Back to index

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.7.21-x86_64

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
  • upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
• Informing jobs
  • aws Succeeded periodic-ci-openshift-release-master-nightly-4.7-e2e-aws
  • aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.7-e2e-aws-serial

Upgrades from:

• 4.7.20 (changes) - S S S
• 4.7.19 (changes) - Success Success
• 4.7.18 (changes) - Success Success
• 4.7.17 (changes) - Success Success
• 4.7.16 (changes) - Success Success
• 4.7.15 (changes) - Success Success
• 4.7.14 (changes) - Success Success
• 4.7.13 (changes) - Success Success
• 4.7.12 (changes) - Success Success
• 4.7.11 (changes) - Success Success
• 4.7.10 (changes) - Success Failed
• 4.7.9 (changes) - Success Success
• 4.7.8 (changes) - Success Success
• 4.7.7 - Failed Failed
• 4.7.6 (changes) - Success Success
• 4.7.5 (changes) - Success Success
• 4.7.4 (changes) - Success Success
• 4.7.3 (changes) - Failed Failed
• 4.7.2 (changes) - Success Failed
• 4.7.1 (changes) - Success Success
• 4.7.0 (changes) - Success Success
• 4.6.40 (changes) - Success
• 4.6.39 (changes) - S S S
• 4.6.38 (changes) - Success Success
• 4.6.37 (changes) - Success Success
• 4.6.36 (changes) - Success Success
• 4.6.35 (changes) - Failed Failed
• 4.6.34 (changes) - Success Success
• 4.6.33 (changes) - Success Success
• 4.6.32 (changes) - Success Success
• 4.6.31 (changes) - Success Success
• 4.6.30 (changes) - Success Success
• 4.6.29 (changes) - Failed Success
• 4.6.28 (changes) - Success Success
• 4.6.27 (changes) - Success Success
• 4.6.26 (changes) - Success Success
• 4.6.25 (changes) - Success Success
• 4.6.24 (changes) - Success Success

Upgrades to:

• 4.8.56 (changes) - Success
• 4.8.55 (changes) - Failed
• 4.8.54 (changes) - Failed
• 4.8.53 (changes) - Failed
• 4.8.52 (changes) - Failed
• 4.8.51 (changes) - Failed
• 4.8.50 (changes) - Failed
• 4.8.49 (changes) - Success
• 4.8.48 (changes) - Success
• 4.8.47 (changes) - Failed
• 4.8.46 (changes) - Success
• 4.8.45 (changes) - Failed
• 4.8.44 (changes) - Failed
• 4.8.43 (changes) - Failed
• 4.8.42 (changes) - Failed Failed
• 4.8.41 (changes) - Failed
• 4.8.40 (changes) - Failed
• 4.8.39 (changes) - Failed
• 4.8.38 (changes) - Failed
• 4.8.37 (changes) - Failed
• 4.8.36 (changes) - Success
• 4.8.35 (changes) - Success
• 4.8.34 (changes) - Success
• 4.8.33 (changes) - Failed
• 4.8.32 (changes) - Failed
• 4.8.31 (changes) - Success
• 4.8.29 (changes) - Failed
• 4.8.28 (changes) - Success
• 4.8.25 (changes) - Success
• 4.8.23 (changes) - Failed
• 4.8.22 (changes) - Success
• 4.8.21 (changes) - Failed Failed
• 4.8.20 (changes) - Success Failed
• 4.8.19 (changes) - Success
• 4.8.18 (changes) - Failed
• 4.8.17 (changes) - Failed
• 4.8.16 (changes) - Success
• 4.8.15 (changes) - Success
• 4.8.14 (changes) - Success
• 4.8.13 (changes) - Failed
• 4.8.12 (changes) - Success
• 4.8.11 (changes) - Success
• 4.8.10 (changes) - Success
• 4.8.9 (changes) - Success
• 4.8.8 (changes) - Failed
• 4.8.7 (changes) - Success
• 4.8.6 (changes) - Failed
• 4.8.5 (changes) - Failed
• 4.8.4 (changes) - Success
• 4.8.3 (changes) - Success
• 4.8.2 (changes) - S F F F F F F F F S S F F F
• 4.8.1 (changes) - Success Success
• 4.7.59 (changes) - Success
• 4.7.58 (changes) - Failed
• 4.7.57 (changes) - S F F
• 4.7.52 (changes) - Failed
• 4.7.49 (changes) - Failed
• 4.7.38 (changes) - Failed
• 4.7.37 (changes) - Failed
• 4.7.36 (changes) - Failed Success
• 4.7.32 (changes) - Success
• 4.7.31 (changes) - Success
• 4.7.30 (changes) - Success
• 4.7.29 (changes) - Success
• 4.7.27 (changes) - Success
• 4.7.26 (changes) - Failed
• 4.7.25 (changes) - Success
• 4.7.24 (changes) - Success
• 4.7.23 (changes) - Success
• 4.7.22 (changes) - Success Success

---

Loading changelog, this may take a while ...

Changes from 4.7.7

Created: 2021-07-21 21:25:31 +0000 UTC

Image Digest: sha256:60454c3270a61432447c752a9d5ee3e7d84cebcfd5d371eb4daa263623923dac

Release 4.7.21 was created from registry.ci.openshift.org/ocp/release:4.7.0-0.nightly-2021-07-21-150523

Components

• Kubernetes 1.20.0-beta.2
• Red Hat Enterprise Linux CoreOS upgraded from 47.83.202104090345-0 to 47.83.202107210005-0 (diff)

New images

• driver-toolkit git 044d4be0 sha256:29d7ddcae8690a45572a992633e1dbb366ea44fccfc270e29e0d2d1eb6473f62

Rebuilt images without code change

• aws-ebs-csi-driver git f6a71bf7 sha256:d3f83158bd0532852499506456536116295f6d8745728d5cbfb65e1c249300d4
• aws-ebs-csi-driver-operator git 97f73eb7 sha256:eafcca49321cfbfc9464d75ba95a6cc7d3566c5f975ccb7cbfd46a13df5f0c69
• aws-pod-identity-webhook git 0074d6af sha256:340983b4a5d058d6b82272db08464ac684bcac8b4db2d3c08f13136513b49020
• baremetal-machine-controllers git 25cbb8d8 sha256:a798c6a40461e5a9ea599944b437391814ebf5463261ce06662a83f6658a2861
• cluster-bootstrap git 6665cae3 sha256:c23f96a2ab9cbaa880c32afcb3b80483a276d481a954f674dd0f24a057adbc81
• cluster-kube-controller-manager-operator git 28159093 sha256:42d51ef92251a54c40e81f052429482c4bf7ff08e6d4db117194f36fa4b41744
• cluster-kube-scheduler-operator git b2204ca2 sha256:3f3917102c56310c1fbecfac1de6d8318226c345c628e75880a6675a8027709f
• cluster-kube-storage-version-migrator-operator git 54484757 sha256:105fb893c16260d866b594946c02db63c594f959d09d6831383f433a7a583f87
• cluster-openshift-controller-manager-operator git 245005e3 sha256:39cf49293213ebbfa90d27bd07e402e9230563bc1b4cb044a4904af32be385f4
• cluster-policy-controller git 42791bac sha256:f707cea1b0551a863bff17b8c5d9694ec4b6f87330db53105eed5577b4885e24
• configmap-reloader git 25dfb671 sha256:9defa0dd5339a3eb1277cbad710c6cd37fdf889de6b42aec5f88486369eeda07
• container-networking-plugins git fc27124d sha256:f11c5a5419d85b9579abe0ab27b07ef162d0501efe3dd2d6a0ae9861cfdf04cc
• coredns git d4a3ba3f sha256:b70ae7a8ffe39c148fca93e6358a1256d52372233571b020fb089c23f1ce66c6
• csi-driver-manila-operator git 00b1f648 sha256:9e3dd6f1c4fe346bc1a02b68af0c90154eb44f578a71434544b560f775890b9c
• csi-driver-nfs git 9404d343 sha256:5ab250149ab64d6063a13681f0b696ee06e3cf5c05d3ce1add99930bc61232d2
• csi-external-attacher git f152de8a sha256:e544fafcfb07d7fd362f7f37c017d7897fc88c2d4ac51800d2753da70ba41b4b
• csi-external-provisioner git a49415e1 sha256:50f1227c0acd871ca0decc4de6bb85f18bdb30578ec93de00094d460d1752020
• csi-external-resizer git f77279e9 sha256:be1bf5dd7d9bb37a972c5182451a1e4394fe7132a280c27f26fc46b3c77643a5
• csi-external-snapshotter git 26773735 sha256:c5c96aa734a9144ccdd9f97337dd0f5010d9524d8108493642bdcdd84ee5307e
• csi-livenessprobe git 3dad0280 sha256:fcfcc90a8f0b0e70b3da0869e0c37e29cf68d8a681c6802a32227644612f9c58
• csi-node-driver-registrar git 2a77963e sha256:a00ef0658d7d5b15aa4f24b849c476ea032e89ac3370488063e66abb840d106d
• csi-snapshot-controller git 26773735 sha256:7780cca4686b3fddb551d3595910b1a864ad65da8425cc9219abc708f470bfd9
• csi-snapshot-validation-webhook git 26773735 sha256:635296e6f91e60be3607c8954fc8eb5efa8b6c5f0465b004842882de280bc1f6
• egress-router-cni git 96ebd378 sha256:581d4202e57825e09ef0410883975c75df80a8a9bb4c83f45de43080381f8999
• gcp-pd-csi-driver git 091f0212 sha256:5ebaeae1108fb28676e530718b381637a5a807fb3d3744fd11ea9211dca349fc
• grafana git b02c35dc sha256:85d0924c180173eb606eb27e5d114db2df7ac6c51adb44284ff10ab529c0d304
• ironic-hardware-inventory-recorder git 61c4cc7d sha256:2b6d470918ce293f6776dd1a81b0bcebc977225d490d3ca12e4289e6829c2300
• ironic-inspector git 916bdc6e sha256:d965ac8f37325e9f738e10edb3751818044ad221c2e9766b98ecd17bb84161f4
• ironic-ipa-downloader git df6bb639 sha256:376fb76193661e1460b17c97114703d18b9c13103eb4a9b6d26b51d341c6126a
• ironic-static-ip-manager git 43d640a0 sha256:0054fcdaef6d766c0f4e24a14bb57ac6e5ddd7142cb8f5b659cbbc5fc8baa99e
• k8s-prometheus-adapter git 212d80b4 sha256:b467c2f587c62d94facc04777b176f73661b999282b44c6d7675baa1fc8f6d37
• keepalived-ipfailover git 0e45f638 sha256:a6b028eee7e9ec4cae33c086e6372fbf226f8fbe502525109d28b07d727e72fe
• kube-rbac-proxy git 14c288e6 sha256:0134dcb8750dd70fd08603d11ab600e875e9f853d114feaed9f349a9ba990e1c
• kube-state-metrics git 04bff708 sha256:eb2a30e7f6c665a68c4e6cd100ba35186683eab5dda13e4c72670aed28001d3b
• kube-storage-version-migrator git 329a4b06 sha256:0d965f1f92b2cd65feea60929d3557f32aaf0f6f37247fc85fa557171b8d8d20
• libvirt-machine-controllers git 033be25c sha256:c11b06da9338bb47d9d3a3564b017144171500c9113858a22e9e5632622e1838
• machine-os-content sha256:2e7b5fe6a2d6f6a9aff1a33e839f747a9d3d9a327b6492d4ac0a1c528279a17c
• mdns-publisher git 207a7e5d sha256:76fd21585b8ec59ca792fe1e31a701f15cbd59aa776820ba672ef810dcfa57ca
• multus-admission-controller git a7312f5e sha256:68b86d9d20574adf08f0565c264315bf2fcab5d5ba6725aa7ae03f9bf0606679
• multus-route-override-cni git 1662c3ec sha256:d88254197c3df1f0e378606ec1a99c151202ba524c4aadc7237f015d606d746b
• multus-whereabouts-ipam-cni git dfe6b395 sha256:1c196ea806f8e6e20c73da94866fc4fa5f9c5710938af88b8a3c687bb0112cb8
• must-gather git 140ea5e8 sha256:9a2535b21ca764f48fb967704f569c1fd34b21190d2e50462fe22f466cc67001
• network-metrics-daemon git b1926150 sha256:7d5d8db868c8980662600680d79fd3eddb0131a35c86ae7282369fd27380ac05
• oauth-apiserver git 69f527e9 sha256:12893ad039e8a50b4e351a429b9efe39d92aa0b8c55b5b26a03e65feb44fb7b1
• oauth-proxy git 4bd47050 sha256:f8900a0feeb2d12b81ec2b6f863a1bf6a96faef4981710d668680b6521639026
• openshift-state-metrics git 40b0968e sha256:2625d2fe24be9cd4fb6e3a4f0cbae8495af962a98e542e880ab4470939bf9a8e
• openstack-cinder-csi-driver-operator git 117ce62c sha256:fe2251d5ac73ed007bc7e81a055cdd9e84c2e33187b1beae6e8dce610e55cca1
• openstack-machine-controllers git 471cf3ab sha256:cb8f406d1de9a9b0dd5b6ca8db69e938c139af2ec2d6369a34ce425ef7e03e57
• operator-marketplace git 96bab9b9 sha256:5d1f1ad4228091533bc4f5730db5aaded511c9748e8c38b657f8b4d90a4e2302
• ovirt-csi-driver git 72545e63 sha256:52b0cf2e3767f535f31caea3fddf7249acf723e37d6a6047067fa57ba6e28989
• ovirt-csi-driver-operator git f8808a04 sha256:7d82a9004b883b422ff8d439c0316925f7d388f43e6396c7b47bf0b7d7f37943
• ovirt-machine-controllers git 01b9bf83 sha256:07942280b847dc398850639982e5081abf283f4e1240dd6af20ca38a96cdf04b
• pod git 0e45f638 sha256:dd4d47c77836319287ca2c052c8b5d5deceba3f15f093fb28ab5c6f86f1c9a22
• prom-label-proxy git db87872c sha256:092776712c84ef937d9ee5857a72e28e4e890677544124041b3778da871b15fd
• prometheus git cb5e53cd sha256:d61578fab2403067d8bdef920c3618c2d2557ad12fc40c76f3af511856d452f5
• prometheus-alertmanager git 9954cc42 sha256:6a3e096e41f22f66c098e4eabd9ee3465ed71fc0750de778cd2ca3fddf1fac40
• prometheus-config-reloader git 1f0fd51d sha256:02779f48b721b0a983a956ce7ff92589140643a73d1337db16653dba9c8a8892
• prometheus-node-exporter git 76974e2e sha256:1c65bebe21d4132f2bfefeaf769218718cca2f48f42667d3bb5db0adb3975055
• prometheus-operator git 1f0fd51d sha256:676e8ae04fc442d38bb33515c4ed04e98eb8339b95dcf435e15b857c2d9ee71c
• telemeter git e4dac512 sha256:82144e0f3dd043990464c0282c9d138c39bbe07e6370139b711d7e5ce822792c

aws-machine-controllers

• Bug 1976192: update aws-sdk-go to v1.38.25 #415
• Bug 1942966: Update EC2 instance types #398
• Updating ose-aws-machine-controllers builder & base images to be consistent with ART #373
• Bug 1924471: Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #409
• Bug 1952614: [OCPCLOUD-1115] Get instance tags from infrastructure object #405
• Full changelog

baremetal-installer, installer, installer-artifacts

• Bug 1977481: Dockerfile: repin libvirt #5043
• Bug 1975819: upi/vsphere: Use Afterburn guestinfo for static IP and hostname config #5025
• Bug 1974282: gather: collect networking information in log bundle #5017
• Bug 1971163: Updating AWS instance types #4992
• Bug 1945467: aws: allow use of unknown regions in known partitions #4807
• Bug 1938426: Set default values to machine pools before validation #4750
• Bug 1967355: pattern removed from sed to prevent expansion #4975
• Bug 1956483: Bump boot images for RHCOS fixes #4961
• Bug 1947427: add proxy params to bootstrap ignition #4830
• Bug 1939014: generate glance url considering the region #4753
• Bug 1947216: pkg/asset/installconfig/aws: Add iam permission for destorying clusters #4827
• Bug 1948398: remove ovirt_cafile from ovirt-credentials secret #4842
• Bug 1962435: aws: using dotted domain when looking for public hosted zone #4948
• Bug 1940275: Revert “baremetal: send full ignition to masters” #4767
• Bug 1943500: Bump gophercloud utils #4794
• Bug 1958518: aws: restore setting aws platform spec in infra resource #4918
• Bug 1958428: aws: support more auth options in manual mode #4914
• Bug 1945907: Byo aws iam roles 4.7 #4813
• Bug 1954803: aws: support for bring-your-own hosted zone #4887
• Bug 1951571: registry.svc.ci.openshift.org is no longer valid #4853
• Bug 1954152: manifests: populate aws user tags in infrastructure #4882
• Full changelog

baremetal-operator

• Bug 1972430: Don’t deprovision provisioned host due to error #159
• Bug 1961341: config: use rbacv1 instead of rbacv1beta1 #148
• Full changelog

baremetal-runtimecfg

• Bug 1962949: Keepalived- verify that unicast peers list isn’t empty on master nodes #140
• Bug 1942488: sort AddressesDefault by route priority, ifindex, and IPv4/IPv6 preference #132
• Full changelog

cli, cli-artifacts, deployer, tools

• Bug 1976284: skip-multiple-scopes with adm catalog mirror #869
• Bug 1963784: Preserve AuthInfo when switching projects #861
• Bug 1970811: set User-Agent when talking with registries #848
• Bug 1969928: exclude security during exctraction #844
• Fix unit test failure #838
• Bug 1942938: [release-4.7] inspect clusteroperators as a backup to must-gather if it fails #766
• Full changelog

cloud-credential-operator

• Bug 1958983: rework GCP passthrough permissions checking #338
• Bug 1948396: oVirt credentials secret contains unnecessary “ovirt_cafile” #322
• Bug 1948702: [release-4.7] manifests/0000_90_cloud-credential-operator_04_alertrules: Drop CloudCredentialOperatorDown #324
• Full changelog

cluster-authentication-operator

• Bug 1971087: add a controller to remove webhooktokenauthenticator config #418
• Bug 1956797: bump kube to 0.20.6 to prevent delegated authz panics #443
• Bug 1941840: endpoints controller: close response bodies #440
• Bug 1949941: add a scraper and an alert to check for old-style tokens #437
• Full changelog

cluster-autoscaler

• Updating atomic-openshift-cluster-autoscaler builder & base images to be consistent with ART #187
• Full changelog

cluster-autoscaler-operator

• Bug 1924478: Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #207
• Full changelog

cluster-baremetal-operator

• Bug 1972291: Use a cache URL with the .svc.cluster.local suffix #161
• Bug 1936544: Inject proxy environment variables everywhere #117
• Full changelog

cluster-config-operator

• Bug 1954152: vendor: bump to the latest openshift/api #200
• Full changelog

cluster-csi-snapshot-controller-operator

• Bug 1961719: manifests/05_operator_rbac: Drop the unused namespace property #89
• Bug 1967328: Remove exclude annotation from manifests to include in ROKS #91
• Bug 1929881: Fix installation on ROKS #80
• Full changelog

cluster-dns-operator

• Bug 1967766: Corefile: Set bufsize to 512 bytes for all servers #277
• Bug 1953097: Corefile: Enable bufsize plugin for all servers #267
• Bug 1953609: Enable errors plugin for custom upstream resolvers #268
• Full changelog

cluster-etcd-operator

• Bug 1976988: [release-4.7]: Increase inertia duration for the EtcdMembersDegraded condition #618
• Bug 1976287: Validate the status of the etcd snapshot during backup and restore #617
• Bug 1951447: pkg/etcdenvvar/etcd_env.go: Sort endpoints to prevent rollout #568
• Bug 1958416: pkg/dnshelpers: fallback to spec if status is not populated for serviceNetwork #594
• Bug 1955418: manifests: Shift FlowSchema to level 50 #582
• Bug 1954121: [release-4.7] Improve cert controller detection and correction of invalid certs #577
• OWNERS: add lilic as reviewer #588
• Bug 1954073: bindata, pkg: Propagate operator log level to etcd itself #578
• Full changelog

cluster-image-registry-operator

• Bug 1977159: bump aws-sdk-go to v1.38.35 #704
• Bug 1973693: Setting required pod anti-affinity rules #697
• Bug 1960562: manifests: fix selector in image-registry-operator #689
• Bug 1957308: Setting user tags always when Storage is Managed #684
• Bug 1955176: Setting user provided tags on bucket creation #682
• Full changelog

cluster-ingress-operator

• Bug 1978845: Specify topology spread constraints #632
• Bug 1973983: Canary: Handle downgrades from 4.8 to 4.7 properly #627
• Bug 1960776: Reconcile openshift-ingress namespace on upgrade #616
• Bug 1942603: [release-4.7] Add the new NetworkPolicy-matching label to the namespace #615
• Bug 1954097: Annotate services of type LoadBalancer with user tags (AWS only) #606
• Full changelog

cluster-kube-apiserver-operator

• Bug 1927321: competing connectivitycheckcontrollers cause pod restarts during upgrades #1041
• Full changelog

cluster-machine-approver

• Bug 1924492: Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #120
• Updating ose-cluster-machine-approver builder & base images to be consistent with ART #103
• Full changelog

cluster-monitoring-operator

• Bug 1969963: Recording rule for builds by strategy #1206
• Bug 1967966: Switch back anti-affinity to soft from hard for Prometheus #1200
• Bug 1956565: manifest allowlist: add acm_managed_cluster_info in 4.7 #1144
• Bug 1961069: remove dependency of e2e tests on AWS #1162
• Bug 1957703: [4.7]: Add hard anti-affinity constraints to Prometheuses #1150
• Bug 1950290: remove KubeClientCertificateExpiration alert rule #1171
• Bug 1955482: fix kube-state-metrics regexp patterns #1163
• Bug 1955482: Drop high-cardinality metrics from kube-state-metrics which aren’t used #1141
• Bug 1955469: remove node_mountstatsnfs* metrics #1154
• Bug 1955462: drop container_memory_failures_total metric backport #1160
• Bug 1952149: oc adm top reporting unknown status for Windows node #1130
• Bug 1955449: drop crio image metrics #1134
• Bug 1945856: Revert “Bug 1934516: [4.7]: jsonnet/prometheus.jsonnet: Apply system-cluster-critical class to cluster Prometheus ” #1103
• Full changelog

cluster-network-operator

• Bug 1982217: Use 10% for ovnkube-node for maxUnavailable #1153
• Bug 1969860: Escape characters on ini file #1127
• Bug 1967994: Backport daemonset to drop icmp frag needed packets received from other nodes in the cluster to Rel 4.7 #1119
• Bug 1972183: config: Set enable-profiling true by default and allow enable-profiling as a proxy argument #1129
• Bug 1967388: annotate flowcontrol with networkoperator.openshift.io/ignore-errors #1118
• Bug 1967972: Add tokenreviews permissions for kube-proxy #1120
• Bug 1942603: [release-4.7] Allow from router policy support for cluster network operator #1087
• Bug 1937396: kuryr/alerts: change the rule for free count #1011
• Bug 1957749: ovnkube: add missing resource requests for SBDB #1088
• Bug 1954302: Remove OVS daemonsets #1076
• Bug 1956352: [4.7] OVN kubernetes dual-stack conversion #1082
• Bug 1941214: Use 10% for ovs maxUnavailable for rolling update #1031
• Bug 1936719: OSD-6600 network-metrics missing priorityClass #1007
• Bug 1927321: competing connectivitycheckcontrollers cause pod restarts during upgrades #1050
• Bug 1941212: The Multus daemonset should handle 10% maxUnavailable #1030
• Full changelog

cluster-node-tuning-operator

• Bug 1958885: Switch to client-go leader-with-lease election. #238
• Bug 1960542: manifests: fix selector in node-tuning-operator ServiceMonitor #228
• Full changelog

cluster-openshift-apiserver-operator

• Bug 1955502: explicitly allow apiserver pods to write to their root FS #449
• Bug 1927321: competing connectivitycheckcontrollers cause pod restarts during upgrades #444
• Full changelog

cluster-samples-operator

• Bug 1923036: Update Jenkins monitored templates names #359
• Bug 1961518: manifests: fix selector in ServiceMonitor #375
• Bug 1950808: add DeepCopy to avoid SharedInformer cache mutation #370
• Full changelog

cluster-storage-operator

• Bug 1961719: manifests: remove namespace from cluster-storage-operator-role binding #170
• Bug 1959546: Add alert about vsphere-problem-detector unable to connect #169
• Full changelog

cluster-update-keys

• Pack both keys in one verifier-public-key-ci entry #36
• Adding the new Openshift CI Signer key #34
• Full changelog

cluster-version-operator

• Bug 1970272: Fixing the log message in rbac.go for clusterrole #609
• Bug 1970272: Log object updates and show existing/required diff #589
• Bug 1969501: install/0000_90_cluster-version-operator_02_servicemonitor: Soften ClusterOperatorDegraded #587
• Bug 1969378: avoid hotlooping on RoleBindings with empty APIGroup #584
• Bug 1966977: Prevent hotlooping in ImageStreams #580
• Bug 1959238: pkg/cvo/sync_worker: Shift ClusterOperator pre-creation into the manifest-task node #557
• Bug 1943754: Ensure automountServiceAccountToken is synced on service account updates #539
• Full changelog

console

• Bug 1973572: Hardcode strings in Home->Overview page #9322
• Bug 1942864: Warning Alert for Encrypted PVs in Create StorageClass #8464
• Bug 1965526: Removing library charts from the merged helm repo index entries. #9076
• Bug 1970796: update cluster-local label for ksvc #9220
• Bug 1970720: fix rotated pipelinerun status icon issue in safari #9216
• Bug 1969536: Omit bitbucket branch in URL if it contains slash #9180
• Bug 1954962: removes extra annotations form spec template for ksvc #8823
• Bug 1948537: add hide/reveal button for kms token #8616
• Bug 1942160: Update the scope of GitOpsService resource #8450
• Bug 1971667: Track and show error messages in modals #9232
• Bug 1969791: fixes: WebTerminal widget should send resize events #9190
• Bug 1969105: Update IP address on pods list to show podIP other than … #9172
• Bug 1967106: can’t open terminal for pods that have more than one co… #9117
• Bug 1966275: Fix Pipeline Parameters in Modals accept empty string defaults #9085
• Bug 1961567: Remove the broken Devfile Sample for BuildConfigs #8956
• Bug 1963025: Fix documentation link to network policies #8953
• Bug 1953606: Fixing failure domain issue with custom pools (4.7 backport) #8775
• Bug 1970485: Add pipeline annotation to secrets for private git repo import with pipeline #9207
• Bug 1964400: Fix RGW Total Used Query #9038
• Bug 1958873: Fix disk replacement during second replacement #9083
• Bug 1961887: Update Taskrun tab to make namespace based calls #8968
• Bug 1959356: Tech preview badge for arbiter #8870
• Bug 1964322: The status of “Used Capacity Breakdown [Pods]” is “Not available” #9028
• Bug 1957499: OperatorHub - console accepts any value for infraFeatures #8859
• Bug 1960686: Fix hot loop in global config page #8935
• Bug 1947091: Fix skipped task status when using conditions #8582
• Bug 1962493: Hide TaskRun edit actions for rows in Pipelinerun’s TaskRun tab #8987
• Bug 1966798: [release-4.7] Remove monitoring labelling step for 4.7 tests #9073
• Bug 1951210: Fix default resource log download file name #8707
• Bug 1944046: Warn using an unsupported IE browser #8494
• [release 4.7] Bug 1939553: Support binary file type secret entries #8389
• Bug 1960544: Overly generic CSS rules for dd and dt elements breaks styling elsewhere in console #8925
• Bug 1960093: Make console works against api proxy #8914
• Bug 1942027: Fix RBAC check when creating a resource #8448
• Bug 1956336: Fix Triggers section in eventlistener details page #8842
• Bug 1953937: Fixing PVC creation page issue in 4.7(Reverting wrong commit) #8784
• Bug 1952578: Don’t poll ClusterVersion when user doesn’t have authority #8749
• Bug 1950489: Fix “Create binding” link from Role page, RoleBindings tab #8685
• Bug 1948958: Fix ingress details page to show referenced secret name #8633
• Bug 1944955: Fix close button in the new ‘Storage cluster exists’ warning alert modal #8524
• Bug 1956313: Save additional parameters from build guidance container and drop it #8841
• Bug 1953728: Fix issues related to loading dynamic plugins #8780
• Bug 1945594: fixing-project-creation-and-updated-packageJson #8536
• Bug 1950214: Fix start pipeline action access review #8681
• Bug 1948369: Remove cluster label from predefined monitoring queries #8613
• Bug 1954109: Backport telemetry dynamic extension to release-4.7 #8783
• Bug 1952209: Consistent formatting of dates and times #8734
• Bug 1952293: adds check for templates #8736
• Bug 1942843: Modified description for storage class encryption - 4.7 Backport #8462
• Bug 1948938: [release-4.7] Prow script point to deleted resource #8619
• Full changelog

console-operator

• Bug 1960589: [release-4.7] quickstarts: remove “spec.version” #547
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver

• Bug 1969345: Backport ignore proxy connecting to CSI sockets #54
• Full changelog

docker-builder

• Updating openshift-enterprise-builder builder & base images to be consistent with ART #188
• Full changelog

docker-registry

• Bug 1977159: bump aws-sdk-go to v1.38.35 #282
• Full changelog

etcd

• Bug 1970141: discover-etcd-initial-cluster: retry if member is not part of member list and dataDir exists #82
• Full changelog

gcp-machine-controllers

• Bug 1924508: Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #164
• Full changelog

gcp-pd-csi-driver-operator

• Bug 1940005: Add CSIDriver object #18
• Full changelog

haproxy-router

• Bug 1967733: template helper - generateHAProxyWhiteListFile, use right arg type #297
• Bug 1965402: Revert ‘Bug 1896977: Enhance host name validation in router’ #293
• Bug 1963243: Add a condition to check if the Endpoints ID is duplicated #288
• Full changelog

hello-openshift, tests

• Re-enable quota test #26284
• Bug 1980540: Use cluster-logging for operator installation smoke test. #26315
• Bug 1977383: [release-4.7] Update resource quota test for compatibility with service ca configmap publishing #26303
• Bug 1928862: [4.7] Bump openshift/kubernetes #26259
• Bug 1978000: builds: comment out multi-namespace template test #26296
• NOOP - Trigger a new CI build #26291
• Bug 1977383: [release-4.7] Skip cluster quota test to enable service ca publisher to merge to o/k #26283
• Bug 1970411: properly remove project after test ends #26217
• Bug 1966358: Dockerfile.rhel: fix a bash typo #26194
• Bug 1961367: Add Cinder client to the test image #26171
• Bug 1955600: test/extended/router: Fix-up Unidling test #26120
• Bug 1963115: narrow verify /run test to /run/secrets #26180
• Bug 1963115: move verify run test from tools to cli image to avoid additional /run content #26176
• Bug 1958797: test/extended/router/idle: Only run on OVNKubernetes or OpenShiftSDN #26145
• Bug 1947705: Add test of documented backup/restore procedure #26110
• Bug 1955669: flake testKubeletToAPIServerGracefulTermination #26121
• Full changelog

hyperkube

• Bug 1981634: UPSTREAM: <drop>: use the legacy service-ca.crt content for clusters started in 4.7 or before #857
• Bug 1977383: [release-4.7] Ensure service ca configmap is created in all namespaces #834
• Bug 1977383: [release-4.7] Fix watch conformance test #843
• Bug 1977383: Update resource quota test for compatibility with service ca configmap publishing #839
• Bug 1975553: only chown if non-windows machine with projected volumes #826
• Bug 1928862: [release-4.7] UPSTREAM: <carry>: kube-apiserver: ignore SIGTERM/INT after the first one #739
• Bug 1966810: UPSTREAM: 102224: Fix expired unit test certs #780
• Bug 1963263: UPSTREAM: 102000: Ref counting is only applicable to Remote endpoints #763
• Bug 1955883: UPSTREAM: 99095: Prevent Kubelet stuck in DiskPressure when imagefs minreclaim is set #725
• Bug 1951726: Speed up PV provisioning for vsphere driver (ocp-4.7) #690
• Bug 1942141: fixes cinder PV labelling #635
• Bug 1951815: UPSTREAM: 99393: kubelet: reduce configmap and secret watch #692
• Bug 1955231: UPSTREAM: 101345: kubelet: improve the node informer sync check #721
• Bug 1952917: UPSTREAM: 100228: For LoadBalancer Service type don’t create a HNS policy for empty or invalid external loadbalancer IP #697
• Bug 1928862: Enable snapshot tests #569
• Bug 1945856: 99729:Only system-node-critical pods should be OOM Killed last #642
• Full changelog

insights-operator

• [release 4.7] Bug 1960645: Adds virt_platform metric to the collected metrics (#428) #428
• [release 4.7] Bug 1953579: GatherClusterOperators and GatherClusterOperatorsPodAndEvents (#410) #410
• Add vsphere_node_hw_version_total metric (#416) #416
• Bug 1950926: Extend OLM data with CSV display name (#400) (#402) #400
• Full changelog

ironic

• Bug 1958965: Updated ironic packages #166
• Full changelog

ironic-machine-os-downloader

• Bug 1973367: Modify dhcp kernel args based on ipv4/ipv6 #55
• Bug 1971549: Unconditionally remove TMPDIR #45
• Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

• [release 4.7] Bug 1947810: Update Jenkins to 2.277.3 and disable setup wizard #1259
• Bug 1952562: bump config-file-provider to 3.7.1 #1265
• Full changelog

kube-proxy, sdn

• Bug 1962637: ValidateMTU: check only the interface that holds the node ip #304
• Bug 1923231: rebase to sdn-4.7-kubernetes-1.20.0-rc.0 #286
• Bug 1941993: Fix incorrect unmonitoring of egress nodes #279
• Full changelog

kuryr-cni, kuryr-controller

• Bug 1972631: Workaround OVN bug causing subports to be DOWN #525
• Bug 1970320: Fix Subnet retrival when creating Service without Selector #522
• Bug 1949541: Fixing bug, Kuryr-Controller crashes when it’s missing the status #501
• Bug 1959766: Fix NPs for OVN LBs with hairpin traffic #516
• Bug 1929066: Skip pool pre population if no Status is present on CRD #505
• Bug 1941941: Include service subnet to be open for namespaceSelector set to all. #504
• Bug 1929066: Fix port pools #455
• Bug 1949551: kuryr-controller restarting after 3 days cluster running - pools without members #502
• Full changelog

machine-api-operator

• Bug 1924517: Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #867
• Bug 1955689: Webhook filter should check for both mutating and validating webhooks #861
• Bug 1947372: vSphere, detach virtual disks before virtual machine destroy if node not available #841
• Bug 1954610: Update GCP default image to match 4.7 release #856
• Full changelog

machine-config-operator

• Bug 1976232: Explicitly set keyfile as the default plugin of NetworkManager for RHEL7 #2641
• Bug 1971864: Stop setting nopreempt on bootstrap keepalived.conf #2616
• Bug 1973006: daemon: cordon the node before performing drain #2623
• Bug 1961341: rbac: update remaining apis to v1 #2620
• Bug 1971374: daemon/drain.go: bump initial drain sleeps down to 1min #2612
• Bug 1970154: operator/sync.go confirm renderedconfig osimageurl matches cvo #2607
• Bug 1968759: Bump drain timeout to 1h #2605
• Bug 1949348: gcp-routes should wait until network is stopped #2593
• Bug 1962288: [ovirt] Stop using db file for static internal records #2581
• Bug 1964568: Delete duplicated generated mc #2591
• Updating ose-machine-config-operator builder & base images to be consistent with ART #2399
• Bug 1949348: not allow healthcheck traffic to loop through the node #2526
• Bug 1953475: daemon: return nil for unsupported operation on an OS #2544
• docs/README: Useless bump to get a new commit hash #2584
• Bug 1956749: vsphere: platform none, vmxnet3v4 fix move to base #2564
• Bug 1950261: create the ovs-config-executed file to signal ovs is running on the host #2532
• Bug 1957015: [on-prem] Backport duplicate VIP fixes #2566
• Bug 1932383: Connect default NIC to cluster network #2427
• Bug 1942488: Use new –prefer-ipv6 flag to “runtimecfg node-ip” as appropriate #2525
• Bug 1950498: Add on-prem namespaces to relatedObjects #2533
• Bug 1951028: configure-ovs doesn’t handle bond interfaces correctly for OVNKubernetes #2536
• Full changelog

multus-cni

• Bug 1927896: make a copy of global RuntimeConfig on merge #91
• Full changelog

oauth-server

• Bug 1965932: bump kube to 0.20.4 #79
• Full changelog

openshift-apiserver

• Bug 1965402: Revert ‘Bug 1965402: Enhance API host name validation’ #211
• Bug 1961557: sets shutdown-delay-duration from OpenShiftAPIServerConfig #199
• Full changelog

openshift-controller-manager

• Bug 1955210: fixed LANG for the builder container #180
• Full changelog

operator-lifecycle-manager

• Bug 1972075: Add OperatorCondition status sync and update operator upgradeable check #2206
• Bug 1945702: Fix inconsistent dependency candidate order. #2149
• Bug 1962314: Explicitly set readOnlyRootFilesystem: false on created registry pods. #2171
• Bug 1963141: Make ClusterOperator Available condition sticky. #2173
• Bug 1962312: Simplify deployment status check to reduce flapping. #2170
• Bug 1962302: Set reason/message for Available condition in packageserver co #2168
• Bug 1959009: Use DeploymentAvailable instead of custom test for CSV status. #2151
• Bug 1924467: Bumps k8s.io dependencies to v0.20.6 #2121
• Bug 1949139: Preserve existing ServiceAccount owner references during installs. #2088
• Bug 1951657: fix(catalog): Reduce namespace resync in resolution failure #2107
• Bug 1952851: Add resource requests for bundle unpacker #2109
• Bug 1951232: Fix resolution error if inner entry doesn’t provide a required API. #2106
• Bug 1947909: Do not adopt copied CSVs #2089
• Full changelog

operator-registry

• Bug 1968680: fix(containerd): drop xattrs during unpack #676
• Bug 1924468: Bump the k8s dependencies to v1.20.6 #638
• Bug 1937097: Add retries to opm index add #643
• Full changelog

ovn-kubernetes

• Bug 1972484: egress firewall as ACLs + service connectivity fixes #592
• Bug 1940566: Properly log when hybrid overlay errors out #543
• Bug 1970779: Remove getDefaultIfAddr and use getNetworkInterfaceIPAddresses #571
• Bug 1962590: NewAddressSet: return nil in case of error #546
• Bug 1970322: revert 487 #570
• Bug 1962819: CNI cmdCheck: treat ingress_policing_rate=0 as not found #548
• Bug 1965075: CARRY: fix missed learn for hybrid exgw #556
• Bug 1946682: egress firewall as ACLs #487
• Bug 1942603: [release-4.7] Allow from router network policy support #526
• Bug 1956980: [release-4.7] fix ForEachAddressSet() as it is not calling the callback functions #523
• Bug 1959737: Fix: egress IP route health check detection state on restart #538
• Bug 1956270: service controller should not use the target-port #519
• Bug 1947097: [4.7z] Ensure no SNAT on GR for DisableSNATMultipleGws #533
• Bug 1939488: Backport Handle Multus network-status annotations on pod update #467
• Bug 1956318: Revert “removing the hybrid overlay externalGW code” #521
• Bug 1951064: master: cancel leader election on exit #505
• Bug 1950131: fix deadlock in EgressFirewall DNS code #513
• Bug 1951552: master: Delay deleting Namespace’s address set for 20 seconds #507
• Bug 1950432: [4.7] pods: bind pod logical switch ports to the node’s chassis with requested-chassis #503
• Bug 1924826: Backport Update gogo/protobuf to v1.3.2. #464
• Bug 1943316: [4.7] master: enable logical datapath groups for OVN >= 20.12 #478
• Full changelog

service-ca-operator

• Bug 1981634: add vulnerable legacy injector to allow for upgrade clusters to use #170
• Full changelog

thanos

• Bug 1944575: pkg/rules: fix deduplication of equal alerts with different labels #52
• Bug 1957646: cmd/thanos: use miekgdns resolver as default #56
• Full changelog

vsphere-problem-detector

• Bug 1959546: Update to current master #40
• Bug 1943719: Save error in Available message on every sync #42
• Bug 1943719: Don’t degrade cluster on connection error #39
• Fixes 1939555: Fix deadlock when enqueing functions into the pool #34
• Bug 1929824: Disable PV check #33
• Bug 1919336: Check if datastore belongs to a datastore cluster #28
• Remove WIP note #32
• Add unit tests #17
• Bug 1926943: Fix volume name length check #30
• Updating vsphere-problem-detector builder & base images to be consistent with ART #29
• Update govmomi to 0.23.1 #26
• Full changelog

---

View changelog in Markdown or change previous release: 4.7.204.7.194.7.184.7.174.7.164.7.154.7.144.7.134.7.124.7.114.7.104.7.94.7.84.7.74.7.64.7.54.7.44.7.34.7.24.7.14.7.04.7.0-rc.34.7.0-rc.24.7.0-rc.14.7.0-rc.04.7.0-fc.54.7.0-fc.44.7.0-fc.34.7.0-fc.24.7.0-fc.14.7.0-fc.04.6.624.6.614.6.604.6.594.6.584.6.574.6.564.6.554.6.544.6.534.6.524.6.514.6.504.6.494.6.484.6.474.6.464.6.454.6.444.6.434.6.424.6.414.6.404.6.394.6.384.6.374.6.364.6.354.6.344.6.334.6.324.6.314.6.304.6.294.6.284.6.274.6.264.6.254.6.244.6.234.6.224.6.214.6.204.6.194.6.184.6.174.6.164.6.154.6.144.6.134.6.124.6.114.6.104.6.94.6.84.6.74.6.64.6.54.6.44.6.34.6.24.6.14.6.04.6.0-rc.44.6.0-rc.34.6.0-rc.24.6.0-rc.14.6.0-rc.04.6.0-fc.94.6.0-fc.84.6.0-fc.74.6.0-fc.64.6.0-fc.54.6.0-fc.44.6.0-fc.3───4.14.0-0.nightly-2023-06-01-0444074.14.0-0.nightly-2023-05-31-2325154.14.0-0.nightly-2023-05-31-1422384.14.0-0.nightly-2023-05-31-0802504.14.0-0.nightly-2023-05-31-0143264.14.0-0.nightly-2023-05-30-110231───4.14.0-0.ci-2023-06-01-1357454.14.0-0.ci-2023-06-01-0757454.14.0-0.ci-2023-06-01-0157454.14.0-0.ci-2023-05-31-1957454.14.0-0.ci-2023-05-31-1357454.14.0-0.ci-2023-05-31-0757454.14.0-0.ci-2023-05-30-195745───4.13.0-0.nightly-2023-06-01-0508204.13.0-0.nightly-2023-05-31-1949054.13.0-0.nightly-2023-05-31-1001324.13.0-0.nightly-2023-05-31-0207334.13.0-0.nightly-2023-05-30-1700034.13.0-0.nightly-2023-05-30-074322───4.13.0-0.ci-2023-06-01-1052464.13.0-0.ci-2023-06-01-0115544.13.0-0.ci-2023-05-31-1246534.13.0-0.ci-2023-05-31-0045074.13.0-0.ci-2023-05-30-1034104.13.0-0.ci-2023-05-30-001338───4.12.0-0.nightly-2023-06-01-0313324.12.0-0.nightly-2023-05-31-2325414.12.0-0.nightly-2023-05-31-1208484.12.0-0.nightly-2023-05-31-0327094.12.0-0.nightly-2023-05-29-223551───4.12.0-0.ci-2023-06-01-1402164.12.0-0.ci-2023-06-01-0355084.12.0-0.ci-2023-05-31-2155084.12.0-0.ci-2023-05-31-0811494.12.0-0.ci-2023-05-31-0211494.12.0-0.ci-2023-05-30-1940314.12.0-0.ci-2023-05-30-130458───4.11.0-0.nightly-2023-06-01-0212394.11.0-0.nightly-2023-05-30-1456574.11.0-0.nightly-2023-05-29-1741434.11.0-0.nightly-2023-05-29-1203474.11.0-0.nightly-2023-05-29-022405───4.11.0-0.ci-2023-06-01-0756524.11.0-0.ci-2023-05-31-2018484.11.0-0.ci-2023-05-31-1418484.11.0-0.ci-2023-05-30-2120474.11.0-0.ci-2023-05-30-1343094.11.0-0.ci-2023-05-29-183134───4.10.0-0.nightly-2023-06-01-0117374.10.0-0.nightly-2023-05-31-1213484.10.0-0.nightly-2023-05-31-0033514.10.0-0.nightly-2023-05-27-0454454.10.0-0.nightly-2023-05-26-052539───4.10.0-0.ci-2023-06-01-0751544.10.0-0.ci-2023-06-01-0151544.10.0-0.ci-2023-05-31-1651154.10.0-0.ci-2023-05-31-0706554.10.0-0.ci-2023-05-30-2223414.10.0-0.ci-2023-05-26-230341───4.9.0-0.nightly-2023-04-22-0718514.9.0-0.nightly-2023-04-22-0635474.9.0-0.nightly-2023-04-17-2208484.9.0-0.nightly-2023-03-29-144712───4.9.0-0.ci-2023-06-01-1235584.9.0-0.ci-2023-06-01-0148164.9.0-0.ci-2023-05-19-0902384.9.0-0.ci-2023-05-18-0737084.9.0-0.ci-2023-05-16-1603384.9.0-0.ci-2023-05-16-144301───4.8.0-0.nightly-2023-03-25-0510434.8.0-0.nightly-2023-03-25-0430434.8.0-0.nightly-2023-03-18-0330124.8.0-0.nightly-2023-03-18-0130164.8.0-0.nightly-2023-03-04-052357───4.8.0-0.ci-2023-05-26-0012564.8.0-0.ci-2023-05-18-0737084.8.0-0.ci-2023-04-27-1231214.8.0-0.ci-2023-04-19-1816394.8.0-0.ci-2023-02-23-135840───4.7.0-0.nightly-2023-05-27-0230044.7.0-0.nightly-2023-05-20-0116174.7.0-0.nightly-2023-05-13-0109464.7.0-0.nightly-2023-05-06-0216494.7.0-0.nightly-2023-04-15-010754───4.7.0-0.ci-2023-05-31-0805114.7.0-0.ci-2023-05-31-0735114.7.0-0.ci-2023-05-26-1930054.7.0-0.ci-2023-03-31-0734524.7.0-0.ci-2023-02-27-231607───4.6.0-0.nightly-2022-11-17-1332454.6.0-0.nightly-2022-11-01-1643484.6.0-0.nightly-2022-10-27-0759414.6.0-0.nightly-2022-10-19-2319474.6.0-0.nightly-2022-10-12-040627───4.6.0-0.ci-2023-05-28-2014384.6.0-0.ci-2023-05-18-0737104.6.0-0.ci-2023-04-27-1001244.6.0-0.ci-2023-04-20-0428224.6.0-0.ci-2023-04-20-035822───4.14.0-ec.14.14.0-ec.04.13.0-ec.44.13.0-ec.34.13.0-ec.24.13.0-ec.14.13.0-ec.04.12.0-ec.54.12.0-ec.44.12.0-ec.34.12.0-ec.24.12.0-ec.14.12.0-ec.0

Source code for this page located on github