Back to index
4.7.0-0.okd-2021-04-24-103438
Download installer and client with:
oc adm release extract --tools quay.io/openshift/okd:4.7.0-0.okd-2021-04-24-103438
Team Approvals:
No tests for this release
Upgrades from:
Upgrades to:
Loading changelog, this may take a while ...
Created: 2021-04-24 18:32:54 +0000 UTC
Image Digest: sha256:1c71a740375b34df53c6e2bfe389018f3160cea46c4022ed6080f583c54ecbc0
Release 4.7.0-0.okd-2021-04-24-103438 was created from registry.ci.openshift.org/origin/release:4.7.0-0.okd-2021-04-24-103438
Components
- Kubernetes 1.20.0-beta.2
- Fedora CoreOS 33.20210328.3
Rebuilt images without code change
- Bug 1935174: RHCOS bump for LUKS, prjquota, etc #4791
- Bug 1947122: gcp: install google cloud sdk with yum the recommended way #4824
- Bug 1933728: baremetal: include netmask in DNSMasq dhcp range #4698
- Bug 1930106: bump ignition to v3_2 #4701
- Bug 1922292: [release-4.7] data/rhcos.json: Update boot images #4635
- Bug 1924701: Fix cluster destroy when byo is used with Kuryr #4616
- Bug 1909978: update ignore-volume-az documentation #4617
- Bug 1916692: OpenStack: Delete leftover LBs when destroying cluster #4563
- Bug 1919407: openstack/validation: enforce control plane size #4585
- Bug 1909978: update documentation for ignore-volume-az usage #4603
- Bug 1896218: remove GCP role bindings before service accounts #4602
- Bug 1921911: Revert “Merge pull request #4589 from patrickdillon/bz-1896218-gcp-se… #4600
- Bug 1921655: OpenStack: fix error handling for cloudinfo #4599
- Bug 1896218: remove GCP role bindings before service accounts #4589
- Updating ose-installer-artifacts builder & base images to be consistent with ART #4546
- maintenance: remove pools and volumes #3620
- Bug 1810438: oVirt: Add missing piece for gathering bootstrap IP info #4524
- Updating ose-baremetal-installer builder & base images to be consistent with ART #4544
- Updating ose-installer builder & base images to be consistent with ART #4543
- Bug 1920243: disable anonymous auth on bootstrap nodes #4590
- Bug 1917101: UPI ovirt - remove RHCOS image from Network req #4577
- Bug 1893117: terraform/vsphereprivate: ignore hosts in maintenance mode #4566
- Bug 1919072: AWS cloudformation change protocol from ESP to 50 #4583
- Bug 1916938: tolerate equal APIFloatingIP and LbFloatingIP #4575
- Bug 1907822: Don’t panic on bad data in quota validations #4483
- Bug 1912828: Rebase on the latest terraform provider/go-ovirt #4562
- Bug 1916373: upi: allow IPsec ports #4552
- Bug 1915460: ovirt: validate cluster name during install #4537
- Bug 1910244: Go mod update for golang crypto #4569
- Bug 1915617: update boot images for various fixes #4540
- Bug 1909502: pkg/asset/manifests: remove etcd records from proxy config #4518
- Bug 1915998: Set Additional Control Plane Security Groups on Bootstrap Node #4551
- Bug 1916271: openstack known issues: ControlPlane anti-affinity #4548
- Bug 1813949: ignore local env variables when we create a service client #4426
- Bug 1916505: AWS IPI: Add IPsec master-to-worker flows #4554
- Bug 1908468: azure/validation: some memory values are float and not int #4530
- Bug 1908583: Set same additional networks on Bootstrap as Control Plane #4528
- Bug 1914439: OpenStack Port Create Typo in SRIOV Docs #4529
- Bug 1909587: openstack: Create Control plane nodes sequentially #4522
- Bug 1910127: ovirt: UPI doc improvements #4498
- Bug 1913151: KubeVirt user docs: change role example - add “update” verb to VM #4521
- Bug 1910070: Set termination_grace_period_seconds to 10 minutes #4511
- Bug 1786314: bump gophercloud/utils #4486
- Bug 1911819: Fix docs/user/kubevirt/install-config.yaml to pass ./hack/yaml-lint.sh #4519
- Bug 1911819: Add kubevirt user documentation #4516
- Bug 1908743: Add validation that the KubeMacPool component is enabled for the namespace #4509
- Bug 1910049: Revert “openstack UPI: Use ansible-galaxy” #4506
- Bug 1882022: installconfig: enable vsphere folders for datacenters and clusters. #4493
- Bug 1908782: terraform: Add rules to allow internal IPsec traffic #4491
- Bug 1908171: fix Terraform issue with GCP custom machine types #4496
- Bug 1907947: cloud-creds-secret creation with current context info only #4484
- Bug 1907628: OpenStack Documentation for MachineSets with Multiple Networks #4463
- Bug 1906517: OpenStack: Skip collecting info for empty subnet IDs #4474
- Bug 1908280: update docs for Cinder AZs #4487
- Bug 1907621: Bump cluster-api-provider-kubevirt version #4479
- Bug 1890228: pkg/destroy/aws: Pass destroy if HostedZone does not exist #4477
- Bug 1906459: openstack: fix quota checks when they’re unlimited #4470
- Update GCP Customization doc to reflect CMEK additions #4468
- Openstack: describes how to enable qemu agent for UPI. #4441
- oVirt: update team members #4464
- Bug 1904663: Fix comparison in pointer ignition customization asset #4455
- openstack: Test Nova AZ manifest generation #4459
- do not generate the cloud cred secret when credentialsMode is Manual #4416
- update gophercloud/utils & terraform/provider-openstack #4457
- hack/verify-vendor.sh: Fail early if error #4421
- Bug 1899175: data/rhcos.json: Update boot images for RHEL 8.3 #4414
- Openstack primary subnet using machine spec #4346
- Deprecate computeFlavor in OpenStack platform #4321
- openstack: Test manifest creation #4431
- openstack: Allow to skip pre-flight validations #4452
- Bug 1900138: Removed support for insecure mode for oVirt/RHV installation #4404
- openstack: check quotas before creating cluster #4432
- OpenStack: Adds clusterOSImageProperties to install-config.yaml #4401
- Bug 1904125: Ensure the bootstrap ignition libvirt pool defaults to <clustername>.<id>.bootstrap rather than ‘default’ #4448
- Bug 1868748: baremetal: rename JSON field for ClusterProvisioningIP #4053
- Add KubeVirt platform as infrastructure for Openshift installation #4350
- cloudproviderconfig: Refactor openstack #4447
- Pass CLUSTER_PROFILE env var to CVO render #4444
- vSphere Destroy: add log messages for tag destruction #4407
- baremetal: send full ignition to masters #4427
- asset/installconfig/Azure: Validate install-config instance types #4419
- Update MCO doc references #4445
- baremetal: Add ironic logwatch containers #4437
- Create SR-IOV UPI Docs #4439
- docs: update docs/design/resource_dep.svg #4443
- Bug 1903277: destroy/aws: remove rules from default security group #4440
- Set default release image to 4.7 #4409
- baremetal: make cluster provisioning IP optional #4429
- pkg/asset/quota: Typo in warning message presented to user #4430
- Create a machineconfig for IPI pointer ignition customizations #4413
- vSphere Docs: Update to include Permissions #4393
- OSASINFRA-902: Update OpenStack Custom External LB and DNS Docs #4389
- baremetal: correct the cacheImageURL when we don’t have a provisioningIP #4408
- Bug 1895874: Use oVirt Engine certificate verified by the user for installation #4387
- Bug 1899853: openstack: CP nodes port to use addtional SGs #4411
- baremetal: Handle xz filenames for OKD #4392
- Support user provided service-account-signing-key and issuer #4373
- pkg: validation for previously existing ovirt configuration #4354
- Bug 1898194: installconfig/gcp/validation: handle custom machine types #4386
- baremetal: when networking is disabled make the bootstrap provisioning ip optional #4390
- Bug 1898238: Validate the the API and Ingress FIPs are not the same #4385
- Bug 1848945: OpenStack - Documentation for adding worker nodes using ansible #4205
- Bug 1813012: Remove unused etcd discovery domain #4067
- Bug 1894432: oVirt, add timeout to tmp_import_vm #4341
- baremetal: validate that macs are EUI-48 and unicast #4378
- Bug 1855351: standardize interrupt error messages #4360
- Stop validating DefaultMachinePlatform #4391
- Bug 1889779: vSphere destroy: handle failed clusters #4388
- openstack UPI: Use ansible-galaxy #4379
- Updating ose-baremetal-installer builder & base images to be consistent with ART #4370
- Correcting normal typos #4363
- Bug 1891543: openstack: remove platform flavor validation #4383
- baremetal: remove root_gb from tfvars #4319
- Cleanup: make conversion functions private #4376
- Bug 1888464: add tag:UnTagResource perm for aws shared networks #4371
- Remove the secrets directory recursively #4369
- doc/openstack: update quota reqs for kuryr #4362
- Fix ‘troubleshooting’ typo #4365
- libvirt: Bump bootstrap size (primarily for OKD) #4364
- data/data/aws/route53: use CNAME for us-iso-east-1 region #4367
- Bug 1886435: Fix azure UPI az group deployment deprecation #4366
- asset/installconfig/gcp: Validate install-config instance types #4329
- Use ‘kubernetes.io/tls’ instead of SecretTypeTLS which is not being substituted #4342
- aws: support custom trust bundle for c2s regions #4335
- pkg/asset/cluster/aws: switch to ec2 tagging API #4356
- Bug 1867165: baremetal: allow configuring bootstrap mac addresses #4052
- doc/openstack/UPI: improvements #4355
- Small corrections in ovirt/install_ipi.md #4353
- data/bootstrap/files/usr/local/bin/installer-gather: Tee logs into tarball #4345
- data/manifests/bootkube/cvo-overrides: Bump default to stable-4.7 #4347
- owners: Add mdbooth to openstack-approvers #4348
- owners: add dhellmann to baremetal-approvers/reviewers #4343
- data/manifests/bootkube/cvo-overrides: Drop the explicit upstream #4112
- Bug 1891543: openstack: consider volumes for storage requirements checks #4323
- Document how to deploy cluster with BM and VM workers #4336
- Wrap errors after OpenStack creds validation #4338
- Bug 1855351: Handle CTRL+C in GCP survey #4334
- Bug 1894144: baremetal: pin libvirt to 4.5.0 #4339
- cmd/openshift-install/create: Use library-go’s IngressURI helper #4245
- Bug 1888378: Ignore error if resource group already deleted #4325
- Bug 1887863: Patch Flavor Not Found validation for OpenStack Install Config #4289
- Use authentication for Ironic on baremetal bootstrap host #4256
- Bug 1841381: oVirt, add memoryMB validation #4309
- Bug 1878374: Adding more nitro and the AMD instance types (AWS, UPI) #4327
- Bug 1866925: display Azure destroy auth error #4331
- openstack: fixup markdown #4328
- Revert “[Azure][Destroy] Check if resource group exists” #4322
- Add Encryption Key reference to GCP MachinePool API #4318
- aws: block cluster destroy in c2s region #4316
- aws: ensure users set ami id for c2s regions #4315
- Bug 1891702: pkg/asset/ignition/bootstrap: exit loop if pem.Decode() fails #4317
- Bug 1888378: [Azure][Destroy] Check if resource group exists #4320
- oVirt: change owners #4311
- Code cleanup and optimizations #4272
- Bug 1889267: oVirt, increase terraform template and release image timeout to 20m #4285
- install-approvers: add staebler #4297
- Bug 1880443: allow providing client options when generating OpenStack MachineSets #4196
- openstack: Update CI base image #4291
- pkg/asset/installconfig/aws: Validate install-config instance type #4258
- go.mod Update #4294
- Bug 1836017: Configure haproxy to check /readyz #4012
- Bug 1870728: pkg/asset/ignition/bootstrap: Display warning if certificates are expired #4287
- Bug 1889852: add new AWS regions #4288
- Bug 1877116: aws: use file for bootstrap ign when uploading to s3 #4281
- Bug 1886553: GCP - Increase worker NAT min ports #4273
- cmd: split newlines in logrus stderr output to new entry #4282
- openstack: Add a new team member #4290
- Bug 1882649: Determine Glance disk format based on file extension #4279
- vSphere: Update dockerfile removing certificate #4274
- Update README.md - Broken Link - Spelling #4278
- OpenStack: remove legacy image validation #4277
- Bug 1882844: vsphere destroy: delete tag category created by installer #4265
- Bug 1878900: openstack: Fix error messages in flavor validation #4269
- OpenStack UPI: Custom API and Ingress vip addresses #4092
- Bug 1888671: openstack: Document Cinder’s ignore-volume-az #4271
- Bump K8s.io version to v0.19.0 #4266
- destroy: return aws resources that could not be deleted #4270
- install-complete: provide troubleshooting info when operators fail #4259
- OpenStack: add clusterOSImage validations #3964
- Bug 1887525: baremetal: Wait for master-bmh-update script to succeed #4262
- openstack: Bump Ansible to 2.9 in UPI #4261
- Bug 1874248: types/vsphere/validation: ensure vcenter is all lower case #4254
- Bug 1884691: types: allow manual cred mode for gcp and azure #4238
- Updating ose-installer builder & base images to be consistent with ART #4250
- Remove dead code #4252
- Updating ose-installer-artifacts builder & base images to be consistent with ART #4251
- openstack privileges documented #4214
- OpenStack: Rename lbFloatingIP to apiFloatingIP #4244
- Bug 1882191: Add GODEBUG=x509ignoreCN=0 to systemd DefaultEnvironment #4248
- Bug 1884435: vsphere - add delay if resolv.conf is not available; wait for dhcp #4237
- Bug 1777224: pkg/asset: metadata to depend on ignition #4223
- Bump RHCOS images for Ignition entropy fix #4241
- Bug 1859174: Upgrade Terraform provider OpenStack #4216
- Fix json tag for GCP auth service account #4166
- installer/pkg/quota/gcp/limits.go: fix minor typo in comment #4160
- IP address should be specified without underscore. #3204
- Docs: OpenStack: Remove mention of cluster failing to destroy #4208
- Bug 1876815: OpenStack: unset OS_CLOUD #4231
- Bug 1884558: do not use local cacert path in generated clouds.yaml #4227
- Bug 1878758: openstack UPI: Allow for no FIP or router #4219
- Bug 1876844: openstack UPI: Ignition token needs Glance access #4236
- Bug 1881703: Revert “Have the MCO manage the ignition stub config” #4228
- Bug 1882752: openstack BM: Remove MachineSet on separate subnet #4230
- Bug 1878900: openstack: Skip validation for baremetal flavors #4222
- Bug 1881532: openstack: Only list external networks in prompt #4226
- Bug 1882805: Bump bootimages for ppc64le and s390x to 46.82.202009240941-0 and 46.82.202009241338-0 #4215
- Bug 1881757: tls: set mcs cert common name to not-valid-hostname #4210
- Bug 1882810: vsphere - local dns prepender not named with template #4220
- Bug 1853418: Ignore trailing dots in baseDomain #4146
- Bug 1881487: data/rhcos.json: Update to 46.82.202009220041-0 #4206
- Bug 1877984: Fix “OpenShiftSDN” to proper case when generating network config #4207
- Bug 1879533: oVirt UPI - Better explanation of the inventory #4180
- Bug 1878789: Add note about ignition certificates expiration #4171
- Bug 1877854: OpenStack: Support multiple subnets #4093
- Bug 1879649: oVirt UPI - Simplify create templates #4182
- Bug 1880393: OpenStack UPI: Explain how to encode cert to base64 #4203
- Bug 1880393: OpenStack UPI: Trim EOLs from the cacert trustbundle #4201
- Bug 1878163: Updating images/baremetal/Dockerfile.ci baseimages to mach ocp-build-data config #4186
- Bug 1879891: Fix cluster destroy when fip less installation happened #4191
- Bug 1878163: Updating images/installer/Dockerfile.ci baseimages to mach ocp-build-data config #4185
- Bug 1878163: Updating images/installer-artifacts/Dockerfile.rhel baseimages to mach ocp-build-data config #4184
- Bug 1876815: unset OS_CLOUD during config generator #4177
- Bug 1878108: asset/quota/gcp: use GCP api to find CPU count for constraint and guess only on failure #4163
- Bug 1877486: proxy: allow * for noProxy #4172
- Bug 1880132: destroy/gcp: correct extract service account email from IAM policy binding member #4193
- Bug 1861917: Add cpc config to bootstrap #4178
- install: increase timeout to 40 minutes #4181
- Bug 1879081: OpenStack: Switch to train/centos8 repos #4175
- Bug 1877885: oVirt UPI - Add Ansible playbooks download #4169
- Bug 1878758: openstack UPI: Optional floating IPs #3755
- Bug 1877763: oVirt UPI - python code snippets without semicolons #4170
- Bug 1874747: ovirt: dont start the temp VM before template creation #4168
- Bug 1878243: openstack: Upgrade the CI build image #4161
- Bug 1877440: oVirt UPI Assets_dir set according to env var #4153
- Bug 1874457: Add support to clean custom router #4159
- Bug 1877676: OpenStack: Refresh documentation about ingress FIP #4059
- Bug 1877436: oVirt UPI RHCOS explanations, assets env var #4152
- Bug 1877862: oVirt UPI - Fix templates check and optimize image check #4157
- Bug 1877741: installer-masters-gather.sh: gather openshift-{azure,gcp}-routes logs #4148
- Bug 1873125: Fix python syntax for OpenStack UPI scripts #4154
- Bug 1870038: vmware upi: haproxy.service to rm haproxy pod on ExecStop #4132
- Bug 1866925: pkg/destroy/azure: fail fast if unable to list resources for any reason #4025
- Bug 1873125: OpenStack: UPI missing instructions to update apiVIP and ingressVIP #4133
- Bug 1875855: increase timeout for bootstrap ignition downloading #4145
- Bug 1856928: Fix Non yaml files in manifests/ or openshift/ directories preventing bootstrap from completing #4091
- Bug 1876825: generate lbFloatingIP in OpenStack config #4147
- Bug 1876792: oVirt UPI Move Network Requirements section #4142
- Bug 1876783: oVirt UPI fix python cmd #4141
- Bug 1876562: Small readability improvements to UPI on RHV documentation #4136
- Bug 1871653: baremetal: set root device hints on host resources #4088
- Bug 1875932: Update baremetal DNS design details #4101
- Bug 1868439: openstack UPI: Fix JSON syntax #4140
- Bug 1874656: Bump RHCOS for s390x/ppc64le to fix SSH authentication #4124
- Bug 1861917: bootkube: add image for cluster-policy-controller #4131
- Bug 1871712: pkg/destroy/aws: Detach attached policies during destroy #4126
- Bug 1867975: aws: ensure users set ami id for us-gov and cn regions #4103
- Bug 1868439: openstack UPI: Fix Ingition key error #4135
- Bug 1872080: Updating images/baremetal/Dockerfile.ci baseimages to mach ocp-build-data config #4086
- Bug 1872080: Updating images/installer-artifacts/Dockerfile.rhel baseimages to mach ocp-build-data config #4085
- Bug 1872080: Updating images/installer/Dockerfile.ci baseimages to mach ocp-build-data config #4087
- BUG 1872646: oVirt, remove tmp VM disk on destroy #4129
- hack/update-rhcos-bootimage: update usage example #4097
- Bug 1813012: Remove unused flags previously needed for etcd static pod #4063
- Bug 1842071: Add ppc64le and s390x documentation links #4115
- Bug 1873448: Ensure proper tagging of compute nodes ports #4118
- Bug 1872861: Update cli container image for UPI #4098
- Bug 1873712: Add information about AZs limitations with Kuryr #4109
- Bug 1871795: bump RHCOS images to fix SSH authentication #4095
- Bug 1873123: omit deprecated parameters during config generation #4100
- Bug 1813012: Remove unused etcd host service and endpoints #4068
- Bug 1871030: data/data/gcp: be pedantic about setting the region #4089
- Bug 1856270: Update known issues with info about provisioning state node bug #4083
- Bug 1870082: Use index in MachineSet names for Openstack IPI #4070
- Bug 1813012: Remove legacy code for unmanaged cluster-etcd-operator #4062
- Bug 1863026: docs/user/azure: remove newlines from base64 encoding in UPI install doc #4090
- Bug 1871048: OpenStack: dynamically set end of DHCP allocation pool #4077
- Bug 1868773: Libvirt: Bump bootstrap memory to 4G #4080
- Bug 1862209: aws: fix validation for user tags #4081
- Bug 1871124: OpenStack: Improve snippet for playbooks download #4079
- Bug 1871124: openstack UPI: Provide a way to get the playbooks #4078
- Bug 1866534: fixes bootstrap DNS failure on bare metal #4015
- Bug 1862957: bump RHCOS images for FIPS fix #4066
- Bug 1870592: openstack: Document MachineSet availabilityZone #4074
- Readme.md: Remove experimental tag for OpenStack UPI #3982
- Bug 1866693: docs: drop kernel-devel from supported extensions #4030
- Bug 1864092: baremetal: copy the implementation of rootdevicehints from baremetal-operator #4002
- Bug 1862290: vendor/terraform-provider-vsphere: DiskPostCloneOperation patch carry #4060
- Bug 1868439: openstack UPI: Fix Ignition v3 #4058
- openstack: Known issue: no BMs on Kuryr #4051
- Bug 1869329: OpenStack: Place Bootstrap in one of the master AZs #4056
- Bump rhcos images for s390x #4050
- OpenStack: Fixups to BM workers documentation #4057
- Bug 1868439: openstack upi: fix Ignition key error #4047
- OpenStack: baremetal worker documentation #3955
- Bug 1866949: data/data/aws/route53: use CNAME for gov cloud partition #4043
- Bug 1862044: deleting servers using metadata-based filtering #4032
- Bug 1867972: destroy/aws: setup the resourcetagging api with correct region for gov cloud #4042
- Bump rhcos images for ppc64le #4021
- Bug 1867519: make externalNetwork optional #4029
- Full changelog
- Updating vertical-pod-autoscaler builder & base images to be consistent with ART #190
- Full changelog
- Updating ose-cluster-kube-storage-version-migrator-operator builder & base images to be consistent with ART #38
- Full changelog
- Updating ose-cluster-machine-approver builder & base images to be consistent with ART #103
- Full changelog
- Bug 1943754: Ensure automountServiceAccountToken is synced on service account updates #539
- Bug 1941217: pkg/cvo/sync_worker: Skip precreation of baremetal ClusterOperator #534
- Bug 1926795: install/0000_90_cluster-version-operator_02_servicemonitor.yaml: adjust “CannotRetrieveUpdates” to “warning” #516
- Full changelog
- Bug 1945856: 99729:Only system-node-critical pods should be OOM Killed last #642
- Bug 1927717: UPSTREAM: 98939: fixes race in TestSyncPodsDeletesWhenSourcesAreReady #567
- Bug 1931702: UPSTREAM: 96958: kubelet: remove periodic messages from log-level 2 #589
- Bug 1931745: UPSTREAM: 98956: Fix race when KillPod followed by IsPodPendingTermining #590
- Bug 1929674: kubelet: fix create sandbox delete pod race #591
- Bug 1933094: UPSTREAM: 98742: Sync completed pods until their containers have been terminated #595
- Full changelog
- Bug 1942068: Gahter datahubs.installers.datahub.sap.com resources from SAP clusters (#383) #383
- Bug 1939061: Sap license management logs gatherer 4.7 (#372) #372
- Adds memory usage to the metadata (#364) #364
- Bug 1935070: Extend the OLM operator data with related … (#362) #362
- Bug 1934442: Gather info about unhealthy SAP pods (#360) #360
- Bug 1936802: Authentication log gatherer - do not scan all the pods in openshfit-authentication (#369) #369
- Bug 1936861: Include namespace name in binarydata configmap path & test (#368) (#370) #368
- Full changelog
- Strip xattrs #112
- overlay: add NetworkManager config to prevent requesting additional MAC #109
- overlay: add dhcp-client-identifier #101
- manifests: add include.release annotations #98
- Full changelog
- Updating prom-label-proxy builder & base images to be consistent with ART #330
- Full changelog
Source code for this page located on github