Back to index
Download the installer for your operating system or run
oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.7.37-x86_64 Team Approvals:
Tests:
Blocking jobs Informing jobsaws Succeeded periodic-ci-openshift-release-master-nightly-4.7-e2e-awsaws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.7-e2e-aws-serial Upgrades from:
Upgrades to:
Loading changelog, this may take a while ...
Changes from 4.7.4
Created: 2021-11-10 13:58:11 +0000 UTC
Image Digest: sha256:94efd3c5d70f1cc89bf329699fe902fa4dee356b557a89eda5355d3c7330b014
Release 4.7.37 was created from registry.ci.openshift.org/ocp/release:4.7.0-0.nightly-2021-11-08-025909
Components
New images
Rebuilt images without code change
Updating baremetal-machine-controller images to be consistent with ART #161
Bug 1938967 : Updating baremetal-machine-controller builder & base images to be consistent with ART #134
Bug 1936844 : [release-4.7] Changing the default behaviour of the CAPBM to request hard reboot #144
Full changelog
Bug 2003633 : manifests, bindata: explicitely set runAsUser for operator and operand #485
Updating ose-cluster-authentication-operator builder & base images to be consistent with ART #408
Bug 1971087 : add a controller to remove webhooktokenauthenticator config #418
Bug 1956797 : bump kube to 0.20.6 to prevent delegated authz panics #443
Bug 1941840 : endpoints controller: close response bodies #440
Bug 1949941 : add a scraper and an alert to check for old-style tokens #437
Full changelog
Bug 1924416 : Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #204
Updating atomic-openshift-cluster-autoscaler builder & base images to be consistent with ART #187
Full changelog
Bug 1976988 : [release-4.7]: Increase inertia duration for the EtcdMembersDegraded condition #618
Bug 1976287 : Validate the status of the etcd snapshot during backup and restore #617
Bug 1951447 : pkg/etcdenvvar/etcd_env.go: Sort endpoints to prevent rollout #568
Bug 1958416 : pkg/dnshelpers: fallback to spec if status is not populated for serviceNetwork #594
Bug 1955418 : manifests: Shift FlowSchema to level 50 #582
Bug 1954121 : [release-4.7] Improve cert controller detection and correction of invalid certs #577
OWNERS: add lilic as reviewer #588
Bug 1954073 : bindata, pkg: Propagate operator log level to etcd itself #578
Full changelog
Bug 1924492 : Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #120
Updating ose-cluster-machine-approver builder & base images to be consistent with ART #103
Full changelog
Bug 1996045 : bindata: run openshift-apiserver as root explicitly. #468
Updating ose-cluster-openshift-apiserver-operator builder & base images to be consistent with ART #427
Bug 1955502 : explicitly allow apiserver pods to write to their root FS #449
Bug 1927321 : competing connectivitycheckcontrollers cause pod restarts during upgrades #444
Full changelog
Pack both keys in one verifier-public-key-ci entry #36
Adding the new Openshift CI Signer key #34
Full changelog
Updating configmap-reload builder & base images to be consistent with ART #27
vendor: regenerate #31
Full changelog
Bug 1970141 : discover-etcd-initial-cluster: retry if member is not part of member list and dataDir exists #82
ETCD-178 : Bug 1944386: openshift-tools: fix on off flow and add unit tests #74
Full changelog
Updating ose-gcp-pd-csi-driver builder & base images to be consistent with ART #10
Full changelog
Bug 1993753 : UPSTREAM: 104348: Pass additional flags to subpath mount to avoid fla… #941
Bug 2003027 : Rebase 1.20.10 #935
Bug 1996846 : UPSTREAM: 98571: kubelet: Stop probing a pod during graceful shutdown #901
Bug 1973766 : 4.7: Do not throw error when we can’t get canonical path #881
Bug 1981775 : Bump apiserver libary go 4.7 #879
Bug 1981634 : UPSTREAM: <drop>: use the legacy service-ca.crt content for clusters started in 4.7 or before #857
Bug 1977383 : [release-4.7] Ensure service ca configmap is created in all namespaces #834
Bug 1977383 : [release-4.7] Fix watch conformance test #843
Bug 1977383 : Update resource quota test for compatibility with service ca configmap publishing #839
Bug 1975553 : only chown if non-windows machine with projected volumes #826
Bug 1928862 : [release-4.7] UPSTREAM: <carry>: kube-apiserver: ignore SIGTERM/INT after the first one #739
Bug 1966810 : UPSTREAM: 102224: Fix expired unit test certs #780
Bug 1963263 : UPSTREAM: 102000: Ref counting is only applicable to Remote endpoints #763
Bug 1955883 : UPSTREAM: 99095: Prevent Kubelet stuck in DiskPressure when imagefs minreclaim is set #725
Bug 1951726 : Speed up PV provisioning for vsphere driver (ocp-4.7) #690
Bug 1942141 : fixes cinder PV labelling #635
Bug 1951815 : UPSTREAM: 99393: kubelet: reduce configmap and secret watch #692
Bug 1955231 : UPSTREAM: 101345: kubelet: improve the node informer sync check #721
Bug 1952917 : UPSTREAM: 100228: For LoadBalancer Service type don’t create a HNS policy for empty or invalid external loadbalancer IP #697
Bug 1928862 : Enable snapshot tests #569
Bug 1945856 : 99729:Only system-node-critical pods should be OOM Killed last #642
Bug 1927717 : UPSTREAM: 98939: fixes race in TestSyncPodsDeletesWhenSourcesAreReady #567
Full changelog
Bug 2002539 : Fix wrong rebase of PSP gatherer (#512) #512
Bug 2002539 : Gather installed PSP names (#489) (#493) #489
Bug 1982170 : Set also the summary operation when updating status (#480) #480
[release 4.7] Bug 1960645: Adds virt_platform metric to the collected metrics (#428) #428
[release 4.7] Bug 1953579: GatherClusterOperators and GatherClusterOperatorsPodAndEvents (#410) #410
Add vsphere_node_hw_version_total metric (#416) #416
Bug 1950926 : Extend OLM data with CSV display name (#400) (#402) #400
Bug 1942068 : Gahter datahubs.installers.datahub.sap.com resources from SAP clusters (#383) #383
Bug 1939061 : Sap license management logs gatherer 4.7 (#372) #372
Adds memory usage to the metadata (#364) #364
Bug 1935070 : Extend the OLM operator data with related … (#362) #362
Bug 1934442 : Gather info about unhealthy SAP pods (#360) #360
Bug 1936802 : Authentication log gatherer - do not scan all the pods in openshfit-authentication (#369) #369
Full changelog
Updating ironic-hardware-inventory-recorder-image builder & base images to be consistent with ART #502
Full changelog
Updating ose-libvirt-machine-controllers builder & base images to be consistent with ART #212
Bug 1938316 : [release-4.7] Update MAO and set metrics on :8081 address #219
Full changelog
Bump some SHAs #937
Bug 1993118 : Make sure nodes don’t have attached volumes before vm deletion #904
Bug 1999590 : [release-4.7] add alert for machine with long deletion phase #907
Bug 1989648 : Prevent machine from stucking in Deleting phase on vSphere if related node object not found #895
Bug 1933586 : Make sure phase is always set before creation #858
Bug 1924517 : Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #867
Bug 1955689 : Webhook filter should check for both mutating and validating webhooks #861
Bug 1947372 : vSphere, detach virtual disks before virtual machine destroy if node not available #841
Bug 1954610 : Update GCP default image to match 4.7 release #856
Full changelog
Updating golang-github-openshift-oauth-proxy builder & base images to be consistent with ART #198
Full changelog
Bug 1961341 : [release-4.7] Update openshift rolebindings to v1 #409
Updating marketplace-operator builder & base images to be consistent with ART #367
Full changelog
Source code for this page located on github