4.7.0-0.okd-2021-08-07-063045

New features since version 4.6.0-0.okd-2023-10-03-141935

Download installer and client with:

oc adm release extract --tools quay.io/openshift/okd:4.7.0-0.okd-2021-08-07-063045

Team Approvals:

No tests for this release

Upgrades from:

4.7.0-0.okd-2021-08-05-191203 (changes) - F F S
4.7.0-0.okd-2021-07-03-190901 (changes) - F S S S
4.7.0-0.okd-2021-06-19-191547 (changes) - S S F
4.7.0-0.okd-2021-06-13-090745 - F S F
4.6.0-0.okd-2021-02-14-205305 (changes) - F S F

Upgrades to:

4.8.0-0.okd-2021-10-24-061736 (changes) - F F F S
4.7.0-0.okd-2021-09-19-013247 (changes) - Success
4.7.0-0.okd-2021-08-22-163618 (changes) - F S S F

Loading changelog, this may take a while ...

Changes from 4.7.0-0.okd-2021-06-13-090745

Created: 2021-08-07 08:03:18 +0000 UTC

Image Digest: sha256:78e4237a39e93e6f7b9cef579f135dc5d5dc11fc46ae53587351ac1d26261339

Release 4.7.0-0.okd-2021-08-07-063045 was created from registry.ci.openshift.org/origin/release:4.7.0-0.okd-2021-08-07-063045

Components

Kubernetes 1.20.0-beta.2

Rebuilt images without code change

baremetal-runtimecfg git 9c5da32b sha256:4ebfae84099553f78e6e1dc82308f57e4d08bde8aa640264c93e7d2459da22f7
cluster-storage-operator git 6d2c25f3 sha256:82e34ada115f908ca390d3177d96d38fe64a5df171c428347c60d95ca18538fa
csi-driver-manila-operator git 00b1f648 sha256:404d37468a7190bd3e99f54d3116edc973a2aee1309c76142cb6ceeebdd9e777
docker-builder git 82eeeac0 sha256:f61e7b869414dd8486621ebd2b69c27c0c49f3f54dac1461de6891556625244b
ironic-static-ip-manager git 43d640a0 sha256:416e4829b29dff524781650e7c16806eb4e8bfe3dbd7110aaff3c17752dfe128
local-storage-static-provisioner git a0545238 sha256:435465220d3349bd2690fb63844e1fa32a9ee88c43aa361dc81ffbdfc412ed4c
machine-api-operator git e179bb5c sha256:79e0c8c41906e32f576108d4c2fc4363aa552593aaa21011702d69e31f3baffb
openstack-cinder-csi-driver-operator git 117ce62c sha256:1049066ee2e88b49e41fad931f9f71280d98505ca15bf2749dd6593af225a831
openstack-machine-controllers git 471cf3ab sha256:b29a2d9b7457e7efbea75ff255df0dfb977b82dd9c04c1fa6b44e0624e026f29

aws-machine-controllers

Bug 1976192: update aws-sdk-go to v1.38.25 #415
Bug 1942966: Update EC2 instance types #398
Full changelog

baremetal-installer

Bug 1977481: Dockerfile: repin libvirt #5043
Bug 1975819: upi/vsphere: Use Afterburn guestinfo for static IP and hostname config #5025
Bug 1974282: gather: collect networking information in log bundle #5017
Bug 1971163: Updating AWS instance types #4992
Bug 1945467: aws: allow use of unknown regions in known partitions #4807
Bug 1938426: Set default values to machine pools before validation #4750
Bug 1967355: pattern removed from sed to prevent expansion #4975
Bug 1956483: Bump boot images for RHCOS fixes #4961
Full changelog

baremetal-machine-controllers

Bug 1938967: Updating baremetal-machine-controller builder & base images to be consistent with ART #134
Full changelog

baremetal-operator

Bug 1972430: Don’t deprovision provisioned host due to error #159
Bug 1961341: config: use rbacv1 instead of rbacv1beta1 #148
Full changelog

cli, cli-artifacts, deployer, tools

Bug 1976284: skip-multiple-scopes with adm catalog mirror #869
Bug 1963784: Preserve AuthInfo when switching projects #861
Full changelog

cloud-credential-operator

Bug 1958983: rework GCP passthrough permissions checking #338
Full changelog

cluster-authentication-operator

Updating ose-cluster-authentication-operator builder & base images to be consistent with ART #408
Bug 1971087: add a controller to remove webhooktokenauthenticator config #418
Full changelog

cluster-baremetal-operator

Bug 1933726: provisioning: configure DHCP range with netmask #112
Bug 1973367: Pass IP_OPTIONS=dhcp|dhcp6 down to OS Downloader container #171
Bug 1972291: Use a cache URL with the .svc.cluster.local suffix #161
Full changelog

cluster-etcd-operator

Bug 1976988: [release-4.7]: Increase inertia duration for the EtcdMembersDegraded condition #618
Bug 1976287: Validate the status of the etcd snapshot during backup and restore #617
Bug 1951447: pkg/etcdenvvar/etcd_env.go: Sort endpoints to prevent rollout #568
Full changelog

cluster-image-registry-operator

Bug 1984979: Creating StorageAccount V2 instead of V1 #707
Updating ose-cluster-image-registry-operator builder & base images to be consistent with ART #651
Bug 1977159: bump aws-sdk-go to v1.38.35 #704
Bug 1973693: Setting required pod anti-affinity rules #697
Full changelog

cluster-ingress-operator

Bug 1978845: Specify topology spread constraints #632
Bug 1973983: Canary: Handle downgrades from 4.8 to 4.7 properly #627
Bug 1960776: Reconcile openshift-ingress namespace on upgrade #616
Full changelog

cluster-monitoring-operator

Bug 1986591: node exporter calls /proc/cpuinfo multiple times causing the node to freeze #1300
Full changelog

cluster-network-operator

Bug 1962036: Use the election mechanism provided by library-go #1098
Bug 1972549: Remove reference to v1beta1 API #1134
Bug 1982217: Use 10% for ovnkube-node for maxUnavailable #1153
Bug 1969860: Escape characters on ini file #1127
Bug 1967994: Backport daemonset to drop icmp frag needed packets received from other nodes in the cluster to Rel 4.7 #1119
Bug 1972183: config: Set enable-profiling true by default and allow enable-profiling as a proxy argument #1129
Full changelog

cluster-node-tuning-operator

Bug 1958885: Switch to client-go leader-with-lease election. #238
Full changelog

cluster-openshift-apiserver-operator

Updating ose-cluster-openshift-apiserver-operator builder & base images to be consistent with ART #427
Full changelog

cluster-openshift-controller-manager-operator

Bug 1924494: Update k8s.io dependencies to address CVE-2021-3121 #222
Full changelog

cluster-samples-operator

Bug 1923036: Update Jenkins monitored templates names #359
Full changelog

cluster-version-operator

Bug 1924428: CVE-2021-3121 gogo/protobuf lacks certain index validation #625
Bug 1970272: Fixing the log message in rbac.go for clusterrole #609
Full changelog

console

Bug 1975469: Handle array to string conversion for HTTPS checkbox value #9332
Updating openshift-enterprise-console images to be consistent with ART #8596
Bug 1973572: Hardcode strings in Home->Overview page #9322
Bug 1942864: Warning Alert for Encrypted PVs in Create StorageClass #8464
Bug 1965526: Removing library charts from the merged helm repo index entries. #9076
Bug 1970796: update cluster-local label for ksvc #9220
Bug 1970720: fix rotated pipelinerun status icon issue in safari #9216
Bug 1969536: Omit bitbucket branch in URL if it contains slash #9180
Bug 1954962: removes extra annotations form spec template for ksvc #8823
Bug 1948537: add hide/reveal button for kms token #8616
Bug 1942160: Update the scope of GitOpsService resource #8450
Bug 1971667: Track and show error messages in modals #9232
Full changelog

csi-driver-manila, openstack-cinder-csi-driver

Bug 1969345: Backport ignore proxy connecting to CSI sockets #54
Full changelog

docker-registry

Bug 1984094: use apimachinery with HTTP/2 health checks enabled #288
Updating openshift-enterprise-registry builder & base images to be consistent with ART #262
Bug 1977159: bump aws-sdk-go to v1.38.35 #282
Full changelog

driver-toolkit

Bug 1985545: Remove curl of extract-vmlinux #50
Bug 1985546: /etc/driver-toolkit-release.json kernel version match rpm -q output #51
Bug 1976302: Cherry pick gcc to release 4.7 #41
Bug 1975480: DPDK KNI modules need some additional tools #40
Bug 1975479: Requirements for authenticating kernel modules with X.509 keys #39
Full changelog

gcp-pd-csi-driver

Updating ose-gcp-pd-csi-driver builder & base images to be consistent with ART #10
Full changelog

hello-openshift, tests

Bug 1982929: Improve GC Check for Builds #26334
Re-enable quota test #26284
Bug 1980540: Use cluster-logging for operator installation smoke test. #26315
Bug 1977383: [release-4.7] Update resource quota test for compatibility with service ca configmap publishing #26303
Bug 1928862: [4.7] Bump openshift/kubernetes #26259
Bug 1978000: builds: comment out multi-namespace template test #26296
NOOP - Trigger a new CI build #26291
Bug 1977383: [release-4.7] Skip cluster quota test to enable service ca publisher to merge to o/k #26283
Full changelog

hyperkube

Bug 1981634: UPSTREAM: <drop>: use the legacy service-ca.crt content for clusters started in 4.7 or before #857
Bug 1977383: [release-4.7] Ensure service ca configmap is created in all namespaces #834
Bug 1977383: [release-4.7] Fix watch conformance test #843
Bug 1977383: Update resource quota test for compatibility with service ca configmap publishing #839
Bug 1975553: only chown if non-windows machine with projected volumes #826
Bug 1928862: [release-4.7] UPSTREAM: <carry>: kube-apiserver: ignore SIGTERM/INT after the first one #739
Full changelog

installer, installer-artifacts

Bug 1954595: Validate noProxy input and add prefix for proxy urls #5060
OWNERS: add more core team members as approvers #5123
Bug 1977481: Dockerfile: repin libvirt #5043
Bug 1975819: upi/vsphere: Use Afterburn guestinfo for static IP and hostname config #5025
Bug 1974282: gather: collect networking information in log bundle #5017
Bug 1971163: Updating AWS instance types #4992
Bug 1945467: aws: allow use of unknown regions in known partitions #4807
Bug 1938426: Set default values to machine pools before validation #4750
Bug 1967355: pattern removed from sed to prevent expansion #4975
Bug 1956483: Bump boot images for RHCOS fixes #4961
Full changelog

ironic-hardware-inventory-recorder

Updating ironic-hardware-inventory-recorder-image builder & base images to be consistent with ART #502
Full changelog

ironic-machine-os-downloader

Bug 1963210: Add support for no_proxy #53
Bug 1973367: Modify dhcp kernel args based on ipv4/ipv6 #55
Bug 1971549: Unconditionally remove TMPDIR #45
Full changelog

kuryr-cni, kuryr-controller

Bug 1972631: Workaround OVN bug causing subports to be DOWN #525
Full changelog

machine-os-content

Bump fedora-coreos-config to latest stable #173
Periodic submodule bump #170
Bump fedora-coreos-config #162
Undo systemd-resolved change in https://github.com/systemd/systemd/pu… #160
manifest: fasttrack NetworkManager 1.32 #152
manifests: add CVO annotations #155
Revert “manifests: unset OKD extensions” #149
Dockerfiles: /extensions needs to be a valid RPM repo #144
Update fedora-config-devel to latest stable #147
manifests: unset OKD extensions #145
overlay: make sure we explicitely disable DNS Stub Listener #142
Full changelog

must-gather

Updating ose-must-gather builder & base images to be consistent with ART #202
Bug 1954302: Add ovs related services to GENERAL_SERVICES #229
Full changelog

oauth-proxy

Updating golang-github-openshift-oauth-proxy builder & base images to be consistent with ART #198
Full changelog

openshift-apiserver

Bug 1965402: Revert ‘Bug 1965402: Enhance API host name validation’ #211
Full changelog

openshift-controller-manager

Bug 1924531: Update k8s.io dependencies to address CVE-2021-3121 #191
Full changelog

operator-lifecycle-manager

Bug 1982693: remove cleanup from startup #2287
Bug 1972075: Add OperatorCondition status sync and update operator upgradeable check #2206
Full changelog

operator-registry

Bug 1968680: fix(containerd): drop xattrs during unpack #676
Full changelog

ovn-kubernetes

Bug 1985516: Add v6 management interface address for host network policy #625
Bug 1962608: ensure missed events are handled during a reconnection #547
Bug 1972484: egress firewall as ACLs + service connectivity fixes #592
Bug 1940566: Properly log when hybrid overlay errors out #543
Bug 1970779: Remove getDefaultIfAddr and use getNetworkInterfaceIPAddresses #571
Bug 1962590: NewAddressSet: return nil in case of error #546
Full changelog

service-ca-operator

Bug 1981634: add vulnerable legacy injector to allow for upgrade clusters to use #170
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github