Back to index
Download the installer for your operating system or run
oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.7.39-x86_64
Team Approvals:
Tests:
- Blocking jobs
- Informing jobs
- aws Succeeded periodic-ci-openshift-release-master-nightly-4.7-e2e-aws
- aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.7-e2e-aws-serial
Upgrades from:
Untested upgrades:
4.6.29,
4.6.30,
4.6.32,
4.6.33,
4.6.35,
4.6.36,
4.6.38,
4.6.39,
4.6.41,
4.6.42,
4.6.44,
4.6.45,
4.6.46,
4.7.10,
4.7.11,
4.7.13,
4.7.14,
4.7.15,
4.7.16,
4.7.18,
4.7.19,
4.7.20,
4.7.21,
4.7.23,
4.7.24,
4.7.25,
4.7.26,
4.7.29,
4.7.30,
4.7.31,
4.7.32,
4.7.33,
4.7.5,
4.7.6,
4.7.8,
4.7.9Upgrades to:
Loading changelog, this may take a while ...
Changes from 4.7.7
Created: 2021-12-01 08:43:12 +0000 UTC
Image Digest: sha256:eb7445383a461512075b5a99a3a4bc7c811ba174f53218c8840ac67e7664aa36
Release 4.7.39 was created from registry.ci.openshift.org/ocp/release:4.7.0-0.nightly-2021-12-01-040519
Components
New images
Rebuilt images without code change
- Updating baremetal-machine-controller images to be consistent with ART #161
- Bug 1938967: Updating baremetal-machine-controller builder & base images to be consistent with ART #134
- Full changelog
- Bug 2003633: manifests, bindata: explicitely set runAsUser for operator and operand #485
- Updating ose-cluster-authentication-operator builder & base images to be consistent with ART #408
- Bug 1971087: add a controller to remove webhooktokenauthenticator config #418
- Bug 1956797: bump kube to 0.20.6 to prevent delegated authz panics #443
- Bug 1941840: endpoints controller: close response bodies #440
- Bug 1949941: add a scraper and an alert to check for old-style tokens #437
- Full changelog
- Bug 1924416: Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #204
- Updating atomic-openshift-cluster-autoscaler builder & base images to be consistent with ART #187
- Full changelog
- Bug 1976988: [release-4.7]: Increase inertia duration for the EtcdMembersDegraded condition #618
- Bug 1976287: Validate the status of the etcd snapshot during backup and restore #617
- Bug 1951447: pkg/etcdenvvar/etcd_env.go: Sort endpoints to prevent rollout #568
- Bug 1958416: pkg/dnshelpers: fallback to spec if status is not populated for serviceNetwork #594
- Bug 1955418: manifests: Shift FlowSchema to level 50 #582
- Bug 1954121: [release-4.7] Improve cert controller detection and correction of invalid certs #577
- OWNERS: add lilic as reviewer #588
- Bug 1954073: bindata, pkg: Propagate operator log level to etcd itself #578
- Full changelog
- Bug 1924492: Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #120
- Updating ose-cluster-machine-approver builder & base images to be consistent with ART #103
- Full changelog
- Bug 1996045: bindata: run openshift-apiserver as root explicitly. #468
- Updating ose-cluster-openshift-apiserver-operator builder & base images to be consistent with ART #427
- Bug 1955502: explicitly allow apiserver pods to write to their root FS #449
- Bug 1927321: competing connectivitycheckcontrollers cause pod restarts during upgrades #444
- Full changelog
- Pack both keys in one verifier-public-key-ci entry #36
- Adding the new Openshift CI Signer key #34
- Full changelog
- Updating configmap-reload builder & base images to be consistent with ART #27
- vendor: regenerate #31
- Full changelog
- Updating ose-gcp-pd-csi-driver builder & base images to be consistent with ART #10
- Full changelog
- Bug 2022188: Image policy should mutate DeploymentConfigs, StatefulSets, and new CronJobs #1073
- Bug 2022259: Rebase v1.20.12 #1046
- Bug 1939537: UPSTREAM: 100678: apf: exempt probes /healthz /livez /readyz #658
- Bug 1926724: UPSTREAM: 98028: add auto update for priority & fairness bootstrap configuration objects #563
- Bug 2008508: Rebase v1.20.11 #982
- Bug 1993753: UPSTREAM: 104348: Pass additional flags to subpath mount to avoid fla… #941
- Bug 2003027: Rebase 1.20.10 #935
- Bug 1996846: UPSTREAM: 98571: kubelet: Stop probing a pod during graceful shutdown #901
- Bug 1973766: 4.7: Do not throw error when we can’t get canonical path #881
- Bug 1981775: Bump apiserver libary go 4.7 #879
- Bug 1981634: UPSTREAM: <drop>: use the legacy service-ca.crt content for clusters started in 4.7 or before #857
- Bug 1977383: [release-4.7] Ensure service ca configmap is created in all namespaces #834
- Bug 1977383: [release-4.7] Fix watch conformance test #843
- Bug 1977383: Update resource quota test for compatibility with service ca configmap publishing #839
- Bug 1975553: only chown if non-windows machine with projected volumes #826
- Bug 1928862: [release-4.7] UPSTREAM: <carry>: kube-apiserver: ignore SIGTERM/INT after the first one #739
- Bug 1966810: UPSTREAM: 102224: Fix expired unit test certs #780
- Bug 1963263: UPSTREAM: 102000: Ref counting is only applicable to Remote endpoints #763
- Bug 1955883: UPSTREAM: 99095: Prevent Kubelet stuck in DiskPressure when imagefs minreclaim is set #725
- Bug 1951726: Speed up PV provisioning for vsphere driver (ocp-4.7) #690
- Bug 1942141: fixes cinder PV labelling #635
- Bug 1951815: UPSTREAM: 99393: kubelet: reduce configmap and secret watch #692
- Bug 1955231: UPSTREAM: 101345: kubelet: improve the node informer sync check #721
- Bug 1952917: UPSTREAM: 100228: For LoadBalancer Service type don’t create a HNS policy for empty or invalid external loadbalancer IP #697
- Bug 1928862: Enable snapshot tests #569
- Bug 1945856: 99729:Only system-node-critical pods should be OOM Killed last #642
- Full changelog
- Bug 2026410: Fix PDB gatherer (#552) #552
- Bug 2024614: Anonymize identity provider attributes in the (#520) (#527) (#541) (#549) #520
- Bug 2022637: Anonymize the ImageRegistry storage information also in status (#546) #546
- Bug 2002539: Fix wrong rebase of PSP gatherer (#512) #512
- Bug 2002539: Gather installed PSP names (#489) (#493) #489
- Bug 1982170: Set also the summary operation when updating status (#480) #480
- [release 4.7] Bug 1960645: Adds virt_platform metric to the collected metrics (#428) #428
- [release 4.7] Bug 1953579: GatherClusterOperators and GatherClusterOperatorsPodAndEvents (#410) #410
- Add vsphere_node_hw_version_total metric (#416) #416
- Bug 1950926: Extend OLM data with CSV display name (#400) (#402) #400
- Full changelog
- Updating ironic-hardware-inventory-recorder-image builder & base images to be consistent with ART #502
- Full changelog
- Updating ose-libvirt-machine-controllers builder & base images to be consistent with ART #212
- Full changelog
- Bug 2022839: GCP CI runs are complaining about APIs not being enabled #954
- Bump some SHAs #937
- Bug 1993118: Make sure nodes don’t have attached volumes before vm deletion #904
- Bug 1999590: [release-4.7] add alert for machine with long deletion phase #907
- Bug 1989648: Prevent machine from stucking in Deleting phase on vSphere if related node object not found #895
- Bug 1933586: Make sure phase is always set before creation #858
- Bug 1924517: Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #867
- Bug 1955689: Webhook filter should check for both mutating and validating webhooks #861
- Bug 1947372: vSphere, detach virtual disks before virtual machine destroy if node not available #841
- Bug 1954610: Update GCP default image to match 4.7 release #856
- Full changelog
- Updating golang-github-openshift-oauth-proxy builder & base images to be consistent with ART #198
- Full changelog
Source code for this page located on github