# 4.7.0-0.okd-2021-03-21-094146 Created: 2021-03-21 11:12:18 +0000 UTC Image Digest: `sha256:3396c6a8a98484969ad728ce7b006e854a8f37649f685913b9cea2f1c9dacd26` Promoted from registry.ci.openshift.org/origin/release:4.7.0-0.okd-2021-03-21-094146 ## Changes from 4.7.0-0.okd-2021-03-07-090821 ### Components * Kubernetes 1.20.0-beta.2 ### Rebuilt images without code change * [console](https://github.com/openshift/console) git [9da3a0e9](https://github.com/openshift/console/commit/9da3a0e9c917f4cb06b05e555c12542e10739f82) `sha256:2b30d82f23a7d600b87b93958b89f75b3eaea58a19af4543ff0672d79aa45ebb` * [etcd](https://github.com/openshift/etcd) git [cca97c76](https://github.com/openshift/etcd/commit/cca97c76b915b1d14abd39814995fa1e2d087145) `sha256:3ce8b23a53a473a8bc43f903853249ddefc3bb4ca5a1c340e712af0557d7ff88` ### [aws-machine-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/2d069b7f8bf4a443ba1a7ac8f669ef05ed92a50e) * [Bug 1935636](https://bugzilla.redhat.com/show_bug.cgi?id=1935636): Ensure response body is closed when we are finished with the request [#391](https://github.com/openshift/cluster-api-provider-aws/pull/391) * [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/5ffc5f422a80169b342c19f50b22a0c4883cc0e3...2d069b7f8bf4a443ba1a7ac8f669ef05ed92a50e) ### [baremetal-installer, installer-artifacts](https://github.com/vrutkovs/installer/tree/7695204e842218d2deea4b115924e6967c90d72f) * [Bug 1922292](https://bugzilla.redhat.com/show_bug.cgi?id=1922292): [release-4.7] data/rhcos.json: Update boot images [#4635](https://github.com/vrutkovs/installer/pull/4635) * [Bug 1924701](https://bugzilla.redhat.com/show_bug.cgi?id=1924701): Fix cluster destroy when byo is used with Kuryr [#4616](https://github.com/vrutkovs/installer/pull/4616) * [Bug 1909978](https://bugzilla.redhat.com/show_bug.cgi?id=1909978): update ignore-volume-az documentation [#4617](https://github.com/vrutkovs/installer/pull/4617) * [Bug 1916692](https://bugzilla.redhat.com/show_bug.cgi?id=1916692): OpenStack: Delete leftover LBs when destroying cluster [#4563](https://github.com/vrutkovs/installer/pull/4563) * [Bug 1919407](https://bugzilla.redhat.com/show_bug.cgi?id=1919407): openstack/validation: enforce control plane size [#4585](https://github.com/vrutkovs/installer/pull/4585) * [Bug 1909978](https://bugzilla.redhat.com/show_bug.cgi?id=1909978): update documentation for ignore-volume-az usage [#4603](https://github.com/vrutkovs/installer/pull/4603) * [Bug 1896218](https://bugzilla.redhat.com/show_bug.cgi?id=1896218): remove GCP role bindings before service accounts [#4602](https://github.com/vrutkovs/installer/pull/4602) * [Bug 1921911](https://bugzilla.redhat.com/show_bug.cgi?id=1921911): Revert "Merge pull request #4589 from patrickdillon/bz-1896218-gcp-se… [#4600](https://github.com/vrutkovs/installer/pull/4600) * [Bug 1921655](https://bugzilla.redhat.com/show_bug.cgi?id=1921655): OpenStack: fix error handling for cloudinfo [#4599](https://github.com/vrutkovs/installer/pull/4599) * [Bug 1896218](https://bugzilla.redhat.com/show_bug.cgi?id=1896218): remove GCP role bindings before service accounts [#4589](https://github.com/vrutkovs/installer/pull/4589) * Updating ose-installer-artifacts builder & base images to be consistent with ART [#4546](https://github.com/vrutkovs/installer/pull/4546) * maintenance: remove pools and volumes [#3620](https://github.com/vrutkovs/installer/pull/3620) * [Bug 1810438](https://bugzilla.redhat.com/show_bug.cgi?id=1810438): oVirt: Add missing piece for gathering bootstrap IP info [#4524](https://github.com/vrutkovs/installer/pull/4524) * Updating ose-baremetal-installer builder & base images to be consistent with ART [#4544](https://github.com/vrutkovs/installer/pull/4544) * Updating ose-installer builder & base images to be consistent with ART [#4543](https://github.com/vrutkovs/installer/pull/4543) * [Bug 1920243](https://bugzilla.redhat.com/show_bug.cgi?id=1920243): disable anonymous auth on bootstrap nodes [#4590](https://github.com/vrutkovs/installer/pull/4590) * [Bug 1917101](https://bugzilla.redhat.com/show_bug.cgi?id=1917101): UPI ovirt - remove RHCOS image from Network req [#4577](https://github.com/vrutkovs/installer/pull/4577) * [Bug 1893117](https://bugzilla.redhat.com/show_bug.cgi?id=1893117): terraform/vsphereprivate: ignore hosts in maintenance mode [#4566](https://github.com/vrutkovs/installer/pull/4566) * [Bug 1919072](https://bugzilla.redhat.com/show_bug.cgi?id=1919072): AWS cloudformation change protocol from ESP to 50 [#4583](https://github.com/vrutkovs/installer/pull/4583) * [Bug 1916938](https://bugzilla.redhat.com/show_bug.cgi?id=1916938): tolerate equal APIFloatingIP and LbFloatingIP [#4575](https://github.com/vrutkovs/installer/pull/4575) * [Bug 1907822](https://bugzilla.redhat.com/show_bug.cgi?id=1907822): Don't panic on bad data in quota validations [#4483](https://github.com/vrutkovs/installer/pull/4483) * [Bug 1912828](https://bugzilla.redhat.com/show_bug.cgi?id=1912828): Rebase on the latest terraform provider/go-ovirt [#4562](https://github.com/vrutkovs/installer/pull/4562) * [Bug 1916373](https://bugzilla.redhat.com/show_bug.cgi?id=1916373): upi: allow IPsec ports [#4552](https://github.com/vrutkovs/installer/pull/4552) * [Bug 1915460](https://bugzilla.redhat.com/show_bug.cgi?id=1915460): ovirt: validate cluster name during install [#4537](https://github.com/vrutkovs/installer/pull/4537) * [Bug 1910244](https://bugzilla.redhat.com/show_bug.cgi?id=1910244): Go mod update for golang crypto [#4569](https://github.com/vrutkovs/installer/pull/4569) * [Bug 1915617](https://bugzilla.redhat.com/show_bug.cgi?id=1915617): update boot images for various fixes [#4540](https://github.com/vrutkovs/installer/pull/4540) * [Bug 1909502](https://bugzilla.redhat.com/show_bug.cgi?id=1909502): pkg/asset/manifests: remove etcd records from proxy config [#4518](https://github.com/vrutkovs/installer/pull/4518) * [Bug 1915998](https://bugzilla.redhat.com/show_bug.cgi?id=1915998): Set Additional Control Plane Security Groups on Bootstrap Node [#4551](https://github.com/vrutkovs/installer/pull/4551) * [Bug 1916271](https://bugzilla.redhat.com/show_bug.cgi?id=1916271): openstack known issues: ControlPlane anti-affinity [#4548](https://github.com/vrutkovs/installer/pull/4548) * [Bug 1813949](https://bugzilla.redhat.com/show_bug.cgi?id=1813949): ignore local env variables when we create a service client [#4426](https://github.com/vrutkovs/installer/pull/4426) * [Bug 1916505](https://bugzilla.redhat.com/show_bug.cgi?id=1916505): AWS IPI: Add IPsec master-to-worker flows [#4554](https://github.com/vrutkovs/installer/pull/4554) * [Bug 1908468](https://bugzilla.redhat.com/show_bug.cgi?id=1908468): azure/validation: some memory values are float and not int [#4530](https://github.com/vrutkovs/installer/pull/4530) * [Bug 1908583](https://bugzilla.redhat.com/show_bug.cgi?id=1908583): Set same additional networks on Bootstrap as Control Plane [#4528](https://github.com/vrutkovs/installer/pull/4528) * [Bug 1914439](https://bugzilla.redhat.com/show_bug.cgi?id=1914439): OpenStack Port Create Typo in SRIOV Docs [#4529](https://github.com/vrutkovs/installer/pull/4529) * [Bug 1909587](https://bugzilla.redhat.com/show_bug.cgi?id=1909587): openstack: Create Control plane nodes sequentially [#4522](https://github.com/vrutkovs/installer/pull/4522) * [Bug 1910127](https://bugzilla.redhat.com/show_bug.cgi?id=1910127): ovirt: UPI doc improvements [#4498](https://github.com/vrutkovs/installer/pull/4498) * [Bug 1913151](https://bugzilla.redhat.com/show_bug.cgi?id=1913151): KubeVirt user docs: change role example - add "update" verb to VM [#4521](https://github.com/vrutkovs/installer/pull/4521) * [Bug 1910070](https://bugzilla.redhat.com/show_bug.cgi?id=1910070): Set termination_grace_period_seconds to 10 minutes [#4511](https://github.com/vrutkovs/installer/pull/4511) * [Bug 1786314](https://bugzilla.redhat.com/show_bug.cgi?id=1786314): bump gophercloud/utils [#4486](https://github.com/vrutkovs/installer/pull/4486) * [Bug 1911819](https://bugzilla.redhat.com/show_bug.cgi?id=1911819): Fix docs/user/kubevirt/install-config.yaml to pass ./hack/yaml-lint.sh [#4519](https://github.com/vrutkovs/installer/pull/4519) * [Bug 1911819](https://bugzilla.redhat.com/show_bug.cgi?id=1911819): Add kubevirt user documentation [#4516](https://github.com/vrutkovs/installer/pull/4516) * [Bug 1908743](https://bugzilla.redhat.com/show_bug.cgi?id=1908743): Add validation that the KubeMacPool component is enabled for the namespace [#4509](https://github.com/vrutkovs/installer/pull/4509) * [Bug 1910049](https://bugzilla.redhat.com/show_bug.cgi?id=1910049): Revert "openstack UPI: Use ansible-galaxy" [#4506](https://github.com/vrutkovs/installer/pull/4506) * [Bug 1882022](https://bugzilla.redhat.com/show_bug.cgi?id=1882022): installconfig: enable vsphere folders for datacenters and clusters. [#4493](https://github.com/vrutkovs/installer/pull/4493) * [Bug 1908782](https://bugzilla.redhat.com/show_bug.cgi?id=1908782): terraform: Add rules to allow internal IPsec traffic [#4491](https://github.com/vrutkovs/installer/pull/4491) * [Bug 1908171](https://bugzilla.redhat.com/show_bug.cgi?id=1908171): fix Terraform issue with GCP custom machine types [#4496](https://github.com/vrutkovs/installer/pull/4496) * [Bug 1907947](https://bugzilla.redhat.com/show_bug.cgi?id=1907947): cloud-creds-secret creation with current context info only [#4484](https://github.com/vrutkovs/installer/pull/4484) * [Bug 1907628](https://bugzilla.redhat.com/show_bug.cgi?id=1907628): OpenStack Documentation for MachineSets with Multiple Networks [#4463](https://github.com/vrutkovs/installer/pull/4463) * [Bug 1906517](https://bugzilla.redhat.com/show_bug.cgi?id=1906517): OpenStack: Skip collecting info for empty subnet IDs [#4474](https://github.com/vrutkovs/installer/pull/4474) * [Bug 1908280](https://bugzilla.redhat.com/show_bug.cgi?id=1908280): update docs for Cinder AZs [#4487](https://github.com/vrutkovs/installer/pull/4487) * [Bug 1907621](https://bugzilla.redhat.com/show_bug.cgi?id=1907621): Bump cluster-api-provider-kubevirt version [#4479](https://github.com/vrutkovs/installer/pull/4479) * [Bug 1890228](https://bugzilla.redhat.com/show_bug.cgi?id=1890228): pkg/destroy/aws: Pass destroy if HostedZone does not exist [#4477](https://github.com/vrutkovs/installer/pull/4477) * [Bug 1906459](https://bugzilla.redhat.com/show_bug.cgi?id=1906459): openstack: fix quota checks when they're unlimited [#4470](https://github.com/vrutkovs/installer/pull/4470) * Update GCP Customization doc to reflect CMEK additions [#4468](https://github.com/vrutkovs/installer/pull/4468) * Openstack: describes how to enable qemu agent for UPI. [#4441](https://github.com/vrutkovs/installer/pull/4441) * oVirt: update team members [#4464](https://github.com/vrutkovs/installer/pull/4464) * [Bug 1904663](https://bugzilla.redhat.com/show_bug.cgi?id=1904663): Fix comparison in pointer ignition customization asset [#4455](https://github.com/vrutkovs/installer/pull/4455) * openstack: Test Nova AZ manifest generation [#4459](https://github.com/vrutkovs/installer/pull/4459) * do not generate the cloud cred secret when credentialsMode is Manual [#4416](https://github.com/vrutkovs/installer/pull/4416) * update gophercloud/utils & terraform/provider-openstack [#4457](https://github.com/vrutkovs/installer/pull/4457) * hack/verify-vendor.sh: Fail early if error [#4421](https://github.com/vrutkovs/installer/pull/4421) * [Bug 1899175](https://bugzilla.redhat.com/show_bug.cgi?id=1899175): data/rhcos.json: Update boot images for RHEL 8.3 [#4414](https://github.com/vrutkovs/installer/pull/4414) * Openstack primary subnet using machine spec [#4346](https://github.com/vrutkovs/installer/pull/4346) * Deprecate computeFlavor in OpenStack platform [#4321](https://github.com/vrutkovs/installer/pull/4321) * openstack: Test manifest creation [#4431](https://github.com/vrutkovs/installer/pull/4431) * openstack: Allow to skip pre-flight validations [#4452](https://github.com/vrutkovs/installer/pull/4452) * [Bug 1900138](https://bugzilla.redhat.com/show_bug.cgi?id=1900138): Removed support for insecure mode for oVirt/RHV installation [#4404](https://github.com/vrutkovs/installer/pull/4404) * openstack: check quotas before creating cluster [#4432](https://github.com/vrutkovs/installer/pull/4432) * OpenStack: Adds clusterOSImageProperties to install-config.yaml [#4401](https://github.com/vrutkovs/installer/pull/4401) * [Bug 1904125](https://bugzilla.redhat.com/show_bug.cgi?id=1904125): Ensure the bootstrap ignition libvirt pool defaults to <clustername>.<id>.bootstrap rather than 'default' [#4448](https://github.com/vrutkovs/installer/pull/4448) * [Bug 1868748](https://bugzilla.redhat.com/show_bug.cgi?id=1868748): baremetal: rename JSON field for ClusterProvisioningIP [#4053](https://github.com/vrutkovs/installer/pull/4053) * Add KubeVirt platform as infrastructure for Openshift installation [#4350](https://github.com/vrutkovs/installer/pull/4350) * cloudproviderconfig: Refactor openstack [#4447](https://github.com/vrutkovs/installer/pull/4447) * Pass CLUSTER_PROFILE env var to CVO render [#4444](https://github.com/vrutkovs/installer/pull/4444) * vSphere Destroy: add log messages for tag destruction [#4407](https://github.com/vrutkovs/installer/pull/4407) * baremetal: send full ignition to masters [#4427](https://github.com/vrutkovs/installer/pull/4427) * asset/installconfig/Azure: Validate install-config instance types [#4419](https://github.com/vrutkovs/installer/pull/4419) * Update MCO doc references [#4445](https://github.com/vrutkovs/installer/pull/4445) * baremetal: Add ironic logwatch containers [#4437](https://github.com/vrutkovs/installer/pull/4437) * Create SR-IOV UPI Docs [#4439](https://github.com/vrutkovs/installer/pull/4439) * docs: update docs/design/resource_dep.svg [#4443](https://github.com/vrutkovs/installer/pull/4443) * [Bug 1903277](https://bugzilla.redhat.com/show_bug.cgi?id=1903277): destroy/aws: remove rules from default security group [#4440](https://github.com/vrutkovs/installer/pull/4440) * Set default release image to 4.7 [#4409](https://github.com/vrutkovs/installer/pull/4409) * baremetal: make cluster provisioning IP optional [#4429](https://github.com/vrutkovs/installer/pull/4429) * pkg/asset/quota: Typo in warning message presented to user [#4430](https://github.com/vrutkovs/installer/pull/4430) * Create a machineconfig for IPI pointer ignition customizations [#4413](https://github.com/vrutkovs/installer/pull/4413) * vSphere Docs: Update to include Permissions [#4393](https://github.com/vrutkovs/installer/pull/4393) * [OSASINFRA-902](https://issues.redhat.com/browse/OSASINFRA-902): Update OpenStack Custom External LB and DNS Docs [#4389](https://github.com/vrutkovs/installer/pull/4389) * baremetal: correct the cacheImageURL when we don't have a provisioningIP [#4408](https://github.com/vrutkovs/installer/pull/4408) * [Bug 1895874](https://bugzilla.redhat.com/show_bug.cgi?id=1895874): Use oVirt Engine certificate verified by the user for installation [#4387](https://github.com/vrutkovs/installer/pull/4387) * [Bug 1899853](https://bugzilla.redhat.com/show_bug.cgi?id=1899853): openstack: CP nodes port to use addtional SGs [#4411](https://github.com/vrutkovs/installer/pull/4411) * baremetal: Handle xz filenames for OKD [#4392](https://github.com/vrutkovs/installer/pull/4392) * Support user provided service-account-signing-key and issuer [#4373](https://github.com/vrutkovs/installer/pull/4373) * pkg: validation for previously existing ovirt configuration [#4354](https://github.com/vrutkovs/installer/pull/4354) * [Bug 1898194](https://bugzilla.redhat.com/show_bug.cgi?id=1898194): installconfig/gcp/validation: handle custom machine types [#4386](https://github.com/vrutkovs/installer/pull/4386) * baremetal: when networking is disabled make the bootstrap provisioning ip optional [#4390](https://github.com/vrutkovs/installer/pull/4390) * [Bug 1898238](https://bugzilla.redhat.com/show_bug.cgi?id=1898238): Validate the the API and Ingress FIPs are not the same [#4385](https://github.com/vrutkovs/installer/pull/4385) * [Bug 1848945](https://bugzilla.redhat.com/show_bug.cgi?id=1848945): OpenStack - Documentation for adding worker nodes using ansible [#4205](https://github.com/vrutkovs/installer/pull/4205) * [Bug 1813012](https://bugzilla.redhat.com/show_bug.cgi?id=1813012): Remove unused etcd discovery domain [#4067](https://github.com/vrutkovs/installer/pull/4067) * [Bug 1894432](https://bugzilla.redhat.com/show_bug.cgi?id=1894432): oVirt, add timeout to tmp_import_vm [#4341](https://github.com/vrutkovs/installer/pull/4341) * baremetal: validate that macs are EUI-48 and unicast [#4378](https://github.com/vrutkovs/installer/pull/4378) * [Bug 1855351](https://bugzilla.redhat.com/show_bug.cgi?id=1855351): standardize interrupt error messages [#4360](https://github.com/vrutkovs/installer/pull/4360) * Stop validating DefaultMachinePlatform [#4391](https://github.com/vrutkovs/installer/pull/4391) * [Bug 1889779](https://bugzilla.redhat.com/show_bug.cgi?id=1889779): vSphere destroy: handle failed clusters [#4388](https://github.com/vrutkovs/installer/pull/4388) * openstack UPI: Use ansible-galaxy [#4379](https://github.com/vrutkovs/installer/pull/4379) * Updating ose-baremetal-installer builder & base images to be consistent with ART [#4370](https://github.com/vrutkovs/installer/pull/4370) * Correcting normal typos [#4363](https://github.com/vrutkovs/installer/pull/4363) * [Bug 1891543](https://bugzilla.redhat.com/show_bug.cgi?id=1891543): openstack: remove platform flavor validation [#4383](https://github.com/vrutkovs/installer/pull/4383) * baremetal: remove root_gb from tfvars [#4319](https://github.com/vrutkovs/installer/pull/4319) * Cleanup: make conversion functions private [#4376](https://github.com/vrutkovs/installer/pull/4376) * [Bug 1888464](https://bugzilla.redhat.com/show_bug.cgi?id=1888464): add tag:UnTagResource perm for aws shared networks [#4371](https://github.com/vrutkovs/installer/pull/4371) * Remove the secrets directory recursively [#4369](https://github.com/vrutkovs/installer/pull/4369) * doc/openstack: update quota reqs for kuryr [#4362](https://github.com/vrutkovs/installer/pull/4362) * Fix 'troubleshooting' typo [#4365](https://github.com/vrutkovs/installer/pull/4365) * libvirt: Bump bootstrap size (primarily for OKD) [#4364](https://github.com/vrutkovs/installer/pull/4364) * data/data/aws/route53: use CNAME for us-iso-east-1 region [#4367](https://github.com/vrutkovs/installer/pull/4367) * [Bug 1886435](https://bugzilla.redhat.com/show_bug.cgi?id=1886435): Fix azure UPI az group deployment deprecation [#4366](https://github.com/vrutkovs/installer/pull/4366) * asset/installconfig/gcp: Validate install-config instance types [#4329](https://github.com/vrutkovs/installer/pull/4329) * Use 'kubernetes.io/tls' instead of SecretTypeTLS which is not being substituted [#4342](https://github.com/vrutkovs/installer/pull/4342) * aws: support custom trust bundle for c2s regions [#4335](https://github.com/vrutkovs/installer/pull/4335) * pkg/asset/cluster/aws: switch to ec2 tagging API [#4356](https://github.com/vrutkovs/installer/pull/4356) * [Bug 1867165](https://bugzilla.redhat.com/show_bug.cgi?id=1867165): baremetal: allow configuring bootstrap mac addresses [#4052](https://github.com/vrutkovs/installer/pull/4052) * doc/openstack/UPI: improvements [#4355](https://github.com/vrutkovs/installer/pull/4355) * Small corrections in ovirt/install_ipi.md [#4353](https://github.com/vrutkovs/installer/pull/4353) * data/bootstrap/files/usr/local/bin/installer-gather: Tee logs into tarball [#4345](https://github.com/vrutkovs/installer/pull/4345) * data/manifests/bootkube/cvo-overrides: Bump default to stable-4.7 [#4347](https://github.com/vrutkovs/installer/pull/4347) * owners: Add mdbooth to openstack-approvers [#4348](https://github.com/vrutkovs/installer/pull/4348) * owners: add dhellmann to baremetal-approvers/reviewers [#4343](https://github.com/vrutkovs/installer/pull/4343) * data/manifests/bootkube/cvo-overrides: Drop the explicit upstream [#4112](https://github.com/vrutkovs/installer/pull/4112) * [Bug 1891543](https://bugzilla.redhat.com/show_bug.cgi?id=1891543): openstack: consider volumes for storage requirements checks [#4323](https://github.com/vrutkovs/installer/pull/4323) * Document how to deploy cluster with BM and VM workers [#4336](https://github.com/vrutkovs/installer/pull/4336) * Wrap errors after OpenStack creds validation [#4338](https://github.com/vrutkovs/installer/pull/4338) * [Bug 1855351](https://bugzilla.redhat.com/show_bug.cgi?id=1855351): Handle CTRL+C in GCP survey [#4334](https://github.com/vrutkovs/installer/pull/4334) * [Bug 1894144](https://bugzilla.redhat.com/show_bug.cgi?id=1894144): baremetal: pin libvirt to 4.5.0 [#4339](https://github.com/vrutkovs/installer/pull/4339) * cmd/openshift-install/create: Use library-go's IngressURI helper [#4245](https://github.com/vrutkovs/installer/pull/4245) * [Bug 1888378](https://bugzilla.redhat.com/show_bug.cgi?id=1888378): Ignore error if resource group already deleted [#4325](https://github.com/vrutkovs/installer/pull/4325) * [Bug 1887863](https://bugzilla.redhat.com/show_bug.cgi?id=1887863): Patch Flavor Not Found validation for OpenStack Install Config [#4289](https://github.com/vrutkovs/installer/pull/4289) * Use authentication for Ironic on baremetal bootstrap host [#4256](https://github.com/vrutkovs/installer/pull/4256) * [Bug 1841381](https://bugzilla.redhat.com/show_bug.cgi?id=1841381): oVirt, add memoryMB validation [#4309](https://github.com/vrutkovs/installer/pull/4309) * [Bug 1878374](https://bugzilla.redhat.com/show_bug.cgi?id=1878374): Adding more nitro and the AMD instance types (AWS, UPI) [#4327](https://github.com/vrutkovs/installer/pull/4327) * [Bug 1866925](https://bugzilla.redhat.com/show_bug.cgi?id=1866925): display Azure destroy auth error [#4331](https://github.com/vrutkovs/installer/pull/4331) * openstack: fixup markdown [#4328](https://github.com/vrutkovs/installer/pull/4328) * Revert "[Azure][Destroy] Check if resource group exists" [#4322](https://github.com/vrutkovs/installer/pull/4322) * Add Encryption Key reference to GCP MachinePool API [#4318](https://github.com/vrutkovs/installer/pull/4318) * aws: block cluster destroy in c2s region [#4316](https://github.com/vrutkovs/installer/pull/4316) * aws: ensure users set ami id for c2s regions [#4315](https://github.com/vrutkovs/installer/pull/4315) * [Bug 1891702](https://bugzilla.redhat.com/show_bug.cgi?id=1891702): pkg/asset/ignition/bootstrap: exit loop if pem.Decode() fails [#4317](https://github.com/vrutkovs/installer/pull/4317) * [Bug 1888378](https://bugzilla.redhat.com/show_bug.cgi?id=1888378): [Azure][Destroy] Check if resource group exists [#4320](https://github.com/vrutkovs/installer/pull/4320) * oVirt: change owners [#4311](https://github.com/vrutkovs/installer/pull/4311) * Code cleanup and optimizations [#4272](https://github.com/vrutkovs/installer/pull/4272) * [Bug 1889267](https://bugzilla.redhat.com/show_bug.cgi?id=1889267): oVirt, increase terraform template and release image timeout to 20m [#4285](https://github.com/vrutkovs/installer/pull/4285) * install-approvers: add staebler [#4297](https://github.com/vrutkovs/installer/pull/4297) * [Bug 1880443](https://bugzilla.redhat.com/show_bug.cgi?id=1880443): allow providing client options when generating OpenStack MachineSets [#4196](https://github.com/vrutkovs/installer/pull/4196) * openstack: Update CI base image [#4291](https://github.com/vrutkovs/installer/pull/4291) * pkg/asset/installconfig/aws: Validate install-config instance type [#4258](https://github.com/vrutkovs/installer/pull/4258) * go.mod Update [#4294](https://github.com/vrutkovs/installer/pull/4294) * [Bug 1836017](https://bugzilla.redhat.com/show_bug.cgi?id=1836017): Configure haproxy to check /readyz [#4012](https://github.com/vrutkovs/installer/pull/4012) * [Bug 1870728](https://bugzilla.redhat.com/show_bug.cgi?id=1870728): pkg/asset/ignition/bootstrap: Display warning if certificates are expired [#4287](https://github.com/vrutkovs/installer/pull/4287) * [Bug 1889852](https://bugzilla.redhat.com/show_bug.cgi?id=1889852): add new AWS regions [#4288](https://github.com/vrutkovs/installer/pull/4288) * [Bug 1877116](https://bugzilla.redhat.com/show_bug.cgi?id=1877116): aws: use file for bootstrap ign when uploading to s3 [#4281](https://github.com/vrutkovs/installer/pull/4281) * [Bug 1886553](https://bugzilla.redhat.com/show_bug.cgi?id=1886553): GCP - Increase worker NAT min ports [#4273](https://github.com/vrutkovs/installer/pull/4273) * cmd: split newlines in logrus stderr output to new entry [#4282](https://github.com/vrutkovs/installer/pull/4282) * openstack: Add a new team member [#4290](https://github.com/vrutkovs/installer/pull/4290) * [Bug 1882649](https://bugzilla.redhat.com/show_bug.cgi?id=1882649): Determine Glance disk format based on file extension [#4279](https://github.com/vrutkovs/installer/pull/4279) * vSphere: Update dockerfile removing certificate [#4274](https://github.com/vrutkovs/installer/pull/4274) * Update README.md - Broken Link - Spelling [#4278](https://github.com/vrutkovs/installer/pull/4278) * OpenStack: remove legacy image validation [#4277](https://github.com/vrutkovs/installer/pull/4277) * [Bug 1882844](https://bugzilla.redhat.com/show_bug.cgi?id=1882844): vsphere destroy: delete tag category created by installer [#4265](https://github.com/vrutkovs/installer/pull/4265) * [Bug 1878900](https://bugzilla.redhat.com/show_bug.cgi?id=1878900): openstack: Fix error messages in flavor validation [#4269](https://github.com/vrutkovs/installer/pull/4269) * OpenStack UPI: Custom API and Ingress vip addresses [#4092](https://github.com/vrutkovs/installer/pull/4092) * [Bug 1888671](https://bugzilla.redhat.com/show_bug.cgi?id=1888671): openstack: Document Cinder's ignore-volume-az [#4271](https://github.com/vrutkovs/installer/pull/4271) * Bump K8s.io version to v0.19.0 [#4266](https://github.com/vrutkovs/installer/pull/4266) * destroy: return aws resources that could not be deleted [#4270](https://github.com/vrutkovs/installer/pull/4270) * install-complete: provide troubleshooting info when operators fail [#4259](https://github.com/vrutkovs/installer/pull/4259) * OpenStack: add clusterOSImage validations [#3964](https://github.com/vrutkovs/installer/pull/3964) * [Bug 1887525](https://bugzilla.redhat.com/show_bug.cgi?id=1887525): baremetal: Wait for master-bmh-update script to succeed [#4262](https://github.com/vrutkovs/installer/pull/4262) * openstack: Bump Ansible to 2.9 in UPI [#4261](https://github.com/vrutkovs/installer/pull/4261) * [Bug 1874248](https://bugzilla.redhat.com/show_bug.cgi?id=1874248): types/vsphere/validation: ensure vcenter is all lower case [#4254](https://github.com/vrutkovs/installer/pull/4254) * [Bug 1884691](https://bugzilla.redhat.com/show_bug.cgi?id=1884691): types: allow manual cred mode for gcp and azure [#4238](https://github.com/vrutkovs/installer/pull/4238) * Updating ose-installer builder & base images to be consistent with ART [#4250](https://github.com/vrutkovs/installer/pull/4250) * Remove dead code [#4252](https://github.com/vrutkovs/installer/pull/4252) * Updating ose-installer-artifacts builder & base images to be consistent with ART [#4251](https://github.com/vrutkovs/installer/pull/4251) * openstack privileges documented [#4214](https://github.com/vrutkovs/installer/pull/4214) * OpenStack: Rename lbFloatingIP to apiFloatingIP [#4244](https://github.com/vrutkovs/installer/pull/4244) * [Bug 1882191](https://bugzilla.redhat.com/show_bug.cgi?id=1882191): Add GODEBUG=x509ignoreCN=0 to systemd DefaultEnvironment [#4248](https://github.com/vrutkovs/installer/pull/4248) * [Bug 1884435](https://bugzilla.redhat.com/show_bug.cgi?id=1884435): vsphere - add delay if resolv.conf is not available; wait for dhcp [#4237](https://github.com/vrutkovs/installer/pull/4237) * [Bug 1777224](https://bugzilla.redhat.com/show_bug.cgi?id=1777224): pkg/asset: metadata to depend on ignition [#4223](https://github.com/vrutkovs/installer/pull/4223) * Bump RHCOS images for Ignition entropy fix [#4241](https://github.com/vrutkovs/installer/pull/4241) * [Bug 1859174](https://bugzilla.redhat.com/show_bug.cgi?id=1859174): Upgrade Terraform provider OpenStack [#4216](https://github.com/vrutkovs/installer/pull/4216) * Fix json tag for GCP auth service account [#4166](https://github.com/vrutkovs/installer/pull/4166) * installer/pkg/quota/gcp/limits.go: fix minor typo in comment [#4160](https://github.com/vrutkovs/installer/pull/4160) * IP address should be specified without underscore. [#3204](https://github.com/vrutkovs/installer/pull/3204) * Docs: OpenStack: Remove mention of cluster failing to destroy [#4208](https://github.com/vrutkovs/installer/pull/4208) * [Bug 1876815](https://bugzilla.redhat.com/show_bug.cgi?id=1876815): OpenStack: unset OS_CLOUD [#4231](https://github.com/vrutkovs/installer/pull/4231) * [Bug 1884558](https://bugzilla.redhat.com/show_bug.cgi?id=1884558): do not use local cacert path in generated clouds.yaml [#4227](https://github.com/vrutkovs/installer/pull/4227) * [Bug 1878758](https://bugzilla.redhat.com/show_bug.cgi?id=1878758): openstack UPI: Allow for no FIP or router [#4219](https://github.com/vrutkovs/installer/pull/4219) * [Bug 1876844](https://bugzilla.redhat.com/show_bug.cgi?id=1876844): openstack UPI: Ignition token needs Glance access [#4236](https://github.com/vrutkovs/installer/pull/4236) * [Bug 1881703](https://bugzilla.redhat.com/show_bug.cgi?id=1881703): Revert "Have the MCO manage the ignition stub config" [#4228](https://github.com/vrutkovs/installer/pull/4228) * [Bug 1882752](https://bugzilla.redhat.com/show_bug.cgi?id=1882752): openstack BM: Remove MachineSet on separate subnet [#4230](https://github.com/vrutkovs/installer/pull/4230) * [Bug 1878900](https://bugzilla.redhat.com/show_bug.cgi?id=1878900): openstack: Skip validation for baremetal flavors [#4222](https://github.com/vrutkovs/installer/pull/4222) * [Bug 1881532](https://bugzilla.redhat.com/show_bug.cgi?id=1881532): openstack: Only list external networks in prompt [#4226](https://github.com/vrutkovs/installer/pull/4226) * [Bug 1882805](https://bugzilla.redhat.com/show_bug.cgi?id=1882805): Bump bootimages for ppc64le and s390x to 46.82.202009240941-0 and 46.82.202009241338-0 [#4215](https://github.com/vrutkovs/installer/pull/4215) * [Bug 1881757](https://bugzilla.redhat.com/show_bug.cgi?id=1881757): tls: set mcs cert common name to not-valid-hostname [#4210](https://github.com/vrutkovs/installer/pull/4210) * [Bug 1882810](https://bugzilla.redhat.com/show_bug.cgi?id=1882810): vsphere - local dns prepender not named with template [#4220](https://github.com/vrutkovs/installer/pull/4220) * [Bug 1853418](https://bugzilla.redhat.com/show_bug.cgi?id=1853418): Ignore trailing dots in baseDomain [#4146](https://github.com/vrutkovs/installer/pull/4146) * [Bug 1881487](https://bugzilla.redhat.com/show_bug.cgi?id=1881487): data/rhcos.json: Update to 46.82.202009220041-0 [#4206](https://github.com/vrutkovs/installer/pull/4206) * [Bug 1877984](https://bugzilla.redhat.com/show_bug.cgi?id=1877984): Fix "OpenShiftSDN" to proper case when generating network config [#4207](https://github.com/vrutkovs/installer/pull/4207) * [Bug 1879533](https://bugzilla.redhat.com/show_bug.cgi?id=1879533): oVirt UPI - Better explanation of the inventory [#4180](https://github.com/vrutkovs/installer/pull/4180) * [Bug 1878789](https://bugzilla.redhat.com/show_bug.cgi?id=1878789): Add note about ignition certificates expiration [#4171](https://github.com/vrutkovs/installer/pull/4171) * [Bug 1877854](https://bugzilla.redhat.com/show_bug.cgi?id=1877854): OpenStack: Support multiple subnets [#4093](https://github.com/vrutkovs/installer/pull/4093) * [Bug 1879649](https://bugzilla.redhat.com/show_bug.cgi?id=1879649): oVirt UPI - Simplify create templates [#4182](https://github.com/vrutkovs/installer/pull/4182) * [Bug 1880393](https://bugzilla.redhat.com/show_bug.cgi?id=1880393): OpenStack UPI: Explain how to encode cert to base64 [#4203](https://github.com/vrutkovs/installer/pull/4203) * [Bug 1880393](https://bugzilla.redhat.com/show_bug.cgi?id=1880393): OpenStack UPI: Trim EOLs from the cacert trustbundle [#4201](https://github.com/vrutkovs/installer/pull/4201) * [Bug 1878163](https://bugzilla.redhat.com/show_bug.cgi?id=1878163): Updating images/baremetal/Dockerfile.ci baseimages to mach ocp-build-data config [#4186](https://github.com/vrutkovs/installer/pull/4186) * [Bug 1879891](https://bugzilla.redhat.com/show_bug.cgi?id=1879891): Fix cluster destroy when fip less installation happened [#4191](https://github.com/vrutkovs/installer/pull/4191) * [Bug 1878163](https://bugzilla.redhat.com/show_bug.cgi?id=1878163): Updating images/installer/Dockerfile.ci baseimages to mach ocp-build-data config [#4185](https://github.com/vrutkovs/installer/pull/4185) * [Bug 1878163](https://bugzilla.redhat.com/show_bug.cgi?id=1878163): Updating images/installer-artifacts/Dockerfile.rhel baseimages to mach ocp-build-data config [#4184](https://github.com/vrutkovs/installer/pull/4184) * [Bug 1876815](https://bugzilla.redhat.com/show_bug.cgi?id=1876815): unset OS_CLOUD during config generator [#4177](https://github.com/vrutkovs/installer/pull/4177) * [Bug 1878108](https://bugzilla.redhat.com/show_bug.cgi?id=1878108): asset/quota/gcp: use GCP api to find CPU count for constraint and guess only on failure [#4163](https://github.com/vrutkovs/installer/pull/4163) * [Bug 1877486](https://bugzilla.redhat.com/show_bug.cgi?id=1877486): proxy: allow * for noProxy [#4172](https://github.com/vrutkovs/installer/pull/4172) * [Bug 1880132](https://bugzilla.redhat.com/show_bug.cgi?id=1880132): destroy/gcp: correct extract service account email from IAM policy binding member [#4193](https://github.com/vrutkovs/installer/pull/4193) * [Bug 1861917](https://bugzilla.redhat.com/show_bug.cgi?id=1861917): Add cpc config to bootstrap [#4178](https://github.com/vrutkovs/installer/pull/4178) * install: increase timeout to 40 minutes [#4181](https://github.com/vrutkovs/installer/pull/4181) * [Bug 1879081](https://bugzilla.redhat.com/show_bug.cgi?id=1879081): OpenStack: Switch to train/centos8 repos [#4175](https://github.com/vrutkovs/installer/pull/4175) * [Bug 1877885](https://bugzilla.redhat.com/show_bug.cgi?id=1877885): oVirt UPI - Add Ansible playbooks download [#4169](https://github.com/vrutkovs/installer/pull/4169) * [Bug 1878758](https://bugzilla.redhat.com/show_bug.cgi?id=1878758): openstack UPI: Optional floating IPs [#3755](https://github.com/vrutkovs/installer/pull/3755) * [Bug 1877763](https://bugzilla.redhat.com/show_bug.cgi?id=1877763): oVirt UPI - python code snippets without semicolons [#4170](https://github.com/vrutkovs/installer/pull/4170) * [Bug 1874747](https://bugzilla.redhat.com/show_bug.cgi?id=1874747): ovirt: dont start the temp VM before template creation [#4168](https://github.com/vrutkovs/installer/pull/4168) * [Bug 1878243](https://bugzilla.redhat.com/show_bug.cgi?id=1878243): openstack: Upgrade the CI build image [#4161](https://github.com/vrutkovs/installer/pull/4161) * [Bug 1877440](https://bugzilla.redhat.com/show_bug.cgi?id=1877440): oVirt UPI Assets_dir set according to env var [#4153](https://github.com/vrutkovs/installer/pull/4153) * [Bug 1874457](https://bugzilla.redhat.com/show_bug.cgi?id=1874457): Add support to clean custom router [#4159](https://github.com/vrutkovs/installer/pull/4159) * [Bug 1877676](https://bugzilla.redhat.com/show_bug.cgi?id=1877676): OpenStack: Refresh documentation about ingress FIP [#4059](https://github.com/vrutkovs/installer/pull/4059) * [Bug 1877436](https://bugzilla.redhat.com/show_bug.cgi?id=1877436): oVirt UPI RHCOS explanations, assets env var [#4152](https://github.com/vrutkovs/installer/pull/4152) * [Bug 1877862](https://bugzilla.redhat.com/show_bug.cgi?id=1877862): oVirt UPI - Fix templates check and optimize image check [#4157](https://github.com/vrutkovs/installer/pull/4157) * [Bug 1877741](https://bugzilla.redhat.com/show_bug.cgi?id=1877741): installer-masters-gather.sh: gather openshift-{azure,gcp}-routes logs [#4148](https://github.com/vrutkovs/installer/pull/4148) * [Bug 1873125](https://bugzilla.redhat.com/show_bug.cgi?id=1873125): Fix python syntax for OpenStack UPI scripts [#4154](https://github.com/vrutkovs/installer/pull/4154) * [Bug 1870038](https://bugzilla.redhat.com/show_bug.cgi?id=1870038): vmware upi: haproxy.service to rm haproxy pod on ExecStop [#4132](https://github.com/vrutkovs/installer/pull/4132) * [Bug 1866925](https://bugzilla.redhat.com/show_bug.cgi?id=1866925): pkg/destroy/azure: fail fast if unable to list resources for any reason [#4025](https://github.com/vrutkovs/installer/pull/4025) * [Bug 1873125](https://bugzilla.redhat.com/show_bug.cgi?id=1873125): OpenStack: UPI missing instructions to update apiVIP and ingressVIP [#4133](https://github.com/vrutkovs/installer/pull/4133) * [Bug 1875855](https://bugzilla.redhat.com/show_bug.cgi?id=1875855): increase timeout for bootstrap ignition downloading [#4145](https://github.com/vrutkovs/installer/pull/4145) * [Bug 1856928](https://bugzilla.redhat.com/show_bug.cgi?id=1856928): Fix Non yaml files in manifests/ or openshift/ directories preventing bootstrap from completing [#4091](https://github.com/vrutkovs/installer/pull/4091) * [Bug 1876825](https://bugzilla.redhat.com/show_bug.cgi?id=1876825): generate lbFloatingIP in OpenStack config [#4147](https://github.com/vrutkovs/installer/pull/4147) * [Bug 1876792](https://bugzilla.redhat.com/show_bug.cgi?id=1876792): oVirt UPI Move Network Requirements section [#4142](https://github.com/vrutkovs/installer/pull/4142) * [Bug 1876783](https://bugzilla.redhat.com/show_bug.cgi?id=1876783): oVirt UPI fix python cmd [#4141](https://github.com/vrutkovs/installer/pull/4141) * [Bug 1876562](https://bugzilla.redhat.com/show_bug.cgi?id=1876562): Small readability improvements to UPI on RHV documentation [#4136](https://github.com/vrutkovs/installer/pull/4136) * [Bug 1871653](https://bugzilla.redhat.com/show_bug.cgi?id=1871653): baremetal: set root device hints on host resources [#4088](https://github.com/vrutkovs/installer/pull/4088) * [Bug 1875932](https://bugzilla.redhat.com/show_bug.cgi?id=1875932): Update baremetal DNS design details [#4101](https://github.com/vrutkovs/installer/pull/4101) * [Bug 1868439](https://bugzilla.redhat.com/show_bug.cgi?id=1868439): openstack UPI: Fix JSON syntax [#4140](https://github.com/vrutkovs/installer/pull/4140) * [Bug 1874656](https://bugzilla.redhat.com/show_bug.cgi?id=1874656): Bump RHCOS for s390x/ppc64le to fix SSH authentication [#4124](https://github.com/vrutkovs/installer/pull/4124) * [Bug 1861917](https://bugzilla.redhat.com/show_bug.cgi?id=1861917): bootkube: add image for cluster-policy-controller [#4131](https://github.com/vrutkovs/installer/pull/4131) * [Bug 1871712](https://bugzilla.redhat.com/show_bug.cgi?id=1871712): pkg/destroy/aws: Detach attached policies during destroy [#4126](https://github.com/vrutkovs/installer/pull/4126) * [Bug 1867975](https://bugzilla.redhat.com/show_bug.cgi?id=1867975): aws: ensure users set ami id for us-gov and cn regions [#4103](https://github.com/vrutkovs/installer/pull/4103) * [Bug 1868439](https://bugzilla.redhat.com/show_bug.cgi?id=1868439): openstack UPI: Fix Ingition key error [#4135](https://github.com/vrutkovs/installer/pull/4135) * [Bug 1872080](https://bugzilla.redhat.com/show_bug.cgi?id=1872080): Updating images/baremetal/Dockerfile.ci baseimages to mach ocp-build-data config [#4086](https://github.com/vrutkovs/installer/pull/4086) * [Bug 1872080](https://bugzilla.redhat.com/show_bug.cgi?id=1872080): Updating images/installer-artifacts/Dockerfile.rhel baseimages to mach ocp-build-data config [#4085](https://github.com/vrutkovs/installer/pull/4085) * [Bug 1872080](https://bugzilla.redhat.com/show_bug.cgi?id=1872080): Updating images/installer/Dockerfile.ci baseimages to mach ocp-build-data config [#4087](https://github.com/vrutkovs/installer/pull/4087) * BUG 1872646: oVirt, remove tmp VM disk on destroy [#4129](https://github.com/vrutkovs/installer/pull/4129) * hack/update-rhcos-bootimage: update usage example [#4097](https://github.com/vrutkovs/installer/pull/4097) * [Bug 1813012](https://bugzilla.redhat.com/show_bug.cgi?id=1813012): Remove unused flags previously needed for etcd static pod [#4063](https://github.com/vrutkovs/installer/pull/4063) * [Bug 1842071](https://bugzilla.redhat.com/show_bug.cgi?id=1842071): Add ppc64le and s390x documentation links [#4115](https://github.com/vrutkovs/installer/pull/4115) * [Bug 1873448](https://bugzilla.redhat.com/show_bug.cgi?id=1873448): Ensure proper tagging of compute nodes ports [#4118](https://github.com/vrutkovs/installer/pull/4118) * [Bug 1872861](https://bugzilla.redhat.com/show_bug.cgi?id=1872861): Update cli container image for UPI [#4098](https://github.com/vrutkovs/installer/pull/4098) * [Bug 1873712](https://bugzilla.redhat.com/show_bug.cgi?id=1873712): Add information about AZs limitations with Kuryr [#4109](https://github.com/vrutkovs/installer/pull/4109) * [Bug 1871795](https://bugzilla.redhat.com/show_bug.cgi?id=1871795): bump RHCOS images to fix SSH authentication [#4095](https://github.com/vrutkovs/installer/pull/4095) * [Bug 1873123](https://bugzilla.redhat.com/show_bug.cgi?id=1873123): omit deprecated parameters during config generation [#4100](https://github.com/vrutkovs/installer/pull/4100) * [Bug 1813012](https://bugzilla.redhat.com/show_bug.cgi?id=1813012): Remove unused etcd host service and endpoints [#4068](https://github.com/vrutkovs/installer/pull/4068) * [Bug 1871030](https://bugzilla.redhat.com/show_bug.cgi?id=1871030): data/data/gcp: be pedantic about setting the region [#4089](https://github.com/vrutkovs/installer/pull/4089) * [Bug 1856270](https://bugzilla.redhat.com/show_bug.cgi?id=1856270): Update known issues with info about provisioning state node bug [#4083](https://github.com/vrutkovs/installer/pull/4083) * [Bug 1870082](https://bugzilla.redhat.com/show_bug.cgi?id=1870082): Use index in MachineSet names for Openstack IPI [#4070](https://github.com/vrutkovs/installer/pull/4070) * [Bug 1813012](https://bugzilla.redhat.com/show_bug.cgi?id=1813012): Remove legacy code for unmanaged cluster-etcd-operator [#4062](https://github.com/vrutkovs/installer/pull/4062) * [Bug 1863026](https://bugzilla.redhat.com/show_bug.cgi?id=1863026): docs/user/azure: remove newlines from base64 encoding in UPI install doc [#4090](https://github.com/vrutkovs/installer/pull/4090) * [Bug 1871048](https://bugzilla.redhat.com/show_bug.cgi?id=1871048): OpenStack: dynamically set end of DHCP allocation pool [#4077](https://github.com/vrutkovs/installer/pull/4077) * [Bug 1868773](https://bugzilla.redhat.com/show_bug.cgi?id=1868773): Libvirt: Bump bootstrap memory to 4G [#4080](https://github.com/vrutkovs/installer/pull/4080) * [Bug 1862209](https://bugzilla.redhat.com/show_bug.cgi?id=1862209): aws: fix validation for user tags [#4081](https://github.com/vrutkovs/installer/pull/4081) * [Bug 1871124](https://bugzilla.redhat.com/show_bug.cgi?id=1871124): OpenStack: Improve snippet for playbooks download [#4079](https://github.com/vrutkovs/installer/pull/4079) * [Bug 1871124](https://bugzilla.redhat.com/show_bug.cgi?id=1871124): openstack UPI: Provide a way to get the playbooks [#4078](https://github.com/vrutkovs/installer/pull/4078) * [Bug 1866534](https://bugzilla.redhat.com/show_bug.cgi?id=1866534): fixes bootstrap DNS failure on bare metal [#4015](https://github.com/vrutkovs/installer/pull/4015) * [Bug 1862957](https://bugzilla.redhat.com/show_bug.cgi?id=1862957): bump RHCOS images for FIPS fix [#4066](https://github.com/vrutkovs/installer/pull/4066) * [Bug 1870592](https://bugzilla.redhat.com/show_bug.cgi?id=1870592): openstack: Document MachineSet availabilityZone [#4074](https://github.com/vrutkovs/installer/pull/4074) * Readme.md: Remove experimental tag for OpenStack UPI [#3982](https://github.com/vrutkovs/installer/pull/3982) * [Bug 1866693](https://bugzilla.redhat.com/show_bug.cgi?id=1866693): docs: drop kernel-devel from supported extensions [#4030](https://github.com/vrutkovs/installer/pull/4030) * [Bug 1864092](https://bugzilla.redhat.com/show_bug.cgi?id=1864092): baremetal: copy the implementation of rootdevicehints from baremetal-operator [#4002](https://github.com/vrutkovs/installer/pull/4002) * [Bug 1862290](https://bugzilla.redhat.com/show_bug.cgi?id=1862290): vendor/terraform-provider-vsphere: DiskPostCloneOperation patch carry [#4060](https://github.com/vrutkovs/installer/pull/4060) * [Bug 1868439](https://bugzilla.redhat.com/show_bug.cgi?id=1868439): openstack UPI: Fix Ignition v3 [#4058](https://github.com/vrutkovs/installer/pull/4058) * openstack: Known issue: no BMs on Kuryr [#4051](https://github.com/vrutkovs/installer/pull/4051) * [Bug 1869329](https://bugzilla.redhat.com/show_bug.cgi?id=1869329): OpenStack: Place Bootstrap in one of the master AZs [#4056](https://github.com/vrutkovs/installer/pull/4056) * Bump rhcos images for s390x [#4050](https://github.com/vrutkovs/installer/pull/4050) * OpenStack: Fixups to BM workers documentation [#4057](https://github.com/vrutkovs/installer/pull/4057) * [Bug 1868439](https://bugzilla.redhat.com/show_bug.cgi?id=1868439): openstack upi: fix Ignition key error [#4047](https://github.com/vrutkovs/installer/pull/4047) * OpenStack: baremetal worker documentation [#3955](https://github.com/vrutkovs/installer/pull/3955) * [Bug 1866949](https://bugzilla.redhat.com/show_bug.cgi?id=1866949): data/data/aws/route53: use CNAME for gov cloud partition [#4043](https://github.com/vrutkovs/installer/pull/4043) * [Bug 1862044](https://bugzilla.redhat.com/show_bug.cgi?id=1862044): deleting servers using metadata-based filtering [#4032](https://github.com/vrutkovs/installer/pull/4032) * [Bug 1867972](https://bugzilla.redhat.com/show_bug.cgi?id=1867972): destroy/aws: setup the resourcetagging api with correct region for gov cloud [#4042](https://github.com/vrutkovs/installer/pull/4042) * Bump rhcos images for ppc64le [#4021](https://github.com/vrutkovs/installer/pull/4021) * [Bug 1867519](https://bugzilla.redhat.com/show_bug.cgi?id=1867519): make externalNetwork optional [#4029](https://github.com/vrutkovs/installer/pull/4029) * [Full changelog](https://github.com/vrutkovs/installer/compare/2ef2b7e490e63e5a8afff6c98fe12505540c2114...7695204e842218d2deea4b115924e6967c90d72f) ### [branding](https://github.com/openshift/origin-branding/tree/102124a8461a9abf209e8290af47a7a8313d4689) * [Bug 1935805](https://bugzilla.redhat.com/show_bug.cgi?id=1935805): Fix documentation link for OKD [#12](https://github.com/openshift/origin-branding/pull/12) * [Full changelog](https://github.com/openshift/origin-branding/compare/334347baf638f786ec1e5236def65a12c2d76586...102124a8461a9abf209e8290af47a7a8313d4689) ### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/c8d1f56fb3e20d7ee2b4e0280425ef95a013e9ee) * [Bug 1939477](https://bugzilla.redhat.com/show_bug.cgi?id=1939477): Fix unit test to use new IS [#769](https://github.com/openshift/oc/pull/769) * [Full changelog](https://github.com/openshift/oc/compare/c66c03f3012a10f16eb86fdce6330433adf6c9ee...c8d1f56fb3e20d7ee2b4e0280425ef95a013e9ee) ### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/ac544d46b0f4aa100e40336d87ec069eca335323) * Updating vertical-pod-autoscaler builder & base images to be consistent with ART [#190](https://github.com/openshift/kubernetes-autoscaler/pull/190) * [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/7f1d0ad0b53d17879034597d97dac23c9a23dbcb...ac544d46b0f4aa100e40336d87ec069eca335323) ### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/331db4e9e26c702601ccbe72ff789016034bf778) * [Bug 1936587](https://bugzilla.redhat.com/show_bug.cgi?id=1936587): Set CoreDNS's cache's maximum TTL to 900 seconds [#245](https://github.com/openshift/cluster-dns-operator/pull/245) * [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/b37ee1578d3c2a2b0e32723a17a818174662236a...331db4e9e26c702601ccbe72ff789016034bf778) ### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/e9b715829f264317a13a5ace7f1eda76edad9fcd) * [Bug 1935891](https://bugzilla.redhat.com/show_bug.cgi?id=1935891): Canary: Perform canary test probes over https [#566](https://github.com/openshift/cluster-ingress-operator/pull/566) * [Bug 1936093](https://bugzilla.redhat.com/show_bug.cgi?id=1936093): Canary: Use cluster-wide proxy for canary client [#568](https://github.com/openshift/cluster-ingress-operator/pull/568) * [Bug 1934904](https://bugzilla.redhat.com/show_bug.cgi?id=1934904): Canary: Schedule canary server pods to worker and infra nodes [#564](https://github.com/openshift/cluster-ingress-operator/pull/564) * [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/c7625965839fe53059df5ea3224a867554bf6b86...e9b715829f264317a13a5ace7f1eda76edad9fcd) ### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/54484757581ec26f178c599215715bafd6029582) * Updating ose-cluster-kube-storage-version-migrator-operator builder & base images to be consistent with ART [#38](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/38) * [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/572caa117777db92d52564290522be3489f40074...54484757581ec26f178c599215715bafd6029582) ### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/3b4ba34a9afd6cedf534445d52d279fdd01e36a5) * [Bug 1926876](https://bugzilla.redhat.com/show_bug.cgi?id=1926876): pkg/manifests: fix prometheus-proxy trustedCA [#1051](https://github.com/openshift/cluster-monitoring-operator/pull/1051) * [Bug 1932820](https://bugzilla.redhat.com/show_bug.cgi?id=1932820): Remove kube-apiserver-availability.rules [#1069](https://github.com/openshift/cluster-monitoring-operator/pull/1069) * [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/dea798c5e45e05b431f203bb382fd06bafb88f6d...3b4ba34a9afd6cedf534445d52d279fdd01e36a5) ### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/0b193c70bc5ab42fb620ef48438308b142154eea) * [Bug 1937829](https://bugzilla.redhat.com/show_bug.cgi?id=1937829): Cherry-pick dual stack migration [#1017](https://github.com/openshift/cluster-network-operator/pull/1017) * [Bug 1928028](https://bugzilla.redhat.com/show_bug.cgi?id=1928028): Kuryr: Let Kuryr autodetect primary CNI interface [#978](https://github.com/openshift/cluster-network-operator/pull/978) * [Bug 1935473](https://bugzilla.redhat.com/show_bug.cgi?id=1935473): Include LB members for Machines created on day-2 operation [#1002](https://github.com/openshift/cluster-network-operator/pull/1002) * [Full changelog](https://github.com/openshift/cluster-network-operator/compare/2cf98811eba874f02a2bdcb73844549a454cae8d...0b193c70bc5ab42fb620ef48438308b142154eea) ### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/397e8bad8d095b1f34fc2173d8a66fdd0e6a9352) * [Bug 1926795](https://bugzilla.redhat.com/show_bug.cgi?id=1926795): install/0000_90_cluster-version-operator_02_servicemonitor.yaml: adjust "CannotRetrieveUpdates" to "warning" [#516](https://github.com/openshift/cluster-version-operator/pull/516) * [Full changelog](https://github.com/openshift/cluster-version-operator/compare/cf0e3d15edd16777dac91e894af733b1e245d53c...397e8bad8d095b1f34fc2173d8a66fdd0e6a9352) ### [csi-driver-manila, openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack/tree/5202bfdc042bafa732f19dcbec31ca6137fa3fa4) * [Bug 1933659](https://bugzilla.redhat.com/show_bug.cgi?id=1933659): Add udev to the driver image [#47](https://github.com/openshift/cloud-provider-openstack/pull/47) * [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/7def9722bc0c3c34336ceee8331eee27ec3f4c7f...5202bfdc042bafa732f19dcbec31ca6137fa3fa4) ### [docker-builder](https://github.com/openshift/builder/tree/cfe626635ab8799dcc7d874429fdfdd10406400b) * [Bug 1939218](https://bugzilla.redhat.com/show_bug.cgi?id=1939218): bump(containers/*): [#224](https://github.com/openshift/builder/pull/224) * [Full changelog](https://github.com/openshift/builder/compare/67e88c5fafb9c49f228f48810e34af07db9581f0...cfe626635ab8799dcc7d874429fdfdd10406400b) ### [gcp-machine-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/7215497c95a43c5f633bc511e3e85dd1d956a931) * [Bug 1935636](https://bugzilla.redhat.com/show_bug.cgi?id=1935636): Ensure response body is closed when we are finished with the request [#151](https://github.com/openshift/cluster-api-provider-gcp/pull/151) * [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/186b21520ddb0f1e29d3a709715369135fcaebcd...7215497c95a43c5f633bc511e3e85dd1d956a931) ### [grafana](https://github.com/openshift/grafana/tree/b02c35dc2d01fce696a3edc28839a9f9fd0150a3) * Updating grafana builder & base images to be consistent with ART [#54](https://github.com/openshift/grafana/pull/54) * [Full changelog](https://github.com/openshift/grafana/compare/cf0a81cb4b68a2543249def193e1b83e94734725...b02c35dc2d01fce696a3edc28839a9f9fd0150a3) ### [hello-openshift, tests](https://github.com/openshift/origin/tree/98285f8660818224b33d9876fb6ddbd5d5b25a86) * [Bug 1939477](https://bugzilla.redhat.com/show_bug.cgi?id=1939477): Update tests to use Ruby 2.7 [#25966](https://github.com/openshift/origin/pull/25966) * [Bug 1927554](https://bugzilla.redhat.com/show_bug.cgi?id=1927554): adjust route host for redis/nodejs/cakephp to accomodate new apiserver restrictions [#25884](https://github.com/openshift/origin/pull/25884) * [Full changelog](https://github.com/openshift/origin/compare/98a759fa802ab87153d0c75b18bc977a91154f69...98285f8660818224b33d9876fb6ddbd5d5b25a86) ### [hyperkube](https://github.com/openshift/kubernetes/tree/bafe72fb05eddc8246040b9945ec242b9f805935) * [Bug 1931702](https://bugzilla.redhat.com/show_bug.cgi?id=1931702): UPSTREAM: 96958: kubelet: remove periodic messages from log-level 2 [#589](https://github.com/openshift/kubernetes/pull/589) * [Bug 1931745](https://bugzilla.redhat.com/show_bug.cgi?id=1931745): UPSTREAM: 98956: Fix race when KillPod followed by IsPodPendingTermining [#590](https://github.com/openshift/kubernetes/pull/590) * [Bug 1929674](https://bugzilla.redhat.com/show_bug.cgi?id=1929674): kubelet: fix create sandbox delete pod race [#591](https://github.com/openshift/kubernetes/pull/591) * [Bug 1933094](https://bugzilla.redhat.com/show_bug.cgi?id=1933094): UPSTREAM: 98742: Sync completed pods until their containers have been terminated [#595](https://github.com/openshift/kubernetes/pull/595) * [Full changelog](https://github.com/openshift/kubernetes/compare/5fbfd197c16d3c5facbaa1d7b9f3ea58cf6b36e9...bafe72fb05eddc8246040b9945ec242b9f805935) ### [insights-operator](https://github.com/openshift/insights-operator/tree/ef5a950ecdadd7d5e73ca1edfeace761e953b853) * [Bug 1936861](https://bugzilla.redhat.com/show_bug.cgi?id=1936861): Include namespace name in binarydata configmap path & test (#368) (#370) [#368](https://github.com/openshift/insights-operator/pull/368) * [Full changelog](https://github.com/openshift/insights-operator/compare/4d0bc3a840b801b18270ff614678bacad65d93b8...ef5a950ecdadd7d5e73ca1edfeace761e953b853) ### [installer](https://github.com/vrutkovs/installer/tree/7695204e842218d2deea4b115924e6967c90d72f) * [Bug 1922292](https://bugzilla.redhat.com/show_bug.cgi?id=1922292): [release-4.7] data/rhcos.json: Update boot images [#4635](https://github.com/vrutkovs/installer/pull/4635) * [Full changelog](https://github.com/vrutkovs/installer/compare/a005bb9eddcbc97e4cac2cdf4436fe2d524cc75e...7695204e842218d2deea4b115924e6967c90d72f) ### [jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/503e5770e622bf78a746628a8b276a2616365135) * [release 4.7] Bug 1929118: update kubernetes-client-api [#1230](https://github.com/openshift/jenkins/pull/1230) * [Full changelog](https://github.com/openshift/jenkins/compare/41fc44729e398eac8a06c8222cf653c80f125a2c...503e5770e622bf78a746628a8b276a2616365135) ### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/8f0968de25a351f5663b6ec379918d25e1dfa785) * [Bug 1936920](https://bugzilla.redhat.com/show_bug.cgi?id=1936920): networkpolicy: pass traffic through NAT to handle possible tuple collisions [#272](https://github.com/openshift/sdn/pull/272) * [Full changelog](https://github.com/openshift/sdn/compare/3acf8c465a21c23acb62c50de1aee40f717bf528...8f0968de25a351f5663b6ec379918d25e1dfa785) ### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/49a22de017c178f6f719825625cd5d14134a88b5) * [Bug 1938960](https://bugzilla.redhat.com/show_bug.cgi?id=1938960): Do not default protocol to TCP for allow-all NPs [#480](https://github.com/openshift/kuryr-kubernetes/pull/480) * [Bug 1930017](https://bugzilla.redhat.com/show_bug.cgi?id=1930017): Narrow connection to the cluster only on namespaceSelector [#460](https://github.com/openshift/kuryr-kubernetes/pull/460) * [Bug 1928029](https://bugzilla.redhat.com/show_bug.cgi?id=1928029): Get trunks more diligently [#449](https://github.com/openshift/kuryr-kubernetes/pull/449) * [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/a31d885264e7a68ff49b6baa96bb5868dae9e5a3...49a22de017c178f6f719825625cd5d14134a88b5) ### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/a00ea96d676b2b87a7de6f8ad2cac09ed2f14c67) * [Bug 1929721](https://bugzilla.redhat.com/show_bug.cgi?id=1929721): Add SecurityProfile.EncryptionAtHost parameter to enable host-based VM encryption [#818](https://github.com/openshift/machine-api-operator/pull/818) * [Full changelog](https://github.com/openshift/machine-api-operator/compare/13126c309bc4f2cd535f536c6925e245a44ac649...a00ea96d676b2b87a7de6f8ad2cac09ed2f14c67) ### [machine-os-content](https://github.com/openshift/okd-machine-os/tree/b632cfe7be5dc185b8259395daacc82922178fb8) * overlay: add NetworkManager config to prevent requesting additional MAC [#109](https://github.com/openshift/okd-machine-os/pull/109) * overlay: add dhcp-client-identifier [#101](https://github.com/openshift/okd-machine-os/pull/101) * manifests: add include.release annotations [#98](https://github.com/openshift/okd-machine-os/pull/98) * [Full changelog](https://github.com/openshift/okd-machine-os/compare/421333e9f658dcca306b5207d9e4169a2785e42a...b632cfe7be5dc185b8259395daacc82922178fb8) ### [multus-cni](https://github.com/openshift/multus-cni/tree/1728ddf0d06ef43386aa64aeab41a9e0380c6813) * [Bug 1936334](https://bugzilla.redhat.com/show_bug.cgi?id=1936334): Updating multus-cni builder & base images to be consistent with ART [#81](https://github.com/openshift/multus-cni/pull/81) * [Full changelog](https://github.com/openshift/multus-cni/compare/7aa53b3cb5ae0ae4b03906803c7aff37447d4357...1728ddf0d06ef43386aa64aeab41a9e0380c6813) ### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/dfe6b395b67c0cede73e6edf758976ae208b930c) * [Bug 1931950](https://bugzilla.redhat.com/show_bug.cgi?id=1931950): [backport 4.7] Fix for IPv6 when leading hextets equal zero [#49](https://github.com/openshift/whereabouts-cni/pull/49) * [Full changelog](https://github.com/openshift/whereabouts-cni/compare/900aa4231bd31026b3a305f8077c8959f51d8059...dfe6b395b67c0cede73e6edf758976ae208b930c) ### [operator-lifecycle-manager](https://github.com/operator-framework/operator-lifecycle-manager/tree/5e1931322e24a04530aff2113025cdbf76740884) * [Bug 1933839](https://bugzilla.redhat.com/show_bug.cgi?id=1933839): bump k8s.io/apiserver for webhook authorizer panic fix [#2022](https://github.com/operator-framework/operator-lifecycle-manager/pull/2022) * [Bug 1936707](https://bugzilla.redhat.com/show_bug.cgi?id=1936707): Allow non-CSV-owned ServiceAccounts to satisfy CSV requirements. [#2034](https://github.com/operator-framework/operator-lifecycle-manager/pull/2034) * [Bug 1938405](https://bugzilla.redhat.com/show_bug.cgi?id=1938405): Support jittering relatively small resync intervals. [#2041](https://github.com/operator-framework/operator-lifecycle-manager/pull/2041) * Updating operator-lifecycle-manager builder & base images to be consistent with ART [#2013](https://github.com/operator-framework/operator-lifecycle-manager/pull/2013) * [Bug 1934724](https://bugzilla.redhat.com/show_bug.cgi?id=1934724): fix(resolver): Allow skipped versions to be installed initially [#2027](https://github.com/operator-framework/operator-lifecycle-manager/pull/2027) * [Bug 1929904](https://bugzilla.redhat.com/show_bug.cgi?id=1929904): Infer package name property for unannotated CSVs, if possible. [#2033](https://github.com/operator-framework/operator-lifecycle-manager/pull/2033) * [Full changelog](https://github.com/operator-framework/operator-lifecycle-manager/compare/45ee0b4e47b9cac58c14892f998307a73ab46879...5e1931322e24a04530aff2113025cdbf76740884) ### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/eb79c0de7b3e8296aaf179a083346d5ee9157b36) * [Bug 1927456](https://bugzilla.redhat.com/show_bug.cgi?id=1927456): update defaults to 4.7 [#382](https://github.com/operator-framework/operator-marketplace/pull/382) * [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/37d14d1aaaba2cd223469b5d4b2513c1292151a9...eb79c0de7b3e8296aaf179a083346d5ee9157b36) ### [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt/tree/e6fa5e240bca27e126b9de179e8c56220f1a9c44) * [Bug 1939199](https://bugzilla.redhat.com/show_bug.cgi?id=1939199): move to go 1.15 and registry.ci.openshift.org [#97](https://github.com/openshift/cluster-api-provider-ovirt/pull/97) * [Bug 1927256](https://bugzilla.redhat.com/show_bug.cgi?id=1927256): Bump K8s dependencies to 1.20 [#92](https://github.com/openshift/cluster-api-provider-ovirt/pull/92) * [Full changelog](https://github.com/openshift/cluster-api-provider-ovirt/compare/4708c8bbbf01634892f4699dedb3d7a34392903b...e6fa5e240bca27e126b9de179e8c56220f1a9c44) ### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/0cea1c05b75777dc3be959f9aef0863fca754d72) * [Bug 1937829](https://bugzilla.redhat.com/show_bug.cgi?id=1937829): Cherry-pick dual-stack conversion [#460](https://github.com/openshift/ovn-kubernetes/pull/460) * [Bug 1934645](https://bugzilla.redhat.com/show_bug.cgi?id=1934645): Backport enable support for BFD on external gateway routes [#462](https://github.com/openshift/ovn-kubernetes/pull/462) * [Bug 1925475](https://bugzilla.redhat.com/show_bug.cgi?id=1925475): Bump OVN to ovn2.13-20.12.0-24.el8fdp [#451](https://github.com/openshift/ovn-kubernetes/pull/451) * [Bug 1937238](https://bugzilla.redhat.com/show_bug.cgi?id=1937238): Refactor chain setup for NodePort and ExternalIP [#457](https://github.com/openshift/ovn-kubernetes/pull/457) * [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/ef03521f5daede4fe0f8afd9f42035259636006b...0cea1c05b75777dc3be959f9aef0863fca754d72) ### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/db87872c6aba7e4e9def29b33beea582557ce940) * Updating prom-label-proxy builder & base images to be consistent with ART [#330](https://github.com/openshift/prom-label-proxy/pull/330) * [Full changelog](https://github.com/openshift/prom-label-proxy/compare/88d4df5541251ea122687610870e725b0099213a...db87872c6aba7e4e9def29b33beea582557ce940) ### [telemeter](https://github.com/openshift/telemeter/tree/e4dac5123ef6b3ecb16b5151e2e8f8aeb8b1f21a) * Updating telemeter builder & base images to be consistent with ART [#369](https://github.com/openshift/telemeter/pull/369) * [Full changelog](https://github.com/openshift/telemeter/compare/8742aae6505eebe6a12bffba8223a66ee5fc4a88...e4dac5123ef6b3ecb16b5151e2e8f8aeb8b1f21a)