Back to index
Download the installer for your operating system or run
oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.7.36-x86_64 Team Approvals:
Tests:
Blocking jobs Informing jobsaws Succeeded periodic-ci-openshift-release-master-nightly-4.7-e2e-awsaws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.7-e2e-aws-serial Upgrades from:
Untested upgrades:
4.6.29 ,
4.6.30 ,
4.6.32 ,
4.6.33 ,
4.6.35 ,
4.6.36 ,
4.6.38 ,
4.6.39 ,
4.6.41 ,
4.6.42 ,
4.6.43 ,
4.7.10 ,
4.7.11 ,
4.7.12 ,
4.7.13 ,
4.7.15 ,
4.7.16 ,
4.7.17 ,
4.7.18 ,
4.7.20 ,
4.7.22 ,
4.7.23 ,
4.7.25 ,
4.7.26 ,
4.7.28 ,
4.7.29 ,
4.7.30 ,
4.7.5 ,
4.7.6 ,
4.7.7 ,
4.7.8 Upgrades to:
Loading changelog, this may take a while ...
Changes from 4.7.0
Created: 2021-10-25 17:34:50 +0000 UTC
Image Digest: sha256:0676d33b541f7dab38dcaeff4d1c3df5f6e7c41eb8340df73c1f6f19e29c3cdc
Components
New images
Removed images
local-storage-static-provisioner
Rebuilt images without code change
Updating ose-aws-pod-identity-webhook builder & base images to be consistent with ART #130
Full changelog
Updating baremetal-machine-controller images to be consistent with ART #161
Bug 1938967 : Updating baremetal-machine-controller builder & base images to be consistent with ART #134 Bug 1936844 : [release-4.7] Changing the default behaviour of the CAPBM to request hard reboot #144 Full changelog
Bug 2003633 : manifests, bindata: explicitely set runAsUser for operator and operand #485 Updating ose-cluster-authentication-operator builder & base images to be consistent with ART #408
Bug 1971087 : add a controller to remove webhooktokenauthenticator config #418 Bug 1956797 : bump kube to 0.20.6 to prevent delegated authz panics #443 Bug 1941840 : endpoints controller: close response bodies #440 Bug 1949941 : add a scraper and an alert to check for old-style tokens #437 Full changelog
Bug 1924416 : Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #204 Updating atomic-openshift-cluster-autoscaler builder & base images to be consistent with ART #187
Updating vertical-pod-autoscaler builder & base images to be consistent with ART #190
Full changelog
Bug 1976988 : [release-4.7]: Increase inertia duration for the EtcdMembersDegraded condition #618 Bug 1976287 : Validate the status of the etcd snapshot during backup and restore #617 Bug 1951447 : pkg/etcdenvvar/etcd_env.go: Sort endpoints to prevent rollout #568 Bug 1958416 : pkg/dnshelpers: fallback to spec if status is not populated for serviceNetwork #594 Bug 1955418 : manifests: Shift FlowSchema to level 50 #582 Bug 1954121 : [release-4.7] Improve cert controller detection and correction of invalid certs #577 OWNERS: add lilic as reviewer #588
Bug 1954073 : bindata, pkg: Propagate operator log level to etcd itself #578 Bug 1925739 : pkg/operator/metriccontroller: cleanup transports #537 Full changelog
Updating ose-cluster-kube-storage-version-migrator-operator builder & base images to be consistent with ART #38
Full changelog
Bug 1924492 : Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #120 Updating ose-cluster-machine-approver builder & base images to be consistent with ART #103
Full changelog
Bug 1996045 : bindata: run openshift-apiserver as root explicitly. #468 Updating ose-cluster-openshift-apiserver-operator builder & base images to be consistent with ART #427
Bug 1955502 : explicitly allow apiserver pods to write to their root FS #449 Bug 1927321 : competing connectivitycheckcontrollers cause pod restarts during upgrades #444 Full changelog
Pack both keys in one verifier-public-key-ci entry #36
Adding the new Openshift CI Signer key #34
Full changelog
Bug 2007674 : pkg/cvo/egress: Load HTTPS proxy from Proxy status #664 Bug 1961341 : Remove rbacv1beta1 support #652 Bug 1991010 : pkg/cvo/metrics: Ignore Degraded for cluster_operator_up #638 Bug 1924428 : CVE-2021-3121 gogo/protobuf lacks certain index validation #625 Bug 1970272 : Fixing the log message in rbac.go for clusterrole #609 Bug 1970272 : Log object updates and show existing/required diff #589 Bug 1969501 : install/0000_90_cluster-version-operator_02_servicemonitor: Soften ClusterOperatorDegraded #587 Bug 1969378 : avoid hotlooping on RoleBindings with empty APIGroup #584 Bug 1966977 : Prevent hotlooping in ImageStreams #580 Bug 1959238 : pkg/cvo/sync_worker: Shift ClusterOperator pre-creation into the manifest-task node #557 Bug 1943754 : Ensure automountServiceAccountToken is synced on service account updates #539 Bug 1941217 : pkg/cvo/sync_worker: Skip precreation of baremetal ClusterOperator #534 Bug 1926795 : install/0000_90_cluster-version-operator_02_servicemonitor.yaml: adjust “CannotRetrieveUpdates” to “warning” #516 Bug 1921413 : pkg/start: Fix shutdown deadlock when die before getting a leader lock #521 Full changelog
Updating configmap-reload builder & base images to be consistent with ART #27
vendor: regenerate #31
Full changelog
Bug 1970141 : discover-etcd-initial-cluster: retry if member is not part of member list and dataDir exists #82 ETCD-178 : Bug 1944386: openshift-tools: fix on off flow and add unit tests #74 Updating ose-etcd builder & base images to be consistent with ART #67
Full changelog
Updating ose-gcp-pd-csi-driver builder & base images to be consistent with ART #10
Full changelog
Bug 1993753 : UPSTREAM: 104348: Pass additional flags to subpath mount to avoid fla… #941 Bug 2003027 : Rebase 1.20.10 #935 Bug 1996846 : UPSTREAM: 98571: kubelet: Stop probing a pod during graceful shutdown #901 Bug 1973766 : 4.7: Do not throw error when we can’t get canonical path #881 Bug 1981775 : Bump apiserver libary go 4.7 #879 Bug 1981634 : UPSTREAM: <drop>: use the legacy service-ca.crt content for clusters started in 4.7 or before #857 Bug 1977383 : [release-4.7] Ensure service ca configmap is created in all namespaces #834 Bug 1977383 : [release-4.7] Fix watch conformance test #843 Bug 1977383 : Update resource quota test for compatibility with service ca configmap publishing #839 Bug 1975553 : only chown if non-windows machine with projected volumes #826 Bug 1928862 : [release-4.7] UPSTREAM: <carry>: kube-apiserver: ignore SIGTERM/INT after the first one #739 Bug 1966810 : UPSTREAM: 102224: Fix expired unit test certs #780 Bug 1963263 : UPSTREAM: 102000: Ref counting is only applicable to Remote endpoints #763 Bug 1955883 : UPSTREAM: 99095: Prevent Kubelet stuck in DiskPressure when imagefs minreclaim is set #725 Bug 1951726 : Speed up PV provisioning for vsphere driver (ocp-4.7) #690 Bug 1942141 : fixes cinder PV labelling #635 Bug 1951815 : UPSTREAM: 99393: kubelet: reduce configmap and secret watch #692 Bug 1955231 : UPSTREAM: 101345: kubelet: improve the node informer sync check #721 Bug 1952917 : UPSTREAM: 100228: For LoadBalancer Service type don’t create a HNS policy for empty or invalid external loadbalancer IP #697 Bug 1928862 : Enable snapshot tests #569 Bug 1945856 : 99729:Only system-node-critical pods should be OOM Killed last #642 Bug 1927717 : UPSTREAM: 98939: fixes race in TestSyncPodsDeletesWhenSourcesAreReady #567 Bug 1931702 : UPSTREAM: 96958: kubelet: remove periodic messages from log-level 2 #589 Bug 1931745 : UPSTREAM: 98956: Fix race when KillPod followed by IsPodPendingTermining #590 Bug 1929674 : kubelet: fix create sandbox delete pod race #591 Bug 1933094 : UPSTREAM: 98742: Sync completed pods until their containers have been terminated #595 Bug 1929012 : UPSTREAM: 96984: APF e2e: wait for steady state before proceeding #572 Full changelog
Bug 2002539 : Fix wrong rebase of PSP gatherer (#512) #512 Bug 2002539 : Gather installed PSP names (#489) (#493) #489 Bug 1982170 : Set also the summary operation when updating status (#480) #480 [release 4.7] Bug 1960645: Adds virt_platform metric to the collected metrics (#428) #428
[release 4.7] Bug 1953579: GatherClusterOperators and GatherClusterOperatorsPodAndEvents (#410) #410
Add vsphere_node_hw_version_total metric (#416) #416
Bug 1950926 : Extend OLM data with CSV display name (#400) (#402) #400 Bug 1942068 : Gahter datahubs.installers.datahub.sap.com resources from SAP clusters (#383) #383 Bug 1939061 : Sap license management logs gatherer 4.7 (#372) #372 Adds memory usage to the metadata (#364) #364
Bug 1935070 : Extend the OLM operator data with related … (#362) #362 Bug 1934442 : Gather info about unhealthy SAP pods (#360) #360 Bug 1936802 : Authentication log gatherer - do not scan all the pods in openshfit-authentication (#369) #369 Bug 1936861 : Include namespace name in binarydata configmap path & test (#368) (#370) #368 Bug 1925659 : Relax the recent log gatherers to avoid degrading during… (#331) #331 Full changelog
Updating ironic-hardware-inventory-recorder-image builder & base images to be consistent with ART #502
Full changelog
Updating kube-rbac-proxy builder & base images to be consistent with ART #42
Full changelog
Updating ose-libvirt-machine-controllers builder & base images to be consistent with ART #212
Bug 1938316 : [release-4.7] Update MAO and set metrics on :8081 address #219 Full changelog
Bump some SHAs #937
Bug 1993118 : Make sure nodes don’t have attached volumes before vm deletion #904 Bug 1999590 : [release-4.7] add alert for machine with long deletion phase #907 Bug 1989648 : Prevent machine from stucking in Deleting phase on vSphere if related node object not found #895 Bug 1933586 : Make sure phase is always set before creation #858 Bug 1924517 : Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #867 Bug 1955689 : Webhook filter should check for both mutating and validating webhooks #861 Bug 1947372 : vSphere, detach virtual disks before virtual machine destroy if node not available #841 Bug 1954610 : Update GCP default image to match 4.7 release #856 Bug 1929721 : Add SecurityProfile.EncryptionAtHost parameter to enable host-based VM encryption #818 Bug 1934798 : reuse mgr client in webhooks #821 Full changelog
Updating golang-github-openshift-oauth-proxy builder & base images to be consistent with ART #198
Full changelog
Bug 1961341 : [release-4.7] Update openshift rolebindings to v1 #409 Updating marketplace-operator builder & base images to be consistent with ART #367
Full changelog
Updating ose-ovirt-csi-driver builder & base images to be consistent with ART #72
Full changelog
Updating prom-label-proxy builder & base images to be consistent with ART #330
Full changelog
Bug 1981634 : add vulnerable legacy injector to allow for upgrade clusters to use #170 Updating ose-service-ca-operator builder & base images to be consistent with ART #140
Full changelog
Source code for this page located on github