4.7.0-0.okd-2021-02-25-144700

Download installer and client with:

oc adm release extract --tools quay.io/openshift/okd:4.7.0-0.okd-2021-02-25-144700

Team Approvals:

No tests for this release

Upgrades from:

Upgrades to:

4.7.0-0.okd-2021-04-24-103438 (changes) - Success Failed
4.7.0-0.okd-2021-04-11-124433 (changes) - S F F
4.7.0-0.okd-2021-03-28-152009 (changes) - F S F
4.7.0-0.okd-2021-03-21-094146 (changes) - Failed Success
4.7.0-0.okd-2021-03-07-090821 (changes) - Success
4.7.0-0.okd-2021-03-06-124908 (changes) - Success Failed

Changes from 4.6.0-0.okd-2021-02-14-205305

Created: 2021-02-25 14:50:50 +0000 UTC

Image Digest: sha256:d0141818eca0f2d49fdea7f3ae5789f3bc747a669f2459f8ef189d1702405b08

Release 4.7.0-0.okd-2021-02-25-144700 was created from registry.ci.openshift.org/origin/release:4.7.0-0.okd-2021-02-25-144700

Components

Kubernetes upgraded from 1.19.4 to 1.20.0-beta.2
Fedora CoreOS 33.20210224.10

New images

cluster-baremetal-operator git ea1ff11f sha256:06f6e37bd9034cc8977f883e88cec36d7f61b709b4743c7b0601f48b9947bff5
csi-snapshot-validation-webhook git 26773735 sha256:4560ae91c1ab291595f4b72f6d1f16617f50e4c2c9c23512f85b95af4bc4bc15
egress-router-cni git 96ebd378 sha256:08fb58ca7862a14ae7260fe629a69989096c3375420084c5962d5e3aa4123cd3
gcp-pd-csi-driver git 091f0212 sha256:635c7f41a9a87e1cab72b755c2b387653e92b3216b1e773ed71daaeb698e4fca
gcp-pd-csi-driver-operator git a45832bf sha256:8c07e00113ed1d243c317a412efc1e69e915c6284831a95585a763f4fcc5da99
hello-openshift git 98a759fa sha256:d00576e20d716953403be5d9ff1a0cddc8a78ab3353fd3752198963624438c1a
openstack-cinder-csi-driver git 7def9722 sha256:7e61c34e9d2d15cc6f8db94fa8b00f527273f80612ed5fb2ab55a989390dad69
openstack-cinder-csi-driver-operator git 117ce62c sha256:e5488313608475e692eefb0f348ff6b9200946689c05885ac4ba747096517067
vsphere-problem-detector git 602c2747 sha256:2bed54258ed3a4be028c517c9e43360624b5c0c9e5a301194b0e41c4f79546e5

Removed images

special-resource-operator

Rebuilt images without code change

branding git 068fa1ea sha256:e680a9cf294443516c94dc6d07da3fb2d50b3c5f975d9290a7db26efab147651
ironic-inspector sha256:64a578e3dbcaa693a57f19a2af8ae1ee94d71f8ccf4bf638d11b22ea5e412489
ironic-ipa-downloader sha256:64a578e3dbcaa693a57f19a2af8ae1ee94d71f8ccf4bf638d11b22ea5e412489

aws-ebs-csi-driver

Updating ose-aws-ebs-csi-driver builder & base images to be consistent with ART #178
Bug 1913289: Rebase to v0.8.0 for OCP 4.7 #176
Bug 1872251: Upstream: 555: Vendor deps #172
vendor: bump aws sdk for sts webhook authentication #175
Bug 1876935: UPSTREAM: 568: Apply extra volume tags to EBS snapshots #174
Updating ose-aws-ebs-csi-driver builder & base images to be consistent with ART #173
Full changelog

aws-ebs-csi-driver-operator

Bug 1905119: dynamically update controller asset for custom CA bundle #111
Updating ose-aws-ebs-csi-driver-operator builder & base images to be consistent with ART #109
Bug 1912945: Set proxy config in Deployment containers #106
Bug 1898045: redeploy CSI Controller Deployment when secret changes #107
Bug 1898045: redeploy CSI Controller Deployment when secret changes #104
support custom CA bundle for AWS API #102
assets/controller.yaml: support using aws config for credentials #99
Bug 1898851: Add multipods tests #100
Bug 1898851: Enable topology tests for the driver #98
Updating ose-aws-ebs-csi-driver-operator builder & base images to be consistent with ART #96
Bug 1840759: Pass cluster ID to CSI driver #83
Full changelog

aws-machine-controllers

Bug 1915114: use separate client for accessing openshift-config-managed namespace #382
Bug 1909108: Bump K8s dependencies to 1.20 #381
Bug 1906740: Ensure the region is valid when creating AWS client #380
Bug 1907286: Ensure Machine is marked interruptible as well as Node #379
Bug 1903424: Ensure MAO dependency is up to date to include newest metrics #378
support custom CA bundle for AWS API #372
use shared credentials file for session creation #374
Bug 1902157: Mark node with condition when due for termination #332
Bump scripts to Go 1.15 #375
Move instance tenancy under placement field #370
Add verify-diff check in generate task and enable in CI #368
add elmiko to OWNERS file #366
bump AWS SDK to v1.35.20 #365
Add support for dedicated instance tenancy #360
add bugzilla component and subcomponent to OWNERS #359
Full changelog

aws-pod-identity-webhook

Updating ose-aws-pod-identity-webhook builder & base images to be consistent with ART #129
Full changelog

baremetal-runtimecfg

Bug 1915080: add CloseIdleConnections for HTTP K8S API healthcheck #117
Updating baremetal-runtimecfg builder & base images to be consistent with ART #115
Bug 1905233: get the correct VRRP interface in case of IPV6 overlapping subnets #112
Bug 1894539: Allow node-ip to function without attachment to VIP network #111
Update “runtimecfg node-ip” for dual-stack #110
Set mac address as prefix for unique hostname #109
Bug 1894539: Allow baremetal-runtimecfg to function when the node isn’t attached to the VIP network #108
Remove get boostrap IP code #107
Add image build and push to the Makefile #97
Bug 1885867: Flip to unicast only when MCO set to desired version in all nodes #103
Add bz component information #106
Updating baremetal-runtimecfg builder & base images to be consistent with ART #104
Change local Dockerfile to use CentOS 8 #95
Full changelog

cli, cli-artifacts, deployer, tools

Add missing docs generation tools #725
Bug 1914894: warn users about using non-groupified resources #693
Bug 1900989: idle: also annotate the service #720
Bug 1888192: add rsync & log re-tries #631
Bug 1907421: Implementing retries during for image mirror #706
Bug 1920024: debug: Allow pods to keep labels during debugging #613
Bug 1919862: fix message after oc new-project #715
Bug 1920427: drop information about prompt for oc login #717
Bug 1878022: Improving import-image help messages #712
Bug 1917522: Mark filter-by-os deprecated in oc adm catalog mirror #710
Bug 1902299: catalog mirror improvements #673
Updating openshift-enterprise-deployer builder & base images to be consistent with ART #700
Updating ose-cli-artifacts builder & base images to be consistent with ART #702
Updating ose-tools builder & base images to be consistent with ART #701
Updating openshift-enterprise-cli builder & base images to be consistent with ART #699
Bug 1916621: fix oc adm node-logs examples #708
Bug 1906276: oc image append|extract: clarify help for –filter-by-os #707
Bug 1890677: oc image: Include error msg when image not found and register oci schema for mediatypes #697
Bug 1899575: bump discovery burst to 250 #696
Bug 1890995: oc new-app: provide message for unauthorized error with image lookup #691
Bug 1911487: make deployment config explicit for prune deployments #683
Bug 1908697: use wrapper for diff command #682
Bug 1914452: Fix the manifest list warning when choosing an os/arch digest from list #688
Bug 1908484: credentials-requests extract only write creds requests not all manifests #687
Bug 1910840: fix help for rollback #684
Bug 1880068: Take StatefulSets, Jobs and CronJobs into account during image prune #671
Bug 1907375: bump deps #689
Bug 1909289: Should be able to debug an init container #676
Bug 1878972: pkg/cli/admin/release: Use ‘-’, not ‘=’, for untranslated arches #680
REVERT: Bug 1812813: oc debug node: create debug namespace with empty node-selector annotation #550 #668
Bug 1905404: fix append example #664
Bug 1890951: Improve output of ‘oc image mirror’ with multi-arch images #642
Bug 1890671: use proper username for image verification #637
Bug 1906121: Remove duplicates and use k8s methods #649
Bug 1878972: adm release mirror: add architecture information #646
Oc 4.7 kubernetes 1.20.0 beta.2 #660
Bug 1903033: deduplicate imageContentSources printed when mirroring release #661
observe: support CRDs #650
Bug 1878823: ‘oc adm release mirror’ add –to-release mirrors to generated ICSP #640
IR-112: Pruner should be aware of OCI image configs #617
Bug 1891555: Accept OS_GIT_VERSION to set version information #635
Bug 1893645: account for nil in LastTransitionTime in route status #632
Bug 1891555: BuildRequires goversioninfo #629
Bug 1888738: fall-back must-gather to official RH supported image #627
show proper wildcard for ‘oc image mirror –help example’ #625
Bug 1853116: write to files instead of stdout #482
inspect: add example how to use multiple resources #621
fix help for ‘oc adm release extract’ #622
Bug 1891555: Create Windows version information #623
Bug 1888657: set command name for LoginOptions #616
Bug 1841885: Support airgapped mirroring with oc adm catalog mirror #611
Updating ose-tools builder & base images to be consistent with ART #607
Updating openshift-enterprise-cli builder & base images to be consistent with ART #606
Updating openshift-enterprise-deployer builder & base images to be consistent with ART #608
Updating ose-cli-artifacts builder & base images to be consistent with ART #609
Bug 1868384: Login: Avoid overwriting same user from different cluster #537
Bug 1885179: Avoid deadlock by closing pipe reader end #604
oc login: Show tokenURL message if only IDP is basic and user has not provided username #553
release: Fix typo in cli argument for release mirror #612
Bug 1884270: bypass golang url parsing with scp styled ssh git URLs; refactor URL for older git clients #610
Bug 1885170: fix nil pointer in release code #603
Refactor deletion of hashed session token on user logout #534
must-gather: fixed typo when using a plug-in image #481
cli/admin/release/new: typo fix #558
Full changelog

cloud-credential-operator

Bug 1916081: MissingTargetNamespace message fix #293
Bug 1920695: Update OpenShift CI registry in Makefile #288
Bug 1916454: checking 4.7 creds #280
Updating ose-cloud-credential-operator builder & base images to be consistent with ART #282
Bug 1908747: remove stale S3 CredentialsRequest manifests #278
Bug 1906880: operator: remove odicdiscoveryendpoint controller #276
Bug 1903226: exclude run-level 0 namespaces from MutatingWebhook for Pods #275
Add IBM Cloud managed annotations to CVO manifests #274
add current profile annotations to CVO manifests #272
Bug 1880785: Fix CredentialsRequest missing description in ‘oc explain’ #270
add new credentials field for AWS Secrets #264
aws: support custom CA bundle for AWS API #266
Bug 1889540: manifests: Allow ‘for: 20m’ for CloudCredentialOperatorDown #262
Revert “Fix /etc/pki/ca-trust/extracted/pem permissions issue” #265
Add kubevirt platform #260
Fix /etc/pki/ca-trust/extracted/pem permissions issue #263
Redistribute new root creds in passthrough mode #242
move status calculation into its own controller #255
enable GCP read only creds to be used when root creds missing #259
Updating ose-cloud-credential-operator builder & base images to be consistent with ART #258
allow skipping leader election #257
Stop reporting mode metrics for unused modes. #256
Fix formatting in README #243
Full changelog

cluster-authentication-operator

Bug 1841039: e2e: add a test for password grant checking with keycloak #401
Bug 1921275: deploymentController: treat error retrieving authentication.operator/cluster #402
Bug 1917114: proxyconfig controller: match URL to noproxy correctly #400
Bug 1916949: manifests: exclude rbac resources in openshift-oauth-apiserver namespace from hosted profile #399
Bug 1905329: oauth-apiserver deployment: add cpu and memory requests #395
Bug 1901774: manifests: add liveness probe to the operator’s deployment #394
Bug 1887392: bump kube to 0.20.1 and lib-go to master to pick up authn/z caching #392
Bug 1901057: proxyconfig controller: add router CA to the trusted pool #387
Updating ose-cluster-authentication-operator builder & base images to be consistent with ART #377
oauth-apiserver:workload: wait for storage urls before installing the api server #386
Annotate manifests for single-node-developer cluster profile #383
starts to manage the encryption configuration #379
always claim control over oauth and user APIs #380
add RBAC for the new useroauthaccesstokens #381
pkg/controllers/common: Fix “successfull” -> “successful” typos #382
Add IBM Cloud managed annotations to CVO manifests #378
oauthserver: grab unsupported overrides from a prefixed tree #319
Add a controller to report misconfigured proxy #355
picks up setting TCP_USER_TIMEOUT socket option #372
Bug 1893386: Fix wrong operator config informer #373
Restrict log permissions #366
Bug 1893386: update ingress node available to handle custom placement #370
add current profile annotations to CVO manifests #369
Bug 1891758: deployment: update event spam #365
Bug 1887428: add ServiceMonitor for the oauth apiserver #361
BUG 1888311: p&f: make oauth SAR/TokenReview traffic exempt #363
Bug 1888028: bump library-go to stop waiting on kube-apiserver availability #362
pkg/controllers: Use library-go’s IngressURI helper #358
BUG 1886449: p&f: assign oauth server traffic to workload-high #359
remove unused vbom.ml/util dependency #357
ingressnodesavailable: fix typo in message #348
flowschema for oauth server and its operator #356
Full changelog

cluster-autoscaler

Bug 1913960: rebase on top of kubernetes/autoscaler 1.20 #185
Bug 1906933: Add upstream patch for update group identifier #184
Add upstream patch for –cloud-config option #180
Add upstream patch for node group autodiscovery #179
BUG 1854256: Bump github.com/heketi/heketi to v10.1.0 #183
Add upstream patch to remove internal types in favor of unstructured #177
Updating atomic-openshift-cluster-autoscaler builder & base images to be consistent with ART #181
Updating vertical-pod-autoscaler builder & base images to be consistent with ART #182
Bug 1891551: Ensure the node template include up to date and informative labels #178
Full changelog

cluster-autoscaler-operator

Bug 1915473: Annotate manifests for single-node-developer cluster profile #188
Bug 1907380: Reduce verbosity of kube-rbac-proxy logging #189
Bug 1909108: Bump K8s dependencies to 1.20 #190
Bump scripts to Go 1.15 #186
Bug 1879777: Remove namespace manifest #185
add machineset/scale resource to the cluster-autoscaler role #177
add current profile annotations to CVO manifests #179
Add verify-diff check in generate task and enable in CI #181
update go mod vendor #180
Bug 1876469: Update generated CRDs #178
add current profile annotations to CVO manifests #176
add bugzilla component to OWNERS #172
Full changelog

cluster-bootstrap

Bug 1855628: bump golang.com/x/text and switch to go-mod and build-machinery #37
Updating ose-cluster-bootstrap builder & base images to be consistent with ART #43
Full changelog

cluster-config-operator

Bug 1920619: bump(openshift): remove scheduler default profile from config #181
Updating ose-cluster-config-operator builder & base images to be consistent with ART #178
Bug 1890038: update AWS platform status migration controller for all platforms #174
Bug 1915473: Annotate manifests for single-node-developer cluster profile #169
Bug 1905328: Add warning of the consequences of changing bound token issuer #173
Updating ose-cluster-config-operator builder & base images to be consistent with ART #165
Bump openshift/api #168
Bug 1891952: Bump API For Ingress AppsDomain Field #167
add current profile annotations to CVO manifests #164
Add component to OWNERS #163
bump(github.com/openshift/api): support KubeVirt platform #160
Full changelog

cluster-csi-snapshot-controller-operator

Updating ose-cluster-csi-snapshot-controller-operator builder & base images to be consistent with ART #78
Bug 1914451: Don’t run the operator as root UID #74
Bug 1915473: Annotate manifests for single-node-developer cluster profile #65
Bug 1916221: Bump dependencies #72
Bug 1907287: Use webhook for v1 snapshot API #71
Bug 1908347: Apply ValidatingWebhookConfiguration correctly #68
Bug 1908349: Don’t validate v1 objects #70
Bug 1906518: Update Snapshot CRDs to v1 #69
Bug 1905320: Add memory limit for webhook container. #67
Add validation webhook deployment #62
Add IBM Cloud managed annotations to CVO manifests #64
add current profile annotations to CVO manifests #61
Change to “component” for BZ component #60
Bug 1839239: Update version only after having rolled out the new operand #57
Add BZ component to OWNERS #59
Bug 1879365: Remove namespace creation #49
Full changelog

cluster-dns-operator

Bug 1912522: test/e2e: Re-enable TestCoreDNSImageUprade #230
Updating ose-cluster-dns-operator builder & base images to be consistent with ART #229
Bug 1905323: Request appropriate memory for dns-node-resolver container #225
Bug 1908891: test/e2e: Block on TestCoreDNSImageUpgrade image revert #226
Bug 1906860: Bump for kube 1.20 #222
Bug 1882485: Prevent dig errors from corrupting host’s /etc/hosts #223
Bug 1880148: Fix DNS DaemonSet’s updateStrategy stanza #221
Bug 1880148: Set DNS DaemonSet’s maxUnavailable value to 10% #217
Revert “Configure CoreDNS to shut down gracefully” #213
Add IBM Cloud managed annotations to CVO manifests #214
Bug 1896923: Configure CoreDNS metrics plugin to use localhost #210
addOwners-candita #212
Bug 1895147: Remove memory limit on the CoreDNS container #207
add current profile annotations to CVO manifests #206
Bug 1884053: Configure CoreDNS to shut down gracefully #205
Updating ose-cluster-dns-operator builder & base images to be consistent with ART #203
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github