# 4.7.32 Created: 2021-09-22 06:13:29 +0000 UTC Image Digest: `sha256:96f00e5b0cde92488c42cd9395ff5a755c77f4273eb10aa83bc2707a8badf93f` Promoted from registry.ci.openshift.org/ocp/release:4.7.0-0.nightly-2021-09-21-163432 ## Changes from 4.7.17 ### Components * Kubernetes upgraded from 1.20.0-beta.2 to 1.20.10 * Red Hat Enterprise Linux CoreOS upgraded from 47.83.202106120438-0 to 47.84.202109210831-0 ### Rebuilt images without code change * [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [f6a71bf7](https://github.com/openshift/aws-ebs-csi-driver/commit/f6a71bf783f3b7429a8c2fbbc6f3d586e6a7eb60) `sha256:9b8ae9e2ff8ec0dd910088b695b1a879d4cee4f41f735b25bc53a186860527ea` * [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [0074d6af](https://github.com/openshift/aws-pod-identity-webhook/commit/0074d6afef9e20f5a1bcbde85cd7c01e422202ca) `sha256:99f354b8a40ddbec5e8642ecba617f8eb9193a312a79ea09730bb91cb4c557fe` * [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [9c5da32b](https://github.com/openshift/baremetal-runtimecfg/commit/9c5da32ba602e5881178e56269b0506fcb54ff92) `sha256:f765fc6431a5d32d2f568894b1a983a92ffb16bd461f3eb644ac98c0f2a24a7d` * [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator) git [0783477a](https://github.com/openshift/cloud-credential-operator/commit/0783477aa72edf998344740933a99c0417ebe573) `sha256:e44b05fbfbd5917b24e20c42b11aa414eed575516fc181e91f7dd99f3f58c18e` * [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [6665cae3](https://github.com/openshift/cluster-bootstrap/commit/6665cae3374c18d466f11c9e0b8e41a61fcb0819) `sha256:4aaab06c42efed4fa94bc833b4269024a5167cd1267217c293343f8e25c97a47` * [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [07e059a6](https://github.com/openshift/cluster-config-operator/commit/07e059a6b0c98e98d71f0c08dc741605e2431914) `sha256:e0a1139d422dd165f126151f87df7ac4a518974fbbf6f70f18dfd12b1cd14b58` * [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [fc036b59](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/fc036b59b83b25ac6d1050aee0a172abb54502c6) `sha256:e3abe35c32c632f03297965eb77434839963c397e850ee0a2a5b6a3e741a0fa8` * [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [cf8be7b2](https://github.com/openshift/cluster-dns-operator/commit/cf8be7b279499d5010894b8c9bf79acc9853be36) `sha256:fe2232e4d5996e925b213fbff7d53b53ce2c1a0ea0db57c1dd0b6e5df81ae01e` * [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator) git [099c6afa](https://github.com/openshift/cluster-kube-apiserver-operator/commit/099c6afa1f8b4fe7654207f7eabd7784b42ce2e3) `sha256:a60c78b9f9bd1dbadf7e7c5f0e1aa5ab3575a1da8fc30f3903f6bfc7589b344b` * [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [28159093](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/281590936f3a94d4ae1eb008709fda6614fe763b) `sha256:39e3db92ba2944b1770893fb81de3415252b5aee217f7762f83ed724ec13c058` * [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [b2204ca2](https://github.com/openshift/cluster-kube-scheduler-operator/commit/b2204ca23a57e9f01af915375e6a18fc86ffecda) `sha256:a09ad0a483f187183d3a6d862edd96b5f12dfc977b517266e52e5c19e66e2eeb` * [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [54484757](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/54484757581ec26f178c599215715bafd6029582) `sha256:4948f61adff9be790532e8a7c9dc6908abe08541716db564733f35755a283c05` * [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [9043e2bb](https://github.com/openshift/cluster-machine-approver/commit/9043e2bba8f4707a578895f8b29d4736a61a010c) `sha256:faf7577ef555c658b6f4ca3eae240ac9817614090950f5bbc76189e9e842e82f` * [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [42791bac](https://github.com/openshift/cluster-policy-controller/commit/42791bac64066daac0922b3d77e4bd86edae3b4e) `sha256:f0295743d8164cc4f44b628699695d8b9b5d6c5e6525e67e92296b2fbbca8d4c` * [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [6d2c25f3](https://github.com/openshift/cluster-storage-operator/commit/6d2c25f3cfb931deca457a0c6261651c1a64c464) `sha256:cad185af898ad55f5cbebe5493937d9a377936c2df2925df40560da17d379df1` * [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [b7e79177](https://github.com/openshift/cluster-update-keys/commit/b7e791773b67f9acd6f521b8c1f69778e43a7d94) `sha256:9f46fcc0d232d5fdd2648c8d0f3a9810fc6fc9d7a79506ffecda2909ca20f0bf` * [configmap-reloader](https://github.com/openshift/configmap-reload) git [25dfb671](https://github.com/openshift/configmap-reload/commit/25dfb671c6ce9a73f5594efe699ed410fbf01d44) `sha256:2443c6973538318e4119831ed950d460cc9d3fc6bdc168ec6c1b3e6af38ace04` * [console-operator](https://github.com/openshift/console-operator) git [44a0308f](https://github.com/openshift/console-operator/commit/44a0308f894abae02f066a40ba394c8aa7331424) `sha256:081bf67532eff1f7ac54ba8cde5d781a17d1a7545165806482113093a5ecf42f` * [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [fc27124d](https://github.com/openshift/containernetworking-plugins/commit/fc27124d43b9dc995057b1f309d5f16e1b2ef151) `sha256:352d65fb4003b91f2e55de735c4f293cd60e66eade1885bae49cdc0526214556` * [coredns](https://github.com/openshift/coredns) git [d4a3ba3f](https://github.com/openshift/coredns/commit/d4a3ba3f6e03426d2623da86635caba17c0c3926) `sha256:aa50f167badf55dbda97bbf591df0a2af5db4d7f254fd7683abb85aa97b91852` * [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [9404d343](https://github.com/openshift/csi-driver-nfs/commit/9404d343c020fd1806691704f64d930c779ad639) `sha256:a3519c432766a44058b3fcd8e3f9aa707f85915521602008b6f2f903c6e9dbf4` * [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [f152de8a](https://github.com/openshift/csi-external-attacher/commit/f152de8ab08d9a4f13c97941afa01ef343b92b68) `sha256:01b3512a805fc05a02ee191ec6e5addfdb91754e99a874d9796a7e644283c6ce` * [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [a49415e1](https://github.com/openshift/csi-external-provisioner/commit/a49415e114b90060c8cdbb88b1ca3f0a4c5d2ebc) `sha256:466daf4b48ef662e18c68cad6ff76bdfe55f46ba1a4be70d5c373a8246a55526` * [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [f77279e9](https://github.com/openshift/csi-external-resizer/commit/f77279e9561a02c18676dbcafcbe6db7d0ebd077) `sha256:983bd84eb66e56f913ead6b8c4678de0e2018b890f416c2bbda146e4a4bb1cf4` * [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [26773735](https://github.com/openshift/csi-external-snapshotter/commit/26773735c1cbf09de9bf31cb3c640abdca04cd83) `sha256:303d2031c99cac9a7f4df562e2462eddebe8d558e51c547467bdf5976b45a084` * [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [3dad0280](https://github.com/openshift/csi-livenessprobe/commit/3dad0280ea630cfcc87bcf02806c75b7a066d81e) `sha256:54d9c74c39f0f4156e84d94487f6c47392053619af11ebb33aaf5dad2fa70d3f` * [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [2a77963e](https://github.com/openshift/csi-node-driver-registrar/commit/2a77963e5458da1bcde318b4609a6abefaf868d7) `sha256:bde7bc0d6c381c03674d506045e7026bfb46d5316b6ef4867cb7fa62d9bbfdbf` * [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [26773735](https://github.com/openshift/csi-external-snapshotter/commit/26773735c1cbf09de9bf31cb3c640abdca04cd83) `sha256:2509fa1717e9f0e4fb7d963ca3d88766aae9064cadc4fc94517edc28350f4bf1` * [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [26773735](https://github.com/openshift/csi-external-snapshotter/commit/26773735c1cbf09de9bf31cb3c640abdca04cd83) `sha256:437b240f66a6228a63500d7c5abec025885a1f7acf8f838146c0ef615158f489` * [egress-router-cni](https://github.com/openshift/egress-router-cni) git [96ebd378](https://github.com/openshift/egress-router-cni/commit/96ebd3782cbb63de098e75ebcedeac60546cfee3) `sha256:a90a5d1cf1dac0d40e9e9b2e9b3ac61c0b9c5c211a64fb0718d11581b64f803f` * [etcd](https://github.com/openshift/etcd) git [c61e5afd](https://github.com/openshift/etcd/commit/c61e5afde9485fac9233c0db6ab950bfb511e1b5) `sha256:c978f320671c0856087b8c76dc2da100e1b9288d4ea05cddf4da261baad0b989` * [gcp-machine-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [5f6589d4](https://github.com/openshift/cluster-api-provider-gcp/commit/5f6589d4ef9496e63ebc072f4d863151bbeb4407) `sha256:680b8d17f226c80ee85634aeb5e8957550b6a047f02ad3f7c44be98b3ca8be22` * [grafana](https://github.com/openshift/grafana) git [b02c35dc](https://github.com/openshift/grafana/commit/b02c35dc2d01fce696a3edc28839a9f9fd0150a3) `sha256:cdc84ed8eade407f7dff7d97a7e0a4eb2947bb6f9914b47ec22ef7137bd38cf0` * [ironic](https://github.com/openshift/ironic-image) git [1a7f41bb](https://github.com/openshift/ironic-image/commit/1a7f41bb1c2c04ccd06958669a24a08a0bf22258) `sha256:338c76d79e164443ee6c5bbd9236190bf37ac87058c62d75e0d9b455215269f6` * [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [43d640a0](https://github.com/openshift/ironic-static-ip-manager/commit/43d640a07582a5aaaa485ea85319bb0721dea251) `sha256:0d4338b5a9e35b8d9c0a0af9b34156ad0467e8c69465948c2a6cbc26a1a98845` * [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [212d80b4](https://github.com/openshift/k8s-prometheus-adapter/commit/212d80b4bd35fc6f19ec9ec537d0261a2a300cfd) `sha256:e92d3cf63119df7f9c860bcf482673067f033d1157da3b213a9c0bb89e887f5c` * [keepalived-ipfailover](https://github.com/openshift/images) git [0e45f638](https://github.com/openshift/images/commit/0e45f638fbf5fa9e9bdb507d81b2cb9f12fadbaf) `sha256:1e1d220fc5273c0de92b2c732b4f041a15d9a0ebdde6764ea778390c9157b4e6` * [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [14c288e6](https://github.com/openshift/kube-rbac-proxy/commit/14c288e6d19578d96e502def75995b882f1c9b37) `sha256:bb59a388eedaa21faff11ad2df1cffa023cf23afd792564e85fbe2c59d62bb4e` * [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [04bff708](https://github.com/openshift/kube-state-metrics/commit/04bff708e05190cbc18182a2dbb8a10930433c1d) `sha256:d560d0fd2593789670d3fe60ac97693597c9498d0c1c05be87cf58598b4020f8` * [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [329a4b06](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/329a4b06361cef8d70c8424d57466a6f5bcd4a59) `sha256:89f10ad8feace81e62ec8783743ebbbe3dd130bf713b0854ba90406edd7bb0b5` * machine-os-content `sha256:5483701cda95d5ac2fa1ef22c72e15f4bd4104204e16c499bc1d5ab7debba054` * [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [a7312f5e](https://github.com/openshift/multus-admission-controller/commit/a7312f5e55e9f34cc8b20f6cbfe1af0f363ca1e6) `sha256:05db4223fdb0b33b6f9abbdcd7d5aa85a7d213c81620d9f31ec7b49088083625` * [multus-cni](https://github.com/openshift/multus-cni) git [5530094d](https://github.com/openshift/multus-cni/commit/5530094db7607fc9292e3b269fcf5a85b0dad3df) `sha256:a25f4e49d343c9c0f03bdd96853c422955c64e73701dbc271c2e1c69bf8042b0` * [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [1662c3ec](https://github.com/openshift/route-override-cni/commit/1662c3ec79b880fce5cd9c4e64f5ba0d4daffc00) `sha256:cbba28a464671fe0aaa6d83ba854058f68c443d8a91e09b7c5f1eec38ed2d923` * [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [dfe6b395](https://github.com/openshift/whereabouts-cni/commit/dfe6b395b67c0cede73e6edf758976ae208b930c) `sha256:4638f576b283e312984cf503dd45393232f5a7c4d954a8d368051fe4f6ee247d` * [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [b1926150](https://github.com/openshift/network-metrics-daemon/commit/b1926150fd61d1f5137d18606661ff451f504a98) `sha256:a14542e6fada1d3f0fae09a0d0ad5324eadcd1793b10b9b068de81cbeffc7874` * [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [69f527e9](https://github.com/openshift/oauth-apiserver/commit/69f527e90f599e0f509cfce73ba7b95656f03f7f) `sha256:d2d0ecb4ab52c79b6e289b6a10a8841b2a64579fa4d54421981650b159a447cc` * [oauth-server](https://github.com/openshift/oauth-server) git [61db550b](https://github.com/openshift/oauth-server/commit/61db550b94b09356eebabcffd39aea8d90eb6089) `sha256:bba27eec5a6e95544f38f65e9cc23fed96ba94afcaeec2edef31d2aecb529c3a` * [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [40b0968e](https://github.com/openshift/openshift-state-metrics/commit/40b0968ee1d488b791cdd6750fac6534abac122e) `sha256:08eadffaafef0d09b3047a71c50001da332e9087b21c59c27502c7366105cfd5` * [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [72545e63](https://github.com/openshift/ovirt-csi-driver/commit/72545e6381b3625bcb37e37c4c713862d04cb145) `sha256:b805ce6904ff6e3c7c16b6bde79307cfe891a60c595c10118035c8e0771efdba` * [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [01b9bf83](https://github.com/openshift/cluster-api-provider-ovirt/commit/01b9bf8368a3da974bf1c9114c618a548d346acd) `sha256:907eef00a98eecf95718251d6ff237df37f643e017610326885ac270d21a852b` * [pod](https://github.com/openshift/images) git [0e45f638](https://github.com/openshift/images/commit/0e45f638fbf5fa9e9bdb507d81b2cb9f12fadbaf) `sha256:de78ddd265b711c1f0920b9cf00d5ada287a915fc3c668057b8bfbc1a0cc3462` * [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [db87872c](https://github.com/openshift/prom-label-proxy/commit/db87872c6aba7e4e9def29b33beea582557ce940) `sha256:5fcbca46febcb46e573e5f9d7c39d7060c384b488c05bd826bd1811a138e897e` * [prometheus](https://github.com/openshift/prometheus) git [cb5e53cd](https://github.com/openshift/prometheus/commit/cb5e53cdfedfee185feffcec13304dda87ff3055) `sha256:748b809926308e8862e63a95e0566e4164c08ffe83e4568b39dc84079979f2c8` * [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [9954cc42](https://github.com/openshift/prometheus-alertmanager/commit/9954cc421d26ecf498ac82f3cbdc64ce3afa4c74) `sha256:b2281de9e70d0dd445f11587bf86ece4e3619bc0c3807d38fd61f3daed011f7e` * [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [1f0fd51d](https://github.com/openshift/prometheus-operator/commit/1f0fd51df863c8773d2094e4ca78b4bd14cbf6e6) `sha256:13dcffe83657dd348781c1f15e1ec804cb3368572f6554c982670881d49567bc` * [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [76974e2e](https://github.com/openshift/node_exporter/commit/76974e2ed037c4bf81387dabf7ccd388a724c5aa) `sha256:46683b813973f59cd41e4e9afed38d20cdef2e5d800158e326212b0182dcb6d4` * [prometheus-operator](https://github.com/openshift/prometheus-operator) git [1f0fd51d](https://github.com/openshift/prometheus-operator/commit/1f0fd51df863c8773d2094e4ca78b4bd14cbf6e6) `sha256:db274be3da4b38456adb6b8fa41d6ed973be5b8fe97e1ab4c5b6221c883825c1` * [telemeter](https://github.com/openshift/telemeter) git [e4dac512](https://github.com/openshift/telemeter/commit/e4dac5123ef6b3ecb16b5151e2e8f8aeb8b1f21a) `sha256:32eab45f43c28ab8cb97ba71c6db96bd574ecaa8930d9c96491b1846ed52f484` * [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [8f7c1246](https://github.com/openshift/vsphere-problem-detector/commit/8f7c1246e6bcb99d8cdf667851b8d61f637f2801) `sha256:c865a11efa8f48ea228827ed9cbd0385e608b1b6f64e6347f963153af57a5cfa` ### [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator/tree/3a9ff17d523a342ee71a967a2b82d5cf044f1eb8) * [Bug 1996070](https://bugzilla.redhat.com/show_bug.cgi?id=1996070): Add maxUnavailable to DaemonSets [#135](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/135) * [Full changelog](https://github.com/openshift/aws-ebs-csi-driver-operator/compare/97f73eb7de4b474497169771239dcd81990d3f2e...3a9ff17d523a342ee71a967a2b82d5cf044f1eb8) ### [aws-machine-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/5368195c02ca672dc7f7a4ad571df5584fa4087f) * [Bug 1976192](https://bugzilla.redhat.com/show_bug.cgi?id=1976192): update aws-sdk-go to v1.38.25 [#415](https://github.com/openshift/cluster-api-provider-aws/pull/415) * [Bug 1942966](https://bugzilla.redhat.com/show_bug.cgi?id=1942966): Update EC2 instance types [#398](https://github.com/openshift/cluster-api-provider-aws/pull/398) * [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/8d9a84fb80765e74e4df09260ed38f455b6f712a...5368195c02ca672dc7f7a4ad571df5584fa4087f) ### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/94125b21304a574ae5bc98039f8eb7f518293b83) * [Bug 1981553](https://bugzilla.redhat.com/show_bug.cgi?id=1981553): [release-4.7] aws: move elastic ip permissions to create networking category [#5055](https://github.com/openshift/installer/pull/5055) * [Bug 1954595](https://bugzilla.redhat.com/show_bug.cgi?id=1954595): Validate noProxy input and add prefix for proxy urls [#5060](https://github.com/openshift/installer/pull/5060) * OWNERS: add more core team members as approvers [#5123](https://github.com/openshift/installer/pull/5123) * [Bug 1977481](https://bugzilla.redhat.com/show_bug.cgi?id=1977481): Dockerfile: repin libvirt [#5043](https://github.com/openshift/installer/pull/5043) * [Bug 1975819](https://bugzilla.redhat.com/show_bug.cgi?id=1975819): upi/vsphere: Use Afterburn guestinfo for static IP and hostname config [#5025](https://github.com/openshift/installer/pull/5025) * [Bug 1974282](https://bugzilla.redhat.com/show_bug.cgi?id=1974282): gather: collect networking information in log bundle [#5017](https://github.com/openshift/installer/pull/5017) * [Bug 1971163](https://bugzilla.redhat.com/show_bug.cgi?id=1971163): Updating AWS instance types [#4992](https://github.com/openshift/installer/pull/4992) * [Bug 1945467](https://bugzilla.redhat.com/show_bug.cgi?id=1945467): aws: allow use of unknown regions in known partitions [#4807](https://github.com/openshift/installer/pull/4807) * [Bug 1938426](https://bugzilla.redhat.com/show_bug.cgi?id=1938426): Set default values to machine pools before validation [#4750](https://github.com/openshift/installer/pull/4750) * [Full changelog](https://github.com/openshift/installer/compare/0845176fc2348c47796407e6524696a7cf254a5f...94125b21304a574ae5bc98039f8eb7f518293b83) ### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/726d97e15db78b767234da98d2c75f794f4bf158) * [Bug 1938967](https://bugzilla.redhat.com/show_bug.cgi?id=1938967): Updating baremetal-machine-controller builder & base images to be consistent with ART [#134](https://github.com/openshift/cluster-api-provider-baremetal/pull/134) * [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/25cbb8d8f9e52244ccd6bf459e6dd4b84749de56...726d97e15db78b767234da98d2c75f794f4bf158) ### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/e36cbc13f82e290ca5f525a4da0fab516808d113) * [Bug 1972430](https://bugzilla.redhat.com/show_bug.cgi?id=1972430): Don't deprovision provisioned host due to error [#159](https://github.com/openshift/baremetal-operator/pull/159) * [Bug 1961341](https://bugzilla.redhat.com/show_bug.cgi?id=1961341): config: use rbacv1 instead of rbacv1beta1 [#148](https://github.com/openshift/baremetal-operator/pull/148) * [Full changelog](https://github.com/openshift/baremetal-operator/compare/74c60aa957f53432d0a98afc78099add55d27c44...e36cbc13f82e290ca5f525a4da0fab516808d113) ### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/e6f2e9b10e0c5f788dceb996badbaf9d6d625ffd) * [Bug 1995074](https://bugzilla.redhat.com/show_bug.cgi?id=1995074): revert incorrect allowance of ssh:// prefix with scp styled URLs [#902](https://github.com/openshift/oc/pull/902) * [Bug 1974264](https://bugzilla.redhat.com/show_bug.cgi?id=1974264): make oc logs work with BuildConfig's JenkinsPipeline strategy [#864](https://github.com/openshift/oc/pull/864) * [Bug 1976284](https://bugzilla.redhat.com/show_bug.cgi?id=1976284): skip-multiple-scopes with adm catalog mirror [#869](https://github.com/openshift/oc/pull/869) * [Bug 1963784](https://bugzilla.redhat.com/show_bug.cgi?id=1963784): Preserve AuthInfo when switching projects [#861](https://github.com/openshift/oc/pull/861) * [Full changelog](https://github.com/openshift/oc/compare/9b9f77a716c8b7ee73f6424e37748ea6b53f495a...e6f2e9b10e0c5f788dceb996badbaf9d6d625ffd) ### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/4c02b7b2322eab9bbcb969886211d541e5e4fcde) * Updating ose-cluster-authentication-operator builder & base images to be consistent with ART [#408](https://github.com/openshift/cluster-authentication-operator/pull/408) * [Bug 1971087](https://bugzilla.redhat.com/show_bug.cgi?id=1971087): add a controller to remove webhooktokenauthenticator config [#418](https://github.com/openshift/cluster-authentication-operator/pull/418) * [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/a28bdc97c7f9d1ec4a0a859abeaeda41b37e381f...4c02b7b2322eab9bbcb969886211d541e5e4fcde) ### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/8b2e494f7796639b46f9867407fe21546cfc01c3) * [Bug 1924416](https://bugzilla.redhat.com/show_bug.cgi?id=1924416): Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 [#204](https://github.com/openshift/kubernetes-autoscaler/pull/204) * [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/c882ab7f35adfb0f438fa28f6579092aa0deea59...8b2e494f7796639b46f9867407fe21546cfc01c3) ### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/7658bea6c42d770029e6928c1d74ec3bf0175a49) * [Bug 1961341](https://bugzilla.redhat.com/show_bug.cgi?id=1961341): manifests: use v1 for RBAC [#206](https://github.com/openshift/cluster-autoscaler-operator/pull/206) * [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/a3fecc8e7dc5d793eecf8bf77e311f5b29f5e7dd...7658bea6c42d770029e6928c1d74ec3bf0175a49) ### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/f73e5fcb432e4b847cddec5ce8570f8c5c32e902) * [Bug 1976924](https://bugzilla.redhat.com/show_bug.cgi?id=1976924): Update bmh crd [#190](https://github.com/openshift/cluster-baremetal-operator/pull/190) * [Bug 1933726](https://bugzilla.redhat.com/show_bug.cgi?id=1933726): provisioning: configure DHCP range with netmask [#112](https://github.com/openshift/cluster-baremetal-operator/pull/112) * [Bug 1973367](https://bugzilla.redhat.com/show_bug.cgi?id=1973367): Pass IP_OPTIONS=dhcp|dhcp6 down to OS Downloader container [#171](https://github.com/openshift/cluster-baremetal-operator/pull/171) * [Bug 1972291](https://bugzilla.redhat.com/show_bug.cgi?id=1972291): Use a cache URL with the .svc.cluster.local suffix [#161](https://github.com/openshift/cluster-baremetal-operator/pull/161) * [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/175f8f5283faebd81fb9d1fb2915eb2682622e1e...f73e5fcb432e4b847cddec5ce8570f8c5c32e902) ### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/51cb8c4147c45672c9645fae39bfcc6d696adc85) * [Bug 1976988](https://bugzilla.redhat.com/show_bug.cgi?id=1976988): [release-4.7]: Increase inertia duration for the EtcdMembersDegraded condition [#618](https://github.com/openshift/cluster-etcd-operator/pull/618) * [Bug 1976287](https://bugzilla.redhat.com/show_bug.cgi?id=1976287): Validate the status of the etcd snapshot during backup and restore [#617](https://github.com/openshift/cluster-etcd-operator/pull/617) * [Bug 1951447](https://bugzilla.redhat.com/show_bug.cgi?id=1951447): pkg/etcdenvvar/etcd_env.go: Sort endpoints to prevent rollout [#568](https://github.com/openshift/cluster-etcd-operator/pull/568) * [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/08595861de20850111f5e6cc76b4ad3a943b71a8...51cb8c4147c45672c9645fae39bfcc6d696adc85) ### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/70a85883e406641339251b5c1473e4dec7083928) * [Bug 1988388](https://bugzilla.redhat.com/show_bug.cgi?id=1988388): Properly set custom tolerations [#708](https://github.com/openshift/cluster-image-registry-operator/pull/708) * [Bug 1984979](https://bugzilla.redhat.com/show_bug.cgi?id=1984979): Creating StorageAccount V2 instead of V1 [#707](https://github.com/openshift/cluster-image-registry-operator/pull/707) * Updating ose-cluster-image-registry-operator builder & base images to be consistent with ART [#651](https://github.com/openshift/cluster-image-registry-operator/pull/651) * [Bug 1977159](https://bugzilla.redhat.com/show_bug.cgi?id=1977159): bump aws-sdk-go to v1.38.35 [#704](https://github.com/openshift/cluster-image-registry-operator/pull/704) * [Bug 1973693](https://bugzilla.redhat.com/show_bug.cgi?id=1973693): Setting required pod anti-affinity rules [#697](https://github.com/openshift/cluster-image-registry-operator/pull/697) * [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/4f854ba118c7a3424beb8739b34fa97499245f9e...70a85883e406641339251b5c1473e4dec7083928) ### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/b86f935f5e693f48dbf6ec23a490422b6e295eb7) * [Bug 1978845](https://bugzilla.redhat.com/show_bug.cgi?id=1978845): Specify topology spread constraints [#632](https://github.com/openshift/cluster-ingress-operator/pull/632) * [Bug 1973983](https://bugzilla.redhat.com/show_bug.cgi?id=1973983): Canary: Handle downgrades from 4.8 to 4.7 properly [#627](https://github.com/openshift/cluster-ingress-operator/pull/627) * [Bug 1960776](https://bugzilla.redhat.com/show_bug.cgi?id=1960776): Reconcile openshift-ingress namespace on upgrade [#616](https://github.com/openshift/cluster-ingress-operator/pull/616) * [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/fca8201e866741243b42fa75392875654acd8bf0...b86f935f5e693f48dbf6ec23a490422b6e295eb7) ### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/035c8038f56cdcf0d402bea6671e81882e3ab8bd) * [Bug 1986591](https://bugzilla.redhat.com/show_bug.cgi?id=1986591): node exporter calls /proc/cpuinfo multiple times causing the node to freeze [#1300](https://github.com/openshift/cluster-monitoring-operator/pull/1300) * [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/d6725052e00a206cab10f6c40abdfa1a3c2aff0f...035c8038f56cdcf0d402bea6671e81882e3ab8bd) ### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/c4b5b42127ac0ebd9ce5c5c57c1a15949319bdc1) * [Bug 1996063](https://bugzilla.redhat.com/show_bug.cgi?id=1996063): Use 10% for nw-check-target maxUnavailable [#1184](https://github.com/openshift/cluster-network-operator/pull/1184) * [Bug 1988426](https://bugzilla.redhat.com/show_bug.cgi?id=1988426): Change to use mountPath: /host [#1170](https://github.com/openshift/cluster-network-operator/pull/1170) * [Bug 1962036](https://bugzilla.redhat.com/show_bug.cgi?id=1962036): Use the election mechanism provided by library-go [#1098](https://github.com/openshift/cluster-network-operator/pull/1098) * [Bug 1972549](https://bugzilla.redhat.com/show_bug.cgi?id=1972549): Remove reference to v1beta1 API [#1134](https://github.com/openshift/cluster-network-operator/pull/1134) * [Bug 1982217](https://bugzilla.redhat.com/show_bug.cgi?id=1982217): Use 10% for ovnkube-node for maxUnavailable [#1153](https://github.com/openshift/cluster-network-operator/pull/1153) * [Bug 1969860](https://bugzilla.redhat.com/show_bug.cgi?id=1969860): Escape characters on ini file [#1127](https://github.com/openshift/cluster-network-operator/pull/1127) * [Bug 1967994](https://bugzilla.redhat.com/show_bug.cgi?id=1967994): Backport daemonset to drop icmp frag needed packets received from other nodes in the cluster to Rel 4.7 [#1119](https://github.com/openshift/cluster-network-operator/pull/1119) * [Bug 1972183](https://bugzilla.redhat.com/show_bug.cgi?id=1972183): config: Set enable-profiling true by default and allow enable-profiling as a proxy argument [#1129](https://github.com/openshift/cluster-network-operator/pull/1129) * [Full changelog](https://github.com/openshift/cluster-network-operator/compare/ef3a088b66b9474592838a73d1078f9d62cacb04...c4b5b42127ac0ebd9ce5c5c57c1a15949319bdc1) ### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/3066601cab5378f1c155f9a98995614f0168f803) * [Bug 1986739](https://bugzilla.redhat.com/show_bug.cgi?id=1986739): gather all Tuned CRs [#255](https://github.com/openshift/cluster-node-tuning-operator/pull/255) * [Bug 1958885](https://bugzilla.redhat.com/show_bug.cgi?id=1958885): Switch to client-go leader-with-lease election. [#238](https://github.com/openshift/cluster-node-tuning-operator/pull/238) * [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/5b774014c4d296e198a694f3694777d000a87640...3066601cab5378f1c155f9a98995614f0168f803) ### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/df9b1a45165dd1a2cc17b5a885370093bb237e41) * [Bug 1996045](https://bugzilla.redhat.com/show_bug.cgi?id=1996045): bindata: run openshift-apiserver as root explicitly. [#468](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/468) * Updating ose-cluster-openshift-apiserver-operator builder & base images to be consistent with ART [#427](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/427) * [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/ecfa2d959fe2afcbd3e947658d267b085a1b2063...df9b1a45165dd1a2cc17b5a885370093bb237e41) ### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/2a8963a9c5755d4951d882bd816cd4d6ccdf02cd) * [Bug 1924494](https://bugzilla.redhat.com/show_bug.cgi?id=1924494): Update k8s.io dependencies to address CVE-2021-3121 [#222](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/222) * [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/245005e3065238ecd4aef208c21456afa09ec38e...2a8963a9c5755d4951d882bd816cd4d6ccdf02cd) ### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/0df8f92c275b9eccfb1b3ccdd79fb861ddee1d99) * [Bug 1923036](https://bugzilla.redhat.com/show_bug.cgi?id=1923036): Update Jenkins monitored templates names [#359](https://github.com/openshift/cluster-samples-operator/pull/359) * [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/061bdb108232b5952929301a7dd34ada934016d7...0df8f92c275b9eccfb1b3ccdd79fb861ddee1d99) ### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/cc81827c1bfe322bd78d2fa0d9b34d532190d850) * [Bug 1991010](https://bugzilla.redhat.com/show_bug.cgi?id=1991010): pkg/cvo/metrics: Ignore Degraded for cluster_operator_up [#638](https://github.com/openshift/cluster-version-operator/pull/638) * [Bug 1924428](https://bugzilla.redhat.com/show_bug.cgi?id=1924428): CVE-2021-3121 gogo/protobuf lacks certain index validation [#625](https://github.com/openshift/cluster-version-operator/pull/625) * [Bug 1970272](https://bugzilla.redhat.com/show_bug.cgi?id=1970272): Fixing the log message in rbac.go for clusterrole [#609](https://github.com/openshift/cluster-version-operator/pull/609) * [Full changelog](https://github.com/openshift/cluster-version-operator/compare/f3d25082a09312718718fa3a85b8aba8b4574781...cc81827c1bfe322bd78d2fa0d9b34d532190d850) ### [console](https://github.com/openshift/console/tree/3432f1cc6cb07a8f1210dc26ebe84efde3de752b) * [Bug 1973707](https://bugzilla.redhat.com/show_bug.cgi?id=1973707): Add chart URl to annotations during helm install/upgrade [#9299](https://github.com/openshift/console/pull/9299) * [Bug 1995617](https://bugzilla.redhat.com/show_bug.cgi?id=1995617): Fix Pipeline Download All [#9839](https://github.com/openshift/console/pull/9839) * [Bug 1986724](https://bugzilla.redhat.com/show_bug.cgi?id=1986724): Show the content of Insights widget when there are 0 recommendations for cluster [#9655](https://github.com/openshift/console/pull/9655) * [Bug 1989642](https://bugzilla.redhat.com/show_bug.cgi?id=1989642): Preserve user annotations while editing an app [#9714](https://github.com/openshift/console/pull/9714) * [Bug 1975560](https://bugzilla.redhat.com/show_bug.cgi?id=1975560): Fix typo in olm message [#9335](https://github.com/openshift/console/pull/9335) * [Bug 1975469](https://bugzilla.redhat.com/show_bug.cgi?id=1975469): Handle array to string conversion for HTTPS checkbox value [#9332](https://github.com/openshift/console/pull/9332) * Updating openshift-enterprise-console images to be consistent with ART [#8596](https://github.com/openshift/console/pull/8596) * [Bug 1973572](https://bugzilla.redhat.com/show_bug.cgi?id=1973572): Hardcode strings in Home->Overview page [#9322](https://github.com/openshift/console/pull/9322) * [Bug 1942864](https://bugzilla.redhat.com/show_bug.cgi?id=1942864): Warning Alert for Encrypted PVs in Create StorageClass [#8464](https://github.com/openshift/console/pull/8464) * [Bug 1965526](https://bugzilla.redhat.com/show_bug.cgi?id=1965526): Removing library charts from the merged helm repo index entries. [#9076](https://github.com/openshift/console/pull/9076) * [Bug 1970796](https://bugzilla.redhat.com/show_bug.cgi?id=1970796): update cluster-local label for ksvc [#9220](https://github.com/openshift/console/pull/9220) * [Bug 1970720](https://bugzilla.redhat.com/show_bug.cgi?id=1970720): fix rotated pipelinerun status icon issue in safari [#9216](https://github.com/openshift/console/pull/9216) * [Bug 1969536](https://bugzilla.redhat.com/show_bug.cgi?id=1969536): Omit bitbucket branch in URL if it contains slash [#9180](https://github.com/openshift/console/pull/9180) * [Bug 1954962](https://bugzilla.redhat.com/show_bug.cgi?id=1954962): removes extra annotations form spec template for ksvc [#8823](https://github.com/openshift/console/pull/8823) * [Bug 1948537](https://bugzilla.redhat.com/show_bug.cgi?id=1948537): add hide/reveal button for kms token [#8616](https://github.com/openshift/console/pull/8616) * [Bug 1942160](https://bugzilla.redhat.com/show_bug.cgi?id=1942160): Update the scope of GitOpsService resource [#8450](https://github.com/openshift/console/pull/8450) * [Bug 1971667](https://bugzilla.redhat.com/show_bug.cgi?id=1971667): Track and show error messages in modals [#9232](https://github.com/openshift/console/pull/9232) * [Full changelog](https://github.com/openshift/console/compare/dbc68e1f7a3928af6cfa06d019999cd8903ae7d7...3432f1cc6cb07a8f1210dc26ebe84efde3de752b) ### [csi-driver-manila, openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack/tree/d3f709218512df9f46e11c1d13347fc68774d72c) * [Bug 1969345](https://bugzilla.redhat.com/show_bug.cgi?id=1969345): Backport ignore proxy connecting to CSI sockets [#54](https://github.com/openshift/cloud-provider-openstack/pull/54) * [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/5202bfdc042bafa732f19dcbec31ca6137fa3fa4...d3f709218512df9f46e11c1d13347fc68774d72c) ### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/b652a62f269127e6e9195383eab951d59c6d7a6d) * [Bug 2002555](https://bugzilla.redhat.com/show_bug.cgi?id=2002555): Do not degrade cluster on failure to reach Manila [#126](https://github.com/openshift/csi-driver-manila-operator/pull/126) * [Bug 1987036](https://bugzilla.redhat.com/show_bug.cgi?id=1987036): Use cluster Proxy when available [#110](https://github.com/openshift/csi-driver-manila-operator/pull/110) * [Bug 1996070](https://bugzilla.redhat.com/show_bug.cgi?id=1996070): Add maxUnavailable to DaemonSets [#116](https://github.com/openshift/csi-driver-manila-operator/pull/116) * [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/00b1f648e74d8008ce32ae65eb4d6d8b5ac1bbed...b652a62f269127e6e9195383eab951d59c6d7a6d) ### [docker-builder](https://github.com/openshift/builder/tree/5a46979e5e747b6df27a1b50ec0c922a172298f2) * [Bug 1995074](https://bugzilla.redhat.com/show_bug.cgi?id=1995074): bump(s2i): revert incorrect ssh scp fix [#261](https://github.com/openshift/builder/pull/261) * [Bug 1924455](https://bugzilla.redhat.com/show_bug.cgi?id=1924455): Update dependencies to address CVE-2021-3121 [#258](https://github.com/openshift/builder/pull/258) * [Full changelog](https://github.com/openshift/builder/compare/82eeeac0c8cbad90f951885cc11939ecd51eda76...5a46979e5e747b6df27a1b50ec0c922a172298f2) ### [docker-registry](https://github.com/openshift/image-registry/tree/8b03485af777f8d718427393aa575bbaf6f21610) * [Bug 1984094](https://bugzilla.redhat.com/show_bug.cgi?id=1984094): use apimachinery with HTTP/2 health checks enabled [#288](https://github.com/openshift/image-registry/pull/288) * Updating openshift-enterprise-registry builder & base images to be consistent with ART [#262](https://github.com/openshift/image-registry/pull/262) * [Bug 1977159](https://bugzilla.redhat.com/show_bug.cgi?id=1977159): bump aws-sdk-go to v1.38.35 [#282](https://github.com/openshift/image-registry/pull/282) * [Full changelog](https://github.com/openshift/image-registry/compare/8e0c068aef607fceffe3e179c3a9701f51c51dff...8b03485af777f8d718427393aa575bbaf6f21610) ### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/bcd11a1f0137bb10b1958f1e27e04a213aef96be) * [Bug 1985545](https://bugzilla.redhat.com/show_bug.cgi?id=1985545): Use kernel config to determine GCC version [#56](https://github.com/openshift/driver-toolkit/pull/56) * [Bug 1985545](https://bugzilla.redhat.com/show_bug.cgi?id=1985545): Remove curl of extract-vmlinux [#50](https://github.com/openshift/driver-toolkit/pull/50) * [Bug 1985546](https://bugzilla.redhat.com/show_bug.cgi?id=1985546): /etc/driver-toolkit-release.json kernel version match rpm -q output [#51](https://github.com/openshift/driver-toolkit/pull/51) * [Bug 1976302](https://bugzilla.redhat.com/show_bug.cgi?id=1976302): Cherry pick gcc to release 4.7 [#41](https://github.com/openshift/driver-toolkit/pull/41) * [Bug 1975480](https://bugzilla.redhat.com/show_bug.cgi?id=1975480): DPDK KNI modules need some additional tools [#40](https://github.com/openshift/driver-toolkit/pull/40) * [Bug 1975479](https://bugzilla.redhat.com/show_bug.cgi?id=1975479): Requirements for authenticating kernel modules with X.509 keys [#39](https://github.com/openshift/driver-toolkit/pull/39) * [Full changelog](https://github.com/openshift/driver-toolkit/compare/ce3a08186af7e4b863325bf5439bb8b829d91599...bcd11a1f0137bb10b1958f1e27e04a213aef96be) ### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/0cb61d205d0f911fe8ca614094f0cd3f911d665c) * Updating ose-gcp-pd-csi-driver builder & base images to be consistent with ART [#10](https://github.com/openshift/gcp-pd-csi-driver/pull/10) * [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/091f0212dfa6d93df37b99fcd2b4b9a4c6d5bbba...0cb61d205d0f911fe8ca614094f0cd3f911d665c) ### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/d40dd57595673e4737fa77e29a955f6beefac284) * [Bug 1996070](https://bugzilla.redhat.com/show_bug.cgi?id=1996070): Add maxUnavailable to DaemonSets [#33](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/33) * [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/9ffe95b9499258b8e2b5e1b8df9889abe3c9f73f...d40dd57595673e4737fa77e29a955f6beefac284) ### [haproxy-router](https://github.com/openshift/router/tree/4ab216f0090a985f041cea3e411075a04e2ace0a) * [Bug 1994645](https://bugzilla.redhat.com/show_bug.cgi?id=1994645): config template: accept IPv6 IPs for whitelisting [#325](https://github.com/openshift/router/pull/325) * [Full changelog](https://github.com/openshift/router/compare/9cc0c8fcebf613785511468c7df601117b13e5aa...4ab216f0090a985f041cea3e411075a04e2ace0a) ### [hello-openshift, tests](https://github.com/openshift/origin/tree/8b31c8bd88c20a8eb0a7ea32b7e42fdbae212731) * [Bug 1983616](https://bugzilla.redhat.com/show_bug.cgi?id=1983616): Wait longer in tests where namespace cleanup is slow [#26282](https://github.com/openshift/origin/pull/26282) * [Bug 1982929](https://bugzilla.redhat.com/show_bug.cgi?id=1982929): Improve GC Check for Builds [#26334](https://github.com/openshift/origin/pull/26334) * Re-enable quota test [#26284](https://github.com/openshift/origin/pull/26284) * [Bug 1980540](https://bugzilla.redhat.com/show_bug.cgi?id=1980540): Use cluster-logging for operator installation smoke test. [#26315](https://github.com/openshift/origin/pull/26315) * [Bug 1977383](https://bugzilla.redhat.com/show_bug.cgi?id=1977383): [release-4.7] Update resource quota test for compatibility with service ca configmap publishing [#26303](https://github.com/openshift/origin/pull/26303) * [Bug 1928862](https://bugzilla.redhat.com/show_bug.cgi?id=1928862): [4.7] Bump openshift/kubernetes [#26259](https://github.com/openshift/origin/pull/26259) * [Bug 1978000](https://bugzilla.redhat.com/show_bug.cgi?id=1978000): builds: comment out multi-namespace template test [#26296](https://github.com/openshift/origin/pull/26296) * NOOP - Trigger a new CI build [#26291](https://github.com/openshift/origin/pull/26291) * [Bug 1977383](https://bugzilla.redhat.com/show_bug.cgi?id=1977383): [release-4.7] Skip cluster quota test to enable service ca publisher to merge to o/k [#26283](https://github.com/openshift/origin/pull/26283) * [Full changelog](https://github.com/openshift/origin/compare/5013124a4cb27df4b199aabb5812ec0fc1184196...8b31c8bd88c20a8eb0a7ea32b7e42fdbae212731) ### [hyperkube](https://github.com/openshift/kubernetes/tree/bbbc0799c02950831c42c7a2ab0a04594b854d4a) * [Bug 1993753](https://bugzilla.redhat.com/show_bug.cgi?id=1993753): UPSTREAM: 104348: Pass additional flags to subpath mount to avoid fla… [#941](https://github.com/openshift/kubernetes/pull/941) * [Bug 2003027](https://bugzilla.redhat.com/show_bug.cgi?id=2003027): Rebase 1.20.10 [#935](https://github.com/openshift/kubernetes/pull/935) * [Bug 1996846](https://bugzilla.redhat.com/show_bug.cgi?id=1996846): UPSTREAM: 98571: kubelet: Stop probing a pod during graceful shutdown [#901](https://github.com/openshift/kubernetes/pull/901) * [Bug 1973766](https://bugzilla.redhat.com/show_bug.cgi?id=1973766): 4.7: Do not throw error when we can't get canonical path [#881](https://github.com/openshift/kubernetes/pull/881) * [Bug 1981775](https://bugzilla.redhat.com/show_bug.cgi?id=1981775): Bump apiserver libary go 4.7 [#879](https://github.com/openshift/kubernetes/pull/879) * [Bug 1981634](https://bugzilla.redhat.com/show_bug.cgi?id=1981634): UPSTREAM: <drop>: use the legacy service-ca.crt content for clusters started in 4.7 or before [#857](https://github.com/openshift/kubernetes/pull/857) * [Bug 1977383](https://bugzilla.redhat.com/show_bug.cgi?id=1977383): [release-4.7] Ensure service ca configmap is created in all namespaces [#834](https://github.com/openshift/kubernetes/pull/834) * [Bug 1977383](https://bugzilla.redhat.com/show_bug.cgi?id=1977383): [release-4.7] Fix watch conformance test [#843](https://github.com/openshift/kubernetes/pull/843) * [Bug 1977383](https://bugzilla.redhat.com/show_bug.cgi?id=1977383): Update resource quota test for compatibility with service ca configmap publishing [#839](https://github.com/openshift/kubernetes/pull/839) * [Bug 1975553](https://bugzilla.redhat.com/show_bug.cgi?id=1975553): only chown if non-windows machine with projected volumes [#826](https://github.com/openshift/kubernetes/pull/826) * [Bug 1928862](https://bugzilla.redhat.com/show_bug.cgi?id=1928862): [release-4.7] UPSTREAM: <carry>: kube-apiserver: ignore SIGTERM/INT after the first one [#739](https://github.com/openshift/kubernetes/pull/739) * [Full changelog](https://github.com/openshift/kubernetes/compare/2817867655bb7b68215b4e77873a8facf82bee06...bbbc0799c02950831c42c7a2ab0a04594b854d4a) ### [insights-operator](https://github.com/openshift/insights-operator/tree/19b13a7cf1bd5f38a4f1bc4f257ff7fd70803093) * [Bug 1982170](https://bugzilla.redhat.com/show_bug.cgi?id=1982170): Set also the summary operation when updating status (#480) [#480](https://github.com/openshift/insights-operator/pull/480) * [Full changelog](https://github.com/openshift/insights-operator/compare/e7955cf0b199caa53726431df5d8800be5af049a...19b13a7cf1bd5f38a4f1bc4f257ff7fd70803093) ### [ironic-hardware-inventory-recorder](https://github.com/openshift/ironic-hardware-inventory-recorder-image/tree/564aaca3b4bd95007472d3c3cd8d2d0748778ef4) * Updating ironic-hardware-inventory-recorder-image builder & base images to be consistent with ART [#502](https://github.com/openshift/ironic-hardware-inventory-recorder-image/pull/502) * [Full changelog](https://github.com/openshift/ironic-hardware-inventory-recorder-image/compare/61c4cc7dc99601fe32b239be8923a6ed693908b0...564aaca3b4bd95007472d3c3cd8d2d0748778ef4) ### [ironic-inspector](https://github.com/openshift/ironic-inspector-image/tree/b6cbf0338ba9f892735d09093ba4732ab3602b43) * [Bug 2002405](https://bugzilla.redhat.com/show_bug.cgi?id=2002405): Sync inspector to include the latest bugfixes for 4.7 [#70](https://github.com/openshift/ironic-inspector-image/pull/70) * [Full changelog](https://github.com/openshift/ironic-inspector-image/compare/916bdc6e005aaa73ef5c3a9b60f5c47cd0a10e29...b6cbf0338ba9f892735d09093ba4732ab3602b43) ### [ironic-ipa-downloader](https://github.com/openshift/ironic-ipa-downloader/tree/ed60b8e9f0b8c0da4046dd8ced85d287c3f4534e) * [Bug 1963210](https://bugzilla.redhat.com/show_bug.cgi?id=1963210): Add support for no_proxy [#78](https://github.com/openshift/ironic-ipa-downloader/pull/78) * [Full changelog](https://github.com/openshift/ironic-ipa-downloader/compare/df6bb639fd9bf26ce276ae78e78548fba53783d1...ed60b8e9f0b8c0da4046dd8ced85d287c3f4534e) ### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/870afcb36a7ee4a2bef59845981821453b4174dd) * [Bug 1963210](https://bugzilla.redhat.com/show_bug.cgi?id=1963210): Add support for no_proxy [#53](https://github.com/openshift/ironic-rhcos-downloader/pull/53) * [Bug 1973367](https://bugzilla.redhat.com/show_bug.cgi?id=1973367): Modify dhcp kernel args based on ipv4/ipv6 [#55](https://github.com/openshift/ironic-rhcos-downloader/pull/55) * [Bug 1971549](https://bugzilla.redhat.com/show_bug.cgi?id=1971549): Unconditionally remove TMPDIR [#45](https://github.com/openshift/ironic-rhcos-downloader/pull/45) * [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/4cdc8c311630d0d9807accb12e63bbfa8bbc3ad4...870afcb36a7ee4a2bef59845981821453b4174dd) ### [jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/02e81a5a9b02af6c72f6baab1ca6afb3775756dd) * [Bug 1972361](https://bugzilla.redhat.com/show_bug.cgi?id=1972361): Bump jenkins version 2.289.2 [#1281](https://github.com/openshift/jenkins/pull/1281) * [Full changelog](https://github.com/openshift/jenkins/compare/d3eacc24156ef726caae230b9b4620059a76f781...02e81a5a9b02af6c72f6baab1ca6afb3775756dd) ### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/a41bdcc3533c6eaf8f17e1e4bb52c1bde155f578) * [Bug 1987297](https://bugzilla.redhat.com/show_bug.cgi?id=1987297): when assigning and releasing egressIP try more than once before failing [#327](https://github.com/openshift/sdn/pull/327) * [Bug 2001531](https://bugzilla.redhat.com/show_bug.cgi?id=2001531): improve SDN's OVS healthcheck and logging [#343](https://github.com/openshift/sdn/pull/343) * [Bug 1995872](https://bugzilla.redhat.com/show_bug.cgi?id=1995872): Disable conntrack for vxlan traffic [#338](https://github.com/openshift/sdn/pull/338) * [Bug 1971669](https://bugzilla.redhat.com/show_bug.cgi?id=1971669): Fix 4.7 SDN Egress Network Policy [#334](https://github.com/openshift/sdn/pull/334) * [Full changelog](https://github.com/openshift/sdn/compare/798a46be0fa09aeec90b25a4c4cf11bf0b2c5b6f...a41bdcc3533c6eaf8f17e1e4bb52c1bde155f578) ### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/77a9d5eade31e0519d34ff9aa9cf86c1305e25b1) * [Bug 2001518](https://bugzilla.redhat.com/show_bug.cgi?id=2001518): Increase keystoneauth's connection pool size [#554](https://github.com/openshift/kuryr-kubernetes/pull/554) * [Bug 1972631](https://bugzilla.redhat.com/show_bug.cgi?id=1972631): Workaround OVN bug causing subports to be DOWN [#525](https://github.com/openshift/kuryr-kubernetes/pull/525) * [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/c7ca87b1d8d27745a8e8397623c1d09dd68307fa...77a9d5eade31e0519d34ff9aa9cf86c1305e25b1) ### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/eb819cb931e86f66853ad24b919e251369ec83c1) * Updating ose-libvirt-machine-controllers builder & base images to be consistent with ART [#212](https://github.com/openshift/cluster-api-provider-libvirt/pull/212) * [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/033be25ca038fe773b23c076e9ac64926de72474...eb819cb931e86f66853ad24b919e251369ec83c1) ### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/b37833e07e4ecb6bea8f0cfbfcc349116d5d3c23) * [Bug 1989648](https://bugzilla.redhat.com/show_bug.cgi?id=1989648): Prevent machine from stucking in Deleting phase on vSphere if related node object not found [#895](https://github.com/openshift/machine-api-operator/pull/895) * [Bug 1933586](https://bugzilla.redhat.com/show_bug.cgi?id=1933586): Make sure phase is always set before creation [#858](https://github.com/openshift/machine-api-operator/pull/858) * [Full changelog](https://github.com/openshift/machine-api-operator/compare/e179bb5ce397b543cd3f716f75fa4cd40046e0ad...b37833e07e4ecb6bea8f0cfbfcc349116d5d3c23) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/5dd1fe366bd0779b290360eb014df67ae1c950cc) * [Bug 1989751](https://bugzilla.redhat.com/show_bug.cgi?id=1989751): [on-prem] Disable liveness probe until keepalived.conf exists [#2701](https://github.com/openshift/machine-config-operator/pull/2701) * [Bug 1995853](https://bugzilla.redhat.com/show_bug.cgi?id=1995853): Gracefully shutdown taking around 6-7 mins (libvirt provider) [#2727](https://github.com/openshift/machine-config-operator/pull/2727) * [Bug 1988102](https://bugzilla.redhat.com/show_bug.cgi?id=1988102): [release-4.7] On-prem: add default ingress track script to Keepalived [#2697](https://github.com/openshift/machine-config-operator/pull/2697) * [Bug 1998112](https://bugzilla.redhat.com/show_bug.cgi?id=1998112): vSpehere: disable vmxnet3 tx csum offload [#2738](https://github.com/openshift/machine-config-operator/pull/2738) * [Bug 1995810](https://bugzilla.redhat.com/show_bug.cgi?id=1995810): crio: complete crio default config [#2725](https://github.com/openshift/machine-config-operator/pull/2725) * [Bug 1992240](https://bugzilla.redhat.com/show_bug.cgi?id=1992240): change system-connections-merged directory to systemConnectionsMerged [#2709](https://github.com/openshift/machine-config-operator/pull/2709) * [Bug 1956462](https://bugzilla.redhat.com/show_bug.cgi?id=1956462): ensure SSH key uniqueness [#2563](https://github.com/openshift/machine-config-operator/pull/2563) * [Bug 1993386](https://bugzilla.redhat.com/show_bug.cgi?id=1993386): crio: use conmon from path [#2715](https://github.com/openshift/machine-config-operator/pull/2715) * [Bug 1992687](https://bugzilla.redhat.com/show_bug.cgi?id=1992687): alerts: SystemMemoryExceedsReservation triggers too quickly [#2710](https://github.com/openshift/machine-config-operator/pull/2710) * [Bug 1970166](https://bugzilla.redhat.com/show_bug.cgi?id=1970166): MCO: maxUnavailable of ds/machine-config-daemon does not get updated due to missing resourcemerge check [#2682](https://github.com/openshift/machine-config-operator/pull/2682) * [Bug 1977432](https://bugzilla.redhat.com/show_bug.cgi?id=1977432): crio: enable internal_wipe option [#2649](https://github.com/openshift/machine-config-operator/pull/2649) * [Bug 1970590](https://bugzilla.redhat.com/show_bug.cgi?id=1970590): daemon: Change runGetOut to not intermix stdout/stderr [#2609](https://github.com/openshift/machine-config-operator/pull/2609) * [Bug 1976232](https://bugzilla.redhat.com/show_bug.cgi?id=1976232): Explicitly set keyfile as the default plugin of NetworkManager for RHEL7 [#2641](https://github.com/openshift/machine-config-operator/pull/2641) * [Bug 1971864](https://bugzilla.redhat.com/show_bug.cgi?id=1971864): Stop setting nopreempt on bootstrap keepalived.conf [#2616](https://github.com/openshift/machine-config-operator/pull/2616) * [Bug 1973006](https://bugzilla.redhat.com/show_bug.cgi?id=1973006): daemon: cordon the node before performing drain [#2623](https://github.com/openshift/machine-config-operator/pull/2623) * [Bug 1961341](https://bugzilla.redhat.com/show_bug.cgi?id=1961341): rbac: update remaining apis to v1 [#2620](https://github.com/openshift/machine-config-operator/pull/2620) * [Bug 1971374](https://bugzilla.redhat.com/show_bug.cgi?id=1971374): daemon/drain.go: bump initial drain sleeps down to 1min [#2612](https://github.com/openshift/machine-config-operator/pull/2612) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/e980e4ebb10f252c0a9e044a8872df2c3404ff77...5dd1fe366bd0779b290360eb014df67ae1c950cc) ### [mdns-publisher](https://github.com/openshift/mdns-publisher/tree/af3f360536eca53d47ada65c3ddc842888432198) * [Bug 2004537](https://bugzilla.redhat.com/show_bug.cgi?id=2004537): Update zeroconf vendoring [#39](https://github.com/openshift/mdns-publisher/pull/39) * [Bug 1983695](https://bugzilla.redhat.com/show_bug.cgi?id=1983695): [release-4.7] Truncate long service names to 63 characters [#34](https://github.com/openshift/mdns-publisher/pull/34) * [Full changelog](https://github.com/openshift/mdns-publisher/compare/207a7e5d80dbca3ffb2dc205ebba516e29ebaa6d...af3f360536eca53d47ada65c3ddc842888432198) ### [must-gather](https://github.com/openshift/must-gather/tree/205d4e3cffb19bda7a658836c84587f2ac78d82c) * Updating ose-must-gather builder & base images to be consistent with ART [#202](https://github.com/openshift/must-gather/pull/202) * [Bug 1954302](https://bugzilla.redhat.com/show_bug.cgi?id=1954302): Add ovs related services to GENERAL_SERVICES [#229](https://github.com/openshift/must-gather/pull/229) * [Full changelog](https://github.com/openshift/must-gather/compare/140ea5e8081106c68668b6bd2d0873dc9032af0b...205d4e3cffb19bda7a658836c84587f2ac78d82c) ### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/fd4dfe78bcd8373c545284a671499681f824c645) * Updating golang-github-openshift-oauth-proxy builder & base images to be consistent with ART [#198](https://github.com/openshift/oauth-proxy/pull/198) * [Full changelog](https://github.com/openshift/oauth-proxy/compare/4bd4705011c19a7556551c9a1dfaaa5eacc7898c...fd4dfe78bcd8373c545284a671499681f824c645) ### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/3c007ad1de009a255a56889761dc2ac440529ffc) * [Bug 1995074](https://bugzilla.redhat.com/show_bug.cgi?id=1995074): revert incorrect ssh scp fix [#242](https://github.com/openshift/openshift-apiserver/pull/242) * [Bug 1965402](https://bugzilla.redhat.com/show_bug.cgi?id=1965402): Revert 'Bug 1965402: Enhance API host name validation' [#211](https://github.com/openshift/openshift-apiserver/pull/211) * [Full changelog](https://github.com/openshift/openshift-apiserver/compare/eb2414ce2c8bf60d871ed9047c02028bc84420e6...3c007ad1de009a255a56889761dc2ac440529ffc) ### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/c93745bf6898f41c6d10c66e7024238ddf20a86d) * [Bug 1924531](https://bugzilla.redhat.com/show_bug.cgi?id=1924531): Update k8s.io dependencies to address CVE-2021-3121 [#191](https://github.com/openshift/openshift-controller-manager/pull/191) * [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/39b6393236e5abab331de1ab3384d0d165510457...c93745bf6898f41c6d10c66e7024238ddf20a86d) ### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/f77ff88000592657b54ec5a3fe51c316aa57cce2) * [Bug 1996070](https://bugzilla.redhat.com/show_bug.cgi?id=1996070): Add maxUnavailable to DaemonSets [#54](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/54) * [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/117ce62c69b399c524850f4ca32324a4ed288acd...f77ff88000592657b54ec5a3fe51c316aa57cce2) ### [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/dcb7828fd3753b90a5f617349495e59eca0307d1) * [Bug 2000551](https://bugzilla.redhat.com/show_bug.cgi?id=2000551): Adds Proxy to provider client http transport [#200](https://github.com/openshift/cluster-api-provider-openstack/pull/200) * [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/471cf3ab636c26ed7c9fba6330374a5ea1b36b43...dcb7828fd3753b90a5f617349495e59eca0307d1) ### [operator-lifecycle-manager](https://github.com/operator-framework/operator-lifecycle-manager/tree/ebe84506ec094fc9ef505be8f5185e97d0c763ab) * Fix kubebuilder installation in the build root Dockerfile [#2351](https://github.com/operator-framework/operator-lifecycle-manager/pull/2351) * [Bug 1982693](https://bugzilla.redhat.com/show_bug.cgi?id=1982693): remove cleanup from startup [#2287](https://github.com/operator-framework/operator-lifecycle-manager/pull/2287) * [Bug 1972075](https://bugzilla.redhat.com/show_bug.cgi?id=1972075): Add OperatorCondition status sync and update operator upgradeable check [#2206](https://github.com/operator-framework/operator-lifecycle-manager/pull/2206) * [Full changelog](https://github.com/operator-framework/operator-lifecycle-manager/compare/f05ea078ab46c241311b04661ecf5cbefd350d09...ebe84506ec094fc9ef505be8f5185e97d0c763ab) ### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/23f38d3c0385e3fef87848c3378cf6c0a4cbe4d7) * [Bug 1961341](https://bugzilla.redhat.com/show_bug.cgi?id=1961341): [release-4.7] Update openshift rolebindings to v1 [#409](https://github.com/operator-framework/operator-marketplace/pull/409) * [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/96bab9b9f5bb2c8fce141992230cf75e48f14f78...23f38d3c0385e3fef87848c3378cf6c0a4cbe4d7) ### [operator-registry](https://github.com/operator-framework/operator-registry/tree/06e950de5ebca66e493f6cd2414e73c8978090d3) * [Bug 1968680](https://bugzilla.redhat.com/show_bug.cgi?id=1968680): fix(containerd): drop xattrs during unpack [#676](https://github.com/operator-framework/operator-registry/pull/676) * [Full changelog](https://github.com/operator-framework/operator-registry/compare/5ccabf956d25a2788cc64ad5591c404d7b950207...06e950de5ebca66e493f6cd2414e73c8978090d3) ### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/5e51508c107a161416c0ffffdd17163f14136478) * [Bug 1996070](https://bugzilla.redhat.com/show_bug.cgi?id=1996070): Backport maxUnavailable: 10% for DaemonSets [#69](https://github.com/openshift/ovirt-csi-driver-operator/pull/69) * [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/f8808a04dc6bfe7ce36a8238089dbae7ab29cbb6...5e51508c107a161416c0ffffdd17163f14136478) ### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/05985e3dfbd8b4e89661b7455c31579ed447f3cc) * [Bug 2005913](https://bugzilla.redhat.com/show_bug.cgi?id=2005913): [4.7z] Sync ECMP routes on startup and fixes stale ECMP routes [#763](https://github.com/openshift/ovn-kubernetes/pull/763) * [Bug 2001543](https://bugzilla.redhat.com/show_bug.cgi?id=2001543): fix reserve joinSwitch LRP IPs [#721](https://github.com/openshift/ovn-kubernetes/pull/721) * [Bug 2001364](https://bugzilla.redhat.com/show_bug.cgi?id=2001364): [4.7z] Ensure client handling of canceled/dropped OVSDB monitor [#719](https://github.com/openshift/ovn-kubernetes/pull/719) * [Bug 2001998](https://bugzilla.redhat.com/show_bug.cgi?id=2001998): egressfirewall not set after upgrade [#724](https://github.com/openshift/ovn-kubernetes/pull/724) * [Bug 1988495](https://bugzilla.redhat.com/show_bug.cgi?id=1988495): Fix LocalGatway ExternalIP [#638](https://github.com/openshift/ovn-kubernetes/pull/638) * [Bug 1999896](https://bugzilla.redhat.com/show_bug.cgi?id=1999896): Revert "[release-4.7] fix reserve joinSwitch LRP IPs" [#707](https://github.com/openshift/ovn-kubernetes/pull/707) * [Bug 1997574](https://bugzilla.redhat.com/show_bug.cgi?id=1997574): Fix: sync egress IP for missed events on start-up [#687](https://github.com/openshift/ovn-kubernetes/pull/687) * [Bug 1976242](https://bugzilla.redhat.com/show_bug.cgi?id=1976242): Update existing policy ACLs on start [#650](https://github.com/openshift/ovn-kubernetes/pull/650) * [Bug 1997104](https://bugzilla.redhat.com/show_bug.cgi?id=1997104): fix reserve joinSwitch LRP IPs [#683](https://github.com/openshift/ovn-kubernetes/pull/683) * [Bug 1995910](https://bugzilla.redhat.com/show_bug.cgi?id=1995910): Backport ovnkube-trace requires ip package to be installed [#674](https://github.com/openshift/ovn-kubernetes/pull/674) * [Bug 1991445](https://bugzilla.redhat.com/show_bug.cgi?id=1991445): Bump OVN to 20.12.0-140.el8fdp [#649](https://github.com/openshift/ovn-kubernetes/pull/649) * [Bug 1967132](https://bugzilla.redhat.com/show_bug.cgi?id=1967132): policy: handle NetworkPolicies single "from" multiple "ipBlock" [#562](https://github.com/openshift/ovn-kubernetes/pull/562) * [Bug 1985516](https://bugzilla.redhat.com/show_bug.cgi?id=1985516): Add v6 management interface address for host network policy [#625](https://github.com/openshift/ovn-kubernetes/pull/625) * [Bug 1962608](https://bugzilla.redhat.com/show_bug.cgi?id=1962608): ensure missed events are handled during a reconnection [#547](https://github.com/openshift/ovn-kubernetes/pull/547) * [Bug 1972484](https://bugzilla.redhat.com/show_bug.cgi?id=1972484): egress firewall as ACLs + service connectivity fixes [#592](https://github.com/openshift/ovn-kubernetes/pull/592) * [Bug 1940566](https://bugzilla.redhat.com/show_bug.cgi?id=1940566): Properly log when hybrid overlay errors out [#543](https://github.com/openshift/ovn-kubernetes/pull/543) * [Bug 1970779](https://bugzilla.redhat.com/show_bug.cgi?id=1970779): Remove getDefaultIfAddr and use getNetworkInterfaceIPAddresses [#571](https://github.com/openshift/ovn-kubernetes/pull/571) * [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/36183482fffeff91f4b84e4dea8985cb79cc51c3...05985e3dfbd8b4e89661b7455c31579ed447f3cc) ### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/f65053f55de7b1793956629c8fa02edb7bb0e5cc) * [Bug 1981634](https://bugzilla.redhat.com/show_bug.cgi?id=1981634): add vulnerable legacy injector to allow for upgrade clusters to use [#170](https://github.com/openshift/service-ca-operator/pull/170) * [Full changelog](https://github.com/openshift/service-ca-operator/compare/e113f2498bb2b54202449ddc3488cb8471997a10...f65053f55de7b1793956629c8fa02edb7bb0e5cc) ### [thanos](https://github.com/openshift/thanos/tree/319e70c1dacc87e9d88c4f364541699979c31602) * [Bug 1994123](https://bugzilla.redhat.com/show_bug.cgi?id=1994123): dockerignore: remove vendor from ignored list [#69](https://github.com/openshift/thanos/pull/69) * [Full changelog](https://github.com/openshift/thanos/compare/823d7cd2ee5de3cdab771cfd4b2557852dff7514...319e70c1dacc87e9d88c4f364541699979c31602)