# 4.7.0-0.okd-2021-03-21-094146

Created: 2021-03-21 11:12:18 +0000 UTC

Image Digest: `sha256:3396c6a8a98484969ad728ce7b006e854a8f37649f685913b9cea2f1c9dacd26`

Promoted from registry.ci.openshift.org/origin/release:4.7.0-0.okd-2021-03-21-094146


## Changes from 4.7.0-0.okd-2021-03-07-090821

### Components

* Kubernetes 1.20.0-beta.2


### Rebuilt images without code change

* [console](https://github.com/openshift/console) git [9da3a0e9](https://github.com/openshift/console/commit/9da3a0e9c917f4cb06b05e555c12542e10739f82) `sha256:2b30d82f23a7d600b87b93958b89f75b3eaea58a19af4543ff0672d79aa45ebb`
* [etcd](https://github.com/openshift/etcd) git [cca97c76](https://github.com/openshift/etcd/commit/cca97c76b915b1d14abd39814995fa1e2d087145) `sha256:3ce8b23a53a473a8bc43f903853249ddefc3bb4ca5a1c340e712af0557d7ff88`


### [aws-machine-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/2d069b7f8bf4a443ba1a7ac8f669ef05ed92a50e)

* [Bug 1935636](https://bugzilla.redhat.com/show_bug.cgi?id=1935636): Ensure response body is closed when we are finished with the request [#391](https://github.com/openshift/cluster-api-provider-aws/pull/391)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/5ffc5f422a80169b342c19f50b22a0c4883cc0e3...2d069b7f8bf4a443ba1a7ac8f669ef05ed92a50e)


### [branding](https://github.com/openshift/origin-branding/tree/102124a8461a9abf209e8290af47a7a8313d4689)

* [Bug 1935805](https://bugzilla.redhat.com/show_bug.cgi?id=1935805): Fix documentation link for OKD [#12](https://github.com/openshift/origin-branding/pull/12)
* [Full changelog](https://github.com/openshift/origin-branding/compare/334347baf638f786ec1e5236def65a12c2d76586...102124a8461a9abf209e8290af47a7a8313d4689)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/c8d1f56fb3e20d7ee2b4e0280425ef95a013e9ee)

* [Bug 1939477](https://bugzilla.redhat.com/show_bug.cgi?id=1939477): Fix unit test to use new IS [#769](https://github.com/openshift/oc/pull/769)
* [Full changelog](https://github.com/openshift/oc/compare/c66c03f3012a10f16eb86fdce6330433adf6c9ee...c8d1f56fb3e20d7ee2b4e0280425ef95a013e9ee)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/ac544d46b0f4aa100e40336d87ec069eca335323)

* Updating vertical-pod-autoscaler builder & base images to be consistent with ART [#190](https://github.com/openshift/kubernetes-autoscaler/pull/190)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/7f1d0ad0b53d17879034597d97dac23c9a23dbcb...ac544d46b0f4aa100e40336d87ec069eca335323)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/331db4e9e26c702601ccbe72ff789016034bf778)

* [Bug 1936587](https://bugzilla.redhat.com/show_bug.cgi?id=1936587): Set CoreDNS's cache's maximum TTL to 900 seconds [#245](https://github.com/openshift/cluster-dns-operator/pull/245)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/b37ee1578d3c2a2b0e32723a17a818174662236a...331db4e9e26c702601ccbe72ff789016034bf778)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/e9b715829f264317a13a5ace7f1eda76edad9fcd)

* [Bug 1935891](https://bugzilla.redhat.com/show_bug.cgi?id=1935891): Canary: Perform canary test probes over https [#566](https://github.com/openshift/cluster-ingress-operator/pull/566)
* [Bug 1936093](https://bugzilla.redhat.com/show_bug.cgi?id=1936093): Canary: Use cluster-wide proxy for canary client [#568](https://github.com/openshift/cluster-ingress-operator/pull/568)
* [Bug 1934904](https://bugzilla.redhat.com/show_bug.cgi?id=1934904): Canary: Schedule canary server pods to worker and infra nodes [#564](https://github.com/openshift/cluster-ingress-operator/pull/564)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/c7625965839fe53059df5ea3224a867554bf6b86...e9b715829f264317a13a5ace7f1eda76edad9fcd)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/54484757581ec26f178c599215715bafd6029582)

* Updating ose-cluster-kube-storage-version-migrator-operator builder & base images to be consistent with ART [#38](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/38)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/572caa117777db92d52564290522be3489f40074...54484757581ec26f178c599215715bafd6029582)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/3b4ba34a9afd6cedf534445d52d279fdd01e36a5)

* [Bug 1926876](https://bugzilla.redhat.com/show_bug.cgi?id=1926876): pkg/manifests: fix prometheus-proxy trustedCA [#1051](https://github.com/openshift/cluster-monitoring-operator/pull/1051)
* [Bug 1932820](https://bugzilla.redhat.com/show_bug.cgi?id=1932820): Remove kube-apiserver-availability.rules [#1069](https://github.com/openshift/cluster-monitoring-operator/pull/1069)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/dea798c5e45e05b431f203bb382fd06bafb88f6d...3b4ba34a9afd6cedf534445d52d279fdd01e36a5)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/0b193c70bc5ab42fb620ef48438308b142154eea)

* [Bug 1937829](https://bugzilla.redhat.com/show_bug.cgi?id=1937829): Cherry-pick dual stack migration [#1017](https://github.com/openshift/cluster-network-operator/pull/1017)
* [Bug 1928028](https://bugzilla.redhat.com/show_bug.cgi?id=1928028): Kuryr: Let Kuryr autodetect primary CNI interface [#978](https://github.com/openshift/cluster-network-operator/pull/978)
* [Bug 1935473](https://bugzilla.redhat.com/show_bug.cgi?id=1935473): Include LB members for Machines created on day-2 operation [#1002](https://github.com/openshift/cluster-network-operator/pull/1002)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/2cf98811eba874f02a2bdcb73844549a454cae8d...0b193c70bc5ab42fb620ef48438308b142154eea)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/397e8bad8d095b1f34fc2173d8a66fdd0e6a9352)

* [Bug 1926795](https://bugzilla.redhat.com/show_bug.cgi?id=1926795): install/0000_90_cluster-version-operator_02_servicemonitor.yaml: adjust "CannotRetrieveUpdates" to "warning" [#516](https://github.com/openshift/cluster-version-operator/pull/516)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/cf0e3d15edd16777dac91e894af733b1e245d53c...397e8bad8d095b1f34fc2173d8a66fdd0e6a9352)


### [csi-driver-manila, openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack/tree/5202bfdc042bafa732f19dcbec31ca6137fa3fa4)

* [Bug 1933659](https://bugzilla.redhat.com/show_bug.cgi?id=1933659): Add udev to the driver image [#47](https://github.com/openshift/cloud-provider-openstack/pull/47)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/7def9722bc0c3c34336ceee8331eee27ec3f4c7f...5202bfdc042bafa732f19dcbec31ca6137fa3fa4)


### [docker-builder](https://github.com/openshift/builder/tree/cfe626635ab8799dcc7d874429fdfdd10406400b)

* [Bug 1939218](https://bugzilla.redhat.com/show_bug.cgi?id=1939218): bump(containers/*): [#224](https://github.com/openshift/builder/pull/224)
* [Full changelog](https://github.com/openshift/builder/compare/67e88c5fafb9c49f228f48810e34af07db9581f0...cfe626635ab8799dcc7d874429fdfdd10406400b)


### [gcp-machine-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/7215497c95a43c5f633bc511e3e85dd1d956a931)

* [Bug 1935636](https://bugzilla.redhat.com/show_bug.cgi?id=1935636): Ensure response body is closed when we are finished with the request [#151](https://github.com/openshift/cluster-api-provider-gcp/pull/151)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/186b21520ddb0f1e29d3a709715369135fcaebcd...7215497c95a43c5f633bc511e3e85dd1d956a931)


### [grafana](https://github.com/openshift/grafana/tree/b02c35dc2d01fce696a3edc28839a9f9fd0150a3)

* Updating grafana builder & base images to be consistent with ART [#54](https://github.com/openshift/grafana/pull/54)
* [Full changelog](https://github.com/openshift/grafana/compare/cf0a81cb4b68a2543249def193e1b83e94734725...b02c35dc2d01fce696a3edc28839a9f9fd0150a3)


### [hello-openshift, tests](https://github.com/openshift/origin/tree/98285f8660818224b33d9876fb6ddbd5d5b25a86)

* [Bug 1939477](https://bugzilla.redhat.com/show_bug.cgi?id=1939477): Update tests to use Ruby 2.7 [#25966](https://github.com/openshift/origin/pull/25966)
* [Bug 1927554](https://bugzilla.redhat.com/show_bug.cgi?id=1927554): adjust route host for redis/nodejs/cakephp to accomodate new apiserver restrictions [#25884](https://github.com/openshift/origin/pull/25884)
* [Full changelog](https://github.com/openshift/origin/compare/98a759fa802ab87153d0c75b18bc977a91154f69...98285f8660818224b33d9876fb6ddbd5d5b25a86)


### [hyperkube](https://github.com/openshift/kubernetes/tree/bafe72fb05eddc8246040b9945ec242b9f805935)

* [Bug 1931702](https://bugzilla.redhat.com/show_bug.cgi?id=1931702): UPSTREAM: 96958: kubelet: remove periodic messages from log-level 2 [#589](https://github.com/openshift/kubernetes/pull/589)
* [Bug 1931745](https://bugzilla.redhat.com/show_bug.cgi?id=1931745): UPSTREAM: 98956: Fix race when KillPod followed by IsPodPendingTermining [#590](https://github.com/openshift/kubernetes/pull/590)
* [Bug 1929674](https://bugzilla.redhat.com/show_bug.cgi?id=1929674): kubelet: fix create sandbox delete pod race [#591](https://github.com/openshift/kubernetes/pull/591)
* [Bug 1933094](https://bugzilla.redhat.com/show_bug.cgi?id=1933094): UPSTREAM: 98742: Sync completed pods until their containers have been terminated [#595](https://github.com/openshift/kubernetes/pull/595)
* [Full changelog](https://github.com/openshift/kubernetes/compare/5fbfd197c16d3c5facbaa1d7b9f3ea58cf6b36e9...bafe72fb05eddc8246040b9945ec242b9f805935)


### [insights-operator](https://github.com/openshift/insights-operator/tree/ef5a950ecdadd7d5e73ca1edfeace761e953b853)

* [Bug 1936861](https://bugzilla.redhat.com/show_bug.cgi?id=1936861): Include namespace name in binarydata configmap path & test (#368) (#370) [#368](https://github.com/openshift/insights-operator/pull/368)
* [Full changelog](https://github.com/openshift/insights-operator/compare/4d0bc3a840b801b18270ff614678bacad65d93b8...ef5a950ecdadd7d5e73ca1edfeace761e953b853)


### [jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/503e5770e622bf78a746628a8b276a2616365135)

* [release 4.7] Bug 1929118: update kubernetes-client-api [#1230](https://github.com/openshift/jenkins/pull/1230)
* [Full changelog](https://github.com/openshift/jenkins/compare/41fc44729e398eac8a06c8222cf653c80f125a2c...503e5770e622bf78a746628a8b276a2616365135)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/8f0968de25a351f5663b6ec379918d25e1dfa785)

* [Bug 1936920](https://bugzilla.redhat.com/show_bug.cgi?id=1936920): networkpolicy: pass traffic through NAT to handle possible tuple collisions [#272](https://github.com/openshift/sdn/pull/272)
* [Full changelog](https://github.com/openshift/sdn/compare/3acf8c465a21c23acb62c50de1aee40f717bf528...8f0968de25a351f5663b6ec379918d25e1dfa785)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/49a22de017c178f6f719825625cd5d14134a88b5)

* [Bug 1938960](https://bugzilla.redhat.com/show_bug.cgi?id=1938960): Do not default protocol to TCP for allow-all NPs [#480](https://github.com/openshift/kuryr-kubernetes/pull/480)
* [Bug 1930017](https://bugzilla.redhat.com/show_bug.cgi?id=1930017): Narrow connection to the cluster only on namespaceSelector [#460](https://github.com/openshift/kuryr-kubernetes/pull/460)
* [Bug 1928029](https://bugzilla.redhat.com/show_bug.cgi?id=1928029): Get trunks more diligently [#449](https://github.com/openshift/kuryr-kubernetes/pull/449)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/a31d885264e7a68ff49b6baa96bb5868dae9e5a3...49a22de017c178f6f719825625cd5d14134a88b5)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/a00ea96d676b2b87a7de6f8ad2cac09ed2f14c67)

* [Bug 1929721](https://bugzilla.redhat.com/show_bug.cgi?id=1929721): Add SecurityProfile.EncryptionAtHost parameter to enable host-based VM encryption [#818](https://github.com/openshift/machine-api-operator/pull/818)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/13126c309bc4f2cd535f536c6925e245a44ac649...a00ea96d676b2b87a7de6f8ad2cac09ed2f14c67)


### [machine-os-content](https://github.com/openshift/okd-machine-os/tree/b632cfe7be5dc185b8259395daacc82922178fb8)

* overlay: add NetworkManager config to prevent requesting additional MAC [#109](https://github.com/openshift/okd-machine-os/pull/109)
* overlay: add dhcp-client-identifier [#101](https://github.com/openshift/okd-machine-os/pull/101)
* manifests: add include.release annotations [#98](https://github.com/openshift/okd-machine-os/pull/98)
* [Full changelog](https://github.com/openshift/okd-machine-os/compare/421333e9f658dcca306b5207d9e4169a2785e42a...b632cfe7be5dc185b8259395daacc82922178fb8)


### [multus-cni](https://github.com/openshift/multus-cni/tree/1728ddf0d06ef43386aa64aeab41a9e0380c6813)

* [Bug 1936334](https://bugzilla.redhat.com/show_bug.cgi?id=1936334): Updating multus-cni builder & base images to be consistent with ART [#81](https://github.com/openshift/multus-cni/pull/81)
* [Full changelog](https://github.com/openshift/multus-cni/compare/7aa53b3cb5ae0ae4b03906803c7aff37447d4357...1728ddf0d06ef43386aa64aeab41a9e0380c6813)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/dfe6b395b67c0cede73e6edf758976ae208b930c)

* [Bug 1931950](https://bugzilla.redhat.com/show_bug.cgi?id=1931950): [backport 4.7] Fix for IPv6 when leading hextets equal zero [#49](https://github.com/openshift/whereabouts-cni/pull/49)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/900aa4231bd31026b3a305f8077c8959f51d8059...dfe6b395b67c0cede73e6edf758976ae208b930c)


### [operator-lifecycle-manager](https://github.com/operator-framework/operator-lifecycle-manager/tree/5e1931322e24a04530aff2113025cdbf76740884)

* [Bug 1933839](https://bugzilla.redhat.com/show_bug.cgi?id=1933839): bump k8s.io/apiserver for webhook authorizer panic fix [#2022](https://github.com/operator-framework/operator-lifecycle-manager/pull/2022)
* [Bug 1936707](https://bugzilla.redhat.com/show_bug.cgi?id=1936707): Allow non-CSV-owned ServiceAccounts to satisfy CSV requirements. [#2034](https://github.com/operator-framework/operator-lifecycle-manager/pull/2034)
* [Bug 1938405](https://bugzilla.redhat.com/show_bug.cgi?id=1938405): Support jittering relatively small resync intervals. [#2041](https://github.com/operator-framework/operator-lifecycle-manager/pull/2041)
* Updating operator-lifecycle-manager builder & base images to be consistent with ART [#2013](https://github.com/operator-framework/operator-lifecycle-manager/pull/2013)
* [Bug 1934724](https://bugzilla.redhat.com/show_bug.cgi?id=1934724): fix(resolver): Allow skipped versions to be installed initially [#2027](https://github.com/operator-framework/operator-lifecycle-manager/pull/2027)
* [Bug 1929904](https://bugzilla.redhat.com/show_bug.cgi?id=1929904): Infer package name property for unannotated CSVs, if possible. [#2033](https://github.com/operator-framework/operator-lifecycle-manager/pull/2033)
* [Full changelog](https://github.com/operator-framework/operator-lifecycle-manager/compare/45ee0b4e47b9cac58c14892f998307a73ab46879...5e1931322e24a04530aff2113025cdbf76740884)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/eb79c0de7b3e8296aaf179a083346d5ee9157b36)

* [Bug 1927456](https://bugzilla.redhat.com/show_bug.cgi?id=1927456): update defaults to 4.7 [#382](https://github.com/operator-framework/operator-marketplace/pull/382)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/37d14d1aaaba2cd223469b5d4b2513c1292151a9...eb79c0de7b3e8296aaf179a083346d5ee9157b36)


### [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt/tree/e6fa5e240bca27e126b9de179e8c56220f1a9c44)

* [Bug 1939199](https://bugzilla.redhat.com/show_bug.cgi?id=1939199): move to go 1.15 and registry.ci.openshift.org [#97](https://github.com/openshift/cluster-api-provider-ovirt/pull/97)
* [Bug 1927256](https://bugzilla.redhat.com/show_bug.cgi?id=1927256): Bump K8s dependencies to 1.20 [#92](https://github.com/openshift/cluster-api-provider-ovirt/pull/92)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ovirt/compare/4708c8bbbf01634892f4699dedb3d7a34392903b...e6fa5e240bca27e126b9de179e8c56220f1a9c44)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/0cea1c05b75777dc3be959f9aef0863fca754d72)

* [Bug 1937829](https://bugzilla.redhat.com/show_bug.cgi?id=1937829): Cherry-pick dual-stack conversion [#460](https://github.com/openshift/ovn-kubernetes/pull/460)
* [Bug 1934645](https://bugzilla.redhat.com/show_bug.cgi?id=1934645): Backport enable support for BFD on external gateway routes [#462](https://github.com/openshift/ovn-kubernetes/pull/462)
* [Bug 1925475](https://bugzilla.redhat.com/show_bug.cgi?id=1925475): Bump OVN to ovn2.13-20.12.0-24.el8fdp [#451](https://github.com/openshift/ovn-kubernetes/pull/451)
* [Bug 1937238](https://bugzilla.redhat.com/show_bug.cgi?id=1937238): Refactor chain setup for NodePort and ExternalIP [#457](https://github.com/openshift/ovn-kubernetes/pull/457)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/ef03521f5daede4fe0f8afd9f42035259636006b...0cea1c05b75777dc3be959f9aef0863fca754d72)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/db87872c6aba7e4e9def29b33beea582557ce940)

* Updating prom-label-proxy builder & base images to be consistent with ART [#330](https://github.com/openshift/prom-label-proxy/pull/330)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/88d4df5541251ea122687610870e725b0099213a...db87872c6aba7e4e9def29b33beea582557ce940)


### [telemeter](https://github.com/openshift/telemeter/tree/e4dac5123ef6b3ecb16b5151e2e8f8aeb8b1f21a)

* Updating telemeter builder & base images to be consistent with ART [#369](https://github.com/openshift/telemeter/pull/369)
* [Full changelog](https://github.com/openshift/telemeter/compare/8742aae6505eebe6a12bffba8223a66ee5fc4a88...e4dac5123ef6b3ecb16b5151e2e8f8aeb8b1f21a)