4.7.0-0.okd-2021-04-11-124433

New features since version 4.6.0-0.okd-2023-10-03-141935

Download installer and client with:

oc adm release extract --tools quay.io/openshift/okd:4.7.0-0.okd-2021-04-11-124433

Team Approvals:

No tests for this release

Upgrades from:

4.7.0-0.okd-2021-04-11-082229 (changes) - Failed Failed
4.7.0-0.okd-2021-03-28-152009 (changes) - F F F F F S
4.7.0-0.okd-2021-03-21-094146 (changes) - Success
4.7.0-0.okd-2021-03-07-090821 (changes) - Success
4.7.0-0.okd-2021-03-06-124908 - Success
4.7.0-0.okd-2021-02-25-144700 (changes) - S F F
4.6.0-0.okd-2021-02-14-205305 (changes) - Success Failed

Upgrades to:

4.7.0-0.okd-2021-06-04-191031 (changes) - Success Failed
4.7.0-0.okd-2021-05-22-050008 (changes) - Failed Success
4.7.0-0.okd-2021-04-24-103438 (changes) - F F S F

Changes from 4.7.0-0.okd-2021-03-06-124908

Created: 2021-04-11 16:17:22 +0000 UTC

Image Digest: sha256:4414db9e8945504d1d5423ec11d64df9fa8b4aa60d978f8b4bdb3d0720800741

Release 4.7.0-0.okd-2021-04-11-124433 was created from registry.ci.openshift.org/origin/release:4.7.0-0.okd-2021-04-11-124433

Components

Kubernetes 1.20.0-beta.2
Fedora CoreOS 34.20210406.10

Rebuilt images without code change

baremetal-machine-controllers git 25cbb8d8 sha256:ea6953c17668c689fef4ef59caef2db541820f3594314098aef4f8256bafeaf7
baremetal-operator git 74c60aa9 sha256:f8de068a6bb16340bfe340c5a96ea72c21c171bb6ade7b78a25ae8d448513d14
cluster-baremetal-operator git ea1ff11f sha256:d588ddae3206efaa3c0f9c8943dfbae06f03ff68dae3795f119b7ba8fadaf704
docker-registry git 8e0c068a sha256:f4d559435197a2061b96af198143f764c43dd59371bb3ddaf190f7f8ae5b5e0f

aws-machine-controllers

Bug 1935636: Ensure response body is closed when we are finished with the request #391
Full changelog

branding

Bug 1935805: Fix documentation link for OKD #12
Full changelog

cli, cli-artifacts, deployer, tools

Bug 1924453: Bump github.com/gogo/protobuf to v1.3.2 #753
Bug 1942059: when mirroring to a file destination, mount images under the index location #779
Bug 1939477: Fix unit test to use new IS #769
Full changelog

cloud-credential-operator

Bug 1928151: spell fix user-visible string #301
Full changelog

cluster-autoscaler

Updating vertical-pod-autoscaler builder & base images to be consistent with ART #190
Full changelog

cluster-dns-operator

Bug 1942228: Fix spurious reconciliation of DNS daemonset and service #250
Bug 1943826: Corefile: Use 30 second max TTL for caching of negative responses #254
Bug 1937089: Configure CoreDNS to shut down gracefully #247
Bug 1936587: Set CoreDNS’s cache’s maximum TTL to 900 seconds #245
Full changelog

cluster-ingress-operator

Bug 1937214: Fix spurious reconciliation of NodePort services #570
Bug 1935891: Canary: Perform canary test probes over https #566
Bug 1936093: Canary: Use cluster-wide proxy for canary client #568
Bug 1934904: Canary: Schedule canary server pods to worker and infra nodes #564
Full changelog

cluster-kube-controller-manager-operator

Bug 1924488: Bump github.com/gogo/protobuf to v1.3.2 #508
Full changelog

cluster-kube-scheduler-operator

Bug 1924490: Bump github.com/gogo/protobuf to v1.3.2 #334
Full changelog

cluster-kube-storage-version-migrator-operator

Updating ose-cluster-kube-storage-version-migrator-operator builder & base images to be consistent with ART #38
Full changelog

cluster-monitoring-operator

Bug 1945851: Backport Remove the “instance” and “pod” labels for kube-state-metrics metrics #1101
Bug 1926876: pkg/manifests: fix prometheus-proxy trustedCA #1051
Bug 1932820: Remove kube-apiserver-availability.rules #1069
Full changelog

cluster-network-operator

Bug 1941212: The Multus daemonset should handle 10% maxUnavailable #1030
Bug 1940806: OVN Upgrade: fix upgrade order of node and master #1029
Bug 1929371: Don’t set ClusterOperator Version until rollout is complete #983
Bug 1937829: Cherry-pick dual stack migration #1017
Bug 1928028: Kuryr: Let Kuryr autodetect primary CNI interface #978
Bug 1935473: Include LB members for Machines created on day-2 operation #1002
Full changelog

cluster-node-tuning-operator

Bug 1928614: Keep ignition units in sync with [service] plugin. #215
Full changelog

cluster-openshift-controller-manager-operator

Bug 1944142: Bump kubernetes to 0.20.5 #204
Bug 1931856: Set registry routes in operand config #199
Full changelog

cluster-policy-controller

Bug 1924496: Bump github.com/gogo/protobuf to v1.3.2 #58
Full changelog

cluster-version-operator

Bug 1943754: Ensure automountServiceAccountToken is synced on service account updates #539
Bug 1941217: pkg/cvo/sync_worker: Skip precreation of baremetal ClusterOperator #534
Bug 1926795: install/0000_90_cluster-version-operator_02_servicemonitor.yaml: adjust “CannotRetrieveUpdates” to “warning” #516
Full changelog

console

Bug 1944855: Update Dockerfile.product for nodejs v14.16.0 #8488
Bug 1945153: Remove pipeline Tech preview badge for pipelines GA operator #8528
Bug 1943643: fix pipeline metrics endpoint for 1.4 osp #8489
Bug 1944349: fix backwards incompatible trigger api changes #8503
Bug 1943441: Add ‘Roll Back’ action for Replication Controllers and Replica Sets #8475
Bug 1925792: Fix translation for edit annotation #8078
Bug 1941468: Change link for not available state #8431
Bug 1939608: Fix null handling in FilterToolbar_ to prevent possible exceptions #8394
Bug 1937356: Fix to show correct internal image-stream name in container image edit flow’s internal registry image-stream dropdown for kn service #8353
Bug 1927198: fix pvc string in pvc.view #8126
Bug 1927311: avoid 404 errors attempting to load en-US #8128
Bug 1931382: Hide pipeline section in container image edit flow #8209
Bug 1933665: [release-4.7] Create ImageStream and other resources for samples step by step #8255
Bug 1935672: [release-4.7] fix pipelinerun status icon rendering issue #8311
Bug 1932272: Fix KMS validation error for 4.7 release #8221
Bug 1937313: Removed loaded prop and nested component #8351
Bug 1936803: support service binding operator version 0.5.0 #8335
Bug 1937469: Pod/node/ip/template isn’t showing when vm is running #8357
Bug 1932277: Create new pool with arbiter - wrong replica (4.7 release) #8234
Bug 1930152: Do not fail new VM wizard when no storage classes are available #8190
Bug 1937086: Fix topology crash due to selfLink deprecation #8317
Bug 1928228: retry co-fetch on 409 POST or 429 #8154
Full changelog

console-operator

Bug 1936337: Check for error when generating default and user-defined config for the console-config configmap #512
Full changelog

csi-driver-manila, openstack-cinder-csi-driver

Bug 1933659: Add udev to the driver image #47
Full changelog

docker-builder

Bug 1943726: add bracket logging on openshift/builder calls into buildah to assist test-platform team triage #237
Bug 1945692: move entitlement related secrets back to mounts.conf #240
Bug 1924554: bump(cni) 0.8.1 #234
Bug 1940052: retry image pulls during builds #226
Bug 1939218: bump(containers/*): #224
Full changelog

etcd

ETCD-178: Bug 1944386: openshift-tools: fix on off flow and add unit tests #74
Full changelog

gcp-machine-controllers

Bug 1935636: Ensure response body is closed when we are finished with the request #151
Full changelog

grafana

Updating grafana builder & base images to be consistent with ART #54
Full changelog

haproxy-router

Bug 1942534: [4.7 backport] Route gets admitted with invalid host name if override annotation is used #273
Bug 1938921: router/template: Cache compiled regular expressions #269
Full changelog

hello-openshift, tests

Bug 1942055: upgrade/upgrade.go: Enhance upgrade ack time out error #26012
Bug 1941574: test/extended/router/idle: skip test on virt platforms #25999
Bug 1940866: Add BareMetalPlatformType into e2e upgrade service unsupported list #25989
Bug 1927953: test/extended/router/idle: address flakes/failures seen in CI #25892
Bug 1931622: test: add vsphere to unsupported platforms for LB service #25913
Bug 1932806: release-4.7: e2e: test OAuth API connections in the tests by that name #25894
Bug 1935707: [release-4.7] test: Detect when the master pool is still updating after upgrade #25941
Bug 1931401: fix sig-cli flakes #25910
Bug 1939477: Update tests to use Ruby 2.7 #25966
Bug 1927554: adjust route host for redis/nodejs/cakephp to accomodate new apiserver restrictions #25884
Full changelog

hyperkube

Bug 1927717: UPSTREAM: 98939: fixes race in TestSyncPodsDeletesWhenSourcesAreReady #567
Bug 1931702: UPSTREAM: 96958: kubelet: remove periodic messages from log-level 2 #589
Bug 1931745: UPSTREAM: 98956: Fix race when KillPod followed by IsPodPendingTermining #590
Bug 1929674: kubelet: fix create sandbox delete pod race #591
Bug 1933094: UPSTREAM: 98742: Sync completed pods until their containers have been terminated #595
Full changelog

insights-operator

Bug 1942068: Gahter datahubs.installers.datahub.sap.com resources from SAP clusters (#383) #383
Bug 1939061: Sap license management logs gatherer 4.7 (#372) #372
Adds memory usage to the metadata (#364) #364
Bug 1935070: Extend the OLM operator data with related … (#362) #362
Bug 1934442: Gather info about unhealthy SAP pods (#360) #360
Bug 1936802: Authentication log gatherer - do not scan all the pods in openshfit-authentication (#369) #369
Bug 1936861: Include namespace name in binarydata configmap path & test (#368) (#370) #368
Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

[release 4.7] Bug 1929118: update kubernetes-client-api #1230
Full changelog

kube-proxy, sdn

Bug 1941993: Fix incorrect unmonitoring of egress nodes #279
Bug 1924830: CVE-2021-3121 gogo/protobuf lacks certain index validation #265
Bug 1936920: networkpolicy: pass traffic through NAT to handle possible tuple collisions #272
Full changelog

kuryr-cni, kuryr-controller

Bug 1938960: Ignore headless services in NP code #487
Bug 1938960: Do not default protocol to TCP for allow-all NPs #480
Bug 1930017: Narrow connection to the cluster only on namespaceSelector #460
Bug 1928029: Get trunks more diligently #449
Full changelog

libvirt-machine-controllers

Bug 1938316: [release-4.7] Update MAO and set metrics on :8081 address #219
Full changelog

machine-api-operator

Bug 1929721: Add SecurityProfile.EncryptionAtHost parameter to enable host-based VM encryption #818
Bug 1934798: reuse mgr client in webhooks #821
Full changelog

machine-os-content

Strip xattrs #112
overlay: add NetworkManager config to prevent requesting additional MAC #109
overlay: add dhcp-client-identifier #101
manifests: add include.release annotations #98
Full changelog

multus-cni

Bug 1927896: make a copy of global RuntimeConfig on merge #91
Bug 1936334: Updating multus-cni builder & base images to be consistent with ART #81
Full changelog

multus-whereabouts-ipam-cni

Bug 1931950: [backport 4.7] Fix for IPv6 when leading hextets equal zero #49
Full changelog

oauth-apiserver

Bug 1917904: bump k8s.io/apiserver to 1.20.4 #43
Full changelog

openshift-apiserver

Bug 1917904: bump k8s.io/apiserver to 1.20.4 #187
Full changelog

operator-lifecycle-manager

Bug 1937375: only override deployment resources when explicitly defined in subscription config #2036
Bug 1933839: bump k8s.io/apiserver for webhook authorizer panic fix #2022
Bug 1936707: Allow non-CSV-owned ServiceAccounts to satisfy CSV requirements. #2034
Bug 1938405: Support jittering relatively small resync intervals. #2041
Updating operator-lifecycle-manager builder & base images to be consistent with ART #2013
Bug 1934724: fix(resolver): Allow skipped versions to be installed initially #2027
Bug 1929904: Infer package name property for unannotated CSVs, if possible. #2033
Full changelog

operator-marketplace

Updating marketplace-operator builder & base images to be consistent with ART #367
Bug 1927456: update defaults to 4.7 #382
Full changelog

ovirt-machine-controllers

Bug 1939358: extract node machine ipaddress from the engine instead using DNS . #98
Bug 1939360: providerIDController ignore nodes that have no machine #99
Bug 1939199: move to go 1.15 and registry.ci.openshift.org #97
Bug 1927256: Bump K8s dependencies to 1.20 #92
Full changelog

ovn-kubernetes

Bug 1946696: iptables: add filter on node local traffic #489
Bug 1947835: Fix service update for policy type assertion #493
Bug 1942702: backport lr-nat-del/add fixes #484
Bug 1931520: Backport Fix ACL syntax for dual-stack #465
Bug 1943310: [4.7] Enable DB memory trimming on compaction #477
Bug 1932268: detect if the cluster has endpoint slices #442
Bug 1935180: Backport Fix mcast querier #468
Bug 1937829: Cherry-pick dual-stack conversion #460
Bug 1934645: Backport enable support for BFD on external gateway routes #462
Bug 1925475: Bump OVN to ovn2.13-20.12.0-24.el8fdp #451
Bug 1937238: Refactor chain setup for NodePort and ExternalIP #457
Full changelog

prom-label-proxy

Updating prom-label-proxy builder & base images to be consistent with ART #330
Full changelog

telemeter

Updating telemeter builder & base images to be consistent with ART #369
Full changelog

vsphere-problem-detector

Bug 1936975: Fix deadlock when enqueing functions into the pool #35
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github