Back to index

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.7.58-x86_64

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
  • upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
• Informing jobs
  • aws Succeeded periodic-ci-openshift-release-master-nightly-4.7-e2e-aws
  • aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.7-e2e-aws-serial

Upgrades from:

• 4.7.57 (changes) - Success Success
• 4.7.56 (changes) - Success
• 4.7.55 (changes) - Success
• 4.7.54 (changes) - Success
• 4.7.53 (changes) - Success
• 4.7.52 (changes) - Success
• 4.7.51 (changes) - Success
• 4.7.50 (changes) - Success
• 4.7.49 (changes) - Success
• 4.7.48 (changes) - Success
• 4.7.47 (changes) - Failed
• 4.7.46 (changes) - Success
• 4.7.45 (changes) - Success
• 4.7.44 (changes) - Failed
• 4.7.43 (changes) - Success
• 4.7.42 (changes) - Success
• 4.7.41 (changes) - Failed
• 4.7.40 (changes) - Success
• 4.7.39 (changes) - Success
• 4.7.38 (changes) - Success
• 4.7.37 (changes) - Failed
• 4.7.36 (changes) - Failed
• 4.7.35 (changes) - Success
• 4.7.34 (changes) - Failed
• 4.7.33 (changes) - Success
• 4.7.32 (changes) - Success
• 4.7.31 (changes) - Failed
• 4.7.30 (changes) - Success
• 4.7.29 (changes) - Failed
• 4.7.28 (changes) - Success
• 4.7.26 (changes) - Success
• 4.7.25 (changes) - Failed
• 4.7.24 (changes) - Failed
• 4.7.23 (changes) - Success
• 4.7.22 (changes) - Failed
• 4.7.21 - Failed
• 4.7.20 (changes) - Success
• 4.7.19 (changes) - Success
• 4.7.18 (changes) - Success
• 4.7.17 (changes) - Failed
• 4.7.16 (changes) - Failed
• 4.7.15 (changes) - Success
• 4.7.14 (changes) - Failed
• 4.7.13 (changes) - Failed
• 4.7.12 (changes) - Success
• 4.7.11 (changes) - Failed
• 4.7.10 (changes) - Failed
• 4.7.9 (changes) - Success
• 4.7.8 (changes) - Success
• 4.7.7 (changes) - Failed
• 4.7.6 (changes) - Success
• 4.7.5 (changes) - Failed
• 4.7.4 (changes) - Failed
• 4.7.3 (changes) - Success
• 4.7.2 (changes) - Failed
• 4.7.1 (changes) - Success
• 4.7.0 (changes) - Failed
• 4.6.61 (changes) - S F F F S
• 4.6.60 (changes) - Success
• 4.6.59 (changes) - Success
• 4.6.58 (changes) - Success
• 4.6.57 (changes) - Success
• 4.6.56 (changes) - Success
• 4.6.55 (changes) - Success
• 4.6.54 (changes) - Success
• 4.6.53 (changes) - Success
• 4.6.52 (changes) - Failed
• 4.6.51 (changes) - Success
• 4.6.50 (changes) - Success
• 4.6.49 (changes) - Failed
• 4.6.48 (changes) - Success
• 4.6.47 (changes) - Failed
• 4.6.46 (changes) - Failed
• 4.6.45 (changes) - Success
• 4.6.44 (changes) - Failed
• 4.6.43 (changes) - Failed
• 4.6.42 (changes) - Success
• 4.6.41 (changes) - Failed
• 4.6.40 (changes) - Success
• 4.6.39 (changes) - Success
• 4.6.38 (changes) - Failed
• 4.6.37 (changes) - Failed
• 4.6.36 (changes) - Success
• 4.6.35 (changes) - Failed
• 4.6.34 (changes) - Failed
• 4.6.33 (changes) - Success
• 4.6.32 (changes) - Failed
• 4.6.31 (changes) - Failed
• 4.6.30 (changes) - Success
• 4.6.29 (changes) - Failed
• 4.6.28 (changes) - Failed
• 4.6.27 (changes) - Success
• 4.6.26 (changes) - Failed
• 4.6.25 (changes) - Failed
• 4.6.24 (changes) - Success

Upgrades to:

• 4.8.56 (changes) - Success
• 4.8.55 (changes) - Success
• 4.8.54 (changes) - Failed
• 4.8.53 (changes) - Success
• 4.8.52 (changes) - Failed
• 4.8.51 (changes) - Failed
• 4.8.50 (changes) - Failed
• 4.8.49 (changes) - F F F S F S S
• 4.7.60 (changes) - Success
• 4.7.59 (changes) - Success Failed

---

Changes from 4.7.21

Created: 2022-09-02 10:43:25 +0000 UTC

Image Digest: sha256:dee33ede78272450743ede855e1a2f1611500e388be212ec0cde68d45b801fa7

Release 4.7.58 was created from registry.ci.openshift.org/ocp/release:4.7.0-0.nightly-2022-08-31-025349

Components

• Kubernetes upgraded from 1.20.0-beta.2 to 1.20.15
• Red Hat Enterprise Linux CoreOS upgraded from 47.83.202107210005-0 to 47.84.202208302213-0 (diff)

Rebuilt images without code change

• aws-ebs-csi-driver git f6a71bf7 sha256:db8eb0faf92970b494d1005fb643109e5a715a2851ce0d059750707a928ac046
• aws-machine-controllers git 5368195c sha256:650c79089f318a474f61d0b58dbc73e0465f2a26f3ca169637f83f1b116866f9
• baremetal-operator git e36cbc13 sha256:0a68b978db1f808d67e3e1afa2a8bfe039d83ef8e9e4a3795491c8c511379504
• baremetal-runtimecfg git 9c5da32b sha256:34e2e111d3995951b79c7e4d11eeace7addcf0986f9ce7724dfdc2b5614d58a3
• cluster-bootstrap git 6665cae3 sha256:63202b33482e49e95c7bc184f05b33a9555bbabe92e000f7abd4178e9f90ee5d
• cluster-config-operator git 07e059a6 sha256:868485b4534d647e06115d696fb1d890b247ec7bfd30c0ee2dfe373853d51a96
• cluster-csi-snapshot-controller-operator git fc036b59 sha256:e10ba7de470bd257d44dbb9991501554b1fe621d34325538b3cc7a8378f0e6e8
• cluster-dns-operator git cf8be7b2 sha256:94e34fbb0d37d64e0ee38b4f5c0a147217438b1a8a7b7801cd2ebb256e545789
• cluster-etcd-operator git 51cb8c41 sha256:0ea10429de481e5265212d35d7766eed47f7be91c869e309c04ab3b70a7f96a9
• cluster-kube-controller-manager-operator git 28159093 sha256:06c1bf96da4e19754aa8564df3317f2cdd1e57c64131440dd28ea118dd65d4b6
• cluster-kube-scheduler-operator git b2204ca2 sha256:0b5e86dbf3931f01cd8081a8dcdc7d5717e3986f9ac39c612ed80ec12ab50583
• cluster-kube-storage-version-migrator-operator git 54484757 sha256:c03547bdf3e4fdb8db14b226eb271fbe085ba691ca4c3d25df97136bad494038
• cluster-machine-approver git 9043e2bb sha256:27a9e652d314af1459a0eef7cac355b15d139ebf6fc4b245fe3efa2ff7006ce0
• cluster-policy-controller git 42791bac sha256:807d68810214fb572786499b771a3c5ea6142b3e50e8e73df0ae0bfa2295be7d
• cluster-update-keys git b7e79177 sha256:bf515dc7316aead00e08079c9b2d47d70cc73b0128acb2727d18390c104c4679
• coredns git d4a3ba3f sha256:45f405e0aa1bdbd126807bb7dcf62ff1a491582c770abc47a55eba612209ad67
• csi-driver-manila git d3f70921 sha256:aeed2225ad75eb102fcbf977420fa74330499d81dcdab302447f41b88d1fef17
• csi-driver-nfs git 9404d343 sha256:3a6b74eb47f83b956cc7ff7915344c359a2ce48923467dfd90a30c824968a68c
• csi-external-attacher git f152de8a sha256:da855caaa593d19fe27ab7860b966ded9cecf6580fc2549b494ff197225e04bb
• csi-external-provisioner git a49415e1 sha256:5971efc1f08bdcb3d95a038a833b9ee0ce5f6c42080dd41b05acf46af6e10e54
• csi-external-resizer git f77279e9 sha256:5c5fa142031fc5cc98bede070599b38e42fc114c62f9b8012429be87152c0358
• csi-external-snapshotter git 26773735 sha256:28f757ffb0f8378a63685b14bf9a88763fecfbb6918dd70d81c605a73e48d8dd
• csi-livenessprobe git 3dad0280 sha256:67283950b12f73b5324db6f5a36381801d579f2b8554d7caf9b5448dfc79da5e
• csi-node-driver-registrar git 2a77963e sha256:5e5f6d44e626b42007ec26226a08f2a4283bdbe0412ad26ee04121a2a0f03dd0
• csi-snapshot-controller git 26773735 sha256:4d0d6214c9042f355fe9e31039d9dd54a6e5bd109c2f07700fe4cf2d0d664826
• csi-snapshot-validation-webhook git 26773735 sha256:dd3387fc7f3cad67c39643a4db765b3d607f35b4345f83729beca3448ab8d77f
• egress-router-cni git 96ebd378 sha256:b13ae2c2966bbebaab87ad85c95dfae08ab0a0082b83d2f479b53cc386567c9c
• ironic git 1a7f41bb sha256:9f1647f835c4859b6aff5b1c94f19c81b9d4ddba88f4afb3224631bd4a708169
• ironic-static-ip-manager git 43d640a0 sha256:5a8a2e1f85b0f0deebec58f0077adf536a56ae79b0a4add4803996ad5ea2a047
• k8s-prometheus-adapter git 212d80b4 sha256:b226a900432c2ad576708b5a93afc988389e0725d3ea7eef172aee8eff5fdd75
• keepalived-ipfailover git 0e45f638 sha256:32c33ce0707ad1877d1205cb6aada24dc0d4718a9470b3455c7eea995516da63
• kube-rbac-proxy git 14c288e6 sha256:97f42319fa5955c65b2b89dfd98098b27c69c7cca82d66c4d31920b10301ded6
• kube-state-metrics git 04bff708 sha256:ac2f0b5759e6712e128a8a26f5cdc94820310743cc54d1dc3d0d41a443792114
• machine-os-content sha256:f0e2591da07a1c11b03e4dca83b1d9af80f05336823626d1ebf06f50b01001f5
• multus-cni git 5530094d sha256:17b73931c23664a36f42013518ba083861786b70cb458fdd1167044a99b3b8c9
• multus-route-override-cni git 1662c3ec sha256:759a02d9248d22c0d3b084cebbcede12a2289a9fcdc02d1408c4cb99e90eba19
• openshift-state-metrics git 40b0968e sha256:55d20e8a8bc180bf7ad7849d79e40e8caadbf06f563fe256814c9224c472792f
• openstack-cinder-csi-driver git d3f70921 sha256:c915959ee333ff5ac7d494981b6f702b9ae2a2e17884def53ecacb3f481ab1e6
• operator-registry git 06e950de sha256:11c0e9e42926dd6efe536bd610e8441b7f247cfadf457f914a940c98d04abd84
• ovirt-csi-driver git 72545e63 sha256:a1a116d896eb1be24e931fa4be94729335920aeeed828606b2bc057c81e740d0
• pod git 0e45f638 sha256:e6b858b0d4b97e913ef9e5e4db8fa2a0032fcbc61b4e4097034e9e05fb6cd624
• prom-label-proxy git db87872c sha256:d572b7d5994c7d7b6a4bdaf3401ea77a2fc2209fa8fcf17a04b6f090c51d69db
• prometheus git cb5e53cd sha256:00e16d624d8b426fb13c5d6616b46646d3b4425afc8323b50b3fd501ab67dccb
• prometheus-alertmanager git 9954cc42 sha256:0bd872c7513a3449815a6828c10641c04265ce02cd5a88612ffe0dcd0142a58f
• prometheus-config-reloader git 1f0fd51d sha256:23aafa7cfe8c7537558ca0f8d0ae258bd3c32c636f739290f2f554b6e6672f43
• prometheus-node-exporter git 76974e2e sha256:f8212abd8b6d3ad959ce528822feda2268bbfd98b4164917fc53f8edd511cfc3
• prometheus-operator git 1f0fd51d sha256:7a97d39cea9f3c01ac6ef0ba083f54bb803e4639f1a190fe5df1b2b5b6acbe06
• service-ca-operator git f65053f5 sha256:6308eddba3ca7484badc5ef5f80810de4a1d0ad577629567b4a2b5de11f31a2b
• telemeter git e4dac512 sha256:5c2f98521fdadbf1c2ce85a86c78998a6cacd97445b23a14167f205c3b8fa4be

aws-ebs-csi-driver-operator

• Bug 1996070: Add maxUnavailable to DaemonSets #135
• Full changelog

aws-pod-identity-webhook

• Bug 2046237: update go.mod for go1.15 #149
• Full changelog

azure-machine-controllers

• Bug 2057559: Requeue create on invalid credentials errors #254
• Full changelog

baremetal-installer, installer, installer-artifacts

• Bug 2007087: bump RHCOS 4.7 boot images #6012
• Bug 2066406: OpenStack+Kuryr: Fix cluster destroy with BYON #5754
• Bug 1973367: baremetal: pass IP_OPTIONS to os downloader #5013
• Bug 1928761: Validation of platform.openstack.machineSubnet #5434
• Bug 1964753: Bump RHCOS 4.7 boot image #5229
• Update OWNERS #5243
• Bug 1980866: [4.7] Prefer IPv6 hostIP on bootstrap IPv6 deployments #5067
• Bug 1981553: [release-4.7] aws: move elastic ip permissions to create networking category #5055
• Bug 1954595: Validate noProxy input and add prefix for proxy urls #5060
• OWNERS: add more core team members as approvers #5123
• Full changelog

baremetal-machine-controllers

• Updating baremetal-machine-controller images to be consistent with ART #161
• Bug 1938967: Updating baremetal-machine-controller builder & base images to be consistent with ART #134
• Full changelog

cli, cli-artifacts, deployer, tools

• Bug 2039763: Remove git:// from new-app tests #1024
• Bug 2004194: Registry mirror panic #927
• Bug 1995074: revert incorrect allowance of ssh:// prefix with scp styled URLs #902
• Bug 1974264: make oc logs work with BuildConfig’s JenkinsPipeline strategy #864
• Full changelog

cloud-credential-operator

• Bug 2064428: Remove Azure mint mode support as Active Directory Graph API will be sunset #455
• Bug 2027750: Check for aws status in infra platform status field before client setup #427
• Full changelog

cluster-authentication-operator

• Bug 2003633: manifests, bindata: explicitely set runAsUser for operator and operand #485
• Updating ose-cluster-authentication-operator builder & base images to be consistent with ART #408
• Full changelog

cluster-autoscaler

• Bug 1924416: Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #204
• Full changelog

cluster-autoscaler-operator

• Updating ose-cluster-autoscaler-operator images to be consistent with ART #239
• Bug 1961341: manifests: use v1 for RBAC #206
• Full changelog

cluster-baremetal-operator

• Bug 1976924: Update bmh crd #190
• Bug 1933726: provisioning: configure DHCP range with netmask #112
• Bug 1973367: Pass IP_OPTIONS=dhcp|dhcp6 down to OS Downloader container #171
• Full changelog

cluster-image-registry-operator

• Bug 1988388: Properly set custom tolerations #708
• Bug 1984979: Creating StorageAccount V2 instead of V1 #707
• Updating ose-cluster-image-registry-operator builder & base images to be consistent with ART #651
• Full changelog

cluster-ingress-operator

• Bug 1996897: Add startup probe to the router deployment #645
• Full changelog

cluster-kube-apiserver-operator

• Bug 2001243: Enforce OpenShift’s defined kubelet version skew policies #1223
• Full changelog

cluster-monitoring-operator

• Bug 2014023: Backport etcd telemetry #1433
• Bug 1986591: node exporter calls /proc/cpuinfo multiple times causing the node to freeze #1300
• Full changelog

cluster-network-operator

• Bug 2058675: ip-reconciler cronjob specification requires hostnetwork, api-int lb usage & proper backoff [backport 4.7] #1325
• Adds dougbtv to owners [release-4.7] #1404
• [release 4.8] Updates owners #1337
• Bug 2041893: Allow to use proxy to connect to OSP cloud #1284
• Bug 2021224: ovnkube: set ovn-controller lflow cache limit to 1GB #1217
• Bug 2034355: Whereabouts IP Reconciliaton [backport 4.7] #1266
• Bug 1924839: [release-4.7] Update protobuf version to address CVE-2021-3121 #1084
• Bug 1990932: [Backport 4.7] Whereabouts should have RBAC for leases #1186
• Bug 2003800: Use 10% for sdn maxUnavailable for rolling update #1202
• Bug 1996063: Use 10% for nw-check-target maxUnavailable #1184
• Bug 1988426: Change to use mountPath: /host #1170
• Bug 1962036: Use the election mechanism provided by library-go #1098
• Bug 1972549: Remove reference to v1beta1 API #1134
• Full changelog

cluster-node-tuning-operator

• Bug 2014430: stalld: update to v1.13.0 #281
• Bug 1986739: gather all Tuned CRs #255
• Full changelog

cluster-openshift-apiserver-operator

• Bug 1996045: bindata: run openshift-apiserver as root explicitly. #468
• Updating ose-cluster-openshift-apiserver-operator builder & base images to be consistent with ART #427
• Full changelog

cluster-openshift-controller-manager-operator

• Bug 1924494: Update k8s.io dependencies to address CVE-2021-3121 #222
• Full changelog

cluster-samples-operator

• Bug 2001977: delete hello-openshift in payload imagestream #393
• Full changelog

cluster-storage-operator

• Bug 2104632: Add missing ibm cloud annotations to prometheus rbac #297
• Bug 2030740: Add trusted CA bundle to vsphere operators #248
• Bug 1986030: Manila CSI driver is not in must-gather #193
• Full changelog

cluster-version-operator

• Bug 2117347: pkg/cvo: retain initial completed update history entry #819
• Bug 2030628: [release-4.7] Respect noProxy #711
• Bug 2007674: pkg/cvo/egress: Load HTTPS proxy from Proxy status #664
• Bug 1961341: Remove rbacv1beta1 support #652
• Bug 1991010: pkg/cvo/metrics: Ignore Degraded for cluster_operator_up #638
• Bug 1924428: CVE-2021-3121 gogo/protobuf lacks certain index validation #625
• Full changelog

configmap-reloader

• Updating configmap-reload builder & base images to be consistent with ART #27
• vendor: regenerate #31
• Full changelog

console

• Bug 2090384: Eliminate use of lookaside cache and move to Cachito #11574
• Bug 2073602: (Topology) Performance improvement by reducing rerenderings and deep-copy toJSON() calls #11309
• Bug 2060451: Fix a crash when the preferred namespace contains just numbers #11135
• Bug 2052859: override normal namespace hiding for pods view in node details #11027
• Bug 2055411: Filter superseded helm secrets and fix firehose to support partial metadata #11078
• Bug 2044949: fix dev-catalog stuck in loading state #10923
• Bug 2055403: Add support for fetching partial metadata and fix helm list page crash #11077
• Bug 2049313: Topology performance: Do not fetch HPA for each Deployment (Pod Ring) #10991
• Bug 2052858: Add subject name selector field to SinkBinding form #11026
• (4.7 Backport) Bug 1981412: Change OCM links from cloud. to console.redhat.com #9470 #9471
• Bug 2005298: Block and File and Object dashboards should not be part of OCP Console for ODF Managed Services #10097
• Bug 2005138: Console overview operators shown upgrading when still waiting on approval #10093
• [release 4.7] Bug 1969754: windows vms fail to start rls 4.7 #9657
• Bug 2004946: Use httpd in workload YAML templates #10089
• Bug 1973707: Add chart URl to annotations during helm install/upgrade #9299
• Bug 1995617: Fix Pipeline Download All #9839
• Bug 1986724: Show the content of Insights widget when there are 0 recommendations for cluster #9655
• Bug 1989642: Preserve user annotations while editing an app #9714
• Bug 1975560: Fix typo in olm message #9335
• Bug 1975469: Handle array to string conversion for HTTPS checkbox value #9332
• Updating openshift-enterprise-console images to be consistent with ART #8596
• Full changelog

console-operator

• Bug 2042534: Bump build-machinery-go for console-operator to pickup change in yaml-patch repository #629
• Bug 2016654: Use hard requirements for antiaffinity rules #605
• Full changelog

container-networking-plugins

• Updating ose-containernetworking-plugins builder & base images to be consistent with ART #41
• Bug 1925077: vendor: bump libcni #44
• Full changelog

csi-driver-manila-operator

• Bug 2002555: Do not degrade cluster on failure to reach Manila #126
• Bug 1987036: Use cluster Proxy when available #110
• Bug 1996070: Add maxUnavailable to DaemonSets #116
• Full changelog

docker-builder

• Bug 1995074: bump(s2i): revert incorrect ssh scp fix #261
• Bug 1924455: Update dependencies to address CVE-2021-3121 #258
• Full changelog

docker-registry

• Bug 1984094: use apimachinery with HTTP/2 health checks enabled #288
• Updating openshift-enterprise-registry builder & base images to be consistent with ART #262
• Full changelog

driver-toolkit

• Bug 1985545: Use kernel config to determine GCC version #56
• Bug 1985545: Remove curl of extract-vmlinux #50
• Bug 1985546: /etc/driver-toolkit-release.json kernel version match rpm -q output #51
• Full changelog

etcd

• Update OWNERS #126
• Full changelog

gcp-machine-controllers

• Updating ose-gcp-machine-controllers builder & base images to be consistent with ART #143
• Full changelog

gcp-pd-csi-driver

• Updating ose-gcp-pd-csi-driver builder & base images to be consistent with ART #10
• Full changelog

gcp-pd-csi-driver-operator

• Bug 1996070: Add maxUnavailable to DaemonSets #33
• Full changelog

grafana

• OCPBUGS-656: Fix static patch matching issue #91
• Full changelog

haproxy-router

• Bug 1994645: config template: accept IPv6 IPs for whitelisting #325
• Full changelog

hello-openshift, tests

• Bug 2034370: test: Nodes that are deleted should not fire the unready alert #26716
• Bug 2031104: Skipping Django Test until bug is fixed #26688
• Bug 2022188: Add more tests for image policy #26626
• Bug 2019520: Skip test ‘clone repository using git:// protocol should clone using git:// if no proxy is configured’ #26563
• Bug 1983616: Wait longer in tests where namespace cleanup is slow #26282
• Bug 1982929: Improve GC Check for Builds #26334
• Full changelog

hyperkube

• Bug 2082029: Rebase 1.20.15 #1253
• Bug 2043804: IPs with leading zeros are still valid in the apiserver #1234
• Bug 2060528: Backport inotify patch to 4.7 #1205
• Bug 2024640: Rebase v1.20.14 #1101
• Bug 2054669: UPSTREAM: 89885: SQUASH: Retry fetching clouds.conf #1178
• Bug 2024996: Fix subpath source check #1068
• Bug 2022720: UPSTREAM: 106261: Don’t guess SELinux support on error #1055
• Bug 2022188: Image policy should mutate DeploymentConfigs, StatefulSets, and new CronJobs #1073
• Bug 2022259: Rebase v1.20.12 #1046
• Bug 1939537: UPSTREAM: 100678: apf: exempt probes /healthz /livez /readyz #658
• Bug 1926724: UPSTREAM: 98028: add auto update for priority & fairness bootstrap configuration objects #563
• Bug 2008508: Rebase v1.20.11 #982
• Bug 1993753: UPSTREAM: 104348: Pass additional flags to subpath mount to avoid fla… #941
• Bug 2003027: Rebase 1.20.10 #935
• Bug 1996846: UPSTREAM: 98571: kubelet: Stop probing a pod during graceful shutdown #901
• Bug 1973766: 4.7: Do not throw error when we can’t get canonical path #881
• Bug 1981775: Bump apiserver libary go 4.7 #879
• Full changelog

insights-operator

• Bug 2028092: gather webhook configurations (#508) (#561) #508
• Bug 2026659: Gather all the container logs from related namespaces of degraded clusteroperator (#516) (#555) #516
• Bug 2026410: Fix PDB gatherer (#552) #552
• Bug 2024614: Anonymize identity provider attributes in the (#520) (#527) (#541) (#549) #520
• Bug 2022637: Anonymize the ImageRegistry storage information also in status (#546) #546
• Bug 2002539: Fix wrong rebase of PSP gatherer (#512) #512
• Bug 2002539: Gather installed PSP names (#489) (#493) #489
• Bug 1982170: Set also the summary operation when updating status (#480) #480
• Full changelog

ironic-hardware-inventory-recorder

• Updating ironic-hardware-inventory-recorder-image builder & base images to be consistent with ART #502
• Full changelog

ironic-inspector

• Bug 2002405: Sync inspector to include the latest bugfixes for 4.7 #70
• Full changelog

ironic-ipa-downloader

• Bug 2013591: Bump IPA version to 15.2-20211013.1 #86
• Bug 1963210: Add support for no_proxy #78
• Full changelog

ironic-machine-os-downloader

• Bug 1948538: Clear proxy env variables if go would have #77
• Bug 1963210: Add support for no_proxy #53
• Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

• Bug 2076250: Mitigate multiple CVEs #1436
• Bug 2069142: [release-4.7] 2022-02-15 Security Advisory #1415
• Bug 2044939: Jenkins Fixes for CVE-2022-20617 and CVE-2022-20612 #1371
• Bug 2020613: Update Jenkins and plugins per 2021-11 advisory #1348
• Bug 1972361: Bump jenkins version 2.289.2 #1281
• Full changelog

kube-proxy, sdn

• Bug 2005494: Support allow-from-router feature using openshift-host-network namespace #300
• Bug 2002291: [4.7] proxy: don’t re-check every userspace proxy rule on every change #348
• Bug 1987297: when assigning and releasing egressIP try more than once before failing #327
• Bug 2001531: improve SDN’s OVS healthcheck and logging #343
• Bug 1995872: Disable conntrack for vxlan traffic #338
• Bug 1971669: Fix 4.7 SDN Egress Network Policy #334
• Full changelog

kube-storage-version-migrator

• Updating ose-kube-storage-version-migrator builder & base images to be consistent with ART #167
• Full changelog

kuryr-cni, kuryr-controller

• Bug 2028396: Make completed Pods Ports reusable #608
• Bug 2018244: Update TOX_CONSTRAINTS_FILE for stable/xena #588
• Bug 2001518: Increase keystoneauth’s connection pool size #554
• Full changelog

libvirt-machine-controllers

• Updating ose-libvirt-machine-controllers builder & base images to be consistent with ART #212
• Full changelog

machine-api-operator

• Bug 2022839: GCP CI runs are complaining about APIs not being enabled #954
• Bump some SHAs #937
• Bug 1993118: Make sure nodes don’t have attached volumes before vm deletion #904
• Bug 1999590: [release-4.7] add alert for machine with long deletion phase #907
• Bug 1989648: Prevent machine from stucking in Deleting phase on vSphere if related node object not found #895
• Bug 1933586: Make sure phase is always set before creation #858
• Full changelog

machine-config-operator

• Bug 2105082: 4.7: daemon: Explicitly start rpm-ostreed, restart if we detect active txn #3240
• Bug 2101555: Add KUBELET_NODEIP_HINT to nodeip-configuration #3210
• Bug 2025470: annotate rendered config with OCP version #2993
• Bug 2057526: ovs-configuration: use lower than NM default ethernet route metric #2975
• Bug 2033000: fixes 1 to 1 containerruntime config mapping #2878
• Bug 2059724: Prepend to search domains instead of replacing #2977
• Bug 2038383: Respect DHCP option 119 for on-prem #2904
• Bug 2028525: [Release 4.7] daemon: make cordon/uncordon more robust and better logging #2854
• Bug 2026825: Send WARN message to stderr #2841
• Bug 1988102: [IPI ON-PREM] move Keepalived default ingress script to separate file #2825
• Bug 1975174: configure-ovs: fix nondeterministic master in slave profiles #2640
• Bug 2008692: Don’t write empty static pod manifests #2783
• Bug 1995621: Backport fix 1 to 1 relation to kubelet configs and machine config pools #2759
• Bug 2011375: templates: Silence audit events from container infra by default #2792
• Bug 2008759: Set timeoutSeconds for keepalived liveness probe #2773
• Bug 2008588: Check suffix annotation is a number #2781
• Bug 2004581: Set ovs syslog level to info #2767
• Bug 2000501: bump SystemMemoryExceedsReservation alert threshold to 95% #2749
• Bug 1989751: [on-prem] Disable liveness probe until keepalived.conf exists #2701
• Bug 1995853: Gracefully shutdown taking around 6-7 mins (libvirt provider) #2727
• Bug 1988102: [release-4.7] On-prem: add default ingress track script to Keepalived #2697
• Bug 1998112: vSpehere: disable vmxnet3 tx csum offload #2738
• Bug 1995810: crio: complete crio default config #2725
• Bug 1992240: change system-connections-merged directory to systemConnectionsMerged #2709
• Bug 1956462: ensure SSH key uniqueness #2563
• Bug 1993386: crio: use conmon from path #2715
• Bug 1992687: alerts: SystemMemoryExceedsReservation triggers too quickly #2710
• Bug 1970166: MCO: maxUnavailable of ds/machine-config-daemon does not get updated due to missing resourcemerge check #2682
• Bug 1977432: crio: enable internal_wipe option #2649
• Bug 1970590: daemon: Change runGetOut to not intermix stdout/stderr #2609
• Full changelog

mdns-publisher

• Bug 2004537: Update zeroconf vendoring #39
• Bug 1983695: [release-4.7] Truncate long service names to 63 characters #34
• Full changelog

multus-admission-controller

• Updating ose-multus-admission-controller builder & base images to be consistent with ART #30
• Full changelog

multus-whereabouts-ipam-cni

• Bug 2028967: Whereabouts should reconcile IP addresses [backport 4.7] #79
• Bug 1965268: Syncs with upstream for leader election [backport 4.7] #65
• Full changelog

must-gather

• Updating ose-must-gather builder & base images to be consistent with ART #202
• Bug 1954302: Add ovs related services to GENERAL_SERVICES #229
• Full changelog

network-metrics-daemon

• Added METRIC_TEST_IMAGE var (#58) #58
• Change repo from Docker to quay.io (#44) #44
• Updating ose-network-metrics-daemon images to be consistent with ART (#32) #32
• Full changelog

oauth-apiserver

• Bug 2043804: IPs with leading zeros are still valid in the apiserver #76
• Full changelog

oauth-proxy

• Updating golang-github-openshift-oauth-proxy builder & base images to be consistent with ART #198
• Full changelog

oauth-server

• Updating oauth-server images to be consistent with ART #90
• Full changelog

openshift-apiserver

• Add coreydaley as reviewer/approver for pkg/build #301
• Bug 2043804: IPs with leading zeros are still valid in the apiserver #287
• Bug 2022188: Image policy should mutate DeploymentConfigs #261
• Bug 1995074: revert incorrect ssh scp fix #242
• Full changelog

openshift-controller-manager

• Bug 1924531: Update k8s.io dependencies to address CVE-2021-3121 #191
• Full changelog

openstack-cinder-csi-driver-operator

• Bug 2049879: Explicitly set default value for ReclaimPolicy #72
• Bug 2016286: Fix error when mounting /var/lib/kubelet/pods #58
• Bug 1996070: Add maxUnavailable to DaemonSets #54
• Full changelog

openstack-machine-controllers

• Bug 2000551: Adds Proxy to provider client http transport #200
• Full changelog

operator-lifecycle-manager

• Fix kubebuilder installation in the build root Dockerfile #2351
• Bug 1982693: remove cleanup from startup #2287
• Full changelog

operator-marketplace

• Bug 1961341: [release-4.7] Update openshift rolebindings to v1 #409
• Full changelog

ovirt-csi-driver-operator

• Bug 1996070: Backport maxUnavailable: 10% for DaemonSets #69
• Full changelog

ovirt-machine-controllers

• Bug 2001287: correct IPAddress detection for OVNKubernetes #120
• Full changelog

ovn-kubernetes

• Bug 2117078: [release-4.7] Multiple ExGW cache validation/improvements #1241
• Bug 2105274: EGW: Clean Stale Conntrack Entries #1194
• Bug 2063245: Fix Netpol retry mechanisms #1051
• Bug 2070339: Fix egress IP allocator sync #1017
• Bug 2069247: egressgw: Fix deadlocks #1013
• Bug 2021224: Add ovn-controller logical flow cache options #891
• Bug 2047325: Fix node connectivity to service backed by egress IP pods #946
• Bug 2043677: Fix pod handlers and pod IP parsing for egress IP #920
• Bug 2039282: filter out KubeAPIAuth when logging CNI requests #906
• Bug 2034506: Make config parsing more resilient for unknown fields #882
• Bug 2027874: [4.7z] Fixes race between node handler and pod sync #859
• Bug 2019093: Not exit when ovnkube runs with ‘–gateway-interface none’ #820
• Bug 2027468: 4.7 backport #850
• Bug 2014360: [4.7z] Scale fixes for pods/exgws #799
• Bug 2011402: [4.7] bump OVN to 20.12.0-183.el8fdp #786
• Bug 1935149: Resync node management port on subnet change #456
• Bug 2005519: [4.7z] Remove waiting for namespace and namespace lock contention #766
• Bug 2005468: [4.7z] Fixes skipping pods accidentally in retry #759
• Bug 2007653: Fix ensurePod to call addPortExternalGW only for annotation updates #765
• Bug 2006159: Fix duplicate incrementing of subnet allocation metric #764
• Bug 2004489: panic after EgressFirewall deletion and DNS record expiration #751
• Bug 2007665: [4.7z] Ensure host interfaces are deleted by CNI #769
• Bug 2005391: [4.7z] Fixes misuse of pod annotations during update event #754
• Bug 2005913: [4.7z] Sync ECMP routes on startup and fixes stale ECMP routes #763
• Bug 2001543: fix reserve joinSwitch LRP IPs #721
• Bug 2001364: [4.7z] Ensure client handling of canceled/dropped OVSDB monitor #719
• Bug 2001998: egressfirewall not set after upgrade #724
• Bug 1988495: Fix LocalGatway ExternalIP #638
• Bug 1999896: Revert “[release-4.7] fix reserve joinSwitch LRP IPs” #707
• Bug 1997574: Fix: sync egress IP for missed events on start-up #687
• Bug 1976242: Update existing policy ACLs on start #650
• Bug 1997104: fix reserve joinSwitch LRP IPs #683
• Bug 1995910: Backport ovnkube-trace requires ip package to be installed #674
• Bug 1991445: Bump OVN to 20.12.0-140.el8fdp #649
• Bug 1967132: policy: handle NetworkPolicies single “from” multiple “ipBlock” #562
• Bug 1985516: Add v6 management interface address for host network policy #625
• Bug 1962608: ensure missed events are handled during a reconnection #547
• Full changelog

thanos

• Bug 1994123: dockerignore: remove vendor from ignored list #69
• Full changelog

vsphere-problem-detector

• Bug 2039341: Deferred logout after checks are run #70
• Full changelog

---

View changelog in Markdown or change previous release: 4.20.0-0.nightly-2025-04-25-0215234.20.0-0.nightly-2025-04-24-1510314.20.0-0.nightly-2025-04-24-0301294.20.0-0.nightly-2025-04-23-1656124.20.0-0.nightly-2025-04-23-0609584.20.0-0.nightly-2025-04-22-1836184.20.0-0.nightly-2025-04-17-1812034.20.0-0.nightly-2025-04-09-1620084.20.0-0.nightly-2025-04-09-1220084.20.0-0.nightly-2025-04-09-0820084.20.0-0.nightly-2025-04-09-001421───4.20.0-0.konflux-nightly-2025-04-17-181101───4.20.0-0.ci-2025-04-25-0347534.20.0-0.ci-2025-04-24-2147524.20.0-0.ci-2025-04-24-1547514.20.0-0.ci-2025-04-24-0947514.20.0-0.ci-2025-04-24-0347514.20.0-0.ci-2025-04-23-2147514.20.0-0.ci-2025-04-23-1547514.20.0-0.ci-2025-04-23-0947514.20.0-0.ci-2025-04-23-0347514.20.0-0.ci-2025-04-22-2147514.20.0-0.ci-2025-04-22-1547514.20.0-0.ci-2025-04-22-094751───4.19.0-0.nightly-2025-04-25-0138024.19.0-0.nightly-2025-04-24-1205454.19.0-0.nightly-2025-04-24-0058374.19.0-0.nightly-2025-04-23-1038234.19.0-0.nightly-2025-04-23-0109564.19.0-0.nightly-2025-04-22-1025554.19.0-0.nightly-2025-04-17-1545524.19.0-0.nightly-2025-04-14-2141454.19.0-0.nightly-2025-04-10-0316214.19.0-0.nightly-2025-04-08-1633204.19.0-0.nightly-2025-04-08-0355034.19.0-0.nightly-2025-04-04-170728───4.19.0-0.konflux-nightly-2025-04-17-1812464.19.0-0.konflux-nightly-2025-04-16-0850294.19.0-0.konflux-nightly-2025-04-04-1153514.19.0-0.konflux-nightly-2025-04-04-0442334.19.0-0.konflux-nightly-2025-04-04-0042334.19.0-0.konflux-nightly-2025-04-03-170915───4.19.0-0.ci-2025-04-25-0405114.19.0-0.ci-2025-04-24-2205114.19.0-0.ci-2025-04-24-1605094.19.0-0.ci-2025-04-24-1005084.19.0-0.ci-2025-04-24-0405084.19.0-0.ci-2025-04-23-2205084.19.0-0.ci-2025-04-23-1605084.19.0-0.ci-2025-04-23-1005084.19.0-0.ci-2025-04-23-0405084.19.0-0.ci-2025-04-22-2205084.19.0-0.ci-2025-04-22-1605084.19.0-0.ci-2025-04-22-100508───4.18.0-0.nightly-2025-04-24-0718414.18.0-0.nightly-2025-04-23-1806284.18.0-0.nightly-2025-04-23-0911314.18.0-0.nightly-2025-04-23-0026384.18.0-0.nightly-2025-04-22-1341154.18.0-0.nightly-2025-04-17-1811054.18.0-0.nightly-2025-04-15-1617284.18.0-0.nightly-2025-04-13-1429464.18.0-0.nightly-2025-04-11-2247044.18.0-0.nightly-2025-04-11-134821───4.18.0-0.konflux-nightly-2025-04-24-2256244.18.0-0.konflux-nightly-2025-04-24-1856244.18.0-0.konflux-nightly-2025-04-24-1456244.18.0-0.konflux-nightly-2025-04-24-1056244.18.0-0.konflux-nightly-2025-04-24-0656244.18.0-0.konflux-nightly-2025-04-09-093813───4.18.0-0.ci-2025-04-25-0028134.18.0-0.ci-2025-04-24-1828134.18.0-0.ci-2025-04-24-1103104.18.0-0.ci-2025-04-24-0340424.18.0-0.ci-2025-04-23-2053394.18.0-0.ci-2025-04-23-1453394.18.0-0.ci-2025-04-23-0853394.18.0-0.ci-2025-04-23-0022594.18.0-0.ci-2025-04-22-124212───4.17.0-0.nightly-2025-04-24-1940304.17.0-0.nightly-2025-04-24-1126554.17.0-0.nightly-2025-04-24-0253214.17.0-0.nightly-2025-04-23-1526094.17.0-0.nightly-2025-04-23-0759154.17.0-0.nightly-2025-04-22-2114014.17.0-0.nightly-2025-04-22-0349074.17.0-0.nightly-2025-04-20-1530094.17.0-0.nightly-2025-04-17-2311274.17.0-0.nightly-2025-04-17-1911054.17.0-0.nightly-2025-04-17-0929444.17.0-0.nightly-2025-04-16-0351394.17.0-0.nightly-2025-04-15-0249394.17.0-0.nightly-2025-04-14-0531114.17.0-0.nightly-2025-04-11-2216314.17.0-0.nightly-2025-04-11-1430404.17.0-0.nightly-2025-04-11-095135───4.17.0-0.konflux-nightly-2025-04-25-0523014.17.0-0.konflux-nightly-2025-04-25-0123014.17.0-0.konflux-nightly-2025-04-24-2123014.17.0-0.konflux-nightly-2025-04-15-1242444.17.0-0.konflux-nightly-2025-04-15-0842444.17.0-0.konflux-nightly-2025-04-15-044244───4.17.0-0.ci-2025-04-25-0052534.17.0-0.ci-2025-04-24-1852534.17.0-0.ci-2025-04-24-1252534.17.0-0.ci-2025-04-24-0652534.17.0-0.ci-2025-04-24-0026014.17.0-0.ci-2025-04-23-1443544.17.0-0.ci-2025-04-23-0843544.17.0-0.ci-2025-04-23-0243544.17.0-0.ci-2025-04-22-1925124.17.0-0.ci-2025-04-22-132512───4.16.0-0.nightly-2025-04-24-2009094.16.0-0.nightly-2025-04-24-0431424.16.0-0.nightly-2025-04-23-2209364.16.0-0.nightly-2025-04-23-0800514.16.0-0.nightly-2025-04-22-2349344.16.0-0.nightly-2025-04-17-1818554.16.0-0.nightly-2025-04-16-0048374.16.0-0.nightly-2025-04-12-2227184.16.0-0.nightly-2025-04-12-1339494.16.0-0.nightly-2025-04-11-090415───4.16.0-0.ci-2025-04-24-2352144.16.0-0.ci-2025-04-24-1624454.16.0-0.ci-2025-04-24-0438534.16.0-0.ci-2025-04-23-2235114.16.0-0.ci-2025-04-23-1635114.16.0-0.ci-2025-04-23-0924474.16.0-0.ci-2025-04-23-0129064.16.0-0.ci-2025-04-22-1929064.16.0-0.ci-2025-04-22-132906───4.15.0-0.nightly-2025-04-24-0834004.15.0-0.nightly-2025-04-23-0337174.15.0-0.nightly-2025-04-22-2100014.15.0-0.nightly-2025-04-22-0910094.15.0-0.nightly-2025-04-21-2226314.15.0-0.nightly-2025-04-17-1819254.15.0-0.nightly-2025-04-17-0108144.15.0-0.nightly-2025-04-16-032433───4.15.0-0.konflux-nightly-2025-04-11-1932164.15.0-0.konflux-nightly-2025-04-09-132251───4.15.0-0.ci-2025-04-24-2225214.15.0-0.ci-2025-04-24-1548314.15.0-0.ci-2025-04-24-0832234.15.0-0.ci-2025-04-24-0232234.15.0-0.ci-2025-04-23-0804034.15.0-0.ci-2025-04-22-1908184.15.0-0.ci-2025-04-22-130818───4.14.0-0.nightly-2025-04-24-0840034.14.0-0.nightly-2025-04-24-0125484.14.0-0.nightly-2025-04-23-1956074.14.0-0.nightly-2025-04-23-1442294.14.0-0.nightly-2025-04-23-0743134.14.0-0.nightly-2025-04-22-1750244.14.0-0.nightly-2025-04-22-1134154.14.0-0.nightly-2025-04-17-1815504.14.0-0.nightly-2025-04-13-0827124.14.0-0.nightly-2025-04-11-060520───4.14.0-0.ci-2025-04-25-0517324.14.0-0.ci-2025-04-24-2056154.14.0-0.ci-2025-04-24-1456154.14.0-0.ci-2025-04-24-0541034.14.0-0.ci-2025-04-23-2340514.14.0-0.ci-2025-04-23-1632104.14.0-0.ci-2025-04-23-0757514.14.0-0.ci-2025-04-22-2206214.14.0-0.ci-2025-04-22-110102───4.13.0-0.nightly-2025-04-24-2353324.13.0-0.nightly-2025-04-23-1507204.13.0-0.nightly-2025-04-22-2323594.13.0-0.nightly-2025-04-22-1221024.13.0-0.nightly-2025-04-22-0444244.13.0-0.nightly-2025-04-21-0245304.13.0-0.nightly-2025-04-19-1541174.13.0-0.nightly-2025-04-17-1815504.13.0-0.nightly-2025-04-12-1239534.13.0-0.nightly-2025-04-11-1437434.13.0-0.nightly-2025-04-11-081421───4.13.0-0.ci-2025-04-25-0437554.13.0-0.ci-2025-04-24-1633274.13.0-0.ci-2025-04-23-1416424.13.0-0.ci-2025-04-22-2243414.13.0-0.ci-2025-04-22-1333414.13.0-0.ci-2025-04-22-0426234.13.0-0.ci-2025-04-21-2027194.13.0-0.ci-2025-04-21-1355094.13.0-0.ci-2025-04-19-0121434.13.0-0.ci-2025-04-18-0736324.13.0-0.ci-2025-04-17-202315───4.12.0-0.nightly-2025-04-24-1443334.12.0-0.nightly-2025-04-24-0614104.12.0-0.nightly-2025-04-17-0824094.12.0-0.nightly-2025-04-17-0108264.12.0-0.nightly-2025-04-15-0957494.12.0-0.nightly-2025-04-15-0328174.12.0-0.nightly-2025-04-12-1742164.12.0-0.nightly-2025-04-11-1137294.12.0-0.nightly-2025-03-31-0828434.12.0-0.nightly-2025-03-31-022843───4.12.0-0.ci-2025-04-24-1955404.12.0-0.ci-2025-04-24-1134224.12.0-0.ci-2025-04-24-0521304.12.0-0.ci-2025-04-21-2311554.12.0-0.ci-2025-04-21-1353044.12.0-0.ci-2025-04-18-0736384.12.0-0.ci-2025-04-17-1704254.12.0-0.ci-2025-04-17-0310294.12.0-0.ci-2025-04-16-055030───4.11.0-0.nightly-2024-07-06-0140574.11.0-0.nightly-2024-07-01-0855474.11.0-0.nightly-2024-04-20-1326214.11.0-0.nightly-2024-04-15-1237064.11.0-0.nightly-2024-04-15-0346274.11.0-0.nightly-2024-03-18-1654324.11.0-0.nightly-2024-03-12-2229304.11.0-0.nightly-2024-02-01-0446274.11.0-0.nightly-2024-01-19-1107024.11.0-0.nightly-2024-01-15-0229494.11.0-0.nightly-2024-01-10-203533───4.11.0-0.ci-2025-04-21-2018464.11.0-0.ci-2025-04-21-1418464.11.0-0.ci-2025-04-18-0954224.11.0-0.ci-2025-04-17-2304254.11.0-0.ci-2025-04-17-1704254.11.0-0.ci-2025-04-09-1811074.11.0-0.ci-2025-04-09-1052214.11.0-0.ci-2024-09-17-2036254.11.0-0.ci-2024-07-01-0910384.11.0-0.ci-2024-06-07-194400───4.19.0-ec.54.19.0-ec.44.19.0-ec.34.19.0-ec.24.19.0-ec.14.19.0-ec.0

Source code for this page located on github