# 4.7.0-0.okd-2021-07-03-190901

Created: 2021-07-03 20:10:00 +0000 UTC

Image Digest: `sha256:66857f330c4b6199ce319c9b5b5ff3bd7ff3d4c75113cd3d33302216312d345f`

Promoted from registry.ci.openshift.org/origin/release:4.7.0-0.okd-2021-07-03-190901


## Changes from 4.7.0-0.okd-2021-06-13-090745

### Components

* Kubernetes 1.20.0-beta.2


### Rebuilt images without code change

* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [4f854ba1](https://github.com/openshift/cluster-image-registry-operator/commit/4f854ba118c7a3424beb8739b34fa97499245f9e) `sha256:90879ac517991408dad311d9f871dbb4f13d94acea3f60bbaa26d608dc90e8b9`
* [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator) git [00b1f648](https://github.com/openshift/csi-driver-manila-operator/commit/00b1f648e74d8008ce32ae65eb4d6d8b5ac1bbed) `sha256:404d37468a7190bd3e99f54d3116edc973a2aee1309c76142cb6ceeebdd9e777`
* [docker-builder](https://github.com/openshift/builder) git [82eeeac0](https://github.com/openshift/builder/commit/82eeeac0c8cbad90f951885cc11939ecd51eda76) `sha256:f61e7b869414dd8486621ebd2b69c27c0c49f3f54dac1461de6891556625244b`
* [docker-registry](https://github.com/openshift/image-registry) git [8e0c068a](https://github.com/openshift/image-registry/commit/8e0c068aef607fceffe3e179c3a9701f51c51dff) `sha256:805288f9f778c2aa2d20e74c3d331f86b255953fa26badce188c6b0d48dd4060`
* [ironic-hardware-inventory-recorder](https://github.com/openshift/ironic-hardware-inventory-recorder-image) git [61c4cc7d](https://github.com/openshift/ironic-hardware-inventory-recorder-image/commit/61c4cc7dc99601fe32b239be8923a6ed693908b0) `sha256:4fa6a2ef2d5398830f502713fd0ade6d9b614b9fa695872b9cb66dce0c154cb2`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [43d640a0](https://github.com/openshift/ironic-static-ip-manager/commit/43d640a07582a5aaaa485ea85319bb0721dea251) `sha256:416e4829b29dff524781650e7c16806eb4e8bfe3dbd7110aaff3c17752dfe128`
* [local-storage-static-provisioner](https://github.com/openshift/sig-storage-local-static-provisioner) git [a0545238](https://github.com/openshift/sig-storage-local-static-provisioner/commit/a05452380aa1e026a63a8401a4e472876a20a0a1) `sha256:435465220d3349bd2690fb63844e1fa32a9ee88c43aa361dc81ffbdfc412ed4c`
* [machine-api-operator](https://github.com/openshift/machine-api-operator) git [e179bb5c](https://github.com/openshift/machine-api-operator/commit/e179bb5ce397b543cd3f716f75fa4cd40046e0ad) `sha256:79e0c8c41906e32f576108d4c2fc4363aa552593aaa21011702d69e31f3baffb`
* [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [471cf3ab](https://github.com/openshift/cluster-api-provider-openstack/commit/471cf3ab636c26ed7c9fba6330374a5ea1b36b43) `sha256:b29a2d9b7457e7efbea75ff255df0dfb977b82dd9c04c1fa6b44e0624e026f29`


### [aws-machine-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/5368195c02ca672dc7f7a4ad571df5584fa4087f)

* [Bug 1976192](https://bugzilla.redhat.com/show_bug.cgi?id=1976192): update aws-sdk-go to v1.38.25 [#415](https://github.com/openshift/cluster-api-provider-aws/pull/415)
* [Bug 1942966](https://bugzilla.redhat.com/show_bug.cgi?id=1942966): Update EC2 instance types [#398](https://github.com/openshift/cluster-api-provider-aws/pull/398)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/8d9a84fb80765e74e4df09260ed38f455b6f712a...5368195c02ca672dc7f7a4ad571df5584fa4087f)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/e36cbc13f82e290ca5f525a4da0fab516808d113)

* [Bug 1972430](https://bugzilla.redhat.com/show_bug.cgi?id=1972430): Don't deprovision provisioned host due to error [#159](https://github.com/openshift/baremetal-operator/pull/159)
* [Bug 1961341](https://bugzilla.redhat.com/show_bug.cgi?id=1961341): config: use rbacv1 instead of rbacv1beta1 [#148](https://github.com/openshift/baremetal-operator/pull/148)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/74c60aa957f53432d0a98afc78099add55d27c44...e36cbc13f82e290ca5f525a4da0fab516808d113)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/8b4b09487463415374368af3bbc4ff2e6366477b)

* [Bug 1976284](https://bugzilla.redhat.com/show_bug.cgi?id=1976284): skip-multiple-scopes with adm catalog mirror [#869](https://github.com/openshift/oc/pull/869)
* [Bug 1963784](https://bugzilla.redhat.com/show_bug.cgi?id=1963784): Preserve AuthInfo when switching projects [#861](https://github.com/openshift/oc/pull/861)
* [Full changelog](https://github.com/openshift/oc/compare/9b9f77a716c8b7ee73f6424e37748ea6b53f495a...8b4b09487463415374368af3bbc4ff2e6366477b)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/0783477aa72edf998344740933a99c0417ebe573)

* [Bug 1958983](https://bugzilla.redhat.com/show_bug.cgi?id=1958983): rework GCP passthrough permissions checking [#338](https://github.com/openshift/cloud-credential-operator/pull/338)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/d088f49b436447a29a50958ddafd44e3362fb8ab...0783477aa72edf998344740933a99c0417ebe573)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/16bd3f3f4584442f42a83b4d8ee8e2f9fd0acb87)

* [Bug 1971087](https://bugzilla.redhat.com/show_bug.cgi?id=1971087): add a controller to remove webhooktokenauthenticator config [#418](https://github.com/openshift/cluster-authentication-operator/pull/418)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/a28bdc97c7f9d1ec4a0a859abeaeda41b37e381f...16bd3f3f4584442f42a83b4d8ee8e2f9fd0acb87)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/51cb8c4147c45672c9645fae39bfcc6d696adc85)

* [Bug 1976988](https://bugzilla.redhat.com/show_bug.cgi?id=1976988): [release-4.7]: Increase inertia duration for the EtcdMembersDegraded condition [#618](https://github.com/openshift/cluster-etcd-operator/pull/618)
* [Bug 1976287](https://bugzilla.redhat.com/show_bug.cgi?id=1976287): Validate the status of the etcd snapshot during backup and restore [#617](https://github.com/openshift/cluster-etcd-operator/pull/617)
* [Bug 1951447](https://bugzilla.redhat.com/show_bug.cgi?id=1951447): pkg/etcdenvvar/etcd_env.go: Sort endpoints to prevent rollout [#568](https://github.com/openshift/cluster-etcd-operator/pull/568)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/08595861de20850111f5e6cc76b4ad3a943b71a8...51cb8c4147c45672c9645fae39bfcc6d696adc85)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/2de39ae138e2dc8fb2e69847f659f97b92e6a71e)

* [Bug 1973983](https://bugzilla.redhat.com/show_bug.cgi?id=1973983): Canary: Handle downgrades from 4.8 to 4.7 properly [#627](https://github.com/openshift/cluster-ingress-operator/pull/627)
* [Bug 1960776](https://bugzilla.redhat.com/show_bug.cgi?id=1960776): Reconcile openshift-ingress namespace on upgrade [#616](https://github.com/openshift/cluster-ingress-operator/pull/616)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/fca8201e866741243b42fa75392875654acd8bf0...2de39ae138e2dc8fb2e69847f659f97b92e6a71e)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/ad893a41cd42cf7992e812ea47b5dd814f05c760)

* [Bug 1969860](https://bugzilla.redhat.com/show_bug.cgi?id=1969860): Escape characters on ini file [#1127](https://github.com/openshift/cluster-network-operator/pull/1127)
* [Bug 1967994](https://bugzilla.redhat.com/show_bug.cgi?id=1967994): Backport daemonset to drop icmp frag needed packets received from other nodes in the cluster to Rel 4.7 [#1119](https://github.com/openshift/cluster-network-operator/pull/1119)
* [Bug 1972183](https://bugzilla.redhat.com/show_bug.cgi?id=1972183): config: Set enable-profiling true by default and allow enable-profiling as a proxy argument [#1129](https://github.com/openshift/cluster-network-operator/pull/1129)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/ef3a088b66b9474592838a73d1078f9d62cacb04...ad893a41cd42cf7992e812ea47b5dd814f05c760)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/d546b54bcb292cd3691f4d25bbb8899690d5adab)

* [Bug 1958885](https://bugzilla.redhat.com/show_bug.cgi?id=1958885): Switch to client-go leader-with-lease election. [#238](https://github.com/openshift/cluster-node-tuning-operator/pull/238)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/5b774014c4d296e198a694f3694777d000a87640...d546b54bcb292cd3691f4d25bbb8899690d5adab)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/0df8f92c275b9eccfb1b3ccdd79fb861ddee1d99)

* [Bug 1923036](https://bugzilla.redhat.com/show_bug.cgi?id=1923036): Update Jenkins monitored templates names [#359](https://github.com/openshift/cluster-samples-operator/pull/359)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/061bdb108232b5952929301a7dd34ada934016d7...0df8f92c275b9eccfb1b3ccdd79fb861ddee1d99)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/fa7bfbc485b4256535b7de172d1083f83c9409ce)

* [Bug 1970272](https://bugzilla.redhat.com/show_bug.cgi?id=1970272): Fixing the log message in rbac.go for clusterrole [#609](https://github.com/openshift/cluster-version-operator/pull/609)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/f3d25082a09312718718fa3a85b8aba8b4574781...fa7bfbc485b4256535b7de172d1083f83c9409ce)


### [console](https://github.com/openshift/console/tree/b571ac9bad467db8459f25de9c5a4f3b54789312)

* [Bug 1973572](https://bugzilla.redhat.com/show_bug.cgi?id=1973572): Hardcode strings in Home->Overview page [#9322](https://github.com/openshift/console/pull/9322)
* [Bug 1942864](https://bugzilla.redhat.com/show_bug.cgi?id=1942864): Warning Alert for Encrypted PVs in Create StorageClass [#8464](https://github.com/openshift/console/pull/8464)
* [Bug 1965526](https://bugzilla.redhat.com/show_bug.cgi?id=1965526): Removing library charts from the merged helm repo index entries. [#9076](https://github.com/openshift/console/pull/9076)
* [Bug 1970796](https://bugzilla.redhat.com/show_bug.cgi?id=1970796): update cluster-local label for ksvc [#9220](https://github.com/openshift/console/pull/9220)
* [Bug 1970720](https://bugzilla.redhat.com/show_bug.cgi?id=1970720): fix rotated pipelinerun status icon issue in safari [#9216](https://github.com/openshift/console/pull/9216)
* [Bug 1969536](https://bugzilla.redhat.com/show_bug.cgi?id=1969536): Omit bitbucket branch in URL if it contains slash [#9180](https://github.com/openshift/console/pull/9180)
* [Bug 1954962](https://bugzilla.redhat.com/show_bug.cgi?id=1954962): removes extra annotations form spec template for ksvc [#8823](https://github.com/openshift/console/pull/8823)
* [Bug 1948537](https://bugzilla.redhat.com/show_bug.cgi?id=1948537): add hide/reveal button for kms token [#8616](https://github.com/openshift/console/pull/8616)
* [Bug 1942160](https://bugzilla.redhat.com/show_bug.cgi?id=1942160): Update the scope of GitOpsService resource [#8450](https://github.com/openshift/console/pull/8450)
* [Bug 1971667](https://bugzilla.redhat.com/show_bug.cgi?id=1971667): Track and show error messages in modals [#9232](https://github.com/openshift/console/pull/9232)
* [Full changelog](https://github.com/openshift/console/compare/dbc68e1f7a3928af6cfa06d019999cd8903ae7d7...b571ac9bad467db8459f25de9c5a4f3b54789312)


### [csi-driver-manila, openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack/tree/d3f709218512df9f46e11c1d13347fc68774d72c)

* [Bug 1969345](https://bugzilla.redhat.com/show_bug.cgi?id=1969345): Backport ignore proxy connecting to CSI sockets [#54](https://github.com/openshift/cloud-provider-openstack/pull/54)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/5202bfdc042bafa732f19dcbec31ca6137fa3fa4...d3f709218512df9f46e11c1d13347fc68774d72c)


### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/044d4be053f86d8f059197a76f641f99cf07d444)

* [Bug 1976302](https://bugzilla.redhat.com/show_bug.cgi?id=1976302): Cherry pick gcc to release 4.7 [#41](https://github.com/openshift/driver-toolkit/pull/41)
* [Bug 1975480](https://bugzilla.redhat.com/show_bug.cgi?id=1975480): DPDK KNI modules need some additional tools [#40](https://github.com/openshift/driver-toolkit/pull/40)
* [Bug 1975479](https://bugzilla.redhat.com/show_bug.cgi?id=1975479): Requirements for authenticating kernel modules with X.509 keys [#39](https://github.com/openshift/driver-toolkit/pull/39)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/ce3a08186af7e4b863325bf5439bb8b829d91599...044d4be053f86d8f059197a76f641f99cf07d444)


### [hello-openshift, tests](https://github.com/openshift/origin/tree/2d1d603b37d527f2a9424749bcbad286cfbf3e62)

* [Bug 1977383](https://bugzilla.redhat.com/show_bug.cgi?id=1977383): [release-4.7] Update resource quota test for compatibility with service ca configmap publishing [#26303](https://github.com/openshift/origin/pull/26303)
* [Bug 1928862](https://bugzilla.redhat.com/show_bug.cgi?id=1928862): [4.7] Bump openshift/kubernetes [#26259](https://github.com/openshift/origin/pull/26259)
* [Bug 1978000](https://bugzilla.redhat.com/show_bug.cgi?id=1978000): builds: comment out multi-namespace template test [#26296](https://github.com/openshift/origin/pull/26296)
* NOOP - Trigger a new CI build [#26291](https://github.com/openshift/origin/pull/26291)
* [Bug 1977383](https://bugzilla.redhat.com/show_bug.cgi?id=1977383): [release-4.7] Skip cluster quota test to enable service ca publisher to merge to o/k [#26283](https://github.com/openshift/origin/pull/26283)
* [Full changelog](https://github.com/openshift/origin/compare/5013124a4cb27df4b199aabb5812ec0fc1184196...2d1d603b37d527f2a9424749bcbad286cfbf3e62)


### [hyperkube](https://github.com/openshift/kubernetes/tree/01c9f3f43ffcf096c29d51f3b6f2b6914b2b56a6)

* [Bug 1977383](https://bugzilla.redhat.com/show_bug.cgi?id=1977383): [release-4.7] Fix watch conformance test [#843](https://github.com/openshift/kubernetes/pull/843)
* [Bug 1977383](https://bugzilla.redhat.com/show_bug.cgi?id=1977383): Update resource quota test for compatibility with service ca configmap publishing [#839](https://github.com/openshift/kubernetes/pull/839)
* [Bug 1975553](https://bugzilla.redhat.com/show_bug.cgi?id=1975553): only chown if non-windows machine with projected volumes [#826](https://github.com/openshift/kubernetes/pull/826)
* [Bug 1928862](https://bugzilla.redhat.com/show_bug.cgi?id=1928862): [release-4.7] UPSTREAM: <carry>: kube-apiserver: ignore SIGTERM/INT after the first one [#739](https://github.com/openshift/kubernetes/pull/739)
* [Full changelog](https://github.com/openshift/kubernetes/compare/2817867655bb7b68215b4e77873a8facf82bee06...01c9f3f43ffcf096c29d51f3b6f2b6914b2b56a6)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/682c57f434ccb48ec2f46b540a075db2f4a32ffa)

* [Bug 1971549](https://bugzilla.redhat.com/show_bug.cgi?id=1971549): Unconditionally remove TMPDIR [#45](https://github.com/openshift/ironic-rhcos-downloader/pull/45)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/4cdc8c311630d0d9807accb12e63bbfa8bbc3ad4...682c57f434ccb48ec2f46b540a075db2f4a32ffa)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/c7654fb7ee98d42b3c2329f4ad0039f8f87828f0)

* [Bug 1972631](https://bugzilla.redhat.com/show_bug.cgi?id=1972631): Workaround OVN bug causing subports to be DOWN [#525](https://github.com/openshift/kuryr-kubernetes/pull/525)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/c7ca87b1d8d27745a8e8397623c1d09dd68307fa...c7654fb7ee98d42b3c2329f4ad0039f8f87828f0)


### [machine-os-content](https://github.com/openshift/okd-machine-os/tree/4258607ab057ffe86d9da50cc43d0ac5369a6ce0)

* Undo systemd-resolved change in https://github.com/systemd/systemd/pu… [#160](https://github.com/openshift/okd-machine-os/pull/160)
* manifest: fasttrack NetworkManager 1.32 [#152](https://github.com/openshift/okd-machine-os/pull/152)
* manifests: add CVO annotations [#155](https://github.com/openshift/okd-machine-os/pull/155)
* Revert "manifests: unset OKD extensions" [#149](https://github.com/openshift/okd-machine-os/pull/149)
* Dockerfiles: /extensions needs to be a valid RPM repo [#144](https://github.com/openshift/okd-machine-os/pull/144)
* Update fedora-config-devel to latest stable [#147](https://github.com/openshift/okd-machine-os/pull/147)
* manifests: unset OKD extensions [#145](https://github.com/openshift/okd-machine-os/pull/145)
* overlay: make sure we explicitely disable DNS Stub Listener [#142](https://github.com/openshift/okd-machine-os/pull/142)
* [Full changelog](https://github.com/openshift/okd-machine-os/compare/17e1716aa3a8d0ee4ffc0de8f88a095bbd92fb3f...4258607ab057ffe86d9da50cc43d0ac5369a6ce0)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/f9ac08715d1b7890a5aa66a8fb16e847a7f6b727)

* [Bug 1965402](https://bugzilla.redhat.com/show_bug.cgi?id=1965402): Revert 'Bug 1965402: Enhance API host name validation' [#211](https://github.com/openshift/openshift-apiserver/pull/211)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/eb2414ce2c8bf60d871ed9047c02028bc84420e6...f9ac08715d1b7890a5aa66a8fb16e847a7f6b727)


### [operator-lifecycle-manager](https://github.com/operator-framework/operator-lifecycle-manager/tree/a5f086a0cec32be5577b55c89d58adc40b677eb1)

* [Bug 1972075](https://bugzilla.redhat.com/show_bug.cgi?id=1972075): Add OperatorCondition status sync and update operator upgradeable check [#2206](https://github.com/operator-framework/operator-lifecycle-manager/pull/2206)
* [Full changelog](https://github.com/operator-framework/operator-lifecycle-manager/compare/f05ea078ab46c241311b04661ecf5cbefd350d09...a5f086a0cec32be5577b55c89d58adc40b677eb1)


### [operator-registry](https://github.com/operator-framework/operator-registry/tree/06e950de5ebca66e493f6cd2414e73c8978090d3)

* [Bug 1968680](https://bugzilla.redhat.com/show_bug.cgi?id=1968680): fix(containerd): drop xattrs during unpack [#676](https://github.com/operator-framework/operator-registry/pull/676)
* [Full changelog](https://github.com/operator-framework/operator-registry/compare/5ccabf956d25a2788cc64ad5591c404d7b950207...06e950de5ebca66e493f6cd2414e73c8978090d3)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/9f2bd7e65637f2a76005fbf01520a56676e8f427)

* [Bug 1940566](https://bugzilla.redhat.com/show_bug.cgi?id=1940566): Properly log when hybrid overlay errors out [#543](https://github.com/openshift/ovn-kubernetes/pull/543)
* [Bug 1970779](https://bugzilla.redhat.com/show_bug.cgi?id=1970779): Remove getDefaultIfAddr and use getNetworkInterfaceIPAddresses [#571](https://github.com/openshift/ovn-kubernetes/pull/571)
* [Bug 1962590](https://bugzilla.redhat.com/show_bug.cgi?id=1962590): NewAddressSet: return nil in case of error [#546](https://github.com/openshift/ovn-kubernetes/pull/546)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/b687219c202639bde8ecf89955a890d19bf12703...9f2bd7e65637f2a76005fbf01520a56676e8f427)