# 4.14.0-0.okd-scos-2023-08-17-022029

Created: 2023-08-17 14:28:27 +0000 UTC

Image Digest: `sha256:5c3ae7d3b45045d76d3effa0756b86fb7a0a320dcba206d6b219a6e90008c1c2`

Promoted from registry.ci.openshift.org/origin/release-scos:4.14.0-0.okd-scos-2023-08-17-022029


## Changes from 4.14.0-0.okd-scos-2023-05-23-224540

### Components

* Kubernetes upgraded from 1.27.1 to 1.27.4
* CentOS Stream CoreOS upgraded from 414.9.202305230739-0 to 414.9.202308150731-0


### New images

* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [ad853769](https://github.com/openshift/agent-installer-utils/commit/ad8537697818870b53b6262041f0dfa78a3b41c2) `sha256:c97a10834be27deb6eb2859dbede48c449602aac1dc1988bd9e2408db0afeee4`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [a474b2b0](https://github.com/openshift/azure-workload-identity/commit/a474b2b0bc88d30cb4661b49bc3f9adac620b773) `sha256:8c08108096f92275bf4a1bc7177fe608d9808b3f1a17f082e13925461d77e553`
* [branding](https://github.com/openshift/origin-branding) git [27d852b9](https://github.com/openshift/origin-branding/commit/27d852b9ca56f8828fb604e87a47f7256e0e6c0d) `sha256:156e841442926c4a4941bc2dcac9f6c6e7d2654b3586da3e8a50412f73e79224`
* centos-stream-coreos-9-extensions `sha256:ef264a418f876c6346056b13dfb234813f5105f94a7be3a0fef013e73d93d279`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [377bbaeb](https://github.com/openshift/cluster-olm-operator/commit/377bbaeb1bb5ed6ce295aae1fea9e906dced6220) `sha256:ab18f5aec81a014fd5859a3947da44be6f38f85336e31f5b64801245159bb5ae`
* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [e958096e](https://github.com/openshift/monitoring-plugin/commit/e958096ec98923a6abf00b5e2573b417982b165f) `sha256:bc6aaf0975792ac731931d34330101fac82d918bf6f4b50d8c05506395b07b86`
* [olm-catalogd](https://github.com/openshift/operator-framework-catalogd) git [ac4c5ab4](https://github.com/openshift/operator-framework-catalogd/commit/ac4c5ab4f7165352a9727591aee52ca953302f80) `sha256:e4a13c973c59aa37878a0f3564467d1c153802aad58ac1a2976bfc78ca8a65e4`
* [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller) git [d8fa6353](https://github.com/openshift/operator-framework-operator-controller/commit/d8fa6353e75d8c4534c17a3b45a3babb6833e660) `sha256:60bd7cae6f10c9a903b256c59b6d105d3b3357871522886f9cd1670db1d8b43a`


### Rebuilt images without code change

* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [61e198ca](https://github.com/openshift/apiserver-network-proxy/commit/61e198ca00b9426e2f7309cf2818ac74426486ff) `sha256:1f127a57537b8a318615f7dcb51e65591204669fa526f83136c13168bbdfcab0`
* centos-stream-coreos-9 `sha256:fabc690500e1bb25f74ea61b6d1714b33706cfc4928c308c7a17899c574e93b8`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [cafed17b](https://github.com/openshift/driver-toolkit/commit/cafed17b0c2b4cf8d8310304888787ed7adf7474) `sha256:2b40bd7b2226a15709fb3610784b2cf7b997a51868fac96a43bf9bf690a071fe`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [9ab93bad](https://github.com/openshift/cloud-provider-kubevirt/commit/9ab93bad0ca56f6cd01564888fb1e4ac1c17b434) `sha256:5c5c2af9f95357b6ff3538f6ab82f721658e58ddffa103ef77156e85ef83b23f`
* machine-os-content `sha256:fabc690500e1bb25f74ea61b6d1714b33706cfc4928c308c7a17899c574e93b8`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/9884233f6cfc55e0dca57ee3c02eb7feebb81c6e)

* NO-ISSUE: Bump k8s.io/klog/v2 from 2.70.1 to 2.100.1 (#5428) [#5428](https://github.com/openshift/assisted-service/pull/5428)
* [MGMT-15356](https://issues.redhat.com/browse/MGMT-15356): Ensure filenames are distinct between openshift and manifest (#5382) [#5382](https://github.com/openshift/assisted-service/pull/5382)
* [MGMT-15491](https://issues.redhat.com/browse/MGMT-15491): Validate vSphere disk.EnableUUID ignoring cluster platform (#5416) [#5416](https://github.com/openshift/assisted-service/pull/5416)
* NO-ISSUE: Extend waiting time to test DB container to be ready (#5425) [#5425](https://github.com/openshift/assisted-service/pull/5425)
* Bump OCP versions: 4.10 (#5423) [#5423](https://github.com/openshift/assisted-service/pull/5423)
* Bump OCP versions: 4.13, 4.12 (#5421) [#5421](https://github.com/openshift/assisted-service/pull/5421)
* [OCPBUGS-17415](https://issues.redhat.com/browse/OCPBUGS-17415): Bump golang.org/x/net (#5417) [#5417](https://github.com/openshift/assisted-service/pull/5417)
* [MGMT-14933](https://issues.redhat.com/browse/MGMT-14933): Validate hosts running in OCI (#5413) [#5413](https://github.com/openshift/assisted-service/pull/5413)
* Ensure inspection is disabled on day-2 spoke node BMHs (#5406) [#5406](https://github.com/openshift/assisted-service/pull/5406)
* [MGMT-15423](https://issues.redhat.com/browse/MGMT-15423): Change the user message from: 'Host is not compatible with cluster platform %s; either disable this host or choose a compatible cluster platform (%v)' to 'Host is not compatible with cluster platform %s; either disable this host or discover a new, compatible host.' (#5412) [#5412](https://github.com/openshift/assisted-service/pull/5412)
* Don't set detached for BMHs without infraenv label (#5414) [#5414](https://github.com/openshift/assisted-service/pull/5414)
* [RHTAPBUGS-318](https://issues.redhat.com/browse/RHTAPBUGS-318): Fetch tag in RHTAP build (#5333) [#5333](https://github.com/openshift/assisted-service/pull/5333)
* [MGMT-15424](https://issues.redhat.com/browse/MGMT-15424): parametrize envoy configmap name (#5411) [#5411](https://github.com/openshift/assisted-service/pull/5411)
* Bump OCP versions: 4.12 (#5409) [#5409](https://github.com/openshift/assisted-service/pull/5409)
* Bump OCP versions: 4.11 (#5407) [#5407](https://github.com/openshift/assisted-service/pull/5407)
* [MGMT-15335](https://issues.redhat.com/browse/MGMT-15335): Fix missing state when trying to update to not supported platform (#5399) [#5399](https://github.com/openshift/assisted-service/pull/5399)
* Bump OCP versions: 4.14 (#5403) [#5403](https://github.com/openshift/assisted-service/pull/5403)
* Update RHTAP references (#5387) [#5387](https://github.com/openshift/assisted-service/pull/5387)
* [MGMT-15389](https://issues.redhat.com/browse/MGMT-15389): add feature flag to enable/disable OKD support (#5400) [#5400](https://github.com/openshift/assisted-service/pull/5400)
* [MGMT-11949](https://issues.redhat.com/browse/MGMT-11949): MGMT-12278: Update libksba and libxml2 (#5398) [#5398](https://github.com/openshift/assisted-service/pull/5398)
* [MGMT-15388](https://issues.redhat.com/browse/MGMT-15388): Remove unsupported platforms from the supported-platforms endpoint (#5394) [#5394](https://github.com/openshift/assisted-service/pull/5394)
* [AGENT-557](https://issues.redhat.com/browse/AGENT-557): Split register into registerCluster and registerInfraEnv (#5376) [#5376](https://github.com/openshift/assisted-service/pull/5376)
* [MGMT-15339](https://issues.redhat.com/browse/MGMT-15339): Run network config before NetworkManager (#5375) [#5375](https://github.com/openshift/assisted-service/pull/5375)
* [MGMT-15128](https://issues.redhat.com/browse/MGMT-15128): Remove control plane machine set so that control-plane-machine-set operator would not go degraded due to placeholder credentials on installation. (#5378) [#5378](https://github.com/openshift/assisted-service/pull/5378)
* [MGMT-15047](https://issues.redhat.com/browse/MGMT-15047): use installer to deploy on external platform (#5381) [#5381](https://github.com/openshift/assisted-service/pull/5381)
* [MGMT-15343](https://issues.redhat.com/browse/MGMT-15343): dependabot remove docker (#5392) [#5392](https://github.com/openshift/assisted-service/pull/5392)
* Bump OCP versions: 4.13, 4.10 (#5391) [#5391](https://github.com/openshift/assisted-service/pull/5391)
* Don't attempt to contact spoke while unbinding a day2 host (#5383) [#5383](https://github.com/openshift/assisted-service/pull/5383)
* Update RHTAP references (#5374) [#5374](https://github.com/openshift/assisted-service/pull/5374)
* [MGMT-15128](https://issues.redhat.com/browse/MGMT-15128): Remove control plane machine set so that control-plane-machine-set operator would not go degraded due to placeholder credentials on installation. (#5364) [#5364](https://github.com/openshift/assisted-service/pull/5364)
* Bump OCP versions: 4.12 (#5384) [#5384](https://github.com/openshift/assisted-service/pull/5384)
* [MGMT-14793](https://issues.redhat.com/browse/MGMT-14793): Assisted discovery core and root user shell should have (#5373) [#5373](https://github.com/openshift/assisted-service/pull/5373)
* [MGMT-15215](https://issues.redhat.com/browse/MGMT-15215): Allow setting of UI specific data for a cluster (#5358) [#5358](https://github.com/openshift/assisted-service/pull/5358)
* [MGMT-15343](https://issues.redhat.com/browse/MGMT-15343): dependabot group updates (#5379) [#5379](https://github.com/openshift/assisted-service/pull/5379)
* [MGMT-14923](https://issues.redhat.com/browse/MGMT-14923): add OSImageVersion to InfraEnvSpec (#5365) [#5365](https://github.com/openshift/assisted-service/pull/5365)
* Bump OCP versions: 4.13 (#5377) [#5377](https://github.com/openshift/assisted-service/pull/5377)
* Update RHTAP references (#5370) [#5370](https://github.com/openshift/assisted-service/pull/5370)
* [OCPBUGS-16077](https://issues.redhat.com/browse/OCPBUGS-16077): Fix DNS validation (#5371) [#5371](https://github.com/openshift/assisted-service/pull/5371)
* [MGMT-11456](https://issues.redhat.com/browse/MGMT-11456): kube-api should allow user to specify infraenv additional trust bundle (#5357) [#5357](https://github.com/openshift/assisted-service/pull/5357)
* Bump OCP versions: 4.11, 4.12 (#5369) [#5369](https://github.com/openshift/assisted-service/pull/5369)
* [MGMT-15295](https://issues.redhat.com/browse/MGMT-15295): Fixc bug in list manifests (#5366) [#5366](https://github.com/openshift/assisted-service/pull/5366)
* [MGMT-14015](https://issues.redhat.com/browse/MGMT-14015): Custom manifest feature usage is never turning off (#5363) [#5363](https://github.com/openshift/assisted-service/pull/5363)
* [MGMT-14491](https://issues.redhat.com/browse/MGMT-14491): Invalid node label returns error 500 instead of 400 (#5362) [#5362](https://github.com/openshift/assisted-service/pull/5362)
* Update RHTAP references (#5328) [#5328](https://github.com/openshift/assisted-service/pull/5328)
* Bump OCP versions: 4.14 (#5360) [#5360](https://github.com/openshift/assisted-service/pull/5360)
* [MGMT-15243](https://issues.redhat.com/browse/MGMT-15243): Skip any zero size manifests when applying (#5355) [#5355](https://github.com/openshift/assisted-service/pull/5355)
* Bump OCP versions: 4.12 (#5356) [#5356](https://github.com/openshift/assisted-service/pull/5356)
* [MGMT-14656](https://issues.redhat.com/browse/MGMT-14656): Sort disks by HCTL after the other options (#5354) [#5354](https://github.com/openshift/assisted-service/pull/5354)
* No-ISSUE: Revert "MGMT-14634: Ensure that empty manifest may not be added. (#5348)" (#5353) [#5348](https://github.com/openshift/assisted-service/pull/5348)
* [MGMT-15213](https://issues.redhat.com/browse/MGMT-15213): temporary disable release-domain-name-resolved-correctly validation (#5351) [#5351](https://github.com/openshift/assisted-service/pull/5351)
* [MGMT-15073](https://issues.redhat.com/browse/MGMT-15073): Cluster reset - only system generated manifests to be deleted (#5338) [#5338](https://github.com/openshift/assisted-service/pull/5338)
* [MGMT-15070](https://issues.redhat.com/browse/MGMT-15070): Unable to change machine-network with dual stack (#5349) [#5349](https://github.com/openshift/assisted-service/pull/5349)
* [MGMT-14634](https://issues.redhat.com/browse/MGMT-14634): Ensure that empty manifest may not be added. (#5348) [#5348](https://github.com/openshift/assisted-service/pull/5348)
* [MGMT-15150](https://issues.redhat.com/browse/MGMT-15150): Use same installer binary for all platform types (#5334) [#5334](https://github.com/openshift/assisted-service/pull/5334)
* [MGMT-14851](https://issues.redhat.com/browse/MGMT-14851): Update docs for allowing automatedCleaningMode (#5343) [#5343](https://github.com/openshift/assisted-service/pull/5343)
* Bump OCP versions: 4.14, 4.12 (#5345) [#5345](https://github.com/openshift/assisted-service/pull/5345)
* [MGMT-14726](https://issues.redhat.com/browse/MGMT-14726): Ensure that manifest filename does not contain spaces. (#5342) [#5342](https://github.com/openshift/assisted-service/pull/5342)
* [MGMT-15064](https://issues.redhat.com/browse/MGMT-15064): Update is_external API description (#5336) [#5336](https://github.com/openshift/assisted-service/pull/5336)
* Bump OCP versions: 4.10, 4.11 (#5339) [#5339](https://github.com/openshift/assisted-service/pull/5339)
* [MGMT-14852](https://issues.redhat.com/browse/MGMT-14852): Allow AutomatedCleaningMode to be set by user (#5319) [#5319](https://github.com/openshift/assisted-service/pull/5319)
* [MGMT-14374](https://issues.redhat.com/browse/MGMT-14374): update day2 master docs (#5335) [#5335](https://github.com/openshift/assisted-service/pull/5335)
* MGMT-14620 Only emit succesful host creation message for pre install hosts (#5296) [#5296](https://github.com/openshift/assisted-service/pull/5296)
* [MGMT-14704](https://issues.redhat.com/browse/MGMT-14704): Provide info on custom/vs non custom manifest in manifest endpoint. (#5278) [#5278](https://github.com/openshift/assisted-service/pull/5278)
* [MGMT-15114](https://issues.redhat.com/browse/MGMT-15114): remove event for cluster registration failed (#5330) [#5330](https://github.com/openshift/assisted-service/pull/5330)
* [MGMT-15126](https://issues.redhat.com/browse/MGMT-15126): Add missing incompatible features in some of the feature-support feature (#5327) [#5327](https://github.com/openshift/assisted-service/pull/5327)
* [MGMT-15107](https://issues.redhat.com/browse/MGMT-15107): Bump version for hacking LSO catalog (#5323) [#5323](https://github.com/openshift/assisted-service/pull/5323)
* Create an override annotation for the ironic agent image (#5310) [#5310](https://github.com/openshift/assisted-service/pull/5310)
* [OCPBUGS-13621](https://issues.redhat.com/browse/OCPBUGS-13621): Fix singular Ingress and API cluster VIPs removal (#5216) [#5216](https://github.com/openshift/assisted-service/pull/5216)
* Don't require key encipherment usage for approving CSRs (#5322) [#5322](https://github.com/openshift/assisted-service/pull/5322)
* [MGMT-13284](https://issues.redhat.com/browse/MGMT-13284): Check for BMH CRD before creating controller (#5284) [#5284](https://github.com/openshift/assisted-service/pull/5284)
* [MGMT-14937](https://issues.redhat.com/browse/MGMT-14937): Deprecate user_managed_networking attribute (#5317) [#5317](https://github.com/openshift/assisted-service/pull/5317)
* Bump OCP versions: 4.14 (#5320) [#5320](https://github.com/openshift/assisted-service/pull/5320)
* Bump OCP versions: 4.13, 4.10, 4.12 (#5316) [#5316](https://github.com/openshift/assisted-service/pull/5316)
* NO-ISSUE: parametrize template to enable switching secrets (#5313) [#5313](https://github.com/openshift/assisted-service/pull/5313)
* [MGMT-14240](https://issues.redhat.com/browse/MGMT-14240): Specify connect-timeout on curl (#5314) [#5314](https://github.com/openshift/assisted-service/pull/5314)
* [MGMT-15034](https://issues.redhat.com/browse/MGMT-15034): Fix patch of infrastructure CR with external platform (#5312) [#5312](https://github.com/openshift/assisted-service/pull/5312)
* [MGMT-14979](https://issues.redhat.com/browse/MGMT-14979): add sasl/scraml auth method for kafka notifications (#5299) [#5299](https://github.com/openshift/assisted-service/pull/5299)
* [MGMT-15025](https://issues.redhat.com/browse/MGMT-15025): Forbid register Z architecture cluster with OCI platform (#5309) [#5309](https://github.com/openshift/assisted-service/pull/5309)
* MGMT-15015 Provider IsHostSupported panic if platform is not found (#5306) [#5306](https://github.com/openshift/assisted-service/pull/5306)
* OCPBUGS-13738 enforce additional ntp sources added into chrony (#5295) [#5295](https://github.com/openshift/assisted-service/pull/5295)
* [MGMT-14992](https://issues.redhat.com/browse/MGMT-14992): Fix Minimal ISO set as default in s390x (#5302) [#5302](https://github.com/openshift/assisted-service/pull/5302)
* [MGMT-14631](https://issues.redhat.com/browse/MGMT-14631): Removing leftover of support for openshift 4.8 (#5301) [#5301](https://github.com/openshift/assisted-service/pull/5301)
* Bump OCP versions: 4.14, 4.11 (#5300) [#5300](https://github.com/openshift/assisted-service/pull/5300)
* [MGMT-14973](https://issues.redhat.com/browse/MGMT-14973): Fix misleading logs showing wrong platform and user_managed_networking combination (#5298) [#5298](https://github.com/openshift/assisted-service/pull/5298)
* [MGMT-14975](https://issues.redhat.com/browse/MGMT-14975): Update MCE operator installation to use stable-2.3 channel (#5297) [#5297](https://github.com/openshift/assisted-service/pull/5297)
* [MGMT-14769](https://issues.redhat.com/browse/MGMT-14769): Enable upgrade agent by default (#5276) [#5276](https://github.com/openshift/assisted-service/pull/5276)
* [MGMT-14165](https://issues.redhat.com/browse/MGMT-14165): AgentClusterInstall Webhooks improvements and fixes (#5275) [#5275](https://github.com/openshift/assisted-service/pull/5275)
* Bump OCP versions: 4.13, 4.12 (#5293) [#5293](https://github.com/openshift/assisted-service/pull/5293)
* [MGMT-14730](https://issues.redhat.com/browse/MGMT-14730): Validate that manifest file size does not exceed 1MB (#5281) [#5281](https://github.com/openshift/assisted-service/pull/5281)
* [MGMT-14883](https://issues.redhat.com/browse/MGMT-14883): Fix feature-support validation fail to validate openshift version (#5290) [#5290](https://github.com/openshift/assisted-service/pull/5290)
* [MGMT-14904](https://issues.redhat.com/browse/MGMT-14904): fix error code for ignition size validation (#5291) [#5291](https://github.com/openshift/assisted-service/pull/5291)
* [MGMT-14631](https://issues.redhat.com/browse/MGMT-14631): Remove support for openshift 4.8 (#5221) [#5221](https://github.com/openshift/assisted-service/pull/5221)
* Add tls config for the service monitor (#5282) [#5282](https://github.com/openshift/assisted-service/pull/5282)
* Bump OCP versions: 4.12, 4.10 (#5288) [#5288](https://github.com/openshift/assisted-service/pull/5288)
* Red Hat Trusted App Pipeline update assisted-service-q2vh (#5270) [#5270](https://github.com/openshift/assisted-service/pull/5270)
* Bump OCP versions: 4.13 (#5280) [#5280](https://github.com/openshift/assisted-service/pull/5280)
* [OCPBUGS-7076](https://issues.redhat.com/browse/OCPBUGS-7076): Copy Day2 BMH if Agent is installing (#5250) [#5250](https://github.com/openshift/assisted-service/pull/5250)
* [OCPBUGS-14405](https://issues.redhat.com/browse/OCPBUGS-14405): Avoid panic if pull secret contains non-string (#5267) [#5267](https://github.com/openshift/assisted-service/pull/5267)
* [MGMT-13746](https://issues.redhat.com/browse/MGMT-13746): validate discovery ignition size (#5273) [#5273](https://github.com/openshift/assisted-service/pull/5273)
* [MGMT-14830](https://issues.redhat.com/browse/MGMT-14830): Enable TechPreviewNoUpgrade when platform is external (#5279) [#5279](https://github.com/openshift/assisted-service/pull/5279)
* [MGMT-13431](https://issues.redhat.com/browse/MGMT-13431): patching bug - ODF storage class not recognizing all device sets (#5268) [#5268](https://github.com/openshift/assisted-service/pull/5268)
* [MGMT-14803](https://issues.redhat.com/browse/MGMT-14803): Fix cluster update won't fail on incompatible OLM operator dependency (#5264) [#5264](https://github.com/openshift/assisted-service/pull/5264)
* [MGMT-14600](https://issues.redhat.com/browse/MGMT-14600): Prevent installing dual-stack vSphere on OCP version smaller than 4.13 (#5271) [#5271](https://github.com/openshift/assisted-service/pull/5271)
* [MGMT-14750](https://issues.redhat.com/browse/MGMT-14750): Allow FC, ECKD, FBA drive types on s390x (#5269) [#5269](https://github.com/openshift/assisted-service/pull/5269)
* [MGMT-12186](https://issues.redhat.com/browse/MGMT-12186): Add MCE operator plugin (#5203) [#5203](https://github.com/openshift/assisted-service/pull/5203)
* Bump OCP versions: 4.11, 4.12 (#5265) [#5265](https://github.com/openshift/assisted-service/pull/5265)
* [MGMT-14781](https://issues.redhat.com/browse/MGMT-14781): Make LSO operator to support all CPU architectures (#5262) [#5262](https://github.com/openshift/assisted-service/pull/5262)
* Bump OCP versions: 4.13 (#5261) [#5261](https://github.com/openshift/assisted-service/pull/5261)
* [MGMT-14582](https://issues.redhat.com/browse/MGMT-14582): Set OCI platform behind a capability (#5249) [#5249](https://github.com/openshift/assisted-service/pull/5249)
* [MGMT-13997](https://issues.redhat.com/browse/MGMT-13997): Issues when using multiple bonds with CIM Assisted Installer (#5233) [#5233](https://github.com/openshift/assisted-service/pull/5233)
* [MGMT-13685](https://issues.redhat.com/browse/MGMT-13685): Make sure ingress and api vip are not broadcast address. (#5256) [#5256](https://github.com/openshift/assisted-service/pull/5256)
* [MGMT-14723](https://issues.redhat.com/browse/MGMT-14723): Fix randomly failing subsystem test (#5259) [#5259](https://github.com/openshift/assisted-service/pull/5259)
* [MGMT-14649](https://issues.redhat.com/browse/MGMT-14649): Add feature support for OCI platform (#5244) [#5244](https://github.com/openshift/assisted-service/pull/5244)
* NO-ISSUE: fixed misleading error message, the order of the host status was reverse (#5257) [#5257](https://github.com/openshift/assisted-service/pull/5257)
* [MGMT-14306](https://issues.redhat.com/browse/MGMT-14306): Update host role validation to accept AutoAssign in Day2 (#5247) [#5247](https://github.com/openshift/assisted-service/pull/5247)
* Delete the spoke BMH before removing the finalizer (#5239) [#5239](https://github.com/openshift/assisted-service/pull/5239)
* [MGMT-14723](https://issues.redhat.com/browse/MGMT-14723): Remove duplicate operator cpu architecture validation (#5254) [#5254](https://github.com/openshift/assisted-service/pull/5254)
* [MGMT-14734](https://issues.redhat.com/browse/MGMT-14734): Fix failed to update Nutanix provider cluster when on multi architecture (#5253) [#5253](https://github.com/openshift/assisted-service/pull/5253)
* [MGMT-14728](https://issues.redhat.com/browse/MGMT-14728): Escape the escape char (\) (#5252) [#5252](https://github.com/openshift/assisted-service/pull/5252)
* Bump OCP versions: 4.14 (#5251) [#5251](https://github.com/openshift/assisted-service/pull/5251)
* [MGMT-14721](https://issues.redhat.com/browse/MGMT-14721): Get icsp-file from registries.conf for oc extract command (#5245) [#5245](https://github.com/openshift/assisted-service/pull/5245)
* Bump OCP versions: 4.10 (#5248) [#5248](https://github.com/openshift/assisted-service/pull/5248)
* Docs fix: ensure kubeconfig secret is created with a kubeconfig key. (#5246) [#5246](https://github.com/openshift/assisted-service/pull/5246)
* [MGMT-13938](https://issues.redhat.com/browse/MGMT-13938): support external platform (#5143) [#5143](https://github.com/openshift/assisted-service/pull/5143)
* Bump OCP versions: 4.11, 4.12 (#5243) [#5243](https://github.com/openshift/assisted-service/pull/5243)
* [Full changelog](https://github.com/openshift/assisted-service/compare/6be20b86bc35aee2b6b5dd146bdb5ade3c72c98f...9884233f6cfc55e0dca57ee3c02eb7feebb81c6e)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/fd3e8f3e5ec0f29ecf44fdd07e898c81c7a06443)

* [MGMT-15235](https://issues.redhat.com/browse/MGMT-15235): Compile with CGO_ENABLED=1 for amd64 (#699) [#699](https://github.com/openshift/assisted-installer/pull/699)
* Revert "MGMT-15235: Compile with CGO_ENABLED=1 for FIPS (#683)" (#693) [#683](https://github.com/openshift/assisted-installer/pull/683)
* [OCPBUGS-17252](https://issues.redhat.com/browse/OCPBUGS-17252): Bump golang.org/x/net/html (#695) [#695](https://github.com/openshift/assisted-installer/pull/695)
* Updating ose-agent-installer-orchestrator images to be consistent with ART (#652) [#652](https://github.com/openshift/assisted-installer/pull/652)
* [MGMT-15343](https://issues.redhat.com/browse/MGMT-15343): dependabot group updates (#692) [#692](https://github.com/openshift/assisted-installer/pull/692)
* [MGMT-15344](https://issues.redhat.com/browse/MGMT-15344): Assisted-controller should not timeout on waiting cvo by itself (#688) [#688](https://github.com/openshift/assisted-installer/pull/688)
* [MGMT-15235](https://issues.redhat.com/browse/MGMT-15235): Compile with CGO_ENABLED=1 for FIPS (#683) [#683](https://github.com/openshift/assisted-installer/pull/683)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/b49242a422797ad93b9f0c37f7b3c33061e961b1...fd3e8f3e5ec0f29ecf44fdd07e898c81c7a06443)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/bc89ea29ff1391092c0daa8cbad689c3b2791cbd)

* [MGMT-15235](https://issues.redhat.com/browse/MGMT-15235): Allow setting CGO_ENABLED flag (#589) [#589](https://github.com/openshift/assisted-installer-agent/pull/589)
* [MGMT-15235](https://issues.redhat.com/browse/MGMT-15235): Compile with CGO_ENABLED=1 for amd64 (#588) [#588](https://github.com/openshift/assisted-installer-agent/pull/588)
* Revert "MGMT-15235: Compile with CGO_ENABLED=1 for FIPS (#569)" (#582) [#569](https://github.com/openshift/assisted-installer-agent/pull/569)
* [OCPBUGS-17251](https://issues.redhat.com/browse/OCPBUGS-17251): Bumping golang.org/x/net (#586) [#586](https://github.com/openshift/assisted-installer-agent/pull/586)
* [MGMT-14933](https://issues.redhat.com/browse/MGMT-14933): Detect if the host in running in OCI (#585) [#585](https://github.com/openshift/assisted-installer-agent/pull/585)
* [MGMT-15359](https://issues.redhat.com/browse/MGMT-15359): support appliance multipath virtual device (#584) [#584](https://github.com/openshift/assisted-installer-agent/pull/584)
* [MGMT-13111](https://issues.redhat.com/browse/MGMT-13111): Freeze on `404 Not Found` (#583) [#583](https://github.com/openshift/assisted-installer-agent/pull/583)
* [MGMT-15343](https://issues.redhat.com/browse/MGMT-15343): dependabot remove docker (#581) [#581](https://github.com/openshift/assisted-installer-agent/pull/581)
* [MGMT-15343](https://issues.redhat.com/browse/MGMT-15343): dependabot group updates (#579) [#579](https://github.com/openshift/assisted-installer-agent/pull/579)
* Updating ose-agent-installer-node-agent images to be consistent with ART (#575) [#575](https://github.com/openshift/assisted-installer-agent/pull/575)
* [OCPBUGS-16373](https://issues.redhat.com/browse/OCPBUGS-16373): Ignore arping errors on RHEL 9 (#576) [#576](https://github.com/openshift/assisted-installer-agent/pull/576)
* NO-ISSUE: Bump github.com/coreos/ignition/v2 from 2.16.0 to 2.16.2 (#574) [#574](https://github.com/openshift/assisted-installer-agent/pull/574)
* NO-ISSUE: Bump github.com/PuerkitoBio/rehttp from 1.1.0 to 1.2.0 (#568) [#568](https://github.com/openshift/assisted-installer-agent/pull/568)
* [MGMT-15235](https://issues.redhat.com/browse/MGMT-15235): Compile with CGO_ENABLED=1 for FIPS (#569) [#569](https://github.com/openshift/assisted-installer-agent/pull/569)
* NO-ISSUE: Bump golang.org/x/sys from 0.9.0 to 0.10.0 (#566) [#566](https://github.com/openshift/assisted-installer-agent/pull/566)
* NO-ISSUE: Bump github.com/coreos/ignition/v2 from 2.15.0 to 2.16.0 (#564) [#564](https://github.com/openshift/assisted-installer-agent/pull/564)
* [AGENT-594](https://issues.redhat.com/browse/AGENT-594): remove agent based installer code (#563) [#563](https://github.com/openshift/assisted-installer-agent/pull/563)
* NO-ISSUE: Bump golang.org/x/sync from 0.2.0 to 0.3.0 (#561) [#561](https://github.com/openshift/assisted-installer-agent/pull/561)
* [MGMT-14540](https://issues.redhat.com/browse/MGMT-14540): Mark Appliance disk(s) with a partition name prefix 'agent' as eligible (#554) [#554](https://github.com/openshift/assisted-installer-agent/pull/554)
* [OCPBUGS-14848](https://issues.redhat.com/browse/OCPBUGS-14848): Filter out hidden devices (#558) [#558](https://github.com/openshift/assisted-installer-agent/pull/558)
* NO-ISSUE: Bump github.com/onsi/gomega from 1.27.7 to 1.27.8 (#555) [#555](https://github.com/openshift/assisted-installer-agent/pull/555)
* NO-ISSUE: Bump github.com/go-openapi/swag from 0.22.3 to 0.22.4 (#556) [#556](https://github.com/openshift/assisted-installer-agent/pull/556)
* [MGMT-13009](https://issues.redhat.com/browse/MGMT-13009): Auto rename host with VLAN (#553) [#553](https://github.com/openshift/assisted-installer-agent/pull/553)
* NO-ISSUE: Bump github.com/itchyny/gojq from 0.12.12 to 0.12.13 (#552) [#552](https://github.com/openshift/assisted-installer-agent/pull/552)
* NO-ISSUE: Bump github.com/stretchr/testify from 1.8.3 to 1.8.4 (#550) [#550](https://github.com/openshift/assisted-installer-agent/pull/550)
* [MGMT-14751](https://issues.redhat.com/browse/MGMT-14751): Detect DASD disks (s390x) (#549) [#549](https://github.com/openshift/assisted-installer-agent/pull/549)
* NO-ISSUE: Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2 (#545) [#545](https://github.com/openshift/assisted-installer-agent/pull/545)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/6b3c4e4a97da0a7a8c014403c3325fd5b74eedca...bc89ea29ff1391092c0daa8cbad689c3b2791cbd)


### [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver/tree/92be21f26e64b8320a10a0f324d52f482a2acbfa)

* [OCPBUGS-16783](https://issues.redhat.com/browse/OCPBUGS-16783): Chore: Update OWNERS [#32](https://github.com/openshift/alibaba-cloud-csi-driver/pull/32)
* [OCPBUGS-12544](https://issues.redhat.com/browse/OCPBUGS-12544): 4.14: UPSTREAM: 763: Bump (golang.org/x/net): to address CVE-2022-41723 [#30](https://github.com/openshift/alibaba-cloud-csi-driver/pull/30)
* [STOR-1159](https://issues.redhat.com/browse/STOR-1159): Rebase to v1.1.7 [#29](https://github.com/openshift/alibaba-cloud-csi-driver/pull/29)
* [Full changelog](https://github.com/openshift/alibaba-cloud-csi-driver/compare/b88adbfd6d38f45f349b949bbcea2876d345659c...92be21f26e64b8320a10a0f324d52f482a2acbfa)


### [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator/tree/5a9bbe6a145b8d8f1e1df977cd44d748cf0990d2)

* [STOR-1439](https://issues.redhat.com/browse/STOR-1439): Restart controller Pods if metrics-serving-cert changed [#56](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/56)
* [OCPBUGS-16783](https://issues.redhat.com/browse/OCPBUGS-16783): Chore: Update OWNERS [#54](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/54)
* [OCPBUGS-14824](https://issues.redhat.com/browse/OCPBUGS-14824): Bump alibaba-disk-csi-driver-operator library-go [#53](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/53)
* [STOR-1168](https://issues.redhat.com/browse/STOR-1168): Bump common libraries [#51](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/51)
* [Full changelog](https://github.com/openshift/alibaba-disk-csi-driver-operator/compare/abff7004d7753aa9f06ea1813c32488e10e6bff0...5a9bbe6a145b8d8f1e1df977cd44d748cf0990d2)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/1763ea56c30ec1a0589ee900911a853ae375ff0d)

* Merge https://github.com/kubernetes/cloud-provider-aws:master (d055109) into master [#44](https://github.com/openshift/cloud-provider-aws/pull/44)
* [OCPBUGS-14696](https://issues.redhat.com/browse/OCPBUGS-14696): Merge https://github.com/kubernetes/cloud-provider-aws:master (cab0100) into master [#45](https://github.com/openshift/cloud-provider-aws/pull/45)
* Revert "OCPCLOUD-2051: Merge https://github.com/kubernetes/cloud-provider-aws:master (cab0100) into master" [#43](https://github.com/openshift/cloud-provider-aws/pull/43)
* [OCPCLOUD-2051](https://issues.redhat.com/browse/OCPCLOUD-2051): Merge https://github.com/kubernetes/cloud-provider-aws:master (cab0100) into master [#41](https://github.com/openshift/cloud-provider-aws/pull/41)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/94efca0946df30aafc12160eaf608cce76e4f9f9...1763ea56c30ec1a0589ee900911a853ae375ff0d)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/fb2b2e6126061513b2441091a1523f3214305431)

* Fix version in metadata.yaml [#474](https://github.com/openshift/cluster-api-provider-aws/pull/474)
* Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.2.0 (2475f2f) into master [#472](https://github.com/openshift/cluster-api-provider-aws/pull/472)
* [OCPBUGS-14969](https://issues.redhat.com/browse/OCPBUGS-14969): Pass right SGs for IsExternallyManaged on creation [#467](https://github.com/openshift/cluster-api-provider-aws/pull/467)
* [OCPCLOUD-2121](https://issues.redhat.com/browse/OCPCLOUD-2121): Add openshift/e2e-tests for CAPI E2E testing [#465](https://github.com/openshift/cluster-api-provider-aws/pull/465)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/3df144350c091e07e9c9c7b395642535fa236779...fb2b2e6126061513b2441091a1523f3214305431)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/3ff29e64537b9f895f4d4a52ca82f9c7aba1ef54)

* [OCPBUGS-17280](https://issues.redhat.com/browse/OCPBUGS-17280): UPSTREAM: 1711: Bump golang.org/x/net/html to fix CVE-2023-3978 [#229](https://github.com/openshift/aws-ebs-csi-driver/pull/229)
* [OCPBUGS-16783](https://issues.redhat.com/browse/OCPBUGS-16783): Chore: Update OWNERS and OWNERS_ALIASES [#228](https://github.com/openshift/aws-ebs-csi-driver/pull/228)
* [STOR-1167](https://issues.redhat.com/browse/STOR-1167): Rebase to v1.18.0 for OCP 4.14 [#222](https://github.com/openshift/aws-ebs-csi-driver/pull/222)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/693018cc34e44e6481a1f621bd4894830271bcb0...3ff29e64537b9f895f4d4a52ca82f9c7aba1ef54)


### [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator/tree/a5bac21655fe994247d5fcb7a66bf271437b68a8)

* [STOR-1432](https://issues.redhat.com/browse/STOR-1432): hypershift: deploy controller with control plane release images [#252](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/252)
* [OCPBUGS-16783](https://issues.redhat.com/browse/OCPBUGS-16783): Chore: Update OWNERS [#251](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/251)
* Bump k8s.io/apiextensions-apiserver from 0.27.1 to 0.27.4 [#250](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/250)
* Bump k8s.io/component-base from 0.26.3 to 0.27.3 [#240](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/240)
* [OCPBUGS-15823](https://issues.redhat.com/browse/OCPBUGS-15823): Change CSI RPC call timeouts [#248](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/248)
* [STOR-1065](https://issues.redhat.com/browse/STOR-1065): Rework sidecar bindings to bind common ClusterRoles [#244](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/244)
* [OCPBUGS-14824](https://issues.redhat.com/browse/OCPBUGS-14824): Bump efs-ebs-driver-operator library-go [#247](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/247)
* [STOR-1168](https://issues.redhat.com/browse/STOR-1168): Bump common libraries [#222](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/222)
* Bump Kubernetes libs to v0.27.1 [#243](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/243)
* [STOR-1167](https://issues.redhat.com/browse/STOR-1167): Enable extra-create-metadata to tag snapshots [#223](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/223)
* [STOR-1300](https://issues.redhat.com/browse/STOR-1300): Restart controller Pods if metrics-serving-cert changed [#216](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/216)
* [OCPBUGS-11882](https://issues.redhat.com/browse/OCPBUGS-11882): Added safe-to-evict-local-volume annotation from bound-sa-token to ebs-controller [#232](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/232)
* [OCPBUGS-11882](https://issues.redhat.com/browse/OCPBUGS-11882): Added safe-to-evict annotation to aws-ebs-csi-driver-controller pods [#231](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/231)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver-operator/compare/31f67eae52eb373d35c616785e29b2e3b614e4ab...a5bac21655fe994247d5fcb7a66bf271437b68a8)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/eac5ab103f4676b302c2d13228631ee9d835b808)

* [OCPBUGS-11524](https://issues.redhat.com/browse/OCPBUGS-11524): Add test for multi security groups per machine [#80](https://github.com/openshift/machine-api-provider-aws/pull/80)
* [OCPCLOUD-2113](https://issues.redhat.com/browse/OCPCLOUD-2113): Add support for PlacementGroupName in instances [#77](https://github.com/openshift/machine-api-provider-aws/pull/77)
* Fixes for the labels capacity annotation [#76](https://github.com/openshift/machine-api-provider-aws/pull/76)
* [MIXEDARCH-256](https://issues.redhat.com/browse/MIXEDARCH-256): Handle the kubernetes.io/architecture label based on the AWS instance type [#71](https://github.com/openshift/machine-api-provider-aws/pull/71)
* [OCPCLOUD-2058](https://issues.redhat.com/browse/OCPCLOUD-2058): Update k8s to 1.27 [#72](https://github.com/openshift/machine-api-provider-aws/pull/72)
* [OCPBUGS-6882](https://issues.redhat.com/browse/OCPBUGS-6882): Fix getting AZ from subnet id to check mismatch [#73](https://github.com/openshift/machine-api-provider-aws/pull/73)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/472139b3a63be91abd76745704928fdde7e5aa04...eac5ab103f4676b302c2d13228631ee9d835b808)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/ed5ae281ece6092735140617c486e5822ce5b7b6)

* Bump to go 1.20 in go.mod [#163](https://github.com/openshift/aws-pod-identity-webhook/pull/163)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/79b3460446e2f54668c4ad7dc2ce80a64a87708e...ed5ae281ece6092735140617c486e5822ce5b7b6)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/ae8acd030fdd6d1da19c7ad9111a86b352d41b9b)

* [RFE-4144](https://issues.redhat.com/browse/RFE-4144): Increase service idle max timeout to 100 minutes [#80](https://github.com/openshift/cloud-provider-azure/pull/80)
* Updating ose-azure-cloud-controller-manager images to be consistent with ART [#74](https://github.com/openshift/cloud-provider-azure/pull/74)
* Updating ose-azure-cloud-node-manager images to be consistent with ART [#73](https://github.com/openshift/cloud-provider-azure/pull/73)
* [OCPBUGS-14762](https://issues.redhat.com/browse/OCPBUGS-14762): remove readiness check for cache exclusion [#77](https://github.com/openshift/cloud-provider-azure/pull/77)
* [OCPBUGS-14368](https://issues.redhat.com/browse/OCPBUGS-14368): Do not detach masters from LB when unready [#76](https://github.com/openshift/cloud-provider-azure/pull/76)
* [OCPBUGS-14368](https://issues.redhat.com/browse/OCPBUGS-14368): Default to kube-proxy health probes for Service type=LoadBalancer [#72](https://github.com/openshift/cloud-provider-azure/pull/72)
* [OCPCLOUD-2050](https://issues.redhat.com/browse/OCPCLOUD-2050): Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (11f66ee) into master [#61](https://github.com/openshift/cloud-provider-azure/pull/61)
* Prevent PRs not build on top of base branch from merging [#70](https://github.com/openshift/cloud-provider-azure/pull/70)
* Fix downstream commit detection [#69](https://github.com/openshift/cloud-provider-azure/pull/69)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/4b0f2407a0e0ace81ae4f1939b98715221627456...ae8acd030fdd6d1da19c7ad9111a86b352d41b9b)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/c015df41ed16a1eccd1ec60b77c96b4334a5bcb2)

* [CCO-320](https://issues.redhat.com/browse/CCO-320): Add support for Azure workload identity tokens [#274](https://github.com/openshift/cluster-api-provider-azure/pull/274)
* Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.9.5 (a020dae) into master [#281](https://github.com/openshift/cluster-api-provider-azure/pull/281)
* [OCPBUGS-7675](https://issues.redhat.com/browse/OCPBUGS-7675), [OCPCLOUD-1873](https://issues.redhat.com/browse/OCPCLOUD-1873): Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.9.2 (efaae42) into master [#277](https://github.com/openshift/cluster-api-provider-azure/pull/277)
* Add verify-history [#275](https://github.com/openshift/cluster-api-provider-azure/pull/275)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/42bb4e9e2f6fc2665bf3e47b0e7bb58e56d02113...c015df41ed16a1eccd1ec60b77c96b4334a5bcb2)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/9fa4016e0a53f4e218db6ea006d562784193fad3)

* [OCPBUGS-17284](https://issues.redhat.com/browse/OCPBUGS-17284): UPSTREAM: 1927: chore(deps): bump golang.org/x/net from 0.10.0 to 0.14.0 [#48](https://github.com/openshift/azure-disk-csi-driver/pull/48)
* [OCPBUGS-15658](https://issues.redhat.com/browse/OCPBUGS-15658): Update to v1.28.1 [#45](https://github.com/openshift/azure-disk-csi-driver/pull/45)
* [OCPBUGS-16783](https://issues.redhat.com/browse/OCPBUGS-16783): Chore: Update OWNERS [#46](https://github.com/openshift/azure-disk-csi-driver/pull/46)
* [STOR-1164](https://issues.redhat.com/browse/STOR-1164): Rebase to v1.28.0 for OCP 4.14 [#43](https://github.com/openshift/azure-disk-csi-driver/pull/43)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/e8ebff5f1b4d80e04af80f32327479a68e9dce0d...9fa4016e0a53f4e218db6ea006d562784193fad3)


### [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator/tree/4db2f8aac33abbc600b72a82ebe205581a998a7b)

* [OCPBUGS-16654](https://issues.redhat.com/browse/OCPBUGS-16654): Revert revert "STOR-1065: Rework sidecar bindings to b… [#88](https://github.com/openshift/azure-disk-csi-driver-operator/pull/88)
* [OCPBUGS-16496](https://issues.redhat.com/browse/OCPBUGS-16496): Bump library-go to remove dependency on goproxy [#90](https://github.com/openshift/azure-disk-csi-driver-operator/pull/90)
* [OCPBUGS-16783](https://issues.redhat.com/browse/OCPBUGS-16783): Chore: Update OWNERS [#89](https://github.com/openshift/azure-disk-csi-driver-operator/pull/89)
* Revert "STOR-1065: Rework sidecar bindings to bind common ClusterRoles" [#87](https://github.com/openshift/azure-disk-csi-driver-operator/pull/87)
* [STOR-1065](https://issues.redhat.com/browse/STOR-1065): Rework sidecar bindings to bind common ClusterRoles [#84](https://github.com/openshift/azure-disk-csi-driver-operator/pull/84)
* [OCPBUGS-14824](https://issues.redhat.com/browse/OCPBUGS-14824): Bump azure-disk-csi-driver-operator library-go [#85](https://github.com/openshift/azure-disk-csi-driver-operator/pull/85)
* [CCO-324](https://issues.redhat.com/browse/CCO-324): Unrevert "CCO-324: add support for workload identity" [#83](https://github.com/openshift/azure-disk-csi-driver-operator/pull/83)
* Revert "CCO-324: add support for workload identity" [#82](https://github.com/openshift/azure-disk-csi-driver-operator/pull/82)
* [CCO-324](https://issues.redhat.com/browse/CCO-324): add support for workload identity [#78](https://github.com/openshift/azure-disk-csi-driver-operator/pull/78)
* [STOR-1168](https://issues.redhat.com/browse/STOR-1168): Bump common libraries [#81](https://github.com/openshift/azure-disk-csi-driver-operator/pull/81)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver-operator/compare/1a478f019771930f7e2cb0238725618402fb16e1...4db2f8aac33abbc600b72a82ebe205581a998a7b)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/5112d391f1b121d8b59c478fe2505e44440441fb)

* [OCPBUGS-17285](https://issues.redhat.com/browse/OCPBUGS-17285): UPSTREAM: 1355: build(deps): bump golang.org/x/net from 0.12.0 to 0.14.0 [#33](https://github.com/openshift/azure-file-csi-driver/pull/33)
* [OCPBUGS-16783](https://issues.redhat.com/browse/OCPBUGS-16783): Chore: Update OWNERS [#32](https://github.com/openshift/azure-file-csi-driver/pull/32)
* [OCPBUGS-15657](https://issues.redhat.com/browse/OCPBUGS-15657): Update to 1.28.1 [#31](https://github.com/openshift/azure-file-csi-driver/pull/31)
* [STOR-1160](https://issues.redhat.com/browse/STOR-1160): Rebase to v1.28.0 for OCP 4.14 [#29](https://github.com/openshift/azure-file-csi-driver/pull/29)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/932471949818b269c73f262d576a539da868196d...5112d391f1b121d8b59c478fe2505e44440441fb)


### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/8597fbd31f45dd1e387faa220eeb1a86ae618405)

* [STOR-1434](https://issues.redhat.com/browse/STOR-1434): Restart controller Pods if metrics-serving-cert changed [#68](https://github.com/openshift/azure-file-csi-driver-operator/pull/68)
* [OCPBUGS-16654](https://issues.redhat.com/browse/OCPBUGS-16654): Revert revert "STOR-1065: Rework sidecar bindings to b… [#64](https://github.com/openshift/azure-file-csi-driver-operator/pull/64)
* [OCPBUGS-16783](https://issues.redhat.com/browse/OCPBUGS-16783): Chore: Update OWNERS [#65](https://github.com/openshift/azure-file-csi-driver-operator/pull/65)
* [OCPBUGS-16498](https://issues.redhat.com/browse/OCPBUGS-16498): Bump library-go to remove dependency on goproxy [#66](https://github.com/openshift/azure-file-csi-driver-operator/pull/66)
* Revert "STOR-1065: Rework sidecar bindings to bind common ClusterRoles" [#63](https://github.com/openshift/azure-file-csi-driver-operator/pull/63)
* [STOR-1065](https://issues.redhat.com/browse/STOR-1065): Rework sidecar bindings to bind common ClusterRoles [#60](https://github.com/openshift/azure-file-csi-driver-operator/pull/60)
* [CCO-325](https://issues.redhat.com/browse/CCO-325): Unrevert "CCO-325: add support for workload identity" [#62](https://github.com/openshift/azure-file-csi-driver-operator/pull/62)
* [STOR-989](https://issues.redhat.com/browse/STOR-989): Remove SC and manifest  file for NFS backend [#58](https://github.com/openshift/azure-file-csi-driver-operator/pull/58)
* [OCPBUGS-14824](https://issues.redhat.com/browse/OCPBUGS-14824): Bump azure-file-csi-driver-operator library-go [#61](https://github.com/openshift/azure-file-csi-driver-operator/pull/61)
* Revert "CCO-325: add support for workload identity" [#59](https://github.com/openshift/azure-file-csi-driver-operator/pull/59)
* [CCO-325](https://issues.redhat.com/browse/CCO-325): add support for workload identity [#54](https://github.com/openshift/azure-file-csi-driver-operator/pull/54)
* [CCO-325](https://issues.redhat.com/browse/CCO-325): Mount serviceaccount token into csi-driver container [#53](https://github.com/openshift/azure-file-csi-driver-operator/pull/53)
* [STOR-1168](https://issues.redhat.com/browse/STOR-1168): Bump common libraries [#57](https://github.com/openshift/azure-file-csi-driver-operator/pull/57)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/0867286c194fee1ce630ebed7a0d390058eb2aa8...8597fbd31f45dd1e387faa220eeb1a86ae618405)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/458e10c9b4f57f1c26613da7e0c2b5feb7118921)

* [MGMT-13713](https://issues.redhat.com/browse/MGMT-13713): Add confidential VM support [#54](https://github.com/openshift/machine-api-provider-azure/pull/54)
* Fix termination tests randomly timing out [#68](https://github.com/openshift/machine-api-provider-azure/pull/68)
* Set upstream labels and fix capability for the arch-aware scale from 0 in Azure [#66](https://github.com/openshift/machine-api-provider-azure/pull/66)
* [CCO-346](https://issues.redhat.com/browse/CCO-346): Add support for Azure workload identity tokens [#55](https://github.com/openshift/machine-api-provider-azure/pull/55)
* [MIXEDARCH-257](https://issues.redhat.com/browse/MIXEDARCH-257): Handle the kubernetes.io/architecture label based on the Azure VM Size [#65](https://github.com/openshift/machine-api-provider-azure/pull/65)
* [OCPBUGS-10762](https://issues.redhat.com/browse/OCPBUGS-10762): Machine should be Failed if Machine has a Failed state on Azure [#56](https://github.com/openshift/machine-api-provider-azure/pull/56)
* [OCPCLOUD-2057](https://issues.redhat.com/browse/OCPCLOUD-2057): Bump to Kubernetes 1.27 deps [#62](https://github.com/openshift/machine-api-provider-azure/pull/62)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/1259f29301df02744d195002af1a9dbdc23abb8d...458e10c9b4f57f1c26613da7e0c2b5feb7118921)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/db0eb03e5f9d5934df6449cee75b1e85d4985e35)

* [OCPBUGS-16776](https://issues.redhat.com/browse/OCPBUGS-16776): update RHCOS 4.14 bootimage metadata to 414.92.202308032115-0 [#7409](https://github.com/openshift/installer/pull/7409)
* Add baremetal capability validation [#7394](https://github.com/openshift/installer/pull/7394)
* azure: validation: machinepool: sort slice before comparing [#7407](https://github.com/openshift/installer/pull/7407)
* [OCPBUGS-13408](https://issues.redhat.com/browse/OCPBUGS-13408): Log message and add integration test [#7408](https://github.com/openshift/installer/pull/7408)
* PowerVS: Update listCOSInstances to continue querying [#7404](https://github.com/openshift/installer/pull/7404)
* maintenance: update openshift/api [#7401](https://github.com/openshift/installer/pull/7401)
* [MGMT-13628](https://issues.redhat.com/browse/MGMT-13628): add support for confidential VMs on Azure [#7312](https://github.com/openshift/installer/pull/7312)
* openstack: Test zero replicas in worker machine-pool [#7400](https://github.com/openshift/installer/pull/7400)
* OpenStack: Fix user docs for additional network with IPv6 [#7395](https://github.com/openshift/installer/pull/7395)
* gather: Use `journalctl -o with-unit` [#7371](https://github.com/openshift/installer/pull/7371)
* [SPLAT-1123](https://issues.redhat.com/browse/SPLAT-1123): Revert Alibaba deprecation warning [#7396](https://github.com/openshift/installer/pull/7396)
* [OCPBUGS-15994](https://issues.redhat.com/browse/OCPBUGS-15994): Update core password after loading config-image [#7338](https://github.com/openshift/installer/pull/7338)
* OpenStack: Remove SGS created by CPO on destroy [#7378](https://github.com/openshift/installer/pull/7378)
* data/data/coreos: bump FCOS to F38 stable [#7311](https://github.com/openshift/installer/pull/7311)
* [OCPBUGS-16912](https://issues.redhat.com/browse/OCPBUGS-16912): Ensure DHCPv6 client sends Solicit with mac address [#7384](https://github.com/openshift/installer/pull/7384)
* Bug OCPBUGS-16249: Add ip=dhcp,dhcp6 option to Kernel args [#7367](https://github.com/openshift/installer/pull/7367)
* PowerVS: Check whether Machine pool CIDR is /24 [#6903](https://github.com/openshift/installer/pull/6903)
* [OCPBUGS-16292](https://issues.redhat.com/browse/OCPBUGS-16292): GCP XPN: clarify service account support [#7347](https://github.com/openshift/installer/pull/7347)
* [OCPBUGS-6759](https://issues.redhat.com/browse/OCPBUGS-6759): Fix discrepancy with disk size master [#7100](https://github.com/openshift/installer/pull/7100)
* [OCPBUGS-16959](https://issues.redhat.com/browse/OCPBUGS-16959): openstack/upi: add missing modules namespaces + doc [#7373](https://github.com/openshift/installer/pull/7373)
* [CORS-2719](https://issues.redhat.com/browse/CORS-2719): Remove service account user permission [#7291](https://github.com/openshift/installer/pull/7291)
* [OCPBUGS-17064](https://issues.redhat.com/browse/OCPBUGS-17064): always create a MachineSet [#7380](https://github.com/openshift/installer/pull/7380)
* OpenStack: Fix default for openstack_worker_server_group_names [#7359](https://github.com/openshift/installer/pull/7359)
* [OCPBUGS-16692](https://issues.redhat.com/browse/OCPBUGS-16692): OpenStack: fix crash with empty platform in machinepool [#7363](https://github.com/openshift/installer/pull/7363)
* [CORS-2445](https://issues.redhat.com/browse/CORS-2445): GCP add bootimage override in install-config [#7215](https://github.com/openshift/installer/pull/7215)
* [CORS-2503](https://issues.redhat.com/browse/CORS-2503): azure: use marketplace images for all nodes [#6890](https://github.com/openshift/installer/pull/6890)
* [MULTIARCH-3676](https://issues.redhat.com/browse/MULTIARCH-3676): PowerVS add transit gateway destroy [#7294](https://github.com/openshift/installer/pull/7294)
* [CORS-1770](https://issues.redhat.com/browse/CORS-1770): Support pd-balanced disk types for GCP deployments [#7337](https://github.com/openshift/installer/pull/7337)
* [OCPBUGS-15989](https://issues.redhat.com/browse/OCPBUGS-15989): vSphere - bump terraform provider [#7354](https://github.com/openshift/installer/pull/7354)
* OWNERS_ALIASES: Add new user to owners_aliases [#7348](https://github.com/openshift/installer/pull/7348)
* [OCPBUGS-16515](https://issues.redhat.com/browse/OCPBUGS-16515): gcp: use zones available for both instance and project [#7317](https://github.com/openshift/installer/pull/7317)
* [OCPBUGS-15852](https://issues.redhat.com/browse/OCPBUGS-15852): Single node cannot be installed if etcd appears in the hostname [#7304](https://github.com/openshift/installer/pull/7304)
* [OCPBUGS-14877](https://issues.redhat.com/browse/OCPBUGS-14877): Validate that number hosts does not exceed replicas [#7268](https://github.com/openshift/installer/pull/7268)
* [CORS-2628](https://issues.redhat.com/browse/CORS-2628): Allow users to set ManagedBy tag to resource group [#7205](https://github.com/openshift/installer/pull/7205)
* [OCPBUGS-16380](https://issues.redhat.com/browse/OCPBUGS-16380): Add /etc/containers volume on create-cluster-and-infraenv [#7332](https://github.com/openshift/installer/pull/7332)
* [OCPBUGS-16207](https://issues.redhat.com/browse/OCPBUGS-16207): ic: aws: validate max security groups [#7345](https://github.com/openshift/installer/pull/7345)
* OpenStack: Add steps to enable dual-stack clusters [#7269](https://github.com/openshift/installer/pull/7269)
* Revert "Merge pull request #7096 from r4f4/gcp-instance-zones" [#7360](https://github.com/openshift/installer/pull/7360)
* [SPLAT-657](https://issues.redhat.com/browse/SPLAT-657): AWS Local Zones subnets automation for edge compute pool [#7137](https://github.com/openshift/installer/pull/7137)
* [OSASINFRA-3193](https://issues.redhat.com/browse/OSASINFRA-3193): Update openstack/Dockerfile.ci for ansible-core [#7346](https://github.com/openshift/installer/pull/7346)
* Include start-cluster.env in agent-gather [#7350](https://github.com/openshift/installer/pull/7350)
* Fix the deployment on OpenStack for worker pools with no replicas. [#7356](https://github.com/openshift/installer/pull/7356)
* [OCPBUGS-16219](https://issues.redhat.com/browse/OCPBUGS-16219): Fix timing issue between network services [#7355](https://github.com/openshift/installer/pull/7355)
* [OCPBUGS-16415](https://issues.redhat.com/browse/OCPBUGS-16415): Sync nmstateconfig script with assisted-service changes [#7353](https://github.com/openshift/installer/pull/7353)
* Agent: Allow additional kernel args to be passed to ISO [#7306](https://github.com/openshift/installer/pull/7306)
* Remove mentions of use-octavia [#7335](https://github.com/openshift/installer/pull/7335)
* [OCPCLOUD-2036](https://issues.redhat.com/browse/OCPCLOUD-2036): introduce External platform type [#7217](https://github.com/openshift/installer/pull/7217)
* [OCPBUGS-16395](https://issues.redhat.com/browse/OCPBUGS-16395): openstack/upi: update doc for CCPMSO [#7351](https://github.com/openshift/installer/pull/7351)
* [OCPBUGS-16245](https://issues.redhat.com/browse/OCPBUGS-16245): Make nmstateconfig.yaml optional in config-drive [#7333](https://github.com/openshift/installer/pull/7333)
* [OSASINFRA-3181](https://issues.redhat.com/browse/OSASINFRA-3181): Volume Types for OpenStack CPMS [#7300](https://github.com/openshift/installer/pull/7300)
* [CORS-2445](https://issues.redhat.com/browse/CORS-2445): GCP: Add default values for arm64 [#7258](https://github.com/openshift/installer/pull/7258)
* PowerVS: Replace deprecated key_id attribute with name for ibm_pi_key resource [#7256](https://github.com/openshift/installer/pull/7256)
* PowerVS: Handle empty serviceInstanceID in metadata.json [#7328](https://github.com/openshift/installer/pull/7328)
* OpenStack: Dual stack support with BYON [#6797](https://github.com/openshift/installer/pull/6797)
* [MULTIARCH-3667](https://issues.redhat.com/browse/MULTIARCH-3667): Add support for CPMSO for Power VS [#7226](https://github.com/openshift/installer/pull/7226)
* [OCPBUGS-15421](https://issues.redhat.com/browse/OCPBUGS-15421): Allow different service account for xpn installs in gcp [#7308](https://github.com/openshift/installer/pull/7308)
* [OCPBUGS-15997](https://issues.redhat.com/browse/OCPBUGS-15997): openstack: add root volume AZ validation [#7309](https://github.com/openshift/installer/pull/7309)
* aws: drop hostedZoneRole Feature Gate [#7327](https://github.com/openshift/installer/pull/7327)
* Agent: clear service status once all services started [#7316](https://github.com/openshift/installer/pull/7316)
* AGENT-660 Display insert config image message to console [#7299](https://github.com/openshift/installer/pull/7299)
* PowerVS: Create new newAuthenticator function [#7321](https://github.com/openshift/installer/pull/7321)
* [OCPBUGS-9404](https://issues.redhat.com/browse/OCPBUGS-9404): azure: skip LB creation when not needed [#7063](https://github.com/openshift/installer/pull/7063)
* Revert "Merge pull request #7289 from r4f4/padillon-settle-ops" [#7318](https://github.com/openshift/installer/pull/7318)
* Agent: Log kernel params when generating pxe assets [#7314](https://github.com/openshift/installer/pull/7314)
* [OCPBUGS-15238](https://issues.redhat.com/browse/OCPBUGS-15238): GCP: ic: client: use a higher context timeout [#7290](https://github.com/openshift/installer/pull/7290)
* [AGENT-648](https://issues.redhat.com/browse/AGENT-648): Remove validation check limiting None platform to SNO [#7236](https://github.com/openshift/installer/pull/7236)
* Allow destroy for C2S isolated (us-iso and us-isob) partitions. [#7086](https://github.com/openshift/installer/pull/7086)
* [OCPBUGS-15999](https://issues.redhat.com/browse/OCPBUGS-15999): update RHCOS 4.14 bootimage metadata to 414.92.202307070025-0 [#7310](https://github.com/openshift/installer/pull/7310)
* [OCPBUGS-14900](https://issues.redhat.com/browse/OCPBUGS-14900): Use correct SELinux label. Make rename atomic. [#7307](https://github.com/openshift/installer/pull/7307)
* create: add check for cluster operator stability [#7289](https://github.com/openshift/installer/pull/7289)
* [SPLAT-827](https://issues.redhat.com/browse/SPLAT-827): support static IP assignments with vSphere IPI [#7179](https://github.com/openshift/installer/pull/7179)
* [AGENT-562](https://issues.redhat.com/browse/AGENT-562): Load config from config image [#7200](https://github.com/openshift/installer/pull/7200)
* [OCPBUGS-15825](https://issues.redhat.com/browse/OCPBUGS-15825): Fix agent gather tui logs [#7293](https://github.com/openshift/installer/pull/7293)
* [OSASINFRA-3155](https://issues.redhat.com/browse/OSASINFRA-3155): OpenStack: Create ControlPlaneMachineSet CRDs [#7280](https://github.com/openshift/installer/pull/7280)
* ic: gcp: validate instances against user-configured zones [#7096](https://github.com/openshift/installer/pull/7096)
* [AGENT-678](https://issues.redhat.com/browse/AGENT-678): Fix concurrency issue in agent integration tests [#7303](https://github.com/openshift/installer/pull/7303)
* [OCPBUGS-14762](https://issues.redhat.com/browse/OCPBUGS-14762): Use the same names for public LB in IPI and UPI Azure [#7292](https://github.com/openshift/installer/pull/7292)
* [OCPBUGS-2324](https://issues.redhat.com/browse/OCPBUGS-2324): terraform: aws: bump version to 5.4.0 [#7274](https://github.com/openshift/installer/pull/7274)
* tls/root: Document this more and change friendly name [#7232](https://github.com/openshift/installer/pull/7232)
* [CORS-2572](https://issues.redhat.com/browse/CORS-2572): azure: implement egress via NAT gateway [#6933](https://github.com/openshift/installer/pull/6933)
* docs: Add note about not configuring allowed address pairs for day 2 manila configuration [#7287](https://github.com/openshift/installer/pull/7287)
* [OCPBUGS-14932](https://issues.redhat.com/browse/OCPBUGS-14932): specify azure cli version [#7297](https://github.com/openshift/installer/pull/7297)
* [OCPBUGS-14932](https://issues.redhat.com/browse/OCPBUGS-14932): Update azure cli to 2.40.0+ [#7216](https://github.com/openshift/installer/pull/7216)
* PowerVS Add support for Capped processors [#7286](https://github.com/openshift/installer/pull/7286)
* [CORS-2645](https://issues.redhat.com/browse/CORS-2645): AWS Cross-Account Private Hosted Zone: Add Further Validations [#7253](https://github.com/openshift/installer/pull/7253)
* [AGENT-624](https://issues.redhat.com/browse/AGENT-624): Allow override of networkType [#7223](https://github.com/openshift/installer/pull/7223)
* Update hack/go-test.sh to golang 1.20 [#7270](https://github.com/openshift/installer/pull/7270)
* [AGENT-627](https://issues.redhat.com/browse/AGENT-627): Decompress kernel on ARM [#7276](https://github.com/openshift/installer/pull/7276)
* OWNERS_ALIASES: offboard ashcrow and bgilbert from CoreOS [#7275](https://github.com/openshift/installer/pull/7275)
* AGENT-558 Generate unconfigured agent ignition [#7186](https://github.com/openshift/installer/pull/7186)
* OWNERS: merge agent/installer [#7278](https://github.com/openshift/installer/pull/7278)
* [OSASINFRA-3182](https://issues.redhat.com/browse/OSASINFRA-3182): openstack: remove portTargets [#7239](https://github.com/openshift/installer/pull/7239)
* [AGENT-498](https://issues.redhat.com/browse/AGENT-498): Get iPXE script template kernel parameters from ISO [#7150](https://github.com/openshift/installer/pull/7150)
* [OCPBUGS-15238](https://issues.redhat.com/browse/OCPBUGS-15238): GCP: ic: improve project validation [#7267](https://github.com/openshift/installer/pull/7267)
* Default dataStore is returned the name instead the inventoryPath [#7261](https://github.com/openshift/installer/pull/7261)
* Use the correct image name for agent-tui extraction [#7266](https://github.com/openshift/installer/pull/7266)
* [OCPBUGS-13636](https://issues.redhat.com/browse/OCPBUGS-13636): new Aws secret regions support [#6184](https://github.com/openshift/installer/pull/6184)
* [CORS-2372](https://issues.redhat.com/browse/CORS-2372): Azure: auth Installer with Managed Identity from VM [#7108](https://github.com/openshift/installer/pull/7108)
* [OCPBUGS-11796](https://issues.redhat.com/browse/OCPBUGS-11796): azure: skip NSG creation when BYO vnet [#7094](https://github.com/openshift/installer/pull/7094)
* [OCPBUGS-9435](https://issues.redhat.com/browse/OCPBUGS-9435): terraform: aws: secret regions now support ALIAS record [#7184](https://github.com/openshift/installer/pull/7184)
* [SPLAT-1094](https://issues.redhat.com/browse/SPLAT-1094): warn users about deprecation of Alibaba Cloud [#7257](https://github.com/openshift/installer/pull/7257)
* [OCPBUGS-14869](https://issues.redhat.com/browse/OCPBUGS-14869): Add timezone info in installer logs [#7243](https://github.com/openshift/installer/pull/7243)
* [CORS-2656](https://issues.redhat.com/browse/CORS-2656): Remove context from cluster uninstaller struct [#7169](https://github.com/openshift/installer/pull/7169)
* openstack: document external LB [#6920](https://github.com/openshift/installer/pull/6920)
* bootkube: Drop cruft in MCO bootstrap [#7244](https://github.com/openshift/installer/pull/7244)
* Update OWNERS_ALIASES [#7203](https://github.com/openshift/installer/pull/7203)
* Agent: run shellcheck on start-cluster-installation.sh [#7062](https://github.com/openshift/installer/pull/7062)
* [OSASINFRA-2168](https://issues.redhat.com/browse/OSASINFRA-2168): Docs: update OpenStack requirements [#7015](https://github.com/openshift/installer/pull/7015)
* [OCPBUGS-15095](https://issues.redhat.com/browse/OCPBUGS-15095): Add kubevirt digest-ref in RHCOS boot images [#7254](https://github.com/openshift/installer/pull/7254)
* [AGENT-563](https://issues.redhat.com/browse/AGENT-563): Create configuration image [#7157](https://github.com/openshift/installer/pull/7157)
* [AGENT-510](https://issues.redhat.com/browse/AGENT-510): Support interactive network console when pxe booting [#7185](https://github.com/openshift/installer/pull/7185)
* Allow CustomNoUpgrade features via install-config [#7246](https://github.com/openshift/installer/pull/7246)
* [MULTIARCH-3664](https://issues.redhat.com/browse/MULTIARCH-3664): enable multipath for powervs [#7222](https://github.com/openshift/installer/pull/7222)
* [OCPBUGS-13960](https://issues.redhat.com/browse/OCPBUGS-13960): update RHCOS 4.14 bootimage metadata to 414.92.202306141028-0 [#7247](https://github.com/openshift/installer/pull/7247)
* [CFE-829](https://issues.redhat.com/browse/CFE-829): Remove Azure Tags TechPreview only indicators and checks [#7187](https://github.com/openshift/installer/pull/7187)
* [CORS-2631](https://issues.redhat.com/browse/CORS-2631): Add additional security group ids in AWS [#7151](https://github.com/openshift/installer/pull/7151)
* [AGENT-596](https://issues.redhat.com/browse/AGENT-596): use agent-installer-utils for agent-tui extraction [#7212](https://github.com/openshift/installer/pull/7212)
* [AGENT-491](https://issues.redhat.com/browse/AGENT-491): Support pxe base url [#6723](https://github.com/openshift/installer/pull/6723)
* [OCPBUGS-14917](https://issues.redhat.com/browse/OCPBUGS-14917): PowerVS: Cleanup service instances for destroy cluster [#7173](https://github.com/openshift/installer/pull/7173)
* OpenStack: add support to multiple subnets in the bootstrap [#7111](https://github.com/openshift/installer/pull/7111)
* Add ControlPlaneMachineSet for Nutanix [#7119](https://github.com/openshift/installer/pull/7119)
* [OPNET-298](https://issues.redhat.com/browse/OPNET-298): Allow primary-v6 dual-stack on vSphere [#7124](https://github.com/openshift/installer/pull/7124)
* [CORS-2613](https://issues.redhat.com/browse/CORS-2613): AWS: Cross-account Shared VPC Support [#7225](https://github.com/openshift/installer/pull/7225)
* OpenStack: support user provided dual-stack api and ingress Port [#7133](https://github.com/openshift/installer/pull/7133)
* OpenStack: configure IPv6 address in the bootstrap node [#7128](https://github.com/openshift/installer/pull/7128)
* [SPLAT-995](https://issues.redhat.com/browse/SPLAT-995): vSphere Add new template field [#6995](https://github.com/openshift/installer/pull/6995)
* [OCPBUGS-14757](https://issues.redhat.com/browse/OCPBUGS-14757): images: installer: add xz to the container [#7238](https://github.com/openshift/installer/pull/7238)
* [OCPBUGS-14818](https://issues.redhat.com/browse/OCPBUGS-14818): disable oVirt provider [#7213](https://github.com/openshift/installer/pull/7213)
* [AGENT-556](https://issues.redhat.com/browse/AGENT-556): Wait for rendezvous host configuration [#7068](https://github.com/openshift/installer/pull/7068)
* [OCPBUGS-13955](https://issues.redhat.com/browse/OCPBUGS-13955): support OPENSHIFT_INSTALL_OS_IMAGE_OVERRIDE [#7211](https://github.com/openshift/installer/pull/7211)
* [OCPBUGS-14121](https://issues.redhat.com/browse/OCPBUGS-14121): Convert Rendezvous IPv6 address to canonical format [#7234](https://github.com/openshift/installer/pull/7234)
* [OCPBUGS-14416](https://issues.redhat.com/browse/OCPBUGS-14416): Shorten SNO installation duration by releasing CPC lease [#7219](https://github.com/openshift/installer/pull/7219)
* [OCPBUGS-14565](https://issues.redhat.com/browse/OCPBUGS-14565): Replace with govc docker image and fix ibmcli folder permission issue [#7231](https://github.com/openshift/installer/pull/7231)
* [OCPBUGS-13108](https://issues.redhat.com/browse/OCPBUGS-13108): Log additional host info at warning level [#7209](https://github.com/openshift/installer/pull/7209)
* [OCPBUGS-13662](https://issues.redhat.com/browse/OCPBUGS-13662): Ignore CPUPartitioning for ABI [#7218](https://github.com/openshift/installer/pull/7218)
* [OCPBUGS-11736](https://issues.redhat.com/browse/OCPBUGS-11736): gcp use preconfigured private zone for installation [#7155](https://github.com/openshift/installer/pull/7155)
* Bump & vendor k8s 1.27 dependencies [#7220](https://github.com/openshift/installer/pull/7220)
* [OCPBUGS-10342](https://issues.redhat.com/browse/OCPBUGS-10342): Check that number of replicas matches hosts [#7059](https://github.com/openshift/installer/pull/7059)
* [OSASINFRA-3153](https://issues.redhat.com/browse/OSASINFRA-3153): move `loadBalancer` API to GA for OpenStack [#7127](https://github.com/openshift/installer/pull/7127)
* [OCPBUGS-10306](https://issues.redhat.com/browse/OCPBUGS-10306): [vSphere] Upi installation failed due to VMs for master and worker node creation failed [#6999](https://github.com/openshift/installer/pull/6999)
* [AGENT-567](https://issues.redhat.com/browse/AGENT-567): Re-enable 'create pxe-files' command [#7102](https://github.com/openshift/installer/pull/7102)
* [AGENT-555](https://issues.redhat.com/browse/AGENT-555): Move Rendezvous Host config to separate file [#7061](https://github.com/openshift/installer/pull/7061)
* [OCPBUGS-13764](https://issues.redhat.com/browse/OCPBUGS-13764): Support /dev/disk/by-path root device hints [#7192](https://github.com/openshift/installer/pull/7192)
* [OCPBUGS-1769](https://issues.redhat.com/browse/OCPBUGS-1769): Ignore IAM Roles that the Installer is not authorized to access [#7180](https://github.com/openshift/installer/pull/7180)
* [OCPBUGS-14077](https://issues.redhat.com/browse/OCPBUGS-14077): MULTIARCH-3492: Avoid conflicting subnets [#7145](https://github.com/openshift/installer/pull/7145)
* [OCPBUGS-14076](https://issues.redhat.com/browse/OCPBUGS-14076): PowerVS: Remove ClusterOSImage [#6996](https://github.com/openshift/installer/pull/6996)
* [OCPBUGS-13094](https://issues.redhat.com/browse/OCPBUGS-13094): Use oc command in bootkube.service in a disconnected env [#7178](https://github.com/openshift/installer/pull/7178)
* [OCPBUGS-7410](https://issues.redhat.com/browse/OCPBUGS-7410): Reject active VPC connections before service destroy [#7101](https://github.com/openshift/installer/pull/7101)
* [Full changelog](https://github.com/openshift/installer/compare/3bf878a83ae9db783888c3890a777b39d394aba5...db0eb03e5f9d5934df6449cee75b1e85d4985e35)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/72ddc3cdda60e902ffdfd64f3301954b095386d6)

* [OCPBUGS-15992](https://issues.redhat.com/browse/OCPBUGS-15992): Fix Metal3Remediation CRD install order [#193](https://github.com/openshift/cluster-api-provider-baremetal/pull/193)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/34226326653bffc9e903e894e32057c97e082d80...72ddc3cdda60e902ffdfd64f3301954b095386d6)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/8119b0408ce90f7f44af9531dde396803ef8429d)

* Stop linting when building the image [#285](https://github.com/openshift/baremetal-operator/pull/285)
* [OCPBUGS-17363](https://issues.redhat.com/browse/OCPBUGS-17363): Trigger reconcile on Secret change [#296](https://github.com/openshift/baremetal-operator/pull/296)
* [OCPBUGS-17038](https://issues.redhat.com/browse/OCPBUGS-17038): Merge upstream [#293](https://github.com/openshift/baremetal-operator/pull/293)
* Merge upstream [#288](https://github.com/openshift/baremetal-operator/pull/288)
* Merge upstream [#286](https://github.com/openshift/baremetal-operator/pull/286)
* Upstream Rebase [#284](https://github.com/openshift/baremetal-operator/pull/284)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/0ec1b04ebf893341d4a3c241d6f7aef721172465...8119b0408ce90f7f44af9531dde396803ef8429d)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/8296040e7154cb420cb4c00b2c3e921f58a2a3d5)

* [OCPBUGS-15947](https://issues.redhat.com/browse/OCPBUGS-15947): Don't render config with incomplete unicast peer list [#266](https://github.com/openshift/baremetal-runtimecfg/pull/266)
* Remove old scripts [#251](https://github.com/openshift/baremetal-runtimecfg/pull/251)
* [OCPBUGS-14403](https://issues.redhat.com/browse/OCPBUGS-14403): Use machine-config state instead of comparing roles [#257](https://github.com/openshift/baremetal-runtimecfg/pull/257)
* [OCPBUGS-14936](https://issues.redhat.com/browse/OCPBUGS-14936): node: remove duplicate [#260](https://github.com/openshift/baremetal-runtimecfg/pull/260)
* [OCPBUGS-12739](https://issues.redhat.com/browse/OCPBUGS-12739): Fix bug with IP conversion using net.IP [#258](https://github.com/openshift/baremetal-runtimecfg/pull/258)
* [OCPBUGS-12739](https://issues.redhat.com/browse/OCPBUGS-12739): Use NonVirtualIP as a hint for selecting Peers [#256](https://github.com/openshift/baremetal-runtimecfg/pull/256)
* [OCPBUGS-12739](https://issues.redhat.com/browse/OCPBUGS-12739): Use lazy match when getting IP from OVN [#254](https://github.com/openshift/baremetal-runtimecfg/pull/254)
* [OCPBUGS-12739](https://issues.redhat.com/browse/OCPBUGS-12739): Dump whole Node object when failing to get node IP [#253](https://github.com/openshift/baremetal-runtimecfg/pull/253)
* [OCPBUGS-12739](https://issues.redhat.com/browse/OCPBUGS-12739): Print error message when node annotation doesn't parse [#252](https://github.com/openshift/baremetal-runtimecfg/pull/252)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/37d9c7bc61e961264451b1b3ca42df339cacc206...8296040e7154cb420cb4c00b2c3e921f58a2a3d5)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/3803a930a671c0ffb1cbc6281c5ade48cde76762)

* Update openshift/api [#1525](https://github.com/openshift/oc/pull/1525)
* [OTA-559](https://issues.redhat.com/browse/OTA-559): pkg/cli/admin/release/extract: Add --included and --install-config [#1521](https://github.com/openshift/oc/pull/1521)
* Stop using deprecated github.com/docker/docker go APIs [#1514](https://github.com/openshift/oc/pull/1514)
* [OCPBUGS-16735](https://issues.redhat.com/browse/OCPBUGS-16735): Truncate existing files when writing from inspect [#1520](https://github.com/openshift/oc/pull/1520)
* introduce plugin and plugin shadowing tests for oc [#1424](https://github.com/openshift/oc/pull/1424)
* pkg/cli/admin/upgrade: Newlines after --allow-upgrade-with-warnings errors [#1519](https://github.com/openshift/oc/pull/1519)
* Add profiling functionality and flags in oc [#1516](https://github.com/openshift/oc/pull/1516)
* Fix typo in /var/log folder [#1517](https://github.com/openshift/oc/pull/1517)
* login: improve usage message for --web option [#1513](https://github.com/openshift/oc/pull/1513)
* Bump k8s packages to 1.27.4 [#1515](https://github.com/openshift/oc/pull/1515)
* [OTA-994](https://issues.redhat.com/browse/OTA-994): pkg/cli/admin/release/extract: Centralize manifest extraction [#1404](https://github.com/openshift/oc/pull/1404)
* [OCPBUGS-16009](https://issues.redhat.com/browse/OCPBUGS-16009): reboot: set ignition version to 3.1 [#1499](https://github.com/openshift/oc/pull/1499)
* Add tls-server-name when property exists in kubeconfig [#1456](https://github.com/openshift/oc/pull/1456)
* [OCPBUGS-15776](https://issues.redhat.com/browse/OCPBUGS-15776): mcs cert: account for environments that use IP directly [#1497](https://github.com/openshift/oc/pull/1497)
* [OCPNODE-1656](https://issues.redhat.com/browse/OCPNODE-1656): oc release info: Introduce --idms-file and deprecate --icsp-file [#1465](https://github.com/openshift/oc/pull/1465)
* [AUTH-355](https://issues.redhat.com/browse/AUTH-355): Add OAuth2 Authorization Code Grant Flow for login [#1402](https://github.com/openshift/oc/pull/1402)
* upgrade distribution No 2 [#1495](https://github.com/openshift/oc/pull/1495)
* [WRKLDS-700](https://issues.redhat.com/browse/WRKLDS-700): bump(k8s) to v1.27.2 [#1420](https://github.com/openshift/oc/pull/1420)
* [OCPBUGS-15012](https://issues.redhat.com/browse/OCPBUGS-15012): oc image extract: idms-file flag map to IDMSFile field [#1464](https://github.com/openshift/oc/pull/1464)
* Correct incorrect command in observe command [#1419](https://github.com/openshift/oc/pull/1419)
* Clarify the use of the filter without keep-manifest-list [#1414](https://github.com/openshift/oc/pull/1414)
* [OCPBUGS-10612](https://issues.redhat.com/browse/OCPBUGS-10612): make registry auth prefence default to podman config locations [#1376](https://github.com/openshift/oc/pull/1376)
* handle the error case of node retrieval while waiting for reboot [#1482](https://github.com/openshift/oc/pull/1482)
* Fix the output of error prompt [#1433](https://github.com/openshift/oc/pull/1433)
* pkg/cli/admin/upgrade: Surface Recommended=Unknown more prominently [#1442](https://github.com/openshift/oc/pull/1442)
* pkg/cli/admin/upgrade: Add post-period to space to some error messages [#1330](https://github.com/openshift/oc/pull/1330)
* Wait for reboot [#1473](https://github.com/openshift/oc/pull/1473)
* tweak output format [#1471](https://github.com/openshift/oc/pull/1471)
* [OCPNODE-1580](https://issues.redhat.com/browse/OCPNODE-1580): Add --print-mirror-instructions to oc adm release mirror to allow idms instructions [#1341](https://github.com/openshift/oc/pull/1341)
* add reboot-nodes [#1468](https://github.com/openshift/oc/pull/1468)
* Trust check [#1469](https://github.com/openshift/oc/pull/1469)
* fix directories for consistency [#1467](https://github.com/openshift/oc/pull/1467)
* ocpcertificates: add ability to rotate MCS CA/cert [#1450](https://github.com/openshift/oc/pull/1450)
* [OCPNODE-1656](https://issues.redhat.com/browse/OCPNODE-1656): oc image extract: Introduce IDMS as alternative source [#1426](https://github.com/openshift/oc/pull/1426)
* pernodepod: percent works like this [#1463](https://github.com/openshift/oc/pull/1463)
* ocpcertificates: don't make assumptions on resources not to bring pip… [#1462](https://github.com/openshift/oc/pull/1462)
* allow running a command while the kubelet is off [#1459](https://github.com/openshift/oc/pull/1459)
* add command to create new bootstrap kubeconfig for kubelet [#1458](https://github.com/openshift/oc/pull/1458)
* ocpcertificates: fix handling resources by names explicitly + other cosmetic fixes [#1460](https://github.com/openshift/oc/pull/1460)
* tweaks needed for wait [#1455](https://github.com/openshift/oc/pull/1455)
* Add a command to remove older trust [#1447](https://github.com/openshift/oc/pull/1447)
* create command to create new adminkubeconfig [#1452](https://github.com/openshift/oc/pull/1452)
* add a command to copy content to every node [#1454](https://github.com/openshift/oc/pull/1454)
* Minor updates to CLI help text [#1453](https://github.com/openshift/oc/pull/1453)
* add command for regenerating OCP leaf certs [#1443](https://github.com/openshift/oc/pull/1443)
* add a new command to wait for all clusteroperators to go stable [#1444](https://github.com/openshift/oc/pull/1444)
* add command to produce an updated CA bundle for trusting the kube-apiserver [#1446](https://github.com/openshift/oc/pull/1446)
* add printing for new revisions [#1445](https://github.com/openshift/oc/pull/1445)
* add oc adm ocp-certificates regenerate-top-level [#1439](https://github.com/openshift/oc/pull/1439)
* [OCPBUGS-11652](https://issues.redhat.com/browse/OCPBUGS-11652): Extend adm node-logs to new API [#1403](https://github.com/openshift/oc/pull/1403)
* [OCPBUGS-12793](https://issues.redhat.com/browse/OCPBUGS-12793): adds a mapping for exposed ports to DockerConfig when manifest listed [#1415](https://github.com/openshift/oc/pull/1415)
* [OCPBUGS-14340](https://issues.redhat.com/browse/OCPBUGS-14340): Name containers w/'multi' when mirroring a multi release image [#1423](https://github.com/openshift/oc/pull/1423)
* [OCPBUGS-11123](https://issues.redhat.com/browse/OCPBUGS-11123): oc adm groups sync: all groups: print warning before caching [#1436](https://github.com/openshift/oc/pull/1436)
* [OCPBUGS-11632](https://issues.redhat.com/browse/OCPBUGS-11632): Skip invalid events yamls and continue [#1429](https://github.com/openshift/oc/pull/1429)
* [OCPBUGS-14082](https://issues.redhat.com/browse/OCPBUGS-14082): Remove closed centos7 registry from newapp unit tests [#1430](https://github.com/openshift/oc/pull/1430)
* [Full changelog](https://github.com/openshift/oc/compare/68c710f5c29d795a8706d1e40de9099d278c059b...3803a930a671c0ffb1cbc6281c5ade48cde76762)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/d85c7534660a43a3f3248aec74c383b1acb36cb7)

* pkg/aws/actuator: Drop comment which suggested passthrough permission verification [#590](https://github.com/openshift/cloud-credential-operator/pull/590)
* [CCO-363](https://issues.redhat.com/browse/CCO-363): Adding azure identity webhook [#559](https://github.com/openshift/cloud-credential-operator/pull/559)
* [OCPBUGS-16684](https://issues.redhat.com/browse/OCPBUGS-16684): Set cr.status.provisioned=false on syncErr path [#583](https://github.com/openshift/cloud-credential-operator/pull/583)
* [OCPBUGS-17049](https://issues.redhat.com/browse/OCPBUGS-17049): update lastSyncGeneration in STS flow sync success [#585](https://github.com/openshift/cloud-credential-operator/pull/585)
* Revert "CCO-401: Add azure-workload-identity-webhook to image references." [#588](https://github.com/openshift/cloud-credential-operator/pull/588)
* [CCO-401](https://issues.redhat.com/browse/CCO-401): Add azure-workload-identity-webhook to image references. [#586](https://github.com/openshift/cloud-credential-operator/pull/586)
* [CCO-413](https://issues.redhat.com/browse/CCO-413): Add dataPermissions to Azure credentials request. [#584](https://github.com/openshift/cloud-credential-operator/pull/584)
* [CCO-402](https://issues.redhat.com/browse/CCO-402): Create Azure AD pod identity webhook config secret manifest in create-all,create-oidc-issuer [#573](https://github.com/openshift/cloud-credential-operator/pull/573)
* [OCPCLOUD-2012](https://issues.redhat.com/browse/OCPCLOUD-2012): ccoctl: Plumb credreq.spec.cloudTokenPath override into Azure secret creation [#580](https://github.com/openshift/cloud-credential-operator/pull/580)
* [OCPBUGS-16807](https://issues.redhat.com/browse/OCPBUGS-16807): ccoctl azure exit with error when OIDC and installation resource group names are the same [#582](https://github.com/openshift/cloud-credential-operator/pull/582)
* [OCPCLOUD-2012](https://issues.redhat.com/browse/OCPCLOUD-2012): ccoctl: Add --enable-tech-preview arg to azure create-all subcommand. [#581](https://github.com/openshift/cloud-credential-operator/pull/581)
* [OCPBUGS-16614](https://issues.redhat.com/browse/OCPBUGS-16614): *: stop checking for the STS feature gate [#579](https://github.com/openshift/cloud-credential-operator/pull/579)
* Add DOCKER_CMD Makefile var to use podman when found. [#577](https://github.com/openshift/cloud-credential-operator/pull/577)
* [OCPBUGS-16614](https://issues.redhat.com/browse/OCPBUGS-16614): go.mod: re-vendor openshift/api [#578](https://github.com/openshift/cloud-credential-operator/pull/578)
* [CCO-233](https://issues.redhat.com/browse/CCO-233): Add Azure AD Workload Identity doc. [#566](https://github.com/openshift/cloud-credential-operator/pull/566)
* *: use a global codec [#576](https://github.com/openshift/cloud-credential-operator/pull/576)
* [OCPBUGS-16313](https://issues.redhat.com/browse/OCPBUGS-16313): pkg/operator: correctly fetch CA for AWS minter [#575](https://github.com/openshift/cloud-credential-operator/pull/575)
* [OCPBUGS-16334](https://issues.redhat.com/browse/OCPBUGS-16334): Clarify updateActuatorConditions & update lastSync [#568](https://github.com/openshift/cloud-credential-operator/pull/568)
* [OCPBUGS-16313](https://issues.redhat.com/browse/OCPBUGS-16313): manifests: allow list/watch globally on our config configmap [#572](https://github.com/openshift/cloud-credential-operator/pull/572)
* [CCO-388](https://issues.redhat.com/browse/CCO-388): manifests: add cloudcredentials.operator.openshift.io to HCP [#571](https://github.com/openshift/cloud-credential-operator/pull/571)
* Revert "manifests: manually amend resources that get laid down by CVO in HCP" [#570](https://github.com/openshift/cloud-credential-operator/pull/570)
* [OCPBUGS-15365](https://issues.redhat.com/browse/OCPBUGS-15365): manifests: fix rbac [#567](https://github.com/openshift/cloud-credential-operator/pull/567)
* [OCPBUGS-15906](https://issues.redhat.com/browse/OCPBUGS-15906): ccoctl azure delete to also delete role assignments [#564](https://github.com/openshift/cloud-credential-operator/pull/564)
* [OCPBUGS-16088](https://issues.redhat.com/browse/OCPBUGS-16088): Adds [default] section header to STS Secrets [#565](https://github.com/openshift/cloud-credential-operator/pull/565)
* [OCPBUGS-16036](https://issues.redhat.com/browse/OCPBUGS-16036): Set status on CR properly when STS provisioned [#562](https://github.com/openshift/cloud-credential-operator/pull/562)
* Revert "Merge pull request #398 from csrwng/exclude_config_ibmcloud" [#561](https://github.com/openshift/cloud-credential-operator/pull/561)
* [OCPBUGS-15365](https://issues.redhat.com/browse/OCPBUGS-15365): *: use correct clients in the secretannotator [#563](https://github.com/openshift/cloud-credential-operator/pull/563)
* [OCPBUGS-15365](https://issues.redhat.com/browse/OCPBUGS-15365): *: use a filtered LIST + WATCH on Secrets for AWS STS [#545](https://github.com/openshift/cloud-credential-operator/pull/545)
* reconcile status when the clusteroperator changes [#560](https://github.com/openshift/cloud-credential-operator/pull/560)
* [CCO-353](https://issues.redhat.com/browse/CCO-353): ccoctl to create azure custom roles [#556](https://github.com/openshift/cloud-credential-operator/pull/556)
* [CCO-394](https://issues.redhat.com/browse/CCO-394): Do not Add PodIdentityWebhook controller when InfraStatus.ControlPlaneToplogy is External. [#547](https://github.com/openshift/cloud-credential-operator/pull/547)
* CCO-366 Add ability to detect AWS STS and behave accordingly [#542](https://github.com/openshift/cloud-credential-operator/pull/542)
* Implement ccoctl command to create infrastructure required for Azure workload identity [#523](https://github.com/openshift/cloud-credential-operator/pull/523)
* [PORTENABLE-526](https://issues.redhat.com/browse/PORTENABLE-526): operator: use a partial metadata watch for Namespaces [#546](https://github.com/openshift/cloud-credential-operator/pull/546)
* manager: filter the cache of configmaps [#544](https://github.com/openshift/cloud-credential-operator/pull/544)
* Bump to go 1.20 in go.mod [#536](https://github.com/openshift/cloud-credential-operator/pull/536)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/38e7f96bf73036924abcb1352222c17704e4b2e0...d85c7534660a43a3f3248aec74c383b1acb36cb7)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/093e68b12909732c450aabe3c740f249ad9bc445)

* [OCPBUGS-15805](https://issues.redhat.com/browse/OCPBUGS-15805): Azure: Handle already existing IP configurations [#115](https://github.com/openshift/cloud-network-config-controller/pull/115)
* [CCO-356](https://issues.redhat.com/browse/CCO-356): Add support for Azure workload identity tokens [#102](https://github.com/openshift/cloud-network-config-controller/pull/102)
* [SDN-3902](https://issues.redhat.com/browse/SDN-3902): Maintenance [#111](https://github.com/openshift/cloud-network-config-controller/pull/111)
* [OCPBUGS-13140](https://issues.redhat.com/browse/OCPBUGS-13140): increase GCP egress ip capacity to 100 from 10 [#110](https://github.com/openshift/cloud-network-config-controller/pull/110)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/843583b48d33498c0ff323770a339064ff08ed73...093e68b12909732c450aabe3c740f249ad9bc445)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/9cfbd903213ac9e7c5ea5eeacb5cea8952057d9c)

* Add openshift-cli-client in NamesFilter [#625](https://github.com/openshift/cluster-authentication-operator/pull/625)
* [OCPBUGS-16501](https://issues.redhat.com/browse/OCPBUGS-16501): bump PSa, lib-go and storage-version-migrator to get rid of goproxy dep [#624](https://github.com/openshift/cluster-authentication-operator/pull/624)
* [AUTH-356](https://issues.redhat.com/browse/AUTH-356): Add openshift-cli-client OAuth Client [#606](https://github.com/openshift/cluster-authentication-operator/pull/606)
* Correctly link oauth apiserver ServiceMonitor with its Service [#616](https://github.com/openshift/cluster-authentication-operator/pull/616)
* [OCPBUGS-2765](https://issues.redhat.com/browse/OCPBUGS-2765): Library go bump [#613](https://github.com/openshift/cluster-authentication-operator/pull/613)
* [OCPBUGS-14010](https://issues.redhat.com/browse/OCPBUGS-14010): increase timeout for probes [#612](https://github.com/openshift/cluster-authentication-operator/pull/612)
* [AUTH-363](https://issues.redhat.com/browse/AUTH-363): make proxy config check less obtrusive [#608](https://github.com/openshift/cluster-authentication-operator/pull/608)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/da39951a53ad95be28e32a48f278cc23f41e99a7...9cfbd903213ac9e7c5ea5eeacb5cea8952057d9c)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/970eb9f35fb1ad49e6cdb761643728e477e7750a)

* Updating vertical-pod-autoscaler images to be consistent with ART [#253](https://github.com/openshift/kubernetes-autoscaler/pull/253)
* OCPCLOUD-2060 Merge https://github.com/kubernetes/autoscaler:master (d3ec0c4) into master [#256](https://github.com/openshift/kubernetes-autoscaler/pull/256)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/4e7d1eccf895b1af1cd6d79691c6772e602a97af...970eb9f35fb1ad49e6cdb761643728e477e7750a)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/e661f50c894eb5de51a044632fd66fd957b60234)

* Reconcile when external process change the clusteroperator status [#279](https://github.com/openshift/cluster-autoscaler-operator/pull/279)
* [OCPBUGS-14356](https://issues.redhat.com/browse/OCPBUGS-14356): add nutanix labels that should be ignored [#275](https://github.com/openshift/cluster-autoscaler-operator/pull/275)
* CNF-5642 make operator optional [#269](https://github.com/openshift/cluster-autoscaler-operator/pull/269)
* [OCPCLOUD-2061](https://issues.redhat.com/browse/OCPCLOUD-2061): Rebase dependencies to k8s 1.27 [#274](https://github.com/openshift/cluster-autoscaler-operator/pull/274)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/f7f168cc5145da8b8c781122a39582e1a2ad39ce...e661f50c894eb5de51a044632fd66fd957b60234)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/82bf672f3a16193025eba34ec23c9c82e78d7253)

* [OCPBUGS-17693](https://issues.redhat.com/browse/OCPBUGS-17693): Use private ports for Ironic from BMO when proxy is on [#353](https://github.com/openshift/cluster-baremetal-operator/pull/353)
* reconcile status when clusteroperator changes [#351](https://github.com/openshift/cluster-baremetal-operator/pull/351)
* [OCPBUGS-15232](https://issues.redhat.com/browse/OCPBUGS-15232): Use Service instead of provisioning IP for BMO to talk to Ironic [#348](https://github.com/openshift/cluster-baremetal-operator/pull/348)
* [OCPBUGS-15155](https://issues.redhat.com/browse/OCPBUGS-15155): Limit role binding to openshift-machine-api namespace [#345](https://github.com/openshift/cluster-baremetal-operator/pull/345)
* [OCPBUGS-14064](https://issues.redhat.com/browse/OCPBUGS-14064): Split baremetal-operator into a separate pod [#342](https://github.com/openshift/cluster-baremetal-operator/pull/342)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/d222a97c7a9ad271e84f10ea7a3c76649fbe9d59...82bf672f3a16193025eba34ec23c9c82e78d7253)


### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/93fba13f576831ba0953190663ab26aaf5766984)

* [OCPBUGS-16504](https://issues.redhat.com/browse/OCPBUGS-16504): bump(*): vendor update [#99](https://github.com/openshift/cluster-bootstrap/pull/99)
* Updating ose-cluster-bootstrap images to be consistent with ART [#88](https://github.com/openshift/cluster-bootstrap/pull/88)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/0af5be0717c0a7bbd6cdaa1ce1284edf389359f0...93fba13f576831ba0953190663ab26aaf5766984)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/4efea4967a1de8d60393f1b5b5c89e1145992c8a)

* [OCPBUGS-6354](https://issues.redhat.com/browse/OCPBUGS-6354), [OCPBUGS-6372](https://issues.redhat.com/browse/OCPBUGS-6372): Merge https://github.com/kubernetes-sigs/cluster-api:v1.4.2 (7b92ce4) into master [#175](https://github.com/openshift/cluster-api/pull/175)
* Make openshift/e2e-tests.sh executable [#178](https://github.com/openshift/cluster-api/pull/178)
* [OCPCLOUD-2121](https://issues.redhat.com/browse/OCPCLOUD-2121): Add openshift/e2e-tests for CAPI E2E testing [#177](https://github.com/openshift/cluster-api/pull/177)
* [Full changelog](https://github.com/openshift/cluster-api/compare/f42917da9efcfcbe70d0eb5afa3baf304a53af45...4efea4967a1de8d60393f1b5b5c89e1145992c8a)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/504be5bee927f7c1d0265b82054049283699b988)

* [OCPCLOUD-1874](https://issues.redhat.com/browse/OCPCLOUD-1874): Bump CAPG to v1.4.0 [#123](https://github.com/openshift/cluster-capi-operator/pull/123)
* Bump CAPZ to v1.9.5 [#122](https://github.com/openshift/cluster-capi-operator/pull/122)
* [OCPCLOUD-1870](https://issues.redhat.com/browse/OCPCLOUD-1870): bump go 1.20, 1.26 deps for k8s/capi/capi providers [#118](https://github.com/openshift/cluster-capi-operator/pull/118)
* [SPLAT-1084](https://issues.redhat.com/browse/SPLAT-1084): Remove IPAM CRD installation filter [#117](https://github.com/openshift/cluster-capi-operator/pull/117)
* [OCPBUGS-9970](https://issues.redhat.com/browse/OCPBUGS-9970): Make infrastructureRef field required [#116](https://github.com/openshift/cluster-capi-operator/pull/116)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/cef14ae06a823c0faae7816fa23c92fce5c14cf4...504be5bee927f7c1d0265b82054049283699b988)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/786dda44224610b4dd78f2b953a90686e90b68fd)

* [OCPCLOUD-2013](https://issues.redhat.com/browse/OCPCLOUD-2013): Move Azure Credentials Request to custom role [#274](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/274)
* [OCPCLOUD-2149](https://issues.redhat.com/browse/OCPCLOUD-2149): Azure: CCM and node manager to use provided credentials instead of MSI. [#268](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/268)
* [OCPBUGS-15154](https://issues.redhat.com/browse/OCPBUGS-15154): Prune provider permissions post move to use-service-account-credentials [#259](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/259)
* OpenStack: Enable manage-security-groups by default [#264](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/264)
* OpenStack: Extend owners [#266](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/266)
* OpenStack: Set max-shared-lb to disable the feature [#263](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/263)
* [OCPBUGS-16690](https://issues.redhat.com/browse/OCPBUGS-16690): Allow all NoSchedule taints for Azure CNM DaemonSet [#267](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/267)
* OpenStack: Remove `use-octavia` from config [#262](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/262)
* [OPNET-319](https://issues.redhat.com/browse/OPNET-319): Pass feature gates to vSphere and OpenStack providers [#256](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/256)
* [OCPBUGS-14425](https://issues.redhat.com/browse/OCPBUGS-14425): Alibaba platforms should not be upgreadable [#257](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/257)
* [CCO-324](https://issues.redhat.com/browse/CCO-324), [CCO-325](https://issues.redhat.com/browse/CCO-325): add support for workload identity [#245](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/245)
* [OCPCLOUD-2010](https://issues.redhat.com/browse/OCPCLOUD-2010): Re-vendor api and library-go for external platform support [#253](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/253)
* [OCPCLOUD-2052](https://issues.redhat.com/browse/OCPCLOUD-2052): Rebase to 1.27 [#252](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/252)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/fe83685af289311a24221be8f038df65aba40332...786dda44224610b4dd78f2b953a90686e90b68fd)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/204befc1b0c6bc576cfbf54ffc98291174348fb4)

* Bump openshift/api to add ValidatingAdmissionPolicy feature gate. [#340](https://github.com/openshift/cluster-config-operator/pull/340)
* [OCPVE-626](https://issues.redhat.com/browse/OCPVE-626): bump(openshift/api@master) [#341](https://github.com/openshift/cluster-config-operator/pull/341)
* [CFE-689](https://issues.redhat.com/browse/CFE-689): Update openshift/api package to latest version [#335](https://github.com/openshift/cluster-config-operator/pull/335)
* [OCPBUGS-16614](https://issues.redhat.com/browse/OCPBUGS-16614): go.mod: bump openshift/api [#338](https://github.com/openshift/cluster-config-operator/pull/338)
* [OCPBUGS-16614](https://issues.redhat.com/browse/OCPBUGS-16614): go.mod: update openshift/api [#334](https://github.com/openshift/cluster-config-operator/pull/334)
* [OCPBUGS-16507](https://issues.redhat.com/browse/OCPBUGS-16507): bump sigs.k8s.io/kube-storage-version-migrator [#333](https://github.com/openshift/cluster-config-operator/pull/333)
* [OCPCLOUD-2010](https://issues.redhat.com/browse/OCPCLOUD-2010): Remove feature gate for external platform [#331](https://github.com/openshift/cluster-config-operator/pull/331)
* [SDN-4024](https://issues.redhat.com/browse/SDN-4024): Vendor openshift/api to get ANP feature-gate changes [#330](https://github.com/openshift/cluster-config-operator/pull/330)
* Promote privateHostedZoneAWS from Tech Preview to Default [#328](https://github.com/openshift/cluster-config-operator/pull/328)
* Update openshift/api [#327](https://github.com/openshift/cluster-config-operator/pull/327)
* [OCPBUGS-13547](https://issues.redhat.com/browse/OCPBUGS-13547): Promote Azure CCM from TPNU to default [#307](https://github.com/openshift/cluster-config-operator/pull/307)
* [OCPBUGS-15877](https://issues.redhat.com/browse/OCPBUGS-15877): go upgradeable=false when latencysensitive is used and not corrected [#325](https://github.com/openshift/cluster-config-operator/pull/325)
* Enable feature gate for externalCertificate on Route API [#326](https://github.com/openshift/cluster-config-operator/pull/326)
* stomp the latencysensitive featureset for equivalent default [#324](https://github.com/openshift/cluster-config-operator/pull/324)
* [WRKLDS-757](https://issues.redhat.com/browse/WRKLDS-757): Sync with openshift/api to drop MatchLabelKeysInPodTopologySpread from TechPreviewNoUpgrade [#322](https://github.com/openshift/cluster-config-operator/pull/322)
* [SPLAT-1099](https://issues.redhat.com/browse/SPLAT-1099): bump openshift/api for vSphere static IP feature gate and platform spec [#323](https://github.com/openshift/cluster-config-operator/pull/323)
* remove dead flag for file [#309](https://github.com/openshift/cluster-config-operator/pull/309)
* Changes to move to api@2d36f53 [#321](https://github.com/openshift/cluster-config-operator/pull/321)
* [OCPBUGS-12767](https://issues.redhat.com/browse/OCPBUGS-12767): Add CustomNoUpgrade CRD versions to payload [#320](https://github.com/openshift/cluster-config-operator/pull/320)
* [OCPCLOUD-2010](https://issues.redhat.com/browse/OCPCLOUD-2010): Re-vendor api to support external platform [#306](https://github.com/openshift/cluster-config-operator/pull/306)
* Update openshift/api to disable EventedPLEG featuregate in techpreview [#317](https://github.com/openshift/cluster-config-operator/pull/317)
* update openshift/api for types and gates [#316](https://github.com/openshift/cluster-config-operator/pull/316)
* Update github.com/openshift/api to pull in evented pleg and sigstore feature flags [#312](https://github.com/openshift/cluster-config-operator/pull/312)
* Update github.com/openshift/api to pull in feature gates [#311](https://github.com/openshift/cluster-config-operator/pull/311)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/088c6d48cc1ab0fe67734e7b4ac0179dd5e3ff71...204befc1b0c6bc576cfbf54ffc98291174348fb4)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/534eb4c1b9fb626f31f65bb50916d059daf326e4)

* test/e2e: override `RootVolume.VolumeType` to "" [#232](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/232)
* openstack: volumeType is now required [#231](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/231)
* manifests: Shift from run level 31 to 30 [#227](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/227)
* vendoring: update openshift/api [#226](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/226)
* e2e: OpenStack CPMS created automatically [#224](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/224)
* [OSASINFRA-3180](https://issues.redhat.com/browse/OSASINFRA-3180): openstack: volume type in failure domain [#217](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/217)
* Bump openshift/api package [#223](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/223)
* [OSASINFRA-3133](https://issues.redhat.com/browse/OSASINFRA-3133): OpenStack support [#195](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/195)
* [OCPBUGS-15338](https://issues.redhat.com/browse/OCPBUGS-15338): Fix flaking machine mapping testing [#220](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/220)
* add capability annotation [#205](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/205)
* [OCPBUGS-15308](https://issues.redhat.com/browse/OCPBUGS-15308): Fix lint issue [#221](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/221)
* docs: Off-by-one error [#201](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/201)
* [OCPCLOUD-2016](https://issues.redhat.com/browse/OCPCLOUD-2016): Surface cpms vs machine diff [#180](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/180)
* [OCPBUGS-13205](https://issues.redhat.com/browse/OCPBUGS-13205): Check for unknown fields in the provider spec [#214](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/214)
* Add Nutanix support for CPMSO [#200](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/200)
* [OCPCLOUD-2042](https://issues.redhat.com/browse/OCPCLOUD-2042): Update dependencies to K8s v1.27, go v1.20 [#213](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/213)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/e2c7d44aadefbfeb47b44c7ca680a2ccef8ae1b5...534eb4c1b9fb626f31f65bb50916d059daf326e4)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/9a67364ca9b2761f9bfffd7f600018788f94a5dd)

* [HOSTEDCP-1063](https://issues.redhat.com/browse/HOSTEDCP-1063): allow webhooks in hosted clusters to reach csi-snapshot-webhook service [#155](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/155)
* [OCPBUGS-3680](https://issues.redhat.com/browse/OCPBUGS-3680): Set readOnlyRootFilesystem to false [#154](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/154)
* [OCPBUGS-16783](https://issues.redhat.com/browse/OCPBUGS-16783): Chore: Update OWNERS [#152](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/152)
* [OCPBUGS-16508](https://issues.redhat.com/browse/OCPBUGS-16508): Bump library-go to remove dependency on goproxy [#153](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/153)
* [OCPBUGS-12576](https://issues.redhat.com/browse/OCPBUGS-12576), [STOR-1168](https://issues.redhat.com/browse/STOR-1168): Bump common libraries [#151](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/151)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/898e62de68137c7a03a59fa62967da8ce45ff0ac...9a67364ca9b2761f9bfffd7f600018788f94a5dd)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/6cfee191de08cede60bed8cea6f8e17f730adf61)

* [NE-1268](https://issues.redhat.com/browse/NE-1268): Replace bindata using embed [#361](https://github.com/openshift/cluster-dns-operator/pull/361)
* [OCPBUGS-12863](https://issues.redhat.com/browse/OCPBUGS-12863): Replace Bugzilla link with Red Hat Issue Tracker [#374](https://github.com/openshift/cluster-dns-operator/pull/374)
* [OCPBUGS-14395](https://issues.redhat.com/browse/OCPBUGS-14395): Set controller-runtime logger to a null logger [#369](https://github.com/openshift/cluster-dns-operator/pull/369)
* [OCPBUGS-6829](https://issues.redhat.com/browse/OCPBUGS-6829): Add support for protocolStrategy API field to enable force_tcp configuration [#359](https://github.com/openshift/cluster-dns-operator/pull/359)
* [OCPBUGS-13965](https://issues.redhat.com/browse/OCPBUGS-13965): Bump vendors k8s libraries to 0.27.2 [#368](https://github.com/openshift/cluster-dns-operator/pull/368)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/f827fb9d32f4dcd3e5d5cd0f7b8e2350af3d0c31...6cfee191de08cede60bed8cea6f8e17f730adf61)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/6c205c247a3965132d6c73d098126996f9768a95)

* add e2e test for cronjob reconciliation failures [#1098](https://github.com/openshift/cluster-etcd-operator/pull/1098)
* add pvc validation and e2e tests [#1096](https://github.com/openshift/cluster-etcd-operator/pull/1096)
* add backup skip e2e test [#1095](https://github.com/openshift/cluster-etcd-operator/pull/1095)
* e2e test for size retention [#1093](https://github.com/openshift/cluster-etcd-operator/pull/1093)
* [OCPBUGS-16889](https://issues.redhat.com/browse/OCPBUGS-16889): machine api check: rely on status more than baseline [#1094](https://github.com/openshift/cluster-etcd-operator/pull/1094)
* add processed label to skipped backups [#1092](https://github.com/openshift/cluster-etcd-operator/pull/1092)
* update overview slides [#1091](https://github.com/openshift/cluster-etcd-operator/pull/1091)
* [ETCD-460](https://issues.redhat.com/browse/ETCD-460): add basic backup e2e tests [#1089](https://github.com/openshift/cluster-etcd-operator/pull/1089)
* add backup pv pvc yaml [#1090](https://github.com/openshift/cluster-etcd-operator/pull/1090)
* [ETCD-448](https://issues.redhat.com/browse/ETCD-448): add init container [#1088](https://github.com/openshift/cluster-etcd-operator/pull/1088)
* Add cmd for creating EtcdBackup CR and use in CronJob [#1084](https://github.com/openshift/cluster-etcd-operator/pull/1084)
* [OCPBUGS-16889](https://issues.redhat.com/browse/OCPBUGS-16889): handle optional machineAPI [#1083](https://github.com/openshift/cluster-etcd-operator/pull/1083)
* [ETCD-448](https://issues.redhat.com/browse/ETCD-448): add backup pruning cmd [#1081](https://github.com/openshift/cluster-etcd-operator/pull/1081)
* add informers to new backup controllers (gate by restart) [#1082](https://github.com/openshift/cluster-etcd-operator/pull/1082)
* dump all goroutines, not the current stack [#1079](https://github.com/openshift/cluster-etcd-operator/pull/1079)
* [OCPBUGS-16445](https://issues.redhat.com/browse/OCPBUGS-16445): bump library-go [#1077](https://github.com/openshift/cluster-etcd-operator/pull/1077)
* [OCPBUGS-16688](https://issues.redhat.com/browse/OCPBUGS-16688): update golang.org/x/net/http2 [#1076](https://github.com/openshift/cluster-etcd-operator/pull/1076)
* [ETCD-446](https://issues.redhat.com/browse/ETCD-446): add periodic backup controller [#1074](https://github.com/openshift/cluster-etcd-operator/pull/1074)
* [OCPBUGS-15327](https://issues.redhat.com/browse/OCPBUGS-15327): reset snapshot default counts to avoid file already lo… [#1067](https://github.com/openshift/cluster-etcd-operator/pull/1067)
* [ETCD-436](https://issues.redhat.com/browse/ETCD-436): backup controller [#1066](https://github.com/openshift/cluster-etcd-operator/pull/1066)
* add rev bumps and etcdutl [#1072](https://github.com/openshift/cluster-etcd-operator/pull/1072)
* [MON-669](https://issues.redhat.com/browse/MON-669): Add etcd ServiceMonitor, before that was managed by cluster-… [#1070](https://github.com/openshift/cluster-etcd-operator/pull/1070)
* Integrate feature flags in CEO (revised) [#1071](https://github.com/openshift/cluster-etcd-operator/pull/1071)
* Revert "Integrate feature flags in CEO" [#1069](https://github.com/openshift/cluster-etcd-operator/pull/1069)
* Integrate feature flags in CEO [#1062](https://github.com/openshift/cluster-etcd-operator/pull/1062)
* [OCPBUGS-15256](https://issues.redhat.com/browse/OCPBUGS-15256): Sync openshift/api to reduce installerpod configmap based file permissions to 0600 [#1065](https://github.com/openshift/cluster-etcd-operator/pull/1065)
* Limit etcdDatabaseHighFragmentationRatio to 100MB+ [#1063](https://github.com/openshift/cluster-etcd-operator/pull/1063)
* manifests: bump loglevel of operator to normal [#1060](https://github.com/openshift/cluster-etcd-operator/pull/1060)
* Remove unused cli docker image [#1053](https://github.com/openshift/cluster-etcd-operator/pull/1053)
* [OCPBUGS-14255](https://issues.redhat.com/browse/OCPBUGS-14255): Add Controller health to CEO liveness probe [#1049](https://github.com/openshift/cluster-etcd-operator/pull/1049)
* [OCPBUGS-14296](https://issues.redhat.com/browse/OCPBUGS-14296): skip unstartedEtcdMember event [#1059](https://github.com/openshift/cluster-etcd-operator/pull/1059)
* [OCPBUGS-14323](https://issues.redhat.com/browse/OCPBUGS-14323): Change manifest directory permissions [#1058](https://github.com/openshift/cluster-etcd-operator/pull/1058)
* [OCPBUGS-13547](https://issues.redhat.com/browse/OCPBUGS-13547): Remove featureset flag and use only the manifest [#1054](https://github.com/openshift/cluster-etcd-operator/pull/1054)
* [OCPBUGS-14254](https://issues.redhat.com/browse/OCPBUGS-14254): Restore script improvements [#1057](https://github.com/openshift/cluster-etcd-operator/pull/1057)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/0155625535ed6ff46cb377ce70fcd9ce8285cf27...6c205c247a3965132d6c73d098126996f9768a95)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/717e1201d416b278af3bf7d73fb65c404dd39fda)

* build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4 [#877](https://github.com/openshift/cluster-image-registry-operator/pull/877)
* build(deps): bump the k8s-dependencies group with 1 update [#895](https://github.com/openshift/cluster-image-registry-operator/pull/895)
* [IR-363](https://issues.redhat.com/browse/IR-363): Update Azure Credentials Request manifest of the Cluster Image Registry Operator to use new API field for requesting permissions [#890](https://github.com/openshift/cluster-image-registry-operator/pull/890)
* build(deps): bump github.com/prometheus/common from 0.37.0 to 0.44.0 [#878](https://github.com/openshift/cluster-image-registry-operator/pull/878)
* [CFE-682](https://issues.redhat.com/browse/CFE-682): Add user defined labels to the GCP buckets created [#872](https://github.com/openshift/cluster-image-registry-operator/pull/872)
* [CFE-682](https://issues.redhat.com/browse/CFE-682): Update openshift/api package to latest version [#887](https://github.com/openshift/cluster-image-registry-operator/pull/887)
* [IR-390](https://issues.redhat.com/browse/IR-390): Make a configmap for MCO to consume CAs [#880](https://github.com/openshift/cluster-image-registry-operator/pull/880)
* build(deps): bump github.com/aws/aws-sdk-go from 1.44.291 to 1.44.298 [#879](https://github.com/openshift/cluster-image-registry-operator/pull/879)
* build(deps): bump golang.org/x/net from 0.8.0 to 0.11.0 [#871](https://github.com/openshift/cluster-image-registry-operator/pull/871)
* build(deps): bump github.com/aliyun/aliyun-oss-go-sdk from 2.1.10+incompatible to 2.2.7+incompatible [#869](https://github.com/openshift/cluster-image-registry-operator/pull/869)
* .github/dependabot.yml: group certain dependencies [#865](https://github.com/openshift/cluster-image-registry-operator/pull/865)
* [IR-389](https://issues.redhat.com/browse/IR-389): bump aws-sdk-go [#860](https://github.com/openshift/cluster-image-registry-operator/pull/860)
* .github: configure dependabot [#861](https://github.com/openshift/cluster-image-registry-operator/pull/861)
* [IR-369](https://issues.redhat.com/browse/IR-369), [IR-370](https://issues.redhat.com/browse/IR-370): support Azure workload identity [#857](https://github.com/openshift/cluster-image-registry-operator/pull/857)
* [OCPBUGS-12132](https://issues.redhat.com/browse/OCPBUGS-12132): Updating ose-cluster-image-registry-operator images to be consistent with ART [#854](https://github.com/openshift/cluster-image-registry-operator/pull/854)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/84ab4a5635d4cfc8c25e14629a0476b5d15370c6...717e1201d416b278af3bf7d73fb65c404dd39fda)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/be01a227e9072ce0b2fb825669c7cbeb8be12ce9)

* [OCPBUGS-17359](https://issues.redhat.com/browse/OCPBUGS-17359): test/e2e: Don't use openshift/origin-node [#970](https://github.com/openshift/cluster-ingress-operator/pull/970)
* [NE-1140](https://issues.redhat.com/browse/NE-1140), [NE-1145](https://issues.redhat.com/browse/NE-1145): Set/delete HTTP request/response headers via IngressController API [#872](https://github.com/openshift/cluster-ingress-operator/pull/872)
* [OCPBUGS-16089](https://issues.redhat.com/browse/OCPBUGS-16089): Set spec.subdomain on the canary route [#965](https://github.com/openshift/cluster-ingress-operator/pull/965)
* [OCPBUGS-14995](https://issues.redhat.com/browse/OCPBUGS-14995): desiredRouterDeployment: Set HostPort if needed [#947](https://github.com/openshift/cluster-ingress-operator/pull/947)
* [OCPBUGS-10875](https://issues.redhat.com/browse/OCPBUGS-10875): gateway-service-dns: Set DNS policy appropriately [#934](https://github.com/openshift/cluster-ingress-operator/pull/934)
* [NE-1244](https://issues.redhat.com/browse/NE-1244): Use permissions instead of the "Contributor" role in Azure CredentialsRequest [#929](https://github.com/openshift/cluster-ingress-operator/pull/929)
* [OCPBUGS-12790](https://issues.redhat.com/browse/OCPBUGS-12790): README: Fix Bugzilla link [#968](https://github.com/openshift/cluster-ingress-operator/pull/968)
* [RFE-3007](https://issues.redhat.com/browse/RFE-3007): Expose option-contstats as an unsupported option [#887](https://github.com/openshift/cluster-ingress-operator/pull/887)
* [NE-1189](https://issues.redhat.com/browse/NE-1189): Refactor Test_desiredLoadBalancerService [#886](https://github.com/openshift/cluster-ingress-operator/pull/886)
* [NE-1187](https://issues.redhat.com/browse/NE-1187): Use t.Run for table-driven tests [#884](https://github.com/openshift/cluster-ingress-operator/pull/884)
* [NE-1183](https://issues.redhat.com/browse/NE-1183): Rename unit tests for specific functions [#880](https://github.com/openshift/cluster-ingress-operator/pull/880)
* [NE-1269](https://issues.redhat.com/browse/NE-1269): Replace bindata using embed [#905](https://github.com/openshift/cluster-ingress-operator/pull/905)
* [RFE-3765](https://issues.redhat.com/browse/RFE-3765): Allow Ingress to Modify the HAProxy Log Length when using a Sidecar [#900](https://github.com/openshift/cluster-ingress-operator/pull/900)
* [OCPBUGS-9274](https://issues.redhat.com/browse/OCPBUGS-9274): canary: Tolerate infra node NoExecute taint [#932](https://github.com/openshift/cluster-ingress-operator/pull/932)
* [OCPBUGS-7546](https://issues.redhat.com/browse/OCPBUGS-7546): Allow only 1 disruption with 3 replicas [#931](https://github.com/openshift/cluster-ingress-operator/pull/931)
* [OCPBUGS-15100](https://issues.redhat.com/browse/OCPBUGS-15100): Fix previous attempt of adding a missing trailing dot to hostname [#956](https://github.com/openshift/cluster-ingress-operator/pull/956)
* [OCPBUGS-14396](https://issues.redhat.com/browse/OCPBUGS-14396): Set controller-runtime logger to a null logger for E2E [#946](https://github.com/openshift/cluster-ingress-operator/pull/946)
* [OCPBUGS-14998](https://issues.redhat.com/browse/OCPBUGS-14998): Only use RoleARN for Route53 API [#951](https://github.com/openshift/cluster-ingress-operator/pull/951)
* [OCPBUGS-15100](https://issues.redhat.com/browse/OCPBUGS-15100): Create valid DNS names for Gateway API on GCP [#949](https://github.com/openshift/cluster-ingress-operator/pull/949)
* [OCPBUGS-13106](https://issues.redhat.com/browse/OCPBUGS-13106): Add ingress controller status logging on waitForIngressControllerCondition [#924](https://github.com/openshift/cluster-ingress-operator/pull/924)
* [OCPBUGS-13190](https://issues.redhat.com/browse/OCPBUGS-13190): Avoid spurious updates for internalTrafficPolicy [#927](https://github.com/openshift/cluster-ingress-operator/pull/927)
* [OCPBUGS-13810](https://issues.redhat.com/browse/OCPBUGS-13810): Update TestAWSELBConnectionIdleTimeout to not use wildcard DNS record [#944](https://github.com/openshift/cluster-ingress-operator/pull/944)
* [NE-1294](https://issues.redhat.com/browse/NE-1294): Add support for AWS shared VPC in another account [#928](https://github.com/openshift/cluster-ingress-operator/pull/928)
* [CCO-318](https://issues.redhat.com/browse/CCO-318): Enable Azure Workload Identity authentication. [#906](https://github.com/openshift/cluster-ingress-operator/pull/906)
* [OCPBUGS-6661](https://issues.redhat.com/browse/OCPBUGS-6661), [OCPBUGS-9464](https://issues.redhat.com/browse/OCPBUGS-9464): Move mTLS CRL handling into the router, and fix accidental duplication of CRLs [#939](https://github.com/openshift/cluster-ingress-operator/pull/939)
* [OCPBUGS-13963](https://issues.redhat.com/browse/OCPBUGS-13963): Bump vendors k8s libraries to 0.27.2 [#936](https://github.com/openshift/cluster-ingress-operator/pull/936)
* Revert "OCPBUGS-6661, OCPBUGS-9464: Move mTLS CRL handling into the router, and fix accidental duplication of CRLs" [#938](https://github.com/openshift/cluster-ingress-operator/pull/938)
* [OCPBUGS-6661](https://issues.redhat.com/browse/OCPBUGS-6661), [OCPBUGS-9464](https://issues.redhat.com/browse/OCPBUGS-9464): Move mTLS CRL handling into the router, and fix accidental duplication of CRLs [#930](https://github.com/openshift/cluster-ingress-operator/pull/930)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/960d4104d25f60e077dedb08d423cb7fe1900c0c...be01a227e9072ce0b2fb825669c7cbeb8be12ce9)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/7864ef22791d34787956e160160654054832864d)

* Set runtime-config in lockstep with feature-gates, if needed. [#1536](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1536)
* bump(api) [#1535](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1535)
* [OCPBUGS-16511](https://issues.redhat.com/browse/OCPBUGS-16511): bump(*): vendor update [#1529](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1529)
* [OCPBUGS-16511](https://issues.redhat.com/browse/OCPBUGS-16511): remove dependency on typed prometheus client [#1527](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1527)
* [OCPBUGS-13635](https://issues.redhat.com/browse/OCPBUGS-13635): make webhook connection failure a warning in log [#1526](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1526)
* [OCPBUGS-15489](https://issues.redhat.com/browse/OCPBUGS-15489): manifests: add new PrometheusRule for recording rules [#1521](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1521)
* certrotation: rotate kube-apiserver-to-kubelet-signer when 80% of validity is over [#1523](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1523)
* [OCPBUGS-13946](https://issues.redhat.com/browse/OCPBUGS-13946): do not use one second timeout when asserting a webhook connection [#1510](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1510)
* [OCPBUGS-14008](https://issues.redhat.com/browse/OCPBUGS-14008): Enable "send-retry-after-while-not-ready-once" on SNO [#1500](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1500)
* update probes for best practices and consistency [#1516](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1516)
* api_performance_dashboard: show apiserver_longrunning_requests metric [#1518](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1518)
* allow greater timeout for etcd health check [#1517](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1517)
* api_performance_dashboard: show apiserver_request_total instead of apiserver_dropped_requests [#1520](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1520)
* [OCPBUGS-8404](https://issues.redhat.com/browse/OCPBUGS-8404): pkg/operator/configobserver: check that the serving certificate refer… [#1482](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1482)
* [OCPBUGS-3986](https://issues.redhat.com/browse/OCPBUGS-3986): dashboard: use recording rules for most metrics [#1484](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1484)
* [OCPBUGS-14940](https://issues.redhat.com/browse/OCPBUGS-14940): api_performance_dashboard: show apiserver_longrunning_requests metric [#1511](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1511)
* [OCPBUGS-13946](https://issues.redhat.com/browse/OCPBUGS-13946): degraded_webhook.go x509: certificate signed by unknown authority [#1503](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1503)
* [OCPBUGS-14323](https://issues.redhat.com/browse/OCPBUGS-14323): Change manifest directory permissions [#1505](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1505)
* [OCPBUGS-13547](https://issues.redhat.com/browse/OCPBUGS-13547): Remove featureset flag and use only the manifest [#1491](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1491)
* [OCPBUGS-13303](https://issues.redhat.com/browse/OCPBUGS-13303): pkg/operator/startupmonitor: skip openshift-apiserver readiness check… [#1492](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1492)
* [OCPBUGS-14038](https://issues.redhat.com/browse/OCPBUGS-14038): Update APIRemovedInNextRelease alerts [#1497](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1497)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/cb42b1c56dd3761bb19e586356ba95fbda6d962f...7864ef22791d34787956e160160654054832864d)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/466582d5b0ecd28b1d62a3300fbe3770dca6224a)

* [OCPCLOUD-1871](https://issues.redhat.com/browse/OCPCLOUD-1871): Merge https://github.com/kubernetes-sigs/cluster-api-operator:v0.4.0 (667606e) into main [#22](https://github.com/openshift/cluster-api-operator/pull/22)
* [OCPBUGS-12581](https://issues.redhat.com/browse/OCPBUGS-12581), [OCPBUGS-13093](https://issues.redhat.com/browse/OCPBUGS-13093): Merge https://github.com/kubernetes-sigs/cluster-api-operator:v0.2.0 (d807992) into main [#17](https://github.com/openshift/cluster-api-operator/pull/17)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/3ffba2304d16acb2c7215199e8ab31e355b0fa5a...466582d5b0ecd28b1d62a3300fbe3770dca6224a)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/d95b0c25ba55c4ef8e09e56461562ee60b22d51c)

* add roles for the new privileged namespaces PSa syncer controller [#743](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/743)
* [OCPBUGS-15256](https://issues.redhat.com/browse/OCPBUGS-15256): Sync openshift/api to reduce installerpod configmap based file permissions to 0600 [#740](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/740)
* [OCPCLOUD-2010](https://issues.redhat.com/browse/OCPCLOUD-2010): Re-vendor api and library-go for external platform support [#736](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/736)
* [OCPBUGS-14323](https://issues.redhat.com/browse/OCPBUGS-14323): Change manifest directory permissions [#739](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/739)
* [OCPBUGS-13579](https://issues.redhat.com/browse/OCPBUGS-13579): remove RBAC for cluster-policy-controller CM leader election [#738](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/738)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/c27b0e585ff6c7d68f72ce8a74ab90dd9567ed19...d95b0c25ba55c4ef8e09e56461562ee60b22d51c)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/db92b6d9fcf410aa24efc4a70c4114925bb7b797)

* [OCPBUGS-14052](https://issues.redhat.com/browse/OCPBUGS-14052): KubeSchedulerDown: set runbook_url annotation [#489](https://github.com/openshift/cluster-kube-scheduler-operator/pull/489)
* [OCPBUGS-15256](https://issues.redhat.com/browse/OCPBUGS-15256): Sync openshift/api to reduce installerpod configmap based file permissions to 0600 [#488](https://github.com/openshift/cluster-kube-scheduler-operator/pull/488)
* remove loglevel in deploy [#487](https://github.com/openshift/cluster-kube-scheduler-operator/pull/487)
* [OCPBUGS-14323](https://issues.redhat.com/browse/OCPBUGS-14323): Change manifest directory permissions [#485](https://github.com/openshift/cluster-kube-scheduler-operator/pull/485)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/d67fd0782ff7060e548446815f460d6c9e10e057...db92b6d9fcf410aa24efc4a70c4114925bb7b797)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/f3e404cfbce5a16461c60793f2914e600aa1a18b)

* [OCPBUGS-16513](https://issues.redhat.com/browse/OCPBUGS-16513): bump(*): update to 1.27.1 [#91](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/91)
* Fix operator doc in README [#90](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/90)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/dbe2395070ae37dcb826fb5f3179eb4cb6df560b...f3e404cfbce5a16461c60793f2914e600aa1a18b)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/eccf08875e8db30847c4317e7429e7dfb4141c76)

* [OCPBUGS-16156](https://issues.redhat.com/browse/OCPBUGS-16156): check if machine api present [#198](https://github.com/openshift/cluster-machine-approver/pull/198)
* handle situation when machine CRD is not present [#191](https://github.com/openshift/cluster-machine-approver/pull/191)
* [OCPCLOUD-2044](https://issues.redhat.com/browse/OCPCLOUD-2044): Update to Kubernetes 1.27 deps [#195](https://github.com/openshift/cluster-machine-approver/pull/195)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/0be95abfa236f1d8868b36ca997ee827db111ab5...eccf08875e8db30847c4317e7429e7dfb4141c76)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/e5b58df35d79e88c04a85e7b3aef30904adddb65)

* [OCPBUGS-1062](https://issues.redhat.com/browse/OCPBUGS-1062): update webhook configuration only if required [#2065](https://github.com/openshift/cluster-monitoring-operator/pull/2065)
* [MON-988](https://issues.redhat.com/browse/MON-988): remove alert "MultipleContainersOOMKilled" [#2071](https://github.com/openshift/cluster-monitoring-operator/pull/2071)
* Remove deprecated visual_web_terminal_sessions metric [#2059](https://github.com/openshift/cluster-monitoring-operator/pull/2059)
* [OCPBUGS-17487](https://issues.redhat.com/browse/OCPBUGS-17487): fix typo for ThanosRulerConfig.Resources [#2070](https://github.com/openshift/cluster-monitoring-operator/pull/2070)
* Update jsonnet dependencies [#2063](https://github.com/openshift/cluster-monitoring-operator/pull/2063)
* [OCPBUGS-17346](https://issues.redhat.com/browse/OCPBUGS-17346): Avoid recreating some resources, created by prometheus-operator, during 4.13->4.14 upgrade [#2066](https://github.com/openshift/cluster-monitoring-operator/pull/2066)
* [MON-3291](https://issues.redhat.com/browse/MON-3291): Adjust node-exporter's MaxProcs documentation now that we s… [#2055](https://github.com/openshift/cluster-monitoring-operator/pull/2055)
* Synchronize versions of the downstream components [#2061](https://github.com/openshift/cluster-monitoring-operator/pull/2061)
* [MON-3093](https://issues.redhat.com/browse/MON-3093): fix single node replica issue [#2060](https://github.com/openshift/cluster-monitoring-operator/pull/2060)
* [OCPBUGS-17191](https://issues.redhat.com/browse/OCPBUGS-17191): add namespace label to alerting rules [#2058](https://github.com/openshift/cluster-monitoring-operator/pull/2058)
* Synchronize versions of the downstream components [#2056](https://github.com/openshift/cluster-monitoring-operator/pull/2056)
* [MON-2645](https://issues.redhat.com/browse/MON-2645): remove unnecessary RBAC permissions [#2051](https://github.com/openshift/cluster-monitoring-operator/pull/2051)
* Synchronize versions of the downstream components [#2052](https://github.com/openshift/cluster-monitoring-operator/pull/2052)
* [OCPBUGS-10699](https://issues.redhat.com/browse/OCPBUGS-10699): remove Kube*QuotaOvercommit alerts [#2049](https://github.com/openshift/cluster-monitoring-operator/pull/2049)
* [MON-2645](https://issues.redhat.com/browse/MON-2645): remove unused rebalancer code [#2048](https://github.com/openshift/cluster-monitoring-operator/pull/2048)
* Synchronize versions of the downstream components [#2050](https://github.com/openshift/cluster-monitoring-operator/pull/2050)
* Remove OADP metrics from the Telemetry [#2040](https://github.com/openshift/cluster-monitoring-operator/pull/2040)
* [MON-669](https://issues.redhat.com/browse/MON-669): Remove etcd ServiceMonitors management code as they'll be no… [#2039](https://github.com/openshift/cluster-monitoring-operator/pull/2039)
* [MON-3216](https://issues.redhat.com/browse/MON-3216): Add ownership labels to kube resources [#1986](https://github.com/openshift/cluster-monitoring-operator/pull/1986)
* [MON-3177](https://issues.redhat.com/browse/MON-3177): Expose and propagate TopologySpreadConstraints for kube state metrics [#2026](https://github.com/openshift/cluster-monitoring-operator/pull/2026)
* [OCPBUGS-16203](https://issues.redhat.com/browse/OCPBUGS-16203): correct docs for metric node_systemd_timer_last_trigger_seconds. [#2045](https://github.com/openshift/cluster-monitoring-operator/pull/2045)
* [MON-3178](https://issues.redhat.com/browse/MON-3178): Expose and propagate TopologySpreadConstraints for prometheus-operator [#2033](https://github.com/openshift/cluster-monitoring-operator/pull/2033)
* [MON-3274](https://issues.redhat.com/browse/MON-3274): collect the number of LIST and WATCH requests to the apiserver from telemetry [#2044](https://github.com/openshift/cluster-monitoring-operator/pull/2044)
* [MON-2903](https://issues.redhat.com/browse/MON-2903): add nodeExporter.collectors.systemd settings. [#1892](https://github.com/openshift/cluster-monitoring-operator/pull/1892)
* [MON-3179](https://issues.redhat.com/browse/MON-3179): Expose and propagate TopologySpreadConstraints for openshift state metrics [#2034](https://github.com/openshift/cluster-monitoring-operator/pull/2034)
* [MON-3176](https://issues.redhat.com/browse/MON-3176): Expose and propagate TopologySpreadConstraints for prometheus-adapter [#2025](https://github.com/openshift/cluster-monitoring-operator/pull/2025)
* [OCPBUGS-9835](https://issues.redhat.com/browse/OCPBUGS-9835): Add Content-Security-Policy headers to prometheus and alertmanager [#2012](https://github.com/openshift/cluster-monitoring-operator/pull/2012)
* [MON-3182](https://issues.redhat.com/browse/MON-3182): Expose and propagate TopologySpreadConstraints for UWM alertmanager [#2037](https://github.com/openshift/cluster-monitoring-operator/pull/2037)
* [MON-3180](https://issues.redhat.com/browse/MON-3180): Expose and propagate TopologySpreadConstraints for telemeter-client [#2017](https://github.com/openshift/cluster-monitoring-operator/pull/2017)
* [MON-3183](https://issues.redhat.com/browse/MON-3183): Expose and propagate TopologySpreadConstraints for UWM prometheus [#2038](https://github.com/openshift/cluster-monitoring-operator/pull/2038)
* [MON-3181](https://issues.redhat.com/browse/MON-3181): Expose and propagate TopologySpreadConstraints for thanos-querier [#2035](https://github.com/openshift/cluster-monitoring-operator/pull/2035)
* [MON-3231](https://issues.redhat.com/browse/MON-3231): add metric for the configured profile [#2030](https://github.com/openshift/cluster-monitoring-operator/pull/2030)
* [MON-3269](https://issues.redhat.com/browse/MON-3269): add nodeExporter.collectors.processes settings. [#2032](https://github.com/openshift/cluster-monitoring-operator/pull/2032)
* [MON-3222](https://issues.redhat.com/browse/MON-3222): Make netdev/netclass interfaces configurable [#1963](https://github.com/openshift/cluster-monitoring-operator/pull/1963)
* e2e-tests: ensure pod assertions find at least one pod [#2028](https://github.com/openshift/cluster-monitoring-operator/pull/2028)
* test/e2e/framework: remove unused function [#2020](https://github.com/openshift/cluster-monitoring-operator/pull/2020)
* [OCPBUGS-15440](https://issues.redhat.com/browse/OCPBUGS-15440): fix CMO to apply console-plugin pod.spec config [#2018](https://github.com/openshift/cluster-monitoring-operator/pull/2018)
* chore: update dependencies [#2013](https://github.com/openshift/cluster-monitoring-operator/pull/2013)
* [OCPBUGS-14922](https://issues.redhat.com/browse/OCPBUGS-14922): skip console-plugin installation if console CO is absent [#2011](https://github.com/openshift/cluster-monitoring-operator/pull/2011)
* [OCPBUGS-12714](https://issues.redhat.com/browse/OCPBUGS-12714): turn on netlink mode of netclass collector for node exporter [#2015](https://github.com/openshift/cluster-monitoring-operator/pull/2015)
* [MON-3249](https://issues.redhat.com/browse/MON-3249): Update telemeter-client to allow TLS through rbac proxy [#2005](https://github.com/openshift/cluster-monitoring-operator/pull/2005)
* Synchronize versions of the downstream components [#2024](https://github.com/openshift/cluster-monitoring-operator/pull/2024)
* [OCPBUGS-13153](https://issues.redhat.com/browse/OCPBUGS-13153): Limit the value of GOMAXPROCS on node-exporter. [#1996](https://github.com/openshift/cluster-monitoring-operator/pull/1996)
* hack/local-cmo: show the correct logged-in user [#2019](https://github.com/openshift/cluster-monitoring-operator/pull/2019)
* [MON-3253](https://issues.redhat.com/browse/MON-3253): refactor local-cmo.sh to use CMO SA by default [#2010](https://github.com/openshift/cluster-monitoring-operator/pull/2010)
* test/e2e: validate CMO and UWM configs [#2006](https://github.com/openshift/cluster-monitoring-operator/pull/2006)
* pkg/operator: reduce duplication in CSR controllers [#2007](https://github.com/openshift/cluster-monitoring-operator/pull/2007)
* Synchronize versions of the downstream components [#2009](https://github.com/openshift/cluster-monitoring-operator/pull/2009)
* [OCPBUGS-15210](https://issues.redhat.com/browse/OCPBUGS-15210): manifest: rename TP roleBinding to cluster-monitoring-operator-alert-… [#2008](https://github.com/openshift/cluster-monitoring-operator/pull/2008)
* [MON-3127](https://issues.redhat.com/browse/MON-3127): add nodeExporter.collectors.ksmd settings. [#1931](https://github.com/openshift/cluster-monitoring-operator/pull/1931)
* Synchronize versions of the downstream components [#2004](https://github.com/openshift/cluster-monitoring-operator/pull/2004)
* [MON-3229](https://issues.redhat.com/browse/MON-3229): Remove the dependency on the apiserver auth [#1904](https://github.com/openshift/cluster-monitoring-operator/pull/1904)
* Synchronize versions of the downstream components [#2003](https://github.com/openshift/cluster-monitoring-operator/pull/2003)
* Fix link metrics [#1999](https://github.com/openshift/cluster-monitoring-operator/pull/1999)
* [OCPBUGS-11958](https://issues.redhat.com/browse/OCPBUGS-11958): Add the trusted CA bundle in UWM Prometheus pods [#1970](https://github.com/openshift/cluster-monitoring-operator/pull/1970)
* [OCPBUGS-14123](https://issues.redhat.com/browse/OCPBUGS-14123): make TestBodySizeLimit less flaky [#1991](https://github.com/openshift/cluster-monitoring-operator/pull/1991)
* Update OWNERS list [#1951](https://github.com/openshift/cluster-monitoring-operator/pull/1951)
* [MON-3113](https://issues.redhat.com/browse/MON-3113): add nodeExporter.collectors.mountstats settings. [#1936](https://github.com/openshift/cluster-monitoring-operator/pull/1936)
* [OCPBUGS-12903](https://issues.redhat.com/browse/OCPBUGS-12903): Fix console metrics doc typo [#1997](https://github.com/openshift/cluster-monitoring-operator/pull/1997)
* [OCPBUGS-14816](https://issues.redhat.com/browse/OCPBUGS-14816): Add misspell target in Makefile [#1994](https://github.com/openshift/cluster-monitoring-operator/pull/1994)
* [OCPBUGS-14887](https://issues.redhat.com/browse/OCPBUGS-14887): [bot] Synchronize versions of the downstream components [#1995](https://github.com/openshift/cluster-monitoring-operator/pull/1995)
* [MON-2967](https://issues.redhat.com/browse/MON-2967): CMO deploys monitoring console-plugin [#1890](https://github.com/openshift/cluster-monitoring-operator/pull/1890)
* [OCPBUGS-14772](https://issues.redhat.com/browse/OCPBUGS-14772): Add federate-client-certs [#1990](https://github.com/openshift/cluster-monitoring-operator/pull/1990)
* [OCPBUGS-14072](https://issues.redhat.com/browse/OCPBUGS-14072): test: increase poll wait time for alertmanager [#1973](https://github.com/openshift/cluster-monitoring-operator/pull/1973)
* [OCPBUGS-14618](https://issues.redhat.com/browse/OCPBUGS-14618): Synchronize versions of the downstream components [#1988](https://github.com/openshift/cluster-monitoring-operator/pull/1988)
* [OCPBUGS-14378](https://issues.redhat.com/browse/OCPBUGS-14378): Skip some errcheck golangci-lint violations [#1983](https://github.com/openshift/cluster-monitoring-operator/pull/1983)
* [MON-2981](https://issues.redhat.com/browse/MON-2981): alertingrule and relabel: promote to v1 [#1945](https://github.com/openshift/cluster-monitoring-operator/pull/1945)
* [OCPBUGS-11889](https://issues.redhat.com/browse/OCPBUGS-11889): disable CORS headers on Thanos querier [#1950](https://github.com/openshift/cluster-monitoring-operator/pull/1950)
* [OCPBUGS-14606](https://issues.redhat.com/browse/OCPBUGS-14606): Remove remaining staticcheck violations [#1989](https://github.com/openshift/cluster-monitoring-operator/pull/1989)
* [OCPBUGS-14375](https://issues.redhat.com/browse/OCPBUGS-14375): Fix golangci-lint gosimple violations [#1979](https://github.com/openshift/cluster-monitoring-operator/pull/1979)
* [OCPBUGS-14381](https://issues.redhat.com/browse/OCPBUGS-14381): Skip golang-ci lint unused false positives [#1985](https://github.com/openshift/cluster-monitoring-operator/pull/1985)
* [OCPBUGS-14561](https://issues.redhat.com/browse/OCPBUGS-14561): Prevent ci/prow/versions from failing on PR against release-xxx [#1969](https://github.com/openshift/cluster-monitoring-operator/pull/1969)
* [OCPBUGS-10387](https://issues.redhat.com/browse/OCPBUGS-10387): label for infra nodes for metric cluster:capacity_cpu_cores:sum [#1926](https://github.com/openshift/cluster-monitoring-operator/pull/1926)
* [OCPBUGS-14379](https://issues.redhat.com/browse/OCPBUGS-14379): Skip specific govet violation on operator main.go [#1984](https://github.com/openshift/cluster-monitoring-operator/pull/1984)
* [OCPBUGS-14371](https://issues.redhat.com/browse/OCPBUGS-14371): Fix golangci-lint misspell violations [#1978](https://github.com/openshift/cluster-monitoring-operator/pull/1978)
* [OCPBUGS-14380](https://issues.redhat.com/browse/OCPBUGS-14380): Fix golangcilint whitespace violations [#1977](https://github.com/openshift/cluster-monitoring-operator/pull/1977)
* [OCPBUGS-14377](https://issues.redhat.com/browse/OCPBUGS-14377): Fix golangci-int wastedassign violations [#1981](https://github.com/openshift/cluster-monitoring-operator/pull/1981)
* [OCPBUGS-14376](https://issues.redhat.com/browse/OCPBUGS-14376): Fix golangci-lint ineffassign violations [#1980](https://github.com/openshift/cluster-monitoring-operator/pull/1980)
* [OCPBUGS-14366](https://issues.redhat.com/browse/OCPBUGS-14366): Fix golangci-lint unconvert violations [#1982](https://github.com/openshift/cluster-monitoring-operator/pull/1982)
* [OCPBUGS-13147](https://issues.redhat.com/browse/OCPBUGS-13147): Add golangci-lint linters [#1949](https://github.com/openshift/cluster-monitoring-operator/pull/1949)
* [OCPBUGS-1626](https://issues.redhat.com/browse/OCPBUGS-1626): update jsonnet dependencies [#1961](https://github.com/openshift/cluster-monitoring-operator/pull/1961)
* [OCPBUGS-12903](https://issues.redhat.com/browse/OCPBUGS-12903): Add new web console usage metrics [#1910](https://github.com/openshift/cluster-monitoring-operator/pull/1910)
* [OCPBUGS-13939](https://issues.redhat.com/browse/OCPBUGS-13939): Extend remote write test timeout [#1971](https://github.com/openshift/cluster-monitoring-operator/pull/1971)
* [OCPBUGS-14007](https://issues.redhat.com/browse/OCPBUGS-14007): test/e2e: don't fail on telemeter remote write failed samples [#1972](https://github.com/openshift/cluster-monitoring-operator/pull/1972)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/d0dad7cb7ce69c7ddd5c1b8dbe9263dd3a644302...e5b58df35d79e88c04a85e7b3aef30904adddb65)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/b09becb6027bb65e1cb7cfceba02ab17ec342c56)

* Remove certificatesigningrequests/update permission from ovnkubenode [#1934](https://github.com/openshift/cluster-network-operator/pull/1934)
* Add rolling update for managed ovnkube-control-plane [#1944](https://github.com/openshift/cluster-network-operator/pull/1944)
* IC & openshift + hypershift [#1874](https://github.com/openshift/cluster-network-operator/pull/1874)
* [OCPBUGS-16019](https://issues.redhat.com/browse/OCPBUGS-16019): prevent creation of multiple cni-sysctl-allowlist-ds pods [#1904](https://github.com/openshift/cluster-network-operator/pull/1904)
* [OCPBUGS-10765](https://issues.redhat.com/browse/OCPBUGS-10765): make MAXLOGFILES a real variable and work for self-hosted [#1931](https://github.com/openshift/cluster-network-operator/pull/1931)
* Multus thick plugin support [#1915](https://github.com/openshift/cluster-network-operator/pull/1915)
* OVN-Kubernetes ipsec: create the CSR with a random name [#1928](https://github.com/openshift/cluster-network-operator/pull/1928)
* [CCO-294](https://issues.redhat.com/browse/CCO-294): Switch azure credentials request to use explicit permissions [#1922](https://github.com/openshift/cluster-network-operator/pull/1922)
* OVN-Kubernetes: Add status subresource permissions for setting labels and annotations [#1896](https://github.com/openshift/cluster-network-operator/pull/1896)
* [SDN-3223](https://issues.redhat.com/browse/SDN-3223): Use encapsulation=true for IBM Cloud [#1800](https://github.com/openshift/cluster-network-operator/pull/1800)
* [Bug 16136](https://bugzilla.redhat.com/show_bug.cgi?id=16136): change whereabouts ip reconciler exec [#1890](https://github.com/openshift/cluster-network-operator/pull/1890)
* Add OpenStack platform to list of allowed dual-stack clusters [#1697](https://github.com/openshift/cluster-network-operator/pull/1697)
* [OCPBUGS-15945](https://issues.redhat.com/browse/OCPBUGS-15945): Stop using utilruntime.PanicHandlers to handle reconciliation panics [#1893](https://github.com/openshift/cluster-network-operator/pull/1893)
* [HOSTEDCP-1063](https://issues.redhat.com/browse/HOSTEDCP-1063): allow webhooks in hosted clusters to reach multus-admission-controller service [#1879](https://github.com/openshift/cluster-network-operator/pull/1879)
* [OCPBUGS-15961](https://issues.redhat.com/browse/OCPBUGS-15961): FIPS related CNO changes [#1901](https://github.com/openshift/cluster-network-operator/pull/1901)
* [OCPBUGS-10765](https://issues.redhat.com/browse/OCPBUGS-10765): Revert "Revert "OCPBUGS-10765: Remove oldest ovn acl log files when f… [#1876](https://github.com/openshift/cluster-network-operator/pull/1876)
* ovn-k: Configure dns service namespace and name [#1912](https://github.com/openshift/cluster-network-operator/pull/1912)
* [OCPBUGS-15544](https://issues.redhat.com/browse/OCPBUGS-15544): Enable multi-external-gateway feature by default for managed and hosted clusters [#1887](https://github.com/openshift/cluster-network-operator/pull/1887)
* [OCPBUGS-15918](https://issues.redhat.com/browse/OCPBUGS-15918): Skip rendering 0.0.0.0/0 for cluster proxy status [#1903](https://github.com/openshift/cluster-network-operator/pull/1903)
* Change rhel7/8 to rhel8/9 [#1870](https://github.com/openshift/cluster-network-operator/pull/1870)
* Enable EgressService controller [#1848](https://github.com/openshift/cluster-network-operator/pull/1848)
* Edited multus-admission-controller deployment config to not add autom… [#1767](https://github.com/openshift/cluster-network-operator/pull/1767)
* [OCPBUGS-15794](https://issues.redhat.com/browse/OCPBUGS-15794): fix: add missing annotation for workload partitioning [#1866](https://github.com/openshift/cluster-network-operator/pull/1866)
* [OCPBUGS-15544](https://issues.redhat.com/browse/OCPBUGS-15544): Add adminpolicybasedexternalroutes rights for ovnkube-node. [#1867](https://github.com/openshift/cluster-network-operator/pull/1867)
* Revert "Remove oldest ovn acl log files when file limit exceeded" #1873 [#1873](https://github.com/openshift/cluster-network-operator/pull/1873)
* [OCPBUGS-10765](https://issues.redhat.com/browse/OCPBUGS-10765): Remove oldest ovn acl log files when file limit exceeded [#1868](https://github.com/openshift/cluster-network-operator/pull/1868)
* kube-proxy config overriding updates [#1831](https://github.com/openshift/cluster-network-operator/pull/1831)
* [OCPBUGS-15282](https://issues.redhat.com/browse/OCPBUGS-15282): Add release version annotation to whereabouts-reconciler [#1851](https://github.com/openshift/cluster-network-operator/pull/1851)
* [CCO-356](https://issues.redhat.com/browse/CCO-356): Add Infrastructures permission to CNCC cluster role [#1843](https://github.com/openshift/cluster-network-operator/pull/1843)
* Add multi-networkpolicies support for OVN [#1796](https://github.com/openshift/cluster-network-operator/pull/1796)
* Add support for AdminPolicyBasedExternalRoute CRD and controller's RBAC [#1765](https://github.com/openshift/cluster-network-operator/pull/1765)
* [OCPBUGS-15138](https://issues.redhat.com/browse/OCPBUGS-15138): Add kubernetes.io/os nodeSelector to wherebouts reconciler DS [#1841](https://github.com/openshift/cluster-network-operator/pull/1841)
* [OCPBUGS-14988](https://issues.redhat.com/browse/OCPBUGS-14988), [SDN-3901](https://issues.redhat.com/browse/SDN-3901): Rebase to kube 1.27 [#1826](https://github.com/openshift/cluster-network-operator/pull/1826)
* [CCO-358](https://issues.redhat.com/browse/CCO-358): Manifest changes necessary to support Azure Workload Identity [#1755](https://github.com/openshift/cluster-network-operator/pull/1755)
* [OCPBUGS-14714](https://issues.redhat.com/browse/OCPBUGS-14714): Do not rely on ControlPlaneTopology do determine if running in HyperShift [#1835](https://github.com/openshift/cluster-network-operator/pull/1835)
* [OCPBUGS-11882](https://issues.redhat.com/browse/OCPBUGS-11882): Added another volume to safe-to-evict-local-volume annotation [#1830](https://github.com/openshift/cluster-network-operator/pull/1830)
* [OCPBUGS-14833](https://issues.redhat.com/browse/OCPBUGS-14833): Fixes lint issues [#1834](https://github.com/openshift/cluster-network-operator/pull/1834)
* [OCPBUGS-14384](https://issues.redhat.com/browse/OCPBUGS-14384): Remove nodeSelector for architecture in whereabouts daemonset [#1828](https://github.com/openshift/cluster-network-operator/pull/1828)
* [OCPBUGS-11882](https://issues.redhat.com/browse/OCPBUGS-11882): Added safe-to-evict annotation to ovnkube-master and multus admission controller components [#1822](https://github.com/openshift/cluster-network-operator/pull/1822)
* [OCPBUGS-13922](https://issues.redhat.com/browse/OCPBUGS-13922): Revert "Do not set the operator as available before updating the network config" [#1818](https://github.com/openshift/cluster-network-operator/pull/1818)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/7df32ec5213e2abfcff18cd22a63e7f20a5cccdc...b09becb6027bb65e1cb7cfceba02ab17ec342c56)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/034744a1b05231967c4def3de1f0b917ba53fc19)

* e2e: irqbalance: improve test troubleshooting (#753) [#753](https://github.com/openshift/cluster-node-tuning-operator/pull/753)
* [OCPBUGS-16348](https://issues.redhat.com/browse/OCPBUGS-16348): OSLAT latency spikes due to tsc karg setting (#756) [#756](https://github.com/openshift/cluster-node-tuning-operator/pull/756)
* Makefile: hack: add helpers to compile testsuites (#751) [#751](https://github.com/openshift/cluster-node-tuning-operator/pull/751)
* [OCPBUGS-17219](https://issues.redhat.com/browse/OCPBUGS-17219): Render mode should not segfault w/ no matching MCP (#754) [#754](https://github.com/openshift/cluster-node-tuning-operator/pull/754)
* Release leader election on manager exit (#745) [#745](https://github.com/openshift/cluster-node-tuning-operator/pull/745)
* generate missing files (#752) [#752](https://github.com/openshift/cluster-node-tuning-operator/pull/752)
* vendor: bump OCP dependencies 08082023 (#750) [#750](https://github.com/openshift/cluster-node-tuning-operator/pull/750)
* [OCPBUGS-7980](https://issues.redhat.com/browse/OCPBUGS-7980): e2e:ht-aware: exec on the correct worker node (#729) [#729](https://github.com/openshift/cluster-node-tuning-operator/pull/729)
* bump k8s to 1.27.4 (#748) [#748](https://github.com/openshift/cluster-node-tuning-operator/pull/748)
* e2e: wait for objects deletion (#749) [#749](https://github.com/openshift/cluster-node-tuning-operator/pull/749)
* e2e:wait: return updated pod object explicitly (#744) [#744](https://github.com/openshift/cluster-node-tuning-operator/pull/744)
* [OCPBUGS-17258](https://issues.redhat.com/browse/OCPBUGS-17258): CVE-2023-3978: golang.org/x/net/html (#747) [#747](https://github.com/openshift/cluster-node-tuning-operator/pull/747)
* e2e: remove image parameter from must gather (#743) [#743](https://github.com/openshift/cluster-node-tuning-operator/pull/743)
* Update the `config.openshift.io/node` object's `cgroupMode` to "v1" (#737) [#737](https://github.com/openshift/cluster-node-tuning-operator/pull/737)
* Fix a race in e2e test rollback.go code (#739) [#739](https://github.com/openshift/cluster-node-tuning-operator/pull/739)
* e2e:irqbalance: applied condition exists (#727) [#727](https://github.com/openshift/cluster-node-tuning-operator/pull/727)
* Improve render error handling (#724) [#724](https://github.com/openshift/cluster-node-tuning-operator/pull/724)
* e2e:irqbalance: wait for tuned profile to be ready (#721) [#721](https://github.com/openshift/cluster-node-tuning-operator/pull/721)
* pao:status: do not take address of loop var (#720) [#720](https://github.com/openshift/cluster-node-tuning-operator/pull/720)
* nto:tuned: remove sched_min_granularity_ns settings (#722) [#722](https://github.com/openshift/cluster-node-tuning-operator/pull/722)
* Align TuneD with the latest shipped FDP version (#716) [#716](https://github.com/openshift/cluster-node-tuning-operator/pull/716)
* E2E: update cpu load balancing test for latest cgroup related changes (#712) [#712](https://github.com/openshift/cluster-node-tuning-operator/pull/712)
* Build gather-sysinfo (#714) [#714](https://github.com/openshift/cluster-node-tuning-operator/pull/714)
* e2e: overhaul Performance-Addon-Operator tests (#590) [#590](https://github.com/openshift/cluster-node-tuning-operator/pull/590)
* e2e: latency testing: increase the expected threshold (#706) [#706](https://github.com/openshift/cluster-node-tuning-operator/pull/706)
* e2e: perf-prof: disable truncating gomega output (#702) [#702](https://github.com/openshift/cluster-node-tuning-operator/pull/702)
* Configure OVS for dynamic cpu pinning (#559) [#559](https://github.com/openshift/cluster-node-tuning-operator/pull/559)
* [OCPVE-382](https://issues.redhat.com/browse/OCPVE-382): fix: add default state for crio config (#700) [#700](https://github.com/openshift/cluster-node-tuning-operator/pull/700)
* e2e: devmgr: fine tune kubelet restart test (#701) [#701](https://github.com/openshift/cluster-node-tuning-operator/pull/701)
* e2e: RPS: fix expected cpu set (#703) [#703](https://github.com/openshift/cluster-node-tuning-operator/pull/703)
* Switch to rslave/HostToContainer volume mount propagation (#692) [#692](https://github.com/openshift/cluster-node-tuning-operator/pull/692)
* Do not rollback settings on TuneD exit (#699) [#699](https://github.com/openshift/cluster-node-tuning-operator/pull/699)
* e2e: reboot: add kubelet restart test (#697) [#697](https://github.com/openshift/cluster-node-tuning-operator/pull/697)
* remove conditional skip (#690) [#690](https://github.com/openshift/cluster-node-tuning-operator/pull/690)
* e2e: memorymanager fix: check the hugepage size condition (#693) [#693](https://github.com/openshift/cluster-node-tuning-operator/pull/693)
* Use RHEL9 as a base (#665) [#665](https://github.com/openshift/cluster-node-tuning-operator/pull/665)
* Expose TuneD socket to host. (#651) [#651](https://github.com/openshift/cluster-node-tuning-operator/pull/651)
* E2E: Use appropriate device path for rpsmask test (#691) [#691](https://github.com/openshift/cluster-node-tuning-operator/pull/691)
* chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml` (#628) [#628](https://github.com/openshift/cluster-node-tuning-operator/pull/628)
* test: perfprof: devices: fix default test image (#672) [#672](https://github.com/openshift/cluster-node-tuning-operator/pull/672)
* e2e: verify latency tests run with LATENCY_TEST_DELAY>120 (#662) [#662](https://github.com/openshift/cluster-node-tuning-operator/pull/662)
* E2E: Add memory manager sanity test case (#573) [#573](https://github.com/openshift/cluster-node-tuning-operator/pull/573)
* modify owners (#634) [#634](https://github.com/openshift/cluster-node-tuning-operator/pull/634)
* Add minLength restriction to Tuned CR (#689) [#689](https://github.com/openshift/cluster-node-tuning-operator/pull/689)
* [OCPBUGS-14934](https://issues.redhat.com/browse/OCPBUGS-14934): consistent use of ginkgo flags in Makefile (#682) [#682](https://github.com/openshift/cluster-node-tuning-operator/pull/682)
* [OCPBUGS-14622](https://issues.redhat.com/browse/OCPBUGS-14622): Do not fail creating cgroups if they exist already (#683) [#683](https://github.com/openshift/cluster-node-tuning-operator/pull/683)
* [OCPBUGS-14193](https://issues.redhat.com/browse/OCPBUGS-14193): pao e2e: Split e2e PAO update lane to more lanes (#631) [#631](https://github.com/openshift/cluster-node-tuning-operator/pull/631)
* [OCPBUGS-4194](https://issues.redhat.com/browse/OCPBUGS-4194): rps: use default rps mask kernel API (#650) [#650](https://github.com/openshift/cluster-node-tuning-operator/pull/650)
* [OCPBUGS-14756](https://issues.redhat.com/browse/OCPBUGS-14756): [test] [e2e] Check ci lanes are executing the right test suites (#679) [#679](https://github.com/openshift/cluster-node-tuning-operator/pull/679)
* check ocp version and export CNF_TEST_IMAGE variable with appropriate cluster version (#584) [#584](https://github.com/openshift/cluster-node-tuning-operator/pull/584)
* [OCPBUGS-5529](https://issues.redhat.com/browse/OCPBUGS-5529): Fix updating numa core siblings map in GetCpuSiblings function (#564) [#564](https://github.com/openshift/cluster-node-tuning-operator/pull/564)
* Remove cpu-quota.crio.io: disable annotation (#663) [#663](https://github.com/openshift/cluster-node-tuning-operator/pull/663)
* [OCPBUGS-14137](https://issues.redhat.com/browse/OCPBUGS-14137): e2e: perfprof: add SNO device recovery test (#653) [#653](https://github.com/openshift/cluster-node-tuning-operator/pull/653)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/77f62224240759476fe2f2b60b1c386c827ad134...034744a1b05231967c4def3de1f0b917ba53fc19)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/00f7e4cc95063ba5aba1992568088d924cfbf516)

* [WRKLDS-728](https://issues.redhat.com/browse/WRKLDS-728): Capabilities: drop build/apps APIService when capabilities are not enabled [#532](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/532)
* switch image-registry cert CM [#545](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/545)
* [OCPBUGS-16554](https://issues.redhat.com/browse/OCPBUGS-16554): update dependencies to get rid of goproxy [#546](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/546)
* [AUTH-408](https://issues.redhat.com/browse/AUTH-408): bindata: set required-scc [#544](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/544)
* Plumb featuregates to the openshift-apiserver [#542](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/542)
* allow etcd healthcheck timeout closer to probe timeouts to avoid failing on slower etcd [#540](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/540)
* Add AES-GCM encryption tests [#539](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/539)
* [OCPBUGS-14010](https://issues.redhat.com/browse/OCPBUGS-14010): increase timeout for probes [#536](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/536)
* [OCPBUGS-2765](https://issues.redhat.com/browse/OCPBUGS-2765): Library go bump [#538](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/538)
* [OCPBUGS-12813](https://issues.redhat.com/browse/OCPBUGS-12813): Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART [#534](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/534)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/eaaa4e6ce3e9ff1d2c4594406741ac10e98cb219...00f7e4cc95063ba5aba1992568088d924cfbf516)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/d6eca58c0b87ef2e85a0c262492bff24aa5676b0)

* route-controller-manager deployment updates [#295](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/295)
* [OCPBUGS-16072](https://issues.redhat.com/browse/OCPBUGS-16072): Updating Kubernetes and other associated dependencies [#296](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/296)
* [OCPBUGS-13926](https://issues.redhat.com/browse/OCPBUGS-13926): change the operator log level to default normal in the deployment [#289](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/289)
* [BUILD-582](https://issues.redhat.com/browse/BUILD-582), [OCPBUGS-14638](https://issues.redhat.com/browse/OCPBUGS-14638): bump(k8s): 1.27.1 [#294](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/294)
* [OCPBUGS-13926](https://issues.redhat.com/browse/OCPBUGS-13926): add loglevel controller for  OCM-o [#292](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/292)
* Revert "13895: [WRKLDS-730] route-controller-manager deployment updates" [#293](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/293)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/05d6f18acbe72e3850eb783091dfa5cded9ebf3a...d6eca58c0b87ef2e85a0c262492bff24aa5676b0)


### [cluster-platform-operators-manager](https://github.com/openshift/platform-operators/tree/351aa1ed1e6a7c53d6aa016f6231124e6128f554)

* Merge rukpak updates into main + Required Fixes [#88](https://github.com/openshift/platform-operators/pull/88)
* Add ncdc to OWNERS [#89](https://github.com/openshift/platform-operators/pull/89)
* Temporarily remove from payload [#90](https://github.com/openshift/platform-operators/pull/90)
* Revert "Merge rukpak updates into main" [#87](https://github.com/openshift/platform-operators/pull/87)
* Merge rukpak updates into main [#86](https://github.com/openshift/platform-operators/pull/86)
* [Full changelog](https://github.com/openshift/platform-operators/compare/bc348cef1a5aa4d88fe705766af6c5f62c177c5e...351aa1ed1e6a7c53d6aa016f6231124e6128f554)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/e8565e6e3fdfa7ffd56c29539775847e4f6ab812)

* ps syncer: add a controller for run-level 0 namespaces [#128](https://github.com/openshift/cluster-policy-controller/pull/128)
* Adjust logs per generic troubleshooting [#126](https://github.com/openshift/cluster-policy-controller/pull/126)
* [OCPBUGS-15568](https://issues.redhat.com/browse/OCPBUGS-15568): Add timeout into cache sync wait to prevent hanging forever [#124](https://github.com/openshift/cluster-policy-controller/pull/124)
* [OCPBUGS-15568](https://issues.redhat.com/browse/OCPBUGS-15568): Remove debugs logs in workqueuebucket [#125](https://github.com/openshift/cluster-policy-controller/pull/125)
* Add more logs for queue operations [#122](https://github.com/openshift/cluster-policy-controller/pull/122)
* [OCPBUGS-15568](https://issues.redhat.com/browse/OCPBUGS-15568): Handle error if caches are not synced instead silently exit [#121](https://github.com/openshift/cluster-policy-controller/pull/121)
* Add ingvagabund to owners [#120](https://github.com/openshift/cluster-policy-controller/pull/120)
* Add logs for quota namespace syncing with verbosity level 2 [#119](https://github.com/openshift/cluster-policy-controller/pull/119)
* [OCPBUGS-13649](https://issues.redhat.com/browse/OCPBUGS-13649): fix ClusterResourceQuotas to work for all api resources including custom resources [#115](https://github.com/openshift/cluster-policy-controller/pull/115)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/f70fc1e84b784b047695c5f139e5f2b38aaf0214...e8565e6e3fdfa7ffd56c29539775847e4f6ab812)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/5e0d408e382eea606527ac32a750e0117a3214e1)

* manifests: Drop explicit runlevel from CRD manifest [#515](https://github.com/openshift/cluster-samples-operator/pull/515)
* [OCPBUGS-16435](https://issues.redhat.com/browse/OCPBUGS-16435): Bump k8 to v0.27.2 for ocp 4.14 [#514](https://github.com/openshift/cluster-samples-operator/pull/514)
* [OCPBUGS-16403](https://issues.redhat.com/browse/OCPBUGS-16403): Update Cluster Sample Operator dependencies and libraries for OCP 4.14 [#511](https://github.com/openshift/cluster-samples-operator/pull/511)
* reconcile status when clusteroperator changes [#510](https://github.com/openshift/cluster-samples-operator/pull/510)
* [OCPBUGS-15754](https://issues.redhat.com/browse/OCPBUGS-15754): Update Jenkins and Jenkins Agent Base image versions [#504](https://github.com/openshift/cluster-samples-operator/pull/504)
* [OCPBUGS-14491](https://issues.redhat.com/browse/OCPBUGS-14491): Updating to use Jenkins 4.13 images [#502](https://github.com/openshift/cluster-samples-operator/pull/502)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/55c22773dd0c96b142063d8dd2972eb8acd80c07...5e0d408e382eea606527ac32a750e0117a3214e1)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/18bb6aa272ec729f6c7ce94a4dfff12d5f211f8e)

* [STOR-1274](https://issues.redhat.com/browse/STOR-1274): use granular permissons for Azure credential requests [#388](https://github.com/openshift/cluster-storage-operator/pull/388)
* [STOR-1432](https://issues.redhat.com/browse/STOR-1432): hypershift: pass through control plane images to AWS EBS CSI driver operator [#393](https://github.com/openshift/cluster-storage-operator/pull/393)
* [STOR-1432](https://issues.redhat.com/browse/STOR-1432): hypershift: add independent refs for AWS EBS driver controller images [#392](https://github.com/openshift/cluster-storage-operator/pull/392)
* [OCPBUGS-17356](https://issues.redhat.com/browse/OCPBUGS-17356): Fix PodStartupStorageOperationsFailing alert [#391](https://github.com/openshift/cluster-storage-operator/pull/391)
* Remove "get" verb from "events" resource of RBAC for provisioner sidecar [#390](https://github.com/openshift/cluster-storage-operator/pull/390)
* [OCPBUGS-11359](https://issues.redhat.com/browse/OCPBUGS-11359): Remove unused versions from status [#374](https://github.com/openshift/cluster-storage-operator/pull/374)
* [OCPBUGS-16783](https://issues.redhat.com/browse/OCPBUGS-16783): Chore: Update OWNERS [#389](https://github.com/openshift/cluster-storage-operator/pull/389)
* [OCPBUGS-16265](https://issues.redhat.com/browse/OCPBUGS-16265): Publish csi sidecar clusterroles earlier [#386](https://github.com/openshift/cluster-storage-operator/pull/386)
* [OCPBUGS-15940](https://issues.redhat.com/browse/OCPBUGS-15940): Revert revert of hypershift cleanup [#385](https://github.com/openshift/cluster-storage-operator/pull/385)
* Revert "STOR-1369: Start hypershift refactor" #384 [#384](https://github.com/openshift/cluster-storage-operator/pull/384)
* [STOR-1369](https://issues.redhat.com/browse/STOR-1369): Start hypershift refactor [#381](https://github.com/openshift/cluster-storage-operator/pull/381)
* [OCPBUGS-13696](https://issues.redhat.com/browse/OCPBUGS-13696): Warn about CBT enabled VMs via vsphere-problem-detector [#371](https://github.com/openshift/cluster-storage-operator/pull/371)
* [OCPBUGS-14053](https://issues.redhat.com/browse/OCPBUGS-14053): decrease severity for MultipleDefaultStorageClasses alert [#382](https://github.com/openshift/cluster-storage-operator/pull/382)
* [STOR-1065](https://issues.redhat.com/browse/STOR-1065): Publish ClusterRoles for csi driver sidecars [#379](https://github.com/openshift/cluster-storage-operator/pull/379)
* [STOR-1167](https://issues.redhat.com/browse/STOR-1167): Add permissions needed by fast snapshots to AWS CSI driver [#369](https://github.com/openshift/cluster-storage-operator/pull/369)
* [CCO-319](https://issues.redhat.com/browse/CCO-319): Add serviceAccountNames to azure-disk and azure-file credentials [#364](https://github.com/openshift/cluster-storage-operator/pull/364)
* [OCPBUGS-13187](https://issues.redhat.com/browse/OCPBUGS-13187): Make vsphere-problem-detector alerts configurable [#380](https://github.com/openshift/cluster-storage-operator/pull/380)
* [CCO-324](https://issues.redhat.com/browse/CCO-324), [CCO-325](https://issues.redhat.com/browse/CCO-325): pass version to azure operators [#372](https://github.com/openshift/cluster-storage-operator/pull/372)
* [OCPBUGS-13914](https://issues.redhat.com/browse/OCPBUGS-13914): allow removal of vsphereStorageDriver field in 4.14 [#378](https://github.com/openshift/cluster-storage-operator/pull/378)
* [STOR-1334](https://issues.redhat.com/browse/STOR-1334): update storage operator to read featuregates from API [#376](https://github.com/openshift/cluster-storage-operator/pull/376)
* Revert "update storage operator to read featuregates from API on standalone OCP" [#375](https://github.com/openshift/cluster-storage-operator/pull/375)
* [STOR-1334](https://issues.redhat.com/browse/STOR-1334): update storage operator to read featuregates from API on standalone OCP [#368](https://github.com/openshift/cluster-storage-operator/pull/368)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/fae744ebaf0f1467f23bb878a4b0cf0efef17571...18bb6aa272ec729f6c7ce94a4dfff12d5f211f8e)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/e9bfbe44024e633787b56c229a342db76721f28b)

* [CNF-9385](https://issues.redhat.com/browse/CNF-9385): add ImageRegistry capability [#950](https://github.com/openshift/cluster-version-operator/pull/950)
* [OCPBUGS-17418](https://issues.redhat.com/browse/OCPBUGS-17418): Handle cache.DeletedFinalStateUnknown [#952](https://github.com/openshift/cluster-version-operator/pull/952)
* docs/user/tasks-*by-number-and-component.svg: Update to 4.13 [#949](https://github.com/openshift/cluster-version-operator/pull/949)
* Dockerfile: bump to 1.19 and use public UBI pullspec [#944](https://github.com/openshift/cluster-version-operator/pull/944)
* pkg/payload: De-noise 'excluding ...' logs [#945](https://github.com/openshift/cluster-version-operator/pull/945)
* bump api version to add new capability [#941](https://github.com/openshift/cluster-version-operator/pull/941)
* pkg/cvo/metrics: Doc from_version semantics for cluster_version{type="completed"} [#929](https://github.com/openshift/cluster-version-operator/pull/929)
* Code cleanups for golangci-lint failures [#942](https://github.com/openshift/cluster-version-operator/pull/942)
* [OTA-559](https://issues.redhat.com/browse/OTA-559): Migrate to (*Manifest).Include(..., overrides) [#934](https://github.com/openshift/cluster-version-operator/pull/934)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/f74d114b1b2843f045fdcdc63ca63fa4cf07da75...e9bfbe44024e633787b56c229a342db76721f28b)


### [console](https://github.com/openshift/console/tree/614383873a367e0af48d1f9969a1ff14b0b9aa3e)

* [OCPBUGS-17496](https://issues.redhat.com/browse/OCPBUGS-17496): Bridge NAD should set "preserveDefaultVlan": false [#13076](https://github.com/openshift/console/pull/13076)
* [CONSOLE-3126](https://issues.redhat.com/browse/CONSOLE-3126): Remove paused state since its no longer relevant due to 4.14 changes … [#13072](https://github.com/openshift/console/pull/13072)
* [OCPBUGS-17515](https://issues.redhat.com/browse/OCPBUGS-17515): Console UI is broken due to patternfly/react-core version change [#13086](https://github.com/openshift/console/pull/13086)
* [OCPBUGS-17504](https://issues.redhat.com/browse/OCPBUGS-17504): Dev console: Remove checkboxes on Alert Details page Silenced By list [#13085](https://github.com/openshift/console/pull/13085)
* [OCPBUGS-16717](https://issues.redhat.com/browse/OCPBUGS-16717): Fix name validation regex [#13075](https://github.com/openshift/console/pull/13075)
* [OCPBUGS-17410](https://issues.redhat.com/browse/OCPBUGS-17410): Fix that "Delete application" doesn't work in topology when Pipelines operator is not installed [#13074](https://github.com/openshift/console/pull/13074)
* [OCPBUGS-14138](https://issues.redhat.com/browse/OCPBUGS-14138): Console fix [#13078](https://github.com/openshift/console/pull/13078)
* [OCPBUGS-15458](https://issues.redhat.com/browse/OCPBUGS-15458): Links for console-dynamic-plugin-sdk markdown docs are not working [#13062](https://github.com/openshift/console/pull/13062)
* [OCPBUGS-129](https://issues.redhat.com/browse/OCPBUGS-129): bump @patternfly/react-core to v4.276.11 to pick up Sel… [#13052](https://github.com/openshift/console/pull/13052)
* [OCPBUGS-17234](https://issues.redhat.com/browse/OCPBUGS-17234): change Command Line Tools text [#13068](https://github.com/openshift/console/pull/13068)
* [OCPBUGS-17347](https://issues.redhat.com/browse/OCPBUGS-17347): Fix "View alerting rule" action URL [#13058](https://github.com/openshift/console/pull/13058)
* [OCPBUGS-15419](https://issues.redhat.com/browse/OCPBUGS-15419): Title on Overview page has changed to "Cluster · Red Hat OpenShift" [#12951](https://github.com/openshift/console/pull/12951)
* [OCPBUGS-13387](https://issues.redhat.com/browse/OCPBUGS-13387), [OCPBUGS-16693](https://issues.redhat.com/browse/OCPBUGS-16693): Import page create button is disabled due to PAC validation [#13046](https://github.com/openshift/console/pull/13046)
* [CONSOLE-3683](https://issues.redhat.com/browse/CONSOLE-3683): Convert FireMan component in list-page.tsx from class c… [#13024](https://github.com/openshift/console/pull/13024)
* [OU-231](https://issues.redhat.com/browse/OU-231): Add jgbernalp and zhuje to OWNERS for monitoring [#13069](https://github.com/openshift/console/pull/13069)
* [OCPBUGS-17196](https://issues.redhat.com/browse/OCPBUGS-17196): Fix nad ovn type - annotation and netAttachName [#13053](https://github.com/openshift/console/pull/13053)
* [OCPBUGS-16844](https://issues.redhat.com/browse/OCPBUGS-16844): external link icon in `resource added` toast notification not linked [#13057](https://github.com/openshift/console/pull/13057)
* [OCPBUGS-15310](https://issues.redhat.com/browse/OCPBUGS-15310): Helm Chart installation modal "Documentation" field is always N/A [#13032](https://github.com/openshift/console/pull/13032)
* [CONSOLE-3686](https://issues.redhat.com/browse/CONSOLE-3686): Convert SecretFormWrapper component in create-secret.ts… [#13017](https://github.com/openshift/console/pull/13017)
* [OCPBUGS-15008](https://issues.redhat.com/browse/OCPBUGS-15008): update the KnativeServing API version to v1beta1 for global-config extension [#13059](https://github.com/openshift/console/pull/13059)
* [CONSOLE-3679](https://issues.redhat.com/browse/CONSOLE-3679): Convert instantiate-template.tsx from class component t… [#12947](https://github.com/openshift/console/pull/12947)
* [CONSOLE-3568](https://issues.redhat.com/browse/CONSOLE-3568): expose DeleteModal via useDeleteModal hook in @console/shared [#12974](https://github.com/openshift/console/pull/12974)
* [CONSOLE-3677](https://issues.redhat.com/browse/CONSOLE-3677): Convert edit-yaml.jsx from class component to functiona… [#12973](https://github.com/openshift/console/pull/12973)
* [CONSOLE-3678](https://issues.redhat.com/browse/CONSOLE-3678): Convert EventStream component in events.jsx from class … [#12989](https://github.com/openshift/console/pull/12989)
* [OCPBUGS-16093](https://issues.redhat.com/browse/OCPBUGS-16093), [OCPBUGS-16270](https://issues.redhat.com/browse/OCPBUGS-16270), [OCPBUGS-9409](https://issues.redhat.com/browse/OCPBUGS-9409): Creation of GH webhook and attaching it to repo while importing from git using PAC [#13021](https://github.com/openshift/console/pull/13021)
* [CONSOLE-3682](https://issues.redhat.com/browse/CONSOLE-3682): Convert components in cluster-settings folder from clas… [#13011](https://github.com/openshift/console/pull/13011)
* [CONSOLE-3676](https://issues.redhat.com/browse/CONSOLE-3676): Convert app.jsx from class component to functional comp… [#12952](https://github.com/openshift/console/pull/12952)
* [OU-175](https://issues.redhat.com/browse/OU-175): Monitoring: Add "Silences" tab to Developer console [#12900](https://github.com/openshift/console/pull/12900)
* [OCPBUGS-10884](https://issues.redhat.com/browse/OCPBUGS-10884): propagate mpath device type to request data [#13022](https://github.com/openshift/console/pull/13022)
* [OCPBUGS-16656](https://issues.redhat.com/browse/OCPBUGS-16656): Devfile import fails on master branch [#13050](https://github.com/openshift/console/pull/13050)
* [OCPBUGS-9355](https://issues.redhat.com/browse/OCPBUGS-9355): Fix translation bug [#13049](https://github.com/openshift/console/pull/13049)
* [OCPBUGS-3495](https://issues.redhat.com/browse/OCPBUGS-3495): Add cacheBuster query string when requesting plugin entry scripts [#13035](https://github.com/openshift/console/pull/13035)
* [OCPBUGS-16599](https://issues.redhat.com/browse/OCPBUGS-16599): allow creation of v1beta1 APIversion Pipeline in Pipeline builder YAML view [#13034](https://github.com/openshift/console/pull/13034)
* [OCPBUGS-9285](https://issues.redhat.com/browse/OCPBUGS-9285): Add note to the console.page/route extension regarding its usage [#13044](https://github.com/openshift/console/pull/13044)
* [OCPBUGS-14341](https://issues.redhat.com/browse/OCPBUGS-14341): Check operands deletionTimestamp to disable kebab action menu [#13042](https://github.com/openshift/console/pull/13042)
* [ODC-7336](https://issues.redhat.com/browse/ODC-7336): automation for customization-of-catalog-add-page-form feature file [#12934](https://github.com/openshift/console/pull/12934)
* [OCPBUGS-11285](https://issues.redhat.com/browse/OCPBUGS-11285): Dynamic plugin translation support for plurals broken [#13028](https://github.com/openshift/console/pull/13028)
* chore(i18n): update translations: Completed Master Branch - Sprint 238 [#12999](https://github.com/openshift/console/pull/12999)
* [OCPBUGS-16433](https://issues.redhat.com/browse/OCPBUGS-16433): Fixes location update issues [#13023](https://github.com/openshift/console/pull/13023)
* [CONSOLE-3591](https://issues.redhat.com/browse/CONSOLE-3591): Remove directory listing for /static/* [#13001](https://github.com/openshift/console/pull/13001)
* [CONSOLE-3694](https://issues.redhat.com/browse/CONSOLE-3694): Convert tile-view-page.jsx from class component to func… [#12942](https://github.com/openshift/console/pull/12942)
* [ODC-7334](https://issues.redhat.com/browse/ODC-7334): Show ConsoleSamples resources in the samples catalog [#12970](https://github.com/openshift/console/pull/12970)
* [CONSOLE-3666](https://issues.redhat.com/browse/CONSOLE-3666): Validate shared modules of dynamic plugins [#12881](https://github.com/openshift/console/pull/12881)
* [OCPBUGS-11971](https://issues.redhat.com/browse/OCPBUGS-11971): When removing the project owner from the project in GUI, instead of that user, the group (the default group added as project admin through the project template) will be removed. [#13016](https://github.com/openshift/console/pull/13016)
* [OCPBUGS-13808](https://issues.redhat.com/browse/OCPBUGS-13808): Console SDK components should be using GroupVersionKin… [#13029](https://github.com/openshift/console/pull/13029)
* [OCPBUGS-14837](https://issues.redhat.com/browse/OCPBUGS-14837), [OCPBUGS-16025](https://issues.redhat.com/browse/OCPBUGS-16025): Hide the Duplicate Pipelines Card in the DevConsole Add Page [#13007](https://github.com/openshift/console/pull/13007)
* [OCPBUGS-8274](https://issues.redhat.com/browse/OCPBUGS-8274): Fix copy login command regression [#13003](https://github.com/openshift/console/pull/13003)
* [CONSOLE-3687](https://issues.redhat.com/browse/CONSOLE-3687): Convert components in utils folder from class component… [#12925](https://github.com/openshift/console/pull/12925)
* [OCPBUGS-11219](https://issues.redhat.com/browse/OCPBUGS-11219): Fix incorrectly nested css rule for print styles [#12991](https://github.com/openshift/console/pull/12991)
* [OCPBUGS-11620](https://issues.redhat.com/browse/OCPBUGS-11620): Fix stop PLR option [#13020](https://github.com/openshift/console/pull/13020)
* [CONSOLE-3706](https://issues.redhat.com/browse/CONSOLE-3706): Remove custom history.pushPath alias function [#12873](https://github.com/openshift/console/pull/12873)
* [CONSOLE-3431](https://issues.redhat.com/browse/CONSOLE-3431): Allow building dynamic plugins without any exposed modules [#12530](https://github.com/openshift/console/pull/12530)
* [HELM-502](https://issues.redhat.com/browse/HELM-502): Bump Helm to 3.12.1 [#13014](https://github.com/openshift/console/pull/13014)
* [OCPBUGS-15359](https://issues.redhat.com/browse/OCPBUGS-15359): Enable namespace dropdown selection when all namespace installation mode selected by default and... [#12975](https://github.com/openshift/console/pull/12975)
* [OCPBUGS-16174](https://issues.redhat.com/browse/OCPBUGS-16174): Update the VSCode extension link and descriptions on Create Serverless function form [#13015](https://github.com/openshift/console/pull/13015)
* [OCPBUGS-13142](https://issues.redhat.com/browse/OCPBUGS-13142): InstallPlan info cannot shown on Subscription tab for … [#13012](https://github.com/openshift/console/pull/13012)
* [OCPBUGS-14907](https://issues.redhat.com/browse/OCPBUGS-14907): Fix operator backed catalog page when copied CSVs disabled [#12932](https://github.com/openshift/console/pull/12932)
* [CONSOLE-3684](https://issues.redhat.com/browse/CONSOLE-3684): Convert components in modals folder from class componen… [#12941](https://github.com/openshift/console/pull/12941)
* [OCPBUGS-16148](https://issues.redhat.com/browse/OCPBUGS-16148): disable Save if Use existing claim is active and no … [#13010](https://github.com/openshift/console/pull/13010)
* [OCPBUGS-16150](https://issues.redhat.com/browse/OCPBUGS-16150): Fix Start last run action in Topology sidepanel [#13009](https://github.com/openshift/console/pull/13009)
* [OCPBUGS-15458](https://issues.redhat.com/browse/OCPBUGS-15458): Links for console-dynamic-plugin-sdk markdown docs are not working [#12993](https://github.com/openshift/console/pull/12993)
* [OU-218](https://issues.redhat.com/browse/OU-218): Monitoring: Use `useResolvedExtensions` instead of `useExtensions` [#12987](https://github.com/openshift/console/pull/12987)
* [CONSOLE-3680](https://issues.redhat.com/browse/CONSOLE-3680): Convert row-filter.jsx from class component to function… [#12957](https://github.com/openshift/console/pull/12957)
* [OCPBUGS-13808](https://issues.redhat.com/browse/OCPBUGS-13808): Console SDK components should be using GroupVersionKin… [#12946](https://github.com/openshift/console/pull/12946)
* [CONSOLE-3685](https://issues.redhat.com/browse/CONSOLE-3685): Convert components in RBAC folder from class component … [#12933](https://github.com/openshift/console/pull/12933)
* [CONSOLE-3611](https://issues.redhat.com/browse/CONSOLE-3611): User can configure the install of Operators that authenticate using STS [#12779](https://github.com/openshift/console/pull/12779)
* [OCPBUGS-9991](https://issues.redhat.com/browse/OCPBUGS-9991): Most of contents are lack of i18n on "Command Line Tools" page [#12995](https://github.com/openshift/console/pull/12995)
* [OCPBUGS-15021](https://issues.redhat.com/browse/OCPBUGS-15021): Use FLAGS.CAN_GET_NS to decide whether to show Route details > Metrics tab [#12944](https://github.com/openshift/console/pull/12944)
* [ODC-7341](https://issues.redhat.com/browse/ODC-7341): Show Build output in Shipwright Build list and details page [#12972](https://github.com/openshift/console/pull/12972)
* [OCPBUGS-8005](https://issues.redhat.com/browse/OCPBUGS-8005): Fix broken upstream doc link for cluster channel upgrades [#12998](https://github.com/openshift/console/pull/12998)
* [OCPBUGS-10884](https://issues.redhat.com/browse/OCPBUGS-10884): add multipath device type to LocalVolumeSet [#12723](https://github.com/openshift/console/pull/12723)
* [OCPBUGS-14434](https://issues.redhat.com/browse/OCPBUGS-14434): Running `yarn dev` results in the build running on a loop [#12990](https://github.com/openshift/console/pull/12990)
* [OCPBUGS-10844](https://issues.redhat.com/browse/OCPBUGS-10844): fix bug where binary secret values are corrupted on edit and add test coverage [#12986](https://github.com/openshift/console/pull/12986)
* [OCPBUGS-15011](https://issues.redhat.com/browse/OCPBUGS-15011): Upload JAR file does not work if the Cluster Samples Operator is disabled [#12917](https://github.com/openshift/console/pull/12917)
* [OCPBUGS-12891](https://issues.redhat.com/browse/OCPBUGS-12891): check for valid OLM selector in K8sResourceWidget to p… [#12887](https://github.com/openshift/console/pull/12887)
* [OCPBUGS-15896](https://issues.redhat.com/browse/OCPBUGS-15896): STS label not valid according to kube [#12980](https://github.com/openshift/console/pull/12980)
* [RHSTOR-4533](https://issues.redhat.com/browse/RHSTOR-4533): added a mutator property for the storage class extension [#12886](https://github.com/openshift/console/pull/12886)
* [OCPBUGS-7416](https://issues.redhat.com/browse/OCPBUGS-7416): get Kamelets from the camel-k-operator namespace as well [#12710](https://github.com/openshift/console/pull/12710)
* [OCPBUGS-14548](https://issues.redhat.com/browse/OCPBUGS-14548): only show pipelines doc link for downstream [#12979](https://github.com/openshift/console/pull/12979)
* [CONSOLE-3565](https://issues.redhat.com/browse/CONSOLE-3565): Expose annotations modal in dynamic plugins sdk [#12843](https://github.com/openshift/console/pull/12843)
* [CONSOLE-3610](https://issues.redhat.com/browse/CONSOLE-3610): User can filter on STS enabled clusters for Operators that claim support for STS [#12778](https://github.com/openshift/console/pull/12778)
* [OCPBUGS-15773](https://issues.redhat.com/browse/OCPBUGS-15773): The upgrade Helm Release tab in OpenShift GUI Developer console is not refreshing with updated values. [#12966](https://github.com/openshift/console/pull/12966)
* [ODC-7319](https://issues.redhat.com/browse/ODC-7319): correcting - missing package tag across gherkin files [#12847](https://github.com/openshift/console/pull/12847)
* [ODC-7313](https://issues.redhat.com/browse/ODC-7313): Run CI tests with non-admin user [#12814](https://github.com/openshift/console/pull/12814)
* [OCPBUGS-15427](https://issues.redhat.com/browse/OCPBUGS-15427): Remove access review check for PipelineResource from Pipeline section [#12964](https://github.com/openshift/console/pull/12964)
* [ODC-7325](https://issues.redhat.com/browse/ODC-7325): Improve BuildConfig and Shipwright Build list pages [#12910](https://github.com/openshift/console/pull/12910)
* [ODC-7340](https://issues.redhat.com/browse/ODC-7340): Remove Shipwright Tech Preview badges [#12960](https://github.com/openshift/console/pull/12960)
* [OCPBUGS-14548](https://issues.redhat.com/browse/OCPBUGS-14548): update pipelines doc links [#12890](https://github.com/openshift/console/pull/12890)
* [OCPBUGS-15572](https://issues.redhat.com/browse/OCPBUGS-15572): Fix bug where the install operator update approval radio button does … [#12959](https://github.com/openshift/console/pull/12959)
* [OCPBUGS-14959](https://issues.redhat.com/browse/OCPBUGS-14959): Error for DuplicateClusterRoleBinding and Edit ClusterRoleBinding subject in RHOCP4 Web Console [#12939](https://github.com/openshift/console/pull/12939)
* [OCPBUGS-14665](https://issues.redhat.com/browse/OCPBUGS-14665), [OCPBUGS-14874](https://issues.redhat.com/browse/OCPBUGS-14874), [OCPBUGS-14875](https://issues.redhat.com/browse/OCPBUGS-14875): Helm Chart installation form hangs on create if JSON-schema is using 2019-09 or 2020-20 standard revisions [#12929](https://github.com/openshift/console/pull/12929)
* [OU-198](https://issues.redhat.com/browse/OU-198): Revert "Disable broken monitoring-tests" [#12943](https://github.com/openshift/console/pull/12943)
* [ODC-7337](https://issues.redhat.com/browse/ODC-7337): Skip wait for authentication operator to start progressing when the secret already exists [#12884](https://github.com/openshift/console/pull/12884)
* [OCPBUGS-497](https://issues.redhat.com/browse/OCPBUGS-497): frontend: fix kube-apiserver availability query [#12928](https://github.com/openshift/console/pull/12928)
* [OCPBUGS-15060](https://issues.redhat.com/browse/OCPBUGS-15060): "Duplicate RoleBinding" leads to "Unsupported value" error [#12921](https://github.com/openshift/console/pull/12921)
* [OCPBUGS-7794](https://issues.redhat.com/browse/OCPBUGS-7794): Image pull secret creation form doesn't re-enable Create button once it is disabled [#12609](https://github.com/openshift/console/pull/12609)
* [CONSOLE-3616](https://issues.redhat.com/browse/CONSOLE-3616): Revert multicluster server flags [#12782](https://github.com/openshift/console/pull/12782)
* [OCPBUGS-15299](https://issues.redhat.com/browse/OCPBUGS-15299): Create Serverless Function Form is Broken [#12926](https://github.com/openshift/console/pull/12926)
* [OCPBUGS-13120](https://issues.redhat.com/browse/OCPBUGS-13120): Serverless functions UI warning is misleading [#12923](https://github.com/openshift/console/pull/12923)
* [ODC-7329](https://issues.redhat.com/browse/ODC-7329): Subsequent PipelineRuns take initial PipelineRun name into account [#12913](https://github.com/openshift/console/pull/12913)
* [CONSOLE-3612](https://issues.redhat.com/browse/CONSOLE-3612): User is warned when cluster is in STS mode [#12777](https://github.com/openshift/console/pull/12777)
* [ODC-7322](https://issues.redhat.com/browse/ODC-7322): Implement a proxy to hit the Artifacthub.io API end point [#12905](https://github.com/openshift/console/pull/12905)
* [MGMT-15023](https://issues.redhat.com/browse/MGMT-15023): Add help text to vCenter cluster field [#12912](https://github.com/openshift/console/pull/12912)
* [OCPBUGS-11464](https://issues.redhat.com/browse/OCPBUGS-11464): Availability requirement update is initially disabled … [#12918](https://github.com/openshift/console/pull/12918)
* [OCPBUGS-15135](https://issues.redhat.com/browse/OCPBUGS-15135): Make knative routes copyable similar to openshift routes [#12908](https://github.com/openshift/console/pull/12908)
* [OCPBUGS-14909](https://issues.redhat.com/browse/OCPBUGS-14909): Disabling web-terminal tests in CI [#12892](https://github.com/openshift/console/pull/12892)
* [OCPBUGS-14015](https://issues.redhat.com/browse/OCPBUGS-14015): Create helm release page doesn't show a YAML editor when schema isn't available (httpd-imagestreams chart) [#12914](https://github.com/openshift/console/pull/12914)
* [CONSOLE-3372](https://issues.redhat.com/browse/CONSOLE-3372), [OCPBUGS-13648](https://issues.redhat.com/browse/OCPBUGS-13648), [OCPBUGS-13833](https://issues.redhat.com/browse/OCPBUGS-13833): Console supports installing non-latest Operator versions [#12743](https://github.com/openshift/console/pull/12743)
* [OCPBUGS-7036](https://issues.redhat.com/browse/OCPBUGS-7036): Add Git Repository (PAC) doesn't setup GitLab and Bitbucket configuration correct [#12593](https://github.com/openshift/console/pull/12593)
* chore(i18n): update translations: Completed-7034-OCP 4.13/Master Branch UI Localization- Sprint 231 [#12695](https://github.com/openshift/console/pull/12695)
* [OCPBUGS-14354](https://issues.redhat.com/browse/OCPBUGS-14354): e2e: Enable Pipeline tests [#12911](https://github.com/openshift/console/pull/12911)
* [OCPBUGS-14915](https://issues.redhat.com/browse/OCPBUGS-14915): Remove entries from the menu that are now added by `monitoring-plugin` [#12893](https://github.com/openshift/console/pull/12893)
* [ODC-7316](https://issues.redhat.com/browse/ODC-7316): Add discoverability of the IDE extensions from Create Serverless form [#12846](https://github.com/openshift/console/pull/12846)
* [OCPBUGS-14419](https://issues.redhat.com/browse/OCPBUGS-14419): Remove tech preview badge from Pipeline repository pages [#12888](https://github.com/openshift/console/pull/12888)
* [ODC-7326](https://issues.redhat.com/browse/ODC-7326): Align Build, BuildRun and PipelineRun details page [#12898](https://github.com/openshift/console/pull/12898)
* [OCPBUGS-14836](https://issues.redhat.com/browse/OCPBUGS-14836): Updated BuildConfig and Shipwright Build lists shows runs from another namespace [#12896](https://github.com/openshift/console/pull/12896)
* [OCPBUGS-14890](https://issues.redhat.com/browse/OCPBUGS-14890): Missing 'View details' link for several servicemonitors.spec.endpoints fields in YAML sidebar [#12895](https://github.com/openshift/console/pull/12895)
* [OCPBUGS-14002](https://issues.redhat.com/browse/OCPBUGS-14002): Correct the alignment of yaml toolbar links [#12894](https://github.com/openshift/console/pull/12894)
* [OCPBUGS-14660](https://issues.redhat.com/browse/OCPBUGS-14660): Helm Repository "Edit" button results in 404 [#12891](https://github.com/openshift/console/pull/12891)
* [OCPBUGS-14716](https://issues.redhat.com/browse/OCPBUGS-14716): add ROSA branding option [#12889](https://github.com/openshift/console/pull/12889)
* [OCPBUGS-13208](https://issues.redhat.com/browse/OCPBUGS-13208): Fix PVC metrics query [#12867](https://github.com/openshift/console/pull/12867)
* [OCPBUGS-12897](https://issues.redhat.com/browse/OCPBUGS-12897): Knative Route Details Page should show the URL of the route as it is shown in the Openshift Routes Details page [#12853](https://github.com/openshift/console/pull/12853)
* [OCPBUGS-8682](https://issues.redhat.com/browse/OCPBUGS-8682): Fix empty create dropdown on provided APIs page [#12819](https://github.com/openshift/console/pull/12819)
* [OCPBUGS-9214](https://issues.redhat.com/browse/OCPBUGS-9214): Create button is disabled in Git Import form when git repo url has hyphens in owner part of the url [#12652](https://github.com/openshift/console/pull/12652)
* [OCPBUGS-4496](https://issues.redhat.com/browse/OCPBUGS-4496): Fix Samples/Snippets tab [#12642](https://github.com/openshift/console/pull/12642)
* [OCPBUGS-7361](https://issues.redhat.com/browse/OCPBUGS-7361): support JSON schema 06 in the helm install/upgrade form [#12644](https://github.com/openshift/console/pull/12644)
* [OU-138](https://issues.redhat.com/browse/OU-138): Move QueryBrowser component to dynamic SDK [#12841](https://github.com/openshift/console/pull/12841)
* [OCPBUGS-9063](https://issues.redhat.com/browse/OCPBUGS-9063): Remove frontend validation from legacy operand form gen… [#12788](https://github.com/openshift/console/pull/12788)
* [ODC-7275](https://issues.redhat.com/browse/ODC-7275): Implement invoke serverless functions [#12755](https://github.com/openshift/console/pull/12755)
* [OCPBUGS-14964](https://issues.redhat.com/browse/OCPBUGS-14964): Disable broken monitoring-tests [#12902](https://github.com/openshift/console/pull/12902)
* [OCPBUGS-11219](https://issues.redhat.com/browse/OCPBUGS-11219): Include print styles to allow printout of full screen and ... [#12849](https://github.com/openshift/console/pull/12849)
* [ODC-7306](https://issues.redhat.com/browse/ODC-7306): Show the latest Build status in the Build list view [#12809](https://github.com/openshift/console/pull/12809)
* [ODC-7277](https://issues.redhat.com/browse/ODC-7277): added v1 support for Pipeline [#12729](https://github.com/openshift/console/pull/12729)
* [CONSOLE-3660](https://issues.redhat.com/browse/CONSOLE-3660): Introduce react-router v6 compatibility [#12861](https://github.com/openshift/console/pull/12861)
* [OCPBUGS-8274](https://issues.redhat.com/browse/OCPBUGS-8274): Do not request token URL if auth is disabled [#12818](https://github.com/openshift/console/pull/12818)
* [OCPBUGS-14668](https://issues.redhat.com/browse/OCPBUGS-14668): visiting Configurations page returns error Cannot read… [#12882](https://github.com/openshift/console/pull/12882)
* [OCPBUGS-14602](https://issues.redhat.com/browse/OCPBUGS-14602): selected project was not taking effect when searching … [#12880](https://github.com/openshift/console/pull/12880)
* [OCPBUGS-14550](https://issues.redhat.com/browse/OCPBUGS-14550): Use proxy with web socket connection and monitoring d… [#12877](https://github.com/openshift/console/pull/12877)
* [CONSOLE-3392](https://issues.redhat.com/browse/CONSOLE-3392): Implement exact search  for more precise result sets and add user prefs setting [#12838](https://github.com/openshift/console/pull/12838)
* [ODC-7288](https://issues.redhat.com/browse/ODC-7288): Add proxy to invoke knative services with a public route [#12789](https://github.com/openshift/console/pull/12789)
* [ODC-7320](https://issues.redhat.com/browse/ODC-7320): Gherkin for customisation of add page and developer catalog through customisation form view [#12855](https://github.com/openshift/console/pull/12855)
* [OCPBUGS-14424](https://issues.redhat.com/browse/OCPBUGS-14424): OVN Kubernetes multi-homing [#12869](https://github.com/openshift/console/pull/12869)
* [OCPBUGS-14262](https://issues.redhat.com/browse/OCPBUGS-14262): Fix Pipeline metrics page [#12863](https://github.com/openshift/console/pull/12863)
* [OCPBUGS-10411](https://issues.redhat.com/browse/OCPBUGS-10411): Edit deployment don't enable save button if image stream is added [#12673](https://github.com/openshift/console/pull/12673)
* [OCPBUGS-14149](https://issues.redhat.com/browse/OCPBUGS-14149): account for single object in status.conditions instead… [#12866](https://github.com/openshift/console/pull/12866)
* [OCPBUGS-14352](https://issues.redhat.com/browse/OCPBUGS-14352): E2e tests fails because OpenShift Pipelines operator could not be found [#12872](https://github.com/openshift/console/pull/12872)
* [OCPBUGS-9909](https://issues.redhat.com/browse/OCPBUGS-9909): Could not import multiple resources via JSON (while YAML supports this) [#12721](https://github.com/openshift/console/pull/12721)
* [ODC-7317](https://issues.redhat.com/browse/ODC-7317): Update Terminal step of the Guided Tour to indicate that odo CLI is accessible [#12848](https://github.com/openshift/console/pull/12848)
* [ODC-7308](https://issues.redhat.com/browse/ODC-7308): Update test cases of web terminal configuration page [#12825](https://github.com/openshift/console/pull/12825)
* [ODC-7283](https://issues.redhat.com/browse/ODC-7283): Add Web Terminal tab in cluster configuration page [#12718](https://github.com/openshift/console/pull/12718)
* [OCPBUGS-6767](https://issues.redhat.com/browse/OCPBUGS-6767): Regression: OpenShift Console no-longer filters SecretList when displaying ServiceAccount [#12679](https://github.com/openshift/console/pull/12679)
* [OCPBUGS-13782](https://issues.redhat.com/browse/OCPBUGS-13782): Surface the message from Operator developer [#12840](https://github.com/openshift/console/pull/12840)
* [OCPBUGS-12896](https://issues.redhat.com/browse/OCPBUGS-12896): Corrected Labels for resolving the bug related to the Create Route Checkbox [#12834](https://github.com/openshift/console/pull/12834)
* [ODC-7315](https://issues.redhat.com/browse/ODC-7315): Change help texts in initialize Terminal page [#12824](https://github.com/openshift/console/pull/12824)
* [OCPBUGS-11668](https://issues.redhat.com/browse/OCPBUGS-11668): Fix kebab actions on Installed Operators page [#12822](https://github.com/openshift/console/pull/12822)
* [OCPBUGS-13693](https://issues.redhat.com/browse/OCPBUGS-13693): Fix RTE in bridge. [#12817](https://github.com/openshift/console/pull/12817)
* [OCPBUGS-11256](https://issues.redhat.com/browse/OCPBUGS-11256): Topology UI doesn't recognize Serverless Rust function for proper UI icon [#12816](https://github.com/openshift/console/pull/12816)
* [OCPBUGS-11996](https://issues.redhat.com/browse/OCPBUGS-11996): Fixed Make Serverless Form Error [#12815](https://github.com/openshift/console/pull/12815)
* [OCPBUGS-13257](https://issues.redhat.com/browse/OCPBUGS-13257): propagate labels to pipeline resources [#12808](https://github.com/openshift/console/pull/12808)
* [MGMT-14527](https://issues.redhat.com/browse/MGMT-14527): Add vSphere cluster field. [#12806](https://github.com/openshift/console/pull/12806)
* [OCPBUGS-12783](https://issues.redhat.com/browse/OCPBUGS-12783): Remove "Action" type from OLM descriptor readme [#12800](https://github.com/openshift/console/pull/12800)
* [CONSOLE-3623](https://issues.redhat.com/browse/CONSOLE-3623): Add X-CSRF token to console request headers [#12719](https://github.com/openshift/console/pull/12719)
* [OCPBUGS-5453](https://issues.redhat.com/browse/OCPBUGS-5453): Add Pipeline metrics unsupported empty page [#12435](https://github.com/openshift/console/pull/12435)
* [OCPBUGS-1829](https://issues.redhat.com/browse/OCPBUGS-1829): use service port name instead targetPort in the Pipeline Event listener route [#12148](https://github.com/openshift/console/pull/12148)
* [CONSOLE-2501](https://issues.redhat.com/browse/CONSOLE-2501): Upgrade TypeScript version to 4.5 [#12821](https://github.com/openshift/console/pull/12821)
* [Full changelog](https://github.com/openshift/console/compare/c6bc3ea81c99613cfe9b49eab12549b2fa0bf88c...614383873a367e0af48d1f9969a1ff14b0b9aa3e)


### [console-operator](https://github.com/openshift/console-operator/tree/5a6ccad6e2af315dad325c4fab9681838659466d)

* [OCPBUGS-17424](https://issues.redhat.com/browse/OCPBUGS-17424): Handle cache.DeletedFinalStateUnknown correctly [#785](https://github.com/openshift/console-operator/pull/785)
* chore: manifests/09-console-link-*: Drop obsolete deletion manifests [#784](https://github.com/openshift/console-operator/pull/784)
* [CONSOLE-3624](https://issues.redhat.com/browse/CONSOLE-3624): Add haproxy timeout annotation to console routes [#777](https://github.com/openshift/console-operator/pull/777)
* [ODC-7333](https://issues.redhat.com/browse/ODC-7333): Bump openshift/api to include ConsoleSample CRD [#771](https://github.com/openshift/console-operator/pull/771)
* [OCPBUGS-15893](https://issues.redhat.com/browse/OCPBUGS-15893): Add missing watch permission for helm-chartrepos-viewers [#775](https://github.com/openshift/console-operator/pull/775)
* [ODC-7333](https://issues.redhat.com/browse/ODC-7333): Add consolesamples to ClusterRole console-extensions-reader to give all users readonly access [#776](https://github.com/openshift/console-operator/pull/776)
* [OCPBUGS-14716](https://issues.redhat.com/browse/OCPBUGS-14716): Handle branding based on API changes [#769](https://github.com/openshift/console-operator/pull/769)
* [ODC-7339](https://issues.redhat.com/browse/ODC-7339): Follow up ticket for ODC-7292 [#773](https://github.com/openshift/console-operator/pull/773)
* [OCPBUGS-15499](https://issues.redhat.com/browse/OCPBUGS-15499): Remove managed cluster logic from the operator's controller [#774](https://github.com/openshift/console-operator/pull/774)
* [ODC-7292](https://issues.redhat.com/browse/ODC-7292): Add new quickstart for installing Cryostat [#770](https://github.com/openshift/console-operator/pull/770)
* [ODC-7312](https://issues.redhat.com/browse/ODC-7312): Add OpenShift Quickstart for JBoss EAP 7 [#760](https://github.com/openshift/console-operator/pull/760)
* [ODC-7262](https://issues.redhat.com/browse/ODC-7262): Add QuickStart approvers and reviewers [#772](https://github.com/openshift/console-operator/pull/772)
* [CONSOLE-3278](https://issues.redhat.com/browse/CONSOLE-3278): Add client certificate and key to service monitor [#668](https://github.com/openshift/console-operator/pull/668)
* [OCPBUGS-11751](https://issues.redhat.com/browse/OCPBUGS-11751): Remove multicluster conditions from console operator [#763](https://github.com/openshift/console-operator/pull/763)
* [Full changelog](https://github.com/openshift/console-operator/compare/cdc47ee0e8a18957cb10f9f9efeef1c5d9287b29...5a6ccad6e2af315dad325c4fab9681838659466d)


### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/463386589579bd9e74578b3c0fb278840570cd0f)

* [OCPBUGS-17681](https://issues.redhat.com/browse/OCPBUGS-17681): Default CNI binaries to RHEL 8 [#116](https://github.com/openshift/containernetworking-plugins/pull/116)
* Updating ose-containernetworking-plugins images to be consistent with ART [#108](https://github.com/openshift/containernetworking-plugins/pull/108)
* Updating ose-containernetworking-plugins images to be consistent with ART [#107](https://github.com/openshift/containernetworking-plugins/pull/107)
* Add rhel9 binary [#106](https://github.com/openshift/containernetworking-plugins/pull/106)
* [OCPBUGS-14095](https://issues.redhat.com/browse/OCPBUGS-14095): Sync with upstream version v1.3.0 [#98](https://github.com/openshift/containernetworking-plugins/pull/98)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/eea718585f3c597290dc64e345f83839ee9494e5...463386589579bd9e74578b3c0fb278840570cd0f)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/afa5b9995d305416ac193b1618fde653225afc36)

* [STOR-1440](https://issues.redhat.com/browse/STOR-1440): Restart controller Pods if metrics-serving-cert changed [#198](https://github.com/openshift/csi-driver-manila-operator/pull/198)
* [OCPBUGS-12499](https://issues.redhat.com/browse/OCPBUGS-12499): Bump dependencies [#197](https://github.com/openshift/csi-driver-manila-operator/pull/197)
* Remove unused Dockerfile.openshift.ci file [#193](https://github.com/openshift/csi-driver-manila-operator/pull/193)
* Rework how we build the container image [#194](https://github.com/openshift/csi-driver-manila-operator/pull/194)
* [OCPBUGS-14049](https://issues.redhat.com/browse/OCPBUGS-14049): Don't cache OpenStack client [#184](https://github.com/openshift/csi-driver-manila-operator/pull/184)
* Revert "OCPBUGS-14049: Add secret informer" [#192](https://github.com/openshift/csi-driver-manila-operator/pull/192)
* [OCPBUGS-16453](https://issues.redhat.com/browse/OCPBUGS-16453): Bump library-go [#190](https://github.com/openshift/csi-driver-manila-operator/pull/190)
* [OCPBUGS-16783](https://issues.redhat.com/browse/OCPBUGS-16783): Chore: Update OWNERS [#189](https://github.com/openshift/csi-driver-manila-operator/pull/189)
* [OCPBUGS-14049](https://issues.redhat.com/browse/OCPBUGS-14049): Add secret informer [#187](https://github.com/openshift/csi-driver-manila-operator/pull/187)
* [STOR-1065](https://issues.redhat.com/browse/STOR-1065): Rework sidecar bindings to bind common ClusterRoles [#186](https://github.com/openshift/csi-driver-manila-operator/pull/186)
* [OCPBUGS-14824](https://issues.redhat.com/browse/OCPBUGS-14824): Bump csi-driver-manila-operator library-go [#183](https://github.com/openshift/csi-driver-manila-operator/pull/183)
* [STOR-1168](https://issues.redhat.com/browse/STOR-1168): Bump common libraries [#182](https://github.com/openshift/csi-driver-manila-operator/pull/182)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/8f6837f23b3d14494851cade712a01e3c242e93d...afa5b9995d305416ac193b1618fde653225afc36)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/e1dd45373456cf8e47a58d6764212317fb2f8a97)

* Remove unused Dockerfile.openshift.ci file [#127](https://github.com/openshift/csi-driver-nfs/pull/127)
* Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#126](https://github.com/openshift/csi-driver-nfs/pull/126)
* Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#125](https://github.com/openshift/csi-driver-nfs/pull/125)
* Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#124](https://github.com/openshift/csi-driver-nfs/pull/124)
* Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#123](https://github.com/openshift/csi-driver-nfs/pull/123)
* Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#122](https://github.com/openshift/csi-driver-nfs/pull/122)
* Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#118](https://github.com/openshift/csi-driver-nfs/pull/118)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/82f1a60be7aef1fa77a810da87b0da433472a1ac...e1dd45373456cf8e47a58d6764212317fb2f8a97)


### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/19ba62783892161cbe39f46dd923df5061d372ad)

* [OCPBUGS-16074](https://issues.redhat.com/browse/OCPBUGS-16074): Updating Kubernetes and other associated dependencies [#141](https://github.com/openshift/csi-driver-shared-resource/pull/141)
* [OCPBUGS-14489](https://issues.redhat.com/browse/OCPBUGS-14489): Kubernetes 0.27 [#139](https://github.com/openshift/csi-driver-shared-resource/pull/139)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/6b6517de4d6b7335ddf394af24fd26dc15a3894d...19ba62783892161cbe39f46dd923df5061d372ad)


### [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator/tree/d340e598d77b2a9f95be2161a45a95c36f95b416)

* [STOR-1442](https://issues.redhat.com/browse/STOR-1442): Restart webhook Pods if webhook-serving-cert changed [#83](https://github.com/openshift/csi-driver-shared-resource-operator/pull/83)
* [STOR-1441](https://issues.redhat.com/browse/STOR-1441): Restart node Pods if metrics-serving-cert changed [#82](https://github.com/openshift/csi-driver-shared-resource-operator/pull/82)
* [OCPBUGS-16073](https://issues.redhat.com/browse/OCPBUGS-16073): Updating Kubernetes and other associated dependencies [#81](https://github.com/openshift/csi-driver-shared-resource-operator/pull/81)
* [OCPBUGS-14824](https://issues.redhat.com/browse/OCPBUGS-14824): Bump csi-driver-shared-resource-operator library-go [#80](https://github.com/openshift/csi-driver-shared-resource-operator/pull/80)
* [OCPBUGS-14488](https://issues.redhat.com/browse/OCPBUGS-14488): bumping kubernetes to 0.27.1 [#79](https://github.com/openshift/csi-driver-shared-resource-operator/pull/79)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource-operator/compare/164ce1a901c3107e2f3f2c63916d5fc69a0654d8...d340e598d77b2a9f95be2161a45a95c36f95b416)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/a8645eba126ccd41300fbf629db352085e2a02c4)

* [STOR-1169](https://issues.redhat.com/browse/STOR-1169): Rebase `external-attacher` to v4.3.0 for OCP 4.14 [#54](https://github.com/openshift/csi-external-attacher/pull/54)
* [OCPBUGS-14815](https://issues.redhat.com/browse/OCPBUGS-14815): Chore: Update OWNERS and OWNERS_ALIASES [#55](https://github.com/openshift/csi-external-attacher/pull/55)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/405d34ff604dd66fea743c003571b4515af78abc...a8645eba126ccd41300fbf629db352085e2a02c4)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/3832852db71c55877fcf98f380bf376678359e8c)

* [OCPBUGS-14811](https://issues.redhat.com/browse/OCPBUGS-14811): Chore: Update OWNERS and OWNERS_ALIASES [#66](https://github.com/openshift/csi-external-provisioner/pull/66)
* [STOR-1169](https://issues.redhat.com/browse/STOR-1169): Rebase `external-provisioner` to v3.5.0 for OCP 4.14 [#65](https://github.com/openshift/csi-external-provisioner/pull/65)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/482598b15a0557525eef0427ec32673f6808ff71...3832852db71c55877fcf98f380bf376678359e8c)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/9a76f330d7a03cfce9dbbb71f25febe3efc9271b)

* [STOR-1169](https://issues.redhat.com/browse/STOR-1169): Rebase `external-resizer` to v1.8.0 for OCP 4.14 [#141](https://github.com/openshift/csi-external-resizer/pull/141)
* [OCPBUGS-14812](https://issues.redhat.com/browse/OCPBUGS-14812): Chore: Update OWNERS and OWNERS_ALIASES [#142](https://github.com/openshift/csi-external-resizer/pull/142)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/ee117b60d87545dd01fcdd8fbec45ed939fc26f0...9a76f330d7a03cfce9dbbb71f25febe3efc9271b)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/712bf7c316adfa0a3c8afc56d1db23abfadad58e)

* [STOR-1169](https://issues.redhat.com/browse/STOR-1169): Rebase `external-snapshotter` to v6.2.2 for OCP 4.14 [#101](https://github.com/openshift/csi-external-snapshotter/pull/101)
* [OCPBUGS-14813](https://issues.redhat.com/browse/OCPBUGS-14813): Chore: Update OWNERS and OWNERS_ALIASES [#102](https://github.com/openshift/csi-external-snapshotter/pull/102)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/dbaa923f1833272b2ba65350f1f9de8883654162...712bf7c316adfa0a3c8afc56d1db23abfadad58e)


### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/957e1d03570e07fb0825813ab7b751bc8543ebc2)

* [STOR-1169](https://issues.redhat.com/browse/STOR-1169): Rebase `livenessprobe` to v2.10.0 for OCP 4.14 [#44](https://github.com/openshift/csi-livenessprobe/pull/44)
* [OCPBUGS-14810](https://issues.redhat.com/browse/OCPBUGS-14810): Chore: Update OWNERS and OWNERS_ALIASES [#45](https://github.com/openshift/csi-livenessprobe/pull/45)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/07a3e99878d10db2a3c186fbdb87bbb8350aa87b...957e1d03570e07fb0825813ab7b751bc8543ebc2)


### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/f8635f761f8f59b76c1056034fc5addb29071cfe)

* [STOR-1169](https://issues.redhat.com/browse/STOR-1169): Rebase `node-driver-registrar` to v2.8.0 for OCP 4.14 [#46](https://github.com/openshift/csi-node-driver-registrar/pull/46)
* [OCPBUGS-14814](https://issues.redhat.com/browse/OCPBUGS-14814): Chore: Update OWNERS and OWNERS_ALIASES [#47](https://github.com/openshift/csi-node-driver-registrar/pull/47)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/30ffd909cd041a5535b0419960596f6342c78994...f8635f761f8f59b76c1056034fc5addb29071cfe)


### [docker-builder](https://github.com/openshift/builder/tree/b79bcf70ac2fe589d16112d1fdf1bc72a53d4386)

* [BUILD-432](https://issues.redhat.com/browse/BUILD-432): mount secrets as "overlay" mounts [#349](https://github.com/openshift/builder/pull/349)
* [OCPBUGS-16070](https://issues.redhat.com/browse/OCPBUGS-16070): Updating Kubernetes and other associated dependencies [#356](https://github.com/openshift/builder/pull/356)
* [OCPBUGS-15497](https://issues.redhat.com/browse/OCPBUGS-15497): Add the git-lfs package [#350](https://github.com/openshift/builder/pull/350)
* [OCPBUGS-14798](https://issues.redhat.com/browse/OCPBUGS-14798): Adds reference to contributing.md [#346](https://github.com/openshift/builder/pull/346)
* [OCPBUGS-14484](https://issues.redhat.com/browse/OCPBUGS-14484): Kubernetes 0.27 [#347](https://github.com/openshift/builder/pull/347)
* [Full changelog](https://github.com/openshift/builder/compare/566c4bcbee799924f0a3753029c34f287126b4f6...b79bcf70ac2fe589d16112d1fdf1bc72a53d4386)


### [docker-registry](https://github.com/openshift/image-registry/tree/d473f35223305fcf9e500962947facb2b9524fa2)

* Revert "[OCPNODE-1258] Support both icsp and idms" [#374](https://github.com/openshift/image-registry/pull/374)
* Support both icsp and idms [#346](https://github.com/openshift/image-registry/pull/346)
* [IR-371](https://issues.redhat.com/browse/IR-371): Bump docker distribution (again) [#372](https://github.com/openshift/image-registry/pull/372)
* [TRT-1092](https://issues.redhat.com/browse/TRT-1092): Revert "Merge pull request #370 from flavianmissi/bump-docker-distrib… [#371](https://github.com/openshift/image-registry/pull/371)
* [IR-371](https://issues.redhat.com/browse/IR-371): upgrade docker distribution [#370](https://github.com/openshift/image-registry/pull/370)
* [Full changelog](https://github.com/openshift/image-registry/compare/92c7270360c6a963629777b1a2d72aa9e9070364...d473f35223305fcf9e500962947facb2b9524fa2)


### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/657df81bd4b17181dca5a8c4cf3f1f0f803ac5dc)

* rework PR #74 to switch Dockerfile to use rhel9 [#75](https://github.com/openshift/egress-router-cni/pull/75)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/c6f8060e5d0dd36599572c5cbf7da1f3d756ec04...657df81bd4b17181dca5a8c4cf3f1f0f803ac5dc)


### [etcd](https://github.com/openshift/etcd/tree/5a36b9b6b329d92d7c26d1c944e6b1192f9d1523)

* [OCPBUGS-11850](https://issues.redhat.com/browse/OCPBUGS-11850): Rebase etcd-3.5.9 into openshift-4.14 [#203](https://github.com/openshift/etcd/pull/203)
* [OCPBUGS-11850](https://issues.redhat.com/browse/OCPBUGS-11850): Rebase etcd-3.5.8 into openshift-4.14 [#201](https://github.com/openshift/etcd/pull/201)
* [Full changelog](https://github.com/openshift/etcd/compare/53cdd6b0519f0e57da9032b473465799bba4b1a0...5a36b9b6b329d92d7c26d1c944e6b1192f9d1523)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/37deba9d5cc01f1d0cfe741b3996b0474d5ef84e)

* Merge https://github.com/kubernetes/cloud-provider-gcp:master (49c9a25) into master [#34](https://github.com/openshift/cloud-provider-gcp/pull/34)
* Updating ose-gcp-cloud-controller-manager images to be consistent with ART [#33](https://github.com/openshift/cloud-provider-gcp/pull/33)
* [OCPCLOUD-2049](https://issues.redhat.com/browse/OCPCLOUD-2049): Merge https://github.com/kubernetes/cloud-provider-gcp:master (87cd065) into master [#28](https://github.com/openshift/cloud-provider-gcp/pull/28)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/6b7288f7e4677bdfc7cc23538a3ed2b17b0b9310...37deba9d5cc01f1d0cfe741b3996b0474d5ef84e)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/38e337585cf606957429f7043db1a57cda34fcec)

* [OCPCLOUD-1874](https://issues.redhat.com/browse/OCPCLOUD-1874): Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.4.0 (2131458) into master [#198](https://github.com/openshift/cluster-api-provider-gcp/pull/198)
* [OCPBUGS-6407](https://issues.redhat.com/browse/OCPBUGS-6407): Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.3.0 (fa642b2) into master [#195](https://github.com/openshift/cluster-api-provider-gcp/pull/195)
* Add openshift/e2e-tests for CAPI E2E testing [#197](https://github.com/openshift/cluster-api-provider-gcp/pull/197)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/9453790e38f84de2235a0c72694fdc3377273a44...38e337585cf606957429f7043db1a57cda34fcec)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/ebfce99dc654945c2d5a75a1fee1ece8a557ad29)

* [CFE-683](https://issues.redhat.com/browse/CFE-683): Add user defined labels to the created gcp resource [#53](https://github.com/openshift/machine-api-provider-gcp/pull/53)
* [CFE-683](https://issues.redhat.com/browse/CFE-683): Update openshift/api package to latest version [#56](https://github.com/openshift/machine-api-provider-gcp/pull/56)
* [OCPCLOUD-2056](https://issues.redhat.com/browse/OCPCLOUD-2056): Update dependencies to K8s 1.27 [#51](https://github.com/openshift/machine-api-provider-gcp/pull/51)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/d64af61b4e91767e898d773af057b0199f0ae66b...ebfce99dc654945c2d5a75a1fee1ece8a557ad29)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/5856e47b8469151b4fd9fb42d56bd22f6e18b7dd)

* [OCPBUGS-17367](https://issues.redhat.com/browse/OCPBUGS-17367): UPSTREAM: <carry>: Remove the static library linking flag [#41](https://github.com/openshift/gcp-pd-csi-driver/pull/41)
* [OCPBUGS-16783](https://issues.redhat.com/browse/OCPBUGS-16783): Chore: Update OWNERS [#39](https://github.com/openshift/gcp-pd-csi-driver/pull/39)
* UPSTREAM: <carry>: Fix OWNERS_ALIASES [#40](https://github.com/openshift/gcp-pd-csi-driver/pull/40)
* [STOR-1163](https://issues.redhat.com/browse/STOR-1163): Rebase to upstream v1.10.1 [#37](https://github.com/openshift/gcp-pd-csi-driver/pull/37)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/9f6c301304a4ae724e899ed9aa133e28ac55e6d6...5856e47b8469151b4fd9fb42d56bd22f6e18b7dd)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/999fb4c0142de013ad022f842cc29f508c9f8894)

* [CFE-878](https://issues.redhat.com/browse/CFE-878): Add userLabels in Infrastructure to driver args list [#74](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/74)
* [OCPBUGS-16654](https://issues.redhat.com/browse/OCPBUGS-16654): Revert revert "STOR-1065: Rework sidecar bindings to b… [#76](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/76)
* [OCPBUGS-16569](https://issues.redhat.com/browse/OCPBUGS-16569): Bump library-go to remove dependency on goproxy [#78](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/78)
* [OCPBUGS-16783](https://issues.redhat.com/browse/OCPBUGS-16783): Chore: Update OWNERS [#77](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/77)
* Revert "STOR-1065: Rework sidecar bindings to bind common ClusterRoles" [#75](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/75)
* [STOR-1065](https://issues.redhat.com/browse/STOR-1065): Rework sidecar bindings to bind common ClusterRoles [#71](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/71)
* [OCPBUGS-15823](https://issues.redhat.com/browse/OCPBUGS-15823): Change timeout of CSI sidecar [#73](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/73)
* [OCPBUGS-14824](https://issues.redhat.com/browse/OCPBUGS-14824): Bump gcp-pd-csi-driver-operator library-go [#72](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/72)
* [STOR-1301](https://issues.redhat.com/browse/STOR-1301): Restart controller Pods if metrics-serving-cert changed [#68](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/68)
* [STOR-1168](https://issues.redhat.com/browse/STOR-1168): Bump common libraries [#70](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/70)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/58fa1bc2d997dd541519d3561eeda8fa62d1b55a...999fb4c0142de013ad022f842cc29f508c9f8894)


### [haproxy-router](https://github.com/openshift/router/tree/44a5304cf8972d235468e813fe228ce36b1532e8)

* [NE-1141](https://issues.redhat.com/browse/NE-1141): Adds logic for setting and deleting headers via Ingress Operator CR and Route Object. [#438](https://github.com/openshift/router/pull/438)
* [OCPBUGS-16623](https://issues.redhat.com/browse/OCPBUGS-16623): properly handle weight=0 [#499](https://github.com/openshift/router/pull/499)
* [RFE-3007](https://issues.redhat.com/browse/RFE-3007): Add the ability to enabled option contstats [#449](https://github.com/openshift/router/pull/449)
* [OCPBUGS-3356](https://issues.redhat.com/browse/OCPBUGS-3356): Add support for tuning tune.http.cookielen [#436](https://github.com/openshift/router/pull/436)
* [NE-1304](https://issues.redhat.com/browse/NE-1304): container builds: switch to haproxy26 package [#487](https://github.com/openshift/router/pull/487)
* [OCPBUGS-13969](https://issues.redhat.com/browse/OCPBUGS-13969): Bump vendors k8s libraries to 0.27.2 [#486](https://github.com/openshift/router/pull/486)
* [Full changelog](https://github.com/openshift/router/compare/5426a9b1597b9afd70b9d49caebe00cee6cc433f...44a5304cf8972d235468e813fe228ce36b1532e8)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/4e8792688dcae131049350c46f9fff698cc42b8c)

* UPSTREAM: 118280: Set all PSa labels in tests [#1663](https://github.com/openshift/kubernetes/pull/1663)
* [OCPBUGS-17119](https://issues.redhat.com/browse/OCPBUGS-17119): UPSTREAM: <drop>: bump apiserver-library-go for updated required-scc errors [#1661](https://github.com/openshift/kubernetes/pull/1661)
* [OCPBUGS-15726](https://issues.redhat.com/browse/OCPBUGS-15726): UPSTREAM: <carry>: merge v3 openapi discovery and specs for special groups [#1654](https://github.com/openshift/kubernetes/pull/1654)
* [OCPBUGS-16166](https://issues.redhat.com/browse/OCPBUGS-16166): Update to Kubernetes 1.27.4 [#1660](https://github.com/openshift/kubernetes/pull/1660)
* Update to Kubernetes 1.27.4 [#1653](https://github.com/openshift/kubernetes/pull/1653)
* [OCPBUGS-15726](https://issues.redhat.com/browse/OCPBUGS-15726): UPSTREAM: 118879: make apiservices.apiregistration.k8s.io discoverabl… [#1630](https://github.com/openshift/kubernetes/pull/1630)
* [OCPBUGS-16166](https://issues.redhat.com/browse/OCPBUGS-16166): Update to Kubernetes 1.27.4 [#1645](https://github.com/openshift/kubernetes/pull/1645)
* [OCPBUGS-15726](https://issues.redhat.com/browse/OCPBUGS-15726): UPSTREAM: 118881: fix openapi/v3 non local apiservices aggregation [#1629](https://github.com/openshift/kubernetes/pull/1629)
* UPSTREAM: <drop>: hack/update-vendor.sh [#1634](https://github.com/openshift/kubernetes/pull/1634)
* UPSTREAM: 119107: Stop using deprecated API [#1624](https://github.com/openshift/kubernetes/pull/1624)
* [OCPBUGS-13392](https://issues.redhat.com/browse/OCPBUGS-13392): UPSTREAM: 118915: remove legacy NetworkPolicy tests [#1623](https://github.com/openshift/kubernetes/pull/1623)
* UPSTREAM: <drop>: update openshift/api,openshift/apiserver-library-go [#1621](https://github.com/openshift/kubernetes/pull/1621)
* UPSTREAM: <carry>: when only this kube-apiserver can fulfill the kube… [#1616](https://github.com/openshift/kubernetes/pull/1616)
* Update to Kubernetes 1.27.3 [#1609](https://github.com/openshift/kubernetes/pull/1609)
* UPSTREAM: <carry>: STOR-1270: Admission plugin to deny deletion of storages.operator.openshift.io [#1550](https://github.com/openshift/kubernetes/pull/1550)
* [OCPBUGS-7181](https://issues.redhat.com/browse/OCPBUGS-7181): UPSTREAM: <drop>: bump apiserver-library-go [#1605](https://github.com/openshift/kubernetes/pull/1605)
* [STOR-1263](https://issues.redhat.com/browse/STOR-1263): Add csimock tests [#1595](https://github.com/openshift/kubernetes/pull/1595)
* [OCPBUGS-4053](https://issues.redhat.com/browse/OCPBUGS-4053): UPSTREAM: 118383: bump cadvisor for upstream patch 3301 [#1594](https://github.com/openshift/kubernetes/pull/1594)
* Update test wrapper to match new k8s [#1584](https://github.com/openshift/kubernetes/pull/1584)
* [STOR-1263](https://issues.redhat.com/browse/STOR-1263): Bump to k8s 1.27.2 [#1583](https://github.com/openshift/kubernetes/pull/1583)
* `cherry-pick`: #117785 from `k/k` - disable external IPs on e2e net tests [#1581](https://github.com/openshift/kubernetes/pull/1581)
* UPSTREAM: 117893:  When expecting pods count only active ones [#1577](https://github.com/openshift/kubernetes/pull/1577)
* [Full changelog](https://github.com/openshift/kubernetes/compare/38c64ac43b865b13e942ef3445db5d3aa95a7b7d...4e8792688dcae131049350c46f9fff698cc42b8c)


### [hypershift](https://github.com/openshift/hypershift/tree/4f34a4615aa8ba68c1dd19f0daee13de86b83ba2)

* Revert "HOSTEDCP-1001: Image registryOverride included in the image metadata extraction flow" [#2908](https://github.com/openshift/hypershift/pull/2908)
* [OCPBUGS-16076](https://issues.redhat.com/browse/OCPBUGS-16076): Validate HostedCluster name against RFC1123 in CLI [#2906](https://github.com/openshift/hypershift/pull/2906)
* [OCPBUGS-15331](https://issues.redhat.com/browse/OCPBUGS-15331), [OCPBUGS-16049](https://issues.redhat.com/browse/OCPBUGS-16049): Enable AdvertiseAddress dual stack and IPv6 support and added the changes to be included in the certificates [#2779](https://github.com/openshift/hypershift/pull/2779)
* [HOSTEDCP-1081](https://issues.redhat.com/browse/HOSTEDCP-1081): Perform etcd recovery when etcd member data is lost [#2900](https://github.com/openshift/hypershift/pull/2900)
* [SDN-4057](https://issues.redhat.com/browse/SDN-4057): Pass ControlPlane image to OVN [#2896](https://github.com/openshift/hypershift/pull/2896)
* test: e2e: remove SingleReplica etcd chaos test [#2901](https://github.com/openshift/hypershift/pull/2901)
* Allow overriding pod security admission label [#2886](https://github.com/openshift/hypershift/pull/2886)
* [HOSTEDCP-1146](https://issues.redhat.com/browse/HOSTEDCP-1146): cpo: use CPO spec container image if it is a sha256 reference [#2899](https://github.com/openshift/hypershift/pull/2899)
* [HOSTEDCP-1022](https://issues.redhat.com/browse/HOSTEDCP-1022): Set Arch to amd64 [#2897](https://github.com/openshift/hypershift/pull/2897)
* Re-introducing defaulting webhook for self managed HCP [#2892](https://github.com/openshift/hypershift/pull/2892)
* fix-CNV-30260: KubeVirt: fix failed conformance test [#2891](https://github.com/openshift/hypershift/pull/2891)
* [OCPBUGS-16298](https://issues.redhat.com/browse/OCPBUGS-16298): Prevent the kube-apiserver from connecting to the managment kas [#2888](https://github.com/openshift/hypershift/pull/2888)
* [HOSTEDCP-1001](https://issues.redhat.com/browse/HOSTEDCP-1001): Image registryOverride included in the image metadata extraction flow [#2820](https://github.com/openshift/hypershift/pull/2820)
* [HOSTEDCP-1046](https://issues.redhat.com/browse/HOSTEDCP-1046), [HOSTEDCP-1102](https://issues.redhat.com/browse/HOSTEDCP-1102): Follow-on Items [#2847](https://github.com/openshift/hypershift/pull/2847)
* Revert "[HOSTEDCP-1041] Defaulting webhook for self managed HCP" [#2889](https://github.com/openshift/hypershift/pull/2889)
* [OCPBUGS-17446](https://issues.redhat.com/browse/OCPBUGS-17446): Set advertise-address in HCP etcd to resolvable name [#2884](https://github.com/openshift/hypershift/pull/2884)
* Defaulting webhook for self managed HCP [#2864](https://github.com/openshift/hypershift/pull/2864)
* [STOR-1432](https://issues.redhat.com/browse/STOR-1432): cso: add envvars for CSI driver controller images [#2882](https://github.com/openshift/hypershift/pull/2882)
* [HOSTEDCP-1025](https://issues.redhat.com/browse/HOSTEDCP-1025): Add HCP CLI Command to Create a NodePool on AWS [#2852](https://github.com/openshift/hypershift/pull/2852)
* [SDN-4042](https://issues.redhat.com/browse/SDN-4042): Increase upgrade rollout timers [#2881](https://github.com/openshift/hypershift/pull/2881)
* skip olm-collect-profiles in EnsureComponentsHaveNeedManagementKASAccessLabel [#2874](https://github.com/openshift/hypershift/pull/2874)
* [HOSTEDCP-1064](https://issues.redhat.com/browse/HOSTEDCP-1064): Add egress policy for private-router [#2792](https://github.com/openshift/hypershift/pull/2792)
* [HOSTEDCP-1121](https://issues.redhat.com/browse/HOSTEDCP-1121): Ensure SG reconciliation for aws endpoint [#2872](https://github.com/openshift/hypershift/pull/2872)
* chore(deps): update rhtap references [#2865](https://github.com/openshift/hypershift/pull/2865)
* [HOSTEDCP-1065](https://issues.redhat.com/browse/HOSTEDCP-1065): add ControlPlaneImage API for provider-side HCP updates [#2848](https://github.com/openshift/hypershift/pull/2848)
* [HOSTEDCP-1063](https://issues.redhat.com/browse/HOSTEDCP-1063): Disallow webhooks URLs targeting control plane services [#2775](https://github.com/openshift/hypershift/pull/2775)
* [OCPBUGS-17374](https://issues.redhat.com/browse/OCPBUGS-17374): Fast specific dockerignore [#2879](https://github.com/openshift/hypershift/pull/2879)
* Kubevirt how-to docs updates [#2875](https://github.com/openshift/hypershift/pull/2875)
* Fix nodepool upgrade docs link [#2880](https://github.com/openshift/hypershift/pull/2880)
* [OCPBUGS-17171](https://issues.redhat.com/browse/OCPBUGS-17171): Update OLM catalog image tags [#2877](https://github.com/openshift/hypershift/pull/2877)
* [HOSTEDCP-1029](https://issues.redhat.com/browse/HOSTEDCP-1029): Add HCP CLI Command to Destroy a Cluster on AWS [#2853](https://github.com/openshift/hypershift/pull/2853)
* Add workload management annotation to kubevirt-csi daemonset [#2840](https://github.com/openshift/hypershift/pull/2840)
* [WRKLDS-730](https://issues.redhat.com/browse/WRKLDS-730): use default /healthz path for readiness probe in OCM and RCM [#2873](https://github.com/openshift/hypershift/pull/2873)
* Add api and cli validation for kubevirt volume mode [#2862](https://github.com/openshift/hypershift/pull/2862)
* [HOSTEDCP-1079](https://issues.redhat.com/browse/HOSTEDCP-1079): RHTAP HO Containerfile [#2857](https://github.com/openshift/hypershift/pull/2857)
* [OCPBUGS-16770](https://issues.redhat.com/browse/OCPBUGS-16770): add need-management-kas-access label to olm-collect-profiles pods [#2854](https://github.com/openshift/hypershift/pull/2854)
* [MULTIARCH-3684](https://issues.redhat.com/browse/MULTIARCH-3684): PowerVS - Upgrade capi to use v1beta2 APIs [#2831](https://github.com/openshift/hypershift/pull/2831)
* [HOSTEDCP-1046](https://issues.redhat.com/browse/HOSTEDCP-1046): Add ImageDigestMirrorSet to Config API comment [#2868](https://github.com/openshift/hypershift/pull/2868)
* [MULTIARCH-3683](https://issues.redhat.com/browse/MULTIARCH-3683): Add dev flags in destroy cluster powervs command [#2764](https://github.com/openshift/hypershift/pull/2764)
* kubevirt: Reconcile EgressFirewall only for ovn-k [#2849](https://github.com/openshift/hypershift/pull/2849)
* [HOSTEDCP-1046](https://issues.redhat.com/browse/HOSTEDCP-1046): Add IDMS to the list of valid config manifests [#2837](https://github.com/openshift/hypershift/pull/2837)
* [OCPBUGS-17059](https://issues.redhat.com/browse/OCPBUGS-17059): Add volume mode to kubevirt root volume api [#2860](https://github.com/openshift/hypershift/pull/2860)
* Update RHTAP references (main) [#2832](https://github.com/openshift/hypershift/pull/2832)
* [OCPBUGS-16809](https://issues.redhat.com/browse/OCPBUGS-16809): Configured IgnitionProxy to support IPv4 and IPv6 [#2850](https://github.com/openshift/hypershift/pull/2850)
* [OCPBUGS-14163](https://issues.redhat.com/browse/OCPBUGS-14163): Fixed ETCD to work in Ipv6 and Dual stack envs [#2846](https://github.com/openshift/hypershift/pull/2846)
* [HOSTEDCP-1112](https://issues.redhat.com/browse/HOSTEDCP-1112): Add config to set creation frequency of RHTAP PRs [#2838](https://github.com/openshift/hypershift/pull/2838)
* [HOSTEDCP-1020](https://issues.redhat.com/browse/HOSTEDCP-1020): Remove name as a persistent flag required field [#2836](https://github.com/openshift/hypershift/pull/2836)
* [OCPBUGS-16232](https://issues.redhat.com/browse/OCPBUGS-16232): skip z-stream version check when upgrade is forced [#2823](https://github.com/openshift/hypershift/pull/2823)
* [OCPBUGS-16033](https://issues.redhat.com/browse/OCPBUGS-16033): ClusterNetwork's HostPrefix validation for dual stack [#2795](https://github.com/openshift/hypershift/pull/2795)
* [OCPBUGS-14783](https://issues.redhat.com/browse/OCPBUGS-14783): Fix NetworkPolicy to work over IPv4 and IPv6 [#2704](https://github.com/openshift/hypershift/pull/2704)
* Revert "HOSTEDCP-710: Make ImageContentSource immutable" [#2829](https://github.com/openshift/hypershift/pull/2829)
* Update RHTAP references (main) [#2814](https://github.com/openshift/hypershift/pull/2814)
* [HOSTEDCP-1062](https://issues.redhat.com/browse/HOSTEDCP-1062): Make CAPI pod selector backward compatible [#2825](https://github.com/openshift/hypershift/pull/2825)
* [HOSTEDCP-1093](https://issues.redhat.com/browse/HOSTEDCP-1093): Add default flags to HCP create cluster CLI cmd [#2802](https://github.com/openshift/hypershift/pull/2802)
* Revert "HOSTEDCP-1094: e2e autoscaler balancing similar node groups" [#2828](https://github.com/openshift/hypershift/pull/2828)
* [HOSTEDCP-1090](https://issues.redhat.com/browse/HOSTEDCP-1090): Use statically configured haproxy for router [#2778](https://github.com/openshift/hypershift/pull/2778)
* [HOSTEDCP-1046](https://issues.redhat.com/browse/HOSTEDCP-1046): Allow HCP Specification to Support ICSP & IDMS [#2720](https://github.com/openshift/hypershift/pull/2720)
* [HOSTEDCP-710](https://issues.redhat.com/browse/HOSTEDCP-710): Make ImageContentSource immutable [#2815](https://github.com/openshift/hypershift/pull/2815)
* [OCPBUGS-11835](https://issues.redhat.com/browse/OCPBUGS-11835): Add missing probes to two services [#2430](https://github.com/openshift/hypershift/pull/2430)
* [HOSTEDCP-1094](https://issues.redhat.com/browse/HOSTEDCP-1094): e2e autoscaler balancing similar node groups [#2808](https://github.com/openshift/hypershift/pull/2808)
* [OCPBUGS-16113](https://issues.redhat.com/browse/OCPBUGS-16113): unshare ignition-server reconciliation between HO and CPO [#2817](https://github.com/openshift/hypershift/pull/2817)
* [OCPBUGS-11939](https://issues.redhat.com/browse/OCPBUGS-11939): Fix additional issues with OCPBUGS-11939 [#2804](https://github.com/openshift/hypershift/pull/2804)
* [OCPBUGS-16135](https://issues.redhat.com/browse/OCPBUGS-16135): fix deletion bug when hostedzone is already deleted [#2811](https://github.com/openshift/hypershift/pull/2811)
* OCPBUGS-14862 Improve clarity around hypershift operator permissions [#2782](https://github.com/openshift/hypershift/pull/2782)
* [HOSTEDCP-1062](https://issues.redhat.com/browse/HOSTEDCP-1062): Management kas policy [#2796](https://github.com/openshift/hypershift/pull/2796)
* Revert "HOSTEDCP-1062: Add management cluster KAS network policy" [#2793](https://github.com/openshift/hypershift/pull/2793)
* [HOSTEDCP-1020](https://issues.redhat.com/browse/HOSTEDCP-1020): Add pullSecret & NodePool replica flags to HCP CLI [#2774](https://github.com/openshift/hypershift/pull/2774)
* [HOSTEDCP-1101](https://issues.redhat.com/browse/HOSTEDCP-1101): Add snyk-secret HO RHTAP scripts [#2788](https://github.com/openshift/hypershift/pull/2788)
* [OCPBUGS-15991](https://issues.redhat.com/browse/OCPBUGS-15991): use ignition-proxy Service to populate ignitionEndpoint with strategy NodePort [#2787](https://github.com/openshift/hypershift/pull/2787)
* [OCPBUGS-15769](https://issues.redhat.com/browse/OCPBUGS-15769): Include hypershift specific labels to be ignored by similar autoscaler groups [#2784](https://github.com/openshift/hypershift/pull/2784)
* Add management cluster KAS network policy [#2717](https://github.com/openshift/hypershift/pull/2717)
* [HOSTEDCP-1019](https://issues.redhat.com/browse/HOSTEDCP-1019): Add create cluster for Agent for HCP CLI [#2754](https://github.com/openshift/hypershift/pull/2754)
* [CNV-30407](https://issues.redhat.com/browse/CNV-30407): KubeVirt Platform: Support NetworkInterfaceMultiQueue [#2760](https://github.com/openshift/hypershift/pull/2760)
* [HOSTEDCP-1030](https://issues.redhat.com/browse/HOSTEDCP-1030): Add destroy cluster for Agent for HCP CLI [#2756](https://github.com/openshift/hypershift/pull/2756)
* [OCPBUGS-15594](https://issues.redhat.com/browse/OCPBUGS-15594): Get valid arch image for cluster-config-operator [#2753](https://github.com/openshift/hypershift/pull/2753)
* kubevirt: Annotate VMs to be live migratable [#2772](https://github.com/openshift/hypershift/pull/2772)
* Revert "Merge pull request #2770 from dharaneeshvrd/upgrade-capi-ibmcloud [#2776](https://github.com/openshift/hypershift/pull/2776)
* [MULTIARCH-3684](https://issues.redhat.com/browse/MULTIARCH-3684): PowerVS - Upgrade capi to use v1beta2 APIs [#2770](https://github.com/openshift/hypershift/pull/2770)
* [OCPBUGS-14862](https://issues.redhat.com/browse/OCPBUGS-14862): Reject VPCE Connections during VPCE Service cleanup [#2700](https://github.com/openshift/hypershift/pull/2700)
* Update RHTAP references [#2768](https://github.com/openshift/hypershift/pull/2768)
* [HOSTEDCP-1023](https://issues.redhat.com/browse/HOSTEDCP-1023): Add create NodePool for Agent for HCP CLI [#2755](https://github.com/openshift/hypershift/pull/2755)
* [HOSTEDCP-1061](https://issues.redhat.com/browse/HOSTEDCP-1061): Implement dedicated request serving nodes for HostedClusters [#2722](https://github.com/openshift/hypershift/pull/2722)
* [OCPBUGS-15769](https://issues.redhat.com/browse/OCPBUGS-15769): Set --balance-similar-node-groups for autoscaler [#2769](https://github.com/openshift/hypershift/pull/2769)
* Leader election config update. [#2282](https://github.com/openshift/hypershift/pull/2282)
* [OCPBUGS-15723](https://issues.redhat.com/browse/OCPBUGS-15723): Let getMachinesForNodePool return machines ordered by creation Timestamp [#2766](https://github.com/openshift/hypershift/pull/2766)
* Fix KAS HealthCheck for non DNS-Based ingress points in LB service [#2765](https://github.com/openshift/hypershift/pull/2765)
* Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible [#2741](https://github.com/openshift/hypershift/pull/2741)
* Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible in /hack/tools [#2740](https://github.com/openshift/hypershift/pull/2740)
* Bump google.golang.org/protobuf from 1.29.0 to 1.29.1 in /hack/tools [#2737](https://github.com/openshift/hypershift/pull/2737)
* OCPBUGS-12208 ensureExists pullSecret resource reconciliation strategy [#2732](https://github.com/openshift/hypershift/pull/2732)
* Bump github.com/coreos/ignition/v2 from 2.10.1 to 2.14.0 [#2739](https://github.com/openshift/hypershift/pull/2739)
* Bump github.com/docker/docker from 23.0.1+incompatible to 23.0.3+incompatible in /hack/tools [#2738](https://github.com/openshift/hypershift/pull/2738)
* Remove hardcoded AWS CI References [#2742](https://github.com/openshift/hypershift/pull/2742)
* [TRT-1118](https://issues.redhat.com/browse/TRT-1118): Remove DisableStrictZoneCheck from AWS CCM config [#2757](https://github.com/openshift/hypershift/pull/2757)
* Update RHTAP references [#2750](https://github.com/openshift/hypershift/pull/2750)
* add OWNERS for new ci-tooling area label [#2743](https://github.com/openshift/hypershift/pull/2743)
* Add production cli (hcp) to dockerfile [#2747](https://github.com/openshift/hypershift/pull/2747)
* feat: Enable priority class override [#2661](https://github.com/openshift/hypershift/pull/2661)
* test/e2e: retry configmap create in etcd chaos tests [#2746](https://github.com/openshift/hypershift/pull/2746)
* [OCPBUGS-14578](https://issues.redhat.com/browse/OCPBUGS-14578): Set allocate-node-cidrs to false in the cluster-kube-controller-manager [#2731](https://github.com/openshift/hypershift/pull/2731)
* Revert "HOSTEDCP-1016: Validate publishing strategies" [#2733](https://github.com/openshift/hypershift/pull/2733)
* [HOSTEDCP-1027](https://issues.redhat.com/browse/HOSTEDCP-1027): Add Create kubeconfig for HCP CLI [#2719](https://github.com/openshift/hypershift/pull/2719)
* [HOSTEDCP-1016](https://issues.redhat.com/browse/HOSTEDCP-1016): Validate publishing strategies [#2651](https://github.com/openshift/hypershift/pull/2651)
* KubeVirt Platform documentation for Advanced Storage Configurations and External Infrastructure [#2712](https://github.com/openshift/hypershift/pull/2712)
* Follow up to PR comments on #2642 [#2690](https://github.com/openshift/hypershift/pull/2690)
* [HOSTEDCP-1067](https://issues.redhat.com/browse/HOSTEDCP-1067): Add dependabot dependency management [#2708](https://github.com/openshift/hypershift/pull/2708)
* [HOSTEDCP-1073](https://issues.redhat.com/browse/HOSTEDCP-1073): enforce blocked rollout of HCP [#2726](https://github.com/openshift/hypershift/pull/2726)
* Revert "HOSTEDCP-967: [Re-revert] Disable v1alpha1 and conversion webhook by default" [#2705](https://github.com/openshift/hypershift/pull/2705)
* Remove --service-publishing-strategy from production cli [#2721](https://github.com/openshift/hypershift/pull/2721)
* [HOSTEDCP-1024](https://issues.redhat.com/browse/HOSTEDCP-1024): Add Create NodePool for KubeVirt for HCP CLI [#2718](https://github.com/openshift/hypershift/pull/2718)
* [HOSTEDCP-1032](https://issues.redhat.com/browse/HOSTEDCP-1032): e2e: ensure default PSA policy is not privileged [#2714](https://github.com/openshift/hypershift/pull/2714)
* [HOSTEDCP-1031](https://issues.redhat.com/browse/HOSTEDCP-1031): Add Destroy Cluster Cmd for KubeVirt for HCP CLI [#2673](https://github.com/openshift/hypershift/pull/2673)
* Expose annotation to allow release image overrides [#2595](https://github.com/openshift/hypershift/pull/2595)
* [HOSTEDCP-1060](https://issues.redhat.com/browse/HOSTEDCP-1060): add ignition-server proxy [#2668](https://github.com/openshift/hypershift/pull/2668)
* [OCPBUGS-14637](https://issues.redhat.com/browse/OCPBUGS-14637): Check OwningIngressController also in Labels [#2706](https://github.com/openshift/hypershift/pull/2706)
* [HOSTEDCP-1020](https://issues.redhat.com/browse/HOSTEDCP-1020): Add Create Cluster for KubeVirt for HCP CLI [#2672](https://github.com/openshift/hypershift/pull/2672)
* properly handle user CA bundle not existing [#2703](https://github.com/openshift/hypershift/pull/2703)
* [OCPBUGS-15168](https://issues.redhat.com/browse/OCPBUGS-15168): fix(oauth): Do not proxy IBM Cloud IAM endpoints [#2699](https://github.com/openshift/hypershift/pull/2699)
* [OCPBUGS-14859](https://issues.redhat.com/browse/OCPBUGS-14859): Skip AWS resource deletion for 'Unknown' OIDC state [#2691](https://github.com/openshift/hypershift/pull/2691)
* Whitelist access from virt-launchers to NodeIP if NodePort ServicePublishingStrategy is used [#2688](https://github.com/openshift/hypershift/pull/2688)
* [OCPBUGS-13829](https://issues.redhat.com/browse/OCPBUGS-13829): cpo: oauth: honor AccessTokenInactivityTimeout [#2693](https://github.com/openshift/hypershift/pull/2693)
* Update NodePool docs to include data propagation [#2687](https://github.com/openshift/hypershift/pull/2687)
* [HOSTEDCP-1008](https://issues.redhat.com/browse/HOSTEDCP-1008): Add NodePoolTransitionSeconds metric [#2631](https://github.com/openshift/hypershift/pull/2631)
* [HOSTEDCP-967](https://issues.redhat.com/browse/HOSTEDCP-967): [Re-revert] Disable v1alpha1 and conversion webhook by default [#2685](https://github.com/openshift/hypershift/pull/2685)
* Make NodePool arch input immutable [#2689](https://github.com/openshift/hypershift/pull/2689)
* Update autocaler RBAC to accomodate machinepools support added upstream [#2663](https://github.com/openshift/hypershift/pull/2663)
* Enforce Immutability of some KubeVirt Platform Values [#2654](https://github.com/openshift/hypershift/pull/2654)
* [CNV-24818](https://issues.redhat.com/browse/CNV-24818): Add fsGroup support to kubevirt-csi-driver [#2563](https://github.com/openshift/hypershift/pull/2563)
* Let payload provider render feature gate yaml [#2664](https://github.com/openshift/hypershift/pull/2664)
* [OCPBUGS-14633](https://issues.redhat.com/browse/OCPBUGS-14633): Check for OPENSHIFT_IMG_OVERRIDES before using [#2660](https://github.com/openshift/hypershift/pull/2660)
* [HOSTEDCP-965](https://issues.redhat.com/browse/HOSTEDCP-965): Add impersonate feature to the CLI and document HC dump procedure [#2653](https://github.com/openshift/hypershift/pull/2653)
* [OCPBUGS-11882](https://issues.redhat.com/browse/OCPBUGS-11882): Annotate HCP pods with the safe-to-evict-local-volume CA annotation [#2647](https://github.com/openshift/hypershift/pull/2647)
* Update RHTAP references [#2657](https://github.com/openshift/hypershift/pull/2657)
* Disable nodepool replace upgrade test [#2665](https://github.com/openshift/hypershift/pull/2665)
* [OCPBUGS-14784](https://issues.redhat.com/browse/OCPBUGS-14784): Honor global ingress configuration LoadBalancer type on AWS [#2669](https://github.com/openshift/hypershift/pull/2669)
* [OCPBUGS-14620](https://issues.redhat.com/browse/OCPBUGS-14620): Set `DisableStrictZoneCheck = true` in the AWS Cloud Provider config [#2659](https://github.com/openshift/hypershift/pull/2659)
* [HOSTEDCP-992](https://issues.redhat.com/browse/HOSTEDCP-992): refactor ignition-server reconcilation [#2662](https://github.com/openshift/hypershift/pull/2662)
* Minor fix in KAS LB HealthCheck [#2656](https://github.com/openshift/hypershift/pull/2656)
* [HOSTEDCP-1036](https://issues.redhat.com/browse/HOSTEDCP-1036): Create Makefile path to create productized CLI [#2633](https://github.com/openshift/hypershift/pull/2633)
* Extend np test timeout for KubeVirt platform [#2655](https://github.com/openshift/hypershift/pull/2655)
* [HOSTEDCP-1003](https://issues.redhat.com/browse/HOSTEDCP-1003): Set AWS conditions only for AWS platform [#2604](https://github.com/openshift/hypershift/pull/2604)
* Remove alsologtostderr flag form CAP* [#2648](https://github.com/openshift/hypershift/pull/2648)
* [OCPBUGS-14575](https://issues.redhat.com/browse/OCPBUGS-14575): Check for IDMS only if mgmt cluster has req API [#2650](https://github.com/openshift/hypershift/pull/2650)
* Network isolation of VirtualMachines for KubeVirt provider [#2622](https://github.com/openshift/hypershift/pull/2622)
* [OCPBUGS-14428](https://issues.redhat.com/browse/OCPBUGS-14428): remove OLM alerts from the HCCO [#2636](https://github.com/openshift/hypershift/pull/2636)
* KubeVirt Openstack image annotation override [#2629](https://github.com/openshift/hypershift/pull/2629)
* Red Hat Trusted App Pipeline update hypershift-operator-main [#2638](https://github.com/openshift/hypershift/pull/2638)
* Red Hat Trusted App Pipeline purge hypershift-azjx [#2635](https://github.com/openshift/hypershift/pull/2635)
* cli: Add release-stream flag [#2644](https://github.com/openshift/hypershift/pull/2644)
* [OCPBUGS-13547](https://issues.redhat.com/browse/OCPBUGS-13547): Pass payload-version to MCS and MCC [#2643](https://github.com/openshift/hypershift/pull/2643)
* KubeVirt: Handle deletion of the cache DV on an edge case [#2620](https://github.com/openshift/hypershift/pull/2620)
* [OCPBUGS-14087](https://issues.redhat.com/browse/OCPBUGS-14087): Enable HCCO to reconcile over the OperatorHub's disableAllDefaultSources object [#2632](https://github.com/openshift/hypershift/pull/2632)
* [HOSTEDCP-1009](https://issues.redhat.com/browse/HOSTEDCP-1009): Allow external-dns image to be set in install cli [#2623](https://github.com/openshift/hypershift/pull/2623)
* Ensure FeatureGate is copied from cluster to MCO render source [#2581](https://github.com/openshift/hypershift/pull/2581)
* [OCPBUGS-12972](https://issues.redhat.com/browse/OCPBUGS-12972): Use different ports for MCS in the ignition provider [#2628](https://github.com/openshift/hypershift/pull/2628)
* hypershift dump: use random local port for kas port-forwarding [#2625](https://github.com/openshift/hypershift/pull/2625)
* [OCPBUGS-11939](https://issues.redhat.com/browse/OCPBUGS-11939): Initialize RegistryOverrides w/ mgmt cluster ICSP [#2437](https://github.com/openshift/hypershift/pull/2437)
* Revert "Merge pull request #2596 from muraee/disable-valpha1" [#2627](https://github.com/openshift/hypershift/pull/2627)
* Add 'Creating Arm NodePools Through the API' Section [#2587](https://github.com/openshift/hypershift/pull/2587)
* [HOSTEDCP-967](https://issues.redhat.com/browse/HOSTEDCP-967): Disable v1alpha1 and conversion webhook by default [#2596](https://github.com/openshift/hypershift/pull/2596)
* [OCPBUGS-13113](https://issues.redhat.com/browse/OCPBUGS-13113): Add ClusterUpgradeDuration metric [#2566](https://github.com/openshift/hypershift/pull/2566)
* chore(deps): update rhtap references [#2612](https://github.com/openshift/hypershift/pull/2612)
* [OCPBU-609](https://issues.redhat.com/browse/OCPBU-609): agent infrastructure docs [#2618](https://github.com/openshift/hypershift/pull/2618)
* [OCPBUGS-14169](https://issues.redhat.com/browse/OCPBUGS-14169): Remove external-dns --events flag [#2616](https://github.com/openshift/hypershift/pull/2616)
* [OCPBUGS-13970](https://issues.redhat.com/browse/OCPBUGS-13970): Reconcile oauthDeployment annotations even if kubeadmin secret is not found [#2593](https://github.com/openshift/hypershift/pull/2593)
* cmd: infra: aws: retry on AuthorizeSecurityGroup failure [#2605](https://github.com/openshift/hypershift/pull/2605)
* Fix dump for Kubevirt [#2589](https://github.com/openshift/hypershift/pull/2589)
* Kubevirt CSI StorageClass mapping API [#2528](https://github.com/openshift/hypershift/pull/2528)
* Remove Arm e2e test [#2591](https://github.com/openshift/hypershift/pull/2591)
* [HOSTEDCP-947](https://issues.redhat.com/browse/HOSTEDCP-947): Set ETCD Storage Size as immutable field and equalised the default size among both api versions [#2588](https://github.com/openshift/hypershift/pull/2588)
* [OCPBUGS-13735](https://issues.redhat.com/browse/OCPBUGS-13735): Fixed revoking some permissions to CAPI Manager Clusterrole [#2586](https://github.com/openshift/hypershift/pull/2586)
* [HOSTEDCP-445](https://issues.redhat.com/browse/HOSTEDCP-445): Add script to migrate hosted control plane [#2598](https://github.com/openshift/hypershift/pull/2598)
* Use newly introduced KubeVirt Platform rhcos Image [#2576](https://github.com/openshift/hypershift/pull/2576)
* [OCPBUGS-13168](https://issues.redhat.com/browse/OCPBUGS-13168): Include default ingress CA in root CA bundle [#2584](https://github.com/openshift/hypershift/pull/2584)
* [HOSTEDCP-975](https://issues.redhat.com/browse/HOSTEDCP-975): Add new grafana panels for nodepools SLOs [#2592](https://github.com/openshift/hypershift/pull/2592)
* [HOSTEDCP-926](https://issues.redhat.com/browse/HOSTEDCP-926): Send metric when HO/CPO decide to skip cloud resource deletion [#2531](https://github.com/openshift/hypershift/pull/2531)
* Update RHTAP references [#2420](https://github.com/openshift/hypershift/pull/2420)
* [OCPBUGS-13897](https://issues.redhat.com/browse/OCPBUGS-13897): Use cluster-config-operator to render featuregate status on KAS bootstrap [#2585](https://github.com/openshift/hypershift/pull/2585)
* [Full changelog](https://github.com/openshift/hypershift/compare/78ec896f762940b744067452bb9e964a3bcf618d...4f34a4615aa8ba68c1dd19f0daee13de86b83ba2)


### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/ea5a37bbb6bf9e340ccd85ce730c6a8545eae4cd)

* [OCPCLOUD-2046](https://issues.redhat.com/browse/OCPCLOUD-2046): Manual rebase kubernetes 1.27 and go 1.20 [#51](https://github.com/openshift/cloud-provider-ibm/pull/51)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/4a9bdd2f314a5b09f368659369eb2e11f10b14e2...ea5a37bbb6bf9e340ccd85ce730c6a8545eae4cd)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/f784dcaa0f422eaebb2971ca987b1925bc17f21d)

* [OCPBUGS-16783](https://issues.redhat.com/browse/OCPBUGS-16783): Chore: Update OWNERS and OWNERS_ALIASES [#41](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/41)
* [OCPBUGS-12613](https://issues.redhat.com/browse/OCPBUGS-12613): 4.14: UPSTREAM: 157: K8S and grpc package upgrade [#39](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/39)
* [STOR-1158](https://issues.redhat.com/browse/STOR-1158): Merge v5.1.5 for OCP 4.14 [#38](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/38)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/dceb311843c303f58ab54e993d340c52f855dbe2...f784dcaa0f422eaebb2971ca987b1925bc17f21d)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/62408833a2857b7cd1cb5561bc86e531f53f7081)

* [OCPBUGS-16654](https://issues.redhat.com/browse/OCPBUGS-16654): Revert revert "STOR-1065: Rename node-driver-registrar… [#69](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/69)
* [OCPBUGS-16571](https://issues.redhat.com/browse/OCPBUGS-16571): Bump library-go to remove dependency on goproxy [#71](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/71)
* [OCPBUGS-16783](https://issues.redhat.com/browse/OCPBUGS-16783): Chore: Update OWNERS [#70](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/70)
* Revert "STOR-1065: Rename node-driver-registrar RBAC and Rework sidecar bindings to bind common ClusterRoles" [#68](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/68)
* [STOR-1065](https://issues.redhat.com/browse/STOR-1065): Rename node-driver-registrar RBAC and Rework sidecar bindings to bind common ClusterRoles [#64](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/64)
* [OCPBUGS-14824](https://issues.redhat.com/browse/OCPBUGS-14824): Bump ibm-vpc-block-csi-driver-operator library-go [#65](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/65)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/aa33a40c9cdeb237676e52eea3c3d48f85682a8e...62408833a2857b7cd1cb5561bc86e531f53f7081)


### [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater/tree/623de156aa396655a34c8a0df644a3c0ce982726)

* [OCPBUGS-12510](https://issues.redhat.com/browse/OCPBUGS-12510): UPSTREAM: 20: Bump (golang.org/x/net): to address CVE-2022-41723 [#23](https://github.com/openshift/ibm-vpc-node-label-updater/pull/23)
* [Full changelog](https://github.com/openshift/ibm-vpc-node-label-updater/compare/4138c9a55d45f21d0e4d3c2ecd996a71326b078d...623de156aa396655a34c8a0df644a3c0ce982726)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/a7e5c6a5b96a3851d1807d4c3f80113a47a4e54d)

* Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.5.1 (d1ced87) into main [#56](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/56)
* [OCPCLOUD-2121](https://issues.redhat.com/browse/OCPCLOUD-2121): Add openshift/e2e-tests for CAPI E2E testing [#57](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/57)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/da3489d49b9c10c1fad457669c51b4d3790e3cee...a7e5c6a5b96a3851d1807d4c3f80113a47a4e54d)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/c28b2232ab1c0dcd951a23b324506eaab510389c)

* Update dependencies to match machine-api-operator [#22](https://github.com/openshift/machine-api-provider-ibmcloud/pull/22)
* [OCPCLOUD-2054](https://issues.redhat.com/browse/OCPCLOUD-2054): Update k8s to 1.27 [#21](https://github.com/openshift/machine-api-provider-ibmcloud/pull/21)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/1966e3500f43d4c4a486f95f149efcd3104a6578...c28b2232ab1c0dcd951a23b324506eaab510389c)


### [insights-operator](https://github.com/openshift/insights-operator/tree/48c85cdf2dcbe4d17d8323d209aaebfe7f48101b)

* Update documentation [#783](https://github.com/openshift/insights-operator/pull/783)
* update DVO metrics example in the sample archive [#777](https://github.com/openshift/insights-operator/pull/777)
* [OCPBUGS-14270](https://issues.redhat.com/browse/OCPBUGS-14270): Revert "Implement periodic gathering as a job in tech … [#785](https://github.com/openshift/insights-operator/pull/785)
* [Full changelog](https://github.com/openshift/insights-operator/compare/08b4171784b8debe038e912ecd8bcab511cf7aa3...48c85cdf2dcbe4d17d8323d209aaebfe7f48101b)


### [ironic](https://github.com/openshift/ironic-image/tree/c483d7d0f2e4615cf28eb36d5179f2559e664890)

* [OCPBUGS-14795](https://issues.redhat.com/browse/OCPBUGS-14795): Bumping package versions to include 100823 upstream sync. [#391](https://github.com/openshift/ironic-image/pull/391)
* [OCPBUGS-17472](https://issues.redhat.com/browse/OCPBUGS-17472): Expand regex for fcos/okd packages list [#389](https://github.com/openshift/ironic-image/pull/389)
* [OCPBUGS-17142](https://issues.redhat.com/browse/OCPBUGS-17142): [4.14] Update packages with latest bugfix [#387](https://github.com/openshift/ironic-image/pull/387)
* Ironic package upgrade [#386](https://github.com/openshift/ironic-image/pull/386)
* [OCPBUGS-14785](https://issues.redhat.com/browse/OCPBUGS-14785): Update ironic container dependencies [#382](https://github.com/openshift/ironic-image/pull/382)
* [OCPBUGS-13564](https://issues.redhat.com/browse/OCPBUGS-13564): Sync with latest ironic bug fixes [#379](https://github.com/openshift/ironic-image/pull/379)
* [OCPBUGS-13699](https://issues.redhat.com/browse/OCPBUGS-13699): Add python-flask dependency [#371](https://github.com/openshift/ironic-image/pull/371)
* [OCPBUGS-14132](https://issues.redhat.com/browse/OCPBUGS-14132): ironic.conf.j2: Bump min_command_interval to 30 on SCOS [#377](https://github.com/openshift/ironic-image/pull/377)
* [Full changelog](https://github.com/openshift/ironic-image/compare/668c773d32121a35dd12b798bddb1933bda7321f...c483d7d0f2e4615cf28eb36d5179f2559e664890)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/9c7199e15e25bab32376a9f316e210b8c90a58e8)

* [OCPBUGS-17372](https://issues.redhat.com/browse/OCPBUGS-17372): fallback to /etc/hostname of hostnamectl fails [#86](https://github.com/openshift/ironic-agent-image/pull/86)
* [OCPBUGS-9072](https://issues.redhat.com/browse/OCPBUGS-9072): Pass hostname within the ignition to coreos-installer [#76](https://github.com/openshift/ironic-agent-image/pull/76)
* Switch to udevadm command install instead of package [OKD] [#84](https://github.com/openshift/ironic-agent-image/pull/84)
* [OCPBUGS-14906](https://issues.redhat.com/browse/OCPBUGS-14906): Update ipa for OCP 4.14 [#77](https://github.com/openshift/ironic-agent-image/pull/77)
* "Bug OCPBUGS-15447: Switch to udevadm command install instead of package" [#80](https://github.com/openshift/ironic-agent-image/pull/80)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/a59c45d207dc9b4139ed18739dcd47242f7766d0...9c7199e15e25bab32376a9f316e210b8c90a58e8)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/7b56c30661e39b212fc632e8e184c70b14dcf3a2)

* Binary should be compiled on rhel9 [#89](https://github.com/openshift/ironic-rhcos-downloader/pull/89)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/0f4cb48fc8a9ea7dc9493ebc44585c811137f1c4...7b56c30661e39b212fc632e8e184c70b14dcf3a2)


### [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager/tree/c038d5a43e7355099d8f9845a8b14052437b787e)

* [OCPBUGS-14614](https://issues.redhat.com/browse/OCPBUGS-14614): Remove provisioning netowrk route from "lo" [#39](https://github.com/openshift/ironic-static-ip-manager/pull/39)
* [Full changelog](https://github.com/openshift/ironic-static-ip-manager/compare/c02fa80c7ed88d480d67a6c94be83811661f4631...c038d5a43e7355099d8f9845a8b14052437b787e)


### [keepalived-ipfailover](https://github.com/openshift/images/tree/f08cee3389569256aa288c33bad701a2704ce9db)

* [OCPBUGS-10176](https://issues.redhat.com/browse/OCPBUGS-10176): 15143307: Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART [#132](https://github.com/openshift/images/pull/132)
* [OCPBUGS-10163](https://issues.redhat.com/browse/OCPBUGS-10163): Updating openshift-enterprise-egress-router images to be consistent with ART [#131](https://github.com/openshift/images/pull/131)
* [OCPBUGS-10181](https://issues.redhat.com/browse/OCPBUGS-10181): 15143312: Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART [#133](https://github.com/openshift/images/pull/133)
* [NE-1304](https://issues.redhat.com/browse/NE-1304): container builds: switch to haproxy26 package [#141](https://github.com/openshift/images/pull/141)
* [OCPBUGS-11385](https://issues.redhat.com/browse/OCPBUGS-11385): Removed chroot setting [#137](https://github.com/openshift/images/pull/137)
* [Full changelog](https://github.com/openshift/images/compare/3d31a2af1497fa5dab68455be093da1bdbedc2fd...f08cee3389569256aa288c33bad701a2704ce9db)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/7fb2364e9dae2587253a86b577ba2a4b2869b781)

* [OCPBUGS-16790](https://issues.redhat.com/browse/OCPBUGS-16790): Change the permission of 80-openshift-network.conf to 600 [#570](https://github.com/openshift/sdn/pull/570)
* Dockerfile changes to build both rhel8 and rhel9 binaries [#559](https://github.com/openshift/sdn/pull/559)
* [SDN-3900](https://issues.redhat.com/browse/SDN-3900): rebase to 1.27.1 [#555](https://github.com/openshift/sdn/pull/555)
* [OCPBUGS-12644](https://issues.redhat.com/browse/OCPBUGS-12644): CVE-2022-41723 golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding [#538](https://github.com/openshift/sdn/pull/538)
* [OCPBUGS-3176](https://issues.redhat.com/browse/OCPBUGS-3176): Enable IP Forwarding if disabled [#549](https://github.com/openshift/sdn/pull/549)
* [OCPBUGS-13975](https://issues.redhat.com/browse/OCPBUGS-13975): fix possible concurrent map read/write [#546](https://github.com/openshift/sdn/pull/546)
* [Full changelog](https://github.com/openshift/sdn/compare/552c199872ed356d33857d6fde85546a5aaf9413...7fb2364e9dae2587253a86b577ba2a4b2869b781)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/86f31e2de5221ed4acd6509fa7a010a286089f1f)

* [AUTH-362](https://issues.redhat.com/browse/AUTH-362): v0.14.2 downstream [#70](https://github.com/openshift/kube-rbac-proxy/pull/70)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/27c255551673ba529ac6c9419abe13451afa3e4d...86f31e2de5221ed4acd6509fa7a010a286089f1f)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/d13d44fdb41fbdfae555e791982f040f29003e3e)

* Merge with `upstream/release-2.9` [#95](https://github.com/openshift/kube-state-metrics/pull/95)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/aa20a48cd389a5ab09b2a41a9bb4ce11832ceb68...d13d44fdb41fbdfae555e791982f040f29003e3e)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/8558e14a116804168506d06e96eac5a79913a6eb)

* bump(*): vendor bump to sync with kubernetes fork [#198](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/198)
* [OCPBUGS-10153](https://issues.redhat.com/browse/OCPBUGS-10153): Updating ose-kube-storage-version-migrator images to be consistent with ART [#194](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/194)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/bad104d13ba95bc850f5aaf96436f793d7985864...8558e14a116804168506d06e96eac5a79913a6eb)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/1255735fc177ba34546e755f632e585d76f86e06)

* Updating ose-kubevirt-csi-driver-rhel8 images to be consistent with ART [#20](https://github.com/openshift/kubevirt-csi-driver/pull/20)
* [CNV-29315](https://issues.redhat.com/browse/CNV-29315): kubevirt-csi unable to unpublish volumes in the event a VM is unexpectedly destroyed [#21](https://github.com/openshift/kubevirt-csi-driver/pull/21)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/efa0b9432bf0f44a965dc978ada75ea9b0f3e511...1255735fc177ba34546e755f632e585d76f86e06)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/8926a294348d3791040748774b0ac0892b968494)

* Merge https://opendev.org/openstack/kuryr-kubernetes:master into master [#739](https://github.com/openshift/kuryr-kubernetes/pull/739)
* Merge https://opendev.org/openstack/kuryr-kubernetes:master into master [#730](https://github.com/openshift/kuryr-kubernetes/pull/730)
* [OCPBUGS-15239](https://issues.redhat.com/browse/OCPBUGS-15239): Remove unneeded grpcio dependencies from RPM [#734](https://github.com/openshift/kuryr-kubernetes/pull/734)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/179b1138ef8a3d506a5113e5b158382486be3a57...8926a294348d3791040748774b0ac0892b968494)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/c72b6440910ad8261a27a2a93a8dc8f538d86aa7)

* [OCPCLOUD-2014](https://issues.redhat.com/browse/OCPCLOUD-2014): Switch Azure credentials request to use explicit permissions [#1152](https://github.com/openshift/machine-api-operator/pull/1152)
* [OCPBUGS-16925](https://issues.redhat.com/browse/OCPBUGS-16925): only attempt to remove finalizers if staticIPFeatureGateEnabled [#1160](https://github.com/openshift/machine-api-operator/pull/1160)
* install/0000_99_machine-api-operator_00_tombstones: Drop obsolete file [#1159](https://github.com/openshift/machine-api-operator/pull/1159)
* [OCPBUGS-16307](https://issues.redhat.com/browse/OCPBUGS-16307): default instance type for Azure based on the architecture (+ gcp) [#1155](https://github.com/openshift/machine-api-operator/pull/1155)
* [MGMT-13630](https://issues.redhat.com/browse/MGMT-13630): Add Azure Confidential VM and TrustedLaunch for VMs webhook validations [#1157](https://github.com/openshift/machine-api-operator/pull/1157)
* [SPLAT-845](https://issues.redhat.com/browse/SPLAT-845): add support for the capv NetworkDeviceSpec [#1079](https://github.com/openshift/machine-api-operator/pull/1079)
* Fix data race conditions in unit tests [#1156](https://github.com/openshift/machine-api-operator/pull/1156)
* reconcile status when the clusteroperator changes [#1154](https://github.com/openshift/machine-api-operator/pull/1154)
* [MULTIARCH-3693](https://issues.redhat.com/browse/MULTIARCH-3693): Add policies to operate on VPC loadbalacers [#1153](https://github.com/openshift/machine-api-operator/pull/1153)
* Add feature gate for disabling the MHC controller [#1151](https://github.com/openshift/machine-api-operator/pull/1151)
* Bump openshift/api package [#1150](https://github.com/openshift/machine-api-operator/pull/1150)
* add capability annotation [#1119](https://github.com/openshift/machine-api-operator/pull/1119)
* MachineAPIOperatorMetricsCollectionFailing to warning [#1149](https://github.com/openshift/machine-api-operator/pull/1149)
* [CCO-321](https://issues.redhat.com/browse/CCO-321): Add support for feature-gating specific providers [#1140](https://github.com/openshift/machine-api-operator/pull/1140)
* [MIXEDARCH-129](https://issues.redhat.com/browse/MIXEDARCH-129): Adds the MergeCommaSeparatedKeyValues method in the util package [#1147](https://github.com/openshift/machine-api-operator/pull/1147)
* updated hacking-guide.md to direct customers to open up issues on Jir… [#1139](https://github.com/openshift/machine-api-operator/pull/1139)
* [OCPBUGS-13132](https://issues.redhat.com/browse/OCPBUGS-13132): Golang update to 1.20 [#1146](https://github.com/openshift/machine-api-operator/pull/1146)
* [OCPBUGS-13956](https://issues.redhat.com/browse/OCPBUGS-13956): Bump controller-runtime to v0.15.0 [#1145](https://github.com/openshift/machine-api-operator/pull/1145)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/b256cd8c71ba40e8c03ac70c026b04385d6a257b...c72b6440910ad8261a27a2a93a8dc8f538d86aa7)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/e386166bb2026c73c53439e4f0b8a960061b9882)

* [MCO-605](https://issues.redhat.com/browse/MCO-605): MCO-550: Remove Certificates from MachineConfig [#3787](https://github.com/openshift/machine-config-operator/pull/3787)
* [MCO-573](https://issues.redhat.com/browse/MCO-573): Wire up security/trust/pull secrets between rpm-ostree and internal registry [#3806](https://github.com/openshift/machine-config-operator/pull/3806)
* [OCPBUGS-17701](https://issues.redhat.com/browse/OCPBUGS-17701): daemon: igmore mounting MCD pod content when target is "/" [#3860](https://github.com/openshift/machine-config-operator/pull/3860)
* mcs: Use certwatcher [#3744](https://github.com/openshift/machine-config-operator/pull/3744)
* [MCO-729](https://issues.redhat.com/browse/MCO-729): BuildController should allow cluster admins to provide a custom Dockerfile [#3847](https://github.com/openshift/machine-config-operator/pull/3847)
* [MCO-564](https://issues.redhat.com/browse/MCO-564): Make NodeController aware of BuildController [#3817](https://github.com/openshift/machine-config-operator/pull/3817)
* [OCPBUGS-17568](https://issues.redhat.com/browse/OCPBUGS-17568): Agent-based install process the container machine-config-controller will be oom [#3862](https://github.com/openshift/machine-config-operator/pull/3862)
* [OPNET-343](https://issues.redhat.com/browse/OPNET-343): Restore node-ip for kubelet in dual-stack vSphere [#3859](https://github.com/openshift/machine-config-operator/pull/3859)
* OCPBUGS-17683 replace .. with : on registry CA file paths [#3854](https://github.com/openshift/machine-config-operator/pull/3854)
* operator: remove metrics related log [#3855](https://github.com/openshift/machine-config-operator/pull/3855)
* [MCO-565](https://issues.redhat.com/browse/MCO-565): MCO-568: MCO-659: MCO-660 On-cluster build opt-in function, building machine-os-builder stub, RBAC and service acct inclusions. Deletes deployment rather than scale down to 0 without label [#3834](https://github.com/openshift/machine-config-operator/pull/3834)
* [MCO-588](https://issues.redhat.com/browse/MCO-588): Update ignition spec to 3.4, disallow ignition KernelArguments for now [#3814](https://github.com/openshift/machine-config-operator/pull/3814)
* [OCPBUGS-17433](https://issues.redhat.com/browse/OCPBUGS-17433): Sync featuregate controller during the node config controller sync [#3846](https://github.com/openshift/machine-config-operator/pull/3846)
* [OCPBUGS-8938](https://issues.redhat.com/browse/OCPBUGS-8938): OCPBUGS-15202: MCO-555: kube-rbac-proxy addition [#3663](https://github.com/openshift/machine-config-operator/pull/3663)
* [MCO-654](https://issues.redhat.com/browse/MCO-654): forcefile should always trigger an OS update [#3790](https://github.com/openshift/machine-config-operator/pull/3790)
* [OCPBUGS-14945](https://issues.redhat.com/browse/OCPBUGS-14945): add HostToContainer propagation to all hostPath volume mounts [#3792](https://github.com/openshift/machine-config-operator/pull/3792)
* [MCO-532](https://issues.redhat.com/browse/MCO-532): Finish lease type migration [#3842](https://github.com/openshift/machine-config-operator/pull/3842)
* [OCPBUGS-13825](https://issues.redhat.com/browse/OCPBUGS-13825): The machine-config-controller pod restart in SNO+1 causing daemonsets to restart [#3838](https://github.com/openshift/machine-config-operator/pull/3838)
* [OCPBUGS-14965](https://issues.redhat.com/browse/OCPBUGS-14965): Run hostnamectl with systemd-run [#3746](https://github.com/openshift/machine-config-operator/pull/3746)
* install: Fix dash-to-hyhen for 04_kube_rbac_proxy_config.yaml prefix [#3837](https://github.com/openshift/machine-config-operator/pull/3837)
* [OCPNODE-1714](https://issues.redhat.com/browse/OCPNODE-1714): files: add skip_mount_home to storage.conf [#3777](https://github.com/openshift/machine-config-operator/pull/3777)
* [OCPBUGS-16227](https://issues.redhat.com/browse/OCPBUGS-16227): make sure sshKey are not emptied out on firstboot [#3829](https://github.com/openshift/machine-config-operator/pull/3829)
* daemon: Two minor fixes for reexec [#3835](https://github.com/openshift/machine-config-operator/pull/3835)
* daemon: Remove even more dead legacy OS update code [#3820](https://github.com/openshift/machine-config-operator/pull/3820)
* [MCO-552](https://issues.redhat.com/browse/MCO-552): implement the ability for the MCO to handle image registry certificates [#3770](https://github.com/openshift/machine-config-operator/pull/3770)
* [OCPBUGS-17156](https://issues.redhat.com/browse/OCPBUGS-17156): daemon: Always replace binary [#3832](https://github.com/openshift/machine-config-operator/pull/3832)
* Revert "daemon: Make binary writing idempotent" [#3831](https://github.com/openshift/machine-config-operator/pull/3831)
* [OCPBUGS-16921](https://issues.redhat.com/browse/OCPBUGS-16921): daemon: Make binary writing idempotent [#3825](https://github.com/openshift/machine-config-operator/pull/3825)
* Revert "MCO-565: MCO-568: MCO-659: MCO-660 On-cluster build opt-in function, building machine-os-builder stub, RBAC and service acct inclusions" [#3830](https://github.com/openshift/machine-config-operator/pull/3830)
* Revert " add Passwd to bootstrap served ignition" [#3828](https://github.com/openshift/machine-config-operator/pull/3828)
* [OCPBUGS-15367](https://issues.redhat.com/browse/OCPBUGS-15367): The kubeconfig copied on to each node has 644 permissions [#3808](https://github.com/openshift/machine-config-operator/pull/3808)
* [MCO-597](https://issues.redhat.com/browse/MCO-597): Remove the MCO's dependency on journal reads [#3822](https://github.com/openshift/machine-config-operator/pull/3822)
* fix certExpiry description [#3823](https://github.com/openshift/machine-config-operator/pull/3823)
* [OCPBUGS-16227](https://issues.redhat.com/browse/OCPBUGS-16227): add Passwd to bootstrap served ignition [#3811](https://github.com/openshift/machine-config-operator/pull/3811)
* [MCO-565](https://issues.redhat.com/browse/MCO-565): MCO-568: MCO-659: MCO-660 On-cluster build opt-in function, building machine-os-builder stub, RBAC and service acct inclusions [#3763](https://github.com/openshift/machine-config-operator/pull/3763)
* [OCPNODE-1717](https://issues.redhat.com/browse/OCPNODE-1717): Make cgroupsv2 default in OCP-4.14 [#3789](https://github.com/openshift/machine-config-operator/pull/3789)
* [OCPNODE-1655](https://issues.redhat.com/browse/OCPNODE-1655): Apply node-cluster dashboard as a config map [#3708](https://github.com/openshift/machine-config-operator/pull/3708)
* [MCO-607](https://issues.redhat.com/browse/MCO-607): MCO-237: Keep track of certs in ControllerConfigStatus [#3756](https://github.com/openshift/machine-config-operator/pull/3756)
* [MCO-687](https://issues.redhat.com/browse/MCO-687): Fix metrics e2e test [#3813](https://github.com/openshift/machine-config-operator/pull/3813)
* [MCO-585](https://issues.redhat.com/browse/MCO-585): MCO-569: MCO-563: MCO-586: Introduces BuildController [#3731](https://github.com/openshift/machine-config-operator/pull/3731)
* MCO MCO-424: daemon: Remove old legacy OS update path [#3583](https://github.com/openshift/machine-config-operator/pull/3583)
* [MGMT-14843](https://issues.redhat.com/browse/MGMT-14843): ovs-configuration service should copy the statically configured address even if the method isn't manual. [#3774](https://github.com/openshift/machine-config-operator/pull/3774)
* [OCPBUGS-16128](https://issues.redhat.com/browse/OCPBUGS-16128): daemon: Copy matching binary to host, re-exec with it [#3799](https://github.com/openshift/machine-config-operator/pull/3799)
* [MCO-596](https://issues.redhat.com/browse/MCO-596): Deprecate the login monitor [#3791](https://github.com/openshift/machine-config-operator/pull/3791)
* kubevirt: Configure IPv6 arp proxy default gw [#3780](https://github.com/openshift/machine-config-operator/pull/3780)
* operator: Stop mounting /etc/kubernetes/ca.crt [#3730](https://github.com/openshift/machine-config-operator/pull/3730)
* [OCPBUGS-15613](https://issues.redhat.com/browse/OCPBUGS-15613): Soften grep pattern for ingress default router [#3775](https://github.com/openshift/machine-config-operator/pull/3775)
* Bug OCPBUGS-15233: OpenStack: fix IPv6 configuration [#3785](https://github.com/openshift/machine-config-operator/pull/3785)
* [OCPBUGS-11997](https://issues.redhat.com/browse/OCPBUGS-11997): Prevent NM from unsetting the hostname [#3794](https://github.com/openshift/machine-config-operator/pull/3794)
* add wasm extension [#3776](https://github.com/openshift/machine-config-operator/pull/3776)
* set MCO namespace on all events [#3767](https://github.com/openshift/machine-config-operator/pull/3767)
* OpenStack: restrict IPv6 configuration [#3781](https://github.com/openshift/machine-config-operator/pull/3781)
* Update 0000_90_machine-config-operator_01_prometheus-rules.yaml [#3779](https://github.com/openshift/machine-config-operator/pull/3779)
* [OCPBUGS-14674](https://issues.redhat.com/browse/OCPBUGS-14674): set pool alert back to zero in more default scenarios. [#3733](https://github.com/openshift/machine-config-operator/pull/3733)
* [OCPBUGS-10115](https://issues.redhat.com/browse/OCPBUGS-10115): update image to use golang-1.20 [#3766](https://github.com/openshift/machine-config-operator/pull/3766)
* [OCPBUGS-15728](https://issues.redhat.com/browse/OCPBUGS-15728): Fix machine config drifts when deploying with platform external [#3773](https://github.com/openshift/machine-config-operator/pull/3773)
* faq: Talk about "no enabled repositories" [#3772](https://github.com/openshift/machine-config-operator/pull/3772)
* [OCPBUGS-14185](https://issues.redhat.com/browse/OCPBUGS-14185): change the message annotation to description [#3721](https://github.com/openshift/machine-config-operator/pull/3721)
* [OKD-174](https://issues.redhat.com/browse/OKD-174): Dockerfile: OKD: Reenable extensions image on SCOS [#3741](https://github.com/openshift/machine-config-operator/pull/3741)
* [OCPBUGS-15575](https://issues.redhat.com/browse/OCPBUGS-15575): Dockerfile: pin to nmstate-2.2.9 [#3769](https://github.com/openshift/machine-config-operator/pull/3769)
* [OCPBUGS-10924](https://issues.redhat.com/browse/OCPBUGS-10924): Switch default SA to machine-config-operator [#3740](https://github.com/openshift/machine-config-operator/pull/3740)
* trivial: Fix namespace for kube api server operator [#3762](https://github.com/openshift/machine-config-operator/pull/3762)
* OCPBUGS-8403 Deleting SSH keys / password hashes should not degrade MachineConfigPool / node [#3606](https://github.com/openshift/machine-config-operator/pull/3606)
* OWNERS: Update onwer list [#3761](https://github.com/openshift/machine-config-operator/pull/3761)
* [OCPBUGS-4820](https://issues.redhat.com/browse/OCPBUGS-4820): Controller version mismatch causing degradation during upgrades [#3738](https://github.com/openshift/machine-config-operator/pull/3738)
* [MCO-640](https://issues.redhat.com/browse/MCO-640): Move all log functions to klog [#3734](https://github.com/openshift/machine-config-operator/pull/3734)
* [OCPBUGS-14399](https://issues.redhat.com/browse/OCPBUGS-14399): Minor fix to support `protectKernelDefaults` field in Kubelet Config [#3736](https://github.com/openshift/machine-config-operator/pull/3736)
* [MCO-595](https://issues.redhat.com/browse/MCO-595): Remove MCO's pending config workflow [#3700](https://github.com/openshift/machine-config-operator/pull/3700)
* [OCPCLOUD-2010](https://issues.redhat.com/browse/OCPCLOUD-2010): Re-vendor api and library-go for external platform support [#3745](https://github.com/openshift/machine-config-operator/pull/3745)
* bootstrap: Clarify that "root ca" is really "MCS CA" [#3728](https://github.com/openshift/machine-config-operator/pull/3728)
* add ipsec extension [#3726](https://github.com/openshift/machine-config-operator/pull/3726)
* OpenStack: configure ipv6 addresses [#3705](https://github.com/openshift/machine-config-operator/pull/3705)
* [OCPBUGS-13656](https://issues.redhat.com/browse/OCPBUGS-13656): MCO-632: Update kube deps to 1.27.2 [#3735](https://github.com/openshift/machine-config-operator/pull/3735)
* [OCPBUGS-14612](https://issues.redhat.com/browse/OCPBUGS-14612): Improve logging for IPI deployments [#3725](https://github.com/openshift/machine-config-operator/pull/3725)
* [OCPBUGS-4370](https://issues.redhat.com/browse/OCPBUGS-4370): Add label to VIP via keepalived [#3683](https://github.com/openshift/machine-config-operator/pull/3683)
* [OCPBUGS-14793](https://issues.redhat.com/browse/OCPBUGS-14793): Allow userfaultfd syscall to be used by unprivileged users [#3724](https://github.com/openshift/machine-config-operator/pull/3724)
* [OCPBUGS-14272](https://issues.redhat.com/browse/OCPBUGS-14272): Race condition in TestMCDRotatesCertsOnPausedPool [#3718](https://github.com/openshift/machine-config-operator/pull/3718)
* [OCPBUGS-13547](https://issues.redhat.com/browse/OCPBUGS-13547): [OCPCLOUD-2034] Update Library-go and API for new featuregate changes [#3688](https://github.com/openshift/machine-config-operator/pull/3688)
* [OCPBUGS-2177](https://issues.redhat.com/browse/OCPBUGS-2177): MCO-634: add support for a node pool hierarchy [#3505](https://github.com/openshift/machine-config-operator/pull/3505)
* [OCPBUGS-13860](https://issues.redhat.com/browse/OCPBUGS-13860): Fix missing apiVersion and kind fields for embedded resources [#3713](https://github.com/openshift/machine-config-operator/pull/3713)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/0dcaf88c8ff89f393a06833cf48e8df7fe6586a9...e386166bb2026c73c53439e4f0b8a960061b9882)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/9dd02305b4cbaf521dd73fa1a95e4b4a9e8a01c2)

* [OCPBUGS-13532](https://issues.redhat.com/browse/OCPBUGS-13532): Reconcile when networkData Secret changes [#94](https://github.com/openshift/image-customization-controller/pull/94)
* [OCPBUGS-9072](https://issues.redhat.com/browse/OCPBUGS-9072): Pass BareMetalHost name to IPA (take 2) [#93](https://github.com/openshift/image-customization-controller/pull/93)
* [OCPBUGS-15909](https://issues.redhat.com/browse/OCPBUGS-15909): Revert: Pass BareMetalHost name to IPA" [#92](https://github.com/openshift/image-customization-controller/pull/92)
* [OCPBUGS-9072](https://issues.redhat.com/browse/OCPBUGS-9072): Pass BareMetalHost name to IPA [#87](https://github.com/openshift/image-customization-controller/pull/87)
* [OCPBUGS-15349](https://issues.redhat.com/browse/OCPBUGS-15349): Uplift assisted-image-service to remove gin-gonic dependency [#91](https://github.com/openshift/image-customization-controller/pull/91)
* [OCPBUGS-13532](https://issues.redhat.com/browse/OCPBUGS-13532): Actually respond to changes in Secrets [#90](https://github.com/openshift/image-customization-controller/pull/90)
* [OCPBUGS-13532](https://issues.redhat.com/browse/OCPBUGS-13532): Respond to changes in Secrets [#88](https://github.com/openshift/image-customization-controller/pull/88)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/40c9f149b90f66d6dca1429c79eb5ffcb8e37c21...9dd02305b4cbaf521dd73fa1a95e4b4a9e8a01c2)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/c68330793434f77ff9baa721fcc77473e5528184)

* Fix condition check for logging [#29](https://github.com/openshift/machine-os-images/pull/29)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/74958dc60aba29d6b9471283f1a9e4c1676979aa...c68330793434f77ff9baa721fcc77473e5528184)


### [multus-cni](https://github.com/openshift/multus-cni/tree/88339682adc7b278273df7bb8da02e396b193af7)

* Use container base image's /etc/os-release to copy multus binary [#179](https://github.com/openshift/multus-cni/pull/179)
* Change /usr/src/multus-cni/bin to rhel8 based one [#178](https://github.com/openshift/multus-cni/pull/178)
* Cherry pick upstream fix [#177](https://github.com/openshift/multus-cni/pull/177)
* Upstream sync 202308 [#176](https://github.com/openshift/multus-cni/pull/176)
* This change introduces wait to generate config until API is ready [#175](https://github.com/openshift/multus-cni/pull/175)
* Upstream sync to 202307, 99c4481 [#168](https://github.com/openshift/multus-cni/pull/168)
* Add rhel9 binary for multus [#173](https://github.com/openshift/multus-cni/pull/173)
* [Full changelog](https://github.com/openshift/multus-cni/compare/56f2f0dceca9a5de5896665d0a14b5e0cbed810c...88339682adc7b278273df7bb8da02e396b193af7)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/0d76ba791dc3432c51c9a9fa6b95e41034af7988)

* [OCPBUGS-974](https://issues.redhat.com/browse/OCPBUGS-974): Sync upstream (#30) [#30](https://github.com/openshift/multus-networkpolicy/pull/30)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/cf5e9cf88fa4ee47ab3ee556fe00462590814aac...0d76ba791dc3432c51c9a9fa6b95e41034af7988)


### [multus-route-override-cni](https://github.com/openshift/route-override-cni/tree/078aee5c466ffc79126a34b85953534c6674f28c)

* 15393552: Updating ose-multus-route-override-cni images to be consistent with ART [#47](https://github.com/openshift/route-override-cni/pull/47)
* 15393552: Updating ose-multus-route-override-cni images to be consistent with ART [#45](https://github.com/openshift/route-override-cni/pull/45)
* Revert ART changes to fix rhel9 base binary [#44](https://github.com/openshift/route-override-cni/pull/44)
* Updating ose-multus-route-override-cni images to be consistent with ART [#43](https://github.com/openshift/route-override-cni/pull/43)
* Fix Dockerfile to use rhel9 [#42](https://github.com/openshift/route-override-cni/pull/42)
* Updating ose-multus-route-override-cni images to be consistent with ART [#41](https://github.com/openshift/route-override-cni/pull/41)
* Add rhel9 binary [#40](https://github.com/openshift/route-override-cni/pull/40)
* [Full changelog](https://github.com/openshift/route-override-cni/compare/67fc2ba6f2b8cd4739b143122852865ce6369835...078aee5c466ffc79126a34b85953534c6674f28c)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/7e454367b5994241feb5dc713065508c5534f8f3)

* [Bug 16002](https://bugzilla.redhat.com/show_bug.cgi?id=16002): Change default binary to RHEL8 image [#172](https://github.com/openshift/whereabouts-cni/pull/172)
* [OCPBUGS-15905](https://issues.redhat.com/browse/OCPBUGS-15905): Denormalize IP name before checking if pod is alive [Backport 4.14] [#167](https://github.com/openshift/whereabouts-cni/pull/167)
* [Bug 16136](https://bugzilla.redhat.com/show_bug.cgi?id=16136): Introduce entrypoint.sh to call ip-control-loop based on RHEL ver [#147](https://github.com/openshift/whereabouts-cni/pull/147)
* Downstream sync july23 [#137](https://github.com/openshift/whereabouts-cni/pull/137)
* Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART [#150](https://github.com/openshift/whereabouts-cni/pull/150)
* Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART [#149](https://github.com/openshift/whereabouts-cni/pull/149)
* Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART [#148](https://github.com/openshift/whereabouts-cni/pull/148)
* Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART [#146](https://github.com/openshift/whereabouts-cni/pull/146)
* Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART [#143](https://github.com/openshift/whereabouts-cni/pull/143)
* Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART [#142](https://github.com/openshift/whereabouts-cni/pull/142)
* Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART [#141](https://github.com/openshift/whereabouts-cni/pull/141)
* Restores RHEL specific binary copy and updates to rhel9/8 [#140](https://github.com/openshift/whereabouts-cni/pull/140)
* Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART [#136](https://github.com/openshift/whereabouts-cni/pull/136)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/6d2ed2b853faf0efab68bb5ecedaa03552f3f47b...7e454367b5994241feb5dc713065508c5534f8f3)


### [must-gather](https://github.com/openshift/must-gather/tree/22e816b3bbcc6f2edd9032eee0e60147ccd3f9b9)

* Split gather_network_logs into basics and extras [#375](https://github.com/openshift/must-gather/pull/375)
* Added gathering script for SNOs with workload partitioning [#373](https://github.com/openshift/must-gather/pull/373)
* Add csi-proxy logs collection in must-gather for Windows nodes [#374](https://github.com/openshift/must-gather/pull/374)
* [SDN-3687](https://issues.redhat.com/browse/SDN-3687): Support gathering DBs for OVNK-Interconnect mode [#370](https://github.com/openshift/must-gather/pull/370)
* Collect information relevant to PerformanceProfile and low latency tuning [#345](https://github.com/openshift/must-gather/pull/345)
* gather_network_logs: multus: Fix typo in error redirection [#371](https://github.com/openshift/must-gather/pull/371)
* Collect leases.coordination.k8s.io from each namesapce [#366](https://github.com/openshift/must-gather/pull/366)
* Create a generic "get_operator_ns" util function [#368](https://github.com/openshift/must-gather/pull/368)
* Assert that only one subscription exists [#367](https://github.com/openshift/must-gather/pull/367)
* [MCO-608](https://issues.redhat.com/browse/MCO-608): Gather MCO's on-disk configs from degraded nodes [#361](https://github.com/openshift/must-gather/pull/361)
* Gather ostree related bits [#353](https://github.com/openshift/must-gather/pull/353)
* [OCPBUGS-14984](https://issues.redhat.com/browse/OCPBUGS-14984): Collect Mellanox firmware information [#365](https://github.com/openshift/must-gather/pull/365)
* [OCPBUGS-14025](https://issues.redhat.com/browse/OCPBUGS-14025): Add gather_vsphere [#363](https://github.com/openshift/must-gather/pull/363)
* [Full changelog](https://github.com/openshift/must-gather/compare/fc7a068122ebe723ec683c4fe5f280b1e573d834...22e816b3bbcc6f2edd9032eee0e60147ccd3f9b9)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/29f61f6b05d958c40e7213937064f26a63a8e6d9)

* Add rhel9 binary [#57](https://github.com/openshift/bond-cni/pull/57)
* Updating ose-network-interface-bond-cni images to be consistent with ART [#54](https://github.com/openshift/bond-cni/pull/54)
* [Full changelog](https://github.com/openshift/bond-cni/compare/1d8c1b078339d8a29f5917965047fbef83df008f...29f61f6b05d958c40e7213937064f26a63a8e6d9)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/26574c6b3b74010701a27382084a456c5dddbd02)

* Revert "Remove e2e tests that consistently fail in 4.13 (#65)" (#76) [#65](https://github.com/openshift/network-metrics-daemon/pull/65)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/9e2df1c32f4269103a9f58cd881dd56d927595bd...26574c6b3b74010701a27382084a456c5dddbd02)


### [network-tools](https://github.com/openshift/network-tools/tree/4d34d616da14681c9a4536776bdd81f4492d33c2)

* ovn-db-run-locally: gracefully handle non-clustered dbs [#84](https://github.com/openshift/network-tools/pull/84)
* [Full changelog](https://github.com/openshift/network-tools/compare/d8b16716cb5eba85c165cc60226a5644d0c3590a...4d34d616da14681c9a4536776bdd81f4492d33c2)


### [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix/tree/12bb3788d9b72fc57c2a114bd711d2ad29056ca6)

* [OCPBUGS-17184](https://issues.redhat.com/browse/OCPBUGS-17184): Updating ose-nutanix-cloud-controller-manager images to be consistent with ART [#12](https://github.com/openshift/cloud-provider-nutanix/pull/12)
* [OCPBUGS-17054](https://issues.redhat.com/browse/OCPBUGS-17054): Nutanix CCM should scope secret informers per namespace [#17](https://github.com/openshift/cloud-provider-nutanix/pull/17)
* [Full changelog](https://github.com/openshift/cloud-provider-nutanix/compare/b52671beee487b9ffb90e311b3b704626b8f4f64...12bb3788d9b72fc57c2a114bd711d2ad29056ca6)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/5f51db783e6a974fb8d167851506c16628bc7260)

* [OCPBUGS-12098](https://issues.redhat.com/browse/OCPBUGS-12098): Updating ose-nutanix-machine-controllers images to be consistent with ART [#47](https://github.com/openshift/machine-api-provider-nutanix/pull/47)
* [OCPCLOUD-2053](https://issues.redhat.com/browse/OCPCLOUD-2053): Update dependencies to K8s 1.27 [#49](https://github.com/openshift/machine-api-provider-nutanix/pull/49)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/158dff8825b1c334cc6d50a770c42ea0aeeedb1d...5f51db783e6a974fb8d167851506c16628bc7260)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/a18cb3e10639b5789f7c291707064743feb105e2)

* bump k8s to 1.27.3 [#89](https://github.com/openshift/oauth-apiserver/pull/89)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/41c2dfea104b3c686a00b068654843b48b4db53f...a18cb3e10639b5789f7c291707064743feb105e2)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/55e0cd172625b3419c698014fa233e54021af9a3)

* [OCPBUGS-16459](https://issues.redhat.com/browse/OCPBUGS-16459): bump kube and lib-go to get rid of goproxy dep [#260](https://github.com/openshift/oauth-proxy/pull/260)
* fix route apiVersion [#257](https://github.com/openshift/oauth-proxy/pull/257)
* Updating golang-github-openshift-oauth-proxy images to be consistent with ART [#251](https://github.com/openshift/oauth-proxy/pull/251)
* [APPSRE-7970](https://issues.redhat.com/browse/APPSRE-7970): Add support for configuring upstream timeout [#258](https://github.com/openshift/oauth-proxy/pull/258)
* [OCPBUGS-14033](https://issues.redhat.com/browse/OCPBUGS-14033): Handle TERM signal gracefully [#255](https://github.com/openshift/oauth-proxy/pull/255)
* [AUTH-373](https://issues.redhat.com/browse/AUTH-373): add audit-ID headers to TokenReview and SAR requests [#252](https://github.com/openshift/oauth-proxy/pull/252)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/03e5b13b8b7087dd70abfd70efb4c5b92f800a4f...55e0cd172625b3419c698014fa233e54021af9a3)


### [oauth-server](https://github.com/openshift/oauth-server/tree/a06e5302aa7cfc99bd3ab003e3790c36873a181c)

* [OCPBUGS-5233](https://issues.redhat.com/browse/OCPBUGS-5233): update osin to latest version [#128](https://github.com/openshift/oauth-server/pull/128)
* [Full changelog](https://github.com/openshift/oauth-server/compare/32bf488a9d3bf431d13edbeb637766a197dac15d...a06e5302aa7cfc99bd3ab003e3790c36873a181c)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/dba4a0cfd0a9fd29c1e4b5bc1da737e1153cc679)

* [CFE-825](https://issues.redhat.com/browse/CFE-825): As a oc-mirror user, I would like mirrored operator catalogs to have valid caches (#651) [#651](https://github.com/openshift/oc-mirror/pull/651)
* CFE-902 feat: removes go workspace due to incompatibility on ART builds (#672) [#672](https://github.com/openshift/oc-mirror/pull/672)
* CFE-902 feat: adds go workspace to support multi-module (#670) [#670](https://github.com/openshift/oc-mirror/pull/670)
* add go.mod files to testdata directories (#669) [#669](https://github.com/openshift/oc-mirror/pull/669)
* fixing `oc-mirror version` when run from read-only fs (#660) [#660](https://github.com/openshift/oc-mirror/pull/660)
* Make local storage port configurable via command line (#668) [#668](https://github.com/openshift/oc-mirror/pull/668)
* Fix unit tests for local storage collector implementation (#667) [#667](https://github.com/openshift/oc-mirror/pull/667)
* [CFE-904](https://issues.redhat.com/browse/CFE-904): Create AdditionalImage Collector implem. based on registry as localStore (#666) [#666](https://github.com/openshift/oc-mirror/pull/666)
* v2 initial commit (#664) [#664](https://github.com/openshift/oc-mirror/pull/664)
* OCPBUGS-13871 docs: changes the help message for oci-registries-config flag (#663) [#663](https://github.com/openshift/oc-mirror/pull/663)
* [OCPBUGS-11754](https://issues.redhat.com/browse/OCPBUGS-11754): add cleanup of /tmp directories (#655) [#655](https://github.com/openshift/oc-mirror/pull/655)
* [CFE-875](https://issues.redhat.com/browse/CFE-875): Unlock MirrorToDisk and DiskToMirror workflows for local oci catalogs (#662) [#662](https://github.com/openshift/oc-mirror/pull/662)
* Fix OCPBUGS-15329 - OCI index found, but accept header does not support OCI indexes (#658) [#658](https://github.com/openshift/oc-mirror/pull/658)
* Enable mirroring of the multi release image (#657) [#657](https://github.com/openshift/oc-mirror/pull/657)
* revendor to the latest oc (#656) [#656](https://github.com/openshift/oc-mirror/pull/656)
* Replacing the hard coded path with graphDataMountPath (#585) [#585](https://github.com/openshift/oc-mirror/pull/585)
* [CFE-859](https://issues.redhat.com/browse/CFE-859): Removing flag use-oci-feature starting release-4.14 (#622) [#622](https://github.com/openshift/oc-mirror/pull/622)
* [CFE-783](https://issues.redhat.com/browse/CFE-783): A variety of changes needed for correct operation with multi architecture catalogs (#611) [#611](https://github.com/openshift/oc-mirror/pull/611)
* [MULTIARCH-3440](https://issues.redhat.com/browse/MULTIARCH-3440): refine multiarch support for test-unit and test-e2e using dockerfile and add ppc64le build to Makefile (#624) [#624](https://github.com/openshift/oc-mirror/pull/624)
* Add ImageSetConfig examples (#610) [#610](https://github.com/openshift/oc-mirror/pull/610)
* [OCPBUGS-13871](https://issues.redhat.com/browse/OCPBUGS-13871): fix: changes on help info content (#653) [#653](https://github.com/openshift/oc-mirror/pull/653)
* [OCPBUGS-588](https://issues.redhat.com/browse/OCPBUGS-588): minVersion in ImageSetConfiguration seems to be ignored (#603) [#603](https://github.com/openshift/oc-mirror/pull/603)
* Fix OCPBUGS-14194 (#649) [#649](https://github.com/openshift/oc-mirror/pull/649)
* Fix OCPBUGS-14402 (#652) [#652](https://github.com/openshift/oc-mirror/pull/652)
* [OCPBUGS-13332](https://issues.redhat.com/browse/OCPBUGS-13332): Create rfc 1035 compliant catalog source name (#636) [#636](https://github.com/openshift/oc-mirror/pull/636)
* fix validateMapping OCPBUGS-13962 (#640) [#640](https://github.com/openshift/oc-mirror/pull/640)
* adds Jeremy Peterson to OWNERS file (#644) [#644](https://github.com/openshift/oc-mirror/pull/644)
* Chore: Remove Ross from OWNERS (#639) [#639](https://github.com/openshift/oc-mirror/pull/639)
* [OCPBUGS-13762](https://issues.redhat.com/browse/OCPBUGS-13762): make addRelatedImageToMapping multithreaded (#638) [#638](https://github.com/openshift/oc-mirror/pull/638)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/15ed390072b925c15deaa6854ea6033e34f1690e...dba4a0cfd0a9fd29c1e4b5bc1da737e1153cc679)


### [olm-rukpak](https://github.com/openshift/operator-framework-rukpak/tree/652f7c07d0c253ea55aecfeff352ca4db8bdd794)

* [OCPBUGS-16793](https://issues.redhat.com/browse/OCPBUGS-16793): openshift/Dockerfile: exclude unpack binary from FIPS build overrides [#33](https://github.com/openshift/operator-framework-rukpak/pull/33)
* Rename downstream overlay from service-ca-operator to openshift [#32](https://github.com/openshift/operator-framework-rukpak/pull/32)
* UPSTREAM: <carry>: add manifests to image [#31](https://github.com/openshift/operator-framework-rukpak/pull/31)
* Makefile,manifests: Add skeleton of default rukpak resources [#18](https://github.com/openshift/operator-framework-rukpak/pull/18)
* Introduce barebones build and unit testing GH actions [#14](https://github.com/openshift/operator-framework-rukpak/pull/14)
* Skeleton - k8s provisioner [#7](https://github.com/openshift/operator-framework-rukpak/pull/7)
* update README to include latest APIs [#5](https://github.com/openshift/operator-framework-rukpak/pull/5)
* Introduce a sanity github action check [#3](https://github.com/openshift/operator-framework-rukpak/pull/3)
* Init API defs [#1](https://github.com/openshift/operator-framework-rukpak/pull/1)
* Add barebones OWNERS file [#2](https://github.com/openshift/operator-framework-rukpak/pull/2)
* [Full changelog](https://github.com/openshift/operator-framework-rukpak/compare/243eee7c90a759cdac424780944ee6ff1f95be68...652f7c07d0c253ea55aecfeff352ca4db8bdd794)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/064c2d0ef0ecaeda2bcc4387eaaa7258cee5adcf)

* NE-1143 Adds route API changes to set/delete headers. [#380](https://github.com/openshift/openshift-apiserver/pull/380)
* [WRKLDS-728](https://issues.redhat.com/browse/WRKLDS-728): Disable apiservers [#366](https://github.com/openshift/openshift-apiserver/pull/366)
* add comments about ownership of validation [#384](https://github.com/openshift/openshift-apiserver/pull/384)
* add featuregates to server [#382](https://github.com/openshift/openshift-apiserver/pull/382)
* idms migrations [#318](https://github.com/openshift/openshift-apiserver/pull/318)
* Bump openshift/api to the latest release-4.14:head [#383](https://github.com/openshift/openshift-apiserver/pull/383)
* Upgrade distribution to v3 [#378](https://github.com/openshift/openshift-apiserver/pull/378)
* wire openapi v3 aggregation controller [#379](https://github.com/openshift/openshift-apiserver/pull/379)
* [OCPBUGS-11393](https://issues.redhat.com/browse/OCPBUGS-11393): Bump openshift/api [#368](https://github.com/openshift/openshift-apiserver/pull/368)
* [API-1586](https://issues.redhat.com/browse/API-1586): Bump k8s 1.27.2 [#371](https://github.com/openshift/openshift-apiserver/pull/371)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/aac3dd5bf0547e928103a0f718ca104b1bb13930...064c2d0ef0ecaeda2bcc4387eaaa7258cee5adcf)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/66b616997963132f90abd5dfdb11c75e82bdabde)

* use constant controller names [#265](https://github.com/openshift/openshift-controller-manager/pull/265)
* [OCPBUGS-16071](https://issues.redhat.com/browse/OCPBUGS-16071): Updating Kubernetes and other associated dependencies [#263](https://github.com/openshift/openshift-controller-manager/pull/263)
* update runtime-utils for idms migrations [#243](https://github.com/openshift/openshift-controller-manager/pull/243)
* [OCPBUGS-14461](https://issues.redhat.com/browse/OCPBUGS-14461): Kubernetes 0.27 [#261](https://github.com/openshift/openshift-controller-manager/pull/261)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/76ef4f658ee7a5e6e4038f2860ef2bb9bc36e579...66b616997963132f90abd5dfdb11c75e82bdabde)


### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/b9211ed8fa4eb7edfc3d96c6b4843eea6b3337cd)

* [OCPBUGS-12538](https://issues.redhat.com/browse/OCPBUGS-12538): bump x/net to v0.7.0 [#101](https://github.com/openshift/openshift-state-metrics/pull/101)
* [OCPBUGS-6343](https://issues.redhat.com/browse/OCPBUGS-6343): address CVE-2022-41717 [#100](https://github.com/openshift/openshift-state-metrics/pull/100)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/5843d45e43d162e810a08c554d160166bc79b6d3...b9211ed8fa4eb7edfc3d96c6b4843eea6b3337cd)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/5e20bfccc6b33ec84b9733ceeb22f932dbeac8d2)

* [STOR-1436](https://issues.redhat.com/browse/STOR-1436): Restart `openstack-cinder-csi-driver-controller` Pods if metrics-serving-cert changed [#128](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/128)
* Remove Dockerfile.rhel7 [#126](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/126)
* Configure User Agent [#123](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/123)
* [OCPBUGS-16654](https://issues.redhat.com/browse/OCPBUGS-16654): Revert revert "STOR-1065: Rework sidecar bindings to b… [#119](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/119)
* [OCPBUGS-16783](https://issues.redhat.com/browse/OCPBUGS-16783): Chore: Update OWNERS and OWNERS_ALIASES [#121](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/121)
* [OCPBUGS-16526](https://issues.redhat.com/browse/OCPBUGS-16526): Bump library-go to remove dependency on goproxy [#122](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/122)
* [OCPBUGS-16678](https://issues.redhat.com/browse/OCPBUGS-16678): Fix SCC admission failure race during initial deployment [#120](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/120)
* Revert "STOR-1065: Rework sidecar bindings to bind common ClusterRoles" [#118](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/118)
* [STOR-1065](https://issues.redhat.com/browse/STOR-1065): Rework sidecar bindings to bind common ClusterRoles [#117](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/117)
* [OCPBUGS-14824](https://issues.redhat.com/browse/OCPBUGS-14824): Bump cinder-csi-driver-operator library-go [#116](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/116)
* [STOR-1168](https://issues.redhat.com/browse/STOR-1168): Bump common libraries [#115](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/115)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/acfbdc0f548fb6fdb6fafa28b9383d6a71eff855...5e20bfccc6b33ec84b9733ceeb22f932dbeac8d2)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/cd7f2c158ebf269ab184aaa3f8df74b655c1f18f)

* Configure User Agent [#75](https://github.com/openshift/machine-api-provider-openstack/pull/75)
* Update README [#77](https://github.com/openshift/machine-api-provider-openstack/pull/77)
* [OCPBUGS-16586](https://issues.redhat.com/browse/OCPBUGS-16586): Bump goproxy [#74](https://github.com/openshift/machine-api-provider-openstack/pull/74)
* Rework how we build the container image [#76](https://github.com/openshift/machine-api-provider-openstack/pull/76)
* go.mod: Upgrade Gophercloud to v1.5.0 [#73](https://github.com/openshift/machine-api-provider-openstack/pull/73)
* [OSASINFRA-3063](https://issues.redhat.com/browse/OSASINFRA-3063): Bump CAPO to v0.7.2 [#72](https://github.com/openshift/machine-api-provider-openstack/pull/72)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/0d681c618fdb86bcabb3460cfa829bba8eba2e60...cd7f2c158ebf269ab184aaa3f8df74b655c1f18f)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/6a20d96c59a221d00a3a0c0784b1973dc214dc06)

* Add ncdc to DOWNSTREAM_OWNERS [#539](https://github.com/openshift/operator-framework-olm/pull/539)
* [OPRUN-3022](https://issues.redhat.com/browse/OPRUN-3022): Add support for make verify to sync script [#537](https://github.com/openshift/operator-framework-olm/pull/537)
* Add tmshort to owners [#535](https://github.com/openshift/operator-framework-olm/pull/535)
* fix the manifests generation [#533](https://github.com/openshift/operator-framework-olm/pull/533)
* Sync 2023 08 04 [#532](https://github.com/openshift/operator-framework-olm/pull/532)
* [OCPBUGS-17157](https://issues.redhat.com/browse/OCPBUGS-17157): sync [#531](https://github.com/openshift/operator-framework-olm/pull/531)
* [OCPBUGS-17157](https://issues.redhat.com/browse/OCPBUGS-17157): operator-registry: cherry-pick to be up-to-date [#526](https://github.com/openshift/operator-framework-olm/pull/526)
* [OCPBUGS-17157](https://issues.redhat.com/browse/OCPBUGS-17157): cmd/package-server-manager: add pprof endpoints [#527](https://github.com/openshift/operator-framework-olm/pull/527)
* [OPRUN-3021](https://issues.redhat.com/browse/OPRUN-3021): Improve README [#529](https://github.com/openshift/operator-framework-olm/pull/529)
* [OPRUN-2913](https://issues.redhat.com/browse/OPRUN-2913): Sync api, operator-registry, operator-lifecycle-manager downstream [#510](https://github.com/openshift/operator-framework-olm/pull/510)
* [OPRUN-2913](https://issues.redhat.com/browse/OPRUN-2913): Add DOWNSTREAM_OWNERS [#520](https://github.com/openshift/operator-framework-olm/pull/520)
* [OCPBUGS-10178](https://issues.redhat.com/browse/OCPBUGS-10178): Updating operator-lifecycle-manager images to be consistent with ART [#470](https://github.com/openshift/operator-framework-olm/pull/470)
* Allow cpb to be statically compiled / exempt from FIPS compliance [#511](https://github.com/openshift/operator-framework-olm/pull/511)
* update verification script to work across non-standard bash location [#505](https://github.com/openshift/operator-framework-olm/pull/505)
* [OCPBUGS-13128](https://issues.redhat.com/browse/OCPBUGS-13128): Retry initialization error conditions (#2979) [#502](https://github.com/openshift/operator-framework-olm/pull/502)
* Updating operator-registry images to be consistent with ART [#495](https://github.com/openshift/operator-framework-olm/pull/495)
* [OCPBUGS-13526](https://issues.redhat.com/browse/OCPBUGS-13526): fix dynamic conversion webhook [#490](https://github.com/openshift/operator-framework-olm/pull/490)
* [OPRUN-2995](https://issues.redhat.com/browse/OPRUN-2995): Remove dependency on cluster policy controller in favor of hardcoding [#498](https://github.com/openshift/operator-framework-olm/pull/498)
* [OPRUN-2941](https://issues.redhat.com/browse/OPRUN-2941): update cluster-policy-controller dependency [#494](https://github.com/openshift/operator-framework-olm/pull/494)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/b85e89137df437381313f01762d6c8f870a7567e...6a20d96c59a221d00a3a0c0784b1973dc214dc06)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/15c081de2f235e938abf10efc0b98f4d708621d2)

* [OCPBUGS-15158](https://issues.redhat.com/browse/OCPBUGS-15158): Scope Marketplace Operator RBAC [#528](https://github.com/operator-framework/operator-marketplace/pull/528)
* [OCPBUGS-17157](https://issues.redhat.com/browse/OCPBUGS-17157): defaults: add memory targets to CatalogSources [#527](https://github.com/operator-framework/operator-marketplace/pull/527)
* [OCPBUGS-17157](https://issues.redhat.com/browse/OCPBUGS-17157): manifests: tune memory use [#526](https://github.com/operator-framework/operator-marketplace/pull/526)
* [OCPBUGS-17157](https://issues.redhat.com/browse/OCPBUGS-17157): bump controller-runtime, expose pprof, watch only one configmap [#525](https://github.com/operator-framework/operator-marketplace/pull/525)
* [OCPBUGS-13910](https://issues.redhat.com/browse/OCPBUGS-13910): update community-operator-index to 4.14 tag [#524](https://github.com/operator-framework/operator-marketplace/pull/524)
* Update owners [#517](https://github.com/operator-framework/operator-marketplace/pull/517)
* [OCPBUGS-9357](https://issues.redhat.com/browse/OCPBUGS-9357): remove a race condition [#520](https://github.com/operator-framework/operator-marketplace/pull/520)
* [OCPBUGS-13921](https://issues.redhat.com/browse/OCPBUGS-13921): Update image tag to 4.14 for all but community operators [#523](https://github.com/operator-framework/operator-marketplace/pull/523)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/71713d4c8c585354f9b164ba2c9d447621467ff9...15c081de2f235e938abf10efc0b98f4d708621d2)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/2fa33aa7f05da8640a8695372364f2367febd12a)

* [OCPRHV-834](https://issues.redhat.com/browse/OCPRHV-834): set upgrade condition of operator to false [#117](https://github.com/openshift/ovirt-csi-driver-operator/pull/117)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/bbc53191db556931ccf99eb8f6e126a8f95b89bd...2fa33aa7f05da8640a8695372364f2367febd12a)


### [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt/tree/5d708631fca37aff0ede7d7f8fc9ba76c7fcee47)

* 15143237: Updating ose-ovirt-machine-controllers images to be consistent with ART [#174](https://github.com/openshift/cluster-api-provider-ovirt/pull/174)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ovirt/compare/22d89b3fd9e2e395a62f71092487d26c8940052e...5d708631fca37aff0ede7d7f8fc9ba76c7fcee47)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/6c34041f838cd4c7628a399bac1ed3d24718837c)

* Downstream Merge 2023-8-10 [#1813](https://github.com/openshift/ovn-kubernetes/pull/1813)
* [OCPBUGS-17147](https://issues.redhat.com/browse/OCPBUGS-17147): [DownstreamMerge] 8 Aug 2023 [#1803](https://github.com/openshift/ovn-kubernetes/pull/1803)
* Downstream Merge 2023-08-03 [#1798](https://github.com/openshift/ovn-kubernetes/pull/1798)
* 8-1-23 [#1795](https://github.com/openshift/ovn-kubernetes/pull/1795)
* [OCPBUGS-16767](https://issues.redhat.com/browse/OCPBUGS-16767), [SDN-3507](https://issues.redhat.com/browse/SDN-3507), [SDN-3733](https://issues.redhat.com/browse/SDN-3733): [DownstreamMerge] 7-27-23 [#1789](https://github.com/openshift/ovn-kubernetes/pull/1789)
* [OCPBUGS-15811](https://issues.redhat.com/browse/OCPBUGS-15811): SDN-3733: Downstream Merge: 25th July 2023 [#1784](https://github.com/openshift/ovn-kubernetes/pull/1784)
* [OCPBUGS-10650](https://issues.redhat.com/browse/OCPBUGS-10650), [OCPBUGS-12747](https://issues.redhat.com/browse/OCPBUGS-12747), [OCPBUGS-16413](https://issues.redhat.com/browse/OCPBUGS-16413), [SDN-3732](https://issues.redhat.com/browse/SDN-3732), [SDN-3733](https://issues.redhat.com/browse/SDN-3733): [DownstreamMerge] 7-19-23 [#1750](https://github.com/openshift/ovn-kubernetes/pull/1750)
* Dockerfile: build both RHEL8 and RHEL9 shims [#1760](https://github.com/openshift/ovn-kubernetes/pull/1760)
* [SDN-3733](https://issues.redhat.com/browse/SDN-3733): [DownstreamMerge] 7-13-23 [#1757](https://github.com/openshift/ovn-kubernetes/pull/1757)
* 11 jul 23 [#1752](https://github.com/openshift/ovn-kubernetes/pull/1752)
* 07 jul 23 [#1747](https://github.com/openshift/ovn-kubernetes/pull/1747)
* [SDN-3993](https://issues.redhat.com/browse/SDN-3993): [DownstreamMerge] 06 jul 23 [#1742](https://github.com/openshift/ovn-kubernetes/pull/1742)
* [OCPBUGS-14632](https://issues.redhat.com/browse/OCPBUGS-14632): [DownstreamMerge] 30 jun 23 [#1729](https://github.com/openshift/ovn-kubernetes/pull/1729)
* [OCPBUGS-15127](https://issues.redhat.com/browse/OCPBUGS-15127): Dockerfile: bump to ovn 23.03.0-69 (for LB templates) and ovs 3.1.0-32 (upgrade perf) [#1710](https://github.com/openshift/ovn-kubernetes/pull/1710)
* [OCPBUGS-15523](https://issues.redhat.com/browse/OCPBUGS-15523): [DownstreamMerge] 6-27-23 [#1726](https://github.com/openshift/ovn-kubernetes/pull/1726)
* [OCPBUGS-15227](https://issues.redhat.com/browse/OCPBUGS-15227): [DownstreamMerge] 6-21-23 [#1718](https://github.com/openshift/ovn-kubernetes/pull/1718)
* [OCPBUGS-15226](https://issues.redhat.com/browse/OCPBUGS-15226): EgressIP: do not patch the status if the object no longer exists [#1717](https://github.com/openshift/ovn-kubernetes/pull/1717)
* 6-18-2023 [#1714](https://github.com/openshift/ovn-kubernetes/pull/1714)
* [OCPBUGS-14769](https://issues.redhat.com/browse/OCPBUGS-14769), [SDN-3885](https://issues.redhat.com/browse/SDN-3885): Downstream Merge 13th June 2023 [#1707](https://github.com/openshift/ovn-kubernetes/pull/1707)
* [OCPBUGS-10592](https://issues.redhat.com/browse/OCPBUGS-10592), [OCPBUGS-10841](https://issues.redhat.com/browse/OCPBUGS-10841), [OCPBUGS-11180](https://issues.redhat.com/browse/OCPBUGS-11180), [OCPBUGS-12747](https://issues.redhat.com/browse/OCPBUGS-12747), [OCPBUGS-1715](https://issues.redhat.com/browse/OCPBUGS-1715), [OCPBUGS-4370](https://issues.redhat.com/browse/OCPBUGS-4370), [OCPBUGS-4485](https://issues.redhat.com/browse/OCPBUGS-4485), [SDN-3733](https://issues.redhat.com/browse/SDN-3733), [SDN-3838](https://issues.redhat.com/browse/SDN-3838), [SDN-3840](https://issues.redhat.com/browse/SDN-3840): Downstream Merge 6th June 2023 [#1697](https://github.com/openshift/ovn-kubernetes/pull/1697)
* [OCPBUGS-12352](https://issues.redhat.com/browse/OCPBUGS-12352): Updating ovn-kubernetes-base images to be consistent with ART [#1700](https://github.com/openshift/ovn-kubernetes/pull/1700)
* [OCPBUGS-14636](https://issues.redhat.com/browse/OCPBUGS-14636): Fix Downstream Unit Tests [#1696](https://github.com/openshift/ovn-kubernetes/pull/1696)
* [OCPBUGS-12800](https://issues.redhat.com/browse/OCPBUGS-12800), [OCPBUGS-13863](https://issues.redhat.com/browse/OCPBUGS-13863), [OCPBUGS-14286](https://issues.redhat.com/browse/OCPBUGS-14286), [OCPBUGS-14449](https://issues.redhat.com/browse/OCPBUGS-14449), [OCPBUGS-4485](https://issues.redhat.com/browse/OCPBUGS-4485), [SDN-3555](https://issues.redhat.com/browse/SDN-3555), [SDN-3790](https://issues.redhat.com/browse/SDN-3790): Downstream Merge 1st June [#1692](https://github.com/openshift/ovn-kubernetes/pull/1692)
* [OCPBUGS-9825](https://issues.redhat.com/browse/OCPBUGS-9825): LoadBalancer Templates Merge Downstream: 25th May 2023 [#1683](https://github.com/openshift/ovn-kubernetes/pull/1683)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/0f2fbd9d43d2681ad4bffb2f4a7b85a195fc989b...6c34041f838cd4c7628a399bac1ed3d24718837c)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/a83aec959629aab549501bc55c3b6a2963a49f0a)

* Rebase: upgrading go modules [#40](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/40)
* Rebase with upstream: reduce multipathd usage (OCPBUGS-16878) [#39](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/39)
* Rebase with upstream: removed panic and some cleanup [#38](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/38)
* Rebase with upstream [#37](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/37)
* Package device-mapper-multipath added [#36](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/36)
* Merging upstream code with downstream [#33](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/33)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/c719d2a108f506f5fc10f083060769b53ccaf625...a83aec959629aab549501bc55c3b6a2963a49f0a)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/33ada3f908e078d7f4ba0e230fde3663b465accb)

* [STOR-1438](https://issues.redhat.com/browse/STOR-1438): Restart controller Pods if metrics-serving-cert changed [#36](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/36)
* [OCPBUGS-16531](https://issues.redhat.com/browse/OCPBUGS-16531): Upgraded openshift/library-go to remove indirect references to goproxy. [#35](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/35)
* [OCPBUGS-16654](https://issues.redhat.com/browse/OCPBUGS-16654): Rename sidecar binding RBACs [#32](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/32)
* [OCPBUGS-16783](https://issues.redhat.com/browse/OCPBUGS-16783): Chore: Update OWNERS [#33](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/33)
* [STOR-1065](https://issues.redhat.com/browse/STOR-1065): Rework sidecar bindings to bind common ClusterRoles [#31](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/31)
* [OCPBUGS-14824](https://issues.redhat.com/browse/OCPBUGS-14824): Bump ibm-powervs-block-csi-driver-operator library-go [#30](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/30)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/be80f96968f490cc5e12dad9438f5a303a6492f8...33ada3f908e078d7f4ba0e230fde3663b465accb)


### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/0e7522630da95e8ede517d4527c14eb36233a4c5)

* UPSTREAM: <carry>: Add check for valid Power VS instance id [#42](https://github.com/openshift/cloud-provider-powervs/pull/42)
* Manual rebase to k8s 1.27 and go 1.20 [#40](https://github.com/openshift/cloud-provider-powervs/pull/40)
* Revert images golang 1.18 [#38](https://github.com/openshift/cloud-provider-powervs/pull/38)
* Updating ose-powervs-cloud-controller-manager images to be consistent with ART [#37](https://github.com/openshift/cloud-provider-powervs/pull/37)
* Revert build_image to the one currently specified in release repo [#36](https://github.com/openshift/cloud-provider-powervs/pull/36)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/65e079317465a498a9bac0ce4ab6169c7a1d7944...0e7522630da95e8ede517d4527c14eb36233a4c5)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/b9e006631e323b12521cc56703c1ace0e11c0080)

* [MULTIARCH-3669](https://issues.redhat.com/browse/MULTIARCH-3669): Set instance build condition to avoid attempting to create duplicate vm with same name [#49](https://github.com/openshift/machine-api-provider-powervs/pull/49)
* [MULTIARCH-3677](https://issues.redhat.com/browse/MULTIARCH-3677): Add pagination for listing service instances [#48](https://github.com/openshift/machine-api-provider-powervs/pull/48)
* [MULTIARCH-3667](https://issues.redhat.com/browse/MULTIARCH-3667): Loadbalancer integration support for control plane machines [#41](https://github.com/openshift/machine-api-provider-powervs/pull/41)
* [MULTIARCH-3668](https://issues.redhat.com/browse/MULTIARCH-3668): Update make file to use latest golang [#47](https://github.com/openshift/machine-api-provider-powervs/pull/47)
* [MULTIARCH-3669](https://issues.redhat.com/browse/MULTIARCH-3669): Avoid setting VM provider ID as soon as VM creation [#46](https://github.com/openshift/machine-api-provider-powervs/pull/46)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/98ece7e6639d258e927d9ce5b8426e5594bc11d6...b9e006631e323b12521cc56703c1ace0e11c0080)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/af40ed09f69fab6c4bf054436f537a3e569d5f02)

* Bump openshift/prom-label-proxy to v0.7.0 [#356](https://github.com/openshift/prom-label-proxy/pull/356)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/944632a052b1deaaaf8deb0d4ef971e86648fe31...af40ed09f69fab6c4bf054436f537a3e569d5f02)


### [prometheus](https://github.com/openshift/prometheus/tree/65d9696678766651dd8b2c719d3cea5c85d5c53a)

* Bump openshift/prometheus to v2.46.0 [#167](https://github.com/openshift/prometheus/pull/167)
* Bump openshift/prometheus to v2.45.0 [#166](https://github.com/openshift/prometheus/pull/166)
* Bump openshift/prometheus to v2.44.0 [#164](https://github.com/openshift/prometheus/pull/164)
* Dockerfile.ocp: update note about UI assets after switching to embed [#165](https://github.com/openshift/prometheus/pull/165)
* [Full changelog](https://github.com/openshift/prometheus/compare/52854f8fc77e8d2bf00d97fa140dbd469adab16e...65d9696678766651dd8b2c719d3cea5c85d5c53a)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/d6d234d631ee023aca97ec47d83766ba5e230f3a)

* [OCPBUGS-12506](https://issues.redhat.com/browse/OCPBUGS-12506): update golang.org/x/net [#71](https://github.com/openshift/prometheus-alertmanager/pull/71)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/d44a8344be4ff0068aa7a697bf4cc260998bf6c8...d6d234d631ee023aca97ec47d83766ba5e230f3a)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/f7f609ae9dfbe53969a3e5506c36ecd8e5273913)

* Bump openshift/prometheus-operator to v0.67.1 [#240](https://github.com/openshift/prometheus-operator/pull/240)
* Bump openshift/prometheus-operator to v0.67.0 [#239](https://github.com/openshift/prometheus-operator/pull/239)
* [OCPBUGS-14466](https://issues.redhat.com/browse/OCPBUGS-14466): bump openshift/prometheus-operator to v0.66.0 [#236](https://github.com/openshift/prometheus-operator/pull/236)
* [OCPBUGS-14033](https://issues.redhat.com/browse/OCPBUGS-14033): cmd/prometheus-config-reloader: add SIGTERM handler [#234](https://github.com/openshift/prometheus-operator/pull/234)
* [OCPBUGS-1626](https://issues.redhat.com/browse/OCPBUGS-1626): [bot] Bump openshift/prometheus-operator to v0.65.1 [#233](https://github.com/openshift/prometheus-operator/pull/233)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/9970c3528114ca067e7b8252b35073ab93a535ae...f7f609ae9dfbe53969a3e5506c36ecd8e5273913)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/053bcf6fb45c460fbaccc810bdac91a3aaa4b6b0)

* Bump openshift/node_exporter to v1.6.1 [#130](https://github.com/openshift/node_exporter/pull/130)
* [OCPBUGS-12714](https://issues.redhat.com/browse/OCPBUGS-12714): Bump openshift/node_exporter to v1.6.0 [#129](https://github.com/openshift/node_exporter/pull/129)
* [OCPBUGS-12507](https://issues.redhat.com/browse/OCPBUGS-12507): Upgrade golang.org/x/net to v0.10.0 to fix the CVE [#128](https://github.com/openshift/node_exporter/pull/128)
* [Full changelog](https://github.com/openshift/node_exporter/compare/07e73e0e9e4a25eb633d82f0deef9fefff87c6fe...053bcf6fb45c460fbaccc810bdac91a3aaa4b6b0)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/0a976ea8bb9f7bf1d0b22730dc0825f976b27ccc)

* refactor route controller manager to use library-go server and ControlerCommand for generic setup [#28](https://github.com/openshift/route-controller-manager/pull/28)
* add dummy flags needed for a switch to library-go server and ControlerCommand [#29](https://github.com/openshift/route-controller-manager/pull/29)
* Revert "[WRKLDS-730] refactor route controller manager to use library-go server and ControlerCommand for generic setup" [#25](https://github.com/openshift/route-controller-manager/pull/25)
* refactor route controller manager to use library-go server and ControlerCommand for generic setup [#22](https://github.com/openshift/route-controller-manager/pull/22)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/ee49bd6f1873d0a830fffbd11a9191b09ff617e3...0a976ea8bb9f7bf1d0b22730dc0825f976b27ccc)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/5e9dfaadeb46f3ca7ff4343ed4f76f1186ea3003)

* [OCPBUGS-16536](https://issues.redhat.com/browse/OCPBUGS-16536): bump lib-go to get rid of the goproxy dep [#213](https://github.com/openshift/service-ca-operator/pull/213)
* [OCPBUGS-12662](https://issues.redhat.com/browse/OCPBUGS-12662): bump kube to 1.27.1 [#212](https://github.com/openshift/service-ca-operator/pull/212)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/f0bd313003d3d79593b44936fb7cf0bab2a6daae...5e9dfaadeb46f3ca7ff4343ed4f76f1186ea3003)


### [telemeter](https://github.com/openshift/telemeter/tree/36999a33bdeb42c6f25d099985c98f346f83c1f3)

* [OCPBUGS-16397](https://issues.redhat.com/browse/OCPBUGS-16397): Nutanix OCP cluster telemetry data "host_type" shows "virt-unknown" [#474](https://github.com/openshift/telemeter/pull/474)
* chore: bump github.com/prometheus/prometheus to v0.45.0 [#475](https://github.com/openshift/telemeter/pull/475)
* : fix mtls secret generation [#473](https://github.com/openshift/telemeter/pull/473)
* Revert wrong cert name change of #455 [#472](https://github.com/openshift/telemeter/pull/472)
* : add secret for external mtls connection [#470](https://github.com/openshift/telemeter/pull/470)
* [MON-3230](https://issues.redhat.com/browse/MON-3230): Add TLS auth to telemeter-client [#455](https://github.com/openshift/telemeter/pull/455)
* jsonnet: Add config to support rhelemeter [#468](https://github.com/openshift/telemeter/pull/468)
* Improve debug roundtripper logs [#467](https://github.com/openshift/telemeter/pull/467)
* Fix integration test documentation [#461](https://github.com/openshift/telemeter/pull/461)
* Fix path benchmark [#466](https://github.com/openshift/telemeter/pull/466)
* Add RHEL POC server [#465](https://github.com/openshift/telemeter/pull/465)
* [OCPBUGS-12345](https://issues.redhat.com/browse/OCPBUGS-12345): tools: update to golangci-lint v1.51 [#464](https://github.com/openshift/telemeter/pull/464)
* [OCPBUGS-12678](https://issues.redhat.com/browse/OCPBUGS-12678): Update golang.org/x/net to lastest version [#462](https://github.com/openshift/telemeter/pull/462)
* [Full changelog](https://github.com/openshift/telemeter/compare/f89e6dc822513285ba010fdc8bff13939bbc62e5...36999a33bdeb42c6f25d099985c98f346f83c1f3)


### [tests](https://github.com/openshift/origin/tree/b88c95199aec33257d48cd6e3954e7c4fe22ed89)

* add comments requested in review [#28186](https://github.com/openshift/origin/pull/28186)
* rebrand invariant tests as monitor tests [#28185](https://github.com/openshift/origin/pull/28185)
* basic setup of podNetwork disruption tests [#28179](https://github.com/openshift/origin/pull/28179)
* start the watch-endpoint-slice command [#28169](https://github.com/openshift/origin/pull/28169)
* stop sampling when we stop [#28178](https://github.com/openshift/origin/pull/28178)
* run start and collect in parallel [#28174](https://github.com/openshift/origin/pull/28174)
* only close node ready if the node was not ready before [#28170](https://github.com/openshift/origin/pull/28170)
* make monitor command separately runnable [#28168](https://github.com/openshift/origin/pull/28168)
* [OCPBUGS-15726](https://issues.redhat.com/browse/OCPBUGS-15726): add tests for openapi v3 [#28129](https://github.com/openshift/origin/pull/28129)
* fix microshift fix that broke all disruption [#28175](https://github.com/openshift/origin/pull/28175)
* Add stlaz and p0lyn0mial to OWNERS [#28166](https://github.com/openshift/origin/pull/28166)
* [OCPBUGS-15726](https://issues.redhat.com/browse/OCPBUGS-15726): Revert "temporarily disable oc explain tests until openapi/v3 is working" [#28155](https://github.com/openshift/origin/pull/28155)
* Add some tests for event interval generation [#28163](https://github.com/openshift/origin/pull/28163)
* [USHIFT-1464](https://issues.redhat.com/browse/USHIFT-1464): skip TestFrontProxy for MicroShift [#28064](https://github.com/openshift/origin/pull/28064)
* upgrade distribution to v3 [#27958](https://github.com/openshift/origin/pull/27958)
* Skip external service monitoring invariant for microshift [#28160](https://github.com/openshift/origin/pull/28160)
* Refactor e2e-test intervals to use the new locator builder [#28099](https://github.com/openshift/origin/pull/28099)
* [OCPBUGS-16166](https://issues.redhat.com/browse/OCPBUGS-16166): Update to Kubernetes 1.27.4 [#28147](https://github.com/openshift/origin/pull/28147)
* Remove obsolete buildanalyzer tool [#28158](https://github.com/openshift/origin/pull/28158)
* Bug OCPBUGS-17483: Skip invariant load balancer test for OpenStack [#28154](https://github.com/openshift/origin/pull/28154)
* be sure the exit code fails when the invariant tests fail [#28152](https://github.com/openshift/origin/pull/28152)
* [OCPBUGS-17351](https://issues.redhat.com/browse/OCPBUGS-17351): Skip some invariants in microshift [#28136](https://github.com/openshift/origin/pull/28136)
* [OCPBUGS-16166](https://issues.redhat.com/browse/OCPBUGS-16166): disable 2 tests in preparation to land k8s 1.27.4 [#28148](https://github.com/openshift/origin/pull/28148)
* Fix kubevirt test flake caused by pod name collision [#28153](https://github.com/openshift/origin/pull/28153)
* move the discovery filtering into suite filtering instead of post filtering [#28145](https://github.com/openshift/origin/pull/28145)
* move remaining disruption tests to invariants [#28144](https://github.com/openshift/origin/pull/28144)
* Disable EgressIP test termporarily due to OVN-K bug [#28146](https://github.com/openshift/origin/pull/28146)
* Bug OCPBUGS-6778: Correct condition for rejecting connection [#27876](https://github.com/openshift/origin/pull/27876)
* [USHIFT-1484](https://issues.redhat.com/browse/USHIFT-1484): skip prometheus alerts for MicroShift [#28070](https://github.com/openshift/origin/pull/28070)
* remove unnecessary global modification from upgrade [#28143](https://github.com/openshift/origin/pull/28143)
* [OCPBUGS-16615](https://issues.redhat.com/browse/OCPBUGS-16615): Moving Prometheus reporting telemetry to serial jobs [#28138](https://github.com/openshift/origin/pull/28138)
* [OCPBUGS-15568](https://issues.redhat.com/browse/OCPBUGS-15568): Set quota wait timeout to 1 minute [#28071](https://github.com/openshift/origin/pull/28071)
* rough package alignment [#28131](https://github.com/openshift/origin/pull/28131)
* return calculated intervals [#28141](https://github.com/openshift/origin/pull/28141)
* move existing invariant tests [#28130](https://github.com/openshift/origin/pull/28130)
* remove extraneous layering for the monitor [#28127](https://github.com/openshift/origin/pull/28127)
* Fix ClusterOperator tests that can only report failures [#28120](https://github.com/openshift/origin/pull/28120)
* properly categorize the stop and start intervals [#28139](https://github.com/openshift/origin/pull/28139)
* [MON-1960](https://issues.redhat.com/browse/MON-1960): Remove exceptions for alert annotations [#28118](https://github.com/openshift/origin/pull/28118)
* Revert invariant and other refactors [#28133](https://github.com/openshift/origin/pull/28133)
* Remove exception on KubeSchedulerDown runbook [#28126](https://github.com/openshift/origin/pull/28126)
* expedient engineering: inject intervals into recorded events from out… [#28128](https://github.com/openshift/origin/pull/28128)
* Add Fabio and remove Stefan from image approvers [#28125](https://github.com/openshift/origin/pull/28125)
* separate the run, run-upgrade, and run-test [#28121](https://github.com/openshift/origin/pull/28121)
* Remove enabling multinetwork policy [#28116](https://github.com/openshift/origin/pull/28116)
* [OCPVE-292](https://issues.redhat.com/browse/OCPVE-292): OCPVE-293: OCPVE-294: feat: added a realtime latency test suite [#28110](https://github.com/openshift/origin/pull/28110)
* Update image mirroring instructions to handle uncompressed layers [#28101](https://github.com/openshift/origin/pull/28101)
* protect against nil panic on unassigned disruption adapter [#28123](https://github.com/openshift/origin/pull/28123)
* fix: workload partitioning - added more error handling for retry attempts [#28111](https://github.com/openshift/origin/pull/28111)
* Revert "adds legacy disruption to invariant tests" [#28117](https://github.com/openshift/origin/pull/28117)
* adds legacy disruption to invariant tests [#28104](https://github.com/openshift/origin/pull/28104)
* refactor command line start for openshift-tests [#28107](https://github.com/openshift/origin/pull/28107)
* oauth requestheaders: gather oauth-server logs as admin [#28114](https://github.com/openshift/origin/pull/28114)
* Automated - Update synthetic test data [#28108](https://github.com/openshift/origin/pull/28108)
* [SDN-4042](https://issues.redhat.com/browse/SDN-4042): Increase total upgrade time on OVN platforms [#28074](https://github.com/openshift/origin/pull/28074)
* Update image stream test to create a manifest list image by default [#28017](https://github.com/openshift/origin/pull/28017)
* Adjust interval builder before we continue porting [#28109](https://github.com/openshift/origin/pull/28109)
* Put times in UTC to allow local testing; use asserts where we can [#28091](https://github.com/openshift/origin/pull/28091)
* feat: make data gathering more robust [#28102](https://github.com/openshift/origin/pull/28102)
* remove suite hook configuration and make information flow one-way [#28090](https://github.com/openshift/origin/pull/28090)
* [USHIFT-1463](https://issues.redhat.com/browse/USHIFT-1463): add [apigroup] annotation to skip tests for MicroShift [#28061](https://github.com/openshift/origin/pull/28061)
* [OCPVE-318](https://issues.redhat.com/browse/OCPVE-318): feat: add node validation for workload partitioning [#28056](https://github.com/openshift/origin/pull/28056)
* Unrevert pull request #28069 from dgoodwin/interval-builder [#28095](https://github.com/openshift/origin/pull/28095)
* Disruption reverts [#28093](https://github.com/openshift/origin/pull/28093)
* [AUTH-401](https://issues.redhat.com/browse/AUTH-401): test/e/authorization/pod_security_admission: add e2e test for pinning SCCs [#28092](https://github.com/openshift/origin/pull/28092)
* fix logic -- If error, return current time; else return log line time [#28084](https://github.com/openshift/origin/pull/28084)
* add interface for future invariant tests [#28077](https://github.com/openshift/origin/pull/28077)
* Interval Building Phase 1 [#28069](https://github.com/openshift/origin/pull/28069)
* create a recorder interface that separates monitoring from recording [#28080](https://github.com/openshift/origin/pull/28080)
* remove unnecessary options and make monitor act like controller [#28079](https://github.com/openshift/origin/pull/28079)
* Fix retrieval of virt-launcher pod of the guest node [#28082](https://github.com/openshift/origin/pull/28082)
* Fix usage of priviliged pods in sig-kubevirt test cases [#28078](https://github.com/openshift/origin/pull/28078)
* trt-1150: move lock so prevent multiple file updates in single commit [#28065](https://github.com/openshift/origin/pull/28065)
* finish scrubbing out sampler [#28076](https://github.com/openshift/origin/pull/28076)
* Automated - Update synthetic test data [#28072](https://github.com/openshift/origin/pull/28072)
* [MON-3280](https://issues.redhat.com/browse/MON-3280): enable etcd metrics check again [#28049](https://github.com/openshift/origin/pull/28049)
* [OCPBUGS-13158](https://issues.redhat.com/browse/OCPBUGS-13158): Run new tests which monitors in-cluster API server disruption as daemonsets on masters/workers [#27909](https://github.com/openshift/origin/pull/27909)
* fix: add missing namespaces to exclude list [#28060](https://github.com/openshift/origin/pull/28060)
* Update S2i Image tests for removing nodejs 14 ubi8 eol [#28058](https://github.com/openshift/origin/pull/28058)
* only close intervals if they are open [#28059](https://github.com/openshift/origin/pull/28059)
* [USHIFT-704](https://issues.redhat.com/browse/USHIFT-704): skip [sig-cli] whoami result with console for MicroShift [#28005](https://github.com/openshift/origin/pull/28005)
* ignore machine api capability [#28052](https://github.com/openshift/origin/pull/28052)
* [ODC-7333](https://issues.redhat.com/browse/ODC-7333): Add consolesamples to the exception list of CRDs without a status [#28057](https://github.com/openshift/origin/pull/28057)
* Handle partial discovery results in DoesApiResourceExist. [#28047](https://github.com/openshift/origin/pull/28047)
* Remove audit id from sample err [#28043](https://github.com/openshift/origin/pull/28043)
* Remove sampler [#27960](https://github.com/openshift/origin/pull/27960)
* [ODC-7333](https://issues.redhat.com/browse/ODC-7333): Add consolesamples to the list of console resources that all users should have read access [#28045](https://github.com/openshift/origin/pull/28045)
* [OCPBUGS-15893](https://issues.redhat.com/browse/OCPBUGS-15893): Update permission to incl. watch for helmchartrepositories for console users [#28044](https://github.com/openshift/origin/pull/28044)
* Automated - Update synthetic test data [#28014](https://github.com/openshift/origin/pull/28014)
* increase cloud-credential-operator watch since we added a self-clusteroperator watch [#28046](https://github.com/openshift/origin/pull/28046)
* [OCPBUGS-15291](https://issues.redhat.com/browse/OCPBUGS-15291): Update broken dc tests due to deprecation warning [#28041](https://github.com/openshift/origin/pull/28041)
* Enable Azure platform check in external cloud provider test [#27776](https://github.com/openshift/origin/pull/27776)
* update pathological event namespace label to be unambiguous [#28038](https://github.com/openshift/origin/pull/28038)
* multinetpolicy: use RetryOnConflict to reduce flakes [#28035](https://github.com/openshift/origin/pull/28035)
* [USHIFT-1379](https://issues.redhat.com/browse/USHIFT-1379): skip must-gather tests for MicroShift [#28015](https://github.com/openshift/origin/pull/28015)
* Provide more detailed information when extracting binary fails [#28034](https://github.com/openshift/origin/pull/28034)
* test: extended: deployment: use correct apigroup for imagestreamtags [#27689](https://github.com/openshift/origin/pull/27689)
* Add logs in clusterquota test for more verbosity [#28032](https://github.com/openshift/origin/pull/28032)
* [OCPBUGS-15500](https://issues.redhat.com/browse/OCPBUGS-15500): Avoid panic attempting to process interval logs [#28012](https://github.com/openshift/origin/pull/28012)
* Add test checking nodes are in proper read state before upgrade [#28028](https://github.com/openshift/origin/pull/28028)
* trt-1030: 80s for service lb under test [#28004](https://github.com/openshift/origin/pull/28004)
* [OCPBUGS-15835](https://issues.redhat.com/browse/OCPBUGS-15835): remove references to registry.centos.org [#28029](https://github.com/openshift/origin/pull/28029)
* [OCPVE-379](https://issues.redhat.com/browse/OCPVE-379): fix: avoid checking resources for BestEffort pods [#28006](https://github.com/openshift/origin/pull/28006)
* [OCPBUGS-15568](https://issues.redhat.com/browse/OCPBUGS-15568): Increase clusterquota wait timeout from 10 to 30 seconds [#28026](https://github.com/openshift/origin/pull/28026)
* [OCPBUGS-15558](https://issues.redhat.com/browse/OCPBUGS-15558): retry promql a few times to mask i/o timeouts [#28010](https://github.com/openshift/origin/pull/28010)
* [AUTH-377](https://issues.redhat.com/browse/AUTH-377): Add oauth-server redirect URI validation e2e tests [#27922](https://github.com/openshift/origin/pull/27922)
* temporarily disable oc explain tests until openapi/v3 is working properly [#28022](https://github.com/openshift/origin/pull/28022)
* [USHIFT-647](https://issues.redhat.com/browse/USHIFT-647): skip non-existing resources from security.openshift.io [#27897](https://github.com/openshift/origin/pull/27897)
* trt-1117: Test for update lease errors [#28020](https://github.com/openshift/origin/pull/28020)
* print out deployment for incorrectly scheduled pods [#28011](https://github.com/openshift/origin/pull/28011)
* [OCPBUGS-14425](https://issues.redhat.com/browse/OCPBUGS-14425): Skip CCM upgradable condition on AlibabaCloud [#27967](https://github.com/openshift/origin/pull/27967)
* Update "verify that nodes have no unexpected reboots" test [#28016](https://github.com/openshift/origin/pull/28016)
* allow cluster-config-operator to manage featuregate upgrade block [#28009](https://github.com/openshift/origin/pull/28009)
* add a networking alert for OVNKubernetesResourceRetryFailure [#28008](https://github.com/openshift/origin/pull/28008)
* add debugging info for cluster not ready to upgrade [#28007](https://github.com/openshift/origin/pull/28007)
* [OCPVE-378](https://issues.redhat.com/browse/OCPVE-378): feat: remove skip, allow check on all platforms regardless [#27911](https://github.com/openshift/origin/pull/27911)
* Report external binary usage [#28000](https://github.com/openshift/origin/pull/28000)
* Changing the severity of "missing runbook_url annotation for critical alerts" test case from flaky to failure [#27987](https://github.com/openshift/origin/pull/27987)
* disruption refinement for availability, not latency. [#28003](https://github.com/openshift/origin/pull/28003)
* [TRT-1097](https://issues.redhat.com/browse/TRT-1097): add KubeMemoryOvercommit to specific test so that the general test doesn't fail [#28002](https://github.com/openshift/origin/pull/28002)
* [OCPBUGS-11652](https://issues.redhat.com/browse/OCPBUGS-11652): Enable oc adm node-logs [#27992](https://github.com/openshift/origin/pull/27992)
* skip reboot test when machineconfigs not in target cluster [#27999](https://github.com/openshift/origin/pull/27999)
* [OCPBUGS-15291](https://issues.redhat.com/browse/OCPBUGS-15291): [sig-cli] oc idle: get a dc name through labels instead of parsing oc create output [#27998](https://github.com/openshift/origin/pull/27998)
* Automated - Update synthetic test data [#27995](https://github.com/openshift/origin/pull/27995)
* Flake ci-cluster-network-liveness and new backend disruption failures to avoid payload rejections [#27990](https://github.com/openshift/origin/pull/27990)
* verifies number of node reboots even for HA [#27994](https://github.com/openshift/origin/pull/27994)
* [OCPBUGS-13379](https://issues.redhat.com/browse/OCPBUGS-13379): machines: add a test which verifies number of node reboots [#27993](https://github.com/openshift/origin/pull/27993)
* strip operator framework from resource watch and fix bugs [#27972](https://github.com/openshift/origin/pull/27972)
* Fix panic in loki upload [#27991](https://github.com/openshift/origin/pull/27991)
* Replace dashes in locator keys for upload to loki, add namespace label when possible [#27983](https://github.com/openshift/origin/pull/27983)
* Automated - Update synthetic test data [#27982](https://github.com/openshift/origin/pull/27982)
* Update kubevirt LB connectivity tests to work with AWS ELB [#27978](https://github.com/openshift/origin/pull/27978)
* [STOR-1263](https://issues.redhat.com/browse/STOR-1263): Bump (openshift/kubernetes): to get openshift/kubernetes#1595 [#27970](https://github.com/openshift/origin/pull/27970)
* add shutdown interval for apiserver from events [#27919](https://github.com/openshift/origin/pull/27919)
* Update expected name for OVN acl logging test [#27974](https://github.com/openshift/origin/pull/27974)
* Updated pathological events [#27942](https://github.com/openshift/origin/pull/27942)
* new disruption backend [#27838](https://github.com/openshift/origin/pull/27838)
* [OCPBUGS-14667](https://issues.redhat.com/browse/OCPBUGS-14667): Revert "MON-3213: Changing the severity of "missing runbook_url annotation for critical alerts" test case from flaky to failure" [#27969](https://github.com/openshift/origin/pull/27969)
* [MON-3213](https://issues.redhat.com/browse/MON-3213): Changing the severity of "missing runbook_url annotation for critical alerts" test case from flaky to failure [#27933](https://github.com/openshift/origin/pull/27933)
* push intervals to loki [#27930](https://github.com/openshift/origin/pull/27930)
* [USHIFT-1300](https://issues.redhat.com/browse/USHIFT-1300): Avoid getting cluster state for TEST_PROVIDER env var [#27964](https://github.com/openshift/origin/pull/27964)
* hard monitor.Event message creation [#27946](https://github.com/openshift/origin/pull/27946)
* [ETCD-425](https://issues.redhat.com/browse/ETCD-425): restore test should validate state [#27921](https://github.com/openshift/origin/pull/27921)
* [OCPBUGS-14338](https://issues.redhat.com/browse/OCPBUGS-14338): test/extended/prometheus: increase telemetry series threshold [#27959](https://github.com/openshift/origin/pull/27959)
* Running tests using external binary [#27570](https://github.com/openshift/origin/pull/27570)
* [OCPBUGS-14321](https://issues.redhat.com/browse/OCPBUGS-14321): Increase timeout in sysctl allowlist test [#27955](https://github.com/openshift/origin/pull/27955)
* remove legacy recovery tests [#27917](https://github.com/openshift/origin/pull/27917)
* [OCPBUGS-13649](https://issues.redhat.com/browse/OCPBUGS-13649): add tests for ClusterResourceQuota: count should work for all resources [#27934](https://github.com/openshift/origin/pull/27934)
* [MON-3219](https://issues.redhat.com/browse/MON-3219): Clear missing summary/description annotation test case exception [#27944](https://github.com/openshift/origin/pull/27944)
* [OCPBUGS-13788](https://issues.redhat.com/browse/OCPBUGS-13788): 2x Revert "test/extended: Add MultiNetworkPolicy IPv4/IPv6 test cases" #27926 [#27927](https://github.com/openshift/origin/pull/27927)
* [OCPBUGS-14125](https://issues.redhat.com/browse/OCPBUGS-14125): Move from registry.centos.org to quay.io [#27945](https://github.com/openshift/origin/pull/27945)
* LoadBalancer network connectivity test cases for HyperShift+KubeVirt [#27931](https://github.com/openshift/origin/pull/27931)
* Revert "Add coverage for GET verb and websocket handshake to SCC exec tests." [#27943](https://github.com/openshift/origin/pull/27943)
* update the PDB resource to point to resource, not kind [#27938](https://github.com/openshift/origin/pull/27938)
* fix oc explain status and spec verification [#27937](https://github.com/openshift/origin/pull/27937)
* Add coverage for GET verb and websocket handshake to SCC exec tests. [#27836](https://github.com/openshift/origin/pull/27836)
* test/extended/prometheus: fix test with enabled telemetry [#27915](https://github.com/openshift/origin/pull/27915)
* bump(k8s.io/kubernetes) [#27935](https://github.com/openshift/origin/pull/27935)
* Automated - Update synthetic test data [#27920](https://github.com/openshift/origin/pull/27920)
* [Full changelog](https://github.com/openshift/origin/compare/a24849d1bc2ec6ca290618bc970ce0c1b6a5f775...b88c95199aec33257d48cd6e3954e7c4fe22ed89)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/a24e1713cb61b7a56482fb0a23eb94b642fbeb78)

* [OCPBUGS-15154](https://issues.redhat.com/browse/OCPBUGS-15154): Scope secret informers per namespace [#44](https://github.com/openshift/cloud-provider-vsphere/pull/44)
* [OCPBUGS-13133](https://issues.redhat.com/browse/OCPBUGS-13133): Updating ose-vsphere-cloud-controller-manager images to be consistent with ART [#37](https://github.com/openshift/cloud-provider-vsphere/pull/37)
* [OCPCLOUD-2048](https://issues.redhat.com/browse/OCPCLOUD-2048): Merge https://github.com/kubernetes/cloud-provider-vsphere:master (fb273c6) into master [#39](https://github.com/openshift/cloud-provider-vsphere/pull/39)
* Fix downstream commit detection [#41](https://github.com/openshift/cloud-provider-vsphere/pull/41)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/620beb383beeed1749775f0a1a0c78ed2b25ff87...a24e1713cb61b7a56482fb0a23eb94b642fbeb78)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/9f1d564131eae50d9d490a4518a699b8786ad346)

* [OCPBUGS-6465](https://issues.redhat.com/browse/OCPBUGS-6465), [OCPCLOUD-1875](https://issues.redhat.com/browse/OCPCLOUD-1875): Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.7.0 (7e9205d) into master [#16](https://github.com/openshift/cluster-api-provider-vsphere/pull/16)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/25234a6fdb4360b6c5145669a5d7157eb6db29ff...9f1d564131eae50d9d490a4518a699b8786ad346)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/ebc2f372718ad8b442b99a005773e6d8da5549a6)

* [OCPBUGS-17315](https://issues.redhat.com/browse/OCPBUGS-17315): UPSTREAM: 2494: Bump golang.org/x/net/html to fix CVE-2023-3978 (#2494) [#85](https://github.com/openshift/vmware-vsphere-csi-driver/pull/85)
* [OCPBUGS-16783](https://issues.redhat.com/browse/OCPBUGS-16783): Chore: Update OWNERS and OWNERS_ALIASES [#84](https://github.com/openshift/vmware-vsphere-csi-driver/pull/84)
* [OCPBUGS-12157](https://issues.redhat.com/browse/OCPBUGS-12157): Rebase v3.0.2 [#82](https://github.com/openshift/vmware-vsphere-csi-driver/pull/82)
* [OCPBUGS-13386](https://issues.redhat.com/browse/OCPBUGS-13386): Fix use of GetNodeByName when using node's VMUUID (#2387) [#80](https://github.com/openshift/vmware-vsphere-csi-driver/pull/80)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/3fde2e3361d60c66cb3913561ae647dc03c71d07...ebc2f372718ad8b442b99a005773e6d8da5549a6)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/4f65dc841ffac4797b6c419578d259ea6e61eb30)

* [OCPBUGS-16783](https://issues.redhat.com/browse/OCPBUGS-16783): Chore: Update OWNERS [#163](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/163)
* [OCPBUGS-16540](https://issues.redhat.com/browse/OCPBUGS-16540): Bump library-go to remove dependency on goproxy [#164](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/164)
* [STOR-1065](https://issues.redhat.com/browse/STOR-1065): Rework sidecar bindings to bind common ClusterRoles [#160](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/160)
* [OCPBUGS-14824](https://issues.redhat.com/browse/OCPBUGS-14824): Bump vmware-vsphere-csi-driver-operator library-go [#159](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/159)
* [STOR-1168](https://issues.redhat.com/browse/STOR-1168): Bump common libraries [#155](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/155)
* [STOR-1304](https://issues.redhat.com/browse/STOR-1304): Restart controller pods if metrics serving cert or webhook secret changed [#153](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/153)
* [OCPBUGS-14581](https://issues.redhat.com/browse/OCPBUGS-14581): Enable Windows supports [#158](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/158)
* [OCPBUGS-13386](https://issues.redhat.com/browse/OCPBUGS-13386): Use csinode id feature [#156](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/156)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/767b08d5d3f3987fb312274061a4f2e623121c82...4f65dc841ffac4797b6c419578d259ea6e61eb30)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/c5118c340b2683046fe5e24439395ca75709eebb)

* [OCPBUGS-14177](https://issues.redhat.com/browse/OCPBUGS-14177): Add a cache datacenters and datastores [#123](https://github.com/openshift/vsphere-problem-detector/pull/123)
* [STOR-1168](https://issues.redhat.com/browse/STOR-1168): Bump common libraries [#112](https://github.com/openshift/vsphere-problem-detector/pull/112)
* [OCPBUGS-13187](https://issues.redhat.com/browse/OCPBUGS-13187): Revert "Allow disabling the operator via ConfigMap" [#122](https://github.com/openshift/vsphere-problem-detector/pull/122)
* [OCPBUGS-13187](https://issues.redhat.com/browse/OCPBUGS-13187): Allow disabling the operator via ConfigMap [#116](https://github.com/openshift/vsphere-problem-detector/pull/116)
* [OCPBUGS-14089](https://issues.redhat.com/browse/OCPBUGS-14089): Check all storage classes including CSI storageclasses [#119](https://github.com/openshift/vsphere-problem-detector/pull/119)
* [OCPBUGS-13696](https://issues.redhat.com/browse/OCPBUGS-13696): Warn about CBT enabled VMs via vsphere-problem-detector [#113](https://github.com/openshift/vsphere-problem-detector/pull/113)
* [OCPBUGS-14029](https://issues.redhat.com/browse/OCPBUGS-14029): In UPI clusters VSphere platform could be nil [#115](https://github.com/openshift/vsphere-problem-detector/pull/115)
* [OCPBUGS-14023](https://issues.redhat.com/browse/OCPBUGS-14023): Log vcenter version information [#114](https://github.com/openshift/vsphere-problem-detector/pull/114)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/5858cfdeb3fd421e9aee5ba7165287e2c293b588...c5118c340b2683046fe5e24439395ca75709eebb)