# 4.7.0-0.okd-2021-09-19-013247 Created: 2021-09-19 07:48:41 +0000 UTC Image Digest: `sha256:dbf6525b1580c9cf0d03b8841b6f9b0a9c05dc306a825bc66d37ab0c9d342094` Promoted from registry.ci.openshift.org/origin/release:4.7.0-0.okd-2021-09-19-013247 ## Changes from 4.7.0-0.okd-2021-07-03-190901 ### Components * Kubernetes upgraded from 1.20.0-beta.2 to 1.20.10 ### Rebuilt images without code change * [baremetal-operator](https://github.com/openshift/baremetal-operator) git [e36cbc13](https://github.com/openshift/baremetal-operator/commit/e36cbc13f82e290ca5f525a4da0fab516808d113) `sha256:d1e5800228ed878c3941efed1b89f35fe3cc25d59e2e1dd2c8074951fb944acb` * [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [9c5da32b](https://github.com/openshift/baremetal-runtimecfg/commit/9c5da32ba602e5881178e56269b0506fcb54ff92) `sha256:b0818b942e94492ae90c07e384b3ba2111dec30d938a7ee3efe4a1d4c6910439` * [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator) git [0783477a](https://github.com/openshift/cloud-credential-operator/commit/0783477aa72edf998344740933a99c0417ebe573) `sha256:d3db5d30d5084a2cdb3b4226877efad575c78b73758b6e967cbf088f3c42a932` * [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [6d2c25f3](https://github.com/openshift/cluster-storage-operator/commit/6d2c25f3cfb931deca457a0c6261651c1a64c464) `sha256:82e34ada115f908ca390d3177d96d38fe64a5df171c428347c60d95ca18538fa` * [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [212d80b4](https://github.com/openshift/k8s-prometheus-adapter/commit/212d80b4bd35fc6f19ec9ec537d0261a2a300cfd) `sha256:0fd96409c78c80e2369452c4d45034094973b316335d8c9cb1c937eb9c89dee3` * [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [db87872c](https://github.com/openshift/prom-label-proxy/commit/db87872c6aba7e4e9def29b33beea582557ce940) `sha256:c2431e554ae13140d8bb2286bb993af96acb3da69bb19889bc0bcda1c73f5cd4` ### [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator/tree/3a9ff17d523a342ee71a967a2b82d5cf044f1eb8) * [Bug 1996070](https://bugzilla.redhat.com/show_bug.cgi?id=1996070): Add maxUnavailable to DaemonSets [#135](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/135) * [Full changelog](https://github.com/openshift/aws-ebs-csi-driver-operator/compare/97f73eb7de4b474497169771239dcd81990d3f2e...3a9ff17d523a342ee71a967a2b82d5cf044f1eb8) ### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/726d97e15db78b767234da98d2c75f794f4bf158) * [Bug 1938967](https://bugzilla.redhat.com/show_bug.cgi?id=1938967): Updating baremetal-machine-controller builder & base images to be consistent with ART [#134](https://github.com/openshift/cluster-api-provider-baremetal/pull/134) * [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/25cbb8d8f9e52244ccd6bf459e6dd4b84749de56...726d97e15db78b767234da98d2c75f794f4bf158) ### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/e6f2e9b10e0c5f788dceb996badbaf9d6d625ffd) * [Bug 1995074](https://bugzilla.redhat.com/show_bug.cgi?id=1995074): revert incorrect allowance of ssh:// prefix with scp styled URLs [#902](https://github.com/openshift/oc/pull/902) * [Bug 1974264](https://bugzilla.redhat.com/show_bug.cgi?id=1974264): make oc logs work with BuildConfig's JenkinsPipeline strategy [#864](https://github.com/openshift/oc/pull/864) * [Full changelog](https://github.com/openshift/oc/compare/8b4b09487463415374368af3bbc4ff2e6366477b...e6f2e9b10e0c5f788dceb996badbaf9d6d625ffd) ### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/4c02b7b2322eab9bbcb969886211d541e5e4fcde) * Updating ose-cluster-authentication-operator builder & base images to be consistent with ART [#408](https://github.com/openshift/cluster-authentication-operator/pull/408) * [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/16bd3f3f4584442f42a83b4d8ee8e2f9fd0acb87...4c02b7b2322eab9bbcb969886211d541e5e4fcde) ### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/8b2e494f7796639b46f9867407fe21546cfc01c3) * [Bug 1924416](https://bugzilla.redhat.com/show_bug.cgi?id=1924416): Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 [#204](https://github.com/openshift/kubernetes-autoscaler/pull/204) * [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/c882ab7f35adfb0f438fa28f6579092aa0deea59...8b2e494f7796639b46f9867407fe21546cfc01c3) ### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/7658bea6c42d770029e6928c1d74ec3bf0175a49) * [Bug 1961341](https://bugzilla.redhat.com/show_bug.cgi?id=1961341): manifests: use v1 for RBAC [#206](https://github.com/openshift/cluster-autoscaler-operator/pull/206) * [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/a3fecc8e7dc5d793eecf8bf77e311f5b29f5e7dd...7658bea6c42d770029e6928c1d74ec3bf0175a49) ### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/f73e5fcb432e4b847cddec5ce8570f8c5c32e902) * [Bug 1976924](https://bugzilla.redhat.com/show_bug.cgi?id=1976924): Update bmh crd [#190](https://github.com/openshift/cluster-baremetal-operator/pull/190) * [Bug 1933726](https://bugzilla.redhat.com/show_bug.cgi?id=1933726): provisioning: configure DHCP range with netmask [#112](https://github.com/openshift/cluster-baremetal-operator/pull/112) * [Bug 1973367](https://bugzilla.redhat.com/show_bug.cgi?id=1973367): Pass IP_OPTIONS=dhcp|dhcp6 down to OS Downloader container [#171](https://github.com/openshift/cluster-baremetal-operator/pull/171) * [Bug 1972291](https://bugzilla.redhat.com/show_bug.cgi?id=1972291): Use a cache URL with the .svc.cluster.local suffix [#161](https://github.com/openshift/cluster-baremetal-operator/pull/161) * [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/175f8f5283faebd81fb9d1fb2915eb2682622e1e...f73e5fcb432e4b847cddec5ce8570f8c5c32e902) ### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/70a85883e406641339251b5c1473e4dec7083928) * [Bug 1988388](https://bugzilla.redhat.com/show_bug.cgi?id=1988388): Properly set custom tolerations [#708](https://github.com/openshift/cluster-image-registry-operator/pull/708) * [Bug 1984979](https://bugzilla.redhat.com/show_bug.cgi?id=1984979): Creating StorageAccount V2 instead of V1 [#707](https://github.com/openshift/cluster-image-registry-operator/pull/707) * Updating ose-cluster-image-registry-operator builder & base images to be consistent with ART [#651](https://github.com/openshift/cluster-image-registry-operator/pull/651) * [Bug 1977159](https://bugzilla.redhat.com/show_bug.cgi?id=1977159): bump aws-sdk-go to v1.38.35 [#704](https://github.com/openshift/cluster-image-registry-operator/pull/704) * [Bug 1973693](https://bugzilla.redhat.com/show_bug.cgi?id=1973693): Setting required pod anti-affinity rules [#697](https://github.com/openshift/cluster-image-registry-operator/pull/697) * [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/4f854ba118c7a3424beb8739b34fa97499245f9e...70a85883e406641339251b5c1473e4dec7083928) ### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/b86f935f5e693f48dbf6ec23a490422b6e295eb7) * [Bug 1978845](https://bugzilla.redhat.com/show_bug.cgi?id=1978845): Specify topology spread constraints [#632](https://github.com/openshift/cluster-ingress-operator/pull/632) * [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/2de39ae138e2dc8fb2e69847f659f97b92e6a71e...b86f935f5e693f48dbf6ec23a490422b6e295eb7) ### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/035c8038f56cdcf0d402bea6671e81882e3ab8bd) * [Bug 1986591](https://bugzilla.redhat.com/show_bug.cgi?id=1986591): node exporter calls /proc/cpuinfo multiple times causing the node to freeze [#1300](https://github.com/openshift/cluster-monitoring-operator/pull/1300) * [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/d6725052e00a206cab10f6c40abdfa1a3c2aff0f...035c8038f56cdcf0d402bea6671e81882e3ab8bd) ### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/c4b5b42127ac0ebd9ce5c5c57c1a15949319bdc1) * [Bug 1996063](https://bugzilla.redhat.com/show_bug.cgi?id=1996063): Use 10% for nw-check-target maxUnavailable [#1184](https://github.com/openshift/cluster-network-operator/pull/1184) * [Bug 1988426](https://bugzilla.redhat.com/show_bug.cgi?id=1988426): Change to use mountPath: /host [#1170](https://github.com/openshift/cluster-network-operator/pull/1170) * [Bug 1962036](https://bugzilla.redhat.com/show_bug.cgi?id=1962036): Use the election mechanism provided by library-go [#1098](https://github.com/openshift/cluster-network-operator/pull/1098) * [Bug 1972549](https://bugzilla.redhat.com/show_bug.cgi?id=1972549): Remove reference to v1beta1 API [#1134](https://github.com/openshift/cluster-network-operator/pull/1134) * [Bug 1982217](https://bugzilla.redhat.com/show_bug.cgi?id=1982217): Use 10% for ovnkube-node for maxUnavailable [#1153](https://github.com/openshift/cluster-network-operator/pull/1153) * [Full changelog](https://github.com/openshift/cluster-network-operator/compare/ad893a41cd42cf7992e812ea47b5dd814f05c760...c4b5b42127ac0ebd9ce5c5c57c1a15949319bdc1) ### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/3066601cab5378f1c155f9a98995614f0168f803) * [Bug 1986739](https://bugzilla.redhat.com/show_bug.cgi?id=1986739): gather all Tuned CRs [#255](https://github.com/openshift/cluster-node-tuning-operator/pull/255) * [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/d546b54bcb292cd3691f4d25bbb8899690d5adab...3066601cab5378f1c155f9a98995614f0168f803) ### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/df9b1a45165dd1a2cc17b5a885370093bb237e41) * [Bug 1996045](https://bugzilla.redhat.com/show_bug.cgi?id=1996045): bindata: run openshift-apiserver as root explicitly. [#468](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/468) * Updating ose-cluster-openshift-apiserver-operator builder & base images to be consistent with ART [#427](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/427) * [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/ecfa2d959fe2afcbd3e947658d267b085a1b2063...df9b1a45165dd1a2cc17b5a885370093bb237e41) ### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/2a8963a9c5755d4951d882bd816cd4d6ccdf02cd) * [Bug 1924494](https://bugzilla.redhat.com/show_bug.cgi?id=1924494): Update k8s.io dependencies to address CVE-2021-3121 [#222](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/222) * [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/245005e3065238ecd4aef208c21456afa09ec38e...2a8963a9c5755d4951d882bd816cd4d6ccdf02cd) ### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/cc81827c1bfe322bd78d2fa0d9b34d532190d850) * [Bug 1991010](https://bugzilla.redhat.com/show_bug.cgi?id=1991010): pkg/cvo/metrics: Ignore Degraded for cluster_operator_up [#638](https://github.com/openshift/cluster-version-operator/pull/638) * [Bug 1924428](https://bugzilla.redhat.com/show_bug.cgi?id=1924428): CVE-2021-3121 gogo/protobuf lacks certain index validation [#625](https://github.com/openshift/cluster-version-operator/pull/625) * [Full changelog](https://github.com/openshift/cluster-version-operator/compare/fa7bfbc485b4256535b7de172d1083f83c9409ce...cc81827c1bfe322bd78d2fa0d9b34d532190d850) ### [console](https://github.com/openshift/console/tree/3432f1cc6cb07a8f1210dc26ebe84efde3de752b) * [Bug 1973707](https://bugzilla.redhat.com/show_bug.cgi?id=1973707): Add chart URl to annotations during helm install/upgrade [#9299](https://github.com/openshift/console/pull/9299) * [Bug 1995617](https://bugzilla.redhat.com/show_bug.cgi?id=1995617): Fix Pipeline Download All [#9839](https://github.com/openshift/console/pull/9839) * [Bug 1986724](https://bugzilla.redhat.com/show_bug.cgi?id=1986724): Show the content of Insights widget when there are 0 recommendations for cluster [#9655](https://github.com/openshift/console/pull/9655) * [Bug 1989642](https://bugzilla.redhat.com/show_bug.cgi?id=1989642): Preserve user annotations while editing an app [#9714](https://github.com/openshift/console/pull/9714) * [Bug 1975560](https://bugzilla.redhat.com/show_bug.cgi?id=1975560): Fix typo in olm message [#9335](https://github.com/openshift/console/pull/9335) * [Bug 1975469](https://bugzilla.redhat.com/show_bug.cgi?id=1975469): Handle array to string conversion for HTTPS checkbox value [#9332](https://github.com/openshift/console/pull/9332) * Updating openshift-enterprise-console images to be consistent with ART [#8596](https://github.com/openshift/console/pull/8596) * [Full changelog](https://github.com/openshift/console/compare/b571ac9bad467db8459f25de9c5a4f3b54789312...3432f1cc6cb07a8f1210dc26ebe84efde3de752b) ### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/b652a62f269127e6e9195383eab951d59c6d7a6d) * [Bug 2002555](https://bugzilla.redhat.com/show_bug.cgi?id=2002555): Do not degrade cluster on failure to reach Manila [#126](https://github.com/openshift/csi-driver-manila-operator/pull/126) * [Bug 1987036](https://bugzilla.redhat.com/show_bug.cgi?id=1987036): Use cluster Proxy when available [#110](https://github.com/openshift/csi-driver-manila-operator/pull/110) * [Bug 1996070](https://bugzilla.redhat.com/show_bug.cgi?id=1996070): Add maxUnavailable to DaemonSets [#116](https://github.com/openshift/csi-driver-manila-operator/pull/116) * [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/00b1f648e74d8008ce32ae65eb4d6d8b5ac1bbed...b652a62f269127e6e9195383eab951d59c6d7a6d) ### [docker-builder](https://github.com/openshift/builder/tree/5a46979e5e747b6df27a1b50ec0c922a172298f2) * [Bug 1995074](https://bugzilla.redhat.com/show_bug.cgi?id=1995074): bump(s2i): revert incorrect ssh scp fix [#261](https://github.com/openshift/builder/pull/261) * [Bug 1924455](https://bugzilla.redhat.com/show_bug.cgi?id=1924455): Update dependencies to address CVE-2021-3121 [#258](https://github.com/openshift/builder/pull/258) * [Full changelog](https://github.com/openshift/builder/compare/82eeeac0c8cbad90f951885cc11939ecd51eda76...5a46979e5e747b6df27a1b50ec0c922a172298f2) ### [docker-registry](https://github.com/openshift/image-registry/tree/8b03485af777f8d718427393aa575bbaf6f21610) * [Bug 1984094](https://bugzilla.redhat.com/show_bug.cgi?id=1984094): use apimachinery with HTTP/2 health checks enabled [#288](https://github.com/openshift/image-registry/pull/288) * Updating openshift-enterprise-registry builder & base images to be consistent with ART [#262](https://github.com/openshift/image-registry/pull/262) * [Bug 1977159](https://bugzilla.redhat.com/show_bug.cgi?id=1977159): bump aws-sdk-go to v1.38.35 [#282](https://github.com/openshift/image-registry/pull/282) * [Full changelog](https://github.com/openshift/image-registry/compare/8e0c068aef607fceffe3e179c3a9701f51c51dff...8b03485af777f8d718427393aa575bbaf6f21610) ### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/bcd11a1f0137bb10b1958f1e27e04a213aef96be) * [Bug 1985545](https://bugzilla.redhat.com/show_bug.cgi?id=1985545): Use kernel config to determine GCC version [#56](https://github.com/openshift/driver-toolkit/pull/56) * [Bug 1985545](https://bugzilla.redhat.com/show_bug.cgi?id=1985545): Remove curl of extract-vmlinux [#50](https://github.com/openshift/driver-toolkit/pull/50) * [Bug 1985546](https://bugzilla.redhat.com/show_bug.cgi?id=1985546): /etc/driver-toolkit-release.json kernel version match rpm -q output [#51](https://github.com/openshift/driver-toolkit/pull/51) * [Full changelog](https://github.com/openshift/driver-toolkit/compare/044d4be053f86d8f059197a76f641f99cf07d444...bcd11a1f0137bb10b1958f1e27e04a213aef96be) ### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/0cb61d205d0f911fe8ca614094f0cd3f911d665c) * Updating ose-gcp-pd-csi-driver builder & base images to be consistent with ART [#10](https://github.com/openshift/gcp-pd-csi-driver/pull/10) * [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/091f0212dfa6d93df37b99fcd2b4b9a4c6d5bbba...0cb61d205d0f911fe8ca614094f0cd3f911d665c) ### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/d40dd57595673e4737fa77e29a955f6beefac284) * [Bug 1996070](https://bugzilla.redhat.com/show_bug.cgi?id=1996070): Add maxUnavailable to DaemonSets [#33](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/33) * [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/9ffe95b9499258b8e2b5e1b8df9889abe3c9f73f...d40dd57595673e4737fa77e29a955f6beefac284) ### [haproxy-router](https://github.com/openshift/router/tree/4ab216f0090a985f041cea3e411075a04e2ace0a) * [Bug 1994645](https://bugzilla.redhat.com/show_bug.cgi?id=1994645): config template: accept IPv6 IPs for whitelisting [#325](https://github.com/openshift/router/pull/325) * [Full changelog](https://github.com/openshift/router/compare/9cc0c8fcebf613785511468c7df601117b13e5aa...4ab216f0090a985f041cea3e411075a04e2ace0a) ### [hello-openshift, tests](https://github.com/openshift/origin/tree/8b31c8bd88c20a8eb0a7ea32b7e42fdbae212731) * [Bug 1983616](https://bugzilla.redhat.com/show_bug.cgi?id=1983616): Wait longer in tests where namespace cleanup is slow [#26282](https://github.com/openshift/origin/pull/26282) * [Bug 1982929](https://bugzilla.redhat.com/show_bug.cgi?id=1982929): Improve GC Check for Builds [#26334](https://github.com/openshift/origin/pull/26334) * Re-enable quota test [#26284](https://github.com/openshift/origin/pull/26284) * [Bug 1980540](https://bugzilla.redhat.com/show_bug.cgi?id=1980540): Use cluster-logging for operator installation smoke test. [#26315](https://github.com/openshift/origin/pull/26315) * [Full changelog](https://github.com/openshift/origin/compare/2d1d603b37d527f2a9424749bcbad286cfbf3e62...8b31c8bd88c20a8eb0a7ea32b7e42fdbae212731) ### [hyperkube](https://github.com/openshift/kubernetes/tree/bbbc0799c02950831c42c7a2ab0a04594b854d4a) * [Bug 1993753](https://bugzilla.redhat.com/show_bug.cgi?id=1993753): UPSTREAM: 104348: Pass additional flags to subpath mount to avoid fla… [#941](https://github.com/openshift/kubernetes/pull/941) * [Bug 2003027](https://bugzilla.redhat.com/show_bug.cgi?id=2003027): Rebase 1.20.10 [#935](https://github.com/openshift/kubernetes/pull/935) * [Bug 1996846](https://bugzilla.redhat.com/show_bug.cgi?id=1996846): UPSTREAM: 98571: kubelet: Stop probing a pod during graceful shutdown [#901](https://github.com/openshift/kubernetes/pull/901) * [Bug 1973766](https://bugzilla.redhat.com/show_bug.cgi?id=1973766): 4.7: Do not throw error when we can't get canonical path [#881](https://github.com/openshift/kubernetes/pull/881) * [Bug 1981775](https://bugzilla.redhat.com/show_bug.cgi?id=1981775): Bump apiserver libary go 4.7 [#879](https://github.com/openshift/kubernetes/pull/879) * [Bug 1981634](https://bugzilla.redhat.com/show_bug.cgi?id=1981634): UPSTREAM: <drop>: use the legacy service-ca.crt content for clusters started in 4.7 or before [#857](https://github.com/openshift/kubernetes/pull/857) * [Bug 1977383](https://bugzilla.redhat.com/show_bug.cgi?id=1977383): [release-4.7] Ensure service ca configmap is created in all namespaces [#834](https://github.com/openshift/kubernetes/pull/834) * [Full changelog](https://github.com/openshift/kubernetes/compare/01c9f3f43ffcf096c29d51f3b6f2b6914b2b56a6...bbbc0799c02950831c42c7a2ab0a04594b854d4a) ### [insights-operator](https://github.com/openshift/insights-operator/tree/19b13a7cf1bd5f38a4f1bc4f257ff7fd70803093) * [Bug 1982170](https://bugzilla.redhat.com/show_bug.cgi?id=1982170): Set also the summary operation when updating status (#480) [#480](https://github.com/openshift/insights-operator/pull/480) * [Full changelog](https://github.com/openshift/insights-operator/compare/e7955cf0b199caa53726431df5d8800be5af049a...19b13a7cf1bd5f38a4f1bc4f257ff7fd70803093) ### [installer, installer-artifacts](https://github.com/vrutkovs/installer/tree/f44bc61fe81b0f55f56a01a2a183cfd0c8ffb5c9) * [Bug 1981553](https://bugzilla.redhat.com/show_bug.cgi?id=1981553): [release-4.7] aws: move elastic ip permissions to create networking category [#5055](https://github.com/vrutkovs/installer/pull/5055) * [Bug 1954595](https://bugzilla.redhat.com/show_bug.cgi?id=1954595): Validate noProxy input and add prefix for proxy urls [#5060](https://github.com/vrutkovs/installer/pull/5060) * OWNERS: add more core team members as approvers [#5123](https://github.com/vrutkovs/installer/pull/5123) * [Full changelog](https://github.com/vrutkovs/installer/compare/af0c206a845eaa0d17efe4f1952d248406cdfdfe...f44bc61fe81b0f55f56a01a2a183cfd0c8ffb5c9) ### [ironic-hardware-inventory-recorder](https://github.com/openshift/ironic-hardware-inventory-recorder-image/tree/564aaca3b4bd95007472d3c3cd8d2d0748778ef4) * Updating ironic-hardware-inventory-recorder-image builder & base images to be consistent with ART [#502](https://github.com/openshift/ironic-hardware-inventory-recorder-image/pull/502) * [Full changelog](https://github.com/openshift/ironic-hardware-inventory-recorder-image/compare/61c4cc7dc99601fe32b239be8923a6ed693908b0...564aaca3b4bd95007472d3c3cd8d2d0748778ef4) ### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/870afcb36a7ee4a2bef59845981821453b4174dd) * [Bug 1963210](https://bugzilla.redhat.com/show_bug.cgi?id=1963210): Add support for no_proxy [#53](https://github.com/openshift/ironic-rhcos-downloader/pull/53) * [Bug 1973367](https://bugzilla.redhat.com/show_bug.cgi?id=1973367): Modify dhcp kernel args based on ipv4/ipv6 [#55](https://github.com/openshift/ironic-rhcos-downloader/pull/55) * [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/682c57f434ccb48ec2f46b540a075db2f4a32ffa...870afcb36a7ee4a2bef59845981821453b4174dd) ### [jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/02e81a5a9b02af6c72f6baab1ca6afb3775756dd) * [Bug 1972361](https://bugzilla.redhat.com/show_bug.cgi?id=1972361): Bump jenkins version 2.289.2 [#1281](https://github.com/openshift/jenkins/pull/1281) * [Full changelog](https://github.com/openshift/jenkins/compare/d3eacc24156ef726caae230b9b4620059a76f781...02e81a5a9b02af6c72f6baab1ca6afb3775756dd) ### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/a41bdcc3533c6eaf8f17e1e4bb52c1bde155f578) * [Bug 1987297](https://bugzilla.redhat.com/show_bug.cgi?id=1987297): when assigning and releasing egressIP try more than once before failing [#327](https://github.com/openshift/sdn/pull/327) * [Bug 2001531](https://bugzilla.redhat.com/show_bug.cgi?id=2001531): improve SDN's OVS healthcheck and logging [#343](https://github.com/openshift/sdn/pull/343) * [Bug 1995872](https://bugzilla.redhat.com/show_bug.cgi?id=1995872): Disable conntrack for vxlan traffic [#338](https://github.com/openshift/sdn/pull/338) * [Bug 1971669](https://bugzilla.redhat.com/show_bug.cgi?id=1971669): Fix 4.7 SDN Egress Network Policy [#334](https://github.com/openshift/sdn/pull/334) * [Full changelog](https://github.com/openshift/sdn/compare/798a46be0fa09aeec90b25a4c4cf11bf0b2c5b6f...a41bdcc3533c6eaf8f17e1e4bb52c1bde155f578) ### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/77a9d5eade31e0519d34ff9aa9cf86c1305e25b1) * [Bug 2001518](https://bugzilla.redhat.com/show_bug.cgi?id=2001518): Increase keystoneauth's connection pool size [#554](https://github.com/openshift/kuryr-kubernetes/pull/554) * [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/c7654fb7ee98d42b3c2329f4ad0039f8f87828f0...77a9d5eade31e0519d34ff9aa9cf86c1305e25b1) ### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/eb819cb931e86f66853ad24b919e251369ec83c1) * Updating ose-libvirt-machine-controllers builder & base images to be consistent with ART [#212](https://github.com/openshift/cluster-api-provider-libvirt/pull/212) * [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/033be25ca038fe773b23c076e9ac64926de72474...eb819cb931e86f66853ad24b919e251369ec83c1) ### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/b37833e07e4ecb6bea8f0cfbfcc349116d5d3c23) * [Bug 1989648](https://bugzilla.redhat.com/show_bug.cgi?id=1989648): Prevent machine from stucking in Deleting phase on vSphere if related node object not found [#895](https://github.com/openshift/machine-api-operator/pull/895) * [Bug 1933586](https://bugzilla.redhat.com/show_bug.cgi?id=1933586): Make sure phase is always set before creation [#858](https://github.com/openshift/machine-api-operator/pull/858) * [Full changelog](https://github.com/openshift/machine-api-operator/compare/e179bb5ce397b543cd3f716f75fa4cd40046e0ad...b37833e07e4ecb6bea8f0cfbfcc349116d5d3c23) ### [machine-os-content](https://github.com/openshift/okd-machine-os/tree/c82dd5a3945afe8922627df31f29284633613351) * okd-repos: remove failovermethod [#201](https://github.com/openshift/okd-machine-os/pull/201) * overlay: add NetworkManager config to prevent requesting additional MAC [#198](https://github.com/openshift/okd-machine-os/pull/198) * Bump fedora-coreos-config to latest stable [#194](https://github.com/openshift/okd-machine-os/pull/194) * Bump fedora-coreos-config to latest stable [#187](https://github.com/openshift/okd-machine-os/pull/187) * Bump fedora-coreos-config to latest stable [#181](https://github.com/openshift/okd-machine-os/pull/181) * Bump fedora-coreos-config to latest stable [#173](https://github.com/openshift/okd-machine-os/pull/173) * Periodic submodule bump [#170](https://github.com/openshift/okd-machine-os/pull/170) * Bump fedora-coreos-config [#162](https://github.com/openshift/okd-machine-os/pull/162) * [Full changelog](https://github.com/openshift/okd-machine-os/compare/4258607ab057ffe86d9da50cc43d0ac5369a6ce0...c82dd5a3945afe8922627df31f29284633613351) ### [mdns-publisher](https://github.com/openshift/mdns-publisher/tree/4b2a15226b570f0847479ee582ed6e8d26490a8d) * [Bug 1983695](https://bugzilla.redhat.com/show_bug.cgi?id=1983695): [release-4.7] Truncate long service names to 63 characters [#34](https://github.com/openshift/mdns-publisher/pull/34) * [Full changelog](https://github.com/openshift/mdns-publisher/compare/207a7e5d80dbca3ffb2dc205ebba516e29ebaa6d...4b2a15226b570f0847479ee582ed6e8d26490a8d) ### [must-gather](https://github.com/openshift/must-gather/tree/205d4e3cffb19bda7a658836c84587f2ac78d82c) * Updating ose-must-gather builder & base images to be consistent with ART [#202](https://github.com/openshift/must-gather/pull/202) * [Bug 1954302](https://bugzilla.redhat.com/show_bug.cgi?id=1954302): Add ovs related services to GENERAL_SERVICES [#229](https://github.com/openshift/must-gather/pull/229) * [Full changelog](https://github.com/openshift/must-gather/compare/140ea5e8081106c68668b6bd2d0873dc9032af0b...205d4e3cffb19bda7a658836c84587f2ac78d82c) ### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/fd4dfe78bcd8373c545284a671499681f824c645) * Updating golang-github-openshift-oauth-proxy builder & base images to be consistent with ART [#198](https://github.com/openshift/oauth-proxy/pull/198) * [Full changelog](https://github.com/openshift/oauth-proxy/compare/4bd4705011c19a7556551c9a1dfaaa5eacc7898c...fd4dfe78bcd8373c545284a671499681f824c645) ### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/3c007ad1de009a255a56889761dc2ac440529ffc) * [Bug 1995074](https://bugzilla.redhat.com/show_bug.cgi?id=1995074): revert incorrect ssh scp fix [#242](https://github.com/openshift/openshift-apiserver/pull/242) * [Full changelog](https://github.com/openshift/openshift-apiserver/compare/f9ac08715d1b7890a5aa66a8fb16e847a7f6b727...3c007ad1de009a255a56889761dc2ac440529ffc) ### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/c93745bf6898f41c6d10c66e7024238ddf20a86d) * [Bug 1924531](https://bugzilla.redhat.com/show_bug.cgi?id=1924531): Update k8s.io dependencies to address CVE-2021-3121 [#191](https://github.com/openshift/openshift-controller-manager/pull/191) * [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/39b6393236e5abab331de1ab3384d0d165510457...c93745bf6898f41c6d10c66e7024238ddf20a86d) ### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/f77ff88000592657b54ec5a3fe51c316aa57cce2) * [Bug 1996070](https://bugzilla.redhat.com/show_bug.cgi?id=1996070): Add maxUnavailable to DaemonSets [#54](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/54) * [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/117ce62c69b399c524850f4ca32324a4ed288acd...f77ff88000592657b54ec5a3fe51c316aa57cce2) ### [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/dcb7828fd3753b90a5f617349495e59eca0307d1) * [Bug 2000551](https://bugzilla.redhat.com/show_bug.cgi?id=2000551): Adds Proxy to provider client http transport [#200](https://github.com/openshift/cluster-api-provider-openstack/pull/200) * [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/471cf3ab636c26ed7c9fba6330374a5ea1b36b43...dcb7828fd3753b90a5f617349495e59eca0307d1) ### [operator-lifecycle-manager](https://github.com/operator-framework/operator-lifecycle-manager/tree/ebe84506ec094fc9ef505be8f5185e97d0c763ab) * Fix kubebuilder installation in the build root Dockerfile [#2351](https://github.com/operator-framework/operator-lifecycle-manager/pull/2351) * [Bug 1982693](https://bugzilla.redhat.com/show_bug.cgi?id=1982693): remove cleanup from startup [#2287](https://github.com/operator-framework/operator-lifecycle-manager/pull/2287) * [Full changelog](https://github.com/operator-framework/operator-lifecycle-manager/compare/a5f086a0cec32be5577b55c89d58adc40b677eb1...ebe84506ec094fc9ef505be8f5185e97d0c763ab) ### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/23f38d3c0385e3fef87848c3378cf6c0a4cbe4d7) * [Bug 1961341](https://bugzilla.redhat.com/show_bug.cgi?id=1961341): [release-4.7] Update openshift rolebindings to v1 [#409](https://github.com/operator-framework/operator-marketplace/pull/409) * [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/96bab9b9f5bb2c8fce141992230cf75e48f14f78...23f38d3c0385e3fef87848c3378cf6c0a4cbe4d7) ### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/5e51508c107a161416c0ffffdd17163f14136478) * [Bug 1996070](https://bugzilla.redhat.com/show_bug.cgi?id=1996070): Backport maxUnavailable: 10% for DaemonSets [#69](https://github.com/openshift/ovirt-csi-driver-operator/pull/69) * [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/f8808a04dc6bfe7ce36a8238089dbae7ab29cbb6...5e51508c107a161416c0ffffdd17163f14136478) ### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/04375114a527aabd0f5bbf4a2af36479e7853cd8) * [Bug 2001543](https://bugzilla.redhat.com/show_bug.cgi?id=2001543): fix reserve joinSwitch LRP IPs [#721](https://github.com/openshift/ovn-kubernetes/pull/721) * [Bug 2001364](https://bugzilla.redhat.com/show_bug.cgi?id=2001364): [4.7z] Ensure client handling of canceled/dropped OVSDB monitor [#719](https://github.com/openshift/ovn-kubernetes/pull/719) * [Bug 2001998](https://bugzilla.redhat.com/show_bug.cgi?id=2001998): egressfirewall not set after upgrade [#724](https://github.com/openshift/ovn-kubernetes/pull/724) * [Bug 1988495](https://bugzilla.redhat.com/show_bug.cgi?id=1988495): Fix LocalGatway ExternalIP [#638](https://github.com/openshift/ovn-kubernetes/pull/638) * [Bug 1999896](https://bugzilla.redhat.com/show_bug.cgi?id=1999896): Revert "[release-4.7] fix reserve joinSwitch LRP IPs" [#707](https://github.com/openshift/ovn-kubernetes/pull/707) * [Bug 1997574](https://bugzilla.redhat.com/show_bug.cgi?id=1997574): Fix: sync egress IP for missed events on start-up [#687](https://github.com/openshift/ovn-kubernetes/pull/687) * [Bug 1976242](https://bugzilla.redhat.com/show_bug.cgi?id=1976242): Update existing policy ACLs on start [#650](https://github.com/openshift/ovn-kubernetes/pull/650) * [Bug 1997104](https://bugzilla.redhat.com/show_bug.cgi?id=1997104): fix reserve joinSwitch LRP IPs [#683](https://github.com/openshift/ovn-kubernetes/pull/683) * [Bug 1995910](https://bugzilla.redhat.com/show_bug.cgi?id=1995910): Backport ovnkube-trace requires ip package to be installed [#674](https://github.com/openshift/ovn-kubernetes/pull/674) * [Bug 1991445](https://bugzilla.redhat.com/show_bug.cgi?id=1991445): Bump OVN to 20.12.0-140.el8fdp [#649](https://github.com/openshift/ovn-kubernetes/pull/649) * [Bug 1967132](https://bugzilla.redhat.com/show_bug.cgi?id=1967132): policy: handle NetworkPolicies single "from" multiple "ipBlock" [#562](https://github.com/openshift/ovn-kubernetes/pull/562) * [Bug 1985516](https://bugzilla.redhat.com/show_bug.cgi?id=1985516): Add v6 management interface address for host network policy [#625](https://github.com/openshift/ovn-kubernetes/pull/625) * [Bug 1962608](https://bugzilla.redhat.com/show_bug.cgi?id=1962608): ensure missed events are handled during a reconnection [#547](https://github.com/openshift/ovn-kubernetes/pull/547) * [Bug 1972484](https://bugzilla.redhat.com/show_bug.cgi?id=1972484): egress firewall as ACLs + service connectivity fixes [#592](https://github.com/openshift/ovn-kubernetes/pull/592) * [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/9f2bd7e65637f2a76005fbf01520a56676e8f427...04375114a527aabd0f5bbf4a2af36479e7853cd8) ### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/f65053f55de7b1793956629c8fa02edb7bb0e5cc) * [Bug 1981634](https://bugzilla.redhat.com/show_bug.cgi?id=1981634): add vulnerable legacy injector to allow for upgrade clusters to use [#170](https://github.com/openshift/service-ca-operator/pull/170) * [Full changelog](https://github.com/openshift/service-ca-operator/compare/e113f2498bb2b54202449ddc3488cb8471997a10...f65053f55de7b1793956629c8fa02edb7bb0e5cc) ### [thanos](https://github.com/openshift/thanos/tree/319e70c1dacc87e9d88c4f364541699979c31602) * [Bug 1994123](https://bugzilla.redhat.com/show_bug.cgi?id=1994123): dockerignore: remove vendor from ignored list [#69](https://github.com/openshift/thanos/pull/69) * [Full changelog](https://github.com/openshift/thanos/compare/823d7cd2ee5de3cdab771cfd4b2557852dff7514...319e70c1dacc87e9d88c4f364541699979c31602)