Back to index

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.7.42-x86_64

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
  • upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
• Informing jobs
  • aws Succeeded periodic-ci-openshift-release-master-nightly-4.7-e2e-aws
  • aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.7-e2e-aws-serial

Upgrades from:

• 4.7.41 (changes) - Success Failed
• 4.7.40 (changes) - Success
• 4.7.39 (changes) - Success
• 4.7.38 (changes) - Success
• 4.7.37 (changes) - Failed
• 4.7.30 (changes) - Success
• 4.7.23 (changes) - Success
• 4.7.17 - Failed
• 4.7.11 (changes) - Failed
• 4.7.5 (changes) - Success
• 4.7.4 (changes) - Failed
• 4.7.3 (changes) - Failed
• 4.7.2 (changes) - Success
• 4.7.1 (changes) - Failed
• 4.7.0 (changes) - Success
• 4.6.54 (changes) - Success Success
• 4.6.53 (changes) - Success
• 4.6.52 (changes) - Success
• 4.6.51 (changes) - Failed
• 4.6.50 (changes) - Success
• 4.6.45 (changes) - Success
• 4.6.41 (changes) - Success
• 4.6.37 (changes) - Failed
• 4.6.33 (changes) - Failed
• 4.6.29 (changes) - Success
• 4.6.28 (changes) - Failed
• 4.6.27 (changes) - Success
• 4.6.26 (changes) - Failed
• 4.6.25 (changes) - Failed
• 4.6.24 (changes) - Success

Upgrades to:

• 4.10.0-fc.4 (changes) - Failed
• 4.8.49 (changes) - Success
• 4.8.47 (changes) - Success
• 4.8.42 (changes) - Success
• 4.8.41 (changes) - Failed
• 4.8.40 (changes) - Success
• 4.8.35 (changes) - Failed
• 4.8.34 (changes) - Success
• 4.8.33 (changes) - Success
• 4.8.32 (changes) - Failed
• 4.8.31 (changes) - Success
• 4.8.30 (changes) - S S S
• 4.8.29 (changes) - F S F S
• 4.7.59 (changes) - Success
• 4.7.58 (changes) - Success
• 4.7.57 (changes) - S F S
• 4.7.47 (changes) - Success
• 4.7.46 (changes) - Failed
• 4.7.45 (changes) - Success
• 4.7.44 (changes) - Success
• 4.7.43 (changes) - Success Success

---

Loading changelog, this may take a while ...

Changes from 4.7.17

Created: 2022-01-26 07:35:03 +0000 UTC

Image Digest: sha256:423fcdb016cd7a336469bedd5410dbea93429be0b354b7fcfd926dd5cfd13a1c

Release 4.7.42 was created from registry.ci.openshift.org/ocp/release:4.7.0-0.nightly-2022-01-24-125340

Components

• Kubernetes upgraded from 1.20.0-beta.2 to 1.20.11
• Red Hat Enterprise Linux CoreOS upgraded from 47.83.202106120438-0 to 47.84.202201191903-0 (diff)

Rebuilt images without code change

• aws-ebs-csi-driver git f6a71bf7 sha256:b95c8cccea2cc39160fbeaa7a1481261b39a10e57f00c1b0d2275aecbd218736
• aws-pod-identity-webhook git 0074d6af sha256:ff8abbf9de47f0e19500a48f1144a8f6372992a14b2ae4f4edd9c60b5a430bea
• baremetal-runtimecfg git 9c5da32b sha256:9957b6864fd1d4d65de26cdb3564cb7daa7baa2d844a125491e428761b6ed9fd
• cluster-bootstrap git 6665cae3 sha256:94c2440662e5db8a833faaf015437bdd2f4b12c0255497a604033d5c3fcd0fb7
• cluster-config-operator git 07e059a6 sha256:26f67e175ac397ad886a4abf7701f2c0c75858df5c07aee640ff1f5a431e1eab
• cluster-csi-snapshot-controller-operator git fc036b59 sha256:18e7a38c5e6d50e5df0726e9d11731e0a7ce63cf61a1e3f276fc5968f7814c8e
• cluster-dns-operator git cf8be7b2 sha256:5e81b91bdd17dc8bff7220834eb92f91f37582ca48399bb43e77e43dff1aa9f7
• cluster-kube-controller-manager-operator git 28159093 sha256:acc23fd4f74908a1b086746ee0707226b2b1793daf47523af2ab7079b4da1b43
• cluster-kube-scheduler-operator git b2204ca2 sha256:887f309c3e4197c09ec68bdb6f6a7360de94c627f231f52a93a18974e63f9d63
• cluster-kube-storage-version-migrator-operator git 54484757 sha256:31ffeb4c6f2f339d4a409a63a5c6e42e2120eb41be39290ba883b0eb4946ecf2
• cluster-machine-approver git 9043e2bb sha256:c4c590e781ae6799d0c62540d9bd7223c35c3c76f732f45606e251868164e673
• cluster-policy-controller git 42791bac sha256:2aff5cff95f9198f8b722e31c71ddeb81e8a43baf6a91baa6fd212f1b8e991f8
• cluster-update-keys git b7e79177 sha256:eab7e1b6ae135b49a2282cd87277db7804b840b942b145112a102b3da3654f04
• container-networking-plugins git fc27124d sha256:01b1b2da7572853dc33a189ada591f81ba4173dca82eb2728399a4442bd43d5d
• coredns git d4a3ba3f sha256:8e2feb5f21cb2d24d560520d9d591878f88c53c98887c332b841452c48f875bf
• csi-driver-nfs git 9404d343 sha256:0673326fa76ab42b74d59c3bd2a84bf2f4a78a3dd8e212dcbeeaad7ad10700ad
• csi-external-attacher git f152de8a sha256:b4de03af5fb824decd9a1b56d7d3d8ae0627b0c76c2358abb0e0dbe7ed80c542
• csi-external-provisioner git a49415e1 sha256:89b6154e530ac9b3a3d0bb9476ddfdb9c1b699155e96f77d196a063889874e69
• csi-external-resizer git f77279e9 sha256:2ed04744561478101a3c38aa71403bdf544d5f148a79eeb42d2e86ee47c7ced6
• csi-external-snapshotter git 26773735 sha256:299bf991712eab4e2abfe0a5721602931a9353cca44125a0aa2714afd167c4b2
• csi-livenessprobe git 3dad0280 sha256:5169dab58e9554a6ab2fedaee853caa5b1505ed300d8182e18bc6131d2a90e24
• csi-node-driver-registrar git 2a77963e sha256:be724c33f7e083641417d4102db967891bf2146c620a8004dedef89fc85ed674
• csi-snapshot-controller git 26773735 sha256:e7fb8427a87a68c6491a8a1828cc647158d7c7dc0affd8ea576a61b2ccb9a355
• csi-snapshot-validation-webhook git 26773735 sha256:db270f6f18546be03e54d6f43b7e82869980d0630340baa65a05de42cb80c6e2
• egress-router-cni git 96ebd378 sha256:62958dba86e04152851edbd50486986dcdb6cf814da67690670b4bb88d44752e
• etcd git c61e5afd sha256:a96efb996b13b60c09c5bf1365210b88849343c61bd1454628e38778078e0832
• gcp-machine-controllers git 5f6589d4 sha256:0490886b709c02278d6283257d42de4492be2ff2942f8419429701d1cde83af5
• grafana git b02c35dc sha256:fc9aafa677bc2ef82a5d4c4388835f01b0311bb163d0327f33af4bb2d6ca2a5e
• ironic git 1a7f41bb sha256:b7e4798d4d61ef7fb765a4741fc4026ad149a962a8c5c2204a1cb6486333afd3
• ironic-static-ip-manager git 43d640a0 sha256:41d319973a16a5332f81e5da75a8bd2a6108c15ee4068b3351815f79a7d58c10
• k8s-prometheus-adapter git 212d80b4 sha256:53d015faf08ae8417506231fde51782c866e66987ee7afb888c0dbb55d18d624
• keepalived-ipfailover git 0e45f638 sha256:28f119fc58573d83a662fa3180761f171a07e016494467684a15a2ae1f60f3c5
• kube-rbac-proxy git 14c288e6 sha256:2afd56ec697823a4a6922a3b40ad910c92ff5c7f777bff912de1ffae8ff372a7
• kube-state-metrics git 04bff708 sha256:86a8fb6da09629a384ecb0d9088fcd6d690131a30d56667426b9b9af31e92bda
• kube-storage-version-migrator git 329a4b06 sha256:56f587ace47c9cc7ea872b8a3dbff1ff1b06d8a10f6ad2ae254db773d217f888
• machine-os-content sha256:45049dc73c36d7054d95b86ae0b0435035ad3c2c2c42af7613a4b4f397d41982
• multus-admission-controller git a7312f5e sha256:3c32650965caebad97133149a9dbbe2422f9b6f68bb656d5b7d519a330364745
• multus-cni git 5530094d sha256:1b2c2d6928aefb3914ba7cd735b34bb20807a76b8e618541ce9a1cb6face9ea4
• multus-route-override-cni git 1662c3ec sha256:6783f646f01506b1a7fccc7afd967816d4233412f173d3f11073f2df75265466
• oauth-apiserver git 69f527e9 sha256:b5ae05d9ff364bddf403aa3a5bd0e48615aa2c1151d43944a48c5ae26a54e871
• openshift-state-metrics git 40b0968e sha256:e2a7f2b1dde755d190988d48670a27cd19f9760d9beac6612b76a712a0ba4c72
• ovirt-csi-driver git 72545e63 sha256:a6ebafe73df87942794579127d027db0abf549b2828a08878c787c2d76d9994d
• pod git 0e45f638 sha256:5c177921c52b1594a8919b83fc84da5ea31309d673e551fc910719705a155c28
• prom-label-proxy git db87872c sha256:d9d05f59d120f502c7aa27d578ce0cbaeeb3f38db45ec3819bda449178e72807
• prometheus git cb5e53cd sha256:7d36b4c94a6796fa9783e7ad71990351ddc3f6728b75d56f23c983496a886285
• prometheus-alertmanager git 9954cc42 sha256:4f985df26def6f3eb7045064639b3160ed7a0bc278752ac7808c67341c6a9ad2
• prometheus-config-reloader git 1f0fd51d sha256:4a33fdd4e0a508fc9c18b871b69d5e2040973080c7e7d5df38bd5c9b69a8ff7a
• prometheus-node-exporter git 76974e2e sha256:69863d18c065012844dfabc901b602a762b6219100b3a4ebf0a09776ddf55c8d
• prometheus-operator git 1f0fd51d sha256:4871a8dba8d57becf8f0cd7d94c528d9620739d9d5b8193ac1bb044922657fa1
• telemeter git e4dac512 sha256:09e971cba7b814484365d0584772c170e50bc4bb8a81a0c466116d28a6bf4b52

aws-ebs-csi-driver-operator

• Bug 1996070: Add maxUnavailable to DaemonSets #135
• Full changelog

aws-machine-controllers

• Bug 1976192: update aws-sdk-go to v1.38.25 #415
• Bug 1942966: Update EC2 instance types #398
• Full changelog

baremetal-installer, installer, installer-artifacts

• Bug 1973367: baremetal: pass IP_OPTIONS to os downloader #5013
• Bug 1928761: Validation of platform.openstack.machineSubnet #5434
• Bug 1964753: Bump RHCOS 4.7 boot image #5229
• Update OWNERS #5243
• Bug 1980866: [4.7] Prefer IPv6 hostIP on bootstrap IPv6 deployments #5067
• Bug 1981553: [release-4.7] aws: move elastic ip permissions to create networking category #5055
• Bug 1954595: Validate noProxy input and add prefix for proxy urls #5060
• OWNERS: add more core team members as approvers #5123
• Bug 1977481: Dockerfile: repin libvirt #5043
• Bug 1975819: upi/vsphere: Use Afterburn guestinfo for static IP and hostname config #5025
• Bug 1974282: gather: collect networking information in log bundle #5017
• Bug 1971163: Updating AWS instance types #4992
• Bug 1945467: aws: allow use of unknown regions in known partitions #4807
• Bug 1938426: Set default values to machine pools before validation #4750
• Full changelog

baremetal-machine-controllers

• Updating baremetal-machine-controller images to be consistent with ART #161
• Bug 1938967: Updating baremetal-machine-controller builder & base images to be consistent with ART #134
• Full changelog

baremetal-operator

• Bug 1972430: Don’t deprovision provisioned host due to error #159
• Bug 1961341: config: use rbacv1 instead of rbacv1beta1 #148
• Full changelog

cli, cli-artifacts, deployer, tools

• Bug 2004194: Registry mirror panic #927
• Bug 1995074: revert incorrect allowance of ssh:// prefix with scp styled URLs #902
• Bug 1974264: make oc logs work with BuildConfig’s JenkinsPipeline strategy #864
• Bug 1976284: skip-multiple-scopes with adm catalog mirror #869
• Bug 1963784: Preserve AuthInfo when switching projects #861
• Full changelog

cloud-credential-operator

• Bug 2027750: Check for aws status in infra platform status field before client setup #427
• Full changelog

cluster-authentication-operator

• Bug 2003633: manifests, bindata: explicitely set runAsUser for operator and operand #485
• Updating ose-cluster-authentication-operator builder & base images to be consistent with ART #408
• Bug 1971087: add a controller to remove webhooktokenauthenticator config #418
• Full changelog

cluster-autoscaler

• Bug 1924416: Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #204
• Full changelog

cluster-autoscaler-operator

• Bug 1961341: manifests: use v1 for RBAC #206
• Full changelog

cluster-baremetal-operator

• Bug 1976924: Update bmh crd #190
• Bug 1933726: provisioning: configure DHCP range with netmask #112
• Bug 1973367: Pass IP_OPTIONS=dhcp|dhcp6 down to OS Downloader container #171
• Bug 1972291: Use a cache URL with the .svc.cluster.local suffix #161
• Full changelog

cluster-etcd-operator

• Bug 1976988: [release-4.7]: Increase inertia duration for the EtcdMembersDegraded condition #618
• Bug 1976287: Validate the status of the etcd snapshot during backup and restore #617
• Bug 1951447: pkg/etcdenvvar/etcd_env.go: Sort endpoints to prevent rollout #568
• Full changelog

cluster-image-registry-operator

• Bug 1988388: Properly set custom tolerations #708
• Bug 1984979: Creating StorageAccount V2 instead of V1 #707
• Updating ose-cluster-image-registry-operator builder & base images to be consistent with ART #651
• Bug 1977159: bump aws-sdk-go to v1.38.35 #704
• Bug 1973693: Setting required pod anti-affinity rules #697
• Full changelog

cluster-ingress-operator

• Bug 1996897: Add startup probe to the router deployment #645
• Bug 1978845: Specify topology spread constraints #632
• Bug 1973983: Canary: Handle downgrades from 4.8 to 4.7 properly #627
• Bug 1960776: Reconcile openshift-ingress namespace on upgrade #616
• Full changelog

cluster-kube-apiserver-operator

• Bug 2001243: Enforce OpenShift’s defined kubelet version skew policies #1223
• Full changelog

cluster-monitoring-operator

• Bug 2014023: Backport etcd telemetry #1433
• Bug 1986591: node exporter calls /proc/cpuinfo multiple times causing the node to freeze #1300
• Full changelog

cluster-network-operator

• Bug 1924839: [release-4.7] Update protobuf version to address CVE-2021-3121 #1084
• Bug 1990932: [Backport 4.7] Whereabouts should have RBAC for leases #1186
• Bug 2003800: Use 10% for sdn maxUnavailable for rolling update #1202
• Bug 1996063: Use 10% for nw-check-target maxUnavailable #1184
• Bug 1988426: Change to use mountPath: /host #1170
• Bug 1962036: Use the election mechanism provided by library-go #1098
• Bug 1972549: Remove reference to v1beta1 API #1134
• Bug 1982217: Use 10% for ovnkube-node for maxUnavailable #1153
• Bug 1969860: Escape characters on ini file #1127
• Bug 1967994: Backport daemonset to drop icmp frag needed packets received from other nodes in the cluster to Rel 4.7 #1119
• Bug 1972183: config: Set enable-profiling true by default and allow enable-profiling as a proxy argument #1129
• Full changelog

cluster-node-tuning-operator

• Bug 2014430: stalld: update to v1.13.0 #281
• Bug 1986739: gather all Tuned CRs #255
• Bug 1958885: Switch to client-go leader-with-lease election. #238
• Full changelog

cluster-openshift-apiserver-operator

• Bug 1996045: bindata: run openshift-apiserver as root explicitly. #468
• Updating ose-cluster-openshift-apiserver-operator builder & base images to be consistent with ART #427
• Full changelog

cluster-openshift-controller-manager-operator

• Bug 1924494: Update k8s.io dependencies to address CVE-2021-3121 #222
• Full changelog

cluster-samples-operator

• Bug 2001977: delete hello-openshift in payload imagestream #393
• Bug 1923036: Update Jenkins monitored templates names #359
• Full changelog

cluster-storage-operator

• Bug 2030740: Add trusted CA bundle to vsphere operators #248
• Bug 1986030: Manila CSI driver is not in must-gather #193
• Full changelog

cluster-version-operator

• Bug 2007674: pkg/cvo/egress: Load HTTPS proxy from Proxy status #664
• Bug 1961341: Remove rbacv1beta1 support #652
• Bug 1991010: pkg/cvo/metrics: Ignore Degraded for cluster_operator_up #638
• Bug 1924428: CVE-2021-3121 gogo/protobuf lacks certain index validation #625
• Bug 1970272: Fixing the log message in rbac.go for clusterrole #609
• Full changelog

configmap-reloader

• Updating configmap-reload builder & base images to be consistent with ART #27
• vendor: regenerate #31
• Full changelog

console

• (4.7 Backport) Bug 1981412: Change OCM links from cloud. to console.redhat.com #9470 #9471
• Bug 2005298: Block and File and Object dashboards should not be part of OCP Console for ODF Managed Services #10097
• Bug 2005138: Console overview operators shown upgrading when still waiting on approval #10093
• [release 4.7] Bug 1969754: windows vms fail to start rls 4.7 #9657
• Bug 2004946: Use httpd in workload YAML templates #10089
• Bug 1973707: Add chart URl to annotations during helm install/upgrade #9299
• Bug 1995617: Fix Pipeline Download All #9839
• Bug 1986724: Show the content of Insights widget when there are 0 recommendations for cluster #9655
• Bug 1989642: Preserve user annotations while editing an app #9714
• Bug 1975560: Fix typo in olm message #9335
• Bug 1975469: Handle array to string conversion for HTTPS checkbox value #9332
• Updating openshift-enterprise-console images to be consistent with ART #8596
• Bug 1973572: Hardcode strings in Home->Overview page #9322
• Bug 1942864: Warning Alert for Encrypted PVs in Create StorageClass #8464
• Bug 1965526: Removing library charts from the merged helm repo index entries. #9076
• Bug 1970796: update cluster-local label for ksvc #9220
• Bug 1970720: fix rotated pipelinerun status icon issue in safari #9216
• Bug 1969536: Omit bitbucket branch in URL if it contains slash #9180
• Bug 1954962: removes extra annotations form spec template for ksvc #8823
• Bug 1948537: add hide/reveal button for kms token #8616
• Bug 1942160: Update the scope of GitOpsService resource #8450
• Bug 1971667: Track and show error messages in modals #9232
• Full changelog

console-operator

• Bug 2016654: Use hard requirements for antiaffinity rules #605
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver

• Bug 1969345: Backport ignore proxy connecting to CSI sockets #54
• Full changelog

csi-driver-manila-operator

• Bug 2002555: Do not degrade cluster on failure to reach Manila #126
• Bug 1987036: Use cluster Proxy when available #110
• Bug 1996070: Add maxUnavailable to DaemonSets #116
• Full changelog

docker-builder

• Bug 1995074: bump(s2i): revert incorrect ssh scp fix #261
• Bug 1924455: Update dependencies to address CVE-2021-3121 #258
• Full changelog

docker-registry

• Bug 1984094: use apimachinery with HTTP/2 health checks enabled #288
• Updating openshift-enterprise-registry builder & base images to be consistent with ART #262
• Bug 1977159: bump aws-sdk-go to v1.38.35 #282
• Full changelog

driver-toolkit

• Bug 1985545: Use kernel config to determine GCC version #56
• Bug 1985545: Remove curl of extract-vmlinux #50
• Bug 1985546: /etc/driver-toolkit-release.json kernel version match rpm -q output #51
• Bug 1976302: Cherry pick gcc to release 4.7 #41
• Bug 1975480: DPDK KNI modules need some additional tools #40
• Bug 1975479: Requirements for authenticating kernel modules with X.509 keys #39
• Full changelog

gcp-pd-csi-driver

• Updating ose-gcp-pd-csi-driver builder & base images to be consistent with ART #10
• Full changelog

gcp-pd-csi-driver-operator

• Bug 1996070: Add maxUnavailable to DaemonSets #33
• Full changelog

haproxy-router

• Bug 1994645: config template: accept IPv6 IPs for whitelisting #325
• Full changelog

hello-openshift, tests

• Bug 2034370: test: Nodes that are deleted should not fire the unready alert #26716
• Bug 2031104: Skipping Django Test until bug is fixed #26688
• Bug 2022188: Add more tests for image policy #26626
• Bug 2019520: Skip test ‘clone repository using git:// protocol should clone using git:// if no proxy is configured’ #26563
• Bug 1983616: Wait longer in tests where namespace cleanup is slow #26282
• Bug 1982929: Improve GC Check for Builds #26334
• Re-enable quota test #26284
• Bug 1980540: Use cluster-logging for operator installation smoke test. #26315
• Bug 1977383: [release-4.7] Update resource quota test for compatibility with service ca configmap publishing #26303
• Bug 1928862: [4.7] Bump openshift/kubernetes #26259
• Bug 1978000: builds: comment out multi-namespace template test #26296
• NOOP - Trigger a new CI build #26291
• Bug 1977383: [release-4.7] Skip cluster quota test to enable service ca publisher to merge to o/k #26283
• Full changelog

hyperkube

• Bug 2024996: Fix subpath source check #1068
• Bug 2022720: UPSTREAM: 106261: Don’t guess SELinux support on error #1055
• Bug 2022188: Image policy should mutate DeploymentConfigs, StatefulSets, and new CronJobs #1073
• Bug 2022259: Rebase v1.20.12 #1046
• Bug 1939537: UPSTREAM: 100678: apf: exempt probes /healthz /livez /readyz #658
• Bug 1926724: UPSTREAM: 98028: add auto update for priority & fairness bootstrap configuration objects #563
• Bug 2008508: Rebase v1.20.11 #982
• Bug 1993753: UPSTREAM: 104348: Pass additional flags to subpath mount to avoid fla… #941
• Bug 2003027: Rebase 1.20.10 #935
• Bug 1996846: UPSTREAM: 98571: kubelet: Stop probing a pod during graceful shutdown #901
• Bug 1973766: 4.7: Do not throw error when we can’t get canonical path #881
• Bug 1981775: Bump apiserver libary go 4.7 #879
• Bug 1981634: UPSTREAM: <drop>: use the legacy service-ca.crt content for clusters started in 4.7 or before #857
• Bug 1977383: [release-4.7] Ensure service ca configmap is created in all namespaces #834
• Bug 1977383: [release-4.7] Fix watch conformance test #843
• Bug 1977383: Update resource quota test for compatibility with service ca configmap publishing #839
• Bug 1975553: only chown if non-windows machine with projected volumes #826
• Bug 1928862: [release-4.7] UPSTREAM: <carry>: kube-apiserver: ignore SIGTERM/INT after the first one #739
• Full changelog

insights-operator

• Bug 2028092: gather webhook configurations (#508) (#561) #508
• Bug 2026659: Gather all the container logs from related namespaces of degraded clusteroperator (#516) (#555) #516
• Bug 2026410: Fix PDB gatherer (#552) #552
• Bug 2024614: Anonymize identity provider attributes in the (#520) (#527) (#541) (#549) #520
• Bug 2022637: Anonymize the ImageRegistry storage information also in status (#546) #546
• Bug 2002539: Fix wrong rebase of PSP gatherer (#512) #512
• Bug 2002539: Gather installed PSP names (#489) (#493) #489
• Bug 1982170: Set also the summary operation when updating status (#480) #480
• Full changelog

ironic-hardware-inventory-recorder

• Updating ironic-hardware-inventory-recorder-image builder & base images to be consistent with ART #502
• Full changelog

ironic-inspector

• Bug 2002405: Sync inspector to include the latest bugfixes for 4.7 #70
• Full changelog

ironic-ipa-downloader

• Bug 2013591: Bump IPA version to 15.2-20211013.1 #86
• Bug 1963210: Add support for no_proxy #78
• Full changelog

ironic-machine-os-downloader

• Bug 1963210: Add support for no_proxy #53
• Bug 1973367: Modify dhcp kernel args based on ipv4/ipv6 #55
• Bug 1971549: Unconditionally remove TMPDIR #45
• Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

• Bug 2020613: Update Jenkins and plugins per 2021-11 advisory #1348
• Bug 1972361: Bump jenkins version 2.289.2 #1281
• Full changelog

kube-proxy, sdn

• Bug 2005494: Support allow-from-router feature using openshift-host-network namespace #300
• Bug 2002291: [4.7] proxy: don’t re-check every userspace proxy rule on every change #348
• Bug 1987297: when assigning and releasing egressIP try more than once before failing #327
• Bug 2001531: improve SDN’s OVS healthcheck and logging #343
• Bug 1995872: Disable conntrack for vxlan traffic #338
• Bug 1971669: Fix 4.7 SDN Egress Network Policy #334
• Full changelog

kuryr-cni, kuryr-controller

• Bug 2028396: Make completed Pods Ports reusable #608
• Bug 2018244: Update TOX_CONSTRAINTS_FILE for stable/xena #588
• Bug 2001518: Increase keystoneauth’s connection pool size #554
• Bug 1972631: Workaround OVN bug causing subports to be DOWN #525
• Full changelog

libvirt-machine-controllers

• Updating ose-libvirt-machine-controllers builder & base images to be consistent with ART #212
• Full changelog

machine-api-operator

• Bug 2022839: GCP CI runs are complaining about APIs not being enabled #954
• Bump some SHAs #937
• Bug 1993118: Make sure nodes don’t have attached volumes before vm deletion #904
• Bug 1999590: [release-4.7] add alert for machine with long deletion phase #907
• Bug 1989648: Prevent machine from stucking in Deleting phase on vSphere if related node object not found #895
• Bug 1933586: Make sure phase is always set before creation #858
• Full changelog

machine-config-operator

• Bug 2028525: [Release 4.7] daemon: make cordon/uncordon more robust and better logging #2854
• Bug 2026825: Send WARN message to stderr #2841
• Bug 1988102: [IPI ON-PREM] move Keepalived default ingress script to separate file #2825
• Bug 1975174: configure-ovs: fix nondeterministic master in slave profiles #2640
• Bug 2008692: Don’t write empty static pod manifests #2783
• Bug 1995621: Backport fix 1 to 1 relation to kubelet configs and machine config pools #2759
• Bug 2011375: templates: Silence audit events from container infra by default #2792
• Bug 2008759: Set timeoutSeconds for keepalived liveness probe #2773
• Bug 2008588: Check suffix annotation is a number #2781
• Bug 2004581: Set ovs syslog level to info #2767
• Bug 2000501: bump SystemMemoryExceedsReservation alert threshold to 95% #2749
• Bug 1989751: [on-prem] Disable liveness probe until keepalived.conf exists #2701
• Bug 1995853: Gracefully shutdown taking around 6-7 mins (libvirt provider) #2727
• Bug 1988102: [release-4.7] On-prem: add default ingress track script to Keepalived #2697
• Bug 1998112: vSpehere: disable vmxnet3 tx csum offload #2738
• Bug 1995810: crio: complete crio default config #2725
• Bug 1992240: change system-connections-merged directory to systemConnectionsMerged #2709
• Bug 1956462: ensure SSH key uniqueness #2563
• Bug 1993386: crio: use conmon from path #2715
• Bug 1992687: alerts: SystemMemoryExceedsReservation triggers too quickly #2710
• Bug 1970166: MCO: maxUnavailable of ds/machine-config-daemon does not get updated due to missing resourcemerge check #2682
• Bug 1977432: crio: enable internal_wipe option #2649
• Bug 1970590: daemon: Change runGetOut to not intermix stdout/stderr #2609
• Bug 1976232: Explicitly set keyfile as the default plugin of NetworkManager for RHEL7 #2641
• Bug 1971864: Stop setting nopreempt on bootstrap keepalived.conf #2616
• Bug 1973006: daemon: cordon the node before performing drain #2623
• Bug 1961341: rbac: update remaining apis to v1 #2620
• Bug 1971374: daemon/drain.go: bump initial drain sleeps down to 1min #2612
• Full changelog

mdns-publisher

• Bug 2004537: Update zeroconf vendoring #39
• Bug 1983695: [release-4.7] Truncate long service names to 63 characters #34
• Full changelog

multus-whereabouts-ipam-cni

• Bug 1965268: Syncs with upstream for leader election [backport 4.7] #65
• Full changelog

must-gather

• Updating ose-must-gather builder & base images to be consistent with ART #202
• Bug 1954302: Add ovs related services to GENERAL_SERVICES #229
• Full changelog

network-metrics-daemon

• Change repo from Docker to quay.io (#44) #44
• Updating ose-network-metrics-daemon images to be consistent with ART (#32) #32
• Full changelog

oauth-proxy

• Updating golang-github-openshift-oauth-proxy builder & base images to be consistent with ART #198
• Full changelog

oauth-server

• Updating oauth-server images to be consistent with ART #90
• Full changelog

openshift-apiserver

• Bug 2022188: Image policy should mutate DeploymentConfigs #261
• Bug 1995074: revert incorrect ssh scp fix #242
• Bug 1965402: Revert ‘Bug 1965402: Enhance API host name validation’ #211
• Full changelog

openshift-controller-manager

• Bug 1924531: Update k8s.io dependencies to address CVE-2021-3121 #191
• Full changelog

openstack-cinder-csi-driver-operator

• Bug 2016286: Fix error when mounting /var/lib/kubelet/pods #58
• Bug 1996070: Add maxUnavailable to DaemonSets #54
• Full changelog

openstack-machine-controllers

• Bug 2000551: Adds Proxy to provider client http transport #200
• Full changelog

operator-lifecycle-manager

• Fix kubebuilder installation in the build root Dockerfile #2351
• Bug 1982693: remove cleanup from startup #2287
• Bug 1972075: Add OperatorCondition status sync and update operator upgradeable check #2206
• Full changelog

operator-marketplace

• Bug 1961341: [release-4.7] Update openshift rolebindings to v1 #409
• Full changelog

operator-registry

• Bug 1968680: fix(containerd): drop xattrs during unpack #676
• Full changelog

ovirt-csi-driver-operator

• Bug 1996070: Backport maxUnavailable: 10% for DaemonSets #69
• Full changelog

ovirt-machine-controllers

• Bug 2001287: correct IPAddress detection for OVNKubernetes #120
• Full changelog

ovn-kubernetes

• Bug 2039282: filter out KubeAPIAuth when logging CNI requests #906
• Bug 2034506: Make config parsing more resilient for unknown fields #882
• Bug 2027874: [4.7z] Fixes race between node handler and pod sync #859
• Bug 2019093: Not exit when ovnkube runs with ‘–gateway-interface none’ #820
• Bug 2027468: 4.7 backport #850
• Bug 2014360: [4.7z] Scale fixes for pods/exgws #799
• Bug 2011402: [4.7] bump OVN to 20.12.0-183.el8fdp #786
• Bug 1935149: Resync node management port on subnet change #456
• Bug 2005519: [4.7z] Remove waiting for namespace and namespace lock contention #766
• Bug 2005468: [4.7z] Fixes skipping pods accidentally in retry #759
• Bug 2007653: Fix ensurePod to call addPortExternalGW only for annotation updates #765
• Bug 2006159: Fix duplicate incrementing of subnet allocation metric #764
• Bug 2004489: panic after EgressFirewall deletion and DNS record expiration #751
• Bug 2007665: [4.7z] Ensure host interfaces are deleted by CNI #769
• Bug 2005391: [4.7z] Fixes misuse of pod annotations during update event #754
• Bug 2005913: [4.7z] Sync ECMP routes on startup and fixes stale ECMP routes #763
• Bug 2001543: fix reserve joinSwitch LRP IPs #721
• Bug 2001364: [4.7z] Ensure client handling of canceled/dropped OVSDB monitor #719
• Bug 2001998: egressfirewall not set after upgrade #724
• Bug 1988495: Fix LocalGatway ExternalIP #638
• Bug 1999896: Revert “[release-4.7] fix reserve joinSwitch LRP IPs” #707
• Bug 1997574: Fix: sync egress IP for missed events on start-up #687
• Bug 1976242: Update existing policy ACLs on start #650
• Bug 1997104: fix reserve joinSwitch LRP IPs #683
• Bug 1995910: Backport ovnkube-trace requires ip package to be installed #674
• Bug 1991445: Bump OVN to 20.12.0-140.el8fdp #649
• Bug 1967132: policy: handle NetworkPolicies single “from” multiple “ipBlock” #562
• Bug 1985516: Add v6 management interface address for host network policy #625
• Bug 1962608: ensure missed events are handled during a reconnection #547
• Bug 1972484: egress firewall as ACLs + service connectivity fixes #592
• Bug 1940566: Properly log when hybrid overlay errors out #543
• Bug 1970779: Remove getDefaultIfAddr and use getNetworkInterfaceIPAddresses #571
• Full changelog

service-ca-operator

• Bug 1981634: add vulnerable legacy injector to allow for upgrade clusters to use #170
• Full changelog

thanos

• Bug 1994123: dockerignore: remove vendor from ignored list #69
• Full changelog

vsphere-problem-detector

• Bug 2039341: Deferred logout after checks are run #70
• Full changelog

---

View changelog in Markdown or change previous release: 4.19.0-0.nightly-2025-01-17-2249264.19.0-0.nightly-2025-01-17-1620104.19.0-0.nightly-2025-01-17-0954454.19.0-0.nightly-2025-01-17-0458164.19.0-0.nightly-2025-01-16-2222224.19.0-0.nightly-2025-01-16-1437254.19.0-0.nightly-2025-01-16-0647004.19.0-0.nightly-2025-01-15-2337364.19.0-0.nightly-2025-01-15-0605074.19.0-0.nightly-2025-01-15-0138434.19.0-0.nightly-2025-01-10-0022474.19.0-0.nightly-2025-01-08-1650324.19.0-0.nightly-2025-01-08-0823574.19.0-0.nightly-2025-01-07-1245514.19.0-0.nightly-2025-01-07-0524314.19.0-0.nightly-2025-01-06-2125124.19.0-0.nightly-2025-01-05-1325384.19.0-0.nightly-2025-01-04-1535384.19.0-0.nightly-2025-01-04-074737───4.19.0-0.ci-2025-01-17-2133474.19.0-0.ci-2025-01-17-1533474.19.0-0.ci-2025-01-17-0933474.19.0-0.ci-2025-01-17-0333474.19.0-0.ci-2025-01-16-2133474.19.0-0.ci-2025-01-16-1533474.19.0-0.ci-2025-01-16-0933474.19.0-0.ci-2025-01-16-0333474.19.0-0.ci-2025-01-15-2133474.19.0-0.ci-2025-01-15-1533474.19.0-0.ci-2025-01-15-033347───4.18.0-0.nightly-2025-01-18-0222584.18.0-0.nightly-2025-01-17-1825084.18.0-0.nightly-2025-01-17-1111334.18.0-0.nightly-2025-01-17-0240374.18.0-0.nightly-2025-01-16-1558514.18.0-0.nightly-2025-01-16-0633174.18.0-0.nightly-2025-01-15-0301074.18.0-0.nightly-2025-01-13-1149454.18.0-0.nightly-2025-01-11-0655254.18.0-0.nightly-2025-01-10-0229054.18.0-0.nightly-2025-01-09-0128524.18.0-0.nightly-2025-01-08-0443014.18.0-0.nightly-2025-01-07-2108314.18.0-0.nightly-2025-01-04-101226───4.18.0-0.ci-2025-01-17-2210374.18.0-0.ci-2025-01-17-1610374.18.0-0.ci-2025-01-17-1010374.18.0-0.ci-2025-01-16-2228034.18.0-0.ci-2025-01-16-1628034.18.0-0.ci-2025-01-16-1027274.18.0-0.ci-2025-01-16-0418354.18.0-0.ci-2025-01-15-2218354.18.0-0.ci-2025-01-15-1618354.18.0-0.ci-2025-01-15-1018354.18.0-0.ci-2025-01-15-041835───4.17.0-0.nightly-2025-01-18-0129374.17.0-0.nightly-2025-01-17-1808364.17.0-0.nightly-2025-01-17-1055144.17.0-0.nightly-2025-01-17-0228584.17.0-0.nightly-2025-01-16-1953344.17.0-0.nightly-2025-01-16-1223184.17.0-0.nightly-2025-01-16-0449424.17.0-0.nightly-2025-01-15-0901434.17.0-0.nightly-2025-01-13-1200074.17.0-0.nightly-2025-01-11-0958514.17.0-0.nightly-2025-01-11-0120324.17.0-0.nightly-2025-01-10-1435414.17.0-0.nightly-2025-01-10-0807554.17.0-0.nightly-2025-01-09-2339404.17.0-0.nightly-2025-01-08-1512434.17.0-0.nightly-2025-01-08-0848324.17.0-0.nightly-2025-01-08-0207054.17.0-0.nightly-2025-01-07-1848374.17.0-0.nightly-2025-01-06-223330───4.17.0-0.ci-2025-01-17-2050254.17.0-0.ci-2025-01-17-0835064.17.0-0.ci-2025-01-17-0235064.17.0-0.ci-2025-01-16-1841004.17.0-0.ci-2025-01-16-1241004.17.0-0.ci-2025-01-16-0641004.17.0-0.ci-2025-01-15-2111514.17.0-0.ci-2025-01-15-1511514.17.0-0.ci-2025-01-15-091151───4.16.0-0.nightly-2025-01-17-2206324.16.0-0.nightly-2025-01-17-1253214.16.0-0.nightly-2025-01-16-1705214.16.0-0.nightly-2025-01-16-1108504.16.0-0.nightly-2025-01-16-0354144.16.0-0.nightly-2025-01-15-2002284.16.0-0.nightly-2025-01-15-0524494.16.0-0.nightly-2025-01-14-2323464.16.0-0.nightly-2025-01-14-1531454.16.0-0.nightly-2025-01-13-2009424.16.0-0.nightly-2025-01-13-1532084.16.0-0.nightly-2025-01-12-2142274.16.0-0.nightly-2025-01-11-1120384.16.0-0.nightly-2025-01-11-0112314.16.0-0.nightly-2025-01-10-1339254.16.0-0.nightly-2025-01-10-0637024.16.0-0.nightly-2025-01-09-2028534.16.0-0.nightly-2025-01-09-0515184.16.0-0.nightly-2025-01-08-2114364.16.0-0.nightly-2025-01-08-1440094.16.0-0.nightly-2025-01-08-0805074.16.0-0.nightly-2025-01-08-0051594.16.0-0.nightly-2025-01-04-160422───4.16.0-0.ci-2025-01-17-1821424.16.0-0.ci-2025-01-17-0736224.16.0-0.ci-2025-01-17-0136224.16.0-0.ci-2025-01-16-1929084.16.0-0.ci-2025-01-16-1329084.16.0-0.ci-2025-01-15-2143114.16.0-0.ci-2025-01-15-154311───4.15.0-0.nightly-2025-01-17-2139224.15.0-0.nightly-2025-01-17-1442134.15.0-0.nightly-2025-01-16-2343274.15.0-0.nightly-2025-01-16-1745064.15.0-0.nightly-2025-01-16-0821104.15.0-0.nightly-2025-01-15-2027014.15.0-0.nightly-2025-01-14-1956384.15.0-0.nightly-2025-01-14-0258104.15.0-0.nightly-2025-01-13-1058034.15.0-0.nightly-2025-01-11-0018334.15.0-0.nightly-2025-01-10-090847───4.15.0-0.ci-2025-01-17-2115064.15.0-0.ci-2025-01-17-1344544.15.0-0.ci-2025-01-17-0430094.15.0-0.ci-2025-01-16-1454594.15.0-0.ci-2025-01-16-0213534.15.0-0.ci-2025-01-15-161611───4.14.0-0.nightly-2025-01-17-1802474.14.0-0.nightly-2025-01-17-1230584.14.0-0.nightly-2025-01-16-1858404.14.0-0.nightly-2025-01-16-1121564.14.0-0.nightly-2025-01-15-185800───4.14.0-0.ci-2025-01-18-0308164.14.0-0.ci-2025-01-17-1919564.14.0-0.ci-2025-01-17-0626144.14.0-0.ci-2025-01-16-2224414.14.0-0.ci-2025-01-16-1509554.14.0-0.ci-2025-01-16-0523004.14.0-0.ci-2025-01-15-2323004.14.0-0.ci-2025-01-15-1723004.14.0-0.ci-2025-01-15-1110464.14.0-0.ci-2025-01-15-051046───4.13.0-0.nightly-2025-01-11-0229314.13.0-0.nightly-2025-01-04-0446594.13.0-0.nightly-2024-12-21-1322294.13.0-0.nightly-2024-12-21-0449454.13.0-0.nightly-2024-12-14-1651584.13.0-0.nightly-2024-12-08-1610434.13.0-0.nightly-2024-11-30-0419004.13.0-0.nightly-2024-11-23-101305───4.13.0-0.ci-2025-01-17-1554124.13.0-0.ci-2025-01-14-1858414.13.0-0.ci-2025-01-13-1353214.13.0-0.ci-2025-01-11-0406474.13.0-0.ci-2025-01-10-2118124.13.0-0.ci-2025-01-08-221457───4.12.0-0.nightly-2025-01-17-1008454.12.0-0.nightly-2025-01-16-1949564.12.0-0.nightly-2025-01-09-1559004.12.0-0.nightly-2025-01-08-0215244.12.0-0.nightly-2025-01-06-1258574.12.0-0.nightly-2025-01-02-1853094.12.0-0.nightly-2025-01-01-1642494.12.0-0.nightly-2024-12-31-0833254.12.0-0.nightly-2024-12-20-1940464.12.0-0.nightly-2024-12-19-060643───4.12.0-0.ci-2025-01-17-1235374.12.0-0.ci-2025-01-17-0635374.12.0-0.ci-2025-01-16-1815284.12.0-0.ci-2025-01-10-2214334.12.0-0.ci-2025-01-09-1608284.12.0-0.ci-2025-01-09-0438514.12.0-0.ci-2025-01-08-1634114.12.0-0.ci-2025-01-08-1034114.12.0-0.ci-2025-01-07-032852───4.11.0-0.nightly-2024-07-06-0140574.11.0-0.nightly-2024-07-01-0855474.11.0-0.nightly-2024-04-20-1326214.11.0-0.nightly-2024-04-15-1237064.11.0-0.nightly-2024-04-15-0346274.11.0-0.nightly-2024-03-18-1654324.11.0-0.nightly-2024-03-12-2229304.11.0-0.nightly-2024-02-01-0446274.11.0-0.nightly-2024-01-19-1107024.11.0-0.nightly-2024-01-15-0229494.11.0-0.nightly-2024-01-10-203533───4.11.0-0.ci-2025-01-08-1727074.11.0-0.ci-2025-01-08-1041384.11.0-0.ci-2024-11-14-2201374.11.0-0.ci-2024-11-14-1432224.11.0-0.ci-2024-09-18-0735584.11.0-0.ci-2024-09-17-2036254.11.0-0.ci-2024-07-01-0910384.11.0-0.ci-2024-06-07-1944004.11.0-0.ci-2024-06-05-1627184.11.0-0.ci-2024-06-01-042714───4.19.0-ec.0

Source code for this page located on github