4.7.51

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.7.51-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws Succeeded periodic-ci-openshift-release-master-nightly-4.7-e2e-aws
- aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.7-e2e-aws-serial

Upgrades from:

Untested upgrades: 4.6.29, 4.6.30, 4.6.31, 4.6.32, 4.6.34, 4.6.35, 4.6.36, 4.6.37, 4.6.39, 4.6.40, 4.6.41, 4.6.42, 4.6.44, 4.6.45, 4.6.46, 4.6.47, 4.6.49, 4.6.50, 4.6.51, 4.6.52, 4.6.53, 4.6.58, 4.7.10, 4.7.11, 4.7.13, 4.7.14, 4.7.15, 4.7.16, 4.7.17, 4.7.18, 4.7.19, 4.7.21, 4.7.22, 4.7.23, 4.7.24, 4.7.25, 4.7.26, 4.7.28, 4.7.30, 4.7.31, 4.7.32, 4.7.33, 4.7.34, 4.7.35, 4.7.36, 4.7.38, 4.7.39, 4.7.40, 4.7.41, 4.7.42, 4.7.43, 4.7.44, 4.7.45, 4.7.5, 4.7.6, 4.7.7, 4.7.8, 4.7.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.7.20

Created: 2022-05-16 12:30:58 +0000 UTC

Image Digest: sha256:539c1f5982343e0709179f305e347560304fdeb89a09bd042a59a58a836a0940

Release 4.7.51 was created from registry.ci.openshift.org/ocp/release:4.7.0-0.nightly-2022-05-13-210356

Components

Kubernetes upgraded from 1.20.0-beta.2 to 1.20.15
Red Hat Enterprise Linux CoreOS upgraded from 47.83.202107070542-0 to 47.84.202205120307-0 (diff)

Rebuilt images without code change

aws-ebs-csi-driver git f6a71bf7 sha256:dc09c6461aa064628b9c35737e50364e51afb1143cdec698bc45c6f91929e24d
aws-machine-controllers git 5368195c sha256:9b5d1ab17f779077994b34e9d82b1dedec2dc267760a2056d187e81319f0a087
baremetal-operator git e36cbc13 sha256:aad5979c83e694d354bbcbdc70d528c9222e07e89fe7041623f96ac8b0394911
baremetal-runtimecfg git 9c5da32b sha256:428a4b7db925fb9ce1a3f4205e21275af0620e9e582c67fbfc4e425885605950
cluster-bootstrap git 6665cae3 sha256:d4359bba4c34a36e29c622aaa06bdb0dddcbba5a6a322a7bce8709983d1d4fb4
cluster-config-operator git 07e059a6 sha256:b5b0e7ec6385d3bdb6f520e55ae80b4d3cd4865023f16bc7c9ac15b19e82adcc
cluster-csi-snapshot-controller-operator git fc036b59 sha256:54f195d3af3359052dd7392c22f650a4ca03ba0d07c9b08a6a1eefde782b1c74
cluster-dns-operator git cf8be7b2 sha256:ae1bf57fd1591904592b28e7367899072159636f9cf63a006fd7d8f9fc9a9e06
cluster-etcd-operator git 51cb8c41 sha256:041b4938a7e2fd533707fb49a5d91867064d15d22827543e793329a8ac8d7998
cluster-kube-controller-manager-operator git 28159093 sha256:931fc37dd0e471ba3d52738e70ac6c5f837ad5c6a6c70b6ac6ea69654c8486f5
cluster-kube-scheduler-operator git b2204ca2 sha256:35f6e7638a61be92f3a1ed50ced25b61ea4bbf66f9f25b6022ca5a078849c76b
cluster-kube-storage-version-migrator-operator git 54484757 sha256:be746eccf7888a4c110840a8e808b43bb5759b4b3acbeb847e2a96d39ee27dee
cluster-machine-approver git 9043e2bb sha256:da2f3f2485d278895e73a78dc24aebce73a7c2072dc5da152eb5549984079fc1
cluster-policy-controller git 42791bac sha256:7e68683c3475915cb9b5824975918a5d10985b6b0a1db1c9d736dcbe9ec47d2c
cluster-update-keys git b7e79177 sha256:97f66ff150c8e36474bb6815dd17b1bf20290e395e0d78a38b8b314f370ada34
coredns git d4a3ba3f sha256:01b2d4206356cd2ddb3391baf4aa94c62b1ddbcae960b94943bd2e237c2bf386
csi-driver-manila git d3f70921 sha256:3bbf79eeaa7b97f83e305d48d039e476ec17c260bd1f13103154a2c479a0132e
csi-driver-nfs git 9404d343 sha256:225600a919c1c76321518aa3455869fd7402d5ec3443d0da2314c655bcc88bdc
csi-external-attacher git f152de8a sha256:a03838d75c9479b9eb8d312bf309a5f7eb32b2ffe84362c2b874ae7e889f1510
csi-external-provisioner git a49415e1 sha256:a85a2a38373ffbc15bcebdbc8f95ff5b7e7c088acc6f5e376bbace6630a38f3d
csi-external-resizer git f77279e9 sha256:60ae5dc8265b0644230bdc8cf957c0260e8c67b7901105c7d46047d1d4f7f01f
csi-external-snapshotter git 26773735 sha256:70f4e85d83819fe5b39c28be196eac8b2278f4586d2afd77f6e2c8c7b9813583
csi-livenessprobe git 3dad0280 sha256:aecd04e55ce809786879d8c13acdaee727d9037aa178b77de708cdc49747da5b
csi-node-driver-registrar git 2a77963e sha256:76c75fa97d2b9c655c1bac60aa0fdbb25f4bd6206fb2822645a9914eb771bcf0
csi-snapshot-controller git 26773735 sha256:45d38064af22fbe737f593d1a0ae0e7ac13bc0242df17e8c0206ed920d5eb93a
csi-snapshot-validation-webhook git 26773735 sha256:c6ef81aa0d88c22f473033f61285d2240925c45ff73e5a10768462af730dd6df
egress-router-cni git 96ebd378 sha256:ad6d3618382ad9061adebe0bdabd5034f564f4f3dc051b3429d0809493bdb43a
gcp-machine-controllers git 5f6589d4 sha256:0dccc56dc924b2a114756e74734b5b3af6878a6c3581be5a25e133c3acb97b9f
grafana git b02c35dc sha256:df47ce2ae997949053bc28c6ae95101484c934cddb6dc870901c81da2957ae86
ironic git 1a7f41bb sha256:c1bf725ce7aedb4e58c542e76fa2986b149eb661aed38331a45c06b4ef180b27
ironic-static-ip-manager git 43d640a0 sha256:a6def9a657e259bd06e7497b6119d2256a2db79ae3f6aaac02926259ccddb96e
k8s-prometheus-adapter git 212d80b4 sha256:bfb331fb8229eb15c22137683866d47aaf3224fb598d5f44edf5194487ca50e0
keepalived-ipfailover git 0e45f638 sha256:e6c902d5fb569e9ee8566be89211ee846a2e8592d7bc4755b9e038142758cebd
kube-rbac-proxy git 14c288e6 sha256:d24d9622fbacce638936da75a1fcf4ca86e1adb832bba31ea14272d9674d0c1b
kube-state-metrics git 04bff708 sha256:187dc384dd7c4cfee006a58d20e261aaaa23c75a4fca18cf7fad72c085f0a4d3
kube-storage-version-migrator git 329a4b06 sha256:e52f2f0dd2236112c80630a02de63e7849f3c54e2ac2dd5f42aa044fd8df9ab6
machine-os-content sha256:1b76e9f3b221bb8e866582884ad99acfe6155da1c70881479e30b72229d09757
multus-cni git 5530094d sha256:f0f70f8253f7a6d9bd6036be3324a2e92d9d9b970e81c9822720ce980ea0503e
multus-route-override-cni git 1662c3ec sha256:9242dc21dfec7e35a0dbe49f91ba1c4901d020381c404ce3db49f50643c976c8
openshift-state-metrics git 40b0968e sha256:05ae1939c0c6affa41fab1ff076bd20fb65222a30757b95c6eff7d7c0b146017
openstack-cinder-csi-driver git d3f70921 sha256:41e6c16a013db2d15c06974fdd2804c2f83817e583370a2589ecd65b3a3f7a75
operator-registry git 06e950de sha256:41e7d5289d359c6168730202663371cb55c33e5a8a2f6f9f7a345df65e33ff9e
ovirt-csi-driver git 72545e63 sha256:4677bacb1dce6fff119c0f807161a8a3ffa68e61892543d327e0b89053acad3c
pod git 0e45f638 sha256:74181a4f308b96e13aa99dd56198fdf04f6d3736da6efbc424e4e7426ef96b7f
prom-label-proxy git db87872c sha256:f6e2fe1f306c6873de60f6e73b553bc41b8a15e4813b3a0efe7a0fbb8ff63495
prometheus git cb5e53cd sha256:03f5bf2332fcce461b615a2980f2e7613819d5bd7cf980f3cd6f7049d4bf8b03
prometheus-alertmanager git 9954cc42 sha256:089fc126acbc98eae9354578f4050e2549749d04ba905f0609436a42a7e14c88
prometheus-config-reloader git 1f0fd51d sha256:7831889f8b69943fe8b44564856a0af1f5e3f6389680d0121242f4d92426ce5d
prometheus-node-exporter git 76974e2e sha256:19059d77c6d4145112bb5cd1da9f705d53402ebe747bcaff26685bc5d7bdaa56
prometheus-operator git 1f0fd51d sha256:f69fb82d75ce4316d92383d879d3c0d25cc8425fad8725cb06339f884a821568
telemeter git e4dac512 sha256:5688ea2be0d2ed08fe5a8b5c53b0523631d845786b3eb2a71e9beb44322c6176

aws-ebs-csi-driver-operator

Bug 1996070: Add maxUnavailable to DaemonSets #135
Full changelog

aws-pod-identity-webhook

Bug 2046237: update go.mod for go1.15 #149
Full changelog

azure-machine-controllers

Bug 2057559: Requeue create on invalid credentials errors #254
Full changelog

baremetal-installer, installer, installer-artifacts

Bug 2066406: OpenStack+Kuryr: Fix cluster destroy with BYON #5754
Bug 1973367: baremetal: pass IP_OPTIONS to os downloader #5013
Bug 1928761: Validation of platform.openstack.machineSubnet #5434
Bug 1964753: Bump RHCOS 4.7 boot image #5229
Update OWNERS #5243
Bug 1980866: [4.7] Prefer IPv6 hostIP on bootstrap IPv6 deployments #5067
Bug 1981553: [release-4.7] aws: move elastic ip permissions to create networking category #5055
Bug 1954595: Validate noProxy input and add prefix for proxy urls #5060
OWNERS: add more core team members as approvers #5123
Full changelog

baremetal-machine-controllers

Updating baremetal-machine-controller images to be consistent with ART #161
Bug 1938967: Updating baremetal-machine-controller builder & base images to be consistent with ART #134
Full changelog

cli, cli-artifacts, deployer, tools

Bug 2039763: Remove git:// from new-app tests #1024
Bug 2004194: Registry mirror panic #927
Bug 1995074: revert incorrect allowance of ssh:// prefix with scp styled URLs #902
Bug 1974264: make oc logs work with BuildConfig’s JenkinsPipeline strategy #864
Full changelog

cloud-credential-operator

Bug 2064428: Remove Azure mint mode support as Active Directory Graph API will be sunset #455
Bug 2027750: Check for aws status in infra platform status field before client setup #427
Full changelog

cluster-authentication-operator

Bug 2003633: manifests, bindata: explicitely set runAsUser for operator and operand #485
Updating ose-cluster-authentication-operator builder & base images to be consistent with ART #408
Full changelog

cluster-autoscaler

Bug 1924416: Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #204
Full changelog

cluster-autoscaler-operator

Updating ose-cluster-autoscaler-operator images to be consistent with ART #239
Bug 1961341: manifests: use v1 for RBAC #206
Full changelog

cluster-baremetal-operator

Bug 1976924: Update bmh crd #190
Bug 1933726: provisioning: configure DHCP range with netmask #112
Bug 1973367: Pass IP_OPTIONS=dhcp|dhcp6 down to OS Downloader container #171
Bug 1972291: Use a cache URL with the .svc.cluster.local suffix #161
Full changelog

cluster-image-registry-operator

Bug 1988388: Properly set custom tolerations #708
Bug 1984979: Creating StorageAccount V2 instead of V1 #707
Updating ose-cluster-image-registry-operator builder & base images to be consistent with ART #651
Bug 1977159: bump aws-sdk-go to v1.38.35 #704
Bug 1973693: Setting required pod anti-affinity rules #697
Full changelog

cluster-ingress-operator

Bug 1996897: Add startup probe to the router deployment #645
Bug 1978845: Specify topology spread constraints #632
Full changelog

cluster-kube-apiserver-operator

Bug 2001243: Enforce OpenShift’s defined kubelet version skew policies #1223
Full changelog

cluster-monitoring-operator

Bug 2014023: Backport etcd telemetry #1433
Bug 1986591: node exporter calls /proc/cpuinfo multiple times causing the node to freeze #1300
Full changelog

cluster-network-operator

Adds dougbtv to owners [release-4.7] #1404
[release 4.8] Updates owners #1337
Bug 2041893: Allow to use proxy to connect to OSP cloud #1284
Bug 2021224: ovnkube: set ovn-controller lflow cache limit to 1GB #1217
Bug 2034355: Whereabouts IP Reconciliaton [backport 4.7] #1266
Bug 1924839: [release-4.7] Update protobuf version to address CVE-2021-3121 #1084
Bug 1990932: [Backport 4.7] Whereabouts should have RBAC for leases #1186
Bug 2003800: Use 10% for sdn maxUnavailable for rolling update #1202
Bug 1996063: Use 10% for nw-check-target maxUnavailable #1184
Bug 1988426: Change to use mountPath: /host #1170
Bug 1962036: Use the election mechanism provided by library-go #1098
Bug 1972549: Remove reference to v1beta1 API #1134
Bug 1982217: Use 10% for ovnkube-node for maxUnavailable #1153
Full changelog

cluster-node-tuning-operator

Bug 2014430: stalld: update to v1.13.0 #281
Bug 1986739: gather all Tuned CRs #255
Full changelog

cluster-openshift-apiserver-operator

Bug 1996045: bindata: run openshift-apiserver as root explicitly. #468
Updating ose-cluster-openshift-apiserver-operator builder & base images to be consistent with ART #427
Full changelog

cluster-openshift-controller-manager-operator

Bug 1924494: Update k8s.io dependencies to address CVE-2021-3121 #222
Full changelog

cluster-samples-operator

Bug 2001977: delete hello-openshift in payload imagestream #393
Full changelog

cluster-storage-operator

Bug 2030740: Add trusted CA bundle to vsphere operators #248
Bug 1986030: Manila CSI driver is not in must-gather #193
Full changelog

cluster-version-operator

Bug 2030628: [release-4.7] Respect noProxy #711
Bug 2007674: pkg/cvo/egress: Load HTTPS proxy from Proxy status #664
Bug 1961341: Remove rbacv1beta1 support #652
Bug 1991010: pkg/cvo/metrics: Ignore Degraded for cluster_operator_up #638
Bug 1924428: CVE-2021-3121 gogo/protobuf lacks certain index validation #625
Full changelog

configmap-reloader

Updating configmap-reload builder & base images to be consistent with ART #27
vendor: regenerate #31
Full changelog

console

Bug 2073602: (Topology) Performance improvement by reducing rerenderings and deep-copy toJSON() calls #11309
Bug 2060451: Fix a crash when the preferred namespace contains just numbers #11135
Bug 2052859: override normal namespace hiding for pods view in node details #11027
Bug 2055411: Filter superseded helm secrets and fix firehose to support partial metadata #11078
Bug 2044949: fix dev-catalog stuck in loading state #10923
Bug 2055403: Add support for fetching partial metadata and fix helm list page crash #11077
Bug 2049313: Topology performance: Do not fetch HPA for each Deployment (Pod Ring) #10991
Bug 2052858: Add subject name selector field to SinkBinding form #11026
(4.7 Backport) Bug 1981412: Change OCM links from cloud. to console.redhat.com #9470 #9471
Bug 2005298: Block and File and Object dashboards should not be part of OCP Console for ODF Managed Services #10097
Bug 2005138: Console overview operators shown upgrading when still waiting on approval #10093
[release 4.7] Bug 1969754: windows vms fail to start rls 4.7 #9657
Bug 2004946: Use httpd in workload YAML templates #10089
Bug 1973707: Add chart URl to annotations during helm install/upgrade #9299
Bug 1995617: Fix Pipeline Download All #9839
Bug 1986724: Show the content of Insights widget when there are 0 recommendations for cluster #9655
Bug 1989642: Preserve user annotations while editing an app #9714
Bug 1975560: Fix typo in olm message #9335
Bug 1975469: Handle array to string conversion for HTTPS checkbox value #9332
Updating openshift-enterprise-console images to be consistent with ART #8596
Full changelog

console-operator

Bug 2042534: Bump build-machinery-go for console-operator to pickup change in yaml-patch repository #629
Bug 2016654: Use hard requirements for antiaffinity rules #605
Full changelog

container-networking-plugins

Bug 1925077: vendor: bump libcni #44
Full changelog

csi-driver-manila-operator

Bug 2002555: Do not degrade cluster on failure to reach Manila #126
Bug 1987036: Use cluster Proxy when available #110
Bug 1996070: Add maxUnavailable to DaemonSets #116
Full changelog

docker-builder

Bug 1995074: bump(s2i): revert incorrect ssh scp fix #261
Bug 1924455: Update dependencies to address CVE-2021-3121 #258
Full changelog

docker-registry

Bug 1984094: use apimachinery with HTTP/2 health checks enabled #288
Updating openshift-enterprise-registry builder & base images to be consistent with ART #262
Bug 1977159: bump aws-sdk-go to v1.38.35 #282
Full changelog

driver-toolkit

Bug 1985545: Use kernel config to determine GCC version #56
Bug 1985545: Remove curl of extract-vmlinux #50
Bug 1985546: /etc/driver-toolkit-release.json kernel version match rpm -q output #51
Full changelog

etcd

Update OWNERS #126
Full changelog

gcp-pd-csi-driver

Updating ose-gcp-pd-csi-driver builder & base images to be consistent with ART #10
Full changelog

gcp-pd-csi-driver-operator

Bug 1996070: Add maxUnavailable to DaemonSets #33
Full changelog

haproxy-router

Bug 1994645: config template: accept IPv6 IPs for whitelisting #325
Full changelog

hello-openshift, tests

Bug 2034370: test: Nodes that are deleted should not fire the unready alert #26716
Bug 2031104: Skipping Django Test until bug is fixed #26688
Bug 2022188: Add more tests for image policy #26626
Bug 2019520: Skip test ‘clone repository using git:// protocol should clone using git:// if no proxy is configured’ #26563
Bug 1983616: Wait longer in tests where namespace cleanup is slow #26282
Bug 1982929: Improve GC Check for Builds #26334
Re-enable quota test #26284
Bug 1980540: Use cluster-logging for operator installation smoke test. #26315
Full changelog

hyperkube

Bug 2082029: Rebase 1.20.15 #1253
Bug 2043804: IPs with leading zeros are still valid in the apiserver #1234
Bug 2060528: Backport inotify patch to 4.7 #1205
Bug 2024640: Rebase v1.20.14 #1101
Bug 2054669: UPSTREAM: 89885: SQUASH: Retry fetching clouds.conf #1178
Bug 2024996: Fix subpath source check #1068
Bug 2022720: UPSTREAM: 106261: Don’t guess SELinux support on error #1055
Bug 2022188: Image policy should mutate DeploymentConfigs, StatefulSets, and new CronJobs #1073
Bug 2022259: Rebase v1.20.12 #1046
Bug 1939537: UPSTREAM: 100678: apf: exempt probes /healthz /livez /readyz #658
Bug 1926724: UPSTREAM: 98028: add auto update for priority & fairness bootstrap configuration objects #563
Bug 2008508: Rebase v1.20.11 #982
Bug 1993753: UPSTREAM: 104348: Pass additional flags to subpath mount to avoid fla… #941
Bug 2003027: Rebase 1.20.10 #935
Bug 1996846: UPSTREAM: 98571: kubelet: Stop probing a pod during graceful shutdown #901
Bug 1973766: 4.7: Do not throw error when we can’t get canonical path #881
Bug 1981775: Bump apiserver libary go 4.7 #879
Bug 1981634: UPSTREAM: <drop>: use the legacy service-ca.crt content for clusters started in 4.7 or before #857
Full changelog

insights-operator

Bug 2028092: gather webhook configurations (#508) (#561) #508
Bug 2026659: Gather all the container logs from related namespaces of degraded clusteroperator (#516) (#555) #516
Bug 2026410: Fix PDB gatherer (#552) #552
Bug 2024614: Anonymize identity provider attributes in the (#520) (#527) (#541) (#549) #520
Bug 2022637: Anonymize the ImageRegistry storage information also in status (#546) #546
Bug 2002539: Fix wrong rebase of PSP gatherer (#512) #512
Bug 2002539: Gather installed PSP names (#489) (#493) #489
Bug 1982170: Set also the summary operation when updating status (#480) #480
Full changelog

ironic-hardware-inventory-recorder

Updating ironic-hardware-inventory-recorder-image builder & base images to be consistent with ART #502
Full changelog

ironic-inspector

Bug 2002405: Sync inspector to include the latest bugfixes for 4.7 #70
Full changelog

ironic-ipa-downloader

Bug 2013591: Bump IPA version to 15.2-20211013.1 #86
Bug 1963210: Add support for no_proxy #78
Full changelog

ironic-machine-os-downloader

Bug 1963210: Add support for no_proxy #53
Bug 1973367: Modify dhcp kernel args based on ipv4/ipv6 #55
Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

Bug 2069142: [release-4.7] 2022-02-15 Security Advisory #1415
Bug 2044939: Jenkins Fixes for CVE-2022-20617 and CVE-2022-20612 #1371
Bug 2020613: Update Jenkins and plugins per 2021-11 advisory #1348
Bug 1972361: Bump jenkins version 2.289.2 #1281
Full changelog

kube-proxy, sdn

Bug 2005494: Support allow-from-router feature using openshift-host-network namespace #300
Bug 2002291: [4.7] proxy: don’t re-check every userspace proxy rule on every change #348
Bug 1987297: when assigning and releasing egressIP try more than once before failing #327
Bug 2001531: improve SDN’s OVS healthcheck and logging #343
Bug 1995872: Disable conntrack for vxlan traffic #338
Bug 1971669: Fix 4.7 SDN Egress Network Policy #334
Full changelog

kuryr-cni, kuryr-controller

Bug 2028396: Make completed Pods Ports reusable #608
Bug 2018244: Update TOX_CONSTRAINTS_FILE for stable/xena #588
Bug 2001518: Increase keystoneauth’s connection pool size #554
Full changelog

libvirt-machine-controllers

Updating ose-libvirt-machine-controllers builder & base images to be consistent with ART #212
Full changelog

machine-api-operator

Bug 2022839: GCP CI runs are complaining about APIs not being enabled #954
Bump some SHAs #937
Bug 1993118: Make sure nodes don’t have attached volumes before vm deletion #904
Bug 1999590: [release-4.7] add alert for machine with long deletion phase #907
Bug 1989648: Prevent machine from stucking in Deleting phase on vSphere if related node object not found #895
Bug 1933586: Make sure phase is always set before creation #858
Full changelog

machine-config-operator

Bug 2057526: ovs-configuration: use lower than NM default ethernet route metric #2975
Bug 2033000: fixes 1 to 1 containerruntime config mapping #2878
Bug 2059724: Prepend to search domains instead of replacing #2977
Bug 2038383: Respect DHCP option 119 for on-prem #2904
Bug 2028525: [Release 4.7] daemon: make cordon/uncordon more robust and better logging #2854
Bug 2026825: Send WARN message to stderr #2841
Bug 1988102: [IPI ON-PREM] move Keepalived default ingress script to separate file #2825
Bug 1975174: configure-ovs: fix nondeterministic master in slave profiles #2640
Bug 2008692: Don’t write empty static pod manifests #2783
Bug 1995621: Backport fix 1 to 1 relation to kubelet configs and machine config pools #2759
Bug 2011375: templates: Silence audit events from container infra by default #2792
Bug 2008759: Set timeoutSeconds for keepalived liveness probe #2773
Bug 2008588: Check suffix annotation is a number #2781
Bug 2004581: Set ovs syslog level to info #2767
Bug 2000501: bump SystemMemoryExceedsReservation alert threshold to 95% #2749
Bug 1989751: [on-prem] Disable liveness probe until keepalived.conf exists #2701
Bug 1995853: Gracefully shutdown taking around 6-7 mins (libvirt provider) #2727
Bug 1988102: [release-4.7] On-prem: add default ingress track script to Keepalived #2697
Bug 1998112: vSpehere: disable vmxnet3 tx csum offload #2738
Bug 1995810: crio: complete crio default config #2725
Bug 1992240: change system-connections-merged directory to systemConnectionsMerged #2709
Bug 1956462: ensure SSH key uniqueness #2563
Bug 1993386: crio: use conmon from path #2715
Bug 1992687: alerts: SystemMemoryExceedsReservation triggers too quickly #2710
Bug 1970166: MCO: maxUnavailable of ds/machine-config-daemon does not get updated due to missing resourcemerge check #2682
Bug 1977432: crio: enable internal_wipe option #2649
Bug 1970590: daemon: Change runGetOut to not intermix stdout/stderr #2609
Full changelog

mdns-publisher

Bug 2004537: Update zeroconf vendoring #39
Bug 1983695: [release-4.7] Truncate long service names to 63 characters #34
Full changelog

multus-admission-controller

Updating ose-multus-admission-controller builder & base images to be consistent with ART #30
Full changelog

multus-whereabouts-ipam-cni

Bug 2028967: Whereabouts should reconcile IP addresses [backport 4.7] #79
Bug 1965268: Syncs with upstream for leader election [backport 4.7] #65
Full changelog

must-gather

Updating ose-must-gather builder & base images to be consistent with ART #202
Bug 1954302: Add ovs related services to GENERAL_SERVICES #229
Full changelog

network-metrics-daemon

Change repo from Docker to quay.io (#44) #44
Updating ose-network-metrics-daemon images to be consistent with ART (#32) #32
Full changelog

oauth-apiserver

Bug 2043804: IPs with leading zeros are still valid in the apiserver #76
Full changelog

oauth-proxy

Updating golang-github-openshift-oauth-proxy builder & base images to be consistent with ART #198
Full changelog

oauth-server

Updating oauth-server images to be consistent with ART #90
Full changelog

openshift-apiserver

Bug 2043804: IPs with leading zeros are still valid in the apiserver #287
Bug 2022188: Image policy should mutate DeploymentConfigs #261
Bug 1995074: revert incorrect ssh scp fix #242
Full changelog

openshift-controller-manager

Bug 1924531: Update k8s.io dependencies to address CVE-2021-3121 #191
Full changelog

openstack-cinder-csi-driver-operator

Bug 2049879: Explicitly set default value for ReclaimPolicy #72
Bug 2016286: Fix error when mounting /var/lib/kubelet/pods #58
Bug 1996070: Add maxUnavailable to DaemonSets #54
Full changelog

openstack-machine-controllers

Bug 2000551: Adds Proxy to provider client http transport #200
Full changelog

operator-lifecycle-manager

Fix kubebuilder installation in the build root Dockerfile #2351
Bug 1982693: remove cleanup from startup #2287
Full changelog

operator-marketplace

Bug 1961341: [release-4.7] Update openshift rolebindings to v1 #409
Full changelog

ovirt-csi-driver-operator

Bug 1996070: Backport maxUnavailable: 10% for DaemonSets #69
Full changelog

ovirt-machine-controllers

Bug 2001287: correct IPAddress detection for OVNKubernetes #120
Full changelog

ovn-kubernetes

Bug 2070339: Fix egress IP allocator sync #1017
Bug 2069247: egressgw: Fix deadlocks #1013
Bug 2021224: Add ovn-controller logical flow cache options #891
Bug 2047325: Fix node connectivity to service backed by egress IP pods #946
Bug 2043677: Fix pod handlers and pod IP parsing for egress IP #920
Bug 2039282: filter out KubeAPIAuth when logging CNI requests #906
Bug 2034506: Make config parsing more resilient for unknown fields #882
Bug 2027874: [4.7z] Fixes race between node handler and pod sync #859
Bug 2019093: Not exit when ovnkube runs with ‘–gateway-interface none’ #820
Bug 2027468: 4.7 backport #850
Bug 2014360: [4.7z] Scale fixes for pods/exgws #799
Bug 2011402: [4.7] bump OVN to 20.12.0-183.el8fdp #786
Bug 1935149: Resync node management port on subnet change #456
Bug 2005519: [4.7z] Remove waiting for namespace and namespace lock contention #766
Bug 2005468: [4.7z] Fixes skipping pods accidentally in retry #759
Bug 2007653: Fix ensurePod to call addPortExternalGW only for annotation updates #765
Bug 2006159: Fix duplicate incrementing of subnet allocation metric #764
Bug 2004489: panic after EgressFirewall deletion and DNS record expiration #751
Bug 2007665: [4.7z] Ensure host interfaces are deleted by CNI #769
Bug 2005391: [4.7z] Fixes misuse of pod annotations during update event #754
Bug 2005913: [4.7z] Sync ECMP routes on startup and fixes stale ECMP routes #763
Bug 2001543: fix reserve joinSwitch LRP IPs #721
Bug 2001364: [4.7z] Ensure client handling of canceled/dropped OVSDB monitor #719
Bug 2001998: egressfirewall not set after upgrade #724
Bug 1988495: Fix LocalGatway ExternalIP #638
Bug 1999896: Revert “[release-4.7] fix reserve joinSwitch LRP IPs” #707
Bug 1997574: Fix: sync egress IP for missed events on start-up #687
Bug 1976242: Update existing policy ACLs on start #650
Bug 1997104: fix reserve joinSwitch LRP IPs #683
Bug 1995910: Backport ovnkube-trace requires ip package to be installed #674
Bug 1991445: Bump OVN to 20.12.0-140.el8fdp #649
Bug 1967132: policy: handle NetworkPolicies single “from” multiple “ipBlock” #562
Bug 1985516: Add v6 management interface address for host network policy #625
Bug 1962608: ensure missed events are handled during a reconnection #547
Bug 1972484: egress firewall as ACLs + service connectivity fixes #592
Full changelog

service-ca-operator

Bug 1981634: add vulnerable legacy injector to allow for upgrade clusters to use #170
Full changelog

thanos

Bug 1994123: dockerignore: remove vendor from ignored list #69
Full changelog

vsphere-problem-detector

Bug 2039341: Deferred logout after checks are run #70
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github