4.7.0-0.okd-2021-04-11-124433

New features since version 4.6.0-0.okd-2023-10-03-141935

Download installer and client with:

oc adm release extract --tools quay.io/openshift/okd:4.7.0-0.okd-2021-04-11-124433

Team Approvals:

No tests for this release

Upgrades from:

4.7.0-0.okd-2021-04-11-082229 (changes) - Failed Failed
4.7.0-0.okd-2021-03-28-152009 (changes) - F F F F F S
4.7.0-0.okd-2021-03-21-094146 (changes) - Success
4.7.0-0.okd-2021-03-07-090821 (changes) - Success
4.7.0-0.okd-2021-03-06-124908 (changes) - Success
4.7.0-0.okd-2021-02-25-144700 - S F F
4.6.0-0.okd-2021-02-14-205305 (changes) - Success Failed

Upgrades to:

4.7.0-0.okd-2021-06-04-191031 (changes) - Success Failed
4.7.0-0.okd-2021-05-22-050008 (changes) - Failed Success
4.7.0-0.okd-2021-04-24-103438 (changes) - F F S F

Loading changelog, this may take a while ...

Changes from 4.7.0-0.okd-2021-02-25-144700

Created: 2021-04-11 16:17:22 +0000 UTC

Image Digest: sha256:4414db9e8945504d1d5423ec11d64df9fa8b4aa60d978f8b4bdb3d0720800741

Release 4.7.0-0.okd-2021-04-11-124433 was created from registry.ci.openshift.org/origin/release:4.7.0-0.okd-2021-04-11-124433

Components

Kubernetes 1.20.0-beta.2
Fedora CoreOS upgraded from 33.20210224.10 to 34.20210406.10

Rebuilt images without code change

baremetal-machine-controllers git 25cbb8d8 sha256:ea6953c17668c689fef4ef59caef2db541820f3594314098aef4f8256bafeaf7
baremetal-operator git 74c60aa9 sha256:f8de068a6bb16340bfe340c5a96ea72c21c171bb6ade7b78a25ae8d448513d14
cluster-baremetal-operator git ea1ff11f sha256:d588ddae3206efaa3c0f9c8943dfbae06f03ff68dae3795f119b7ba8fadaf704
cluster-image-registry-operator git 538ff7fe sha256:6158422829202f12492e672666df1833244f2f99d6eb2c44e3dc6b856ddc5fed
docker-registry git 8e0c068a sha256:f4d559435197a2061b96af198143f764c43dd59371bb3ddaf190f7f8ae5b5e0f

aws-machine-controllers

Bug 1935636: Ensure response body is closed when we are finished with the request #391
Full changelog

aws-pod-identity-webhook

Updating ose-aws-pod-identity-webhook builder & base images to be consistent with ART #130
Full changelog

baremetal-installer, installer-artifacts

Bug 1933728: baremetal: include netmask in DNSMasq dhcp range #4698
Bug 1930106: bump ignition to v3_2 #4701
Bug 1922292: [release-4.7] data/rhcos.json: Update boot images #4635
Bug 1924701: Fix cluster destroy when byo is used with Kuryr #4616
Bug 1909978: update ignore-volume-az documentation #4617
Bug 1916692: OpenStack: Delete leftover LBs when destroying cluster #4563
Bug 1919407: openstack/validation: enforce control plane size #4585
Bug 1909978: update documentation for ignore-volume-az usage #4603
Bug 1896218: remove GCP role bindings before service accounts #4602
Bug 1921911: Revert “Merge pull request #4589 from patrickdillon/bz-1896218-gcp-se… #4600
Bug 1921655: OpenStack: fix error handling for cloudinfo #4599
Bug 1896218: remove GCP role bindings before service accounts #4589
Updating ose-installer-artifacts builder & base images to be consistent with ART #4546
maintenance: remove pools and volumes #3620
Bug 1810438: oVirt: Add missing piece for gathering bootstrap IP info #4524
Updating ose-baremetal-installer builder & base images to be consistent with ART #4544
Updating ose-installer builder & base images to be consistent with ART #4543
Bug 1920243: disable anonymous auth on bootstrap nodes #4590
Bug 1917101: UPI ovirt - remove RHCOS image from Network req #4577
Bug 1893117: terraform/vsphereprivate: ignore hosts in maintenance mode #4566
Bug 1919072: AWS cloudformation change protocol from ESP to 50 #4583
Bug 1916938: tolerate equal APIFloatingIP and LbFloatingIP #4575
Bug 1907822: Don’t panic on bad data in quota validations #4483
Bug 1912828: Rebase on the latest terraform provider/go-ovirt #4562
Bug 1916373: upi: allow IPsec ports #4552
Bug 1915460: ovirt: validate cluster name during install #4537
Bug 1910244: Go mod update for golang crypto #4569
Bug 1915617: update boot images for various fixes #4540
Bug 1909502: pkg/asset/manifests: remove etcd records from proxy config #4518
Bug 1915998: Set Additional Control Plane Security Groups on Bootstrap Node #4551
Bug 1916271: openstack known issues: ControlPlane anti-affinity #4548
Bug 1813949: ignore local env variables when we create a service client #4426
Bug 1916505: AWS IPI: Add IPsec master-to-worker flows #4554
Bug 1908468: azure/validation: some memory values are float and not int #4530
Bug 1908583: Set same additional networks on Bootstrap as Control Plane #4528
Bug 1914439: OpenStack Port Create Typo in SRIOV Docs #4529
Bug 1909587: openstack: Create Control plane nodes sequentially #4522
Bug 1910127: ovirt: UPI doc improvements #4498
Bug 1913151: KubeVirt user docs: change role example - add “update” verb to VM #4521
Bug 1910070: Set termination_grace_period_seconds to 10 minutes #4511
Bug 1786314: bump gophercloud/utils #4486
Bug 1911819: Fix docs/user/kubevirt/install-config.yaml to pass ./hack/yaml-lint.sh #4519
Bug 1911819: Add kubevirt user documentation #4516
Bug 1908743: Add validation that the KubeMacPool component is enabled for the namespace #4509
Bug 1910049: Revert “openstack UPI: Use ansible-galaxy” #4506
Bug 1882022: installconfig: enable vsphere folders for datacenters and clusters. #4493
Bug 1908782: terraform: Add rules to allow internal IPsec traffic #4491
Bug 1908171: fix Terraform issue with GCP custom machine types #4496
Bug 1907947: cloud-creds-secret creation with current context info only #4484
Bug 1907628: OpenStack Documentation for MachineSets with Multiple Networks #4463
Bug 1906517: OpenStack: Skip collecting info for empty subnet IDs #4474
Bug 1908280: update docs for Cinder AZs #4487
Bug 1907621: Bump cluster-api-provider-kubevirt version #4479
Bug 1890228: pkg/destroy/aws: Pass destroy if HostedZone does not exist #4477
Bug 1906459: openstack: fix quota checks when they’re unlimited #4470
Update GCP Customization doc to reflect CMEK additions #4468
Openstack: describes how to enable qemu agent for UPI. #4441
oVirt: update team members #4464
Bug 1904663: Fix comparison in pointer ignition customization asset #4455
openstack: Test Nova AZ manifest generation #4459
do not generate the cloud cred secret when credentialsMode is Manual #4416
update gophercloud/utils & terraform/provider-openstack #4457
hack/verify-vendor.sh: Fail early if error #4421
Bug 1899175: data/rhcos.json: Update boot images for RHEL 8.3 #4414
Openstack primary subnet using machine spec #4346
Deprecate computeFlavor in OpenStack platform #4321
openstack: Test manifest creation #4431
openstack: Allow to skip pre-flight validations #4452
Bug 1900138: Removed support for insecure mode for oVirt/RHV installation #4404
openstack: check quotas before creating cluster #4432
OpenStack: Adds clusterOSImageProperties to install-config.yaml #4401
Bug 1904125: Ensure the bootstrap ignition libvirt pool defaults to <clustername>.<id>.bootstrap rather than ‘default’ #4448
Bug 1868748: baremetal: rename JSON field for ClusterProvisioningIP #4053
Add KubeVirt platform as infrastructure for Openshift installation #4350
cloudproviderconfig: Refactor openstack #4447
Pass CLUSTER_PROFILE env var to CVO render #4444
vSphere Destroy: add log messages for tag destruction #4407
baremetal: send full ignition to masters #4427
asset/installconfig/Azure: Validate install-config instance types #4419
Update MCO doc references #4445
baremetal: Add ironic logwatch containers #4437
Create SR-IOV UPI Docs #4439
docs: update docs/design/resource_dep.svg #4443
Bug 1903277: destroy/aws: remove rules from default security group #4440
Set default release image to 4.7 #4409
baremetal: make cluster provisioning IP optional #4429
pkg/asset/quota: Typo in warning message presented to user #4430
Create a machineconfig for IPI pointer ignition customizations #4413
vSphere Docs: Update to include Permissions #4393
OSASINFRA-902: Update OpenStack Custom External LB and DNS Docs #4389
baremetal: correct the cacheImageURL when we don’t have a provisioningIP #4408
Bug 1895874: Use oVirt Engine certificate verified by the user for installation #4387
Bug 1899853: openstack: CP nodes port to use addtional SGs #4411
baremetal: Handle xz filenames for OKD #4392
Support user provided service-account-signing-key and issuer #4373
pkg: validation for previously existing ovirt configuration #4354
Bug 1898194: installconfig/gcp/validation: handle custom machine types #4386
baremetal: when networking is disabled make the bootstrap provisioning ip optional #4390
Bug 1898238: Validate the the API and Ingress FIPs are not the same #4385
Bug 1848945: OpenStack - Documentation for adding worker nodes using ansible #4205
Bug 1813012: Remove unused etcd discovery domain #4067
Bug 1894432: oVirt, add timeout to tmp_import_vm #4341
baremetal: validate that macs are EUI-48 and unicast #4378
Bug 1855351: standardize interrupt error messages #4360
Stop validating DefaultMachinePlatform #4391
Bug 1889779: vSphere destroy: handle failed clusters #4388
openstack UPI: Use ansible-galaxy #4379
Updating ose-baremetal-installer builder & base images to be consistent with ART #4370
Correcting normal typos #4363
Bug 1891543: openstack: remove platform flavor validation #4383
baremetal: remove root_gb from tfvars #4319
Cleanup: make conversion functions private #4376
Bug 1888464: add tag:UnTagResource perm for aws shared networks #4371
Remove the secrets directory recursively #4369
doc/openstack: update quota reqs for kuryr #4362
Fix ‘troubleshooting’ typo #4365
libvirt: Bump bootstrap size (primarily for OKD) #4364
data/data/aws/route53: use CNAME for us-iso-east-1 region #4367
Bug 1886435: Fix azure UPI az group deployment deprecation #4366
asset/installconfig/gcp: Validate install-config instance types #4329
Use ‘kubernetes.io/tls’ instead of SecretTypeTLS which is not being substituted #4342
aws: support custom trust bundle for c2s regions #4335
pkg/asset/cluster/aws: switch to ec2 tagging API #4356
Bug 1867165: baremetal: allow configuring bootstrap mac addresses #4052
doc/openstack/UPI: improvements #4355
Small corrections in ovirt/install_ipi.md #4353
data/bootstrap/files/usr/local/bin/installer-gather: Tee logs into tarball #4345
data/manifests/bootkube/cvo-overrides: Bump default to stable-4.7 #4347
owners: Add mdbooth to openstack-approvers #4348
owners: add dhellmann to baremetal-approvers/reviewers #4343
data/manifests/bootkube/cvo-overrides: Drop the explicit upstream #4112
Bug 1891543: openstack: consider volumes for storage requirements checks #4323
Document how to deploy cluster with BM and VM workers #4336
Wrap errors after OpenStack creds validation #4338
Bug 1855351: Handle CTRL+C in GCP survey #4334
Bug 1894144: baremetal: pin libvirt to 4.5.0 #4339
cmd/openshift-install/create: Use library-go’s IngressURI helper #4245
Bug 1888378: Ignore error if resource group already deleted #4325
Bug 1887863: Patch Flavor Not Found validation for OpenStack Install Config #4289
Use authentication for Ironic on baremetal bootstrap host #4256
Bug 1841381: oVirt, add memoryMB validation #4309
Bug 1878374: Adding more nitro and the AMD instance types (AWS, UPI) #4327
Bug 1866925: display Azure destroy auth error #4331
openstack: fixup markdown #4328
Revert “[Azure][Destroy] Check if resource group exists” #4322
Add Encryption Key reference to GCP MachinePool API #4318
aws: block cluster destroy in c2s region #4316
aws: ensure users set ami id for c2s regions #4315
Bug 1891702: pkg/asset/ignition/bootstrap: exit loop if pem.Decode() fails #4317
Bug 1888378: [Azure][Destroy] Check if resource group exists #4320
oVirt: change owners #4311
Code cleanup and optimizations #4272
Bug 1889267: oVirt, increase terraform template and release image timeout to 20m #4285
install-approvers: add staebler #4297
Bug 1880443: allow providing client options when generating OpenStack MachineSets #4196
openstack: Update CI base image #4291
pkg/asset/installconfig/aws: Validate install-config instance type #4258
go.mod Update #4294
Bug 1836017: Configure haproxy to check /readyz #4012
Bug 1870728: pkg/asset/ignition/bootstrap: Display warning if certificates are expired #4287
Bug 1889852: add new AWS regions #4288
Bug 1877116: aws: use file for bootstrap ign when uploading to s3 #4281
Bug 1886553: GCP - Increase worker NAT min ports #4273
cmd: split newlines in logrus stderr output to new entry #4282
openstack: Add a new team member #4290
Bug 1882649: Determine Glance disk format based on file extension #4279
vSphere: Update dockerfile removing certificate #4274
Update README.md - Broken Link - Spelling #4278
OpenStack: remove legacy image validation #4277
Bug 1882844: vsphere destroy: delete tag category created by installer #4265
Bug 1878900: openstack: Fix error messages in flavor validation #4269
OpenStack UPI: Custom API and Ingress vip addresses #4092
Bug 1888671: openstack: Document Cinder’s ignore-volume-az #4271
Bump K8s.io version to v0.19.0 #4266
destroy: return aws resources that could not be deleted #4270
install-complete: provide troubleshooting info when operators fail #4259
OpenStack: add clusterOSImage validations #3964
Bug 1887525: baremetal: Wait for master-bmh-update script to succeed #4262
openstack: Bump Ansible to 2.9 in UPI #4261
Bug 1874248: types/vsphere/validation: ensure vcenter is all lower case #4254
Bug 1884691: types: allow manual cred mode for gcp and azure #4238
Updating ose-installer builder & base images to be consistent with ART #4250
Remove dead code #4252
Updating ose-installer-artifacts builder & base images to be consistent with ART #4251
openstack privileges documented #4214
OpenStack: Rename lbFloatingIP to apiFloatingIP #4244
Bug 1882191: Add GODEBUG=x509ignoreCN=0 to systemd DefaultEnvironment #4248
Bug 1884435: vsphere - add delay if resolv.conf is not available; wait for dhcp #4237
Bug 1777224: pkg/asset: metadata to depend on ignition #4223
Bump RHCOS images for Ignition entropy fix #4241
Bug 1859174: Upgrade Terraform provider OpenStack #4216
Fix json tag for GCP auth service account #4166
installer/pkg/quota/gcp/limits.go: fix minor typo in comment #4160
IP address should be specified without underscore. #3204
Docs: OpenStack: Remove mention of cluster failing to destroy #4208
Bug 1876815: OpenStack: unset OS_CLOUD #4231
Bug 1884558: do not use local cacert path in generated clouds.yaml #4227
Bug 1878758: openstack UPI: Allow for no FIP or router #4219
Bug 1876844: openstack UPI: Ignition token needs Glance access #4236
Bug 1881703: Revert “Have the MCO manage the ignition stub config” #4228
Bug 1882752: openstack BM: Remove MachineSet on separate subnet #4230
Bug 1878900: openstack: Skip validation for baremetal flavors #4222
Bug 1881532: openstack: Only list external networks in prompt #4226
Bug 1882805: Bump bootimages for ppc64le and s390x to 46.82.202009240941-0 and 46.82.202009241338-0 #4215
Bug 1881757: tls: set mcs cert common name to not-valid-hostname #4210
Bug 1882810: vsphere - local dns prepender not named with template #4220
Bug 1853418: Ignore trailing dots in baseDomain #4146
Bug 1881487: data/rhcos.json: Update to 46.82.202009220041-0 #4206
Bug 1877984: Fix “OpenShiftSDN” to proper case when generating network config #4207
Bug 1879533: oVirt UPI - Better explanation of the inventory #4180
Bug 1878789: Add note about ignition certificates expiration #4171
Bug 1877854: OpenStack: Support multiple subnets #4093
Bug 1879649: oVirt UPI - Simplify create templates #4182
Bug 1880393: OpenStack UPI: Explain how to encode cert to base64 #4203
Bug 1880393: OpenStack UPI: Trim EOLs from the cacert trustbundle #4201
Bug 1878163: Updating images/baremetal/Dockerfile.ci baseimages to mach ocp-build-data config #4186
Bug 1879891: Fix cluster destroy when fip less installation happened #4191
Bug 1878163: Updating images/installer/Dockerfile.ci baseimages to mach ocp-build-data config #4185
Bug 1878163: Updating images/installer-artifacts/Dockerfile.rhel baseimages to mach ocp-build-data config #4184
Bug 1876815: unset OS_CLOUD during config generator #4177
Bug 1878108: asset/quota/gcp: use GCP api to find CPU count for constraint and guess only on failure #4163
Bug 1877486: proxy: allow * for noProxy #4172
Bug 1880132: destroy/gcp: correct extract service account email from IAM policy binding member #4193
Bug 1861917: Add cpc config to bootstrap #4178
install: increase timeout to 40 minutes #4181
Bug 1879081: OpenStack: Switch to train/centos8 repos #4175
Bug 1877885: oVirt UPI - Add Ansible playbooks download #4169
Bug 1878758: openstack UPI: Optional floating IPs #3755
Bug 1877763: oVirt UPI - python code snippets without semicolons #4170
Bug 1874747: ovirt: dont start the temp VM before template creation #4168
Bug 1878243: openstack: Upgrade the CI build image #4161
Bug 1877440: oVirt UPI Assets_dir set according to env var #4153
Bug 1874457: Add support to clean custom router #4159
Bug 1877676: OpenStack: Refresh documentation about ingress FIP #4059
Bug 1877436: oVirt UPI RHCOS explanations, assets env var #4152
Bug 1877862: oVirt UPI - Fix templates check and optimize image check #4157
Bug 1877741: installer-masters-gather.sh: gather openshift-{azure,gcp}-routes logs #4148
Bug 1873125: Fix python syntax for OpenStack UPI scripts #4154
Bug 1870038: vmware upi: haproxy.service to rm haproxy pod on ExecStop #4132
Bug 1866925: pkg/destroy/azure: fail fast if unable to list resources for any reason #4025
Bug 1873125: OpenStack: UPI missing instructions to update apiVIP and ingressVIP #4133
Bug 1875855: increase timeout for bootstrap ignition downloading #4145
Bug 1856928: Fix Non yaml files in manifests/ or openshift/ directories preventing bootstrap from completing #4091
Bug 1876825: generate lbFloatingIP in OpenStack config #4147
Bug 1876792: oVirt UPI Move Network Requirements section #4142
Bug 1876783: oVirt UPI fix python cmd #4141
Bug 1876562: Small readability improvements to UPI on RHV documentation #4136
Bug 1871653: baremetal: set root device hints on host resources #4088
Bug 1875932: Update baremetal DNS design details #4101
Bug 1868439: openstack UPI: Fix JSON syntax #4140
Bug 1874656: Bump RHCOS for s390x/ppc64le to fix SSH authentication #4124
Bug 1861917: bootkube: add image for cluster-policy-controller #4131
Bug 1871712: pkg/destroy/aws: Detach attached policies during destroy #4126
Bug 1867975: aws: ensure users set ami id for us-gov and cn regions #4103
Bug 1868439: openstack UPI: Fix Ingition key error #4135
Bug 1872080: Updating images/baremetal/Dockerfile.ci baseimages to mach ocp-build-data config #4086
Bug 1872080: Updating images/installer-artifacts/Dockerfile.rhel baseimages to mach ocp-build-data config #4085
Bug 1872080: Updating images/installer/Dockerfile.ci baseimages to mach ocp-build-data config #4087
BUG 1872646: oVirt, remove tmp VM disk on destroy #4129
hack/update-rhcos-bootimage: update usage example #4097
Bug 1813012: Remove unused flags previously needed for etcd static pod #4063
Bug 1842071: Add ppc64le and s390x documentation links #4115
Bug 1873448: Ensure proper tagging of compute nodes ports #4118
Bug 1872861: Update cli container image for UPI #4098
Bug 1873712: Add information about AZs limitations with Kuryr #4109
Bug 1871795: bump RHCOS images to fix SSH authentication #4095
Bug 1873123: omit deprecated parameters during config generation #4100
Bug 1813012: Remove unused etcd host service and endpoints #4068
Bug 1871030: data/data/gcp: be pedantic about setting the region #4089
Bug 1856270: Update known issues with info about provisioning state node bug #4083
Bug 1870082: Use index in MachineSet names for Openstack IPI #4070
Bug 1813012: Remove legacy code for unmanaged cluster-etcd-operator #4062
Bug 1863026: docs/user/azure: remove newlines from base64 encoding in UPI install doc #4090
Bug 1871048: OpenStack: dynamically set end of DHCP allocation pool #4077
Bug 1868773: Libvirt: Bump bootstrap memory to 4G #4080
Bug 1862209: aws: fix validation for user tags #4081
Bug 1871124: OpenStack: Improve snippet for playbooks download #4079
Bug 1871124: openstack UPI: Provide a way to get the playbooks #4078
Bug 1866534: fixes bootstrap DNS failure on bare metal #4015
Bug 1862957: bump RHCOS images for FIPS fix #4066
Bug 1870592: openstack: Document MachineSet availabilityZone #4074
Readme.md: Remove experimental tag for OpenStack UPI #3982
Bug 1866693: docs: drop kernel-devel from supported extensions #4030
Bug 1864092: baremetal: copy the implementation of rootdevicehints from baremetal-operator #4002
Bug 1862290: vendor/terraform-provider-vsphere: DiskPostCloneOperation patch carry #4060
Bug 1868439: openstack UPI: Fix Ignition v3 #4058
openstack: Known issue: no BMs on Kuryr #4051
Bug 1869329: OpenStack: Place Bootstrap in one of the master AZs #4056
Bump rhcos images for s390x #4050
OpenStack: Fixups to BM workers documentation #4057
Bug 1868439: openstack upi: fix Ignition key error #4047
OpenStack: baremetal worker documentation #3955
Bug 1866949: data/data/aws/route53: use CNAME for gov cloud partition #4043
Bug 1862044: deleting servers using metadata-based filtering #4032
Bug 1867972: destroy/aws: setup the resourcetagging api with correct region for gov cloud #4042
Bump rhcos images for ppc64le #4021
Bug 1867519: make externalNetwork optional #4029
Full changelog

branding

Bug 1935805: Fix documentation link for OKD #12
Bug 1932488: Add CVO cluster-profile annotations #10
Full changelog

cli, cli-artifacts, deployer, tools

Bug 1924453: Bump github.com/gogo/protobuf to v1.3.2 #753
Bug 1942059: when mirroring to a file destination, mount images under the index location #779
Bug 1939477: Fix unit test to use new IS #769
Full changelog

cloud-credential-operator

Bug 1928151: spell fix user-visible string #301
Full changelog

cluster-autoscaler

Updating vertical-pod-autoscaler builder & base images to be consistent with ART #190
Full changelog

cluster-dns-operator

Bug 1942228: Fix spurious reconciliation of DNS daemonset and service #250
Bug 1943826: Corefile: Use 30 second max TTL for caching of negative responses #254
Bug 1937089: Configure CoreDNS to shut down gracefully #247
Bug 1936587: Set CoreDNS’s cache’s maximum TTL to 900 seconds #245
Bug 1928304: Set CoreDNS readiness probe period and timeout each to 3 seconds #235
Full changelog

cluster-etcd-operator

Bug 1925739: pkg/operator/metriccontroller: cleanup transports #537
Full changelog

cluster-ingress-operator

Bug 1937214: Fix spurious reconciliation of NodePort services #570
Bug 1935891: Canary: Perform canary test probes over https #566
Bug 1936093: Canary: Use cluster-wide proxy for canary client #568
Bug 1934904: Canary: Schedule canary server pods to worker and infra nodes #564
Bug 1932649: Canary: Add edge termination to canary route #558
Bug 1927080: Verify that Serivce resources have idle annotations from corresponding Endpoint resources, should they exist. #546
Full changelog

cluster-kube-apiserver-operator

Bug 1927644: bootstrap: add –advertise-address=pod.status.hostIP #1042
Full changelog

cluster-kube-controller-manager-operator

Bug 1924488: Bump github.com/gogo/protobuf to v1.3.2 #508
Full changelog

cluster-kube-scheduler-operator

Bug 1924490: Bump github.com/gogo/protobuf to v1.3.2 #334
Full changelog

cluster-kube-storage-version-migrator-operator

Updating ose-cluster-kube-storage-version-migrator-operator builder & base images to be consistent with ART #38
Full changelog

cluster-monitoring-operator

Bug 1945851: Backport Remove the “instance” and “pod” labels for kube-state-metrics metrics #1101
Bug 1926876: pkg/manifests: fix prometheus-proxy trustedCA #1051
Bug 1932820: Remove kube-apiserver-availability.rules #1069
Bug 1930876: etcdInsufficientMembers is wrong when etcd is in a pod #1066
Full changelog

cluster-network-operator

Bug 1941212: The Multus daemonset should handle 10% maxUnavailable #1030
Bug 1940806: OVN Upgrade: fix upgrade order of node and master #1029
Bug 1929371: Don’t set ClusterOperator Version until rollout is complete #983
Bug 1937829: Cherry-pick dual stack migration #1017
Bug 1928028: Kuryr: Let Kuryr autodetect primary CNI interface #978
Bug 1935473: Include LB members for Machines created on day-2 operation #1002
Bug 1929168: Kuryr: Always set worker_nodes_subnets #987
Full changelog

cluster-node-tuning-operator

Bug 1928614: Keep ignition units in sync with [service] plugin. #215
Full changelog

cluster-openshift-controller-manager-operator

Bug 1944142: Bump kubernetes to 0.20.5 #204
Bug 1931856: Set registry routes in operand config #199
Full changelog

cluster-policy-controller

Bug 1924496: Bump github.com/gogo/protobuf to v1.3.2 #58
Full changelog

cluster-version-operator

Bug 1943754: Ensure automountServiceAccountToken is synced on service account updates #539
Bug 1941217: pkg/cvo/sync_worker: Skip precreation of baremetal ClusterOperator #534
Bug 1926795: install/0000_90_cluster-version-operator_02_servicemonitor.yaml: adjust “CannotRetrieveUpdates” to “warning” #516
Bug 1921413: pkg/start: Fix shutdown deadlock when die before getting a leader lock #521
Full changelog

console

Bug 1944855: Update Dockerfile.product for nodejs v14.16.0 #8488
Bug 1945153: Remove pipeline Tech preview badge for pipelines GA operator #8528
Bug 1943643: fix pipeline metrics endpoint for 1.4 osp #8489
Bug 1944349: fix backwards incompatible trigger api changes #8503
Bug 1943441: Add ‘Roll Back’ action for Replication Controllers and Replica Sets #8475
Bug 1925792: Fix translation for edit annotation #8078
Bug 1941468: Change link for not available state #8431
Bug 1939608: Fix null handling in FilterToolbar_ to prevent possible exceptions #8394
Bug 1937356: Fix to show correct internal image-stream name in container image edit flow’s internal registry image-stream dropdown for kn service #8353
Bug 1927198: fix pvc string in pvc.view #8126
Bug 1927311: avoid 404 errors attempting to load en-US #8128
Bug 1931382: Hide pipeline section in container image edit flow #8209
Bug 1933665: [release-4.7] Create ImageStream and other resources for samples step by step #8255
Bug 1935672: [release-4.7] fix pipelinerun status icon rendering issue #8311
Bug 1932272: Fix KMS validation error for 4.7 release #8221
Bug 1937313: Removed loaded prop and nested component #8351
Bug 1936803: support service binding operator version 0.5.0 #8335
Bug 1937469: Pod/node/ip/template isn’t showing when vm is running #8357
Bug 1932277: Create new pool with arbiter - wrong replica (4.7 release) #8234
Bug 1930152: Do not fail new VM wizard when no storage classes are available #8190
Bug 1937086: Fix topology crash due to selfLink deprecation #8317
Bug 1928228: retry co-fetch on 409 POST or 429 #8154
Bug 1932151: Fix rendering of access-mode selector #8229
Bug 1929198: allow choice of binding type when creating RoleBinding #8172
Bug 1928023: Consider finally tasks when calculating task status #8149
Bug 1927407: update pf virtualized dependency to fix breakpoint prop missing in virtualized table #8130
Bug 1932968: Fix to avoid overriding of d/dc pod template container values #8248
Bug 1926830: [CI][e2e] Add storage.bind.immediate.requested annotation to golden image dvs #8245
Full changelog

console-operator

Bug 1936337: Check for error when generating default and user-defined config for the console-config configmap #512
Full changelog

csi-driver-manila, openstack-cinder-csi-driver

Bug 1933659: Add udev to the driver image #47
Full changelog

docker-builder

Bug 1943726: add bracket logging on openshift/builder calls into buildah to assist test-platform team triage #237
Bug 1945692: move entitlement related secrets back to mounts.conf #240
Bug 1924554: bump(cni) 0.8.1 #234
Bug 1940052: retry image pulls during builds #226
Bug 1939218: bump(containers/*): #224
Full changelog

etcd

ETCD-178: Bug 1944386: openshift-tools: fix on off flow and add unit tests #74
Updating ose-etcd builder & base images to be consistent with ART #67
Full changelog

gcp-machine-controllers

Bug 1935636: Ensure response body is closed when we are finished with the request #151
Full changelog

gcp-pd-csi-driver-operator

Updating ose-gcp-pd-csi-driver-operator builder & base images to be consistent with ART #11
Full changelog

grafana

Updating grafana builder & base images to be consistent with ART #54
Full changelog

haproxy-router

Bug 1942534: [4.7 backport] Route gets admitted with invalid host name if override annotation is used #273
Bug 1938921: router/template: Cache compiled regular expressions #269
Full changelog

hello-openshift, tests

Bug 1942055: upgrade/upgrade.go: Enhance upgrade ack time out error #26012
Bug 1941574: test/extended/router/idle: skip test on virt platforms #25999
Bug 1940866: Add BareMetalPlatformType into e2e upgrade service unsupported list #25989
Bug 1927953: test/extended/router/idle: address flakes/failures seen in CI #25892
Bug 1931622: test: add vsphere to unsupported platforms for LB service #25913
Bug 1932806: release-4.7: e2e: test OAuth API connections in the tests by that name #25894
Bug 1935707: [release-4.7] test: Detect when the master pool is still updating after upgrade #25941
Bug 1931401: fix sig-cli flakes #25910
Bug 1939477: Update tests to use Ruby 2.7 #25966
Bug 1927554: adjust route host for redis/nodejs/cakephp to accomodate new apiserver restrictions #25884
Full changelog

hyperkube

Bug 1927717: UPSTREAM: 98939: fixes race in TestSyncPodsDeletesWhenSourcesAreReady #567
Bug 1931702: UPSTREAM: 96958: kubelet: remove periodic messages from log-level 2 #589
Bug 1931745: UPSTREAM: 98956: Fix race when KillPod followed by IsPodPendingTermining #590
Bug 1929674: kubelet: fix create sandbox delete pod race #591
Bug 1933094: UPSTREAM: 98742: Sync completed pods until their containers have been terminated #595
Full changelog

insights-operator

Bug 1942068: Gahter datahubs.installers.datahub.sap.com resources from SAP clusters (#383) #383
Bug 1939061: Sap license management logs gatherer 4.7 (#372) #372
Adds memory usage to the metadata (#364) #364
Bug 1935070: Extend the OLM operator data with related … (#362) #362
Bug 1934442: Gather info about unhealthy SAP pods (#360) #360
Bug 1936802: Authentication log gatherer - do not scan all the pods in openshfit-authentication (#369) #369
Bug 1936861: Include namespace name in binarydata configmap path & test (#368) (#370) #368
Bug 1925659: Relax the recent log gatherers to avoid degrading during… (#331) #331
Full changelog

installer

Bug 1933728: baremetal: include netmask in DNSMasq dhcp range #4698
Bug 1930106: bump ignition to v3_2 #4701
Bug 1922292: [release-4.7] data/rhcos.json: Update boot images #4635
Full changelog

ironic-machine-os-downloader

Updating ironic-rhcos-downloader builder & base images to be consistent with ART #34
Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

[release 4.7] Bug 1929118: update kubernetes-client-api #1230
Bug 1925484: Upgrade Jenkins to 2.263.3 #1220
Full changelog

kube-proxy, sdn

Bug 1941993: Fix incorrect unmonitoring of egress nodes #279
Bug 1924830: CVE-2021-3121 gogo/protobuf lacks certain index validation #265
Bug 1936920: networkpolicy: pass traffic through NAT to handle possible tuple collisions #272
Bug 1928304: Prefer local endpoint for cluster DNS service #259
Full changelog

kuryr-cni, kuryr-controller

Bug 1938960: Ignore headless services in NP code #487
Bug 1938960: Do not default protocol to TCP for allow-all NPs #480
Bug 1930017: Narrow connection to the cluster only on namespaceSelector #460
Bug 1928029: Get trunks more diligently #449
Bug 1929168: OpenShift: Add configured subnets to the detected #457
Full changelog

libvirt-machine-controllers

Bug 1938316: [release-4.7] Update MAO and set metrics on :8081 address #219
Full changelog

machine-api-operator

Bug 1929721: Add SecurityProfile.EncryptionAtHost parameter to enable host-based VM encryption #818
Bug 1934798: reuse mgr client in webhooks #821
Full changelog

machine-os-content

Strip xattrs #112
overlay: add NetworkManager config to prevent requesting additional MAC #109
overlay: add dhcp-client-identifier #101
manifests: add include.release annotations #98
Switch to stable FCOS stream #96
Full changelog

multus-cni

Bug 1927896: make a copy of global RuntimeConfig on merge #91
Bug 1936334: Updating multus-cni builder & base images to be consistent with ART #81
Full changelog

multus-whereabouts-ipam-cni

Bug 1931950: [backport 4.7] Fix for IPv6 when leading hextets equal zero #49
Full changelog

oauth-apiserver

Bug 1917904: bump k8s.io/apiserver to 1.20.4 #43
Full changelog

openshift-apiserver

Bug 1917904: bump k8s.io/apiserver to 1.20.4 #187
Full changelog

operator-lifecycle-manager

Bug 1937375: only override deployment resources when explicitly defined in subscription config #2036
Bug 1933839: bump k8s.io/apiserver for webhook authorizer panic fix #2022
Bug 1936707: Allow non-CSV-owned ServiceAccounts to satisfy CSV requirements. #2034
Bug 1938405: Support jittering relatively small resync intervals. #2041
Updating operator-lifecycle-manager builder & base images to be consistent with ART #2013
Bug 1934724: fix(resolver): Allow skipped versions to be installed initially #2027
Bug 1929904: Infer package name property for unannotated CSVs, if possible. #2033
Bug 1932002: Only one of multiple subscriptions to the same package is honored #2009
Full changelog

operator-marketplace

Updating marketplace-operator builder & base images to be consistent with ART #367
Bug 1927456: update defaults to 4.7 #382
Full changelog

operator-registry

Bug 1931903: add missing closes #597
Updating operator-registry builder & base images to be consistent with ART #584
Full changelog

ovirt-csi-driver-operator

Bug 1929777: Run config informers when starting the operator #49
Full changelog

ovirt-machine-controllers

Bug 1939358: extract node machine ipaddress from the engine instead using DNS . #98
Bug 1939360: providerIDController ignore nodes that have no machine #99
Bug 1939199: move to go 1.15 and registry.ci.openshift.org #97
Bug 1927256: Bump K8s dependencies to 1.20 #92
Full changelog

ovn-kubernetes

Bug 1946696: iptables: add filter on node local traffic #489
Bug 1947835: Fix service update for policy type assertion #493
Bug 1942702: backport lr-nat-del/add fixes #484
Bug 1931520: Backport Fix ACL syntax for dual-stack #465
Bug 1943310: [4.7] Enable DB memory trimming on compaction #477
Bug 1932268: detect if the cluster has endpoint slices #442
Bug 1935180: Backport Fix mcast querier #468
Bug 1937829: Cherry-pick dual-stack conversion #460
Bug 1934645: Backport enable support for BFD on external gateway routes #462
Bug 1925475: Bump OVN to ovn2.13-20.12.0-24.el8fdp #451
Bug 1937238: Refactor chain setup for NodePort and ExternalIP #457
Full changelog

prom-label-proxy

Updating prom-label-proxy builder & base images to be consistent with ART #330
Full changelog

telemeter

Updating telemeter builder & base images to be consistent with ART #369
Full changelog

vsphere-problem-detector

Bug 1936975: Fix deadlock when enqueing functions into the pool #35
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github