# 4.7.0-0.okd-2021-05-22-050008 Created: 2021-05-22 07:33:35 +0000 UTC Image Digest: `sha256:301cd36b2ab370027ddb0ec43e540a03a24748a25b69578dec504d130475304b` Promoted from registry.ci.openshift.org/origin/release:4.7.0-0.okd-2021-05-22-050008 ## Changes from 4.7.0-0.okd-2021-04-24-103438 ### Components * Kubernetes 1.20.0-beta.2 * Fedora CoreOS upgraded from 33.20210328.3 to 33.20210426.3 ### New images * [driver-toolkit](https://github.com/openshift/driver-toolkit) git [bbf091e6](https://github.com/openshift/driver-toolkit/commit/bbf091e64bb3cf06edd61e39877ebe534037de3c) `sha256:52ce5a78c22547ce1004e1237eac7a8cc652c713a4d575558d215e8fdcf9b14d` ### Rebuilt images without code change * [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [25cbb8d8](https://github.com/openshift/cluster-api-provider-baremetal/commit/25cbb8d8f9e52244ccd6bf459e6dd4b84749de56) `sha256:35db17a664c972925be2ba965644c52c2a4afacf64ad535ceeb90d5314e9ab1c` * [cli](https://github.com/openshift/oc) git [95881afb](https://github.com/openshift/oc/commit/95881afb5df065c250d98cf7f30ee4bb6d281acf) `sha256:32b30da9341bba5829a001657313fc35fce9752c17666b3a8f5f23304b0aa2d8` * [cli-artifacts](https://github.com/openshift/oc) git [95881afb](https://github.com/openshift/oc/commit/95881afb5df065c250d98cf7f30ee4bb6d281acf) `sha256:dc7fdcec14c3dd0910e3e9ebec581d19a6686336577142f9667be3ad6ea7fe6f` * [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator) git [175f8f52](https://github.com/openshift/cluster-baremetal-operator/commit/175f8f5283faebd81fb9d1fb2915eb2682622e1e) `sha256:6d53908627eaf621c37d7a9cfd0e354e67d79003703d45ddb96df849a3dc4e3d` * [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [fd2b47c0](https://github.com/openshift/cluster-storage-operator/commit/fd2b47c06d0c7efae84c6ff44680f9025ac4f283) `sha256:3bc220604da65cdf69d6ed3aa5231c0e876611dd12e7e458779df779448a0d7e` * [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [f77279e9](https://github.com/openshift/csi-external-resizer/commit/f77279e9561a02c18676dbcafcbe6db7d0ebd077) `sha256:3257a73312d45dd3d40bd293dbfa5c36e08748315664acd9ed81b3d7f5433f20` * [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [26773735](https://github.com/openshift/csi-external-snapshotter/commit/26773735c1cbf09de9bf31cb3c640abdca04cd83) `sha256:81e2185a9bc191c9c8228210b473650c519e371751c26d95c70742751aad5734` * [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [3dad0280](https://github.com/openshift/csi-livenessprobe/commit/3dad0280ea630cfcc87bcf02806c75b7a066d81e) `sha256:4df9cecf8dc7544ed02f51540fee778da7c356a7bf3da1fa07bb2def4f32d260` * [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [2a77963e](https://github.com/openshift/csi-node-driver-registrar/commit/2a77963e5458da1bcde318b4609a6abefaf868d7) `sha256:a7867af403524a47fde36dd9df7db4bf311f479b96075ca87331e35e52f273fe` * [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [26773735](https://github.com/openshift/csi-external-snapshotter/commit/26773735c1cbf09de9bf31cb3c640abdca04cd83) `sha256:292cfa81294a015e58ef0a934fd4458955db0fbec6db5c964f06ef1270b50afd` * [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [26773735](https://github.com/openshift/csi-external-snapshotter/commit/26773735c1cbf09de9bf31cb3c640abdca04cd83) `sha256:0cb89f34f95f8f4556f75f40b7ecce28f4af80ca717475460883d09c2e1025f1` * [deployer](https://github.com/openshift/oc) git [95881afb](https://github.com/openshift/oc/commit/95881afb5df065c250d98cf7f30ee4bb6d281acf) `sha256:b4d2e8f274616e719543a8e3887c99336d54142a809a6d6d2e84d82ee79869ee` * [docker-registry](https://github.com/openshift/image-registry) git [8e0c068a](https://github.com/openshift/image-registry/commit/8e0c068aef607fceffe3e179c3a9701f51c51dff) `sha256:a9280162c7af6a5ccee78df57c2ffd416e5fb20fe0eaaf1bbb2f118755e6c24d` * [haproxy-router](https://github.com/openshift/router) git [130b5993](https://github.com/openshift/router/commit/130b5993726c46e83ca871a97a930d73f2c433a8) `sha256:0a211c4f9bbdc47b36df68382e832f24d13d25118ed1e783f9c5408c5d8e1ee5` * [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [033be25c](https://github.com/openshift/cluster-api-provider-libvirt/commit/033be25ca038fe773b23c076e9ac64926de72474) `sha256:301975a9875c68eb7af7263fd5a8581f9827a37a61fc3268f5948ee36615e21a` * [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [471cf3ab](https://github.com/openshift/cluster-api-provider-openstack/commit/471cf3ab636c26ed7c9fba6330374a5ea1b36b43) `sha256:37ebfd8f4dc4a8958ec06d3186363b40287a8df47774d4d6705cbdcdf05037d3` * [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [72545e63](https://github.com/openshift/ovirt-csi-driver/commit/72545e6381b3625bcb37e37c4c713862d04cb145) `sha256:f5896064dd203631adb53d86f6e044b80d071c6c6f67ab7e2b9e4dfa096fef6a` * [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [f8808a04](https://github.com/openshift/ovirt-csi-driver-operator/commit/f8808a04dc6bfe7ce36a8238089dbae7ab29cbb6) `sha256:1214f291361669db31c257f09de3b89cab08a1a94c6c7367b1e0868ed1d3f327` * [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [01b9bf83](https://github.com/openshift/cluster-api-provider-ovirt/commit/01b9bf8368a3da974bf1c9114c618a548d346acd) `sha256:75b54d9bd4661f7258effefe274483f811e01bcd416701411f5c438ad7b7511b` * [tools](https://github.com/openshift/oc) git [95881afb](https://github.com/openshift/oc/commit/95881afb5df065c250d98cf7f30ee4bb6d281acf) `sha256:9f2d169d012c52df093414eba25666010a1a470b907267e518780fde96df0b53` ### [aws-machine-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/82202163e220b32d707f121877ef857535a3f64e) * [Bug 1924471](https://bugzilla.redhat.com/show_bug.cgi?id=1924471): Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 [#409](https://github.com/openshift/cluster-api-provider-aws/pull/409) * [Bug 1952614](https://bugzilla.redhat.com/show_bug.cgi?id=1952614): [OCPCLOUD-1115] Get instance tags from infrastructure object [#405](https://github.com/openshift/cluster-api-provider-aws/pull/405) * [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/2d069b7f8bf4a443ba1a7ac8f669ef05ed92a50e...82202163e220b32d707f121877ef857535a3f64e) ### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/d088f49b436447a29a50958ddafd44e3362fb8ab) * [Bug 1948396](https://bugzilla.redhat.com/show_bug.cgi?id=1948396): oVirt credentials secret contains unnecessary "ovirt_cafile" [#322](https://github.com/openshift/cloud-credential-operator/pull/322) * [Bug 1948702](https://bugzilla.redhat.com/show_bug.cgi?id=1948702): [release-4.7] manifests/0000_90_cloud-credential-operator_04_alertrules: Drop CloudCredentialOperatorDown [#324](https://github.com/openshift/cloud-credential-operator/pull/324) * [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/2aec1a53520e4fc9f8def5bd040e3eca917e3d02...d088f49b436447a29a50958ddafd44e3362fb8ab) ### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/a28bdc97c7f9d1ec4a0a859abeaeda41b37e381f) * [Bug 1956797](https://bugzilla.redhat.com/show_bug.cgi?id=1956797): bump kube to 0.20.6 to prevent delegated authz panics [#443](https://github.com/openshift/cluster-authentication-operator/pull/443) * [Bug 1941840](https://bugzilla.redhat.com/show_bug.cgi?id=1941840): endpoints controller: close response bodies [#440](https://github.com/openshift/cluster-authentication-operator/pull/440) * [Bug 1949941](https://bugzilla.redhat.com/show_bug.cgi?id=1949941): add a scraper and an alert to check for old-style tokens [#437](https://github.com/openshift/cluster-authentication-operator/pull/437) * [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/cf1e1a6c79db7cf29e7de2a90ecdc458bc13059c...a28bdc97c7f9d1ec4a0a859abeaeda41b37e381f) ### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/a3fecc8e7dc5d793eecf8bf77e311f5b29f5e7dd) * [Bug 1924478](https://bugzilla.redhat.com/show_bug.cgi?id=1924478): Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 [#207](https://github.com/openshift/cluster-autoscaler-operator/pull/207) * [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/4b0831e0a8c151850e73ab643c2e15f5ffe22c23...a3fecc8e7dc5d793eecf8bf77e311f5b29f5e7dd) ### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/07e059a6b0c98e98d71f0c08dc741605e2431914) * [Bug 1954152](https://bugzilla.redhat.com/show_bug.cgi?id=1954152): vendor: bump to the latest openshift/api [#200](https://github.com/openshift/cluster-config-operator/pull/200) * [Full changelog](https://github.com/openshift/cluster-config-operator/compare/3bc7ea731d4fe149250fbc8e6805c3004d7967d8...07e059a6b0c98e98d71f0c08dc741605e2431914) ### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/d6ba05f21dacb373c9d3386fc15e755718b03d4d) * [Bug 1953097](https://bugzilla.redhat.com/show_bug.cgi?id=1953097): Corefile: Enable bufsize plugin for all servers [#267](https://github.com/openshift/cluster-dns-operator/pull/267) * [Bug 1953609](https://bugzilla.redhat.com/show_bug.cgi?id=1953609): Enable errors plugin for custom upstream resolvers [#268](https://github.com/openshift/cluster-dns-operator/pull/268) * [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/0dd9bae28a315233ceddcb82cd2332ef7f7614cd...d6ba05f21dacb373c9d3386fc15e755718b03d4d) ### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/9c724b82b3fc7704daf97e493f9092032a37b7fa) * OWNERS: add lilic as reviewer [#588](https://github.com/openshift/cluster-etcd-operator/pull/588) * [Bug 1954073](https://bugzilla.redhat.com/show_bug.cgi?id=1954073): bindata, pkg: Propagate operator log level to etcd itself [#578](https://github.com/openshift/cluster-etcd-operator/pull/578) * [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/ee35da5b3ee486f786d7687849d57599d46dfc2e...9c724b82b3fc7704daf97e493f9092032a37b7fa) ### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/3cbefc795a0d9b8f6194f65d03f194bb4d9fcbce) * [Bug 1955176](https://bugzilla.redhat.com/show_bug.cgi?id=1955176): Setting user provided tags on bucket creation [#682](https://github.com/openshift/cluster-image-registry-operator/pull/682) * [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/538ff7fed284953731785c495cf286ea33d97f50...3cbefc795a0d9b8f6194f65d03f194bb4d9fcbce) ### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/1cf30874211a37e916b0822a0540ff6d34103ab9) * [Bug 1954097](https://bugzilla.redhat.com/show_bug.cgi?id=1954097): Annotate services of type LoadBalancer with user tags (AWS only) [#606](https://github.com/openshift/cluster-ingress-operator/pull/606) * [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/1d9717b7624acee5c40d9a2f6bffbf7e628fd23d...1cf30874211a37e916b0822a0540ff6d34103ab9) ### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/9043e2bba8f4707a578895f8b29d4736a61a010c) * [Bug 1924492](https://bugzilla.redhat.com/show_bug.cgi?id=1924492): Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 [#120](https://github.com/openshift/cluster-machine-approver/pull/120) * [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/6f49a9facf8b2764fa4c1482624fa1f7762e41ed...9043e2bba8f4707a578895f8b29d4736a61a010c) ### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/5b48d8f445f9c0ac3bf99b68c5ee4a909da950b9) * [Bug 1955482](https://bugzilla.redhat.com/show_bug.cgi?id=1955482): Drop high-cardinality metrics from kube-state-metrics which aren't used [#1141](https://github.com/openshift/cluster-monitoring-operator/pull/1141) * [Bug 1955469](https://bugzilla.redhat.com/show_bug.cgi?id=1955469): remove node_mountstats_nfs_* metrics [#1154](https://github.com/openshift/cluster-monitoring-operator/pull/1154) * [Bug 1955462](https://bugzilla.redhat.com/show_bug.cgi?id=1955462): drop container_memory_failures_total metric backport [#1160](https://github.com/openshift/cluster-monitoring-operator/pull/1160) * [Bug 1952149](https://bugzilla.redhat.com/show_bug.cgi?id=1952149): oc adm top reporting unknown status for Windows node [#1130](https://github.com/openshift/cluster-monitoring-operator/pull/1130) * [Bug 1955449](https://bugzilla.redhat.com/show_bug.cgi?id=1955449): drop crio image metrics [#1134](https://github.com/openshift/cluster-monitoring-operator/pull/1134) * [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/da421b0e3c3362771e8d91befdd934ac09697db1...5b48d8f445f9c0ac3bf99b68c5ee4a909da950b9) ### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/341d206ace51e1a9af5411275bcc19130df199b3) * [Bug 1957749](https://bugzilla.redhat.com/show_bug.cgi?id=1957749): ovnkube: add missing resource requests for SBDB [#1088](https://github.com/openshift/cluster-network-operator/pull/1088) * [Bug 1954302](https://bugzilla.redhat.com/show_bug.cgi?id=1954302): Remove OVS daemonsets [#1076](https://github.com/openshift/cluster-network-operator/pull/1076) * [Bug 1956352](https://bugzilla.redhat.com/show_bug.cgi?id=1956352): [4.7] OVN kubernetes dual-stack conversion [#1082](https://github.com/openshift/cluster-network-operator/pull/1082) * [Bug 1941214](https://bugzilla.redhat.com/show_bug.cgi?id=1941214): Use 10% for ovs maxUnavailable for rolling update [#1031](https://github.com/openshift/cluster-network-operator/pull/1031) * [Full changelog](https://github.com/openshift/cluster-network-operator/compare/01c8bd041411bcae01abcee6c9201337742ebd7f...341d206ace51e1a9af5411275bcc19130df199b3) ### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/ecfa2d959fe2afcbd3e947658d267b085a1b2063) * [Bug 1955502](https://bugzilla.redhat.com/show_bug.cgi?id=1955502): explicitly allow apiserver pods to write to their root FS [#449](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/449) * [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/e9dac4b23fb59c58a34d8d6533dd6bc1b6939ea3...ecfa2d959fe2afcbd3e947658d267b085a1b2063) ### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/b7e791773b67f9acd6f521b8c1f69778e43a7d94) * Pack both keys in one verifier-public-key-ci entry [#36](https://github.com/openshift/cluster-update-keys/pull/36) * Adding the new Openshift CI Signer key [#34](https://github.com/openshift/cluster-update-keys/pull/34) * [Full changelog](https://github.com/openshift/cluster-update-keys/compare/41d14d4c27e274b236426ef80d2144cf46ded532...b7e791773b67f9acd6f521b8c1f69778e43a7d94) ### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/ca61c7f365c0c7f0bece192333a387fb80d3e6e1) * [Bug 1959238](https://bugzilla.redhat.com/show_bug.cgi?id=1959238): pkg/cvo/sync_worker: Shift ClusterOperator pre-creation into the manifest-task node [#557](https://github.com/openshift/cluster-version-operator/pull/557) * [Full changelog](https://github.com/openshift/cluster-version-operator/compare/1db886781f4e1f18965e60d89da80ec1d677228b...ca61c7f365c0c7f0bece192333a387fb80d3e6e1) ### [console](https://github.com/openshift/console/tree/110b70f6e5cf53c045a59034e234efbae23ddbe8) * [Bug 1942027](https://bugzilla.redhat.com/show_bug.cgi?id=1942027): Fix RBAC check when creating a resource [#8448](https://github.com/openshift/console/pull/8448) * [Bug 1956336](https://bugzilla.redhat.com/show_bug.cgi?id=1956336): Fix Triggers section in eventlistener details page [#8842](https://github.com/openshift/console/pull/8842) * [Bug 1953937](https://bugzilla.redhat.com/show_bug.cgi?id=1953937): Fixing PVC creation page issue in 4.7(Reverting wrong commit) [#8784](https://github.com/openshift/console/pull/8784) * [Bug 1952578](https://bugzilla.redhat.com/show_bug.cgi?id=1952578): Don't poll ClusterVersion when user doesn't have authority [#8749](https://github.com/openshift/console/pull/8749) * [Bug 1950489](https://bugzilla.redhat.com/show_bug.cgi?id=1950489): Fix "Create binding" link from Role page, RoleBindings tab [#8685](https://github.com/openshift/console/pull/8685) * [Bug 1948958](https://bugzilla.redhat.com/show_bug.cgi?id=1948958): Fix ingress details page to show referenced secret name [#8633](https://github.com/openshift/console/pull/8633) * [Bug 1944955](https://bugzilla.redhat.com/show_bug.cgi?id=1944955): Fix close button in the new 'Storage cluster exists' warning alert modal [#8524](https://github.com/openshift/console/pull/8524) * [Bug 1956313](https://bugzilla.redhat.com/show_bug.cgi?id=1956313): Save additional parameters from build guidance container and drop it [#8841](https://github.com/openshift/console/pull/8841) * [Bug 1953728](https://bugzilla.redhat.com/show_bug.cgi?id=1953728): Fix issues related to loading dynamic plugins [#8780](https://github.com/openshift/console/pull/8780) * [Bug 1945594](https://bugzilla.redhat.com/show_bug.cgi?id=1945594): fixing-project-creation-and-updated-packageJson [#8536](https://github.com/openshift/console/pull/8536) * [Bug 1950214](https://bugzilla.redhat.com/show_bug.cgi?id=1950214): Fix start pipeline action access review [#8681](https://github.com/openshift/console/pull/8681) * [Bug 1948369](https://bugzilla.redhat.com/show_bug.cgi?id=1948369): Remove cluster label from predefined monitoring queries [#8613](https://github.com/openshift/console/pull/8613) * [Bug 1954109](https://bugzilla.redhat.com/show_bug.cgi?id=1954109): Backport telemetry dynamic extension to release-4.7 [#8783](https://github.com/openshift/console/pull/8783) * [Bug 1952209](https://bugzilla.redhat.com/show_bug.cgi?id=1952209): Consistent formatting of dates and times [#8734](https://github.com/openshift/console/pull/8734) * [Bug 1952293](https://bugzilla.redhat.com/show_bug.cgi?id=1952293): adds check for templates [#8736](https://github.com/openshift/console/pull/8736) * [Full changelog](https://github.com/openshift/console/compare/39b08772b0fcce105c81319b796d897e358ece95...110b70f6e5cf53c045a59034e234efbae23ddbe8) ### [gcp-machine-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/5f6589d4ef9496e63ebc072f4d863151bbeb4407) * [Bug 1924508](https://bugzilla.redhat.com/show_bug.cgi?id=1924508): Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 [#164](https://github.com/openshift/cluster-api-provider-gcp/pull/164) * [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/7215497c95a43c5f633bc511e3e85dd1d956a931...5f6589d4ef9496e63ebc072f4d863151bbeb4407) ### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/9ffe95b9499258b8e2b5e1b8df9889abe3c9f73f) * [Bug 1940005](https://bugzilla.redhat.com/show_bug.cgi?id=1940005): Add CSIDriver object [#18](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/18) * [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/3583e00c7ff4f31957c0e9223d8c1dea3f4c23c3...9ffe95b9499258b8e2b5e1b8df9889abe3c9f73f) ### [hello-openshift, tests](https://github.com/openshift/origin/tree/e2edec8d343db108c9db13b70cd7f4e024b8d445) * [Bug 1963115](https://bugzilla.redhat.com/show_bug.cgi?id=1963115): move verify run test from tools to cli image to avoid additional /run content [#26176](https://github.com/openshift/origin/pull/26176) * [Bug 1958797](https://bugzilla.redhat.com/show_bug.cgi?id=1958797): test/extended/router/idle: Only run on OVNKubernetes or OpenShiftSDN [#26145](https://github.com/openshift/origin/pull/26145) * [Bug 1947705](https://bugzilla.redhat.com/show_bug.cgi?id=1947705): Add test of documented backup/restore procedure [#26110](https://github.com/openshift/origin/pull/26110) * [Bug 1955669](https://bugzilla.redhat.com/show_bug.cgi?id=1955669): flake testKubeletToAPIServerGracefulTermination [#26121](https://github.com/openshift/origin/pull/26121) * [Full changelog](https://github.com/openshift/origin/compare/17e0bb8eadaee7e8bd2a2cb87720f6b871feade2...e2edec8d343db108c9db13b70cd7f4e024b8d445) ### [hyperkube](https://github.com/openshift/kubernetes/tree/df9c8387b2dc2308da01706ff89982c6b7ad9c48) * [Bug 1955883](https://bugzilla.redhat.com/show_bug.cgi?id=1955883): UPSTREAM: 99095: Prevent Kubelet stuck in DiskPressure when imagefs minreclaim is set [#725](https://github.com/openshift/kubernetes/pull/725) * [Bug 1951726](https://bugzilla.redhat.com/show_bug.cgi?id=1951726): Speed up PV provisioning for vsphere driver (ocp-4.7) [#690](https://github.com/openshift/kubernetes/pull/690) * [Bug 1942141](https://bugzilla.redhat.com/show_bug.cgi?id=1942141): fixes cinder PV labelling [#635](https://github.com/openshift/kubernetes/pull/635) * [Bug 1951815](https://bugzilla.redhat.com/show_bug.cgi?id=1951815): UPSTREAM: 99393: kubelet: reduce configmap and secret watch [#692](https://github.com/openshift/kubernetes/pull/692) * [Bug 1955231](https://bugzilla.redhat.com/show_bug.cgi?id=1955231): UPSTREAM: 101345: kubelet: improve the node informer sync check [#721](https://github.com/openshift/kubernetes/pull/721) * [Bug 1952917](https://bugzilla.redhat.com/show_bug.cgi?id=1952917): UPSTREAM: 100228: For LoadBalancer Service type don't create a HNS policy for empty or invalid external loadbalancer IP [#697](https://github.com/openshift/kubernetes/pull/697) * [Bug 1928862](https://bugzilla.redhat.com/show_bug.cgi?id=1928862): Enable snapshot tests [#569](https://github.com/openshift/kubernetes/pull/569) * [Full changelog](https://github.com/openshift/kubernetes/compare/7d0a2b269a27413f5f125d30c9d726684886c69a...df9c8387b2dc2308da01706ff89982c6b7ad9c48) ### [insights-operator](https://github.com/openshift/insights-operator/tree/b0817c95c78b7b750ad3f966c500aa8bd7353b42) * [release 4.7] Bug 1953579: GatherClusterOperators and GatherClusterOperatorsPodAndEvents (#410) [#410](https://github.com/openshift/insights-operator/pull/410) * Add vsphere_node_hw_version_total metric (#416) [#416](https://github.com/openshift/insights-operator/pull/416) * [Bug 1950926](https://bugzilla.redhat.com/show_bug.cgi?id=1950926): Extend OLM data with CSV display name (#400) (#402) [#400](https://github.com/openshift/insights-operator/pull/400) * [Full changelog](https://github.com/openshift/insights-operator/compare/23a298922d25de761c8f765625d6ebb63a25774e...b0817c95c78b7b750ad3f966c500aa8bd7353b42) ### [jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/d3eacc24156ef726caae230b9b4620059a76f781) * [release 4.7] Bug 1947810: Update Jenkins to 2.277.3 and disable setup wizard [#1259](https://github.com/openshift/jenkins/pull/1259) * [Bug 1952562](https://bugzilla.redhat.com/show_bug.cgi?id=1952562): bump config-file-provider to 3.7.1 [#1265](https://github.com/openshift/jenkins/pull/1265) * [Full changelog](https://github.com/openshift/jenkins/compare/503e5770e622bf78a746628a8b276a2616365135...d3eacc24156ef726caae230b9b4620059a76f781) ### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/cc43ac5421843c1d6bc8e2c8ed2e322c59ffb35d) * [Bug 1923231](https://bugzilla.redhat.com/show_bug.cgi?id=1923231): rebase to sdn-4.7-kubernetes-1.20.0-rc.0 [#286](https://github.com/openshift/sdn/pull/286) * [Full changelog](https://github.com/openshift/sdn/compare/2310aee1ebfca13a25162f754908e35aa1550d6d...cc43ac5421843c1d6bc8e2c8ed2e322c59ffb35d) ### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/8b61936867e8f3b224f0507685ba0e76e6d3bb95) * [Bug 1959766](https://bugzilla.redhat.com/show_bug.cgi?id=1959766): Fix NPs for OVN LBs with hairpin traffic [#516](https://github.com/openshift/kuryr-kubernetes/pull/516) * [Bug 1929066](https://bugzilla.redhat.com/show_bug.cgi?id=1929066): Skip pool pre population if no Status is present on CRD [#505](https://github.com/openshift/kuryr-kubernetes/pull/505) * [Bug 1941941](https://bugzilla.redhat.com/show_bug.cgi?id=1941941): Include service subnet to be open for namespaceSelector set to all. [#504](https://github.com/openshift/kuryr-kubernetes/pull/504) * [Bug 1929066](https://bugzilla.redhat.com/show_bug.cgi?id=1929066): Fix port pools [#455](https://github.com/openshift/kuryr-kubernetes/pull/455) * [Bug 1949551](https://bugzilla.redhat.com/show_bug.cgi?id=1949551): kuryr-controller restarting after 3 days cluster running - pools without members [#502](https://github.com/openshift/kuryr-kubernetes/pull/502) * [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/d49acc455c98dead4995e34add0bf9f3e6e7324b...8b61936867e8f3b224f0507685ba0e76e6d3bb95) ### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/e179bb5ce397b543cd3f716f75fa4cd40046e0ad) * [Bug 1924517](https://bugzilla.redhat.com/show_bug.cgi?id=1924517): Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 [#867](https://github.com/openshift/machine-api-operator/pull/867) * [Bug 1955689](https://bugzilla.redhat.com/show_bug.cgi?id=1955689): Webhook filter should check for both mutating and validating webhooks [#861](https://github.com/openshift/machine-api-operator/pull/861) * [Bug 1947372](https://bugzilla.redhat.com/show_bug.cgi?id=1947372): vSphere, detach virtual disks before virtual machine destroy if node not available [#841](https://github.com/openshift/machine-api-operator/pull/841) * [Bug 1954610](https://bugzilla.redhat.com/show_bug.cgi?id=1954610): Update GCP default image to match 4.7 release [#856](https://github.com/openshift/machine-api-operator/pull/856) * [Full changelog](https://github.com/openshift/machine-api-operator/compare/a00ea96d676b2b87a7de6f8ad2cac09ed2f14c67...e179bb5ce397b543cd3f716f75fa4cd40046e0ad) ### [machine-os-content](https://github.com/openshift/okd-machine-os/tree/9202b9751baf491fffcfad3b53d85b16298b0d5c) * Bump NM to NetworkManager-ovs-1:1.26.8 [#124](https://github.com/openshift/okd-machine-os/pull/124) * Pin NetworkManager-ovs [#120](https://github.com/openshift/okd-machine-os/pull/120) * [Full changelog](https://github.com/openshift/okd-machine-os/compare/570737f3da52045a7082d24effea2f95272524ef...9202b9751baf491fffcfad3b53d85b16298b0d5c) ### [operator-lifecycle-manager](https://github.com/operator-framework/operator-lifecycle-manager/tree/e8e9417ccafc5d3583d160c7a2b4bb2b5d70cd30) * [Bug 1962302](https://bugzilla.redhat.com/show_bug.cgi?id=1962302): Set reason/message for Available condition in packageserver co [#2168](https://github.com/operator-framework/operator-lifecycle-manager/pull/2168) * [Bug 1959009](https://bugzilla.redhat.com/show_bug.cgi?id=1959009): Use DeploymentAvailable instead of custom test for CSV status. [#2151](https://github.com/operator-framework/operator-lifecycle-manager/pull/2151) * [Bug 1924467](https://bugzilla.redhat.com/show_bug.cgi?id=1924467): Bumps k8s.io dependencies to v0.20.6 [#2121](https://github.com/operator-framework/operator-lifecycle-manager/pull/2121) * [Bug 1949139](https://bugzilla.redhat.com/show_bug.cgi?id=1949139): Preserve existing ServiceAccount owner references during installs. [#2088](https://github.com/operator-framework/operator-lifecycle-manager/pull/2088) * [Bug 1951657](https://bugzilla.redhat.com/show_bug.cgi?id=1951657): fix(catalog): Reduce namespace resync in resolution failure [#2107](https://github.com/operator-framework/operator-lifecycle-manager/pull/2107) * [Bug 1952851](https://bugzilla.redhat.com/show_bug.cgi?id=1952851): Add resource requests for bundle unpacker [#2109](https://github.com/operator-framework/operator-lifecycle-manager/pull/2109) * [Bug 1951232](https://bugzilla.redhat.com/show_bug.cgi?id=1951232): Fix resolution error if inner entry doesn't provide a required API. [#2106](https://github.com/operator-framework/operator-lifecycle-manager/pull/2106) * [Full changelog](https://github.com/operator-framework/operator-lifecycle-manager/compare/cdf51cddb619e84e2ce5be78ab2d7e7f6d748ec6...e8e9417ccafc5d3583d160c7a2b4bb2b5d70cd30) ### [operator-registry](https://github.com/operator-framework/operator-registry/tree/5ccabf956d25a2788cc64ad5591c404d7b950207) * [Bug 1924468](https://bugzilla.redhat.com/show_bug.cgi?id=1924468): Bump the k8s dependencies to v1.20.6 [#638](https://github.com/operator-framework/operator-registry/pull/638) * [Bug 1937097](https://bugzilla.redhat.com/show_bug.cgi?id=1937097): Add retries to opm index add [#643](https://github.com/operator-framework/operator-registry/pull/643) * [Full changelog](https://github.com/operator-framework/operator-registry/compare/a97d366a92d302ff2056fa2d19aa3e48b0fbc99c...5ccabf956d25a2788cc64ad5591c404d7b950207) ### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/e2be0be9cf8d4021ce365e73f12f4aca632abbd0) * [Bug 1956270](https://bugzilla.redhat.com/show_bug.cgi?id=1956270): service controller should not use the target-port [#519](https://github.com/openshift/ovn-kubernetes/pull/519) * [Bug 1947097](https://bugzilla.redhat.com/show_bug.cgi?id=1947097): [4.7z] Ensure no SNAT on GR for DisableSNATMultipleGws [#533](https://github.com/openshift/ovn-kubernetes/pull/533) * [Bug 1939488](https://bugzilla.redhat.com/show_bug.cgi?id=1939488): Backport Handle Multus network-status annotations on pod update [#467](https://github.com/openshift/ovn-kubernetes/pull/467) * [Bug 1956318](https://bugzilla.redhat.com/show_bug.cgi?id=1956318): Revert "removing the hybrid overlay externalGW code" [#521](https://github.com/openshift/ovn-kubernetes/pull/521) * [Bug 1951064](https://bugzilla.redhat.com/show_bug.cgi?id=1951064): master: cancel leader election on exit [#505](https://github.com/openshift/ovn-kubernetes/pull/505) * [Bug 1950131](https://bugzilla.redhat.com/show_bug.cgi?id=1950131): fix deadlock in EgressFirewall DNS code [#513](https://github.com/openshift/ovn-kubernetes/pull/513) * [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/7d1d12fd4ca2206b19cecf61f4b1cb41d8251339...e2be0be9cf8d4021ce365e73f12f4aca632abbd0) ### [thanos](https://github.com/openshift/thanos/tree/cebfd5988491f80b1556a5beecd830d4888615b8) * [Bug 1957646](https://bugzilla.redhat.com/show_bug.cgi?id=1957646): cmd/thanos: use miekgdns resolver as default [#56](https://github.com/openshift/thanos/pull/56) * [Full changelog](https://github.com/openshift/thanos/compare/0526ff025d325790d57df34cf2d66810a25da578...cebfd5988491f80b1556a5beecd830d4888615b8)