Back to index

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.7.30-x86_64

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
  • upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
• Informing jobs
  • aws Succeeded periodic-ci-openshift-release-master-nightly-4.7-e2e-aws
  • aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.7-e2e-aws-serial

Upgrades from:

• 4.7.29 (changes) - Success Success
• 4.7.28 (changes) - Success
• 4.7.26 (changes) - Failed
• 4.7.25 (changes) - Success
• 4.7.24 (changes) - Failed
• 4.7.23 (changes) - Success
• 4.7.22 (changes) - Success
• 4.7.21 (changes) - Success
• 4.7.20 (changes) - Success
• 4.7.19 (changes) - Failed
• 4.7.18 (changes) - Success
• 4.7.17 (changes) - Success
• 4.7.16 (changes) - Success
• 4.7.15 (changes) - Failed
• 4.7.14 (changes) - Success
• 4.7.13 (changes) - Success
• 4.7.12 (changes) - Success
• 4.7.11 (changes) - Success
• 4.7.10 (changes) - Success
• 4.7.9 (changes) - Failed
• 4.7.8 (changes) - Success
• 4.7.7 (changes) - Success
• 4.7.6 (changes) - Failed
• 4.7.5 (changes) - Success
• 4.7.4 (changes) - Failed
• 4.7.3 - Success
• 4.7.2 (changes) - Success
• 4.7.1 (changes) - Success
• 4.7.0 (changes) - Success
• 4.6.44 (changes) - Failed Success
• 4.6.43 (changes) - Success
• 4.6.42 (changes) - Success
• 4.6.41 (changes) - Success
• 4.6.40 (changes) - Success
• 4.6.39 (changes) - Success
• 4.6.38 (changes) - Success
• 4.6.37 (changes) - Success
• 4.6.36 (changes) - Success
• 4.6.35 (changes) - Success
• 4.6.34 (changes) - Success
• 4.6.33 (changes) - Success
• 4.6.32 (changes) - Success
• 4.6.31 (changes) - Success
• 4.6.30 (changes) - Success
• 4.6.29 (changes) - Failed
• 4.6.28 (changes) - Success
• 4.6.27 (changes) - Success
• 4.6.26 (changes) - Failed
• 4.6.25 (changes) - Success
• 4.6.24 (changes) - Success

Upgrades to:

• 4.8.49 (changes) - Failed
• 4.8.47 (changes) - Success
• 4.8.42 (changes) - Failed
• 4.8.41 (changes) - Success
• 4.8.40 (changes) - Success
• 4.8.36 (changes) - Success
• 4.8.35 (changes) - Success
• 4.8.32 (changes) - Failed
• 4.8.31 (changes) - Failed
• 4.8.28 (changes) - Success
• 4.8.26 (changes) - Failed
• 4.8.25 (changes) - Failed
• 4.8.23 (changes) - Failed
• 4.8.22 (changes) - Failed
• 4.8.21 (changes) - Success
• 4.8.20 (changes) - Success
• 4.8.19 (changes) - Success
• 4.8.18 (changes) - Success
• 4.8.17 (changes) - Success
• 4.8.16 (changes) - Failed
• 4.8.15 (changes) - Success
• 4.8.14 (changes) - Failed
• 4.8.13 (changes) - Success
• 4.8.12 (changes) - Success Failed
• 4.8.11 (changes) - Success Failed
• 4.7.59 (changes) - Failed
• 4.7.58 (changes) - Success
• 4.7.57 (changes) - S F F
• 4.7.52 (changes) - Success
• 4.7.50 (changes) - Success
• 4.7.42 (changes) - Success
• 4.7.37 (changes) - Success
• 4.7.35 (changes) - Success Success
• 4.7.34 (changes) - Success
• 4.7.33 (changes) - Success
• 4.7.32 (changes) - Success
• 4.7.31 (changes) - S S S

---

Loading changelog, this may take a while ...

Changes from 4.7.3

Created: 2021-09-09 09:22:14 +0000 UTC

Image Digest: sha256:aba54b293dc151f5c0fd96d4353ced6ced3e7da6620c1c10714ab32d0577486f

Components

• Kubernetes 1.20.0-beta.2
• Red Hat Enterprise Linux CoreOS upgraded from 47.83.202103140039-0 to 47.84.202109082139-0 (diff)

New images

• driver-toolkit git bcd11a1f sha256:66c0840dd4c3d776c95962de5f5f056b39bd051e15cb89072ba76dcdbdfd9d95

Rebuilt images without code change

• aws-ebs-csi-driver git f6a71bf7 sha256:dcf5ea88524f098ee1d2ba68e1081b561428c3660b2fed965752431bba9733cc
• aws-pod-identity-webhook git 0074d6af sha256:427587f9bb6309ed23d5e99622d38cdffbdcc6410cecd0c4cd29c2d4259838ed
• cluster-bootstrap git 6665cae3 sha256:40880f702aa981ae97febd8379620abfce85dd8985346d9ef3821f04213ffd82
• configmap-reloader git 25dfb671 sha256:9ae68a822c9c2bd5175140dde2a5c6903b8e051087b075ee93ebda0be211b801
• container-networking-plugins git fc27124d sha256:afdfe3982c1b2e375a1f666e5ab7e5fbabcfe0c3dcdad6f69123afa97dc84b1d
• coredns git d4a3ba3f sha256:c423c27f3eebbd19fcce29705eace557298936a3fe47877fcf34adf778d09ea0
• csi-driver-nfs git 9404d343 sha256:31e414705bdf9c5747599b4988590b27b59f5bf838daa807cf52c5acb2dce2d8
• csi-external-attacher git f152de8a sha256:d1ac00fdccef1983a578aeccf895192ee9f9bf447f33b4f0caa106c86b4d01d6
• csi-external-provisioner git a49415e1 sha256:cea2bd9289e6014eb11e0ca4343788ad46d1bb082b386d81b3b46af33b771b4c
• csi-external-resizer git f77279e9 sha256:79db45c7ea226feceb285f2b31b5989678af985c1c067996d184948e61d7dce0
• csi-external-snapshotter git 26773735 sha256:07d211e9f893c2f931e1cf45e194523636b538b868b34be5ed8c699d6902c351
• csi-livenessprobe git 3dad0280 sha256:3b881263f36d3c4db7cd97cf683ccfa09b5e6c70b8f386cdbc31adf342cd8410
• csi-node-driver-registrar git 2a77963e sha256:0c9d7d1896464b0da9891802800a0077515fe4022852e0b8649c65c448febc1e
• csi-snapshot-controller git 26773735 sha256:d8045f770b24296e5c89f70a7af994b335d1453e3b28a275e26ec41347acff55
• csi-snapshot-validation-webhook git 26773735 sha256:4e22246422614e0d8cf16f75f08a5b6e73f0b6c873f38116f3b7f7a7bf4555c4
• egress-router-cni git 96ebd378 sha256:13e9749dc3dae46c1cdc2a74259b14821d3ce08c3bd7d9231b7b0720389d9b0b
• ironic-inspector git 916bdc6e sha256:84054570249e7696d0e2cd5bf1d20e71cb60d411962dec24d54bee01078b94dd
• ironic-static-ip-manager git 43d640a0 sha256:3378d0de135eaa876d7ba95641ec7841600d677a0b67a8729f570d88e6ab24d8
• k8s-prometheus-adapter git 212d80b4 sha256:81bc09418b8949817a8341af18ea9764067dfff1be88b208c1469e681f4151ec
• keepalived-ipfailover git 0e45f638 sha256:5fb4a06c00d888c770638e436fe521ee26126ed4990dc5af48908d577fbadbe7
• kube-rbac-proxy git 14c288e6 sha256:6600b7fba754388aa8b84aaab44dd92e276350da3fb778f38dae23afc747debb
• kube-state-metrics git 04bff708 sha256:14ff6b82060ba444141742586000109857eb520ee80ce7c23d61ba1cbdeb1e21
• kube-storage-version-migrator git 329a4b06 sha256:4b8a568bc281adec66464620add962cce80449c76521fa7ebbb1944f52174ed5
• machine-os-content sha256:cb90a29562fd3802ff3a50a5290da9a07358c7a8355d961b24cafb38bc860402
• multus-admission-controller git a7312f5e sha256:f2fb68501ef1e0ea718e847e579908c58b5bd48e3dcf737503781c9de7ce6cc7
• multus-route-override-cni git 1662c3ec sha256:54b8129731d4ce2778322cb4023204084a5e838de6f30a7cae1e6db56771649a
• network-metrics-daemon git b1926150 sha256:06dc2a5dc5090d7d52321820944987815db355872e3938dc473b438534cdfe49
• openshift-state-metrics git 40b0968e sha256:7f0035ce01ef027e3aed20e58b45c0b894c007e6cf84a806c96316502007813f
• openstack-machine-controllers git 471cf3ab sha256:e615efe073f4a7b1549d790d62a15268836ad06cddd1af9038467041917a9d56
• ovirt-csi-driver git 72545e63 sha256:8d17f50a72fa9c27ea97a04b10e2fa6e56d23626c0aad4780cad8ab4c5cf547a
• pod git 0e45f638 sha256:6b94dad529eacf6b4334a06e6213fd07f0d478b7d7795bb861650f297fe3249a
• prometheus git cb5e53cd sha256:6418213568d63e657195cc0a12297f04a8116c23430f61c253d5d1eb76a2bbab
• prometheus-alertmanager git 9954cc42 sha256:5448baf9017cf37d7c9f0887a365b0f71c8b435dfe7bd00c56c608c0d1d88f67
• prometheus-config-reloader git 1f0fd51d sha256:a7e089eb7b9d3eaf479ef3f0881dee66f3e59c6cabf27f85bc49118775799025
• prometheus-node-exporter git 76974e2e sha256:b185f4b4656644ba374d89d8c7c4080ca97250cf062ece18ad584dfb903785b5
• prometheus-operator git 1f0fd51d sha256:bc28a98491401701828522a7f799550637a6d32496880f2b105c9c576e496cb2

aws-ebs-csi-driver-operator

• Bug 1996070: Add maxUnavailable to DaemonSets #135
• Full changelog

aws-machine-controllers

• Bug 1976192: update aws-sdk-go to v1.38.25 #415
• Bug 1942966: Update EC2 instance types #398
• Updating ose-aws-machine-controllers builder & base images to be consistent with ART #373
• Bug 1924471: Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #409
• Bug 1952614: [OCPCLOUD-1115] Get instance tags from infrastructure object #405
• Bug 1935636: Ensure response body is closed when we are finished with the request #391
• Full changelog

baremetal-installer, installer, installer-artifacts

• Bug 1981553: [release-4.7] aws: move elastic ip permissions to create networking category #5055
• Bug 1954595: Validate noProxy input and add prefix for proxy urls #5060
• OWNERS: add more core team members as approvers #5123
• Bug 1977481: Dockerfile: repin libvirt #5043
• Bug 1975819: upi/vsphere: Use Afterburn guestinfo for static IP and hostname config #5025
• Bug 1974282: gather: collect networking information in log bundle #5017
• Bug 1971163: Updating AWS instance types #4992
• Bug 1945467: aws: allow use of unknown regions in known partitions #4807
• Bug 1938426: Set default values to machine pools before validation #4750
• Bug 1967355: pattern removed from sed to prevent expansion #4975
• Bug 1956483: Bump boot images for RHCOS fixes #4961
• Bug 1947427: add proxy params to bootstrap ignition #4830
• Bug 1939014: generate glance url considering the region #4753
• Bug 1947216: pkg/asset/installconfig/aws: Add iam permission for destorying clusters #4827
• Bug 1948398: remove ovirt_cafile from ovirt-credentials secret #4842
• Bug 1962435: aws: using dotted domain when looking for public hosted zone #4948
• Bug 1940275: Revert “baremetal: send full ignition to masters” #4767
• Bug 1943500: Bump gophercloud utils #4794
• Bug 1958518: aws: restore setting aws platform spec in infra resource #4918
• Bug 1958428: aws: support more auth options in manual mode #4914
• Bug 1945907: Byo aws iam roles 4.7 #4813
• Bug 1954803: aws: support for bring-your-own hosted zone #4887
• Bug 1951571: registry.svc.ci.openshift.org is no longer valid #4853
• Bug 1954152: manifests: populate aws user tags in infrastructure #4882
• Bug 1935174: RHCOS bump for LUKS, prjquota, etc #4791
• Bug 1947122: gcp: install google cloud sdk with yum the recommended way #4824
• Bug 1933728: baremetal: include netmask in DNSMasq dhcp range #4698
• Bug 1930106: bump ignition to v3_2 #4701
• Full changelog

baremetal-machine-controllers

• Bug 1938967: Updating baremetal-machine-controller builder & base images to be consistent with ART #134
• Bug 1936844: [release-4.7] Changing the default behaviour of the CAPBM to request hard reboot #144
• Full changelog

baremetal-operator

• Bug 1972430: Don’t deprovision provisioned host due to error #159
• Bug 1961341: config: use rbacv1 instead of rbacv1beta1 #148
• Bug 1910352: Fail registration when boot MAC address conflicts #131
• Bug 1936407: Backport of BMO code to 4.7 to support different reboot modes #132
• Full changelog

baremetal-runtimecfg

• Bug 1962949: Keepalived- verify that unicast peers list isn’t empty on master nodes #140
• Bug 1942488: sort AddressesDefault by route priority, ifindex, and IPv4/IPv6 preference #132
• Full changelog

cli, cli-artifacts, deployer, tools

• Bug 1995074: revert incorrect allowance of ssh:// prefix with scp styled URLs #902
• Bug 1974264: make oc logs work with BuildConfig’s JenkinsPipeline strategy #864
• Bug 1976284: skip-multiple-scopes with adm catalog mirror #869
• Bug 1963784: Preserve AuthInfo when switching projects #861
• Bug 1970811: set User-Agent when talking with registries #848
• Bug 1969928: exclude security during exctraction #844
• Fix unit test failure #838
• Bug 1942938: [release-4.7] inspect clusteroperators as a backup to must-gather if it fails #766
• Bug 1924453: Bump github.com/gogo/protobuf to v1.3.2 #753
• Bug 1942059: when mirroring to a file destination, mount images under the index location #779
• Bug 1939477: Fix unit test to use new IS #769
• Full changelog

cloud-credential-operator

• Bug 1958983: rework GCP passthrough permissions checking #338
• Bug 1948396: oVirt credentials secret contains unnecessary “ovirt_cafile” #322
• Bug 1948702: [release-4.7] manifests/0000_90_cloud-credential-operator_04_alertrules: Drop CloudCredentialOperatorDown #324
• Bug 1928151: spell fix user-visible string #301
• Full changelog

cluster-authentication-operator

• Updating ose-cluster-authentication-operator builder & base images to be consistent with ART #408
• Bug 1971087: add a controller to remove webhooktokenauthenticator config #418
• Bug 1956797: bump kube to 0.20.6 to prevent delegated authz panics #443
• Bug 1941840: endpoints controller: close response bodies #440
• Bug 1949941: add a scraper and an alert to check for old-style tokens #437
• Full changelog

cluster-autoscaler

• Bug 1924416: Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #204
• Updating atomic-openshift-cluster-autoscaler builder & base images to be consistent with ART #187
• Updating vertical-pod-autoscaler builder & base images to be consistent with ART #190
• Full changelog

cluster-autoscaler-operator

• Bug 1961341: manifests: use v1 for RBAC #206
• Bug 1924478: Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #207
• Full changelog

cluster-baremetal-operator

• Bug 1976924: Update bmh crd #190
• Bug 1933726: provisioning: configure DHCP range with netmask #112
• Bug 1973367: Pass IP_OPTIONS=dhcp|dhcp6 down to OS Downloader container #171
• Bug 1972291: Use a cache URL with the .svc.cluster.local suffix #161
• Bug 1936544: Inject proxy environment variables everywhere #117
• Full changelog

cluster-config-operator

• Bug 1954152: vendor: bump to the latest openshift/api #200
• Full changelog

cluster-csi-snapshot-controller-operator

• Bug 1961719: manifests/05_operator_rbac: Drop the unused namespace property #89
• Bug 1967328: Remove exclude annotation from manifests to include in ROKS #91
• Bug 1929881: Fix installation on ROKS #80
• Full changelog

cluster-dns-operator

• Bug 1967766: Corefile: Set bufsize to 512 bytes for all servers #277
• Bug 1953097: Corefile: Enable bufsize plugin for all servers #267
• Bug 1953609: Enable errors plugin for custom upstream resolvers #268
• Bug 1942228: Fix spurious reconciliation of DNS daemonset and service #250
• Bug 1943826: Corefile: Use 30 second max TTL for caching of negative responses #254
• Bug 1937089: Configure CoreDNS to shut down gracefully #247
• Full changelog

cluster-etcd-operator

• Bug 1976988: [release-4.7]: Increase inertia duration for the EtcdMembersDegraded condition #618
• Bug 1976287: Validate the status of the etcd snapshot during backup and restore #617
• Bug 1951447: pkg/etcdenvvar/etcd_env.go: Sort endpoints to prevent rollout #568
• Bug 1958416: pkg/dnshelpers: fallback to spec if status is not populated for serviceNetwork #594
• Bug 1955418: manifests: Shift FlowSchema to level 50 #582
• Bug 1954121: [release-4.7] Improve cert controller detection and correction of invalid certs #577
• OWNERS: add lilic as reviewer #588
• Bug 1954073: bindata, pkg: Propagate operator log level to etcd itself #578
• Full changelog

cluster-image-registry-operator

• Bug 1988388: Properly set custom tolerations #708
• Bug 1984979: Creating StorageAccount V2 instead of V1 #707
• Updating ose-cluster-image-registry-operator builder & base images to be consistent with ART #651
• Bug 1977159: bump aws-sdk-go to v1.38.35 #704
• Bug 1973693: Setting required pod anti-affinity rules #697
• Bug 1960562: manifests: fix selector in image-registry-operator #689
• Bug 1957308: Setting user tags always when Storage is Managed #684
• Bug 1955176: Setting user provided tags on bucket creation #682
• Full changelog

cluster-ingress-operator

• Bug 1978845: Specify topology spread constraints #632
• Bug 1973983: Canary: Handle downgrades from 4.8 to 4.7 properly #627
• Bug 1960776: Reconcile openshift-ingress namespace on upgrade #616
• Bug 1942603: [release-4.7] Add the new NetworkPolicy-matching label to the namespace #615
• Bug 1954097: Annotate services of type LoadBalancer with user tags (AWS only) #606
• Bug 1937214: Fix spurious reconciliation of NodePort services #570
• Full changelog

cluster-kube-apiserver-operator

• Bug 1927321: competing connectivitycheckcontrollers cause pod restarts during upgrades #1041
• Full changelog

cluster-kube-controller-manager-operator

• Bug 1924488: Bump github.com/gogo/protobuf to v1.3.2 #508
• Full changelog

cluster-kube-scheduler-operator

• Bug 1924490: Bump github.com/gogo/protobuf to v1.3.2 #334
• Full changelog

cluster-kube-storage-version-migrator-operator

• Updating ose-cluster-kube-storage-version-migrator-operator builder & base images to be consistent with ART #38
• Full changelog

cluster-machine-approver

• Bug 1924492: Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #120
• Updating ose-cluster-machine-approver builder & base images to be consistent with ART #103
• Full changelog

cluster-monitoring-operator

• Bug 1986591: node exporter calls /proc/cpuinfo multiple times causing the node to freeze #1300
• Bug 1969963: Recording rule for builds by strategy #1206
• Bug 1967966: Switch back anti-affinity to soft from hard for Prometheus #1200
• Bug 1956565: manifest allowlist: add acm_managed_cluster_info in 4.7 #1144
• Bug 1961069: remove dependency of e2e tests on AWS #1162
• Bug 1957703: [4.7]: Add hard anti-affinity constraints to Prometheuses #1150
• Bug 1950290: remove KubeClientCertificateExpiration alert rule #1171
• Bug 1955482: fix kube-state-metrics regexp patterns #1163
• Bug 1955482: Drop high-cardinality metrics from kube-state-metrics which aren’t used #1141
• Bug 1955469: remove node_mountstatsnfs* metrics #1154
• Bug 1955462: drop container_memory_failures_total metric backport #1160
• Bug 1952149: oc adm top reporting unknown status for Windows node #1130
• Bug 1955449: drop crio image metrics #1134
• Bug 1945856: Revert “Bug 1934516: [4.7]: jsonnet/prometheus.jsonnet: Apply system-cluster-critical class to cluster Prometheus ” #1103
• Bug 1945851: Backport Remove the “instance” and “pod” labels for kube-state-metrics metrics #1101
• Full changelog

cluster-network-operator

• Bug 1988426: Change to use mountPath: /host #1170
• Bug 1962036: Use the election mechanism provided by library-go #1098
• Bug 1972549: Remove reference to v1beta1 API #1134
• Bug 1982217: Use 10% for ovnkube-node for maxUnavailable #1153
• Bug 1969860: Escape characters on ini file #1127
• Bug 1967994: Backport daemonset to drop icmp frag needed packets received from other nodes in the cluster to Rel 4.7 #1119
• Bug 1972183: config: Set enable-profiling true by default and allow enable-profiling as a proxy argument #1129
• Bug 1967388: annotate flowcontrol with networkoperator.openshift.io/ignore-errors #1118
• Bug 1967972: Add tokenreviews permissions for kube-proxy #1120
• Bug 1942603: [release-4.7] Allow from router policy support for cluster network operator #1087
• Bug 1937396: kuryr/alerts: change the rule for free count #1011
• Bug 1957749: ovnkube: add missing resource requests for SBDB #1088
• Bug 1954302: Remove OVS daemonsets #1076
• Bug 1956352: [4.7] OVN kubernetes dual-stack conversion #1082
• Bug 1941214: Use 10% for ovs maxUnavailable for rolling update #1031
• Bug 1936719: OSD-6600 network-metrics missing priorityClass #1007
• Bug 1927321: competing connectivitycheckcontrollers cause pod restarts during upgrades #1050
• Bug 1941212: The Multus daemonset should handle 10% maxUnavailable #1030
• Bug 1940806: OVN Upgrade: fix upgrade order of node and master #1029
• Bug 1929371: Don’t set ClusterOperator Version until rollout is complete #983
• Bug 1937829: Cherry-pick dual stack migration #1017
• Full changelog

cluster-node-tuning-operator

• Bug 1986739: gather all Tuned CRs #255
• Bug 1958885: Switch to client-go leader-with-lease election. #238
• Bug 1960542: manifests: fix selector in node-tuning-operator ServiceMonitor #228
• Bug 1928614: Keep ignition units in sync with [service] plugin. #215
• Full changelog

cluster-openshift-apiserver-operator

• Bug 1996045: bindata: run openshift-apiserver as root explicitly. #468
• Updating ose-cluster-openshift-apiserver-operator builder & base images to be consistent with ART #427
• Bug 1955502: explicitly allow apiserver pods to write to their root FS #449
• Bug 1927321: competing connectivitycheckcontrollers cause pod restarts during upgrades #444
• Full changelog

cluster-openshift-controller-manager-operator

• Bug 1924494: Update k8s.io dependencies to address CVE-2021-3121 #222
• Bug 1944142: Bump kubernetes to 0.20.5 #204
• Bug 1931856: Set registry routes in operand config #199
• Full changelog

cluster-policy-controller

• Bug 1924496: Bump github.com/gogo/protobuf to v1.3.2 #58
• Full changelog

cluster-samples-operator

• Bug 1923036: Update Jenkins monitored templates names #359
• Bug 1961518: manifests: fix selector in ServiceMonitor #375
• Bug 1950808: add DeepCopy to avoid SharedInformer cache mutation #370
• Full changelog

cluster-storage-operator

• Bug 1961719: manifests: remove namespace from cluster-storage-operator-role binding #170
• Bug 1959546: Add alert about vsphere-problem-detector unable to connect #169
• Full changelog

cluster-update-keys

• Pack both keys in one verifier-public-key-ci entry #36
• Adding the new Openshift CI Signer key #34
• Full changelog

cluster-version-operator

• Bug 1991010: pkg/cvo/metrics: Ignore Degraded for cluster_operator_up #638
• Bug 1924428: CVE-2021-3121 gogo/protobuf lacks certain index validation #625
• Bug 1970272: Fixing the log message in rbac.go for clusterrole #609
• Bug 1970272: Log object updates and show existing/required diff #589
• Bug 1969501: install/0000_90_cluster-version-operator_02_servicemonitor: Soften ClusterOperatorDegraded #587
• Bug 1969378: avoid hotlooping on RoleBindings with empty APIGroup #584
• Bug 1966977: Prevent hotlooping in ImageStreams #580
• Bug 1959238: pkg/cvo/sync_worker: Shift ClusterOperator pre-creation into the manifest-task node #557
• Bug 1943754: Ensure automountServiceAccountToken is synced on service account updates #539
• Bug 1941217: pkg/cvo/sync_worker: Skip precreation of baremetal ClusterOperator #534
• Full changelog

console

• Bug 1986724: Show the content of Insights widget when there are 0 recommendations for cluster #9655
• Bug 1989642: Preserve user annotations while editing an app #9714
• Bug 1975560: Fix typo in olm message #9335
• Bug 1975469: Handle array to string conversion for HTTPS checkbox value #9332
• Updating openshift-enterprise-console images to be consistent with ART #8596
• Bug 1973572: Hardcode strings in Home->Overview page #9322
• Bug 1942864: Warning Alert for Encrypted PVs in Create StorageClass #8464
• Bug 1965526: Removing library charts from the merged helm repo index entries. #9076
• Bug 1970796: update cluster-local label for ksvc #9220
• Bug 1970720: fix rotated pipelinerun status icon issue in safari #9216
• Bug 1969536: Omit bitbucket branch in URL if it contains slash #9180
• Bug 1954962: removes extra annotations form spec template for ksvc #8823
• Bug 1948537: add hide/reveal button for kms token #8616
• Bug 1942160: Update the scope of GitOpsService resource #8450
• Bug 1971667: Track and show error messages in modals #9232
• Bug 1969791: fixes: WebTerminal widget should send resize events #9190
• Bug 1969105: Update IP address on pods list to show podIP other than … #9172
• Bug 1967106: can’t open terminal for pods that have more than one co… #9117
• Bug 1966275: Fix Pipeline Parameters in Modals accept empty string defaults #9085
• Bug 1961567: Remove the broken Devfile Sample for BuildConfigs #8956
• Bug 1963025: Fix documentation link to network policies #8953
• Bug 1953606: Fixing failure domain issue with custom pools (4.7 backport) #8775
• Bug 1970485: Add pipeline annotation to secrets for private git repo import with pipeline #9207
• Bug 1964400: Fix RGW Total Used Query #9038
• Bug 1958873: Fix disk replacement during second replacement #9083
• Bug 1961887: Update Taskrun tab to make namespace based calls #8968
• Bug 1959356: Tech preview badge for arbiter #8870
• Bug 1964322: The status of “Used Capacity Breakdown [Pods]” is “Not available” #9028
• Bug 1957499: OperatorHub - console accepts any value for infraFeatures #8859
• Bug 1960686: Fix hot loop in global config page #8935
• Bug 1947091: Fix skipped task status when using conditions #8582
• Bug 1962493: Hide TaskRun edit actions for rows in Pipelinerun’s TaskRun tab #8987
• Bug 1966798: [release-4.7] Remove monitoring labelling step for 4.7 tests #9073
• Bug 1951210: Fix default resource log download file name #8707
• Bug 1944046: Warn using an unsupported IE browser #8494
• [release 4.7] Bug 1939553: Support binary file type secret entries #8389
• Bug 1960544: Overly generic CSS rules for dd and dt elements breaks styling elsewhere in console #8925
• Bug 1960093: Make console works against api proxy #8914
• Bug 1942027: Fix RBAC check when creating a resource #8448
• Bug 1956336: Fix Triggers section in eventlistener details page #8842
• Bug 1953937: Fixing PVC creation page issue in 4.7(Reverting wrong commit) #8784
• Bug 1952578: Don’t poll ClusterVersion when user doesn’t have authority #8749
• Bug 1950489: Fix “Create binding” link from Role page, RoleBindings tab #8685
• Bug 1948958: Fix ingress details page to show referenced secret name #8633
• Bug 1944955: Fix close button in the new ‘Storage cluster exists’ warning alert modal #8524
• Bug 1956313: Save additional parameters from build guidance container and drop it #8841
• Bug 1953728: Fix issues related to loading dynamic plugins #8780
• Bug 1945594: fixing-project-creation-and-updated-packageJson #8536
• Bug 1950214: Fix start pipeline action access review #8681
• Bug 1948369: Remove cluster label from predefined monitoring queries #8613
• Bug 1954109: Backport telemetry dynamic extension to release-4.7 #8783
• Bug 1952209: Consistent formatting of dates and times #8734
• Bug 1952293: adds check for templates #8736
• Bug 1942843: Modified description for storage class encryption - 4.7 Backport #8462
• Bug 1948938: [release-4.7] Prow script point to deleted resource #8619
• Bug 1944855: Update Dockerfile.product for nodejs v14.16.0 #8488
• Bug 1945153: Remove pipeline Tech preview badge for pipelines GA operator #8528
• Bug 1943643: fix pipeline metrics endpoint for 1.4 osp #8489
• Bug 1944349: fix backwards incompatible trigger api changes #8503
• Bug 1943441: Add ‘Roll Back’ action for Replication Controllers and Replica Sets #8475
• Bug 1925792: Fix translation for edit annotation #8078
• Bug 1941468: Change link for not available state #8431
• Bug 1939608: Fix null handling in FilterToolbar_ to prevent possible exceptions #8394
• Bug 1937356: Fix to show correct internal image-stream name in container image edit flow’s internal registry image-stream dropdown for kn service #8353
• Bug 1927198: fix pvc string in pvc.view #8126
• Bug 1927311: avoid 404 errors attempting to load en-US #8128
• Bug 1931382: Hide pipeline section in container image edit flow #8209
• Bug 1933665: [release-4.7] Create ImageStream and other resources for samples step by step #8255
• Bug 1935672: [release-4.7] fix pipelinerun status icon rendering issue #8311
• Bug 1932272: Fix KMS validation error for 4.7 release #8221
• Bug 1937313: Removed loaded prop and nested component #8351
• Bug 1936803: support service binding operator version 0.5.0 #8335
• Bug 1937469: Pod/node/ip/template isn’t showing when vm is running #8357
• Bug 1932277: Create new pool with arbiter - wrong replica (4.7 release) #8234
• Bug 1930152: Do not fail new VM wizard when no storage classes are available #8190
• Full changelog

console-operator

• Bug 1960589: [release-4.7] quickstarts: remove “spec.version” #547
• Bug 1936337: Check for error when generating default and user-defined config for the console-config configmap #512
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver

• Bug 1969345: Backport ignore proxy connecting to CSI sockets #54
• Full changelog

csi-driver-manila-operator

• Bug 1987036: Use cluster Proxy when available #110
• Bug 1996070: Add maxUnavailable to DaemonSets #116
• Full changelog

docker-builder

• Bug 1924455: Update dependencies to address CVE-2021-3121 #258
• Updating openshift-enterprise-builder builder & base images to be consistent with ART #188
• Bug 1943726: add bracket logging on openshift/builder calls into buildah to assist test-platform team triage #237
• Bug 1945692: move entitlement related secrets back to mounts.conf #240
• Bug 1924554: bump(cni) 0.8.1 #234
• Bug 1940052: retry image pulls during builds #226
• Bug 1939218: bump(containers/*): #224
• Full changelog

docker-registry

• Bug 1984094: use apimachinery with HTTP/2 health checks enabled #288
• Updating openshift-enterprise-registry builder & base images to be consistent with ART #262
• Bug 1977159: bump aws-sdk-go to v1.38.35 #282
• Full changelog

etcd

• Bug 1970141: discover-etcd-initial-cluster: retry if member is not part of member list and dataDir exists #82
• ETCD-178: Bug 1944386: openshift-tools: fix on off flow and add unit tests #74
• Full changelog

gcp-machine-controllers

• Bug 1924508: Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #164
• Bug 1935636: Ensure response body is closed when we are finished with the request #151
• Full changelog

gcp-pd-csi-driver

• Updating ose-gcp-pd-csi-driver builder & base images to be consistent with ART #10
• Full changelog

gcp-pd-csi-driver-operator

• Bug 1996070: Add maxUnavailable to DaemonSets #33
• Bug 1940005: Add CSIDriver object #18
• Full changelog

grafana

• Updating grafana builder & base images to be consistent with ART #54
• Full changelog

haproxy-router

• Bug 1994645: config template: accept IPv6 IPs for whitelisting #325
• Bug 1967733: template helper - generateHAProxyWhiteListFile, use right arg type #297
• Bug 1965402: Revert ‘Bug 1896977: Enhance host name validation in router’ #293
• Bug 1963243: Add a condition to check if the Endpoints ID is duplicated #288
• Bug 1942534: [4.7 backport] Route gets admitted with invalid host name if override annotation is used #273
• Bug 1938921: router/template: Cache compiled regular expressions #269
• Full changelog

hello-openshift, tests

• Bug 1982929: Improve GC Check for Builds #26334
• Re-enable quota test #26284
• Bug 1980540: Use cluster-logging for operator installation smoke test. #26315
• Bug 1977383: [release-4.7] Update resource quota test for compatibility with service ca configmap publishing #26303
• Bug 1928862: [4.7] Bump openshift/kubernetes #26259
• Bug 1978000: builds: comment out multi-namespace template test #26296
• NOOP - Trigger a new CI build #26291
• Bug 1977383: [release-4.7] Skip cluster quota test to enable service ca publisher to merge to o/k #26283
• Bug 1970411: properly remove project after test ends #26217
• Bug 1966358: Dockerfile.rhel: fix a bash typo #26194
• Bug 1961367: Add Cinder client to the test image #26171
• Bug 1955600: test/extended/router: Fix-up Unidling test #26120
• Bug 1963115: narrow verify /run test to /run/secrets #26180
• Bug 1963115: move verify run test from tools to cli image to avoid additional /run content #26176
• Bug 1958797: test/extended/router/idle: Only run on OVNKubernetes or OpenShiftSDN #26145
• Bug 1947705: Add test of documented backup/restore procedure #26110
• Bug 1955669: flake testKubeletToAPIServerGracefulTermination #26121
• Bug 1942055: upgrade/upgrade.go: Enhance upgrade ack time out error #26012
• Bug 1941574: test/extended/router/idle: skip test on virt platforms #25999
• Bug 1940866: Add BareMetalPlatformType into e2e upgrade service unsupported list #25989
• Bug 1927953: test/extended/router/idle: address flakes/failures seen in CI #25892
• Bug 1931622: test: add vsphere to unsupported platforms for LB service #25913
• Bug 1932806: release-4.7: e2e: test OAuth API connections in the tests by that name #25894
• Bug 1935707: [release-4.7] test: Detect when the master pool is still updating after upgrade #25941
• Bug 1931401: fix sig-cli flakes #25910
• Bug 1939477: Update tests to use Ruby 2.7 #25966
• Bug 1927554: adjust route host for redis/nodejs/cakephp to accomodate new apiserver restrictions #25884
• Full changelog

hyperkube

• Bug 1996846: UPSTREAM: 98571: kubelet: Stop probing a pod during graceful shutdown #901
• Bug 1973766: 4.7: Do not throw error when we can’t get canonical path #881
• Bug 1981775: Bump apiserver libary go 4.7 #879
• Bug 1981634: UPSTREAM: <drop>: use the legacy service-ca.crt content for clusters started in 4.7 or before #857
• Bug 1977383: [release-4.7] Ensure service ca configmap is created in all namespaces #834
• Bug 1977383: [release-4.7] Fix watch conformance test #843
• Bug 1977383: Update resource quota test for compatibility with service ca configmap publishing #839
• Bug 1975553: only chown if non-windows machine with projected volumes #826
• Bug 1928862: [release-4.7] UPSTREAM: <carry>: kube-apiserver: ignore SIGTERM/INT after the first one #739
• Bug 1966810: UPSTREAM: 102224: Fix expired unit test certs #780
• Bug 1963263: UPSTREAM: 102000: Ref counting is only applicable to Remote endpoints #763
• Bug 1955883: UPSTREAM: 99095: Prevent Kubelet stuck in DiskPressure when imagefs minreclaim is set #725
• Bug 1951726: Speed up PV provisioning for vsphere driver (ocp-4.7) #690
• Bug 1942141: fixes cinder PV labelling #635
• Bug 1951815: UPSTREAM: 99393: kubelet: reduce configmap and secret watch #692
• Bug 1955231: UPSTREAM: 101345: kubelet: improve the node informer sync check #721
• Bug 1952917: UPSTREAM: 100228: For LoadBalancer Service type don’t create a HNS policy for empty or invalid external loadbalancer IP #697
• Bug 1928862: Enable snapshot tests #569
• Bug 1945856: 99729:Only system-node-critical pods should be OOM Killed last #642
• Bug 1927717: UPSTREAM: 98939: fixes race in TestSyncPodsDeletesWhenSourcesAreReady #567
• Full changelog

insights-operator

• Bug 1982170: Set also the summary operation when updating status (#480) #480
• [release 4.7] Bug 1960645: Adds virt_platform metric to the collected metrics (#428) #428
• [release 4.7] Bug 1953579: GatherClusterOperators and GatherClusterOperatorsPodAndEvents (#410) #410
• Add vsphere_node_hw_version_total metric (#416) #416
• Bug 1950926: Extend OLM data with CSV display name (#400) (#402) #400
• Bug 1942068: Gahter datahubs.installers.datahub.sap.com resources from SAP clusters (#383) #383
• Bug 1939061: Sap license management logs gatherer 4.7 (#372) #372
• Adds memory usage to the metadata (#364) #364
• Bug 1935070: Extend the OLM operator data with related … (#362) #362
• Bug 1934442: Gather info about unhealthy SAP pods (#360) #360
• Bug 1936802: Authentication log gatherer - do not scan all the pods in openshfit-authentication (#369) #369
• Bug 1936861: Include namespace name in binarydata configmap path & test (#368) (#370) #368
• Full changelog

ironic

• Bug 1958965: Updated ironic packages #166
• Bug 1937695: Supply a default for COPY args #155
• Full changelog

ironic-hardware-inventory-recorder

• Updating ironic-hardware-inventory-recorder-image builder & base images to be consistent with ART #502
• Full changelog

ironic-ipa-downloader

• Bug 1963210: Add support for no_proxy #78
• Bug 1937809: Update ironic-images package #63
• Full changelog

ironic-machine-os-downloader

• Bug 1963210: Add support for no_proxy #53
• Bug 1973367: Modify dhcp kernel args based on ipv4/ipv6 #55
• Bug 1971549: Unconditionally remove TMPDIR #45
• Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

• Bug 1972361: Bump jenkins version 2.289.2 #1281
• [release 4.7] Bug 1947810: Update Jenkins to 2.277.3 and disable setup wizard #1259
• Bug 1952562: bump config-file-provider to 3.7.1 #1265
• [release 4.7] Bug 1929118: update kubernetes-client-api #1230
• Full changelog

kube-proxy, sdn

• Bug 1995872: Disable conntrack for vxlan traffic #338
• Bug 1971669: Fix 4.7 SDN Egress Network Policy #334
• Bug 1962637: ValidateMTU: check only the interface that holds the node ip #304
• Bug 1923231: rebase to sdn-4.7-kubernetes-1.20.0-rc.0 #286
• Bug 1941993: Fix incorrect unmonitoring of egress nodes #279
• Bug 1924830: CVE-2021-3121 gogo/protobuf lacks certain index validation #265
• Full changelog

kuryr-cni, kuryr-controller

• Bug 1972631: Workaround OVN bug causing subports to be DOWN #525
• Bug 1970320: Fix Subnet retrival when creating Service without Selector #522
• Bug 1949541: Fixing bug, Kuryr-Controller crashes when it’s missing the status #501
• Bug 1959766: Fix NPs for OVN LBs with hairpin traffic #516
• Bug 1929066: Skip pool pre population if no Status is present on CRD #505
• Bug 1941941: Include service subnet to be open for namespaceSelector set to all. #504
• Bug 1929066: Fix port pools #455
• Bug 1949551: kuryr-controller restarting after 3 days cluster running - pools without members #502
• Bug 1938960: Ignore headless services in NP code #487
• Bug 1938960: Do not default protocol to TCP for allow-all NPs #480
• Full changelog

libvirt-machine-controllers

• Updating ose-libvirt-machine-controllers builder & base images to be consistent with ART #212
• Bug 1938316: [release-4.7] Update MAO and set metrics on :8081 address #219
• Full changelog

machine-api-operator

• Bug 1924517: Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #867
• Bug 1955689: Webhook filter should check for both mutating and validating webhooks #861
• Bug 1947372: vSphere, detach virtual disks before virtual machine destroy if node not available #841
• Bug 1954610: Update GCP default image to match 4.7 release #856
• Full changelog

machine-config-operator

• Bug 1995853: Gracefully shutdown taking around 6-7 mins (libvirt provider) #2727
• Bug 1988102: [release-4.7] On-prem: add default ingress track script to Keepalived #2697
• Bug 1998112: vSpehere: disable vmxnet3 tx csum offload #2738
• Bug 1995810: crio: complete crio default config #2725
• Bug 1992240: change system-connections-merged directory to systemConnectionsMerged #2709
• Bug 1956462: ensure SSH key uniqueness #2563
• Bug 1993386: crio: use conmon from path #2715
• Bug 1992687: alerts: SystemMemoryExceedsReservation triggers too quickly #2710
• Bug 1970166: MCO: maxUnavailable of ds/machine-config-daemon does not get updated due to missing resourcemerge check #2682
• Bug 1977432: crio: enable internal_wipe option #2649
• Bug 1970590: daemon: Change runGetOut to not intermix stdout/stderr #2609
• Bug 1976232: Explicitly set keyfile as the default plugin of NetworkManager for RHEL7 #2641
• Bug 1971864: Stop setting nopreempt on bootstrap keepalived.conf #2616
• Bug 1973006: daemon: cordon the node before performing drain #2623
• Bug 1961341: rbac: update remaining apis to v1 #2620
• Bug 1971374: daemon/drain.go: bump initial drain sleeps down to 1min #2612
• Bug 1970154: operator/sync.go confirm renderedconfig osimageurl matches cvo #2607
• Bug 1968759: Bump drain timeout to 1h #2605
• Bug 1949348: gcp-routes should wait until network is stopped #2593
• Bug 1962288: [ovirt] Stop using db file for static internal records #2581
• Bug 1964568: Delete duplicated generated mc #2591
• Updating ose-machine-config-operator builder & base images to be consistent with ART #2399
• Bug 1949348: not allow healthcheck traffic to loop through the node #2526
• Bug 1953475: daemon: return nil for unsupported operation on an OS #2544
• docs/README: Useless bump to get a new commit hash #2584
• Bug 1956749: vsphere: platform none, vmxnet3v4 fix move to base #2564
• Bug 1950261: create the ovs-config-executed file to signal ovs is running on the host #2532
• Bug 1957015: [on-prem] Backport duplicate VIP fixes #2566
• Bug 1932383: Connect default NIC to cluster network #2427
• Bug 1942488: Use new –prefer-ipv6 flag to “runtimecfg node-ip” as appropriate #2525
• Bug 1950498: Add on-prem namespaces to relatedObjects #2533
• Bug 1951028: configure-ovs doesn’t handle bond interfaces correctly for OVNKubernetes #2536
• Bug 1944394: Do “systemctl daemon-reload” after running “runtimecfg node-ip” #2497
• Fixes: Bug 1943143: [vsphere] hostnames are changed when upgrading from 4.6 to 4.7.x causing upgrades to fail #2490
• Bug 1941246: vSphere: Disable tx-udp-tnl offload #2495
• Bug 1941128: pkg/operator/status: Use ‘DegradedPool’ reason for Upgradeable=False #2473
• Bug 1941367: Make getting the suffix of an MC more robust #2476
• Bug 1933205: Revert “pkg/daemon: Add IgnitionVersion to Daemon” #2438
• Bug 1927783: [vsphere] set hostname with –static to provide consistent node name for CSR approval #2405
• Bug 1931863: Apply system-connections-merged to all platforms #2426
• Bug 1936008: templates: add After=ostree-finalize-staged.service to kubelet.service #2455
• Bug 1929257: Fix 1:1 mapping for kubeletconfig:MC and some e2e test fixes #2462
• Bug 1939278: Backport kubelet CA no-drain rotation #2464
• Full changelog

mdns-publisher

• Bug 1983695: [release-4.7] Truncate long service names to 63 characters #34
• Full changelog

multus-cni

• Bug 1927896: make a copy of global RuntimeConfig on merge #91
• Full changelog

multus-whereabouts-ipam-cni

• Bug 1931950: [backport 4.7] Fix for IPv6 when leading hextets equal zero #49
• Full changelog

must-gather

• Updating ose-must-gather builder & base images to be consistent with ART #202
• Bug 1954302: Add ovs related services to GENERAL_SERVICES #229
• Full changelog

oauth-apiserver

• Bug 1917904: bump k8s.io/apiserver to 1.20.4 #43
• Full changelog

oauth-proxy

• Updating golang-github-openshift-oauth-proxy builder & base images to be consistent with ART #198
• Full changelog

oauth-server

• Bug 1965932: bump kube to 0.20.4 #79
• Full changelog

openshift-apiserver

• Bug 1965402: Revert ‘Bug 1965402: Enhance API host name validation’ #211
• Bug 1961557: sets shutdown-delay-duration from OpenShiftAPIServerConfig #199
• Bug 1917904: bump k8s.io/apiserver to 1.20.4 #187
• Full changelog

openshift-controller-manager

• Bug 1924531: Update k8s.io dependencies to address CVE-2021-3121 #191
• Bug 1955210: fixed LANG for the builder container #180
• Full changelog

openstack-cinder-csi-driver-operator

• Bug 1996070: Add maxUnavailable to DaemonSets #54
• Full changelog

operator-lifecycle-manager

• Bug 1982693: remove cleanup from startup #2287
• Bug 1972075: Add OperatorCondition status sync and update operator upgradeable check #2206
• Bug 1945702: Fix inconsistent dependency candidate order. #2149
• Bug 1962314: Explicitly set readOnlyRootFilesystem: false on created registry pods. #2171
• Bug 1963141: Make ClusterOperator Available condition sticky. #2173
• Bug 1962312: Simplify deployment status check to reduce flapping. #2170
• Bug 1962302: Set reason/message for Available condition in packageserver co #2168
• Bug 1959009: Use DeploymentAvailable instead of custom test for CSV status. #2151
• Bug 1924467: Bumps k8s.io dependencies to v0.20.6 #2121
• Bug 1949139: Preserve existing ServiceAccount owner references during installs. #2088
• Bug 1951657: fix(catalog): Reduce namespace resync in resolution failure #2107
• Bug 1952851: Add resource requests for bundle unpacker #2109
• Bug 1951232: Fix resolution error if inner entry doesn’t provide a required API. #2106
• Bug 1947909: Do not adopt copied CSVs #2089
• Bug 1937375: only override deployment resources when explicitly defined in subscription config #2036
• Bug 1933839: bump k8s.io/apiserver for webhook authorizer panic fix #2022
• Bug 1936707: Allow non-CSV-owned ServiceAccounts to satisfy CSV requirements. #2034
• Bug 1938405: Support jittering relatively small resync intervals. #2041
• Updating operator-lifecycle-manager builder & base images to be consistent with ART #2013
• Full changelog

operator-marketplace

• Updating marketplace-operator builder & base images to be consistent with ART #367
• Full changelog

operator-registry

• Bug 1968680: fix(containerd): drop xattrs during unpack #676
• Bug 1924468: Bump the k8s dependencies to v1.20.6 #638
• Bug 1937097: Add retries to opm index add #643
• Full changelog

ovirt-csi-driver-operator

• Bug 1996070: Backport maxUnavailable: 10% for DaemonSets #69
• Full changelog

ovirt-machine-controllers

• Bug 1939358: extract node machine ipaddress from the engine instead using DNS . #98
• Bug 1939360: providerIDController ignore nodes that have no machine #99
• Bug 1939199: move to go 1.15 and registry.ci.openshift.org #97
• Full changelog

ovn-kubernetes

• Bug 1999896: Revert “[release-4.7] fix reserve joinSwitch LRP IPs” #707
• Bug 1997574: Fix: sync egress IP for missed events on start-up #687
• Bug 1976242: Update existing policy ACLs on start #650
• Bug 1997104: fix reserve joinSwitch LRP IPs #683
• Bug 1995910: Backport ovnkube-trace requires ip package to be installed #674
• Bug 1991445: Bump OVN to 20.12.0-140.el8fdp #649
• Bug 1967132: policy: handle NetworkPolicies single “from” multiple “ipBlock” #562
• Bug 1985516: Add v6 management interface address for host network policy #625
• Bug 1962608: ensure missed events are handled during a reconnection #547
• Bug 1972484: egress firewall as ACLs + service connectivity fixes #592
• Bug 1940566: Properly log when hybrid overlay errors out #543
• Bug 1970779: Remove getDefaultIfAddr and use getNetworkInterfaceIPAddresses #571
• Bug 1962590: NewAddressSet: return nil in case of error #546
• Bug 1970322: revert 487 #570
• Bug 1962819: CNI cmdCheck: treat ingress_policing_rate=0 as not found #548
• Bug 1965075: CARRY: fix missed learn for hybrid exgw #556
• Bug 1946682: egress firewall as ACLs #487
• Bug 1942603: [release-4.7] Allow from router network policy support #526
• Bug 1956980: [release-4.7] fix ForEachAddressSet() as it is not calling the callback functions #523
• Bug 1959737: Fix: egress IP route health check detection state on restart #538
• Bug 1956270: service controller should not use the target-port #519
• Bug 1947097: [4.7z] Ensure no SNAT on GR for DisableSNATMultipleGws #533
• Bug 1939488: Backport Handle Multus network-status annotations on pod update #467
• Bug 1956318: Revert “removing the hybrid overlay externalGW code” #521
• Bug 1951064: master: cancel leader election on exit #505
• Bug 1950131: fix deadlock in EgressFirewall DNS code #513
• Bug 1951552: master: Delay deleting Namespace’s address set for 20 seconds #507
• Bug 1950432: [4.7] pods: bind pod logical switch ports to the node’s chassis with requested-chassis #503
• Bug 1924826: Backport Update gogo/protobuf to v1.3.2. #464
• Bug 1943316: [4.7] master: enable logical datapath groups for OVN >= 20.12 #478
• Bug 1946696: iptables: add filter on node local traffic #489
• Bug 1947835: Fix service update for policy type assertion #493
• Bug 1942702: backport lr-nat-del/add fixes #484
• Bug 1931520: Backport Fix ACL syntax for dual-stack #465
• Bug 1943310: [4.7] Enable DB memory trimming on compaction #477
• Bug 1932268: detect if the cluster has endpoint slices #442
• Bug 1935180: Backport Fix mcast querier #468
• Bug 1937829: Cherry-pick dual-stack conversion #460
• Bug 1934645: Backport enable support for BFD on external gateway routes #462
• Full changelog

prom-label-proxy

• Updating prom-label-proxy builder & base images to be consistent with ART #330
• Full changelog

service-ca-operator

• Bug 1981634: add vulnerable legacy injector to allow for upgrade clusters to use #170
• Full changelog

telemeter

• Updating telemeter builder & base images to be consistent with ART #369
• Full changelog

thanos

• Bug 1994123: dockerignore: remove vendor from ignored list #69
• Bug 1944575: pkg/rules: fix deduplication of equal alerts with different labels #52
• Bug 1957646: cmd/thanos: use miekgdns resolver as default #56
• Full changelog

vsphere-problem-detector

• Bug 1959546: Update to current master #40
• Bug 1936975: Fix deadlock when enqueing functions into the pool #35
• Full changelog

---

View changelog in Markdown or change previous release: 4.20.0-0.nightly-2025-07-15-1410484.20.0-0.nightly-2025-07-15-0831244.20.0-0.nightly-2025-07-15-0312014.20.0-0.nightly-2025-07-14-1423044.20.0-0.nightly-2025-07-14-0142254.20.0-0.nightly-2025-07-13-1008564.20.0-0.nightly-2025-07-12-1849304.20.0-0.nightly-2025-07-12-0322544.20.0-0.nightly-2025-07-07-2347404.20.0-0.nightly-2025-07-01-0515434.20.0-0.nightly-2025-06-30-1859274.20.0-0.nightly-2025-05-26-181128───4.20.0-0.konflux-nightly-2025-05-21-1617074.20.0-0.konflux-nightly-2025-05-14-2111594.20.0-0.konflux-nightly-2025-05-14-1119044.20.0-0.konflux-nightly-2025-05-14-0413524.20.0-0.konflux-nightly-2025-05-13-0624534.20.0-0.konflux-nightly-2025-05-13-022452───4.20.0-0.ci-2025-07-15-1924314.20.0-0.ci-2025-07-15-1158044.20.0-0.ci-2025-07-15-0558044.20.0-0.ci-2025-07-14-2358044.20.0-0.ci-2025-07-14-1758044.20.0-0.ci-2025-07-14-1158044.20.0-0.ci-2025-07-14-0558044.20.0-0.ci-2025-07-13-2358044.20.0-0.ci-2025-07-10-1045524.20.0-0.ci-2025-07-10-0445514.20.0-0.ci-2025-07-08-224550───4.19.0-0.nightly-2025-07-15-1637024.19.0-0.nightly-2025-07-15-0855404.19.0-0.nightly-2025-07-15-0225144.19.0-0.nightly-2025-07-14-1506394.19.0-0.nightly-2025-07-14-0754584.19.0-0.nightly-2025-07-13-2359144.19.0-0.nightly-2025-07-13-0408544.19.0-0.nightly-2025-07-10-0617594.19.0-0.nightly-2025-07-09-2327284.19.0-0.nightly-2025-07-09-1452474.19.0-0.nightly-2025-07-09-0939024.19.0-0.nightly-2025-07-09-0448364.19.0-0.nightly-2025-07-08-1728094.19.0-0.nightly-2025-07-02-1432534.19.0-0.nightly-2025-07-02-0941554.19.0-0.nightly-2025-07-02-0449374.19.0-0.nightly-2025-04-24-0058374.19.0-0.nightly-2025-04-17-1545524.19.0-0.nightly-2025-04-08-0355034.19.0-0.nightly-2025-04-04-170728───4.19.0-0.konflux-nightly-2025-07-15-1841364.19.0-0.konflux-nightly-2025-07-15-1320074.19.0-0.konflux-nightly-2025-07-15-0920074.19.0-0.konflux-nightly-2025-07-15-0520074.19.0-0.konflux-nightly-2025-07-15-0047014.19.0-0.konflux-nightly-2025-07-14-2019084.19.0-0.konflux-nightly-2025-07-14-1313244.19.0-0.konflux-nightly-2025-07-14-0518534.19.0-0.konflux-nightly-2025-07-14-0011084.19.0-0.konflux-nightly-2025-07-13-0406304.19.0-0.konflux-nightly-2025-07-10-1308334.19.0-0.konflux-nightly-2025-07-10-0908324.19.0-0.konflux-nightly-2025-07-10-0508324.19.0-0.konflux-nightly-2025-07-10-0010524.19.0-0.konflux-nightly-2025-07-09-2009494.19.0-0.konflux-nightly-2025-07-08-1808504.19.0-0.konflux-nightly-2025-07-08-1408504.19.0-0.konflux-nightly-2025-07-08-0938154.19.0-0.konflux-nightly-2025-07-04-1018444.19.0-0.konflux-nightly-2025-07-04-0618444.19.0-0.konflux-nightly-2025-07-04-0218444.19.0-0.konflux-nightly-2025-07-03-2218444.19.0-0.konflux-nightly-2025-07-03-1818444.19.0-0.konflux-nightly-2025-07-03-1418444.19.0-0.konflux-nightly-2025-07-03-1018444.19.0-0.konflux-nightly-2025-07-03-0618444.19.0-0.konflux-nightly-2025-07-03-0218444.19.0-0.konflux-nightly-2025-07-02-2218444.19.0-0.konflux-nightly-2025-07-02-1818444.19.0-0.konflux-nightly-2025-07-02-1418444.19.0-0.konflux-nightly-2025-07-02-1000014.19.0-0.konflux-nightly-2025-07-02-0600014.19.0-0.konflux-nightly-2025-07-02-015959───4.19.0-0.ci-2025-07-15-1324184.19.0-0.ci-2025-07-15-0617544.19.0-0.ci-2025-07-14-2204364.19.0-0.ci-2025-07-14-1417434.19.0-0.ci-2025-07-14-0604164.19.0-0.ci-2025-07-14-0004164.19.0-0.ci-2025-07-12-1330454.19.0-0.ci-2025-07-12-0730454.19.0-0.ci-2025-07-10-0945214.19.0-0.ci-2025-07-09-2119094.19.0-0.ci-2025-07-09-084406───4.18.0-0.nightly-2025-07-15-1219134.18.0-0.nightly-2025-07-15-0508494.18.0-0.nightly-2025-07-14-1533424.18.0-0.nightly-2025-07-12-0242284.18.0-0.nightly-2025-07-11-1807584.18.0-0.nightly-2025-07-11-0823214.18.0-0.nightly-2025-07-10-0312594.18.0-0.nightly-2025-07-09-1625514.18.0-0.nightly-2025-07-08-0855224.18.0-0.nightly-2025-07-07-0701174.18.0-0.nightly-2025-07-05-2138514.18.0-0.nightly-2025-07-05-144120───4.18.0-0.konflux-nightly-2025-07-15-1043214.18.0-0.konflux-nightly-2025-07-15-0643214.18.0-0.konflux-nightly-2025-07-15-0243214.18.0-0.konflux-nightly-2025-07-14-2211244.18.0-0.konflux-nightly-2025-07-14-1453134.18.0-0.konflux-nightly-2025-07-14-0741554.18.0-0.konflux-nightly-2025-07-14-0239384.18.0-0.konflux-nightly-2025-07-13-2222124.18.0-0.konflux-nightly-2025-07-13-1758014.18.0-0.konflux-nightly-2025-07-10-0130144.18.0-0.konflux-nightly-2025-07-09-1105444.18.0-0.konflux-nightly-2025-07-08-0914564.18.0-0.konflux-nightly-2025-07-07-1942154.18.0-0.konflux-nightly-2025-07-07-0916134.18.0-0.konflux-nightly-2025-07-07-0516134.18.0-0.konflux-nightly-2025-07-07-0116134.18.0-0.konflux-nightly-2025-07-06-2116134.18.0-0.konflux-nightly-2025-07-06-1716134.18.0-0.konflux-nightly-2025-07-06-1316134.18.0-0.konflux-nightly-2025-07-06-0903184.18.0-0.konflux-nightly-2025-07-06-0503184.18.0-0.konflux-nightly-2025-07-06-0103184.18.0-0.konflux-nightly-2025-07-05-2103184.18.0-0.konflux-nightly-2025-07-05-1703184.18.0-0.konflux-nightly-2025-07-05-1303184.18.0-0.konflux-nightly-2025-07-05-0903184.18.0-0.konflux-nightly-2025-07-05-0503184.18.0-0.konflux-nightly-2025-07-05-0103184.18.0-0.konflux-nightly-2025-07-04-2103184.18.0-0.konflux-nightly-2025-07-04-1343194.18.0-0.konflux-nightly-2025-07-04-0943194.18.0-0.konflux-nightly-2025-07-04-0543194.18.0-0.konflux-nightly-2025-07-04-0143194.18.0-0.konflux-nightly-2025-07-03-214319───4.18.0-0.ci-2025-07-15-1927304.18.0-0.ci-2025-07-15-0609544.18.0-0.ci-2025-07-14-2220054.18.0-0.ci-2025-07-14-1423484.18.0-0.ci-2025-07-12-0400164.18.0-0.ci-2025-07-11-2009344.18.0-0.ci-2025-07-11-0823324.18.0-0.ci-2025-07-10-1525024.18.0-0.ci-2025-07-10-0925024.18.0-0.ci-2025-07-10-0156474.18.0-0.ci-2025-07-09-195647───4.17.0-0.nightly-2025-07-15-1316544.17.0-0.nightly-2025-07-14-1727084.17.0-0.nightly-2025-07-14-0426264.17.0-0.nightly-2025-07-12-1429464.17.0-0.nightly-2025-07-12-0053314.17.0-0.nightly-2025-07-07-1715024.17.0-0.nightly-2025-07-07-0707574.17.0-0.nightly-2025-07-04-1800464.17.0-0.nightly-2025-07-04-1152334.17.0-0.nightly-2025-07-04-0550414.17.0-0.nightly-2025-07-02-183638───4.17.0-0.konflux-nightly-2025-07-15-2101344.17.0-0.konflux-nightly-2025-07-15-1701344.17.0-0.konflux-nightly-2025-07-15-1301344.17.0-0.konflux-nightly-2025-07-15-0901344.17.0-0.konflux-nightly-2025-07-15-0501344.17.0-0.konflux-nightly-2025-07-15-0101344.17.0-0.konflux-nightly-2025-07-14-2101344.17.0-0.konflux-nightly-2025-07-14-1701344.17.0-0.konflux-nightly-2025-07-14-1301344.17.0-0.konflux-nightly-2025-07-14-0901344.17.0-0.konflux-nightly-2025-07-14-0501344.17.0-0.konflux-nightly-2025-07-13-2313124.17.0-0.konflux-nightly-2025-07-13-1913124.17.0-0.konflux-nightly-2025-07-13-1513124.17.0-0.konflux-nightly-2025-07-13-1113124.17.0-0.konflux-nightly-2025-07-13-0713124.17.0-0.konflux-nightly-2025-07-13-0313124.17.0-0.konflux-nightly-2025-07-12-2313124.17.0-0.konflux-nightly-2025-07-12-1913124.17.0-0.konflux-nightly-2025-07-12-1513124.17.0-0.konflux-nightly-2025-07-08-1520324.17.0-0.konflux-nightly-2025-07-07-1431314.17.0-0.konflux-nightly-2025-07-07-1031314.17.0-0.konflux-nightly-2025-07-07-0631314.17.0-0.konflux-nightly-2025-07-07-0231314.17.0-0.konflux-nightly-2025-07-06-2231314.17.0-0.konflux-nightly-2025-07-06-1831314.17.0-0.konflux-nightly-2025-07-06-1431314.17.0-0.konflux-nightly-2025-07-06-1031314.17.0-0.konflux-nightly-2025-07-06-0631314.17.0-0.konflux-nightly-2025-07-06-0231314.17.0-0.konflux-nightly-2025-07-05-2231314.17.0-0.konflux-nightly-2025-07-05-1831314.17.0-0.konflux-nightly-2025-07-05-1431314.17.0-0.konflux-nightly-2025-07-05-1031314.17.0-0.konflux-nightly-2025-07-05-0631314.17.0-0.konflux-nightly-2025-07-05-0231314.17.0-0.konflux-nightly-2025-07-04-2231314.17.0-0.konflux-nightly-2025-07-04-1831314.17.0-0.konflux-nightly-2025-07-04-1431314.17.0-0.konflux-nightly-2025-07-04-1031314.17.0-0.konflux-nightly-2025-07-04-0631314.17.0-0.konflux-nightly-2025-07-04-0231314.17.0-0.konflux-nightly-2025-07-03-2231314.17.0-0.konflux-nightly-2025-07-03-1831314.17.0-0.konflux-nightly-2025-07-03-1431314.17.0-0.konflux-nightly-2025-07-03-1031314.17.0-0.konflux-nightly-2025-07-03-0631314.17.0-0.konflux-nightly-2025-07-02-192003───4.17.0-0.ci-2025-07-15-1715104.17.0-0.ci-2025-07-15-1115104.17.0-0.ci-2025-07-15-0228104.17.0-0.ci-2025-07-14-1547474.17.0-0.ci-2025-07-14-0431184.17.0-0.ci-2025-07-12-1713254.17.0-0.ci-2025-07-12-1110364.17.0-0.ci-2025-07-12-0437544.17.0-0.ci-2025-07-10-0847164.17.0-0.ci-2025-07-09-2202554.17.0-0.ci-2025-07-09-160255───4.16.0-0.nightly-2025-07-15-2025394.16.0-0.nightly-2025-07-14-0429084.16.0-0.nightly-2025-07-11-0823264.16.0-0.nightly-2025-07-10-0751324.16.0-0.nightly-2025-07-08-0952014.16.0-0.nightly-2025-07-06-1831214.16.0-0.nightly-2025-07-01-0317074.16.0-0.nightly-2025-06-28-020955───4.16.0-0.konflux-nightly-2025-07-08-1006494.16.0-0.konflux-nightly-2025-07-06-1843254.16.0-0.konflux-nightly-2025-07-05-0119124.16.0-0.konflux-nightly-2025-06-25-0949334.16.0-0.konflux-nightly-2025-06-23-174537───4.16.0-0.ci-2025-07-15-1134404.16.0-0.ci-2025-07-14-0433564.16.0-0.ci-2025-07-11-1201384.16.0-0.ci-2025-07-10-0826484.16.0-0.ci-2025-07-10-0110034.16.0-0.ci-2025-07-09-1712174.16.0-0.ci-2025-07-09-0526114.16.0-0.ci-2025-07-08-232611───4.15.0-0.nightly-2025-07-15-1207224.15.0-0.nightly-2025-07-14-2022384.15.0-0.nightly-2025-07-12-0305424.15.0-0.nightly-2025-07-11-1841254.15.0-0.nightly-2025-07-07-1849004.15.0-0.nightly-2025-07-07-1207434.15.0-0.nightly-2025-07-07-0549224.15.0-0.nightly-2025-07-05-045346───4.15.0-0.konflux-nightly-2025-07-15-1744164.15.0-0.konflux-nightly-2025-07-14-2050294.15.0-0.konflux-nightly-2025-07-07-1108234.15.0-0.konflux-nightly-2025-07-04-1937434.15.0-0.konflux-nightly-2025-07-03-174939───4.15.0-0.ci-2025-07-15-1902194.15.0-0.ci-2025-07-15-1202174.15.0-0.ci-2025-07-15-0514464.15.0-0.ci-2025-07-14-1923174.15.0-0.ci-2025-07-14-1021214.15.0-0.ci-2025-07-12-0737224.15.0-0.ci-2025-07-11-2001084.15.0-0.ci-2025-07-11-0823304.15.0-0.ci-2025-07-10-1405154.15.0-0.ci-2025-07-10-074301───4.14.0-0.nightly-2025-07-15-1334094.14.0-0.nightly-2025-07-12-1500574.14.0-0.nightly-2025-07-12-0112024.14.0-0.nightly-2025-06-27-1658234.14.0-0.nightly-2025-06-25-0318494.14.0-0.nightly-2025-06-24-1720434.14.0-0.nightly-2025-06-24-1024394.14.0-0.nightly-2025-06-23-133214───4.14.0-0.konflux-nightly-2025-07-15-1952054.14.0-0.konflux-nightly-2025-07-12-0127174.14.0-0.konflux-nightly-2025-06-27-1714394.14.0-0.konflux-nightly-2025-06-20-2019374.14.0-0.konflux-nightly-2025-05-27-154935───4.14.0-0.ci-2025-07-15-1241234.14.0-0.ci-2025-07-15-0550044.14.0-0.ci-2025-07-12-1721384.14.0-0.ci-2025-07-12-1037084.14.0-0.ci-2025-07-12-0259334.14.0-0.ci-2025-07-11-1755184.14.0-0.ci-2025-07-11-0823164.14.0-0.ci-2025-07-10-1131014.14.0-0.ci-2025-07-09-1504164.14.0-0.ci-2025-07-09-0540394.14.0-0.ci-2025-07-08-020524───4.13.0-0.nightly-2025-07-15-0625424.13.0-0.nightly-2025-07-11-1753154.13.0-0.nightly-2025-07-11-0833064.13.0-0.nightly-2025-07-10-0730534.13.0-0.nightly-2025-07-10-0024454.13.0-0.nightly-2025-07-09-0503544.13.0-0.nightly-2025-07-08-2303544.13.0-0.nightly-2025-07-08-1543284.13.0-0.nightly-2025-07-08-020200───4.13.0-0.ci-2025-07-15-1834554.13.0-0.ci-2025-07-15-0610174.13.0-0.ci-2025-07-12-0029464.13.0-0.ci-2025-07-11-1501424.13.0-0.ci-2025-07-10-1159464.13.0-0.ci-2025-07-10-0500194.13.0-0.ci-2025-07-09-1957224.13.0-0.ci-2025-07-09-1122504.13.0-0.ci-2025-07-08-1111554.13.0-0.ci-2025-07-07-1514104.13.0-0.ci-2025-07-06-165501───4.12.0-0.nightly-2025-07-14-0958564.12.0-0.nightly-2025-07-12-0349064.12.0-0.nightly-2025-07-07-0532404.12.0-0.nightly-2025-07-04-1737474.12.0-0.nightly-2025-07-02-0239074.12.0-0.nightly-2025-06-30-0534224.12.0-0.nightly-2025-06-26-0106164.12.0-0.nightly-2025-06-13-1528034.12.0-0.nightly-2025-06-04-1842454.12.0-0.nightly-2025-05-29-101456───4.12.0-0.ci-2025-07-15-1657504.12.0-0.ci-2025-07-14-2002154.12.0-0.ci-2025-07-14-0905314.12.0-0.ci-2025-07-12-1146264.12.0-0.ci-2025-07-12-0516334.12.0-0.ci-2025-07-11-1925254.12.0-0.ci-2025-07-10-1332464.12.0-0.ci-2025-07-09-1848014.12.0-0.ci-2025-07-08-1159134.12.0-0.ci-2025-07-07-2311564.12.0-0.ci-2025-07-07-120756───4.11.0-0.nightly-2024-07-06-0140574.11.0-0.nightly-2024-07-01-0855474.11.0-0.nightly-2024-04-20-1326214.11.0-0.nightly-2024-04-15-1237064.11.0-0.nightly-2024-04-15-0346274.11.0-0.nightly-2024-03-18-1654324.11.0-0.nightly-2024-03-12-2229304.11.0-0.nightly-2024-02-01-0446274.11.0-0.nightly-2024-01-19-1107024.11.0-0.nightly-2024-01-15-0229494.11.0-0.nightly-2024-01-10-203533───4.11.0-0.ci-2025-07-14-0737044.11.0-0.ci-2025-06-03-1828254.11.0-0.ci-2025-05-07-2052534.11.0-0.ci-2025-04-21-2018464.11.0-0.ci-2025-04-21-1418464.11.0-0.ci-2025-04-17-2304254.11.0-0.ci-2025-04-17-1704254.11.0-0.ci-2024-09-17-2036254.11.0-0.ci-2024-07-01-0910384.11.0-0.ci-2024-06-07-194400───4.20.0-ec.44.20.0-ec.34.20.0-ec.24.20.0-ec.14.20.0-ec.0

Source code for this page located on github