Back to index

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.7.9-x86_64

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
  • upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
• Informing jobs
  • aws Succeeded periodic-ci-openshift-release-master-nightly-4.7-e2e-aws
  • aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.7-e2e-aws-serial

Upgrades from:

• 4.7.8 (changes) - Success Success
• 4.7.7 (changes) - Failed
• 4.7.6 (changes) - Success
• 4.7.5 (changes) - Success
• 4.7.4 (changes) - Success
• 4.7.3 (changes) - Success
• 4.7.2 (changes) - Success
• 4.7.1 (changes) - Success
• 4.7.0 - Success
• 4.6.26 (changes) - Success Failed
• 4.6.25 (changes) - Success
• 4.6.24 (changes) - Success

Upgrades to:

• 4.8.0-rc.1 (changes) - Success
• 4.8.0-rc.0 (changes) - Failed
• 4.8.0-fc.8 (changes) - Failed
• 4.8.0-fc.2 (changes) - Success Failed
• 4.7.59 (changes) - Failed
• 4.7.58 (changes) - Success
• 4.7.57 (changes) - S S F
• 4.7.37 (changes) - Failed
• 4.7.36 (changes) - Success
• 4.7.32 (changes) - Success
• 4.7.31 (changes) - Success
• 4.7.30 (changes) - Failed
• 4.7.29 (changes) - Success
• 4.7.27 (changes) - Success
• 4.7.26 (changes) - Success
• 4.7.25 (changes) - Success
• 4.7.24 (changes) - Success
• 4.7.23 (changes) - Success
• 4.7.22 (changes) - Success
• 4.7.21 (changes) - Success Success
• 4.7.20 (changes) - Success
• 4.7.19 (changes) - Success
• 4.7.18 (changes) - Success
• 4.7.17 (changes) - Success Success
• 4.7.16 (changes) - Failed
• 4.7.15 (changes) - Success
• 4.7.14 (changes) - Success
• 4.7.13 (changes) - Success
• 4.7.12 (changes) - Success
• 4.7.11 (changes) - Success
• 4.7.10 (changes) - Success Success
• 4.7.8 (changes) - Success
• 4.7.7 (changes) - Success
• 4.7.6 (changes) - Failed Success
• 4.7.5 (changes) - Success
• 4.7.4 (changes) - Success
• 4.7.3 (changes) - Failed Success
• 4.7.2 (changes) - Success
• 4.7.1 (changes) - Success

---

Loading changelog, this may take a while ...

Changes from 4.7.0

Created: 2021-04-28 08:35:07 +0000 UTC

Image Digest: sha256:dd75546170e65d7d17130de10a6ffeb425f960399640632cbc8426b9da338458

Release 4.7.9 was created from registry.ci.openshift.org/ocp/release:4.7.0-0.nightly-2021-04-25-102429

Components

• Kubernetes 1.20.0-beta.2
• Red Hat Enterprise Linux CoreOS upgraded from 47.83.202102090044-0 to 47.83.202104250838-0 (diff)

Removed images

• local-storage-static-provisioner

Rebuilt images without code change

• aws-ebs-csi-driver git f6a71bf7 sha256:bab13b73bf0126d4feb4d4d88bad6304e904467b2d2b9507ec6a7ffb8b4a2426
• aws-ebs-csi-driver-operator git 97f73eb7 sha256:862d5aacb74c4246f9c123ee3efd2af4c3cd1ead596ebcf88c98d1864f8eaafb
• cluster-authentication-operator git cf1e1a6c sha256:317d275da710065a1fcd1ebf42430983874cb87bf91d5cc534384a0659f1c213
• cluster-autoscaler-operator git 4b0831e0 sha256:f1c15805a83d322cb4151d2c3c836fa1daa78159e826c4b6f3febe70155f70ec
• cluster-bootstrap git 6665cae3 sha256:e725909345b646cb64a378c2d4422ba35ea8cef2ecd120a7ded553dfa5fdfbbe
• cluster-config-operator git 3bc7ea73 sha256:826b9c3a9f4daa64cf5ee196a03f139ae27853870c2736aaf334986560a3e3f5
• cluster-csi-snapshot-controller-operator git 95d85d4a sha256:c7fd8c4853bd27356097b1c1f8abc55fec0d15d011fade1eb2d3d4f5cce06246
• cluster-image-registry-operator git 538ff7fe sha256:a08fc83be3c0a4cd87fafeaaaab68adfdc114fe64054fb47f8df8e45df8724a6
• cluster-storage-operator git fd2b47c0 sha256:6151d899f52e9b94d72a66cf696443abfe641a6ea9f55f6ae26ab9b9c8fc4308
• cluster-update-keys git a7065d83 sha256:da7fca7b9ce231483ea0bc00c249d4e5ef76db96eb92befede7c04107001de1f
• configmap-reloader git 25dfb671 sha256:3b30f8fc4a49cce780bc89b4e2d9f1d05de8b6a7373a507f4728e98ebde9ad51
• container-networking-plugins git fc27124d sha256:b1f77f593462e0c867db23dba71e28b4a7b986d402f8413aea4c4f11c4fbd55f
• coredns git d4a3ba3f sha256:914f281d6d337d223403f7f3a80815ca34fc0302b2941452bbdd78fc44f59f85
• csi-driver-nfs git 9404d343 sha256:09f1bb2d58d9b32a4907747f20321bf8d3900a91630e76451af979cfe742ffb5
• csi-external-attacher git f152de8a sha256:d11dbc54c6b85f90bd4a11ad6662451680aadd610b85675254823790f958021f
• csi-external-provisioner git a49415e1 sha256:5aab0de73bacc9ac9fc4f079f0cf64994ea165d18358d0c4f20be8583c55f2ea
• csi-external-resizer git f77279e9 sha256:8550c1eeef17ea8292719b9c02da614da11c47e7277387e6c9e864a669d57a9a
• csi-external-snapshotter git 26773735 sha256:e9931fb229c4c1ab543a83fd09ee53504946a9e7d8391bf18e7c557c0250901c
• csi-livenessprobe git 3dad0280 sha256:91d4bdc0fc279f55e59fc51460833c7e4002627cfe06fcee916ff8c6261b5ee9
• csi-node-driver-registrar git 2a77963e sha256:1aabc221c06b491ec7b495434311726e0e724d11d34113b2f350cbc8ff79ea19
• csi-snapshot-controller git 26773735 sha256:9efebc7a6e98b758e1af053c25a493429fc3853a433bc85258c67b9559ed81b1
• csi-snapshot-validation-webhook git 26773735 sha256:b3f0377f97b2b82227e206a1efaa05f1c05d86492ec9f0ad9483783bdab15b55
• docker-registry git 8e0c068a sha256:6a2fdea10b99725d0d5c3dd35da0a58b13bf8b62e5f212737888f354278a7c33
• egress-router-cni git 96ebd378 sha256:9971edd9a0cf6dccafbd5ac97f47a636a62c97fe3e3226b95261a0cf3e04cefb
• gcp-pd-csi-driver git 091f0212 sha256:89aafb6a56c7a7fbbc5b2c2dc323381be67a5d174e355926240a198f01a02361
• ironic-hardware-inventory-recorder git 61c4cc7d sha256:cb8f2c59a0642fd9da5898983b1a09d2735fe9e9a79735de102438c1855b8d27
• ironic-inspector git 916bdc6e sha256:6a3ac1123e5cb46cb622285b3a5d669492c982d377d904412d9984e235278abf
• ironic-static-ip-manager git 43d640a0 sha256:2e14dffc18d80f4fe247209105c46a24a3db1319cf056f847d705e53eccf3a57
• k8s-prometheus-adapter git 212d80b4 sha256:2b730b974379cefc5b500f2c9d49316318359ded537f8d4d659975b6d1d0104d
• keepalived-ipfailover git 0e45f638 sha256:52f6d48617a785710499aef92565754b3e87b2e10ba72c599814ddba430dcc04
• kube-state-metrics git 04bff708 sha256:df10c000fbbb9680b228cf8977b0db84d46b88fbc340fb0ce02bcb80527623ed
• kube-storage-version-migrator git 329a4b06 sha256:4bc25e5ca4d327ca52322a2146d98b31214156de21a2b17408b2e999b1ce4769
• machine-os-content sha256:d94c4dfe32d6b9321b61e221c35559e22cf6e96f75bef0345fe978530fff3e02
• mdns-publisher git 207a7e5d sha256:03abc6f9951bf876c4b6941b4a8661a93aadf0233799ef9abcf628b92bbb8e43
• multus-admission-controller git a7312f5e sha256:2d3feb84ab979009e522684950e4be151d6a7728fa2091289445ec88bdd561a8
• multus-route-override-cni git 1662c3ec sha256:2081b35203c0d8fd01f74af17eaa11bdac5e1469598fcce26dad3103b149f44e
• must-gather git 140ea5e8 sha256:ba40b34c49ae3d40a38929944c6ada917047418c25bb5859ea7f5a8c4e7c76e7
• network-metrics-daemon git b1926150 sha256:9b480c5ddff56a36ed36a36bee65a4ca7825e7de5707cec99f460a7543ac83dc
• oauth-proxy git 4bd47050 sha256:84264dd5793949e5fb6429952cdcbec78091576651dd07f0b943f22194b27b51
• oauth-server git 3215761a sha256:5c563f85ac84e975b477703625116ddb57f48a23870068ac9e0ef3bc91b02032
• openshift-controller-manager git e0755cd0 sha256:35519679b32862c4ad3410235f77d6151d860c612894fb173ebb019b0bbb42d2
• openshift-state-metrics git 40b0968e sha256:98daff6929c08f3167c65be7430c650afbf772a5fba8a314a4a91177bdaba0ad
• openstack-cinder-csi-driver-operator git 117ce62c sha256:a2aeb1f8ef86de992bd3db64904d682b67ec96e40edeea1f5b1570a60f6552b1
• openstack-machine-controllers git 471cf3ab sha256:1a74f5a8a459dc0d23f7cd7a73ee26925a1e9b4034581dd593088bae87e03b05
• pod git 0e45f638 sha256:c0457d8ef9889c20337cee4e6fcafdeb8becc896f4c383e00bceb966f0a05806
• prometheus git cb5e53cd sha256:c2052513697c37888c55fdeb8e3ee818009856bf5bb213c40ad3ffb56dea6559
• prometheus-alertmanager git 9954cc42 sha256:c31a553a10235882871ceb358b12e82d0a7d28996873d2a0b70bdd878a3d5146
• prometheus-config-reloader git 1f0fd51d sha256:b7e63f550ffa7b90803351fe6ea5afd42272332d315278439ab14394707f9462
• prometheus-node-exporter git 76974e2e sha256:acd00dce703439195d51c2ade8e42b20feb450f07727684503aad017833c395b
• prometheus-operator git 1f0fd51d sha256:1f2f249703f6c906d7a876c471d100a2f7833e5176d55e17ddc04f35b0692257
• thanos git 0526ff02 sha256:243764d8b6829db8d6c6fba5828c071ea99ac0bb20952b3978d1919925564e74

aws-machine-controllers

• Bug 1935636: Ensure response body is closed when we are finished with the request #391
• Full changelog

aws-pod-identity-webhook

• Updating ose-aws-pod-identity-webhook builder & base images to be consistent with ART #130
• Full changelog

baremetal-installer, installer, installer-artifacts

• Bug 1935174: RHCOS bump for LUKS, prjquota, etc #4791
• Bug 1947122: gcp: install google cloud sdk with yum the recommended way #4824
• Bug 1933728: baremetal: include netmask in DNSMasq dhcp range #4698
• Bug 1930106: bump ignition to v3_2 #4701
• Full changelog

baremetal-machine-controllers

• Bug 1936844: [release-4.7] Changing the default behaviour of the CAPBM to request hard reboot #144
• Full changelog

baremetal-operator

• Bug 1910352: Fail registration when boot MAC address conflicts #131
• Bug 1936407: Backport of BMO code to 4.7 to support different reboot modes #132
• Bug 1932452: Backport ensure adoption is retried upon failure #127
• Full changelog

baremetal-runtimecfg

• Bug 1942488: sort AddressesDefault by route priority, ifindex, and IPv4/IPv6 preference #132
• Full changelog

cli, cli-artifacts, deployer, tools

• Bug 1942938: [release-4.7] inspect clusteroperators as a backup to must-gather if it fails #766
• Bug 1924453: Bump github.com/gogo/protobuf to v1.3.2 #753
• Bug 1942059: when mirroring to a file destination, mount images under the index location #779
• Bug 1939477: Fix unit test to use new IS #769
• Full changelog

cloud-credential-operator

• Bug 1928151: spell fix user-visible string #301
• Full changelog

cluster-autoscaler

• Updating vertical-pod-autoscaler builder & base images to be consistent with ART #190
• Full changelog

cluster-baremetal-operator

• Bug 1936544: Inject proxy environment variables everywhere #117
• Full changelog

cluster-dns-operator

• Bug 1942228: Fix spurious reconciliation of DNS daemonset and service #250
• Bug 1943826: Corefile: Use 30 second max TTL for caching of negative responses #254
• Bug 1937089: Configure CoreDNS to shut down gracefully #247
• Bug 1936587: Set CoreDNS’s cache’s maximum TTL to 900 seconds #245
• Bug 1928304: Set CoreDNS readiness probe period and timeout each to 3 seconds #235
• Full changelog

cluster-etcd-operator

• Bug 1925739: pkg/operator/metriccontroller: cleanup transports #537
• Full changelog

cluster-ingress-operator

• Bug 1937214: Fix spurious reconciliation of NodePort services #570
• Bug 1935891: Canary: Perform canary test probes over https #566
• Bug 1936093: Canary: Use cluster-wide proxy for canary client #568
• Bug 1934904: Canary: Schedule canary server pods to worker and infra nodes #564
• Bug 1932649: Canary: Add edge termination to canary route #558
• Bug 1927080: Verify that Serivce resources have idle annotations from corresponding Endpoint resources, should they exist. #546
• Full changelog

cluster-kube-apiserver-operator

• Bug 1927321: competing connectivitycheckcontrollers cause pod restarts during upgrades #1041
• Bug 1927644: bootstrap: add –advertise-address=pod.status.hostIP #1042
• Full changelog

cluster-kube-controller-manager-operator

• Bug 1924488: Bump github.com/gogo/protobuf to v1.3.2 #508
• Full changelog

cluster-kube-scheduler-operator

• Bug 1924490: Bump github.com/gogo/protobuf to v1.3.2 #334
• Full changelog

cluster-kube-storage-version-migrator-operator

• Updating ose-cluster-kube-storage-version-migrator-operator builder & base images to be consistent with ART #38
• Full changelog

cluster-machine-approver

• Updating ose-cluster-machine-approver builder & base images to be consistent with ART #103
• Full changelog

cluster-monitoring-operator

• Bug 1945856: Revert “Bug 1934516: [4.7]: jsonnet/prometheus.jsonnet: Apply system-cluster-critical class to cluster Prometheus ” #1103
• Bug 1945851: Backport Remove the “instance” and “pod” labels for kube-state-metrics metrics #1101
• Bug 1926876: pkg/manifests: fix prometheus-proxy trustedCA #1051
• Bug 1932820: Remove kube-apiserver-availability.rules #1069
• Bug 1930876: etcdInsufficientMembers is wrong when etcd is in a pod #1066
• Full changelog

cluster-network-operator

• Bug 1936719: OSD-6600 network-metrics missing priorityClass #1007
• Bug 1927321: competing connectivitycheckcontrollers cause pod restarts during upgrades #1050
• Bug 1941212: The Multus daemonset should handle 10% maxUnavailable #1030
• Bug 1940806: OVN Upgrade: fix upgrade order of node and master #1029
• Bug 1929371: Don’t set ClusterOperator Version until rollout is complete #983
• Bug 1937829: Cherry-pick dual stack migration #1017
• Bug 1928028: Kuryr: Let Kuryr autodetect primary CNI interface #978
• Bug 1935473: Include LB members for Machines created on day-2 operation #1002
• Bug 1929168: Kuryr: Always set worker_nodes_subnets #987
• Full changelog

cluster-node-tuning-operator

• Bug 1928614: Keep ignition units in sync with [service] plugin. #215
• Full changelog

cluster-openshift-apiserver-operator

• Bug 1927321: competing connectivitycheckcontrollers cause pod restarts during upgrades #444
• Full changelog

cluster-openshift-controller-manager-operator

• Bug 1944142: Bump kubernetes to 0.20.5 #204
• Bug 1931856: Set registry routes in operand config #199
• Full changelog

cluster-policy-controller

• Bug 1924496: Bump github.com/gogo/protobuf to v1.3.2 #58
• Full changelog

cluster-samples-operator

• Bug 1950808: add DeepCopy to avoid SharedInformer cache mutation #370
• Full changelog

cluster-version-operator

• Bug 1943754: Ensure automountServiceAccountToken is synced on service account updates #539
• Bug 1941217: pkg/cvo/sync_worker: Skip precreation of baremetal ClusterOperator #534
• Bug 1926795: install/0000_90_cluster-version-operator_02_servicemonitor.yaml: adjust “CannotRetrieveUpdates” to “warning” #516
• Bug 1921413: pkg/start: Fix shutdown deadlock when die before getting a leader lock #521
• Full changelog

console

• Bug 1942843: Modified description for storage class encryption - 4.7 Backport #8462
• Bug 1948938: [release-4.7] Prow script point to deleted resource #8619
• Bug 1944855: Update Dockerfile.product for nodejs v14.16.0 #8488
• Bug 1945153: Remove pipeline Tech preview badge for pipelines GA operator #8528
• Bug 1943643: fix pipeline metrics endpoint for 1.4 osp #8489
• Bug 1944349: fix backwards incompatible trigger api changes #8503
• Bug 1943441: Add ‘Roll Back’ action for Replication Controllers and Replica Sets #8475
• Bug 1925792: Fix translation for edit annotation #8078
• Bug 1941468: Change link for not available state #8431
• Bug 1939608: Fix null handling in FilterToolbar_ to prevent possible exceptions #8394
• Bug 1937356: Fix to show correct internal image-stream name in container image edit flow’s internal registry image-stream dropdown for kn service #8353
• Bug 1927198: fix pvc string in pvc.view #8126
• Bug 1927311: avoid 404 errors attempting to load en-US #8128
• Bug 1931382: Hide pipeline section in container image edit flow #8209
• Bug 1933665: [release-4.7] Create ImageStream and other resources for samples step by step #8255
• Bug 1935672: [release-4.7] fix pipelinerun status icon rendering issue #8311
• Bug 1932272: Fix KMS validation error for 4.7 release #8221
• Bug 1937313: Removed loaded prop and nested component #8351
• Bug 1936803: support service binding operator version 0.5.0 #8335
• Bug 1937469: Pod/node/ip/template isn’t showing when vm is running #8357
• Bug 1932277: Create new pool with arbiter - wrong replica (4.7 release) #8234
• Bug 1930152: Do not fail new VM wizard when no storage classes are available #8190
• Bug 1937086: Fix topology crash due to selfLink deprecation #8317
• Bug 1928228: retry co-fetch on 409 POST or 429 #8154
• Bug 1932151: Fix rendering of access-mode selector #8229
• Bug 1929198: allow choice of binding type when creating RoleBinding #8172
• Bug 1928023: Consider finally tasks when calculating task status #8149
• Bug 1927407: update pf virtualized dependency to fix breakpoint prop missing in virtualized table #8130
• Bug 1932968: Fix to avoid overriding of d/dc pod template container values #8248
• Bug 1926830: [CI][e2e] Add storage.bind.immediate.requested annotation to golden image dvs #8245
• Full changelog

console-operator

• Bug 1936337: Check for error when generating default and user-defined config for the console-config configmap #512
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver

• Bug 1933659: Add udev to the driver image #47
• Full changelog

csi-driver-manila-operator

• Updating csi-driver-manila-operator builder & base images to be consistent with ART #91
• Full changelog

docker-builder

• Bug 1943726: add bracket logging on openshift/builder calls into buildah to assist test-platform team triage #237
• Bug 1945692: move entitlement related secrets back to mounts.conf #240
• Bug 1924554: bump(cni) 0.8.1 #234
• Bug 1940052: retry image pulls during builds #226
• Bug 1939218: bump(containers/*): #224
• Full changelog

etcd

• ETCD-178: Bug 1944386: openshift-tools: fix on off flow and add unit tests #74
• Updating ose-etcd builder & base images to be consistent with ART #67
• Full changelog

gcp-machine-controllers

• Bug 1935636: Ensure response body is closed when we are finished with the request #151
• Full changelog

gcp-pd-csi-driver-operator

• Updating ose-gcp-pd-csi-driver-operator builder & base images to be consistent with ART #11
• Full changelog

grafana

• Updating grafana builder & base images to be consistent with ART #54
• Full changelog

haproxy-router

• Bug 1942534: [4.7 backport] Route gets admitted with invalid host name if override annotation is used #273
• Bug 1938921: router/template: Cache compiled regular expressions #269
• Full changelog

hello-openshift, tests

• Bug 1942055: upgrade/upgrade.go: Enhance upgrade ack time out error #26012
• Bug 1941574: test/extended/router/idle: skip test on virt platforms #25999
• Bug 1940866: Add BareMetalPlatformType into e2e upgrade service unsupported list #25989
• Bug 1927953: test/extended/router/idle: address flakes/failures seen in CI #25892
• Bug 1931622: test: add vsphere to unsupported platforms for LB service #25913
• Bug 1932806: release-4.7: e2e: test OAuth API connections in the tests by that name #25894
• Bug 1935707: [release-4.7] test: Detect when the master pool is still updating after upgrade #25941
• Bug 1931401: fix sig-cli flakes #25910
• Bug 1939477: Update tests to use Ruby 2.7 #25966
• Bug 1927554: adjust route host for redis/nodejs/cakephp to accomodate new apiserver restrictions #25884
• Full changelog

hyperkube

• Bug 1945856: 99729:Only system-node-critical pods should be OOM Killed last #642
• Bug 1927717: UPSTREAM: 98939: fixes race in TestSyncPodsDeletesWhenSourcesAreReady #567
• Bug 1931702: UPSTREAM: 96958: kubelet: remove periodic messages from log-level 2 #589
• Bug 1931745: UPSTREAM: 98956: Fix race when KillPod followed by IsPodPendingTermining #590
• Bug 1929674: kubelet: fix create sandbox delete pod race #591
• Bug 1933094: UPSTREAM: 98742: Sync completed pods until their containers have been terminated #595
• Bug 1929012: UPSTREAM: 96984: APF e2e: wait for steady state before proceeding #572
• Full changelog

insights-operator

• Bug 1942068: Gahter datahubs.installers.datahub.sap.com resources from SAP clusters (#383) #383
• Bug 1939061: Sap license management logs gatherer 4.7 (#372) #372
• Adds memory usage to the metadata (#364) #364
• Bug 1935070: Extend the OLM operator data with related … (#362) #362
• Bug 1934442: Gather info about unhealthy SAP pods (#360) #360
• Bug 1936802: Authentication log gatherer - do not scan all the pods in openshfit-authentication (#369) #369
• Bug 1936861: Include namespace name in binarydata configmap path & test (#368) (#370) #368
• Bug 1925659: Relax the recent log gatherers to avoid degrading during… (#331) #331
• Full changelog

ironic

• Bug 1937695: Supply a default for COPY args #155
• Full changelog

ironic-ipa-downloader

• Bug 1937809: Update ironic-images package #63
• Updating ironic-ipa-downloader builder & base images to be consistent with ART #50
• Full changelog

ironic-machine-os-downloader

• Updating ironic-rhcos-downloader builder & base images to be consistent with ART #34
• Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

• [release 4.7] Bug 1929118: update kubernetes-client-api #1230
• Bug 1925484: Upgrade Jenkins to 2.263.3 #1220
• Full changelog

kube-proxy, sdn

• Bug 1941993: Fix incorrect unmonitoring of egress nodes #279
• Bug 1924830: CVE-2021-3121 gogo/protobuf lacks certain index validation #265
• Bug 1936920: networkpolicy: pass traffic through NAT to handle possible tuple collisions #272
• Bug 1928304: Prefer local endpoint for cluster DNS service #259
• Full changelog

kube-rbac-proxy

• Updating kube-rbac-proxy builder & base images to be consistent with ART #42
• Full changelog

kuryr-cni, kuryr-controller

• Bug 1938960: Ignore headless services in NP code #487
• Bug 1938960: Do not default protocol to TCP for allow-all NPs #480
• Bug 1930017: Narrow connection to the cluster only on namespaceSelector #460
• Bug 1928029: Get trunks more diligently #449
• Bug 1929168: OpenShift: Add configured subnets to the detected #457
• Full changelog

libvirt-machine-controllers

• Bug 1938316: [release-4.7] Update MAO and set metrics on :8081 address #219
• Full changelog

machine-api-operator

• Bug 1929721: Add SecurityProfile.EncryptionAtHost parameter to enable host-based VM encryption #818
• Bug 1934798: reuse mgr client in webhooks #821
• Full changelog

machine-config-operator

• Bug 1951028: configure-ovs doesn’t handle bond interfaces correctly for OVNKubernetes #2536
• Bug 1944394: Do “systemctl daemon-reload” after running “runtimecfg node-ip” #2497
• Fixes: Bug 1943143: [vsphere] hostnames are changed when upgrading from 4.6 to 4.7.x causing upgrades to fail #2490
• Bug 1941246: vSphere: Disable tx-udp-tnl offload #2495
• Bug 1941128: pkg/operator/status: Use ‘DegradedPool’ reason for Upgradeable=False #2473
• Bug 1941367: Make getting the suffix of an MC more robust #2476
• Bug 1933205: Revert “pkg/daemon: Add IgnitionVersion to Daemon” #2438
• Bug 1927783: [vsphere] set hostname with –static to provide consistent node name for CSR approval #2405
• Bug 1931863: Apply system-connections-merged to all platforms #2426
• Bug 1936008: templates: add After=ostree-finalize-staged.service to kubelet.service #2455
• Bug 1929257: Fix 1:1 mapping for kubeletconfig:MC and some e2e test fixes #2462
• Bug 1939278: Backport kubelet CA no-drain rotation #2464
• Bug 1933368: operator/sync.go restore err when required pools not leveled #2441
• Bug 1932860: Remove recycler pod templates #2434
• Bug 1931615: OVS Config: fixes detecting bond NM files with static IP #2452
• Bug 1927405: Fixes ovs-configuration with cloned connections #2418
• Bug 1932638: handle Passwd.Users removal more gracefully #2430
• Full changelog

multus-cni

• Bug 1927896: make a copy of global RuntimeConfig on merge #91
• Bug 1936334: Updating multus-cni builder & base images to be consistent with ART #81
• Full changelog

multus-whereabouts-ipam-cni

• Bug 1931950: [backport 4.7] Fix for IPv6 when leading hextets equal zero #49
• Full changelog

oauth-apiserver

• Bug 1917904: bump k8s.io/apiserver to 1.20.4 #43
• Full changelog

openshift-apiserver

• Bug 1917904: bump k8s.io/apiserver to 1.20.4 #187
• Full changelog

operator-lifecycle-manager

• Bug 1947909: Do not adopt copied CSVs #2089
• Bug 1937375: only override deployment resources when explicitly defined in subscription config #2036
• Bug 1933839: bump k8s.io/apiserver for webhook authorizer panic fix #2022
• Bug 1936707: Allow non-CSV-owned ServiceAccounts to satisfy CSV requirements. #2034
• Bug 1938405: Support jittering relatively small resync intervals. #2041
• Updating operator-lifecycle-manager builder & base images to be consistent with ART #2013
• Bug 1934724: fix(resolver): Allow skipped versions to be installed initially #2027
• Bug 1929904: Infer package name property for unannotated CSVs, if possible. #2033
• Bug 1932002: Only one of multiple subscriptions to the same package is honored #2009
• Full changelog

operator-marketplace

• Updating marketplace-operator builder & base images to be consistent with ART #367
• Full changelog

operator-registry

• Bug 1931903: add missing closes #597
• Updating operator-registry builder & base images to be consistent with ART #584
• Full changelog

ovirt-csi-driver

• Updating ose-ovirt-csi-driver builder & base images to be consistent with ART #72
• Full changelog

ovirt-csi-driver-operator

• Bug 1929777: Run config informers when starting the operator #49
• Full changelog

ovirt-machine-controllers

• Bug 1939358: extract node machine ipaddress from the engine instead using DNS . #98
• Bug 1939360: providerIDController ignore nodes that have no machine #99
• Bug 1939199: move to go 1.15 and registry.ci.openshift.org #97
• Bug 1927256: Bump K8s dependencies to 1.20 #92
• Updating ose-ovirt-machine-controllers builder & base images to be consistent with ART #90
• Full changelog

ovn-kubernetes

• Bug 1951552: master: Delay deleting Namespace’s address set for 20 seconds #507
• Bug 1950432: [4.7] pods: bind pod logical switch ports to the node’s chassis with requested-chassis #503
• Bug 1924826: Backport Update gogo/protobuf to v1.3.2. #464
• Bug 1943316: [4.7] master: enable logical datapath groups for OVN >= 20.12 #478
• Bug 1946696: iptables: add filter on node local traffic #489
• Bug 1947835: Fix service update for policy type assertion #493
• Bug 1942702: backport lr-nat-del/add fixes #484
• Bug 1931520: Backport Fix ACL syntax for dual-stack #465
• Bug 1943310: [4.7] Enable DB memory trimming on compaction #477
• Bug 1932268: detect if the cluster has endpoint slices #442
• Bug 1935180: Backport Fix mcast querier #468
• Bug 1937829: Cherry-pick dual-stack conversion #460
• Bug 1934645: Backport enable support for BFD on external gateway routes #462
• Bug 1925475: Bump OVN to ovn2.13-20.12.0-24.el8fdp #451
• Bug 1937238: Refactor chain setup for NodePort and ExternalIP #457
• Full changelog

prom-label-proxy

• Updating prom-label-proxy builder & base images to be consistent with ART #330
• Full changelog

service-ca-operator

• Updating ose-service-ca-operator builder & base images to be consistent with ART #140
• Full changelog

telemeter

• Updating telemeter builder & base images to be consistent with ART #369
• Full changelog

vsphere-problem-detector

• Bug 1936975: Fix deadlock when enqueing functions into the pool #35
• Full changelog

---

View changelog in Markdown or change previous release: 4.21.0-0.nightly-2025-10-24-1226554.21.0-0.nightly-2025-10-24-0458394.21.0-0.nightly-2025-10-23-2257334.21.0-0.nightly-2025-10-23-1538174.21.0-0.nightly-2025-10-23-0902574.21.0-0.nightly-2025-10-23-0206414.21.0-0.nightly-2025-10-22-1850024.21.0-0.nightly-2025-10-22-1237274.21.0-0.nightly-2025-10-22-0454304.21.0-0.nightly-2025-10-21-2118294.21.0-0.nightly-2025-10-20-0802284.21.0-0.nightly-2025-10-19-1811514.21.0-0.nightly-2025-10-19-0551394.21.0-0.nightly-2025-10-18-2259584.21.0-0.nightly-2025-10-17-0121284.21.0-0.nightly-2025-10-15-1010124.21.0-0.nightly-2025-10-14-0418204.21.0-0.nightly-2025-10-12-1150194.21.0-0.nightly-2025-09-27-232055───4.21.0-0.ci-2025-10-24-0919054.21.0-0.ci-2025-10-24-0319044.21.0-0.ci-2025-10-23-2119034.21.0-0.ci-2025-10-23-1519024.21.0-0.ci-2025-10-23-0919024.21.0-0.ci-2025-10-23-0319024.21.0-0.ci-2025-10-22-2119024.21.0-0.ci-2025-10-22-1519024.21.0-0.ci-2025-10-22-0919024.21.0-0.ci-2025-10-22-0319024.21.0-0.ci-2025-10-21-2119024.21.0-0.ci-2025-10-21-151902───4.20.0-0.nightly-2025-10-24-1040584.20.0-0.nightly-2025-10-24-0338344.20.0-0.nightly-2025-10-23-2205504.20.0-0.nightly-2025-10-23-1250394.20.0-0.nightly-2025-10-23-0412314.20.0-0.nightly-2025-10-22-1944144.20.0-0.nightly-2025-10-22-1415004.20.0-0.nightly-2025-10-22-0328204.20.0-0.nightly-2025-10-21-1733564.20.0-0.nightly-2025-10-21-0647454.20.0-0.nightly-2025-10-21-0034344.20.0-0.nightly-2025-10-19-1539354.20.0-0.nightly-2025-10-19-0858174.20.0-0.nightly-2025-10-19-0347494.20.0-0.nightly-2025-10-18-2201004.20.0-0.nightly-2025-10-18-1609524.20.0-0.nightly-2025-10-15-1102524.20.0-0.nightly-2025-10-14-2008164.20.0-0.nightly-2025-10-14-0221294.20.0-0.nightly-2025-10-13-0536454.20.0-0.nightly-2025-10-12-1020044.20.0-0.nightly-2025-10-11-2121394.20.0-0.nightly-2025-05-26-181128───4.20.0-0.ci-2025-10-24-0839484.20.0-0.ci-2025-10-24-0239484.20.0-0.ci-2025-10-23-1856204.20.0-0.ci-2025-10-23-1019214.20.0-0.ci-2025-10-23-0200434.20.0-0.ci-2025-10-22-1713444.20.0-0.ci-2025-10-22-0910114.20.0-0.ci-2025-10-22-0310114.20.0-0.ci-2025-10-21-1357144.20.0-0.ci-2025-10-21-0243514.20.0-0.ci-2025-10-20-204351───4.19.0-0.nightly-2025-10-22-1412594.19.0-0.nightly-2025-10-22-0626034.19.0-0.nightly-2025-10-22-0103394.19.0-0.nightly-2025-10-21-0813034.19.0-0.nightly-2025-10-21-0038294.19.0-0.nightly-2025-10-20-0634014.19.0-0.nightly-2025-10-20-0110134.19.0-0.nightly-2025-10-19-1707074.19.0-0.nightly-2025-10-19-1207564.19.0-0.nightly-2025-10-19-0700094.19.0-0.nightly-2025-10-19-0159524.19.0-0.nightly-2025-10-18-0956464.19.0-0.nightly-2025-10-17-2350484.19.0-0.nightly-2025-10-15-0513594.19.0-0.nightly-2025-10-14-0735464.19.0-0.nightly-2025-10-13-145710───4.19.0-0.ci-2025-10-24-0937514.19.0-0.ci-2025-10-23-2351584.19.0-0.ci-2025-10-23-1448534.19.0-0.ci-2025-10-23-0651324.19.0-0.ci-2025-10-22-2241094.19.0-0.ci-2025-10-22-1415004.19.0-0.ci-2025-10-22-0552394.19.0-0.ci-2025-10-21-2254574.19.0-0.ci-2025-10-21-1427574.19.0-0.ci-2025-10-21-082757───4.18.0-0.nightly-2025-10-24-1102084.18.0-0.nightly-2025-10-24-0702084.18.0-0.nightly-2025-10-24-0034214.18.0-0.nightly-2025-10-23-1831504.18.0-0.nightly-2025-10-23-1056544.18.0-0.nightly-2025-10-23-0656544.18.0-0.nightly-2025-10-23-0054024.18.0-0.nightly-2025-10-22-1704294.18.0-0.nightly-2025-10-22-1023014.18.0-0.nightly-2025-10-22-0235074.18.0-0.nightly-2025-10-21-1846484.18.0-0.nightly-2025-10-21-0613044.18.0-0.nightly-2025-10-21-0213044.18.0-0.nightly-2025-10-20-1312574.18.0-0.nightly-2025-10-19-2350174.18.0-0.nightly-2025-10-19-1419324.18.0-0.nightly-2025-10-17-2146334.18.0-0.nightly-2025-10-15-1044284.18.0-0.nightly-2025-10-13-2155274.18.0-0.nightly-2025-10-13-1551244.18.0-0.nightly-2025-10-13-1151244.18.0-0.nightly-2025-10-13-0354394.18.0-0.nightly-2025-10-12-2242264.18.0-0.nightly-2025-10-12-1842264.18.0-0.nightly-2025-10-12-0520514.18.0-0.nightly-2025-10-12-0046024.18.0-0.nightly-2025-10-11-1859074.18.0-0.nightly-2025-10-11-1251314.18.0-0.nightly-2025-10-11-0523134.18.0-0.nightly-2025-10-11-0017564.18.0-0.nightly-2025-10-10-183709───4.18.0-0.ci-2025-10-24-1325444.18.0-0.ci-2025-10-24-0725444.18.0-0.ci-2025-10-24-0125444.18.0-0.ci-2025-10-23-1925444.18.0-0.ci-2025-10-23-1119224.18.0-0.ci-2025-10-23-0519224.18.0-0.ci-2025-10-22-2138204.18.0-0.ci-2025-10-22-1415184.18.0-0.ci-2025-10-22-0631264.18.0-0.ci-2025-10-22-003126───4.17.0-0.nightly-2025-10-24-1146344.17.0-0.nightly-2025-10-24-0639164.17.0-0.nightly-2025-10-24-0239164.17.0-0.nightly-2025-10-23-2239164.17.0-0.nightly-2025-10-23-1839164.17.0-0.nightly-2025-10-23-1325324.17.0-0.nightly-2025-10-23-0753114.17.0-0.nightly-2025-10-23-0034584.17.0-0.nightly-2025-10-22-2034584.17.0-0.nightly-2025-10-22-0050294.17.0-0.nightly-2025-10-21-1509184.17.0-0.nightly-2025-10-21-0928444.17.0-0.nightly-2025-10-21-0528444.17.0-0.nightly-2025-10-21-0034244.17.0-0.nightly-2025-10-20-1252174.17.0-0.nightly-2025-10-20-0050174.17.0-0.nightly-2025-10-19-1341014.17.0-0.nightly-2025-10-19-0940494.17.0-0.nightly-2025-10-18-2221284.17.0-0.nightly-2025-10-18-1716114.17.0-0.nightly-2025-10-18-0953154.17.0-0.nightly-2025-10-17-2133144.17.0-0.nightly-2025-10-15-0509114.17.0-0.nightly-2025-10-14-1617004.17.0-0.nightly-2025-10-14-1004124.17.0-0.nightly-2025-10-13-2357514.17.0-0.nightly-2025-10-13-1703474.17.0-0.nightly-2025-10-13-1213234.17.0-0.nightly-2025-10-13-0701034.17.0-0.nightly-2025-10-13-0206184.17.0-0.nightly-2025-10-12-2206184.17.0-0.nightly-2025-10-12-1806184.17.0-0.nightly-2025-10-12-1406184.17.0-0.nightly-2025-10-12-1006184.17.0-0.nightly-2025-10-12-0349184.17.0-0.nightly-2025-10-11-2025024.17.0-0.nightly-2025-10-11-1430544.17.0-0.nightly-2025-10-11-0837514.17.0-0.nightly-2025-10-11-0322504.17.0-0.nightly-2025-10-10-2230514.17.0-0.nightly-2025-10-10-152126───4.17.0-0.ci-2025-10-24-1239034.17.0-0.ci-2025-10-24-0430374.17.0-0.ci-2025-10-23-2230374.17.0-0.ci-2025-10-23-1502054.17.0-0.ci-2025-10-23-0739424.17.0-0.ci-2025-10-22-2332534.17.0-0.ci-2025-10-22-1603074.17.0-0.ci-2025-10-22-1003074.17.0-0.ci-2025-10-22-0221304.17.0-0.ci-2025-10-21-184951───4.16.0-0.nightly-2025-10-23-0554254.16.0-0.nightly-2025-10-23-0154254.16.0-0.nightly-2025-10-22-1700034.16.0-0.nightly-2025-10-22-0217394.16.0-0.nightly-2025-10-21-0238524.16.0-0.nightly-2025-10-20-0444454.16.0-0.nightly-2025-10-15-1853074.16.0-0.nightly-2025-10-15-1046474.16.0-0.nightly-2025-10-14-1826194.16.0-0.nightly-2025-10-13-1727054.16.0-0.nightly-2025-10-13-1000274.16.0-0.nightly-2025-10-13-0221564.16.0-0.nightly-2025-10-12-0254104.16.0-0.nightly-2025-10-11-144421───4.16.0-0.ci-2025-10-24-0934304.16.0-0.ci-2025-10-24-0334304.16.0-0.ci-2025-10-23-2134304.16.0-0.ci-2025-10-23-1401094.16.0-0.ci-2025-10-23-0801094.16.0-0.ci-2025-10-23-0201094.16.0-0.ci-2025-10-22-1532274.16.0-0.ci-2025-10-22-0932274.16.0-0.ci-2025-10-22-0128444.16.0-0.ci-2025-10-21-192844───4.15.0-0.nightly-2025-10-22-2228314.15.0-0.nightly-2025-10-22-0521174.15.0-0.nightly-2025-10-21-0728594.15.0-0.nightly-2025-10-20-0307074.15.0-0.nightly-2025-10-18-1108564.15.0-0.nightly-2025-10-17-0255564.15.0-0.nightly-2025-10-16-1437334.15.0-0.nightly-2025-10-15-2112134.15.0-0.nightly-2025-10-11-150019───4.15.0-0.ci-2025-10-24-0925004.15.0-0.ci-2025-10-23-2213314.15.0-0.ci-2025-10-23-0648194.15.0-0.ci-2025-10-22-1903444.15.0-0.ci-2025-10-22-1136174.15.0-0.ci-2025-10-22-0536174.15.0-0.ci-2025-10-21-1703364.15.0-0.ci-2025-10-21-1103364.15.0-0.ci-2025-10-21-0503364.15.0-0.ci-2025-10-19-1252164.15.0-0.ci-2025-10-19-014338───4.14.0-0.nightly-2025-10-24-0304204.14.0-0.nightly-2025-10-23-1507144.14.0-0.nightly-2025-10-23-1043504.14.0-0.nightly-2025-10-23-0149134.14.0-0.nightly-2025-10-22-1710074.14.0-0.nightly-2025-10-22-0212334.14.0-0.nightly-2025-10-21-0645394.14.0-0.nightly-2025-10-20-0301344.14.0-0.nightly-2025-10-19-142809───4.14.0-0.ci-2025-10-23-2139584.14.0-0.ci-2025-10-23-0726224.14.0-0.ci-2025-10-22-1941514.14.0-0.ci-2025-10-22-1341514.14.0-0.ci-2025-10-22-0510304.14.0-0.ci-2025-10-21-190507───4.13.0-0.nightly-2025-10-22-1628044.13.0-0.nightly-2025-10-22-0404214.13.0-0.nightly-2025-10-21-1705484.13.0-0.nightly-2025-10-21-0419144.13.0-0.nightly-2025-10-20-0144594.13.0-0.nightly-2025-10-18-0201124.13.0-0.nightly-2025-10-17-020657───4.13.0-0.ci-2025-10-24-0808534.13.0-0.ci-2025-10-24-0208534.13.0-0.ci-2025-10-23-2008534.13.0-0.ci-2025-10-23-1408534.13.0-0.ci-2025-10-23-0808534.13.0-0.ci-2025-10-17-0726454.13.0-0.ci-2025-10-16-2027544.13.0-0.ci-2025-10-16-1013424.13.0-0.ci-2025-10-15-2235034.13.0-0.ci-2025-10-14-1341514.13.0-0.ci-2025-10-13-1536564.13.0-0.ci-2025-10-13-045803───4.12.0-0.nightly-2025-10-24-0101004.12.0-0.nightly-2025-10-23-1016434.12.0-0.nightly-2025-10-23-0127204.12.0-0.nightly-2025-10-22-1602524.12.0-0.nightly-2025-10-21-1413554.12.0-0.nightly-2025-10-20-0147124.12.0-0.nightly-2025-10-18-0135064.12.0-0.nightly-2025-10-17-0204404.12.0-0.nightly-2025-10-16-0147244.12.0-0.nightly-2025-10-14-134748───4.12.0-0.ci-2025-10-23-1157364.12.0-0.ci-2025-10-23-0124114.12.0-0.ci-2025-10-17-0530594.12.0-0.ci-2025-10-16-2201354.12.0-0.ci-2025-10-16-160135───4.11.0-0.nightly-2025-08-30-0110584.11.0-0.nightly-2025-08-27-2007484.11.0-0.nightly-2025-08-26-2039164.11.0-0.nightly-2025-08-21-0105404.11.0-0.nightly-2025-08-14-204255───4.11.0-0.ci-2025-09-22-2122234.11.0-0.ci-2025-09-22-1522234.11.0-0.ci-2025-09-12-1707384.11.0-0.ci-2025-09-05-0328514.11.0-0.ci-2025-09-04-212851───4.21.0-ec.24.21.0-ec.14.21.0-ec.0

Source code for this page located on github