# 4.7.0-0.okd-2021-06-19-191547

Created: 2021-06-20 06:35:15 +0000 UTC

Image Digest: `sha256:a6a71ae89dc9e171fecc2fb93d6a02f9bdd720cd4ca93c1de0b0c5575c12c907`

Promoted from registry.ci.openshift.org/origin/release:4.7.0-0.okd-2021-06-19-191547


## Changes from 4.7.0-0.okd-2021-06-04-191031

### Components

* Kubernetes 1.20.0-beta.2


### Rebuilt images without code change

* [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator) git [00b1f648](https://github.com/openshift/csi-driver-manila-operator/commit/00b1f648e74d8008ce32ae65eb4d6d8b5ac1bbed) `sha256:404d37468a7190bd3e99f54d3116edc973a2aee1309c76142cb6ceeebdd9e777`
* [docker-builder](https://github.com/openshift/builder) git [82eeeac0](https://github.com/openshift/builder/commit/82eeeac0c8cbad90f951885cc11939ecd51eda76) `sha256:f61e7b869414dd8486621ebd2b69c27c0c49f3f54dac1461de6891556625244b`
* [docker-registry](https://github.com/openshift/image-registry) git [8e0c068a](https://github.com/openshift/image-registry/commit/8e0c068aef607fceffe3e179c3a9701f51c51dff) `sha256:805288f9f778c2aa2d20e74c3d331f86b255953fa26badce188c6b0d48dd4060`
* [local-storage-static-provisioner](https://github.com/openshift/sig-storage-local-static-provisioner) git [a0545238](https://github.com/openshift/sig-storage-local-static-provisioner/commit/a05452380aa1e026a63a8401a4e472876a20a0a1) `sha256:435465220d3349bd2690fb63844e1fa32a9ee88c43aa361dc81ffbdfc412ed4c`
* [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [471cf3ab](https://github.com/openshift/cluster-api-provider-openstack/commit/471cf3ab636c26ed7c9fba6330374a5ea1b36b43) `sha256:b29a2d9b7457e7efbea75ff255df0dfb977b82dd9c04c1fa6b44e0624e026f29`


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/18211b08ad1d7c4df6dc66acf0fcdf692fa72002)

* [Bug 1961341](https://bugzilla.redhat.com/show_bug.cgi?id=1961341): config: use rbacv1 instead of rbacv1beta1 [#148](https://github.com/openshift/baremetal-operator/pull/148)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/74c60aa957f53432d0a98afc78099add55d27c44...18211b08ad1d7c4df6dc66acf0fcdf692fa72002)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/9b9f77a716c8b7ee73f6424e37748ea6b53f495a)

* [Bug 1970811](https://bugzilla.redhat.com/show_bug.cgi?id=1970811): set User-Agent when talking with registries [#848](https://github.com/openshift/oc/pull/848)
* [Bug 1969928](https://bugzilla.redhat.com/show_bug.cgi?id=1969928): exclude security during exctraction [#844](https://github.com/openshift/oc/pull/844)
* [Full changelog](https://github.com/openshift/oc/compare/e29b355e74c9efd4491d64b9bb013c6091770d20...9b9f77a716c8b7ee73f6424e37748ea6b53f495a)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/0783477aa72edf998344740933a99c0417ebe573)

* [Bug 1958983](https://bugzilla.redhat.com/show_bug.cgi?id=1958983): rework GCP passthrough permissions checking [#338](https://github.com/openshift/cloud-credential-operator/pull/338)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/d088f49b436447a29a50958ddafd44e3362fb8ab...0783477aa72edf998344740933a99c0417ebe573)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/16bd3f3f4584442f42a83b4d8ee8e2f9fd0acb87)

* [Bug 1971087](https://bugzilla.redhat.com/show_bug.cgi?id=1971087): add a controller to remove webhooktokenauthenticator config [#418](https://github.com/openshift/cluster-authentication-operator/pull/418)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/a28bdc97c7f9d1ec4a0a859abeaeda41b37e381f...16bd3f3f4584442f42a83b4d8ee8e2f9fd0acb87)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/cf8be7b279499d5010894b8c9bf79acc9853be36)

* [Bug 1967766](https://bugzilla.redhat.com/show_bug.cgi?id=1967766): Corefile: Set bufsize to 512 bytes for all servers [#277](https://github.com/openshift/cluster-dns-operator/pull/277)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/d6ba05f21dacb373c9d3386fc15e755718b03d4d...cf8be7b279499d5010894b8c9bf79acc9853be36)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/65802d37f61b73036cf1c1a5cfe3bd58acccaf12)

* [Bug 1951447](https://bugzilla.redhat.com/show_bug.cgi?id=1951447): pkg/etcdenvvar/etcd_env.go: Sort endpoints to prevent rollout [#568](https://github.com/openshift/cluster-etcd-operator/pull/568)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/08595861de20850111f5e6cc76b4ad3a943b71a8...65802d37f61b73036cf1c1a5cfe3bd58acccaf12)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/1111d1c47568f2abbda1b5aed454611460f2ede4)

* [Bug 1960776](https://bugzilla.redhat.com/show_bug.cgi?id=1960776): Reconcile openshift-ingress namespace on upgrade [#616](https://github.com/openshift/cluster-ingress-operator/pull/616)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/fca8201e866741243b42fa75392875654acd8bf0...1111d1c47568f2abbda1b5aed454611460f2ede4)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/d6725052e00a206cab10f6c40abdfa1a3c2aff0f)

* [Bug 1969963](https://bugzilla.redhat.com/show_bug.cgi?id=1969963): Recording rule for builds by strategy [#1206](https://github.com/openshift/cluster-monitoring-operator/pull/1206)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/e5ebf6ed4a158a488989184bfbfbc962ccf70c2a...d6725052e00a206cab10f6c40abdfa1a3c2aff0f)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/ad893a41cd42cf7992e812ea47b5dd814f05c760)

* [Bug 1969860](https://bugzilla.redhat.com/show_bug.cgi?id=1969860): Escape characters on ini file [#1127](https://github.com/openshift/cluster-network-operator/pull/1127)
* [Bug 1967994](https://bugzilla.redhat.com/show_bug.cgi?id=1967994): Backport daemonset to drop icmp frag needed packets received from other nodes in the cluster to Rel 4.7 [#1119](https://github.com/openshift/cluster-network-operator/pull/1119)
* [Bug 1972183](https://bugzilla.redhat.com/show_bug.cgi?id=1972183): config: Set enable-profiling true by default and allow enable-profiling as a proxy argument [#1129](https://github.com/openshift/cluster-network-operator/pull/1129)
* [Bug 1967388](https://bugzilla.redhat.com/show_bug.cgi?id=1967388): annotate flowcontrol with `networkoperator.openshift.io/ignore-errors` [#1118](https://github.com/openshift/cluster-network-operator/pull/1118)
* [Bug 1967972](https://bugzilla.redhat.com/show_bug.cgi?id=1967972): Add tokenreviews permissions for kube-proxy [#1120](https://github.com/openshift/cluster-network-operator/pull/1120)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/a955b29f027af0f99eafeecfba7840c6caa1db89...ad893a41cd42cf7992e812ea47b5dd814f05c760)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/fa7bfbc485b4256535b7de172d1083f83c9409ce)

* [Bug 1970272](https://bugzilla.redhat.com/show_bug.cgi?id=1970272): Fixing the log message in rbac.go for clusterrole [#609](https://github.com/openshift/cluster-version-operator/pull/609)
* [Bug 1970272](https://bugzilla.redhat.com/show_bug.cgi?id=1970272): Log object updates and show existing/required diff [#589](https://github.com/openshift/cluster-version-operator/pull/589)
* [Bug 1969501](https://bugzilla.redhat.com/show_bug.cgi?id=1969501): install/0000_90_cluster-version-operator_02_servicemonitor: Soften ClusterOperatorDegraded [#587](https://github.com/openshift/cluster-version-operator/pull/587)
* [Bug 1969378](https://bugzilla.redhat.com/show_bug.cgi?id=1969378): avoid hotlooping on RoleBindings with empty APIGroup [#584](https://github.com/openshift/cluster-version-operator/pull/584)
* [Bug 1966977](https://bugzilla.redhat.com/show_bug.cgi?id=1966977): Prevent hotlooping in ImageStreams [#580](https://github.com/openshift/cluster-version-operator/pull/580)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/ca61c7f365c0c7f0bece192333a387fb80d3e6e1...fa7bfbc485b4256535b7de172d1083f83c9409ce)


### [console](https://github.com/openshift/console/tree/1783709dfb49ea835f73037e588fe46ab12b4863)

* [Bug 1965526](https://bugzilla.redhat.com/show_bug.cgi?id=1965526): Removing library charts from the merged helm repo index entries. [#9076](https://github.com/openshift/console/pull/9076)
* [Bug 1970796](https://bugzilla.redhat.com/show_bug.cgi?id=1970796): update cluster-local label for ksvc [#9220](https://github.com/openshift/console/pull/9220)
* [Bug 1970720](https://bugzilla.redhat.com/show_bug.cgi?id=1970720): fix rotated pipelinerun status icon issue in safari [#9216](https://github.com/openshift/console/pull/9216)
* [Bug 1969536](https://bugzilla.redhat.com/show_bug.cgi?id=1969536): Omit bitbucket branch in URL if it contains slash [#9180](https://github.com/openshift/console/pull/9180)
* [Bug 1954962](https://bugzilla.redhat.com/show_bug.cgi?id=1954962): removes extra annotations form spec template for ksvc [#8823](https://github.com/openshift/console/pull/8823)
* [Bug 1948537](https://bugzilla.redhat.com/show_bug.cgi?id=1948537): add hide/reveal button for kms token [#8616](https://github.com/openshift/console/pull/8616)
* [Bug 1942160](https://bugzilla.redhat.com/show_bug.cgi?id=1942160): Update the scope of GitOpsService resource [#8450](https://github.com/openshift/console/pull/8450)
* [Bug 1971667](https://bugzilla.redhat.com/show_bug.cgi?id=1971667): Track and show error messages in modals [#9232](https://github.com/openshift/console/pull/9232)
* [Bug 1969791](https://bugzilla.redhat.com/show_bug.cgi?id=1969791): fixes: WebTerminal widget should send resize events [#9190](https://github.com/openshift/console/pull/9190)
* [Bug 1969105](https://bugzilla.redhat.com/show_bug.cgi?id=1969105): Update IP address on pods list to show podIP other than … [#9172](https://github.com/openshift/console/pull/9172)
* [Bug 1967106](https://bugzilla.redhat.com/show_bug.cgi?id=1967106): can't open terminal for pods that have more than one co… [#9117](https://github.com/openshift/console/pull/9117)
* [Bug 1966275](https://bugzilla.redhat.com/show_bug.cgi?id=1966275): Fix Pipeline Parameters in Modals accept empty string defaults [#9085](https://github.com/openshift/console/pull/9085)
* [Bug 1961567](https://bugzilla.redhat.com/show_bug.cgi?id=1961567): Remove the broken Devfile Sample for BuildConfigs [#8956](https://github.com/openshift/console/pull/8956)
* [Bug 1963025](https://bugzilla.redhat.com/show_bug.cgi?id=1963025): Fix documentation link to network policies [#8953](https://github.com/openshift/console/pull/8953)
* [Bug 1953606](https://bugzilla.redhat.com/show_bug.cgi?id=1953606): Fixing failure domain issue with custom pools (4.7 backport) [#8775](https://github.com/openshift/console/pull/8775)
* [Bug 1970485](https://bugzilla.redhat.com/show_bug.cgi?id=1970485): Add pipeline annotation to secrets for private git repo import with pipeline [#9207](https://github.com/openshift/console/pull/9207)
* [Bug 1964400](https://bugzilla.redhat.com/show_bug.cgi?id=1964400): Fix RGW Total Used Query [#9038](https://github.com/openshift/console/pull/9038)
* [Bug 1958873](https://bugzilla.redhat.com/show_bug.cgi?id=1958873): Fix disk replacement during second replacement [#9083](https://github.com/openshift/console/pull/9083)
* [Bug 1961887](https://bugzilla.redhat.com/show_bug.cgi?id=1961887): Update Taskrun tab to make namespace based calls [#8968](https://github.com/openshift/console/pull/8968)
* [Bug 1959356](https://bugzilla.redhat.com/show_bug.cgi?id=1959356): Tech preview badge for arbiter [#8870](https://github.com/openshift/console/pull/8870)
* [Bug 1964322](https://bugzilla.redhat.com/show_bug.cgi?id=1964322): The status of "Used Capacity Breakdown [Pods]" is "Not available" [#9028](https://github.com/openshift/console/pull/9028)
* [Bug 1957499](https://bugzilla.redhat.com/show_bug.cgi?id=1957499): OperatorHub - console accepts any value for infraFeatures [#8859](https://github.com/openshift/console/pull/8859)
* [Bug 1960686](https://bugzilla.redhat.com/show_bug.cgi?id=1960686): Fix hot loop in global config page [#8935](https://github.com/openshift/console/pull/8935)
* [Bug 1947091](https://bugzilla.redhat.com/show_bug.cgi?id=1947091): Fix skipped task status when using conditions [#8582](https://github.com/openshift/console/pull/8582)
* [Bug 1962493](https://bugzilla.redhat.com/show_bug.cgi?id=1962493): Hide TaskRun edit actions for rows in Pipelinerun's TaskRun tab [#8987](https://github.com/openshift/console/pull/8987)
* [Full changelog](https://github.com/openshift/console/compare/d9f43798f92e4d078c7c51b4b4cd1d388aaea2d6...1783709dfb49ea835f73037e588fe46ab12b4863)


### [csi-driver-manila, openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack/tree/d3f709218512df9f46e11c1d13347fc68774d72c)

* [Bug 1969345](https://bugzilla.redhat.com/show_bug.cgi?id=1969345): Backport ignore proxy connecting to CSI sockets [#54](https://github.com/openshift/cloud-provider-openstack/pull/54)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/5202bfdc042bafa732f19dcbec31ca6137fa3fa4...d3f709218512df9f46e11c1d13347fc68774d72c)


### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/ce3a08186af7e4b863325bf5439bb8b829d91599)

* [Bug 1962285](https://bugzilla.redhat.com/show_bug.cgi?id=1962285): Update Dockerfile [#21](https://github.com/openshift/driver-toolkit/pull/21)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/bbf091e64bb3cf06edd61e39877ebe534037de3c...ce3a08186af7e4b863325bf5439bb8b829d91599)


### [etcd](https://github.com/openshift/etcd/tree/c61e5afde9485fac9233c0db6ab950bfb511e1b5)

* [Bug 1970141](https://bugzilla.redhat.com/show_bug.cgi?id=1970141): discover-etcd-initial-cluster: retry if member is not part of member list and dataDir exists [#82](https://github.com/openshift/etcd/pull/82)
* [Full changelog](https://github.com/openshift/etcd/compare/45b6800c4fab213e7afee1e406abe48cc14ee020...c61e5afde9485fac9233c0db6ab950bfb511e1b5)


### [haproxy-router](https://github.com/openshift/router/tree/9cc0c8fcebf613785511468c7df601117b13e5aa)

* [Bug 1967733](https://bugzilla.redhat.com/show_bug.cgi?id=1967733): template helper - generateHAProxyWhiteListFile, use right arg type [#297](https://github.com/openshift/router/pull/297)
* [Full changelog](https://github.com/openshift/router/compare/5a0e6561b0480df9f32a8ef87a54a1dc4cf91b93...9cc0c8fcebf613785511468c7df601117b13e5aa)


### [hello-openshift, tests](https://github.com/openshift/origin/tree/5013124a4cb27df4b199aabb5812ec0fc1184196)

* [Bug 1970411](https://bugzilla.redhat.com/show_bug.cgi?id=1970411): properly remove project after test ends [#26217](https://github.com/openshift/origin/pull/26217)
* [Full changelog](https://github.com/openshift/origin/compare/dd7015e846380d5050494b9bb744f43cf04a4268...5013124a4cb27df4b199aabb5812ec0fc1184196)


### [hyperkube](https://github.com/openshift/kubernetes/tree/87cc9a4ade7ebee64def2489b78c9d8ae5d6fdf9)

* [Bug 1928862](https://bugzilla.redhat.com/show_bug.cgi?id=1928862): [release-4.7] UPSTREAM: <carry>: kube-apiserver: ignore SIGTERM/INT after the first one [#739](https://github.com/openshift/kubernetes/pull/739)
* [Full changelog](https://github.com/openshift/kubernetes/compare/2817867655bb7b68215b4e77873a8facf82bee06...87cc9a4ade7ebee64def2489b78c9d8ae5d6fdf9)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/c7ca87b1d8d27745a8e8397623c1d09dd68307fa)

* [Bug 1970320](https://bugzilla.redhat.com/show_bug.cgi?id=1970320): Fix Subnet retrival when creating Service without Selector [#522](https://github.com/openshift/kuryr-kubernetes/pull/522)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/07c197feeb6459aefdecbbc66f304e06b97411ed...c7ca87b1d8d27745a8e8397623c1d09dd68307fa)


### [machine-os-content](https://github.com/openshift/okd-machine-os/tree/a08df6cd9403c405ee92e2d606809ecc4b7ec13b)

* Revert "manifests: unset OKD extensions" [#149](https://github.com/openshift/okd-machine-os/pull/149)
* Dockerfiles: /extensions needs to be a valid RPM repo [#144](https://github.com/openshift/okd-machine-os/pull/144)
* Update fedora-config-devel to latest stable [#147](https://github.com/openshift/okd-machine-os/pull/147)
* manifests: unset OKD extensions [#145](https://github.com/openshift/okd-machine-os/pull/145)
* overlay: make sure we explicitely disable DNS Stub Listener [#142](https://github.com/openshift/okd-machine-os/pull/142)
* Convert into Cosa manifest repo [#135](https://github.com/openshift/okd-machine-os/pull/135)
* [Full changelog](https://github.com/openshift/okd-machine-os/compare/87307e58ba24f81bfab0b576b39b0ed3e594a4bc...a08df6cd9403c405ee92e2d606809ecc4b7ec13b)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/f9ac08715d1b7890a5aa66a8fb16e847a7f6b727)

* [Bug 1965402](https://bugzilla.redhat.com/show_bug.cgi?id=1965402): Revert 'Bug 1965402: Enhance API host name validation' [#211](https://github.com/openshift/openshift-apiserver/pull/211)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/eb2414ce2c8bf60d871ed9047c02028bc84420e6...f9ac08715d1b7890a5aa66a8fb16e847a7f6b727)


### [operator-lifecycle-manager](https://github.com/operator-framework/operator-lifecycle-manager/tree/f05ea078ab46c241311b04661ecf5cbefd350d09)

* [Bug 1945702](https://bugzilla.redhat.com/show_bug.cgi?id=1945702): Fix inconsistent dependency candidate order. [#2149](https://github.com/operator-framework/operator-lifecycle-manager/pull/2149)
* [Full changelog](https://github.com/operator-framework/operator-lifecycle-manager/compare/aa9d705167842d2ffa70005c68211957eb5f6848...f05ea078ab46c241311b04661ecf5cbefd350d09)


### [operator-registry](https://github.com/operator-framework/operator-registry/tree/06e950de5ebca66e493f6cd2414e73c8978090d3)

* [Bug 1968680](https://bugzilla.redhat.com/show_bug.cgi?id=1968680): fix(containerd): drop xattrs during unpack [#676](https://github.com/operator-framework/operator-registry/pull/676)
* [Full changelog](https://github.com/operator-framework/operator-registry/compare/5ccabf956d25a2788cc64ad5591c404d7b950207...06e950de5ebca66e493f6cd2414e73c8978090d3)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/e90d836fdea83cb00858c6b86a054625e2c148d9)

* [Bug 1970779](https://bugzilla.redhat.com/show_bug.cgi?id=1970779): Remove getDefaultIfAddr and use getNetworkInterfaceIPAddresses [#571](https://github.com/openshift/ovn-kubernetes/pull/571)
* [Bug 1962590](https://bugzilla.redhat.com/show_bug.cgi?id=1962590): NewAddressSet: return nil in case of error [#546](https://github.com/openshift/ovn-kubernetes/pull/546)
* [Bug 1970322](https://bugzilla.redhat.com/show_bug.cgi?id=1970322): revert 487 [#570](https://github.com/openshift/ovn-kubernetes/pull/570)
* [Bug 1962819](https://bugzilla.redhat.com/show_bug.cgi?id=1962819): CNI cmdCheck: treat ingress_policing_rate=0 as not found [#548](https://github.com/openshift/ovn-kubernetes/pull/548)
* [Bug 1965075](https://bugzilla.redhat.com/show_bug.cgi?id=1965075): CARRY: fix missed learn for hybrid exgw [#556](https://github.com/openshift/ovn-kubernetes/pull/556)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/e71b4ad737e589c10eb9ab4b396e6c1bae052a35...e90d836fdea83cb00858c6b86a054625e2c148d9)