# 4.7.0-0.okd-2021-04-24-103438 Created: 2021-04-24 18:32:54 +0000 UTC Image Digest: `sha256:1c71a740375b34df53c6e2bfe389018f3160cea46c4022ed6080f583c54ecbc0` Promoted from registry.ci.openshift.org/origin/release:4.7.0-0.okd-2021-04-24-103438 ## Changes from 4.7.0-0.okd-2021-02-25-144700 ### Components * Kubernetes 1.20.0-beta.2 * Fedora CoreOS upgraded from 33.20210224.10 to 33.20210328.3 ### Rebuilt images without code change * [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [25cbb8d8](https://github.com/openshift/cluster-api-provider-baremetal/commit/25cbb8d8f9e52244ccd6bf459e6dd4b84749de56) `sha256:ea6953c17668c689fef4ef59caef2db541820f3594314098aef4f8256bafeaf7` * [baremetal-operator](https://github.com/openshift/baremetal-operator) git [74c60aa9](https://github.com/openshift/baremetal-operator/commit/74c60aa957f53432d0a98afc78099add55d27c44) `sha256:f8de068a6bb16340bfe340c5a96ea72c21c171bb6ade7b78a25ae8d448513d14` * [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [cf1e1a6c](https://github.com/openshift/cluster-authentication-operator/commit/cf1e1a6c79db7cf29e7de2a90ecdc458bc13059c) `sha256:4ef16b50eaabb36a4000d2d9a23bbc5e0c7708c0c991e57f62b9f4973bb5a7c9` * [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [538ff7fe](https://github.com/openshift/cluster-image-registry-operator/commit/538ff7fed284953731785c495cf286ea33d97f50) `sha256:6158422829202f12492e672666df1833244f2f99d6eb2c44e3dc6b856ddc5fed` * [docker-registry](https://github.com/openshift/image-registry) git [8e0c068a](https://github.com/openshift/image-registry/commit/8e0c068aef607fceffe3e179c3a9701f51c51dff) `sha256:f4d559435197a2061b96af198143f764c43dd59371bb3ddaf190f7f8ae5b5e0f` * [oauth-server](https://github.com/openshift/oauth-server) git [3215761a](https://github.com/openshift/oauth-server/commit/3215761a70426326f0be2ca675b0e9b9fdae341e) `sha256:828319ba81b642915b547baae2d72da16893cae8661e8f71c53ff7e594e20300` ### [aws-machine-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/2d069b7f8bf4a443ba1a7ac8f669ef05ed92a50e) * [Bug 1935636](https://bugzilla.redhat.com/show_bug.cgi?id=1935636): Ensure response body is closed when we are finished with the request [#391](https://github.com/openshift/cluster-api-provider-aws/pull/391) * [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/5ffc5f422a80169b342c19f50b22a0c4883cc0e3...2d069b7f8bf4a443ba1a7ac8f669ef05ed92a50e) ### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/0074d6afef9e20f5a1bcbde85cd7c01e422202ca) * Updating ose-aws-pod-identity-webhook builder & base images to be consistent with ART [#130](https://github.com/openshift/aws-pod-identity-webhook/pull/130) * [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/ce1e1f3cd3ff017960039dd17b4f1968cee7cadb...0074d6afef9e20f5a1bcbde85cd7c01e422202ca) ### [baremetal-installer, installer-artifacts](https://github.com/vrutkovs/installer/tree/03d84764dfdffec49e0d24ad0463d1f5e1acf027) * [Bug 1935174](https://bugzilla.redhat.com/show_bug.cgi?id=1935174): RHCOS bump for LUKS, prjquota, etc [#4791](https://github.com/vrutkovs/installer/pull/4791) * [Bug 1947122](https://bugzilla.redhat.com/show_bug.cgi?id=1947122): gcp: install google cloud sdk with yum the recommended way [#4824](https://github.com/vrutkovs/installer/pull/4824) * [Bug 1933728](https://bugzilla.redhat.com/show_bug.cgi?id=1933728): baremetal: include netmask in DNSMasq dhcp range [#4698](https://github.com/vrutkovs/installer/pull/4698) * [Bug 1930106](https://bugzilla.redhat.com/show_bug.cgi?id=1930106): bump ignition to v3_2 [#4701](https://github.com/vrutkovs/installer/pull/4701) * [Bug 1922292](https://bugzilla.redhat.com/show_bug.cgi?id=1922292): [release-4.7] data/rhcos.json: Update boot images [#4635](https://github.com/vrutkovs/installer/pull/4635) * [Bug 1924701](https://bugzilla.redhat.com/show_bug.cgi?id=1924701): Fix cluster destroy when byo is used with Kuryr [#4616](https://github.com/vrutkovs/installer/pull/4616) * [Bug 1909978](https://bugzilla.redhat.com/show_bug.cgi?id=1909978): update ignore-volume-az documentation [#4617](https://github.com/vrutkovs/installer/pull/4617) * [Bug 1916692](https://bugzilla.redhat.com/show_bug.cgi?id=1916692): OpenStack: Delete leftover LBs when destroying cluster [#4563](https://github.com/vrutkovs/installer/pull/4563) * [Bug 1919407](https://bugzilla.redhat.com/show_bug.cgi?id=1919407): openstack/validation: enforce control plane size [#4585](https://github.com/vrutkovs/installer/pull/4585) * [Bug 1909978](https://bugzilla.redhat.com/show_bug.cgi?id=1909978): update documentation for ignore-volume-az usage [#4603](https://github.com/vrutkovs/installer/pull/4603) * [Bug 1896218](https://bugzilla.redhat.com/show_bug.cgi?id=1896218): remove GCP role bindings before service accounts [#4602](https://github.com/vrutkovs/installer/pull/4602) * [Bug 1921911](https://bugzilla.redhat.com/show_bug.cgi?id=1921911): Revert "Merge pull request #4589 from patrickdillon/bz-1896218-gcp-se… [#4600](https://github.com/vrutkovs/installer/pull/4600) * [Bug 1921655](https://bugzilla.redhat.com/show_bug.cgi?id=1921655): OpenStack: fix error handling for cloudinfo [#4599](https://github.com/vrutkovs/installer/pull/4599) * [Bug 1896218](https://bugzilla.redhat.com/show_bug.cgi?id=1896218): remove GCP role bindings before service accounts [#4589](https://github.com/vrutkovs/installer/pull/4589) * Updating ose-installer-artifacts builder & base images to be consistent with ART [#4546](https://github.com/vrutkovs/installer/pull/4546) * maintenance: remove pools and volumes [#3620](https://github.com/vrutkovs/installer/pull/3620) * [Bug 1810438](https://bugzilla.redhat.com/show_bug.cgi?id=1810438): oVirt: Add missing piece for gathering bootstrap IP info [#4524](https://github.com/vrutkovs/installer/pull/4524) * Updating ose-baremetal-installer builder & base images to be consistent with ART [#4544](https://github.com/vrutkovs/installer/pull/4544) * Updating ose-installer builder & base images to be consistent with ART [#4543](https://github.com/vrutkovs/installer/pull/4543) * [Bug 1920243](https://bugzilla.redhat.com/show_bug.cgi?id=1920243): disable anonymous auth on bootstrap nodes [#4590](https://github.com/vrutkovs/installer/pull/4590) * [Bug 1917101](https://bugzilla.redhat.com/show_bug.cgi?id=1917101): UPI ovirt - remove RHCOS image from Network req [#4577](https://github.com/vrutkovs/installer/pull/4577) * [Bug 1893117](https://bugzilla.redhat.com/show_bug.cgi?id=1893117): terraform/vsphereprivate: ignore hosts in maintenance mode [#4566](https://github.com/vrutkovs/installer/pull/4566) * [Bug 1919072](https://bugzilla.redhat.com/show_bug.cgi?id=1919072): AWS cloudformation change protocol from ESP to 50 [#4583](https://github.com/vrutkovs/installer/pull/4583) * [Bug 1916938](https://bugzilla.redhat.com/show_bug.cgi?id=1916938): tolerate equal APIFloatingIP and LbFloatingIP [#4575](https://github.com/vrutkovs/installer/pull/4575) * [Bug 1907822](https://bugzilla.redhat.com/show_bug.cgi?id=1907822): Don't panic on bad data in quota validations [#4483](https://github.com/vrutkovs/installer/pull/4483) * [Bug 1912828](https://bugzilla.redhat.com/show_bug.cgi?id=1912828): Rebase on the latest terraform provider/go-ovirt [#4562](https://github.com/vrutkovs/installer/pull/4562) * [Bug 1916373](https://bugzilla.redhat.com/show_bug.cgi?id=1916373): upi: allow IPsec ports [#4552](https://github.com/vrutkovs/installer/pull/4552) * [Bug 1915460](https://bugzilla.redhat.com/show_bug.cgi?id=1915460): ovirt: validate cluster name during install [#4537](https://github.com/vrutkovs/installer/pull/4537) * [Bug 1910244](https://bugzilla.redhat.com/show_bug.cgi?id=1910244): Go mod update for golang crypto [#4569](https://github.com/vrutkovs/installer/pull/4569) * [Bug 1915617](https://bugzilla.redhat.com/show_bug.cgi?id=1915617): update boot images for various fixes [#4540](https://github.com/vrutkovs/installer/pull/4540) * [Bug 1909502](https://bugzilla.redhat.com/show_bug.cgi?id=1909502): pkg/asset/manifests: remove etcd records from proxy config [#4518](https://github.com/vrutkovs/installer/pull/4518) * [Bug 1915998](https://bugzilla.redhat.com/show_bug.cgi?id=1915998): Set Additional Control Plane Security Groups on Bootstrap Node [#4551](https://github.com/vrutkovs/installer/pull/4551) * [Bug 1916271](https://bugzilla.redhat.com/show_bug.cgi?id=1916271): openstack known issues: ControlPlane anti-affinity [#4548](https://github.com/vrutkovs/installer/pull/4548) * [Bug 1813949](https://bugzilla.redhat.com/show_bug.cgi?id=1813949): ignore local env variables when we create a service client [#4426](https://github.com/vrutkovs/installer/pull/4426) * [Bug 1916505](https://bugzilla.redhat.com/show_bug.cgi?id=1916505): AWS IPI: Add IPsec master-to-worker flows [#4554](https://github.com/vrutkovs/installer/pull/4554) * [Bug 1908468](https://bugzilla.redhat.com/show_bug.cgi?id=1908468): azure/validation: some memory values are float and not int [#4530](https://github.com/vrutkovs/installer/pull/4530) * [Bug 1908583](https://bugzilla.redhat.com/show_bug.cgi?id=1908583): Set same additional networks on Bootstrap as Control Plane [#4528](https://github.com/vrutkovs/installer/pull/4528) * [Bug 1914439](https://bugzilla.redhat.com/show_bug.cgi?id=1914439): OpenStack Port Create Typo in SRIOV Docs [#4529](https://github.com/vrutkovs/installer/pull/4529) * [Bug 1909587](https://bugzilla.redhat.com/show_bug.cgi?id=1909587): openstack: Create Control plane nodes sequentially [#4522](https://github.com/vrutkovs/installer/pull/4522) * [Bug 1910127](https://bugzilla.redhat.com/show_bug.cgi?id=1910127): ovirt: UPI doc improvements [#4498](https://github.com/vrutkovs/installer/pull/4498) * [Bug 1913151](https://bugzilla.redhat.com/show_bug.cgi?id=1913151): KubeVirt user docs: change role example - add "update" verb to VM [#4521](https://github.com/vrutkovs/installer/pull/4521) * [Bug 1910070](https://bugzilla.redhat.com/show_bug.cgi?id=1910070): Set termination_grace_period_seconds to 10 minutes [#4511](https://github.com/vrutkovs/installer/pull/4511) * [Bug 1786314](https://bugzilla.redhat.com/show_bug.cgi?id=1786314): bump gophercloud/utils [#4486](https://github.com/vrutkovs/installer/pull/4486) * [Bug 1911819](https://bugzilla.redhat.com/show_bug.cgi?id=1911819): Fix docs/user/kubevirt/install-config.yaml to pass ./hack/yaml-lint.sh [#4519](https://github.com/vrutkovs/installer/pull/4519) * [Bug 1911819](https://bugzilla.redhat.com/show_bug.cgi?id=1911819): Add kubevirt user documentation [#4516](https://github.com/vrutkovs/installer/pull/4516) * [Bug 1908743](https://bugzilla.redhat.com/show_bug.cgi?id=1908743): Add validation that the KubeMacPool component is enabled for the namespace [#4509](https://github.com/vrutkovs/installer/pull/4509) * [Bug 1910049](https://bugzilla.redhat.com/show_bug.cgi?id=1910049): Revert "openstack UPI: Use ansible-galaxy" [#4506](https://github.com/vrutkovs/installer/pull/4506) * [Bug 1882022](https://bugzilla.redhat.com/show_bug.cgi?id=1882022): installconfig: enable vsphere folders for datacenters and clusters. [#4493](https://github.com/vrutkovs/installer/pull/4493) * [Bug 1908782](https://bugzilla.redhat.com/show_bug.cgi?id=1908782): terraform: Add rules to allow internal IPsec traffic [#4491](https://github.com/vrutkovs/installer/pull/4491) * [Bug 1908171](https://bugzilla.redhat.com/show_bug.cgi?id=1908171): fix Terraform issue with GCP custom machine types [#4496](https://github.com/vrutkovs/installer/pull/4496) * [Bug 1907947](https://bugzilla.redhat.com/show_bug.cgi?id=1907947): cloud-creds-secret creation with current context info only [#4484](https://github.com/vrutkovs/installer/pull/4484) * [Bug 1907628](https://bugzilla.redhat.com/show_bug.cgi?id=1907628): OpenStack Documentation for MachineSets with Multiple Networks [#4463](https://github.com/vrutkovs/installer/pull/4463) * [Bug 1906517](https://bugzilla.redhat.com/show_bug.cgi?id=1906517): OpenStack: Skip collecting info for empty subnet IDs [#4474](https://github.com/vrutkovs/installer/pull/4474) * [Bug 1908280](https://bugzilla.redhat.com/show_bug.cgi?id=1908280): update docs for Cinder AZs [#4487](https://github.com/vrutkovs/installer/pull/4487) * [Bug 1907621](https://bugzilla.redhat.com/show_bug.cgi?id=1907621): Bump cluster-api-provider-kubevirt version [#4479](https://github.com/vrutkovs/installer/pull/4479) * [Bug 1890228](https://bugzilla.redhat.com/show_bug.cgi?id=1890228): pkg/destroy/aws: Pass destroy if HostedZone does not exist [#4477](https://github.com/vrutkovs/installer/pull/4477) * [Bug 1906459](https://bugzilla.redhat.com/show_bug.cgi?id=1906459): openstack: fix quota checks when they're unlimited [#4470](https://github.com/vrutkovs/installer/pull/4470) * Update GCP Customization doc to reflect CMEK additions [#4468](https://github.com/vrutkovs/installer/pull/4468) * Openstack: describes how to enable qemu agent for UPI. [#4441](https://github.com/vrutkovs/installer/pull/4441) * oVirt: update team members [#4464](https://github.com/vrutkovs/installer/pull/4464) * [Bug 1904663](https://bugzilla.redhat.com/show_bug.cgi?id=1904663): Fix comparison in pointer ignition customization asset [#4455](https://github.com/vrutkovs/installer/pull/4455) * openstack: Test Nova AZ manifest generation [#4459](https://github.com/vrutkovs/installer/pull/4459) * do not generate the cloud cred secret when credentialsMode is Manual [#4416](https://github.com/vrutkovs/installer/pull/4416) * update gophercloud/utils & terraform/provider-openstack [#4457](https://github.com/vrutkovs/installer/pull/4457) * hack/verify-vendor.sh: Fail early if error [#4421](https://github.com/vrutkovs/installer/pull/4421) * [Bug 1899175](https://bugzilla.redhat.com/show_bug.cgi?id=1899175): data/rhcos.json: Update boot images for RHEL 8.3 [#4414](https://github.com/vrutkovs/installer/pull/4414) * Openstack primary subnet using machine spec [#4346](https://github.com/vrutkovs/installer/pull/4346) * Deprecate computeFlavor in OpenStack platform [#4321](https://github.com/vrutkovs/installer/pull/4321) * openstack: Test manifest creation [#4431](https://github.com/vrutkovs/installer/pull/4431) * openstack: Allow to skip pre-flight validations [#4452](https://github.com/vrutkovs/installer/pull/4452) * [Bug 1900138](https://bugzilla.redhat.com/show_bug.cgi?id=1900138): Removed support for insecure mode for oVirt/RHV installation [#4404](https://github.com/vrutkovs/installer/pull/4404) * openstack: check quotas before creating cluster [#4432](https://github.com/vrutkovs/installer/pull/4432) * OpenStack: Adds clusterOSImageProperties to install-config.yaml [#4401](https://github.com/vrutkovs/installer/pull/4401) * [Bug 1904125](https://bugzilla.redhat.com/show_bug.cgi?id=1904125): Ensure the bootstrap ignition libvirt pool defaults to <clustername>.<id>.bootstrap rather than 'default' [#4448](https://github.com/vrutkovs/installer/pull/4448) * [Bug 1868748](https://bugzilla.redhat.com/show_bug.cgi?id=1868748): baremetal: rename JSON field for ClusterProvisioningIP [#4053](https://github.com/vrutkovs/installer/pull/4053) * Add KubeVirt platform as infrastructure for Openshift installation [#4350](https://github.com/vrutkovs/installer/pull/4350) * cloudproviderconfig: Refactor openstack [#4447](https://github.com/vrutkovs/installer/pull/4447) * Pass CLUSTER_PROFILE env var to CVO render [#4444](https://github.com/vrutkovs/installer/pull/4444) * vSphere Destroy: add log messages for tag destruction [#4407](https://github.com/vrutkovs/installer/pull/4407) * baremetal: send full ignition to masters [#4427](https://github.com/vrutkovs/installer/pull/4427) * asset/installconfig/Azure: Validate install-config instance types [#4419](https://github.com/vrutkovs/installer/pull/4419) * Update MCO doc references [#4445](https://github.com/vrutkovs/installer/pull/4445) * baremetal: Add ironic logwatch containers [#4437](https://github.com/vrutkovs/installer/pull/4437) * Create SR-IOV UPI Docs [#4439](https://github.com/vrutkovs/installer/pull/4439) * docs: update docs/design/resource_dep.svg [#4443](https://github.com/vrutkovs/installer/pull/4443) * [Bug 1903277](https://bugzilla.redhat.com/show_bug.cgi?id=1903277): destroy/aws: remove rules from default security group [#4440](https://github.com/vrutkovs/installer/pull/4440) * Set default release image to 4.7 [#4409](https://github.com/vrutkovs/installer/pull/4409) * baremetal: make cluster provisioning IP optional [#4429](https://github.com/vrutkovs/installer/pull/4429) * pkg/asset/quota: Typo in warning message presented to user [#4430](https://github.com/vrutkovs/installer/pull/4430) * Create a machineconfig for IPI pointer ignition customizations [#4413](https://github.com/vrutkovs/installer/pull/4413) * vSphere Docs: Update to include Permissions [#4393](https://github.com/vrutkovs/installer/pull/4393) * [OSASINFRA-902](https://issues.redhat.com/browse/OSASINFRA-902): Update OpenStack Custom External LB and DNS Docs [#4389](https://github.com/vrutkovs/installer/pull/4389) * baremetal: correct the cacheImageURL when we don't have a provisioningIP [#4408](https://github.com/vrutkovs/installer/pull/4408) * [Bug 1895874](https://bugzilla.redhat.com/show_bug.cgi?id=1895874): Use oVirt Engine certificate verified by the user for installation [#4387](https://github.com/vrutkovs/installer/pull/4387) * [Bug 1899853](https://bugzilla.redhat.com/show_bug.cgi?id=1899853): openstack: CP nodes port to use addtional SGs [#4411](https://github.com/vrutkovs/installer/pull/4411) * baremetal: Handle xz filenames for OKD [#4392](https://github.com/vrutkovs/installer/pull/4392) * Support user provided service-account-signing-key and issuer [#4373](https://github.com/vrutkovs/installer/pull/4373) * pkg: validation for previously existing ovirt configuration [#4354](https://github.com/vrutkovs/installer/pull/4354) * [Bug 1898194](https://bugzilla.redhat.com/show_bug.cgi?id=1898194): installconfig/gcp/validation: handle custom machine types [#4386](https://github.com/vrutkovs/installer/pull/4386) * baremetal: when networking is disabled make the bootstrap provisioning ip optional [#4390](https://github.com/vrutkovs/installer/pull/4390) * [Bug 1898238](https://bugzilla.redhat.com/show_bug.cgi?id=1898238): Validate the the API and Ingress FIPs are not the same [#4385](https://github.com/vrutkovs/installer/pull/4385) * [Bug 1848945](https://bugzilla.redhat.com/show_bug.cgi?id=1848945): OpenStack - Documentation for adding worker nodes using ansible [#4205](https://github.com/vrutkovs/installer/pull/4205) * [Bug 1813012](https://bugzilla.redhat.com/show_bug.cgi?id=1813012): Remove unused etcd discovery domain [#4067](https://github.com/vrutkovs/installer/pull/4067) * [Bug 1894432](https://bugzilla.redhat.com/show_bug.cgi?id=1894432): oVirt, add timeout to tmp_import_vm [#4341](https://github.com/vrutkovs/installer/pull/4341) * baremetal: validate that macs are EUI-48 and unicast [#4378](https://github.com/vrutkovs/installer/pull/4378) * [Bug 1855351](https://bugzilla.redhat.com/show_bug.cgi?id=1855351): standardize interrupt error messages [#4360](https://github.com/vrutkovs/installer/pull/4360) * Stop validating DefaultMachinePlatform [#4391](https://github.com/vrutkovs/installer/pull/4391) * [Bug 1889779](https://bugzilla.redhat.com/show_bug.cgi?id=1889779): vSphere destroy: handle failed clusters [#4388](https://github.com/vrutkovs/installer/pull/4388) * openstack UPI: Use ansible-galaxy [#4379](https://github.com/vrutkovs/installer/pull/4379) * Updating ose-baremetal-installer builder & base images to be consistent with ART [#4370](https://github.com/vrutkovs/installer/pull/4370) * Correcting normal typos [#4363](https://github.com/vrutkovs/installer/pull/4363) * [Bug 1891543](https://bugzilla.redhat.com/show_bug.cgi?id=1891543): openstack: remove platform flavor validation [#4383](https://github.com/vrutkovs/installer/pull/4383) * baremetal: remove root_gb from tfvars [#4319](https://github.com/vrutkovs/installer/pull/4319) * Cleanup: make conversion functions private [#4376](https://github.com/vrutkovs/installer/pull/4376) * [Bug 1888464](https://bugzilla.redhat.com/show_bug.cgi?id=1888464): add tag:UnTagResource perm for aws shared networks [#4371](https://github.com/vrutkovs/installer/pull/4371) * Remove the secrets directory recursively [#4369](https://github.com/vrutkovs/installer/pull/4369) * doc/openstack: update quota reqs for kuryr [#4362](https://github.com/vrutkovs/installer/pull/4362) * Fix 'troubleshooting' typo [#4365](https://github.com/vrutkovs/installer/pull/4365) * libvirt: Bump bootstrap size (primarily for OKD) [#4364](https://github.com/vrutkovs/installer/pull/4364) * data/data/aws/route53: use CNAME for us-iso-east-1 region [#4367](https://github.com/vrutkovs/installer/pull/4367) * [Bug 1886435](https://bugzilla.redhat.com/show_bug.cgi?id=1886435): Fix azure UPI az group deployment deprecation [#4366](https://github.com/vrutkovs/installer/pull/4366) * asset/installconfig/gcp: Validate install-config instance types [#4329](https://github.com/vrutkovs/installer/pull/4329) * Use 'kubernetes.io/tls' instead of SecretTypeTLS which is not being substituted [#4342](https://github.com/vrutkovs/installer/pull/4342) * aws: support custom trust bundle for c2s regions [#4335](https://github.com/vrutkovs/installer/pull/4335) * pkg/asset/cluster/aws: switch to ec2 tagging API [#4356](https://github.com/vrutkovs/installer/pull/4356) * [Bug 1867165](https://bugzilla.redhat.com/show_bug.cgi?id=1867165): baremetal: allow configuring bootstrap mac addresses [#4052](https://github.com/vrutkovs/installer/pull/4052) * doc/openstack/UPI: improvements [#4355](https://github.com/vrutkovs/installer/pull/4355) * Small corrections in ovirt/install_ipi.md [#4353](https://github.com/vrutkovs/installer/pull/4353) * data/bootstrap/files/usr/local/bin/installer-gather: Tee logs into tarball [#4345](https://github.com/vrutkovs/installer/pull/4345) * data/manifests/bootkube/cvo-overrides: Bump default to stable-4.7 [#4347](https://github.com/vrutkovs/installer/pull/4347) * owners: Add mdbooth to openstack-approvers [#4348](https://github.com/vrutkovs/installer/pull/4348) * owners: add dhellmann to baremetal-approvers/reviewers [#4343](https://github.com/vrutkovs/installer/pull/4343) * data/manifests/bootkube/cvo-overrides: Drop the explicit upstream [#4112](https://github.com/vrutkovs/installer/pull/4112) * [Bug 1891543](https://bugzilla.redhat.com/show_bug.cgi?id=1891543): openstack: consider volumes for storage requirements checks [#4323](https://github.com/vrutkovs/installer/pull/4323) * Document how to deploy cluster with BM and VM workers [#4336](https://github.com/vrutkovs/installer/pull/4336) * Wrap errors after OpenStack creds validation [#4338](https://github.com/vrutkovs/installer/pull/4338) * [Bug 1855351](https://bugzilla.redhat.com/show_bug.cgi?id=1855351): Handle CTRL+C in GCP survey [#4334](https://github.com/vrutkovs/installer/pull/4334) * [Bug 1894144](https://bugzilla.redhat.com/show_bug.cgi?id=1894144): baremetal: pin libvirt to 4.5.0 [#4339](https://github.com/vrutkovs/installer/pull/4339) * cmd/openshift-install/create: Use library-go's IngressURI helper [#4245](https://github.com/vrutkovs/installer/pull/4245) * [Bug 1888378](https://bugzilla.redhat.com/show_bug.cgi?id=1888378): Ignore error if resource group already deleted [#4325](https://github.com/vrutkovs/installer/pull/4325) * [Bug 1887863](https://bugzilla.redhat.com/show_bug.cgi?id=1887863): Patch Flavor Not Found validation for OpenStack Install Config [#4289](https://github.com/vrutkovs/installer/pull/4289) * Use authentication for Ironic on baremetal bootstrap host [#4256](https://github.com/vrutkovs/installer/pull/4256) * [Bug 1841381](https://bugzilla.redhat.com/show_bug.cgi?id=1841381): oVirt, add memoryMB validation [#4309](https://github.com/vrutkovs/installer/pull/4309) * [Bug 1878374](https://bugzilla.redhat.com/show_bug.cgi?id=1878374): Adding more nitro and the AMD instance types (AWS, UPI) [#4327](https://github.com/vrutkovs/installer/pull/4327) * [Bug 1866925](https://bugzilla.redhat.com/show_bug.cgi?id=1866925): display Azure destroy auth error [#4331](https://github.com/vrutkovs/installer/pull/4331) * openstack: fixup markdown [#4328](https://github.com/vrutkovs/installer/pull/4328) * Revert "[Azure][Destroy] Check if resource group exists" [#4322](https://github.com/vrutkovs/installer/pull/4322) * Add Encryption Key reference to GCP MachinePool API [#4318](https://github.com/vrutkovs/installer/pull/4318) * aws: block cluster destroy in c2s region [#4316](https://github.com/vrutkovs/installer/pull/4316) * aws: ensure users set ami id for c2s regions [#4315](https://github.com/vrutkovs/installer/pull/4315) * [Bug 1891702](https://bugzilla.redhat.com/show_bug.cgi?id=1891702): pkg/asset/ignition/bootstrap: exit loop if pem.Decode() fails [#4317](https://github.com/vrutkovs/installer/pull/4317) * [Bug 1888378](https://bugzilla.redhat.com/show_bug.cgi?id=1888378): [Azure][Destroy] Check if resource group exists [#4320](https://github.com/vrutkovs/installer/pull/4320) * oVirt: change owners [#4311](https://github.com/vrutkovs/installer/pull/4311) * Code cleanup and optimizations [#4272](https://github.com/vrutkovs/installer/pull/4272) * [Bug 1889267](https://bugzilla.redhat.com/show_bug.cgi?id=1889267): oVirt, increase terraform template and release image timeout to 20m [#4285](https://github.com/vrutkovs/installer/pull/4285) * install-approvers: add staebler [#4297](https://github.com/vrutkovs/installer/pull/4297) * [Bug 1880443](https://bugzilla.redhat.com/show_bug.cgi?id=1880443): allow providing client options when generating OpenStack MachineSets [#4196](https://github.com/vrutkovs/installer/pull/4196) * openstack: Update CI base image [#4291](https://github.com/vrutkovs/installer/pull/4291) * pkg/asset/installconfig/aws: Validate install-config instance type [#4258](https://github.com/vrutkovs/installer/pull/4258) * go.mod Update [#4294](https://github.com/vrutkovs/installer/pull/4294) * [Bug 1836017](https://bugzilla.redhat.com/show_bug.cgi?id=1836017): Configure haproxy to check /readyz [#4012](https://github.com/vrutkovs/installer/pull/4012) * [Bug 1870728](https://bugzilla.redhat.com/show_bug.cgi?id=1870728): pkg/asset/ignition/bootstrap: Display warning if certificates are expired [#4287](https://github.com/vrutkovs/installer/pull/4287) * [Bug 1889852](https://bugzilla.redhat.com/show_bug.cgi?id=1889852): add new AWS regions [#4288](https://github.com/vrutkovs/installer/pull/4288) * [Bug 1877116](https://bugzilla.redhat.com/show_bug.cgi?id=1877116): aws: use file for bootstrap ign when uploading to s3 [#4281](https://github.com/vrutkovs/installer/pull/4281) * [Bug 1886553](https://bugzilla.redhat.com/show_bug.cgi?id=1886553): GCP - Increase worker NAT min ports [#4273](https://github.com/vrutkovs/installer/pull/4273) * cmd: split newlines in logrus stderr output to new entry [#4282](https://github.com/vrutkovs/installer/pull/4282) * openstack: Add a new team member [#4290](https://github.com/vrutkovs/installer/pull/4290) * [Bug 1882649](https://bugzilla.redhat.com/show_bug.cgi?id=1882649): Determine Glance disk format based on file extension [#4279](https://github.com/vrutkovs/installer/pull/4279) * vSphere: Update dockerfile removing certificate [#4274](https://github.com/vrutkovs/installer/pull/4274) * Update README.md - Broken Link - Spelling [#4278](https://github.com/vrutkovs/installer/pull/4278) * OpenStack: remove legacy image validation [#4277](https://github.com/vrutkovs/installer/pull/4277) * [Bug 1882844](https://bugzilla.redhat.com/show_bug.cgi?id=1882844): vsphere destroy: delete tag category created by installer [#4265](https://github.com/vrutkovs/installer/pull/4265) * [Bug 1878900](https://bugzilla.redhat.com/show_bug.cgi?id=1878900): openstack: Fix error messages in flavor validation [#4269](https://github.com/vrutkovs/installer/pull/4269) * OpenStack UPI: Custom API and Ingress vip addresses [#4092](https://github.com/vrutkovs/installer/pull/4092) * [Bug 1888671](https://bugzilla.redhat.com/show_bug.cgi?id=1888671): openstack: Document Cinder's ignore-volume-az [#4271](https://github.com/vrutkovs/installer/pull/4271) * Bump K8s.io version to v0.19.0 [#4266](https://github.com/vrutkovs/installer/pull/4266) * destroy: return aws resources that could not be deleted [#4270](https://github.com/vrutkovs/installer/pull/4270) * install-complete: provide troubleshooting info when operators fail [#4259](https://github.com/vrutkovs/installer/pull/4259) * OpenStack: add clusterOSImage validations [#3964](https://github.com/vrutkovs/installer/pull/3964) * [Bug 1887525](https://bugzilla.redhat.com/show_bug.cgi?id=1887525): baremetal: Wait for master-bmh-update script to succeed [#4262](https://github.com/vrutkovs/installer/pull/4262) * openstack: Bump Ansible to 2.9 in UPI [#4261](https://github.com/vrutkovs/installer/pull/4261) * [Bug 1874248](https://bugzilla.redhat.com/show_bug.cgi?id=1874248): types/vsphere/validation: ensure vcenter is all lower case [#4254](https://github.com/vrutkovs/installer/pull/4254) * [Bug 1884691](https://bugzilla.redhat.com/show_bug.cgi?id=1884691): types: allow manual cred mode for gcp and azure [#4238](https://github.com/vrutkovs/installer/pull/4238) * Updating ose-installer builder & base images to be consistent with ART [#4250](https://github.com/vrutkovs/installer/pull/4250) * Remove dead code [#4252](https://github.com/vrutkovs/installer/pull/4252) * Updating ose-installer-artifacts builder & base images to be consistent with ART [#4251](https://github.com/vrutkovs/installer/pull/4251) * openstack privileges documented [#4214](https://github.com/vrutkovs/installer/pull/4214) * OpenStack: Rename lbFloatingIP to apiFloatingIP [#4244](https://github.com/vrutkovs/installer/pull/4244) * [Bug 1882191](https://bugzilla.redhat.com/show_bug.cgi?id=1882191): Add GODEBUG=x509ignoreCN=0 to systemd DefaultEnvironment [#4248](https://github.com/vrutkovs/installer/pull/4248) * [Bug 1884435](https://bugzilla.redhat.com/show_bug.cgi?id=1884435): vsphere - add delay if resolv.conf is not available; wait for dhcp [#4237](https://github.com/vrutkovs/installer/pull/4237) * [Bug 1777224](https://bugzilla.redhat.com/show_bug.cgi?id=1777224): pkg/asset: metadata to depend on ignition [#4223](https://github.com/vrutkovs/installer/pull/4223) * Bump RHCOS images for Ignition entropy fix [#4241](https://github.com/vrutkovs/installer/pull/4241) * [Bug 1859174](https://bugzilla.redhat.com/show_bug.cgi?id=1859174): Upgrade Terraform provider OpenStack [#4216](https://github.com/vrutkovs/installer/pull/4216) * Fix json tag for GCP auth service account [#4166](https://github.com/vrutkovs/installer/pull/4166) * installer/pkg/quota/gcp/limits.go: fix minor typo in comment [#4160](https://github.com/vrutkovs/installer/pull/4160) * IP address should be specified without underscore. [#3204](https://github.com/vrutkovs/installer/pull/3204) * Docs: OpenStack: Remove mention of cluster failing to destroy [#4208](https://github.com/vrutkovs/installer/pull/4208) * [Bug 1876815](https://bugzilla.redhat.com/show_bug.cgi?id=1876815): OpenStack: unset OS_CLOUD [#4231](https://github.com/vrutkovs/installer/pull/4231) * [Bug 1884558](https://bugzilla.redhat.com/show_bug.cgi?id=1884558): do not use local cacert path in generated clouds.yaml [#4227](https://github.com/vrutkovs/installer/pull/4227) * [Bug 1878758](https://bugzilla.redhat.com/show_bug.cgi?id=1878758): openstack UPI: Allow for no FIP or router [#4219](https://github.com/vrutkovs/installer/pull/4219) * [Bug 1876844](https://bugzilla.redhat.com/show_bug.cgi?id=1876844): openstack UPI: Ignition token needs Glance access [#4236](https://github.com/vrutkovs/installer/pull/4236) * [Bug 1881703](https://bugzilla.redhat.com/show_bug.cgi?id=1881703): Revert "Have the MCO manage the ignition stub config" [#4228](https://github.com/vrutkovs/installer/pull/4228) * [Bug 1882752](https://bugzilla.redhat.com/show_bug.cgi?id=1882752): openstack BM: Remove MachineSet on separate subnet [#4230](https://github.com/vrutkovs/installer/pull/4230) * [Bug 1878900](https://bugzilla.redhat.com/show_bug.cgi?id=1878900): openstack: Skip validation for baremetal flavors [#4222](https://github.com/vrutkovs/installer/pull/4222) * [Bug 1881532](https://bugzilla.redhat.com/show_bug.cgi?id=1881532): openstack: Only list external networks in prompt [#4226](https://github.com/vrutkovs/installer/pull/4226) * [Bug 1882805](https://bugzilla.redhat.com/show_bug.cgi?id=1882805): Bump bootimages for ppc64le and s390x to 46.82.202009240941-0 and 46.82.202009241338-0 [#4215](https://github.com/vrutkovs/installer/pull/4215) * [Bug 1881757](https://bugzilla.redhat.com/show_bug.cgi?id=1881757): tls: set mcs cert common name to not-valid-hostname [#4210](https://github.com/vrutkovs/installer/pull/4210) * [Bug 1882810](https://bugzilla.redhat.com/show_bug.cgi?id=1882810): vsphere - local dns prepender not named with template [#4220](https://github.com/vrutkovs/installer/pull/4220) * [Bug 1853418](https://bugzilla.redhat.com/show_bug.cgi?id=1853418): Ignore trailing dots in baseDomain [#4146](https://github.com/vrutkovs/installer/pull/4146) * [Bug 1881487](https://bugzilla.redhat.com/show_bug.cgi?id=1881487): data/rhcos.json: Update to 46.82.202009220041-0 [#4206](https://github.com/vrutkovs/installer/pull/4206) * [Bug 1877984](https://bugzilla.redhat.com/show_bug.cgi?id=1877984): Fix "OpenShiftSDN" to proper case when generating network config [#4207](https://github.com/vrutkovs/installer/pull/4207) * [Bug 1879533](https://bugzilla.redhat.com/show_bug.cgi?id=1879533): oVirt UPI - Better explanation of the inventory [#4180](https://github.com/vrutkovs/installer/pull/4180) * [Bug 1878789](https://bugzilla.redhat.com/show_bug.cgi?id=1878789): Add note about ignition certificates expiration [#4171](https://github.com/vrutkovs/installer/pull/4171) * [Bug 1877854](https://bugzilla.redhat.com/show_bug.cgi?id=1877854): OpenStack: Support multiple subnets [#4093](https://github.com/vrutkovs/installer/pull/4093) * [Bug 1879649](https://bugzilla.redhat.com/show_bug.cgi?id=1879649): oVirt UPI - Simplify create templates [#4182](https://github.com/vrutkovs/installer/pull/4182) * [Bug 1880393](https://bugzilla.redhat.com/show_bug.cgi?id=1880393): OpenStack UPI: Explain how to encode cert to base64 [#4203](https://github.com/vrutkovs/installer/pull/4203) * [Bug 1880393](https://bugzilla.redhat.com/show_bug.cgi?id=1880393): OpenStack UPI: Trim EOLs from the cacert trustbundle [#4201](https://github.com/vrutkovs/installer/pull/4201) * [Bug 1878163](https://bugzilla.redhat.com/show_bug.cgi?id=1878163): Updating images/baremetal/Dockerfile.ci baseimages to mach ocp-build-data config [#4186](https://github.com/vrutkovs/installer/pull/4186) * [Bug 1879891](https://bugzilla.redhat.com/show_bug.cgi?id=1879891): Fix cluster destroy when fip less installation happened [#4191](https://github.com/vrutkovs/installer/pull/4191) * [Bug 1878163](https://bugzilla.redhat.com/show_bug.cgi?id=1878163): Updating images/installer/Dockerfile.ci baseimages to mach ocp-build-data config [#4185](https://github.com/vrutkovs/installer/pull/4185) * [Bug 1878163](https://bugzilla.redhat.com/show_bug.cgi?id=1878163): Updating images/installer-artifacts/Dockerfile.rhel baseimages to mach ocp-build-data config [#4184](https://github.com/vrutkovs/installer/pull/4184) * [Bug 1876815](https://bugzilla.redhat.com/show_bug.cgi?id=1876815): unset OS_CLOUD during config generator [#4177](https://github.com/vrutkovs/installer/pull/4177) * [Bug 1878108](https://bugzilla.redhat.com/show_bug.cgi?id=1878108): asset/quota/gcp: use GCP api to find CPU count for constraint and guess only on failure [#4163](https://github.com/vrutkovs/installer/pull/4163) * [Bug 1877486](https://bugzilla.redhat.com/show_bug.cgi?id=1877486): proxy: allow * for noProxy [#4172](https://github.com/vrutkovs/installer/pull/4172) * [Bug 1880132](https://bugzilla.redhat.com/show_bug.cgi?id=1880132): destroy/gcp: correct extract service account email from IAM policy binding member [#4193](https://github.com/vrutkovs/installer/pull/4193) * [Bug 1861917](https://bugzilla.redhat.com/show_bug.cgi?id=1861917): Add cpc config to bootstrap [#4178](https://github.com/vrutkovs/installer/pull/4178) * install: increase timeout to 40 minutes [#4181](https://github.com/vrutkovs/installer/pull/4181) * [Bug 1879081](https://bugzilla.redhat.com/show_bug.cgi?id=1879081): OpenStack: Switch to train/centos8 repos [#4175](https://github.com/vrutkovs/installer/pull/4175) * [Bug 1877885](https://bugzilla.redhat.com/show_bug.cgi?id=1877885): oVirt UPI - Add Ansible playbooks download [#4169](https://github.com/vrutkovs/installer/pull/4169) * [Bug 1878758](https://bugzilla.redhat.com/show_bug.cgi?id=1878758): openstack UPI: Optional floating IPs [#3755](https://github.com/vrutkovs/installer/pull/3755) * [Bug 1877763](https://bugzilla.redhat.com/show_bug.cgi?id=1877763): oVirt UPI - python code snippets without semicolons [#4170](https://github.com/vrutkovs/installer/pull/4170) * [Bug 1874747](https://bugzilla.redhat.com/show_bug.cgi?id=1874747): ovirt: dont start the temp VM before template creation [#4168](https://github.com/vrutkovs/installer/pull/4168) * [Bug 1878243](https://bugzilla.redhat.com/show_bug.cgi?id=1878243): openstack: Upgrade the CI build image [#4161](https://github.com/vrutkovs/installer/pull/4161) * [Bug 1877440](https://bugzilla.redhat.com/show_bug.cgi?id=1877440): oVirt UPI Assets_dir set according to env var [#4153](https://github.com/vrutkovs/installer/pull/4153) * [Bug 1874457](https://bugzilla.redhat.com/show_bug.cgi?id=1874457): Add support to clean custom router [#4159](https://github.com/vrutkovs/installer/pull/4159) * [Bug 1877676](https://bugzilla.redhat.com/show_bug.cgi?id=1877676): OpenStack: Refresh documentation about ingress FIP [#4059](https://github.com/vrutkovs/installer/pull/4059) * [Bug 1877436](https://bugzilla.redhat.com/show_bug.cgi?id=1877436): oVirt UPI RHCOS explanations, assets env var [#4152](https://github.com/vrutkovs/installer/pull/4152) * [Bug 1877862](https://bugzilla.redhat.com/show_bug.cgi?id=1877862): oVirt UPI - Fix templates check and optimize image check [#4157](https://github.com/vrutkovs/installer/pull/4157) * [Bug 1877741](https://bugzilla.redhat.com/show_bug.cgi?id=1877741): installer-masters-gather.sh: gather openshift-{azure,gcp}-routes logs [#4148](https://github.com/vrutkovs/installer/pull/4148) * [Bug 1873125](https://bugzilla.redhat.com/show_bug.cgi?id=1873125): Fix python syntax for OpenStack UPI scripts [#4154](https://github.com/vrutkovs/installer/pull/4154) * [Bug 1870038](https://bugzilla.redhat.com/show_bug.cgi?id=1870038): vmware upi: haproxy.service to rm haproxy pod on ExecStop [#4132](https://github.com/vrutkovs/installer/pull/4132) * [Bug 1866925](https://bugzilla.redhat.com/show_bug.cgi?id=1866925): pkg/destroy/azure: fail fast if unable to list resources for any reason [#4025](https://github.com/vrutkovs/installer/pull/4025) * [Bug 1873125](https://bugzilla.redhat.com/show_bug.cgi?id=1873125): OpenStack: UPI missing instructions to update apiVIP and ingressVIP [#4133](https://github.com/vrutkovs/installer/pull/4133) * [Bug 1875855](https://bugzilla.redhat.com/show_bug.cgi?id=1875855): increase timeout for bootstrap ignition downloading [#4145](https://github.com/vrutkovs/installer/pull/4145) * [Bug 1856928](https://bugzilla.redhat.com/show_bug.cgi?id=1856928): Fix Non yaml files in manifests/ or openshift/ directories preventing bootstrap from completing [#4091](https://github.com/vrutkovs/installer/pull/4091) * [Bug 1876825](https://bugzilla.redhat.com/show_bug.cgi?id=1876825): generate lbFloatingIP in OpenStack config [#4147](https://github.com/vrutkovs/installer/pull/4147) * [Bug 1876792](https://bugzilla.redhat.com/show_bug.cgi?id=1876792): oVirt UPI Move Network Requirements section [#4142](https://github.com/vrutkovs/installer/pull/4142) * [Bug 1876783](https://bugzilla.redhat.com/show_bug.cgi?id=1876783): oVirt UPI fix python cmd [#4141](https://github.com/vrutkovs/installer/pull/4141) * [Bug 1876562](https://bugzilla.redhat.com/show_bug.cgi?id=1876562): Small readability improvements to UPI on RHV documentation [#4136](https://github.com/vrutkovs/installer/pull/4136) * [Bug 1871653](https://bugzilla.redhat.com/show_bug.cgi?id=1871653): baremetal: set root device hints on host resources [#4088](https://github.com/vrutkovs/installer/pull/4088) * [Bug 1875932](https://bugzilla.redhat.com/show_bug.cgi?id=1875932): Update baremetal DNS design details [#4101](https://github.com/vrutkovs/installer/pull/4101) * [Bug 1868439](https://bugzilla.redhat.com/show_bug.cgi?id=1868439): openstack UPI: Fix JSON syntax [#4140](https://github.com/vrutkovs/installer/pull/4140) * [Bug 1874656](https://bugzilla.redhat.com/show_bug.cgi?id=1874656): Bump RHCOS for s390x/ppc64le to fix SSH authentication [#4124](https://github.com/vrutkovs/installer/pull/4124) * [Bug 1861917](https://bugzilla.redhat.com/show_bug.cgi?id=1861917): bootkube: add image for cluster-policy-controller [#4131](https://github.com/vrutkovs/installer/pull/4131) * [Bug 1871712](https://bugzilla.redhat.com/show_bug.cgi?id=1871712): pkg/destroy/aws: Detach attached policies during destroy [#4126](https://github.com/vrutkovs/installer/pull/4126) * [Bug 1867975](https://bugzilla.redhat.com/show_bug.cgi?id=1867975): aws: ensure users set ami id for us-gov and cn regions [#4103](https://github.com/vrutkovs/installer/pull/4103) * [Bug 1868439](https://bugzilla.redhat.com/show_bug.cgi?id=1868439): openstack UPI: Fix Ingition key error [#4135](https://github.com/vrutkovs/installer/pull/4135) * [Bug 1872080](https://bugzilla.redhat.com/show_bug.cgi?id=1872080): Updating images/baremetal/Dockerfile.ci baseimages to mach ocp-build-data config [#4086](https://github.com/vrutkovs/installer/pull/4086) * [Bug 1872080](https://bugzilla.redhat.com/show_bug.cgi?id=1872080): Updating images/installer-artifacts/Dockerfile.rhel baseimages to mach ocp-build-data config [#4085](https://github.com/vrutkovs/installer/pull/4085) * [Bug 1872080](https://bugzilla.redhat.com/show_bug.cgi?id=1872080): Updating images/installer/Dockerfile.ci baseimages to mach ocp-build-data config [#4087](https://github.com/vrutkovs/installer/pull/4087) * BUG 1872646: oVirt, remove tmp VM disk on destroy [#4129](https://github.com/vrutkovs/installer/pull/4129) * hack/update-rhcos-bootimage: update usage example [#4097](https://github.com/vrutkovs/installer/pull/4097) * [Bug 1813012](https://bugzilla.redhat.com/show_bug.cgi?id=1813012): Remove unused flags previously needed for etcd static pod [#4063](https://github.com/vrutkovs/installer/pull/4063) * [Bug 1842071](https://bugzilla.redhat.com/show_bug.cgi?id=1842071): Add ppc64le and s390x documentation links [#4115](https://github.com/vrutkovs/installer/pull/4115) * [Bug 1873448](https://bugzilla.redhat.com/show_bug.cgi?id=1873448): Ensure proper tagging of compute nodes ports [#4118](https://github.com/vrutkovs/installer/pull/4118) * [Bug 1872861](https://bugzilla.redhat.com/show_bug.cgi?id=1872861): Update cli container image for UPI [#4098](https://github.com/vrutkovs/installer/pull/4098) * [Bug 1873712](https://bugzilla.redhat.com/show_bug.cgi?id=1873712): Add information about AZs limitations with Kuryr [#4109](https://github.com/vrutkovs/installer/pull/4109) * [Bug 1871795](https://bugzilla.redhat.com/show_bug.cgi?id=1871795): bump RHCOS images to fix SSH authentication [#4095](https://github.com/vrutkovs/installer/pull/4095) * [Bug 1873123](https://bugzilla.redhat.com/show_bug.cgi?id=1873123): omit deprecated parameters during config generation [#4100](https://github.com/vrutkovs/installer/pull/4100) * [Bug 1813012](https://bugzilla.redhat.com/show_bug.cgi?id=1813012): Remove unused etcd host service and endpoints [#4068](https://github.com/vrutkovs/installer/pull/4068) * [Bug 1871030](https://bugzilla.redhat.com/show_bug.cgi?id=1871030): data/data/gcp: be pedantic about setting the region [#4089](https://github.com/vrutkovs/installer/pull/4089) * [Bug 1856270](https://bugzilla.redhat.com/show_bug.cgi?id=1856270): Update known issues with info about provisioning state node bug [#4083](https://github.com/vrutkovs/installer/pull/4083) * [Bug 1870082](https://bugzilla.redhat.com/show_bug.cgi?id=1870082): Use index in MachineSet names for Openstack IPI [#4070](https://github.com/vrutkovs/installer/pull/4070) * [Bug 1813012](https://bugzilla.redhat.com/show_bug.cgi?id=1813012): Remove legacy code for unmanaged cluster-etcd-operator [#4062](https://github.com/vrutkovs/installer/pull/4062) * [Bug 1863026](https://bugzilla.redhat.com/show_bug.cgi?id=1863026): docs/user/azure: remove newlines from base64 encoding in UPI install doc [#4090](https://github.com/vrutkovs/installer/pull/4090) * [Bug 1871048](https://bugzilla.redhat.com/show_bug.cgi?id=1871048): OpenStack: dynamically set end of DHCP allocation pool [#4077](https://github.com/vrutkovs/installer/pull/4077) * [Bug 1868773](https://bugzilla.redhat.com/show_bug.cgi?id=1868773): Libvirt: Bump bootstrap memory to 4G [#4080](https://github.com/vrutkovs/installer/pull/4080) * [Bug 1862209](https://bugzilla.redhat.com/show_bug.cgi?id=1862209): aws: fix validation for user tags [#4081](https://github.com/vrutkovs/installer/pull/4081) * [Bug 1871124](https://bugzilla.redhat.com/show_bug.cgi?id=1871124): OpenStack: Improve snippet for playbooks download [#4079](https://github.com/vrutkovs/installer/pull/4079) * [Bug 1871124](https://bugzilla.redhat.com/show_bug.cgi?id=1871124): openstack UPI: Provide a way to get the playbooks [#4078](https://github.com/vrutkovs/installer/pull/4078) * [Bug 1866534](https://bugzilla.redhat.com/show_bug.cgi?id=1866534): fixes bootstrap DNS failure on bare metal [#4015](https://github.com/vrutkovs/installer/pull/4015) * [Bug 1862957](https://bugzilla.redhat.com/show_bug.cgi?id=1862957): bump RHCOS images for FIPS fix [#4066](https://github.com/vrutkovs/installer/pull/4066) * [Bug 1870592](https://bugzilla.redhat.com/show_bug.cgi?id=1870592): openstack: Document MachineSet availabilityZone [#4074](https://github.com/vrutkovs/installer/pull/4074) * Readme.md: Remove experimental tag for OpenStack UPI [#3982](https://github.com/vrutkovs/installer/pull/3982) * [Bug 1866693](https://bugzilla.redhat.com/show_bug.cgi?id=1866693): docs: drop kernel-devel from supported extensions [#4030](https://github.com/vrutkovs/installer/pull/4030) * [Bug 1864092](https://bugzilla.redhat.com/show_bug.cgi?id=1864092): baremetal: copy the implementation of rootdevicehints from baremetal-operator [#4002](https://github.com/vrutkovs/installer/pull/4002) * [Bug 1862290](https://bugzilla.redhat.com/show_bug.cgi?id=1862290): vendor/terraform-provider-vsphere: DiskPostCloneOperation patch carry [#4060](https://github.com/vrutkovs/installer/pull/4060) * [Bug 1868439](https://bugzilla.redhat.com/show_bug.cgi?id=1868439): openstack UPI: Fix Ignition v3 [#4058](https://github.com/vrutkovs/installer/pull/4058) * openstack: Known issue: no BMs on Kuryr [#4051](https://github.com/vrutkovs/installer/pull/4051) * [Bug 1869329](https://bugzilla.redhat.com/show_bug.cgi?id=1869329): OpenStack: Place Bootstrap in one of the master AZs [#4056](https://github.com/vrutkovs/installer/pull/4056) * Bump rhcos images for s390x [#4050](https://github.com/vrutkovs/installer/pull/4050) * OpenStack: Fixups to BM workers documentation [#4057](https://github.com/vrutkovs/installer/pull/4057) * [Bug 1868439](https://bugzilla.redhat.com/show_bug.cgi?id=1868439): openstack upi: fix Ignition key error [#4047](https://github.com/vrutkovs/installer/pull/4047) * OpenStack: baremetal worker documentation [#3955](https://github.com/vrutkovs/installer/pull/3955) * [Bug 1866949](https://bugzilla.redhat.com/show_bug.cgi?id=1866949): data/data/aws/route53: use CNAME for gov cloud partition [#4043](https://github.com/vrutkovs/installer/pull/4043) * [Bug 1862044](https://bugzilla.redhat.com/show_bug.cgi?id=1862044): deleting servers using metadata-based filtering [#4032](https://github.com/vrutkovs/installer/pull/4032) * [Bug 1867972](https://bugzilla.redhat.com/show_bug.cgi?id=1867972): destroy/aws: setup the resourcetagging api with correct region for gov cloud [#4042](https://github.com/vrutkovs/installer/pull/4042) * Bump rhcos images for ppc64le [#4021](https://github.com/vrutkovs/installer/pull/4021) * [Bug 1867519](https://bugzilla.redhat.com/show_bug.cgi?id=1867519): make externalNetwork optional [#4029](https://github.com/vrutkovs/installer/pull/4029) * [Full changelog](https://github.com/vrutkovs/installer/compare/2ef2b7e490e63e5a8afff6c98fe12505540c2114...03d84764dfdffec49e0d24ad0463d1f5e1acf027) ### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/4e6ac5edae9417bd673e8f37ee12f92e9d333397) * [Bug 1942488](https://bugzilla.redhat.com/show_bug.cgi?id=1942488): sort AddressesDefault by route priority, ifindex, and IPv4/IPv6 preference [#132](https://github.com/openshift/baremetal-runtimecfg/pull/132) * [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/7cdf5fdf6947966780a1502ef37ad9e0ac647435...4e6ac5edae9417bd673e8f37ee12f92e9d333397) ### [branding](https://github.com/openshift/origin-branding/tree/102124a8461a9abf209e8290af47a7a8313d4689) * [Bug 1935805](https://bugzilla.redhat.com/show_bug.cgi?id=1935805): Fix documentation link for OKD [#12](https://github.com/openshift/origin-branding/pull/12) * [Bug 1932488](https://bugzilla.redhat.com/show_bug.cgi?id=1932488): Add CVO cluster-profile annotations [#10](https://github.com/openshift/origin-branding/pull/10) * [Full changelog](https://github.com/openshift/origin-branding/compare/068fa1eac9f31ffe13089dd3de2ec49c153b2a14...102124a8461a9abf209e8290af47a7a8313d4689) ### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/95881afb5df065c250d98cf7f30ee4bb6d281acf) * [Bug 1942938](https://bugzilla.redhat.com/show_bug.cgi?id=1942938): [release-4.7] inspect clusteroperators as a backup to must-gather if it fails [#766](https://github.com/openshift/oc/pull/766) * [Bug 1924453](https://bugzilla.redhat.com/show_bug.cgi?id=1924453): Bump github.com/gogo/protobuf to v1.3.2 [#753](https://github.com/openshift/oc/pull/753) * [Bug 1942059](https://bugzilla.redhat.com/show_bug.cgi?id=1942059): when mirroring to a file destination, mount images under the index location [#779](https://github.com/openshift/oc/pull/779) * [Bug 1939477](https://bugzilla.redhat.com/show_bug.cgi?id=1939477): Fix unit test to use new IS [#769](https://github.com/openshift/oc/pull/769) * [Full changelog](https://github.com/openshift/oc/compare/c66c03f3012a10f16eb86fdce6330433adf6c9ee...95881afb5df065c250d98cf7f30ee4bb6d281acf) ### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/2aec1a53520e4fc9f8def5bd040e3eca917e3d02) * [Bug 1928151](https://bugzilla.redhat.com/show_bug.cgi?id=1928151): spell fix user-visible string [#301](https://github.com/openshift/cloud-credential-operator/pull/301) * [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/0427557ed7300864ae0068b92c4c8bfee1629b3b...2aec1a53520e4fc9f8def5bd040e3eca917e3d02) ### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/ac544d46b0f4aa100e40336d87ec069eca335323) * Updating vertical-pod-autoscaler builder & base images to be consistent with ART [#190](https://github.com/openshift/kubernetes-autoscaler/pull/190) * [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/7f1d0ad0b53d17879034597d97dac23c9a23dbcb...ac544d46b0f4aa100e40336d87ec069eca335323) ### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/175f8f5283faebd81fb9d1fb2915eb2682622e1e) * [Bug 1936544](https://bugzilla.redhat.com/show_bug.cgi?id=1936544): Inject proxy environment variables everywhere [#117](https://github.com/openshift/cluster-baremetal-operator/pull/117) * [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/ea1ff11f6cd33532bd3f3cdd7e010e97de0fcd04...175f8f5283faebd81fb9d1fb2915eb2682622e1e) ### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/0dd9bae28a315233ceddcb82cd2332ef7f7614cd) * [Bug 1942228](https://bugzilla.redhat.com/show_bug.cgi?id=1942228): Fix spurious reconciliation of DNS daemonset and service [#250](https://github.com/openshift/cluster-dns-operator/pull/250) * [Bug 1943826](https://bugzilla.redhat.com/show_bug.cgi?id=1943826): Corefile: Use 30 second max TTL for caching of negative responses [#254](https://github.com/openshift/cluster-dns-operator/pull/254) * [Bug 1937089](https://bugzilla.redhat.com/show_bug.cgi?id=1937089): Configure CoreDNS to shut down gracefully [#247](https://github.com/openshift/cluster-dns-operator/pull/247) * [Bug 1936587](https://bugzilla.redhat.com/show_bug.cgi?id=1936587): Set CoreDNS's cache's maximum TTL to 900 seconds [#245](https://github.com/openshift/cluster-dns-operator/pull/245) * [Bug 1928304](https://bugzilla.redhat.com/show_bug.cgi?id=1928304): Set CoreDNS readiness probe period and timeout each to 3 seconds [#235](https://github.com/openshift/cluster-dns-operator/pull/235) * [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/0521d2d5806835bd8a39cfb867c132623cb4a8a6...0dd9bae28a315233ceddcb82cd2332ef7f7614cd) ### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/ee35da5b3ee486f786d7687849d57599d46dfc2e) * [Bug 1925739](https://bugzilla.redhat.com/show_bug.cgi?id=1925739): pkg/operator/metriccontroller: cleanup transports [#537](https://github.com/openshift/cluster-etcd-operator/pull/537) * [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/51ce9d65c03d0c382389209d41301ca6208d6de9...ee35da5b3ee486f786d7687849d57599d46dfc2e) ### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/1d9717b7624acee5c40d9a2f6bffbf7e628fd23d) * [Bug 1937214](https://bugzilla.redhat.com/show_bug.cgi?id=1937214): Fix spurious reconciliation of NodePort services [#570](https://github.com/openshift/cluster-ingress-operator/pull/570) * [Bug 1935891](https://bugzilla.redhat.com/show_bug.cgi?id=1935891): Canary: Perform canary test probes over https [#566](https://github.com/openshift/cluster-ingress-operator/pull/566) * [Bug 1936093](https://bugzilla.redhat.com/show_bug.cgi?id=1936093): Canary: Use cluster-wide proxy for canary client [#568](https://github.com/openshift/cluster-ingress-operator/pull/568) * [Bug 1934904](https://bugzilla.redhat.com/show_bug.cgi?id=1934904): Canary: Schedule canary server pods to worker and infra nodes [#564](https://github.com/openshift/cluster-ingress-operator/pull/564) * [Bug 1932649](https://bugzilla.redhat.com/show_bug.cgi?id=1932649): Canary: Add edge termination to canary route [#558](https://github.com/openshift/cluster-ingress-operator/pull/558) * [Bug 1927080](https://bugzilla.redhat.com/show_bug.cgi?id=1927080): Verify that Serivce resources have idle annotations from corresponding Endpoint resources, should they exist. [#546](https://github.com/openshift/cluster-ingress-operator/pull/546) * [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/b536b856e3923876851ca98a758366d58026897c...1d9717b7624acee5c40d9a2f6bffbf7e628fd23d) ### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/099c6afa1f8b4fe7654207f7eabd7784b42ce2e3) * [Bug 1927321](https://bugzilla.redhat.com/show_bug.cgi?id=1927321): competing connectivitycheckcontrollers cause pod restarts during upgrades [#1041](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1041) * [Bug 1927644](https://bugzilla.redhat.com/show_bug.cgi?id=1927644): bootstrap: add --advertise-address=pod.status.hostIP [#1042](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1042) * [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/b1cbe974244310a709d858a10cc6adcbc10118d6...099c6afa1f8b4fe7654207f7eabd7784b42ce2e3) ### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/281590936f3a94d4ae1eb008709fda6614fe763b) * [Bug 1924488](https://bugzilla.redhat.com/show_bug.cgi?id=1924488): Bump github.com/gogo/protobuf to v1.3.2 [#508](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/508) * [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/d95b6453169b9a43d01e939f060919d2a7a6e94f...281590936f3a94d4ae1eb008709fda6614fe763b) ### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/b2204ca23a57e9f01af915375e6a18fc86ffecda) * [Bug 1924490](https://bugzilla.redhat.com/show_bug.cgi?id=1924490): Bump github.com/gogo/protobuf to v1.3.2 [#334](https://github.com/openshift/cluster-kube-scheduler-operator/pull/334) * [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/776a21927cdedf968dd368638c14b7ba998dbe65...b2204ca23a57e9f01af915375e6a18fc86ffecda) ### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/54484757581ec26f178c599215715bafd6029582) * Updating ose-cluster-kube-storage-version-migrator-operator builder & base images to be consistent with ART [#38](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/38) * [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/572caa117777db92d52564290522be3489f40074...54484757581ec26f178c599215715bafd6029582) ### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/6f49a9facf8b2764fa4c1482624fa1f7762e41ed) * Updating ose-cluster-machine-approver builder & base images to be consistent with ART [#103](https://github.com/openshift/cluster-machine-approver/pull/103) * [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/72a4740ff38e9c924d0f7cd760b6b5fd85283242...6f49a9facf8b2764fa4c1482624fa1f7762e41ed) ### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/da421b0e3c3362771e8d91befdd934ac09697db1) * [Bug 1945856](https://bugzilla.redhat.com/show_bug.cgi?id=1945856): Revert "Bug 1934516: [4.7]: jsonnet/prometheus.jsonnet: Apply system-cluster-critical class to cluster Prometheus " [#1103](https://github.com/openshift/cluster-monitoring-operator/pull/1103) * [Bug 1945851](https://bugzilla.redhat.com/show_bug.cgi?id=1945851): Backport Remove the "instance" and "pod" labels for kube-state-metrics metrics [#1101](https://github.com/openshift/cluster-monitoring-operator/pull/1101) * [Bug 1926876](https://bugzilla.redhat.com/show_bug.cgi?id=1926876): pkg/manifests: fix prometheus-proxy trustedCA [#1051](https://github.com/openshift/cluster-monitoring-operator/pull/1051) * [Bug 1932820](https://bugzilla.redhat.com/show_bug.cgi?id=1932820): Remove kube-apiserver-availability.rules [#1069](https://github.com/openshift/cluster-monitoring-operator/pull/1069) * [Bug 1930876](https://bugzilla.redhat.com/show_bug.cgi?id=1930876): etcdInsufficientMembers is wrong when etcd is in a pod [#1066](https://github.com/openshift/cluster-monitoring-operator/pull/1066) * [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/51e4220feeac45c25e95aed2f931710f8e5314d4...da421b0e3c3362771e8d91befdd934ac09697db1) ### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/01c8bd041411bcae01abcee6c9201337742ebd7f) * [Bug 1936719](https://bugzilla.redhat.com/show_bug.cgi?id=1936719): OSD-6600 network-metrics missing priorityClass [#1007](https://github.com/openshift/cluster-network-operator/pull/1007) * [Bug 1927321](https://bugzilla.redhat.com/show_bug.cgi?id=1927321): competing connectivitycheckcontrollers cause pod restarts during upgrades [#1050](https://github.com/openshift/cluster-network-operator/pull/1050) * [Bug 1941212](https://bugzilla.redhat.com/show_bug.cgi?id=1941212): The Multus daemonset should handle 10% maxUnavailable [#1030](https://github.com/openshift/cluster-network-operator/pull/1030) * [Bug 1940806](https://bugzilla.redhat.com/show_bug.cgi?id=1940806): OVN Upgrade: fix upgrade order of node and master [#1029](https://github.com/openshift/cluster-network-operator/pull/1029) * [Bug 1929371](https://bugzilla.redhat.com/show_bug.cgi?id=1929371): Don't set ClusterOperator Version until rollout is complete [#983](https://github.com/openshift/cluster-network-operator/pull/983) * [Bug 1937829](https://bugzilla.redhat.com/show_bug.cgi?id=1937829): Cherry-pick dual stack migration [#1017](https://github.com/openshift/cluster-network-operator/pull/1017) * [Bug 1928028](https://bugzilla.redhat.com/show_bug.cgi?id=1928028): Kuryr: Let Kuryr autodetect primary CNI interface [#978](https://github.com/openshift/cluster-network-operator/pull/978) * [Bug 1935473](https://bugzilla.redhat.com/show_bug.cgi?id=1935473): Include LB members for Machines created on day-2 operation [#1002](https://github.com/openshift/cluster-network-operator/pull/1002) * [Bug 1929168](https://bugzilla.redhat.com/show_bug.cgi?id=1929168): Kuryr: Always set worker_nodes_subnets [#987](https://github.com/openshift/cluster-network-operator/pull/987) * [Full changelog](https://github.com/openshift/cluster-network-operator/compare/b760580bb703ef3db6b9a04df17b3ff2a158464e...01c8bd041411bcae01abcee6c9201337742ebd7f) ### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/78e1417e306a54b589c5cfce659f672a74bc0456) * [Bug 1928614](https://bugzilla.redhat.com/show_bug.cgi?id=1928614): Keep ignition units in sync with [service] plugin. [#215](https://github.com/openshift/cluster-node-tuning-operator/pull/215) * [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/24392937d275074c73294d3e02ea71b2f1e16299...78e1417e306a54b589c5cfce659f672a74bc0456) ### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/e9dac4b23fb59c58a34d8d6533dd6bc1b6939ea3) * [Bug 1927321](https://bugzilla.redhat.com/show_bug.cgi?id=1927321): competing connectivitycheckcontrollers cause pod restarts during upgrades [#444](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/444) * [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/3e7d4b41ef5c311b1bdc58490bdf5b5655cfa22c...e9dac4b23fb59c58a34d8d6533dd6bc1b6939ea3) ### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/245005e3065238ecd4aef208c21456afa09ec38e) * [Bug 1944142](https://bugzilla.redhat.com/show_bug.cgi?id=1944142): Bump kubernetes to 0.20.5 [#204](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/204) * [Bug 1931856](https://bugzilla.redhat.com/show_bug.cgi?id=1931856): Set registry routes in operand config [#199](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/199) * [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/7d311b378ea9ccbf486a9fea9bce8ef53345c5ef...245005e3065238ecd4aef208c21456afa09ec38e) ### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/42791bac64066daac0922b3d77e4bd86edae3b4e) * [Bug 1924496](https://bugzilla.redhat.com/show_bug.cgi?id=1924496): Bump github.com/gogo/protobuf to v1.3.2 [#58](https://github.com/openshift/cluster-policy-controller/pull/58) * [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/3ca5e1497a1d77b5337701087b4bdbcd81283f9f...42791bac64066daac0922b3d77e4bd86edae3b4e) ### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/257793946a0655f7af4597c3b7da2de2b4249702) * [Bug 1950808](https://bugzilla.redhat.com/show_bug.cgi?id=1950808): add DeepCopy to avoid SharedInformer cache mutation [#370](https://github.com/openshift/cluster-samples-operator/pull/370) * [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/c283ca0858ce3a6bc7e64f2b7d1c3e61cc351aab...257793946a0655f7af4597c3b7da2de2b4249702) ### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/41d14d4c27e274b236426ef80d2144cf46ded532) * [Bug 1919356](https://bugzilla.redhat.com/show_bug.cgi?id=1919356): Add IBM Cloud managed annotations to CVO manifests [#24](https://github.com/openshift/cluster-update-keys/pull/24) * [Full changelog](https://github.com/openshift/cluster-update-keys/compare/75a97e9bf5e9101f547be7bf3bb2310836e18837...41d14d4c27e274b236426ef80d2144cf46ded532) ### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/1db886781f4e1f18965e60d89da80ec1d677228b) * [Bug 1943754](https://bugzilla.redhat.com/show_bug.cgi?id=1943754): Ensure automountServiceAccountToken is synced on service account updates [#539](https://github.com/openshift/cluster-version-operator/pull/539) * [Bug 1941217](https://bugzilla.redhat.com/show_bug.cgi?id=1941217): pkg/cvo/sync_worker: Skip precreation of baremetal ClusterOperator [#534](https://github.com/openshift/cluster-version-operator/pull/534) * [Bug 1926795](https://bugzilla.redhat.com/show_bug.cgi?id=1926795): install/0000_90_cluster-version-operator_02_servicemonitor.yaml: adjust "CannotRetrieveUpdates" to "warning" [#516](https://github.com/openshift/cluster-version-operator/pull/516) * [Bug 1921413](https://bugzilla.redhat.com/show_bug.cgi?id=1921413): pkg/start: Fix shutdown deadlock when die before getting a leader lock [#521](https://github.com/openshift/cluster-version-operator/pull/521) * [Full changelog](https://github.com/openshift/cluster-version-operator/compare/9e25ac8815dbf0d7b97dc640ad78071e49391a54...1db886781f4e1f18965e60d89da80ec1d677228b) ### [console](https://github.com/openshift/console/tree/39b08772b0fcce105c81319b796d897e358ece95) * [Bug 1942843](https://bugzilla.redhat.com/show_bug.cgi?id=1942843): Modified description for storage class encryption - 4.7 Backport [#8462](https://github.com/openshift/console/pull/8462) * [Bug 1948938](https://bugzilla.redhat.com/show_bug.cgi?id=1948938): [release-4.7] Prow script point to deleted resource [#8619](https://github.com/openshift/console/pull/8619) * [Bug 1944855](https://bugzilla.redhat.com/show_bug.cgi?id=1944855): Update Dockerfile.product for nodejs v14.16.0 [#8488](https://github.com/openshift/console/pull/8488) * [Bug 1945153](https://bugzilla.redhat.com/show_bug.cgi?id=1945153): Remove pipeline Tech preview badge for pipelines GA operator [#8528](https://github.com/openshift/console/pull/8528) * [Bug 1943643](https://bugzilla.redhat.com/show_bug.cgi?id=1943643): fix pipeline metrics endpoint for 1.4 osp [#8489](https://github.com/openshift/console/pull/8489) * [Bug 1944349](https://bugzilla.redhat.com/show_bug.cgi?id=1944349): fix backwards incompatible trigger api changes [#8503](https://github.com/openshift/console/pull/8503) * [Bug 1943441](https://bugzilla.redhat.com/show_bug.cgi?id=1943441): Add 'Roll Back' action for Replication Controllers and Replica Sets [#8475](https://github.com/openshift/console/pull/8475) * [Bug 1925792](https://bugzilla.redhat.com/show_bug.cgi?id=1925792): Fix translation for edit annotation [#8078](https://github.com/openshift/console/pull/8078) * [Bug 1941468](https://bugzilla.redhat.com/show_bug.cgi?id=1941468): Change link for not available state [#8431](https://github.com/openshift/console/pull/8431) * [Bug 1939608](https://bugzilla.redhat.com/show_bug.cgi?id=1939608): Fix null handling in FilterToolbar_ to prevent possible exceptions [#8394](https://github.com/openshift/console/pull/8394) * [Bug 1937356](https://bugzilla.redhat.com/show_bug.cgi?id=1937356): Fix to show correct internal image-stream name in container image edit flow's internal registry image-stream dropdown for kn service [#8353](https://github.com/openshift/console/pull/8353) * [Bug 1927198](https://bugzilla.redhat.com/show_bug.cgi?id=1927198): fix pvc string in pvc.view [#8126](https://github.com/openshift/console/pull/8126) * [Bug 1927311](https://bugzilla.redhat.com/show_bug.cgi?id=1927311): avoid 404 errors attempting to load en-US [#8128](https://github.com/openshift/console/pull/8128) * [Bug 1931382](https://bugzilla.redhat.com/show_bug.cgi?id=1931382): Hide pipeline section in container image edit flow [#8209](https://github.com/openshift/console/pull/8209) * [Bug 1933665](https://bugzilla.redhat.com/show_bug.cgi?id=1933665): [release-4.7] Create ImageStream and other resources for samples step by step [#8255](https://github.com/openshift/console/pull/8255) * [Bug 1935672](https://bugzilla.redhat.com/show_bug.cgi?id=1935672): [release-4.7] fix pipelinerun status icon rendering issue [#8311](https://github.com/openshift/console/pull/8311) * [Bug 1932272](https://bugzilla.redhat.com/show_bug.cgi?id=1932272): Fix KMS validation error for 4.7 release [#8221](https://github.com/openshift/console/pull/8221) * [Bug 1937313](https://bugzilla.redhat.com/show_bug.cgi?id=1937313): Removed loaded prop and nested component [#8351](https://github.com/openshift/console/pull/8351) * [Bug 1936803](https://bugzilla.redhat.com/show_bug.cgi?id=1936803): support service binding operator version 0.5.0 [#8335](https://github.com/openshift/console/pull/8335) * [Bug 1937469](https://bugzilla.redhat.com/show_bug.cgi?id=1937469): Pod/node/ip/template isn't showing when vm is running [#8357](https://github.com/openshift/console/pull/8357) * [Bug 1932277](https://bugzilla.redhat.com/show_bug.cgi?id=1932277): Create new pool with arbiter - wrong replica (4.7 release) [#8234](https://github.com/openshift/console/pull/8234) * [Bug 1930152](https://bugzilla.redhat.com/show_bug.cgi?id=1930152): Do not fail new VM wizard when no storage classes are available [#8190](https://github.com/openshift/console/pull/8190) * [Bug 1937086](https://bugzilla.redhat.com/show_bug.cgi?id=1937086): Fix topology crash due to selfLink deprecation [#8317](https://github.com/openshift/console/pull/8317) * [Bug 1928228](https://bugzilla.redhat.com/show_bug.cgi?id=1928228): retry co-fetch on 409 POST or 429 [#8154](https://github.com/openshift/console/pull/8154) * [Bug 1932151](https://bugzilla.redhat.com/show_bug.cgi?id=1932151): Fix rendering of access-mode selector [#8229](https://github.com/openshift/console/pull/8229) * [Bug 1929198](https://bugzilla.redhat.com/show_bug.cgi?id=1929198): allow choice of binding type when creating RoleBinding [#8172](https://github.com/openshift/console/pull/8172) * [Bug 1928023](https://bugzilla.redhat.com/show_bug.cgi?id=1928023): Consider finally tasks when calculating task status [#8149](https://github.com/openshift/console/pull/8149) * [Bug 1927407](https://bugzilla.redhat.com/show_bug.cgi?id=1927407): update pf virtualized dependency to fix breakpoint prop missing in virtualized table [#8130](https://github.com/openshift/console/pull/8130) * [Bug 1932968](https://bugzilla.redhat.com/show_bug.cgi?id=1932968): Fix to avoid overriding of d/dc pod template container values [#8248](https://github.com/openshift/console/pull/8248) * [Bug 1926830](https://bugzilla.redhat.com/show_bug.cgi?id=1926830): [CI][e2e] Add storage.bind.immediate.requested annotation to golden image dvs [#8245](https://github.com/openshift/console/pull/8245) * [Full changelog](https://github.com/openshift/console/compare/0466794b54165e28941dd5f3c4486b40f2762f54...39b08772b0fcce105c81319b796d897e358ece95) ### [console-operator](https://github.com/openshift/console-operator/tree/4f933d59784bd37216466ca329ea51fc797b99a1) * [Bug 1936337](https://bugzilla.redhat.com/show_bug.cgi?id=1936337): Check for error when generating default and user-defined config for the console-config configmap [#512](https://github.com/openshift/console-operator/pull/512) * [Full changelog](https://github.com/openshift/console-operator/compare/c1efdfc6294cd32c071142da770b9410a97aff3c...4f933d59784bd37216466ca329ea51fc797b99a1) ### [csi-driver-manila, openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack/tree/5202bfdc042bafa732f19dcbec31ca6137fa3fa4) * [Bug 1933659](https://bugzilla.redhat.com/show_bug.cgi?id=1933659): Add udev to the driver image [#47](https://github.com/openshift/cloud-provider-openstack/pull/47) * [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/7def9722bc0c3c34336ceee8331eee27ec3f4c7f...5202bfdc042bafa732f19dcbec31ca6137fa3fa4) ### [docker-builder](https://github.com/openshift/builder/tree/df50aa9a4dd8e378d77c398b4d5c55211b9d14ba) * [Bug 1943726](https://bugzilla.redhat.com/show_bug.cgi?id=1943726): add bracket logging on openshift/builder calls into buildah to assist test-platform team triage [#237](https://github.com/openshift/builder/pull/237) * [Bug 1945692](https://bugzilla.redhat.com/show_bug.cgi?id=1945692): move entitlement related secrets back to mounts.conf [#240](https://github.com/openshift/builder/pull/240) * [Bug 1924554](https://bugzilla.redhat.com/show_bug.cgi?id=1924554): bump(cni) 0.8.1 [#234](https://github.com/openshift/builder/pull/234) * [Bug 1940052](https://bugzilla.redhat.com/show_bug.cgi?id=1940052): retry image pulls during builds [#226](https://github.com/openshift/builder/pull/226) * [Bug 1939218](https://bugzilla.redhat.com/show_bug.cgi?id=1939218): bump(containers/*): [#224](https://github.com/openshift/builder/pull/224) * [Full changelog](https://github.com/openshift/builder/compare/67e88c5fafb9c49f228f48810e34af07db9581f0...df50aa9a4dd8e378d77c398b4d5c55211b9d14ba) ### [etcd](https://github.com/openshift/etcd/tree/45b6800c4fab213e7afee1e406abe48cc14ee020) * [ETCD-178](https://issues.redhat.com/browse/ETCD-178): Bug 1944386: openshift-tools: fix on off flow and add unit tests [#74](https://github.com/openshift/etcd/pull/74) * Updating ose-etcd builder & base images to be consistent with ART [#67](https://github.com/openshift/etcd/pull/67) * [Full changelog](https://github.com/openshift/etcd/compare/2afb11e155d34d669152df23f548af2047e5d3b4...45b6800c4fab213e7afee1e406abe48cc14ee020) ### [gcp-machine-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/7215497c95a43c5f633bc511e3e85dd1d956a931) * [Bug 1935636](https://bugzilla.redhat.com/show_bug.cgi?id=1935636): Ensure response body is closed when we are finished with the request [#151](https://github.com/openshift/cluster-api-provider-gcp/pull/151) * [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/186b21520ddb0f1e29d3a709715369135fcaebcd...7215497c95a43c5f633bc511e3e85dd1d956a931) ### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/3583e00c7ff4f31957c0e9223d8c1dea3f4c23c3) * Updating ose-gcp-pd-csi-driver-operator builder & base images to be consistent with ART [#11](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/11) * [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/a45832bfce49e318b29e5c69849aa01d8f0b5adc...3583e00c7ff4f31957c0e9223d8c1dea3f4c23c3) ### [grafana](https://github.com/openshift/grafana/tree/b02c35dc2d01fce696a3edc28839a9f9fd0150a3) * Updating grafana builder & base images to be consistent with ART [#54](https://github.com/openshift/grafana/pull/54) * [Full changelog](https://github.com/openshift/grafana/compare/cf0a81cb4b68a2543249def193e1b83e94734725...b02c35dc2d01fce696a3edc28839a9f9fd0150a3) ### [haproxy-router](https://github.com/openshift/router/tree/130b5993726c46e83ca871a97a930d73f2c433a8) * [Bug 1942534](https://bugzilla.redhat.com/show_bug.cgi?id=1942534): [4.7 backport] Route gets admitted with invalid host name if override annotation is used [#273](https://github.com/openshift/router/pull/273) * [Bug 1938921](https://bugzilla.redhat.com/show_bug.cgi?id=1938921): router/template: Cache compiled regular expressions [#269](https://github.com/openshift/router/pull/269) * [Full changelog](https://github.com/openshift/router/compare/30e2fb5b65753e6b6593f61b16768a5229b5bd97...130b5993726c46e83ca871a97a930d73f2c433a8) ### [hello-openshift, tests](https://github.com/openshift/origin/tree/17e0bb8eadaee7e8bd2a2cb87720f6b871feade2) * [Bug 1942055](https://bugzilla.redhat.com/show_bug.cgi?id=1942055): upgrade/upgrade.go: Enhance upgrade ack time out error [#26012](https://github.com/openshift/origin/pull/26012) * [Bug 1941574](https://bugzilla.redhat.com/show_bug.cgi?id=1941574): test/extended/router/idle: skip test on virt platforms [#25999](https://github.com/openshift/origin/pull/25999) * [Bug 1940866](https://bugzilla.redhat.com/show_bug.cgi?id=1940866): Add BareMetalPlatformType into e2e upgrade service unsupported list [#25989](https://github.com/openshift/origin/pull/25989) * [Bug 1927953](https://bugzilla.redhat.com/show_bug.cgi?id=1927953): test/extended/router/idle: address flakes/failures seen in CI [#25892](https://github.com/openshift/origin/pull/25892) * [Bug 1931622](https://bugzilla.redhat.com/show_bug.cgi?id=1931622): test: add vsphere to unsupported platforms for LB service [#25913](https://github.com/openshift/origin/pull/25913) * [Bug 1932806](https://bugzilla.redhat.com/show_bug.cgi?id=1932806): release-4.7: e2e: test OAuth API connections in the tests by that name [#25894](https://github.com/openshift/origin/pull/25894) * [Bug 1935707](https://bugzilla.redhat.com/show_bug.cgi?id=1935707): [release-4.7] test: Detect when the master pool is still updating after upgrade [#25941](https://github.com/openshift/origin/pull/25941) * [Bug 1931401](https://bugzilla.redhat.com/show_bug.cgi?id=1931401): fix sig-cli flakes [#25910](https://github.com/openshift/origin/pull/25910) * [Bug 1939477](https://bugzilla.redhat.com/show_bug.cgi?id=1939477): Update tests to use Ruby 2.7 [#25966](https://github.com/openshift/origin/pull/25966) * [Bug 1927554](https://bugzilla.redhat.com/show_bug.cgi?id=1927554): adjust route host for redis/nodejs/cakephp to accomodate new apiserver restrictions [#25884](https://github.com/openshift/origin/pull/25884) * [Full changelog](https://github.com/openshift/origin/compare/98a759fa802ab87153d0c75b18bc977a91154f69...17e0bb8eadaee7e8bd2a2cb87720f6b871feade2) ### [hyperkube](https://github.com/openshift/kubernetes/tree/7d0a2b269a27413f5f125d30c9d726684886c69a) * [Bug 1945856](https://bugzilla.redhat.com/show_bug.cgi?id=1945856): 99729:Only system-node-critical pods should be OOM Killed last [#642](https://github.com/openshift/kubernetes/pull/642) * [Bug 1927717](https://bugzilla.redhat.com/show_bug.cgi?id=1927717): UPSTREAM: 98939: fixes race in TestSyncPodsDeletesWhenSourcesAreReady [#567](https://github.com/openshift/kubernetes/pull/567) * [Bug 1931702](https://bugzilla.redhat.com/show_bug.cgi?id=1931702): UPSTREAM: 96958: kubelet: remove periodic messages from log-level 2 [#589](https://github.com/openshift/kubernetes/pull/589) * [Bug 1931745](https://bugzilla.redhat.com/show_bug.cgi?id=1931745): UPSTREAM: 98956: Fix race when KillPod followed by IsPodPendingTermining [#590](https://github.com/openshift/kubernetes/pull/590) * [Bug 1929674](https://bugzilla.redhat.com/show_bug.cgi?id=1929674): kubelet: fix create sandbox delete pod race [#591](https://github.com/openshift/kubernetes/pull/591) * [Bug 1933094](https://bugzilla.redhat.com/show_bug.cgi?id=1933094): UPSTREAM: 98742: Sync completed pods until their containers have been terminated [#595](https://github.com/openshift/kubernetes/pull/595) * [Full changelog](https://github.com/openshift/kubernetes/compare/5fbfd197c16d3c5facbaa1d7b9f3ea58cf6b36e9...7d0a2b269a27413f5f125d30c9d726684886c69a) ### [insights-operator](https://github.com/openshift/insights-operator/tree/23a298922d25de761c8f765625d6ebb63a25774e) * [Bug 1942068](https://bugzilla.redhat.com/show_bug.cgi?id=1942068): Gahter datahubs.installers.datahub.sap.com resources from SAP clusters (#383) [#383](https://github.com/openshift/insights-operator/pull/383) * [Bug 1939061](https://bugzilla.redhat.com/show_bug.cgi?id=1939061): Sap license management logs gatherer 4.7 (#372) [#372](https://github.com/openshift/insights-operator/pull/372) * Adds memory usage to the metadata (#364) [#364](https://github.com/openshift/insights-operator/pull/364) * [Bug 1935070](https://bugzilla.redhat.com/show_bug.cgi?id=1935070): Extend the OLM operator data with related … (#362) [#362](https://github.com/openshift/insights-operator/pull/362) * [Bug 1934442](https://bugzilla.redhat.com/show_bug.cgi?id=1934442): Gather info about unhealthy SAP pods (#360) [#360](https://github.com/openshift/insights-operator/pull/360) * [Bug 1936802](https://bugzilla.redhat.com/show_bug.cgi?id=1936802): Authentication log gatherer - do not scan all the pods in openshfit-authentication (#369) [#369](https://github.com/openshift/insights-operator/pull/369) * [Bug 1936861](https://bugzilla.redhat.com/show_bug.cgi?id=1936861): Include namespace name in binarydata configmap path & test (#368) (#370) [#368](https://github.com/openshift/insights-operator/pull/368) * [Bug 1925659](https://bugzilla.redhat.com/show_bug.cgi?id=1925659): Relax the recent log gatherers to avoid degrading during… (#331) [#331](https://github.com/openshift/insights-operator/pull/331) * [Full changelog](https://github.com/openshift/insights-operator/compare/f775f04ad38f7fbd40b13fc9a6593f75ed7c3896...23a298922d25de761c8f765625d6ebb63a25774e) ### [installer](https://github.com/vrutkovs/installer/tree/03d84764dfdffec49e0d24ad0463d1f5e1acf027) * [Bug 1935174](https://bugzilla.redhat.com/show_bug.cgi?id=1935174): RHCOS bump for LUKS, prjquota, etc [#4791](https://github.com/vrutkovs/installer/pull/4791) * [Bug 1947122](https://bugzilla.redhat.com/show_bug.cgi?id=1947122): gcp: install google cloud sdk with yum the recommended way [#4824](https://github.com/vrutkovs/installer/pull/4824) * [Bug 1933728](https://bugzilla.redhat.com/show_bug.cgi?id=1933728): baremetal: include netmask in DNSMasq dhcp range [#4698](https://github.com/vrutkovs/installer/pull/4698) * [Bug 1930106](https://bugzilla.redhat.com/show_bug.cgi?id=1930106): bump ignition to v3_2 [#4701](https://github.com/vrutkovs/installer/pull/4701) * [Bug 1922292](https://bugzilla.redhat.com/show_bug.cgi?id=1922292): [release-4.7] data/rhcos.json: Update boot images [#4635](https://github.com/vrutkovs/installer/pull/4635) * [Full changelog](https://github.com/vrutkovs/installer/compare/a005bb9eddcbc97e4cac2cdf4436fe2d524cc75e...03d84764dfdffec49e0d24ad0463d1f5e1acf027) ### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/4cdc8c311630d0d9807accb12e63bbfa8bbc3ad4) * Updating ironic-rhcos-downloader builder & base images to be consistent with ART [#34](https://github.com/openshift/ironic-rhcos-downloader/pull/34) * [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/4ff1a017e2e00d572cdb6969dc178d4a91b0d1e2...4cdc8c311630d0d9807accb12e63bbfa8bbc3ad4) ### [jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/503e5770e622bf78a746628a8b276a2616365135) * [release 4.7] Bug 1929118: update kubernetes-client-api [#1230](https://github.com/openshift/jenkins/pull/1230) * [Bug 1925484](https://bugzilla.redhat.com/show_bug.cgi?id=1925484): Upgrade Jenkins to 2.263.3 [#1220](https://github.com/openshift/jenkins/pull/1220) * [Full changelog](https://github.com/openshift/jenkins/compare/4d8af8fd82a5c8dd4d8f7c40f11c73f971f638f1...503e5770e622bf78a746628a8b276a2616365135) ### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/2310aee1ebfca13a25162f754908e35aa1550d6d) * [Bug 1941993](https://bugzilla.redhat.com/show_bug.cgi?id=1941993): Fix incorrect unmonitoring of egress nodes [#279](https://github.com/openshift/sdn/pull/279) * [Bug 1924830](https://bugzilla.redhat.com/show_bug.cgi?id=1924830): CVE-2021-3121 gogo/protobuf lacks certain index validation [#265](https://github.com/openshift/sdn/pull/265) * [Bug 1936920](https://bugzilla.redhat.com/show_bug.cgi?id=1936920): networkpolicy: pass traffic through NAT to handle possible tuple collisions [#272](https://github.com/openshift/sdn/pull/272) * [Bug 1928304](https://bugzilla.redhat.com/show_bug.cgi?id=1928304): Prefer local endpoint for cluster DNS service [#259](https://github.com/openshift/sdn/pull/259) * [Full changelog](https://github.com/openshift/sdn/compare/6cc7a66e222779b74b37cc6ac9c6c636e8adea7f...2310aee1ebfca13a25162f754908e35aa1550d6d) ### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/d49acc455c98dead4995e34add0bf9f3e6e7324b) * [Bug 1938960](https://bugzilla.redhat.com/show_bug.cgi?id=1938960): Ignore headless services in NP code [#487](https://github.com/openshift/kuryr-kubernetes/pull/487) * [Bug 1938960](https://bugzilla.redhat.com/show_bug.cgi?id=1938960): Do not default protocol to TCP for allow-all NPs [#480](https://github.com/openshift/kuryr-kubernetes/pull/480) * [Bug 1930017](https://bugzilla.redhat.com/show_bug.cgi?id=1930017): Narrow connection to the cluster only on namespaceSelector [#460](https://github.com/openshift/kuryr-kubernetes/pull/460) * [Bug 1928029](https://bugzilla.redhat.com/show_bug.cgi?id=1928029): Get trunks more diligently [#449](https://github.com/openshift/kuryr-kubernetes/pull/449) * [Bug 1929168](https://bugzilla.redhat.com/show_bug.cgi?id=1929168): OpenShift: Add configured subnets to the detected [#457](https://github.com/openshift/kuryr-kubernetes/pull/457) * [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/223c9a0827d8c557162976ce08a63c4fa8126049...d49acc455c98dead4995e34add0bf9f3e6e7324b) ### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/033be25ca038fe773b23c076e9ac64926de72474) * [Bug 1938316](https://bugzilla.redhat.com/show_bug.cgi?id=1938316): [release-4.7] Update MAO and set metrics on :8081 address [#219](https://github.com/openshift/cluster-api-provider-libvirt/pull/219) * [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/b57e18b197838f6d6c377cca00fd47f9af645f3f...033be25ca038fe773b23c076e9ac64926de72474) ### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/a00ea96d676b2b87a7de6f8ad2cac09ed2f14c67) * [Bug 1929721](https://bugzilla.redhat.com/show_bug.cgi?id=1929721): Add SecurityProfile.EncryptionAtHost parameter to enable host-based VM encryption [#818](https://github.com/openshift/machine-api-operator/pull/818) * [Bug 1934798](https://bugzilla.redhat.com/show_bug.cgi?id=1934798): reuse mgr client in webhooks [#821](https://github.com/openshift/machine-api-operator/pull/821) * [Full changelog](https://github.com/openshift/machine-api-operator/compare/96d954d0c1916b44882a3385cdbf5d3322c81dcc...a00ea96d676b2b87a7de6f8ad2cac09ed2f14c67) ### [machine-os-content](https://github.com/openshift/okd-machine-os/tree/570737f3da52045a7082d24effea2f95272524ef) * Strip xattrs [#112](https://github.com/openshift/okd-machine-os/pull/112) * overlay: add NetworkManager config to prevent requesting additional MAC [#109](https://github.com/openshift/okd-machine-os/pull/109) * overlay: add dhcp-client-identifier [#101](https://github.com/openshift/okd-machine-os/pull/101) * manifests: add include.release annotations [#98](https://github.com/openshift/okd-machine-os/pull/98) * Switch to stable FCOS stream [#96](https://github.com/openshift/okd-machine-os/pull/96) * [Full changelog](https://github.com/openshift/okd-machine-os/compare/0b29c4d767dc36b48c9bdc7ab8786fc4e83cec33...570737f3da52045a7082d24effea2f95272524ef) ### [multus-cni](https://github.com/openshift/multus-cni/tree/5530094db7607fc9292e3b269fcf5a85b0dad3df) * [Bug 1927896](https://bugzilla.redhat.com/show_bug.cgi?id=1927896): make a copy of global RuntimeConfig on merge [#91](https://github.com/openshift/multus-cni/pull/91) * [Bug 1936334](https://bugzilla.redhat.com/show_bug.cgi?id=1936334): Updating multus-cni builder & base images to be consistent with ART [#81](https://github.com/openshift/multus-cni/pull/81) * [Full changelog](https://github.com/openshift/multus-cni/compare/7aa53b3cb5ae0ae4b03906803c7aff37447d4357...5530094db7607fc9292e3b269fcf5a85b0dad3df) ### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/dfe6b395b67c0cede73e6edf758976ae208b930c) * [Bug 1931950](https://bugzilla.redhat.com/show_bug.cgi?id=1931950): [backport 4.7] Fix for IPv6 when leading hextets equal zero [#49](https://github.com/openshift/whereabouts-cni/pull/49) * [Full changelog](https://github.com/openshift/whereabouts-cni/compare/900aa4231bd31026b3a305f8077c8959f51d8059...dfe6b395b67c0cede73e6edf758976ae208b930c) ### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/69f527e90f599e0f509cfce73ba7b95656f03f7f) * [Bug 1917904](https://bugzilla.redhat.com/show_bug.cgi?id=1917904): bump k8s.io/apiserver to 1.20.4 [#43](https://github.com/openshift/oauth-apiserver/pull/43) * [Full changelog](https://github.com/openshift/oauth-apiserver/compare/d00e67a0b5e0d7c303b201a5bbcb943a9bc26774...69f527e90f599e0f509cfce73ba7b95656f03f7f) ### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/a0f41548179e57e9b184a3e713ac6227cc4385ff) * [Bug 1917904](https://bugzilla.redhat.com/show_bug.cgi?id=1917904): bump k8s.io/apiserver to 1.20.4 [#187](https://github.com/openshift/openshift-apiserver/pull/187) * [Full changelog](https://github.com/openshift/openshift-apiserver/compare/d7ccc71549d84594bfc7f5deda2ed61de7bde100...a0f41548179e57e9b184a3e713ac6227cc4385ff) ### [operator-lifecycle-manager](https://github.com/operator-framework/operator-lifecycle-manager/tree/cdf51cddb619e84e2ce5be78ab2d7e7f6d748ec6) * [Bug 1947909](https://bugzilla.redhat.com/show_bug.cgi?id=1947909): Do not adopt copied CSVs [#2089](https://github.com/operator-framework/operator-lifecycle-manager/pull/2089) * [Bug 1937375](https://bugzilla.redhat.com/show_bug.cgi?id=1937375): only override deployment resources when explicitly defined in subscription config [#2036](https://github.com/operator-framework/operator-lifecycle-manager/pull/2036) * [Bug 1933839](https://bugzilla.redhat.com/show_bug.cgi?id=1933839): bump k8s.io/apiserver for webhook authorizer panic fix [#2022](https://github.com/operator-framework/operator-lifecycle-manager/pull/2022) * [Bug 1936707](https://bugzilla.redhat.com/show_bug.cgi?id=1936707): Allow non-CSV-owned ServiceAccounts to satisfy CSV requirements. [#2034](https://github.com/operator-framework/operator-lifecycle-manager/pull/2034) * [Bug 1938405](https://bugzilla.redhat.com/show_bug.cgi?id=1938405): Support jittering relatively small resync intervals. [#2041](https://github.com/operator-framework/operator-lifecycle-manager/pull/2041) * Updating operator-lifecycle-manager builder & base images to be consistent with ART [#2013](https://github.com/operator-framework/operator-lifecycle-manager/pull/2013) * [Bug 1934724](https://bugzilla.redhat.com/show_bug.cgi?id=1934724): fix(resolver): Allow skipped versions to be installed initially [#2027](https://github.com/operator-framework/operator-lifecycle-manager/pull/2027) * [Bug 1929904](https://bugzilla.redhat.com/show_bug.cgi?id=1929904): Infer package name property for unannotated CSVs, if possible. [#2033](https://github.com/operator-framework/operator-lifecycle-manager/pull/2033) * [Bug 1932002](https://bugzilla.redhat.com/show_bug.cgi?id=1932002): Only one of multiple subscriptions to the same package is honored [#2009](https://github.com/operator-framework/operator-lifecycle-manager/pull/2009) * [Full changelog](https://github.com/operator-framework/operator-lifecycle-manager/compare/4b67acc560a790caa37fdff2f2c1a1eb50a4949f...cdf51cddb619e84e2ce5be78ab2d7e7f6d748ec6) ### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/96bab9b9f5bb2c8fce141992230cf75e48f14f78) * Updating marketplace-operator builder & base images to be consistent with ART [#367](https://github.com/operator-framework/operator-marketplace/pull/367) * [Bug 1927456](https://bugzilla.redhat.com/show_bug.cgi?id=1927456): update defaults to 4.7 [#382](https://github.com/operator-framework/operator-marketplace/pull/382) * [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/37d14d1aaaba2cd223469b5d4b2513c1292151a9...96bab9b9f5bb2c8fce141992230cf75e48f14f78) ### [operator-registry](https://github.com/operator-framework/operator-registry/tree/a97d366a92d302ff2056fa2d19aa3e48b0fbc99c) * [Bug 1931903](https://bugzilla.redhat.com/show_bug.cgi?id=1931903): add missing closes [#597](https://github.com/operator-framework/operator-registry/pull/597) * Updating operator-registry builder & base images to be consistent with ART [#584](https://github.com/operator-framework/operator-registry/pull/584) * [Full changelog](https://github.com/operator-framework/operator-registry/compare/6183dbb3567397e759f25752011834f86f47a3ea...a97d366a92d302ff2056fa2d19aa3e48b0fbc99c) ### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/f8808a04dc6bfe7ce36a8238089dbae7ab29cbb6) * [Bug 1929777](https://bugzilla.redhat.com/show_bug.cgi?id=1929777): Run config informers when starting the operator [#49](https://github.com/openshift/ovirt-csi-driver-operator/pull/49) * [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/4831f16a8f43fc3745872ca0ce8a1e7ed1e429db...f8808a04dc6bfe7ce36a8238089dbae7ab29cbb6) ### [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt/tree/01b9bf8368a3da974bf1c9114c618a548d346acd) * [Bug 1939358](https://bugzilla.redhat.com/show_bug.cgi?id=1939358): extract node machine ipaddress from the engine instead using DNS . [#98](https://github.com/openshift/cluster-api-provider-ovirt/pull/98) * [Bug 1939360](https://bugzilla.redhat.com/show_bug.cgi?id=1939360): providerIDController ignore nodes that have no machine [#99](https://github.com/openshift/cluster-api-provider-ovirt/pull/99) * [Bug 1939199](https://bugzilla.redhat.com/show_bug.cgi?id=1939199): move to go 1.15 and registry.ci.openshift.org [#97](https://github.com/openshift/cluster-api-provider-ovirt/pull/97) * [Bug 1927256](https://bugzilla.redhat.com/show_bug.cgi?id=1927256): Bump K8s dependencies to 1.20 [#92](https://github.com/openshift/cluster-api-provider-ovirt/pull/92) * [Full changelog](https://github.com/openshift/cluster-api-provider-ovirt/compare/4708c8bbbf01634892f4699dedb3d7a34392903b...01b9bf8368a3da974bf1c9114c618a548d346acd) ### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/7d1d12fd4ca2206b19cecf61f4b1cb41d8251339) * [Bug 1951552](https://bugzilla.redhat.com/show_bug.cgi?id=1951552): master: Delay deleting Namespace's address set for 20 seconds [#507](https://github.com/openshift/ovn-kubernetes/pull/507) * [Bug 1950432](https://bugzilla.redhat.com/show_bug.cgi?id=1950432): [4.7] pods: bind pod logical switch ports to the node's chassis with requested-chassis [#503](https://github.com/openshift/ovn-kubernetes/pull/503) * [Bug 1924826](https://bugzilla.redhat.com/show_bug.cgi?id=1924826): Backport Update gogo/protobuf to v1.3.2. [#464](https://github.com/openshift/ovn-kubernetes/pull/464) * [Bug 1943316](https://bugzilla.redhat.com/show_bug.cgi?id=1943316): [4.7] master: enable logical datapath groups for OVN >= 20.12 [#478](https://github.com/openshift/ovn-kubernetes/pull/478) * [Bug 1946696](https://bugzilla.redhat.com/show_bug.cgi?id=1946696): iptables: add filter on node local traffic [#489](https://github.com/openshift/ovn-kubernetes/pull/489) * [Bug 1947835](https://bugzilla.redhat.com/show_bug.cgi?id=1947835): Fix service update for policy type assertion [#493](https://github.com/openshift/ovn-kubernetes/pull/493) * [Bug 1942702](https://bugzilla.redhat.com/show_bug.cgi?id=1942702): backport lr-nat-del/add fixes [#484](https://github.com/openshift/ovn-kubernetes/pull/484) * [Bug 1931520](https://bugzilla.redhat.com/show_bug.cgi?id=1931520): Backport Fix ACL syntax for dual-stack [#465](https://github.com/openshift/ovn-kubernetes/pull/465) * [Bug 1943310](https://bugzilla.redhat.com/show_bug.cgi?id=1943310): [4.7] Enable DB memory trimming on compaction [#477](https://github.com/openshift/ovn-kubernetes/pull/477) * [Bug 1932268](https://bugzilla.redhat.com/show_bug.cgi?id=1932268): detect if the cluster has endpoint slices [#442](https://github.com/openshift/ovn-kubernetes/pull/442) * [Bug 1935180](https://bugzilla.redhat.com/show_bug.cgi?id=1935180): Backport Fix mcast querier [#468](https://github.com/openshift/ovn-kubernetes/pull/468) * [Bug 1937829](https://bugzilla.redhat.com/show_bug.cgi?id=1937829): Cherry-pick dual-stack conversion [#460](https://github.com/openshift/ovn-kubernetes/pull/460) * [Bug 1934645](https://bugzilla.redhat.com/show_bug.cgi?id=1934645): Backport enable support for BFD on external gateway routes [#462](https://github.com/openshift/ovn-kubernetes/pull/462) * [Bug 1925475](https://bugzilla.redhat.com/show_bug.cgi?id=1925475): Bump OVN to ovn2.13-20.12.0-24.el8fdp [#451](https://github.com/openshift/ovn-kubernetes/pull/451) * [Bug 1937238](https://bugzilla.redhat.com/show_bug.cgi?id=1937238): Refactor chain setup for NodePort and ExternalIP [#457](https://github.com/openshift/ovn-kubernetes/pull/457) * [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/ef03521f5daede4fe0f8afd9f42035259636006b...7d1d12fd4ca2206b19cecf61f4b1cb41d8251339) ### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/db87872c6aba7e4e9def29b33beea582557ce940) * Updating prom-label-proxy builder & base images to be consistent with ART [#330](https://github.com/openshift/prom-label-proxy/pull/330) * [Full changelog](https://github.com/openshift/prom-label-proxy/compare/88d4df5541251ea122687610870e725b0099213a...db87872c6aba7e4e9def29b33beea582557ce940) ### [telemeter](https://github.com/openshift/telemeter/tree/e4dac5123ef6b3ecb16b5151e2e8f8aeb8b1f21a) * Updating telemeter builder & base images to be consistent with ART [#369](https://github.com/openshift/telemeter/pull/369) * [Full changelog](https://github.com/openshift/telemeter/compare/8742aae6505eebe6a12bffba8223a66ee5fc4a88...e4dac5123ef6b3ecb16b5151e2e8f8aeb8b1f21a) ### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/077d6bef3bc1e003188e0bea4e086c874f97f944) * [Bug 1936975](https://bugzilla.redhat.com/show_bug.cgi?id=1936975): Fix deadlock when enqueing functions into the pool [#35](https://github.com/openshift/vsphere-problem-detector/pull/35) * [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/602c27477b66fd8752b7c39a13b6b948731e60eb...077d6bef3bc1e003188e0bea4e086c874f97f944)