# 4.7.0-0.okd-2021-08-07-063045 Created: 2021-08-07 08:03:18 +0000 UTC Image Digest: `sha256:78e4237a39e93e6f7b9cef579f135dc5d5dc11fc46ae53587351ac1d26261339` Promoted from registry.ci.openshift.org/origin/release:4.7.0-0.okd-2021-08-07-063045 ## Changes from 4.7.0-0.okd-2021-06-13-090745 ### Components * Kubernetes 1.20.0-beta.2 ### Rebuilt images without code change * [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [9c5da32b](https://github.com/openshift/baremetal-runtimecfg/commit/9c5da32ba602e5881178e56269b0506fcb54ff92) `sha256:4ebfae84099553f78e6e1dc82308f57e4d08bde8aa640264c93e7d2459da22f7` * [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [6d2c25f3](https://github.com/openshift/cluster-storage-operator/commit/6d2c25f3cfb931deca457a0c6261651c1a64c464) `sha256:82e34ada115f908ca390d3177d96d38fe64a5df171c428347c60d95ca18538fa` * [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator) git [00b1f648](https://github.com/openshift/csi-driver-manila-operator/commit/00b1f648e74d8008ce32ae65eb4d6d8b5ac1bbed) `sha256:404d37468a7190bd3e99f54d3116edc973a2aee1309c76142cb6ceeebdd9e777` * [docker-builder](https://github.com/openshift/builder) git [82eeeac0](https://github.com/openshift/builder/commit/82eeeac0c8cbad90f951885cc11939ecd51eda76) `sha256:f61e7b869414dd8486621ebd2b69c27c0c49f3f54dac1461de6891556625244b` * [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [43d640a0](https://github.com/openshift/ironic-static-ip-manager/commit/43d640a07582a5aaaa485ea85319bb0721dea251) `sha256:416e4829b29dff524781650e7c16806eb4e8bfe3dbd7110aaff3c17752dfe128` * [local-storage-static-provisioner](https://github.com/openshift/sig-storage-local-static-provisioner) git [a0545238](https://github.com/openshift/sig-storage-local-static-provisioner/commit/a05452380aa1e026a63a8401a4e472876a20a0a1) `sha256:435465220d3349bd2690fb63844e1fa32a9ee88c43aa361dc81ffbdfc412ed4c` * [machine-api-operator](https://github.com/openshift/machine-api-operator) git [e179bb5c](https://github.com/openshift/machine-api-operator/commit/e179bb5ce397b543cd3f716f75fa4cd40046e0ad) `sha256:79e0c8c41906e32f576108d4c2fc4363aa552593aaa21011702d69e31f3baffb` * [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator) git [117ce62c](https://github.com/openshift/openstack-cinder-csi-driver-operator/commit/117ce62c69b399c524850f4ca32324a4ed288acd) `sha256:1049066ee2e88b49e41fad931f9f71280d98505ca15bf2749dd6593af225a831` * [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [471cf3ab](https://github.com/openshift/cluster-api-provider-openstack/commit/471cf3ab636c26ed7c9fba6330374a5ea1b36b43) `sha256:b29a2d9b7457e7efbea75ff255df0dfb977b82dd9c04c1fa6b44e0624e026f29` ### [aws-machine-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/5368195c02ca672dc7f7a4ad571df5584fa4087f) * [Bug 1976192](https://bugzilla.redhat.com/show_bug.cgi?id=1976192): update aws-sdk-go to v1.38.25 [#415](https://github.com/openshift/cluster-api-provider-aws/pull/415) * [Bug 1942966](https://bugzilla.redhat.com/show_bug.cgi?id=1942966): Update EC2 instance types [#398](https://github.com/openshift/cluster-api-provider-aws/pull/398) * [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/8d9a84fb80765e74e4df09260ed38f455b6f712a...5368195c02ca672dc7f7a4ad571df5584fa4087f) ### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/726d97e15db78b767234da98d2c75f794f4bf158) * [Bug 1938967](https://bugzilla.redhat.com/show_bug.cgi?id=1938967): Updating baremetal-machine-controller builder & base images to be consistent with ART [#134](https://github.com/openshift/cluster-api-provider-baremetal/pull/134) * [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/25cbb8d8f9e52244ccd6bf459e6dd4b84749de56...726d97e15db78b767234da98d2c75f794f4bf158) ### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/e36cbc13f82e290ca5f525a4da0fab516808d113) * [Bug 1972430](https://bugzilla.redhat.com/show_bug.cgi?id=1972430): Don't deprovision provisioned host due to error [#159](https://github.com/openshift/baremetal-operator/pull/159) * [Bug 1961341](https://bugzilla.redhat.com/show_bug.cgi?id=1961341): config: use rbacv1 instead of rbacv1beta1 [#148](https://github.com/openshift/baremetal-operator/pull/148) * [Full changelog](https://github.com/openshift/baremetal-operator/compare/74c60aa957f53432d0a98afc78099add55d27c44...e36cbc13f82e290ca5f525a4da0fab516808d113) ### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/8b4b09487463415374368af3bbc4ff2e6366477b) * [Bug 1976284](https://bugzilla.redhat.com/show_bug.cgi?id=1976284): skip-multiple-scopes with adm catalog mirror [#869](https://github.com/openshift/oc/pull/869) * [Bug 1963784](https://bugzilla.redhat.com/show_bug.cgi?id=1963784): Preserve AuthInfo when switching projects [#861](https://github.com/openshift/oc/pull/861) * [Full changelog](https://github.com/openshift/oc/compare/9b9f77a716c8b7ee73f6424e37748ea6b53f495a...8b4b09487463415374368af3bbc4ff2e6366477b) ### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/0783477aa72edf998344740933a99c0417ebe573) * [Bug 1958983](https://bugzilla.redhat.com/show_bug.cgi?id=1958983): rework GCP passthrough permissions checking [#338](https://github.com/openshift/cloud-credential-operator/pull/338) * [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/d088f49b436447a29a50958ddafd44e3362fb8ab...0783477aa72edf998344740933a99c0417ebe573) ### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/4c02b7b2322eab9bbcb969886211d541e5e4fcde) * Updating ose-cluster-authentication-operator builder & base images to be consistent with ART [#408](https://github.com/openshift/cluster-authentication-operator/pull/408) * [Bug 1971087](https://bugzilla.redhat.com/show_bug.cgi?id=1971087): add a controller to remove webhooktokenauthenticator config [#418](https://github.com/openshift/cluster-authentication-operator/pull/418) * [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/a28bdc97c7f9d1ec4a0a859abeaeda41b37e381f...4c02b7b2322eab9bbcb969886211d541e5e4fcde) ### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/97b08fc661203375e86e0d1a950fc9e4a409a7e0) * [Bug 1933726](https://bugzilla.redhat.com/show_bug.cgi?id=1933726): provisioning: configure DHCP range with netmask [#112](https://github.com/openshift/cluster-baremetal-operator/pull/112) * [Bug 1973367](https://bugzilla.redhat.com/show_bug.cgi?id=1973367): Pass IP_OPTIONS=dhcp|dhcp6 down to OS Downloader container [#171](https://github.com/openshift/cluster-baremetal-operator/pull/171) * [Bug 1972291](https://bugzilla.redhat.com/show_bug.cgi?id=1972291): Use a cache URL with the .svc.cluster.local suffix [#161](https://github.com/openshift/cluster-baremetal-operator/pull/161) * [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/175f8f5283faebd81fb9d1fb2915eb2682622e1e...97b08fc661203375e86e0d1a950fc9e4a409a7e0) ### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/51cb8c4147c45672c9645fae39bfcc6d696adc85) * [Bug 1976988](https://bugzilla.redhat.com/show_bug.cgi?id=1976988): [release-4.7]: Increase inertia duration for the EtcdMembersDegraded condition [#618](https://github.com/openshift/cluster-etcd-operator/pull/618) * [Bug 1976287](https://bugzilla.redhat.com/show_bug.cgi?id=1976287): Validate the status of the etcd snapshot during backup and restore [#617](https://github.com/openshift/cluster-etcd-operator/pull/617) * [Bug 1951447](https://bugzilla.redhat.com/show_bug.cgi?id=1951447): pkg/etcdenvvar/etcd_env.go: Sort endpoints to prevent rollout [#568](https://github.com/openshift/cluster-etcd-operator/pull/568) * [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/08595861de20850111f5e6cc76b4ad3a943b71a8...51cb8c4147c45672c9645fae39bfcc6d696adc85) ### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/a04cd81327c720c5fd54f7be8dcd42b553251ba2) * [Bug 1984979](https://bugzilla.redhat.com/show_bug.cgi?id=1984979): Creating StorageAccount V2 instead of V1 [#707](https://github.com/openshift/cluster-image-registry-operator/pull/707) * Updating ose-cluster-image-registry-operator builder & base images to be consistent with ART [#651](https://github.com/openshift/cluster-image-registry-operator/pull/651) * [Bug 1977159](https://bugzilla.redhat.com/show_bug.cgi?id=1977159): bump aws-sdk-go to v1.38.35 [#704](https://github.com/openshift/cluster-image-registry-operator/pull/704) * [Bug 1973693](https://bugzilla.redhat.com/show_bug.cgi?id=1973693): Setting required pod anti-affinity rules [#697](https://github.com/openshift/cluster-image-registry-operator/pull/697) * [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/4f854ba118c7a3424beb8739b34fa97499245f9e...a04cd81327c720c5fd54f7be8dcd42b553251ba2) ### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/b86f935f5e693f48dbf6ec23a490422b6e295eb7) * [Bug 1978845](https://bugzilla.redhat.com/show_bug.cgi?id=1978845): Specify topology spread constraints [#632](https://github.com/openshift/cluster-ingress-operator/pull/632) * [Bug 1973983](https://bugzilla.redhat.com/show_bug.cgi?id=1973983): Canary: Handle downgrades from 4.8 to 4.7 properly [#627](https://github.com/openshift/cluster-ingress-operator/pull/627) * [Bug 1960776](https://bugzilla.redhat.com/show_bug.cgi?id=1960776): Reconcile openshift-ingress namespace on upgrade [#616](https://github.com/openshift/cluster-ingress-operator/pull/616) * [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/fca8201e866741243b42fa75392875654acd8bf0...b86f935f5e693f48dbf6ec23a490422b6e295eb7) ### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/035c8038f56cdcf0d402bea6671e81882e3ab8bd) * [Bug 1986591](https://bugzilla.redhat.com/show_bug.cgi?id=1986591): node exporter calls /proc/cpuinfo multiple times causing the node to freeze [#1300](https://github.com/openshift/cluster-monitoring-operator/pull/1300) * [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/d6725052e00a206cab10f6c40abdfa1a3c2aff0f...035c8038f56cdcf0d402bea6671e81882e3ab8bd) ### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/db0dc0d9625a5900e752635dca9d30a19e6b6ed3) * [Bug 1962036](https://bugzilla.redhat.com/show_bug.cgi?id=1962036): Use the election mechanism provided by library-go [#1098](https://github.com/openshift/cluster-network-operator/pull/1098) * [Bug 1972549](https://bugzilla.redhat.com/show_bug.cgi?id=1972549): Remove reference to v1beta1 API [#1134](https://github.com/openshift/cluster-network-operator/pull/1134) * [Bug 1982217](https://bugzilla.redhat.com/show_bug.cgi?id=1982217): Use 10% for ovnkube-node for maxUnavailable [#1153](https://github.com/openshift/cluster-network-operator/pull/1153) * [Bug 1969860](https://bugzilla.redhat.com/show_bug.cgi?id=1969860): Escape characters on ini file [#1127](https://github.com/openshift/cluster-network-operator/pull/1127) * [Bug 1967994](https://bugzilla.redhat.com/show_bug.cgi?id=1967994): Backport daemonset to drop icmp frag needed packets received from other nodes in the cluster to Rel 4.7 [#1119](https://github.com/openshift/cluster-network-operator/pull/1119) * [Bug 1972183](https://bugzilla.redhat.com/show_bug.cgi?id=1972183): config: Set enable-profiling true by default and allow enable-profiling as a proxy argument [#1129](https://github.com/openshift/cluster-network-operator/pull/1129) * [Full changelog](https://github.com/openshift/cluster-network-operator/compare/ef3a088b66b9474592838a73d1078f9d62cacb04...db0dc0d9625a5900e752635dca9d30a19e6b6ed3) ### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/d546b54bcb292cd3691f4d25bbb8899690d5adab) * [Bug 1958885](https://bugzilla.redhat.com/show_bug.cgi?id=1958885): Switch to client-go leader-with-lease election. [#238](https://github.com/openshift/cluster-node-tuning-operator/pull/238) * [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/5b774014c4d296e198a694f3694777d000a87640...d546b54bcb292cd3691f4d25bbb8899690d5adab) ### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/fa6d8e1cc9d57566fa3fbe4dbb361892ccf9e17d) * Updating ose-cluster-openshift-apiserver-operator builder & base images to be consistent with ART [#427](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/427) * [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/ecfa2d959fe2afcbd3e947658d267b085a1b2063...fa6d8e1cc9d57566fa3fbe4dbb361892ccf9e17d) ### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/2a8963a9c5755d4951d882bd816cd4d6ccdf02cd) * [Bug 1924494](https://bugzilla.redhat.com/show_bug.cgi?id=1924494): Update k8s.io dependencies to address CVE-2021-3121 [#222](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/222) * [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/245005e3065238ecd4aef208c21456afa09ec38e...2a8963a9c5755d4951d882bd816cd4d6ccdf02cd) ### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/0df8f92c275b9eccfb1b3ccdd79fb861ddee1d99) * [Bug 1923036](https://bugzilla.redhat.com/show_bug.cgi?id=1923036): Update Jenkins monitored templates names [#359](https://github.com/openshift/cluster-samples-operator/pull/359) * [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/061bdb108232b5952929301a7dd34ada934016d7...0df8f92c275b9eccfb1b3ccdd79fb861ddee1d99) ### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/c07975c452303469c378bc5b0f70d8763eaca1f3) * [Bug 1924428](https://bugzilla.redhat.com/show_bug.cgi?id=1924428): CVE-2021-3121 gogo/protobuf lacks certain index validation [#625](https://github.com/openshift/cluster-version-operator/pull/625) * [Bug 1970272](https://bugzilla.redhat.com/show_bug.cgi?id=1970272): Fixing the log message in rbac.go for clusterrole [#609](https://github.com/openshift/cluster-version-operator/pull/609) * [Full changelog](https://github.com/openshift/cluster-version-operator/compare/f3d25082a09312718718fa3a85b8aba8b4574781...c07975c452303469c378bc5b0f70d8763eaca1f3) ### [console](https://github.com/openshift/console/tree/65cf7f6c2bf100d7605d80b3c0fce9e3e7a6dbd8) * [Bug 1975469](https://bugzilla.redhat.com/show_bug.cgi?id=1975469): Handle array to string conversion for HTTPS checkbox value [#9332](https://github.com/openshift/console/pull/9332) * Updating openshift-enterprise-console images to be consistent with ART [#8596](https://github.com/openshift/console/pull/8596) * [Bug 1973572](https://bugzilla.redhat.com/show_bug.cgi?id=1973572): Hardcode strings in Home->Overview page [#9322](https://github.com/openshift/console/pull/9322) * [Bug 1942864](https://bugzilla.redhat.com/show_bug.cgi?id=1942864): Warning Alert for Encrypted PVs in Create StorageClass [#8464](https://github.com/openshift/console/pull/8464) * [Bug 1965526](https://bugzilla.redhat.com/show_bug.cgi?id=1965526): Removing library charts from the merged helm repo index entries. [#9076](https://github.com/openshift/console/pull/9076) * [Bug 1970796](https://bugzilla.redhat.com/show_bug.cgi?id=1970796): update cluster-local label for ksvc [#9220](https://github.com/openshift/console/pull/9220) * [Bug 1970720](https://bugzilla.redhat.com/show_bug.cgi?id=1970720): fix rotated pipelinerun status icon issue in safari [#9216](https://github.com/openshift/console/pull/9216) * [Bug 1969536](https://bugzilla.redhat.com/show_bug.cgi?id=1969536): Omit bitbucket branch in URL if it contains slash [#9180](https://github.com/openshift/console/pull/9180) * [Bug 1954962](https://bugzilla.redhat.com/show_bug.cgi?id=1954962): removes extra annotations form spec template for ksvc [#8823](https://github.com/openshift/console/pull/8823) * [Bug 1948537](https://bugzilla.redhat.com/show_bug.cgi?id=1948537): add hide/reveal button for kms token [#8616](https://github.com/openshift/console/pull/8616) * [Bug 1942160](https://bugzilla.redhat.com/show_bug.cgi?id=1942160): Update the scope of GitOpsService resource [#8450](https://github.com/openshift/console/pull/8450) * [Bug 1971667](https://bugzilla.redhat.com/show_bug.cgi?id=1971667): Track and show error messages in modals [#9232](https://github.com/openshift/console/pull/9232) * [Full changelog](https://github.com/openshift/console/compare/dbc68e1f7a3928af6cfa06d019999cd8903ae7d7...65cf7f6c2bf100d7605d80b3c0fce9e3e7a6dbd8) ### [csi-driver-manila, openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack/tree/d3f709218512df9f46e11c1d13347fc68774d72c) * [Bug 1969345](https://bugzilla.redhat.com/show_bug.cgi?id=1969345): Backport ignore proxy connecting to CSI sockets [#54](https://github.com/openshift/cloud-provider-openstack/pull/54) * [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/5202bfdc042bafa732f19dcbec31ca6137fa3fa4...d3f709218512df9f46e11c1d13347fc68774d72c) ### [docker-registry](https://github.com/openshift/image-registry/tree/8b03485af777f8d718427393aa575bbaf6f21610) * [Bug 1984094](https://bugzilla.redhat.com/show_bug.cgi?id=1984094): use apimachinery with HTTP/2 health checks enabled [#288](https://github.com/openshift/image-registry/pull/288) * Updating openshift-enterprise-registry builder & base images to be consistent with ART [#262](https://github.com/openshift/image-registry/pull/262) * [Bug 1977159](https://bugzilla.redhat.com/show_bug.cgi?id=1977159): bump aws-sdk-go to v1.38.35 [#282](https://github.com/openshift/image-registry/pull/282) * [Full changelog](https://github.com/openshift/image-registry/compare/8e0c068aef607fceffe3e179c3a9701f51c51dff...8b03485af777f8d718427393aa575bbaf6f21610) ### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/1ecbec4904b6036ea1676d58f70567fa8cd7d4fe) * [Bug 1985545](https://bugzilla.redhat.com/show_bug.cgi?id=1985545): Remove curl of extract-vmlinux [#50](https://github.com/openshift/driver-toolkit/pull/50) * [Bug 1985546](https://bugzilla.redhat.com/show_bug.cgi?id=1985546): /etc/driver-toolkit-release.json kernel version match rpm -q output [#51](https://github.com/openshift/driver-toolkit/pull/51) * [Bug 1976302](https://bugzilla.redhat.com/show_bug.cgi?id=1976302): Cherry pick gcc to release 4.7 [#41](https://github.com/openshift/driver-toolkit/pull/41) * [Bug 1975480](https://bugzilla.redhat.com/show_bug.cgi?id=1975480): DPDK KNI modules need some additional tools [#40](https://github.com/openshift/driver-toolkit/pull/40) * [Bug 1975479](https://bugzilla.redhat.com/show_bug.cgi?id=1975479): Requirements for authenticating kernel modules with X.509 keys [#39](https://github.com/openshift/driver-toolkit/pull/39) * [Full changelog](https://github.com/openshift/driver-toolkit/compare/ce3a08186af7e4b863325bf5439bb8b829d91599...1ecbec4904b6036ea1676d58f70567fa8cd7d4fe) ### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/0cb61d205d0f911fe8ca614094f0cd3f911d665c) * Updating ose-gcp-pd-csi-driver builder & base images to be consistent with ART [#10](https://github.com/openshift/gcp-pd-csi-driver/pull/10) * [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/091f0212dfa6d93df37b99fcd2b4b9a4c6d5bbba...0cb61d205d0f911fe8ca614094f0cd3f911d665c) ### [hello-openshift, tests](https://github.com/openshift/origin/tree/24f464bff3559617d73d5b4ec57332ff22ac000b) * [Bug 1982929](https://bugzilla.redhat.com/show_bug.cgi?id=1982929): Improve GC Check for Builds [#26334](https://github.com/openshift/origin/pull/26334) * Re-enable quota test [#26284](https://github.com/openshift/origin/pull/26284) * [Bug 1980540](https://bugzilla.redhat.com/show_bug.cgi?id=1980540): Use cluster-logging for operator installation smoke test. [#26315](https://github.com/openshift/origin/pull/26315) * [Bug 1977383](https://bugzilla.redhat.com/show_bug.cgi?id=1977383): [release-4.7] Update resource quota test for compatibility with service ca configmap publishing [#26303](https://github.com/openshift/origin/pull/26303) * [Bug 1928862](https://bugzilla.redhat.com/show_bug.cgi?id=1928862): [4.7] Bump openshift/kubernetes [#26259](https://github.com/openshift/origin/pull/26259) * [Bug 1978000](https://bugzilla.redhat.com/show_bug.cgi?id=1978000): builds: comment out multi-namespace template test [#26296](https://github.com/openshift/origin/pull/26296) * NOOP - Trigger a new CI build [#26291](https://github.com/openshift/origin/pull/26291) * [Bug 1977383](https://bugzilla.redhat.com/show_bug.cgi?id=1977383): [release-4.7] Skip cluster quota test to enable service ca publisher to merge to o/k [#26283](https://github.com/openshift/origin/pull/26283) * [Full changelog](https://github.com/openshift/origin/compare/5013124a4cb27df4b199aabb5812ec0fc1184196...24f464bff3559617d73d5b4ec57332ff22ac000b) ### [hyperkube](https://github.com/openshift/kubernetes/tree/558d959332b3f1f7bf786673bf294e6e0932bb18) * [Bug 1981634](https://bugzilla.redhat.com/show_bug.cgi?id=1981634): UPSTREAM: <drop>: use the legacy service-ca.crt content for clusters started in 4.7 or before [#857](https://github.com/openshift/kubernetes/pull/857) * [Bug 1977383](https://bugzilla.redhat.com/show_bug.cgi?id=1977383): [release-4.7] Ensure service ca configmap is created in all namespaces [#834](https://github.com/openshift/kubernetes/pull/834) * [Bug 1977383](https://bugzilla.redhat.com/show_bug.cgi?id=1977383): [release-4.7] Fix watch conformance test [#843](https://github.com/openshift/kubernetes/pull/843) * [Bug 1977383](https://bugzilla.redhat.com/show_bug.cgi?id=1977383): Update resource quota test for compatibility with service ca configmap publishing [#839](https://github.com/openshift/kubernetes/pull/839) * [Bug 1975553](https://bugzilla.redhat.com/show_bug.cgi?id=1975553): only chown if non-windows machine with projected volumes [#826](https://github.com/openshift/kubernetes/pull/826) * [Bug 1928862](https://bugzilla.redhat.com/show_bug.cgi?id=1928862): [release-4.7] UPSTREAM: <carry>: kube-apiserver: ignore SIGTERM/INT after the first one [#739](https://github.com/openshift/kubernetes/pull/739) * [Full changelog](https://github.com/openshift/kubernetes/compare/2817867655bb7b68215b4e77873a8facf82bee06...558d959332b3f1f7bf786673bf294e6e0932bb18) ### [ironic-hardware-inventory-recorder](https://github.com/openshift/ironic-hardware-inventory-recorder-image/tree/564aaca3b4bd95007472d3c3cd8d2d0748778ef4) * Updating ironic-hardware-inventory-recorder-image builder & base images to be consistent with ART [#502](https://github.com/openshift/ironic-hardware-inventory-recorder-image/pull/502) * [Full changelog](https://github.com/openshift/ironic-hardware-inventory-recorder-image/compare/61c4cc7dc99601fe32b239be8923a6ed693908b0...564aaca3b4bd95007472d3c3cd8d2d0748778ef4) ### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/870afcb36a7ee4a2bef59845981821453b4174dd) * [Bug 1963210](https://bugzilla.redhat.com/show_bug.cgi?id=1963210): Add support for no_proxy [#53](https://github.com/openshift/ironic-rhcos-downloader/pull/53) * [Bug 1973367](https://bugzilla.redhat.com/show_bug.cgi?id=1973367): Modify dhcp kernel args based on ipv4/ipv6 [#55](https://github.com/openshift/ironic-rhcos-downloader/pull/55) * [Bug 1971549](https://bugzilla.redhat.com/show_bug.cgi?id=1971549): Unconditionally remove TMPDIR [#45](https://github.com/openshift/ironic-rhcos-downloader/pull/45) * [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/4cdc8c311630d0d9807accb12e63bbfa8bbc3ad4...870afcb36a7ee4a2bef59845981821453b4174dd) ### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/c7654fb7ee98d42b3c2329f4ad0039f8f87828f0) * [Bug 1972631](https://bugzilla.redhat.com/show_bug.cgi?id=1972631): Workaround OVN bug causing subports to be DOWN [#525](https://github.com/openshift/kuryr-kubernetes/pull/525) * [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/c7ca87b1d8d27745a8e8397623c1d09dd68307fa...c7654fb7ee98d42b3c2329f4ad0039f8f87828f0) ### [machine-os-content](https://github.com/openshift/okd-machine-os/tree/18fd7f8e0b69719f38632d06fabfbfa878ad8216) * Bump fedora-coreos-config to latest stable [#173](https://github.com/openshift/okd-machine-os/pull/173) * Periodic submodule bump [#170](https://github.com/openshift/okd-machine-os/pull/170) * Bump fedora-coreos-config [#162](https://github.com/openshift/okd-machine-os/pull/162) * Undo systemd-resolved change in https://github.com/systemd/systemd/pu… [#160](https://github.com/openshift/okd-machine-os/pull/160) * manifest: fasttrack NetworkManager 1.32 [#152](https://github.com/openshift/okd-machine-os/pull/152) * manifests: add CVO annotations [#155](https://github.com/openshift/okd-machine-os/pull/155) * Revert "manifests: unset OKD extensions" [#149](https://github.com/openshift/okd-machine-os/pull/149) * Dockerfiles: /extensions needs to be a valid RPM repo [#144](https://github.com/openshift/okd-machine-os/pull/144) * Update fedora-config-devel to latest stable [#147](https://github.com/openshift/okd-machine-os/pull/147) * manifests: unset OKD extensions [#145](https://github.com/openshift/okd-machine-os/pull/145) * overlay: make sure we explicitely disable DNS Stub Listener [#142](https://github.com/openshift/okd-machine-os/pull/142) * [Full changelog](https://github.com/openshift/okd-machine-os/compare/17e1716aa3a8d0ee4ffc0de8f88a095bbd92fb3f...18fd7f8e0b69719f38632d06fabfbfa878ad8216) ### [must-gather](https://github.com/openshift/must-gather/tree/205d4e3cffb19bda7a658836c84587f2ac78d82c) * Updating ose-must-gather builder & base images to be consistent with ART [#202](https://github.com/openshift/must-gather/pull/202) * [Bug 1954302](https://bugzilla.redhat.com/show_bug.cgi?id=1954302): Add ovs related services to GENERAL_SERVICES [#229](https://github.com/openshift/must-gather/pull/229) * [Full changelog](https://github.com/openshift/must-gather/compare/140ea5e8081106c68668b6bd2d0873dc9032af0b...205d4e3cffb19bda7a658836c84587f2ac78d82c) ### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/fd4dfe78bcd8373c545284a671499681f824c645) * Updating golang-github-openshift-oauth-proxy builder & base images to be consistent with ART [#198](https://github.com/openshift/oauth-proxy/pull/198) * [Full changelog](https://github.com/openshift/oauth-proxy/compare/4bd4705011c19a7556551c9a1dfaaa5eacc7898c...fd4dfe78bcd8373c545284a671499681f824c645) ### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/f9ac08715d1b7890a5aa66a8fb16e847a7f6b727) * [Bug 1965402](https://bugzilla.redhat.com/show_bug.cgi?id=1965402): Revert 'Bug 1965402: Enhance API host name validation' [#211](https://github.com/openshift/openshift-apiserver/pull/211) * [Full changelog](https://github.com/openshift/openshift-apiserver/compare/eb2414ce2c8bf60d871ed9047c02028bc84420e6...f9ac08715d1b7890a5aa66a8fb16e847a7f6b727) ### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/c93745bf6898f41c6d10c66e7024238ddf20a86d) * [Bug 1924531](https://bugzilla.redhat.com/show_bug.cgi?id=1924531): Update k8s.io dependencies to address CVE-2021-3121 [#191](https://github.com/openshift/openshift-controller-manager/pull/191) * [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/39b6393236e5abab331de1ab3384d0d165510457...c93745bf6898f41c6d10c66e7024238ddf20a86d) ### [operator-lifecycle-manager](https://github.com/operator-framework/operator-lifecycle-manager/tree/dcbab9aff049c39d3a8a4b544d8829b7ce93d8f8) * [Bug 1982693](https://bugzilla.redhat.com/show_bug.cgi?id=1982693): remove cleanup from startup [#2287](https://github.com/operator-framework/operator-lifecycle-manager/pull/2287) * [Bug 1972075](https://bugzilla.redhat.com/show_bug.cgi?id=1972075): Add OperatorCondition status sync and update operator upgradeable check [#2206](https://github.com/operator-framework/operator-lifecycle-manager/pull/2206) * [Full changelog](https://github.com/operator-framework/operator-lifecycle-manager/compare/f05ea078ab46c241311b04661ecf5cbefd350d09...dcbab9aff049c39d3a8a4b544d8829b7ce93d8f8) ### [operator-registry](https://github.com/operator-framework/operator-registry/tree/06e950de5ebca66e493f6cd2414e73c8978090d3) * [Bug 1968680](https://bugzilla.redhat.com/show_bug.cgi?id=1968680): fix(containerd): drop xattrs during unpack [#676](https://github.com/operator-framework/operator-registry/pull/676) * [Full changelog](https://github.com/operator-framework/operator-registry/compare/5ccabf956d25a2788cc64ad5591c404d7b950207...06e950de5ebca66e493f6cd2414e73c8978090d3) ### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/7be35e6633a14368097997bc87625fbba24d4ce2) * [Bug 1985516](https://bugzilla.redhat.com/show_bug.cgi?id=1985516): Add v6 management interface address for host network policy [#625](https://github.com/openshift/ovn-kubernetes/pull/625) * [Bug 1962608](https://bugzilla.redhat.com/show_bug.cgi?id=1962608): ensure missed events are handled during a reconnection [#547](https://github.com/openshift/ovn-kubernetes/pull/547) * [Bug 1972484](https://bugzilla.redhat.com/show_bug.cgi?id=1972484): egress firewall as ACLs + service connectivity fixes [#592](https://github.com/openshift/ovn-kubernetes/pull/592) * [Bug 1940566](https://bugzilla.redhat.com/show_bug.cgi?id=1940566): Properly log when hybrid overlay errors out [#543](https://github.com/openshift/ovn-kubernetes/pull/543) * [Bug 1970779](https://bugzilla.redhat.com/show_bug.cgi?id=1970779): Remove getDefaultIfAddr and use getNetworkInterfaceIPAddresses [#571](https://github.com/openshift/ovn-kubernetes/pull/571) * [Bug 1962590](https://bugzilla.redhat.com/show_bug.cgi?id=1962590): NewAddressSet: return nil in case of error [#546](https://github.com/openshift/ovn-kubernetes/pull/546) * [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/b687219c202639bde8ecf89955a890d19bf12703...7be35e6633a14368097997bc87625fbba24d4ce2) ### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/f65053f55de7b1793956629c8fa02edb7bb0e5cc) * [Bug 1981634](https://bugzilla.redhat.com/show_bug.cgi?id=1981634): add vulnerable legacy injector to allow for upgrade clusters to use [#170](https://github.com/openshift/service-ca-operator/pull/170) * [Full changelog](https://github.com/openshift/service-ca-operator/compare/e113f2498bb2b54202449ddc3488cb8471997a10...f65053f55de7b1793956629c8fa02edb7bb0e5cc)