift/ovn-kubernetes/pull/462)
* [Bug 1925475](https://bugzilla.redhat.com/show_bug.cgi?id=1925475): Bump OVN to ovn2.13-20.12.0-24.el8fdp [#451](https://github.com/openshift/ovn-kubernetes/pull/451)
* [Bug 1937238](https://bugzilla.redhat.com/show_bug.cgi?id=1937238): Refactor chain setup for NodePort and ExternalIP [#457](https://github.com/openshift/ovn-kubernetes/pull/457)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/ef03521f5daede4fe0f8afd9f42035259636006b...1481e2d2b1716fc3abeac8c59bc8ff8ed3457d08)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/db87872c6aba7e4e9def29b33beea582557ce940)

* Updating prom-label-proxy builder & base images to be consistent with ART [#330](https://github.com/openshift/prom-label-proxy/pull/330)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/88d4df5541251ea122687610870e725b0099213a...db87872c6aba7e4e9def29b33beea582557ce940)


### [telemeter](https://github.com/openshift/telemeter/tree/e4dac5123ef6b3ecb16b5151e2e8f8aeb8b1f21a)

* Updating telemeter builder & base images to be consistent with ART [#369](https://github.com/openshift/telemeter/pull/369)
* [Full changelog](https://github.com/openshift/telemeter/compare/8742aae6505eebe6a12bffba8223a66ee5fc4a88...e4dac5123ef6b3ecb16b5151e2e8f8aeb8b1f21a)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/077d6bef3bc1e003188e0bea4e086c874f97f944)

* [Bug 1936975](https://bugzilla.redhat.com/show_bug.cgi?id=1936975): Fix deadlock when enqueing functions into the pool [#35](https://github.com/openshift/vsphere-problem-detector/pull/35)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/602c27477b66fd8752b7c39a13b6b948731e60eb...077d6bef3bc1e003188e0bea4e086c874f97f944)