# 4.7.29 Created: 2021-09-01 18:27:48 +0000 UTC Image Digest: `sha256:b10034bedb4bf08a393462caf4c3fac8f9e4646d3b49d05915850dce0145cf15` Promoted from registry.ci.openshift.org/ocp/release:4.7.0-0.nightly-2021-09-01-110541 ## Changes from 4.7.9 ### Components * Kubernetes 1.20.0-beta.2 * Red Hat Enterprise Linux CoreOS upgraded from 47.83.202104250838-0 to 47.84.202109010857-0 ### New images * [driver-toolkit](https://github.com/openshift/driver-toolkit) git [bcd11a1f](https://github.com/openshift/driver-toolkit/commit/bcd11a1f0137bb10b1958f1e27e04a213aef96be) `sha256:53406b70f6f5cd549e72649bddee26a473651e775dc5ce659ce53a6f7e1e29bb` ### Rebuilt images without code change * [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [f6a71bf7](https://github.com/openshift/aws-ebs-csi-driver/commit/f6a71bf783f3b7429a8c2fbbc6f3d586e6a7eb60) `sha256:dcf5ea88524f098ee1d2ba68e1081b561428c3660b2fed965752431bba9733cc` * [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [0074d6af](https://github.com/openshift/aws-pod-identity-webhook/commit/0074d6afef9e20f5a1bcbde85cd7c01e422202ca) `sha256:427587f9bb6309ed23d5e99622d38cdffbdcc6410cecd0c4cd29c2d4259838ed` * [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [6665cae3](https://github.com/openshift/cluster-bootstrap/commit/6665cae3374c18d466f11c9e0b8e41a61fcb0819) `sha256:40880f702aa981ae97febd8379620abfce85dd8985346d9ef3821f04213ffd82` * [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator) git [099c6afa](https://github.com/openshift/cluster-kube-apiserver-operator/commit/099c6afa1f8b4fe7654207f7eabd7784b42ce2e3) `sha256:d9458a76584c9c32b5a4cb047fc9a741ba8b1fdd3624e6b7e5de857594e975e3` * [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [28159093](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/281590936f3a94d4ae1eb008709fda6614fe763b) `sha256:8294712762157e93e8429fd0324a88a735eb4f641ab47fa5540f73c0348df5b6` * [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [b2204ca2](https://github.com/openshift/cluster-kube-scheduler-operator/commit/b2204ca23a57e9f01af915375e6a18fc86ffecda) `sha256:7357c28b64410defd89b5010490663f3612cba6d8b2c671933bf7ec8916684c2` * [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [54484757](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/54484757581ec26f178c599215715bafd6029582) `sha256:5b3e76e11a09fc6209a5eb463497cb43d38d1a080cf2f521f65dbf240db00e0a` * [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [42791bac](https://github.com/openshift/cluster-policy-controller/commit/42791bac64066daac0922b3d77e4bd86edae3b4e) `sha256:fe34625d7e98c8923a3bba474a25f2a8330c0ed1d48786ffa49543318f12b85d` * [configmap-reloader](https://github.com/openshift/configmap-reload) git [25dfb671](https://github.com/openshift/configmap-reload/commit/25dfb671c6ce9a73f5594efe699ed410fbf01d44) `sha256:bc7e8895e4e6ad7948a8a0a219c1924d7dacefb1f4334b9dea6decde4f0f4574` * [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [fc27124d](https://github.com/openshift/containernetworking-plugins/commit/fc27124d43b9dc995057b1f309d5f16e1b2ef151) `sha256:afdfe3982c1b2e375a1f666e5ab7e5fbabcfe0c3dcdad6f69123afa97dc84b1d` * [coredns](https://github.com/openshift/coredns) git [d4a3ba3f](https://github.com/openshift/coredns/commit/d4a3ba3f6e03426d2623da86635caba17c0c3926) `sha256:c423c27f3eebbd19fcce29705eace557298936a3fe47877fcf34adf778d09ea0` * [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [9404d343](https://github.com/openshift/csi-driver-nfs/commit/9404d343c020fd1806691704f64d930c779ad639) `sha256:31e414705bdf9c5747599b4988590b27b59f5bf838daa807cf52c5acb2dce2d8` * [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [f152de8a](https://github.com/openshift/csi-external-attacher/commit/f152de8ab08d9a4f13c97941afa01ef343b92b68) `sha256:253c9753c7e170f58434052f7c0fd651b96435c19615c80dc2e3e1a82fc94c43` * [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [a49415e1](https://github.com/openshift/csi-external-provisioner/commit/a49415e114b90060c8cdbb88b1ca3f0a4c5d2ebc) `sha256:cea2bd9289e6014eb11e0ca4343788ad46d1bb082b386d81b3b46af33b771b4c` * [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [f77279e9](https://github.com/openshift/csi-external-resizer/commit/f77279e9561a02c18676dbcafcbe6db7d0ebd077) `sha256:79db45c7ea226feceb285f2b31b5989678af985c1c067996d184948e61d7dce0` * [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [26773735](https://github.com/openshift/csi-external-snapshotter/commit/26773735c1cbf09de9bf31cb3c640abdca04cd83) `sha256:07d211e9f893c2f931e1cf45e194523636b538b868b34be5ed8c699d6902c351` * [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [3dad0280](https://github.com/openshift/csi-livenessprobe/commit/3dad0280ea630cfcc87bcf02806c75b7a066d81e) `sha256:3b881263f36d3c4db7cd97cf683ccfa09b5e6c70b8f386cdbc31adf342cd8410` * [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [2a77963e](https://github.com/openshift/csi-node-driver-registrar/commit/2a77963e5458da1bcde318b4609a6abefaf868d7) `sha256:0c9d7d1896464b0da9891802800a0077515fe4022852e0b8649c65c448febc1e` * [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [26773735](https://github.com/openshift/csi-external-snapshotter/commit/26773735c1cbf09de9bf31cb3c640abdca04cd83) `sha256:d8045f770b24296e5c89f70a7af994b335d1453e3b28a275e26ec41347acff55` * [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [26773735](https://github.com/openshift/csi-external-snapshotter/commit/26773735c1cbf09de9bf31cb3c640abdca04cd83) `sha256:4e22246422614e0d8cf16f75f08a5b6e73f0b6c873f38116f3b7f7a7bf4555c4` * [egress-router-cni](https://github.com/openshift/egress-router-cni) git [96ebd378](https://github.com/openshift/egress-router-cni/commit/96ebd3782cbb63de098e75ebcedeac60546cfee3) `sha256:13e9749dc3dae46c1cdc2a74259b14821d3ce08c3bd7d9231b7b0720389d9b0b` * [grafana](https://github.com/openshift/grafana) git [b02c35dc](https://github.com/openshift/grafana/commit/b02c35dc2d01fce696a3edc28839a9f9fd0150a3) `sha256:b3a344996108be298415147ba66d9df058eda513be15c828eeeb183ad6e76f07` * [ironic-inspector](https://github.com/openshift/ironic-inspector-image) git [916bdc6e](https://github.com/openshift/ironic-inspector-image/commit/916bdc6e005aaa73ef5c3a9b60f5c47cd0a10e29) `sha256:84054570249e7696d0e2cd5bf1d20e71cb60d411962dec24d54bee01078b94dd` * [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [43d640a0](https://github.com/openshift/ironic-static-ip-manager/commit/43d640a07582a5aaaa485ea85319bb0721dea251) `sha256:3378d0de135eaa876d7ba95641ec7841600d677a0b67a8729f570d88e6ab24d8` * [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [212d80b4](https://github.com/openshift/k8s-prometheus-adapter/commit/212d80b4bd35fc6f19ec9ec537d0261a2a300cfd) `sha256:81bc09418b8949817a8341af18ea9764067dfff1be88b208c1469e681f4151ec` * [keepalived-ipfailover](https://github.com/openshift/images) git [0e45f638](https://github.com/openshift/images/commit/0e45f638fbf5fa9e9bdb507d81b2cb9f12fadbaf) `sha256:5fb4a06c00d888c770638e436fe521ee26126ed4990dc5af48908d577fbadbe7` * [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [14c288e6](https://github.com/openshift/kube-rbac-proxy/commit/14c288e6d19578d96e502def75995b882f1c9b37) `sha256:6600b7fba754388aa8b84aaab44dd92e276350da3fb778f38dae23afc747debb` * [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [04bff708](https://github.com/openshift/kube-state-metrics/commit/04bff708e05190cbc18182a2dbb8a10930433c1d) `sha256:14ff6b82060ba444141742586000109857eb520ee80ce7c23d61ba1cbdeb1e21` * [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [329a4b06](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/329a4b06361cef8d70c8424d57466a6f5bcd4a59) `sha256:4b8a568bc281adec66464620add962cce80449c76521fa7ebbb1944f52174ed5` * machine-os-content `sha256:9a4c9b60cca6ae3fdeeb785bfcdec98bc57e12234be3ef7a9a3dca9bcc3680d3` * [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [a7312f5e](https://github.com/openshift/multus-admission-controller/commit/a7312f5e55e9f34cc8b20f6cbfe1af0f363ca1e6) `sha256:f2fb68501ef1e0ea718e847e579908c58b5bd48e3dcf737503781c9de7ce6cc7` * [multus-cni](https://github.com/openshift/multus-cni) git [5530094d](https://github.com/openshift/multus-cni/commit/5530094db7607fc9292e3b269fcf5a85b0dad3df) `sha256:a3588cf76a6adc4936fe9990c8a1fc10afc02c114dd4c2fb01f1afc4f3fc9a41` * [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [1662c3ec](https://github.com/openshift/route-override-cni/commit/1662c3ec79b880fce5cd9c4e64f5ba0d4daffc00) `sha256:54b8129731d4ce2778322cb4023204084a5e838de6f30a7cae1e6db56771649a` * [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [dfe6b395](https://github.com/openshift/whereabouts-cni/commit/dfe6b395b67c0cede73e6edf758976ae208b930c) `sha256:7ec05bf88e19c1437b6e37fdd30fcc1be7a5740ce4cb9911acfadd123a1a53e9` * [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [b1926150](https://github.com/openshift/network-metrics-daemon/commit/b1926150fd61d1f5137d18606661ff451f504a98) `sha256:06dc2a5dc5090d7d52321820944987815db355872e3938dc473b438534cdfe49` * [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [69f527e9](https://github.com/openshift/oauth-apiserver/commit/69f527e90f599e0f509cfce73ba7b95656f03f7f) `sha256:b5f74b8382df5f92025166ae3f5ff0e21c8482ca814ba7a97b4401043f4a2f30` * [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [40b0968e](https://github.com/openshift/openshift-state-metrics/commit/40b0968ee1d488b791cdd6750fac6534abac122e) `sha256:7f0035ce01ef027e3aed20e58b45c0b894c007e6cf84a806c96316502007813f` * [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator) git [117ce62c](https://github.com/openshift/openstack-cinder-csi-driver-operator/commit/117ce62c69b399c524850f4ca32324a4ed288acd) `sha256:d3cf8e5de9d88498adcb86acb6f4f493ce7ba4c24f5b72c5aef6e1ebcc0a93ed` * [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [471cf3ab](https://github.com/openshift/cluster-api-provider-openstack/commit/471cf3ab636c26ed7c9fba6330374a5ea1b36b43) `sha256:e615efe073f4a7b1549d790d62a15268836ad06cddd1af9038467041917a9d56` * [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [96bab9b9](https://github.com/operator-framework/operator-marketplace/commit/96bab9b9f5bb2c8fce141992230cf75e48f14f78) `sha256:11df69ebd829a2cb2afacd33326b48158138e4ec76ec2f8929c40aca7e9ec352` * [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [72545e63](https://github.com/openshift/ovirt-csi-driver/commit/72545e6381b3625bcb37e37c4c713862d04cb145) `sha256:8d17f50a72fa9c27ea97a04b10e2fa6e56d23626c0aad4780cad8ab4c5cf547a` * [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [01b9bf83](https://github.com/openshift/cluster-api-provider-ovirt/commit/01b9bf8368a3da974bf1c9114c618a548d346acd) `sha256:58ae6e1d40c169c0b6df55e09c1a8eabca4d56514124fefee791419700ad74b8` * [pod](https://github.com/openshift/images) git [0e45f638](https://github.com/openshift/images/commit/0e45f638fbf5fa9e9bdb507d81b2cb9f12fadbaf) `sha256:6b94dad529eacf6b4334a06e6213fd07f0d478b7d7795bb861650f297fe3249a` * [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [db87872c](https://github.com/openshift/prom-label-proxy/commit/db87872c6aba7e4e9def29b33beea582557ce940) `sha256:1f9b8b435348181f2d663aea08cbf8dfca590a5ee1fd3da8f9def21dc2c82844` * [prometheus](https://github.com/openshift/prometheus) git [cb5e53cd](https://github.com/openshift/prometheus/commit/cb5e53cdfedfee185feffcec13304dda87ff3055) `sha256:6418213568d63e657195cc0a12297f04a8116c23430f61c253d5d1eb76a2bbab` * [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [9954cc42](https://github.com/openshift/prometheus-alertmanager/commit/9954cc421d26ecf498ac82f3cbdc64ce3afa4c74) `sha256:5448baf9017cf37d7c9f0887a365b0f71c8b435dfe7bd00c56c608c0d1d88f67` * [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [1f0fd51d](https://github.com/openshift/prometheus-operator/commit/1f0fd51df863c8773d2094e4ca78b4bd14cbf6e6) `sha256:a7e089eb7b9d3eaf479ef3f0881dee66f3e59c6cabf27f85bc49118775799025` * [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [76974e2e](https://github.com/openshift/node_exporter/commit/76974e2ed037c4bf81387dabf7ccd388a724c5aa) `sha256:b185f4b4656644ba374d89d8c7c4080ca97250cf062ece18ad584dfb903785b5` * [prometheus-operator](https://github.com/openshift/prometheus-operator) git [1f0fd51d](https://github.com/openshift/prometheus-operator/commit/1f0fd51df863c8773d2094e4ca78b4bd14cbf6e6) `sha256:bc28a98491401701828522a7f799550637a6d32496880f2b105c9c576e496cb2` * [telemeter](https://github.com/openshift/telemeter) git [e4dac512](https://github.com/openshift/telemeter/commit/e4dac5123ef6b3ecb16b5151e2e8f8aeb8b1f21a) `sha256:9c71094fb13412a5771c22dae4aa7de1adb472c3ba71ecb2c19f377fee39188e` ### [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator/tree/3a9ff17d523a342ee71a967a2b82d5cf044f1eb8) * [Bug 1996070](https://bugzilla.redhat.com/show_bug.cgi?id=1996070): Add maxUnavailable to DaemonSets [#135](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/135) * [Full changelog](https://github.com/openshift/aws-ebs-csi-driver-operator/compare/97f73eb7de4b474497169771239dcd81990d3f2e...3a9ff17d523a342ee71a967a2b82d5cf044f1eb8) ### [aws-machine-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/5368195c02ca672dc7f7a4ad571df5584fa4087f) * [Bug 1976192](https://bugzilla.redhat.com/show_bug.cgi?id=1976192): update aws-sdk-go to v1.38.25 [#415](https://github.com/openshift/cluster-api-provider-aws/pull/415) * [Bug 1942966](https://bugzilla.redhat.com/show_bug.cgi?id=1942966): Update EC2 instance types [#398](https://github.com/openshift/cluster-api-provider-aws/pull/398) * Updating ose-aws-machine-controllers builder & base images to be consistent with ART [#373](https://github.com/openshift/cluster-api-provider-aws/pull/373) * [Bug 1924471](https://bugzilla.redhat.com/show_bug.cgi?id=1924471): Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 [#409](https://github.com/openshift/cluster-api-provider-aws/pull/409) * [Bug 1952614](https://bugzilla.redhat.com/show_bug.cgi?id=1952614): [OCPCLOUD-1115] Get instance tags from infrastructure object [#405](https://github.com/openshift/cluster-api-provider-aws/pull/405) * [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/2d069b7f8bf4a443ba1a7ac8f669ef05ed92a50e...5368195c02ca672dc7f7a4ad571df5584fa4087f) ### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/94125b21304a574ae5bc98039f8eb7f518293b83) * [Bug 1981553](https://bugzilla.redhat.com/show_bug.cgi?id=1981553): [release-4.7] aws: move elastic ip permissions to create networking category [#5055](https://github.com/openshift/installer/pull/5055) * [Bug 1954595](https://bugzilla.redhat.com/show_bug.cgi?id=1954595): Validate noProxy input and add prefix for proxy urls [#5060](https://github.com/openshift/installer/pull/5060) * OWNERS: add more core team members as approvers [#5123](https://github.com/openshift/installer/pull/5123) * [Bug 1977481](https://bugzilla.redhat.com/show_bug.cgi?id=1977481): Dockerfile: repin libvirt [#5043](https://github.com/openshift/installer/pull/5043) * [Bug 1975819](https://bugzilla.redhat.com/show_bug.cgi?id=1975819): upi/vsphere: Use Afterburn guestinfo for static IP and hostname config [#5025](https://github.com/openshift/installer/pull/5025) * [Bug 1974282](https://bugzilla.redhat.com/show_bug.cgi?id=1974282): gather: collect networking information in log bundle [#5017](https://github.com/openshift/installer/pull/5017) * [Bug 1971163](https://bugzilla.redhat.com/show_bug.cgi?id=1971163): Updating AWS instance types [#4992](https://github.com/openshift/installer/pull/4992) * [Bug 1945467](https://bugzilla.redhat.com/show_bug.cgi?id=1945467): aws: allow use of unknown regions in known partitions [#4807](https://github.com/openshift/installer/pull/4807) * [Bug 1938426](https://bugzilla.redhat.com/show_bug.cgi?id=1938426): Set default values to machine pools before validation [#4750](https://github.com/openshift/installer/pull/4750) * [Bug 1967355](https://bugzilla.redhat.com/show_bug.cgi?id=1967355): pattern removed from sed to prevent expansion [#4975](https://github.com/openshift/installer/pull/4975) * [Bug 1956483](https://bugzilla.redhat.com/show_bug.cgi?id=1956483): Bump boot images for RHCOS fixes [#4961](https://github.com/openshift/installer/pull/4961) * [Bug 1947427](https://bugzilla.redhat.com/show_bug.cgi?id=1947427): add proxy params to bootstrap ignition [#4830](https://github.com/openshift/installer/pull/4830) * [Bug 1939014](https://bugzilla.redhat.com/show_bug.cgi?id=1939014): generate glance url considering the region [#4753](https://github.com/openshift/installer/pull/4753) * [Bug 1947216](https://bugzilla.redhat.com/show_bug.cgi?id=1947216): pkg/asset/installconfig/aws: Add iam permission for destorying clusters [#4827](https://github.com/openshift/installer/pull/4827) * [Bug 1948398](https://bugzilla.redhat.com/show_bug.cgi?id=1948398): remove ovirt_cafile from ovirt-credentials secret [#4842](https://github.com/openshift/installer/pull/4842) * [Bug 1962435](https://bugzilla.redhat.com/show_bug.cgi?id=1962435): aws: using dotted domain when looking for public hosted zone [#4948](https://github.com/openshift/installer/pull/4948) * [Bug 1940275](https://bugzilla.redhat.com/show_bug.cgi?id=1940275): Revert "baremetal: send full ignition to masters" [#4767](https://github.com/openshift/installer/pull/4767) * [Bug 1943500](https://bugzilla.redhat.com/show_bug.cgi?id=1943500): Bump gophercloud utils [#4794](https://github.com/openshift/installer/pull/4794) * [Bug 1958518](https://bugzilla.redhat.com/show_bug.cgi?id=1958518): aws: restore setting aws platform spec in infra resource [#4918](https://github.com/openshift/installer/pull/4918) * [Bug 1958428](https://bugzilla.redhat.com/show_bug.cgi?id=1958428): aws: support more auth options in manual mode [#4914](https://github.com/openshift/installer/pull/4914) * [Bug 1945907](https://bugzilla.redhat.com/show_bug.cgi?id=1945907): Byo aws iam roles 4.7 [#4813](https://github.com/openshift/installer/pull/4813) * [Bug 1954803](https://bugzilla.redhat.com/show_bug.cgi?id=1954803): aws: support for bring-your-own hosted zone [#4887](https://github.com/openshift/installer/pull/4887) * [Bug 1951571](https://bugzilla.redhat.com/show_bug.cgi?id=1951571): registry.svc.ci.openshift.org is no longer valid [#4853](https://github.com/openshift/installer/pull/4853) * [Bug 1954152](https://bugzilla.redhat.com/show_bug.cgi?id=1954152): manifests: populate aws user tags in infrastructure [#4882](https://github.com/openshift/installer/pull/4882) * [Full changelog](https://github.com/openshift/installer/compare/fae650e24e7036b333b2b2d9dfb5a08a29cd07b1...94125b21304a574ae5bc98039f8eb7f518293b83) ### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/726d97e15db78b767234da98d2c75f794f4bf158) * [Bug 1938967](https://bugzilla.redhat.com/show_bug.cgi?id=1938967): Updating baremetal-machine-controller builder & base images to be consistent with ART [#134](https://github.com/openshift/cluster-api-provider-baremetal/pull/134) * [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/25cbb8d8f9e52244ccd6bf459e6dd4b84749de56...726d97e15db78b767234da98d2c75f794f4bf158) ### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/e36cbc13f82e290ca5f525a4da0fab516808d113) * [Bug 1972430](https://bugzilla.redhat.com/show_bug.cgi?id=1972430): Don't deprovision provisioned host due to error [#159](https://github.com/openshift/baremetal-operator/pull/159) * [Bug 1961341](https://bugzilla.redhat.com/show_bug.cgi?id=1961341): config: use rbacv1 instead of rbacv1beta1 [#148](https://github.com/openshift/baremetal-operator/pull/148) * [Full changelog](https://github.com/openshift/baremetal-operator/compare/74c60aa957f53432d0a98afc78099add55d27c44...e36cbc13f82e290ca5f525a4da0fab516808d113) ### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/9c5da32ba602e5881178e56269b0506fcb54ff92) * [Bug 1962949](https://bugzilla.redhat.com/show_bug.cgi?id=1962949): Keepalived- verify that unicast peers list isn't empty on master nodes [#140](https://github.com/openshift/baremetal-runtimecfg/pull/140) * [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/4e6ac5edae9417bd673e8f37ee12f92e9d333397...9c5da32ba602e5881178e56269b0506fcb54ff92) ### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/d1ffb3c4b74fa8a478f63be1df429479182ee3b0) * [Bug 1974264](https://bugzilla.redhat.com/show_bug.cgi?id=1974264): make oc logs work with BuildConfig's JenkinsPipeline strategy [#864](https://github.com/openshift/oc/pull/864) * [Bug 1976284](https://bugzilla.redhat.com/show_bug.cgi?id=1976284): skip-multiple-scopes with adm catalog mirror [#869](https://github.com/openshift/oc/pull/869) * [Bug 1963784](https://bugzilla.redhat.com/show_bug.cgi?id=1963784): Preserve AuthInfo when switching projects [#861](https://github.com/openshift/oc/pull/861) * [Bug 1970811](https://bugzilla.redhat.com/show_bug.cgi?id=1970811): set User-Agent when talking with registries [#848](https://github.com/openshift/oc/pull/848) * [Bug 1969928](https://bugzilla.redhat.com/show_bug.cgi?id=1969928): exclude security during exctraction [#844](https://github.com/openshift/oc/pull/844) * Fix unit test failure [#838](https://github.com/openshift/oc/pull/838) * [Full changelog](https://github.com/openshift/oc/compare/95881afb5df065c250d98cf7f30ee4bb6d281acf...d1ffb3c4b74fa8a478f63be1df429479182ee3b0) ### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/0783477aa72edf998344740933a99c0417ebe573) * [Bug 1958983](https://bugzilla.redhat.com/show_bug.cgi?id=1958983): rework GCP passthrough permissions checking [#338](https://github.com/openshift/cloud-credential-operator/pull/338) * [Bug 1948396](https://bugzilla.redhat.com/show_bug.cgi?id=1948396): oVirt credentials secret contains unnecessary "ovirt_cafile" [#322](https://github.com/openshift/cloud-credential-operator/pull/322) * [Bug 1948702](https://bugzilla.redhat.com/show_bug.cgi?id=1948702): [release-4.7] manifests/0000_90_cloud-credential-operator_04_alertrules: Drop CloudCredentialOperatorDown [#324](https://github.com/openshift/cloud-credential-operator/pull/324) * [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/2aec1a53520e4fc9f8def5bd040e3eca917e3d02...0783477aa72edf998344740933a99c0417ebe573) ### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/4c02b7b2322eab9bbcb969886211d541e5e4fcde) * Updating ose-cluster-authentication-operator builder & base images to be consistent with ART [#408](https://github.com/openshift/cluster-authentication-operator/pull/408) * [Bug 1971087](https://bugzilla.redhat.com/show_bug.cgi?id=1971087): add a controller to remove webhooktokenauthenticator config [#418](https://github.com/openshift/cluster-authentication-operator/pull/418) * [Bug 1956797](https://bugzilla.redhat.com/show_bug.cgi?id=1956797): bump kube to 0.20.6 to prevent delegated authz panics [#443](https://github.com/openshift/cluster-authentication-operator/pull/443) * [Bug 1941840](https://bugzilla.redhat.com/show_bug.cgi?id=1941840): endpoints controller: close response bodies [#440](https://github.com/openshift/cluster-authentication-operator/pull/440) * [Bug 1949941](https://bugzilla.redhat.com/show_bug.cgi?id=1949941): add a scraper and an alert to check for old-style tokens [#437](https://github.com/openshift/cluster-authentication-operator/pull/437) * [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/cf1e1a6c79db7cf29e7de2a90ecdc458bc13059c...4c02b7b2322eab9bbcb969886211d541e5e4fcde) ### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/8b2e494f7796639b46f9867407fe21546cfc01c3) * [Bug 1924416](https://bugzilla.redhat.com/show_bug.cgi?id=1924416): Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 [#204](https://github.com/openshift/kubernetes-autoscaler/pull/204) * Updating atomic-openshift-cluster-autoscaler builder & base images to be consistent with ART [#187](https://github.com/openshift/kubernetes-autoscaler/pull/187) * [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/ac544d46b0f4aa100e40336d87ec069eca335323...8b2e494f7796639b46f9867407fe21546cfc01c3) ### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/7658bea6c42d770029e6928c1d74ec3bf0175a49) * [Bug 1961341](https://bugzilla.redhat.com/show_bug.cgi?id=1961341): manifests: use v1 for RBAC [#206](https://github.com/openshift/cluster-autoscaler-operator/pull/206) * [Bug 1924478](https://bugzilla.redhat.com/show_bug.cgi?id=1924478): Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 [#207](https://github.com/openshift/cluster-autoscaler-operator/pull/207) * [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/4b0831e0a8c151850e73ab643c2e15f5ffe22c23...7658bea6c42d770029e6928c1d74ec3bf0175a49) ### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/f73e5fcb432e4b847cddec5ce8570f8c5c32e902) * [Bug 1976924](https://bugzilla.redhat.com/show_bug.cgi?id=1976924): Update bmh crd [#190](https://github.com/openshift/cluster-baremetal-operator/pull/190) * [Bug 1933726](https://bugzilla.redhat.com/show_bug.cgi?id=1933726): provisioning: configure DHCP range with netmask [#112](https://github.com/openshift/cluster-baremetal-operator/pull/112) * [Bug 1973367](https://bugzilla.redhat.com/show_bug.cgi?id=1973367): Pass IP_OPTIONS=dhcp|dhcp6 down to OS Downloader container [#171](https://github.com/openshift/cluster-baremetal-operator/pull/171) * [Bug 1972291](https://bugzilla.redhat.com/show_bug.cgi?id=1972291): Use a cache URL with the .svc.cluster.local suffix [#161](https://github.com/openshift/cluster-baremetal-operator/pull/161) * [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/175f8f5283faebd81fb9d1fb2915eb2682622e1e...f73e5fcb432e4b847cddec5ce8570f8c5c32e902) ### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/07e059a6b0c98e98d71f0c08dc741605e2431914) * [Bug 1954152](https://bugzilla.redhat.com/show_bug.cgi?id=1954152): vendor: bump to the latest openshift/api [#200](https://github.com/openshift/cluster-config-operator/pull/200) * [Full changelog](https://github.com/openshift/cluster-config-operator/compare/3bc7ea731d4fe149250fbc8e6805c3004d7967d8...07e059a6b0c98e98d71f0c08dc741605e2431914) ### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/fc036b59b83b25ac6d1050aee0a172abb54502c6) * [Bug 1961719](https://bugzilla.redhat.com/show_bug.cgi?id=1961719): manifests/05_operator_rbac: Drop the unused namespace property [#89](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/89) * [Bug 1967328](https://bugzilla.redhat.com/show_bug.cgi?id=1967328): Remove exclude annotation from manifests to include in ROKS [#91](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/91) * [Bug 1929881](https://bugzilla.redhat.com/show_bug.cgi?id=1929881): Fix installation on ROKS [#80](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/80) * [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/95d85d4a9c9d61e02c980df28da66c5455028177...fc036b59b83b25ac6d1050aee0a172abb54502c6) ### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/cf8be7b279499d5010894b8c9bf79acc9853be36) * [Bug 1967766](https://bugzilla.redhat.com/show_bug.cgi?id=1967766): Corefile: Set bufsize to 512 bytes for all servers [#277](https://github.com/openshift/cluster-dns-operator/pull/277) * [Bug 1953097](https://bugzilla.redhat.com/show_bug.cgi?id=1953097): Corefile: Enable bufsize plugin for all servers [#267](https://github.com/openshift/cluster-dns-operator/pull/267) * [Bug 1953609](https://bugzilla.redhat.com/show_bug.cgi?id=1953609): Enable errors plugin for custom upstream resolvers [#268](https://github.com/openshift/cluster-dns-operator/pull/268) * [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/0dd9bae28a315233ceddcb82cd2332ef7f7614cd...cf8be7b279499d5010894b8c9bf79acc9853be36) ### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/51cb8c4147c45672c9645fae39bfcc6d696adc85) * [Bug 1976988](https://bugzilla.redhat.com/show_bug.cgi?id=1976988): [release-4.7]: Increase inertia duration for the EtcdMembersDegraded condition [#618](https://github.com/openshift/cluster-etcd-operator/pull/618) * [Bug 1976287](https://bugzilla.redhat.com/show_bug.cgi?id=1976287): Validate the status of the etcd snapshot during backup and restore [#617](https://github.com/openshift/cluster-etcd-operator/pull/617) * [Bug 1951447](https://bugzilla.redhat.com/show_bug.cgi?id=1951447): pkg/etcdenvvar/etcd_env.go: Sort endpoints to prevent rollout [#568](https://github.com/openshift/cluster-etcd-operator/pull/568) * [Bug 1958416](https://bugzilla.redhat.com/show_bug.cgi?id=1958416): pkg/dnshelpers: fallback to spec if status is not populated for serviceNetwork [#594](https://github.com/openshift/cluster-etcd-operator/pull/594) * [Bug 1955418](https://bugzilla.redhat.com/show_bug.cgi?id=1955418): manifests: Shift FlowSchema to level 50 [#582](https://github.com/openshift/cluster-etcd-operator/pull/582) * [Bug 1954121](https://bugzilla.redhat.com/show_bug.cgi?id=1954121): [release-4.7] Improve cert controller detection and correction of invalid certs [#577](https://github.com/openshift/cluster-etcd-operator/pull/577) * OWNERS: add lilic as reviewer [#588](https://github.com/openshift/cluster-etcd-operator/pull/588) * [Bug 1954073](https://bugzilla.redhat.com/show_bug.cgi?id=1954073): bindata, pkg: Propagate operator log level to etcd itself [#578](https://github.com/openshift/cluster-etcd-operator/pull/578) * [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/ee35da5b3ee486f786d7687849d57599d46dfc2e...51cb8c4147c45672c9645fae39bfcc6d696adc85) ### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/70a85883e406641339251b5c1473e4dec7083928) * [Bug 1988388](https://bugzilla.redhat.com/show_bug.cgi?id=1988388): Properly set custom tolerations [#708](https://github.com/openshift/cluster-image-registry-operator/pull/708) * [Bug 1984979](https://bugzilla.redhat.com/show_bug.cgi?id=1984979): Creating StorageAccount V2 instead of V1 [#707](https://github.com/openshift/cluster-image-registry-operator/pull/707) * Updating ose-cluster-image-registry-operator builder & base images to be consistent with ART [#651](https://github.com/openshift/cluster-image-registry-operator/pull/651) * [Bug 1977159](https://bugzilla.redhat.com/show_bug.cgi?id=1977159): bump aws-sdk-go to v1.38.35 [#704](https://github.com/openshift/cluster-image-registry-operator/pull/704) * [Bug 1973693](https://bugzilla.redhat.com/show_bug.cgi?id=1973693): Setting required pod anti-affinity rules [#697](https://github.com/openshift/cluster-image-registry-operator/pull/697) * [Bug 1960562](https://bugzilla.redhat.com/show_bug.cgi?id=1960562): manifests: fix selector in image-registry-operator [#689](https://github.com/openshift/cluster-image-registry-operator/pull/689) * [Bug 1957308](https://bugzilla.redhat.com/show_bug.cgi?id=1957308): Setting user tags always when Storage is Managed [#684](https://github.com/openshift/cluster-image-registry-operator/pull/684) * [Bug 1955176](https://bugzilla.redhat.com/show_bug.cgi?id=1955176): Setting user provided tags on bucket creation [#682](https://github.com/openshift/cluster-image-registry-operator/pull/682) * [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/538ff7fed284953731785c495cf286ea33d97f50...70a85883e406641339251b5c1473e4dec7083928) ### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/b86f935f5e693f48dbf6ec23a490422b6e295eb7) * [Bug 1978845](https://bugzilla.redhat.com/show_bug.cgi?id=1978845): Specify topology spread constraints [#632](https://github.com/openshift/cluster-ingress-operator/pull/632) * [Bug 1973983](https://bugzilla.redhat.com/show_bug.cgi?id=1973983): Canary: Handle downgrades from 4.8 to 4.7 properly [#627](https://github.com/openshift/cluster-ingress-operator/pull/627) * [Bug 1960776](https://bugzilla.redhat.com/show_bug.cgi?id=1960776): Reconcile openshift-ingress namespace on upgrade [#616](https://github.com/openshift/cluster-ingress-operator/pull/616) * [Bug 1942603](https://bugzilla.redhat.com/show_bug.cgi?id=1942603): [release-4.7] Add the new NetworkPolicy-matching label to the namespace [#615](https://github.com/openshift/cluster-ingress-operator/pull/615) * [Bug 1954097](https://bugzilla.redhat.com/show_bug.cgi?id=1954097): Annotate services of type LoadBalancer with user tags (AWS only) [#606](https://github.com/openshift/cluster-ingress-operator/pull/606) * [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/1d9717b7624acee5c40d9a2f6bffbf7e628fd23d...b86f935f5e693f48dbf6ec23a490422b6e295eb7) ### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/9043e2bba8f4707a578895f8b29d4736a61a010c) * [Bug 1924492](https://bugzilla.redhat.com/show_bug.cgi?id=1924492): Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 [#120](https://github.com/openshift/cluster-machine-approver/pull/120) * [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/6f49a9facf8b2764fa4c1482624fa1f7762e41ed...9043e2bba8f4707a578895f8b29d4736a61a010c) ### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/035c8038f56cdcf0d402bea6671e81882e3ab8bd) * [Bug 1986591](https://bugzilla.redhat.com/show_bug.cgi?id=1986591): node exporter calls /proc/cpuinfo multiple times causing the node to freeze [#1300](https://github.com/openshift/cluster-monitoring-operator/pull/1300) * [Bug 1969963](https://bugzilla.redhat.com/show_bug.cgi?id=1969963): Recording rule for builds by strategy [#1206](https://github.com/openshift/cluster-monitoring-operator/pull/1206) * [Bug 1967966](https://bugzilla.redhat.com/show_bug.cgi?id=1967966): Switch back anti-affinity to soft from hard for Prometheus [#1200](https://github.com/openshift/cluster-monitoring-operator/pull/1200) * [Bug 1956565](https://bugzilla.redhat.com/show_bug.cgi?id=1956565): manifest allowlist: add acm_managed_cluster_info in 4.7 [#1144](https://github.com/openshift/cluster-monitoring-operator/pull/1144) * [Bug 1961069](https://bugzilla.redhat.com/show_bug.cgi?id=1961069): remove dependency of e2e tests on AWS [#1162](https://github.com/openshift/cluster-monitoring-operator/pull/1162) * [Bug 1957703](https://bugzilla.redhat.com/show_bug.cgi?id=1957703): [4.7]: Add hard anti-affinity constraints to Prometheuses [#1150](https://github.com/openshift/cluster-monitoring-operator/pull/1150) * [Bug 1950290](https://bugzilla.redhat.com/show_bug.cgi?id=1950290): remove KubeClientCertificateExpiration alert rule [#1171](https://github.com/openshift/cluster-monitoring-operator/pull/1171) * [Bug 1955482](https://bugzilla.redhat.com/show_bug.cgi?id=1955482): fix kube-state-metrics regexp patterns [#1163](https://github.com/openshift/cluster-monitoring-operator/pull/1163) * [Bug 1955482](https://bugzilla.redhat.com/show_bug.cgi?id=1955482): Drop high-cardinality metrics from kube-state-metrics which aren't used [#1141](https://github.com/openshift/cluster-monitoring-operator/pull/1141) * [Bug 1955469](https://bugzilla.redhat.com/show_bug.cgi?id=1955469): remove node_mountstats_nfs_* metrics [#1154](https://github.com/openshift/cluster-monitoring-operator/pull/1154) * [Bug 1955462](https://bugzilla.redhat.com/show_bug.cgi?id=1955462): drop container_memory_failures_total metric backport [#1160](https://github.com/openshift/cluster-monitoring-operator/pull/1160) * [Bug 1952149](https://bugzilla.redhat.com/show_bug.cgi?id=1952149): oc adm top reporting unknown status for Windows node [#1130](https://github.com/openshift/cluster-monitoring-operator/pull/1130) * [Bug 1955449](https://bugzilla.redhat.com/show_bug.cgi?id=1955449): drop crio image metrics [#1134](https://github.com/openshift/cluster-monitoring-operator/pull/1134) * [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/da421b0e3c3362771e8d91befdd934ac09697db1...035c8038f56cdcf0d402bea6671e81882e3ab8bd) ### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/9a9a870010c99e11747fce0232487a2f2c27dfa6) * [Bug 1988426](https://bugzilla.redhat.com/show_bug.cgi?id=1988426): Change to use mountPath: /host [#1170](https://github.com/openshift/cluster-network-operator/pull/1170) * [Bug 1962036](https://bugzilla.redhat.com/show_bug.cgi?id=1962036): Use the election mechanism provided by library-go [#1098](https://github.com/openshift/cluster-network-operator/pull/1098) * [Bug 1972549](https://bugzilla.redhat.com/show_bug.cgi?id=1972549): Remove reference to v1beta1 API [#1134](https://github.com/openshift/cluster-network-operator/pull/1134) * [Bug 1982217](https://bugzilla.redhat.com/show_bug.cgi?id=1982217): Use 10% for ovnkube-node for maxUnavailable [#1153](https://github.com/openshift/cluster-network-operator/pull/1153) * [Bug 1969860](https://bugzilla.redhat.com/show_bug.cgi?id=1969860): Escape characters on ini file [#1127](https://github.com/openshift/cluster-network-operator/pull/1127) * [Bug 1967994](https://bugzilla.redhat.com/show_bug.cgi?id=1967994): Backport daemonset to drop icmp frag needed packets received from other nodes in the cluster to Rel 4.7 [#1119](https://github.com/openshift/cluster-network-operator/pull/1119) * [Bug 1972183](https://bugzilla.redhat.com/show_bug.cgi?id=1972183): config: Set enable-profiling true by default and allow enable-profiling as a proxy argument [#1129](https://github.com/openshift/cluster-network-operator/pull/1129) * [Bug 1967388](https://bugzilla.redhat.com/show_bug.cgi?id=1967388): annotate flowcontrol with `networkoperator.openshift.io/ignore-errors` [#1118](https://github.com/openshift/cluster-network-operator/pull/1118) * [Bug 1967972](https://bugzilla.redhat.com/show_bug.cgi?id=1967972): Add tokenreviews permissions for kube-proxy [#1120](https://github.com/openshift/cluster-network-operator/pull/1120) * [Bug 1942603](https://bugzilla.redhat.com/show_bug.cgi?id=1942603): [release-4.7] Allow from router policy support for cluster network operator [#1087](https://github.com/openshift/cluster-network-operator/pull/1087) * [Bug 1937396](https://bugzilla.redhat.com/show_bug.cgi?id=1937396): kuryr/alerts: change the rule for free count [#1011](https://github.com/openshift/cluster-network-operator/pull/1011) * [Bug 1957749](https://bugzilla.redhat.com/show_bug.cgi?id=1957749): ovnkube: add missing resource requests for SBDB [#1088](https://github.com/openshift/cluster-network-operator/pull/1088) * [Bug 1954302](https://bugzilla.redhat.com/show_bug.cgi?id=1954302): Remove OVS daemonsets [#1076](https://github.com/openshift/cluster-network-operator/pull/1076) * [Bug 1956352](https://bugzilla.redhat.com/show_bug.cgi?id=1956352): [4.7] OVN kubernetes dual-stack conversion [#1082](https://github.com/openshift/cluster-network-operator/pull/1082) * [Bug 1941214](https://bugzilla.redhat.com/show_bug.cgi?id=1941214): Use 10% for ovs maxUnavailable for rolling update [#1031](https://github.com/openshift/cluster-network-operator/pull/1031) * [Full changelog](https://github.com/openshift/cluster-network-operator/compare/01c8bd041411bcae01abcee6c9201337742ebd7f...9a9a870010c99e11747fce0232487a2f2c27dfa6) ### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/3066601cab5378f1c155f9a98995614f0168f803) * [Bug 1986739](https://bugzilla.redhat.com/show_bug.cgi?id=1986739): gather all Tuned CRs [#255](https://github.com/openshift/cluster-node-tuning-operator/pull/255) * [Bug 1958885](https://bugzilla.redhat.com/show_bug.cgi?id=1958885): Switch to client-go leader-with-lease election. [#238](https://github.com/openshift/cluster-node-tuning-operator/pull/238) * [Bug 1960542](https://bugzilla.redhat.com/show_bug.cgi?id=1960542): manifests: fix selector in node-tuning-operator ServiceMonitor [#228](https://github.com/openshift/cluster-node-tuning-operator/pull/228) * [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/78e1417e306a54b589c5cfce659f672a74bc0456...3066601cab5378f1c155f9a98995614f0168f803) ### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/fa6d8e1cc9d57566fa3fbe4dbb361892ccf9e17d) * Updating ose-cluster-openshift-apiserver-operator builder & base images to be consistent with ART [#427](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/427) * [Bug 1955502](https://bugzilla.redhat.com/show_bug.cgi?id=1955502): explicitly allow apiserver pods to write to their root FS [#449](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/449) * [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/e9dac4b23fb59c58a34d8d6533dd6bc1b6939ea3...fa6d8e1cc9d57566fa3fbe4dbb361892ccf9e17d) ### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/2a8963a9c5755d4951d882bd816cd4d6ccdf02cd) * [Bug 1924494](https://bugzilla.redhat.com/show_bug.cgi?id=1924494): Update k8s.io dependencies to address CVE-2021-3121 [#222](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/222) * [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/245005e3065238ecd4aef208c21456afa09ec38e...2a8963a9c5755d4951d882bd816cd4d6ccdf02cd) ### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/0df8f92c275b9eccfb1b3ccdd79fb861ddee1d99) * [Bug 1923036](https://bugzilla.redhat.com/show_bug.cgi?id=1923036): Update Jenkins monitored templates names [#359](https://github.com/openshift/cluster-samples-operator/pull/359) * [Bug 1961518](https://bugzilla.redhat.com/show_bug.cgi?id=1961518): manifests: fix selector in ServiceMonitor [#375](https://github.com/openshift/cluster-samples-operator/pull/375) * [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/257793946a0655f7af4597c3b7da2de2b4249702...0df8f92c275b9eccfb1b3ccdd79fb861ddee1d99) ### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/6d2c25f3cfb931deca457a0c6261651c1a64c464) * [Bug 1961719](https://bugzilla.redhat.com/show_bug.cgi?id=1961719): manifests: remove namespace from cluster-storage-operator-role binding [#170](https://github.com/openshift/cluster-storage-operator/pull/170) * [Bug 1959546](https://bugzilla.redhat.com/show_bug.cgi?id=1959546): Add alert about vsphere-problem-detector unable to connect [#169](https://github.com/openshift/cluster-storage-operator/pull/169) * [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/fd2b47c06d0c7efae84c6ff44680f9025ac4f283...6d2c25f3cfb931deca457a0c6261651c1a64c464) ### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/b7e791773b67f9acd6f521b8c1f69778e43a7d94) * Pack both keys in one verifier-public-key-ci entry [#36](https://github.com/openshift/cluster-update-keys/pull/36) * Adding the new Openshift CI Signer key [#34](https://github.com/openshift/cluster-update-keys/pull/34) * [Full changelog](https://github.com/openshift/cluster-update-keys/compare/a7065d83eff2a4dfed1146ff9f7a4f599a73d618...b7e791773b67f9acd6f521b8c1f69778e43a7d94) ### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/cc81827c1bfe322bd78d2fa0d9b34d532190d850) * [Bug 1991010](https://bugzilla.redhat.com/show_bug.cgi?id=1991010): pkg/cvo/metrics: Ignore Degraded for cluster_operator_up [#638](https://github.com/openshift/cluster-version-operator/pull/638) * [Bug 1924428](https://bugzilla.redhat.com/show_bug.cgi?id=1924428): CVE-2021-3121 gogo/protobuf lacks certain index validation [#625](https://github.com/openshift/cluster-version-operator/pull/625) * [Bug 1970272](https://bugzilla.redhat.com/show_bug.cgi?id=1970272): Fixing the log message in rbac.go for clusterrole [#609](https://github.com/openshift/cluster-version-operator/pull/609) * [Bug 1970272](https://bugzilla.redhat.com/show_bug.cgi?id=1970272): Log object updates and show existing/required diff [#589](https://github.com/openshift/cluster-version-operator/pull/589) * [Bug 1969501](https://bugzilla.redhat.com/show_bug.cgi?id=1969501): install/0000_90_cluster-version-operator_02_servicemonitor: Soften ClusterOperatorDegraded [#587](https://github.com/openshift/cluster-version-operator/pull/587) * [Bug 1969378](https://bugzilla.redhat.com/show_bug.cgi?id=1969378): avoid hotlooping on RoleBindings with empty APIGroup [#584](https://github.com/openshift/cluster-version-operator/pull/584) * [Bug 1966977](https://bugzilla.redhat.com/show_bug.cgi?id=1966977): Prevent hotlooping in ImageStreams [#580](https://github.com/openshift/cluster-version-operator/pull/580) * [Bug 1959238](https://bugzilla.redhat.com/show_bug.cgi?id=1959238): pkg/cvo/sync_worker: Shift ClusterOperator pre-creation into the manifest-task node [#557](https://github.com/openshift/cluster-version-operator/pull/557) * [Full changelog](https://github.com/openshift/cluster-version-operator/compare/1db886781f4e1f18965e60d89da80ec1d677228b...cc81827c1bfe322bd78d2fa0d9b34d532190d850) ### [console](https://github.com/openshift/console/tree/3cb2ea65a159f6f8d2a273721a4e271f8450adad) * [Bug 1986724](https://bugzilla.redhat.com/show_bug.cgi?id=1986724): Show the content of Insights widget when there are 0 recommendations for cluster [#9655](https://github.com/openshift/console/pull/9655) * [Bug 1989642](https://bugzilla.redhat.com/show_bug.cgi?id=1989642): Preserve user annotations while editing an app [#9714](https://github.com/openshift/console/pull/9714) * [Bug 1975560](https://bugzilla.redhat.com/show_bug.cgi?id=1975560): Fix typo in olm message [#9335](https://github.com/openshift/console/pull/9335) * [Bug 1975469](https://bugzilla.redhat.com/show_bug.cgi?id=1975469): Handle array to string conversion for HTTPS checkbox value [#9332](https://github.com/openshift/console/pull/9332) * Updating openshift-enterprise-console images to be consistent with ART [#8596](https://github.com/openshift/console/pull/8596) * [Bug 1973572](https://bugzilla.redhat.com/show_bug.cgi?id=1973572): Hardcode strings in Home->Overview page [#9322](https://github.com/openshift/console/pull/9322) * [Bug 1942864](https://bugzilla.redhat.com/show_bug.cgi?id=1942864): Warning Alert for Encrypted PVs in Create StorageClass [#8464](https://github.com/openshift/console/pull/8464) * [Bug 1965526](https://bugzilla.redhat.com/show_bug.cgi?id=1965526): Removing library charts from the merged helm repo index entries. [#9076](https://github.com/openshift/console/pull/9076) * [Bug 1970796](https://bugzilla.redhat.com/show_bug.cgi?id=1970796): update cluster-local label for ksvc [#9220](https://github.com/openshift/console/pull/9220) * [Bug 1970720](https://bugzilla.redhat.com/show_bug.cgi?id=1970720): fix rotated pipelinerun status icon issue in safari [#9216](https://github.com/openshift/console/pull/9216) * [Bug 1969536](https://bugzilla.redhat.com/show_bug.cgi?id=1969536): Omit bitbucket branch in URL if it contains slash [#9180](https://github.com/openshift/console/pull/9180) * [Bug 1954962](https://bugzilla.redhat.com/show_bug.cgi?id=1954962): removes extra annotations form spec template for ksvc [#8823](https://github.com/openshift/console/pull/8823) * [Bug 1948537](https://bugzilla.redhat.com/show_bug.cgi?id=1948537): add hide/reveal button for kms token [#8616](https://github.com/openshift/console/pull/8616) * [Bug 1942160](https://bugzilla.redhat.com/show_bug.cgi?id=1942160): Update the scope of GitOpsService resource [#8450](https://github.com/openshift/console/pull/8450) * [Bug 1971667](https://bugzilla.redhat.com/show_bug.cgi?id=1971667): Track and show error messages in modals [#9232](https://github.com/openshift/console/pull/9232) * [Bug 1969791](https://bugzilla.redhat.com/show_bug.cgi?id=1969791): fixes: WebTerminal widget should send resize events [#9190](https://github.com/openshift/console/pull/9190) * [Bug 1969105](https://bugzilla.redhat.com/show_bug.cgi?id=1969105): Update IP address on pods list to show podIP other than … [#9172](https://github.com/openshift/console/pull/9172) * [Bug 1967106](https://bugzilla.redhat.com/show_bug.cgi?id=1967106): can't open terminal for pods that have more than one co… [#9117](https://github.com/openshift/console/pull/9117) * [Bug 1966275](https://bugzilla.redhat.com/show_bug.cgi?id=1966275): Fix Pipeline Parameters in Modals accept empty string defaults [#9085](https://github.com/openshift/console/pull/9085) * [Bug 1961567](https://bugzilla.redhat.com/show_bug.cgi?id=1961567): Remove the broken Devfile Sample for BuildConfigs [#8956](https://github.com/openshift/console/pull/8956) * [Bug 1963025](https://bugzilla.redhat.com/show_bug.cgi?id=1963025): Fix documentation link to network policies [#8953](https://github.com/openshift/console/pull/8953) * [Bug 1953606](https://bugzilla.redhat.com/show_bug.cgi?id=1953606): Fixing failure domain issue with custom pools (4.7 backport) [#8775](https://github.com/openshift/console/pull/8775) * [Bug 1970485](https://bugzilla.redhat.com/show_bug.cgi?id=1970485): Add pipeline annotation to secrets for private git repo import with pipeline [#9207](https://github.com/openshift/console/pull/9207) * [Bug 1964400](https://bugzilla.redhat.com/show_bug.cgi?id=1964400): Fix RGW Total Used Query [#9038](https://github.com/openshift/console/pull/9038) * [Bug 1958873](https://bugzilla.redhat.com/show_bug.cgi?id=1958873): Fix disk replacement during second replacement [#9083](https://github.com/openshift/console/pull/9083) * [Bug 1961887](https://bugzilla.redhat.com/show_bug.cgi?id=1961887): Update Taskrun tab to make namespace based calls [#8968](https://github.com/openshift/console/pull/8968) * [Bug 1959356](https://bugzilla.redhat.com/show_bug.cgi?id=1959356): Tech preview badge for arbiter [#8870](https://github.com/openshift/console/pull/8870) * [Bug 1964322](https://bugzilla.redhat.com/show_bug.cgi?id=1964322): The status of "Used Capacity Breakdown [Pods]" is "Not available" [#9028](https://github.com/openshift/console/pull/9028) * [Bug 1957499](https://bugzilla.redhat.com/show_bug.cgi?id=1957499): OperatorHub - console accepts any value for infraFeatures [#8859](https://github.com/openshift/console/pull/8859) * [Bug 1960686](https://bugzilla.redhat.com/show_bug.cgi?id=1960686): Fix hot loop in global config page [#8935](https://github.com/openshift/console/pull/8935) * [Bug 1947091](https://bugzilla.redhat.com/show_bug.cgi?id=1947091): Fix skipped task status when using conditions [#8582](https://github.com/openshift/console/pull/8582) * [Bug 1962493](https://bugzilla.redhat.com/show_bug.cgi?id=1962493): Hide TaskRun edit actions for rows in Pipelinerun's TaskRun tab [#8987](https://github.com/openshift/console/pull/8987) * [Bug 1966798](https://bugzilla.redhat.com/show_bug.cgi?id=1966798): [release-4.7] Remove monitoring labelling step for 4.7 tests [#9073](https://github.com/openshift/console/pull/9073) * [Bug 1951210](https://bugzilla.redhat.com/show_bug.cgi?id=1951210): Fix default resource log download file name [#8707](https://github.com/openshift/console/pull/8707) * [Bug 1944046](https://bugzilla.redhat.com/show_bug.cgi?id=1944046): Warn using an unsupported IE browser [#8494](https://github.com/openshift/console/pull/8494) * [release 4.7] Bug 1939553: Support binary file type secret entries [#8389](https://github.com/openshift/console/pull/8389) * [Bug 1960544](https://bugzilla.redhat.com/show_bug.cgi?id=1960544): Overly generic CSS rules for dd and dt elements breaks styling elsewhere in console [#8925](https://github.com/openshift/console/pull/8925) * [Bug 1960093](https://bugzilla.redhat.com/show_bug.cgi?id=1960093): Make console works against api proxy [#8914](https://github.com/openshift/console/pull/8914) * [Bug 1942027](https://bugzilla.redhat.com/show_bug.cgi?id=1942027): Fix RBAC check when creating a resource [#8448](https://github.com/openshift/console/pull/8448) * [Bug 1956336](https://bugzilla.redhat.com/show_bug.cgi?id=1956336): Fix Triggers section in eventlistener details page [#8842](https://github.com/openshift/console/pull/8842) * [Bug 1953937](https://bugzilla.redhat.com/show_bug.cgi?id=1953937): Fixing PVC creation page issue in 4.7(Reverting wrong commit) [#8784](https://github.com/openshift/console/pull/8784) * [Bug 1952578](https://bugzilla.redhat.com/show_bug.cgi?id=1952578): Don't poll ClusterVersion when user doesn't have authority [#8749](https://github.com/openshift/console/pull/8749) * [Bug 1950489](https://bugzilla.redhat.com/show_bug.cgi?id=1950489): Fix "Create binding" link from Role page, RoleBindings tab [#8685](https://github.com/openshift/console/pull/8685) * [Bug 1948958](https://bugzilla.redhat.com/show_bug.cgi?id=1948958): Fix ingress details page to show referenced secret name [#8633](https://github.com/openshift/console/pull/8633) * [Bug 1944955](https://bugzilla.redhat.com/show_bug.cgi?id=1944955): Fix close button in the new 'Storage cluster exists' warning alert modal [#8524](https://github.com/openshift/console/pull/8524) * [Bug 1956313](https://bugzilla.redhat.com/show_bug.cgi?id=1956313): Save additional parameters from build guidance container and drop it [#8841](https://github.com/openshift/console/pull/8841) * [Bug 1953728](https://bugzilla.redhat.com/show_bug.cgi?id=1953728): Fix issues related to loading dynamic plugins [#8780](https://github.com/openshift/console/pull/8780) * [Bug 1945594](https://bugzilla.redhat.com/show_bug.cgi?id=1945594): fixing-project-creation-and-updated-packageJson [#8536](https://github.com/openshift/console/pull/8536) * [Bug 1950214](https://bugzilla.redhat.com/show_bug.cgi?id=1950214): Fix start pipeline action access review [#8681](https://github.com/openshift/console/pull/8681) * [Bug 1948369](https://bugzilla.redhat.com/show_bug.cgi?id=1948369): Remove cluster label from predefined monitoring queries [#8613](https://github.com/openshift/console/pull/8613) * [Bug 1954109](https://bugzilla.redhat.com/show_bug.cgi?id=1954109): Backport telemetry dynamic extension to release-4.7 [#8783](https://github.com/openshift/console/pull/8783) * [Bug 1952209](https://bugzilla.redhat.com/show_bug.cgi?id=1952209): Consistent formatting of dates and times [#8734](https://github.com/openshift/console/pull/8734) * [Bug 1952293](https://bugzilla.redhat.com/show_bug.cgi?id=1952293): adds check for templates [#8736](https://github.com/openshift/console/pull/8736) * [Full changelog](https://github.com/openshift/console/compare/39b08772b0fcce105c81319b796d897e358ece95...3cb2ea65a159f6f8d2a273721a4e271f8450adad) ### [console-operator](https://github.com/openshift/console-operator/tree/44a0308f894abae02f066a40ba394c8aa7331424) * [Bug 1960589](https://bugzilla.redhat.com/show_bug.cgi?id=1960589): [release-4.7] quickstarts: remove "spec.version" [#547](https://github.com/openshift/console-operator/pull/547) * [Full changelog](https://github.com/openshift/console-operator/compare/4f933d59784bd37216466ca329ea51fc797b99a1...44a0308f894abae02f066a40ba394c8aa7331424) ### [csi-driver-manila, openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack/tree/d3f709218512df9f46e11c1d13347fc68774d72c) * [Bug 1969345](https://bugzilla.redhat.com/show_bug.cgi?id=1969345): Backport ignore proxy connecting to CSI sockets [#54](https://github.com/openshift/cloud-provider-openstack/pull/54) * [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/5202bfdc042bafa732f19dcbec31ca6137fa3fa4...d3f709218512df9f46e11c1d13347fc68774d72c) ### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/bffdeaa88d9af1ef8b6961889bdb374caf9eeca9) * [Bug 1996070](https://bugzilla.redhat.com/show_bug.cgi?id=1996070): Add maxUnavailable to DaemonSets [#116](https://github.com/openshift/csi-driver-manila-operator/pull/116) * [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/00b1f648e74d8008ce32ae65eb4d6d8b5ac1bbed...bffdeaa88d9af1ef8b6961889bdb374caf9eeca9) ### [docker-builder](https://github.com/openshift/builder/tree/0e44bee4ad4b7e08a08e29ddcf6f5d56027d1307) * [Bug 1924455](https://bugzilla.redhat.com/show_bug.cgi?id=1924455): Update dependencies to address CVE-2021-3121 [#258](https://github.com/openshift/builder/pull/258) * Updating openshift-enterprise-builder builder & base images to be consistent with ART [#188](https://github.com/openshift/builder/pull/188) * [Full changelog](https://github.com/openshift/builder/compare/df50aa9a4dd8e378d77c398b4d5c55211b9d14ba...0e44bee4ad4b7e08a08e29ddcf6f5d56027d1307) ### [docker-registry](https://github.com/openshift/image-registry/tree/8b03485af777f8d718427393aa575bbaf6f21610) * [Bug 1984094](https://bugzilla.redhat.com/show_bug.cgi?id=1984094): use apimachinery with HTTP/2 health checks enabled [#288](https://github.com/openshift/image-registry/pull/288) * Updating openshift-enterprise-registry builder & base images to be consistent with ART [#262](https://github.com/openshift/image-registry/pull/262) * [Bug 1977159](https://bugzilla.redhat.com/show_bug.cgi?id=1977159): bump aws-sdk-go to v1.38.35 [#282](https://github.com/openshift/image-registry/pull/282) * [Full changelog](https://github.com/openshift/image-registry/compare/8e0c068aef607fceffe3e179c3a9701f51c51dff...8b03485af777f8d718427393aa575bbaf6f21610) ### [etcd](https://github.com/openshift/etcd/tree/c61e5afde9485fac9233c0db6ab950bfb511e1b5) * [Bug 1970141](https://bugzilla.redhat.com/show_bug.cgi?id=1970141): discover-etcd-initial-cluster: retry if member is not part of member list and dataDir exists [#82](https://github.com/openshift/etcd/pull/82) * [Full changelog](https://github.com/openshift/etcd/compare/45b6800c4fab213e7afee1e406abe48cc14ee020...c61e5afde9485fac9233c0db6ab950bfb511e1b5) ### [gcp-machine-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/5f6589d4ef9496e63ebc072f4d863151bbeb4407) * [Bug 1924508](https://bugzilla.redhat.com/show_bug.cgi?id=1924508): Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 [#164](https://github.com/openshift/cluster-api-provider-gcp/pull/164) * [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/7215497c95a43c5f633bc511e3e85dd1d956a931...5f6589d4ef9496e63ebc072f4d863151bbeb4407) ### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/0cb61d205d0f911fe8ca614094f0cd3f911d665c) * Updating ose-gcp-pd-csi-driver builder & base images to be consistent with ART [#10](https://github.com/openshift/gcp-pd-csi-driver/pull/10) * [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/091f0212dfa6d93df37b99fcd2b4b9a4c6d5bbba...0cb61d205d0f911fe8ca614094f0cd3f911d665c) ### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/d40dd57595673e4737fa77e29a955f6beefac284) * [Bug 1996070](https://bugzilla.redhat.com/show_bug.cgi?id=1996070): Add maxUnavailable to DaemonSets [#33](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/33) * [Bug 1940005](https://bugzilla.redhat.com/show_bug.cgi?id=1940005): Add CSIDriver object [#18](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/18) * [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/3583e00c7ff4f31957c0e9223d8c1dea3f4c23c3...d40dd57595673e4737fa77e29a955f6beefac284) ### [haproxy-router](https://github.com/openshift/router/tree/4ab216f0090a985f041cea3e411075a04e2ace0a) * [Bug 1994645](https://bugzilla.redhat.com/show_bug.cgi?id=1994645): config template: accept IPv6 IPs for whitelisting [#325](https://github.com/openshift/router/pull/325) * [Bug 1967733](https://bugzilla.redhat.com/show_bug.cgi?id=1967733): template helper - generateHAProxyWhiteListFile, use right arg type [#297](https://github.com/openshift/router/pull/297) * [Bug 1965402](https://bugzilla.redhat.com/show_bug.cgi?id=1965402): Revert 'Bug 1896977: Enhance host name validation in router' [#293](https://github.com/openshift/router/pull/293) * [Bug 1963243](https://bugzilla.redhat.com/show_bug.cgi?id=1963243): Add a condition to check if the Endpoints ID is duplicated [#288](https://github.com/openshift/router/pull/288) * [Full changelog](https://github.com/openshift/router/compare/130b5993726c46e83ca871a97a930d73f2c433a8...4ab216f0090a985f041cea3e411075a04e2ace0a) ### [hello-openshift, tests](https://github.com/openshift/origin/tree/24f464bff3559617d73d5b4ec57332ff22ac000b) * [Bug 1982929](https://bugzilla.redhat.com/show_bug.cgi?id=1982929): Improve GC Check for Builds [#26334](https://github.com/openshift/origin/pull/26334) * Re-enable quota test [#26284](https://github.com/openshift/origin/pull/26284) * [Bug 1980540](https://bugzilla.redhat.com/show_bug.cgi?id=1980540): Use cluster-logging for operator installation smoke test. [#26315](https://github.com/openshift/origin/pull/26315) * [Bug 1977383](https://bugzilla.redhat.com/show_bug.cgi?id=1977383): [release-4.7] Update resource quota test for compatibility with service ca configmap publishing [#26303](https://github.com/openshift/origin/pull/26303) * [Bug 1928862](https://bugzilla.redhat.com/show_bug.cgi?id=1928862): [4.7] Bump openshift/kubernetes [#26259](https://github.com/openshift/origin/pull/26259) * [Bug 1978000](https://bugzilla.redhat.com/show_bug.cgi?id=1978000): builds: comment out multi-namespace template test [#26296](https://github.com/openshift/origin/pull/26296) * NOOP - Trigger a new CI build [#26291](https://github.com/openshift/origin/pull/26291) * [Bug 1977383](https://bugzilla.redhat.com/show_bug.cgi?id=1977383): [release-4.7] Skip cluster quota test to enable service ca publisher to merge to o/k [#26283](https://github.com/openshift/origin/pull/26283) * [Bug 1970411](https://bugzilla.redhat.com/show_bug.cgi?id=1970411): properly remove project after test ends [#26217](https://github.com/openshift/origin/pull/26217) * [Bug 1966358](https://bugzilla.redhat.com/show_bug.cgi?id=1966358): Dockerfile.rhel: fix a bash typo [#26194](https://github.com/openshift/origin/pull/26194) * [Bug 1961367](https://bugzilla.redhat.com/show_bug.cgi?id=1961367): Add Cinder client to the test image [#26171](https://github.com/openshift/origin/pull/26171) * [Bug 1955600](https://bugzilla.redhat.com/show_bug.cgi?id=1955600): test/extended/router: Fix-up Unidling test [#26120](https://github.com/openshift/origin/pull/26120) * [Bug 1963115](https://bugzilla.redhat.com/show_bug.cgi?id=1963115): narrow verify /run test to /run/secrets [#26180](https://github.com/openshift/origin/pull/26180) * [Bug 1963115](https://bugzilla.redhat.com/show_bug.cgi?id=1963115): move verify run test from tools to cli image to avoid additional /run content [#26176](https://github.com/openshift/origin/pull/26176) * [Bug 1958797](https://bugzilla.redhat.com/show_bug.cgi?id=1958797): test/extended/router/idle: Only run on OVNKubernetes or OpenShiftSDN [#26145](https://github.com/openshift/origin/pull/26145) * [Bug 1947705](https://bugzilla.redhat.com/show_bug.cgi?id=1947705): Add test of documented backup/restore procedure [#26110](https://github.com/openshift/origin/pull/26110) * [Bug 1955669](https://bugzilla.redhat.com/show_bug.cgi?id=1955669): flake testKubeletToAPIServerGracefulTermination [#26121](https://github.com/openshift/origin/pull/26121) * [Full changelog](https://github.com/openshift/origin/compare/17e0bb8eadaee7e8bd2a2cb87720f6b871feade2...24f464bff3559617d73d5b4ec57332ff22ac000b) ### [hyperkube](https://github.com/openshift/kubernetes/tree/9689d22dc3121e14688bbb057e3a09efb6cb66aa) * [Bug 1996846](https://bugzilla.redhat.com/show_bug.cgi?id=1996846): UPSTREAM: 98571: kubelet: Stop probing a pod during graceful shutdown [#901](https://github.com/openshift/kubernetes/pull/901) * [Bug 1973766](https://bugzilla.redhat.com/show_bug.cgi?id=1973766): 4.7: Do not throw error when we can't get canonical path [#881](https://github.com/openshift/kubernetes/pull/881) * [Bug 1981775](https://bugzilla.redhat.com/show_bug.cgi?id=1981775): Bump apiserver libary go 4.7 [#879](https://github.com/openshift/kubernetes/pull/879) * [Bug 1981634](https://bugzilla.redhat.com/show_bug.cgi?id=1981634): UPSTREAM: <drop>: use the legacy service-ca.crt content for clusters started in 4.7 or before [#857](https://github.com/openshift/kubernetes/pull/857) * [Bug 1977383](https://bugzilla.redhat.com/show_bug.cgi?id=1977383): [release-4.7] Ensure service ca configmap is created in all namespaces [#834](https://github.com/openshift/kubernetes/pull/834) * [Bug 1977383](https://bugzilla.redhat.com/show_bug.cgi?id=1977383): [release-4.7] Fix watch conformance test [#843](https://github.com/openshift/kubernetes/pull/843) * [Bug 1977383](https://bugzilla.redhat.com/show_bug.cgi?id=1977383): Update resource quota test for compatibility with service ca configmap publishing [#839](https://github.com/openshift/kubernetes/pull/839) * [Bug 1975553](https://bugzilla.redhat.com/show_bug.cgi?id=1975553): only chown if non-windows machine with projected volumes [#826](https://github.com/openshift/kubernetes/pull/826) * [Bug 1928862](https://bugzilla.redhat.com/show_bug.cgi?id=1928862): [release-4.7] UPSTREAM: <carry>: kube-apiserver: ignore SIGTERM/INT after the first one [#739](https://github.com/openshift/kubernetes/pull/739) * [Bug 1966810](https://bugzilla.redhat.com/show_bug.cgi?id=1966810): UPSTREAM: 102224: Fix expired unit test certs [#780](https://github.com/openshift/kubernetes/pull/780) * [Bug 1963263](https://bugzilla.redhat.com/show_bug.cgi?id=1963263): UPSTREAM: 102000: Ref counting is only applicable to Remote endpoints [#763](https://github.com/openshift/kubernetes/pull/763) * [Bug 1955883](https://bugzilla.redhat.com/show_bug.cgi?id=1955883): UPSTREAM: 99095: Prevent Kubelet stuck in DiskPressure when imagefs minreclaim is set [#725](https://github.com/openshift/kubernetes/pull/725) * [Bug 1951726](https://bugzilla.redhat.com/show_bug.cgi?id=1951726): Speed up PV provisioning for vsphere driver (ocp-4.7) [#690](https://github.com/openshift/kubernetes/pull/690) * [Bug 1942141](https://bugzilla.redhat.com/show_bug.cgi?id=1942141): fixes cinder PV labelling [#635](https://github.com/openshift/kubernetes/pull/635) * [Bug 1951815](https://bugzilla.redhat.com/show_bug.cgi?id=1951815): UPSTREAM: 99393: kubelet: reduce configmap and secret watch [#692](https://github.com/openshift/kubernetes/pull/692) * [Bug 1955231](https://bugzilla.redhat.com/show_bug.cgi?id=1955231): UPSTREAM: 101345: kubelet: improve the node informer sync check [#721](https://github.com/openshift/kubernetes/pull/721) * [Bug 1952917](https://bugzilla.redhat.com/show_bug.cgi?id=1952917): UPSTREAM: 100228: For LoadBalancer Service type don't create a HNS policy for empty or invalid external loadbalancer IP [#697](https://github.com/openshift/kubernetes/pull/697) * [Bug 1928862](https://bugzilla.redhat.com/show_bug.cgi?id=1928862): Enable snapshot tests [#569](https://github.com/openshift/kubernetes/pull/569) * [Full changelog](https://github.com/openshift/kubernetes/compare/7d0a2b269a27413f5f125d30c9d726684886c69a...9689d22dc3121e14688bbb057e3a09efb6cb66aa) ### [insights-operator](https://github.com/openshift/insights-operator/tree/19b13a7cf1bd5f38a4f1bc4f257ff7fd70803093) * [Bug 1982170](https://bugzilla.redhat.com/show_bug.cgi?id=1982170): Set also the summary operation when updating status (#480) [#480](https://github.com/openshift/insights-operator/pull/480) * [release 4.7] Bug 1960645: Adds virt_platform metric to the collected metrics (#428) [#428](https://github.com/openshift/insights-operator/pull/428) * [release 4.7] Bug 1953579: GatherClusterOperators and GatherClusterOperatorsPodAndEvents (#410) [#410](https://github.com/openshift/insights-operator/pull/410) * Add vsphere_node_hw_version_total metric (#416) [#416](https://github.com/openshift/insights-operator/pull/416) * [Bug 1950926](https://bugzilla.redhat.com/show_bug.cgi?id=1950926): Extend OLM data with CSV display name (#400) (#402) [#400](https://github.com/openshift/insights-operator/pull/400) * [Full changelog](https://github.com/openshift/insights-operator/compare/23a298922d25de761c8f765625d6ebb63a25774e...19b13a7cf1bd5f38a4f1bc4f257ff7fd70803093) ### [ironic](https://github.com/openshift/ironic-image/tree/1a7f41bb1c2c04ccd06958669a24a08a0bf22258) * [Bug 1958965](https://bugzilla.redhat.com/show_bug.cgi?id=1958965): Updated ironic packages [#166](https://github.com/openshift/ironic-image/pull/166) * [Full changelog](https://github.com/openshift/ironic-image/compare/738bd6c0b8ed07a7570c21af0cb5d1658dcbcb4c...1a7f41bb1c2c04ccd06958669a24a08a0bf22258) ### [ironic-hardware-inventory-recorder](https://github.com/openshift/ironic-hardware-inventory-recorder-image/tree/564aaca3b4bd95007472d3c3cd8d2d0748778ef4) * Updating ironic-hardware-inventory-recorder-image builder & base images to be consistent with ART [#502](https://github.com/openshift/ironic-hardware-inventory-recorder-image/pull/502) * [Full changelog](https://github.com/openshift/ironic-hardware-inventory-recorder-image/compare/61c4cc7dc99601fe32b239be8923a6ed693908b0...564aaca3b4bd95007472d3c3cd8d2d0748778ef4) ### [ironic-ipa-downloader](https://github.com/openshift/ironic-ipa-downloader/tree/ed60b8e9f0b8c0da4046dd8ced85d287c3f4534e) * [Bug 1963210](https://bugzilla.redhat.com/show_bug.cgi?id=1963210): Add support for no_proxy [#78](https://github.com/openshift/ironic-ipa-downloader/pull/78) * [Full changelog](https://github.com/openshift/ironic-ipa-downloader/compare/df6bb639fd9bf26ce276ae78e78548fba53783d1...ed60b8e9f0b8c0da4046dd8ced85d287c3f4534e) ### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/870afcb36a7ee4a2bef59845981821453b4174dd) * [Bug 1963210](https://bugzilla.redhat.com/show_bug.cgi?id=1963210): Add support for no_proxy [#53](https://github.com/openshift/ironic-rhcos-downloader/pull/53) * [Bug 1973367](https://bugzilla.redhat.com/show_bug.cgi?id=1973367): Modify dhcp kernel args based on ipv4/ipv6 [#55](https://github.com/openshift/ironic-rhcos-downloader/pull/55) * [Bug 1971549](https://bugzilla.redhat.com/show_bug.cgi?id=1971549): Unconditionally remove TMPDIR [#45](https://github.com/openshift/ironic-rhcos-downloader/pull/45) * [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/4cdc8c311630d0d9807accb12e63bbfa8bbc3ad4...870afcb36a7ee4a2bef59845981821453b4174dd) ### [jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/02e81a5a9b02af6c72f6baab1ca6afb3775756dd) * [Bug 1972361](https://bugzilla.redhat.com/show_bug.cgi?id=1972361): Bump jenkins version 2.289.2 [#1281](https://github.com/openshift/jenkins/pull/1281) * [release 4.7] Bug 1947810: Update Jenkins to 2.277.3 and disable setup wizard [#1259](https://github.com/openshift/jenkins/pull/1259) * [Bug 1952562](https://bugzilla.redhat.com/show_bug.cgi?id=1952562): bump config-file-provider to 3.7.1 [#1265](https://github.com/openshift/jenkins/pull/1265) * [Full changelog](https://github.com/openshift/jenkins/compare/503e5770e622bf78a746628a8b276a2616365135...02e81a5a9b02af6c72f6baab1ca6afb3775756dd) ### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/cbd5e4b4db17218a07e650dcc7576d3b6f739521) * [Bug 1971669](https://bugzilla.redhat.com/show_bug.cgi?id=1971669): Fix 4.7 SDN Egress Network Policy [#334](https://github.com/openshift/sdn/pull/334) * [Bug 1962637](https://bugzilla.redhat.com/show_bug.cgi?id=1962637): ValidateMTU: check only the interface that holds the node ip [#304](https://github.com/openshift/sdn/pull/304) * [Bug 1923231](https://bugzilla.redhat.com/show_bug.cgi?id=1923231): rebase to sdn-4.7-kubernetes-1.20.0-rc.0 [#286](https://github.com/openshift/sdn/pull/286) * [Full changelog](https://github.com/openshift/sdn/compare/2310aee1ebfca13a25162f754908e35aa1550d6d...cbd5e4b4db17218a07e650dcc7576d3b6f739521) ### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/c7654fb7ee98d42b3c2329f4ad0039f8f87828f0) * [Bug 1972631](https://bugzilla.redhat.com/show_bug.cgi?id=1972631): Workaround OVN bug causing subports to be DOWN [#525](https://github.com/openshift/kuryr-kubernetes/pull/525) * [Bug 1970320](https://bugzilla.redhat.com/show_bug.cgi?id=1970320): Fix Subnet retrival when creating Service without Selector [#522](https://github.com/openshift/kuryr-kubernetes/pull/522) * [Bug 1949541](https://bugzilla.redhat.com/show_bug.cgi?id=1949541): Fixing bug, Kuryr-Controller crashes when it's missing the status [#501](https://github.com/openshift/kuryr-kubernetes/pull/501) * [Bug 1959766](https://bugzilla.redhat.com/show_bug.cgi?id=1959766): Fix NPs for OVN LBs with hairpin traffic [#516](https://github.com/openshift/kuryr-kubernetes/pull/516) * [Bug 1929066](https://bugzilla.redhat.com/show_bug.cgi?id=1929066): Skip pool pre population if no Status is present on CRD [#505](https://github.com/openshift/kuryr-kubernetes/pull/505) * [Bug 1941941](https://bugzilla.redhat.com/show_bug.cgi?id=1941941): Include service subnet to be open for namespaceSelector set to all. [#504](https://github.com/openshift/kuryr-kubernetes/pull/504) * [Bug 1929066](https://bugzilla.redhat.com/show_bug.cgi?id=1929066): Fix port pools [#455](https://github.com/openshift/kuryr-kubernetes/pull/455) * [Bug 1949551](https://bugzilla.redhat.com/show_bug.cgi?id=1949551): kuryr-controller restarting after 3 days cluster running - pools without members [#502](https://github.com/openshift/kuryr-kubernetes/pull/502) * [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/d49acc455c98dead4995e34add0bf9f3e6e7324b...c7654fb7ee98d42b3c2329f4ad0039f8f87828f0) ### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/eb819cb931e86f66853ad24b919e251369ec83c1) * Updating ose-libvirt-machine-controllers builder & base images to be consistent with ART [#212](https://github.com/openshift/cluster-api-provider-libvirt/pull/212) * [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/033be25ca038fe773b23c076e9ac64926de72474...eb819cb931e86f66853ad24b919e251369ec83c1) ### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/e179bb5ce397b543cd3f716f75fa4cd40046e0ad) * [Bug 1924517](https://bugzilla.redhat.com/show_bug.cgi?id=1924517): Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 [#867](https://github.com/openshift/machine-api-operator/pull/867) * [Bug 1955689](https://bugzilla.redhat.com/show_bug.cgi?id=1955689): Webhook filter should check for both mutating and validating webhooks [#861](https://github.com/openshift/machine-api-operator/pull/861) * [Bug 1947372](https://bugzilla.redhat.com/show_bug.cgi?id=1947372): vSphere, detach virtual disks before virtual machine destroy if node not available [#841](https://github.com/openshift/machine-api-operator/pull/841) * [Bug 1954610](https://bugzilla.redhat.com/show_bug.cgi?id=1954610): Update GCP default image to match 4.7 release [#856](https://github.com/openshift/machine-api-operator/pull/856) * [Full changelog](https://github.com/openshift/machine-api-operator/compare/a00ea96d676b2b87a7de6f8ad2cac09ed2f14c67...e179bb5ce397b543cd3f716f75fa4cd40046e0ad) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/d6d26e1f4e1fc0ed49e4c443bf02bdc376e756b3) * [Bug 1988102](https://bugzilla.redhat.com/show_bug.cgi?id=1988102): [release-4.7] On-prem: add default ingress track script to Keepalived [#2697](https://github.com/openshift/machine-config-operator/pull/2697) * [Bug 1998112](https://bugzilla.redhat.com/show_bug.cgi?id=1998112): vSpehere: disable vmxnet3 tx csum offload [#2738](https://github.com/openshift/machine-config-operator/pull/2738) * [Bug 1995810](https://bugzilla.redhat.com/show_bug.cgi?id=1995810): crio: complete crio default config [#2725](https://github.com/openshift/machine-config-operator/pull/2725) * [Bug 1992240](https://bugzilla.redhat.com/show_bug.cgi?id=1992240): change system-connections-merged directory to systemConnectionsMerged [#2709](https://github.com/openshift/machine-config-operator/pull/2709) * [Bug 1956462](https://bugzilla.redhat.com/show_bug.cgi?id=1956462): ensure SSH key uniqueness [#2563](https://github.com/openshift/machine-config-operator/pull/2563) * [Bug 1993386](https://bugzilla.redhat.com/show_bug.cgi?id=1993386): crio: use conmon from path [#2715](https://github.com/openshift/machine-config-operator/pull/2715) * [Bug 1992687](https://bugzilla.redhat.com/show_bug.cgi?id=1992687): alerts: SystemMemoryExceedsReservation triggers too quickly [#2710](https://github.com/openshift/machine-config-operator/pull/2710) * [Bug 1970166](https://bugzilla.redhat.com/show_bug.cgi?id=1970166): MCO: maxUnavailable of ds/machine-config-daemon does not get updated due to missing resourcemerge check [#2682](https://github.com/openshift/machine-config-operator/pull/2682) * [Bug 1977432](https://bugzilla.redhat.com/show_bug.cgi?id=1977432): crio: enable internal_wipe option [#2649](https://github.com/openshift/machine-config-operator/pull/2649) * [Bug 1970590](https://bugzilla.redhat.com/show_bug.cgi?id=1970590): daemon: Change runGetOut to not intermix stdout/stderr [#2609](https://github.com/openshift/machine-config-operator/pull/2609) * [Bug 1976232](https://bugzilla.redhat.com/show_bug.cgi?id=1976232): Explicitly set keyfile as the default plugin of NetworkManager for RHEL7 [#2641](https://github.com/openshift/machine-config-operator/pull/2641) * [Bug 1971864](https://bugzilla.redhat.com/show_bug.cgi?id=1971864): Stop setting nopreempt on bootstrap keepalived.conf [#2616](https://github.com/openshift/machine-config-operator/pull/2616) * [Bug 1973006](https://bugzilla.redhat.com/show_bug.cgi?id=1973006): daemon: cordon the node before performing drain [#2623](https://github.com/openshift/machine-config-operator/pull/2623) * [Bug 1961341](https://bugzilla.redhat.com/show_bug.cgi?id=1961341): rbac: update remaining apis to v1 [#2620](https://github.com/openshift/machine-config-operator/pull/2620) * [Bug 1971374](https://bugzilla.redhat.com/show_bug.cgi?id=1971374): daemon/drain.go: bump initial drain sleeps down to 1min [#2612](https://github.com/openshift/machine-config-operator/pull/2612) * [Bug 1970154](https://bugzilla.redhat.com/show_bug.cgi?id=1970154): operator/sync.go confirm renderedconfig osimageurl matches cvo [#2607](https://github.com/openshift/machine-config-operator/pull/2607) * [Bug 1968759](https://bugzilla.redhat.com/show_bug.cgi?id=1968759): Bump drain timeout to 1h [#2605](https://github.com/openshift/machine-config-operator/pull/2605) * [Bug 1949348](https://bugzilla.redhat.com/show_bug.cgi?id=1949348): gcp-routes should wait until network is stopped [#2593](https://github.com/openshift/machine-config-operator/pull/2593) * [Bug 1962288](https://bugzilla.redhat.com/show_bug.cgi?id=1962288): [ovirt] Stop using db file for static internal records [#2581](https://github.com/openshift/machine-config-operator/pull/2581) * [Bug 1964568](https://bugzilla.redhat.com/show_bug.cgi?id=1964568): Delete duplicated generated mc [#2591](https://github.com/openshift/machine-config-operator/pull/2591) * Updating ose-machine-config-operator builder & base images to be consistent with ART [#2399](https://github.com/openshift/machine-config-operator/pull/2399) * [Bug 1949348](https://bugzilla.redhat.com/show_bug.cgi?id=1949348): not allow healthcheck traffic to loop through the node [#2526](https://github.com/openshift/machine-config-operator/pull/2526) * [Bug 1953475](https://bugzilla.redhat.com/show_bug.cgi?id=1953475): daemon: return nil for unsupported operation on an OS [#2544](https://github.com/openshift/machine-config-operator/pull/2544) * docs/README: Useless bump to get a new commit hash [#2584](https://github.com/openshift/machine-config-operator/pull/2584) * [Bug 1956749](https://bugzilla.redhat.com/show_bug.cgi?id=1956749): vsphere: platform none, vmxnet3v4 fix move to base [#2564](https://github.com/openshift/machine-config-operator/pull/2564) * [Bug 1950261](https://bugzilla.redhat.com/show_bug.cgi?id=1950261): create the ovs-config-executed file to signal ovs is running on the host [#2532](https://github.com/openshift/machine-config-operator/pull/2532) * [Bug 1957015](https://bugzilla.redhat.com/show_bug.cgi?id=1957015): [on-prem] Backport duplicate VIP fixes [#2566](https://github.com/openshift/machine-config-operator/pull/2566) * [Bug 1932383](https://bugzilla.redhat.com/show_bug.cgi?id=1932383): Connect default NIC to cluster network [#2427](https://github.com/openshift/machine-config-operator/pull/2427) * [Bug 1942488](https://bugzilla.redhat.com/show_bug.cgi?id=1942488): Use new --prefer-ipv6 flag to "runtimecfg node-ip" as appropriate [#2525](https://github.com/openshift/machine-config-operator/pull/2525) * [Bug 1950498](https://bugzilla.redhat.com/show_bug.cgi?id=1950498): Add on-prem namespaces to relatedObjects [#2533](https://github.com/openshift/machine-config-operator/pull/2533) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/ac79a2ffc6002f086b3fa80003b278b635d2055a...d6d26e1f4e1fc0ed49e4c443bf02bdc376e756b3) ### [mdns-publisher](https://github.com/openshift/mdns-publisher/tree/4b2a15226b570f0847479ee582ed6e8d26490a8d) * [Bug 1983695](https://bugzilla.redhat.com/show_bug.cgi?id=1983695): [release-4.7] Truncate long service names to 63 characters [#34](https://github.com/openshift/mdns-publisher/pull/34) * [Full changelog](https://github.com/openshift/mdns-publisher/compare/207a7e5d80dbca3ffb2dc205ebba516e29ebaa6d...4b2a15226b570f0847479ee582ed6e8d26490a8d) ### [must-gather](https://github.com/openshift/must-gather/tree/205d4e3cffb19bda7a658836c84587f2ac78d82c) * Updating ose-must-gather builder & base images to be consistent with ART [#202](https://github.com/openshift/must-gather/pull/202) * [Bug 1954302](https://bugzilla.redhat.com/show_bug.cgi?id=1954302): Add ovs related services to GENERAL_SERVICES [#229](https://github.com/openshift/must-gather/pull/229) * [Full changelog](https://github.com/openshift/must-gather/compare/140ea5e8081106c68668b6bd2d0873dc9032af0b...205d4e3cffb19bda7a658836c84587f2ac78d82c) ### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/fd4dfe78bcd8373c545284a671499681f824c645) * Updating golang-github-openshift-oauth-proxy builder & base images to be consistent with ART [#198](https://github.com/openshift/oauth-proxy/pull/198) * [Full changelog](https://github.com/openshift/oauth-proxy/compare/4bd4705011c19a7556551c9a1dfaaa5eacc7898c...fd4dfe78bcd8373c545284a671499681f824c645) ### [oauth-server](https://github.com/openshift/oauth-server/tree/61db550b94b09356eebabcffd39aea8d90eb6089) * [Bug 1965932](https://bugzilla.redhat.com/show_bug.cgi?id=1965932): bump kube to 0.20.4 [#79](https://github.com/openshift/oauth-server/pull/79) * [Full changelog](https://github.com/openshift/oauth-server/compare/3215761a70426326f0be2ca675b0e9b9fdae341e...61db550b94b09356eebabcffd39aea8d90eb6089) ### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/f9ac08715d1b7890a5aa66a8fb16e847a7f6b727) * [Bug 1965402](https://bugzilla.redhat.com/show_bug.cgi?id=1965402): Revert 'Bug 1965402: Enhance API host name validation' [#211](https://github.com/openshift/openshift-apiserver/pull/211) * [Bug 1961557](https://bugzilla.redhat.com/show_bug.cgi?id=1961557): sets shutdown-delay-duration from OpenShiftAPIServerConfig [#199](https://github.com/openshift/openshift-apiserver/pull/199) * [Full changelog](https://github.com/openshift/openshift-apiserver/compare/a0f41548179e57e9b184a3e713ac6227cc4385ff...f9ac08715d1b7890a5aa66a8fb16e847a7f6b727) ### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/c93745bf6898f41c6d10c66e7024238ddf20a86d) * [Bug 1924531](https://bugzilla.redhat.com/show_bug.cgi?id=1924531): Update k8s.io dependencies to address CVE-2021-3121 [#191](https://github.com/openshift/openshift-controller-manager/pull/191) * [Bug 1955210](https://bugzilla.redhat.com/show_bug.cgi?id=1955210): fixed LANG for the builder container [#180](https://github.com/openshift/openshift-controller-manager/pull/180) * [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/e0755cd0dca5e8a0cdae0a52d7127f75f20b1e9a...c93745bf6898f41c6d10c66e7024238ddf20a86d) ### [operator-lifecycle-manager](https://github.com/operator-framework/operator-lifecycle-manager/tree/2012879daa7cbda7425efd4c64aba7df546f40ba) * [Bug 1982693](https://bugzilla.redhat.com/show_bug.cgi?id=1982693): remove cleanup from startup [#2287](https://github.com/operator-framework/operator-lifecycle-manager/pull/2287) * [Bug 1972075](https://bugzilla.redhat.com/show_bug.cgi?id=1972075): Add OperatorCondition status sync and update operator upgradeable check [#2206](https://github.com/operator-framework/operator-lifecycle-manager/pull/2206) * [Bug 1945702](https://bugzilla.redhat.com/show_bug.cgi?id=1945702): Fix inconsistent dependency candidate order. [#2149](https://github.com/operator-framework/operator-lifecycle-manager/pull/2149) * [Bug 1962314](https://bugzilla.redhat.com/show_bug.cgi?id=1962314): Explicitly set `readOnlyRootFilesystem: false` on created registry pods. [#2171](https://github.com/operator-framework/operator-lifecycle-manager/pull/2171) * [Bug 1963141](https://bugzilla.redhat.com/show_bug.cgi?id=1963141): Make ClusterOperator Available condition sticky. [#2173](https://github.com/operator-framework/operator-lifecycle-manager/pull/2173) * [Bug 1962312](https://bugzilla.redhat.com/show_bug.cgi?id=1962312): Simplify deployment status check to reduce flapping. [#2170](https://github.com/operator-framework/operator-lifecycle-manager/pull/2170) * [Bug 1962302](https://bugzilla.redhat.com/show_bug.cgi?id=1962302): Set reason/message for Available condition in packageserver co [#2168](https://github.com/operator-framework/operator-lifecycle-manager/pull/2168) * [Bug 1959009](https://bugzilla.redhat.com/show_bug.cgi?id=1959009): Use DeploymentAvailable instead of custom test for CSV status. [#2151](https://github.com/operator-framework/operator-lifecycle-manager/pull/2151) * [Bug 1924467](https://bugzilla.redhat.com/show_bug.cgi?id=1924467): Bumps k8s.io dependencies to v0.20.6 [#2121](https://github.com/operator-framework/operator-lifecycle-manager/pull/2121) * [Bug 1949139](https://bugzilla.redhat.com/show_bug.cgi?id=1949139): Preserve existing ServiceAccount owner references during installs. [#2088](https://github.com/operator-framework/operator-lifecycle-manager/pull/2088) * [Bug 1951657](https://bugzilla.redhat.com/show_bug.cgi?id=1951657): fix(catalog): Reduce namespace resync in resolution failure [#2107](https://github.com/operator-framework/operator-lifecycle-manager/pull/2107) * [Bug 1952851](https://bugzilla.redhat.com/show_bug.cgi?id=1952851): Add resource requests for bundle unpacker [#2109](https://github.com/operator-framework/operator-lifecycle-manager/pull/2109) * [Bug 1951232](https://bugzilla.redhat.com/show_bug.cgi?id=1951232): Fix resolution error if inner entry doesn't provide a required API. [#2106](https://github.com/operator-framework/operator-lifecycle-manager/pull/2106) * [Full changelog](https://github.com/operator-framework/operator-lifecycle-manager/compare/cdf51cddb619e84e2ce5be78ab2d7e7f6d748ec6...2012879daa7cbda7425efd4c64aba7df546f40ba) ### [operator-registry](https://github.com/operator-framework/operator-registry/tree/06e950de5ebca66e493f6cd2414e73c8978090d3) * [Bug 1968680](https://bugzilla.redhat.com/show_bug.cgi?id=1968680): fix(containerd): drop xattrs during unpack [#676](https://github.com/operator-framework/operator-registry/pull/676) * [Bug 1924468](https://bugzilla.redhat.com/show_bug.cgi?id=1924468): Bump the k8s dependencies to v1.20.6 [#638](https://github.com/operator-framework/operator-registry/pull/638) * [Bug 1937097](https://bugzilla.redhat.com/show_bug.cgi?id=1937097): Add retries to opm index add [#643](https://github.com/operator-framework/operator-registry/pull/643) * [Full changelog](https://github.com/operator-framework/operator-registry/compare/a97d366a92d302ff2056fa2d19aa3e48b0fbc99c...06e950de5ebca66e493f6cd2414e73c8978090d3) ### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/5e51508c107a161416c0ffffdd17163f14136478) * [Bug 1996070](https://bugzilla.redhat.com/show_bug.cgi?id=1996070): Backport maxUnavailable: 10% for DaemonSets [#69](https://github.com/openshift/ovirt-csi-driver-operator/pull/69) * [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/f8808a04dc6bfe7ce36a8238089dbae7ab29cbb6...5e51508c107a161416c0ffffdd17163f14136478) ### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/53bc3196d723c8187cb703a879e94a6e88b0d72e) * [Bug 1976242](https://bugzilla.redhat.com/show_bug.cgi?id=1976242): Update existing policy ACLs on start [#650](https://github.com/openshift/ovn-kubernetes/pull/650) * [Bug 1997104](https://bugzilla.redhat.com/show_bug.cgi?id=1997104): fix reserve joinSwitch LRP IPs [#683](https://github.com/openshift/ovn-kubernetes/pull/683) * [Bug 1995910](https://bugzilla.redhat.com/show_bug.cgi?id=1995910): Backport ovnkube-trace requires ip package to be installed [#674](https://github.com/openshift/ovn-kubernetes/pull/674) * [Bug 1991445](https://bugzilla.redhat.com/show_bug.cgi?id=1991445): Bump OVN to 20.12.0-140.el8fdp [#649](https://github.com/openshift/ovn-kubernetes/pull/649) * [Bug 1967132](https://bugzilla.redhat.com/show_bug.cgi?id=1967132): policy: handle NetworkPolicies single "from" multiple "ipBlock" [#562](https://github.com/openshift/ovn-kubernetes/pull/562) * [Bug 1985516](https://bugzilla.redhat.com/show_bug.cgi?id=1985516): Add v6 management interface address for host network policy [#625](https://github.com/openshift/ovn-kubernetes/pull/625) * [Bug 1962608](https://bugzilla.redhat.com/show_bug.cgi?id=1962608): ensure missed events are handled during a reconnection [#547](https://github.com/openshift/ovn-kubernetes/pull/547) * [Bug 1972484](https://bugzilla.redhat.com/show_bug.cgi?id=1972484): egress firewall as ACLs + service connectivity fixes [#592](https://github.com/openshift/ovn-kubernetes/pull/592) * [Bug 1940566](https://bugzilla.redhat.com/show_bug.cgi?id=1940566): Properly log when hybrid overlay errors out [#543](https://github.com/openshift/ovn-kubernetes/pull/543) * [Bug 1970779](https://bugzilla.redhat.com/show_bug.cgi?id=1970779): Remove getDefaultIfAddr and use getNetworkInterfaceIPAddresses [#571](https://github.com/openshift/ovn-kubernetes/pull/571) * [Bug 1962590](https://bugzilla.redhat.com/show_bug.cgi?id=1962590): NewAddressSet: return nil in case of error [#546](https://github.com/openshift/ovn-kubernetes/pull/546) * [Bug 1970322](https://bugzilla.redhat.com/show_bug.cgi?id=1970322): revert 487 [#570](https://github.com/openshift/ovn-kubernetes/pull/570) * [Bug 1962819](https://bugzilla.redhat.com/show_bug.cgi?id=1962819): CNI cmdCheck: treat ingress_policing_rate=0 as not found [#548](https://github.com/openshift/ovn-kubernetes/pull/548) * [Bug 1965075](https://bugzilla.redhat.com/show_bug.cgi?id=1965075): CARRY: fix missed learn for hybrid exgw [#556](https://github.com/openshift/ovn-kubernetes/pull/556) * [Bug 1946682](https://bugzilla.redhat.com/show_bug.cgi?id=1946682): egress firewall as ACLs [#487](https://github.com/openshift/ovn-kubernetes/pull/487) * [Bug 1942603](https://bugzilla.redhat.com/show_bug.cgi?id=1942603): [release-4.7] Allow from router network policy support [#526](https://github.com/openshift/ovn-kubernetes/pull/526) * [Bug 1956980](https://bugzilla.redhat.com/show_bug.cgi?id=1956980): [release-4.7] fix ForEachAddressSet() as it is not calling the callback functions [#523](https://github.com/openshift/ovn-kubernetes/pull/523) * [Bug 1959737](https://bugzilla.redhat.com/show_bug.cgi?id=1959737): Fix: egress IP route health check detection state on restart [#538](https://github.com/openshift/ovn-kubernetes/pull/538) * [Bug 1956270](https://bugzilla.redhat.com/show_bug.cgi?id=1956270): service controller should not use the target-port [#519](https://github.com/openshift/ovn-kubernetes/pull/519) * [Bug 1947097](https://bugzilla.redhat.com/show_bug.cgi?id=1947097): [4.7z] Ensure no SNAT on GR for DisableSNATMultipleGws [#533](https://github.com/openshift/ovn-kubernetes/pull/533) * [Bug 1939488](https://bugzilla.redhat.com/show_bug.cgi?id=1939488): Backport Handle Multus network-status annotations on pod update [#467](https://github.com/openshift/ovn-kubernetes/pull/467) * [Bug 1956318](https://bugzilla.redhat.com/show_bug.cgi?id=1956318): Revert "removing the hybrid overlay externalGW code" [#521](https://github.com/openshift/ovn-kubernetes/pull/521) * [Bug 1951064](https://bugzilla.redhat.com/show_bug.cgi?id=1951064): master: cancel leader election on exit [#505](https://github.com/openshift/ovn-kubernetes/pull/505) * [Bug 1950131](https://bugzilla.redhat.com/show_bug.cgi?id=1950131): fix deadlock in EgressFirewall DNS code [#513](https://github.com/openshift/ovn-kubernetes/pull/513) * [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/7d1d12fd4ca2206b19cecf61f4b1cb41d8251339...53bc3196d723c8187cb703a879e94a6e88b0d72e) ### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/f65053f55de7b1793956629c8fa02edb7bb0e5cc) * [Bug 1981634](https://bugzilla.redhat.com/show_bug.cgi?id=1981634): add vulnerable legacy injector to allow for upgrade clusters to use [#170](https://github.com/openshift/service-ca-operator/pull/170) * [Full changelog](https://github.com/openshift/service-ca-operator/compare/e113f2498bb2b54202449ddc3488cb8471997a10...f65053f55de7b1793956629c8fa02edb7bb0e5cc) ### [thanos](https://github.com/openshift/thanos/tree/319e70c1dacc87e9d88c4f364541699979c31602) * [Bug 1994123](https://bugzilla.redhat.com/show_bug.cgi?id=1994123): dockerignore: remove vendor from ignored list [#69](https://github.com/openshift/thanos/pull/69) * [Bug 1944575](https://bugzilla.redhat.com/show_bug.cgi?id=1944575): pkg/rules: fix deduplication of equal alerts with different labels [#52](https://github.com/openshift/thanos/pull/52) * [Bug 1957646](https://bugzilla.redhat.com/show_bug.cgi?id=1957646): cmd/thanos: use miekgdns resolver as default [#56](https://github.com/openshift/thanos/pull/56) * [Full changelog](https://github.com/openshift/thanos/compare/0526ff025d325790d57df34cf2d66810a25da578...319e70c1dacc87e9d88c4f364541699979c31602) ### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/8f7c1246e6bcb99d8cdf667851b8d61f637f2801) * [Bug 1959546](https://bugzilla.redhat.com/show_bug.cgi?id=1959546): Update to current master [#40](https://github.com/openshift/vsphere-problem-detector/pull/40) * [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/077d6bef3bc1e003188e0bea4e086c874f97f944...8f7c1246e6bcb99d8cdf667851b8d61f637f2801)