# 4.8.1 Created: 2021-07-22 05:37:18 +0000 UTC Image Digest: `sha256:d56d85d0f773db3046bad3858a89c2deaf53c14703d58e3e9966dbda1331856b` Promoted from registry.ci.openshift.org/ocp/release:4.8.0-0.nightly-2021-07-21-150743 ## Changes from 4.8.0-rc.2 ### Components * Kubernetes 1.21.1 * Red Hat Enterprise Linux CoreOS upgraded from 48.84.202106301921-0 to 48.84.202107202156-0 ### Rebuilt images without code change * [aws-machine-controllers](https://github.com/openshift/cluster-api-provider-aws) git [4c66f3d3](https://github.com/openshift/cluster-api-provider-aws/commit/4c66f3d38d89e4076051daebe8915ef92b52fe8f) `sha256:87dc85e2a15422c53eaad9cbef9dd22f0d3d8f3bcbd144c7ca93f191b217edc1` * [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [7bbde4cc](https://github.com/openshift/kubernetes-autoscaler/commit/7bbde4cc4ddb1d0030f23b789b4bbf48ab3ef79d) `sha256:d86e9049fc21a81400061c1c6d515e0680ad3070e9c1b552ea84345406346487` * [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [31fb491f](https://github.com/openshift/cluster-samples-operator/commit/31fb491fc14faed6ebbe41a526764947069ff0a2) `sha256:03ae736b587f5c296e8cde461a20b8ebb4b2610f480d501531cb7d28175e4532` * [docker-builder](https://github.com/openshift/builder) git [70b7b956](https://github.com/openshift/builder/commit/70b7b9567744e805cc9538aabba86df2d13dea09) `sha256:4cb23e2a6db3dade0172964db53d0451dd50fcf4ee8c2a2bddff74b84a91fa27` * [driver-toolkit](https://github.com/openshift/driver-toolkit) git [37de0e6a](https://github.com/openshift/driver-toolkit/commit/37de0e6a314c3410ec0dec6d2900123db44d5772) `sha256:1aa3d1eaae7847eb426267e7cce8d780827508812aa8ee31b73703a4902c8c45` * [ironic](https://github.com/openshift/ironic-image) git [227b76b7](https://github.com/openshift/ironic-image/commit/227b76b752d742de4fe9cfe746bfd88d352d75fa) `sha256:7dfd3a287f6cb129680742eb30c0c8ee88b44d8ceebc81bbe0e6fae5de5d117b` * [ironic-hardware-inventory-recorder](https://github.com/openshift/ironic-hardware-inventory-recorder-image) git [61c4cc7d](https://github.com/openshift/ironic-hardware-inventory-recorder-image/commit/61c4cc7dc99601fe32b239be8923a6ed693908b0) `sha256:a4bd8126ed8c8408e55b89cff6ac80c6cfa8955f5bebfe61234594c27287f3c4` * [ironic-inspector](https://github.com/openshift/ironic-inspector-image) git [9aafd074](https://github.com/openshift/ironic-inspector-image/commit/9aafd074adf6dbc7ee7c2c3150568578e82acc3f) `sha256:21fadb7ff2b35389586077e2c42cf2334da795e6ee1d6eebd089ba46604e1e46` * [ironic-ipa-downloader](https://github.com/openshift/ironic-ipa-downloader) git [ba878326](https://github.com/openshift/ironic-ipa-downloader/commit/ba8783261ea8f21afdcd46eb8a86986597c38c75) `sha256:a1191527035f85511a00f6ec2a763b2aa076e3f7b5c48824d33eac9148dbbc7b` * [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [71967e7d](https://github.com/openshift/ironic-rhcos-downloader/commit/71967e7deca9e9d0e094cbaedb7fe7ce0267dd84) `sha256:4c2f850ffcdfba230266f554524140f78915306ded34d343f5fcaae19ae23662` * [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [d2e40e34](https://github.com/openshift/ironic-static-ip-manager/commit/d2e40e34f8284d0ac7c4e9133b537baeac07b408) `sha256:08fcd5d007bb09d1a81d19d9b6f52867b1ce2e9c64422abc0e7cc12f7a7e4f7a` * [kuryr-cni](https://github.com/openshift/kuryr-kubernetes) git [8a4c2d85](https://github.com/openshift/kuryr-kubernetes/commit/8a4c2d85d5e5ce17214e989b11b33a2584bcb199) `sha256:e8d85c180837aebd2c0f8fc057c7211348d78469bc6da95bb4799a8f60194226` * [kuryr-controller](https://github.com/openshift/kuryr-kubernetes) git [8a4c2d85](https://github.com/openshift/kuryr-kubernetes/commit/8a4c2d85d5e5ce17214e989b11b33a2584bcb199) `sha256:15508dbc015c929b7883d259370b5a25b6f9b2655b7fab74c399513406cfd295` * machine-os-content `sha256:865d35cc4252422e66ff7d638530f61d59326f3a519283d9638813fb730ff4ce` * [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [1662c3ec](https://github.com/openshift/route-override-cni/commit/1662c3ec79b880fce5cd9c4e64f5ba0d4daffc00) `sha256:b3984699e21f030bb2c978f6b6d591d9ab626d980474513dad7b9ba95bd40cef` * [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [9a052587](https://github.com/openshift/whereabouts-cni/commit/9a05258711b1b459c0b24293a6d8fa77c9e5d852) `sha256:398b39bfb136adc898f2fd6d8f9953a9c3e658d56b309433474fadb8cb60bbac` * [oauth-proxy](https://github.com/openshift/oauth-proxy) git [3fc0d89b](https://github.com/openshift/oauth-proxy/commit/3fc0d89b2607808927f5b48168342f5dc3a1a271) `sha256:46715676cc783a1a0e574e2df8e2f9fc564784b72afeacdb8ca58caeca796e46` ### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/2b8eee2a4f0555c6d4ce7700fda774190574fb5d) * Updating ose-aws-pod-identity-webhook images to be consistent with ART [#141](https://github.com/openshift/aws-pod-identity-webhook/pull/141) * [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/4b2839a8f3f36c3ae2e4e0dbed4adf7e8fa9b212...2b8eee2a4f0555c6d4ce7700fda774190574fb5d) ### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/9dc35db7ecc27c5807b5d9b9d1e1de3080416a09) * [Bug 1981633](https://bugzilla.redhat.com/show_bug.cgi?id=1981633): allow upgraded clusters to use the vulnerable service-ca.crt [#549](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/549) * [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/2f4f6e90e43f34eeff6c15566fa7b0e01b6c08ab...9dc35db7ecc27c5807b5d9b9d1e1de3080416a09) ### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/5cfe241fab94c593c64d77718c6fb11e9498fb50) * [Bug 1981871](https://bugzilla.redhat.com/show_bug.cgi?id=1981871): jsonnet: Disable cpufreq collector in node_exporter [#1272](https://github.com/openshift/cluster-monitoring-operator/pull/1272) * [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/53ac5059404ac410b213a5487cd0415012d835cb...5cfe241fab94c593c64d77718c6fb11e9498fb50) ### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/6be3f671b023377ef0e71fd60d2c57dfb0e25afa) * [Bug 1980788](https://bugzilla.redhat.com/show_bug.cgi?id=1980788): Updating to the latest stalld v1.13.0. [#247](https://github.com/openshift/cluster-node-tuning-operator/pull/247) * [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/db0930fd9d2198f5952b6c00e5d672be3475704c...6be3f671b023377ef0e71fd60d2c57dfb0e25afa) ### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/051ac4f6786868fa0316800752e1905f31830383) * [Bug 1981633](https://bugzilla.redhat.com/show_bug.cgi?id=1981633): UPSTREAM: <carry>: prevent the kubecontrollermanager service-ca from getting less secure [#858](https://github.com/openshift/kubernetes/pull/858) * [Bug 1981633](https://bugzilla.redhat.com/show_bug.cgi?id=1981633): UPSTREAM: <carry>: add a way to inject a vulnerable, legacy service-c… [#856](https://github.com/openshift/kubernetes/pull/856) * [Bug 1977351](https://bugzilla.redhat.com/show_bug.cgi?id=1977351): UPSTREAM: <carry>: Reject the pod creation when we can not decide the cluster type [#833](https://github.com/openshift/kubernetes/pull/833) * [Bug 1977924](https://bugzilla.redhat.com/show_bug.cgi?id=1977924): [release-4.8] Ensure scc compatibility with BoundServiceAccountTokenVolume [#842](https://github.com/openshift/kubernetes/pull/842) * [Full changelog](https://github.com/openshift/kubernetes/compare/1622f872996410876d5c9b5803411196f37072df...051ac4f6786868fa0316800752e1905f31830383) ### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/115522033fd678820d70e570e6748ba488b36115) * Updating ose-machine-api-operator builder & base images to be consistent with ART [#796](https://github.com/openshift/machine-api-operator/pull/796) * [Full changelog](https://github.com/openshift/machine-api-operator/compare/57fb4dd30956165c05f3be6468f08eafb22d2a63...115522033fd678820d70e570e6748ba488b36115) ### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/2b803dd1e5e3160b6a53ce4808079bddd72283e9) * [Bug 1982250](https://bugzilla.redhat.com/show_bug.cgi?id=1982250): (fix)InstallPlan: Do not tranisition IP to failed on OG/SA failure [#119](https://github.com/openshift/operator-framework-olm/pull/119) * [Bug 1982252](https://bugzilla.redhat.com/show_bug.cgi?id=1982252): remove cleanup from startup [#117](https://github.com/openshift/operator-framework-olm/pull/117) * [Full changelog](https://github.com/openshift/operator-framework-olm/compare/11b568e4ba69ff2a476370a463d089fcde85838d...2b803dd1e5e3160b6a53ce4808079bddd72283e9) ### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/bcc6df48bc48dff748481c5284d05e0c2066f4e6) * [Bug 1981633](https://bugzilla.redhat.com/show_bug.cgi?id=1981633): add vulnerable legacy injector to allow for upgrade clusters to use ... [#168](https://github.com/openshift/service-ca-operator/pull/168) * [Full changelog](https://github.com/openshift/service-ca-operator/compare/91b4991c6d16bf37c32d231d80050eb7bca1d6da...bcc6df48bc48dff748481c5284d05e0c2066f4e6) ### [tests](https://github.com/openshift/origin/tree/0d958c3b11776929f511968211e3797dd4031a4c) * [Bug 1970975](https://bugzilla.redhat.com/show_bug.cgi?id=1970975): upgrade: extend upgrade duration to 105mins on AWS [#26252](https://github.com/openshift/origin/pull/26252) * [Bug 1975938](https://bugzilla.redhat.com/show_bug.cgi?id=1975938): Fix skipping of Multi-AZ Cluster Volumes test on GCP with k8s 1.21 [#26267](https://github.com/openshift/origin/pull/26267) * [Full changelog](https://github.com/openshift/origin/compare/f9a8499cbeea2ccbf7481132917b0b495cb5a000...0d958c3b11776929f511968211e3797dd4031a4c)