# 4.13.0-0.okd-scos-2023-03-29-124824

Created: 2023-03-29 19:19:49 +0000 UTC

Image Digest: `sha256:9e31ffa320e60a68a3456b23d0be97de4a667d0d2b74e9ce6db132a7da0d2790`

Promoted from registry.ci.openshift.org/origin/release-scos:4.13.0-0.okd-scos-2023-03-29-124824


## Changes from 4.13.0-0.okd-scos-2023-02-13-084859

### Components

* Kubernetes upgraded from 1.26.0 to 1.26.2
* CentOS Stream CoreOS upgraded from 413.9.202302130811-0 to 413.9.202303210607-0


### New images

* [ovn-kubernetes-microshift-rhel-9](https://github.com/openshift/ovn-kubernetes) git [8ae3593f](https://github.com/openshift/ovn-kubernetes/commit/8ae3593f8a9b35a668c00167355f3085ab4a56a7) `sha256:1bd1acf35dfee1994a05bd0256090dccf14c0577629120cb3ede19a75bf3222c`
* [ovn-kubernetes-rhel-9](https://github.com/openshift/ovn-kubernetes) git [8ae3593f](https://github.com/openshift/ovn-kubernetes/commit/8ae3593f8a9b35a668c00167355f3085ab4a56a7) `sha256:4fed87b53a604e8ca65e10fbbd22beed085352c73751951b031ad9c161af33ee`


### Removed images

* ovn-kubernetes
* ovn-kubernetes-microshift


### Rebuilt images without code change

* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [d8fa5310](https://github.com/openshift/aws-ebs-csi-driver/commit/d8fa531075bd9e3da26a58e05fc906bc84e2625e) `sha256:d6d4b9f4c72b0fa525cd274dbf3f667025b932e696bddf828692d83f49ad9231`
* centos-stream-coreos-9 `sha256:506238312396112c473aee216bafe7c37e91e5ab1be96397a2fe07ba8eb6df76`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [9f475980](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/9f475980d1e6a70f0e9400aec6f15e5f5a6132b6) `sha256:87f42f063f97dec016b3981f7d68e4c759c01411158eb65d20f42137bc475253`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [2796e173](https://github.com/openshift/cluster-update-keys/commit/2796e1732615521e818be82663058e0a3f1b3941) `sha256:f0781fcf89060bfc3aa62f9483b4203f688096aa5ebd784d353f1fe9a0fd700d`
* [kuryr-cni](https://github.com/openshift/kuryr-kubernetes) git [672973fc](https://github.com/openshift/kuryr-kubernetes/commit/672973fc0a6788667c382fb4ed1a5c5996cc8181) `sha256:7e3c35d4986a0d1b4651bc308286f1a97da04a76c1c6e6e8dc77f0d05978bf00`
* [kuryr-controller](https://github.com/openshift/kuryr-kubernetes) git [672973fc](https://github.com/openshift/kuryr-kubernetes/commit/672973fc0a6788667c382fb4ed1a5c5996cc8181) `sha256:8df490e9a558ef02e312292f87f3672864ec089643f11ad6e2ebf2ac07e8ff03`
* machine-os-content `sha256:506238312396112c473aee216bafe7c37e91e5ab1be96397a2fe07ba8eb6df76`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [41c2dfea](https://github.com/openshift/oauth-apiserver/commit/41c2dfea104b3c686a00b068654843b48b4db53f) `sha256:5a2b43418ecaae507b49eede5bd621226eb19cc148792870139c8c28402fec71`
* [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator) git [14fcca54](https://github.com/openshift/openstack-cinder-csi-driver-operator/commit/14fcca54f20d18045e382cc0699f97e4a1e760ac) `sha256:13e2c91740900394f37bf328c88f8c91f77d87f9924ff4e498eae39e2dbd5246`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [cfce6b50](https://github.com/operator-framework/operator-marketplace/commit/cfce6b5024f56305304599cd49dfbbe2b5d8ed3d) `sha256:a8091a5e9920ef8e19e40987cb2506b4724902df1f4448e761fc0ef7fefdd522`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [f21b470f](https://github.com/openshift/ovirt-csi-driver/commit/f21b470f4927f97eca93a0a390cffccd7d724043) `sha256:4f9cfa8f799b869ee93e05c4bd9adb0aa4706f199cafb2097abe0156b53a64db`
* [prometheus](https://github.com/openshift/prometheus) git [d8ea2c4f](https://github.com/openshift/prometheus/commit/d8ea2c4f037abbf3f0fad5b6179ccf24ba9d9e4d) `sha256:dc4b6eefc99f62639bd978c031208e0071d3eb5aebdd30dc39a081f216a89625`
* [telemeter](https://github.com/openshift/telemeter) git [](https://github.com/openshift/telemeter/commit/) `sha256:f4271abb977e20337bbc39dd60f1d95c1e2fb16b2606258ce0b2f8597302dac9`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [e4408a3c](https://github.com/openshift/vmware-vsphere-csi-driver/commit/e4408a3c04c3f485c6f344bdc786d15a5c84b05a) `sha256:02c7c5d94d311af50ba63cc92065be2911444d162b22613371b2efea00e36d40`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/) `sha256:f019bfcda29761e938aa9b43d61969d5adbb001421ae060700abbf6e5fe910bc`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [e4408a3c](https://github.com/openshift/vmware-vsphere-csi-driver/commit/e4408a3c04c3f485c6f344bdc786d15a5c84b05a) `sha256:1458d3dfe84a2a0b914afa64e9894db5b376c23004c5818151dfaf22c8f2c74b`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/78fb9d5890a9e04091b70585a4a3fed735a6802c)

* manifests: Add a shebang to NM dispatcher script (#5085) [#5085](https://github.com/openshift/assisted-service/pull/5085)
* bminventory: throw Bad Request error on arm64 Nutanix clusters (#4906) [#4906](https://github.com/openshift/assisted-service/pull/4906)
* Revert "MGMT-13471: SNO installation with OCP 4.13 lacks proper dnsmasq configuration (#4939)" (#5012) [#4939](https://github.com/openshift/assisted-service/pull/4939)
* NO-ISSUE: customize the image path for disk creation (#5010) [#5010](https://github.com/openshift/assisted-service/pull/5010)
* [MGMT-13445](https://issues.redhat.com/browse/MGMT-13445): Update Assisted Installer with the new LVMS requirements (#4986) [#4986](https://github.com/openshift/assisted-service/pull/4986)
* [MGMT-12956](https://issues.redhat.com/browse/MGMT-12956): Add feature IDs for ppc64le and s390x (#5008) [#5008](https://github.com/openshift/assisted-service/pull/5008)
* add 4.13 multi ec.3 dev preview images (#5005) [#5005](https://github.com/openshift/assisted-service/pull/5005)
* NO-ISSUE: Bump gorm.io/gorm from 1.23.8 to 1.24.5 (#5006) [#5006](https://github.com/openshift/assisted-service/pull/5006)
* [MGMT-13580](https://issues.redhat.com/browse/MGMT-13580): GC orphan hosts (#4997) [#4997](https://github.com/openshift/assisted-service/pull/4997)
* Make get_image_without_tag work when registry has a port (#5007) [#5007](https://github.com/openshift/assisted-service/pull/5007)
* [MGMT-13374](https://issues.redhat.com/browse/MGMT-13374): support Nutanix in kube-api (#4996) [#4996](https://github.com/openshift/assisted-service/pull/4996)
* Updating ose-agent-installer-api-server images to be consistent with ART (#4752) [#4752](https://github.com/openshift/assisted-service/pull/4752)
* Revert "Increase timeout waiting for image-service (#4871)" (#5001) [#4871](https://github.com/openshift/assisted-service/pull/4871)
* Use the correct env var for the hub release image mirror (#4998) [#4998](https://github.com/openshift/assisted-service/pull/4998)
* [MGMT-12547](https://issues.redhat.com/browse/MGMT-12547): Enhancement doc "api-for-skipping-validations" (#4870) [#4870](https://github.com/openshift/assisted-service/pull/4870)
* Add registry config for ironic agent image (#4995) [#4995](https://github.com/openshift/assisted-service/pull/4995)
* [MGMT-13274](https://issues.redhat.com/browse/MGMT-13274): Update time-synced-between-host-and-service message to remove bad advice (#4994) [#4994](https://github.com/openshift/assisted-service/pull/4994)
* [MGMT-13521](https://issues.redhat.com/browse/MGMT-13521): Clearer messaging when non-overlapping-subnets validation is pending. (#4993) [#4993](https://github.com/openshift/assisted-service/pull/4993)
* [MGMT-13204](https://issues.redhat.com/browse/MGMT-13204): Implement skipping of host and cluster validations (#4907) [#4907](https://github.com/openshift/assisted-service/pull/4907)
* [MGMT-13708](https://issues.redhat.com/browse/MGMT-13708): allow overriding image service image in subscription (#4985) [#4985](https://github.com/openshift/assisted-service/pull/4985)
* [MGMT-13454](https://issues.redhat.com/browse/MGMT-13454): Group Host and boot logs to a single tarball (#4975) [#4975](https://github.com/openshift/assisted-service/pull/4975)
* [MGMT-13711](https://issues.redhat.com/browse/MGMT-13711): it takes the assisted-service few minutes to notice that the cluster installation is completed (#4988) [#4988](https://github.com/openshift/assisted-service/pull/4988)
* [MGMT-13620](https://issues.redhat.com/browse/MGMT-13620): Make worker to use custom MCP if it was set as part of the host DB record (#4976) [#4976](https://github.com/openshift/assisted-service/pull/4976)
* [MGMT-13549](https://issues.redhat.com/browse/MGMT-13549): Day1 implementation for K8S node labels (#4972) [#4972](https://github.com/openshift/assisted-service/pull/4972)
* NO-ISSUE: Add logs to supported-platforms (#4982) [#4982](https://github.com/openshift/assisted-service/pull/4982)
* [MGMT-13045](https://issues.redhat.com/browse/MGMT-13045): Enhancement document for node labeling (#4826) [#4826](https://github.com/openshift/assisted-service/pull/4826)
* [MGMT-13682](https://issues.redhat.com/browse/MGMT-13682): Gather host logs on failure in day2 flow (#4983) [#4983](https://github.com/openshift/assisted-service/pull/4983)
* [MGMT-13292](https://issues.redhat.com/browse/MGMT-13292): Add the installed version of the OLM operators in the monitor operators response (#4961) [#4961](https://github.com/openshift/assisted-service/pull/4961)
* [MGMT-13471](https://issues.redhat.com/browse/MGMT-13471): SNO installation with OCP 4.13 lacks proper dnsmasq configuration (#4939) [#4939](https://github.com/openshift/assisted-service/pull/4939)
* [MGMT-13487](https://issues.redhat.com/browse/MGMT-13487): handle day2 cluster authz (#4973) [#4973](https://github.com/openshift/assisted-service/pull/4973)
* NO-ISSUE: added ENABLE_ORG_TENANCY to deploy-test target (#4974) [#4974](https://github.com/openshift/assisted-service/pull/4974)
* [MGMT-11805](https://issues.redhat.com/browse/MGMT-11805): `docs/change-iso-password.sh` lint (#4971) [#4971](https://github.com/openshift/assisted-service/pull/4971)
* [Full changelog](https://github.com/openshift/assisted-service/compare/445e8646e95c70b74c9131c57945eff1289f73da...78fb9d5890a9e04091b70585a4a3fed735a6802c)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/6160d18379195ac3f65ab3898429936a95522fd0)

* Updating ose-agent-installer-csr-approver images to be consistent with ART (#587) [#587](https://github.com/openshift/assisted-installer/pull/587)
* NO-ISSUE: controller logs optimizations (#646) [#646](https://github.com/openshift/assisted-installer/pull/646)
* NO-ISSUE: Bump golang.org/x/sync (#644) [#644](https://github.com/openshift/assisted-installer/pull/644)
* [MULTIARCH-3387](https://issues.redhat.com/browse/MULTIARCH-3387): Set boot device to target disk for powervm (#626) [#626](https://github.com/openshift/assisted-installer/pull/626)
* [MGMT-13710](https://issues.redhat.com/browse/MGMT-13710): assisted-installer-controller hangs for 2 minutes before uploading the ingress CA (#638) [#638](https://github.com/openshift/assisted-installer/pull/638)
* NO-ISSUE: Bump golang.org/x/net from 0.5.0 to 0.7.0 (#640) [#640](https://github.com/openshift/assisted-installer/pull/640)
* NO-ISSUE: Replace iotil by os and io in order to fix lint issues (#642) [#642](https://github.com/openshift/assisted-installer/pull/642)
* NO-ISSUE: Bump openshift/release from golang-1.18 to golang-1.19 (#612) [#612](https://github.com/openshift/assisted-installer/pull/612)
* [MGMT-13568](https://issues.redhat.com/browse/MGMT-13568): Add pause mcp while setting new role labels (#623) [#623](https://github.com/openshift/assisted-installer/pull/623)
* [MGMT-13292](https://issues.redhat.com/browse/MGMT-13292): Add the installed version of the OLM operators in the monitor operators response (#622) [#622](https://github.com/openshift/assisted-installer/pull/622)
* Remove uninitialized taint from vSphere nodes (#629) [#629](https://github.com/openshift/assisted-installer/pull/629)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/4e72009de80e522e8b7ca407f838c55568dce3b3...6160d18379195ac3f65ab3898429936a95522fd0)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/835acad181d540a40a4622c94b8faa3ad06bd113)

* [OCPBUGS-8695](https://issues.redhat.com/browse/OCPBUGS-8695): vendor agent-installer-utils to v0.0.0-20230310220517-8506fbb6a346 (#518) [#518](https://github.com/openshift/assisted-installer-agent/pull/518)
* [MGMT-13946](https://issues.redhat.com/browse/MGMT-13946): Ignore Proliant Gen 11 serial (#523) [#523](https://github.com/openshift/assisted-installer-agent/pull/523)
* [OCPBUGS-8677](https://issues.redhat.com/browse/OCPBUGS-8677): vendor agent-installer-utils to v0.0.0-20230308101916-306b7995977e (#515) [#515](https://github.com/openshift/assisted-installer-agent/pull/515)
* [OCPBUGS-8390](https://issues.redhat.com/browse/OCPBUGS-8390): vendor agent-installer-utils to v0.0.0-20230307094740-57807526b660 (#512) (#513) [#512](https://github.com/openshift/assisted-installer-agent/pull/512)
* [AGENT-565](https://issues.redhat.com/browse/AGENT-565): revendor agent-utils (#508) [#508](https://github.com/openshift/assisted-installer-agent/pull/508)
* vendor agent-installer-utils to v0.0.0-20230228190135-5b30a39dadf6 (#506) [#506](https://github.com/openshift/assisted-installer-agent/pull/506)
* vendor agent-installer-utils (#505) [#505](https://github.com/openshift/assisted-installer-agent/pull/505)
* NO-ISSUE: Bump github.com/stretchr/testify from 1.8.1 to 1.8.2 (#504) [#504](https://github.com/openshift/assisted-installer-agent/pull/504)
* NO-ISSUE: Bump github.com/coreos/ignition/v2 from 2.14.0 to 2.15.0 (#502) [#502](https://github.com/openshift/assisted-installer-agent/pull/502)
* [MGMT-13758](https://issues.redhat.com/browse/MGMT-13758): In connectivity check, ARPING checks should not run on nics without valid IPv4 address (#501) [#501](https://github.com/openshift/assisted-installer-agent/pull/501)
* Updating ose-agent-installer-node-agent images to be consistent with ART (#469) [#469](https://github.com/openshift/assisted-installer-agent/pull/469)
* [AGENT-502](https://issues.redhat.com/browse/AGENT-502): Add agent based installer agent-tui (#482) [#482](https://github.com/openshift/assisted-installer-agent/pull/482)
* Make the agent team be the OWNERS of the Dockerfile.ocp file (#498) [#498](https://github.com/openshift/assisted-installer-agent/pull/498)
* Add sg3_utils package (#497) [#497](https://github.com/openshift/assisted-installer-agent/pull/497)
* NO-ISSUE: Bump github.com/onsi/gomega from 1.26.0 to 1.27.1 (#495) [#495](https://github.com/openshift/assisted-installer-agent/pull/495)
* [MGMT-13665](https://issues.redhat.com/browse/MGMT-13665): Bring full journal by default in log gather (#492) [#492](https://github.com/openshift/assisted-installer-agent/pull/492)
* NO-ISSUE: Bump golang.org/x/sys from 0.4.0 to 0.5.0 (#491) [#491](https://github.com/openshift/assisted-installer-agent/pull/491)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/be0bf97c989ba74526bc4103146d87b7e1c7e136...835acad181d540a40a4622c94b8faa3ad06bd113)


### [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud/tree/b5200baa784513b77437809c63fcc80cfd53c9df)

* Update OWNERS [#29](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/29)
* [Full changelog](https://github.com/openshift/cloud-provider-alibaba-cloud/compare/4d3983d60d3601e73d4493c373c1af3c9ad5cbb6...b5200baa784513b77437809c63fcc80cfd53c9df)


### [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver/tree/68c0ecfcdcfaa375450f0af1b7f8c6083e3f122f)

* [OCPBUGS-6349](https://issues.redhat.com/browse/OCPBUGS-6349): UPSTREAM: 730: Fix CVE 2022 41717 [#24](https://github.com/openshift/alibaba-cloud-csi-driver/pull/24)
* [Bug 1877261](https://bugzilla.redhat.com/show_bug.cgi?id=1877261): UPSTREAM: 673: Feature/support disk waiting during mount [#23](https://github.com/openshift/alibaba-cloud-csi-driver/pull/23)
* [Full changelog](https://github.com/openshift/alibaba-cloud-csi-driver/compare/241e508ca75843d6fd22ab9e91a79b681488df02...68c0ecfcdcfaa375450f0af1b7f8c6083e3f122f)


### [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba/tree/4c0f96a692dee91100d7085c05a68f3efb7e281d)

* Update OWNERS [#40](https://github.com/openshift/cluster-api-provider-alibaba/pull/40)
* [Full changelog](https://github.com/openshift/cluster-api-provider-alibaba/compare/2305c951c1b8c008a35c9da09b5b4a2067a30008...4c0f96a692dee91100d7085c05a68f3efb7e281d)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/946daa07dbf49c4a1860a1c3fc4c05fa685c6590)

* Update OWNERS [#35](https://github.com/openshift/cloud-provider-aws/pull/35)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/e512facc817775eb4fe73ef4c7147fdc7f092c36...946daa07dbf49c4a1860a1c3fc4c05fa685c6590)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/4251ed32deecad37706c6b90ecb187882386609a)

* [OCPBUGS-8481](https://issues.redhat.com/browse/OCPBUGS-8481): [release-4.13] Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:release-2.0 (28bc9b8) into release-4.13 [#458](https://github.com/openshift/cluster-api-provider-aws/pull/458)
* Update OWNERS [#457](https://github.com/openshift/cluster-api-provider-aws/pull/457)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/55f691600d8792076f55a3823f22ad9a41405a3b...4251ed32deecad37706c6b90ecb187882386609a)


### [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator/tree/0d34035fcacc60abfa5810d3eeb861a3d7722875)

* [OCPBUGS-10405](https://issues.redhat.com/browse/OCPBUGS-10405): feat: add workload annotation to deployment and daemonset [#199](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/199)
* [STOR-875](https://issues.redhat.com/browse/STOR-875): Implement custom keys in AWS EBS CSI driver operator [#185](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/185)
* [OCPBUGS-7837](https://issues.redhat.com/browse/OCPBUGS-7837): do not inject-proxy when deploying in hypershift control plane [#186](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/186)
* Bump github.com/spf13/cobra from 1.6.0 to 1.6.1 [#182](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/182)
* Add ok-to-test label to dependabot PRs [#184](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/184)
* Bump k8s.io/klog/v2 from 2.80.1 to 2.90.0 [#183](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/183)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver-operator/compare/1d9b0cab1dbe0c4f49d84c8aae090d9bc5ad9350...0d34035fcacc60abfa5810d3eeb861a3d7722875)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/9c6a95fea21143b255479a1d142da839794a3dcc)

* Update OWNERS [#61](https://github.com/openshift/machine-api-provider-aws/pull/61)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/4c9646e5e5981d0e91d5e815c16a62d0cee612b9...9c6a95fea21143b255479a1d142da839794a3dcc)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/ce2ddad6686e14327c3b27befbf8c46b1b2dc68c)

* [OCPBUGS-8326](https://issues.redhat.com/browse/OCPBUGS-8326): update kubernetes dependencies to 1.26 [#56](https://github.com/openshift/cloud-provider-azure/pull/56)
* Update OWNERS [#54](https://github.com/openshift/cloud-provider-azure/pull/54)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/1ee2a41f7f55db65deec8b200c9fe99d57ca3e84...ce2ddad6686e14327c3b27befbf8c46b1b2dc68c)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/9885d4d37ed74d764eb83a826f3a7b013ed83d12)

* [OCPBUGS-8481](https://issues.redhat.com/browse/OCPBUGS-8481): [release-4.13] Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:release-1.7 (741a29d) into release-4.13 [#270](https://github.com/openshift/cluster-api-provider-azure/pull/270)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/ca4d2d04fa80beb89a0baeb8ecf0af7ca3466aff...9885d4d37ed74d764eb83a826f3a7b013ed83d12)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/202e8afa8f1899d4cd1843d9e09cf8832ae0eff7)

* Bug OCPBUGS-7408: UPSTREAM: 1725: Pin k8s.io/dynamic-resource-allocation version [#38](https://github.com/openshift/azure-disk-csi-driver/pull/38)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/fd557e3d71ab14af751bb8cd05685d4b584e8215...202e8afa8f1899d4cd1843d9e09cf8832ae0eff7)


### [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator/tree/67bda47232a73fe3877815d7901353f4f74ebeb0)

* [STOR-873](https://issues.redhat.com/browse/STOR-873): Implement custom keys in Azure Disk CSI driver operator [#68](https://github.com/openshift/azure-disk-csi-driver-operator/pull/68)
* [OCPBUGS-7617](https://issues.redhat.com/browse/OCPBUGS-7617): Adjust client-side QPS, burst and worker threads in provisioner and attacher sidecars [#69](https://github.com/openshift/azure-disk-csi-driver-operator/pull/69)
* [OCPBUGS-6658](https://issues.redhat.com/browse/OCPBUGS-6658): Disable managed identity authentication [#67](https://github.com/openshift/azure-disk-csi-driver-operator/pull/67)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver-operator/compare/509a593d51f92252fc19774b1557319edb597281...67bda47232a73fe3877815d7901353f4f74ebeb0)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/fd94a035e3d9dedce048f7e5f271e7ed6bea822f)

* [OCPBUGS-7943](https://issues.redhat.com/browse/OCPBUGS-7943): Pin k8s.io/dynamic-resource-allocation to v0.26.0 [#24](https://github.com/openshift/azure-file-csi-driver/pull/24)
* [STOR-1010](https://issues.redhat.com/browse/STOR-1010): Rebase to v1.25.1 for OCP 4.13 [#23](https://github.com/openshift/azure-file-csi-driver/pull/23)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/85a79c417b330d75e79a59c2833f0b87de98c2ce...fd94a035e3d9dedce048f7e5f271e7ed6bea822f)


### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/994c32c927a69df33f83aed440cc150e8d270341)

* [OCPBUGS-6658](https://issues.redhat.com/browse/OCPBUGS-6658): Disable managed identity authentication [#47](https://github.com/openshift/azure-file-csi-driver-operator/pull/47)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/297147986aa11028ee10fd500ca8d6e34e43f970...994c32c927a69df33f83aed440cc150e8d270341)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/3405d8c4b87fc22a5ac355cd4a9611a38aa1f3cc)

* [CORS-2517](https://issues.redhat.com/browse/CORS-2517): migrate from ADAL to azidentity [#48](https://github.com/openshift/machine-api-provider-azure/pull/48)
* [CFE-677](https://issues.redhat.com/browse/CFE-677): Add user defined tags to all azure resources created [#45](https://github.com/openshift/machine-api-provider-azure/pull/45)
* [OCPBUGS-7696](https://issues.redhat.com/browse/OCPBUGS-7696): Fix empty clusterName references for GenerateMachinePublicIPName [#52](https://github.com/openshift/machine-api-provider-azure/pull/52)
* : Update k8s to 1.26 [#50](https://github.com/openshift/machine-api-provider-azure/pull/50)
* Update OWNERS [#51](https://github.com/openshift/machine-api-provider-azure/pull/51)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/c1a02cc02e0bf7409fddb8d4e0f4b26578889c49...3405d8c4b87fc22a5ac355cd4a9611a38aa1f3cc)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/aaf8b7c5b0426a45728e58a1282d1300f8d37b77)

* [OCPBUGS-10902](https://issues.redhat.com/browse/OCPBUGS-10902): IBMCloud set dnsrecords offset [#7026](https://github.com/openshift/installer/pull/7026)
* rhcos: Bump to 413.92.202303281804-0 [#7041](https://github.com/openshift/installer/pull/7041)
* [OCPBUGS-10657](https://issues.redhat.com/browse/OCPBUGS-10657): Do not always output warning msg when releaseImage is digest [#7007](https://github.com/openshift/installer/pull/7007)
* [OCPBUGS-10656](https://issues.redhat.com/browse/OCPBUGS-10656): Verify output file exists when `oc image extract` is run [#7006](https://github.com/openshift/installer/pull/7006)
* [OCPBUGS-10813](https://issues.redhat.com/browse/OCPBUGS-10813): bootstrap-pivot: skip pivot in SCOS Live ISO [#7020](https://github.com/openshift/installer/pull/7020)
* [OCPBUGS-8511](https://issues.redhat.com/browse/OCPBUGS-8511): baremetal: do not use port 80 for httpd [#7022](https://github.com/openshift/installer/pull/7022)
* [OCPBUGS-10214](https://issues.redhat.com/browse/OCPBUGS-10214): CVE-2023-25173: bump containerd [#7013](https://github.com/openshift/installer/pull/7013)
* [OCPBUGS-10597](https://issues.redhat.com/browse/OCPBUGS-10597): fix agent tui showing up multiple times [#6989](https://github.com/openshift/installer/pull/6989)
* [OCPBUGS-6265](https://issues.redhat.com/browse/OCPBUGS-6265): Shorten SNO installation duration by releasing CVO lease [#6979](https://github.com/openshift/installer/pull/6979)
* [OCPBUGS-10585](https://issues.redhat.com/browse/OCPBUGS-10585): rhcos: Update to 413.92.202303190222-0 [#6997](https://github.com/openshift/installer/pull/6997)
* [OCPBUGS-10499](https://issues.redhat.com/browse/OCPBUGS-10499): [release-4.13] CVE: bump mongo-go-driver for fix [#6986](https://github.com/openshift/installer/pull/6986)
* [OCPBUGS-10436](https://issues.redhat.com/browse/OCPBUGS-10436): Sort userTags in Machine and Machineset manifests [#6983](https://github.com/openshift/installer/pull/6983)
* [OCPBUGS-10213](https://issues.redhat.com/browse/OCPBUGS-10213): aws: bump aws-sdk-go version [#6969](https://github.com/openshift/installer/pull/6969)
* update RHCOS 4.13 bootimage metadata [#6955](https://github.com/openshift/installer/pull/6955)
* [OCPBUGS-8463](https://issues.redhat.com/browse/OCPBUGS-8463): [release-4.13] OpenStack Failure domains [#6948](https://github.com/openshift/installer/pull/6948)
* [OCPBUGS-8312](https://issues.redhat.com/browse/OCPBUGS-8312): Power VS: Add resourceGroup to infrastructure manifest [#6930](https://github.com/openshift/installer/pull/6930)
* [OCPBUGS-8353](https://issues.redhat.com/browse/OCPBUGS-8353): Disable 'create pxe-files' command [#6939](https://github.com/openshift/installer/pull/6939)
* [OCPBUGS-8463](https://issues.redhat.com/browse/OCPBUGS-8463): [release-4.13] openstack: consistent TechPreview-only feature validation [#6934](https://github.com/openshift/installer/pull/6934)
* [OCPBUGS-8341](https://issues.redhat.com/browse/OCPBUGS-8341): Pass Capabilites from install-config to cluster [#6936](https://github.com/openshift/installer/pull/6936)
* [OCPBUGS-8343](https://issues.redhat.com/browse/OCPBUGS-8343): Disable systemd status while TUI showing [#6938](https://github.com/openshift/installer/pull/6938)
* [OCPBUGS-8342](https://issues.redhat.com/browse/OCPBUGS-8342): Specify filename for default registries.conf [#6937](https://github.com/openshift/installer/pull/6937)
* [SPLAT-636](https://issues.redhat.com/browse/SPLAT-636): Create edge compute pool to support AWS Local Zones [#6931](https://github.com/openshift/installer/pull/6931)
* [OPNET-199](https://issues.redhat.com/browse/OPNET-199): Allow v6-primary dual stack on baremetal [#6881](https://github.com/openshift/installer/pull/6881)
* Generate CSI driver manifests [#6856](https://github.com/openshift/installer/pull/6856)
* Azure: use managed storage account for boot logs [#6848](https://github.com/openshift/installer/pull/6848)
* [OCPBUGS-7015](https://issues.redhat.com/browse/OCPBUGS-7015): Relax MachineCIDR check for vSphere, Nutanix [#6915](https://github.com/openshift/installer/pull/6915)
* [ARMOCP-417](https://issues.redhat.com/browse/ARMOCP-417): enable arm64 for agent installer [#6401](https://github.com/openshift/installer/pull/6401)
* [AGENT-502](https://issues.redhat.com/browse/AGENT-502): Enable agent tui [#6898](https://github.com/openshift/installer/pull/6898)
* GCP: conditionally create bootstrap service account [#6853](https://github.com/openshift/installer/pull/6853)
* vsphere: Remove bostrt from approver/reviewer group [#6918](https://github.com/openshift/installer/pull/6918)
* [OCPBUGS-7860](https://issues.redhat.com/browse/OCPBUGS-7860): azure: session: fix unclear auth error messages [#6901](https://github.com/openshift/installer/pull/6901)
* [OCPBUGS-7991](https://issues.redhat.com/browse/OCPBUGS-7991): vSphere - only create RP when cluster is not empty [#6905](https://github.com/openshift/installer/pull/6905)
* Support the new fields in NutanixMachineProviderConfig [#6841](https://github.com/openshift/installer/pull/6841)
* openstack-manifests: Option to run selected test cases [#6908](https://github.com/openshift/installer/pull/6908)
* [AGENT-526](https://issues.redhat.com/browse/AGENT-526): Refactor Agent InstallConfig embedding [#6796](https://github.com/openshift/installer/pull/6796)
* [OCPBUGS-7993](https://issues.redhat.com/browse/OCPBUGS-7993): hack/build-coreos-manifest: support OKD [#6906](https://github.com/openshift/installer/pull/6906)
* bump version of ovirt terraform provider [#6883](https://github.com/openshift/installer/pull/6883)
* [OCPBUGS-7622](https://issues.redhat.com/browse/OCPBUGS-7622): Ignore CPMS file if not exist [#6887](https://github.com/openshift/installer/pull/6887)
* linter: enable reporting about exported names lacking comments [#6880](https://github.com/openshift/installer/pull/6880)
* [CFE-757](https://issues.redhat.com/browse/CFE-757): Fix issues reported by QE [#6870](https://github.com/openshift/installer/pull/6870)
* [OCPBUGS-7579](https://issues.redhat.com/browse/OCPBUGS-7579): azure: fix certificate-based auth with passpharse [#6871](https://github.com/openshift/installer/pull/6871)
* Update alias for Metal Platform [#6884](https://github.com/openshift/installer/pull/6884)
* [CORS-2496](https://issues.redhat.com/browse/CORS-2496): Default `2xlarge` instead of `xlarge` in AWS when the control-plane is single-node [#6814](https://github.com/openshift/installer/pull/6814)
* [OSASINFRA-3090](https://issues.redhat.com/browse/OSASINFRA-3090): External LB support for on-prem platforms [#6812](https://github.com/openshift/installer/pull/6812)
* [Bug 1904573](https://bugzilla.redhat.com/show_bug.cgi?id=1904573): baremetal container modify /etc/passwd group writable [#6872](https://github.com/openshift/installer/pull/6872)
* [SPLAT-823](https://issues.redhat.com/browse/SPLAT-823): Zonal GA, single terraform, deprecate legacy platform spec [#6770](https://github.com/openshift/installer/pull/6770)
* openstack: Fix missing docs link [#6852](https://github.com/openshift/installer/pull/6852)
* [OCPBUGS-7180](https://issues.redhat.com/browse/OCPBUGS-7180): update RHCOS 4.13 bootimage metadata [#6861](https://github.com/openshift/installer/pull/6861)
* Removes m1kola from azure-reviewers [#6865](https://github.com/openshift/installer/pull/6865)
* [OCPBUGS-7495](https://issues.redhat.com/browse/OCPBUGS-7495): Convert platform type for AgentClusterInstall [#6855](https://github.com/openshift/installer/pull/6855)
* [CFE-582](https://issues.redhat.com/browse/CFE-582): Generate Infrastructure CR with the azure user defined tags [#6310](https://github.com/openshift/installer/pull/6310)
* [AGENT-456](https://issues.redhat.com/browse/AGENT-456): Remove connectivity checks from bash script [#6846](https://github.com/openshift/installer/pull/6846)
* integration: Don't pass host data in the install-config [#6795](https://github.com/openshift/installer/pull/6795)
* linter: bump version to sync with CI [#6859](https://github.com/openshift/installer/pull/6859)
* [OCPBUGS-4954](https://issues.redhat.com/browse/OCPBUGS-4954): IBMCloud: Handle COS reclamations [#6845](https://github.com/openshift/installer/pull/6845)
* [CFE-757](https://issues.redhat.com/browse/CFE-757): Fix issues reported by QE [#6820](https://github.com/openshift/installer/pull/6820)
* [CORS-2386](https://issues.redhat.com/browse/CORS-2386): IBMCloud: Add networkResourceGroupName [#6613](https://github.com/openshift/installer/pull/6613)
* IBMCloud: Add tests for installconfig metadata [#6348](https://github.com/openshift/installer/pull/6348)
* [OCPBUGS-1048](https://issues.redhat.com/browse/OCPBUGS-1048): if tag categories don't exist, the installation will fail to bootstrap [#6327](https://github.com/openshift/installer/pull/6327)
* [CFE-586](https://issues.redhat.com/browse/CFE-586): Apply user defined tags on created azure resources [#6354](https://github.com/openshift/installer/pull/6354)
* [OCPBUGS-7356](https://issues.redhat.com/browse/OCPBUGS-7356): data/manifests/bootkube/cvo-overrides: Default to stable-4.13 [#6689](https://github.com/openshift/installer/pull/6689)
* [OCPBUGS-6777](https://issues.redhat.com/browse/OCPBUGS-6777): Fix file check for loading openshift manifests [#6821](https://github.com/openshift/installer/pull/6821)
* [AGENT-505](https://issues.redhat.com/browse/AGENT-505): Embed agent files in initrd [#6842](https://github.com/openshift/installer/pull/6842)
* installer dev build settings to enable delve [#6835](https://github.com/openshift/installer/pull/6835)
* [OCPBUGS-7261](https://issues.redhat.com/browse/OCPBUGS-7261): Update AgentConfig template [#6840](https://github.com/openshift/installer/pull/6840)
* [Full changelog](https://github.com/openshift/installer/compare/546c3a6b8838f6ba65a816b540cd287777fec901...aaf8b7c5b0426a45728e58a1282d1300f8d37b77)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/0a751899f22b8d17ed4e0c3c029739b30d02cce3)

* Metal3 remediation backport [#184](https://github.com/openshift/cluster-api-provider-baremetal/pull/184)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/16303cea378c347463a6c3300c27213f0373eb06...0a751899f22b8d17ed4e0c3c029739b30d02cce3)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/8e073a67123ad0a81e04780801b718440f1c1699)

* [OCPBUGS-3029](https://issues.redhat.com/browse/OCPBUGS-3029): Merge upstream [#255](https://github.com/openshift/baremetal-operator/pull/255)
* Merge upstream [#253](https://github.com/openshift/baremetal-operator/pull/253)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/968ad3e41a45b1f7033a9e162e0b469304f32312...8e073a67123ad0a81e04780801b718440f1c1699)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/5847e8945c4997c5257c9f4f74cde0800e555866)

* [OPNET-197](https://issues.redhat.com/browse/OPNET-197): Extend logic for detecting Node IP [#218](https://github.com/openshift/baremetal-runtimecfg/pull/218)
* [OPNET-210](https://issues.redhat.com/browse/OPNET-210): Support preferIPv6 for IPI too [#223](https://github.com/openshift/baremetal-runtimecfg/pull/223)
* Extend utility functions for address manipulation [#221](https://github.com/openshift/baremetal-runtimecfg/pull/221)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/a675eae0581abad27738852201045f13d82bfee3...5847e8945c4997c5257c9f4f74cde0800e555866)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/92b1a3d0e5d092430b523f6541aa0c504b2222b3)

* [OCPBUGS-10773](https://issues.redhat.com/browse/OCPBUGS-10773): bump repo sclorg/s2i-ruby-container location for newapp test [#1381](https://github.com/openshift/oc/pull/1381)
* [OCPBUGS-10378](https://issues.redhat.com/browse/OCPBUGS-10378): Add microshift into generate-docs [#1372](https://github.com/openshift/oc/pull/1372)
* Microshift command docs [#1357](https://github.com/openshift/oc/pull/1357)
* Do not set master node selector if there's no masters [#1347](https://github.com/openshift/oc/pull/1347)
* [OCPBUGS-7190](https://issues.redhat.com/browse/OCPBUGS-7190): Reuse LDAP connection when performing group sync [#1336](https://github.com/openshift/oc/pull/1336)
* Adding `CommitDate` to the Changelog json output [#1348](https://github.com/openshift/oc/pull/1348)
* [OCPBUGS-7780](https://issues.redhat.com/browse/OCPBUGS-7780): pkg/cli/admin/upgrade/channel: Use PATCH instead of POST for spec updates [#1346](https://github.com/openshift/oc/pull/1346)
* Use registry.k8s.io and update image version [#1343](https://github.com/openshift/oc/pull/1343)
* Add icsp file convert command [#1238](https://github.com/openshift/oc/pull/1238)
* OWNERS_ALIASES: Update approvers: add David, remove Jack [#1340](https://github.com/openshift/oc/pull/1340)
* oc debug: Use own fields instead directly depending on Attach's [#1337](https://github.com/openshift/oc/pull/1337)
* [Full changelog](https://github.com/openshift/oc/compare/10f2c4952d8ba95938c1a82083664218dc02ee37...92b1a3d0e5d092430b523f6541aa0c504b2222b3)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/e74d108153107ff2979febe8c36588132c709796)

* [OCPBUGS-10822](https://issues.redhat.com/browse/OCPBUGS-10822): Adding missing workload annotations [#524](https://github.com/openshift/cloud-credential-operator/pull/524)
* [OCPBUGS-6370](https://issues.redhat.com/browse/OCPBUGS-6370): Bump k8s dependencies from v0.25.3 to v0.26.1 [#511](https://github.com/openshift/cloud-credential-operator/pull/511)
* Add lleshchi to OWNERS file [#513](https://github.com/openshift/cloud-credential-operator/pull/513)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/860eb0bfa3ba234567cf435e8555b6ea9952d857...e74d108153107ff2979febe8c36588132c709796)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/f4aeb704324972cf816f74a8a96534fd17c0c549)

* Add MovePrivateIP and its OpenStack implementation [#95](https://github.com/openshift/cloud-network-config-controller/pull/95)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/28c69265bd2507d9940cbf9caae6458569eb4c3f...f4aeb704324972cf816f74a8a96534fd17c0c549)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/1387625605df6e545945b7ed975cbf40980c590e)

* [OCPBUGS-10044](https://issues.redhat.com/browse/OCPBUGS-10044): update openshift/api to get new apiserver schema [#605](https://github.com/openshift/cluster-authentication-operator/pull/605)
* [OCPBUGS-7785](https://issues.redhat.com/browse/OCPBUGS-7785): migrate to using lease objects for leader election [#602](https://github.com/openshift/cluster-authentication-operator/pull/602)
* [API-1509](https://issues.redhat.com/browse/API-1509): Enable AESGCM encryption [#598](https://github.com/openshift/cluster-authentication-operator/pull/598)
* [OCPBUGS-6189](https://issues.redhat.com/browse/OCPBUGS-6189): art image update [#596](https://github.com/openshift/cluster-authentication-operator/pull/596)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/e2b6b5163b8da825e9ce021a66dadd6bf8af403d...1387625605df6e545945b7ed975cbf40980c590e)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/)

* [OCPBUGS-31421](https://issues.redhat.com/browse/OCPBUGS-31421): add check for taint.value == nil [#292](https://github.com/openshift/kubernetes-autoscaler/pull/292)
* [OCPBUGS-28334](https://issues.redhat.com/browse/OCPBUGS-28334): update snyk file [#287](https://github.com/openshift/kubernetes-autoscaler/pull/287)
* [PODAUTO-99](https://issues.redhat.com/browse/PODAUTO-99): Fix VPA e2e test failures [#286](https://github.com/openshift/kubernetes-autoscaler/pull/286)
* [OCPCLOUD-2431](https://issues.redhat.com/browse/OCPCLOUD-2431): rebase on upstream 1.29.0 release [#285](https://github.com/openshift/kubernetes-autoscaler/pull/285)
* [PODAUTO-104](https://issues.redhat.com/browse/PODAUTO-104): Add downstream pod autoscaling team member jkyros to VPA OWNERS [#283](https://github.com/openshift/kubernetes-autoscaler/pull/283)
* [OCPBUGS-27509](https://issues.redhat.com/browse/OCPBUGS-27509): Fix unstructured taint parsing in Cluster API provider [#281](https://github.com/openshift/kubernetes-autoscaler/pull/281)
* [OCPBUGS-26504](https://issues.redhat.com/browse/OCPBUGS-26504): Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART for 4.16 [#279](https://github.com/openshift/kubernetes-autoscaler/pull/279)
* [OCPBUGS-25855](https://issues.redhat.com/browse/OCPBUGS-25855): Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.16 [#277](https://github.com/openshift/kubernetes-autoscaler/pull/277)
* [OCPBUGS-25625](https://issues.redhat.com/browse/OCPBUGS-25625): Add Snyk file to exclude vendor directory on scan [#276](https://github.com/openshift/kubernetes-autoscaler/pull/276)
* [OCPBUGS-24783](https://issues.redhat.com/browse/OCPBUGS-24783): Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART [#271](https://github.com/openshift/kubernetes-autoscaler/pull/271)
* [OCPBUGS-25579](https://issues.redhat.com/browse/OCPBUGS-25579): Updating ose-vertical-pod-autoscaler-container image to be consistent with ART [#274](https://github.com/openshift/kubernetes-autoscaler/pull/274)
* [PODAUTO-91](https://issues.redhat.com/browse/PODAUTO-91): Add joelsmith to OWNERS for approving of VPA-only PRs [#273](https://github.com/openshift/kubernetes-autoscaler/pull/273)
* [OCPBUGS-24974](https://issues.redhat.com/browse/OCPBUGS-24974): Updating ose-vertical-pod-autoscaler-container image to be consistent with ART [#272](https://github.com/openshift/kubernetes-autoscaler/pull/272)
* [OCPBUGS-24146](https://issues.redhat.com/browse/OCPBUGS-24146): Updating ose-vertical-pod-autoscaler-container image to be consistent with ART [#269](https://github.com/openshift/kubernetes-autoscaler/pull/269)
* [OCPCLOUD-2195](https://issues.redhat.com/browse/OCPCLOUD-2195): rebase on upstream 1.28.0 release [#265](https://github.com/openshift/kubernetes-autoscaler/pull/265)
* Update OWNERS [#264](https://github.com/openshift/kubernetes-autoscaler/pull/264)
* [OCPBUGS-18137](https://issues.redhat.com/browse/OCPBUGS-18137): UPSTREAM: 6066: Allow overriding the kubernetes.io/arch label set by the scale from zero methods via a new cmdline arg [#261](https://github.com/openshift/kubernetes-autoscaler/pull/261)
* [OCPBUGS-19232](https://issues.redhat.com/browse/OCPBUGS-19232): Updating vertical-pod-autoscaler images to be consistent with ART [#262](https://github.com/openshift/kubernetes-autoscaler/pull/262)
* [OCPBUGS-18852](https://issues.redhat.com/browse/OCPBUGS-18852): Updating atomic-openshift-cluster-autoscaler images to be consistent with ART [#260](https://github.com/openshift/kubernetes-autoscaler/pull/260)
* Updating vertical-pod-autoscaler images to be consistent with ART [#253](https://github.com/openshift/kubernetes-autoscaler/pull/253)
* OCPCLOUD-2060 Merge https://github.com/kubernetes/autoscaler:master (d3ec0c4) into master [#256](https://github.com/openshift/kubernetes-autoscaler/pull/256)
* [OCPBUGS-13228](https://issues.redhat.com/browse/OCPBUGS-13228): Updating atomic-openshift-cluster-autoscaler images to be consistent with ART [#255](https://github.com/openshift/kubernetes-autoscaler/pull/255)
* Updating atomic-openshift-cluster-autoscaler images to be consistent with ART [#252](https://github.com/openshift/kubernetes-autoscaler/pull/252)
* [OCPCLOUD-1851](https://issues.redhat.com/browse/OCPCLOUD-1851): Upstream rebase to CA 1.26.1 and VPA 0.13 [#250](https://github.com/openshift/kubernetes-autoscaler/pull/250)
* Update OWNERS [#251](https://github.com/openshift/kubernetes-autoscaler/pull/251)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/80e18832a260796b7ef1db1fe27cdc6f94509e76...)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/99a0e2bacb4beacc58ea0c203c247f35fdf57ee1)

* [Bug 1943194](https://bugzilla.redhat.com/show_bug.cgi?id=1943194): update GPU resource limits type to have validation [#268](https://github.com/openshift/cluster-autoscaler-operator/pull/268)
* Update OWNERS [#270](https://github.com/openshift/cluster-autoscaler-operator/pull/270)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/338ec3b40e58d7ed47cd4508ceae244ab2b77c2c...99a0e2bacb4beacc58ea0c203c247f35fdf57ee1)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/53d370a7c26b1b7fefbd445a9522ba4250651702)

* [OCPBUGS-5181](https://issues.redhat.com/browse/OCPBUGS-5181): also use BMH.ConsumerRef for linking to master Machines [#320](https://github.com/openshift/cluster-baremetal-operator/pull/320)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/924033f25ddc8d6f4e650aa80b6a5f0eeb03d379...53d370a7c26b1b7fefbd445a9522ba4250651702)


### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/49fe1bdba1ab15b1a89797d7bb1d4d66de57fbeb)

* [OCPBUGS-6234](https://issues.redhat.com/browse/OCPBUGS-6234): Bump dependencies and image [#74](https://github.com/openshift/cluster-bootstrap/pull/74)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/588b223c211868142dad784a471283ed951aa186...49fe1bdba1ab15b1a89797d7bb1d4d66de57fbeb)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/0142186bad9acc2d7950663129a4ef82c32a5610)

* [OCPBUGS-8481](https://issues.redhat.com/browse/OCPBUGS-8481): [release-4.13] Merge https://github.com/kubernetes-sigs/cluster-api:release-1.3 (eb18352) into release-4.13 [#169](https://github.com/openshift/cluster-api/pull/169)
* Sync OWNERS file [#168](https://github.com/openshift/cluster-api/pull/168)
* [Full changelog](https://github.com/openshift/cluster-api/compare/1101b984bc6d4e0c81dcb6d6e4651dd6dfbdbec8...0142186bad9acc2d7950663129a4ef82c32a5610)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/eb2c1be0761ee00620c7170ee6ec82edd3bd5f62)

* [OCPBUGS-8481](https://issues.redhat.com/browse/OCPBUGS-8481): [release-4.13] Bump CAPI, CAPI providers, go 1.19 [#103](https://github.com/openshift/cluster-capi-operator/pull/103)
* Update OWNERS [#102](https://github.com/openshift/cluster-capi-operator/pull/102)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/6e9479ef0891ea5c55f6cc36e97eccb484b10fda...eb2c1be0761ee00620c7170ee6ec82edd3bd5f62)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/ecb49c59ae21b6beb7c3071e80c5c847f1ba7fbe)

* [OCPBUGS-10334](https://issues.redhat.com/browse/OCPBUGS-10334): add rbac permission for Nutanix CCM manager [#237](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/237)
* [OCPBUGS-5036](https://issues.redhat.com/browse/OCPBUGS-5036): Restart pods if related configuration was changed [#227](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/227)
* : Update k8s packages to 1.26 [#225](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/225)
* Update OWNERS [#226](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/226)
* vSphere: If only one failuredomain do not config labels [#224](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/224)
* : Modernize tooling [#221](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/221)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/642dcc89d8d7979115502ea0d51d0377ceb46e27...ecb49c59ae21b6beb7c3071e80c5c847f1ba7fbe)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/923b864e76c6e8eb1bfcd66bb73327588dd8b75a)

* [OCPBUGS-10038](https://issues.redhat.com/browse/OCPBUGS-10038): update openshift/api to get new apiserver schema [#291](https://github.com/openshift/cluster-config-operator/pull/291)
* [OCPBUGS-8710](https://issues.redhat.com/browse/OCPBUGS-8710): bump o/api for the updated featureflags [#290](https://github.com/openshift/cluster-config-operator/pull/290)
* update openshift/api to get new techprevew apiserver schema [#286](https://github.com/openshift/cluster-config-operator/pull/286)
* [CFE-601](https://issues.redhat.com/browse/CFE-601): Update openshift/api package version [#279](https://github.com/openshift/cluster-config-operator/pull/279)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/79b4480b1e3e38f39a3344cdd6e33a0e20b0d4a2...923b864e76c6e8eb1bfcd66bb73327588dd8b75a)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/8a4133dc30f2e6063311949f0220659027e8884f)

* [OCPBUGS-10771](https://issues.redhat.com/browse/OCPBUGS-10771): updates: manually requeue when waiting for replicas being ready [#181](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/181)
* [OCPBUGS-8424](https://issues.redhat.com/browse/OCPBUGS-8424): machine's node must be ready for CPMS machine to be ready [#173](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/173)
* e2e: periodics: remove test with cluster-wide-proxy [#170](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/170)
* Update ginkgo to 2.8.1 [#169](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/169)
* Update OWNERS [#168](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/168)
* Migrate test utils to actuator-pkg repository [#159](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/159)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/2a90938b0bb82c179a81da675dc4ba6414067417...8a4133dc30f2e6063311949f0220659027e8884f)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/d96022a4d0d091955d73e7e99fc8cc81db56c86a)

* [OCPBUGS-4359](https://issues.redhat.com/browse/OCPBUGS-4359): update-node-resolver.sh: Check for errors from >> [#355](https://github.com/openshift/cluster-dns-operator/pull/355)
* [OCPBUGS-6382](https://issues.redhat.com/browse/OCPBUGS-6382): Address CVE-2022-41717 [#353](https://github.com/openshift/cluster-dns-operator/pull/353)
* [OCPBUGS-7648](https://issues.redhat.com/browse/OCPBUGS-7648): Bump vendored k8s libraries to 0.26.1 and controller-runtime to 0.14.4 [#356](https://github.com/openshift/cluster-dns-operator/pull/356)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/637a69416fb44ee6d55150f40fffb90db82803a6...d96022a4d0d091955d73e7e99fc8cc81db56c86a)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/81a9226db5ff8a0b9d4f1108a0ae744d7a458374)

* [OCPBUGS-9957](https://issues.redhat.com/browse/OCPBUGS-9957): Garbage collect grafana-dashboard-etcd [#1023](https://github.com/openshift/cluster-etcd-operator/pull/1023)
* document adaptation with ceo [#1013](https://github.com/openshift/cluster-etcd-operator/pull/1013)
* [ETCD-385](https://issues.redhat.com/browse/ETCD-385): Prefer ipv6 on bootstrap in v6-primary dual stack [#1012](https://github.com/openshift/cluster-etcd-operator/pull/1012)
* [OCPBUGS-7729](https://issues.redhat.com/browse/OCPBUGS-7729): increase live/ready timeout and failure thresholds [#1009](https://github.com/openshift/cluster-etcd-operator/pull/1009)
* [OCPBUGS-4343](https://issues.redhat.com/browse/OCPBUGS-4343): update apf configuration to use v1beta3 [#968](https://github.com/openshift/cluster-etcd-operator/pull/968)
* [OCPBUGS-7374](https://issues.redhat.com/browse/OCPBUGS-7374): set default timeouts in etcdcli [#1003](https://github.com/openshift/cluster-etcd-operator/pull/1003)
* fail early on missing node status envs [#1002](https://github.com/openshift/cluster-etcd-operator/pull/1002)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/f695ca59f559e6b7a23451f42e1d430aa1d4e380...81a9226db5ff8a0b9d4f1108a0ae744d7a458374)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/3ed61e2b86c3ff0eddc66baa038a6b30a579ce15)

* [OCPBUGS-10716](https://issues.redhat.com/browse/OCPBUGS-10716): fix storage selection on IBM cloud [#851](https://github.com/openshift/cluster-image-registry-operator/pull/851)
* [OCPBUGS-6797](https://issues.redhat.com/browse/OCPBUGS-6797): Add nil validation for IBM Cloud and Power VS infrastructure status in ibmcos [#845](https://github.com/openshift/cluster-image-registry-operator/pull/845)
* [MULTIARCH-3212](https://issues.redhat.com/browse/MULTIARCH-3212): Use IBM COS as storage backend for PowerVS [#843](https://github.com/openshift/cluster-image-registry-operator/pull/843)
* [OCPBUGS-6621](https://issues.redhat.com/browse/OCPBUGS-6621): bump aws-sdk-go [#844](https://github.com/openshift/cluster-image-registry-operator/pull/844)
* Add UserTags while creating Azure Storage Account [#829](https://github.com/openshift/cluster-image-registry-operator/pull/829)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/901305b85290e03a9770f5130f3e7d41efecc48f...3ed61e2b86c3ff0eddc66baa038a6b30a579ce15)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/6aa482c551de22016dc2b6c87ca11ef4ac2be04d)

* [OCPBUGS-4054](https://issues.redhat.com/browse/OCPBUGS-4054): configurable-route: Don't use NewKindWithCache [#860](https://github.com/openshift/cluster-ingress-operator/pull/860)
* [NE-1186](https://issues.redhat.com/browse/NE-1186): Test_getRR: Fix typo: "excepted" → "expected" [#883](https://github.com/openshift/cluster-ingress-operator/pull/883)
* [CORS-2467](https://issues.redhat.com/browse/CORS-2467): dns: azure: use azidentity with an adapter [#846](https://github.com/openshift/cluster-ingress-operator/pull/846)
* [NE-1105](https://issues.redhat.com/browse/NE-1105): Add support for Gateway API [#890](https://github.com/openshift/cluster-ingress-operator/pull/890)
* [OCPBUGS-7424](https://issues.redhat.com/browse/OCPBUGS-7424): Bump vendored k8s libraries to 1.26.1 [#888](https://github.com/openshift/cluster-ingress-operator/pull/888)
* [CFE-679](https://issues.redhat.com/browse/CFE-679): Add user defined tags to the created DNS resources [#874](https://github.com/openshift/cluster-ingress-operator/pull/874)
* [OCPBUGS-6247](https://issues.redhat.com/browse/OCPBUGS-6247): Updating ose-cluster-ingress-operator images to be consistent with ART [#862](https://github.com/openshift/cluster-ingress-operator/pull/862)
* [CORS-2072](https://issues.redhat.com/browse/CORS-2072): GCP - Parse Zone ID with a project ID embedded [#855](https://github.com/openshift/cluster-ingress-operator/pull/855)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/65310f4a462a7da77fddca73a76e5462ff0b567f...6aa482c551de22016dc2b6c87ca11ef4ac2be04d)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/f2d9ccd2f585c57409257fae99da7f52ed6042cf)

* [OCPBUGS-10042](https://issues.redhat.com/browse/OCPBUGS-10042): update openshift/api to get new apiserver schema [#1472](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1472)
* [OCPBUGS-8710](https://issues.redhat.com/browse/OCPBUGS-8710): turn PSa to logging mode by default again [#1463](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1463)
* [OCPBUGS-5939](https://issues.redhat.com/browse/OCPBUGS-5939): revert dev cert rotation for 4.13 [#1465](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1465)
* [OCPBUGS-8712](https://issues.redhat.com/browse/OCPBUGS-8712): API-1509: Enable AES-GCM encryption [#1458](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1458)
* [OCPBUGS-8475](https://issues.redhat.com/browse/OCPBUGS-8475): Disable TestBoundTokenSignerController [#1457](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1457)
* [STOR-1051](https://issues.redhat.com/browse/STOR-1051): Allow CSI inline volumes in all SCCs [#1434](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1434)
* [WRKLDS-705](https://issues.redhat.com/browse/WRKLDS-705): Bump openshift/api to enable DynamicResourceAllocation through TechPreviewNoUpgrade [#1447](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1447)
* bump(api) [#1444](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1444)
* bump(*) [#1442](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1442)
* Update OWNERS to remove/replace adambkaplan [#1438](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1438)
* [OCPBUGS-5873](https://issues.redhat.com/browse/OCPBUGS-5873): dashboard: use apiserver_storage_objects metric [#1432](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1432)
* [API-1520](https://issues.redhat.com/browse/API-1520): Update SLO alerts based on upstream improvements [#1431](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1431)
* [WRKLDS-649](https://issues.redhat.com/browse/WRKLDS-649): Guard pod set readiness probe endpoint explicitly [#1437](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1437)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/e40d9c1555b4ac60ccd04cc4c6883ec970484ab7...f2d9ccd2f585c57409257fae99da7f52ed6042cf)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/b8428eb60d727565fefa4e37c845d704913cf0c5)

* Merge https://github.com/kubernetes-sigs/cluster-api-operator:main (e6bc25c) into main [#13](https://github.com/openshift/cluster-api-operator/pull/13)
* Update OWNERS [#14](https://github.com/openshift/cluster-api-operator/pull/14)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/094d8f4f40c442fc2c960db14bbaa2a5755875cb...b8428eb60d727565fefa4e37c845d704913cf0c5)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/099d4ffbcc06f70d30a42beb24f4e8b9593265e5)

* [OCPBUGS-7785](https://issues.redhat.com/browse/OCPBUGS-7785): migrate to using lease objects for leader election [#716](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/716)
* [OCPBUGS-8710](https://issues.redhat.com/browse/OCPBUGS-8710): Move PSa back to logging [#711](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/711)
* [OCPBUGS-7785](https://issues.redhat.com/browse/OCPBUGS-7785): migrate to using lease objects for leader election [#712](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/712)
* [WRKLDS-705](https://issues.redhat.com/browse/WRKLDS-705): Bump openshift/api to enable DynamicResourceAllocation through TechPreviewNoUpgrade [#701](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/701)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/7f293daf4d14fca5855513d3aaaf5b07d0e01d61...099d4ffbcc06f70d30a42beb24f4e8b9593265e5)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/dc5cba57ddcdb5a4b43240d1c2ab908fa953d887)

* [OCPBUGS-7785](https://issues.redhat.com/browse/OCPBUGS-7785): migrate to using lease objects for leader election [#477](https://github.com/openshift/cluster-kube-scheduler-operator/pull/477)
* [OCPBUGS-7785](https://issues.redhat.com/browse/OCPBUGS-7785): migrate to using lease objects for leader election [#470](https://github.com/openshift/cluster-kube-scheduler-operator/pull/470)
* [WRKLDS-705](https://issues.redhat.com/browse/WRKLDS-705): Bump openshift/api to enable DynamicResourceAllocation through TechPreviewNoUpgrade [#463](https://github.com/openshift/cluster-kube-scheduler-operator/pull/463)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/05ac3aefa4d63bab9aadddc890dd9390a503ad57...dc5cba57ddcdb5a4b43240d1c2ab908fa953d887)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/d0d9df7e0463c05e4aa59452d0a69a97f06b6190)

* Update OWNERS [#179](https://github.com/openshift/cluster-machine-approver/pull/179)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/e01cf5efa53363811d845d6ae9b5982cb4284d42...d0d9df7e0463c05e4aa59452d0a69a97f06b6190)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/4a26d185b4bc9f69057e2b1411bf5ead249c4f98)

* [OCPBUGS-10793](https://issues.redhat.com/browse/OCPBUGS-10793): bugfix in Node Exporter argument setting [#1922](https://github.com/openshift/cluster-monitoring-operator/pull/1922)
* [OCPBUGS-10476](https://issues.redhat.com/browse/OCPBUGS-10476): turn off netlink mode of netclass collector in Node Exporter. [#1919](https://github.com/openshift/cluster-monitoring-operator/pull/1919)
* [MON-2973](https://issues.redhat.com/browse/MON-2973): test/e2e: Add cleanup func for alertmanager uwm secret test [#1907](https://github.com/openshift/cluster-monitoring-operator/pull/1907)
* [MON-2693](https://issues.redhat.com/browse/MON-2693): Scrape profiles [#1785](https://github.com/openshift/cluster-monitoring-operator/pull/1785)
* [MON-2959](https://issues.redhat.com/browse/MON-2959): test/e2e: Add test for alertmanager secret platform [#1899](https://github.com/openshift/cluster-monitoring-operator/pull/1899)
* [MON-2904](https://issues.redhat.com/browse/MON-2904): add nodeExporter.collectors.buddyinfo settings. [#1891](https://github.com/openshift/cluster-monitoring-operator/pull/1891)
* [MON-2895](https://issues.redhat.com/browse/MON-2895): toggle netlink implementation of netclass collector [#1894](https://github.com/openshift/cluster-monitoring-operator/pull/1894)
* [MON-2932](https://issues.redhat.com/browse/MON-2932): jsonnet/dashboards: add role template variable to node related dashbo… [#1879](https://github.com/openshift/cluster-monitoring-operator/pull/1879)
* [MON-2900](https://issues.redhat.com/browse/MON-2900): add nodeExporter.collectors.netclass settings. [#1893](https://github.com/openshift/cluster-monitoring-operator/pull/1893)
* Update jsonnet dependencies [#1903](https://github.com/openshift/cluster-monitoring-operator/pull/1903)
* [MON-2951](https://issues.redhat.com/browse/MON-2951): create Routes only with ingress operator [#1885](https://github.com/openshift/cluster-monitoring-operator/pull/1885)
* [OCPBUGS-7391](https://issues.redhat.com/browse/OCPBUGS-7391): wait for service CA secrets [#1900](https://github.com/openshift/cluster-monitoring-operator/pull/1900)
* Synchronize versions of the downstream components [#1902](https://github.com/openshift/cluster-monitoring-operator/pull/1902)
* [MON-2973](https://issues.redhat.com/browse/MON-2973): pkg/manifests: Allow configuring secrets in alertmanager (UWM) [#1884](https://github.com/openshift/cluster-monitoring-operator/pull/1884)
* Synchronize versions of the downstream components [#1898](https://github.com/openshift/cluster-monitoring-operator/pull/1898)
* pkg/operator: fix typo in info logs [#1896](https://github.com/openshift/cluster-monitoring-operator/pull/1896)
* [MON-2901](https://issues.redhat.com/browse/MON-2901): add nodeExporter.collectors.netdev settings. [#1888](https://github.com/openshift/cluster-monitoring-operator/pull/1888)
* [STOR-1154](https://issues.redhat.com/browse/STOR-1154): Add vSphere topology to telemetry [#1886](https://github.com/openshift/cluster-monitoring-operator/pull/1886)
* Add nodeExporter.collectors.tcpstat settings. [#1876](https://github.com/openshift/cluster-monitoring-operator/pull/1876)
* Synchronize versions of the downstream components [#1887](https://github.com/openshift/cluster-monitoring-operator/pull/1887)
* [MON-2959](https://issues.redhat.com/browse/MON-2959): Allow configuring secrets in alertmanager (platform) [#1882](https://github.com/openshift/cluster-monitoring-operator/pull/1882)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/91af95040b049637592179b7e571110822ca3ae2...4a26d185b4bc9f69057e2b1411bf5ead249c4f98)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/d24c89e6da0271fa44495d6e4b30adde89d6f25c)

* [OCPBUGS-10890](https://issues.redhat.com/browse/OCPBUGS-10890): HyperShift: Add POD_NAME env to ovnkube-node [#1750](https://github.com/openshift/cluster-network-operator/pull/1750)
* [OCPBUGS-10710](https://issues.redhat.com/browse/OCPBUGS-10710): operConfig reconcile can return nil error on failure [#1746](https://github.com/openshift/cluster-network-operator/pull/1746)
* [OCPBUGS-10440](https://issues.redhat.com/browse/OCPBUGS-10440): Point libreswan to proper nss location [#1741](https://github.com/openshift/cluster-network-operator/pull/1741)
* [OCPBUGS-10271](https://issues.redhat.com/browse/OCPBUGS-10271): OVN-K alerts: add OVS overflow alerts [#1723](https://github.com/openshift/cluster-network-operator/pull/1723)
* [OCPBUGS-9968](https://issues.redhat.com/browse/OCPBUGS-9968): HyperShift: Set affinity, tolerations and co-location for all hcp resources created by CNO [#1733](https://github.com/openshift/cluster-network-operator/pull/1733)
* [OCPBUGS-9926](https://issues.redhat.com/browse/OCPBUGS-9926): Enable configuration of node healthz server on ovnkube [#1730](https://github.com/openshift/cluster-network-operator/pull/1730)
* [SDN-3730](https://issues.redhat.com/browse/SDN-3730): OVN IC: migrate master alerts to cluster manager [#1716](https://github.com/openshift/cluster-network-operator/pull/1716)
* Allow cidr expansion [#1707](https://github.com/openshift/cluster-network-operator/pull/1707)
* Enables nodeSelector to be used in egress firewall rule [#1720](https://github.com/openshift/cluster-network-operator/pull/1720)
* Add ovnk alert for resource retry failure [#1674](https://github.com/openshift/cluster-network-operator/pull/1674)
* [OCPBUGS-6730](https://issues.redhat.com/browse/OCPBUGS-6730), [SDN-3221](https://issues.redhat.com/browse/SDN-3221): ovn-kubernetes: use RHEL9-based images [#1712](https://github.com/openshift/cluster-network-operator/pull/1712)
* [OCPBUGS-4343](https://issues.redhat.com/browse/OCPBUGS-4343): update apf configuration to use v1beta3 [#1633](https://github.com/openshift/cluster-network-operator/pull/1633)
* Jira OCPBUGS-7774: Print RawCNIConfig in its string representation [#1718](https://github.com/openshift/cluster-network-operator/pull/1718)
* [OCPBUGS-6235](https://issues.redhat.com/browse/OCPBUGS-6235): Updating cluster-network-operator images to be consistent with ART [#1656](https://github.com/openshift/cluster-network-operator/pull/1656)
* Allow updates to pods [#1717](https://github.com/openshift/cluster-network-operator/pull/1717)
* [OCPBUGS-5559](https://issues.redhat.com/browse/OCPBUGS-5559): add default noProxy config for Azure [#1672](https://github.com/openshift/cluster-network-operator/pull/1672)
* always create env.sh when run_vs_existing_cluster [#1711](https://github.com/openshift/cluster-network-operator/pull/1711)
* [OCPBUGS-7354](https://issues.redhat.com/browse/OCPBUGS-7354): Revert "Revert "OCPBUGS-5842: Use pods oc vs host"" [#1714](https://github.com/openshift/cluster-network-operator/pull/1714)
* ovn-k, multi-homing: enable the feature [#1699](https://github.com/openshift/cluster-network-operator/pull/1699)
* Revert "OCPBUGS-5842: Use pods oc vs host" [#1713](https://github.com/openshift/cluster-network-operator/pull/1713)
* [OCPBUGS-5842](https://issues.redhat.com/browse/OCPBUGS-5842): Use pods oc vs host [#1681](https://github.com/openshift/cluster-network-operator/pull/1681)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/456b456a741740bde658f6a4c834dc75deb3a626...d24c89e6da0271fa44495d6e4b30adde89d6f25c)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/61ed06ca1249b3ff7c16da11988498a659c91fd3)

* Fix failing HyperShift presubmits (#578) [#578](https://github.com/openshift/cluster-node-tuning-operator/pull/578)
* Add a script to validate upstream TuneD (#577) [#577](https://github.com/openshift/cluster-node-tuning-operator/pull/577)
* [CNF-5900](https://issues.redhat.com/browse/CNF-5900): feat: added support for generating workload partitioning files (#431) [#431](https://github.com/openshift/cluster-node-tuning-operator/pull/431)
* Re enable node selector tests in update tests (#574) [#574](https://github.com/openshift/cluster-node-tuning-operator/pull/574)
* Handle different # of CPUs are in the same MCP (#558) [#558](https://github.com/openshift/cluster-node-tuning-operator/pull/558)
* composable OCP: make NTO components optional (#524) [#524](https://github.com/openshift/cluster-node-tuning-operator/pull/524)
* Update to TuneD v2.20.0 (#565) [#565](https://github.com/openshift/cluster-node-tuning-operator/pull/565)
* Remove trailing spaces from test names (#570) [#570](https://github.com/openshift/cluster-node-tuning-operator/pull/570)
* Remove optimization to allow full resync (#567) [#567](https://github.com/openshift/cluster-node-tuning-operator/pull/567)
* Report host-level sysctls in conflict with TuneD ones (#566) [#566](https://github.com/openshift/cluster-node-tuning-operator/pull/566)
* E2E: Per Core Runtime Tuning Test automation (#509) [#509](https://github.com/openshift/cluster-node-tuning-operator/pull/509)
* Add test case to check single rx queue on veth interface (#562) [#562](https://github.com/openshift/cluster-node-tuning-operator/pull/562)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/d5d81228e613571d7c772a2d34e640a3f1ddaa59...61ed06ca1249b3ff7c16da11988498a659c91fd3)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/aaa3cec4118d3743fd15f6197e348e86f7e48c7d)

* [OCPBUGS-10043](https://issues.redhat.com/browse/OCPBUGS-10043): update openshift/api to get new apiserver schema [#529](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/529)
* [OCPBUGS-7785](https://issues.redhat.com/browse/OCPBUGS-7785): migrate to using lease objects for leader election [#527](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/527)
* [API-1509](https://issues.redhat.com/browse/API-1509): Enable AESGCM encryption [#521](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/521)
* [OCPBUGS-4343](https://issues.redhat.com/browse/OCPBUGS-4343): update apf configuration to use v1beta3 [#509](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/509)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/be543dab36da472afb330fee3b91ee9f706d0a94...aaa3cec4118d3743fd15f6197e348e86f7e48c7d)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/9a8aba8cad6491a31e743a7e366d758351482d88)

* [OCPBUGS-7785](https://issues.redhat.com/browse/OCPBUGS-7785): migrate to using lease objects for leader election [#281](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/281)
* [OCPBUGS-4343](https://issues.redhat.com/browse/OCPBUGS-4343): update apf configuration to use v1beta3 [#273](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/273)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/2aa9db33a936f043898c6fb0598eb255a73f7059...9a8aba8cad6491a31e743a7e366d758351482d88)


### [cluster-platform-operators-manager](https://github.com/openshift/platform-operators/tree/471a80685581ff95fec3bee818f6ee409836eb8e)

* [OCPBUGS-10404](https://issues.redhat.com/browse/OCPBUGS-10404): feat: add workload pinning annotations [#84](https://github.com/openshift/platform-operators/pull/84)
* [Full changelog](https://github.com/openshift/platform-operators/compare/42b454506fc84dc0ff34713dbe34ad89fcf961ac...471a80685581ff95fec3bee818f6ee409836eb8e)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/d02c85ab3203fe22eddcc4694e17504ef34935de)

* [OCPBUGS-8710](https://issues.redhat.com/browse/OCPBUGS-8710): psalabelsyncer: invert the enforce/log logic to default to logging [#106](https://github.com/openshift/cluster-policy-controller/pull/106)
* update psa dependency version [#103](https://github.com/openshift/cluster-policy-controller/pull/103)
* update controller-manager dependency to point to v0.25.0 [#101](https://github.com/openshift/cluster-policy-controller/pull/101)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/3f8efde27bb6a50e5d50f0798877d4d2e1154dcb...d02c85ab3203fe22eddcc4694e17504ef34935de)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/afe457fb0f12766deb4eeb9b95e8cea54a520a29)

* [OCPBUGS-10965](https://issues.redhat.com/browse/OCPBUGS-10965): Add network tools imagestreams [#496](https://github.com/openshift/cluster-samples-operator/pull/496)
* update Jenkins to use v4.12 imagestreams [#491](https://github.com/openshift/cluster-samples-operator/pull/491)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/7615d247fbe0f369efec0a0c5fe62ac2dc22a174...afe457fb0f12766deb4eeb9b95e8cea54a520a29)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/e8b9f8ee17a5687878c7ac2e65f44f4ee4c5f8e5)

* [BUILD-571](https://issues.redhat.com/browse/BUILD-571): enable shared resource operator to run in an hypershift guest cluster [#342](https://github.com/openshift/cluster-storage-operator/pull/342)
* [STOR-875](https://issues.redhat.com/browse/STOR-875): Implement custom keys in AWS EBS CSI driver operator [#338](https://github.com/openshift/cluster-storage-operator/pull/338)
* [OCPBUGS-5410](https://issues.redhat.com/browse/OCPBUGS-5410): add ReEncrypt KMS permissions [#345](https://github.com/openshift/cluster-storage-operator/pull/345)
* [BUILD-407](https://issues.redhat.com/browse/BUILD-407): Revert "remove tech preview feature gate for shared resources" [#343](https://github.com/openshift/cluster-storage-operator/pull/343)
* [OCPBUGS-6992](https://issues.redhat.com/browse/OCPBUGS-6992): Add UID to CSO Pod to be able to run with custom SCCs [#344](https://github.com/openshift/cluster-storage-operator/pull/344)
* [MULTIARCH-3203](https://issues.redhat.com/browse/MULTIARCH-3203): Hypershift changes for CSO moved to CP on PowerVS CSI driver operator [#331](https://github.com/openshift/cluster-storage-operator/pull/331)
* [STOR-1123](https://issues.redhat.com/browse/STOR-1123): Add alert about topology misconfiguration [#334](https://github.com/openshift/cluster-storage-operator/pull/334)
* [STOR-1128](https://issues.redhat.com/browse/STOR-1128): Stop creating an in-tree SC for vSphere [#340](https://github.com/openshift/cluster-storage-operator/pull/340)
* [OCPBUGS-7483](https://issues.redhat.com/browse/OCPBUGS-7483): Revert "Merge pull request #332 from bertinatto/default-sc" [#339](https://github.com/openshift/cluster-storage-operator/pull/339)
* [STOR-1128](https://issues.redhat.com/browse/STOR-1128): Remove defaultstorageclass controller [#332](https://github.com/openshift/cluster-storage-operator/pull/332)
* [BUILD-407](https://issues.redhat.com/browse/BUILD-407): remove tech preview feature gate for shared resources [#335](https://github.com/openshift/cluster-storage-operator/pull/335)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/a38cd1c38cf4dbf06ea2cdc6586d7ec7d22269fa...e8b9f8ee17a5687878c7ac2e65f44f4ee4c5f8e5)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/7e34cd1a936ddba872fd8ed4dd8ed43d1065b631)

* [OCPBUGS-10221](https://issues.redhat.com/browse/OCPBUGS-10221): pkg/cvo/availableupdates: Prioritize conditional risks for largest target version [#912](https://github.com/openshift/cluster-version-operator/pull/912)
* pkg/cvo: code cleanups [#902](https://github.com/openshift/cluster-version-operator/pull/902)
* [OCPBUGS-7419](https://issues.redhat.com/browse/OCPBUGS-7419): Trigger new sync round on ClusterOperator Available changes [#904](https://github.com/openshift/cluster-version-operator/pull/904)
* install/0000_90_cluster-version-operator_02_servicemonitor: Add ClusterReleaseNotAccepted [#906](https://github.com/openshift/cluster-version-operator/pull/906)
* [OCPBUGS-6097](https://issues.redhat.com/browse/OCPBUGS-6097): CVO hotloops on ImageStream and logs the information incorrectly [#894](https://github.com/openshift/cluster-version-operator/pull/894)
* [OCPBUGS-6292](https://issues.redhat.com/browse/OCPBUGS-6292): Update golang.org/x/net/http2 for CVE-2022-41717 [#901](https://github.com/openshift/cluster-version-operator/pull/901)
* [Bug 2090680](https://bugzilla.redhat.com/show_bug.cgi?id=2090680): RetrievePayload: Improve timeouts and cover behavior with tests [#896](https://github.com/openshift/cluster-version-operator/pull/896)
* pkg/cvo: Set 'controller' in our ownerReferences [#900](https://github.com/openshift/cluster-version-operator/pull/900)
* pkg/cvo/sync_worker: Fix "The sync worker already has a pending notification" formatting [#898](https://github.com/openshift/cluster-version-operator/pull/898)
* vendor: update openshift/api for NodeTuning capability [#883](https://github.com/openshift/cluster-version-operator/pull/883)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/e766f4b0df8633183c3a94a51ed667d4c2d7ecb8...7e34cd1a936ddba872fd8ed4dd8ed43d1065b631)


### [console](https://github.com/openshift/console/tree/73de6a8b1a90e0545636399b36aa7136bf61ce7e)

* [OCPBUGS-10679](https://issues.redhat.com/browse/OCPBUGS-10679): Show type of sample on the samples view [#12639](https://github.com/openshift/console/pull/12639)
* [OCPBUGS-10474](https://issues.redhat.com/browse/OCPBUGS-10474): OpenShift pipeline TaskRun(s) column Duration is not present as column in UI [#12656](https://github.com/openshift/console/pull/12656)
* [OCPBUGS-7632](https://issues.redhat.com/browse/OCPBUGS-7632): fix issue where project deletion fails [#12618](https://github.com/openshift/console/pull/12618)
* [ODC-7232](https://issues.redhat.com/browse/ODC-7232), [ODC-7233](https://issues.redhat.com/browse/ODC-7233): Add new auth, serverconfig and usage metrics [#12527](https://github.com/openshift/console/pull/12527)
* [OCPBUGS-6994](https://issues.redhat.com/browse/OCPBUGS-6994): when ACM is installed and no previous perspective is set, default perspective to All Clusters [#12542](https://github.com/openshift/console/pull/12542)
* [OCPBUGS-6762](https://issues.redhat.com/browse/OCPBUGS-6762): Increase filter input width to accomodate placeholder text [#12610](https://github.com/openshift/console/pull/12610)
* [OCPBUGS-8066](https://issues.redhat.com/browse/OCPBUGS-8066): add checks for Pipeline in AddServerlessFunction form [#12617](https://github.com/openshift/console/pull/12617)
* Correcting Knative Package Failures [#12012](https://github.com/openshift/console/pull/12012)
* [IR-267](https://issues.redhat.com/browse/IR-267): add details for submanifest to the ImageStreamTag [#12549](https://github.com/openshift/console/pull/12549)
* [OCPBUGS-5773](https://issues.redhat.com/browse/OCPBUGS-5773): Delete secret on async run error [#12557](https://github.com/openshift/console/pull/12557)
* [OCPBUGS-7970](https://issues.redhat.com/browse/OCPBUGS-7970): always close filter dropdown [#12590](https://github.com/openshift/console/pull/12590)
* [OCPBUGS-7971](https://issues.redhat.com/browse/OCPBUGS-7971): Monitoring: Fix "Label" filter on "Alerting rules" list page [#12592](https://github.com/openshift/console/pull/12592)
* [OCPBUGS-7031](https://issues.redhat.com/browse/OCPBUGS-7031): Pipelines repository list and creation form doesn't show Tech Preview status [#12541](https://github.com/openshift/console/pull/12541)
* [ODC-6669](https://issues.redhat.com/browse/ODC-6669): rename edit-deployment routes and components [#12400](https://github.com/openshift/console/pull/12400)
* [OCPBUGS-7308](https://issues.redhat.com/browse/OCPBUGS-7308): remove 'Download kubeconfig file' from ServiceAccounts [#12589](https://github.com/openshift/console/pull/12589)
* [Bug 2076619](https://bugzilla.redhat.com/show_bug.cgi?id=2076619): Modified git import flow module to handle create button enable-disable issue [#11493](https://github.com/openshift/console/pull/11493)
* [OCPBUGS-7879](https://issues.redhat.com/browse/OCPBUGS-7879): fix devfile error [#12594](https://github.com/openshift/console/pull/12594)
* [OCPBUGS-7806](https://issues.redhat.com/browse/OCPBUGS-7806): Add NFS-export details for PersistentVolume details [#12571](https://github.com/openshift/console/pull/12571)
* chore(i18n): update translations: Completed-7034-OCP 4.13/Master Branch UI Localization- Sprint 230 [#12584](https://github.com/openshift/console/pull/12584)
* [OCPBUGS-3450](https://issues.redhat.com/browse/OCPBUGS-3450): Missing containerd and wicd service logs in Windows nodes [#12572](https://github.com/openshift/console/pull/12572)
* [OU-110](https://issues.redhat.com/browse/OU-110): Observe > Dashboards page: Use datasource defined in dashboard definition [#12422](https://github.com/openshift/console/pull/12422)
* [OCPBUGS-7668](https://issues.redhat.com/browse/OCPBUGS-7668): Bump helm pkg [#12582](https://github.com/openshift/console/pull/12582)
* Add additional alerts datasource extension [#12436](https://github.com/openshift/console/pull/12436)
* [OCPBUGS-4646](https://issues.redhat.com/browse/OCPBUGS-4646): delete application should delete all part-of resources [#12567](https://github.com/openshift/console/pull/12567)
* [OCPBUGS-7144](https://issues.redhat.com/browse/OCPBUGS-7144): fix alignment issue of info alert on Pipeline metrics page [#12563](https://github.com/openshift/console/pull/12563)
* Serverless function creation with Pipelines [#12552](https://github.com/openshift/console/pull/12552)
* [OCPBUGS-7421](https://issues.redhat.com/browse/OCPBUGS-7421): fix missing i18n error and validateDOMNesting warning [#12561](https://github.com/openshift/console/pull/12561)
* [OCPBUGS-1706](https://issues.redhat.com/browse/OCPBUGS-1706): Switch to use labelPlural for heading [#12585](https://github.com/openshift/console/pull/12585)
* [OCPBUGS-7195](https://issues.redhat.com/browse/OCPBUGS-7195): E2E correct sample page clicking [#12574](https://github.com/openshift/console/pull/12574)
* [OCPBUGS-3372](https://issues.redhat.com/browse/OCPBUGS-3372): Fix create silence error message adding response from the backend [#12577](https://github.com/openshift/console/pull/12577)
* [OCPBUGS-7117](https://issues.redhat.com/browse/OCPBUGS-7117): Expose endpoint to obtain copy login command URL for each cluster [#12553](https://github.com/openshift/console/pull/12553)
* [OCPBUGS-7399](https://issues.redhat.com/browse/OCPBUGS-7399): fix pipeline selection in Edit flow in devconsole [#12564](https://github.com/openshift/console/pull/12564)
* [OCPBUGS-266](https://issues.redhat.com/browse/OCPBUGS-266): add subject kind dropdown in the project access form [#12418](https://github.com/openshift/console/pull/12418)
* chore(i18n): update translations: Completed-7034-OCP 4.13/Master Branch UI Localization- Sprint 229 [#12568](https://github.com/openshift/console/pull/12568)
* [OCPBUGS-7427](https://issues.redhat.com/browse/OCPBUGS-7427): Associate wait time with method to decrease run time [#12559](https://github.com/openshift/console/pull/12559)
* [OCPBUGS-7089](https://issues.redhat.com/browse/OCPBUGS-7089), [OCPBUGS-7113](https://issues.redhat.com/browse/OCPBUGS-7113): move cluster menu to masthead to fix usability issues [#12480](https://github.com/openshift/console/pull/12480)
* [OCPBUGS-7418](https://issues.redhat.com/browse/OCPBUGS-7418): set default value for Scaling fields in Create Serverless Function form [#12562](https://github.com/openshift/console/pull/12562)
* [OCPBUGS-6610](https://issues.redhat.com/browse/OCPBUGS-6610): Developer - Topology : 'Filter by resource' drop-down i18n misses [#12522](https://github.com/openshift/console/pull/12522)
* [Bug 2115265](https://bugzilla.redhat.com/show_bug.cgi?id=2115265): Search page: LazyActionMenus are shown below Add/Remove from navigation button [#12187](https://github.com/openshift/console/pull/12187)
* [OCPBUGS-2479](https://issues.redhat.com/browse/OCPBUGS-2479): Right border radius is 0 for the pipeline visualization wrapper in dark mode [#12501](https://github.com/openshift/console/pull/12501)
* [OCPBUGS-1748](https://issues.redhat.com/browse/OCPBUGS-1748): PipelineRun templates must be fetched from OpenShift namespace [#12537](https://github.com/openshift/console/pull/12537)
* [OCPBUGS-7090](https://issues.redhat.com/browse/OCPBUGS-7090): Fix that Add to navigation does nothing when pinnedResource is {} [#12536](https://github.com/openshift/console/pull/12536)
* [OCPBUGS-5547](https://issues.redhat.com/browse/OCPBUGS-5547): Webhook Secret (1 of 2) is not removed when Knative Service is deleted [#12517](https://github.com/openshift/console/pull/12517)
* [OCPBUGS-5428](https://issues.redhat.com/browse/OCPBUGS-5428): Add missing SDK extensions descriptions [#12431](https://github.com/openshift/console/pull/12431)
* [Full changelog](https://github.com/openshift/console/compare/f194c930c1d8786b557652efdb56e09dfdc59993...73de6a8b1a90e0545636399b36aa7136bf61ce7e)


### [console-operator](https://github.com/openshift/console-operator/tree/91684e461ad99334fb12fc4041746128b14c4dae)

* [OCPBUGS-2783](https://issues.redhat.com/browse/OCPBUGS-2783): Distinguish between route conditions and remove the old ones [#734](https://github.com/openshift/console-operator/pull/734)
* [Full changelog](https://github.com/openshift/console-operator/compare/131ff2fefe4a30f291bdd430ece57759d7ff31a1...91684e461ad99334fb12fc4041746128b14c4dae)


### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/4655073266cb14756783bb06378224048f0dd3e3)

* Upstream sync Feb 2023 [#73](https://github.com/openshift/containernetworking-plugins/pull/73)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/494641486490b061cddb3f1cfa9b7013141c52ff...4655073266cb14756783bb06378224048f0dd3e3)


### [coredns](https://github.com/openshift/coredns/tree/5560e4ad8c343c211f0b2f9d85ce7331b20b87cb)

* [OCPBUGS-7558](https://issues.redhat.com/browse/OCPBUGS-7558): Merge 1.10.1 [#88](https://github.com/openshift/coredns/pull/88)
* [Full changelog](https://github.com/openshift/coredns/compare/064eec244109a6bf2e7ef57c161f9df78cce4fcd...5560e4ad8c343c211f0b2f9d85ce7331b20b87cb)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/)

* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#226](https://github.com/openshift/csi-driver-manila-operator/pull/226)
* [OCPBUGS-28934](https://issues.redhat.com/browse/OCPBUGS-28934): Updating csi-driver-manila-operator-container image to be consistent with ART for 4.16 [#227](https://github.com/openshift/csi-driver-manila-operator/pull/227)
* NO-ISSUE: Remove local manifests [#208](https://github.com/openshift/csi-driver-manila-operator/pull/208)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#225](https://github.com/openshift/csi-driver-manila-operator/pull/225)
* [OCPBUGS-23809](https://issues.redhat.com/browse/OCPBUGS-23809): Bump opentelemetry libs [#220](https://github.com/openshift/csi-driver-manila-operator/pull/220)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#223](https://github.com/openshift/csi-driver-manila-operator/pull/223)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#218](https://github.com/openshift/csi-driver-manila-operator/pull/218)
* [OCPBUGS-24226](https://issues.redhat.com/browse/OCPBUGS-24226): setting TLSSecurityProfile with no minTLSVersion crashes controller [#217](https://github.com/openshift/csi-driver-manila-operator/pull/217)
* [OCPBUGS-23306](https://issues.redhat.com/browse/OCPBUGS-23306): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#214](https://github.com/openshift/csi-driver-manila-operator/pull/214)
* [OCPBUGS-24824](https://issues.redhat.com/browse/OCPBUGS-24824): Updating csi-driver-manila-operator-container image to be consistent with ART [#213](https://github.com/openshift/csi-driver-manila-operator/pull/213)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#212](https://github.com/openshift/csi-driver-manila-operator/pull/212)
* [OCPBUGS-9331](https://issues.redhat.com/browse/OCPBUGS-9331): Fix selector for manila-csi-driver-controller-metrics service [#210](https://github.com/openshift/csi-driver-manila-operator/pull/210)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#207](https://github.com/openshift/csi-driver-manila-operator/pull/207)
* [OCPBUGS-21940](https://issues.redhat.com/browse/OCPBUGS-21940): Update k8s.io/apimachinery and k8s.io/apiserver [#206](https://github.com/openshift/csi-driver-manila-operator/pull/206)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#205](https://github.com/openshift/csi-driver-manila-operator/pull/205)
* [OCPBUGS-19166](https://issues.redhat.com/browse/OCPBUGS-19166): Updating csi-driver-manila-operator images to be consistent with ART [#204](https://github.com/openshift/csi-driver-manila-operator/pull/204)
* Configure User Agent [#191](https://github.com/openshift/csi-driver-manila-operator/pull/191)
* [STOR-1440](https://issues.redhat.com/browse/STOR-1440): Restart controller Pods if metrics-serving-cert changed [#198](https://github.com/openshift/csi-driver-manila-operator/pull/198)
* [OCPBUGS-12499](https://issues.redhat.com/browse/OCPBUGS-12499): Bump dependencies [#197](https://github.com/openshift/csi-driver-manila-operator/pull/197)
* Remove unused Dockerfile.openshift.ci file [#193](https://github.com/openshift/csi-driver-manila-operator/pull/193)
* Rework how we build the container image [#194](https://github.com/openshift/csi-driver-manila-operator/pull/194)
* [OCPBUGS-14049](https://issues.redhat.com/browse/OCPBUGS-14049): Don't cache OpenStack client [#184](https://github.com/openshift/csi-driver-manila-operator/pull/184)
* Revert "OCPBUGS-14049: Add secret informer" [#192](https://github.com/openshift/csi-driver-manila-operator/pull/192)
* [OCPBUGS-16453](https://issues.redhat.com/browse/OCPBUGS-16453): Bump library-go [#190](https://github.com/openshift/csi-driver-manila-operator/pull/190)
* [OCPBUGS-16783](https://issues.redhat.com/browse/OCPBUGS-16783): Chore: Update OWNERS [#189](https://github.com/openshift/csi-driver-manila-operator/pull/189)
* [OCPBUGS-14049](https://issues.redhat.com/browse/OCPBUGS-14049): Add secret informer [#187](https://github.com/openshift/csi-driver-manila-operator/pull/187)
* [STOR-1065](https://issues.redhat.com/browse/STOR-1065): Rework sidecar bindings to bind common ClusterRoles [#186](https://github.com/openshift/csi-driver-manila-operator/pull/186)
* [OCPBUGS-14824](https://issues.redhat.com/browse/OCPBUGS-14824): Bump csi-driver-manila-operator library-go [#183](https://github.com/openshift/csi-driver-manila-operator/pull/183)
* [STOR-1168](https://issues.redhat.com/browse/STOR-1168): Bump common libraries [#182](https://github.com/openshift/csi-driver-manila-operator/pull/182)
* Updating csi-driver-manila-operator images to be consistent with ART [#181](https://github.com/openshift/csi-driver-manila-operator/pull/181)
* Updating csi-driver-manila-operator images to be consistent with ART [#180](https://github.com/openshift/csi-driver-manila-operator/pull/180)
* Updating csi-driver-manila-operator images to be consistent with ART [#179](https://github.com/openshift/csi-driver-manila-operator/pull/179)
* [OCPBUGS-8683](https://issues.redhat.com/browse/OCPBUGS-8683): Add management workloads annotations [#175](https://github.com/openshift/csi-driver-manila-operator/pull/175)
* [OCPBUGS-8628](https://issues.redhat.com/browse/OCPBUGS-8628): Bump go.mongodb.org/mongo-driver to v1.5.1 [#173](https://github.com/openshift/csi-driver-manila-operator/pull/173)
* Updating csi-driver-manila-operator images to be consistent with ART [#172](https://github.com/openshift/csi-driver-manila-operator/pull/172)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/87b878e3086e59d201ccb12408dfeafaccab2707...)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/2b914c2161722ebf11f9275fa29e00a0b1306da1)

* Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#108](https://github.com/openshift/csi-driver-nfs/pull/108)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/49506d4c900c7222a71d075b63dec62c8448120b...2b914c2161722ebf11f9275fa29e00a0b1306da1)


### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/d4685ceb2b13ac6ce60e1b7997a99dea7173649d)

* Adding test scenariuos for Reserved Name Prefix for SharedSecret/SharedConfigMaps [#127](https://github.com/openshift/csi-driver-shared-resource/pull/127)
* [OCPBUGS-7272](https://issues.redhat.com/browse/OCPBUGS-7272): add version file to must-gather output [#125](https://github.com/openshift/csi-driver-shared-resource/pull/125)
* [OCPBUGS-7417](https://issues.redhat.com/browse/OCPBUGS-7417): Fix k8s.io/dynamic-resource-allocation error [#126](https://github.com/openshift/csi-driver-shared-resource/pull/126)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/93872277bb4b3747c90f9681726bad0f67d00684...d4685ceb2b13ac6ce60e1b7997a99dea7173649d)


### [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator/tree/fedb7b7ff15a02986d54276b87173c5cd5e41f46)

* [BUILD-570](https://issues.redhat.com/browse/BUILD-570): hooks to allow operator to deploy on hypershift [#71](https://github.com/openshift/csi-driver-shared-resource-operator/pull/71)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource-operator/compare/abc9561f714a826d57c56c66844daa0ad1ad4ee2...fedb7b7ff15a02986d54276b87173c5cd5e41f46)


### [docker-builder](https://github.com/openshift/builder/tree/a63ac04216a3616bd86988c4117e0db4df873aac)

* Update CONTRIBUTING.md [#329](https://github.com/openshift/builder/pull/329)
* [OCPBUGS-7412](https://issues.redhat.com/browse/OCPBUGS-7412): Fix k8s.io/dynamic-resource-allocation error [#328](https://github.com/openshift/builder/pull/328)
* [Full changelog](https://github.com/openshift/builder/compare/9caad619934afe7d04f14e68b3d2cb55b205bf6d...a63ac04216a3616bd86988c4117e0db4df873aac)


### [docker-registry](https://github.com/openshift/image-registry/tree/f414ba7310818c39af1eaf8239e056cb6f146128)

* [OCPBUGS-6809](https://issues.redhat.com/browse/OCPBUGS-6809): bump openshift/docker-distribution [#361](https://github.com/openshift/image-registry/pull/361)
* [OCPBUGS-6621](https://issues.redhat.com/browse/OCPBUGS-6621): bump aws-sdk-go [#360](https://github.com/openshift/image-registry/pull/360)
* [IR-341](https://issues.redhat.com/browse/IR-341): bump openshift/api [#359](https://github.com/openshift/image-registry/pull/359)
* [Full changelog](https://github.com/openshift/image-registry/compare/d9ca96b2159c964fef5f45c3b0004f0bcf0e4eb9...f414ba7310818c39af1eaf8239e056cb6f146128)


### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/ef4cf9b78f5b3ee28ab26f1eda02c5516f125283)

* Moving to `rhel9` base image. (#125) [#125](https://github.com/openshift/driver-toolkit/pull/125)
* Remove abi since it was not in 9.2 rpms (#124) [#124](https://github.com/openshift/driver-toolkit/pull/124)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/967d9d324b00595e22d7835a4979b95dbc2e355d...ef4cf9b78f5b3ee28ab26f1eda02c5516f125283)


### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/879b72bf6305ef394291ed1b4c5eeb3b11917633)

* Updating egress-router-cni images to be consistent with ART [#65](https://github.com/openshift/egress-router-cni/pull/65)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/a92e415791b531ca15ec84953550b71bd3534566...879b72bf6305ef394291ed1b4c5eeb3b11917633)


### [etcd](https://github.com/openshift/etcd/tree/f70da9d78221bc3e6bf8ac14c0c4ecc106f4f57d)

* Update owners [#177](https://github.com/openshift/etcd/pull/177)
* [Full changelog](https://github.com/openshift/etcd/compare/13c18c444a8c6a86ccbba16cce664008f5f948bd...f70da9d78221bc3e6bf8ac14c0c4ecc106f4f57d)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/9b7ca987656ad184730a6b430dcd846f5bc75db5)

* Update OWNERS [#27](https://github.com/openshift/cloud-provider-gcp/pull/27)
* Resolve dynamic resource allocation unknown revision [#26](https://github.com/openshift/cloud-provider-gcp/pull/26)
* [OCPBUGS-6406](https://issues.redhat.com/browse/OCPBUGS-6406): Merge https://github.com/kubernetes/cloud-provider-gcp:master into master [#18](https://github.com/openshift/cloud-provider-gcp/pull/18)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/83eb1c618bb5fbcf3684961352e36f1c71af8742...9b7ca987656ad184730a6b430dcd846f5bc75db5)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/baf133cb8c200c1200363c97442382a9f9dab011)

* [OCPBUGS-8481](https://issues.redhat.com/browse/OCPBUGS-8481): [release-4.13] Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:release-1.2 (1d8cf4c) into release-4.13 [#192](https://github.com/openshift/cluster-api-provider-gcp/pull/192)
* Update OWNERS [#190](https://github.com/openshift/cluster-api-provider-gcp/pull/190)
* Updating ose-gcp-cluster-api-controllers images to be consistent with ART [#187](https://github.com/openshift/cluster-api-provider-gcp/pull/187)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/0312fef2edc164b317bfbb3fa74d793ab5878b33...baf133cb8c200c1200363c97442382a9f9dab011)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/ca53af896fba13f3c11f56e450f65e6744d3b049)

* [OCPBUGS-7366](https://issues.redhat.com/browse/OCPBUGS-7366): New machine stuck in provisioning on VPC [#43](https://github.com/openshift/machine-api-provider-gcp/pull/43)
* [OCPCLOUD-1812](https://issues.redhat.com/browse/OCPCLOUD-1812): Update tooling & k8s 1.26 [#40](https://github.com/openshift/machine-api-provider-gcp/pull/40)
* Update OWNERS [#42](https://github.com/openshift/machine-api-provider-gcp/pull/42)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/aa53ece668936be41ad5540d2ee6885a15171847...ca53af896fba13f3c11f56e450f65e6744d3b049)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/c5ae6f5d4a62ecc686259cc680514f1ae9f1f733)

* [Bug 1877261](https://bugzilla.redhat.com/show_bug.cgi?id=1877261): UPSTREAM: 973: filesystem is not resized when restoring [#32](https://github.com/openshift/gcp-pd-csi-driver/pull/32)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/f0879a67708f015af6c6b2ace3a2bf5e27646b48...c5ae6f5d4a62ecc686259cc680514f1ae9f1f733)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/d151ef0f5268ccdedf5bb43b649d4cab13b21d68)

* [STOR-874](https://issues.redhat.com/browse/STOR-874): Implement custom keys in GCP PD CSI driver operator [#62](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/62)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/7a0b82d301a8d9ac9804736b1bf07027d252f79f...d151ef0f5268ccdedf5bb43b649d4cab13b21d68)


### [haproxy-router](https://github.com/openshift/router/tree/e28644631982fb4596e065d3ae85099f0886829d)

* [OCPBUGS-10519](https://issues.redhat.com/browse/OCPBUGS-10519): Revert "NE-1115: Update haproxy container builds to use haproxy 2.6" [#461](https://github.com/openshift/router/pull/461)
* [OCPBUGS-7542](https://issues.redhat.com/browse/OCPBUGS-7542): Bump vendored k8s libraries to 1.26 [#451](https://github.com/openshift/router/pull/451)
* [Full changelog](https://github.com/openshift/router/compare/6144b9abe85ee434e586eba2f21b6b309357ee78...e28644631982fb4596e065d3ae85099f0886829d)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/dc93b13d1f6518d62ea9e3dea64d843c2ce35cbf)

* [OCPBUGS-10515](https://issues.redhat.com/browse/OCPBUGS-10515): UPSTREAM: 115328: apiserver: annotate early (server not ready) and late (during shutdown) requests [#1517](https://github.com/openshift/kubernetes/pull/1517)
* [OCPBUGS-8412](https://issues.redhat.com/browse/OCPBUGS-8412): Fix mounted volume expansion tests [#1502](https://github.com/openshift/kubernetes/pull/1502)
* [OCPBUGS-8308](https://issues.redhat.com/browse/OCPBUGS-8308): Bump to k8s 1.26.2 [#1495](https://github.com/openshift/kubernetes/pull/1495)
* [AUTH-336](https://issues.redhat.com/browse/AUTH-336): UPSTREAM: <carry>: PSa metrics: unset ocp_namespace on non-platform n… [#1489](https://github.com/openshift/kubernetes/pull/1489)
* Bump to k8s 1.26.1 [#1479](https://github.com/openshift/kubernetes/pull/1479)
* [OCPBUGS-7267](https://issues.redhat.com/browse/OCPBUGS-7267): add SeccompProfile to Pod and Container accessors/mutators [#1490](https://github.com/openshift/kubernetes/pull/1490)
* UPSTREAM: <drop>: OCPBUGS-5991: Kube APIServer panics in admission controller [#1488](https://github.com/openshift/kubernetes/pull/1488)
* [CNF-5901](https://issues.redhat.com/browse/CNF-5901): admission hook change for workload partition on all clusters [#1312](https://github.com/openshift/kubernetes/pull/1312)
* UPSTREAM: 113799: tests: network: Prefer internal IPs first [#1446](https://github.com/openshift/kubernetes/pull/1446)
* UPSTREAM: 115863: Remove global framework variable [#1480](https://github.com/openshift/kubernetes/pull/1480)
* UPSTREAM: <carry>: add new approvers [#1458](https://github.com/openshift/kubernetes/pull/1458)
* [OCPBUGS-7555](https://issues.redhat.com/browse/OCPBUGS-7555): UPSTREAM: <carry>: add default kubelet sysctls within rpm [#1475](https://github.com/openshift/kubernetes/pull/1475)
* [AUTH-336](https://issues.redhat.com/browse/AUTH-336): UPSTREAM: <carry>: PSa metrics: log platform namespaces in audit denies [#1454](https://github.com/openshift/kubernetes/pull/1454)
* [Full changelog](https://github.com/openshift/kubernetes/compare/149fe529fd7884d0799753f3ed54f2a89d8036d9...dc93b13d1f6518d62ea9e3dea64d843c2ce35cbf)


### [hypershift](https://github.com/openshift/hypershift/tree/)

* NO-ISSUE: placeholders: ignore auto-sizer placeholders [#3877](https://github.com/openshift/hypershift/pull/3877)
* [OCPBUGS-32228](https://issues.redhat.com/browse/OCPBUGS-32228): Fix failure to create a second hostedcluster in the same namespace [#3900](https://github.com/openshift/hypershift/pull/3900)
* [OCPBUGS-32248](https://issues.redhat.com/browse/OCPBUGS-32248): Replace periods with commas in subnet label value [#3885](https://github.com/openshift/hypershift/pull/3885)
* chore(deps): update rhtap references [#3886](https://github.com/openshift/hypershift/pull/3886)
* [HOSTEDCP-1462](https://issues.redhat.com/browse/HOSTEDCP-1462): set HostPath.Type on volumesource in CloudNodeManagerD… [#3892](https://github.com/openshift/hypershift/pull/3892)
* NO-JIRA: fixed e2e teardown failing the outer test instead of subtest [#3891](https://github.com/openshift/hypershift/pull/3891)
* [HOSTEDCP-1519](https://issues.redhat.com/browse/HOSTEDCP-1519): feat(api): Add ingress-controller-load-balancer-scope annotation [#3848](https://github.com/openshift/hypershift/pull/3848)
* NO-JIRA: remove ovnkube-control-plane from expected component token m… [#3850](https://github.com/openshift/hypershift/pull/3850)
* [CNV-40622](https://issues.redhat.com/browse/CNV-40622): Docs: Avoid cidr Collisions b/w Infra &Guest cluster [#3863](https://github.com/openshift/hypershift/pull/3863)
* NO-JIRA: Disable kubevirt-csi crash detection in e2e [#3896](https://github.com/openshift/hypershift/pull/3896)
* Revert "HOSTEDCP-1465: Create HCPs with externalDNS on AKS Clusters" [#3890](https://github.com/openshift/hypershift/pull/3890)
* [HOSTEDCP-1465](https://issues.redhat.com/browse/HOSTEDCP-1465): Create HCPs with externalDNS on AKS Clusters [#3688](https://github.com/openshift/hypershift/pull/3688)
* chore(deps): update rhtap references [#3872](https://github.com/openshift/hypershift/pull/3872)
* [OSD-19085](https://issues.redhat.com/browse/OSD-19085): Replaced hypershift_cluster_cores metric with hypershift_cluster_vcpus metric [#3697](https://github.com/openshift/hypershift/pull/3697)
* NO-ISSUE: *: use the api package constant for the size label [#3876](https://github.com/openshift/hypershift/pull/3876)
* NO-JIRA: bump capk ci image [#3830](https://github.com/openshift/hypershift/pull/3830)
* NO-JIRA: chore(deps): update rhtap references (main) [#3867](https://github.com/openshift/hypershift/pull/3867)
* [OCPBUGS-29466](https://issues.redhat.com/browse/OCPBUGS-29466): Fix ICSP and IDMS inclusion as registriesOverrides [#3862](https://github.com/openshift/hypershift/pull/3862)
* [STOR-1805](https://issues.redhat.com/browse/STOR-1805): Set RUN_AS_USER if mgmt cluster doesn't have SCC [#3819](https://github.com/openshift/hypershift/pull/3819)
* [OCPBUGS-29494](https://issues.redhat.com/browse/OCPBUGS-29494): Fix disconnected metadata inspection [#3860](https://github.com/openshift/hypershift/pull/3860)
* [OCPBUGS-31012](https://issues.redhat.com/browse/OCPBUGS-31012): Disable audit-log container in kas when profile is None [#3765](https://github.com/openshift/hypershift/pull/3765)
* NO-JIRA: [e2e test framework] Add a flag to add an annotation to HostedCluster [#3854](https://github.com/openshift/hypershift/pull/3854)
* NO-JIRA: update private cluster IAM policy doc [#3851](https://github.com/openshift/hypershift/pull/3851)
* NO-JIRA: chore(deps): update rhtap references (main) [#3856](https://github.com/openshift/hypershift/pull/3856)
* [OCPBUGS-14383](https://issues.redhat.com/browse/OCPBUGS-14383): disable autoscaler when no nodepool requires it [#3846](https://github.com/openshift/hypershift/pull/3846)
* NO-JIRA: Document additional known issues for the disconnected scenario [#3611](https://github.com/openshift/hypershift/pull/3611)
* NO-JIRA: Update RHTAP references (main) [#3834](https://github.com/openshift/hypershift/pull/3834)
* [OCPBUGS-29391](https://issues.redhat.com/browse/OCPBUGS-29391): Add new permission required in CAPA [#3779](https://github.com/openshift/hypershift/pull/3779)
* [CNF-11885](https://issues.redhat.com/browse/CNF-11885): nto: add events resources under operator `Role` [#3827](https://github.com/openshift/hypershift/pull/3827)
* [OCPBUGS-31444](https://issues.redhat.com/browse/OCPBUGS-31444): use dnsPolicy: Default for konnectivity-agent in data plane [#3810](https://github.com/openshift/hypershift/pull/3810)
* NO-JIRA: docs: fixing wrong key name [#3833](https://github.com/openshift/hypershift/pull/3833)
* NO-JIRA: Update expected condition to false for ValidAzureKmsConfig s… [#3837](https://github.com/openshift/hypershift/pull/3837)
* [OCPBUGS-31725](https://issues.redhat.com/browse/OCPBUGS-31725): include hostnetwork SCC CPO role for 4.13 and earlier [#3838](https://github.com/openshift/hypershift/pull/3838)
* [HOSTEDCP-1511](https://issues.redhat.com/browse/HOSTEDCP-1511): enable and document kubevirt custom default network [#3832](https://github.com/openshift/hypershift/pull/3832)
* [HOSTEDCP-1513](https://issues.redhat.com/browse/HOSTEDCP-1513): Support annotation scoping for hostedcluster resources [#3702](https://github.com/openshift/hypershift/pull/3702)
* [OCPBUGS-31415](https://issues.redhat.com/browse/OCPBUGS-31415): update desired image even when HCP doesn't exist yet [#3829](https://github.com/openshift/hypershift/pull/3829)
* NO-JIRA: Added regression tests to ensure certain deployment fields do not get set. [#2707](https://github.com/openshift/hypershift/pull/2707)
* [OCPBUGS-31585](https://issues.redhat.com/browse/OCPBUGS-31585): disable http2 for ignition server and proxy [#3817](https://github.com/openshift/hypershift/pull/3817)
* [OTA-1211](https://issues.redhat.com/browse/OTA-1211): api/v1beta1/hostedcluster_types: Add spec.updateService [#3576](https://github.com/openshift/hypershift/pull/3576)
* [HOSTEDCP-1365](https://issues.redhat.com/browse/HOSTEDCP-1365): kubevirt, Generate kccm lb endpointslices [#3528](https://github.com/openshift/hypershift/pull/3528)
* NO-JIRA: Add --auto-repair flag to `hcp create nodepool` [#3163](https://github.com/openshift/hypershift/pull/3163)
* NO-JIRA: Set control plane to HA by default [#3788](https://github.com/openshift/hypershift/pull/3788)
* NO-JIRA: Fix docs commands related to Azure ephemeral OS disks [#3809](https://github.com/openshift/hypershift/pull/3809)
* Update RHTAP references [#3814](https://github.com/openshift/hypershift/pull/3814)
* NO-JIRA: Documentation overview of HCP KubeVirt Storage [#3763](https://github.com/openshift/hypershift/pull/3763)
* [OCPBUGS-31465](https://issues.redhat.com/browse/OCPBUGS-31465): remove max function usage from deicated request serving nodes [#3815](https://github.com/openshift/hypershift/pull/3815)
* [OCPBUGS-31106](https://issues.redhat.com/browse/OCPBUGS-31106): Reduce log file size for hypershift apiservers [#3781](https://github.com/openshift/hypershift/pull/3781)
* [HOSTEDCP-1462](https://issues.redhat.com/browse/HOSTEDCP-1462): Enable TestNodePool and CreateCluster tests on Azure [#3732](https://github.com/openshift/hypershift/pull/3732)
* [OCPBUGS-31319](https://issues.redhat.com/browse/OCPBUGS-31319): copy issuerCertificateAuthority configmap into HC openshift-config [#3799](https://github.com/openshift/hypershift/pull/3799)
* [HOSTEDCP-1478](https://issues.redhat.com/browse/HOSTEDCP-1478): Request serving node scheduler that uses HC size label [#3776](https://github.com/openshift/hypershift/pull/3776)
* [OCPBUGS-31076](https://issues.redhat.com/browse/OCPBUGS-31076): Support other azure clouds [#3804](https://github.com/openshift/hypershift/pull/3804)
* [OCPBUGS-31110](https://issues.redhat.com/browse/OCPBUGS-31110): Fix empty RHCOSImage error when creating Azure Infrastructure [#3782](https://github.com/openshift/hypershift/pull/3782)
* [HOSTEDCP-1104](https://issues.redhat.com/browse/HOSTEDCP-1104): Skip CPU Check on Render & Get Mgmt Cluster CPU from API Server [#3797](https://github.com/openshift/hypershift/pull/3797)
* [OCPBUGS-13726](https://issues.redhat.com/browse/OCPBUGS-13726): fix race between ignition payload generation and MCS configmap update [#3795](https://github.com/openshift/hypershift/pull/3795)
* NO-JIRA: Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 in /hack/tools [#3752](https://github.com/openshift/hypershift/pull/3752)
* NO-JIRA: Bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 [#3710](https://github.com/openshift/hypershift/pull/3710)
* [OCPBUGS-31089](https://issues.redhat.com/browse/OCPBUGS-31089): Fix empty resourceGroupName error when deleting Azure infra [#3775](https://github.com/openshift/hypershift/pull/3775)
* [OCPBUGS-31090](https://issues.redhat.com/browse/OCPBUGS-31090): Fix empty subnet name error when creating Azure infrastructure [#3778](https://github.com/openshift/hypershift/pull/3778)
* [OCPBUGS-31263](https://issues.redhat.com/browse/OCPBUGS-31263): Add missing PodSecurityViolation alert [#3733](https://github.com/openshift/hypershift/pull/3733)
* [OCPBUGS-31118](https://issues.redhat.com/browse/OCPBUGS-31118): fix(ignition): Fix priority class override [#3784](https://github.com/openshift/hypershift/pull/3784)
* [OCPBUGS-31088](https://issues.redhat.com/browse/OCPBUGS-31088): Fix loopvar issue [#3770](https://github.com/openshift/hypershift/pull/3770)
* Update RHTAP references [#3790](https://github.com/openshift/hypershift/pull/3790)
* [HOSTEDCP-1104](https://issues.redhat.com/browse/HOSTEDCP-1104), [HOSTEDCP-1105](https://issues.redhat.com/browse/HOSTEDCP-1105): Validate multi-arch aspects in an AWS Hosted Cluster [#3769](https://github.com/openshift/hypershift/pull/3769)
* [HOSTEDCP-1501](https://issues.redhat.com/browse/HOSTEDCP-1501): Create default ClusterSizingConfig CR on start [#3787](https://github.com/openshift/hypershift/pull/3787)
* NO-JIRA: Remove unused ref to hostnetwork in cpo role [#3789](https://github.com/openshift/hypershift/pull/3789)
* [OCPBUGS-30930](https://issues.redhat.com/browse/OCPBUGS-30930): Add CEL validation for NodePool autoScaling / replicas [#3786](https://github.com/openshift/hypershift/pull/3786)
* [OCPBUGS-31102](https://issues.redhat.com/browse/OCPBUGS-31102): inject built-in MCP selector for KubeletConfigs and ContainerRuntimeConfigs [#3780](https://github.com/openshift/hypershift/pull/3780)
* NO-JIRA: Adding Disable PKI Reconciliation annotation as an option [#2989](https://github.com/openshift/hypershift/pull/2989)
* [OCPBUGS-30991](https://issues.redhat.com/browse/OCPBUGS-30991): external OIDC: fix certificateAuthority field in structured auth config [#3773](https://github.com/openshift/hypershift/pull/3773)
* [HOSTEDCP-1429](https://issues.redhat.com/browse/HOSTEDCP-1429): Add install flag to enable/disable size tagging [#3766](https://github.com/openshift/hypershift/pull/3766)
* [OCPBUGS-30968](https://issues.redhat.com/browse/OCPBUGS-30968): ibmcloud KMS: remove breaking image check and enable KMS v2 support [#3760](https://github.com/openshift/hypershift/pull/3760)
* [HOSTEDCP-1487](https://issues.redhat.com/browse/HOSTEDCP-1487): Add managed service constants to HyperShift API [#3762](https://github.com/openshift/hypershift/pull/3762)
* [OCPBUGS-30260](https://issues.redhat.com/browse/OCPBUGS-30260): Support subnet labels separated by periods [#3767](https://github.com/openshift/hypershift/pull/3767)
* [HOSTEDCP-1429](https://issues.redhat.com/browse/HOSTEDCP-1429): hypershift-operator: wire up placeholder pods for sizes [#3749](https://github.com/openshift/hypershift/pull/3749)
* NO-JIRA: Increase stability in autoscaled environments [#3757](https://github.com/openshift/hypershift/pull/3757)
* NO-JIRA: Bump HO read budget in e2e to 6000 [#3761](https://github.com/openshift/hypershift/pull/3761)
* [HOSTEDCP-1220](https://issues.redhat.com/browse/HOSTEDCP-1220): Add multi-arch flag to CLI & associated validation [#3743](https://github.com/openshift/hypershift/pull/3743)
* [HOSTEDCP-1467](https://issues.redhat.com/browse/HOSTEDCP-1467): ARO HCP - Add ability to specify subnet at nodepool level [#3748](https://github.com/openshift/hypershift/pull/3748)
* NO-JIRA: Update RHTAP references [#3753](https://github.com/openshift/hypershift/pull/3753)
* [OCPBUGS-30260](https://issues.redhat.com/browse/OCPBUGS-30260): Support specifying AWS LB subnets [#3746](https://github.com/openshift/hypershift/pull/3746)
* [HOSTEDCP-1487](https://issues.redhat.com/browse/HOSTEDCP-1487): Add ability to set managed service type in HO [#3736](https://github.com/openshift/hypershift/pull/3736)
* NO-ISSUE: hypershift-operator: react to hosted cluster changes [#3735](https://github.com/openshift/hypershift/pull/3735)
* [HOSTEDCP-1429](https://issues.redhat.com/browse/HOSTEDCP-1429): hypershift-operator: add a controller for t-shirt sizing [#3686](https://github.com/openshift/hypershift/pull/3686)
* [HOSTEDCP-929](https://issues.redhat.com/browse/HOSTEDCP-929): Add nodepool annotation to allow requesting IMDSv2 [#3584](https://github.com/openshift/hypershift/pull/3584)
* NO-JIRA:Bump CPO Read API budget to 4000 in EnsureApiBudget [#3745](https://github.com/openshift/hypershift/pull/3745)
* [OCPBUGS-30320](https://issues.redhat.com/browse/OCPBUGS-30320): speed up HCP rollout durations [#3734](https://github.com/openshift/hypershift/pull/3734)
* [STOR-1805](https://issues.redhat.com/browse/STOR-1805): Set env var when the mgmt cluster supports SCC [#3701](https://github.com/openshift/hypershift/pull/3701)
* [HOSTEDCP-1488](https://issues.redhat.com/browse/HOSTEDCP-1488): Use regionalized STS endpoints in AWS [#3742](https://github.com/openshift/hypershift/pull/3742)
* NO-JIRA: Update RHTAP references [#3737](https://github.com/openshift/hypershift/pull/3737)
* [OCPBUGS-30242](https://issues.redhat.com/browse/OCPBUGS-30242): consider nigthly images in payoad version check [#3727](https://github.com/openshift/hypershift/pull/3727)
* [OCPBUGS-28634](https://issues.redhat.com/browse/OCPBUGS-28634): Update agentserviceconfig.md to remove PUBLIC_CONTAINER_REGISTRIES [#3687](https://github.com/openshift/hypershift/pull/3687)
* [HOSTEDCP-1478](https://issues.redhat.com/browse/HOSTEDCP-1478): Support additional node selectors for request serving nodes [#3729](https://github.com/openshift/hypershift/pull/3729)
* Revert "HOSTEDCP-1220: Add multi-arch flag to CLI & associated validation" [#3731](https://github.com/openshift/hypershift/pull/3731)
* [OCPBUGS-13726](https://issues.redhat.com/browse/OCPBUGS-13726): honor HC image configuration [#3714](https://github.com/openshift/hypershift/pull/3714)
* [HOSTEDCP-1220](https://issues.redhat.com/browse/HOSTEDCP-1220): Add multi-arch flag to CLI & associated validation [#3689](https://github.com/openshift/hypershift/pull/3689)
* [OCPBUGS-30769](https://issues.redhat.com/browse/OCPBUGS-30769): include node local client loadbalancer address in kube-apiserver signing ips [#3699](https://github.com/openshift/hypershift/pull/3699)
* NO-JIRA: Temporary remove promtool from hack/tools to unblock RHTAP pipeline [#3728](https://github.com/openshift/hypershift/pull/3728)
* [HOSTEDCP-1460](https://issues.redhat.com/browse/HOSTEDCP-1460): Remove resource limits on azure-cloud-node-manager [#3725](https://github.com/openshift/hypershift/pull/3725)
* [HOSTEDCP-1479](https://issues.redhat.com/browse/HOSTEDCP-1479): Update IBM/networking-go-sdk package [#3722](https://github.com/openshift/hypershift/pull/3722)
* [HOSTEDCP-1480](https://issues.redhat.com/browse/HOSTEDCP-1480): Update TLS cert hash creation with sha512 [#3718](https://github.com/openshift/hypershift/pull/3718)
* NO-JIRA: Fixes Dependabot PR #3712 [#3716](https://github.com/openshift/hypershift/pull/3716)
* [HOSTEDCP-1466](https://issues.redhat.com/browse/HOSTEDCP-1466): support/metrics: don't filter HCCO metrics [#3715](https://github.com/openshift/hypershift/pull/3715)
* [MCO-392](https://issues.redhat.com/browse/MCO-392): ignition-server/controllers: drop `MCSIgnitionProvider` [#3709](https://github.com/openshift/hypershift/pull/3709)
* [HOSTEDCP-1469](https://issues.redhat.com/browse/HOSTEDCP-1469): Set GOMEMLIMIT annotation based on request serving node label [#3708](https://github.com/openshift/hypershift/pull/3708)
* [OCPBUGS-30574](https://issues.redhat.com/browse/OCPBUGS-30574): Update OLM Default Catalog Sources to 4.16 on main [#3707](https://github.com/openshift/hypershift/pull/3707)
* chore(deps): update rhtap references [#3704](https://github.com/openshift/hypershift/pull/3704)
* [OCPBUGS-30242](https://issues.redhat.com/browse/OCPBUGS-30242): Use cluster-config-operator for 4.14 payload [#3685](https://github.com/openshift/hypershift/pull/3685)
* NO-JIRA: Dependabot#3659 [#3665](https://github.com/openshift/hypershift/pull/3665)
* Revert "NO-JIRA: test/e2e: temporarily skip NTO machineconfig test" [#3700](https://github.com/openshift/hypershift/pull/3700)
* NO-JIRA: cleanup: nilness check failures [#3698](https://github.com/openshift/hypershift/pull/3698)
* [HOSTEDCP-1464](https://issues.redhat.com/browse/HOSTEDCP-1464): Add pull secret to install CLI & create k8s secret [#3682](https://github.com/openshift/hypershift/pull/3682)
* [OCPBUGS-30060](https://issues.redhat.com/browse/OCPBUGS-30060): Set OPERATOR_IMAGE environment variable [#3667](https://github.com/openshift/hypershift/pull/3667)
* [OCPBUGS-28370](https://issues.redhat.com/browse/OCPBUGS-28370): Use correct return error when destroying AWS SG [#3661](https://github.com/openshift/hypershift/pull/3661)
* [OCPBUGS-30301](https://issues.redhat.com/browse/OCPBUGS-30301): [kubevirt] Fix virt-launcher netpol to allow missing access [#3680](https://github.com/openshift/hypershift/pull/3680)
* [OCPBUGS-30124](https://issues.redhat.com/browse/OCPBUGS-30124): do not set KAS OAuthMetadataFile with Authentication type OIDC [#3678](https://github.com/openshift/hypershift/pull/3678)
* NO-JIRA: Bump the misc-dependencies group in /hack/tools with 1 update [#3658](https://github.com/openshift/hypershift/pull/3658)
* NO-JIRA: Bump the golang-dependencies group with 1 update [#3657](https://github.com/openshift/hypershift/pull/3657)
* chore(deps): update rhtap references [#3674](https://github.com/openshift/hypershift/pull/3674)
* NO-JIRA: test/e2e: temporarily skip NTO machineconfig test [#3683](https://github.com/openshift/hypershift/pull/3683)
* NO-JIRA: chore(deps): update rhtap references [#3671](https://github.com/openshift/hypershift/pull/3671)
* NO-JIRA: Remove specific pull secret watch in HCCO [#3605](https://github.com/openshift/hypershift/pull/3605)
* [OCPBUGS-30102](https://issues.redhat.com/browse/OCPBUGS-30102): Support to disable machine management components [#3570](https://github.com/openshift/hypershift/pull/3570)
* NO-JIRA: Minor cleanup of Azure create cluster document [#3663](https://github.com/openshift/hypershift/pull/3663)
* NO-JIRA: chore(deps): update rhtap references [#3650](https://github.com/openshift/hypershift/pull/3650)
* [OCPBUGS-29613](https://issues.redhat.com/browse/OCPBUGS-29613): test: add a test for invalid CSRs [#3612](https://github.com/openshift/hypershift/pull/3612)
* NO-JIRA: test: skip CCO in pod crash check [#3652](https://github.com/openshift/hypershift/pull/3652)
* [OCPBUGS-29773](https://issues.redhat.com/browse/OCPBUGS-29773): set Konnectivity cipher suites [#3618](https://github.com/openshift/hypershift/pull/3618)
* [OCPBUGS-30030](https://issues.redhat.com/browse/OCPBUGS-30030): rollout kas on auth config change [#3647](https://github.com/openshift/hypershift/pull/3647)
* NO-JIRA: test: increase CPO mutate budget [#3649](https://github.com/openshift/hypershift/pull/3649)
* NO-JIRA: test: debug certificates on unauthz error [#3642](https://github.com/openshift/hypershift/pull/3642)
* NO-JIRA: Remove replace statements [#3631](https://github.com/openshift/hypershift/pull/3631)
* NO-JIRA: DEPENDABOT#3613 [#3617](https://github.com/openshift/hypershift/pull/3617)
* NO-JIRA: chore(deps): update rhtap references [#3638](https://github.com/openshift/hypershift/pull/3638)
* NO-JIRA: Bump the misc-dependencies group in /hack/tools with 2 updates [#3636](https://github.com/openshift/hypershift/pull/3636)
* NO-JIRA: Bump the misc-dependencies group with 5 updates [#3634](https://github.com/openshift/hypershift/pull/3634)
* [OCPBUGS-28370](https://issues.redhat.com/browse/OCPBUGS-28370): Skip SG deletion if it has dependancy violation [#3622](https://github.com/openshift/hypershift/pull/3622)
* NO-JIRA: Update RHTAP references [#3621](https://github.com/openshift/hypershift/pull/3621)
* NO-JIRA: Update RHTAP references (main) [#3623](https://github.com/openshift/hypershift/pull/3623)
* [OCPBUGS-23457](https://issues.redhat.com/browse/OCPBUGS-23457): Switch to use service endpoint for Konnectivity [#3627](https://github.com/openshift/hypershift/pull/3627)
* [OCPBUGS-27180](https://issues.redhat.com/browse/OCPBUGS-27180): Update the oauth API server's shutdown delay duration [#3608](https://github.com/openshift/hypershift/pull/3608)
* NO-JIRA: Re-enable InPlace NodePool upgrade test for kubevirt (CNV-36608) [#3600](https://github.com/openshift/hypershift/pull/3600)
* [OCPBUGS-29855](https://issues.redhat.com/browse/OCPBUGS-29855): feat(ho): Add flag for dedicated request serving isolation [#3601](https://github.com/openshift/hypershift/pull/3601)
* [OCPBUGS-28607](https://issues.redhat.com/browse/OCPBUGS-28607): feat(config): Default RevisionHistoryLimit to 2 for deployments [#3477](https://github.com/openshift/hypershift/pull/3477)
* NO-JIRA: adjust pdb for oauth-apiserver [#3619](https://github.com/openshift/hypershift/pull/3619)
* [OCPBUGS-29645](https://issues.redhat.com/browse/OCPBUGS-29645): control-plane-pki-operator: fix CA used for SRE client credentials [#3615](https://github.com/openshift/hypershift/pull/3615)
* [HOSTEDCP-1424](https://issues.redhat.com/browse/HOSTEDCP-1424): ARO HCP Support Disabling Outbound SNAT [#3583](https://github.com/openshift/hypershift/pull/3583)
* NO-JIRA: always set minAvailable on PDBs to 1 [#3616](https://github.com/openshift/hypershift/pull/3616)
* [OCPBUGS-29723](https://issues.redhat.com/browse/OCPBUGS-29723): CLI: create nodepool aws - remove sg requirement [#3614](https://github.com/openshift/hypershift/pull/3614)
* NO-JIRA: Bump the misc-dependencies group with 15 updates [#3609](https://github.com/openshift/hypershift/pull/3609)
* NO-JIRA: Ignore kubectl version mistmaches in Component Versions [#3575](https://github.com/openshift/hypershift/pull/3575)
* NO-JIRA: Bump the k8s-dependencies group in /api with 2 updates [#3598](https://github.com/openshift/hypershift/pull/3598)
* [OCPBUGS-28538](https://issues.redhat.com/browse/OCPBUGS-28538): Add an SCC for validation pods with Cilium SDN [#3602](https://github.com/openshift/hypershift/pull/3602)
* NO-JIRA: chore(deps): update rhtap references [#3603](https://github.com/openshift/hypershift/pull/3603)
* [HOSTEDCP-1411](https://issues.redhat.com/browse/HOSTEDCP-1411): Add capability to specify additional tags to azure resource… [#3490](https://github.com/openshift/hypershift/pull/3490)
* NO-JIRA: chore(deps): update rhtap references [#3590](https://github.com/openshift/hypershift/pull/3590)
* [OCPBUGS-29435](https://issues.redhat.com/browse/OCPBUGS-29435): Use structured authentication config [#3574](https://github.com/openshift/hypershift/pull/3574)
* [HOSTEDCP-1428](https://issues.redhat.com/browse/HOSTEDCP-1428): hcco: report node count on HCPs [#3557](https://github.com/openshift/hypershift/pull/3557)
* [HOSTEDCP-1436](https://issues.redhat.com/browse/HOSTEDCP-1436): Make nodepool.spec.aws.subnet required [#3581](https://github.com/openshift/hypershift/pull/3581)
* [OCPBUGS-29586](https://issues.redhat.com/browse/OCPBUGS-29586): use 2040 for apiserver svc in IBM provider [#3569](https://github.com/openshift/hypershift/pull/3569)
* [HOSTEDCP-1438](https://issues.redhat.com/browse/HOSTEDCP-1438): Preserve container resources for more hosted control plane components [#3120](https://github.com/openshift/hypershift/pull/3120)
* NO-JIRA: contrib/aws-tag-lb-service-webhook: JSONPatch improvements [#3585](https://github.com/openshift/hypershift/pull/3585)
* NO-JIRA: KubeVirt Platform Documentation for Additional Network, CPU Performance, and VM NodeSelector [#3464](https://github.com/openshift/hypershift/pull/3464)
* NO-JIRA: remove dead code from kas config [#3578](https://github.com/openshift/hypershift/pull/3578)
* [OCPBUGS-29115](https://issues.redhat.com/browse/OCPBUGS-29115): Default NodeUpgradeType on day2 nodepool creation [#3572](https://github.com/openshift/hypershift/pull/3572)
* Revert "CNV-36608: Enable InPlace NodePool upgrade test for kubevirt" [#3547](https://github.com/openshift/hypershift/pull/3547)
* NO-JIRA: Update RHTAP references [#3577](https://github.com/openshift/hypershift/pull/3577)
* [OCPBUGS-28538](https://issues.redhat.com/browse/OCPBUGS-28538): Added docs to get other sdn providers deployed with agent provider [#3405](https://github.com/openshift/hypershift/pull/3405)
* Update RHTAP references [#3568](https://github.com/openshift/hypershift/pull/3568)
* [CNF-6516](https://issues.redhat.com/browse/CNF-6516): NTO: Enable PerformanceProfile [#1782](https://github.com/openshift/hypershift/pull/1782)
* [OCPBUGS-29209](https://issues.redhat.com/browse/OCPBUGS-29209): hypershift-operator: don't create PKI rbac when disabled [#3544](https://github.com/openshift/hypershift/pull/3544)
* [OCPBUGS-29104](https://issues.redhat.com/browse/OCPBUGS-29104): control-plane-pki-operator: add a signer for SRE break-glass [#3542](https://github.com/openshift/hypershift/pull/3542)
* NO-ISSUE: test: wait longer for certificate signing, revocation [#3560](https://github.com/openshift/hypershift/pull/3560)
* NO-JIRA: Reduce nodepool test cases for KubeVirt due to infra perf issues [#3562](https://github.com/openshift/hypershift/pull/3562)
* NO-JIRA: Developer namespace template for CI clusters [#3561](https://github.com/openshift/hypershift/pull/3561)
* [HOSTEDCP-1419](https://issues.redhat.com/browse/HOSTEDCP-1419): Always include AWS default security group in worker security groups [#3527](https://github.com/openshift/hypershift/pull/3527)
* [HOSTEDCP-1407](https://issues.redhat.com/browse/HOSTEDCP-1407): Add steps for seting up  azure CI cluster [#3545](https://github.com/openshift/hypershift/pull/3545)
* Update RHTAP references (main) [#3546](https://github.com/openshift/hypershift/pull/3546)
* [HOSTEDCP-1420](https://issues.redhat.com/browse/HOSTEDCP-1420): Set a fixed minimum supported version [#3525](https://github.com/openshift/hypershift/pull/3525)
* NO-JIRA: Update RHTAP references [#3518](https://github.com/openshift/hypershift/pull/3518)
* [OCPBUGS-29103](https://issues.redhat.com/browse/OCPBUGS-29103): control-plane-pki-operator: validate CN for CSR [#3538](https://github.com/openshift/hypershift/pull/3538)
* NO-JIRA: stevekuznetsov approver on CPPO and integration tests [#3540](https://github.com/openshift/hypershift/pull/3540)
* NO-JIRA: Fix issue with release note tool [#3429](https://github.com/openshift/hypershift/pull/3429)
* [HOSTEDCP-336](https://issues.redhat.com/browse/HOSTEDCP-336): Hypershift API separation [#3390](https://github.com/openshift/hypershift/pull/3390)
* [HOSTEDCP-1344](https://issues.redhat.com/browse/HOSTEDCP-1344): control-plane-pki-operator: add a revocation controller [#3339](https://github.com/openshift/hypershift/pull/3339)
* [CNV-36608](https://issues.redhat.com/browse/CNV-36608): Enable InPlace NodePool upgrade test for kubevirt [#3517](https://github.com/openshift/hypershift/pull/3517)
* [OCPBUGS-27282](https://issues.redhat.com/browse/OCPBUGS-27282): Make ControllerAvailabilityPolicy immutable [#3513](https://github.com/openshift/hypershift/pull/3513)
* NO-JIRA: remove unneeded code to copy Authentication refs [#3512](https://github.com/openshift/hypershift/pull/3512)
* [OCPBUGS-28659](https://issues.redhat.com/browse/OCPBUGS-28659): Add ValidatingAdmissionPolicy to KAS config [#3488](https://github.com/openshift/hypershift/pull/3488)
* [OCPBUGS-28741](https://issues.redhat.com/browse/OCPBUGS-28741): Fix default release image lookup [#3450](https://github.com/openshift/hypershift/pull/3450)
* NO-JIRA: Add app labels to KubeVirt CCM component [#3510](https://github.com/openshift/hypershift/pull/3510)
* [MULTIARCH-4084](https://issues.redhat.com/browse/MULTIARCH-4084): Reduce the policy access scope to specific instance [#3491](https://github.com/openshift/hypershift/pull/3491)
* NO-JIRA: Bump the misc-dependencies group with 5 updates [#3503](https://github.com/openshift/hypershift/pull/3503)
* [OCPBUGS-28625](https://issues.redhat.com/browse/OCPBUGS-28625): cpo: honor user provided oauthmetadata configmap passed in Authentication config [#3511](https://github.com/openshift/hypershift/pull/3511)
* NO-JIRA: Bump github.com/go-resty/resty/v2 from 2.10.0 to 2.11.0 in /hack/tools [#3505](https://github.com/openshift/hypershift/pull/3505)
* Update RHTAP references (main) [#3508](https://github.com/openshift/hypershift/pull/3508)
* [OCPBUGS-28763](https://issues.redhat.com/browse/OCPBUGS-28763): Ensure cloud resources are destroyed for all platforms when --destroy-cloud-resources is used [#3494](https://github.com/openshift/hypershift/pull/3494)
* [OCPBUGS-28601](https://issues.redhat.com/browse/OCPBUGS-28601): Remove webhook validations that introduce resource ordering [#3484](https://github.com/openshift/hypershift/pull/3484)
* NO-JIRA: manifests: Skip pod anti affinity for nil labels [#3507](https://github.com/openshift/hypershift/pull/3507)
* [MULTIARCH-3882](https://issues.redhat.com/browse/MULTIARCH-3882): Support PER solution for powervs platform via transit gateway [#3277](https://github.com/openshift/hypershift/pull/3277)
* [HOSTEDCP-1408](https://issues.redhat.com/browse/HOSTEDCP-1408): Update CAPZ Identity Type to Service Principal [#3501](https://github.com/openshift/hypershift/pull/3501)
* [OCPBUGS-27161](https://issues.redhat.com/browse/OCPBUGS-27161): reflect NodePool replica count nil in status [#3472](https://github.com/openshift/hypershift/pull/3472)
* NO-JIRA: Fix dependabot pr 3414 [#3453](https://github.com/openshift/hypershift/pull/3453)
* NO-JIRA: kubevirt, e2e, Add additional network test [#3449](https://github.com/openshift/hypershift/pull/3449)
* NO-JIRA: remove PrivateIngressController cleanup [#3489](https://github.com/openshift/hypershift/pull/3489)
* [HOSTEDCP-1373](https://issues.redhat.com/browse/HOSTEDCP-1373): ARO HCP - Add capability for Azure VMs to be created with ephemeral disks [#3483](https://github.com/openshift/hypershift/pull/3483)
* NO-JIRA: contrib: add code for aws-tag-lb-service-webhook [#3493](https://github.com/openshift/hypershift/pull/3493)
* NO-JIRA: Bump the misc-dependencies group with 3 updates [#3486](https://github.com/openshift/hypershift/pull/3486)
* NO-JIRA: Bump the misc-dependencies group in /hack/tools with 1 update [#3469](https://github.com/openshift/hypershift/pull/3469)
* [HOSTEDCP-1364](https://issues.redhat.com/browse/HOSTEDCP-1364): kubevirt,  use selector less services for ingress [#3343](https://github.com/openshift/hypershift/pull/3343)
* [OCPBUGS-22899](https://issues.redhat.com/browse/OCPBUGS-22899): node spread anti-affinity for HA HCP [#3286](https://github.com/openshift/hypershift/pull/3286)
* NO-JIRA: Bump the misc-dependencies group with 17 updates [#3476](https://github.com/openshift/hypershift/pull/3476)
* [HOSTEDCP-1401](https://issues.redhat.com/browse/HOSTEDCP-1401): Enable BYO NSG [#3455](https://github.com/openshift/hypershift/pull/3455)
* NO-JIRA: Update go-jose to the latest version to fix CVE [#3475](https://github.com/openshift/hypershift/pull/3475)
* [HOSTEDCP-1344](https://issues.redhat.com/browse/HOSTEDCP-1344): re-revert api stuff [#3463](https://github.com/openshift/hypershift/pull/3463)
* [OCPBUGS-26940](https://issues.redhat.com/browse/OCPBUGS-26940): Include OperatorHubSpec sync with HC when Config is empty [#3454](https://github.com/openshift/hypershift/pull/3454)
* NO-JIRA: Simplified kubectl component version check [#3458](https://github.com/openshift/hypershift/pull/3458)
* NO-JIRA: Remove '--attach-default-network' from productized cli [#3462](https://github.com/openshift/hypershift/pull/3462)
* NO-JIRA: Tolerate restarts for kubevirt external infra [#3451](https://github.com/openshift/hypershift/pull/3451)
* NO-ISSUE: .ci-operator.yaml: base off of RHEL 9 [#3466](https://github.com/openshift/hypershift/pull/3466)
* [OCPBUGS-27366](https://issues.redhat.com/browse/OCPBUGS-27366): indicate cluster profile to render the correct manifests [#3443](https://github.com/openshift/hypershift/pull/3443)
* [OCPBUGS-26977](https://issues.redhat.com/browse/OCPBUGS-26977): Required RBAC for network-node-identity is not created when hosted cluster networkType is set to Other. [#3403](https://github.com/openshift/hypershift/pull/3403)
* [TRT-1456](https://issues.redhat.com/browse/TRT-1456): Revert #3448 "api: move CSRA to a new group" [#3460](https://github.com/openshift/hypershift/pull/3460)
* [HOSTEDCP-1344](https://issues.redhat.com/browse/HOSTEDCP-1344): api: move CSRA to a new group [#3448](https://github.com/openshift/hypershift/pull/3448)
* [HOSTEDCP-1397](https://issues.redhat.com/browse/HOSTEDCP-1397): Add documentation on how to debug Azure nodes [#3452](https://github.com/openshift/hypershift/pull/3452)
* NO-JIRA: Update Dockerfiles to use publicly available RHEL9 images [#3426](https://github.com/openshift/hypershift/pull/3426)
* [HOSTEDCP-1308](https://issues.redhat.com/browse/HOSTEDCP-1308): Add e2e to ensure SA token not mounted on mgmt workloa… [#3301](https://github.com/openshift/hypershift/pull/3301)
* NO-JIRA: Fix promql testdata missing issue [#3438](https://github.com/openshift/hypershift/pull/3438)
* NO-JIRA: Update RHTAP references (main) [#3446](https://github.com/openshift/hypershift/pull/3446)
* [HOSTEDCP-1188](https://issues.redhat.com/browse/HOSTEDCP-1188): Add docs for control plane scheduling topologies [#3434](https://github.com/openshift/hypershift/pull/3434)
* [HOSTEDCP-1283](https://issues.redhat.com/browse/HOSTEDCP-1283): Set outbound LoadBalancer name on AzureCluster [#3445](https://github.com/openshift/hypershift/pull/3445)
* NO-JIRA: Bump misc dependencies 21f825371d [#3433](https://github.com/openshift/hypershift/pull/3433)
* [HOSTEDCP-1207](https://issues.redhat.com/browse/HOSTEDCP-1207): Automated etcd backup [#3034](https://github.com/openshift/hypershift/pull/3034)
* NO-JIRA: Document machine configuration in HyperShift [#3331](https://github.com/openshift/hypershift/pull/3331)
* [HOSTEDCP-1382](https://issues.redhat.com/browse/HOSTEDCP-1382): [Subtask] Restore Ability to Create HCPs on Azure [#3404](https://github.com/openshift/hypershift/pull/3404)
* [HOSTEDCP-1314](https://issues.redhat.com/browse/HOSTEDCP-1314): Ensure all e2e HCs use NLB for ingress controller [#3293](https://github.com/openshift/hypershift/pull/3293)
* [OCPBUGS-26757](https://issues.redhat.com/browse/OCPBUGS-26757): Change KAS bootstrap image to cluster-config-api [#3400](https://github.com/openshift/hypershift/pull/3400)
* NO-JIRA: Improve nodepool's machine condition message [#3354](https://github.com/openshift/hypershift/pull/3354)
* [OCPBUGS-23228](https://issues.redhat.com/browse/OCPBUGS-23228): Add storage, csisnapshotcontroller and clustercsidrive… [#3396](https://github.com/openshift/hypershift/pull/3396)
* [OCPBUGS-27027](https://issues.redhat.com/browse/OCPBUGS-27027): availability-prober: wait for infrastructure name to be set [#3409](https://github.com/openshift/hypershift/pull/3409)
* NO-JIRA: remove non-existent v1beta2 from webhook [#3407](https://github.com/openshift/hypershift/pull/3407)
* [HOSTEDCP-1376](https://issues.redhat.com/browse/HOSTEDCP-1376): Bump the sigs.k8s-dependencies group and update dependabot groupings [#3392](https://github.com/openshift/hypershift/pull/3392)
* [OCPBUGS-25696](https://issues.redhat.com/browse/OCPBUGS-25696): Apply Scheduling Configuration for kCCM [#3382](https://github.com/openshift/hypershift/pull/3382)
* [OCPBUGS-26547](https://issues.redhat.com/browse/OCPBUGS-26547): remove LoadBalancer filter from external-dns [#3410](https://github.com/openshift/hypershift/pull/3410)
* [OCPBUGS-26547](https://issues.redhat.com/browse/OCPBUGS-26547): fix up external-dns flags [#3408](https://github.com/openshift/hypershift/pull/3408)
* [OCPBUGS-26547](https://issues.redhat.com/browse/OCPBUGS-26547): reduce external-dns route53 call volume [#3394](https://github.com/openshift/hypershift/pull/3394)
* Update RHTAP references (main) [#3401](https://github.com/openshift/hypershift/pull/3401)
* [OCPBUGS-25897](https://issues.redhat.com/browse/OCPBUGS-25897): hcco: use manual mode for CCO [#3375](https://github.com/openshift/hypershift/pull/3375)
* [HOSTEDCP-1309](https://issues.redhat.com/browse/HOSTEDCP-1309): Add GC knobs for KAS [#3384](https://github.com/openshift/hypershift/pull/3384)
* NO-JIRA: [KubeVirt] Fix external infra permissions documentation [#3391](https://github.com/openshift/hypershift/pull/3391)
* [HOSTEDCP-1374](https://issues.redhat.com/browse/HOSTEDCP-1374): external OIDC: copy Authentication OIDC client secrets through to guest [#3373](https://github.com/openshift/hypershift/pull/3373)
* [OCPBUGS-25974](https://issues.redhat.com/browse/OCPBUGS-25974): Do not use CPO image from status if it's not a valid image reference [#3361](https://github.com/openshift/hypershift/pull/3361)
* [OCPBUGS-23518](https://issues.redhat.com/browse/OCPBUGS-23518): consider HCP upgradeable if CVO has no upgradable condition [#3239](https://github.com/openshift/hypershift/pull/3239)
* [OCPBUGS-26232](https://issues.redhat.com/browse/OCPBUGS-26232): set KAS runtime-config in alignment with feature gates [#3377](https://github.com/openshift/hypershift/pull/3377)
* [HOSTEDCP-1372](https://issues.redhat.com/browse/HOSTEDCP-1372): Bumps k8s to v0.29 [#3360](https://github.com/openshift/hypershift/pull/3360)
* [OCPBUGS-25342](https://issues.redhat.com/browse/OCPBUGS-25342): Add extra resources to be encrypted. [#3341](https://github.com/openshift/hypershift/pull/3341)
* [OCPBUGS-26197](https://issues.redhat.com/browse/OCPBUGS-26197): hostedcontrolplane: don't start pki operator when disabled [#3368](https://github.com/openshift/hypershift/pull/3368)
* [CNV-36656](https://issues.redhat.com/browse/CNV-36656): Documenting the mimimum RBAC required for External Infra cluster with KubeVirt provider [#3364](https://github.com/openshift/hypershift/pull/3364)
* NO-JIRA: Update RHTAP references (main) [#3365](https://github.com/openshift/hypershift/pull/3365)
* [HOSTEDCP-1371](https://issues.redhat.com/browse/HOSTEDCP-1371): Bump Golang to v1.21 [#3359](https://github.com/openshift/hypershift/pull/3359)
* [HOSTEDCP-1328](https://issues.redhat.com/browse/HOSTEDCP-1328): Add Ability to Encrypt VM OS Disks [#3281](https://github.com/openshift/hypershift/pull/3281)
* [HOSTEDCP-1122](https://issues.redhat.com/browse/HOSTEDCP-1122): Etcd defrag controller [#2869](https://github.com/openshift/hypershift/pull/2869)
* NO-JIRA: Update RHTAP references (main) [#3275](https://github.com/openshift/hypershift/pull/3275)
* [HOSTEDCP-336](https://issues.redhat.com/browse/HOSTEDCP-336): Move fixtures out of API [#3342](https://github.com/openshift/hypershift/pull/3342)
* [OCPBUGS-23362](https://issues.redhat.com/browse/OCPBUGS-23362): Set new condition on SG deletion. [#3307](https://github.com/openshift/hypershift/pull/3307)
* NO-JIRA: Bump the k8s-dependencies group in /hack/tools with 1 update [#3251](https://github.com/openshift/hypershift/pull/3251)
* NO-JIRA: Add rbac permission for kubevirt capi [#3344](https://github.com/openshift/hypershift/pull/3344)
* [OCPBUGS-22399](https://issues.redhat.com/browse/OCPBUGS-22399): Disable UWM Telemetry writer when telemeter-client cm not exists [#3348](https://github.com/openshift/hypershift/pull/3348)
* NO-JIRA: Approvers update [#3347](https://github.com/openshift/hypershift/pull/3347)
* [HOSTEDCP-1262](https://issues.redhat.com/browse/HOSTEDCP-1262): Add additional CEL to Arch in NodePoolSpec [#3333](https://github.com/openshift/hypershift/pull/3333)
* NO-JIRA: Bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /hack/tools [#3334](https://github.com/openshift/hypershift/pull/3334)
* NO-JIRA: Bump golang.org/x/crypto from 0.16.0 to 0.17.0 [#3335](https://github.com/openshift/hypershift/pull/3335)
* [OCPBUGS-22399](https://issues.redhat.com/browse/OCPBUGS-22399): Disable UWM Telemetry remote writer when MGMT cluster is disconnected [#3332](https://github.com/openshift/hypershift/pull/3332)
* [HOSTEDCP-336](https://issues.redhat.com/browse/HOSTEDCP-336): Move CAPI imports from /api package into support/api [#3270](https://github.com/openshift/hypershift/pull/3270)
* [OCPBUGS-24308](https://issues.redhat.com/browse/OCPBUGS-24308): Add PodDisruptionBudget for router deployment [#3337](https://github.com/openshift/hypershift/pull/3337)
* [HOSTEDCP-1355](https://issues.redhat.com/browse/HOSTEDCP-1355): Remove unused functions from repo [#3325](https://github.com/openshift/hypershift/pull/3325)
* NO-JIRA: RHTAP Multi-Arch PipelineSpec [#3340](https://github.com/openshift/hypershift/pull/3340)
* [HOSTEDCP-1329](https://issues.redhat.com/browse/HOSTEDCP-1329): Allow user to specify resource group for NodePool resources [#3279](https://github.com/openshift/hypershift/pull/3279)
* [HOSTEDCP-1353](https://issues.redhat.com/browse/HOSTEDCP-1353): Improve description for agent APIServerAddress CLI flag [#3314](https://github.com/openshift/hypershift/pull/3314)
* [ACM-8917](https://issues.redhat.com/browse/ACM-8917): Add agentLabelSelector to nodepool agent create to CLI [#3285](https://github.com/openshift/hypershift/pull/3285)
* [CCO-388](https://issues.redhat.com/browse/CCO-388): control-plane-operator: reconcile the CCO [#2794](https://github.com/openshift/hypershift/pull/2794)
* NO-JIRA: Bump github.com/prometheus/alertmanager from 0.25.0 to 0.25.1 in /hack/tools [#3045](https://github.com/openshift/hypershift/pull/3045)
* NO-JIRA: Bump github.com/docker/docker from 23.0.3+incompatible to 24.0.7+incompatible in /hack/tools [#3145](https://github.com/openshift/hypershift/pull/3145)
* [HOSTEDCP-1344](https://issues.redhat.com/browse/HOSTEDCP-1344): use library-go crypto where we can [#3326](https://github.com/openshift/hypershift/pull/3326)
* [OCPBUGS-25332](https://issues.redhat.com/browse/OCPBUGS-25332): Force KMSv1 on [#3318](https://github.com/openshift/hypershift/pull/3318)
* [HOSTEDCP-1273](https://issues.redhat.com/browse/HOSTEDCP-1273): Added support for OLM Disable default sources on HC creation [#3320](https://github.com/openshift/hypershift/pull/3320)
* [HOSTEDCP-1327](https://issues.redhat.com/browse/HOSTEDCP-1327): Remove Old Azure SDKs from Azure Infra [#3274](https://github.com/openshift/hypershift/pull/3274)
* [OCPBUGS-25306](https://issues.redhat.com/browse/OCPBUGS-25306): Use k8s.io/kube-scheduler/config/v1 [#3313](https://github.com/openshift/hypershift/pull/3313)
* [TRT-1406](https://issues.redhat.com/browse/TRT-1406): Revert #3283 "HOSTEDCP-1273: Added support for OLM Disable default sources on HC creation" [#3306](https://github.com/openshift/hypershift/pull/3306)
* [OCPBUGS-25103](https://issues.redhat.com/browse/OCPBUGS-25103): Remove reference to v1alpha1 flowcontrol [#3304](https://github.com/openshift/hypershift/pull/3304)
* [HOSTEDCP-1257](https://issues.redhat.com/browse/HOSTEDCP-1257): control-plane-pki-operator: add a CSR flow for break-glass creds [#3267](https://github.com/openshift/hypershift/pull/3267)
* NO-JIRA: Align kubevirt MinSupportedVersion with the default one (4.14.0) [#3305](https://github.com/openshift/hypershift/pull/3305)
* [OCPBUGS-24261](https://issues.redhat.com/browse/OCPBUGS-24261): Konnectivity agent update strategy [#3294](https://github.com/openshift/hypershift/pull/3294)
* [CNV-36056](https://issues.redhat.com/browse/CNV-36056): Expose NodeSelector for KubeVirt VMs in NodePool [#3280](https://github.com/openshift/hypershift/pull/3280)
* [ACM-8466](https://issues.redhat.com/browse/ACM-8466): Add Kubernetes SCC V2 options to HO containers [#3284](https://github.com/openshift/hypershift/pull/3284)
* [OCPBUGS-23511](https://issues.redhat.com/browse/OCPBUGS-23511): Remove IAM path when applying control-plane-operator ARN to VPC Endpoint Service allowed principals [#3215](https://github.com/openshift/hypershift/pull/3215)
* NO-JIRA: Update Latest Supported Version to 4.16 After Branch-out [#3302](https://github.com/openshift/hypershift/pull/3302)
* [HOSTEDCP-1343](https://issues.redhat.com/browse/HOSTEDCP-1343): docs(ibmcloud): Add HC/HCP yamls for IBM Cloud [#3287](https://github.com/openshift/hypershift/pull/3287)
* [HOSTEDCP-1273](https://issues.redhat.com/browse/HOSTEDCP-1273): Added support for OLM Disable default sources on HC creation [#3283](https://github.com/openshift/hypershift/pull/3283)
* [HOSTEDCP-1272](https://issues.redhat.com/browse/HOSTEDCP-1272): Added CLI support to create DualStack clusters using default values [#3276](https://github.com/openshift/hypershift/pull/3276)
* [OCPBUGS-20035](https://issues.redhat.com/browse/OCPBUGS-20035): Add HostedCluster false conditions sumamry when cluste… [#3190](https://github.com/openshift/hypershift/pull/3190)
* [HOSTEDCP-1336](https://issues.redhat.com/browse/HOSTEDCP-1336): bump openshift/api [#3282](https://github.com/openshift/hypershift/pull/3282)
* NO-JIRA: Fix wrong annotation on cluster deletion [#3289](https://github.com/openshift/hypershift/pull/3289)
* [OTA-855](https://issues.redhat.com/browse/OTA-855): Enable CVO to evaluate conditional updates on self-managed HyperShift deployed on OpenShift [#2807](https://github.com/openshift/hypershift/pull/2807)
* [HOSTEDCP-1318](https://issues.redhat.com/browse/HOSTEDCP-1318): correct typo for OAS internal-oauth-disabled flag [#3278](https://github.com/openshift/hypershift/pull/3278)
* NO-JIRA: Bump the golang-dependencies group with 3 updates [#3254](https://github.com/openshift/hypershift/pull/3254)
* [OCPBUGS-23126](https://issues.redhat.com/browse/OCPBUGS-23126): Fix a bug on deletion of a hostedcluster [#3234](https://github.com/openshift/hypershift/pull/3234)
* [CNV-35774](https://issues.redhat.com/browse/CNV-35774): Improve CRD defaulting for HostedCluster and NodePool [#3116](https://github.com/openshift/hypershift/pull/3116)
* [HOSTEDCP-1322](https://issues.redhat.com/browse/HOSTEDCP-1322): NodeUpgradeType defaulted by provider via CLI [#3273](https://github.com/openshift/hypershift/pull/3273)
* NO-JIRA: cmd/cluster/core/dump: Gather PodDisruptionBudgets too [#3263](https://github.com/openshift/hypershift/pull/3263)
* [CNV-34093](https://issues.redhat.com/browse/CNV-34093): kubevirt: verify release image falls within supported release window [#3184](https://github.com/openshift/hypershift/pull/3184)
* [CNV-29003](https://issues.redhat.com/browse/CNV-29003): Re-enable NodePoolUpgradeTest for KubeVirt (Replace Only) [#3189](https://github.com/openshift/hypershift/pull/3189)
* [OCPBUGS-22459](https://issues.redhat.com/browse/OCPBUGS-22459): Add prestop to konnectiviy server [#3250](https://github.com/openshift/hypershift/pull/3250)
* [HOSTEDCP-1318](https://issues.redhat.com/browse/HOSTEDCP-1318): pass internal-oauth-disable flag to openshift-apiserver when Auth type is OIDC [#3244](https://github.com/openshift/hypershift/pull/3244)
* [OCPBUGS-23397](https://issues.redhat.com/browse/OCPBUGS-23397): Set shutdown-delay-duration to 15s [#3204](https://github.com/openshift/hypershift/pull/3204)
* [HOSTEDCP-1234](https://issues.redhat.com/browse/HOSTEDCP-1234): Add KMS support on Azure clusters using Azure Key Vault [#3183](https://github.com/openshift/hypershift/pull/3183)
* [OCPBUGS-23555](https://issues.redhat.com/browse/OCPBUGS-23555): set respondWithChallenges false on CLI OAuth client [#3249](https://github.com/openshift/hypershift/pull/3249)
* [WRKLDS-925](https://issues.redhat.com/browse/WRKLDS-925): remove duplicate passing of kubeconfig into route-controller-manager [#3220](https://github.com/openshift/hypershift/pull/3220)
* [HOSTEDCP-1256](https://issues.redhat.com/browse/HOSTEDCP-1256): control-plane-pki-operator: add an operator for managing PKI [#3193](https://github.com/openshift/hypershift/pull/3193)
* [HOSTEDCP-1319](https://issues.redhat.com/browse/HOSTEDCP-1319): Fix Dependabot & Group Dependency Updates [#3246](https://github.com/openshift/hypershift/pull/3246)
* [OCPBUGS-24062](https://issues.redhat.com/browse/OCPBUGS-24062): fix(cpo): Set restart annotation on network-node-identity [#3245](https://github.com/openshift/hypershift/pull/3245)
* kubevirt, hcp, HOSTEDCP-1311: Add multinet knobs [#3235](https://github.com/openshift/hypershift/pull/3235)
* [HOSTEDCP-1312](https://issues.redhat.com/browse/HOSTEDCP-1312): Fixed update-codegen.sh to work locally [#3214](https://github.com/openshift/hypershift/pull/3214)
* [OCPBUGS-23555](https://issues.redhat.com/browse/OCPBUGS-23555): add CLI oauthclient [#3238](https://github.com/openshift/hypershift/pull/3238)
* [HOSTEDCP-1300](https://issues.redhat.com/browse/HOSTEDCP-1300): Bump k8s.io/client-go to v0.28.3 [#3191](https://github.com/openshift/hypershift/pull/3191)
* [OCPBUGS-19834](https://issues.redhat.com/browse/OCPBUGS-19834): add watch for HCP pullsecret to HCCO [#3237](https://github.com/openshift/hypershift/pull/3237)
* Update RHTAP references (main) [#3230](https://github.com/openshift/hypershift/pull/3230)
* [HOSTEDCP-1236](https://issues.redhat.com/browse/HOSTEDCP-1236): Enable public router+external DNS for azure [#3233](https://github.com/openshift/hypershift/pull/3233)
* [OCPBUGS-23921](https://issues.redhat.com/browse/OCPBUGS-23921): Use correct kubeconfig in CCM and remove CCMs access t… [#3222](https://github.com/openshift/hypershift/pull/3222)
* [OCPBUGS-22473](https://issues.redhat.com/browse/OCPBUGS-22473): Added OLMCatalogPlacement option to the CLI [#3206](https://github.com/openshift/hypershift/pull/3206)
* [OSD-19085](https://issues.redhat.com/browse/OSD-19085): New hypershift_cluster_cores metric giving the total number of worker cores [#3089](https://github.com/openshift/hypershift/pull/3089)
* [OCPBUGS-20246](https://issues.redhat.com/browse/OCPBUGS-20246): Added brackets to IPv6 KAS address on kubeconfig [#3207](https://github.com/openshift/hypershift/pull/3207)
* [OCPBUGS-23737](https://issues.redhat.com/browse/OCPBUGS-23737): remove machine-approver probes [#3227](https://github.com/openshift/hypershift/pull/3227)
* [OCPBUGS-23350](https://issues.redhat.com/browse/OCPBUGS-23350): Added IPFamilyPolicy to services exposed at the HCP in DualStack mode [#3210](https://github.com/openshift/hypershift/pull/3210)
* [OCPBUGS-23466](https://issues.redhat.com/browse/OCPBUGS-23466): Let router use svc ips [#3218](https://github.com/openshift/hypershift/pull/3218)
* [HOSTEDCP-1256](https://issues.redhat.com/browse/HOSTEDCP-1256): api/hypershift: mark more conditions with list key types [#3212](https://github.com/openshift/hypershift/pull/3212)
* [OCPBUGS-23472](https://issues.redhat.com/browse/OCPBUGS-23472): unset ServiceAccount on ignition-server-proxy [#3209](https://github.com/openshift/hypershift/pull/3209)
* [OCPBUGS-23528](https://issues.redhat.com/browse/OCPBUGS-23528): Fix error when removing finalizer on cluster destroy [#3219](https://github.com/openshift/hypershift/pull/3219)
* [HOSTEDCP-1256](https://issues.redhat.com/browse/HOSTEDCP-1256): api/v1beta1: annotate hostedcontrolplane conditions [#3211](https://github.com/openshift/hypershift/pull/3211)
* [OCPBUGS-23398](https://issues.redhat.com/browse/OCPBUGS-23398): Fixed AWS KMS Backup container args [#3216](https://github.com/openshift/hypershift/pull/3216)
* [HOSTEDCP-1311](https://issues.redhat.com/browse/HOSTEDCP-1311): kubevirt, Add support for secondary networks [#3066](https://github.com/openshift/hypershift/pull/3066)
* [HOSTEDCP-1256](https://issues.redhat.com/browse/HOSTEDCP-1256): expose cert rotation scale parameter [#3208](https://github.com/openshift/hypershift/pull/3208)
* [OCPBUGS-23314](https://issues.redhat.com/browse/OCPBUGS-23314): SetLogger for CLI [#3199](https://github.com/openshift/hypershift/pull/3199)
* [HOSTEDCP-1237](https://issues.redhat.com/browse/HOSTEDCP-1237): Retrieve RHCOS VHD image from release image [#3177](https://github.com/openshift/hypershift/pull/3177)
* [HOSTEDCP-1284](https://issues.redhat.com/browse/HOSTEDCP-1284): Bumps k8s.io/pod-security-admission to v0.28.3 [#3181](https://github.com/openshift/hypershift/pull/3181)
* [CNV-23418](https://issues.redhat.com/browse/CNV-23418): Validate jsonpatch annotation + add condition on wrong patch [#3197](https://github.com/openshift/hypershift/pull/3197)
* [HOSTEDCP-1285](https://issues.redhat.com/browse/HOSTEDCP-1285): Kas port svc cleanup [#3186](https://github.com/openshift/hypershift/pull/3186)
* [HOSTEDCP-1254](https://issues.redhat.com/browse/HOSTEDCP-1254): disable deployment of integrated oauth when authentication type is OIDC and set KAS flags [#3151](https://github.com/openshift/hypershift/pull/3151)
* [CNV-23418](https://issues.redhat.com/browse/CNV-23418): fix the jsonpath annotation implemetation [#3201](https://github.com/openshift/hypershift/pull/3201)
* [HOSTEDCP-1305](https://issues.redhat.com/browse/HOSTEDCP-1305): Simplify HostedControlPlaneNamespace().Name [#2619](https://github.com/openshift/hypershift/pull/2619)
* [OCPBUGS-22912](https://issues.redhat.com/browse/OCPBUGS-22912): Set value of elb tag to 1 instead of true [#3198](https://github.com/openshift/hypershift/pull/3198)
* [CNV-30444](https://issues.redhat.com/browse/CNV-30444): Document recommended MTU settings for KubeVirt HCP [#3129](https://github.com/openshift/hypershift/pull/3129)
* [HOSTEDCP-1306](https://issues.redhat.com/browse/HOSTEDCP-1306): Bump Golang builder to 1.20 for RHTAP dockerfile [#3196](https://github.com/openshift/hypershift/pull/3196)
* NO-JIRA: chore(deps): update rhtap references [#3192](https://github.com/openshift/hypershift/pull/3192)
* [CNV-23418](https://issues.redhat.com/browse/CNV-23418): unsupported escape hatch mechanism custom HS/KV vms [#3187](https://github.com/openshift/hypershift/pull/3187)
* [HOSTEDCP-1256](https://issues.redhat.com/browse/HOSTEDCP-1256): generate typed clients for apis [#3179](https://github.com/openshift/hypershift/pull/3179)
* NO-JIRA: *: Fix "succesfully" -> "successfully" typos [#3188](https://github.com/openshift/hypershift/pull/3188)
* [OCPBUGS-20179](https://issues.redhat.com/browse/OCPBUGS-20179): Stop defining time series for hosted clusters or node pools which do not exist anymore. [#2671](https://github.com/openshift/hypershift/pull/2671)
* [HOSTEDCP-1285](https://issues.redhat.com/browse/HOSTEDCP-1285): Consume kas Pod port by name [#3185](https://github.com/openshift/hypershift/pull/3185)
* [OCPBUGS-23083](https://issues.redhat.com/browse/OCPBUGS-23083): adding permission to CNO RBAC Calico path for network-node-identity deploy [#3172](https://github.com/openshift/hypershift/pull/3172)
* [HOSTEDCP-1256](https://issues.redhat.com/browse/HOSTEDCP-1256): Update Dependencies [#3154](https://github.com/openshift/hypershift/pull/3154)
* [HOSTEDCP-1283](https://issues.redhat.com/browse/HOSTEDCP-1283): Fixed Azure nodes not joining [#3174](https://github.com/openshift/hypershift/pull/3174)
* [HOSTEDCP-1227](https://issues.redhat.com/browse/HOSTEDCP-1227): Retrieve CAPZ image from OCP release image [#3074](https://github.com/openshift/hypershift/pull/3074)
* NO-JIRA: fix formatting for releaseImage log [#3156](https://github.com/openshift/hypershift/pull/3156)
* [HOSTEDCP-1206](https://issues.redhat.com/browse/HOSTEDCP-1206): Req serving isolation e2e enxebre [#3150](https://github.com/openshift/hypershift/pull/3150)
* [OCPBUGS-23015](https://issues.redhat.com/browse/OCPBUGS-23015): Configure HSTS for kube-apiserver [#3088](https://github.com/openshift/hypershift/pull/3088)
* [HOSTEDCP-1281](https://issues.redhat.com/browse/HOSTEDCP-1281): Fix a bug in the validating webhook [#3164](https://github.com/openshift/hypershift/pull/3164)
* [CNV-33847](https://issues.redhat.com/browse/CNV-33847): KubeVirt: create the etcd encryption key secret, if missing [#3148](https://github.com/openshift/hypershift/pull/3148)
* [HOSTEDCP-1278](https://issues.redhat.com/browse/HOSTEDCP-1278): Adjustment cluster-cidr,service-cidr to support dualstack [#3161](https://github.com/openshift/hypershift/pull/3161)
* [OCPBUGS-10423](https://issues.redhat.com/browse/OCPBUGS-10423): Update regex validation for nodepool.spec.taints.value [#3141](https://github.com/openshift/hypershift/pull/3141)
* [OCPBUGS-20161](https://issues.redhat.com/browse/OCPBUGS-20161): Stop exposing kas on 6443 private route service load balancer [#3149](https://github.com/openshift/hypershift/pull/3149)
* [OCPBUGS-16079](https://issues.redhat.com/browse/OCPBUGS-16079): No error for overlapping service network and API IP [#3067](https://github.com/openshift/hypershift/pull/3067)
* [OCPBUGS-22868](https://issues.redhat.com/browse/OCPBUGS-22868): Fixed accessTokenInactivityTimeout validation [#3157](https://github.com/openshift/hypershift/pull/3157)
* [CNV-34094](https://issues.redhat.com/browse/CNV-34094): Add validating webhook [#3132](https://github.com/openshift/hypershift/pull/3132)
* Stop defaulting aws private haproxy external port to 6443 [#3147](https://github.com/openshift/hypershift/pull/3147)
* Remove GITHUB_ACCESS_TOKEN requirement from release notes script [#3134](https://github.com/openshift/hypershift/pull/3134)
* [HOSTEDCP-1215](https://issues.redhat.com/browse/HOSTEDCP-1215): Use the same etcd snapshot for all replicas during etcd restore [#3081](https://github.com/openshift/hypershift/pull/3081)
* Bump google.golang.org/grpc from 1.53.0 to 1.56.3 in /hack/tools [#3136](https://github.com/openshift/hypershift/pull/3136)
* [OCPBUGS-20033](https://issues.redhat.com/browse/OCPBUGS-20033): Make the OLMCatalogPlacement field immutable [#3113](https://github.com/openshift/hypershift/pull/3113)
* [HOSTEDCP-1113](https://issues.redhat.com/browse/HOSTEDCP-1113): Improve NodePool CPU arch & platform check [#3072](https://github.com/openshift/hypershift/pull/3072)
* [HOSTEDCP-1253](https://issues.redhat.com/browse/HOSTEDCP-1253): bump openshift/api for new authentication config [#3135](https://github.com/openshift/hypershift/pull/3135)
* [HOSTEDCP-1229](https://issues.redhat.com/browse/HOSTEDCP-1229): Move azure cloud provider to out of tree [#3086](https://github.com/openshift/hypershift/pull/3086)
* contrib: increase HC quota to 40 [#3140](https://github.com/openshift/hypershift/pull/3140)
* [HOSTEDCP-1200](https://issues.redhat.com/browse/HOSTEDCP-1200): Remove pod exceptions from EnsureNoCrashingPods [#3138](https://github.com/openshift/hypershift/pull/3138)
* run EnsurePSANotPrivileged for TestCreateCluster only [#3137](https://github.com/openshift/hypershift/pull/3137)
* [OCPBUGS-21776](https://issues.redhat.com/browse/OCPBUGS-21776): Cluster-policy-controller: add missing RBAC for privileged namespaces PSA syncer controller [#3115](https://github.com/openshift/hypershift/pull/3115)
* [OCPBUGS-21626](https://issues.redhat.com/browse/OCPBUGS-21626): Validate accessTokenInactivityTimeout >= 300s [#3110](https://github.com/openshift/hypershift/pull/3110)
* [OCPBUGS-20246](https://issues.redhat.com/browse/OCPBUGS-20246): Added brackets to the kubeconfig server address when IPv6 [#3097](https://github.com/openshift/hypershift/pull/3097)
* Bump golang.org/x/net from 0.13.0 to 0.17.0 [#3092](https://github.com/openshift/hypershift/pull/3092)
* [OCPBUGS-22195](https://issues.redhat.com/browse/OCPBUGS-22195): Fix label selector check for CAPI provider [#3108](https://github.com/openshift/hypershift/pull/3108)
* Bump golang.org/x/net from 0.9.0 to 0.17.0 in /hack/tools [#3093](https://github.com/openshift/hypershift/pull/3093)
* Update RHTAP references [#3062](https://github.com/openshift/hypershift/pull/3062)
* [OCPBUGS-21822](https://issues.redhat.com/browse/OCPBUGS-21822): Add ign proxy label selector for LabelTopologyZone PodAntiAffinity [#3103](https://github.com/openshift/hypershift/pull/3103)
* OCPBUGS-19419 change trusted bundle volume mount for CPO [#3099](https://github.com/openshift/hypershift/pull/3099)
* Disabling unused monitoring services [#2730](https://github.com/openshift/hypershift/pull/2730)
* [OCPBUGS-18341](https://issues.redhat.com/browse/OCPBUGS-18341): change required pod anti-affinity rule to preferred rule [#3095](https://github.com/openshift/hypershift/pull/3095)
* [SDN-4062](https://issues.redhat.com/browse/SDN-4062): Revert "SDN-4042: Increase upgrade rollout timers" [#3090](https://github.com/openshift/hypershift/pull/3090)
* [CNV-31891](https://issues.redhat.com/browse/CNV-31891): Document port 80 is not supported with default ingress for KubeVirt [#3079](https://github.com/openshift/hypershift/pull/3079)
* [MULTIARCH-3760](https://issues.redhat.com/browse/MULTIARCH-3760): Rename depricated flag for PowerVS capi deployment [#3028](https://github.com/openshift/hypershift/pull/3028)
* HOSTEDCP-1051 addition of grace period for aws infra destruction [#2967](https://github.com/openshift/hypershift/pull/2967)
* [HOSTEDCP-1232](https://issues.redhat.com/browse/HOSTEDCP-1232): Add clusterName label to CAPI kubeconfig secret [#3087](https://github.com/openshift/hypershift/pull/3087)
* [OCPBUGS-19957](https://issues.redhat.com/browse/OCPBUGS-19957): Reconcile CNCC secret to CPO namespace [#3065](https://github.com/openshift/hypershift/pull/3065)
* [OCPBUGS-20105](https://issues.redhat.com/browse/OCPBUGS-20105): OCPBUGS-20109: Update the scheduler to only accept paired Nodes and check scheduler HCs has two Nodes [#3077](https://github.com/openshift/hypershift/pull/3077)
* [OCPBUGS-16189](https://issues.redhat.com/browse/OCPBUGS-16189), [OCPBUGS-19746](https://issues.redhat.com/browse/OCPBUGS-19746): Added network validations [#3047](https://github.com/openshift/hypershift/pull/3047)
* [CNV-30697](https://issues.redhat.com/browse/CNV-30697): Dedicated CPU for KubeVirt node pool [#3048](https://github.com/openshift/hypershift/pull/3048)
* Add record rules for kas qps [#2858](https://github.com/openshift/hypershift/pull/2858)
* Fix a typo in KubeVirt troubleshooting script [#3073](https://github.com/openshift/hypershift/pull/3073)
* [HOSTEDCP-1184](https://issues.redhat.com/browse/HOSTEDCP-1184): Document IPv6/IPv4/DualStack deployments for Hypershift in Baremetal [#3008](https://github.com/openshift/hypershift/pull/3008)
* Add aws-ebs-csi-driver-operator to allowed NeedManagementKASAccessLab… [#3076](https://github.com/openshift/hypershift/pull/3076)
* Upate azure docs [#3075](https://github.com/openshift/hypershift/pull/3075)
* [OCPBUGS-13348](https://issues.redhat.com/browse/OCPBUGS-13348): Hypershift Audit configuration not working (part2). [#3014](https://github.com/openshift/hypershift/pull/3014)
* [OCPBUGS-11939](https://issues.redhat.com/browse/OCPBUGS-11939), [OCPBUGS-18128](https://issues.redhat.com/browse/OCPBUGS-18128), [OCPBUGS-18460](https://issues.redhat.com/browse/OCPBUGS-18460), [OCPBUGS-18602](https://issues.redhat.com/browse/OCPBUGS-18602), [OCPBUGS-18879](https://issues.redhat.com/browse/OCPBUGS-18879): Support Disconnected HCP [#2950](https://github.com/openshift/hypershift/pull/2950)
* Add private link perms to docs and clarify log message [#3063](https://github.com/openshift/hypershift/pull/3063)
* [OCPBUGS-14819](https://issues.redhat.com/browse/OCPBUGS-14819): Add konnectivity-proxy container to CNO [#2974](https://github.com/openshift/hypershift/pull/2974)
* [OCPBUGS-19784](https://issues.redhat.com/browse/OCPBUGS-19784): Update capi agent version for CRD label [#3050](https://github.com/openshift/hypershift/pull/3050)
* KubeVirt platform troubleshooting documentation [#3055](https://github.com/openshift/hypershift/pull/3055)
* Remove EgressFirewall Creation in HCP namespace [#3049](https://github.com/openshift/hypershift/pull/3049)
* [HOSTEDCP-1212](https://issues.redhat.com/browse/HOSTEDCP-1212): Bump Golang to v1.20 [#3038](https://github.com/openshift/hypershift/pull/3038)
* Update RHTAP references (main) [#3054](https://github.com/openshift/hypershift/pull/3054)
* [OCPBUGS-15215](https://issues.redhat.com/browse/OCPBUGS-15215): OAuth template config in HostedCluter.configuration.ouath is not honored in HyperShift [#3041](https://github.com/openshift/hypershift/pull/3041)
* Update RHTAP references (main) [#3042](https://github.com/openshift/hypershift/pull/3042)
* [OCPBUGS-19271](https://issues.redhat.com/browse/OCPBUGS-19271): Updating hypershift images to be consistent with ART [#3017](https://github.com/openshift/hypershift/pull/3017)
* Update kubevirt csi driver deployment with proper timeouts [#3044](https://github.com/openshift/hypershift/pull/3044)
* [OCPBUGS-19516](https://issues.redhat.com/browse/OCPBUGS-19516): Upgrade agent APIs to v1beta1 [#3022](https://github.com/openshift/hypershift/pull/3022)
* [kubevirt platform] Detect Suboptimal MTU and raise HostedCluster Condition accordingly [#2976](https://github.com/openshift/hypershift/pull/2976)
* [OCPBUGS-19674](https://issues.redhat.com/browse/OCPBUGS-19674): Report correct port when API exposed via route [#3037](https://github.com/openshift/hypershift/pull/3037)
* [OCPBUGS-13829](https://issues.redhat.com/browse/OCPBUGS-13829): set accesstoken-inactivity-timeout flag to openshift-oauth-apiserver [#3025](https://github.com/openshift/hypershift/pull/3025)
* [HOSTEDCP-1209](https://issues.redhat.com/browse/HOSTEDCP-1209): set ubi Containerfile labels [#3039](https://github.com/openshift/hypershift/pull/3039)
* Use example versions for KubeVirt platform that are supported [#3027](https://github.com/openshift/hypershift/pull/3027)
* [OCPBUGS-17669](https://issues.redhat.com/browse/OCPBUGS-17669): Remove cluster name validation from HCC [#3036](https://github.com/openshift/hypershift/pull/3036)
* KubeVirt: document VMs logs collection [#3031](https://github.com/openshift/hypershift/pull/3031)
* Update RHTAP references (main) [#3033](https://github.com/openshift/hypershift/pull/3033)
* [OCPBUGS-19381](https://issues.redhat.com/browse/OCPBUGS-19381): Let NodePools skip min version when SkipReleaseImageValidation is in HC [#3024](https://github.com/openshift/hypershift/pull/3024)
* [OCPBUGS-19346](https://issues.redhat.com/browse/OCPBUGS-19346): set default deploymentconfig params on AWS CCM [#3021](https://github.com/openshift/hypershift/pull/3021)
* [ACM-7278](https://issues.redhat.com/browse/ACM-7278): Remove marking pull secret as required in hcp cli [#3013](https://github.com/openshift/hypershift/pull/3013)
* [OCPBUGS-19332](https://issues.redhat.com/browse/OCPBUGS-19332): Use impersonated client for fetching the localhost-kubeconfig from ma… [#3011](https://github.com/openshift/hypershift/pull/3011)
* Relax network policy e2e for private [#3020](https://github.com/openshift/hypershift/pull/3020)
* Dump KubeVirt pod logs [#3000](https://github.com/openshift/hypershift/pull/3000)
* Update RHTAP references [#2995](https://github.com/openshift/hypershift/pull/2995)
* [OCPBUGS-19014](https://issues.redhat.com/browse/OCPBUGS-19014): Apply private-router network policy only if running OCP 4.14 [#3012](https://github.com/openshift/hypershift/pull/3012)
* Validate KubeVirt platform required versioning [#2948](https://github.com/openshift/hypershift/pull/2948)
* [OCPBUGS-18720](https://issues.redhat.com/browse/OCPBUGS-18720): amend OLM catalogs ImageStream according to annotation [#3001](https://github.com/openshift/hypershift/pull/3001)
* [OCPBUGS-17906](https://issues.redhat.com/browse/OCPBUGS-17906): reconcile Authentication global config [#3009](https://github.com/openshift/hypershift/pull/3009)
* feat: add _id label to all hypershift operator metrics [#2991](https://github.com/openshift/hypershift/pull/2991)
* [OCPBUGS-18122](https://issues.redhat.com/browse/OCPBUGS-18122): Rename isUpgradeable to isUpgrading according to its return value [#2955](https://github.com/openshift/hypershift/pull/2955)
* [OCPBUGS-18762](https://issues.redhat.com/browse/OCPBUGS-18762): unset ControlPlaneReleaseImage on HCP when ControlPlaneRelease is unset on HC [#3004](https://github.com/openshift/hypershift/pull/3004)
* [OCPBUGS-18754](https://issues.redhat.com/browse/OCPBUGS-18754): tuned DS should not use controlPlaneReleaseImage [#3003](https://github.com/openshift/hypershift/pull/3003)
* [HYPBLD-99](https://issues.redhat.com/browse/HYPBLD-99): enable CGO_ENABLED for building FIPS compliant images [#2997](https://github.com/openshift/hypershift/pull/2997)
* e2e: fixed gomega created from parent test context [#2987](https://github.com/openshift/hypershift/pull/2987)
* bump HO supported version for 4.15 [#2927](https://github.com/openshift/hypershift/pull/2927)
* [HOSTEDCP-1075](https://issues.redhat.com/browse/HOSTEDCP-1075): Document instructions for recovering etcd cluster from lost quorum [#2952](https://github.com/openshift/hypershift/pull/2952)
* [HOSTEDCP-1185](https://issues.redhat.com/browse/HOSTEDCP-1185): Add flag to create a single NAT gateway [#2984](https://github.com/openshift/hypershift/pull/2984)
* Dump kubevirt external infra clusters [#2992](https://github.com/openshift/hypershift/pull/2992)
* [OCPBUGS-18568](https://issues.redhat.com/browse/OCPBUGS-18568): Use MCO and CCO image references when looking up mappings [#2985](https://github.com/openshift/hypershift/pull/2985)
* [HOSTEDCP-591](https://issues.redhat.com/browse/HOSTEDCP-591): Amend OLM catalog IS according to OpenShiftImageRegistryOverrides [#2947](https://github.com/openshift/hypershift/pull/2947)
* e2e: skip CNO pod restart check [#2986](https://github.com/openshift/hypershift/pull/2986)
* [HOSTEDCP-1133](https://issues.redhat.com/browse/HOSTEDCP-1133): Signal NodePool rolling upgrade because of platform changes [#2973](https://github.com/openshift/hypershift/pull/2973)
* [OCPBUGS-18127](https://issues.redhat.com/browse/OCPBUGS-18127): Enable caching of Unstructured Objects in HO [#2988](https://github.com/openshift/hypershift/pull/2988)
* e2e: run Ensure functions after Main part of test [#2983](https://github.com/openshift/hypershift/pull/2983)
* [OCPBUGS-18127](https://issues.redhat.com/browse/OCPBUGS-18127): Ensure machineTemplate name length respects RFC1123 spec [#2975](https://github.com/openshift/hypershift/pull/2975)
* [ACM-6435](https://issues.redhat.com/browse/ACM-6435): add pausedUntil create cluster option in CLI [#2965](https://github.com/openshift/hypershift/pull/2965)
* [OCPBUGS-7840](https://issues.redhat.com/browse/OCPBUGS-7840): Untangle kas port [#2964](https://github.com/openshift/hypershift/pull/2964)
* [OCPBUGS-18399](https://issues.redhat.com/browse/OCPBUGS-18399): Preserve mirror order when serializing ICSP to env [#2977](https://github.com/openshift/hypershift/pull/2977)
* [OCPBUGS-18336](https://issues.redhat.com/browse/OCPBUGS-18336): make konnectivity routes roundrobin [#2971](https://github.com/openshift/hypershift/pull/2971)
* Use the correct pull secret for HCP KubeVirt components [#2919](https://github.com/openshift/hypershift/pull/2919)
* Disable nto inplace test for kubevirt [#2980](https://github.com/openshift/hypershift/pull/2980)
* [OCPBUGS-18438](https://issues.redhat.com/browse/OCPBUGS-18438): Properly format IPv6 address when proxying it through Konnectivity [#2969](https://github.com/openshift/hypershift/pull/2969)
* [OCPBUGS-18127](https://issues.redhat.com/browse/OCPBUGS-18127): Trigger a rolling upgrade on NodePool .spec.platfrom changes [#2956](https://github.com/openshift/hypershift/pull/2956)
* [HOSTEDCP-1156](https://issues.redhat.com/browse/HOSTEDCP-1156): Add defaulting webhook to installation and notes [#2922](https://github.com/openshift/hypershift/pull/2922)
* [HOSTEDCP-979](https://issues.redhat.com/browse/HOSTEDCP-979): Re-enable nodepool in-place upgrade tests [#2960](https://github.com/openshift/hypershift/pull/2960)
* Add a default value (32Gi) for nodepool in `create nodepool kubevirt` command [#2940](https://github.com/openshift/hypershift/pull/2940)
* [OCPBUGS-16221](https://issues.redhat.com/browse/OCPBUGS-16221): Adds trust bundle to ignition-server when configured in HC [#2819](https://github.com/openshift/hypershift/pull/2819)
* Avoid creating tar archive if --archive-dump=false [#2963](https://github.com/openshift/hypershift/pull/2963)
* OCPBUGS-3873 adding rbac for UserOAuthAccessToken [#2962](https://github.com/openshift/hypershift/pull/2962)
* HOSTEDCP-1178 fix limited support label key [#2958](https://github.com/openshift/hypershift/pull/2958)
* [OCPBUGS-18065](https://issues.redhat.com/browse/OCPBUGS-18065): enable aws-pod-identity-webhook on AWS [#2957](https://github.com/openshift/hypershift/pull/2957)
* [OCPBUGS-18308](https://issues.redhat.com/browse/OCPBUGS-18308): Do not use mgmt cluster ICSP to mutate CCO image in KAS pod [#2966](https://github.com/openshift/hypershift/pull/2966)
* [OCPBUGS-18266](https://issues.redhat.com/browse/OCPBUGS-18266): fix Progressing condition when ControlPlaneRelease is set [#2959](https://github.com/openshift/hypershift/pull/2959)
* fix(ho): Restore match label selector behavior [#2951](https://github.com/openshift/hypershift/pull/2951)
* [OCPBUGS-18072](https://issues.redhat.com/browse/OCPBUGS-18072): Set emptyDir storage for the image registry only on initial time for None and Kubevirt platform [#2895](https://github.com/openshift/hypershift/pull/2895)
* [OCPBUGS-18024](https://issues.redhat.com/browse/OCPBUGS-18024): Set Arch to amd64 for HCP NodePool Create [#2941](https://github.com/openshift/hypershift/pull/2941)
* chore(deps): update rhtap references (main) [#2920](https://github.com/openshift/hypershift/pull/2920)
* [OCPBUGS-16813](https://issues.redhat.com/browse/OCPBUGS-16813): switch konnectivity-server to additional container in KAS pods [#2942](https://github.com/openshift/hypershift/pull/2942)
* Updating hostedcluster controller to stop using deprecated flags [#2946](https://github.com/openshift/hypershift/pull/2946)
* [OCPBUGS-17827](https://issues.redhat.com/browse/OCPBUGS-17827): e2e: remove private-router from NeedManagementKASAccessLabel allowlist [#2939](https://github.com/openshift/hypershift/pull/2939)
* [MULTIARCH-3709](https://issues.redhat.com/browse/MULTIARCH-3709): PowerVS - Add reuse resource flags to e2e test [#2902](https://github.com/openshift/hypershift/pull/2902)
* [MULTIARCH-3478](https://issues.redhat.com/browse/MULTIARCH-3478): Minor bug fix on PowerVS infra [#2451](https://github.com/openshift/hypershift/pull/2451)
* [OCPBUGS-18069](https://issues.redhat.com/browse/OCPBUGS-18069): Ensure load balancers are not exist before declaring load balancers are cleaned up [#2887](https://github.com/openshift/hypershift/pull/2887)
* [MULTIARCH-3708](https://issues.redhat.com/browse/MULTIARCH-3708): PowerVS - Fix cluster deletion when existing resources passed [#2867](https://github.com/openshift/hypershift/pull/2867)
* [MGMT-15368](https://issues.redhat.com/browse/MGMT-15368): Document scaling down NodePools [#2944](https://github.com/openshift/hypershift/pull/2944)
* [OCPBUGS-13348](https://issues.redhat.com/browse/OCPBUGS-13348): Hypershift Audit configuration not working. [#2945](https://github.com/openshift/hypershift/pull/2945)
* [TRT-1202](https://issues.redhat.com/browse/TRT-1202): set SkipReleaseImageValidation annotation properly on e2e clusters [#2943](https://github.com/openshift/hypershift/pull/2943)
* [OCPBUGS-17678](https://issues.redhat.com/browse/OCPBUGS-17678): Reconcile cloud credentials configuration to hosted cluster [#2937](https://github.com/openshift/hypershift/pull/2937)
* Add e2e test for etcd member recovery [#2930](https://github.com/openshift/hypershift/pull/2930)
* [OCPBUGS-17827](https://issues.redhat.com/browse/OCPBUGS-17827): remove NeedManagementKASAccessLabel from router pods [#2934](https://github.com/openshift/hypershift/pull/2934)
* [OCPBUGS-17985](https://issues.redhat.com/browse/OCPBUGS-17985): Handle empty mirrorImage result for ignition disconnected registry [#2935](https://github.com/openshift/hypershift/pull/2935)
* [OCPBUGS-17827](https://issues.redhat.com/browse/OCPBUGS-17827): e2e: refactor checkPodsHaveLabel to be allowlist rather than exact match [#2928](https://github.com/openshift/hypershift/pull/2928)
* [OCPBUGS-16813](https://issues.redhat.com/browse/OCPBUGS-16813): do not hardcode ignition-server-proxy replicas [#2933](https://github.com/openshift/hypershift/pull/2933)
* fix(ho): Restore match label selector behavior [#2893](https://github.com/openshift/hypershift/pull/2893)
* [TRT-1202](https://issues.redhat.com/browse/TRT-1202): add annotation to skip release image validation [#2929](https://github.com/openshift/hypershift/pull/2929)
* [OCPBUGS-17812](https://issues.redhat.com/browse/OCPBUGS-17812): Update Etcd health check to mirror standalone etcd [#2918](https://github.com/openshift/hypershift/pull/2918)
* [STOR-1443](https://issues.redhat.com/browse/STOR-1443): Sync `05_operator_role-hypershift.yaml` manifest from cluster-csi-snapsht-controller-operator [#2915](https://github.com/openshift/hypershift/pull/2915)
* [HOSTEDCP-1065](https://issues.redhat.com/browse/HOSTEDCP-1065): CNO deployed hosted-cluster-kubecfg-setup initContainers use CPR image [#2917](https://github.com/openshift/hypershift/pull/2917)
* [HOSTEDCP-1001](https://issues.redhat.com/browse/HOSTEDCP-1001): Image registryOverride included in the image metadata extraction flow [#2909](https://github.com/openshift/hypershift/pull/2909)
* [OCPBUGS-17669](https://issues.redhat.com/browse/OCPBUGS-17669): Validate HostedCluster name against RFC1123 [#2914](https://github.com/openshift/hypershift/pull/2914)
* [HOSTEDCP-1075](https://issues.redhat.com/browse/HOSTEDCP-1075): Document how to recover single etcd member [#2916](https://github.com/openshift/hypershift/pull/2916)
* [HOSTEDCP-1085](https://issues.redhat.com/browse/HOSTEDCP-1085): Create a monitoring dashboard per HostedCluster [#2907](https://github.com/openshift/hypershift/pull/2907)
* chore(deps): update rhtap references (main) [#2903](https://github.com/openshift/hypershift/pull/2903)
* [HOSTEDCP-1063](https://issues.redhat.com/browse/HOSTEDCP-1063): Account for guest webhook URLs without a port [#2898](https://github.com/openshift/hypershift/pull/2898)
* [OCPBUGS-17680](https://issues.redhat.com/browse/OCPBUGS-17680): Remove immutable note from PullSecret [#2910](https://github.com/openshift/hypershift/pull/2910)
* Revert "HOSTEDCP-1001: Image registryOverride included in the image metadata extraction flow" [#2908](https://github.com/openshift/hypershift/pull/2908)
* [OCPBUGS-16076](https://issues.redhat.com/browse/OCPBUGS-16076): Validate HostedCluster name against RFC1123 in CLI [#2906](https://github.com/openshift/hypershift/pull/2906)
* [OCPBUGS-15331](https://issues.redhat.com/browse/OCPBUGS-15331), [OCPBUGS-16049](https://issues.redhat.com/browse/OCPBUGS-16049): Enable AdvertiseAddress dual stack and IPv6 support and added the changes to be included in the certificates [#2779](https://github.com/openshift/hypershift/pull/2779)
* [HOSTEDCP-1081](https://issues.redhat.com/browse/HOSTEDCP-1081): Perform etcd recovery when etcd member data is lost [#2900](https://github.com/openshift/hypershift/pull/2900)
* [SDN-4057](https://issues.redhat.com/browse/SDN-4057): Pass ControlPlane image to OVN [#2896](https://github.com/openshift/hypershift/pull/2896)
* test: e2e: remove SingleReplica etcd chaos test [#2901](https://github.com/openshift/hypershift/pull/2901)
* Allow overriding pod security admission label [#2886](https://github.com/openshift/hypershift/pull/2886)
* [HOSTEDCP-1146](https://issues.redhat.com/browse/HOSTEDCP-1146): cpo: use CPO spec container image if it is a sha256 reference [#2899](https://github.com/openshift/hypershift/pull/2899)
* [HOSTEDCP-1022](https://issues.redhat.com/browse/HOSTEDCP-1022): Set Arch to amd64 [#2897](https://github.com/openshift/hypershift/pull/2897)
* Re-introducing defaulting webhook for self managed HCP [#2892](https://github.com/openshift/hypershift/pull/2892)
* fix-CNV-30260: KubeVirt: fix failed conformance test [#2891](https://github.com/openshift/hypershift/pull/2891)
* [OCPBUGS-16298](https://issues.redhat.com/browse/OCPBUGS-16298): Prevent the kube-apiserver from connecting to the managment kas [#2888](https://github.com/openshift/hypershift/pull/2888)
* [HOSTEDCP-1001](https://issues.redhat.com/browse/HOSTEDCP-1001): Image registryOverride included in the image metadata extraction flow [#2820](https://github.com/openshift/hypershift/pull/2820)
* [HOSTEDCP-1046](https://issues.redhat.com/browse/HOSTEDCP-1046), [HOSTEDCP-1102](https://issues.redhat.com/browse/HOSTEDCP-1102): Follow-on Items [#2847](https://github.com/openshift/hypershift/pull/2847)
* Revert "[HOSTEDCP-1041] Defaulting webhook for self managed HCP" [#2889](https://github.com/openshift/hypershift/pull/2889)
* [OCPBUGS-17446](https://issues.redhat.com/browse/OCPBUGS-17446): Set advertise-address in HCP etcd to resolvable name [#2884](https://github.com/openshift/hypershift/pull/2884)
* Defaulting webhook for self managed HCP [#2864](https://github.com/openshift/hypershift/pull/2864)
* [STOR-1432](https://issues.redhat.com/browse/STOR-1432): cso: add envvars for CSI driver controller images [#2882](https://github.com/openshift/hypershift/pull/2882)
* [HOSTEDCP-1025](https://issues.redhat.com/browse/HOSTEDCP-1025): Add HCP CLI Command to Create a NodePool on AWS [#2852](https://github.com/openshift/hypershift/pull/2852)
* [SDN-4042](https://issues.redhat.com/browse/SDN-4042): Increase upgrade rollout timers [#2881](https://github.com/openshift/hypershift/pull/2881)
* skip olm-collect-profiles in EnsureComponentsHaveNeedManagementKASAccessLabel [#2874](https://github.com/openshift/hypershift/pull/2874)
* [HOSTEDCP-1064](https://issues.redhat.com/browse/HOSTEDCP-1064): Add egress policy for private-router [#2792](https://github.com/openshift/hypershift/pull/2792)
* [HOSTEDCP-1121](https://issues.redhat.com/browse/HOSTEDCP-1121): Ensure SG reconciliation for aws endpoint [#2872](https://github.com/openshift/hypershift/pull/2872)
* chore(deps): update rhtap references [#2865](https://github.com/openshift/hypershift/pull/2865)
* [HOSTEDCP-1065](https://issues.redhat.com/browse/HOSTEDCP-1065): add ControlPlaneImage API for provider-side HCP updates [#2848](https://github.com/openshift/hypershift/pull/2848)
* [HOSTEDCP-1063](https://issues.redhat.com/browse/HOSTEDCP-1063): Disallow webhooks URLs targeting control plane services [#2775](https://github.com/openshift/hypershift/pull/2775)
* [OCPBUGS-17374](https://issues.redhat.com/browse/OCPBUGS-17374): Fast specific dockerignore [#2879](https://github.com/openshift/hypershift/pull/2879)
* Kubevirt how-to docs updates [#2875](https://github.com/openshift/hypershift/pull/2875)
* Fix nodepool upgrade docs link [#2880](https://github.com/openshift/hypershift/pull/2880)
* [OCPBUGS-17171](https://issues.redhat.com/browse/OCPBUGS-17171): Update OLM catalog image tags [#2877](https://github.com/openshift/hypershift/pull/2877)
* [HOSTEDCP-1029](https://issues.redhat.com/browse/HOSTEDCP-1029): Add HCP CLI Command to Destroy a Cluster on AWS [#2853](https://github.com/openshift/hypershift/pull/2853)
* Add workload management annotation to kubevirt-csi daemonset [#2840](https://github.com/openshift/hypershift/pull/2840)
* [WRKLDS-730](https://issues.redhat.com/browse/WRKLDS-730): use default /healthz path for readiness probe in OCM and RCM [#2873](https://github.com/openshift/hypershift/pull/2873)
* Add api and cli validation for kubevirt volume mode [#2862](https://github.com/openshift/hypershift/pull/2862)
* [HOSTEDCP-1079](https://issues.redhat.com/browse/HOSTEDCP-1079): RHTAP HO Containerfile [#2857](https://github.com/openshift/hypershift/pull/2857)
* [OCPBUGS-16770](https://issues.redhat.com/browse/OCPBUGS-16770): add need-management-kas-access label to olm-collect-profiles pods [#2854](https://github.com/openshift/hypershift/pull/2854)
* [MULTIARCH-3684](https://issues.redhat.com/browse/MULTIARCH-3684): PowerVS - Upgrade capi to use v1beta2 APIs [#2831](https://github.com/openshift/hypershift/pull/2831)
* [HOSTEDCP-1046](https://issues.redhat.com/browse/HOSTEDCP-1046): Add ImageDigestMirrorSet to Config API comment [#2868](https://github.com/openshift/hypershift/pull/2868)
* [MULTIARCH-3683](https://issues.redhat.com/browse/MULTIARCH-3683): Add dev flags in destroy cluster powervs command [#2764](https://github.com/openshift/hypershift/pull/2764)
* kubevirt: Reconcile EgressFirewall only for ovn-k [#2849](https://github.com/openshift/hypershift/pull/2849)
* [HOSTEDCP-1046](https://issues.redhat.com/browse/HOSTEDCP-1046): Add IDMS to the list of valid config manifests [#2837](https://github.com/openshift/hypershift/pull/2837)
* [OCPBUGS-17059](https://issues.redhat.com/browse/OCPBUGS-17059): Add volume mode to kubevirt root volume api [#2860](https://github.com/openshift/hypershift/pull/2860)
* Update RHTAP references (main) [#2832](https://github.com/openshift/hypershift/pull/2832)
* [OCPBUGS-16809](https://issues.redhat.com/browse/OCPBUGS-16809): Configured IgnitionProxy to support IPv4 and IPv6 [#2850](https://github.com/openshift/hypershift/pull/2850)
* [OCPBUGS-14163](https://issues.redhat.com/browse/OCPBUGS-14163): Fixed ETCD to work in Ipv6 and Dual stack envs [#2846](https://github.com/openshift/hypershift/pull/2846)
* [HOSTEDCP-1112](https://issues.redhat.com/browse/HOSTEDCP-1112): Add config to set creation frequency of RHTAP PRs [#2838](https://github.com/openshift/hypershift/pull/2838)
* [HOSTEDCP-1020](https://issues.redhat.com/browse/HOSTEDCP-1020): Remove name as a persistent flag required field [#2836](https://github.com/openshift/hypershift/pull/2836)
* [OCPBUGS-16232](https://issues.redhat.com/browse/OCPBUGS-16232): skip z-stream version check when upgrade is forced [#2823](https://github.com/openshift/hypershift/pull/2823)
* [OCPBUGS-16033](https://issues.redhat.com/browse/OCPBUGS-16033): ClusterNetwork's HostPrefix validation for dual stack [#2795](https://github.com/openshift/hypershift/pull/2795)
* [OCPBUGS-14783](https://issues.redhat.com/browse/OCPBUGS-14783): Fix NetworkPolicy to work over IPv4 and IPv6 [#2704](https://github.com/openshift/hypershift/pull/2704)
* Revert "HOSTEDCP-710: Make ImageContentSource immutable" [#2829](https://github.com/openshift/hypershift/pull/2829)
* Update RHTAP references (main) [#2814](https://github.com/openshift/hypershift/pull/2814)
* [HOSTEDCP-1062](https://issues.redhat.com/browse/HOSTEDCP-1062): Make CAPI pod selector backward compatible [#2825](https://github.com/openshift/hypershift/pull/2825)
* [HOSTEDCP-1093](https://issues.redhat.com/browse/HOSTEDCP-1093): Add default flags to HCP create cluster CLI cmd [#2802](https://github.com/openshift/hypershift/pull/2802)
* Revert "HOSTEDCP-1094: e2e autoscaler balancing similar node groups" [#2828](https://github.com/openshift/hypershift/pull/2828)
* [HOSTEDCP-1090](https://issues.redhat.com/browse/HOSTEDCP-1090): Use statically configured haproxy for router [#2778](https://github.com/openshift/hypershift/pull/2778)
* [HOSTEDCP-1046](https://issues.redhat.com/browse/HOSTEDCP-1046): Allow HCP Specification to Support ICSP & IDMS [#2720](https://github.com/openshift/hypershift/pull/2720)
* [HOSTEDCP-710](https://issues.redhat.com/browse/HOSTEDCP-710): Make ImageContentSource immutable [#2815](https://github.com/openshift/hypershift/pull/2815)
* [OCPBUGS-11835](https://issues.redhat.com/browse/OCPBUGS-11835): Add missing probes to two services [#2430](https://github.com/openshift/hypershift/pull/2430)
* [HOSTEDCP-1094](https://issues.redhat.com/browse/HOSTEDCP-1094): e2e autoscaler balancing similar node groups [#2808](https://github.com/openshift/hypershift/pull/2808)
* [OCPBUGS-16113](https://issues.redhat.com/browse/OCPBUGS-16113): unshare ignition-server reconciliation between HO and CPO [#2817](https://github.com/openshift/hypershift/pull/2817)
* [OCPBUGS-11939](https://issues.redhat.com/browse/OCPBUGS-11939): Fix additional issues with OCPBUGS-11939 [#2804](https://github.com/openshift/hypershift/pull/2804)
* [OCPBUGS-16135](https://issues.redhat.com/browse/OCPBUGS-16135): fix deletion bug when hostedzone is already deleted [#2811](https://github.com/openshift/hypershift/pull/2811)
* OCPBUGS-14862 Improve clarity around hypershift operator permissions [#2782](https://github.com/openshift/hypershift/pull/2782)
* [HOSTEDCP-1062](https://issues.redhat.com/browse/HOSTEDCP-1062): Management kas policy [#2796](https://github.com/openshift/hypershift/pull/2796)
* Revert "HOSTEDCP-1062: Add management cluster KAS network policy" [#2793](https://github.com/openshift/hypershift/pull/2793)
* [HOSTEDCP-1020](https://issues.redhat.com/browse/HOSTEDCP-1020): Add pullSecret & NodePool replica flags to HCP CLI [#2774](https://github.com/openshift/hypershift/pull/2774)
* [HOSTEDCP-1101](https://issues.redhat.com/browse/HOSTEDCP-1101): Add snyk-secret HO RHTAP scripts [#2788](https://github.com/openshift/hypershift/pull/2788)
* [OCPBUGS-15991](https://issues.redhat.com/browse/OCPBUGS-15991): use ignition-proxy Service to populate ignitionEndpoint with strategy NodePort [#2787](https://github.com/openshift/hypershift/pull/2787)
* [OCPBUGS-15769](https://issues.redhat.com/browse/OCPBUGS-15769): Include hypershift specific labels to be ignored by similar autoscaler groups [#2784](https://github.com/openshift/hypershift/pull/2784)
* Add management cluster KAS network policy [#2717](https://github.com/openshift/hypershift/pull/2717)
* [HOSTEDCP-1019](https://issues.redhat.com/browse/HOSTEDCP-1019): Add create cluster for Agent for HCP CLI [#2754](https://github.com/openshift/hypershift/pull/2754)
* [CNV-30407](https://issues.redhat.com/browse/CNV-30407): KubeVirt Platform: Support NetworkInterfaceMultiQueue [#2760](https://github.com/openshift/hypershift/pull/2760)
* [HOSTEDCP-1030](https://issues.redhat.com/browse/HOSTEDCP-1030): Add destroy cluster for Agent for HCP CLI [#2756](https://github.com/openshift/hypershift/pull/2756)
* [OCPBUGS-15594](https://issues.redhat.com/browse/OCPBUGS-15594): Get valid arch image for cluster-config-operator [#2753](https://github.com/openshift/hypershift/pull/2753)
* kubevirt: Annotate VMs to be live migratable [#2772](https://github.com/openshift/hypershift/pull/2772)
* Revert "Merge pull request #2770 from dharaneeshvrd/upgrade-capi-ibmcloud [#2776](https://github.com/openshift/hypershift/pull/2776)
* [MULTIARCH-3684](https://issues.redhat.com/browse/MULTIARCH-3684): PowerVS - Upgrade capi to use v1beta2 APIs [#2770](https://github.com/openshift/hypershift/pull/2770)
* [OCPBUGS-14862](https://issues.redhat.com/browse/OCPBUGS-14862): Reject VPCE Connections during VPCE Service cleanup [#2700](https://github.com/openshift/hypershift/pull/2700)
* Update RHTAP references [#2768](https://github.com/openshift/hypershift/pull/2768)
* [HOSTEDCP-1023](https://issues.redhat.com/browse/HOSTEDCP-1023): Add create NodePool for Agent for HCP CLI [#2755](https://github.com/openshift/hypershift/pull/2755)
* [HOSTEDCP-1061](https://issues.redhat.com/browse/HOSTEDCP-1061): Implement dedicated request serving nodes for HostedClusters [#2722](https://github.com/openshift/hypershift/pull/2722)
* [OCPBUGS-15769](https://issues.redhat.com/browse/OCPBUGS-15769): Set --balance-similar-node-groups for autoscaler [#2769](https://github.com/openshift/hypershift/pull/2769)
* Leader election config update. [#2282](https://github.com/openshift/hypershift/pull/2282)
* [OCPBUGS-15723](https://issues.redhat.com/browse/OCPBUGS-15723): Let getMachinesForNodePool return machines ordered by creation Timestamp [#2766](https://github.com/openshift/hypershift/pull/2766)
* Fix KAS HealthCheck for non DNS-Based ingress points in LB service [#2765](https://github.com/openshift/hypershift/pull/2765)
* Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible [#2741](https://github.com/openshift/hypershift/pull/2741)
* Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible in /hack/tools [#2740](https://github.com/openshift/hypershift/pull/2740)
* Bump google.golang.org/protobuf from 1.29.0 to 1.29.1 in /hack/tools [#2737](https://github.com/openshift/hypershift/pull/2737)
* OCPBUGS-12208 ensureExists pullSecret resource reconciliation strategy [#2732](https://github.com/openshift/hypershift/pull/2732)
* Bump github.com/coreos/ignition/v2 from 2.10.1 to 2.14.0 [#2739](https://github.com/openshift/hypershift/pull/2739)
* Bump github.com/docker/docker from 23.0.1+incompatible to 23.0.3+incompatible in /hack/tools [#2738](https://github.com/openshift/hypershift/pull/2738)
* Remove hardcoded AWS CI References [#2742](https://github.com/openshift/hypershift/pull/2742)
* [TRT-1118](https://issues.redhat.com/browse/TRT-1118): Remove DisableStrictZoneCheck from AWS CCM config [#2757](https://github.com/openshift/hypershift/pull/2757)
* Update RHTAP references [#2750](https://github.com/openshift/hypershift/pull/2750)
* add OWNERS for new ci-tooling area label [#2743](https://github.com/openshift/hypershift/pull/2743)
* Add production cli (hcp) to dockerfile [#2747](https://github.com/openshift/hypershift/pull/2747)
* feat: Enable priority class override [#2661](https://github.com/openshift/hypershift/pull/2661)
* test/e2e: retry configmap create in etcd chaos tests [#2746](https://github.com/openshift/hypershift/pull/2746)
* [OCPBUGS-14578](https://issues.redhat.com/browse/OCPBUGS-14578): Set allocate-node-cidrs to false in the cluster-kube-controller-manager [#2731](https://github.com/openshift/hypershift/pull/2731)
* Revert "HOSTEDCP-1016: Validate publishing strategies" [#2733](https://github.com/openshift/hypershift/pull/2733)
* [HOSTEDCP-1027](https://issues.redhat.com/browse/HOSTEDCP-1027): Add Create kubeconfig for HCP CLI [#2719](https://github.com/openshift/hypershift/pull/2719)
* [HOSTEDCP-1016](https://issues.redhat.com/browse/HOSTEDCP-1016): Validate publishing strategies [#2651](https://github.com/openshift/hypershift/pull/2651)
* KubeVirt Platform documentation for Advanced Storage Configurations and External Infrastructure [#2712](https://github.com/openshift/hypershift/pull/2712)
* Follow up to PR comments on #2642 [#2690](https://github.com/openshift/hypershift/pull/2690)
* [HOSTEDCP-1067](https://issues.redhat.com/browse/HOSTEDCP-1067): Add dependabot dependency management [#2708](https://github.com/openshift/hypershift/pull/2708)
* [HOSTEDCP-1073](https://issues.redhat.com/browse/HOSTEDCP-1073): enforce blocked rollout of HCP [#2726](https://github.com/openshift/hypershift/pull/2726)
* Revert "HOSTEDCP-967: [Re-revert] Disable v1alpha1 and conversion webhook by default" [#2705](https://github.com/openshift/hypershift/pull/2705)
* Remove --service-publishing-strategy from production cli [#2721](https://github.com/openshift/hypershift/pull/2721)
* [HOSTEDCP-1024](https://issues.redhat.com/browse/HOSTEDCP-1024): Add Create NodePool for KubeVirt for HCP CLI [#2718](https://github.com/openshift/hypershift/pull/2718)
* [HOSTEDCP-1032](https://issues.redhat.com/browse/HOSTEDCP-1032): e2e: ensure default PSA policy is not privileged [#2714](https://github.com/openshift/hypershift/pull/2714)
* [HOSTEDCP-1031](https://issues.redhat.com/browse/HOSTEDCP-1031): Add Destroy Cluster Cmd for KubeVirt for HCP CLI [#2673](https://github.com/openshift/hypershift/pull/2673)
* Expose annotation to allow release image overrides [#2595](https://github.com/openshift/hypershift/pull/2595)
* [HOSTEDCP-1060](https://issues.redhat.com/browse/HOSTEDCP-1060): add ignition-server proxy [#2668](https://github.com/openshift/hypershift/pull/2668)
* [OCPBUGS-14637](https://issues.redhat.com/browse/OCPBUGS-14637): Check OwningIngressController also in Labels [#2706](https://github.com/openshift/hypershift/pull/2706)
* [HOSTEDCP-1020](https://issues.redhat.com/browse/HOSTEDCP-1020): Add Create Cluster for KubeVirt for HCP CLI [#2672](https://github.com/openshift/hypershift/pull/2672)
* properly handle user CA bundle not existing [#2703](https://github.com/openshift/hypershift/pull/2703)
* [OCPBUGS-15168](https://issues.redhat.com/browse/OCPBUGS-15168): fix(oauth): Do not proxy IBM Cloud IAM endpoints [#2699](https://github.com/openshift/hypershift/pull/2699)
* [OCPBUGS-14859](https://issues.redhat.com/browse/OCPBUGS-14859): Skip AWS resource deletion for 'Unknown' OIDC state [#2691](https://github.com/openshift/hypershift/pull/2691)
* Whitelist access from virt-launchers to NodeIP if NodePort ServicePublishingStrategy is used [#2688](https://github.com/openshift/hypershift/pull/2688)
* [OCPBUGS-13829](https://issues.redhat.com/browse/OCPBUGS-13829): cpo: oauth: honor AccessTokenInactivityTimeout [#2693](https://github.com/openshift/hypershift/pull/2693)
* Update NodePool docs to include data propagation [#2687](https://github.com/openshift/hypershift/pull/2687)
* [HOSTEDCP-1008](https://issues.redhat.com/browse/HOSTEDCP-1008): Add NodePoolTransitionSeconds metric [#2631](https://github.com/openshift/hypershift/pull/2631)
* [HOSTEDCP-967](https://issues.redhat.com/browse/HOSTEDCP-967): [Re-revert] Disable v1alpha1 and conversion webhook by default [#2685](https://github.com/openshift/hypershift/pull/2685)
* Make NodePool arch input immutable [#2689](https://github.com/openshift/hypershift/pull/2689)
* Update autocaler RBAC to accomodate machinepools support added upstream [#2663](https://github.com/openshift/hypershift/pull/2663)
* Enforce Immutability of some KubeVirt Platform Values [#2654](https://github.com/openshift/hypershift/pull/2654)
* [CNV-24818](https://issues.redhat.com/browse/CNV-24818): Add fsGroup support to kubevirt-csi-driver [#2563](https://github.com/openshift/hypershift/pull/2563)
* Let payload provider render feature gate yaml [#2664](https://github.com/openshift/hypershift/pull/2664)
* [OCPBUGS-14633](https://issues.redhat.com/browse/OCPBUGS-14633): Check for OPENSHIFT_IMG_OVERRIDES before using [#2660](https://github.com/openshift/hypershift/pull/2660)
* [HOSTEDCP-965](https://issues.redhat.com/browse/HOSTEDCP-965): Add impersonate feature to the CLI and document HC dump procedure [#2653](https://github.com/openshift/hypershift/pull/2653)
* [OCPBUGS-11882](https://issues.redhat.com/browse/OCPBUGS-11882): Annotate HCP pods with the safe-to-evict-local-volume CA annotation [#2647](https://github.com/openshift/hypershift/pull/2647)
* Update RHTAP references [#2657](https://github.com/openshift/hypershift/pull/2657)
* Disable nodepool replace upgrade test [#2665](https://github.com/openshift/hypershift/pull/2665)
* [OCPBUGS-14784](https://issues.redhat.com/browse/OCPBUGS-14784): Honor global ingress configuration LoadBalancer type on AWS [#2669](https://github.com/openshift/hypershift/pull/2669)
* [OCPBUGS-14620](https://issues.redhat.com/browse/OCPBUGS-14620): Set `DisableStrictZoneCheck = true` in the AWS Cloud Provider config [#2659](https://github.com/openshift/hypershift/pull/2659)
* [HOSTEDCP-992](https://issues.redhat.com/browse/HOSTEDCP-992): refactor ignition-server reconcilation [#2662](https://github.com/openshift/hypershift/pull/2662)
* Minor fix in KAS LB HealthCheck [#2656](https://github.com/openshift/hypershift/pull/2656)
* [HOSTEDCP-1036](https://issues.redhat.com/browse/HOSTEDCP-1036): Create Makefile path to create productized CLI [#2633](https://github.com/openshift/hypershift/pull/2633)
* Extend np test timeout for KubeVirt platform [#2655](https://github.com/openshift/hypershift/pull/2655)
* [HOSTEDCP-1003](https://issues.redhat.com/browse/HOSTEDCP-1003): Set AWS conditions only for AWS platform [#2604](https://github.com/openshift/hypershift/pull/2604)
* Remove alsologtostderr flag form CAP* [#2648](https://github.com/openshift/hypershift/pull/2648)
* [OCPBUGS-14575](https://issues.redhat.com/browse/OCPBUGS-14575): Check for IDMS only if mgmt cluster has req API [#2650](https://github.com/openshift/hypershift/pull/2650)
* Network isolation of VirtualMachines for KubeVirt provider [#2622](https://github.com/openshift/hypershift/pull/2622)
* [OCPBUGS-14428](https://issues.redhat.com/browse/OCPBUGS-14428): remove OLM alerts from the HCCO [#2636](https://github.com/openshift/hypershift/pull/2636)
* KubeVirt Openstack image annotation override [#2629](https://github.com/openshift/hypershift/pull/2629)
* Red Hat Trusted App Pipeline update hypershift-operator-main [#2638](https://github.com/openshift/hypershift/pull/2638)
* Red Hat Trusted App Pipeline purge hypershift-azjx [#2635](https://github.com/openshift/hypershift/pull/2635)
* cli: Add release-stream flag [#2644](https://github.com/openshift/hypershift/pull/2644)
* [OCPBUGS-13547](https://issues.redhat.com/browse/OCPBUGS-13547): Pass payload-version to MCS and MCC [#2643](https://github.com/openshift/hypershift/pull/2643)
* KubeVirt: Handle deletion of the cache DV on an edge case [#2620](https://github.com/openshift/hypershift/pull/2620)
* [OCPBUGS-14087](https://issues.redhat.com/browse/OCPBUGS-14087): Enable HCCO to reconcile over the OperatorHub's disableAllDefaultSources object [#2632](https://github.com/openshift/hypershift/pull/2632)
* [HOSTEDCP-1009](https://issues.redhat.com/browse/HOSTEDCP-1009): Allow external-dns image to be set in install cli [#2623](https://github.com/openshift/hypershift/pull/2623)
* Ensure FeatureGate is copied from cluster to MCO render source [#2581](https://github.com/openshift/hypershift/pull/2581)
* [OCPBUGS-12972](https://issues.redhat.com/browse/OCPBUGS-12972): Use different ports for MCS in the ignition provider [#2628](https://github.com/openshift/hypershift/pull/2628)
* hypershift dump: use random local port for kas port-forwarding [#2625](https://github.com/openshift/hypershift/pull/2625)
* [OCPBUGS-11939](https://issues.redhat.com/browse/OCPBUGS-11939): Initialize RegistryOverrides w/ mgmt cluster ICSP [#2437](https://github.com/openshift/hypershift/pull/2437)
* Revert "Merge pull request #2596 from muraee/disable-valpha1" [#2627](https://github.com/openshift/hypershift/pull/2627)
* Add 'Creating Arm NodePools Through the API' Section [#2587](https://github.com/openshift/hypershift/pull/2587)
* [HOSTEDCP-967](https://issues.redhat.com/browse/HOSTEDCP-967): Disable v1alpha1 and conversion webhook by default [#2596](https://github.com/openshift/hypershift/pull/2596)
* [OCPBUGS-13113](https://issues.redhat.com/browse/OCPBUGS-13113): Add ClusterUpgradeDuration metric [#2566](https://github.com/openshift/hypershift/pull/2566)
* chore(deps): update rhtap references [#2612](https://github.com/openshift/hypershift/pull/2612)
* [OCPBU-609](https://issues.redhat.com/browse/OCPBU-609): agent infrastructure docs [#2618](https://github.com/openshift/hypershift/pull/2618)
* [OCPBUGS-14169](https://issues.redhat.com/browse/OCPBUGS-14169): Remove external-dns --events flag [#2616](https://github.com/openshift/hypershift/pull/2616)
* [OCPBUGS-13970](https://issues.redhat.com/browse/OCPBUGS-13970): Reconcile oauthDeployment annotations even if kubeadmin secret is not found [#2593](https://github.com/openshift/hypershift/pull/2593)
* cmd: infra: aws: retry on AuthorizeSecurityGroup failure [#2605](https://github.com/openshift/hypershift/pull/2605)
* Fix dump for Kubevirt [#2589](https://github.com/openshift/hypershift/pull/2589)
* Kubevirt CSI StorageClass mapping API [#2528](https://github.com/openshift/hypershift/pull/2528)
* Remove Arm e2e test [#2591](https://github.com/openshift/hypershift/pull/2591)
* [HOSTEDCP-947](https://issues.redhat.com/browse/HOSTEDCP-947): Set ETCD Storage Size as immutable field and equalised the default size among both api versions [#2588](https://github.com/openshift/hypershift/pull/2588)
* [OCPBUGS-13735](https://issues.redhat.com/browse/OCPBUGS-13735): Fixed revoking some permissions to CAPI Manager Clusterrole [#2586](https://github.com/openshift/hypershift/pull/2586)
* [HOSTEDCP-445](https://issues.redhat.com/browse/HOSTEDCP-445): Add script to migrate hosted control plane [#2598](https://github.com/openshift/hypershift/pull/2598)
* Use newly introduced KubeVirt Platform rhcos Image [#2576](https://github.com/openshift/hypershift/pull/2576)
* [OCPBUGS-13168](https://issues.redhat.com/browse/OCPBUGS-13168): Include default ingress CA in root CA bundle [#2584](https://github.com/openshift/hypershift/pull/2584)
* [HOSTEDCP-975](https://issues.redhat.com/browse/HOSTEDCP-975): Add new grafana panels for nodepools SLOs [#2592](https://github.com/openshift/hypershift/pull/2592)
* [HOSTEDCP-926](https://issues.redhat.com/browse/HOSTEDCP-926): Send metric when HO/CPO decide to skip cloud resource deletion [#2531](https://github.com/openshift/hypershift/pull/2531)
* Update RHTAP references [#2420](https://github.com/openshift/hypershift/pull/2420)
* [OCPBUGS-13897](https://issues.redhat.com/browse/OCPBUGS-13897): Use cluster-config-operator to render featuregate status on KAS bootstrap [#2585](https://github.com/openshift/hypershift/pull/2585)
* [HOSTEDCP-975](https://issues.redhat.com/browse/HOSTEDCP-975): Add cluster_name label to nodepools metrics [#2580](https://github.com/openshift/hypershift/pull/2580)
* Fix broken tests for non-aws platforms [#2577](https://github.com/openshift/hypershift/pull/2577)
* Updated secret permissions for openshift-route-controller-manager [#2575](https://github.com/openshift/hypershift/pull/2575)
* [HOSTEDCP-987](https://issues.redhat.com/browse/HOSTEDCP-987): Update go version and dependencies in /hack/tools/go.mod [#2551](https://github.com/openshift/hypershift/pull/2551)
* remove flags set by CI env var [#2521](https://github.com/openshift/hypershift/pull/2521)
* [HOSTEDCP-975](https://issues.redhat.com/browse/HOSTEDCP-975): Add NodePool DeletionDuration and InitialRolloutDuration metrics [#2558](https://github.com/openshift/hypershift/pull/2558)
* [ARMOCP-412](https://issues.redhat.com/browse/ARMOCP-412): Add ARM nodepool to AWS x86 Hosted Cluster [#1594](https://github.com/openshift/hypershift/pull/1594)
* [OCPBUGS-11939](https://issues.redhat.com/browse/OCPBUGS-11939): Fix minor codebase nits [#2502](https://github.com/openshift/hypershift/pull/2502)
* control-plane-operator/controllers/hostedcontrolplane: Align reconcileCloudControllerManager error strings [#2500](https://github.com/openshift/hypershift/pull/2500)
* [HOSTEDCP-960](https://issues.redhat.com/browse/HOSTEDCP-960): Add e2e to validate HC/NP conditions expected status [#2482](https://github.com/openshift/hypershift/pull/2482)
* [HOSTEDCP-830](https://issues.redhat.com/browse/HOSTEDCP-830): Update auto scaler role to get and list agentmachinetemplates [#2564](https://github.com/openshift/hypershift/pull/2564)
* [HOSTEDCP-445](https://issues.redhat.com/browse/HOSTEDCP-445): Included how to fix image-registry clusteroperator after a disaster recovery migration [#2481](https://github.com/openshift/hypershift/pull/2481)
* [OCPBUGS-13547](https://issues.redhat.com/browse/OCPBUGS-13547): Pass release image version to MCO bootstrap via --payload-version [#2572](https://github.com/openshift/hypershift/pull/2572)
* Cache KubeVirt Boot Image [#1918](https://github.com/openshift/hypershift/pull/1918)
* contrib: ci: increase HC quota in clusters namespace [#2547](https://github.com/openshift/hypershift/pull/2547)
* [HOSTEDCP-996](https://issues.redhat.com/browse/HOSTEDCP-996): CLI: enable guest cluster dump for private clusters [#2571](https://github.com/openshift/hypershift/pull/2571)
* [MULTIARCH-3205](https://issues.redhat.com/browse/MULTIARCH-3205): Support IBM COS as storage for PowerVS in image registry operator [#2207](https://github.com/openshift/hypershift/pull/2207)
* fix nil deref in DefaultWorkerSecurityGroupID check [#2573](https://github.com/openshift/hypershift/pull/2573)
* remove unused OLM catalog rollout code [#2568](https://github.com/openshift/hypershift/pull/2568)
* [OCPBUGS-13034](https://issues.redhat.com/browse/OCPBUGS-13034): Cluster-api SA can't create events [#2565](https://github.com/openshift/hypershift/pull/2565)
* [ACM-4277](https://issues.redhat.com/browse/ACM-4277): docs: Add L2Advertisement CR to the Handling Ingress section in the agent docs [#2470](https://github.com/openshift/hypershift/pull/2470)
* [HOSTEDCP-947](https://issues.redhat.com/browse/HOSTEDCP-947): Increases default etcd PV size to 8Gi [#2549](https://github.com/openshift/hypershift/pull/2549)
* Add a new e2e option for the ETCD storage class [#2560](https://github.com/openshift/hypershift/pull/2560)
* Red Hat Trusted App Pipeline update hypershift-azjx [#2555](https://github.com/openshift/hypershift/pull/2555)
* [HOSTEDCP-975](https://issues.redhat.com/browse/HOSTEDCP-975): Revised nodePoolSize metric and added AvailableReplicasMetric [#2532](https://github.com/openshift/hypershift/pull/2532)
* [OCPBUGS-11383](https://issues.redhat.com/browse/OCPBUGS-11383): Sync proxy TrustedCA to guest cluster [#2550](https://github.com/openshift/hypershift/pull/2550)
* Removed unused KMS permissions for nodePool role [#2456](https://github.com/openshift/hypershift/pull/2456)
* Lock down kubevirt csi storageclass mappings [#2534](https://github.com/openshift/hypershift/pull/2534)
* [OCPBUGS-13021](https://issues.redhat.com/browse/OCPBUGS-13021): Add internal/external elb tags to subnets [#2541](https://github.com/openshift/hypershift/pull/2541)
* [HOSTEDCP-918](https://issues.redhat.com/browse/HOSTEDCP-918): Add validation for NodePool security Group condition when using default SG [#2498](https://github.com/openshift/hypershift/pull/2498)
* [HOSTEDCP-981](https://issues.redhat.com/browse/HOSTEDCP-981): Minor updates to Getting Started & Contribute pages [#2527](https://github.com/openshift/hypershift/pull/2527)
* [OCPBUGS-13111](https://issues.redhat.com/browse/OCPBUGS-13111): Fix errors from HCP controller removeServiceCAAnnotationAndSecret() [#2513](https://github.com/openshift/hypershift/pull/2513)
* Stop triggering rollout on labels/taint change [#2533](https://github.com/openshift/hypershift/pull/2533)
* Validate HO private platform input [#2536](https://github.com/openshift/hypershift/pull/2536)
* [OCPBUGS-13021](https://issues.redhat.com/browse/OCPBUGS-13021): Health check load balancers only on public clusters [#2535](https://github.com/openshift/hypershift/pull/2535)
* [OCPBUGS-13309](https://issues.redhat.com/browse/OCPBUGS-13309): set FeatureGate global config [#2543](https://github.com/openshift/hypershift/pull/2543)
* Add audit-log-maxbackup setting for openshift-api-server [#2509](https://github.com/openshift/hypershift/pull/2509)
* [OCPBUGS-11894](https://issues.redhat.com/browse/OCPBUGS-11894): Let the aws endpoint to use the hypershift owned SG [#2475](https://github.com/openshift/hypershift/pull/2475)
* [HOSTEDCP-980](https://issues.redhat.com/browse/HOSTEDCP-980): Include HostedClusterDegraded in hypershift_hostedclusters_failure_conditions metric [#2523](https://github.com/openshift/hypershift/pull/2523)
* [HOSTEDCP-788](https://issues.redhat.com/browse/HOSTEDCP-788): Configurable SRE MetricsSet [#2505](https://github.com/openshift/hypershift/pull/2505)
* [OCPBUGS-13112](https://issues.redhat.com/browse/OCPBUGS-13112): Add timeout to KAS health check client [#2522](https://github.com/openshift/hypershift/pull/2522)
* [HOSTEDCP-978](https://issues.redhat.com/browse/HOSTEDCP-978): Bump openshift/api version and fixed KCM flags (k8s 1.27) [#2519](https://github.com/openshift/hypershift/pull/2519)
* [OCPBUGS-7841](https://issues.redhat.com/browse/OCPBUGS-7841): Account for expectedState == false when capturing hostedClustersWithFailureCondition [#2507](https://github.com/openshift/hypershift/pull/2507)
* [OCPBUGS-11719](https://issues.redhat.com/browse/OCPBUGS-11719): Ensure ingress controllers are removed before load balancers [#2444](https://github.com/openshift/hypershift/pull/2444)
* Fixed assignment to entry in nil map [#2508](https://github.com/openshift/hypershift/pull/2508)
* Add new --featuregate-manifest to /usr/bin/cluster-config-operator render [#2506](https://github.com/openshift/hypershift/pull/2506)
* [ACM-5116](https://issues.redhat.com/browse/ACM-5116): Increase KubeVirt default Mem and Root Volume Sizes [#2471](https://github.com/openshift/hypershift/pull/2471)
* [HOSTEDCP-937](https://issues.redhat.com/browse/HOSTEDCP-937): New metric to expose Hypershift operator info [#2443](https://github.com/openshift/hypershift/pull/2443)
* [HOSTEDCP-969](https://issues.redhat.com/browse/HOSTEDCP-969): Consolidate labels for metrics [#2494](https://github.com/openshift/hypershift/pull/2494)
* [HOSTEDCP-969](https://issues.redhat.com/browse/HOSTEDCP-969): Move proxy, silence alerts and limited support metrics into HC controller [#2489](https://github.com/openshift/hypershift/pull/2489)
* [HOSTEDCP-969](https://issues.redhat.com/browse/HOSTEDCP-969): Only track available metric once [#2479](https://github.com/openshift/hypershift/pull/2479)
* [OCPBUGS-11738](https://issues.redhat.com/browse/OCPBUGS-11738): Delete kubeadmin secret when an idp is defined [#2452](https://github.com/openshift/hypershift/pull/2452)
* Add PollImmediate for e2e metrics to avoid race with prom scrape interval [#2483](https://github.com/openshift/hypershift/pull/2483)
* [HOSTEDCP-969](https://issues.redhat.com/browse/HOSTEDCP-969): Move HC creation metrics [#2477](https://github.com/openshift/hypershift/pull/2477)
* [OCPBUGS-12153](https://issues.redhat.com/browse/OCPBUGS-12153): fix(hcco): Get OLM CatalogSource images from defined map [#2454](https://github.com/openshift/hypershift/pull/2454)
* [HOSTEDCP-917](https://issues.redhat.com/browse/HOSTEDCP-917): Add publicAndPrivate <-> Private e2e test [#2383](https://github.com/openshift/hypershift/pull/2383)
* add hyperv1.SilenceClusterAlertsLabel to HostedCluster on deletion [#2476](https://github.com/openshift/hypershift/pull/2476)
* [HOSTEDCP-969](https://issues.redhat.com/browse/HOSTEDCP-969): Move guest cluster resource deletion metric [#2463](https://github.com/openshift/hypershift/pull/2463)
* [OCPBUGS-11450](https://issues.redhat.com/browse/OCPBUGS-11450): Pass OPENSHIFT_RELEASE_IMAGE env variable to CNO [#2384](https://github.com/openshift/hypershift/pull/2384)
* [HOSTEDCP-972](https://issues.redhat.com/browse/HOSTEDCP-972): Add pre-commit command to Make file [#2465](https://github.com/openshift/hypershift/pull/2465)
* [HOSTEDCP-969](https://issues.redhat.com/browse/HOSTEDCP-969): Move cluster deletion duration metric into controller [#2459](https://github.com/openshift/hypershift/pull/2459)
* Fix kubevirt csi daemonset reconcile loop [#2466](https://github.com/openshift/hypershift/pull/2466)
* Fixes loop between HC controller and pod security label syncer [#2460](https://github.com/openshift/hypershift/pull/2460)
* docs: update OIDC bucket create with bucket policy [#2461](https://github.com/openshift/hypershift/pull/2461)
* [OCPBUGS-11946](https://issues.redhat.com/browse/OCPBUGS-11946): Add new OCP 4.13 storage admission plugin [#2445](https://github.com/openshift/hypershift/pull/2445)
* [OCPBUGS-11773](https://issues.redhat.com/browse/OCPBUGS-11773): remove ACL for aws bucket [#2423](https://github.com/openshift/hypershift/pull/2423)
* [OCPBUGS-7841](https://issues.redhat.com/browse/OCPBUGS-7841): Set metrics to 0 when needed to keep time series honest [#2440](https://github.com/openshift/hypershift/pull/2440)
* [OCPBUGS-11930](https://issues.redhat.com/browse/OCPBUGS-11930): Clean up existing VPC endpoint connections [#2438](https://github.com/openshift/hypershift/pull/2438)
* Revert "Add validation for default Security Group conditions during N… [#2453](https://github.com/openshift/hypershift/pull/2453)
* [HOSTEDCP-918](https://issues.redhat.com/browse/HOSTEDCP-918): Add validation for default Security Group conditions during NodePool upgrade test [#2342](https://github.com/openshift/hypershift/pull/2342)
* [OCPBUGS-11649](https://issues.redhat.com/browse/OCPBUGS-11649): Always requeue AWSEndpointService controllers [#2424](https://github.com/openshift/hypershift/pull/2424)
* Add IBMers as reviewers [#2436](https://github.com/openshift/hypershift/pull/2436)
* e2e: Cleanup shared OIDC provider on SIGTERM [#2435](https://github.com/openshift/hypershift/pull/2435)
* [HOSTEDCP-950](https://issues.redhat.com/browse/HOSTEDCP-950): Fix haproxy image name in ignition server [#2441](https://github.com/openshift/hypershift/pull/2441)
* [OCPBUGS-7091](https://issues.redhat.com/browse/OCPBUGS-7091): Restart kube-scheduler when its configuration changes [#2421](https://github.com/openshift/hypershift/pull/2421)
* [OCPBUGS-11749](https://issues.redhat.com/browse/OCPBUGS-11749): Add pod security labels to hcp namespace [#2415](https://github.com/openshift/hypershift/pull/2415)
* [HOSTEDCP-950](https://issues.redhat.com/browse/HOSTEDCP-950): Validate release payload images [#2368](https://github.com/openshift/hypershift/pull/2368)
* kubevirt: Block metadata server egress [#2399](https://github.com/openshift/hypershift/pull/2399)
* Bring latest MCO API [#2434](https://github.com/openshift/hypershift/pull/2434)
* Relax MCO API strict decoding [#2433](https://github.com/openshift/hypershift/pull/2433)
* docs: update OIDC s3 bucket creation procedure [#2425](https://github.com/openshift/hypershift/pull/2425)
* json export for a common grafana dashboard for SLOs [#2422](https://github.com/openshift/hypershift/pull/2422)
* Enable monitoring for hypershift namespace [#2419](https://github.com/openshift/hypershift/pull/2419)
* [MULTIARCH-3449](https://issues.redhat.com/browse/MULTIARCH-3449): set priority class for cloud controller manager pod for PowerVS [#2390](https://github.com/openshift/hypershift/pull/2390)
* Fixes HCCO reconcile error for kubevirt csi driver [#2259](https://github.com/openshift/hypershift/pull/2259)
* Add monitoring label to HCP namespace [#2393](https://github.com/openshift/hypershift/pull/2393)
* Update tekton references [#2308](https://github.com/openshift/hypershift/pull/2308)
* add OWNERS for new area labels [#2414](https://github.com/openshift/hypershift/pull/2414)
* fix typo [#2411](https://github.com/openshift/hypershift/pull/2411)
* [HOSTEDCP-807](https://issues.redhat.com/browse/HOSTEDCP-807): Requeue HCP always [#2408](https://github.com/openshift/hypershift/pull/2408)
* [OCPBUGS-11640](https://issues.redhat.com/browse/OCPBUGS-11640): Update HostedCluster oauthCallbackURLTemplate [#2400](https://github.com/openshift/hypershift/pull/2400)
* e2e: Fixed idp test conflict error on HosterCluster update [#2389](https://github.com/openshift/hypershift/pull/2389)
* dump: Store guest worker node logs and increase kubevirt logs verbosity [#2317](https://github.com/openshift/hypershift/pull/2317)
* [HOSTEDCP-568](https://issues.redhat.com/browse/HOSTEDCP-568): Update Konnectiviy socks5 proxy for IBM exception [#2366](https://github.com/openshift/hypershift/pull/2366)
* [OCPBUGS-11442](https://issues.redhat.com/browse/OCPBUGS-11442): properly reconcile with user specified changes for in proxy configuration [#2382](https://github.com/openshift/hypershift/pull/2382)
* Updated kubevirt docs [#2318](https://github.com/openshift/hypershift/pull/2318)
* [OCPBUGS-11439](https://issues.redhat.com/browse/OCPBUGS-11439): allow z-stream upgrade even if CVO Upgradeable is false [#2381](https://github.com/openshift/hypershift/pull/2381)
* [HOSTEDCP-954](https://issues.redhat.com/browse/HOSTEDCP-954): Remove ec2:ReleaseAddress [#2379](https://github.com/openshift/hypershift/pull/2379)
* [HOSTEDCP-802](https://issues.redhat.com/browse/HOSTEDCP-802): add cli flag to enable upgrade type [#2367](https://github.com/openshift/hypershift/pull/2367)
* e2e: Fix oauth idp e2e test [#2377](https://github.com/openshift/hypershift/pull/2377)
* [HOSTEDCP-951](https://issues.redhat.com/browse/HOSTEDCP-951): Let install apply to aggregate errors [#2372](https://github.com/openshift/hypershift/pull/2372)
* Revert "Create a second scheme that always registers prometheusoperatorv1 GVKs" [#2374](https://github.com/openshift/hypershift/pull/2374)
* [HOSTEDCP-807](https://issues.redhat.com/browse/HOSTEDCP-807): Check KAS loadbalancer health [#2264](https://github.com/openshift/hypershift/pull/2264)
* e2e: fix for non-AWS platform [#2360](https://github.com/openshift/hypershift/pull/2360)
* [HOSTEDCP-445](https://issues.redhat.com/browse/HOSTEDCP-445): Fix the storage ClusterOperator during a DR migration [#2358](https://github.com/openshift/hypershift/pull/2358)
* [HOSTEDCP-850](https://issues.redhat.com/browse/HOSTEDCP-850): Fix nodepool autoscaler logic [#2354](https://github.com/openshift/hypershift/pull/2354)
* support/releaseinfo/pod_provider: Drop unused legacy PodProvider [#2341](https://github.com/openshift/hypershift/pull/2341)
* Fix nodepool upgrade e2e test [#2359](https://github.com/openshift/hypershift/pull/2359)
* [HOSTEDCP-806](https://issues.redhat.com/browse/HOSTEDCP-806): Fix ValidAWSKMSConfig condition [#2322](https://github.com/openshift/hypershift/pull/2322)
* [HOSTEDCP-939](https://issues.redhat.com/browse/HOSTEDCP-939): Setup shared OIDC provider for e2e clusters [#2335](https://github.com/openshift/hypershift/pull/2335)
* [OCPBUGS-10227](https://issues.redhat.com/browse/OCPBUGS-10227): Preserve false status of ValidAWSIdentityProvider condition [#2344](https://github.com/openshift/hypershift/pull/2344)
* ACM-4615 get pull secret instead of dockerconfigjson from mce credentials [#2338](https://github.com/openshift/hypershift/pull/2338)
* Slo alerts [#2049](https://github.com/openshift/hypershift/pull/2049)
* [HOSTEDCP-943](https://issues.redhat.com/browse/HOSTEDCP-943): Add hypershift_hosted_cluster_transition_seconds histogram [#2348](https://github.com/openshift/hypershift/pull/2348)
* [HOSTEDCP-944](https://issues.redhat.com/browse/HOSTEDCP-944): Add more expectedHCConditionStates metrics [#2347](https://github.com/openshift/hypershift/pull/2347)
* [OCPBUGS-10227](https://issues.redhat.com/browse/OCPBUGS-10227): Create new EC2 client for AWS identity provider health check [#2346](https://github.com/openshift/hypershift/pull/2346)
* OCPBUGS-10823 ensure well known public domains do not get proxied on image imports [#2321](https://github.com/openshift/hypershift/pull/2321)
* [SDA-8609](https://issues.redhat.com/browse/SDA-8609): No more specifying the scrape interval at servicemonitors & podmonitors level [#2327](https://github.com/openshift/hypershift/pull/2327)
* [OCPBUGS-10807](https://issues.redhat.com/browse/OCPBUGS-10807): Pass runAsUser to CNO so it can run its managed services with proper security context [#2319](https://github.com/openshift/hypershift/pull/2319)
* Appstudio update hypershift-azjx [#2332](https://github.com/openshift/hypershift/pull/2332)
* Revert "cpo: cno: follow image name change in release payload" [#2345](https://github.com/openshift/hypershift/pull/2345)
* support/supportedversion: Include the problematic version strings in error messages [#2334](https://github.com/openshift/hypershift/pull/2334)
* [OCPBUGS-10864](https://issues.redhat.com/browse/OCPBUGS-10864): fix external APIServer address selection based on endpointAccess [#2328](https://github.com/openshift/hypershift/pull/2328)
* [OCPBUGS-8073](https://issues.redhat.com/browse/OCPBUGS-8073): Do not proxy when guest cluster resolution fails [#2261](https://github.com/openshift/hypershift/pull/2261)
* [MULTIARCH-3028](https://issues.redhat.com/browse/MULTIARCH-3028): handle PowerVS instance which goes to failed state during infra create and destroy process. [#2088](https://github.com/openshift/hypershift/pull/2088)
* [HOSTEDCP-938](https://issues.redhat.com/browse/HOSTEDCP-938): Added PSA default profile to RunTimeDefault in operator deployment [#2333](https://github.com/openshift/hypershift/pull/2333)
* [HOSTEDCP-934](https://issues.redhat.com/browse/HOSTEDCP-934): Validate PublishingStrategyMapping [#2324](https://github.com/openshift/hypershift/pull/2324)
* [OCPBUGS-7091](https://issues.redhat.com/browse/OCPBUGS-7091): Honor scheduler profile in HostedCluster configuration [#2330](https://github.com/openshift/hypershift/pull/2330)
* [HOSTEDCP-736](https://issues.redhat.com/browse/HOSTEDCP-736): Docs on how we handle aws permissions [#2311](https://github.com/openshift/hypershift/pull/2311)
* Add support for external infra clusters in KubeVirt platform [#2017](https://github.com/openshift/hypershift/pull/2017)
* Create a second scheme that always registers `prometheusoperatorv1` GVKs [#2292](https://github.com/openshift/hypershift/pull/2292)
* [OCPBUGS-10504](https://issues.redhat.com/browse/OCPBUGS-10504): Deletion of the VPCEnpoint on conflicting service names [#2290](https://github.com/openshift/hypershift/pull/2290)
* [HOSTEDCP-801](https://issues.redhat.com/browse/HOSTEDCP-801): Expose external DNS for private cluster endpoints [#2286](https://github.com/openshift/hypershift/pull/2286)
* [HOSTEDCP-903](https://issues.redhat.com/browse/HOSTEDCP-903): Propagate AWSEndpointService conditions [#2278](https://github.com/openshift/hypershift/pull/2278)
* Appstudio update hypershift-azjx [#2287](https://github.com/openshift/hypershift/pull/2287)
* [OCPBUGS-8691](https://issues.redhat.com/browse/OCPBUGS-8691): Add storage operators perms. to watch HostedControlPlane [#2301](https://github.com/openshift/hypershift/pull/2301)
* [OCPBUGS-10423](https://issues.redhat.com/browse/OCPBUGS-10423): Add validation for taint.value in nodePool [#2298](https://github.com/openshift/hypershift/pull/2298)
* [HOSTEDCP-839](https://issues.redhat.com/browse/HOSTEDCP-839): Audit log sidecars for openshift-apiserver and openshift-oauth-apiserver [#2232](https://github.com/openshift/hypershift/pull/2232)
* Route to kubevirt VMs using infra id as service label selector [#2092](https://github.com/openshift/hypershift/pull/2092)
* Force controleplane upgrade always [#2288](https://github.com/openshift/hypershift/pull/2288)
* [HOSTEDCP-900](https://issues.redhat.com/browse/HOSTEDCP-900): Modified AWSPrivateLinkController and AWSEndpointServiceController to respect PausedUntil spec field [#2265](https://github.com/openshift/hypershift/pull/2265)
* [HOSTEDCP-919](https://issues.redhat.com/browse/HOSTEDCP-919): Clean up and API doc [#2280](https://github.com/openshift/hypershift/pull/2280)
* [HOSTEDCP-688](https://issues.redhat.com/browse/HOSTEDCP-688): E2E Test NodePool Upgrade [#2256](https://github.com/openshift/hypershift/pull/2256)
* [HOSTEDCP-445](https://issues.redhat.com/browse/HOSTEDCP-445): Documented the possible issues found during a HostedCluster migration [#2276](https://github.com/openshift/hypershift/pull/2276)
* [OCPBUGS-10227](https://issues.redhat.com/browse/OCPBUGS-10227): Ensure identity provider health check condition is persisted and remove awsendpoint control plane finalizer if invalid aws creds [#2281](https://github.com/openshift/hypershift/pull/2281)
* [OCPBUGS-8040](https://issues.redhat.com/browse/OCPBUGS-8040): Switch NTO metrics auth to certs generated by HCP controller [#2050](https://github.com/openshift/hypershift/pull/2050)
* [OCPBUGS-8381](https://issues.redhat.com/browse/OCPBUGS-8381): Use appropriate serving certificate for OAuth [#2279](https://github.com/openshift/hypershift/pull/2279)
* [HOSTEDCP-501](https://issues.redhat.com/browse/HOSTEDCP-501): Added detailed documentation about Hypershift release process [#2272](https://github.com/openshift/hypershift/pull/2272)
* [HOSTEDCP-919](https://issues.redhat.com/browse/HOSTEDCP-919): Add AWS cloud controller manager [#2271](https://github.com/openshift/hypershift/pull/2271)
* Update PowerVS prereq doc with install and authorization details [#2172](https://github.com/openshift/hypershift/pull/2172)
* Remove webhook validation [#2217](https://github.com/openshift/hypershift/pull/2217)
* [HOSTEDCP-809](https://issues.redhat.com/browse/HOSTEDCP-809): Clone CA key/cert to TLS key/cert [#2246](https://github.com/openshift/hypershift/pull/2246)
* Refactor e2e nodepool tests [#2228](https://github.com/openshift/hypershift/pull/2228)
* Update HCP version in capi cluster ref [#2119](https://github.com/openshift/hypershift/pull/2119)
* Validate etcd KMS config [#2174](https://github.com/openshift/hypershift/pull/2174)
* [OCPBUGS-8421](https://issues.redhat.com/browse/OCPBUGS-8421): fix API documentation for audit webhook field [#2258](https://github.com/openshift/hypershift/pull/2258)
* Add a debug section to the Node Tuning docs [#2254](https://github.com/openshift/hypershift/pull/2254)
* Destroy cloud resources by default [#2224](https://github.com/openshift/hypershift/pull/2224)
* Add e2e test for identity providers [#2166](https://github.com/openshift/hypershift/pull/2166)
* [HOSTEDCP-638](https://issues.redhat.com/browse/HOSTEDCP-638): Add latest ocp supported info to -v command for cli and operator [#2233](https://github.com/openshift/hypershift/pull/2233)
* [OCPBUGS-8231](https://issues.redhat.com/browse/OCPBUGS-8231): Fix cleanup of volumes on cluster deletion [#2243](https://github.com/openshift/hypershift/pull/2243)
* fix(cpo): Delete multus validatingwebhookconfiguration on CNO init [#2231](https://github.com/openshift/hypershift/pull/2231)
* add pull-secret to imagePullSecrets for NTO, CNO, and olm-collect-profiles [#2248](https://github.com/openshift/hypershift/pull/2248)
* Update images and hypershift operator to 4.14 [#2249](https://github.com/openshift/hypershift/pull/2249)
* [HOSTEDCP-904](https://issues.redhat.com/browse/HOSTEDCP-904): Add release automation and docs [#2236](https://github.com/openshift/hypershift/pull/2236)
* kms addition for pod identity workflow [#2214](https://github.com/openshift/hypershift/pull/2214)
* fix(ho): No network validation for IBM Cloud [#2225](https://github.com/openshift/hypershift/pull/2225)
* feat(HCCO): Block DNS operator delete until Cluster Version updated [#2223](https://github.com/openshift/hypershift/pull/2223)
* Add configuration for automatic labeling and label commands [#2238](https://github.com/openshift/hypershift/pull/2238)
* Skip pod restart check for NTO [#2239](https://github.com/openshift/hypershift/pull/2239)
* cpo: cno: follow image name change in release payload [#2230](https://github.com/openshift/hypershift/pull/2230)
* Added documentation around supported-versions configmap [#2220](https://github.com/openshift/hypershift/pull/2220)
* Add comment for BaseDomainPrefix [#2219](https://github.com/openshift/hypershift/pull/2219)
* Add condition to NodePool indicating whether a security group for it is available [#2216](https://github.com/openshift/hypershift/pull/2216)
* [HOSTEDCP-827](https://issues.redhat.com/browse/HOSTEDCP-827): Add root volume encryption e2e test [#2192](https://github.com/openshift/hypershift/pull/2192)
* fix(hypershift): reduce CAPI rbac access [#2173](https://github.com/openshift/hypershift/pull/2173)
* Validate Network Input for HostedCluster [#2215](https://github.com/openshift/hypershift/pull/2215)
* Add labels info [#2218](https://github.com/openshift/hypershift/pull/2218)
* [HOSTEDCP-826](https://issues.redhat.com/browse/HOSTEDCP-826): Customize DNS base domain prefix [#2213](https://github.com/openshift/hypershift/pull/2213)
* ensure reconcilation of apiserver port [#2197](https://github.com/openshift/hypershift/pull/2197)
* Cleanup default security group only if authorized [#2211](https://github.com/openshift/hypershift/pull/2211)
* [HOSTEDCP-593](https://issues.redhat.com/browse/HOSTEDCP-593): Update the pull secret source for ignition payload [#2187](https://github.com/openshift/hypershift/pull/2187)
* fix(ibmcloud): Explicitly set HCCO controllers [#2185](https://github.com/openshift/hypershift/pull/2185)
* Adding NTO again to find the issue with data recollection [#2152](https://github.com/openshift/hypershift/pull/2152)
* cli: Add --cli-root-volume-access-modes [#2188](https://github.com/openshift/hypershift/pull/2188)
* feat: Add pod gone check to prober + DNS operator leader elect [#2155](https://github.com/openshift/hypershift/pull/2155)
* [HOSTEDCP-833](https://issues.redhat.com/browse/HOSTEDCP-833): Add Golang check for 'go list' errors in Makefile [#2193](https://github.com/openshift/hypershift/pull/2193)
* [HOSTEDCP-833](https://issues.redhat.com/browse/HOSTEDCP-833): Set kubevirt.io/client-go version to fix ART Issue [#2194](https://github.com/openshift/hypershift/pull/2194)
* add KAS egress network policy [#2181](https://github.com/openshift/hypershift/pull/2181)
* cpo: kcm: add nfs pv recycler pod template [#2183](https://github.com/openshift/hypershift/pull/2183)
* Fix kubevirt how-to doc formatting issues [#2178](https://github.com/openshift/hypershift/pull/2178)
* Update cluster api provider kubevirt dependencies [#2157](https://github.com/openshift/hypershift/pull/2157)
* fix(cpo): Set restart annotation on multus-admission-controller [#2150](https://github.com/openshift/hypershift/pull/2150)
* fix(cpo): Remove OLM collect for IBM Cloud to reduce artifacts and rbac [#2141](https://github.com/openshift/hypershift/pull/2141)
* Add default NodePool name clarification to docs [#2186](https://github.com/openshift/hypershift/pull/2186)
* fix(cpo): Reduce CNO access if Calico used as network provider [#2159](https://github.com/openshift/hypershift/pull/2159)
* add PSA labels to openshift-infra in guest cluster [#2180](https://github.com/openshift/hypershift/pull/2180)
* Add cli flag to enable root volume encryption [#2177](https://github.com/openshift/hypershift/pull/2177)
* Update KubeVirt platform how-to documentation [#2108](https://github.com/openshift/hypershift/pull/2108)
* Filtering data recolection only for aws instances running [#2153](https://github.com/openshift/hypershift/pull/2153)
* Add PodMonitor for ingress-operator pods in HCP namespaces [#2136](https://github.com/openshift/hypershift/pull/2136)
* fix regex in registry operator pod monitor [#2171](https://github.com/openshift/hypershift/pull/2171)
* Add e2e test for hosted cluster behind a proxy [#2077](https://github.com/openshift/hypershift/pull/2077)
* Skip destroyAWSDefaultSecurityGroup if not AWS [#2167](https://github.com/openshift/hypershift/pull/2167)
* Give kubevirt csi controller get VMI RBAC [#2154](https://github.com/openshift/hypershift/pull/2154)
* set default PSA enforce to restricted [#2097](https://github.com/openshift/hypershift/pull/2097)
* [Full changelog](https://github.com/openshift/hypershift/compare/57f5f5fd591e2439009fd13a853ceeb0ba15a09a...)


### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/1640c42033631b3e8847c9867772666e898dfd01)

* Update OWNERS [#46](https://github.com/openshift/cloud-provider-ibm/pull/46)
* [OCPBUGS-6415](https://issues.redhat.com/browse/OCPBUGS-6415): Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.26 (4d5076e) into master [#45](https://github.com/openshift/cloud-provider-ibm/pull/45)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/70fe86abf02936d2d385d50b9ad90e2eb7acfeba...1640c42033631b3e8847c9867772666e898dfd01)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/66dcaf9a0591ec321828cec5ee24f0a4df0e5080)

* [STOR-1011](https://issues.redhat.com/browse/STOR-1011): Rebase to v5.1.1 for OCP 4.13 [#31](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/31)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/ff1ed8acb306e0c3e6213fa58514bf64b744257c...66dcaf9a0591ec321828cec5ee24f0a4df0e5080)


### [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater/tree/283a614ee34e83afa065338dee25d4ee202c8aeb)

* [STOR-1011](https://issues.redhat.com/browse/STOR-1011): Rebase to v4.3.0 for OCP 4.13 [#18](https://github.com/openshift/ibm-vpc-node-label-updater/pull/18)
* [Full changelog](https://github.com/openshift/ibm-vpc-node-label-updater/compare/8bda787345302d5c55e9329d1070cc04b0d4a345...283a614ee34e83afa065338dee25d4ee202c8aeb)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/70e411ce00c9d12c5b0e983771df8bcf4750b17f)

* Update OWNERS [#49](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/49)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/e0a7ccca02371f96938494a3a483ee55c02723a6...70e411ce00c9d12c5b0e983771df8bcf4750b17f)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/c75f7e3e7a3b7525aa2d540f86fd7477e7800608)

* Update OWNERS [#17](https://github.com/openshift/machine-api-provider-ibmcloud/pull/17)
* [OCPBUGS-6419](https://issues.redhat.com/browse/OCPBUGS-6419): Update dependencies for kubernetes 1.26 [#16](https://github.com/openshift/machine-api-provider-ibmcloud/pull/16)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/50aa171a52e1b7fadd896606fc0b6996ea808b0e...c75f7e3e7a3b7525aa2d540f86fd7477e7800608)


### [insights-operator](https://github.com/openshift/insights-operator/tree/902baf4c3db200120f784d850de616e6571fad79)

* [OCPBUGS-10239](https://issues.redhat.com/browse/OCPBUGS-10239): service_accounts.go Marshal fix (#750) [#750](https://github.com/openshift/insights-operator/pull/750)
* test(clusterconfig): add unit test for silenced_alerts.go and rename it to gather_silenced_alerts.go (#728) [#728](https://github.com/openshift/insights-operator/pull/728)
* test(clusterconfig): add unit test for ingresses.go and rename it to gather_cluster_ingress.go  (#729) [#729](https://github.com/openshift/insights-operator/pull/729)
* test(oauth): add unit test for oauth.go and rename it to gather_cluster_oauth.go  (#738) [#738](https://github.com/openshift/insights-operator/pull/738)
* gather logs - update "FilterLogFromScanner" function and add some tests (#735) [#735](https://github.com/openshift/insights-operator/pull/735)
* Add unit tests to openshift sdn controller logs gatherer (#733) [#733](https://github.com/openshift/insights-operator/pull/733)
* [OCPBUGS-6731](https://issues.redhat.com/browse/OCPBUGS-6731): Anonymize env vars from containers: HTTP_PROXY, HTTPS_PROXY (#723) [#723](https://github.com/openshift/insights-operator/pull/723)
* [OCPBUGS-6832](https://issues.redhat.com/browse/OCPBUGS-6832): feat(recent_metrics) adds openshift_apps_deploymentconfigs_strategy_total (#726) [#726](https://github.com/openshift/insights-operator/pull/726)
* [Full changelog](https://github.com/openshift/insights-operator/compare/36ea081721ebfa5efcd648576106a67d626b39aa...902baf4c3db200120f784d850de616e6571fad79)


### [ironic](https://github.com/openshift/ironic-image/tree/7aa7039683a9bec98c59cb47996e61960ae81a64)

* Adding dep on python3-werkzeug >= 2.0.3-4 [#349](https://github.com/openshift/ironic-image/pull/349)
* [Full changelog](https://github.com/openshift/ironic-image/compare/783a8fec33b611adda6317b298bf5ed8f7d12f78...7aa7039683a9bec98c59cb47996e61960ae81a64)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/ee5bee32747e1053fc6add76fcdd98f5816b27ba)

* [OCPBUGS-8380](https://issues.redhat.com/browse/OCPBUGS-8380): Adding dep on python3-werkzeug >= 2.0.3-4 [#70](https://github.com/openshift/ironic-agent-image/pull/70)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/0bdbcbd1c73e8463befaa69e08e3c96bc57652a3...ee5bee32747e1053fc6add76fcdd98f5816b27ba)


### [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager/tree/)

* [OCPBUGS-24790](https://issues.redhat.com/browse/OCPBUGS-24790): Updating ironic-static-ip-manager-container image to be consistent with ART [#41](https://github.com/openshift/ironic-static-ip-manager/pull/41)
* [OCPBUGS-18864](https://issues.redhat.com/browse/OCPBUGS-18864): Updating ironic-static-ip-manager images to be consistent with ART [#40](https://github.com/openshift/ironic-static-ip-manager/pull/40)
* [OCPBUGS-14614](https://issues.redhat.com/browse/OCPBUGS-14614): Remove provisioning netowrk route from "lo" [#39](https://github.com/openshift/ironic-static-ip-manager/pull/39)
* [OCPBUGS-4501](https://issues.redhat.com/browse/OCPBUGS-4501): Flush addresses on provisioning interface with global scope only [#35](https://github.com/openshift/ironic-static-ip-manager/pull/35)
* Updating ironic-static-ip-manager images to be consistent with ART [#34](https://github.com/openshift/ironic-static-ip-manager/pull/34)
* [Full changelog](https://github.com/openshift/ironic-static-ip-manager/compare/f524f2c9451ff0808beb54bece660640f58e8a3d...)


### [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter/tree/)

* [OCPBUGS-30532](https://issues.redhat.com/browse/OCPBUGS-30532): upgrade github.com/golang/protobuf to v1.5.4 for bette… [#101](https://github.com/openshift/k8s-prometheus-adapter/pull/101)
* [OCPBUGS-25583](https://issues.redhat.com/browse/OCPBUGS-25583): Updating ose-prometheus-adapter-container image to be consistent with ART [#100](https://github.com/openshift/k8s-prometheus-adapter/pull/100)
* [OCPBUGS-24986](https://issues.redhat.com/browse/OCPBUGS-24986): Updating ose-prometheus-adapter-container image to be consistent with ART [#99](https://github.com/openshift/k8s-prometheus-adapter/pull/99)
* [OCPBUGS-24986](https://issues.redhat.com/browse/OCPBUGS-24986): Updating ose-prometheus-adapter-container image to be consistent with ART [#98](https://github.com/openshift/k8s-prometheus-adapter/pull/98)
* [MON-3584](https://issues.redhat.com/browse/MON-3584): Remove trailing spaces from Dockerfile.ocp [#97](https://github.com/openshift/k8s-prometheus-adapter/pull/97)
* [OCPBUGS-24155](https://issues.redhat.com/browse/OCPBUGS-24155): Updating ose-prometheus-adapter-container image to be consistent with ART [#95](https://github.com/openshift/k8s-prometheus-adapter/pull/95)
* [MON-3489](https://issues.redhat.com/browse/MON-3489): Bump openshift/k8s-prometheus-adapter to v0.11.2 [#94](https://github.com/openshift/k8s-prometheus-adapter/pull/94)
* [OCPBUGS-21621](https://issues.redhat.com/browse/OCPBUGS-21621): Add a toggle to disable HTTP/2 on the server to mitigate CVE-2023-44487 [#88](https://github.com/openshift/k8s-prometheus-adapter/pull/88)
* add `machine424` and `rexagod`  to OWNERS [#73](https://github.com/openshift/k8s-prometheus-adapter/pull/73)
* [OCPBUGS-21621](https://issues.redhat.com/browse/OCPBUGS-21621): upgrade golang.org/x/net to 0.17.0 to address CVE-2023… [#80](https://github.com/openshift/k8s-prometheus-adapter/pull/80)
* [OCPBUGS-18971](https://issues.redhat.com/browse/OCPBUGS-18971): limit number of simultaneous client requests [#76](https://github.com/openshift/k8s-prometheus-adapter/pull/76)
* [OCPBUGS-19251](https://issues.redhat.com/browse/OCPBUGS-19251): Updating ose-prometheus-adapter images to be consistent with ART [#74](https://github.com/openshift/k8s-prometheus-adapter/pull/74)
* Bump openshift/k8s-prometheus-adapter to v0.11.0 [#72](https://github.com/openshift/k8s-prometheus-adapter/pull/72)
* [OCPBUGS-12659](https://issues.redhat.com/browse/OCPBUGS-12659): bump golang.org/x/net version [#71](https://github.com/openshift/k8s-prometheus-adapter/pull/71)
* Updating ose-prometheus-adapter images to be consistent with ART [#69](https://github.com/openshift/k8s-prometheus-adapter/pull/69)
* [OCPBUGS-10172](https://issues.redhat.com/browse/OCPBUGS-10172): Updating ose-prometheus-adapter images to be consistent with ART [#68](https://github.com/openshift/k8s-prometheus-adapter/pull/68)
* [Full changelog](https://github.com/openshift/k8s-prometheus-adapter/compare/b2e401059a11d23923adba51eeb82cbd5d75b7fc...)


### [keepalived-ipfailover](https://github.com/openshift/images/tree/04659348dbad0cd9b56596d5977d2934fa01d509)

* [OCPBUGS-10519](https://issues.redhat.com/browse/OCPBUGS-10519): Revert "bump RHEL8 egress-dns-proxy image to haproxy26" [#135](https://github.com/openshift/images/pull/135)
* Add jupierce as approver / remove Clayton [#127](https://github.com/openshift/images/pull/127)
* rhel9 base image: Fix build failure [#126](https://github.com/openshift/images/pull/126)
* Dockerfile: add RHEL9 base image dockerfile [#124](https://github.com/openshift/images/pull/124)
* [Full changelog](https://github.com/openshift/images/compare/c832cfbbf87f00fce3afdd263133678212d144d3...04659348dbad0cd9b56596d5977d2934fa01d509)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/8abc4b9450f553afd08fef27e82f306761a286db)

* [OCPBUGS-10624](https://issues.redhat.com/browse/OCPBUGS-10624): Fix race in Egress IP Tracker start [#520](https://github.com/openshift/sdn/pull/520)
* Drop non-conntrack-based Service support [#507](https://github.com/openshift/sdn/pull/507)
* [SDN-3635](https://issues.redhat.com/browse/SDN-3635): OSDN kube 1.26.0 rebase 2nd attempt [#510](https://github.com/openshift/sdn/pull/510)
* Revert "SDN-3635: OSDN kube 1.26.0 rebase" [#508](https://github.com/openshift/sdn/pull/508)
* [SDN-3635](https://issues.redhat.com/browse/SDN-3635): OSDN kube 1.26.0 rebase [#504](https://github.com/openshift/sdn/pull/504)
* [OCPBUGS-6714](https://issues.redhat.com/browse/OCPBUGS-6714): Initialize egress node monitoring struct with previous reachability status [#503](https://github.com/openshift/sdn/pull/503)
* [OCPBUGS-5842](https://issues.redhat.com/browse/OCPBUGS-5842): Add /usr/bin/oc to image [#495](https://github.com/openshift/sdn/pull/495)
* [Full changelog](https://github.com/openshift/sdn/compare/782ba97b7bd18c36ca1ef9ee38c0260b04e416bb...8abc4b9450f553afd08fef27e82f306761a286db)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/)

* [AUTH-486](https://issues.redhat.com/browse/AUTH-486): Add tests for the hardcoded-authorizer feature [#90](https://github.com/openshift/kube-rbac-proxy/pull/90)
* [OCPBUGS-29974](https://issues.redhat.com/browse/OCPBUGS-29974): Updating kube-rbac-proxy-container image to be consistent with ART for 4.16 [#91](https://github.com/openshift/kube-rbac-proxy/pull/91)
* [OCPBUGS-24818](https://issues.redhat.com/browse/OCPBUGS-24818): Updating kube-rbac-proxy-container image to be consistent with ART [#88](https://github.com/openshift/kube-rbac-proxy/pull/88)
* [OCPBUGS-21672](https://issues.redhat.com/browse/OCPBUGS-21672): http2: trim connetions and buffers [#80](https://github.com/openshift/kube-rbac-proxy/pull/80)
* [OCPBUGS-21672](https://issues.redhat.com/browse/OCPBUGS-21672): go.mod: bump golang.org/x/net to v0.17.0 [#73](https://github.com/openshift/kube-rbac-proxy/pull/73)
* [OCPBUGS-19143](https://issues.redhat.com/browse/OCPBUGS-19143): Updating kube-rbac-proxy images to be consistent with ART [#72](https://github.com/openshift/kube-rbac-proxy/pull/72)
* [AUTH-362](https://issues.redhat.com/browse/AUTH-362): v0.14.2 downstream [#70](https://github.com/openshift/kube-rbac-proxy/pull/70)
* [OCPBUGS-12313](https://issues.redhat.com/browse/OCPBUGS-12313): Update 4.14 kube-rbac-proxy image to be consistent with ART [#66](https://github.com/openshift/kube-rbac-proxy/pull/66)
* : OCPBUGS-12777: Downstream merge v0.14.1 [#67](https://github.com/openshift/kube-rbac-proxy/pull/67)
* [OCPBUGS-10089](https://issues.redhat.com/browse/OCPBUGS-10089): Update 4.14 kube-rbac-proxy image to be consistent with ART [#64](https://github.com/openshift/kube-rbac-proxy/pull/64)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/0aa2830ed7359fd8cd0e2f7db0ed96a733c5990e...)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/)

* NO-JIRA: Merge `v2.11.0` and `v2.12.0` tags [#110](https://github.com/openshift/kube-state-metrics/pull/110)
* [OCPBUGS-25585](https://issues.redhat.com/browse/OCPBUGS-25585): Updating kube-state-metrics-container image to be consistent with ART [#109](https://github.com/openshift/kube-state-metrics/pull/109)
* [OCPBUGS-24993](https://issues.redhat.com/browse/OCPBUGS-24993): Updating kube-state-metrics-container image to be consistent with ART [#108](https://github.com/openshift/kube-state-metrics/pull/108)
* [MON-3548](https://issues.redhat.com/browse/MON-3548): Bump openshift/kube-state-metrics to v2.10.1 [#107](https://github.com/openshift/kube-state-metrics/pull/107)
* [MON-3548](https://issues.redhat.com/browse/MON-3548): Merge tag v2.10.1 [#106](https://github.com/openshift/kube-state-metrics/pull/106)
* [OCPBUGS-21760](https://issues.redhat.com/browse/OCPBUGS-21760): bump x/net to v0.17.0 [#100](https://github.com/openshift/kube-state-metrics/pull/100)
* add `machine424` and `rexagod`  to OWNERS [#96](https://github.com/openshift/kube-state-metrics/pull/96)
* [OCPBUGS-19256](https://issues.redhat.com/browse/OCPBUGS-19256): Updating kube-state-metrics images to be consistent with ART [#97](https://github.com/openshift/kube-state-metrics/pull/97)
* Merge with `upstream/release-2.9` [#95](https://github.com/openshift/kube-state-metrics/pull/95)
* [OCPBUGS-12347](https://issues.redhat.com/browse/OCPBUGS-12347): Update 4.14 kube-state-metrics image to be consistent with ART [#94](https://github.com/openshift/kube-state-metrics/pull/94)
* Bump openshift/kube-state-metrics to v2.8.2 [#92](https://github.com/openshift/kube-state-metrics/pull/92)
* [OCPBUGS-10177](https://issues.redhat.com/browse/OCPBUGS-10177): Updating kube-state-metrics images to be consistent with ART [#91](https://github.com/openshift/kube-state-metrics/pull/91)
* Bump openshift/kube-state-metrics to v2.8.1 [#90](https://github.com/openshift/kube-state-metrics/pull/90)
* [OCPBUGS-6320](https://issues.redhat.com/browse/OCPBUGS-6320): Merge `upstream/release-2.8` [#89](https://github.com/openshift/kube-state-metrics/pull/89)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/0ad7baf7a5744918c17ce8ae11e2446e42b859af...)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/)

* "NO-JIRA: Sync upstream kubevirt-csi 2024-04-08" [#38](https://github.com/openshift/kubevirt-csi-driver/pull/38)
* [OCPBUGS-31276](https://issues.redhat.com/browse/OCPBUGS-31276): Updating ose-kubevirt-csi-driver-container image to be consistent with ART for 4.16 [#37](https://github.com/openshift/kubevirt-csi-driver/pull/37)
* [CNV-32073](https://issues.redhat.com/browse/CNV-32073): Sync upstream 2024-03-15 [#36](https://github.com/openshift/kubevirt-csi-driver/pull/36)
* NO-JIRA: Address CVE-2024-1725:  Restrict access to infrastructure PVCs by requiring matching infraClusterLabels on tenant PVCs [#32](https://github.com/openshift/kubevirt-csi-driver/pull/32)
* NO-JIRA: Snapshot backport [#31](https://github.com/openshift/kubevirt-csi-driver/pull/31)
* NO-JIRA: Auto sync upstream 2024 01 05 18 36 [#27](https://github.com/openshift/kubevirt-csi-driver/pull/27)
* [OCPBUGS-24805](https://issues.redhat.com/browse/OCPBUGS-24805): Updating ose-kubevirt-csi-driver-container image to be consistent with ART [#26](https://github.com/openshift/kubevirt-csi-driver/pull/26)
* [OCPBUGS-19115](https://issues.redhat.com/browse/OCPBUGS-19115): Updating ose-kubevirt-csi-driver-rhel8 images to be consistent with ART [#23](https://github.com/openshift/kubevirt-csi-driver/pull/23)
* Ensure volume is removed before returning success (#90) [#22](https://github.com/openshift/kubevirt-csi-driver/pull/22)
* Updating ose-kubevirt-csi-driver-rhel8 images to be consistent with ART [#20](https://github.com/openshift/kubevirt-csi-driver/pull/20)
* [CNV-29315](https://issues.redhat.com/browse/CNV-29315): kubevirt-csi unable to unpublish volumes in the event a VM is unexpectedly destroyed [#21](https://github.com/openshift/kubevirt-csi-driver/pull/21)
* Auto sync upstream 2023 02 12 09 [#19](https://github.com/openshift/kubevirt-csi-driver/pull/19)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/d9394b7a63a471101a1313ed4545def3c0574547...)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/)

* [OCPBUGS-26046](https://issues.redhat.com/browse/OCPBUGS-26046): Replace genisoimage with xorriso in 4.15 to allow rhel9 bump [#281](https://github.com/openshift/cluster-api-provider-libvirt/pull/281)
* [OCPBUGS-25630](https://issues.redhat.com/browse/OCPBUGS-25630): Add Snyk file to exclude vendor directory on scan [#276](https://github.com/openshift/cluster-api-provider-libvirt/pull/276)
* [OCPBUGS-25173](https://issues.redhat.com/browse/OCPBUGS-25173): Updating ose-libvirt-machine-controllers-container image to be consistent with ART [#275](https://github.com/openshift/cluster-api-provider-libvirt/pull/275)
* [OCPBUGS-25101](https://issues.redhat.com/browse/OCPBUGS-25101): Updating ose-libvirt-machine-controllers-container image to be consistent with ART [#274](https://github.com/openshift/cluster-api-provider-libvirt/pull/274)
* [OCPBUGS-24833](https://issues.redhat.com/browse/OCPBUGS-24833): Updating ose-libvirt-machine-controllers-container image to be consistent with ART [#273](https://github.com/openshift/cluster-api-provider-libvirt/pull/273)
* Add workaround for SLOF regression [#263](https://github.com/openshift/cluster-api-provider-libvirt/pull/263)
* client/domain: Remove spice as domain grahics [#260](https://github.com/openshift/cluster-api-provider-libvirt/pull/260)
* [OCPBUGS-19187](https://issues.redhat.com/browse/OCPBUGS-19187): Updating ose-libvirt-machine-controllers images to be consistent with ART [#262](https://github.com/openshift/cluster-api-provider-libvirt/pull/262)
* [OCPBUGS-18338](https://issues.redhat.com/browse/OCPBUGS-18338): Fix CI by running tests natively by default [#261](https://github.com/openshift/cluster-api-provider-libvirt/pull/261)
* Updating ose-libvirt-machine-controllers images to be consistent with ART [#259](https://github.com/openshift/cluster-api-provider-libvirt/pull/259)
* Updating ose-libvirt-machine-controllers images to be consistent with ART [#258](https://github.com/openshift/cluster-api-provider-libvirt/pull/258)
* Updating ose-libvirt-machine-controllers images to be consistent with ART [#257](https://github.com/openshift/cluster-api-provider-libvirt/pull/257)
* Updating ose-libvirt-machine-controllers images to be consistent with ART [#254](https://github.com/openshift/cluster-api-provider-libvirt/pull/254)
* Remove myself (frobware) from OWNERS [#253](https://github.com/openshift/cluster-api-provider-libvirt/pull/253)
* refactor: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml` [#252](https://github.com/openshift/cluster-api-provider-libvirt/pull/252)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/e55e92c14b2cd4925f8489f5f074015a64ed5713...)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/a23baf767a80a2a7e467be1c8ef9b32d40c66825)

* [OCPBUGS-10661](https://issues.redhat.com/browse/OCPBUGS-10661): Fix empty component version [#1130](https://github.com/openshift/machine-api-operator/pull/1130)
* [OCPBUGS-6063](https://issues.redhat.com/browse/OCPBUGS-6063): Add missed permission for a pod deletion on vsphere platform [#1121](https://github.com/openshift/machine-api-operator/pull/1121)
* Add Machine webhook to validate the new fields of NutanixMachineProviderConfig [#1117](https://github.com/openshift/machine-api-operator/pull/1117)
* [OCPBUGS-6063](https://issues.redhat.com/browse/OCPBUGS-6063): Forcefully delete unevicted pods within vSphere machine deletion procedure [#1118](https://github.com/openshift/machine-api-operator/pull/1118)
* : Update tooling for MAO [#1100](https://github.com/openshift/machine-api-operator/pull/1100)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/c47a0529c97813d450c2137f295f02e8f089dfb6...a23baf767a80a2a7e467be1c8ef9b32d40c66825)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/3bc14576d90de64101186a3087bb28f6cb388ea3)

* [OCPBUGS-8317](https://issues.redhat.com/browse/OCPBUGS-8317): Wrap podman commands in a while loop [#3605](https://github.com/openshift/machine-config-operator/pull/3605)
* [OCPBUGS-10367](https://issues.redhat.com/browse/OCPBUGS-10367): MCO-503: daemon: have a special path to sync in certs [#3612](https://github.com/openshift/machine-config-operator/pull/3612)
* [OCPBUGS-10427](https://issues.redhat.com/browse/OCPBUGS-10427): daemon: Drop duplicate `--authfile` used in `run` [#3616](https://github.com/openshift/machine-config-operator/pull/3616)
* [OCPBUGS-10220](https://issues.redhat.com/browse/OCPBUGS-10220): Remove hard requirement for the afterburn from early-running aws-related services [#3610](https://github.com/openshift/machine-config-operator/pull/3610)
* [COS-1926](https://issues.redhat.com/browse/COS-1926), [MCO-116](https://issues.redhat.com/browse/MCO-116), [OCPBUGS-8703](https://issues.redhat.com/browse/OCPBUGS-8703), [OCPBUGS-9951](https://issues.redhat.com/browse/OCPBUGS-9951): rhel coreos 9 4.13 katamari [#3604](https://github.com/openshift/machine-config-operator/pull/3604)
* [OCPBUGS-8702](https://issues.redhat.com/browse/OCPBUGS-8702): Revert "daemon: Temporarily copy auth file with more open perms on FCOS" [#3594](https://github.com/openshift/machine-config-operator/pull/3594)
* [OCPBUGS-8445](https://issues.redhat.com/browse/OCPBUGS-8445): Default the cgroup version to "v1" via base template controller [#3587](https://github.com/openshift/machine-config-operator/pull/3587)
* [OCPBUGS-8703](https://issues.redhat.com/browse/OCPBUGS-8703): Backport switchkernel 4.13 [#3595](https://github.com/openshift/machine-config-operator/pull/3595)
* [OPNET-208](https://issues.redhat.com/browse/OPNET-208): Prefer ipv6 on v6-primary dual stack deployments [#3565](https://github.com/openshift/machine-config-operator/pull/3565)
* [OCPBUGS-7719](https://issues.redhat.com/browse/OCPBUGS-7719): Add back cleanupDuplicateMC [#3559](https://github.com/openshift/machine-config-operator/pull/3559)
* [OCPBUGS-7903](https://issues.redhat.com/browse/OCPBUGS-7903): Pool degraded with error: rpm-ostree kargs: signal: terminated [#3572](https://github.com/openshift/machine-config-operator/pull/3572)
* Fixing platform path order as platform specific path should be the last [#3574](https://github.com/openshift/machine-config-operator/pull/3574)
* [MCO-417](https://issues.redhat.com/browse/MCO-417): MCO-418: MCD watches/create/update password with MachineConfig [#3539](https://github.com/openshift/machine-config-operator/pull/3539)
* Regenerate controllerconfig.crd.yaml [#3567](https://github.com/openshift/machine-config-operator/pull/3567)
* [OCPBUGS-7743](https://issues.redhat.com/browse/OCPBUGS-7743): Adding dnsmasq config for sno [#3551](https://github.com/openshift/machine-config-operator/pull/3551)
* [WRKLDS-705](https://issues.redhat.com/browse/WRKLDS-705): Bump openshift/api to enable DynamicResourceAllocation through TechPreviewNoUpgrade [#3568](https://github.com/openshift/machine-config-operator/pull/3568)
* [OCPBUGS-7909](https://issues.redhat.com/browse/OCPBUGS-7909): Fix permissions on resolv.conf [#3570](https://github.com/openshift/machine-config-operator/pull/3570)
* [OCPBUGS-7896](https://issues.redhat.com/browse/OCPBUGS-7896): MCO should not add keepalived pod manifests in case of VSPHERE UPI [#3569](https://github.com/openshift/machine-config-operator/pull/3569)
* [OCPNODE-1501](https://issues.redhat.com/browse/OCPNODE-1501): add protectKernelDefaults to kubelet config [#3556](https://github.com/openshift/machine-config-operator/pull/3556)
* [OPNET-197](https://issues.redhat.com/browse/OPNET-197): Remove node-ip from kubelet for dual-stack vSphere [#3518](https://github.com/openshift/machine-config-operator/pull/3518)
* [OSASINFRA-3091](https://issues.redhat.com/browse/OSASINFRA-3091): External LB support for on-prem platforms [#3519](https://github.com/openshift/machine-config-operator/pull/3519)
* [OCPBUGS-6682](https://issues.redhat.com/browse/OCPBUGS-6682): Switch from ifconfig to iproute2 [#3524](https://github.com/openshift/machine-config-operator/pull/3524)
* [OCPBUGS-1565](https://issues.redhat.com/browse/OCPBUGS-1565): Prevent possible split-brain scenario with keepalived unicast [#3342](https://github.com/openshift/machine-config-operator/pull/3342)
* Fix typo in ctrcfg,kcfg docs [#3547](https://github.com/openshift/machine-config-operator/pull/3547)
* [OPNET-133](https://issues.redhat.com/browse/OPNET-133): Enabling remote worker feature only for baremetal platform [#3540](https://github.com/openshift/machine-config-operator/pull/3540)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/55684a0a23d6d110331e8279af5d96f2f8e3a443...3bc14576d90de64101186a3087bb28f6cb388ea3)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/b14856ffbc8fbe1f986cf1b7b835bbeaa786ce5e)

* Force updating rhcos image to version 413.92.202303190222-0 [#27](https://github.com/openshift/machine-os-images/pull/27)
* Updating ose-machine-os-images images to be consistent with ART [#25](https://github.com/openshift/machine-os-images/pull/25)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/566bf59501f178bd80e410fda66cc424de6a4891...b14856ffbc8fbe1f986cf1b7b835bbeaa786ce5e)


### [multus-cni](https://github.com/openshift/multus-cni/tree/3f9b2d036b6cbc562aca9269bbeb7d0be198549c)

* Multus 4.0 upstream sync, strike back [#146](https://github.com/openshift/multus-cni/pull/146)
* [Full changelog](https://github.com/openshift/multus-cni/compare/07ebb8b181ad9f357f3d762f9070b8e9d4981c89...3f9b2d036b6cbc562aca9269bbeb7d0be198549c)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/7517829eb1574d5852e3e53108fdff24f552da25)

* Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART [#112](https://github.com/openshift/whereabouts-cni/pull/112)
* Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART [#111](https://github.com/openshift/whereabouts-cni/pull/111)
* Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART [#110](https://github.com/openshift/whereabouts-cni/pull/110)
* Upstream sync: IP reconciler controller and  dual stack [#107](https://github.com/openshift/whereabouts-cni/pull/107)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/91b10978a8af35ba496990f2087b8dadf0be09f2...7517829eb1574d5852e3e53108fdff24f552da25)


### [must-gather](https://github.com/openshift/must-gather/tree/5eca0cb65ea6dd13f907d1f7493ed237f07e3906)

* Revert "OCPNODE-1499: Add CMA gather script" [#350](https://github.com/openshift/must-gather/pull/350)
* [OCPNODE-1499](https://issues.redhat.com/browse/OCPNODE-1499): Add CMA gather script [#348](https://github.com/openshift/must-gather/pull/348)
* [WINC-977](https://issues.redhat.com/browse/WINC-977): Update kube-proxy log file name [#347](https://github.com/openshift/must-gather/pull/347)
* [Full changelog](https://github.com/openshift/must-gather/compare/3860800ff98445620e40d474a9f6dd2f36027fca...5eca0cb65ea6dd13f907d1f7493ed237f07e3906)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/e72c8ad1581132817c09e23295f55425a14a5c58)

* Updating ose-network-metrics-daemon images to be consistent with ART [#62](https://github.com/openshift/network-metrics-daemon/pull/62)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/2dfa218ea9feb2b80f22f16c27bddd16fbcbfb87...e72c8ad1581132817c09e23295f55425a14a5c58)


### [network-tools](https://github.com/openshift/network-tools/tree/b4098c67659217e36ac7077229b25bbe2c3e5f38)

* Updating ose-network-tools images to be consistent with ART [#75](https://github.com/openshift/network-tools/pull/75)
* [Full changelog](https://github.com/openshift/network-tools/compare/2775b7da5516704a35f968c53f1d2c675e8d9169...b4098c67659217e36ac7077229b25bbe2c3e5f38)


### [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix/tree/bc449492731076867420964be5ce3217fbcfda14)

* Updating ose-nutanix-cloud-controller-manager images to be consistent with ART [#4](https://github.com/openshift/cloud-provider-nutanix/pull/4)
* Update OWNERS [#8](https://github.com/openshift/cloud-provider-nutanix/pull/8)
* [Full changelog](https://github.com/openshift/cloud-provider-nutanix/compare/b1c2c95078fa008ab8d555d9431abe26322ad636...bc449492731076867420964be5ce3217fbcfda14)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/e0f567fc40892d28487ad12a24705f88ff67ba84)

* Support categories and project fields of NutanixMachineProviderConfig [#38](https://github.com/openshift/machine-api-provider-nutanix/pull/38)
* : Port to ginkgo v2 [#41](https://github.com/openshift/machine-api-provider-nutanix/pull/41)
* Update OWNERS [#39](https://github.com/openshift/machine-api-provider-nutanix/pull/39)
* : Update k8s packages to 1.26 [#40](https://github.com/openshift/machine-api-provider-nutanix/pull/40)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/df79b275ca9a70bb829b8756c9c0fc84a5f8b379...e0f567fc40892d28487ad12a24705f88ff67ba84)


### [oauth-server](https://github.com/openshift/oauth-server/tree/7e584f112a4ee8423ed027a15cc3f345ee09b267)

* [OCPBUGS-2457](https://issues.redhat.com/browse/OCPBUGS-2457): don't log request query and fragment on failed authn request [#118](https://github.com/openshift/oauth-server/pull/118)
* [OCPBUGS-2457](https://issues.redhat.com/browse/OCPBUGS-2457): don't log request query and fragment on failed authn request [#115](https://github.com/openshift/oauth-server/pull/115)
* [OCPBUGS-6238](https://issues.redhat.com/browse/OCPBUGS-6238): update art image [#116](https://github.com/openshift/oauth-server/pull/116)
* [Full changelog](https://github.com/openshift/oauth-server/compare/a803bf49503ed73a3eb1487b0a8798e5a3f6b241...7e584f112a4ee8423ed027a15cc3f345ee09b267)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/8cf1296dcda90756ad97a3799d983f9c7021e36b)

* Remove "unsupported" wording from info on console (#594) [#594](https://github.com/openshift/oc-mirror/pull/594)
* Bugfix for destination registry nested paths length (#583) [#583](https://github.com/openshift/oc-mirror/pull/583)
* Fix OCPBUGS-5168: Upgrade helm.sh/helm/v3 to v3.11.2 fixing CVE-2022-23526 and CVE-2022-23525 (#592) [#592](https://github.com/openshift/oc-mirror/pull/592)
* [OCPBUGS-10051](https://issues.redhat.com/browse/OCPBUGS-10051): fix: remove catalog reference from ImageContentSourcePolicy.yaml (#587) [#587](https://github.com/openshift/oc-mirror/pull/587)
* [OCPBUGS-8216](https://issues.redhat.com/browse/OCPBUGS-8216): fix: remove an unecessary error message (#581) [#581](https://github.com/openshift/oc-mirror/pull/581)
* docs: add information about unsupported scenario (#578) [#578](https://github.com/openshift/oc-mirror/pull/578)
* Updating oc-mirror-plugin images to be consistent with ART (#570) [#570](https://github.com/openshift/oc-mirror/pull/570)
* Fix usage of registries.conf for OCI feature (#569) [#569](https://github.com/openshift/oc-mirror/pull/569)
* [CFE-739](https://issues.redhat.com/browse/CFE-739): Add skip pruning flag and logic (#567) [#567](https://github.com/openshift/oc-mirror/pull/567)
* [CFE-749](https://issues.redhat.com/browse/CFE-749): add e2e test for oci catalog feature to include release and additiona… (#562) [#562](https://github.com/openshift/oc-mirror/pull/562)
* [CFE-764](https://issues.redhat.com/browse/CFE-764): Introduce v1alpha2.Operator.TargetCatalog  (#565) [#565](https://github.com/openshift/oc-mirror/pull/565)
* docs: adds clarification to imageset reference and examples (#555) [#555](https://github.com/openshift/oc-mirror/pull/555)
* [CFE-768](https://issues.redhat.com/browse/CFE-768): Update to allow for incremental and pruning for oci feature (#564) [#564](https://github.com/openshift/oc-mirror/pull/564)
* use new cincinnati endpoint to download tarball (#552) [#552](https://github.com/openshift/oc-mirror/pull/552)
* feat: OCI catalog filtering implementation (#559) [#559](https://github.com/openshift/oc-mirror/pull/559)
* [CFE-761](https://issues.redhat.com/browse/CFE-761): Improve user experience of oc-mirror with the OCI FBC feature (#557) [#557](https://github.com/openshift/oc-mirror/pull/557)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/1183c30d32ecd2a68fd607a684a51bdb87e62699...8cf1296dcda90756ad97a3799d983f9c7021e36b)


### [olm-rukpak](https://github.com/openshift/operator-framework-rukpak/tree/66b3e551fc2730beb4c46d478166b38766c5f346)

* [OCPBUGS-7683](https://issues.redhat.com/browse/OCPBUGS-7683): Bump helm to v3.11.1 to address CVE-2023-25165 [#19](https://github.com/openshift/operator-framework-rukpak/pull/19)
* [Full changelog](https://github.com/openshift/operator-framework-rukpak/compare/226e7436bd031dd1a72e5057d6e21fee29f1a6b1...66b3e551fc2730beb4c46d478166b38766c5f346)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/dcbeee1e73552153c7c70a7d274d0862deaa9710)

* [OCPBUGS-8701](https://issues.redhat.com/browse/OCPBUGS-8701): Clear metadata.namespace on projects before write. [#357](https://github.com/openshift/openshift-apiserver/pull/357)
* Bump 1.26 proof [#354](https://github.com/openshift/openshift-apiserver/pull/354)
* [OCPBUGS-7689](https://issues.redhat.com/browse/OCPBUGS-7689): Fix a project validation error due to empty string value [#352](https://github.com/openshift/openshift-apiserver/pull/352)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/61cfd7d25b8d71b2dd09ef1ff912498ca0008c27...dcbeee1e73552153c7c70a7d274d0862deaa9710)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/87de83867ac51730f506138ee790a56ca21d9fc9)

* Add explicit license [#248](https://github.com/openshift/openshift-controller-manager/pull/248)
* [BUILD-407](https://issues.redhat.com/browse/BUILD-407): Revert "remove tech preview feature gate for build csi volumes" [#251](https://github.com/openshift/openshift-controller-manager/pull/251)
* [BUILD-407](https://issues.redhat.com/browse/BUILD-407): remove tech preview feature gate for build csi volumes [#250](https://github.com/openshift/openshift-controller-manager/pull/250)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/847b3e92231aafc7f322f76d77afb04da2568188...87de83867ac51730f506138ee790a56ca21d9fc9)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/8b3f605f9fe185fe3e7e4018ce2231af5f08bd76)

* [OCPBUGS-10558](https://issues.redhat.com/browse/OCPBUGS-10558): machineset_controller: Stop caching clouds credentials [#64](https://github.com/openshift/machine-api-provider-openstack/pull/64)
* [OCPBUGS-10298](https://issues.redhat.com/browse/OCPBUGS-10298): Use TenantID if ProjectID is empty [#62](https://github.com/openshift/machine-api-provider-openstack/pull/62)
* Add dual stack API and Ingress VIPs support [#58](https://github.com/openshift/machine-api-provider-openstack/pull/58)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/a41e3079c8122b7fa310ae825c1ec123f66e9538...8b3f605f9fe185fe3e7e4018ce2231af5f08bd76)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/d4219045431cb6a35ad0d1b5d5fdb0b09adf1430)

* [OCPBUGS-794](https://issues.redhat.com/browse/OCPBUGS-794): remove dependence on OLM_VERSION file [#462](https://github.com/openshift/operator-framework-olm/pull/462)
* [OCPBUGS-7754](https://issues.redhat.com/browse/OCPBUGS-7754): update cluster policy operator dependency [#455](https://github.com/openshift/operator-framework-olm/pull/455)
* [OCPBUGS-948](https://issues.redhat.com/browse/OCPBUGS-948): Set openshift.io/scc label to empty [#445](https://github.com/openshift/operator-framework-olm/pull/445)
* update cpc dep [#448](https://github.com/openshift/operator-framework-olm/pull/448)
* [OCPBUGS-672](https://issues.redhat.com/browse/OCPBUGS-672): Catalog Pod Startup Probe Timeout [#446](https://github.com/openshift/operator-framework-olm/pull/446)
* [OCPBUGS-7102](https://issues.redhat.com/browse/OCPBUGS-7102): make plugin e2e tests skippable [#444](https://github.com/openshift/operator-framework-olm/pull/444)
* Packageserver version discoverability [#437](https://github.com/openshift/operator-framework-olm/pull/437)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/7ec6b948a148171bd336750fed98818890136429...d4219045431cb6a35ad0d1b5d5fdb0b09adf1430)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/61fe1b61bff01d0a16ee54b0fdff2c28c4cdc1e6)

* Adding storage team to OWNERS so they can perform lib-go updates. [#22](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/22)
* add proxy to node-update-controller [#18](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/18)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/f755619caafc68cf1574d147073efb48425feffd...61fe1b61bff01d0a16ee54b0fdff2c28c4cdc1e6)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/bf49c5c1b07137baa766b4d78b9e9c2650ef59ad)

* [OCPBUGS-6457](https://issues.redhat.com/browse/OCPBUGS-6457): Update dependencies to Kube 1.26 [#38](https://github.com/openshift/machine-api-provider-powervs/pull/38)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/8fc5b3cd8cd583a01879e297869b3a25f7769d29...bf49c5c1b07137baa766b4d78b9e9c2650ef59ad)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/9cd6788ed2cb30982c8b9d6ec8f8c7e72b30d7df)

* [OCPBUGS-6055](https://issues.redhat.com/browse/OCPBUGS-6055): [bot] Bump openshift/prometheus-operator to v0.63.0 [#216](https://github.com/openshift/prometheus-operator/pull/216)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/7d400245708c4ff08ce509e3f5901494f4890039...9cd6788ed2cb30982c8b9d6ec8f8c7e72b30d7df)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/)

* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#235](https://github.com/openshift/service-ca-operator/pull/235)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#230](https://github.com/openshift/service-ca-operator/pull/230)
* [API-1673](https://issues.redhat.com/browse/API-1673): Add description annotations to service CA secret and configmap [#225](https://github.com/openshift/service-ca-operator/pull/225)
* add ownership for unshared secrets and configmaps [#220](https://github.com/openshift/service-ca-operator/pull/220)
* [OCPBUGS-21798](https://issues.redhat.com/browse/OCPBUGS-21798): go.mod: bump golang.org/x/net to v0.17.0 [#223](https://github.com/openshift/service-ca-operator/pull/223)
* [OCPBUGS-19176](https://issues.redhat.com/browse/OCPBUGS-19176): Updating ose-service-ca-operator images to be consistent with ART [#221](https://github.com/openshift/service-ca-operator/pull/221)
* [OCPBUGS-8512](https://issues.redhat.com/browse/OCPBUGS-8512): fix admission webhook CA injection [#219](https://github.com/openshift/service-ca-operator/pull/219)
* [OCPBUGS-16536](https://issues.redhat.com/browse/OCPBUGS-16536): bump lib-go to get rid of the goproxy dep [#213](https://github.com/openshift/service-ca-operator/pull/213)
* [OCPBUGS-12662](https://issues.redhat.com/browse/OCPBUGS-12662): bump kube to 1.27.1 [#212](https://github.com/openshift/service-ca-operator/pull/212)
* Updating ose-service-ca-operator images to be consistent with ART [#211](https://github.com/openshift/service-ca-operator/pull/211)
* [API-1525](https://issues.redhat.com/browse/API-1525): Add openshift_service-ca namespace yaml to manifests dir [#208](https://github.com/openshift/service-ca-operator/pull/208)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/1b89fdce3fcccecdc5fdb705fe674cd4bfc58a2a...)


### [tests](https://github.com/openshift/origin/tree/2dfafe55b158fcd1a0a7a556e697fb775b260ffa)

* 4.13 disruption/alert data update [#27813](https://github.com/openshift/origin/pull/27813)
* [OCPBUGS-10662](https://issues.redhat.com/browse/OCPBUGS-10662): Add cpu partitioning tests [#27812](https://github.com/openshift/origin/pull/27812)
* [OCPBUGS-8488](https://issues.redhat.com/browse/OCPBUGS-8488): Realtime Kernel Tests [#27778](https://github.com/openshift/origin/pull/27778)
* [TRT-910](https://issues.redhat.com/browse/TRT-910): Temporarily flake ALL P99 disruption tests in 4.13 [#27810](https://github.com/openshift/origin/pull/27810)
* [OCPBUGS-9913](https://issues.redhat.com/browse/OCPBUGS-9913): add test for UnhealthyPodEvictionPolicy for PDBs [#27785](https://github.com/openshift/origin/pull/27785)
* [OCPBUGS-8412](https://issues.redhat.com/browse/OCPBUGS-8412): Bump(openshift/kubernetes): to get fix for resizing flake [#27792](https://github.com/openshift/origin/pull/27792)
* [OCPBUGS-9915](https://issues.redhat.com/browse/OCPBUGS-9915): Temp flake all azure disruption [#27786](https://github.com/openshift/origin/pull/27786)
* [OCPBUGS-8742](https://issues.redhat.com/browse/OCPBUGS-8742): Revert "Switch to readyz path for health probes on Azure" [#27784](https://github.com/openshift/origin/pull/27784)
* [OCPBUGS-8401](https://issues.redhat.com/browse/OCPBUGS-8401): Bump to 1.26.2 [#27769](https://github.com/openshift/origin/pull/27769)
* [OSASINFRA-3109](https://issues.redhat.com/browse/OSASINFRA-3109): networking: add a test for control plane LB [#27748](https://github.com/openshift/origin/pull/27748)
* Add additional comments with findings from k8s 1.26 bump [#27728](https://github.com/openshift/origin/pull/27728)
* [OCPBUGS-8092](https://issues.redhat.com/browse/OCPBUGS-8092): mark volume expansion test as Flaky [#27767](https://github.com/openshift/origin/pull/27767)
* Revert "Add vlan/macvlan/ipvlan incontainer master tests" [#27766](https://github.com/openshift/origin/pull/27766)
* [OCPBUGS-7519](https://issues.redhat.com/browse/OCPBUGS-7519): Revert Skip nfs tests temporarilly [#27762](https://github.com/openshift/origin/pull/27762)
* [TRT-800](https://issues.redhat.com/browse/TRT-800): Collect variant data for risk analysis [#27731](https://github.com/openshift/origin/pull/27731)
* Add tap plugin test [#27737](https://github.com/openshift/origin/pull/27737)
* Port alert backstop test to invariant, allow running alert/disruption invariants locally for developers [#27724](https://github.com/openshift/origin/pull/27724)
* Add vlan/macvlan/ipvlan incontainer master tests [#27700](https://github.com/openshift/origin/pull/27700)
* [STOR-1077](https://issues.redhat.com/browse/STOR-1077): promote CSIInlineVolumeAdmission feature gate to GA [#27713](https://github.com/openshift/origin/pull/27713)
* move disruption locators to monitorapi [#27760](https://github.com/openshift/origin/pull/27760)
* Switch to readyz path for health probes on Azure [#27753](https://github.com/openshift/origin/pull/27753)
* Fix defunct owners file in test/extended/util/annotate [#27750](https://github.com/openshift/origin/pull/27750)
* [OCPBUGS-7833](https://issues.redhat.com/browse/OCPBUGS-7833): Rework no optional capabilities rules [#27745](https://github.com/openshift/origin/pull/27745)
* [OCPVE-278](https://issues.redhat.com/browse/OCPVE-278): fix: multi build error, only add rt-tests for x86 [#27749](https://github.com/openshift/origin/pull/27749)
* Restore alert refactor with fix for disruption tests all being skipped [#27742](https://github.com/openshift/origin/pull/27742)
* [OCPBUGS-7519](https://issues.redhat.com/browse/OCPBUGS-7519): Skip nfs tests temporarilly [#27747](https://github.com/openshift/origin/pull/27747)
* [OCPVE-278](https://issues.redhat.com/browse/OCPVE-278): feat: add rt tests package to openshift-tests [#27740](https://github.com/openshift/origin/pull/27740)
* [OCPBUGS-7616](https://issues.redhat.com/browse/OCPBUGS-7616): Revert Revert "bump(k8s): 1.26" [#27738](https://github.com/openshift/origin/pull/27738)
* Revert "bump(k8s): 1.26" [#27736](https://github.com/openshift/origin/pull/27736)
* test/extended/authorization/rbac: Condition console RBAC on 'Console' capability [#27681](https://github.com/openshift/origin/pull/27681)
* Revert "Alert Testing on new Namespace and Level" [#27734](https://github.com/openshift/origin/pull/27734)
* [OCPBUGS-7488](https://issues.redhat.com/browse/OCPBUGS-7488): test flake: should not reconcile SC when state is Unmanaged [#27726](https://github.com/openshift/origin/pull/27726)
* Revert "perform build csi volume test on GA clusters" [#27730](https://github.com/openshift/origin/pull/27730)
* [OCPBUGS-1125](https://issues.redhat.com/browse/OCPBUGS-1125): remove reference to old guard pods [#27727](https://github.com/openshift/origin/pull/27727)
* bump(k8s): 1.26 [#27694](https://github.com/openshift/origin/pull/27694)
* Do not bail on producing artifacts when nodes are dead [#27729](https://github.com/openshift/origin/pull/27729)
* audit inspection [#27687](https://github.com/openshift/origin/pull/27687)
* Allow baremetal tests to run on Azure platform [#27573](https://github.com/openshift/origin/pull/27573)
* [OCPBUGS-6902](https://issues.redhat.com/browse/OCPBUGS-6902): Wait for DNS DS pods to be ready [#27715](https://github.com/openshift/origin/pull/27715)
* Chart CI cluster DNS problems in different color from disruption [#27719](https://github.com/openshift/origin/pull/27719)
* Add pathological events into spyglass charts [#27649](https://github.com/openshift/origin/pull/27649)
* [BUILD-407](https://issues.redhat.com/browse/BUILD-407): perform build csi volume test on GA clusters [#27720](https://github.com/openshift/origin/pull/27720)
* Kubevirt network connectivity tests [#27456](https://github.com/openshift/origin/pull/27456)
* [TRT-819](https://issues.redhat.com/browse/TRT-819): Add check for parse signature error [#27705](https://github.com/openshift/origin/pull/27705)
* Allow baremetal tests to run on GCP platform [#27618](https://github.com/openshift/origin/pull/27618)
* Add PDB to resource watch [#27721](https://github.com/openshift/origin/pull/27721)
* replace centos with ubi8 in build test dockerfile [#27718](https://github.com/openshift/origin/pull/27718)
* [Full changelog](https://github.com/openshift/origin/compare/854ca441d28f6e78aaa252e38aae34eae0a050b3...2dfafe55b158fcd1a0a7a556e697fb775b260ffa)


### [thanos](https://github.com/openshift/thanos/tree/)

* [MON-3799](https://issues.redhat.com/browse/MON-3799): Bump openshift/thanos to v0.34.1 [#141](https://github.com/openshift/thanos/pull/141)
* [OCPBUGS-30537](https://issues.redhat.com/browse/OCPBUGS-30537): CVE-2024-24786 Bump google.golang.org/protobuf to v1.33.0 [#143](https://github.com/openshift/thanos/pull/143)
* [MON-3725](https://issues.redhat.com/browse/MON-3725): Update OWNERS: move raptorsun out of reviewer [#140](https://github.com/openshift/thanos/pull/140)
* [MON-3753](https://issues.redhat.com/browse/MON-3753): Increase thanos tests timeout [#144](https://github.com/openshift/thanos/pull/144)
* [OCPBUGS-29982](https://issues.redhat.com/browse/OCPBUGS-29982): Updating ose-thanos-container image to be consistent with ART for 4.16 [#142](https://github.com/openshift/thanos/pull/142)
* [MON-3703](https://issues.redhat.com/browse/MON-3703): Bump openshift/thanos to v0.34.0 [#139](https://github.com/openshift/thanos/pull/139)
* [MON-3650](https://issues.redhat.com/browse/MON-3650): Bump openshift/thanos to v0.33.0 [#136](https://github.com/openshift/thanos/pull/136)
* [OCPBUGS-24840](https://issues.redhat.com/browse/OCPBUGS-24840): Updating ose-thanos-container image to be consistent with ART [#135](https://github.com/openshift/thanos/pull/135)
* [OCPBUGS-24840](https://issues.redhat.com/browse/OCPBUGS-24840): Updating ose-thanos-container image to be consistent with ART [#134](https://github.com/openshift/thanos/pull/134)
* [OCPBUGS-22741](https://issues.redhat.com/browse/OCPBUGS-22741): Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.42.0 to 0.44.0 [#131](https://github.com/openshift/thanos/pull/131)
* Bump openshift/thanos to v0.32.5 [#129](https://github.com/openshift/thanos/pull/129)
* [OCPBUGS-21630](https://issues.redhat.com/browse/OCPBUGS-21630): Bump golang.org/x/net to v0.17.0 [#123](https://github.com/openshift/thanos/pull/123)
* Bump openshift/thanos to v0.32.4 [#121](https://github.com/openshift/thanos/pull/121)
* [OCPBUGS-19406](https://issues.redhat.com/browse/OCPBUGS-19406): Fix rh-manifest.txt generation [#120](https://github.com/openshift/thanos/pull/120)
* [OCPBUGS-19206](https://issues.redhat.com/browse/OCPBUGS-19206): Updating thanos images to be consistent with ART [#117](https://github.com/openshift/thanos/pull/117)
* Bump openshift/thanos to v0.32.3 [#118](https://github.com/openshift/thanos/pull/118)
* update OWNERS file [#119](https://github.com/openshift/thanos/pull/119)
* Bump Thanos v0.32.2 [#115](https://github.com/openshift/thanos/pull/115)
* [OCPBUGS-12525](https://issues.redhat.com/browse/OCPBUGS-12525): fallback Thanos to 0.30.2. [#112](https://github.com/openshift/thanos/pull/112)
* Updating thanos images to be consistent with ART [#107](https://github.com/openshift/thanos/pull/107)
* [OCPBUGS-11928](https://issues.redhat.com/browse/OCPBUGS-11928): Build with Go 1.20 (#6126) [#106](https://github.com/openshift/thanos/pull/106)
* [OCPBUGS-10139](https://issues.redhat.com/browse/OCPBUGS-10139): Updating thanos images to be consistent with ART [#104](https://github.com/openshift/thanos/pull/104)
* Update to v0.31.0 from upstream [#105](https://github.com/openshift/thanos/pull/105)
* [Full changelog](https://github.com/openshift/thanos/compare/b6f11a5b2d63ca6269fcbd7b9488d8a8e9188d9a...)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/)

* [OCPBUGS-27865](https://issues.redhat.com/browse/OCPBUGS-27865): Add snyk exclusion file [#63](https://github.com/openshift/cloud-provider-vsphere/pull/63)
* [OCPCLOUD-2420](https://issues.redhat.com/browse/OCPCLOUD-2420): Merge https://github.com/kubernetes/cloud-provider-vsphere:master (46a5796) into master [#53](https://github.com/openshift/cloud-provider-vsphere/pull/53)
* [OCPBUGS-26125](https://issues.redhat.com/browse/OCPBUGS-26125): Add Snyk file to exclude vendor directory on scan [#61](https://github.com/openshift/cloud-provider-vsphere/pull/61)
* [OCPBUGS-25584](https://issues.redhat.com/browse/OCPBUGS-25584): Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART [#60](https://github.com/openshift/cloud-provider-vsphere/pull/60)
* [OCPBUGS-24991](https://issues.redhat.com/browse/OCPBUGS-24991): Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART [#59](https://github.com/openshift/cloud-provider-vsphere/pull/59)
* [OCPBUGS-24157](https://issues.redhat.com/browse/OCPBUGS-24157): Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART [#58](https://github.com/openshift/cloud-provider-vsphere/pull/58)
* [OCPCLOUD-2184](https://issues.redhat.com/browse/OCPCLOUD-2184): Merge https://github.com/kubernetes/cloud-provider-vsphere:master (ff83354) into master [#42](https://github.com/openshift/cloud-provider-vsphere/pull/42)
* Update OWNERS [#51](https://github.com/openshift/cloud-provider-vsphere/pull/51)
* [OCPBUGS-19255](https://issues.redhat.com/browse/OCPBUGS-19255): Updating ose-vsphere-cloud-controller-manager images to be consistent with ART [#48](https://github.com/openshift/cloud-provider-vsphere/pull/48)
* [OCPBUGS-15154](https://issues.redhat.com/browse/OCPBUGS-15154): Scope secret informers per namespace [#44](https://github.com/openshift/cloud-provider-vsphere/pull/44)
* [OCPBUGS-13133](https://issues.redhat.com/browse/OCPBUGS-13133): Updating ose-vsphere-cloud-controller-manager images to be consistent with ART [#37](https://github.com/openshift/cloud-provider-vsphere/pull/37)
* [OCPCLOUD-2048](https://issues.redhat.com/browse/OCPCLOUD-2048): Merge https://github.com/kubernetes/cloud-provider-vsphere:master (fb273c6) into master [#39](https://github.com/openshift/cloud-provider-vsphere/pull/39)
* Fix downstream commit detection [#41](https://github.com/openshift/cloud-provider-vsphere/pull/41)
* Merge https://github.com/kubernetes/cloud-provider-vsphere:master (895e131) into master [#34](https://github.com/openshift/cloud-provider-vsphere/pull/34)
* Updating ose-vsphere-cloud-controller-manager images to be consistent with ART [#35](https://github.com/openshift/cloud-provider-vsphere/pull/35)
* [OCPCLOUD-1863](https://issues.redhat.com/browse/OCPCLOUD-1863): Merge https://github.com/kubernetes/cloud-provider-vsphere:master (d36b7fa) into master [#33](https://github.com/openshift/cloud-provider-vsphere/pull/33)
* [OCPBUGS-6464](https://issues.redhat.com/browse/OCPBUGS-6464): Merge https://github.com/kubernetes/cloud-provider-vsphere:master into master [#21](https://github.com/openshift/cloud-provider-vsphere/pull/21)
* Update OWNERS [#32](https://github.com/openshift/cloud-provider-vsphere/pull/32)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/497af4e8faaae46e391a36e7e00a2b07d8801020...)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/24e08ddf65fd387ea7c71e229b13e47d6cd3643f)

* Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:release-1.5 (f4a58d1) into master [#10](https://github.com/openshift/cluster-api-provider-vsphere/pull/10)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/3deff63038d0a31b150bf31a1407117371737fc1...24e08ddf65fd387ea7c71e229b13e47d6cd3643f)