Back to index
Download the installer for your operating system or run
oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.7.36-x86_64 Team Approvals:
Tests:
Blocking jobs Informing jobsaws Succeeded periodic-ci-openshift-release-master-nightly-4.7-e2e-awsaws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.7-e2e-aws-serial Upgrades from:
Untested upgrades:
4.6.29 ,
4.6.30 ,
4.6.32 ,
4.6.33 ,
4.6.35 ,
4.6.36 ,
4.6.38 ,
4.6.39 ,
4.6.41 ,
4.6.42 ,
4.6.43 ,
4.7.10 ,
4.7.11 ,
4.7.12 ,
4.7.13 ,
4.7.15 ,
4.7.16 ,
4.7.17 ,
4.7.18 ,
4.7.20 ,
4.7.22 ,
4.7.23 ,
4.7.25 ,
4.7.26 ,
4.7.28 ,
4.7.29 ,
4.7.30 ,
4.7.5 ,
4.7.6 ,
4.7.7 ,
4.7.8 Upgrades to:
Loading changelog, this may take a while ...
Changes from 4.7.1
Created: 2021-10-25 17:34:50 +0000 UTC
Image Digest: sha256:0676d33b541f7dab38dcaeff4d1c3df5f6e7c41eb8340df73c1f6f19e29c3cdc
Components
New images
Rebuilt images without code change
Updating ose-aws-pod-identity-webhook builder & base images to be consistent with ART #130
Full changelog
Updating baremetal-machine-controller images to be consistent with ART #161
Bug 1938967 : Updating baremetal-machine-controller builder & base images to be consistent with ART #134
Bug 1936844 : [release-4.7] Changing the default behaviour of the CAPBM to request hard reboot #144
Full changelog
Bug 2003633 : manifests, bindata: explicitely set runAsUser for operator and operand #485
Updating ose-cluster-authentication-operator builder & base images to be consistent with ART #408
Bug 1971087 : add a controller to remove webhooktokenauthenticator config #418
Bug 1956797 : bump kube to 0.20.6 to prevent delegated authz panics #443
Bug 1941840 : endpoints controller: close response bodies #440
Bug 1949941 : add a scraper and an alert to check for old-style tokens #437
Full changelog
Bug 1924416 : Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #204
Updating atomic-openshift-cluster-autoscaler builder & base images to be consistent with ART #187
Updating vertical-pod-autoscaler builder & base images to be consistent with ART #190
Full changelog
Bug 1976988 : [release-4.7]: Increase inertia duration for the EtcdMembersDegraded condition #618
Bug 1976287 : Validate the status of the etcd snapshot during backup and restore #617
Bug 1951447 : pkg/etcdenvvar/etcd_env.go: Sort endpoints to prevent rollout #568
Bug 1958416 : pkg/dnshelpers: fallback to spec if status is not populated for serviceNetwork #594
Bug 1955418 : manifests: Shift FlowSchema to level 50 #582
Bug 1954121 : [release-4.7] Improve cert controller detection and correction of invalid certs #577
OWNERS: add lilic as reviewer #588
Bug 1954073 : bindata, pkg: Propagate operator log level to etcd itself #578
Full changelog
Updating ose-cluster-kube-storage-version-migrator-operator builder & base images to be consistent with ART #38
Full changelog
Bug 1924492 : Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #120
Updating ose-cluster-machine-approver builder & base images to be consistent with ART #103
Full changelog
Bug 1996045 : bindata: run openshift-apiserver as root explicitly. #468
Updating ose-cluster-openshift-apiserver-operator builder & base images to be consistent with ART #427
Bug 1955502 : explicitly allow apiserver pods to write to their root FS #449
Bug 1927321 : competing connectivitycheckcontrollers cause pod restarts during upgrades #444
Full changelog
Pack both keys in one verifier-public-key-ci entry #36
Adding the new Openshift CI Signer key #34
Full changelog
Bug 2007674 : pkg/cvo/egress: Load HTTPS proxy from Proxy status #664
Bug 1961341 : Remove rbacv1beta1 support #652
Bug 1991010 : pkg/cvo/metrics: Ignore Degraded for cluster_operator_up #638
Bug 1924428 : CVE-2021-3121 gogo/protobuf lacks certain index validation #625
Bug 1970272 : Fixing the log message in rbac.go for clusterrole #609
Bug 1970272 : Log object updates and show existing/required diff #589
Bug 1969501 : install/0000_90_cluster-version-operator_02_servicemonitor: Soften ClusterOperatorDegraded #587
Bug 1969378 : avoid hotlooping on RoleBindings with empty APIGroup #584
Bug 1966977 : Prevent hotlooping in ImageStreams #580
Bug 1959238 : pkg/cvo/sync_worker: Shift ClusterOperator pre-creation into the manifest-task node #557
Bug 1943754 : Ensure automountServiceAccountToken is synced on service account updates #539
Bug 1941217 : pkg/cvo/sync_worker: Skip precreation of baremetal ClusterOperator #534
Bug 1926795 : install/0000_90_cluster-version-operator_02_servicemonitor.yaml: adjust “CannotRetrieveUpdates” to “warning” #516
Full changelog
Updating configmap-reload builder & base images to be consistent with ART #27
vendor: regenerate #31
Full changelog
Bug 1970141 : discover-etcd-initial-cluster: retry if member is not part of member list and dataDir exists #82
ETCD-178 : Bug 1944386: openshift-tools: fix on off flow and add unit tests #74
Full changelog
Updating ose-gcp-pd-csi-driver builder & base images to be consistent with ART #10
Full changelog
Bug 1993753 : UPSTREAM: 104348: Pass additional flags to subpath mount to avoid fla… #941
Bug 2003027 : Rebase 1.20.10 #935
Bug 1996846 : UPSTREAM: 98571: kubelet: Stop probing a pod during graceful shutdown #901
Bug 1973766 : 4.7: Do not throw error when we can’t get canonical path #881
Bug 1981775 : Bump apiserver libary go 4.7 #879
Bug 1981634 : UPSTREAM: <drop>: use the legacy service-ca.crt content for clusters started in 4.7 or before #857
Bug 1977383 : [release-4.7] Ensure service ca configmap is created in all namespaces #834
Bug 1977383 : [release-4.7] Fix watch conformance test #843
Bug 1977383 : Update resource quota test for compatibility with service ca configmap publishing #839
Bug 1975553 : only chown if non-windows machine with projected volumes #826
Bug 1928862 : [release-4.7] UPSTREAM: <carry>: kube-apiserver: ignore SIGTERM/INT after the first one #739
Bug 1966810 : UPSTREAM: 102224: Fix expired unit test certs #780
Bug 1963263 : UPSTREAM: 102000: Ref counting is only applicable to Remote endpoints #763
Bug 1955883 : UPSTREAM: 99095: Prevent Kubelet stuck in DiskPressure when imagefs minreclaim is set #725
Bug 1951726 : Speed up PV provisioning for vsphere driver (ocp-4.7) #690
Bug 1942141 : fixes cinder PV labelling #635
Bug 1951815 : UPSTREAM: 99393: kubelet: reduce configmap and secret watch #692
Bug 1955231 : UPSTREAM: 101345: kubelet: improve the node informer sync check #721
Bug 1952917 : UPSTREAM: 100228: For LoadBalancer Service type don’t create a HNS policy for empty or invalid external loadbalancer IP #697
Bug 1928862 : Enable snapshot tests #569
Bug 1945856 : 99729:Only system-node-critical pods should be OOM Killed last #642
Bug 1927717 : UPSTREAM: 98939: fixes race in TestSyncPodsDeletesWhenSourcesAreReady #567
Bug 1931702 : UPSTREAM: 96958: kubelet: remove periodic messages from log-level 2 #589
Bug 1931745 : UPSTREAM: 98956: Fix race when KillPod followed by IsPodPendingTermining #590
Bug 1929674 : kubelet: fix create sandbox delete pod race #591
Bug 1933094 : UPSTREAM: 98742: Sync completed pods until their containers have been terminated #595
Full changelog
Bug 2002539 : Fix wrong rebase of PSP gatherer (#512) #512
Bug 2002539 : Gather installed PSP names (#489) (#493) #489
Bug 1982170 : Set also the summary operation when updating status (#480) #480
[release 4.7] Bug 1960645: Adds virt_platform metric to the collected metrics (#428) #428
[release 4.7] Bug 1953579: GatherClusterOperators and GatherClusterOperatorsPodAndEvents (#410) #410
Add vsphere_node_hw_version_total metric (#416) #416
Bug 1950926 : Extend OLM data with CSV display name (#400) (#402) #400
Bug 1942068 : Gahter datahubs.installers.datahub.sap.com resources from SAP clusters (#383) #383
Bug 1939061 : Sap license management logs gatherer 4.7 (#372) #372
Adds memory usage to the metadata (#364) #364
Bug 1935070 : Extend the OLM operator data with related … (#362) #362
Bug 1934442 : Gather info about unhealthy SAP pods (#360) #360
Bug 1936802 : Authentication log gatherer - do not scan all the pods in openshfit-authentication (#369) #369
Bug 1936861 : Include namespace name in binarydata configmap path & test (#368) (#370) #368
Full changelog
Updating ironic-hardware-inventory-recorder-image builder & base images to be consistent with ART #502
Full changelog
Updating ose-libvirt-machine-controllers builder & base images to be consistent with ART #212
Bug 1938316 : [release-4.7] Update MAO and set metrics on :8081 address #219
Full changelog
Bump some SHAs #937
Bug 1993118 : Make sure nodes don’t have attached volumes before vm deletion #904
Bug 1999590 : [release-4.7] add alert for machine with long deletion phase #907
Bug 1989648 : Prevent machine from stucking in Deleting phase on vSphere if related node object not found #895
Bug 1933586 : Make sure phase is always set before creation #858
Bug 1924517 : Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #867
Bug 1955689 : Webhook filter should check for both mutating and validating webhooks #861
Bug 1947372 : vSphere, detach virtual disks before virtual machine destroy if node not available #841
Bug 1954610 : Update GCP default image to match 4.7 release #856
Bug 1929721 : Add SecurityProfile.EncryptionAtHost parameter to enable host-based VM encryption #818
Bug 1934798 : reuse mgr client in webhooks #821
Full changelog
Updating golang-github-openshift-oauth-proxy builder & base images to be consistent with ART #198
Full changelog
Bug 1961341 : [release-4.7] Update openshift rolebindings to v1 #409
Updating marketplace-operator builder & base images to be consistent with ART #367
Full changelog
Updating prom-label-proxy builder & base images to be consistent with ART #330
Full changelog
Source code for this page located on github