Back to index
4.7.0-0.okd-2021-04-24-103438 Download installer and client with:
oc adm release extract --tools quay.io/openshift/okd:4.7.0-0.okd-2021-04-24-103438 Team Approvals:
No tests for this release
Upgrades from:
Upgrades to:
Loading changelog, this may take a while ...
Created: 2021-04-24 18:32:54 +0000 UTC
Image Digest: sha256:1c71a740375b34df53c6e2bfe389018f3160cea46c4022ed6080f583c54ecbc0
Release 4.7.0-0.okd-2021-04-24-103438 was created from registry.ci.openshift.org/origin/release:4.7.0-0.okd-2021-04-24-103438
Components
Kubernetes 1.20.0-beta.2
Fedora CoreOS upgraded from 33.20210224.10 to 33.20210328.3
Rebuilt images without code change
Updating ose-aws-pod-identity-webhook builder & base images to be consistent with ART #130
Full changelog
Bug 1935174 : RHCOS bump for LUKS, prjquota, etc #4791
Bug 1947122 : gcp: install google cloud sdk with yum the recommended way #4824
Bug 1933728 : baremetal: include netmask in DNSMasq dhcp range #4698
Bug 1930106 : bump ignition to v3_2 #4701
Bug 1922292 : [release-4.7] data/rhcos.json: Update boot images #4635
Bug 1924701 : Fix cluster destroy when byo is used with Kuryr #4616
Bug 1909978 : update ignore-volume-az documentation #4617
Bug 1916692 : OpenStack: Delete leftover LBs when destroying cluster #4563
Bug 1919407 : openstack/validation: enforce control plane size #4585
Bug 1909978 : update documentation for ignore-volume-az usage #4603
Bug 1896218 : remove GCP role bindings before service accounts #4602
Bug 1921911 : Revert “Merge pull request #4589 from patrickdillon/bz-1896218-gcp-se… #4600
Bug 1921655 : OpenStack: fix error handling for cloudinfo #4599
Bug 1896218 : remove GCP role bindings before service accounts #4589
Updating ose-installer-artifacts builder & base images to be consistent with ART #4546
maintenance: remove pools and volumes #3620
Bug 1810438 : oVirt: Add missing piece for gathering bootstrap IP info #4524
Updating ose-baremetal-installer builder & base images to be consistent with ART #4544
Updating ose-installer builder & base images to be consistent with ART #4543
Bug 1920243 : disable anonymous auth on bootstrap nodes #4590
Bug 1917101 : UPI ovirt - remove RHCOS image from Network req #4577
Bug 1893117 : terraform/vsphereprivate: ignore hosts in maintenance mode #4566
Bug 1919072 : AWS cloudformation change protocol from ESP to 50 #4583
Bug 1916938 : tolerate equal APIFloatingIP and LbFloatingIP #4575
Bug 1907822 : Don’t panic on bad data in quota validations #4483
Bug 1912828 : Rebase on the latest terraform provider/go-ovirt #4562
Bug 1916373 : upi: allow IPsec ports #4552
Bug 1915460 : ovirt: validate cluster name during install #4537
Bug 1910244 : Go mod update for golang crypto #4569
Bug 1915617 : update boot images for various fixes #4540
Bug 1909502 : pkg/asset/manifests: remove etcd records from proxy config #4518
Bug 1915998 : Set Additional Control Plane Security Groups on Bootstrap Node #4551
Bug 1916271 : openstack known issues: ControlPlane anti-affinity #4548
Bug 1813949 : ignore local env variables when we create a service client #4426
Bug 1916505 : AWS IPI: Add IPsec master-to-worker flows #4554
Bug 1908468 : azure/validation: some memory values are float and not int #4530
Bug 1908583 : Set same additional networks on Bootstrap as Control Plane #4528
Bug 1914439 : OpenStack Port Create Typo in SRIOV Docs #4529
Bug 1909587 : openstack: Create Control plane nodes sequentially #4522
Bug 1910127 : ovirt: UPI doc improvements #4498
Bug 1913151 : KubeVirt user docs: change role example - add “update” verb to VM #4521
Bug 1910070 : Set termination_grace_period_seconds to 10 minutes #4511
Bug 1786314 : bump gophercloud/utils #4486
Bug 1911819 : Fix docs/user/kubevirt/install-config.yaml to pass ./hack/yaml-lint.sh #4519
Bug 1911819 : Add kubevirt user documentation #4516
Bug 1908743 : Add validation that the KubeMacPool component is enabled for the namespace #4509
Bug 1910049 : Revert “openstack UPI: Use ansible-galaxy” #4506
Bug 1882022 : installconfig: enable vsphere folders for datacenters and clusters. #4493
Bug 1908782 : terraform: Add rules to allow internal IPsec traffic #4491
Bug 1908171 : fix Terraform issue with GCP custom machine types #4496
Bug 1907947 : cloud-creds-secret creation with current context info only #4484
Bug 1907628 : OpenStack Documentation for MachineSets with Multiple Networks #4463
Bug 1906517 : OpenStack: Skip collecting info for empty subnet IDs #4474
Bug 1908280 : update docs for Cinder AZs #4487
Bug 1907621 : Bump cluster-api-provider-kubevirt version #4479
Bug 1890228 : pkg/destroy/aws: Pass destroy if HostedZone does not exist #4477
Bug 1906459 : openstack: fix quota checks when they’re unlimited #4470
Update GCP Customization doc to reflect CMEK additions #4468
Openstack: describes how to enable qemu agent for UPI. #4441
oVirt: update team members #4464
Bug 1904663 : Fix comparison in pointer ignition customization asset #4455
openstack: Test Nova AZ manifest generation #4459
do not generate the cloud cred secret when credentialsMode is Manual #4416
update gophercloud/utils & terraform/provider-openstack #4457
hack/verify-vendor.sh: Fail early if error #4421
Bug 1899175 : data/rhcos.json: Update boot images for RHEL 8.3 #4414
Openstack primary subnet using machine spec #4346
Deprecate computeFlavor in OpenStack platform #4321
openstack: Test manifest creation #4431
openstack: Allow to skip pre-flight validations #4452
Bug 1900138 : Removed support for insecure mode for oVirt/RHV installation #4404
openstack: check quotas before creating cluster #4432
OpenStack: Adds clusterOSImageProperties to install-config.yaml #4401
Bug 1904125 : Ensure the bootstrap ignition libvirt pool defaults to <clustername>.<id>.bootstrap rather than ‘default’ #4448
Bug 1868748 : baremetal: rename JSON field for ClusterProvisioningIP #4053
Add KubeVirt platform as infrastructure for Openshift installation #4350
cloudproviderconfig: Refactor openstack #4447
Pass CLUSTER_PROFILE env var to CVO render #4444
vSphere Destroy: add log messages for tag destruction #4407
baremetal: send full ignition to masters #4427
asset/installconfig/Azure: Validate install-config instance types #4419
Update MCO doc references #4445
baremetal: Add ironic logwatch containers #4437
Create SR-IOV UPI Docs #4439
docs: update docs/design/resource_dep.svg #4443
Bug 1903277 : destroy/aws: remove rules from default security group #4440
Set default release image to 4.7 #4409
baremetal: make cluster provisioning IP optional #4429
pkg/asset/quota: Typo in warning message presented to user #4430
Create a machineconfig for IPI pointer ignition customizations #4413
vSphere Docs: Update to include Permissions #4393
OSASINFRA-902 : Update OpenStack Custom External LB and DNS Docs #4389
baremetal: correct the cacheImageURL when we don’t have a provisioningIP #4408
Bug 1895874 : Use oVirt Engine certificate verified by the user for installation #4387
Bug 1899853 : openstack: CP nodes port to use addtional SGs #4411
baremetal: Handle xz filenames for OKD #4392
Support user provided service-account-signing-key and issuer #4373
pkg: validation for previously existing ovirt configuration #4354
Bug 1898194 : installconfig/gcp/validation: handle custom machine types #4386
baremetal: when networking is disabled make the bootstrap provisioning ip optional #4390
Bug 1898238 : Validate the the API and Ingress FIPs are not the same #4385
Bug 1848945 : OpenStack - Documentation for adding worker nodes using ansible #4205
Bug 1813012 : Remove unused etcd discovery domain #4067
Bug 1894432 : oVirt, add timeout to tmp_import_vm #4341
baremetal: validate that macs are EUI-48 and unicast #4378
Bug 1855351 : standardize interrupt error messages #4360
Stop validating DefaultMachinePlatform #4391
Bug 1889779 : vSphere destroy: handle failed clusters #4388
openstack UPI: Use ansible-galaxy #4379
Updating ose-baremetal-installer builder & base images to be consistent with ART #4370
Correcting normal typos #4363
Bug 1891543 : openstack: remove platform flavor validation #4383
baremetal: remove root_gb from tfvars #4319
Cleanup: make conversion functions private #4376
Bug 1888464 : add tag:UnTagResource perm for aws shared networks #4371
Remove the secrets directory recursively #4369
doc/openstack: update quota reqs for kuryr #4362
Fix ‘troubleshooting’ typo #4365
libvirt: Bump bootstrap size (primarily for OKD) #4364
data/data/aws/route53: use CNAME for us-iso-east-1 region #4367
Bug 1886435 : Fix azure UPI az group deployment deprecation #4366
asset/installconfig/gcp: Validate install-config instance types #4329
Use ‘kubernetes.io/tls’ instead of SecretTypeTLS which is not being substituted #4342
aws: support custom trust bundle for c2s regions #4335
pkg/asset/cluster/aws: switch to ec2 tagging API #4356
Bug 1867165 : baremetal: allow configuring bootstrap mac addresses #4052
doc/openstack/UPI: improvements #4355
Small corrections in ovirt/install_ipi.md #4353
data/bootstrap/files/usr/local/bin/installer-gather: Tee logs into tarball #4345
data/manifests/bootkube/cvo-overrides: Bump default to stable-4.7 #4347
owners: Add mdbooth to openstack-approvers #4348
owners: add dhellmann to baremetal-approvers/reviewers #4343
data/manifests/bootkube/cvo-overrides: Drop the explicit upstream #4112
Bug 1891543 : openstack: consider volumes for storage requirements checks #4323
Document how to deploy cluster with BM and VM workers #4336
Wrap errors after OpenStack creds validation #4338
Bug 1855351 : Handle CTRL+C in GCP survey #4334
Bug 1894144 : baremetal: pin libvirt to 4.5.0 #4339
cmd/openshift-install/create: Use library-go’s IngressURI helper #4245
Bug 1888378 : Ignore error if resource group already deleted #4325
Bug 1887863 : Patch Flavor Not Found validation for OpenStack Install Config #4289
Use authentication for Ironic on baremetal bootstrap host #4256
Bug 1841381 : oVirt, add memoryMB validation #4309
Bug 1878374 : Adding more nitro and the AMD instance types (AWS, UPI) #4327
Bug 1866925 : display Azure destroy auth error #4331
openstack: fixup markdown #4328
Revert “[Azure][Destroy] Check if resource group exists” #4322
Add Encryption Key reference to GCP MachinePool API #4318
aws: block cluster destroy in c2s region #4316
aws: ensure users set ami id for c2s regions #4315
Bug 1891702 : pkg/asset/ignition/bootstrap: exit loop if pem.Decode() fails #4317
Bug 1888378 : [Azure][Destroy] Check if resource group exists #4320
oVirt: change owners #4311
Code cleanup and optimizations #4272
Bug 1889267 : oVirt, increase terraform template and release image timeout to 20m #4285
install-approvers: add staebler #4297
Bug 1880443 : allow providing client options when generating OpenStack MachineSets #4196
openstack: Update CI base image #4291
pkg/asset/installconfig/aws: Validate install-config instance type #4258
go.mod Update #4294
Bug 1836017 : Configure haproxy to check /readyz #4012
Bug 1870728 : pkg/asset/ignition/bootstrap: Display warning if certificates are expired #4287
Bug 1889852 : add new AWS regions #4288
Bug 1877116 : aws: use file for bootstrap ign when uploading to s3 #4281
Bug 1886553 : GCP - Increase worker NAT min ports #4273
cmd: split newlines in logrus stderr output to new entry #4282
openstack: Add a new team member #4290
Bug 1882649 : Determine Glance disk format based on file extension #4279
vSphere: Update dockerfile removing certificate #4274
Update README.md - Broken Link - Spelling #4278
OpenStack: remove legacy image validation #4277
Bug 1882844 : vsphere destroy: delete tag category created by installer #4265
Bug 1878900 : openstack: Fix error messages in flavor validation #4269
OpenStack UPI: Custom API and Ingress vip addresses #4092
Bug 1888671 : openstack: Document Cinder’s ignore-volume-az #4271
Bump K8s.io version to v0.19.0 #4266
destroy: return aws resources that could not be deleted #4270
install-complete: provide troubleshooting info when operators fail #4259
OpenStack: add clusterOSImage validations #3964
Bug 1887525 : baremetal: Wait for master-bmh-update script to succeed #4262
openstack: Bump Ansible to 2.9 in UPI #4261
Bug 1874248 : types/vsphere/validation: ensure vcenter is all lower case #4254
Bug 1884691 : types: allow manual cred mode for gcp and azure #4238
Updating ose-installer builder & base images to be consistent with ART #4250
Remove dead code #4252
Updating ose-installer-artifacts builder & base images to be consistent with ART #4251
openstack privileges documented #4214
OpenStack: Rename lbFloatingIP to apiFloatingIP #4244
Bug 1882191 : Add GODEBUG=x509ignoreCN=0 to systemd DefaultEnvironment #4248
Bug 1884435 : vsphere - add delay if resolv.conf is not available; wait for dhcp #4237
Bug 1777224 : pkg/asset: metadata to depend on ignition #4223
Bump RHCOS images for Ignition entropy fix #4241
Bug 1859174 : Upgrade Terraform provider OpenStack #4216
Fix json tag for GCP auth service account #4166
installer/pkg/quota/gcp/limits.go: fix minor typo in comment #4160
IP address should be specified without underscore. #3204
Docs: OpenStack: Remove mention of cluster failing to destroy #4208
Bug 1876815 : OpenStack: unset OS_CLOUD #4231
Bug 1884558 : do not use local cacert path in generated clouds.yaml #4227
Bug 1878758 : openstack UPI: Allow for no FIP or router #4219
Bug 1876844 : openstack UPI: Ignition token needs Glance access #4236
Bug 1881703 : Revert “Have the MCO manage the ignition stub config” #4228
Bug 1882752 : openstack BM: Remove MachineSet on separate subnet #4230
Bug 1878900 : openstack: Skip validation for baremetal flavors #4222
Bug 1881532 : openstack: Only list external networks in prompt #4226
Bug 1882805 : Bump bootimages for ppc64le and s390x to 46.82.202009240941-0 and 46.82.202009241338-0 #4215
Bug 1881757 : tls: set mcs cert common name to not-valid-hostname #4210
Bug 1882810 : vsphere - local dns prepender not named with template #4220
Bug 1853418 : Ignore trailing dots in baseDomain #4146
Bug 1881487 : data/rhcos.json: Update to 46.82.202009220041-0 #4206
Bug 1877984 : Fix “OpenShiftSDN” to proper case when generating network config #4207
Bug 1879533 : oVirt UPI - Better explanation of the inventory #4180
Bug 1878789 : Add note about ignition certificates expiration #4171
Bug 1877854 : OpenStack: Support multiple subnets #4093
Bug 1879649 : oVirt UPI - Simplify create templates #4182
Bug 1880393 : OpenStack UPI: Explain how to encode cert to base64 #4203
Bug 1880393 : OpenStack UPI: Trim EOLs from the cacert trustbundle #4201
Bug 1878163 : Updating images/baremetal/Dockerfile.ci baseimages to mach ocp-build-data config #4186
Bug 1879891 : Fix cluster destroy when fip less installation happened #4191
Bug 1878163 : Updating images/installer/Dockerfile.ci baseimages to mach ocp-build-data config #4185
Bug 1878163 : Updating images/installer-artifacts/Dockerfile.rhel baseimages to mach ocp-build-data config #4184
Bug 1876815 : unset OS_CLOUD during config generator #4177
Bug 1878108 : asset/quota/gcp: use GCP api to find CPU count for constraint and guess only on failure #4163
Bug 1877486 : proxy: allow * for noProxy #4172
Bug 1880132 : destroy/gcp: correct extract service account email from IAM policy binding member #4193
Bug 1861917 : Add cpc config to bootstrap #4178
install: increase timeout to 40 minutes #4181
Bug 1879081 : OpenStack: Switch to train/centos8 repos #4175
Bug 1877885 : oVirt UPI - Add Ansible playbooks download #4169
Bug 1878758 : openstack UPI: Optional floating IPs #3755
Bug 1877763 : oVirt UPI - python code snippets without semicolons #4170
Bug 1874747 : ovirt: dont start the temp VM before template creation #4168
Bug 1878243 : openstack: Upgrade the CI build image #4161
Bug 1877440 : oVirt UPI Assets_dir set according to env var #4153
Bug 1874457 : Add support to clean custom router #4159
Bug 1877676 : OpenStack: Refresh documentation about ingress FIP #4059
Bug 1877436 : oVirt UPI RHCOS explanations, assets env var #4152
Bug 1877862 : oVirt UPI - Fix templates check and optimize image check #4157
Bug 1877741 : installer-masters-gather.sh: gather openshift-{azure,gcp}-routes logs #4148
Bug 1873125 : Fix python syntax for OpenStack UPI scripts #4154
Bug 1870038 : vmware upi: haproxy.service to rm haproxy pod on ExecStop #4132
Bug 1866925 : pkg/destroy/azure: fail fast if unable to list resources for any reason #4025
Bug 1873125 : OpenStack: UPI missing instructions to update apiVIP and ingressVIP #4133
Bug 1875855 : increase timeout for bootstrap ignition downloading #4145
Bug 1856928 : Fix Non yaml files in manifests/ or openshift/ directories preventing bootstrap from completing #4091
Bug 1876825 : generate lbFloatingIP in OpenStack config #4147
Bug 1876792 : oVirt UPI Move Network Requirements section #4142
Bug 1876783 : oVirt UPI fix python cmd #4141
Bug 1876562 : Small readability improvements to UPI on RHV documentation #4136
Bug 1871653 : baremetal: set root device hints on host resources #4088
Bug 1875932 : Update baremetal DNS design details #4101
Bug 1868439 : openstack UPI: Fix JSON syntax #4140
Bug 1874656 : Bump RHCOS for s390x/ppc64le to fix SSH authentication #4124
Bug 1861917 : bootkube: add image for cluster-policy-controller #4131
Bug 1871712 : pkg/destroy/aws: Detach attached policies during destroy #4126
Bug 1867975 : aws: ensure users set ami id for us-gov and cn regions #4103
Bug 1868439 : openstack UPI: Fix Ingition key error #4135
Bug 1872080 : Updating images/baremetal/Dockerfile.ci baseimages to mach ocp-build-data config #4086
Bug 1872080 : Updating images/installer-artifacts/Dockerfile.rhel baseimages to mach ocp-build-data config #4085
Bug 1872080 : Updating images/installer/Dockerfile.ci baseimages to mach ocp-build-data config #4087
BUG 1872646: oVirt, remove tmp VM disk on destroy #4129
hack/update-rhcos-bootimage: update usage example #4097
Bug 1813012 : Remove unused flags previously needed for etcd static pod #4063
Bug 1842071 : Add ppc64le and s390x documentation links #4115
Bug 1873448 : Ensure proper tagging of compute nodes ports #4118
Bug 1872861 : Update cli container image for UPI #4098
Bug 1873712 : Add information about AZs limitations with Kuryr #4109
Bug 1871795 : bump RHCOS images to fix SSH authentication #4095
Bug 1873123 : omit deprecated parameters during config generation #4100
Bug 1813012 : Remove unused etcd host service and endpoints #4068
Bug 1871030 : data/data/gcp: be pedantic about setting the region #4089
Bug 1856270 : Update known issues with info about provisioning state node bug #4083
Bug 1870082 : Use index in MachineSet names for Openstack IPI #4070
Bug 1813012 : Remove legacy code for unmanaged cluster-etcd-operator #4062
Bug 1863026 : docs/user/azure: remove newlines from base64 encoding in UPI install doc #4090
Bug 1871048 : OpenStack: dynamically set end of DHCP allocation pool #4077
Bug 1868773 : Libvirt: Bump bootstrap memory to 4G #4080
Bug 1862209 : aws: fix validation for user tags #4081
Bug 1871124 : OpenStack: Improve snippet for playbooks download #4079
Bug 1871124 : openstack UPI: Provide a way to get the playbooks #4078
Bug 1866534 : fixes bootstrap DNS failure on bare metal #4015
Bug 1862957 : bump RHCOS images for FIPS fix #4066
Bug 1870592 : openstack: Document MachineSet availabilityZone #4074
Readme.md: Remove experimental tag for OpenStack UPI #3982
Bug 1866693 : docs: drop kernel-devel from supported extensions #4030
Bug 1864092 : baremetal: copy the implementation of rootdevicehints from baremetal-operator #4002
Bug 1862290 : vendor/terraform-provider-vsphere: DiskPostCloneOperation patch carry #4060
Bug 1868439 : openstack UPI: Fix Ignition v3 #4058
openstack: Known issue: no BMs on Kuryr #4051
Bug 1869329 : OpenStack: Place Bootstrap in one of the master AZs #4056
Bump rhcos images for s390x #4050
OpenStack: Fixups to BM workers documentation #4057
Bug 1868439 : openstack upi: fix Ignition key error #4047
OpenStack: baremetal worker documentation #3955
Bug 1866949 : data/data/aws/route53: use CNAME for gov cloud partition #4043
Bug 1862044 : deleting servers using metadata-based filtering #4032
Bug 1867972 : destroy/aws: setup the resourcetagging api with correct region for gov cloud #4042
Bump rhcos images for ppc64le #4021
Bug 1867519 : make externalNetwork optional #4029
Full changelog
Updating vertical-pod-autoscaler builder & base images to be consistent with ART #190
Full changelog
Updating ose-cluster-kube-storage-version-migrator-operator builder & base images to be consistent with ART #38
Full changelog
Updating ose-cluster-machine-approver builder & base images to be consistent with ART #103
Full changelog
Bug 1943754 : Ensure automountServiceAccountToken is synced on service account updates #539
Bug 1941217 : pkg/cvo/sync_worker: Skip precreation of baremetal ClusterOperator #534
Bug 1926795 : install/0000_90_cluster-version-operator_02_servicemonitor.yaml: adjust “CannotRetrieveUpdates” to “warning” #516
Bug 1921413 : pkg/start: Fix shutdown deadlock when die before getting a leader lock #521
Full changelog
ETCD-178 : Bug 1944386: openshift-tools: fix on off flow and add unit tests #74
Updating ose-etcd builder & base images to be consistent with ART #67
Full changelog
Updating ose-gcp-pd-csi-driver-operator builder & base images to be consistent with ART #11
Full changelog
Bug 1945856 : 99729:Only system-node-critical pods should be OOM Killed last #642
Bug 1927717 : UPSTREAM: 98939: fixes race in TestSyncPodsDeletesWhenSourcesAreReady #567
Bug 1931702 : UPSTREAM: 96958: kubelet: remove periodic messages from log-level 2 #589
Bug 1931745 : UPSTREAM: 98956: Fix race when KillPod followed by IsPodPendingTermining #590
Bug 1929674 : kubelet: fix create sandbox delete pod race #591
Bug 1933094 : UPSTREAM: 98742: Sync completed pods until their containers have been terminated #595
Full changelog
Bug 1942068 : Gahter datahubs.installers.datahub.sap.com resources from SAP clusters (#383) #383
Bug 1939061 : Sap license management logs gatherer 4.7 (#372) #372
Adds memory usage to the metadata (#364) #364
Bug 1935070 : Extend the OLM operator data with related … (#362) #362
Bug 1934442 : Gather info about unhealthy SAP pods (#360) #360
Bug 1936802 : Authentication log gatherer - do not scan all the pods in openshfit-authentication (#369) #369
Bug 1936861 : Include namespace name in binarydata configmap path & test (#368) (#370) #368
Bug 1925659 : Relax the recent log gatherers to avoid degrading during… (#331) #331
Full changelog
Updating ironic-rhcos-downloader builder & base images to be consistent with ART #34
Full changelog
Strip xattrs #112
overlay: add NetworkManager config to prevent requesting additional MAC #109
overlay: add dhcp-client-identifier #101
manifests: add include.release annotations #98
Switch to stable FCOS stream #96
Full changelog
Updating prom-label-proxy builder & base images to be consistent with ART #330
Full changelog
Source code for this page located on github