Back to index
4.7.0-0.okd-2021-04-24-103438 Download installer and client with:
oc adm release extract --tools quay.io/openshift/okd:4.7.0-0.okd-2021-04-24-103438 Team Approvals:
No tests for this release
Upgrades from:
Upgrades to:
Loading changelog, this may take a while ...
Created: 2021-04-24 18:32:54 +0000 UTC
Image Digest: sha256:1c71a740375b34df53c6e2bfe389018f3160cea46c4022ed6080f583c54ecbc0
Release 4.7.0-0.okd-2021-04-24-103438 was created from registry.ci.openshift.org/origin/release:4.7.0-0.okd-2021-04-24-103438
Components
Kubernetes 1.20.0-beta.2
Fedora CoreOS 33.20210328.3
Rebuilt images without code change
Bug 1935174 : RHCOS bump for LUKS, prjquota, etc #4791 Bug 1947122 : gcp: install google cloud sdk with yum the recommended way #4824 Bug 1933728 : baremetal: include netmask in DNSMasq dhcp range #4698 Bug 1930106 : bump ignition to v3_2 #4701 Bug 1922292 : [release-4.7] data/rhcos.json: Update boot images #4635 Bug 1924701 : Fix cluster destroy when byo is used with Kuryr #4616 Bug 1909978 : update ignore-volume-az documentation #4617 Bug 1916692 : OpenStack: Delete leftover LBs when destroying cluster #4563 Bug 1919407 : openstack/validation: enforce control plane size #4585 Bug 1909978 : update documentation for ignore-volume-az usage #4603 Bug 1896218 : remove GCP role bindings before service accounts #4602 Bug 1921911 : Revert “Merge pull request #4589 from patrickdillon/bz-1896218-gcp-se… #4600 Bug 1921655 : OpenStack: fix error handling for cloudinfo #4599 Bug 1896218 : remove GCP role bindings before service accounts #4589 Updating ose-installer-artifacts builder & base images to be consistent with ART #4546
maintenance: remove pools and volumes #3620
Bug 1810438 : oVirt: Add missing piece for gathering bootstrap IP info #4524 Updating ose-baremetal-installer builder & base images to be consistent with ART #4544
Updating ose-installer builder & base images to be consistent with ART #4543
Bug 1920243 : disable anonymous auth on bootstrap nodes #4590 Bug 1917101 : UPI ovirt - remove RHCOS image from Network req #4577 Bug 1893117 : terraform/vsphereprivate: ignore hosts in maintenance mode #4566 Bug 1919072 : AWS cloudformation change protocol from ESP to 50 #4583 Bug 1916938 : tolerate equal APIFloatingIP and LbFloatingIP #4575 Bug 1907822 : Don’t panic on bad data in quota validations #4483 Bug 1912828 : Rebase on the latest terraform provider/go-ovirt #4562 Bug 1916373 : upi: allow IPsec ports #4552 Bug 1915460 : ovirt: validate cluster name during install #4537 Bug 1910244 : Go mod update for golang crypto #4569 Bug 1915617 : update boot images for various fixes #4540 Bug 1909502 : pkg/asset/manifests: remove etcd records from proxy config #4518 Bug 1915998 : Set Additional Control Plane Security Groups on Bootstrap Node #4551 Bug 1916271 : openstack known issues: ControlPlane anti-affinity #4548 Bug 1813949 : ignore local env variables when we create a service client #4426 Bug 1916505 : AWS IPI: Add IPsec master-to-worker flows #4554 Bug 1908468 : azure/validation: some memory values are float and not int #4530 Bug 1908583 : Set same additional networks on Bootstrap as Control Plane #4528 Bug 1914439 : OpenStack Port Create Typo in SRIOV Docs #4529 Bug 1909587 : openstack: Create Control plane nodes sequentially #4522 Bug 1910127 : ovirt: UPI doc improvements #4498 Bug 1913151 : KubeVirt user docs: change role example - add “update” verb to VM #4521 Bug 1910070 : Set termination_grace_period_seconds to 10 minutes #4511 Bug 1786314 : bump gophercloud/utils #4486 Bug 1911819 : Fix docs/user/kubevirt/install-config.yaml to pass ./hack/yaml-lint.sh #4519 Bug 1911819 : Add kubevirt user documentation #4516 Bug 1908743 : Add validation that the KubeMacPool component is enabled for the namespace #4509 Bug 1910049 : Revert “openstack UPI: Use ansible-galaxy” #4506 Bug 1882022 : installconfig: enable vsphere folders for datacenters and clusters. #4493 Bug 1908782 : terraform: Add rules to allow internal IPsec traffic #4491 Bug 1908171 : fix Terraform issue with GCP custom machine types #4496 Bug 1907947 : cloud-creds-secret creation with current context info only #4484 Bug 1907628 : OpenStack Documentation for MachineSets with Multiple Networks #4463 Bug 1906517 : OpenStack: Skip collecting info for empty subnet IDs #4474 Bug 1908280 : update docs for Cinder AZs #4487 Bug 1907621 : Bump cluster-api-provider-kubevirt version #4479 Bug 1890228 : pkg/destroy/aws: Pass destroy if HostedZone does not exist #4477 Bug 1906459 : openstack: fix quota checks when they’re unlimited #4470 Update GCP Customization doc to reflect CMEK additions #4468
Openstack: describes how to enable qemu agent for UPI. #4441
oVirt: update team members #4464
Bug 1904663 : Fix comparison in pointer ignition customization asset #4455 openstack: Test Nova AZ manifest generation #4459
do not generate the cloud cred secret when credentialsMode is Manual #4416
update gophercloud/utils & terraform/provider-openstack #4457
hack/verify-vendor.sh: Fail early if error #4421
Bug 1899175 : data/rhcos.json: Update boot images for RHEL 8.3 #4414 Openstack primary subnet using machine spec #4346
Deprecate computeFlavor in OpenStack platform #4321
openstack: Test manifest creation #4431
openstack: Allow to skip pre-flight validations #4452
Bug 1900138 : Removed support for insecure mode for oVirt/RHV installation #4404 openstack: check quotas before creating cluster #4432
OpenStack: Adds clusterOSImageProperties to install-config.yaml #4401
Bug 1904125 : Ensure the bootstrap ignition libvirt pool defaults to <clustername>.<id>.bootstrap rather than ‘default’ #4448 Bug 1868748 : baremetal: rename JSON field for ClusterProvisioningIP #4053 Add KubeVirt platform as infrastructure for Openshift installation #4350
cloudproviderconfig: Refactor openstack #4447
Pass CLUSTER_PROFILE env var to CVO render #4444
vSphere Destroy: add log messages for tag destruction #4407
baremetal: send full ignition to masters #4427
asset/installconfig/Azure: Validate install-config instance types #4419
Update MCO doc references #4445
baremetal: Add ironic logwatch containers #4437
Create SR-IOV UPI Docs #4439
docs: update docs/design/resource_dep.svg #4443
Bug 1903277 : destroy/aws: remove rules from default security group #4440 Set default release image to 4.7 #4409
baremetal: make cluster provisioning IP optional #4429
pkg/asset/quota: Typo in warning message presented to user #4430
Create a machineconfig for IPI pointer ignition customizations #4413
vSphere Docs: Update to include Permissions #4393
OSASINFRA-902 : Update OpenStack Custom External LB and DNS Docs #4389 baremetal: correct the cacheImageURL when we don’t have a provisioningIP #4408
Bug 1895874 : Use oVirt Engine certificate verified by the user for installation #4387 Bug 1899853 : openstack: CP nodes port to use addtional SGs #4411 baremetal: Handle xz filenames for OKD #4392
Support user provided service-account-signing-key and issuer #4373
pkg: validation for previously existing ovirt configuration #4354
Bug 1898194 : installconfig/gcp/validation: handle custom machine types #4386 baremetal: when networking is disabled make the bootstrap provisioning ip optional #4390
Bug 1898238 : Validate the the API and Ingress FIPs are not the same #4385 Bug 1848945 : OpenStack - Documentation for adding worker nodes using ansible #4205 Bug 1813012 : Remove unused etcd discovery domain #4067 Bug 1894432 : oVirt, add timeout to tmp_import_vm #4341 baremetal: validate that macs are EUI-48 and unicast #4378
Bug 1855351 : standardize interrupt error messages #4360 Stop validating DefaultMachinePlatform #4391
Bug 1889779 : vSphere destroy: handle failed clusters #4388 openstack UPI: Use ansible-galaxy #4379
Updating ose-baremetal-installer builder & base images to be consistent with ART #4370
Correcting normal typos #4363
Bug 1891543 : openstack: remove platform flavor validation #4383 baremetal: remove root_gb from tfvars #4319
Cleanup: make conversion functions private #4376
Bug 1888464 : add tag:UnTagResource perm for aws shared networks #4371 Remove the secrets directory recursively #4369
doc/openstack: update quota reqs for kuryr #4362
Fix ‘troubleshooting’ typo #4365
libvirt: Bump bootstrap size (primarily for OKD) #4364
data/data/aws/route53: use CNAME for us-iso-east-1 region #4367
Bug 1886435 : Fix azure UPI az group deployment deprecation #4366 asset/installconfig/gcp: Validate install-config instance types #4329
Use ‘kubernetes.io/tls’ instead of SecretTypeTLS which is not being substituted #4342
aws: support custom trust bundle for c2s regions #4335
pkg/asset/cluster/aws: switch to ec2 tagging API #4356
Bug 1867165 : baremetal: allow configuring bootstrap mac addresses #4052 doc/openstack/UPI: improvements #4355
Small corrections in ovirt/install_ipi.md #4353
data/bootstrap/files/usr/local/bin/installer-gather: Tee logs into tarball #4345
data/manifests/bootkube/cvo-overrides: Bump default to stable-4.7 #4347
owners: Add mdbooth to openstack-approvers #4348
owners: add dhellmann to baremetal-approvers/reviewers #4343
data/manifests/bootkube/cvo-overrides: Drop the explicit upstream #4112
Bug 1891543 : openstack: consider volumes for storage requirements checks #4323 Document how to deploy cluster with BM and VM workers #4336
Wrap errors after OpenStack creds validation #4338
Bug 1855351 : Handle CTRL+C in GCP survey #4334 Bug 1894144 : baremetal: pin libvirt to 4.5.0 #4339 cmd/openshift-install/create: Use library-go’s IngressURI helper #4245
Bug 1888378 : Ignore error if resource group already deleted #4325 Bug 1887863 : Patch Flavor Not Found validation for OpenStack Install Config #4289 Use authentication for Ironic on baremetal bootstrap host #4256
Bug 1841381 : oVirt, add memoryMB validation #4309 Bug 1878374 : Adding more nitro and the AMD instance types (AWS, UPI) #4327 Bug 1866925 : display Azure destroy auth error #4331 openstack: fixup markdown #4328
Revert “[Azure][Destroy] Check if resource group exists” #4322
Add Encryption Key reference to GCP MachinePool API #4318
aws: block cluster destroy in c2s region #4316
aws: ensure users set ami id for c2s regions #4315
Bug 1891702 : pkg/asset/ignition/bootstrap: exit loop if pem.Decode() fails #4317 Bug 1888378 : [Azure][Destroy] Check if resource group exists #4320 oVirt: change owners #4311
Code cleanup and optimizations #4272
Bug 1889267 : oVirt, increase terraform template and release image timeout to 20m #4285 install-approvers: add staebler #4297
Bug 1880443 : allow providing client options when generating OpenStack MachineSets #4196 openstack: Update CI base image #4291
pkg/asset/installconfig/aws: Validate install-config instance type #4258
go.mod Update #4294
Bug 1836017 : Configure haproxy to check /readyz #4012 Bug 1870728 : pkg/asset/ignition/bootstrap: Display warning if certificates are expired #4287 Bug 1889852 : add new AWS regions #4288 Bug 1877116 : aws: use file for bootstrap ign when uploading to s3 #4281 Bug 1886553 : GCP - Increase worker NAT min ports #4273 cmd: split newlines in logrus stderr output to new entry #4282
openstack: Add a new team member #4290
Bug 1882649 : Determine Glance disk format based on file extension #4279 vSphere: Update dockerfile removing certificate #4274
Update README.md - Broken Link - Spelling #4278
OpenStack: remove legacy image validation #4277
Bug 1882844 : vsphere destroy: delete tag category created by installer #4265 Bug 1878900 : openstack: Fix error messages in flavor validation #4269 OpenStack UPI: Custom API and Ingress vip addresses #4092
Bug 1888671 : openstack: Document Cinder’s ignore-volume-az #4271 Bump K8s.io version to v0.19.0 #4266
destroy: return aws resources that could not be deleted #4270
install-complete: provide troubleshooting info when operators fail #4259
OpenStack: add clusterOSImage validations #3964
Bug 1887525 : baremetal: Wait for master-bmh-update script to succeed #4262 openstack: Bump Ansible to 2.9 in UPI #4261
Bug 1874248 : types/vsphere/validation: ensure vcenter is all lower case #4254 Bug 1884691 : types: allow manual cred mode for gcp and azure #4238 Updating ose-installer builder & base images to be consistent with ART #4250
Remove dead code #4252
Updating ose-installer-artifacts builder & base images to be consistent with ART #4251
openstack privileges documented #4214
OpenStack: Rename lbFloatingIP to apiFloatingIP #4244
Bug 1882191 : Add GODEBUG=x509ignoreCN=0 to systemd DefaultEnvironment #4248 Bug 1884435 : vsphere - add delay if resolv.conf is not available; wait for dhcp #4237 Bug 1777224 : pkg/asset: metadata to depend on ignition #4223 Bump RHCOS images for Ignition entropy fix #4241
Bug 1859174 : Upgrade Terraform provider OpenStack #4216 Fix json tag for GCP auth service account #4166
installer/pkg/quota/gcp/limits.go: fix minor typo in comment #4160
IP address should be specified without underscore. #3204
Docs: OpenStack: Remove mention of cluster failing to destroy #4208
Bug 1876815 : OpenStack: unset OS_CLOUD #4231 Bug 1884558 : do not use local cacert path in generated clouds.yaml #4227 Bug 1878758 : openstack UPI: Allow for no FIP or router #4219 Bug 1876844 : openstack UPI: Ignition token needs Glance access #4236 Bug 1881703 : Revert “Have the MCO manage the ignition stub config” #4228 Bug 1882752 : openstack BM: Remove MachineSet on separate subnet #4230 Bug 1878900 : openstack: Skip validation for baremetal flavors #4222 Bug 1881532 : openstack: Only list external networks in prompt #4226 Bug 1882805 : Bump bootimages for ppc64le and s390x to 46.82.202009240941-0 and 46.82.202009241338-0 #4215 Bug 1881757 : tls: set mcs cert common name to not-valid-hostname #4210 Bug 1882810 : vsphere - local dns prepender not named with template #4220 Bug 1853418 : Ignore trailing dots in baseDomain #4146 Bug 1881487 : data/rhcos.json: Update to 46.82.202009220041-0 #4206 Bug 1877984 : Fix “OpenShiftSDN” to proper case when generating network config #4207 Bug 1879533 : oVirt UPI - Better explanation of the inventory #4180 Bug 1878789 : Add note about ignition certificates expiration #4171 Bug 1877854 : OpenStack: Support multiple subnets #4093 Bug 1879649 : oVirt UPI - Simplify create templates #4182 Bug 1880393 : OpenStack UPI: Explain how to encode cert to base64 #4203 Bug 1880393 : OpenStack UPI: Trim EOLs from the cacert trustbundle #4201 Bug 1878163 : Updating images/baremetal/Dockerfile.ci baseimages to mach ocp-build-data config #4186 Bug 1879891 : Fix cluster destroy when fip less installation happened #4191 Bug 1878163 : Updating images/installer/Dockerfile.ci baseimages to mach ocp-build-data config #4185 Bug 1878163 : Updating images/installer-artifacts/Dockerfile.rhel baseimages to mach ocp-build-data config #4184 Bug 1876815 : unset OS_CLOUD during config generator #4177 Bug 1878108 : asset/quota/gcp: use GCP api to find CPU count for constraint and guess only on failure #4163 Bug 1877486 : proxy: allow * for noProxy #4172 Bug 1880132 : destroy/gcp: correct extract service account email from IAM policy binding member #4193 Bug 1861917 : Add cpc config to bootstrap #4178 install: increase timeout to 40 minutes #4181
Bug 1879081 : OpenStack: Switch to train/centos8 repos #4175 Bug 1877885 : oVirt UPI - Add Ansible playbooks download #4169 Bug 1878758 : openstack UPI: Optional floating IPs #3755 Bug 1877763 : oVirt UPI - python code snippets without semicolons #4170 Bug 1874747 : ovirt: dont start the temp VM before template creation #4168 Bug 1878243 : openstack: Upgrade the CI build image #4161 Bug 1877440 : oVirt UPI Assets_dir set according to env var #4153 Bug 1874457 : Add support to clean custom router #4159 Bug 1877676 : OpenStack: Refresh documentation about ingress FIP #4059 Bug 1877436 : oVirt UPI RHCOS explanations, assets env var #4152 Bug 1877862 : oVirt UPI - Fix templates check and optimize image check #4157 Bug 1877741 : installer-masters-gather.sh: gather openshift-{azure,gcp}-routes logs #4148 Bug 1873125 : Fix python syntax for OpenStack UPI scripts #4154 Bug 1870038 : vmware upi: haproxy.service to rm haproxy pod on ExecStop #4132 Bug 1866925 : pkg/destroy/azure: fail fast if unable to list resources for any reason #4025 Bug 1873125 : OpenStack: UPI missing instructions to update apiVIP and ingressVIP #4133 Bug 1875855 : increase timeout for bootstrap ignition downloading #4145 Bug 1856928 : Fix Non yaml files in manifests/ or openshift/ directories preventing bootstrap from completing #4091 Bug 1876825 : generate lbFloatingIP in OpenStack config #4147 Bug 1876792 : oVirt UPI Move Network Requirements section #4142 Bug 1876783 : oVirt UPI fix python cmd #4141 Bug 1876562 : Small readability improvements to UPI on RHV documentation #4136 Bug 1871653 : baremetal: set root device hints on host resources #4088 Bug 1875932 : Update baremetal DNS design details #4101 Bug 1868439 : openstack UPI: Fix JSON syntax #4140 Bug 1874656 : Bump RHCOS for s390x/ppc64le to fix SSH authentication #4124 Bug 1861917 : bootkube: add image for cluster-policy-controller #4131 Bug 1871712 : pkg/destroy/aws: Detach attached policies during destroy #4126 Bug 1867975 : aws: ensure users set ami id for us-gov and cn regions #4103 Bug 1868439 : openstack UPI: Fix Ingition key error #4135 Bug 1872080 : Updating images/baremetal/Dockerfile.ci baseimages to mach ocp-build-data config #4086 Bug 1872080 : Updating images/installer-artifacts/Dockerfile.rhel baseimages to mach ocp-build-data config #4085 Bug 1872080 : Updating images/installer/Dockerfile.ci baseimages to mach ocp-build-data config #4087 BUG 1872646: oVirt, remove tmp VM disk on destroy #4129
hack/update-rhcos-bootimage: update usage example #4097
Bug 1813012 : Remove unused flags previously needed for etcd static pod #4063 Bug 1842071 : Add ppc64le and s390x documentation links #4115 Bug 1873448 : Ensure proper tagging of compute nodes ports #4118 Bug 1872861 : Update cli container image for UPI #4098 Bug 1873712 : Add information about AZs limitations with Kuryr #4109 Bug 1871795 : bump RHCOS images to fix SSH authentication #4095 Bug 1873123 : omit deprecated parameters during config generation #4100 Bug 1813012 : Remove unused etcd host service and endpoints #4068 Bug 1871030 : data/data/gcp: be pedantic about setting the region #4089 Bug 1856270 : Update known issues with info about provisioning state node bug #4083 Bug 1870082 : Use index in MachineSet names for Openstack IPI #4070 Bug 1813012 : Remove legacy code for unmanaged cluster-etcd-operator #4062 Bug 1863026 : docs/user/azure: remove newlines from base64 encoding in UPI install doc #4090 Bug 1871048 : OpenStack: dynamically set end of DHCP allocation pool #4077 Bug 1868773 : Libvirt: Bump bootstrap memory to 4G #4080 Bug 1862209 : aws: fix validation for user tags #4081 Bug 1871124 : OpenStack: Improve snippet for playbooks download #4079 Bug 1871124 : openstack UPI: Provide a way to get the playbooks #4078 Bug 1866534 : fixes bootstrap DNS failure on bare metal #4015 Bug 1862957 : bump RHCOS images for FIPS fix #4066 Bug 1870592 : openstack: Document MachineSet availabilityZone #4074 Readme.md: Remove experimental tag for OpenStack UPI #3982
Bug 1866693 : docs: drop kernel-devel from supported extensions #4030 Bug 1864092 : baremetal: copy the implementation of rootdevicehints from baremetal-operator #4002 Bug 1862290 : vendor/terraform-provider-vsphere: DiskPostCloneOperation patch carry #4060 Bug 1868439 : openstack UPI: Fix Ignition v3 #4058 openstack: Known issue: no BMs on Kuryr #4051
Bug 1869329 : OpenStack: Place Bootstrap in one of the master AZs #4056 Bump rhcos images for s390x #4050
OpenStack: Fixups to BM workers documentation #4057
Bug 1868439 : openstack upi: fix Ignition key error #4047 OpenStack: baremetal worker documentation #3955
Bug 1866949 : data/data/aws/route53: use CNAME for gov cloud partition #4043 Bug 1862044 : deleting servers using metadata-based filtering #4032 Bug 1867972 : destroy/aws: setup the resourcetagging api with correct region for gov cloud #4042 Bump rhcos images for ppc64le #4021
Bug 1867519 : make externalNetwork optional #4029 Full changelog
Updating vertical-pod-autoscaler builder & base images to be consistent with ART #190
Full changelog
Updating ose-cluster-kube-storage-version-migrator-operator builder & base images to be consistent with ART #38
Full changelog
Updating ose-cluster-machine-approver builder & base images to be consistent with ART #103
Full changelog
Bug 1943754 : Ensure automountServiceAccountToken is synced on service account updates #539 Bug 1941217 : pkg/cvo/sync_worker: Skip precreation of baremetal ClusterOperator #534 Bug 1926795 : install/0000_90_cluster-version-operator_02_servicemonitor.yaml: adjust “CannotRetrieveUpdates” to “warning” #516 Full changelog
Bug 1945856 : 99729:Only system-node-critical pods should be OOM Killed last #642 Bug 1927717 : UPSTREAM: 98939: fixes race in TestSyncPodsDeletesWhenSourcesAreReady #567 Bug 1931702 : UPSTREAM: 96958: kubelet: remove periodic messages from log-level 2 #589 Bug 1931745 : UPSTREAM: 98956: Fix race when KillPod followed by IsPodPendingTermining #590 Bug 1929674 : kubelet: fix create sandbox delete pod race #591 Bug 1933094 : UPSTREAM: 98742: Sync completed pods until their containers have been terminated #595 Full changelog
Bug 1942068 : Gahter datahubs.installers.datahub.sap.com resources from SAP clusters (#383) #383 Bug 1939061 : Sap license management logs gatherer 4.7 (#372) #372 Adds memory usage to the metadata (#364) #364
Bug 1935070 : Extend the OLM operator data with related … (#362) #362 Bug 1934442 : Gather info about unhealthy SAP pods (#360) #360 Bug 1936802 : Authentication log gatherer - do not scan all the pods in openshfit-authentication (#369) #369 Bug 1936861 : Include namespace name in binarydata configmap path & test (#368) (#370) #368 Full changelog
Strip xattrs #112
overlay: add NetworkManager config to prevent requesting additional MAC #109
overlay: add dhcp-client-identifier #101
manifests: add include.release annotations #98
Full changelog
Updating prom-label-proxy builder & base images to be consistent with ART #330
Full changelog
Source code for this page located on github