Back to index

Download installer and client with:

oc adm release extract --tools quay.io/openshift/okd:4.7.0-0.okd-2021-06-04-191031

Team Approvals:

No tests for this release

Upgrades from:

• 4.7.0-0.okd-2021-06-04-131839 (changes) - F F S
• 4.7.0-0.okd-2021-05-22-050008 (changes) - Success
• 4.7.0-0.okd-2021-04-24-103438 (changes) - Success
• 4.7.0-0.okd-2021-04-11-124433 (changes) - Success Failed
• 4.7.0-0.okd-2021-03-28-152009 - Success
• 4.6.0-0.okd-2021-02-14-205305 (changes) - F S F

Upgrades to:

• 4.7.0-0.okd-2021-06-19-191547 (changes) - Success
• 4.7.0-0.okd-2021-06-13-090745 (changes) - Success

---

Loading changelog, this may take a while ...

Changes from 4.7.0-0.okd-2021-03-28-152009

Created: 2021-06-05 06:08:41 +0000 UTC

Image Digest: sha256:78ebb2404a0f3a5622fa141a6bcc923284d773ed0ccf65239a47ede1a3ad07d2

Release 4.7.0-0.okd-2021-06-04-191031 was created from registry.ci.openshift.org/origin/release:4.7.0-0.okd-2021-06-04-191031

Components

• Kubernetes 1.20.0-beta.2
• Fedora CoreOS upgraded from 33.20210323.10 to 34.20210518.3

New images

• driver-toolkit git bbf091e6 sha256:52ce5a78c22547ce1004e1237eac7a8cc652c713a4d575558d215e8fdcf9b14d

Rebuilt images without code change

• baremetal-machine-controllers git 25cbb8d8 sha256:35db17a664c972925be2ba965644c52c2a4afacf64ad535ceeb90d5314e9ab1c
• baremetal-operator git 74c60aa9 sha256:f8de068a6bb16340bfe340c5a96ea72c21c171bb6ade7b78a25ae8d448513d14
• csi-external-resizer git f77279e9 sha256:3257a73312d45dd3d40bd293dbfa5c36e08748315664acd9ed81b3d7f5433f20
• csi-external-snapshotter git 26773735 sha256:81e2185a9bc191c9c8228210b473650c519e371751c26d95c70742751aad5734
• csi-livenessprobe git 3dad0280 sha256:4df9cecf8dc7544ed02f51540fee778da7c356a7bf3da1fa07bb2def4f32d260
• csi-node-driver-registrar git 2a77963e sha256:a7867af403524a47fde36dd9df7db4bf311f479b96075ca87331e35e52f273fe
• csi-snapshot-controller git 26773735 sha256:292cfa81294a015e58ef0a934fd4458955db0fbec6db5c964f06ef1270b50afd
• csi-snapshot-validation-webhook git 26773735 sha256:0cb89f34f95f8f4556f75f40b7ecce28f4af80ca717475460883d09c2e1025f1
• docker-registry git 8e0c068a sha256:a9280162c7af6a5ccee78df57c2ffd416e5fb20fe0eaaf1bbb2f118755e6c24d
• libvirt-machine-controllers git 033be25c sha256:301975a9875c68eb7af7263fd5a8581f9827a37a61fc3268f5948ee36615e21a
• openstack-machine-controllers git 471cf3ab sha256:37ebfd8f4dc4a8958ec06d3186363b40287a8df47774d4d6705cbdcdf05037d3
• ovirt-csi-driver git 72545e63 sha256:f5896064dd203631adb53d86f6e044b80d071c6c6f67ab7e2b9e4dfa096fef6a
• ovirt-csi-driver-operator git f8808a04 sha256:1214f291361669db31c257f09de3b89cab08a1a94c6c7367b1e0868ed1d3f327

aws-machine-controllers

• Updating ose-aws-machine-controllers builder & base images to be consistent with ART #373
• Bug 1924471: Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #409
• Bug 1952614: [OCPCLOUD-1115] Get instance tags from infrastructure object #405
• Full changelog

baremetal-installer, installer, installer-artifacts

• Bug 1945907: Byo aws iam roles 4.7 #4813
• Bug 1954803: aws: support for bring-your-own hosted zone #4887
• Bug 1951571: registry.svc.ci.openshift.org is no longer valid #4853
• Bug 1954152: manifests: populate aws user tags in infrastructure #4882
• Bug 1935174: RHCOS bump for LUKS, prjquota, etc #4791
• Bug 1947122: gcp: install google cloud sdk with yum the recommended way #4824
• Full changelog

baremetal-runtimecfg

• Bug 1962949: Keepalived- verify that unicast peers list isn’t empty on master nodes #140
• Bug 1942488: sort AddressesDefault by route priority, ifindex, and IPv4/IPv6 preference #132
• Full changelog

cli, cli-artifacts, deployer, tools

• Fix unit test failure #838
• Bug 1942938: [release-4.7] inspect clusteroperators as a backup to must-gather if it fails #766
• Full changelog

cloud-credential-operator

• Bug 1948396: oVirt credentials secret contains unnecessary “ovirt_cafile” #322
• Bug 1948702: [release-4.7] manifests/0000_90_cloud-credential-operator_04_alertrules: Drop CloudCredentialOperatorDown #324
• Full changelog

cluster-authentication-operator

• Bug 1956797: bump kube to 0.20.6 to prevent delegated authz panics #443
• Bug 1941840: endpoints controller: close response bodies #440
• Bug 1949941: add a scraper and an alert to check for old-style tokens #437
• Full changelog

cluster-autoscaler

• Updating atomic-openshift-cluster-autoscaler builder & base images to be consistent with ART #187
• Full changelog

cluster-autoscaler-operator

• Bug 1924478: Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #207
• Full changelog

cluster-baremetal-operator

• Bug 1936544: Inject proxy environment variables everywhere #117
• Full changelog

cluster-config-operator

• Bug 1954152: vendor: bump to the latest openshift/api #200
• Full changelog

cluster-csi-snapshot-controller-operator

• Bug 1961719: manifests/05_operator_rbac: Drop the unused namespace property #89
• Bug 1967328: Remove exclude annotation from manifests to include in ROKS #91
• Bug 1929881: Fix installation on ROKS #80
• Full changelog

cluster-dns-operator

• Bug 1953097: Corefile: Enable bufsize plugin for all servers #267
• Bug 1953609: Enable errors plugin for custom upstream resolvers #268
• Bug 1942228: Fix spurious reconciliation of DNS daemonset and service #250
• Bug 1943826: Corefile: Use 30 second max TTL for caching of negative responses #254
• Full changelog

cluster-etcd-operator

• Bug 1958416: pkg/dnshelpers: fallback to spec if status is not populated for serviceNetwork #594
• Bug 1955418: manifests: Shift FlowSchema to level 50 #582
• Bug 1954121: [release-4.7] Improve cert controller detection and correction of invalid certs #577
• OWNERS: add lilic as reviewer #588
• Bug 1954073: bindata, pkg: Propagate operator log level to etcd itself #578
• Full changelog

cluster-image-registry-operator

• Bug 1960562: manifests: fix selector in image-registry-operator #689
• Bug 1957308: Setting user tags always when Storage is Managed #684
• Bug 1955176: Setting user provided tags on bucket creation #682
• Full changelog

cluster-ingress-operator

• Bug 1942603: [release-4.7] Add the new NetworkPolicy-matching label to the namespace #615
• Bug 1954097: Annotate services of type LoadBalancer with user tags (AWS only) #606
• Full changelog

cluster-kube-apiserver-operator

• Bug 1927321: competing connectivitycheckcontrollers cause pod restarts during upgrades #1041
• Full changelog

cluster-machine-approver

• Bug 1924492: Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #120
• Updating ose-cluster-machine-approver builder & base images to be consistent with ART #103
• Full changelog

cluster-monitoring-operator

• Bug 1967966: Switch back anti-affinity to soft from hard for Prometheus #1200
• Bug 1956565: manifest allowlist: add acm_managed_cluster_info in 4.7 #1144
• Bug 1961069: remove dependency of e2e tests on AWS #1162
• Bug 1957703: [4.7]: Add hard anti-affinity constraints to Prometheuses #1150
• Bug 1950290: remove KubeClientCertificateExpiration alert rule #1171
• Bug 1955482: fix kube-state-metrics regexp patterns #1163
• Bug 1955482: Drop high-cardinality metrics from kube-state-metrics which aren’t used #1141
• Bug 1955469: remove node_mountstatsnfs* metrics #1154
• Bug 1955462: drop container_memory_failures_total metric backport #1160
• Bug 1952149: oc adm top reporting unknown status for Windows node #1130
• Bug 1955449: drop crio image metrics #1134
• Bug 1945856: Revert “Bug 1934516: [4.7]: jsonnet/prometheus.jsonnet: Apply system-cluster-critical class to cluster Prometheus ” #1103
• Bug 1945851: Backport Remove the “instance” and “pod” labels for kube-state-metrics metrics #1101
• Full changelog

cluster-network-operator

• Bug 1942603: [release-4.7] Allow from router policy support for cluster network operator #1087
• Bug 1937396: kuryr/alerts: change the rule for free count #1011
• Bug 1957749: ovnkube: add missing resource requests for SBDB #1088
• Bug 1954302: Remove OVS daemonsets #1076
• Bug 1956352: [4.7] OVN kubernetes dual-stack conversion #1082
• Bug 1941214: Use 10% for ovs maxUnavailable for rolling update #1031
• Bug 1936719: OSD-6600 network-metrics missing priorityClass #1007
• Bug 1927321: competing connectivitycheckcontrollers cause pod restarts during upgrades #1050
• Bug 1941212: The Multus daemonset should handle 10% maxUnavailable #1030
• Full changelog

cluster-node-tuning-operator

• Bug 1960542: manifests: fix selector in node-tuning-operator ServiceMonitor #228
• Full changelog

cluster-openshift-apiserver-operator

• Bug 1955502: explicitly allow apiserver pods to write to their root FS #449
• Bug 1927321: competing connectivitycheckcontrollers cause pod restarts during upgrades #444
• Full changelog

cluster-openshift-controller-manager-operator

• Bug 1944142: Bump kubernetes to 0.20.5 #204
• Full changelog

cluster-samples-operator

• Bug 1961518: manifests: fix selector in ServiceMonitor #375
• Bug 1950808: add DeepCopy to avoid SharedInformer cache mutation #370
• Full changelog

cluster-storage-operator

• Bug 1961719: manifests: remove namespace from cluster-storage-operator-role binding #170
• Bug 1959546: Add alert about vsphere-problem-detector unable to connect #169
• Full changelog

cluster-update-keys

• Pack both keys in one verifier-public-key-ci entry #36
• Adding the new Openshift CI Signer key #34
• Full changelog

cluster-version-operator

• Bug 1959238: pkg/cvo/sync_worker: Shift ClusterOperator pre-creation into the manifest-task node #557
• Bug 1943754: Ensure automountServiceAccountToken is synced on service account updates #539
• Full changelog

console

• Bug 1966798: [release-4.7] Remove monitoring labelling step for 4.7 tests #9073
• Bug 1951210: Fix default resource log download file name #8707
• Bug 1944046: Warn using an unsupported IE browser #8494
• [release 4.7] Bug 1939553: Support binary file type secret entries #8389
• Bug 1960544: Overly generic CSS rules for dd and dt elements breaks styling elsewhere in console #8925
• Bug 1960093: Make console works against api proxy #8914
• Bug 1942027: Fix RBAC check when creating a resource #8448
• Bug 1956336: Fix Triggers section in eventlistener details page #8842
• Bug 1953937: Fixing PVC creation page issue in 4.7(Reverting wrong commit) #8784
• Bug 1952578: Don’t poll ClusterVersion when user doesn’t have authority #8749
• Bug 1950489: Fix “Create binding” link from Role page, RoleBindings tab #8685
• Bug 1948958: Fix ingress details page to show referenced secret name #8633
• Bug 1944955: Fix close button in the new ‘Storage cluster exists’ warning alert modal #8524
• Bug 1956313: Save additional parameters from build guidance container and drop it #8841
• Bug 1953728: Fix issues related to loading dynamic plugins #8780
• Bug 1945594: fixing-project-creation-and-updated-packageJson #8536
• Bug 1950214: Fix start pipeline action access review #8681
• Bug 1948369: Remove cluster label from predefined monitoring queries #8613
• Bug 1954109: Backport telemetry dynamic extension to release-4.7 #8783
• Bug 1952209: Consistent formatting of dates and times #8734
• Bug 1952293: adds check for templates #8736
• Bug 1942843: Modified description for storage class encryption - 4.7 Backport #8462
• Bug 1948938: [release-4.7] Prow script point to deleted resource #8619
• Bug 1944855: Update Dockerfile.product for nodejs v14.16.0 #8488
• Bug 1945153: Remove pipeline Tech preview badge for pipelines GA operator #8528
• Bug 1943643: fix pipeline metrics endpoint for 1.4 osp #8489
• Bug 1944349: fix backwards incompatible trigger api changes #8503
• Full changelog

console-operator

• Bug 1960589: [release-4.7] quickstarts: remove “spec.version” #547
• Full changelog

docker-builder

• Updating openshift-enterprise-builder builder & base images to be consistent with ART #188
• Bug 1943726: add bracket logging on openshift/builder calls into buildah to assist test-platform team triage #237
• Bug 1945692: move entitlement related secrets back to mounts.conf #240
• Full changelog

etcd

• ETCD-178: Bug 1944386: openshift-tools: fix on off flow and add unit tests #74
• Full changelog

gcp-machine-controllers

• Bug 1924508: Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #164
• Full changelog

gcp-pd-csi-driver-operator

• Bug 1940005: Add CSIDriver object #18
• Full changelog

haproxy-router

• Bug 1965402: Revert ‘Bug 1896977: Enhance host name validation in router’ #293
• Bug 1963243: Add a condition to check if the Endpoints ID is duplicated #288
• Full changelog

hello-openshift, tests

• Bug 1966358: Dockerfile.rhel: fix a bash typo #26194
• Bug 1961367: Add Cinder client to the test image #26171
• Bug 1955600: test/extended/router: Fix-up Unidling test #26120
• Bug 1963115: narrow verify /run test to /run/secrets #26180
• Bug 1963115: move verify run test from tools to cli image to avoid additional /run content #26176
• Bug 1958797: test/extended/router/idle: Only run on OVNKubernetes or OpenShiftSDN #26145
• Bug 1947705: Add test of documented backup/restore procedure #26110
• Bug 1955669: flake testKubeletToAPIServerGracefulTermination #26121
• Bug 1942055: upgrade/upgrade.go: Enhance upgrade ack time out error #26012
• Full changelog

hyperkube

• Bug 1966810: UPSTREAM: 102224: Fix expired unit test certs #780
• Bug 1963263: UPSTREAM: 102000: Ref counting is only applicable to Remote endpoints #763
• Bug 1955883: UPSTREAM: 99095: Prevent Kubelet stuck in DiskPressure when imagefs minreclaim is set #725
• Bug 1951726: Speed up PV provisioning for vsphere driver (ocp-4.7) #690
• Bug 1942141: fixes cinder PV labelling #635
• Bug 1951815: UPSTREAM: 99393: kubelet: reduce configmap and secret watch #692
• Bug 1955231: UPSTREAM: 101345: kubelet: improve the node informer sync check #721
• Bug 1952917: UPSTREAM: 100228: For LoadBalancer Service type don’t create a HNS policy for empty or invalid external loadbalancer IP #697
• Bug 1928862: Enable snapshot tests #569
• Bug 1945856: 99729:Only system-node-critical pods should be OOM Killed last #642
• Bug 1927717: UPSTREAM: 98939: fixes race in TestSyncPodsDeletesWhenSourcesAreReady #567
• Full changelog

insights-operator

• [release 4.7] Bug 1960645: Adds virt_platform metric to the collected metrics (#428) #428
• [release 4.7] Bug 1953579: GatherClusterOperators and GatherClusterOperatorsPodAndEvents (#410) #410
• Add vsphere_node_hw_version_total metric (#416) #416
• Bug 1950926: Extend OLM data with CSV display name (#400) (#402) #400
• Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

• [release 4.7] Bug 1947810: Update Jenkins to 2.277.3 and disable setup wizard #1259
• Bug 1952562: bump config-file-provider to 3.7.1 #1265
• Full changelog

kube-proxy, sdn

• Bug 1962637: ValidateMTU: check only the interface that holds the node ip #304
• Bug 1923231: rebase to sdn-4.7-kubernetes-1.20.0-rc.0 #286
• Bug 1941993: Fix incorrect unmonitoring of egress nodes #279
• Full changelog

kuryr-cni, kuryr-controller

• Bug 1949541: Fixing bug, Kuryr-Controller crashes when it’s missing the status #501
• Bug 1959766: Fix NPs for OVN LBs with hairpin traffic #516
• Bug 1929066: Skip pool pre population if no Status is present on CRD #505
• Bug 1941941: Include service subnet to be open for namespaceSelector set to all. #504
• Bug 1929066: Fix port pools #455
• Bug 1949551: kuryr-controller restarting after 3 days cluster running - pools without members #502
• Full changelog

machine-api-operator

• Bug 1924517: Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #867
• Bug 1955689: Webhook filter should check for both mutating and validating webhooks #861
• Bug 1947372: vSphere, detach virtual disks before virtual machine destroy if node not available #841
• Bug 1954610: Update GCP default image to match 4.7 release #856
• Full changelog

machine-os-content

• Update NetworkManager-ovs to 1.30 #131
• Bump NM to NetworkManager-ovs-1:1.26.8 #124
• Pin NetworkManager-ovs #120
• Strip xattrs #112
• Full changelog

multus-cni

• Bug 1927896: make a copy of global RuntimeConfig on merge #91
• Full changelog

oauth-server

• Bug 1965932: bump kube to 0.20.4 #79
• Full changelog

openshift-apiserver

• Bug 1961557: sets shutdown-delay-duration from OpenShiftAPIServerConfig #199
• Full changelog

openshift-controller-manager

• Bug 1955210: fixed LANG for the builder container #180
• Full changelog

operator-lifecycle-manager

• Bug 1962314: Explicitly set readOnlyRootFilesystem: false on created registry pods. #2171
• Bug 1963141: Make ClusterOperator Available condition sticky. #2173
• Bug 1962312: Simplify deployment status check to reduce flapping. #2170
• Bug 1962302: Set reason/message for Available condition in packageserver co #2168
• Bug 1959009: Use DeploymentAvailable instead of custom test for CSV status. #2151
• Bug 1924467: Bumps k8s.io dependencies to v0.20.6 #2121
• Bug 1949139: Preserve existing ServiceAccount owner references during installs. #2088
• Bug 1951657: fix(catalog): Reduce namespace resync in resolution failure #2107
• Bug 1952851: Add resource requests for bundle unpacker #2109
• Bug 1951232: Fix resolution error if inner entry doesn’t provide a required API. #2106
• Bug 1947909: Do not adopt copied CSVs #2089
• Full changelog

operator-registry

• Bug 1924468: Bump the k8s dependencies to v1.20.6 #638
• Bug 1937097: Add retries to opm index add #643
• Full changelog

ovirt-machine-controllers

• Bug 1939358: extract node machine ipaddress from the engine instead using DNS . #98
• Bug 1939360: providerIDController ignore nodes that have no machine #99
• Full changelog

ovn-kubernetes

• Bug 1946682: egress firewall as ACLs #487
• Bug 1942603: [release-4.7] Allow from router network policy support #526
• Bug 1956980: [release-4.7] fix ForEachAddressSet() as it is not calling the callback functions #523
• Bug 1959737: Fix: egress IP route health check detection state on restart #538
• Bug 1956270: service controller should not use the target-port #519
• Bug 1947097: [4.7z] Ensure no SNAT on GR for DisableSNATMultipleGws #533
• Bug 1939488: Backport Handle Multus network-status annotations on pod update #467
• Bug 1956318: Revert “removing the hybrid overlay externalGW code” #521
• Bug 1951064: master: cancel leader election on exit #505
• Bug 1950131: fix deadlock in EgressFirewall DNS code #513
• Bug 1951552: master: Delay deleting Namespace’s address set for 20 seconds #507
• Bug 1950432: [4.7] pods: bind pod logical switch ports to the node’s chassis with requested-chassis #503
• Bug 1924826: Backport Update gogo/protobuf to v1.3.2. #464
• Bug 1943316: [4.7] master: enable logical datapath groups for OVN >= 20.12 #478
• Bug 1946696: iptables: add filter on node local traffic #489
• Bug 1947835: Fix service update for policy type assertion #493
• Bug 1942702: backport lr-nat-del/add fixes #484
• Full changelog

thanos

• Bug 1944575: pkg/rules: fix deduplication of equal alerts with different labels #52
• Bug 1957646: cmd/thanos: use miekgdns resolver as default #56
• Full changelog

vsphere-problem-detector

• Bug 1959546: Update to current master #40
• Full changelog

---

View changelog in Markdown or change previous release: 4.18.0-0.okd-scos-2024-11-21-0211394.18.0-0.okd-scos-2024-11-20-1411384.18.0-0.okd-scos-2024-11-20-0209584.18.0-0.okd-scos-2024-11-19-1409574.18.0-0.okd-scos-2024-11-19-0209564.18.0-0.okd-scos-2024-11-18-140955───4.17.0-0.okd-scos-2024-11-21-1114284.17.0-0.okd-scos-2024-11-20-2214034.17.0-0.okd-scos-2024-11-20-1014034.17.0-0.okd-scos-2024-11-19-2214034.17.0-0.okd-scos-2024-11-19-1014034.17.0-0.okd-scos-2024-11-18-221403───4.16.0-0.okd-scos-2024-11-21-0014434.16.0-0.okd-scos-2024-11-20-1214434.16.0-0.okd-scos-2024-11-20-0014434.16.0-0.okd-scos-2024-11-19-1214434.16.0-0.okd-scos-2024-11-19-0014434.16.0-0.okd-scos-2024-11-18-121443───4.15.0-0.okd-scos-2024-05-13-2236094.15.0-0.okd-scos-2024-04-25-1837084.15.0-0.okd-scos-2024-04-25-0637084.15.0-0.okd-scos-2024-04-24-1837084.15.0-0.okd-scos-2024-04-24-0637084.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2024-11-14-2031284.15.0-0.okd-2024-11-09-0406444.15.0-0.okd-2024-11-08-1606444.15.0-0.okd-2024-11-05-1344204.15.0-0.okd-2024-11-05-0144204.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.16.0-okd-scos.04.16.0-0.okd-scos-2024-09-24-1517474.16.0-0.okd-scos-2024-08-21-1556134.15.0-0.okd-scos-2024-01-18-223523───4.17.0-okd-scos.ec.34.17.0-okd-scos.ec.24.17.0-okd-scos.ec.14.17.0-okd-scos.ec.04.17.0-0.okd-scos-2024-09-30-1017394.17.0-0.okd-scos-2024-09-26-2248284.17.0-0.okd-scos-2024-09-24-1048284.17.0-0.okd-scos-2024-08-21-100712

Source code for this page located on github