# 4.7.0-0.okd-2021-08-07-063045

Created: 2021-08-07 08:03:18 +0000 UTC

Image Digest: `sha256:78e4237a39e93e6f7b9cef579f135dc5d5dc11fc46ae53587351ac1d26261339`

Promoted from registry.ci.openshift.org/origin/release:4.7.0-0.okd-2021-08-07-063045


## Changes from 4.7.0-0.okd-2021-07-03-190901

### Components

* Kubernetes 1.20.0-beta.2


### Rebuilt images without code change

* [baremetal-operator](https://github.com/openshift/baremetal-operator) git [e36cbc13](https://github.com/openshift/baremetal-operator/commit/e36cbc13f82e290ca5f525a4da0fab516808d113) `sha256:d1e5800228ed878c3941efed1b89f35fe3cc25d59e2e1dd2c8074951fb944acb`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [9c5da32b](https://github.com/openshift/baremetal-runtimecfg/commit/9c5da32ba602e5881178e56269b0506fcb54ff92) `sha256:4ebfae84099553f78e6e1dc82308f57e4d08bde8aa640264c93e7d2459da22f7`
* [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator) git [0783477a](https://github.com/openshift/cloud-credential-operator/commit/0783477aa72edf998344740933a99c0417ebe573) `sha256:d3db5d30d5084a2cdb3b4226877efad575c78b73758b6e967cbf088f3c42a932`
* [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [6d2c25f3](https://github.com/openshift/cluster-storage-operator/commit/6d2c25f3cfb931deca457a0c6261651c1a64c464) `sha256:82e34ada115f908ca390d3177d96d38fe64a5df171c428347c60d95ca18538fa`
* [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator) git [117ce62c](https://github.com/openshift/openstack-cinder-csi-driver-operator/commit/117ce62c69b399c524850f4ca32324a4ed288acd) `sha256:1049066ee2e88b49e41fad931f9f71280d98505ca15bf2749dd6593af225a831`


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/726d97e15db78b767234da98d2c75f794f4bf158)

* [Bug 1938967](https://bugzilla.redhat.com/show_bug.cgi?id=1938967): Updating baremetal-machine-controller builder & base images to be consistent with ART [#134](https://github.com/openshift/cluster-api-provider-baremetal/pull/134)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/25cbb8d8f9e52244ccd6bf459e6dd4b84749de56...726d97e15db78b767234da98d2c75f794f4bf158)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/4c02b7b2322eab9bbcb969886211d541e5e4fcde)

* Updating ose-cluster-authentication-operator builder & base images to be consistent with ART [#408](https://github.com/openshift/cluster-authentication-operator/pull/408)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/16bd3f3f4584442f42a83b4d8ee8e2f9fd0acb87...4c02b7b2322eab9bbcb969886211d541e5e4fcde)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/97b08fc661203375e86e0d1a950fc9e4a409a7e0)

* [Bug 1933726](https://bugzilla.redhat.com/show_bug.cgi?id=1933726): provisioning: configure DHCP range with netmask [#112](https://github.com/openshift/cluster-baremetal-operator/pull/112)
* [Bug 1973367](https://bugzilla.redhat.com/show_bug.cgi?id=1973367): Pass IP_OPTIONS=dhcp|dhcp6 down to OS Downloader container [#171](https://github.com/openshift/cluster-baremetal-operator/pull/171)
* [Bug 1972291](https://bugzilla.redhat.com/show_bug.cgi?id=1972291): Use a cache URL with the .svc.cluster.local suffix [#161](https://github.com/openshift/cluster-baremetal-operator/pull/161)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/175f8f5283faebd81fb9d1fb2915eb2682622e1e...97b08fc661203375e86e0d1a950fc9e4a409a7e0)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/a04cd81327c720c5fd54f7be8dcd42b553251ba2)

* [Bug 1984979](https://bugzilla.redhat.com/show_bug.cgi?id=1984979): Creating StorageAccount V2 instead of V1 [#707](https://github.com/openshift/cluster-image-registry-operator/pull/707)
* Updating ose-cluster-image-registry-operator builder & base images to be consistent with ART [#651](https://github.com/openshift/cluster-image-registry-operator/pull/651)
* [Bug 1977159](https://bugzilla.redhat.com/show_bug.cgi?id=1977159): bump aws-sdk-go to v1.38.35 [#704](https://github.com/openshift/cluster-image-registry-operator/pull/704)
* [Bug 1973693](https://bugzilla.redhat.com/show_bug.cgi?id=1973693): Setting required pod anti-affinity rules [#697](https://github.com/openshift/cluster-image-registry-operator/pull/697)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/4f854ba118c7a3424beb8739b34fa97499245f9e...a04cd81327c720c5fd54f7be8dcd42b553251ba2)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/b86f935f5e693f48dbf6ec23a490422b6e295eb7)

* [Bug 1978845](https://bugzilla.redhat.com/show_bug.cgi?id=1978845): Specify topology spread constraints [#632](https://github.com/openshift/cluster-ingress-operator/pull/632)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/2de39ae138e2dc8fb2e69847f659f97b92e6a71e...b86f935f5e693f48dbf6ec23a490422b6e295eb7)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/035c8038f56cdcf0d402bea6671e81882e3ab8bd)

* [Bug 1986591](https://bugzilla.redhat.com/show_bug.cgi?id=1986591): node exporter calls /proc/cpuinfo multiple times causing the node to freeze [#1300](https://github.com/openshift/cluster-monitoring-operator/pull/1300)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/d6725052e00a206cab10f6c40abdfa1a3c2aff0f...035c8038f56cdcf0d402bea6671e81882e3ab8bd)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/db0dc0d9625a5900e752635dca9d30a19e6b6ed3)

* [Bug 1962036](https://bugzilla.redhat.com/show_bug.cgi?id=1962036): Use the election mechanism provided by library-go [#1098](https://github.com/openshift/cluster-network-operator/pull/1098)
* [Bug 1972549](https://bugzilla.redhat.com/show_bug.cgi?id=1972549): Remove reference to v1beta1 API [#1134](https://github.com/openshift/cluster-network-operator/pull/1134)
* [Bug 1982217](https://bugzilla.redhat.com/show_bug.cgi?id=1982217): Use 10% for ovnkube-node for maxUnavailable [#1153](https://github.com/openshift/cluster-network-operator/pull/1153)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/ad893a41cd42cf7992e812ea47b5dd814f05c760...db0dc0d9625a5900e752635dca9d30a19e6b6ed3)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/fa6d8e1cc9d57566fa3fbe4dbb361892ccf9e17d)

* Updating ose-cluster-openshift-apiserver-operator builder & base images to be consistent with ART [#427](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/427)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/ecfa2d959fe2afcbd3e947658d267b085a1b2063...fa6d8e1cc9d57566fa3fbe4dbb361892ccf9e17d)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/2a8963a9c5755d4951d882bd816cd4d6ccdf02cd)

* [Bug 1924494](https://bugzilla.redhat.com/show_bug.cgi?id=1924494): Update k8s.io dependencies to address CVE-2021-3121 [#222](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/222)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/245005e3065238ecd4aef208c21456afa09ec38e...2a8963a9c5755d4951d882bd816cd4d6ccdf02cd)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/c07975c452303469c378bc5b0f70d8763eaca1f3)

* [Bug 1924428](https://bugzilla.redhat.com/show_bug.cgi?id=1924428): CVE-2021-3121 gogo/protobuf lacks certain index validation [#625](https://github.com/openshift/cluster-version-operator/pull/625)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/fa7bfbc485b4256535b7de172d1083f83c9409ce...c07975c452303469c378bc5b0f70d8763eaca1f3)


### [console](https://github.com/openshift/console/tree/65cf7f6c2bf100d7605d80b3c0fce9e3e7a6dbd8)

* [Bug 1975469](https://bugzilla.redhat.com/show_bug.cgi?id=1975469): Handle array to string conversion for HTTPS checkbox value [#9332](https://github.com/openshift/console/pull/9332)
* Updating openshift-enterprise-console images to be consistent with ART [#8596](https://github.com/openshift/console/pull/8596)
* [Full changelog](https://github.com/openshift/console/compare/b571ac9bad467db8459f25de9c5a4f3b54789312...65cf7f6c2bf100d7605d80b3c0fce9e3e7a6dbd8)


### [docker-registry](https://github.com/openshift/image-registry/tree/8b03485af777f8d718427393aa575bbaf6f21610)

* [Bug 1984094](https://bugzilla.redhat.com/show_bug.cgi?id=1984094): use apimachinery with HTTP/2 health checks enabled [#288](https://github.com/openshift/image-registry/pull/288)
* Updating openshift-enterprise-registry builder & base images to be consistent with ART [#262](https://github.com/openshift/image-registry/pull/262)
* [Bug 1977159](https://bugzilla.redhat.com/show_bug.cgi?id=1977159): bump aws-sdk-go to v1.38.35 [#282](https://github.com/openshift/image-registry/pull/282)
* [Full changelog](https://github.com/openshift/image-registry/compare/8e0c068aef607fceffe3e179c3a9701f51c51dff...8b03485af777f8d718427393aa575bbaf6f21610)


### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/1ecbec4904b6036ea1676d58f70567fa8cd7d4fe)

* [Bug 1985545](https://bugzilla.redhat.com/show_bug.cgi?id=1985545): Remove curl of extract-vmlinux [#50](https://github.com/openshift/driver-toolkit/pull/50)
* [Bug 1985546](https://bugzilla.redhat.com/show_bug.cgi?id=1985546): /etc/driver-toolkit-release.json kernel version match rpm -q output [#51](https://github.com/openshift/driver-toolkit/pull/51)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/044d4be053f86d8f059197a76f641f99cf07d444...1ecbec4904b6036ea1676d58f70567fa8cd7d4fe)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/0cb61d205d0f911fe8ca614094f0cd3f911d665c)

* Updating ose-gcp-pd-csi-driver builder & base images to be consistent with ART [#10](https://github.com/openshift/gcp-pd-csi-driver/pull/10)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/091f0212dfa6d93df37b99fcd2b4b9a4c6d5bbba...0cb61d205d0f911fe8ca614094f0cd3f911d665c)


### [hello-openshift, tests](https://github.com/openshift/origin/tree/24f464bff3559617d73d5b4ec57332ff22ac000b)

* [Bug 1982929](https://bugzilla.redhat.com/show_bug.cgi?id=1982929): Improve GC Check for Builds [#26334](https://github.com/openshift/origin/pull/26334)
* Re-enable quota test [#26284](https://github.com/openshift/origin/pull/26284)
* [Bug 1980540](https://bugzilla.redhat.com/show_bug.cgi?id=1980540): Use cluster-logging for operator installation smoke test. [#26315](https://github.com/openshift/origin/pull/26315)
* [Full changelog](https://github.com/openshift/origin/compare/2d1d603b37d527f2a9424749bcbad286cfbf3e62...24f464bff3559617d73d5b4ec57332ff22ac000b)


### [hyperkube](https://github.com/openshift/kubernetes/tree/558d959332b3f1f7bf786673bf294e6e0932bb18)

* [Bug 1981634](https://bugzilla.redhat.com/show_bug.cgi?id=1981634): UPSTREAM: <drop>: use the legacy service-ca.crt content for clusters started in 4.7 or before [#857](https://github.com/openshift/kubernetes/pull/857)
* [Bug 1977383](https://bugzilla.redhat.com/show_bug.cgi?id=1977383): [release-4.7] Ensure service ca configmap is created in all namespaces [#834](https://github.com/openshift/kubernetes/pull/834)
* [Full changelog](https://github.com/openshift/kubernetes/compare/01c9f3f43ffcf096c29d51f3b6f2b6914b2b56a6...558d959332b3f1f7bf786673bf294e6e0932bb18)


### [installer, installer-artifacts](https://github.com/vrutkovs/installer/tree/c4b7808d57a10c95250ba4ecd7f92dbceb0ce280)

* [Bug 1954595](https://bugzilla.redhat.com/show_bug.cgi?id=1954595): Validate noProxy input and add prefix for proxy urls [#5060](https://github.com/vrutkovs/installer/pull/5060)
* OWNERS: add more core team members as approvers [#5123](https://github.com/vrutkovs/installer/pull/5123)
* [Full changelog](https://github.com/vrutkovs/installer/compare/af0c206a845eaa0d17efe4f1952d248406cdfdfe...c4b7808d57a10c95250ba4ecd7f92dbceb0ce280)


### [ironic-hardware-inventory-recorder](https://github.com/openshift/ironic-hardware-inventory-recorder-image/tree/564aaca3b4bd95007472d3c3cd8d2d0748778ef4)

* Updating ironic-hardware-inventory-recorder-image builder & base images to be consistent with ART [#502](https://github.com/openshift/ironic-hardware-inventory-recorder-image/pull/502)
* [Full changelog](https://github.com/openshift/ironic-hardware-inventory-recorder-image/compare/61c4cc7dc99601fe32b239be8923a6ed693908b0...564aaca3b4bd95007472d3c3cd8d2d0748778ef4)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/870afcb36a7ee4a2bef59845981821453b4174dd)

* [Bug 1963210](https://bugzilla.redhat.com/show_bug.cgi?id=1963210): Add support for no_proxy [#53](https://github.com/openshift/ironic-rhcos-downloader/pull/53)
* [Bug 1973367](https://bugzilla.redhat.com/show_bug.cgi?id=1973367): Modify dhcp kernel args based on ipv4/ipv6 [#55](https://github.com/openshift/ironic-rhcos-downloader/pull/55)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/682c57f434ccb48ec2f46b540a075db2f4a32ffa...870afcb36a7ee4a2bef59845981821453b4174dd)


### [machine-os-content](https://github.com/openshift/okd-machine-os/tree/18fd7f8e0b69719f38632d06fabfbfa878ad8216)

* Bump fedora-coreos-config to latest stable [#173](https://github.com/openshift/okd-machine-os/pull/173)
* Periodic submodule bump [#170](https://github.com/openshift/okd-machine-os/pull/170)
* Bump fedora-coreos-config [#162](https://github.com/openshift/okd-machine-os/pull/162)
* [Full changelog](https://github.com/openshift/okd-machine-os/compare/4258607ab057ffe86d9da50cc43d0ac5369a6ce0...18fd7f8e0b69719f38632d06fabfbfa878ad8216)


### [must-gather](https://github.com/openshift/must-gather/tree/205d4e3cffb19bda7a658836c84587f2ac78d82c)

* Updating ose-must-gather builder & base images to be consistent with ART [#202](https://github.com/openshift/must-gather/pull/202)
* [Bug 1954302](https://bugzilla.redhat.com/show_bug.cgi?id=1954302): Add ovs related services to GENERAL_SERVICES [#229](https://github.com/openshift/must-gather/pull/229)
* [Full changelog](https://github.com/openshift/must-gather/compare/140ea5e8081106c68668b6bd2d0873dc9032af0b...205d4e3cffb19bda7a658836c84587f2ac78d82c)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/fd4dfe78bcd8373c545284a671499681f824c645)

* Updating golang-github-openshift-oauth-proxy builder & base images to be consistent with ART [#198](https://github.com/openshift/oauth-proxy/pull/198)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/4bd4705011c19a7556551c9a1dfaaa5eacc7898c...fd4dfe78bcd8373c545284a671499681f824c645)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/c93745bf6898f41c6d10c66e7024238ddf20a86d)

* [Bug 1924531](https://bugzilla.redhat.com/show_bug.cgi?id=1924531): Update k8s.io dependencies to address CVE-2021-3121 [#191](https://github.com/openshift/openshift-controller-manager/pull/191)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/39b6393236e5abab331de1ab3384d0d165510457...c93745bf6898f41c6d10c66e7024238ddf20a86d)


### [operator-lifecycle-manager](https://github.com/operator-framework/operator-lifecycle-manager/tree/dcbab9aff049c39d3a8a4b544d8829b7ce93d8f8)

* [Bug 1982693](https://bugzilla.redhat.com/show_bug.cgi?id=1982693): remove cleanup from startup [#2287](https://github.com/operator-framework/operator-lifecycle-manager/pull/2287)
* [Full changelog](https://github.com/operator-framework/operator-lifecycle-manager/compare/a5f086a0cec32be5577b55c89d58adc40b677eb1...dcbab9aff049c39d3a8a4b544d8829b7ce93d8f8)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/7be35e6633a14368097997bc87625fbba24d4ce2)

* [Bug 1985516](https://bugzilla.redhat.com/show_bug.cgi?id=1985516): Add v6 management interface address for host network policy [#625](https://github.com/openshift/ovn-kubernetes/pull/625)
* [Bug 1962608](https://bugzilla.redhat.com/show_bug.cgi?id=1962608): ensure missed events are handled during a reconnection [#547](https://github.com/openshift/ovn-kubernetes/pull/547)
* [Bug 1972484](https://bugzilla.redhat.com/show_bug.cgi?id=1972484): egress firewall as ACLs + service connectivity fixes [#592](https://github.com/openshift/ovn-kubernetes/pull/592)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/9f2bd7e65637f2a76005fbf01520a56676e8f427...7be35e6633a14368097997bc87625fbba24d4ce2)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/f65053f55de7b1793956629c8fa02edb7bb0e5cc)

* [Bug 1981634](https://bugzilla.redhat.com/show_bug.cgi?id=1981634): add vulnerable legacy injector to allow for upgrade clusters to use [#170](https://github.com/openshift/service-ca-operator/pull/170)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/e113f2498bb2b54202449ddc3488cb8471997a10...f65053f55de7b1793956629c8fa02edb7bb0e5cc)