4.7.0-0.okd-2021-05-22-050008

New features since version 4.6.0-0.okd-2023-10-03-141935

Download installer and client with:

oc adm release extract --tools quay.io/openshift/okd:4.7.0-0.okd-2021-05-22-050008

Team Approvals:

No tests for this release

Upgrades from:

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.7.0-0.okd-2021-03-28-152009

Created: 2021-05-22 07:33:35 +0000 UTC

Image Digest: sha256:301cd36b2ab370027ddb0ec43e540a03a24748a25b69578dec504d130475304b

Release 4.7.0-0.okd-2021-05-22-050008 was created from registry.ci.openshift.org/origin/release:4.7.0-0.okd-2021-05-22-050008

Components

Kubernetes 1.20.0-beta.2
Fedora CoreOS upgraded from 33.20210323.10 to 33.20210426.3

New images

driver-toolkit git bbf091e6 sha256:52ce5a78c22547ce1004e1237eac7a8cc652c713a4d575558d215e8fdcf9b14d

Rebuilt images without code change

baremetal-machine-controllers git 25cbb8d8 sha256:35db17a664c972925be2ba965644c52c2a4afacf64ad535ceeb90d5314e9ab1c
baremetal-operator git 74c60aa9 sha256:f8de068a6bb16340bfe340c5a96ea72c21c171bb6ade7b78a25ae8d448513d14
cluster-storage-operator git fd2b47c0 sha256:3bc220604da65cdf69d6ed3aa5231c0e876611dd12e7e458779df779448a0d7e
console-operator git 4f933d59 sha256:02d36cb864397fbfa7666c395a7f443dffea96395b21247c091de033e5c0bc9a
csi-external-resizer git f77279e9 sha256:3257a73312d45dd3d40bd293dbfa5c36e08748315664acd9ed81b3d7f5433f20
csi-external-snapshotter git 26773735 sha256:81e2185a9bc191c9c8228210b473650c519e371751c26d95c70742751aad5734
csi-livenessprobe git 3dad0280 sha256:4df9cecf8dc7544ed02f51540fee778da7c356a7bf3da1fa07bb2def4f32d260
csi-node-driver-registrar git 2a77963e sha256:a7867af403524a47fde36dd9df7db4bf311f479b96075ca87331e35e52f273fe
csi-snapshot-controller git 26773735 sha256:292cfa81294a015e58ef0a934fd4458955db0fbec6db5c964f06ef1270b50afd
csi-snapshot-validation-webhook git 26773735 sha256:0cb89f34f95f8f4556f75f40b7ecce28f4af80ca717475460883d09c2e1025f1
docker-registry git 8e0c068a sha256:a9280162c7af6a5ccee78df57c2ffd416e5fb20fe0eaaf1bbb2f118755e6c24d
haproxy-router git 130b5993 sha256:0a211c4f9bbdc47b36df68382e832f24d13d25118ed1e783f9c5408c5d8e1ee5
libvirt-machine-controllers git 033be25c sha256:301975a9875c68eb7af7263fd5a8581f9827a37a61fc3268f5948ee36615e21a
oauth-server git 3215761a sha256:828319ba81b642915b547baae2d72da16893cae8661e8f71c53ff7e594e20300
openstack-machine-controllers git 471cf3ab sha256:37ebfd8f4dc4a8958ec06d3186363b40287a8df47774d4d6705cbdcdf05037d3
ovirt-csi-driver git 72545e63 sha256:f5896064dd203631adb53d86f6e044b80d071c6c6f67ab7e2b9e4dfa096fef6a
ovirt-csi-driver-operator git f8808a04 sha256:1214f291361669db31c257f09de3b89cab08a1a94c6c7367b1e0868ed1d3f327

aws-machine-controllers

Bug 1924471: Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #409
Bug 1952614: [OCPCLOUD-1115] Get instance tags from infrastructure object #405
Full changelog

baremetal-installer, installer, installer-artifacts

Bug 1945907: Byo aws iam roles 4.7 #4813
Bug 1954803: aws: support for bring-your-own hosted zone #4887
Bug 1951571: registry.svc.ci.openshift.org is no longer valid #4853
Bug 1954152: manifests: populate aws user tags in infrastructure #4882
Bug 1935174: RHCOS bump for LUKS, prjquota, etc #4791
Bug 1947122: gcp: install google cloud sdk with yum the recommended way #4824
Full changelog

baremetal-runtimecfg

Bug 1942488: sort AddressesDefault by route priority, ifindex, and IPv4/IPv6 preference #132
Full changelog

cli, cli-artifacts, deployer, tools

Bug 1942938: [release-4.7] inspect clusteroperators as a backup to must-gather if it fails #766
Full changelog

cloud-credential-operator

Bug 1948396: oVirt credentials secret contains unnecessary “ovirt_cafile” #322
Bug 1948702: [release-4.7] manifests/0000_90_cloud-credential-operator_04_alertrules: Drop CloudCredentialOperatorDown #324
Full changelog

cluster-authentication-operator

Bug 1956797: bump kube to 0.20.6 to prevent delegated authz panics #443
Bug 1941840: endpoints controller: close response bodies #440
Bug 1949941: add a scraper and an alert to check for old-style tokens #437
Full changelog

cluster-autoscaler-operator

Bug 1924478: Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #207
Full changelog

cluster-baremetal-operator

Bug 1936544: Inject proxy environment variables everywhere #117
Full changelog

cluster-config-operator

Bug 1954152: vendor: bump to the latest openshift/api #200
Full changelog

cluster-dns-operator

Bug 1953097: Corefile: Enable bufsize plugin for all servers #267
Bug 1953609: Enable errors plugin for custom upstream resolvers #268
Bug 1942228: Fix spurious reconciliation of DNS daemonset and service #250
Bug 1943826: Corefile: Use 30 second max TTL for caching of negative responses #254
Full changelog

cluster-etcd-operator

OWNERS: add lilic as reviewer #588
Bug 1954073: bindata, pkg: Propagate operator log level to etcd itself #578
Full changelog

cluster-image-registry-operator

Bug 1955176: Setting user provided tags on bucket creation #682
Full changelog

cluster-ingress-operator

Bug 1954097: Annotate services of type LoadBalancer with user tags (AWS only) #606
Full changelog

cluster-kube-apiserver-operator

Bug 1927321: competing connectivitycheckcontrollers cause pod restarts during upgrades #1041
Full changelog

cluster-machine-approver

Bug 1924492: Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #120
Updating ose-cluster-machine-approver builder & base images to be consistent with ART #103
Full changelog

cluster-monitoring-operator

Bug 1955482: Drop high-cardinality metrics from kube-state-metrics which aren’t used #1141
Bug 1955469: remove node_mountstatsnfs* metrics #1154
Bug 1955462: drop container_memory_failures_total metric backport #1160
Bug 1952149: oc adm top reporting unknown status for Windows node #1130
Bug 1955449: drop crio image metrics #1134
Bug 1945856: Revert “Bug 1934516: [4.7]: jsonnet/prometheus.jsonnet: Apply system-cluster-critical class to cluster Prometheus ” #1103
Bug 1945851: Backport Remove the “instance” and “pod” labels for kube-state-metrics metrics #1101
Full changelog

cluster-network-operator

Bug 1957749: ovnkube: add missing resource requests for SBDB #1088
Bug 1954302: Remove OVS daemonsets #1076
Bug 1956352: [4.7] OVN kubernetes dual-stack conversion #1082
Bug 1941214: Use 10% for ovs maxUnavailable for rolling update #1031
Bug 1936719: OSD-6600 network-metrics missing priorityClass #1007
Bug 1927321: competing connectivitycheckcontrollers cause pod restarts during upgrades #1050
Bug 1941212: The Multus daemonset should handle 10% maxUnavailable #1030
Full changelog

cluster-openshift-apiserver-operator

Bug 1955502: explicitly allow apiserver pods to write to their root FS #449
Bug 1927321: competing connectivitycheckcontrollers cause pod restarts during upgrades #444
Full changelog

cluster-openshift-controller-manager-operator

Bug 1944142: Bump kubernetes to 0.20.5 #204
Full changelog

cluster-samples-operator

Bug 1950808: add DeepCopy to avoid SharedInformer cache mutation #370
Full changelog

cluster-update-keys

Pack both keys in one verifier-public-key-ci entry #36
Adding the new Openshift CI Signer key #34
Full changelog

cluster-version-operator

Bug 1959238: pkg/cvo/sync_worker: Shift ClusterOperator pre-creation into the manifest-task node #557
Bug 1943754: Ensure automountServiceAccountToken is synced on service account updates #539
Full changelog

console

Bug 1942027: Fix RBAC check when creating a resource #8448
Bug 1956336: Fix Triggers section in eventlistener details page #8842
Bug 1953937: Fixing PVC creation page issue in 4.7(Reverting wrong commit) #8784
Bug 1952578: Don’t poll ClusterVersion when user doesn’t have authority #8749
Bug 1950489: Fix “Create binding” link from Role page, RoleBindings tab #8685
Bug 1948958: Fix ingress details page to show referenced secret name #8633
Bug 1944955: Fix close button in the new ‘Storage cluster exists’ warning alert modal #8524
Bug 1956313: Save additional parameters from build guidance container and drop it #8841
Bug 1953728: Fix issues related to loading dynamic plugins #8780
Bug 1945594: fixing-project-creation-and-updated-packageJson #8536
Bug 1950214: Fix start pipeline action access review #8681
Bug 1948369: Remove cluster label from predefined monitoring queries #8613
Bug 1954109: Backport telemetry dynamic extension to release-4.7 #8783
Bug 1952209: Consistent formatting of dates and times #8734
Bug 1952293: adds check for templates #8736
Bug 1942843: Modified description for storage class encryption - 4.7 Backport #8462
Bug 1948938: [release-4.7] Prow script point to deleted resource #8619
Bug 1944855: Update Dockerfile.product for nodejs v14.16.0 #8488
Bug 1945153: Remove pipeline Tech preview badge for pipelines GA operator #8528
Bug 1943643: fix pipeline metrics endpoint for 1.4 osp #8489
Bug 1944349: fix backwards incompatible trigger api changes #8503
Full changelog

docker-builder

Bug 1943726: add bracket logging on openshift/builder calls into buildah to assist test-platform team triage #237
Bug 1945692: move entitlement related secrets back to mounts.conf #240
Full changelog

etcd

ETCD-178: Bug 1944386: openshift-tools: fix on off flow and add unit tests #74
Full changelog

gcp-machine-controllers

Bug 1924508: Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #164
Full changelog

gcp-pd-csi-driver-operator

Bug 1940005: Add CSIDriver object #18
Full changelog

hello-openshift, tests

Bug 1963115: move verify run test from tools to cli image to avoid additional /run content #26176
Bug 1958797: test/extended/router/idle: Only run on OVNKubernetes or OpenShiftSDN #26145
Bug 1947705: Add test of documented backup/restore procedure #26110
Bug 1955669: flake testKubeletToAPIServerGracefulTermination #26121
Bug 1942055: upgrade/upgrade.go: Enhance upgrade ack time out error #26012
Full changelog

hyperkube

Bug 1955883: UPSTREAM: 99095: Prevent Kubelet stuck in DiskPressure when imagefs minreclaim is set #725
Bug 1951726: Speed up PV provisioning for vsphere driver (ocp-4.7) #690
Bug 1942141: fixes cinder PV labelling #635
Bug 1951815: UPSTREAM: 99393: kubelet: reduce configmap and secret watch #692
Bug 1955231: UPSTREAM: 101345: kubelet: improve the node informer sync check #721
Bug 1952917: UPSTREAM: 100228: For LoadBalancer Service type don’t create a HNS policy for empty or invalid external loadbalancer IP #697
Bug 1928862: Enable snapshot tests #569
Bug 1945856: 99729:Only system-node-critical pods should be OOM Killed last #642
Bug 1927717: UPSTREAM: 98939: fixes race in TestSyncPodsDeletesWhenSourcesAreReady #567
Full changelog

insights-operator

[release 4.7] Bug 1953579: GatherClusterOperators and GatherClusterOperatorsPodAndEvents (#410) #410
Add vsphere_node_hw_version_total metric (#416) #416
Bug 1950926: Extend OLM data with CSV display name (#400) (#402) #400
Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

[release 4.7] Bug 1947810: Update Jenkins to 2.277.3 and disable setup wizard #1259
Bug 1952562: bump config-file-provider to 3.7.1 #1265
Full changelog

kube-proxy, sdn

Bug 1923231: rebase to sdn-4.7-kubernetes-1.20.0-rc.0 #286
Bug 1941993: Fix incorrect unmonitoring of egress nodes #279
Full changelog

kuryr-cni, kuryr-controller

Bug 1959766: Fix NPs for OVN LBs with hairpin traffic #516
Bug 1929066: Skip pool pre population if no Status is present on CRD #505
Bug 1941941: Include service subnet to be open for namespaceSelector set to all. #504
Bug 1929066: Fix port pools #455
Bug 1949551: kuryr-controller restarting after 3 days cluster running - pools without members #502
Full changelog

machine-api-operator

Bug 1924517: Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #867
Bug 1955689: Webhook filter should check for both mutating and validating webhooks #861
Bug 1947372: vSphere, detach virtual disks before virtual machine destroy if node not available #841
Bug 1954610: Update GCP default image to match 4.7 release #856
Full changelog

machine-os-content

Bump NM to NetworkManager-ovs-1:1.26.8 #124
Pin NetworkManager-ovs #120
Strip xattrs #112
Full changelog

multus-cni

Bug 1927896: make a copy of global RuntimeConfig on merge #91
Full changelog

operator-lifecycle-manager

Bug 1962302: Set reason/message for Available condition in packageserver co #2168
Bug 1959009: Use DeploymentAvailable instead of custom test for CSV status. #2151
Bug 1924467: Bumps k8s.io dependencies to v0.20.6 #2121
Bug 1949139: Preserve existing ServiceAccount owner references during installs. #2088
Bug 1951657: fix(catalog): Reduce namespace resync in resolution failure #2107
Bug 1952851: Add resource requests for bundle unpacker #2109
Bug 1951232: Fix resolution error if inner entry doesn’t provide a required API. #2106
Bug 1947909: Do not adopt copied CSVs #2089
Full changelog

operator-registry

Bug 1924468: Bump the k8s dependencies to v1.20.6 #638
Bug 1937097: Add retries to opm index add #643
Full changelog

ovirt-machine-controllers

Bug 1939358: extract node machine ipaddress from the engine instead using DNS . #98
Bug 1939360: providerIDController ignore nodes that have no machine #99
Full changelog

ovn-kubernetes

Bug 1956270: service controller should not use the target-port #519
Bug 1947097: [4.7z] Ensure no SNAT on GR for DisableSNATMultipleGws #533
Bug 1939488: Backport Handle Multus network-status annotations on pod update #467
Bug 1956318: Revert “removing the hybrid overlay externalGW code” #521
Bug 1951064: master: cancel leader election on exit #505
Bug 1950131: fix deadlock in EgressFirewall DNS code #513
Bug 1951552: master: Delay deleting Namespace’s address set for 20 seconds #507
Bug 1950432: [4.7] pods: bind pod logical switch ports to the node’s chassis with requested-chassis #503
Bug 1924826: Backport Update gogo/protobuf to v1.3.2. #464
Bug 1943316: [4.7] master: enable logical datapath groups for OVN >= 20.12 #478
Bug 1946696: iptables: add filter on node local traffic #489
Bug 1947835: Fix service update for policy type assertion #493
Bug 1942702: backport lr-nat-del/add fixes #484
Full changelog

thanos

Bug 1957646: cmd/thanos: use miekgdns resolver as default #56
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github