# 4.14.0-0.okd-scos-2023-10-11-044258

Created: 2023-10-11 11:58:16 +0000 UTC

Image Digest: `sha256:924c1b5d938ae936dd0703bdd6787b8db1cbba949b4bcb1f547d0e0ca39e0f37`

Promoted from registry.ci.openshift.org/origin/release-scos:4.14.0-0.okd-scos-2023-10-11-044258


## Changes from 4.14.0-0.okd-scos-2023-08-17-022029

### Components

* Kubernetes upgraded from 1.27.4 to 1.27.6
* CentOS Stream CoreOS upgraded from 414.9.202308150731-0 to 414.9.202310101932-0


### Rebuilt images without code change

* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [9fa4016e](https://github.com/openshift/azure-disk-csi-driver/commit/9fa4016e0a53f4e218db6ea006d562784193fad3) `sha256:6d8ed394f088ede2f28b284b305fedb21bfbbf9982abbbadea8ee72767a91825`
* [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator) git [4db2f8aa](https://github.com/openshift/azure-disk-csi-driver-operator/commit/4db2f8aac33abbc600b72a82ebe205581a998a7b) `sha256:443944ab83aa2fd55aa36b168e89b942b5fcad6b4206879057ec9c0b05646afb`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [5112d391](https://github.com/openshift/azure-file-csi-driver/commit/5112d391f1b121d8b59c478fe2505e44440441fb) `sha256:0b594a3aed901e3b1d1abdd7d69f0cbbf0cc83c458c4a0c61f47dbe8b0ae3df1`
* [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator) git [8597fbd3](https://github.com/openshift/azure-file-csi-driver-operator/commit/8597fbd31f45dd1e387faa220eeb1a86ae618405) `sha256:2081020fd98ccaad1808eca29b65f3752127bee6f1c47ad171d9e372abe3affc`
* centos-stream-coreos-9 `sha256:60ae08ac655863600019da0adf6b817bd7edf7b9f84319e9a3c6f91e9ef808f8`
* centos-stream-coreos-9-extensions `sha256:d908a63e684488603f42396e95c938550aef694fa8939fc2fd56b8787366024d`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [466582d5](https://github.com/openshift/cluster-api-operator/commit/466582d5b0ecd28b1d62a3300fbe3770dca6224a) `sha256:ba53505eae3fb1277326db236549463834e2b7cf5b484401757dcd85c5930b0c`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [5e0d408e](https://github.com/openshift/cluster-samples-operator/commit/5e0d408e382eea606527ac32a750e0117a3214e1) `sha256:9e80dc52eeb6f7f6068b41dd975a0a557fae36d580e915f0813c44801f9b2684`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [9dd3eede](https://github.com/openshift/cluster-update-keys/commit/9dd3eedebc62725e806d7b52d640b70e61a96f98) `sha256:d33e3cf5636545443e7b6ba43c0c12e56eb883b11ac7562630ca2d2dff781d3b`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [19ba6278](https://github.com/openshift/csi-driver-shared-resource/commit/19ba62783892161cbe39f46dd923df5061d372ad) `sha256:7c569ce997bf9cf4077b4d5250d411c7727661c047e3b6b1a6258851353585bd`
* [csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource) git [19ba6278](https://github.com/openshift/csi-driver-shared-resource/commit/19ba62783892161cbe39f46dd923df5061d372ad) `sha256:e6794ccafe170509c2b724b6e8de8128a50f44fa89569c7f43ea55b1863641c4`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [9a76f330](https://github.com/openshift/csi-external-resizer/commit/9a76f330d7a03cfce9dbbb71f25febe3efc9271b) `sha256:1dd895ad5f98495e0c9ac65bd869e3c3c36e56f6f3339181d4a52b29ed0be968`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [712bf7c3](https://github.com/openshift/csi-external-snapshotter/commit/712bf7c316adfa0a3c8afc56d1db23abfadad58e) `sha256:0047ff0b74a9fb6ccca3c523be1e752fceaad8deff690a490080b9b190ec0ce2`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [957e1d03](https://github.com/openshift/csi-livenessprobe/commit/957e1d03570e07fb0825813ab7b751bc8543ebc2) `sha256:db000cb026408234913fb866387c3d22447f6a20cd6eef03a265085bdd6d97a6`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [f8635f76](https://github.com/openshift/csi-node-driver-registrar/commit/f8635f761f8f59b76c1056034fc5addb29071cfe) `sha256:e782d72d30facb6c44d2ced2b0ca6585e415394a1ed1392c83e5ca87c9efe18e`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [712bf7c3](https://github.com/openshift/csi-external-snapshotter/commit/712bf7c316adfa0a3c8afc56d1db23abfadad58e) `sha256:65e243ea9456b30fb090734225e6db492d5b2cfd00f02cf0a0e2a81b280e1dda`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [712bf7c3](https://github.com/openshift/csi-external-snapshotter/commit/712bf7c316adfa0a3c8afc56d1db23abfadad58e) `sha256:2b16984cd5ae0e7698c9c7e7f5187fd1ddd1b7eaf5fc82c841bb9fe619b781c9`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [f784dcaa](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/f784dcaa0f422eaebb2971ca987b1925bc17f21d) `sha256:c19b9c6fc2f5aba09b457234d33dbe52ac4f7814e8924d9de559750106791a5e`
* [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater) git [623de156](https://github.com/openshift/ibm-vpc-node-label-updater/commit/623de156aa396655a34c8a0df644a3c0ce982726) `sha256:66cafccbc131aac2e19ee38ba27c0d347b1ff8c53e01c3024818c4b374c2337c`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [9dd02305](https://github.com/openshift/image-customization-controller/commit/9dd02305b4cbaf521dd73fa1a95e4b4a9e8a01c2) `sha256:81b50ad8f93dab036c4502634585f088e22a6cffb25a93f84856d116138c3bfa`
* machine-os-content `sha256:60ae08ac655863600019da0adf6b817bd7edf7b9f84319e9a3c6f91e9ef808f8`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [7e454367](https://github.com/openshift/whereabouts-cni/commit/7e454367b5994241feb5dc713065508c5534f8f3) `sha256:5acdc7d362e36bd1aea8e2674365c0133caf502be15d70c9c8e46fa10eceadd4`
* [olm-catalogd](https://github.com/openshift/operator-framework-catalogd) git [ac4c5ab4](https://github.com/openshift/operator-framework-catalogd/commit/ac4c5ab4f7165352a9727591aee52ca953302f80) `sha256:ed18f24cbfe18795ba4927f2d2fd13a56894180e8424e7d79603448344c797e1`
* [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller) git [d8fa6353](https://github.com/openshift/operator-framework-operator-controller/commit/d8fa6353e75d8c4534c17a3b45a3babb6833e660) `sha256:7349fe2bdc920edd2538eeabd3ed5aee31a589de21463bc718fcd2ee3e68508b`
* [olm-rukpak](https://github.com/openshift/operator-framework-rukpak) git [652f7c07](https://github.com/openshift/operator-framework-rukpak/commit/652f7c07d0c253ea55aecfeff352ca4db8bdd794) `sha256:2dcb6838358d9e7c508dc930ffdacd65dfd9f91de4a527f521ce492a7924fe34`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [c5118c34](https://github.com/openshift/vsphere-problem-detector/commit/c5118c340b2683046fe5e24439395ca75709eebb) `sha256:397b57f6d3106ab0f7bf9608e805def716dac771f807abc8d29aac805a068a15`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/4e1a1e59cef06c75a9a09f6251ecbd19eecb8be5)

* [MGMT-15704](https://issues.redhat.com/browse/MGMT-15704): One typo and one missing piece of config, discovered after MGMT-15704 merged (#5465) [#5465](https://github.com/openshift/assisted-service/pull/5465)
* Bump OCP versions: 4.12 (#5467) [#5467](https://github.com/openshift/assisted-service/pull/5467)
* [MGMT-15653](https://issues.redhat.com/browse/MGMT-15653): Validate domain in one place (#5451) [#5451](https://github.com/openshift/assisted-service/pull/5451)
* [MGMT-15704](https://issues.redhat.com/browse/MGMT-15704): Assisted service should create Day2 import CR for hub cluster. (#5459) [#5459](https://github.com/openshift/assisted-service/pull/5459)
* [MGMT-15340](https://issues.redhat.com/browse/MGMT-15340): Ensure vlan interface names will be <= 15 characters (#5389) [#5389](https://github.com/openshift/assisted-service/pull/5389)
* NO-ISSUE: Add subsystem tests to platform support level (#5460) [#5460](https://github.com/openshift/assisted-service/pull/5460)
* Bump OCP versions: 4.10 (#5463) [#5463](https://github.com/openshift/assisted-service/pull/5463)
* Bump OCP versions: 4.13 (#5457) [#5457](https://github.com/openshift/assisted-service/pull/5457)
* Bump OCP versions: 4.13, 4.11, 4.12 (#5454) [#5454](https://github.com/openshift/assisted-service/pull/5454)
* [MGMT-11456](https://issues.redhat.com/browse/MGMT-11456): Bugfix - remove redundant code (#5372) [#5372](https://github.com/openshift/assisted-service/pull/5372)
* Bump OCP versions: 4.11, 4.12, 4.13 (#5452) [#5452](https://github.com/openshift/assisted-service/pull/5452)
* [AGENT-694](https://issues.redhat.com/browse/AGENT-694): Support external platform type for agent installer (#5438) [#5438](https://github.com/openshift/assisted-service/pull/5438)
* [MGMT-15100](https://issues.redhat.com/browse/MGMT-15100): Remove unused feature-support-levels API endpoint (#5450) [#5450](https://github.com/openshift/assisted-service/pull/5450)
* Update RHTAP references (#5410) [#5410](https://github.com/openshift/assisted-service/pull/5410)
* Fix setup_env.sh failure handling (#5442) [#5442](https://github.com/openshift/assisted-service/pull/5442)
* Add BMH annotation keys to docs (#5444) [#5444](https://github.com/openshift/assisted-service/pull/5444)
* OCPBUGS-17992 day2 skip install config overrides (#5439) [#5439](https://github.com/openshift/assisted-service/pull/5439)
* Bump OCP versions: 4.12, 4.10 (#5441) [#5441](https://github.com/openshift/assisted-service/pull/5441)
* [MGMT-14881](https://issues.redhat.com/browse/MGMT-14881): return a valid error when no disks has been found (#5430) [#5430](https://github.com/openshift/assisted-service/pull/5430)
* [MGMT-15595](https://issues.redhat.com/browse/MGMT-15595): Make client a separate go module (#5434) [#5434](https://github.com/openshift/assisted-service/pull/5434)
* [MGMT-15177](https://issues.redhat.com/browse/MGMT-15177): Align feature support level to support platform as filterable feature (#5424) [#5424](https://github.com/openshift/assisted-service/pull/5424)
* Bump OCP versions: 4.12 (#5432) [#5432](https://github.com/openshift/assisted-service/pull/5432)
* Bump OCP versions: 4.11, 4.13 (#5431) [#5431](https://github.com/openshift/assisted-service/pull/5431)
* Use go 1.18 when setting up environment (#5422) [#5422](https://github.com/openshift/assisted-service/pull/5422)
* [Full changelog](https://github.com/openshift/assisted-service/compare/9884233f6cfc55e0dca57ee3c02eb7feebb81c6e...4e1a1e59cef06c75a9a09f6251ecbd19eecb8be5)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/9fd99e3861fc32b8a608bb0c81344435e32ad004)

* NO-ISSUE: dependabot exclude k8s (#706) [#706](https://github.com/openshift/assisted-installer/pull/706)
* [OCPBUGS-16482](https://issues.redhat.com/browse/OCPBUGS-16482): bump golangci-lint to 1.53.1 (#702) [#702](https://github.com/openshift/assisted-installer/pull/702)
* [OCPBUGS-4240](https://issues.redhat.com/browse/OCPBUGS-4240): allow controller to complete for agent-based installs (#700) [#700](https://github.com/openshift/assisted-installer/pull/700)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/fd3e8f3e5ec0f29ecf44fdd07e898c81c7a06443...9fd99e3861fc32b8a608bb0c81344435e32ad004)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/e438a5e93d2b08ba670acf742c0f1c6ad44ab92b)

* NO-ISSUE: Bump the go-dependencies group with 1 update (#597) [#597](https://github.com/openshift/assisted-installer-agent/pull/597)
* NO-ISSUE: Bump the go-dependencies group with 5 updates (#595) [#595](https://github.com/openshift/assisted-installer-agent/pull/595)
* [MGMT-15661](https://issues.redhat.com/browse/MGMT-15661): Update to latest ghw version (#594) [#594](https://github.com/openshift/assisted-installer-agent/pull/594)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/bc89ea29ff1391092c0daa8cbad689c3b2791cbd...e438a5e93d2b08ba670acf742c0f1c6ad44ab92b)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/15cd4347b9384fac3d93029c6426dc15b964f557)

* [OCPBUGS-10187](https://issues.redhat.com/browse/OCPBUGS-10187): Updating ose-apiserver-network-proxy images to be consistent with ART [#30](https://github.com/openshift/apiserver-network-proxy/pull/30)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/61e198ca00b9426e2f7309cf2818ac74426486ff...15cd4347b9384fac3d93029c6426dc15b964f557)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/b0eaa31073158d843b972a16c9a53a5b517a4178)

* [OCPBUGS-16491](https://issues.redhat.com/browse/OCPBUGS-16491): UPSTREAM: <drop>: Bump goproxy to resolve CVE-2023-37788 [#233](https://github.com/openshift/aws-ebs-csi-driver/pull/233)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/3ff29e64537b9f895f4d4a52ca82f9c7aba1ef54...b0eaa31073158d843b972a16c9a53a5b517a4178)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/8925f3b1fc95f933b029bf13946dcafea646a74b)

* [OCPBUGS-18338](https://issues.redhat.com/browse/OCPBUGS-18338): Fix CI by running tests natively by default [#81](https://github.com/openshift/machine-api-provider-aws/pull/81)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/eac5ab103f4676b302c2d13228631ee9d835b808...8925f3b1fc95f933b029bf13946dcafea646a74b)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/cca9a841e807dd87708b82562fc5f376ed2f274c)

* [OCPBUGS-18026](https://issues.redhat.com/browse/OCPBUGS-18026): Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (ff9e8d8) into master [#75](https://github.com/openshift/cloud-provider-azure/pull/75)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/ae8acd030fdd6d1da19c7ad9111a86b352d41b9b...cca9a841e807dd87708b82562fc5f376ed2f274c)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/bb6ee0623b4b83146588b9f6fd40d7f4c3284522)

* [OCPBUGS-18338](https://issues.redhat.com/browse/OCPBUGS-18338): Fix CI by running tests natively by default [#74](https://github.com/openshift/machine-api-provider-azure/pull/74)
* Revert "Merge pull request #72 from RadekManak/azure-zone-no-pointer" [#73](https://github.com/openshift/machine-api-provider-azure/pull/73)
* [OCPBUGS-17851](https://issues.redhat.com/browse/OCPBUGS-17851): Update zone usage to use non-pointer [#72](https://github.com/openshift/machine-api-provider-azure/pull/72)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/458e10c9b4f57f1c26613da7e0c2b5feb7118921...bb6ee0623b4b83146588b9f6fd40d7f4c3284522)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/19ecee13ee6377d41aad9b4b9056600dd1838265)

* [OCPBUGS-19922](https://issues.redhat.com/browse/OCPBUGS-19922): Do not start agent-tui if no graphical console available [#7539](https://github.com/openshift/installer/pull/7539)
* [OCPBUGS-20103](https://issues.redhat.com/browse/OCPBUGS-20103): GCP default value for service account [#7553](https://github.com/openshift/installer/pull/7553)
* [OCPBUGS-19953](https://issues.redhat.com/browse/OCPBUGS-19953): AWS terraform bootstrap destroy will not refresh state [#7543](https://github.com/openshift/installer/pull/7543)
* [OCPBUGS-20066](https://issues.redhat.com/browse/OCPBUGS-20066): Use updated ansible-core for Openstack image [#7551](https://github.com/openshift/installer/pull/7551)
* [OCPBUGS-19835](https://issues.redhat.com/browse/OCPBUGS-19835): Enable FIPS in agent ISO [#7541](https://github.com/openshift/installer/pull/7541)
* [OCPBUGS-19846](https://issues.redhat.com/browse/OCPBUGS-19846): Graceful fail for AWS getUser on destroy [#7532](https://github.com/openshift/installer/pull/7532)
* [OCPBUGS-19033](https://issues.redhat.com/browse/OCPBUGS-19033): Add Net capabilities to dnsmasq container [#7489](https://github.com/openshift/installer/pull/7489)
* [OCPBUGS-19319](https://issues.redhat.com/browse/OCPBUGS-19319): Handle agent tui failure gracefully [#7497](https://github.com/openshift/installer/pull/7497)
* [OCPBUGS-19738](https://issues.redhat.com/browse/OCPBUGS-19738): Remove warning about CPUPartitioning [#7529](https://github.com/openshift/installer/pull/7529)
* [OCPBUGS-19300](https://issues.redhat.com/browse/OCPBUGS-19300): Implement workaround to allow SNO installations for OKD/FCOS [#7479](https://github.com/openshift/installer/pull/7479)
* [OCPBUGS-19702](https://issues.redhat.com/browse/OCPBUGS-19702): Increase bootstrap timeout for vSphere platform by 30 mins [#7528](https://github.com/openshift/installer/pull/7528)
* [OCPBUGS-19636](https://issues.redhat.com/browse/OCPBUGS-19636): Pass CPUPartitioning via install-config overrides if set [#7521](https://github.com/openshift/installer/pull/7521)
* [OCPBUGS-18181](https://issues.redhat.com/browse/OCPBUGS-18181): update RHCOS 4.14 bootimage metadata to 414.92.202309201615-0 [#7517](https://github.com/openshift/installer/pull/7517)
* [OCPBUGS-18719](https://issues.redhat.com/browse/OCPBUGS-18719): for vsphere ipi add cluster domain to the uploaded vm configs so that… [#7477](https://github.com/openshift/installer/pull/7477)
* [OCPBUGS-18883](https://issues.redhat.com/browse/OCPBUGS-18883): Do not set FailureDomains on CPMS when in a single zone Azure region [#7483](https://github.com/openshift/installer/pull/7483)
* [AGENT-702](https://issues.redhat.com/browse/AGENT-702): Generate minimal ISO for external platform [#7478](https://github.com/openshift/installer/pull/7478)
* [OCPBUGS-18428](https://issues.redhat.com/browse/OCPBUGS-18428): Add ip=dhcp,dhcp6 kernel param for vSphere dual-stack [#7467](https://github.com/openshift/installer/pull/7467)
* [OSDOCS-6999](https://issues.redhat.com/browse/OSDOCS-6999): tested machine series 'C3', 'C2D' [#7381](https://github.com/openshift/installer/pull/7381)
* [OCPBUGS-18450](https://issues.redhat.com/browse/OCPBUGS-18450): AWS permission missing for security group viewing. [#7460](https://github.com/openshift/installer/pull/7460)
* [OCPBUGS-18365](https://issues.redhat.com/browse/OCPBUGS-18365): Fix defaulting of userManagedNetworking value [#7458](https://github.com/openshift/installer/pull/7458)
* integration tests: Swap order of diff arguments [#7462](https://github.com/openshift/installer/pull/7462)
* [AGENT-693](https://issues.redhat.com/browse/AGENT-693): Support external platform [#7442](https://github.com/openshift/installer/pull/7442)
* [OCPBUGS-18457](https://issues.redhat.com/browse/OCPBUGS-18457): Make extracting ISO kargs more robust [#7463](https://github.com/openshift/installer/pull/7463)
* [OCPBUGS-18457](https://issues.redhat.com/browse/OCPBUGS-18457): Fix PXE integration tests [#7461](https://github.com/openshift/installer/pull/7461)
* [OCPBUGS-17806](https://issues.redhat.com/browse/OCPBUGS-17806): gomod: bump openshift/api version [#7421](https://github.com/openshift/installer/pull/7421)
* [OCPBUGS-17770](https://issues.redhat.com/browse/OCPBUGS-17770): azure: use marketplace image plan's publisher [#7426](https://github.com/openshift/installer/pull/7426)
* [OCPBUGS-7690](https://issues.redhat.com/browse/OCPBUGS-7690): azure: destroy: dns records leak if permissions missing [#7433](https://github.com/openshift/installer/pull/7433)
* [OCPBUGS-17869](https://issues.redhat.com/browse/OCPBUGS-17869): azure: fix setting outboundType [#7455](https://github.com/openshift/installer/pull/7455)
* [OSDOCS-6880](https://issues.redhat.com/browse/OSDOCS-6880): Adding 64-bit ARM GCP instance types to documentation [#7320](https://github.com/openshift/installer/pull/7320)
* [OCPBUGS-16204](https://issues.redhat.com/browse/OCPBUGS-16204): aws: attach additional security groups to controlPlane [#7352](https://github.com/openshift/installer/pull/7352)
* [OCPBUGS-18046](https://issues.redhat.com/browse/OCPBUGS-18046): update govc version to v0.30.7 [#7425](https://github.com/openshift/installer/pull/7425)
* [OCPBUGS-15659](https://issues.redhat.com/browse/OCPBUGS-15659): IPI pre-check for MachineAPI capability [#7414](https://github.com/openshift/installer/pull/7414)
* [OCPBUGS-17860](https://issues.redhat.com/browse/OCPBUGS-17860): OpenStack: Remove NodePorts range 0.0.0.0/0 rules [#7405](https://github.com/openshift/installer/pull/7405)
* [OCPBUGS-17073](https://issues.redhat.com/browse/OCPBUGS-17073): Revert "Merge pull request #7205 from rna-afk/azure_managed_by_tag" [#7412](https://github.com/openshift/installer/pull/7412)
* [OCPBUGS-17940](https://issues.redhat.com/browse/OCPBUGS-17940): Add COS endpoint to proxy server (Power VS) [#7430](https://github.com/openshift/installer/pull/7430)
* [AGENT-692](https://issues.redhat.com/browse/AGENT-692), [OCPBUGS-3860](https://issues.redhat.com/browse/OCPBUGS-3860): Update assisted-service dependencies [#7439](https://github.com/openshift/installer/pull/7439)
* [OCPBUGS-17227](https://issues.redhat.com/browse/OCPBUGS-17227): gcp: fix validation of custom instance types [#7388](https://github.com/openshift/installer/pull/7388)
* [OCPBUGS-17869](https://issues.redhat.com/browse/OCPBUGS-17869): azure: put NAT gateway behind TechPreviewNoUpgrade [#7434](https://github.com/openshift/installer/pull/7434)
* Destroy startironic.sh forever [#7250](https://github.com/openshift/installer/pull/7250)
* [CORS-2660](https://issues.redhat.com/browse/CORS-2660): GCP: deprecate the licenses field [#7397](https://github.com/openshift/installer/pull/7397)
* [CFE-858](https://issues.redhat.com/browse/CFE-858): Update google terraform provider to latest version [#7201](https://github.com/openshift/installer/pull/7201)
* [MULTIARCH-3676](https://issues.redhat.com/browse/MULTIARCH-3676): PowerVS TG terraform changes [#7389](https://github.com/openshift/installer/pull/7389)
* [CFE-686](https://issues.redhat.com/browse/CFE-686): Generate Infrastructure CR with the GCP user defined tags & labels [#7138](https://github.com/openshift/installer/pull/7138)
* [CFE-687](https://issues.redhat.com/browse/CFE-687): Apply user defined labels on created gcp resources [#7153](https://github.com/openshift/installer/pull/7153)
* [OCPBUGS-11999](https://issues.redhat.com/browse/OCPBUGS-11999): upkeep: updated description to remove techpreview [#7313](https://github.com/openshift/installer/pull/7313)
* [CORS-2700](https://issues.redhat.com/browse/CORS-2700): Make bootstrap S3 bucket optional during bootstrap destroy [#7288](https://github.com/openshift/installer/pull/7288)
* [CFE-688](https://issues.redhat.com/browse/CFE-688): Update install-config CRD to support gcp labels and tags [#7126](https://github.com/openshift/installer/pull/7126)
* [Full changelog](https://github.com/openshift/installer/compare/db0eb03e5f9d5934df6449cee75b1e85d4985e35...19ecee13ee6377d41aad9b4b9056600dd1838265)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/fa79a768cc7ceddc7c013851522387ab92c633f5)

* [OCPBUGS-17255](https://issues.redhat.com/browse/OCPBUGS-17255): Use go 1.20 and uplift x/net to v0.13.0 [#195](https://github.com/openshift/cluster-api-provider-baremetal/pull/195)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/72ddc3cdda60e902ffdfd64f3301954b095386d6...fa79a768cc7ceddc7c013851522387ab92c633f5)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/887b94a7453321f3f492a2de7b69c891aaceeacf)

* [OCPBUGS-20080](https://issues.redhat.com/browse/OCPBUGS-20080): Increase timeout for bootstrap kubeapi [#277](https://github.com/openshift/baremetal-runtimecfg/pull/277)
* [OCPBUGS-18257](https://issues.redhat.com/browse/OCPBUGS-18257): Move haproxy firewall rule check earlier in loop [#270](https://github.com/openshift/baremetal-runtimecfg/pull/270)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/8296040e7154cb420cb4c00b2c3e921f58a2a3d5...887b94a7453321f3f492a2de7b69c891aaceeacf)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/1c47b7e520a71227782d86ba83a9bf3309191f3a)

* [OCPBUGS-20269](https://issues.redhat.com/browse/OCPBUGS-20269): Use quay redis image instead docker mysql [#1562](https://github.com/openshift/oc/pull/1562)
* [OCPBUGS-17925](https://issues.redhat.com/browse/OCPBUGS-17925): pkg/cli/admin/prune/images: omit not found error for deployment configs [#1530](https://github.com/openshift/oc/pull/1530)
* [OCPBUGS-17253](https://issues.redhat.com/browse/OCPBUGS-17253): Bump go x/net library to 0.13.0 [#1529](https://github.com/openshift/oc/pull/1529)
* [OTA-559](https://issues.redhat.com/browse/OTA-559): Revert "Revert "pkg/cli/admin/release/extract: Add --included and --install-config"" [#1528](https://github.com/openshift/oc/pull/1528)
* [OCPBUGS-17711](https://issues.redhat.com/browse/OCPBUGS-17711): Revert "pkg/cli/admin/release/extract: Add --included and --install-config" [#1527](https://github.com/openshift/oc/pull/1527)
* [Full changelog](https://github.com/openshift/oc/compare/3803a930a671c0ffb1cbc6281c5ade48cde76762...1c47b7e520a71227782d86ba83a9bf3309191f3a)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/6956fe53f3a25c6e521ace789eb01d35d0548d1c)

* [OCPBUGS-19865](https://issues.redhat.com/browse/OCPBUGS-19865): Add networkResourceGroupName parameter for Azure [#602](https://github.com/openshift/cloud-credential-operator/pull/602)
* [OCPBUGS-17719](https://issues.redhat.com/browse/OCPBUGS-17719): Double timeout delays for managed identity creation and role assignment from 2 to 4 minutes. [#591](https://github.com/openshift/cloud-credential-operator/pull/591)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/d85c7534660a43a3f3248aec74c383b1acb36cb7...6956fe53f3a25c6e521ace789eb01d35d0548d1c)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/159e2bd406a82efed33b32204b7692cc50dee64c)

* [OCPBUGS-17151](https://issues.redhat.com/browse/OCPBUGS-17151): AWS: Skipping Unusable Network Interfaces [#120](https://github.com/openshift/cloud-network-config-controller/pull/120)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/093e68b12909732c450aabe3c740f249ad9bc445...159e2bd406a82efed33b32204b7692cc50dee64c)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/bebf0fd3932be12594227b415fecd5d664611bc0)

* [OCPBUGS-8093](https://issues.redhat.com/browse/OCPBUGS-8093): properly set the pod name and namespace in graceful termination lifecycle events [#628](https://github.com/openshift/cluster-authentication-operator/pull/628)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/9cfbd903213ac9e7c5ea5eeacb5cea8952057d9c...bebf0fd3932be12594227b415fecd5d664611bc0)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/0822c7b7429a6fbea65e9d472594689429501491)

* [OCPBUGS-19697](https://issues.redhat.com/browse/OCPBUGS-19697): UPSTREAM: 6066: Allow overriding the kubernetes.io/arch label set by the scale from zero methods via a new cmdline arg [#263](https://github.com/openshift/kubernetes-autoscaler/pull/263)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/970eb9f35fb1ad49e6cdb761643728e477e7750a...0822c7b7429a6fbea65e9d472594689429501491)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/63b23fcfd58295f24a9bc5bf524560a8f6e7b31f)

* [OCPBUGS-20038](https://issues.redhat.com/browse/OCPBUGS-20038): Ensure status reporter caches exit if they don't sync [#292](https://github.com/openshift/cluster-autoscaler-operator/pull/292)
* [OCPBUGS-19496](https://issues.redhat.com/browse/OCPBUGS-19496): cluster-autoscaler-operator: clusterrole add clusteroperators watch [#288](https://github.com/openshift/cluster-autoscaler-operator/pull/288)
* [OCPBUGS-19697](https://issues.redhat.com/browse/OCPBUGS-19697): Provide the architecture of the control plane as argument to --scale-up-from-zero-default-arch [#290](https://github.com/openshift/cluster-autoscaler-operator/pull/290)
* [OCPBUGS-18278](https://issues.redhat.com/browse/OCPBUGS-18278): Address long acquire times during upgrade [#281](https://github.com/openshift/cluster-autoscaler-operator/pull/281)
* [OCPBUGS-18338](https://issues.redhat.com/browse/OCPBUGS-18338): Fix CI by running tests natively by default [#282](https://github.com/openshift/cluster-autoscaler-operator/pull/282)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/e661f50c894eb5de51a044632fd66fd957b60234...63b23fcfd58295f24a9bc5bf524560a8f6e7b31f)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/e3ae0d56fae72363516b87cca1a5bb2f044e12b4)

* [OCPBUGS-19545](https://issues.redhat.com/browse/OCPBUGS-19545): Remove metrics port from baremetal-operator [#366](https://github.com/openshift/cluster-baremetal-operator/pull/366)
* [OCPBUGS-18934](https://issues.redhat.com/browse/OCPBUGS-18934): Guard against nil PlatformStatus [#360](https://github.com/openshift/cluster-baremetal-operator/pull/360)
* [OCPBUGS-18059](https://issues.redhat.com/browse/OCPBUGS-18059): Inject OpenShift CA and proxy information to BMO [#358](https://github.com/openshift/cluster-baremetal-operator/pull/358)
* [OCPBUGS-17693](https://issues.redhat.com/browse/OCPBUGS-17693): adjust meta3-state service ports when proxy is on [#354](https://github.com/openshift/cluster-baremetal-operator/pull/354)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/82bf672f3a16193025eba34ec23c9c82e78d7253...e3ae0d56fae72363516b87cca1a5bb2f044e12b4)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/59465af14f113db3c63ccd2c1f7b4b29c149e74f)

* [OCPBUGS-19849](https://issues.redhat.com/browse/OCPBUGS-19849): Set dual-stack IPFamilyPriority for vSphere [#283](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/283)
* [OCPBUGS-19790](https://issues.redhat.com/browse/OCPBUGS-19790): Ensure subnets read permission for granular roles [#282](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/282)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/786dda44224610b4dd78f2b953a90686e90b68fd...59465af14f113db3c63ccd2c1f7b4b29c149e74f)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/581a2d3b0e204d1f506f2ab8cf7ac81c40d07fbf)

* [OCPBUGS-16726](https://issues.redhat.com/browse/OCPBUGS-16726): psa - move into tech preview for 4.14 [#354](https://github.com/openshift/cluster-config-operator/pull/354)
* Revert "Bump to enable ValidatingAdmissionPolicy in tech preview." [#346](https://github.com/openshift/cluster-config-operator/pull/346)
* Bump to enable ValidatingAdmissionPolicy in tech preview. [#343](https://github.com/openshift/cluster-config-operator/pull/343)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/204befc1b0c6bc576cfbf54ffc98291174348fb4...581a2d3b0e204d1f506f2ab8cf7ac81c40d07fbf)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/edb6246a9b0e9a250d9a66475f21b4830e60ba5a)

* [OCPBUGS-18056](https://issues.redhat.com/browse/OCPBUGS-18056): Address long acquire times during upgrade [#237](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/237)
* [OCPBUGS-18013](https://issues.redhat.com/browse/OCPBUGS-18013): Enhance wehbooks to dry run machine creation to validate provider spec [#230](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/230)
* Revert "OCPCLOUD-2130: Add subnet to Azure FD, fix for optional fields in FD" [#233](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/233)
* [OCPCLOUD-2130](https://issues.redhat.com/browse/OCPCLOUD-2130): Add subnet to Azure FD, fix for optional fields in FD [#229](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/229)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/534eb4c1b9fb626f31f65bb50916d059daf326e4...edb6246a9b0e9a250d9a66475f21b4830e60ba5a)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/d8632d0f509eee4989561b0760b2c5ba7f7daf0f)

* [OCPBUGS-18801](https://issues.redhat.com/browse/OCPBUGS-18801): Move readonlyRootFilesystem to the right place - 4.14 [#162](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/162)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/9a67364ca9b2761f9bfffd7f600018788f94a5dd...d8632d0f509eee4989561b0760b2c5ba7f7daf0f)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/f5f12b76e1d19ca9c98013158a0a5aae278a4d57)

* [OCPBUGS-18034](https://issues.redhat.com/browse/OCPBUGS-18034): Only bump lastTransitionTime on 'status' changes [#375](https://github.com/openshift/cluster-dns-operator/pull/375)
* [OCPBUGS-15605](https://issues.redhat.com/browse/OCPBUGS-15605): Update bufsize to 1232 bytes [#370](https://github.com/openshift/cluster-dns-operator/pull/370)
* [OCPBUGS-13209](https://issues.redhat.com/browse/OCPBUGS-13209): Revert "Set DNS DaemonSet's maxSurge value to 10%" [#379](https://github.com/openshift/cluster-dns-operator/pull/379)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/6cfee191de08cede60bed8cea6f8e17f730adf61...f5f12b76e1d19ca9c98013158a0a5aae278a4d57)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/ccb176348edb194b9ce2f22edeedc74e27cd8f23)

* [OCPBUGS-20245](https://issues.redhat.com/browse/OCPBUGS-20245): relax readiness to local serializable requests [#1135](https://github.com/openshift/cluster-etcd-operator/pull/1135)
* [OCPBUGS-19499](https://issues.redhat.com/browse/OCPBUGS-19499): Avoid caching etcdctl on cluster-backup.sh [#1120](https://github.com/openshift/cluster-etcd-operator/pull/1120)
* [OCPBUGS-19910](https://issues.redhat.com/browse/OCPBUGS-19910): introduce backup removal controller [#1127](https://github.com/openshift/cluster-etcd-operator/pull/1127)
* [OCPBUGS-19553](https://issues.redhat.com/browse/OCPBUGS-19553): Update static pod manifests perms [#1122](https://github.com/openshift/cluster-etcd-operator/pull/1122)
* [OCPBUGS-19002](https://issues.redhat.com/browse/OCPBUGS-19002): restore the correct static pod list [#1112](https://github.com/openshift/cluster-etcd-operator/pull/1112)
* [OCPBUGS-18781](https://issues.redhat.com/browse/OCPBUGS-18781): prepend authfile to podman create [#1106](https://github.com/openshift/cluster-etcd-operator/pull/1106)
* [ETCD-458](https://issues.redhat.com/browse/ETCD-458): Add etcd pod tuning configuration from api [#1086](https://github.com/openshift/cluster-etcd-operator/pull/1086)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/6c205c247a3965132d6c73d098126996f9768a95...ccb176348edb194b9ce2f22edeedc74e27cd8f23)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/b0ee859b641ff2b1d9896d0cd13743ee3335051a)

* [OCPBUGS-18794](https://issues.redhat.com/browse/OCPBUGS-18794): check if response is nil before using it [#917](https://github.com/openshift/cluster-image-registry-operator/pull/917)
* [OCPVE-632](https://issues.redhat.com/browse/OCPVE-632): add capability annotations to manifests [#856](https://github.com/openshift/cluster-image-registry-operator/pull/856)
* [OCPBUGS-17882](https://issues.redhat.com/browse/OCPBUGS-17882): Add rbac permission IDMS, ITMS [#891](https://github.com/openshift/cluster-image-registry-operator/pull/891)
* [TRT-1193](https://issues.redhat.com/browse/TRT-1193): Revert "IR-373: remove node-ca daemon" [#899](https://github.com/openshift/cluster-image-registry-operator/pull/899)
* [CFE-846](https://issues.redhat.com/browse/CFE-846): Add user defined tags to the GCP buckets created [#873](https://github.com/openshift/cluster-image-registry-operator/pull/873)
* [IR-373](https://issues.redhat.com/browse/IR-373): remove node-ca daemon [#867](https://github.com/openshift/cluster-image-registry-operator/pull/867)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/717e1201d416b278af3bf7d73fb65c404dd39fda...b0ee859b641ff2b1d9896d0cd13743ee3335051a)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/cd9777112490675bcb38d1aaff13e6082965eeb5)

* [OCPBUGS-15978](https://issues.redhat.com/browse/OCPBUGS-15978): Check public DNS zone when reporting status [#967](https://github.com/openshift/cluster-ingress-operator/pull/967)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/be01a227e9072ce0b2fb825669c7cbeb8be12ce9...cd9777112490675bcb38d1aaff13e6082965eeb5)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/8b38d12efe5f4c4906473acbe53e36961e91490f)

* [OCPBUGS-19553](https://issues.redhat.com/browse/OCPBUGS-19553): Update static pod manifests perms [#1556](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1556)
* [OCPBUGS-19353](https://issues.redhat.com/browse/OCPBUGS-19353): manifests: don't include recording rules when Console capability is not enabled [#1551](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1551)
* [OCPBUGS-10362](https://issues.redhat.com/browse/OCPBUGS-10362): revert dev cert rotation on 4.14 [#1545](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1545)
* [OCPBUGS-17436](https://issues.redhat.com/browse/OCPBUGS-17436): Unrevert 1536 and 1538. [#1541](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1541)
* Reverts DynamicResourceAllocation enablement on techpreview [#1540](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1540)
* [OCPBUGS-17436](https://issues.redhat.com/browse/OCPBUGS-17436): Enable DynamicResourceAllocation API in kube-apiserver [#1538](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1538)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/7864ef22791d34787956e160160654054832864d...8b38d12efe5f4c4906473acbe53e36961e91490f)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/ba1ef05c11c467896e3eaf167ad43917ff38cc1d)

* [OCPBUGS-19553](https://issues.redhat.com/browse/OCPBUGS-19553): Update static pod manifests perms [#749](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/749)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/d95b0c25ba55c4ef8e09e56461562ee60b22d51c...ba1ef05c11c467896e3eaf167ad43917ff38cc1d)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/90992f08144cbf9ee137108dfaac15e4bb9c2672)

* [OCPBUGS-19553](https://issues.redhat.com/browse/OCPBUGS-19553): Update static pod manifests perms [#495](https://github.com/openshift/cluster-kube-scheduler-operator/pull/495)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/db92b6d9fcf410aa24efc4a70c4114925bb7b797...90992f08144cbf9ee137108dfaac15e4bb9c2672)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/332cb1cd0f9a00c03e3f9d400ae8483abd03036c)

* Revert "specify master node selector on migrator pod" [#93](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/93)
* [OCPBUGS-17170](https://issues.redhat.com/browse/OCPBUGS-17170): specify master node selector on migrator pod [#92](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/92)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/f3e404cfbce5a16461c60793f2914e600aa1a18b...332cb1cd0f9a00c03e3f9d400ae8483abd03036c)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/d364966705ccb291cc9e14a614c3a2f638128b81)

* [OCPBUGS-19305](https://issues.redhat.com/browse/OCPBUGS-19305): Set logger for controller runtime [#202](https://github.com/openshift/cluster-machine-approver/pull/202)
* [OCPBUGS-18338](https://issues.redhat.com/browse/OCPBUGS-18338): Fix CI by running tests natively by default [#199](https://github.com/openshift/cluster-machine-approver/pull/199)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/eccf08875e8db30847c4317e7429e7dfb4141c76...d364966705ccb291cc9e14a614c3a2f638128b81)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/6bcad80b6da754012c78a49f01e2725fb620ff6c)

* [OCPBUGS-19355](https://issues.redhat.com/browse/OCPBUGS-19355): add topologySpreadConstraints to UWM prometheus operator [#2087](https://github.com/openshift/cluster-monitoring-operator/pull/2087)
* [OCPBUGS-19397](https://issues.redhat.com/browse/OCPBUGS-19397): Enable ipv6 on monitoring-plugin nginx [#2091](https://github.com/openshift/cluster-monitoring-operator/pull/2091)
* [OCPBUGS-19361](https://issues.redhat.com/browse/OCPBUGS-19361): Topology spread constraints admission webhook [#2088](https://github.com/openshift/cluster-monitoring-operator/pull/2088)
* [MON-3304](https://issues.redhat.com/browse/MON-3304): Add option to specify resource limits for all components [#2067](https://github.com/openshift/cluster-monitoring-operator/pull/2067)
* [OCPBUGS-17690](https://issues.redhat.com/browse/OCPBUGS-17690): remove deprecated argument [#2075](https://github.com/openshift/cluster-monitoring-operator/pull/2075)
* [OCPBUGS-17691](https://issues.redhat.com/browse/OCPBUGS-17691): replace outdated repository link [#2074](https://github.com/openshift/cluster-monitoring-operator/pull/2074)
* [MON-2641](https://issues.redhat.com/browse/MON-2641): Add e2e tests for AlertingRule controller [#2054](https://github.com/openshift/cluster-monitoring-operator/pull/2054)
* Add telemeter client SA to rbac proxy [#2043](https://github.com/openshift/cluster-monitoring-operator/pull/2043)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/e5b58df35d79e88c04a85e7b3aef30904adddb65...6bcad80b6da754012c78a49f01e2725fb620ff6c)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/ed997d2e9698a1b6fa1c187b1eb1d5c4a697cc08)

* [OCPBUGS-20254](https://issues.redhat.com/browse/OCPBUGS-20254): [release-4.14] Revert Kuryr MTU fixes [#2046](https://github.com/openshift/cluster-network-operator/pull/2046)
* [OCPBUGS-20184](https://issues.redhat.com/browse/OCPBUGS-20184): [release-4.14]: Don't run network node identity as root [#2054](https://github.com/openshift/cluster-network-operator/pull/2054)
* [OCPBUGS-20064](https://issues.redhat.com/browse/OCPBUGS-20064): Multus should determine kubeconfig path [backport 4.14] [#2050](https://github.com/openshift/cluster-network-operator/pull/2050)
* [OCPBUGS-19955](https://issues.redhat.com/browse/OCPBUGS-19955): get ipsecStatus from host daemonset [#2045](https://github.com/openshift/cluster-network-operator/pull/2045)
* [OCPBUGS-19862](https://issues.redhat.com/browse/OCPBUGS-19862): Multus per-node certificates should have 24h duration [backport 4.14] [#2040](https://github.com/openshift/cluster-network-operator/pull/2040)
* [OCPBUGS-19523](https://issues.redhat.com/browse/OCPBUGS-19523): use $CPE_NAME to find the OS major version [#2017](https://github.com/openshift/cluster-network-operator/pull/2017)
* [OCPBUGS-19808](https://issues.redhat.com/browse/OCPBUGS-19808): remove prestop hooks for northd, sbdbd and nbdb [#2036](https://github.com/openshift/cluster-network-operator/pull/2036)
* [OCPBUGS-19747](https://issues.redhat.com/browse/OCPBUGS-19747): [release-4.14] Use port 9108 for ovnkube-control-plane metrics [#2033](https://github.com/openshift/cluster-network-operator/pull/2033)
* [OCPBUGS-19771](https://issues.redhat.com/browse/OCPBUGS-19771): Relax conditions to get IC upgrade started [#2035](https://github.com/openshift/cluster-network-operator/pull/2035)
* [OCPBUGS-19748](https://issues.redhat.com/browse/OCPBUGS-19748): Fix config status MTU migration not being updated [#2034](https://github.com/openshift/cluster-network-operator/pull/2034)
* [OCPBUGS-19725](https://issues.redhat.com/browse/OCPBUGS-19725): Do not enable node admission webhook if the CNI is not OVN-Kubernetes [#2032](https://github.com/openshift/cluster-network-operator/pull/2032)
* [OCPBUGS-19686](https://issues.redhat.com/browse/OCPBUGS-19686): ipsec: remove preStop from host [#2029](https://github.com/openshift/cluster-network-operator/pull/2029)
* [OCPBUGS-19627](https://issues.redhat.com/browse/OCPBUGS-19627): Multus per-node certificate request [backport 4.14] [#2023](https://github.com/openshift/cluster-network-operator/pull/2023)
* [OCPBUGS-19461](https://issues.redhat.com/browse/OCPBUGS-19461): make ipsec.service required [#2014](https://github.com/openshift/cluster-network-operator/pull/2014)
* [OCPBUGS-19649](https://issues.redhat.com/browse/OCPBUGS-19649): Network node identity: node-specific certificate in ovnkube-node, admission webhook [#2011](https://github.com/openshift/cluster-network-operator/pull/2011)
* [OCPBUGS-19623](https://issues.redhat.com/browse/OCPBUGS-19623): multus: set MULTUS_NODE_NAME to filter pods to local node [#2022](https://github.com/openshift/cluster-network-operator/pull/2022)
* [OCPBUGS-19481](https://issues.redhat.com/browse/OCPBUGS-19481): separate libovsdblogs from main ovnkube-master [#2008](https://github.com/openshift/cluster-network-operator/pull/2008)
* [OCPBUGS-18728](https://issues.redhat.com/browse/OCPBUGS-18728): Kuryr: Set MTU on Bootstrap, not Render phase [#1995](https://github.com/openshift/cluster-network-operator/pull/1995)
* [OCPBUGS-18871](https://issues.redhat.com/browse/OCPBUGS-18871): ipsec: fix oopsy from 2e3fc8e7a0 [#1997](https://github.com/openshift/cluster-network-operator/pull/1997)
* [OCPBUGS-18874](https://issues.redhat.com/browse/OCPBUGS-18874): ovnkube: set northd backoff-interval and use a single thread to save CPU [#1998](https://github.com/openshift/cluster-network-operator/pull/1998)
* [OCPBUGS-18135](https://issues.redhat.com/browse/OCPBUGS-18135): IBMCloud specific: patch out management workload for dataplane component thats needed for bootstrapping [#1955](https://github.com/openshift/cluster-network-operator/pull/1955)
* move IPsec to host [#1849](https://github.com/openshift/cluster-network-operator/pull/1849)
* [OCPBUGS-17916](https://issues.redhat.com/browse/OCPBUGS-17916): Fix IC configmap lookup in pod_status.go [#1954](https://github.com/openshift/cluster-network-operator/pull/1954)
* [OCPBUGS-17677](https://issues.redhat.com/browse/OCPBUGS-17677): [Azure]CNCC failed to assign egressIP to NIC for Azure Workload Identity Cluster [#1980](https://github.com/openshift/cluster-network-operator/pull/1980)
* [OCPBUGS-18363](https://issues.redhat.com/browse/OCPBUGS-18363): Add '/etc/cni/multus/net.d' into volumemount in multus pod [#1979](https://github.com/openshift/cluster-network-operator/pull/1979)
* [OCPBUGS-18175](https://issues.redhat.com/browse/OCPBUGS-18175): Fix bond-cni's default directory in multus manifest [#1953](https://github.com/openshift/cluster-network-operator/pull/1953)
* [OCPBUGS-17782](https://issues.redhat.com/browse/OCPBUGS-17782), [SDN-3664](https://issues.redhat.com/browse/SDN-3664): Join ovnkube-controller and ovnkube-node container for multizone setup [#1971](https://github.com/openshift/cluster-network-operator/pull/1971)
* [OCPBUGS-16051](https://issues.redhat.com/browse/OCPBUGS-16051), [OCPBUGS-3176](https://issues.redhat.com/browse/OCPBUGS-3176): Enables IP Forwarding config in CNO [#1952](https://github.com/openshift/cluster-network-operator/pull/1952)
* [OCPBUGS-17257](https://issues.redhat.com/browse/OCPBUGS-17257): CVE-2023-3978: golang.org/x/net/html: Cross site scripting [#1935](https://github.com/openshift/cluster-network-operator/pull/1935)
* [OCPBUGS-17677](https://issues.redhat.com/browse/OCPBUGS-17677): [Azure] Add granular permission for assigning egressIP to NIC to Azure CredentialsRequest for workload identity. [#1949](https://github.com/openshift/cluster-network-operator/pull/1949)
* [OCPBUGS-17964](https://issues.redhat.com/browse/OCPBUGS-17964): ovn-k, managed: Align join subnet configuration [#1962](https://github.com/openshift/cluster-network-operator/pull/1962)
* [SDN-4024](https://issues.redhat.com/browse/SDN-4024): Add ANP Feature Gate [#1859](https://github.com/openshift/cluster-network-operator/pull/1859)
* [SDN-4057](https://issues.redhat.com/browse/SDN-4057): hypershift: Allow ovnkube-master and ovnkube-node to have different images [#1942](https://github.com/openshift/cluster-network-operator/pull/1942)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/b09becb6027bb65e1cb7cfceba02ab17ec342c56...ed997d2e9698a1b6fa1c187b1eb1d5c4a697cc08)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/a91f9945a89f6c5b68ee15618d20bc89e1c0caa6)

* [OCPBUGS-19459](https://issues.redhat.com/browse/OCPBUGS-19459): check for object being nil (#805) [#805](https://github.com/openshift/cluster-node-tuning-operator/pull/805)
* [OCPBUGS-19821](https://issues.redhat.com/browse/OCPBUGS-19821): e2e: perfprof: enhance the scheduling domain tests (#813) [#813](https://github.com/openshift/cluster-node-tuning-operator/pull/813)
* nto: avoid timeout when there are too many CSV (#817) [#817](https://github.com/openshift/cluster-node-tuning-operator/pull/817)
* Add kubeconfig path for IBM Managed OpenShift (#812) [#812](https://github.com/openshift/cluster-node-tuning-operator/pull/812)
* [OCPBUGS-18868](https://issues.redhat.com/browse/OCPBUGS-18868): [release-4.14] e2e: add expected max latancy to hwlatdetec test & rename constant (#788) [#788](https://github.com/openshift/cluster-node-tuning-operator/pull/788)
* Sync DaemonSet if operand image changes (#785) [#785](https://github.com/openshift/cluster-node-tuning-operator/pull/785)
* [OCPBUGS-18392](https://issues.redhat.com/browse/OCPBUGS-18392): Change the OVN trigger file name to adapt to OVN IC (#777) [#777](https://github.com/openshift/cluster-node-tuning-operator/pull/777)
* [OCPBUGS-15044](https://issues.redhat.com/browse/OCPBUGS-15044): e2e:irqloadbalance: wait for profile revert (#768) [#768](https://github.com/openshift/cluster-node-tuning-operator/pull/768)
* Add SetLogger() prior to controller-runtime start (#779) [#779](https://github.com/openshift/cluster-node-tuning-operator/pull/779)
* [OCPBUGS-18052](https://issues.redhat.com/browse/OCPBUGS-18052): feat: added logic to handle legacy sno install (#778) [#778](https://github.com/openshift/cluster-node-tuning-operator/pull/778)
* [OCPBUGS-17943](https://issues.redhat.com/browse/OCPBUGS-17943): Add rtentsk plugin to pp tuned profile (#767) [#767](https://github.com/openshift/cluster-node-tuning-operator/pull/767)
* Tighten the rules for modifying Tuned Profiles (#775) [#775](https://github.com/openshift/cluster-node-tuning-operator/pull/775)
* Revert "Tighten the rules for modifying Tuned Profiles (#765)" (#771) [#765](https://github.com/openshift/cluster-node-tuning-operator/pull/765)
* Tighten the rules for modifying Tuned Profiles (#765) [#765](https://github.com/openshift/cluster-node-tuning-operator/pull/765)
* [OCPBUGS-14026](https://issues.redhat.com/browse/OCPBUGS-14026): cgroup: Match the name of the cgroup to what is expected by kubelet (#758) [#758](https://github.com/openshift/cluster-node-tuning-operator/pull/758)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/034744a1b05231967c4def3de1f0b917ba53fc19...a91f9945a89f6c5b68ee15618d20bc89e1c0caa6)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/7f0f4f9c1acbb5d40485e4806f1b1dea39bb4855)

* [OCPBUGS-18992](https://issues.redhat.com/browse/OCPBUGS-18992): Always sort disabled controller list [#303](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/303)
* [OCPBUGS-18980](https://issues.redhat.com/browse/OCPBUGS-18980): Disable BuildConfigChange controller when Build cap is disabled [#301](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/301)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/d6eca58c0b87ef2e85a0c262492bff24aa5676b0...7f0f4f9c1acbb5d40485e4806f1b1dea39bb4855)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/b3cb22fa48308962b4b520cd3ae694967c769bae)

* [OCPBUGS-17989](https://issues.redhat.com/browse/OCPBUGS-17989): pkg/psalabelsyncer: enforce syncing in case label is set [#129](https://github.com/openshift/cluster-policy-controller/pull/129)
* [AUTH-413](https://issues.redhat.com/browse/AUTH-413): ps syncer: only sync labels if noone else is managing them [#127](https://github.com/openshift/cluster-policy-controller/pull/127)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/e8565e6e3fdfa7ffd56c29539775847e4f6ab812...b3cb22fa48308962b4b520cd3ae694967c769bae)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/a091f80be76fbcb92fe49b2668c81fe6bf685c4e)

* [OCPBUGS-19921](https://issues.redhat.com/browse/OCPBUGS-19921): pkg/clusterconditions/cache: Avoid panic on all-fresh-cache evaluation [#976](https://github.com/openshift/cluster-version-operator/pull/976)
* [OCPBUGS-19737](https://issues.redhat.com/browse/OCPBUGS-19737): pkg/clusterconditions/promql: Warm cache with 1s delay [#973](https://github.com/openshift/cluster-version-operator/pull/973)
* [OCPBUGS-19465](https://issues.redhat.com/browse/OCPBUGS-19465): Properly reconcile SCC resources [#972](https://github.com/openshift/cluster-version-operator/pull/972)
* [OCPBUGS-13308](https://issues.redhat.com/browse/OCPBUGS-13308): Simplify user-facing messages on risk evaluation throttling [#955](https://github.com/openshift/cluster-version-operator/pull/955)
* [OCPBUGS-17418](https://issues.redhat.com/browse/OCPBUGS-17418): Really handle DeletedFinalStateUnknown correctly [#954](https://github.com/openshift/cluster-version-operator/pull/954)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/e9bfbe44024e633787b56c229a342db76721f28b...a091f80be76fbcb92fe49b2668c81fe6bf685c4e)


### [console](https://github.com/openshift/console/tree/3724a698e71340d3ecbb436c58ac5e716ea268bd)

* [OCPBUGS-19899](https://issues.redhat.com/browse/OCPBUGS-19899): change resource icon for FenceAgentRemediationTemplate… [#13204](https://github.com/openshift/console/pull/13204)
* [OCPBUGS-19878](https://issues.redhat.com/browse/OCPBUGS-19878): show all the legends for Pipeline metrics in PipelineRun TaskRun Duration chart [#13202](https://github.com/openshift/console/pull/13202)
* [OCPBUGS-19776](https://issues.redhat.com/browse/OCPBUGS-19776): 404 - not found will show on Knative-serving Details page [#13193](https://github.com/openshift/console/pull/13193)
* [OCPBUGS-19526](https://issues.redhat.com/browse/OCPBUGS-19526): fetch TaskRuns without selector and reduces the get TaskRuns requests [#13178](https://github.com/openshift/console/pull/13178)
* [OCPBUGS-18997](https://issues.redhat.com/browse/OCPBUGS-18997): fix issues with refactored "Create StorageClass" form [#13170](https://github.com/openshift/console/pull/13170)
* [OCPBUGS-19664](https://issues.redhat.com/browse/OCPBUGS-19664): Check if filtered object contains name property [#13187](https://github.com/openshift/console/pull/13187)
* [OCPBUGS-19380](https://issues.redhat.com/browse/OCPBUGS-19380): Hide the Builds NavItem if BuildConfig is not installed in the cluster [#13167](https://github.com/openshift/console/pull/13167)
* [OCPBUGS-19337](https://issues.redhat.com/browse/OCPBUGS-19337): Unhide the Import From Git Tab on the Add page if Pipelines Operator is installed and BuildConfig is not installed in the cluster [#13160](https://github.com/openshift/console/pull/13160)
* [OCPBUGS-19336](https://issues.redhat.com/browse/OCPBUGS-19336): Added React Icon [#13159](https://github.com/openshift/console/pull/13159)
* [OCPBUGS-18881](https://issues.redhat.com/browse/OCPBUGS-18881): use active namespace in Create cta href of create action for operator backed [#13150](https://github.com/openshift/console/pull/13150)
* [OCPBUGS-19362](https://issues.redhat.com/browse/OCPBUGS-19362): Hide the DeploymentConfig option in the User Preferences if that resource type isn't available [#13164](https://github.com/openshift/console/pull/13164)
* [OCPBUGS-19338](https://issues.redhat.com/browse/OCPBUGS-19338): Hide DeploymentConfig option from forms when it's not installed in the cluster [#13161](https://github.com/openshift/console/pull/13161)
* [OCPBUGS-18987](https://issues.redhat.com/browse/OCPBUGS-18987): Monitoring: Fix display of silenced alerts in dev console [#13152](https://github.com/openshift/console/pull/13152)
* [OCPBUGS-18727](https://issues.redhat.com/browse/OCPBUGS-18727): bump @patternfly/react-core to v4.276.11 to pick up Sele… [#13146](https://github.com/openshift/console/pull/13146)
* [OCPBUGS-18686](https://issues.redhat.com/browse/OCPBUGS-18686): Fix incorrect export of useLabelsModal in dynamic plug… [#13142](https://github.com/openshift/console/pull/13142)
* [OCPBUGS-18604](https://issues.redhat.com/browse/OCPBUGS-18604): [knative] Don't rely on openshift/hello-openshift as a sample image [#13134](https://github.com/openshift/console/pull/13134)
* [OCPBUGS-18094](https://issues.redhat.com/browse/OCPBUGS-18094): Remove cluster filter and menu group title [#13137](https://github.com/openshift/console/pull/13137)
* [OCPBUGS-18348](https://issues.redhat.com/browse/OCPBUGS-18348): Add deprecation alert for DeploymentConfig [#12968](https://github.com/openshift/console/pull/12968)
* [OCPBUGS-13359](https://issues.redhat.com/browse/OCPBUGS-13359): Fix crash when filtering the quick start catalog [#13126](https://github.com/openshift/console/pull/13126)
* [OCPBUGS-18306](https://issues.redhat.com/browse/OCPBUGS-18306): fix useDeleteModal Example formatting [#13117](https://github.com/openshift/console/pull/13117)
* [OCPBUGS-18406](https://issues.redhat.com/browse/OCPBUGS-18406): Builds navigation item is missing in Developer perspective [#13124](https://github.com/openshift/console/pull/13124)
* [OCPBUGS-17341](https://issues.redhat.com/browse/OCPBUGS-17341): OCP console mandate secret for repository creation [#13084](https://github.com/openshift/console/pull/13084)
* [OCPBUGS-16108](https://issues.redhat.com/browse/OCPBUGS-16108): Fix DeploymentConfig list performance issues by lazy loading their ReplicationControllers [#13118](https://github.com/openshift/console/pull/13118)
* [CONSOLE-3126](https://issues.redhat.com/browse/CONSOLE-3126): Update cluster paused alert message [#13106](https://github.com/openshift/console/pull/13106)
* [OCPBUGS-17864](https://issues.redhat.com/browse/OCPBUGS-17864): Web console slowness on Project>Project access page [#13099](https://github.com/openshift/console/pull/13099)
* [OCPBUGS-17981](https://issues.redhat.com/browse/OCPBUGS-17981): Remove DeploymentConfig, Build and BuildConfig sections from navigation and use flags so they can be enabled by cluster admins [#13089](https://github.com/openshift/console/pull/13089)
* [OCPBUGS-9182](https://issues.redhat.com/browse/OCPBUGS-9182): Enable default-container annotation to specify the default container for logs and terminal. [#13098](https://github.com/openshift/console/pull/13098)
* [OCPBUGS-17913](https://issues.redhat.com/browse/OCPBUGS-17913): Typo in the OCP console menu [#13096](https://github.com/openshift/console/pull/13096)
* [OCPBUGS-17948](https://issues.redhat.com/browse/OCPBUGS-17948): Fix that Devconsole plugin show essential features like add page and topology also when Builds and DeploymentConfigs capabilities are disabled [#13097](https://github.com/openshift/console/pull/13097)
* [OCPBUGS-13892](https://issues.redhat.com/browse/OCPBUGS-13892): Remove spaces from prometheus queries [#13043](https://github.com/openshift/console/pull/13043)
* [OCPBUGS-15927](https://issues.redhat.com/browse/OCPBUGS-15927): Error page when fresh normal user visiting BuildConfigs page of 'default' project [#13091](https://github.com/openshift/console/pull/13091)
* [OCPBUGS-16374](https://issues.redhat.com/browse/OCPBUGS-16374): Fix topology crash when a console.topology/data/factory extension tries to resolve a resource with version from the CRDs which doesn't exists [#13093](https://github.com/openshift/console/pull/13093)
* [CONSOLE-3327](https://issues.redhat.com/browse/CONSOLE-3327): Expose useActiveNamespace within dynamic-core-api [#13033](https://github.com/openshift/console/pull/13033)
* [OCPBUGS-17595](https://issues.redhat.com/browse/OCPBUGS-17595): Updating YAML from console shows error [#13090](https://github.com/openshift/console/pull/13090)
* [OU-206](https://issues.redhat.com/browse/OU-206): Merge monitoring alerts with alerts from other sources in the dev console [#12940](https://github.com/openshift/console/pull/12940)
* [CONSOLE-3681](https://issues.redhat.com/browse/CONSOLE-3681): Convert storage-class-form.tsx from class component to … [#13036](https://github.com/openshift/console/pull/13036)
* [Full changelog](https://github.com/openshift/console/compare/614383873a367e0af48d1f9969a1ff14b0b9aa3e...3724a698e71340d3ecbb436c58ac5e716ea268bd)


### [console-operator](https://github.com/openshift/console-operator/tree/483bbcfcf019a58afb70ae1b021ba01e074b09e0)

* [CONSOLE-3438](https://issues.redhat.com/browse/CONSOLE-3438): Switch to using assets [#783](https://github.com/openshift/console-operator/pull/783)
* [OCPBUGS-17424](https://issues.redhat.com/browse/OCPBUGS-17424): Really handle DeletedFinalStateUnknown correctly [#786](https://github.com/openshift/console-operator/pull/786)
* [Full changelog](https://github.com/openshift/console-operator/compare/5a6ccad6e2af315dad325c4fab9681838659466d...483bbcfcf019a58afb70ae1b021ba01e074b09e0)


### [coredns](https://github.com/openshift/coredns/tree/fd70cf1b81d3d3a907663f61b651201de5f8e4e7)

* [OCPBUGS-19805](https://issues.redhat.com/browse/OCPBUGS-19805): UPSTREAM: <carry>: openshift: Fix OCPBUGS-19805 [#96](https://github.com/openshift/coredns/pull/96)
* [Full changelog](https://github.com/openshift/coredns/compare/a2c62dd3976b27d6a45e273532c63ba914700917...fd70cf1b81d3d3a907663f61b651201de5f8e4e7)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/ea34192d229b15ef335be349005df184b4814be8)

* Configure User Agent [#191](https://github.com/openshift/csi-driver-manila-operator/pull/191)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/afa5b9995d305416ac193b1618fde653225afc36...ea34192d229b15ef335be349005df184b4814be8)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/890aaa16e176f6967dd8e07210d4eb1e735ed79c)

* [OCPBUGS-17264](https://issues.redhat.com/browse/OCPBUGS-17264): USPTREAM: 969: build(deps): bump golang.org/x/tools from 0.9.3 to 0.12.0 [#68](https://github.com/openshift/csi-external-provisioner/pull/68)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/3832852db71c55877fcf98f380bf376678359e8c...890aaa16e176f6967dd8e07210d4eb1e735ed79c)


### [docker-registry](https://github.com/openshift/image-registry/tree/5e7788a16fbbf051c16f28d590905a8f69cd29ac)

* [OCPBUGS-19379](https://issues.redhat.com/browse/OCPBUGS-19379): increase rest.Config QPS and Burst [#381](https://github.com/openshift/image-registry/pull/381)
* [OCPBUGS-17975](https://issues.redhat.com/browse/OCPBUGS-17975): Support both icsp and idms [#375](https://github.com/openshift/image-registry/pull/375)
* [Full changelog](https://github.com/openshift/image-registry/compare/d473f35223305fcf9e500962947facb2b9524fa2...5e7788a16fbbf051c16f28d590905a8f69cd29ac)


### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/afffdd455b65a944751f9155852781f9ddce0f5d)

* [OCPBUGS-19850](https://issues.redhat.com/browse/OCPBUGS-19850): Ensure that IP forwarding is enabled [#78](https://github.com/openshift/egress-router-cni/pull/78)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/657df81bd4b17181dca5a8c4cf3f1f0f803ac5dc...afffdd455b65a944751f9155852781f9ddce0f5d)


### [etcd](https://github.com/openshift/etcd/tree/ce96982907bdf2568473debfcff662793f366028)

* [OCPBUGS-18415](https://issues.redhat.com/browse/OCPBUGS-18415): Updating ose-etcd images to be consistent with ART [#208](https://github.com/openshift/etcd/pull/208)
* [OCPBUGS-18179](https://issues.redhat.com/browse/OCPBUGS-18179): UPSTREAM <carry>: update build images to rhel9 [#211](https://github.com/openshift/etcd/pull/211)
* [Full changelog](https://github.com/openshift/etcd/compare/5a36b9b6b329d92d7c26d1c944e6b1192f9d1523...ce96982907bdf2568473debfcff662793f366028)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/9d31a58dda48564d88faebbd53f48925c71a6cc5)

* [OCPBUGS-18338](https://issues.redhat.com/browse/OCPBUGS-18338): Fix CI by running tests natively by default [#57](https://github.com/openshift/machine-api-provider-gcp/pull/57)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/ebfce99dc654945c2d5a75a1fee1ece8a557ad29...9d31a58dda48564d88faebbd53f48925c71a6cc5)


### [haproxy-router](https://github.com/openshift/router/tree/80e2d999242203ad62c39ce758966531ba59dd2c)

* [OCPBUGS-17653](https://issues.redhat.com/browse/OCPBUGS-17653): haproxy/template: mitigate CVE-2023-40225 [#505](https://github.com/openshift/router/pull/505)
* [Full changelog](https://github.com/openshift/router/compare/44a5304cf8972d235468e813fe228ce36b1532e8...80e2d999242203ad62c39ce758966531ba59dd2c)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/98158f96f30cce46b1fca344fa2c87db7a9c4b4c)

* [OCPBUGS-18249](https://issues.redhat.com/browse/OCPBUGS-18249): <carry>: Export cpu stats of ovs.slice via prometheus [#1699](https://github.com/openshift/kubernetes/pull/1699)
* [OCPBUGS-20115](https://issues.redhat.com/browse/OCPBUGS-20115): Do not allow nodes to set forbidden openshift labels [#1736](https://github.com/openshift/kubernetes/pull/1736)
* Update builder & base hyperkube image to RHEL 9 [#1727](https://github.com/openshift/kubernetes/pull/1727)
* [OCPBUGS-19401](https://issues.redhat.com/browse/OCPBUGS-19401): UPSTREAM: <carry>: vendor: bump cadvisor and runc to 1.1.9 [#1713](https://github.com/openshift/kubernetes/pull/1713)
* [OCPBUGS-19952](https://issues.redhat.com/browse/OCPBUGS-19952): UPSTREAM: <carry>: kubelet/cm: use MkdirAll when creating cpuset to ignore file exists error [#1728](https://github.com/openshift/kubernetes/pull/1728)
* [OCPBUGS-15531](https://issues.redhat.com/browse/OCPBUGS-15531): UPSTREAM: 120786: change rolling update logic to exclude sunsetting nodes [#1717](https://github.com/openshift/kubernetes/pull/1717)
* [OCPBUGS-18285](https://issues.redhat.com/browse/OCPBUGS-18285), [OCPBUGS-19479](https://issues.redhat.com/browse/OCPBUGS-19479): Update to Kubernetes 1.27.6 [#1709](https://github.com/openshift/kubernetes/pull/1709)
* [OCPBUGS-18724](https://issues.redhat.com/browse/OCPBUGS-18724): cm: reorder setting of sched_load_balance for sandbox slice [#1693](https://github.com/openshift/kubernetes/pull/1693)
* [OCPBUGS-18608](https://issues.redhat.com/browse/OCPBUGS-18608): UPSTREAM: <carry>: Force using host go always and use host libriaries [#1688](https://github.com/openshift/kubernetes/pull/1688)
* [OCPBUGS-18149](https://issues.redhat.com/browse/OCPBUGS-18149): UPSTREAM: <carry>: retry etcd Unavailable errors [#1681](https://github.com/openshift/kubernetes/pull/1681)
* [OCPBUGS-18149](https://issues.redhat.com/browse/OCPBUGS-18149): UPSTREAM: <carry>: retry etcd Unavailable errors [#1676](https://github.com/openshift/kubernetes/pull/1676)
* [OCPBUGS-14301](https://issues.redhat.com/browse/OCPBUGS-14301): UPSTREAM: 117245: Fix TopologyAwareHint not working when zone label is added after Node creation [#1673](https://github.com/openshift/kubernetes/pull/1673)
* [OCPBUGS-14301](https://issues.redhat.com/browse/OCPBUGS-14301): UPSTREAM: 117249,118189: fix TopologyCache crashes [#1668](https://github.com/openshift/kubernetes/pull/1668)
* [OCPBUGS-7415](https://issues.redhat.com/browse/OCPBUGS-7415): grant user:full scope to self-SARs [#1493](https://github.com/openshift/kubernetes/pull/1493)
* [Full changelog](https://github.com/openshift/kubernetes/compare/4e8792688dcae131049350c46f9fff698cc42b8c...98158f96f30cce46b1fca344fa2c87db7a9c4b4c)


### [hypershift](https://github.com/openshift/hypershift/tree/b06a68aa757c36a357e8da4839bba32d31a7e9bc)

* [OCPBUGS-19797](https://issues.redhat.com/browse/OCPBUGS-19797): reconcile Authentication global config [#3053](https://github.com/openshift/hypershift/pull/3053)
* [OCPBUGS-19794](https://issues.redhat.com/browse/OCPBUGS-19794): Upgrade agent APIs to v1beta1 [#3051](https://github.com/openshift/hypershift/pull/3051)
* [OCPBUGS-20249](https://issues.redhat.com/browse/OCPBUGS-20249): Set KAS config pod security Enforce to privileged [#3083](https://github.com/openshift/hypershift/pull/3083)
* [OCPBUGS-20163](https://issues.redhat.com/browse/OCPBUGS-20163): Report correct port when API exposed via route [#3078](https://github.com/openshift/hypershift/pull/3078)
* [OCPBUGS-19796](https://issues.redhat.com/browse/OCPBUGS-19796): set accesstoken-inactivity-timeout flag to openshift-oauth-apiserver [#3052](https://github.com/openshift/hypershift/pull/3052)
* Update RHTAP references (release-4.14) [#3060](https://github.com/openshift/hypershift/pull/3060)
* Migrate deprecated-base-image-check pipeline [#3057](https://github.com/openshift/hypershift/pull/3057)
* chore(deps): update rhtap references (release-4.14) [#2752](https://github.com/openshift/hypershift/pull/2752)
* Update kubevirt csi driver deployment with proper timeouts [#3046](https://github.com/openshift/hypershift/pull/3046)
* [OCPBUGS-19463](https://issues.redhat.com/browse/OCPBUGS-19463): set default deploymentconfig params on AWS CCM [#3029](https://github.com/openshift/hypershift/pull/3029)
* [ACM-7278](https://issues.redhat.com/browse/ACM-7278): Remove marking pull secret as required in hcp cli [#3023](https://github.com/openshift/hypershift/pull/3023)
* [OCPBUGS-18978](https://issues.redhat.com/browse/OCPBUGS-18978): add KAS endpoints to Except in router egress rule [#3010](https://github.com/openshift/hypershift/pull/3010)
* [CNV-31919](https://issues.redhat.com/browse/CNV-31919): Validate KubeVirt platform required versioning [#3026](https://github.com/openshift/hypershift/pull/3026)
* [OCPBUGS-19063](https://issues.redhat.com/browse/OCPBUGS-19063): amend OLM catalogs ImageStream according to annotation [#3016](https://github.com/openshift/hypershift/pull/3016)
* enable CGO_ENABLED for building FIPS compliant images [#3006](https://github.com/openshift/hypershift/pull/3006)
* [OCPBUGS-18828](https://issues.redhat.com/browse/OCPBUGS-18828): tuned DS should not use controlPlaneReleaseImage [#3005](https://github.com/openshift/hypershift/pull/3005)
* Red Hat Trusted App Pipeline update hypershift-release-414 [#2639](https://github.com/openshift/hypershift/pull/2639)
* [HOSTEDCP-1185](https://issues.redhat.com/browse/HOSTEDCP-1185): Add flag to create a single NAT gateway [#2984](https://github.com/openshift/hypershift/pull/2984)
* Dump kubevirt external infra clusters [#2992](https://github.com/openshift/hypershift/pull/2992)
* [OCPBUGS-18568](https://issues.redhat.com/browse/OCPBUGS-18568): Use MCO and CCO image references when looking up mappings [#2985](https://github.com/openshift/hypershift/pull/2985)
* [HOSTEDCP-591](https://issues.redhat.com/browse/HOSTEDCP-591): Amend OLM catalog IS according to OpenShiftImageRegistryOverrides [#2947](https://github.com/openshift/hypershift/pull/2947)
* e2e: skip CNO pod restart check [#2986](https://github.com/openshift/hypershift/pull/2986)
* [HOSTEDCP-1133](https://issues.redhat.com/browse/HOSTEDCP-1133): Signal NodePool rolling upgrade because of platform changes [#2973](https://github.com/openshift/hypershift/pull/2973)
* [OCPBUGS-18127](https://issues.redhat.com/browse/OCPBUGS-18127): Enable caching of Unstructured Objects in HO [#2988](https://github.com/openshift/hypershift/pull/2988)
* e2e: run Ensure functions after Main part of test [#2983](https://github.com/openshift/hypershift/pull/2983)
* [OCPBUGS-18127](https://issues.redhat.com/browse/OCPBUGS-18127): Ensure machineTemplate name length respects RFC1123 spec [#2975](https://github.com/openshift/hypershift/pull/2975)
* [ACM-6435](https://issues.redhat.com/browse/ACM-6435): add pausedUntil create cluster option in CLI [#2965](https://github.com/openshift/hypershift/pull/2965)
* [OCPBUGS-7840](https://issues.redhat.com/browse/OCPBUGS-7840): Untangle kas port [#2964](https://github.com/openshift/hypershift/pull/2964)
* [OCPBUGS-18399](https://issues.redhat.com/browse/OCPBUGS-18399): Preserve mirror order when serializing ICSP to env [#2977](https://github.com/openshift/hypershift/pull/2977)
* [OCPBUGS-18336](https://issues.redhat.com/browse/OCPBUGS-18336): make konnectivity routes roundrobin [#2971](https://github.com/openshift/hypershift/pull/2971)
* Use the correct pull secret for HCP KubeVirt components [#2919](https://github.com/openshift/hypershift/pull/2919)
* Disable nto inplace test for kubevirt [#2980](https://github.com/openshift/hypershift/pull/2980)
* [OCPBUGS-18438](https://issues.redhat.com/browse/OCPBUGS-18438): Properly format IPv6 address when proxying it through Konnectivity [#2969](https://github.com/openshift/hypershift/pull/2969)
* [OCPBUGS-18127](https://issues.redhat.com/browse/OCPBUGS-18127): Trigger a rolling upgrade on NodePool .spec.platfrom changes [#2956](https://github.com/openshift/hypershift/pull/2956)
* [HOSTEDCP-1156](https://issues.redhat.com/browse/HOSTEDCP-1156): Add defaulting webhook to installation and notes [#2922](https://github.com/openshift/hypershift/pull/2922)
* [HOSTEDCP-979](https://issues.redhat.com/browse/HOSTEDCP-979): Re-enable nodepool in-place upgrade tests [#2960](https://github.com/openshift/hypershift/pull/2960)
* Add a default value (32Gi) for nodepool in `create nodepool kubevirt` command [#2940](https://github.com/openshift/hypershift/pull/2940)
* [OCPBUGS-16221](https://issues.redhat.com/browse/OCPBUGS-16221): Adds trust bundle to ignition-server when configured in HC [#2819](https://github.com/openshift/hypershift/pull/2819)
* Avoid creating tar archive if --archive-dump=false [#2963](https://github.com/openshift/hypershift/pull/2963)
* OCPBUGS-3873 adding rbac for UserOAuthAccessToken [#2962](https://github.com/openshift/hypershift/pull/2962)
* HOSTEDCP-1178 fix limited support label key [#2958](https://github.com/openshift/hypershift/pull/2958)
* [OCPBUGS-18065](https://issues.redhat.com/browse/OCPBUGS-18065): enable aws-pod-identity-webhook on AWS [#2957](https://github.com/openshift/hypershift/pull/2957)
* [OCPBUGS-18308](https://issues.redhat.com/browse/OCPBUGS-18308): Do not use mgmt cluster ICSP to mutate CCO image in KAS pod [#2966](https://github.com/openshift/hypershift/pull/2966)
* [OCPBUGS-18266](https://issues.redhat.com/browse/OCPBUGS-18266): fix Progressing condition when ControlPlaneRelease is set [#2959](https://github.com/openshift/hypershift/pull/2959)
* fix(ho): Restore match label selector behavior [#2951](https://github.com/openshift/hypershift/pull/2951)
* [OCPBUGS-18072](https://issues.redhat.com/browse/OCPBUGS-18072): Set emptyDir storage for the image registry only on initial time for None and Kubevirt platform [#2895](https://github.com/openshift/hypershift/pull/2895)
* [OCPBUGS-18024](https://issues.redhat.com/browse/OCPBUGS-18024): Set Arch to amd64 for HCP NodePool Create [#2941](https://github.com/openshift/hypershift/pull/2941)
* chore(deps): update rhtap references (main) [#2920](https://github.com/openshift/hypershift/pull/2920)
* [OCPBUGS-16813](https://issues.redhat.com/browse/OCPBUGS-16813): switch konnectivity-server to additional container in KAS pods [#2942](https://github.com/openshift/hypershift/pull/2942)
* Updating hostedcluster controller to stop using deprecated flags [#2946](https://github.com/openshift/hypershift/pull/2946)
* [OCPBUGS-17827](https://issues.redhat.com/browse/OCPBUGS-17827): e2e: remove private-router from NeedManagementKASAccessLabel allowlist [#2939](https://github.com/openshift/hypershift/pull/2939)
* [MULTIARCH-3709](https://issues.redhat.com/browse/MULTIARCH-3709): PowerVS - Add reuse resource flags to e2e test [#2902](https://github.com/openshift/hypershift/pull/2902)
* [MULTIARCH-3478](https://issues.redhat.com/browse/MULTIARCH-3478): Minor bug fix on PowerVS infra [#2451](https://github.com/openshift/hypershift/pull/2451)
* [OCPBUGS-18069](https://issues.redhat.com/browse/OCPBUGS-18069): Ensure load balancers are not exist before declaring load balancers are cleaned up [#2887](https://github.com/openshift/hypershift/pull/2887)
* [MULTIARCH-3708](https://issues.redhat.com/browse/MULTIARCH-3708): PowerVS - Fix cluster deletion when existing resources passed [#2867](https://github.com/openshift/hypershift/pull/2867)
* [MGMT-15368](https://issues.redhat.com/browse/MGMT-15368): Document scaling down NodePools [#2944](https://github.com/openshift/hypershift/pull/2944)
* [OCPBUGS-13348](https://issues.redhat.com/browse/OCPBUGS-13348): Hypershift Audit configuration not working. [#2945](https://github.com/openshift/hypershift/pull/2945)
* [TRT-1202](https://issues.redhat.com/browse/TRT-1202): set SkipReleaseImageValidation annotation properly on e2e clusters [#2943](https://github.com/openshift/hypershift/pull/2943)
* [OCPBUGS-17678](https://issues.redhat.com/browse/OCPBUGS-17678): Reconcile cloud credentials configuration to hosted cluster [#2937](https://github.com/openshift/hypershift/pull/2937)
* Add e2e test for etcd member recovery [#2930](https://github.com/openshift/hypershift/pull/2930)
* [OCPBUGS-17827](https://issues.redhat.com/browse/OCPBUGS-17827): remove NeedManagementKASAccessLabel from router pods [#2934](https://github.com/openshift/hypershift/pull/2934)
* [OCPBUGS-17985](https://issues.redhat.com/browse/OCPBUGS-17985): Handle empty mirrorImage result for ignition disconnected registry [#2935](https://github.com/openshift/hypershift/pull/2935)
* [OCPBUGS-17827](https://issues.redhat.com/browse/OCPBUGS-17827): e2e: refactor checkPodsHaveLabel to be allowlist rather than exact match [#2928](https://github.com/openshift/hypershift/pull/2928)
* [OCPBUGS-16813](https://issues.redhat.com/browse/OCPBUGS-16813): do not hardcode ignition-server-proxy replicas [#2933](https://github.com/openshift/hypershift/pull/2933)
* fix(ho): Restore match label selector behavior [#2893](https://github.com/openshift/hypershift/pull/2893)
* [TRT-1202](https://issues.redhat.com/browse/TRT-1202): add annotation to skip release image validation [#2929](https://github.com/openshift/hypershift/pull/2929)
* [OCPBUGS-17812](https://issues.redhat.com/browse/OCPBUGS-17812): Update Etcd health check to mirror standalone etcd [#2918](https://github.com/openshift/hypershift/pull/2918)
* [STOR-1443](https://issues.redhat.com/browse/STOR-1443): Sync `05_operator_role-hypershift.yaml` manifest from cluster-csi-snapsht-controller-operator [#2915](https://github.com/openshift/hypershift/pull/2915)
* [HOSTEDCP-1065](https://issues.redhat.com/browse/HOSTEDCP-1065): CNO deployed hosted-cluster-kubecfg-setup initContainers use CPR image [#2917](https://github.com/openshift/hypershift/pull/2917)
* [HOSTEDCP-1001](https://issues.redhat.com/browse/HOSTEDCP-1001): Image registryOverride included in the image metadata extraction flow [#2909](https://github.com/openshift/hypershift/pull/2909)
* [OCPBUGS-17669](https://issues.redhat.com/browse/OCPBUGS-17669): Validate HostedCluster name against RFC1123 [#2914](https://github.com/openshift/hypershift/pull/2914)
* [HOSTEDCP-1075](https://issues.redhat.com/browse/HOSTEDCP-1075): Document how to recover single etcd member [#2916](https://github.com/openshift/hypershift/pull/2916)
* [HOSTEDCP-1085](https://issues.redhat.com/browse/HOSTEDCP-1085): Create a monitoring dashboard per HostedCluster [#2907](https://github.com/openshift/hypershift/pull/2907)
* chore(deps): update rhtap references (main) [#2903](https://github.com/openshift/hypershift/pull/2903)
* [HOSTEDCP-1063](https://issues.redhat.com/browse/HOSTEDCP-1063): Account for guest webhook URLs without a port [#2898](https://github.com/openshift/hypershift/pull/2898)
* [OCPBUGS-17680](https://issues.redhat.com/browse/OCPBUGS-17680): Remove immutable note from PullSecret [#2910](https://github.com/openshift/hypershift/pull/2910)
* [Full changelog](https://github.com/openshift/hypershift/compare/4f34a4615aa8ba68c1dd19f0daee13de86b83ba2...b06a68aa757c36a357e8da4839bba32d31a7e9bc)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/55390bc12acc933667dd9cf4e5459cc214cedb2a)

* [OCPBUGS-18105](https://issues.redhat.com/browse/OCPBUGS-18105): [IBM VPC] failed provisioning volume in proxy cluster [#74](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/74)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/62408833a2857b7cd1cb5561bc86e531f53f7081...55390bc12acc933667dd9cf4e5459cc214cedb2a)


### [insights-operator](https://github.com/openshift/insights-operator/tree/540b58832c063f0bef2844cb61133c7c80adf58f)

* [OCPBUGS-19387](https://issues.redhat.com/browse/OCPBUGS-19387): mark datagather job as failed if the data was not processed (#830) [#830](https://github.com/openshift/insights-operator/pull/830)
* [OCPBUGS-19476](https://issues.redhat.com/browse/OCPBUGS-19476): update Insights report config logging (#826) [#826](https://github.com/openshift/insights-operator/pull/826)
* [OCPBUGS-18002](https://issues.redhat.com/browse/OCPBUGS-18002): DVO metrics gatherer - use UIDs only when DVO deployed in 'openshift-deployment-validation-operator' namespace (#818) [#818](https://github.com/openshift/insights-operator/pull/818)
* [Full changelog](https://github.com/openshift/insights-operator/compare/48c85cdf2dcbe4d17d8323d209aaebfe7f48101b...540b58832c063f0bef2844cb61133c7c80adf58f)


### [ironic](https://github.com/openshift/ironic-image/tree/5c6d6ee69ac7c37989ab891332ed2612217e753d)

* [OCPBUGS-19884](https://issues.redhat.com/browse/OCPBUGS-19884): update Ironic to include secure boot fixes [#404](https://github.com/openshift/ironic-image/pull/404)
* [OCPBUGS-19333](https://issues.redhat.com/browse/OCPBUGS-19333): update ironic to include SQLite fixes [#402](https://github.com/openshift/ironic-image/pull/402)
* [OCPBUGS-19083](https://issues.redhat.com/browse/OCPBUGS-19083): Switch from current-tripleo to puppet-passed-ci [#399](https://github.com/openshift/ironic-image/pull/399)
* [OCPBUGS-18297](https://issues.redhat.com/browse/OCPBUGS-18297): Revert "Bumping versions to include packages synced on… [#396](https://github.com/openshift/ironic-image/pull/396)
* [OCPBUGS-14926](https://issues.redhat.com/browse/OCPBUGS-14926): Bumping versions to include packages synced on 180823. [#394](https://github.com/openshift/ironic-image/pull/394)
* [Full changelog](https://github.com/openshift/ironic-image/compare/c483d7d0f2e4615cf28eb36d5179f2559e664890...5c6d6ee69ac7c37989ab891332ed2612217e753d)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/ed6e12a62fc40fc450ad394034769cc734acb5e5)

* [OCPBUGS-14585](https://issues.redhat.com/browse/OCPBUGS-14585): rework detection of the assisted agent [#87](https://github.com/openshift/ironic-agent-image/pull/87)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/9c7199e15e25bab32376a9f316e210b8c90a58e8...ed6e12a62fc40fc450ad394034769cc734acb5e5)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/128c28c6f6d1078627c452afc867b492894e0ac4)

* [OCPBUGS-19558](https://issues.redhat.com/browse/OCPBUGS-19558): Collect pod operation latency metrics properly [#577](https://github.com/openshift/sdn/pull/577)
* [OCPBUGS-17316](https://issues.redhat.com/browse/OCPBUGS-17316): CVE-2023-3978: golang.org/x/net/html: Cross site scripting [#571](https://github.com/openshift/sdn/pull/571)
* [Full changelog](https://github.com/openshift/sdn/compare/7fb2364e9dae2587253a86b577ba2a4b2869b781...128c28c6f6d1078627c452afc867b492894e0ac4)


### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/62ca8ad354f49028ce80cb9ec5c48aab3d0f1ecd)

* [OCPBUGS-19020](https://issues.redhat.com/browse/OCPBUGS-19020): Auto sync upstream 2023 09 15 20 36 [#26](https://github.com/openshift/cloud-provider-kubevirt/pull/26)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/9ab93bad0ca56f6cd01564888fb1e4ac1c17b434...62ca8ad354f49028ce80cb9ec5c48aab3d0f1ecd)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/831ff3eb2247295c45742fea89df666ed6600d71)

* [OCPBUGS-19730](https://issues.redhat.com/browse/OCPBUGS-19730): Ensure volume is removed before returning success (https://github.com/kubevirt/csi-driver/pull/90) [#25](https://github.com/openshift/kubevirt-csi-driver/pull/25)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/1255735fc177ba34546e755f632e585d76f86e06...831ff3eb2247295c45742fea89df666ed6600d71)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/34dfccba84a23b871d4f29dcec55929c11696e91)

* [OCPBUGS-19926](https://issues.redhat.com/browse/OCPBUGS-19926): [release-4.14] Don't force use of virtio console [#269](https://github.com/openshift/cluster-api-provider-libvirt/pull/269)
* [OCPBUGS-18338](https://issues.redhat.com/browse/OCPBUGS-18338): Fix CI by running tests natively by default [#261](https://github.com/openshift/cluster-api-provider-libvirt/pull/261)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/c2f9fbfaa20de4290400754049cd4c7c8e6866fd...34dfccba84a23b871d4f29dcec55929c11696e91)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/525f8e5b89947b38ce07a6a6a3d194bf780d5075)

* [OCPBUGS-17872](https://issues.redhat.com/browse/OCPBUGS-17872): Azure MAO CredentialsRequest contains unnecessary network write permissions [#1161](https://github.com/openshift/machine-api-operator/pull/1161)
* [OCPBUGS-17090](https://issues.redhat.com/browse/OCPBUGS-17090): Set logger for controller runtime [#1164](https://github.com/openshift/machine-api-operator/pull/1164)
* [OCPBUGS-18338](https://issues.redhat.com/browse/OCPBUGS-18338): Fix CI by running tests natively by default [#1163](https://github.com/openshift/machine-api-operator/pull/1163)
* [OCPBUGS-17919](https://issues.redhat.com/browse/OCPBUGS-17919): [Azure] MAO Missing DiskEncryptionSet read permissions [#1162](https://github.com/openshift/machine-api-operator/pull/1162)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/c72b6440910ad8261a27a2a93a8dc8f538d86aa7...525f8e5b89947b38ce07a6a6a3d194bf780d5075)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/a2469941c0dcccf9584e0f54b3e38c13b1292ca9)

* [OCPBUGS-19430](https://issues.redhat.com/browse/OCPBUGS-19430): [release-4.14] resolv-prepender: avoid pulling baremetalRuntimeCfgImage again if it … [#3925](https://github.com/openshift/machine-config-operator/pull/3925)
* [OCPBUGS-19703](https://issues.redhat.com/browse/OCPBUGS-19703): Internal Registry Secrets merge causing excessive API calls [#3941](https://github.com/openshift/machine-config-operator/pull/3941)
* [OCPBUGS-19662](https://issues.redhat.com/browse/OCPBUGS-19662): fix merged image registry CA behavior [#3937](https://github.com/openshift/machine-config-operator/pull/3937)
* [OCPBUGS-19701](https://issues.redhat.com/browse/OCPBUGS-19701): Remove dependency on k8s.io/kubernetes packages [#3940](https://github.com/openshift/machine-config-operator/pull/3940)
* [OCPBUGS-19344](https://issues.redhat.com/browse/OCPBUGS-19344): Ignore invoking nbctl calls if its SDN [#3928](https://github.com/openshift/machine-config-operator/pull/3928)
* [OCPBUGS-19535](https://issues.redhat.com/browse/OCPBUGS-19535): daemon: always use `podman cp` to copy extensions container content [#3932](https://github.com/openshift/machine-config-operator/pull/3932)
* [OCPBUGS-19357](https://issues.redhat.com/browse/OCPBUGS-19357): install: Recreate and delayed default ServiceAccount deletion [#3920](https://github.com/openshift/machine-config-operator/pull/3920)
* [OCPBUGS-9972](https://issues.redhat.com/browse/OCPBUGS-9972): Fix azure routes hack for ovnk pods towards internalLB on master nodes in SGW mode [#3878](https://github.com/openshift/machine-config-operator/pull/3878)
* [OCPBUGS-18442](https://issues.redhat.com/browse/OCPBUGS-18442): MCO is degraded if not install image registry operator [#3901](https://github.com/openshift/machine-config-operator/pull/3901)
* [OCPBUGS-18097](https://issues.redhat.com/browse/OCPBUGS-18097): ensure cconfig is not updated too frequently [#3891](https://github.com/openshift/machine-config-operator/pull/3891)
* [OCPBUGS-18086](https://issues.redhat.com/browse/OCPBUGS-18086): Quiet controller noisiness [#3886](https://github.com/openshift/machine-config-operator/pull/3886)
* [OCPBUGS-16035](https://issues.redhat.com/browse/OCPBUGS-16035): daemon: create /etc/systemd/network directory on node [#3883](https://github.com/openshift/machine-config-operator/pull/3883)
* Revert "fix nodeStatusUpdateFrequency" [#3887](https://github.com/openshift/machine-config-operator/pull/3887)
* [OCPBUGS-17787](https://issues.redhat.com/browse/OCPBUGS-17787): Fix sysctl breaking dots in paths [#3870](https://github.com/openshift/machine-config-operator/pull/3870)
* [OCPBUGS-16733](https://issues.redhat.com/browse/OCPBUGS-16733): on-prem: run resolv-prepender on NM reapply event [#3827](https://github.com/openshift/machine-config-operator/pull/3827)
* [OCPBUGS-15583](https://issues.redhat.com/browse/OCPBUGS-15583): fix nodeStatusUpdateFrequency [#3784](https://github.com/openshift/machine-config-operator/pull/3784)
* [OCPBUGS-17810](https://issues.redhat.com/browse/OCPBUGS-17810): temporarily remove cert observability fields, add storageversionmigration for machineconfigpools,controllerconfig [#3866](https://github.com/openshift/machine-config-operator/pull/3866)
* [OCPBUGS-11832](https://issues.redhat.com/browse/OCPBUGS-11832): SSHkeys fails to write on upgrade to 4.13.rc3 [#3810](https://github.com/openshift/machine-config-operator/pull/3810)
* [MCO-564](https://issues.redhat.com/browse/MCO-564): Make MCD aware of on-cluster builds [#3848](https://github.com/openshift/machine-config-operator/pull/3848)
* MCO 566: MCO 662 Wire up productionalized BuildController in Machine OS Builder binary and choosing backend image builder [#3861](https://github.com/openshift/machine-config-operator/pull/3861)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/e386166bb2026c73c53439e4f0b8a960061b9882...a2469941c0dcccf9584e0f54b3e38c13b1292ca9)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/d3a4a6c3b46e26fa260de80465b45879311e23c4)

* Force rebuild of CI image [#31](https://github.com/openshift/machine-os-images/pull/31)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/c68330793434f77ff9baa721fcc77473e5528184...d3a4a6c3b46e26fa260de80465b45879311e23c4)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/87571978825e63392a56f6920e068af3a71cda6e)

* [OCPBUGS-7184](https://issues.redhat.com/browse/OCPBUGS-7184): Fix bug where the variable dropdown options were not updated [#69](https://github.com/openshift/monitoring-plugin/pull/69)
* [OCPBUGS-17650](https://issues.redhat.com/browse/OCPBUGS-17650): Fix /monitoring/ redirects [#68](https://github.com/openshift/monitoring-plugin/pull/68)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/e958096ec98923a6abf00b5e2573b417982b165f...87571978825e63392a56f6920e068af3a71cda6e)


### [multus-cni](https://github.com/openshift/multus-cni/tree/cc707f694e99a1a82890612e29a1679d6907bdd6)

* [OCPBUGS-19860](https://issues.redhat.com/browse/OCPBUGS-19860): Multus annotation permissions: Certificate duration should be configurable [backport 4.14] [#192](https://github.com/openshift/multus-cni/pull/192)
* [OCPBUGS-19679](https://issues.redhat.com/browse/OCPBUGS-19679): Move chroot from multus main process to its child processes [#189](https://github.com/openshift/multus-cni/pull/189)
* [OCPBUGS-19375](https://issues.redhat.com/browse/OCPBUGS-19375): Per node certification cherry-pick [#185](https://github.com/openshift/multus-cni/pull/185)
* [OCPBUGS-19074](https://issues.redhat.com/browse/OCPBUGS-19074): Performance and efficiency improvements in daemon/server mode [#181](https://github.com/openshift/multus-cni/pull/181)
* [Full changelog](https://github.com/openshift/multus-cni/compare/88339682adc7b278273df7bb8da02e396b193af7...cc707f694e99a1a82890612e29a1679d6907bdd6)


### [must-gather](https://github.com/openshift/must-gather/tree/197b7c6051deca66c76ecddc69c6b726d0d0f092)

* Use oc get daemonset to identify the NTO image [#378](https://github.com/openshift/must-gather/pull/378)
* [OCPBUGS-17907](https://issues.redhat.com/browse/OCPBUGS-17907): Revert "Added gathering script for SNOs with workload partitioning" [#376](https://github.com/openshift/must-gather/pull/376)
* [Full changelog](https://github.com/openshift/must-gather/compare/22e816b3bbcc6f2edd9032eee0e60147ccd3f9b9...197b7c6051deca66c76ecddc69c6b726d0d0f092)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/5fd1f2dd60022b33fcd989ba80b8a23d19b890b0)

* [OCPBUGS-16594](https://issues.redhat.com/browse/OCPBUGS-16594): Update the dependencies to 0.27 (#79) [#79](https://github.com/openshift/network-metrics-daemon/pull/79)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/26574c6b3b74010701a27382084a456c5dddbd02...5fd1f2dd60022b33fcd989ba80b8a23d19b890b0)


### [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix/tree/bc568865fe7d5cd598c89e7f189de9e07150f29a)

* [OCPBUGS-17986](https://issues.redhat.com/browse/OCPBUGS-17986): Updating ose-nutanix-cloud-controller-manager images to be consistent with ART [#18](https://github.com/openshift/cloud-provider-nutanix/pull/18)
* [OCPCLOUD-2045](https://issues.redhat.com/browse/OCPCLOUD-2045): Merge https://github.com/nutanix-cloud-native/cloud-provider-nutanix:main (b4b5a3a) into main [#16](https://github.com/openshift/cloud-provider-nutanix/pull/16)
* [Full changelog](https://github.com/openshift/cloud-provider-nutanix/compare/12bb3788d9b72fc57c2a114bd711d2ad29056ca6...bc568865fe7d5cd598c89e7f189de9e07150f29a)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/6f50b1ac83fa493cdaa38fb0a05804882333172b)

* [OCPBUGS-19731](https://issues.redhat.com/browse/OCPBUGS-19731): machine stuck in Provisioning and machineset scale/delete not work [#53](https://github.com/openshift/machine-api-provider-nutanix/pull/53)
* [OCPBUGS-18338](https://issues.redhat.com/browse/OCPBUGS-18338): Fix CI by running tests natively by default [#50](https://github.com/openshift/machine-api-provider-nutanix/pull/50)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/5f51db783e6a974fb8d167851506c16628bc7260...6f50b1ac83fa493cdaa38fb0a05804882333172b)


### [oauth-server](https://github.com/openshift/oauth-server/tree/37df9ffc9d961eb5e2eaae5ca45cc7cadce34e75)

* [OCPBUGS-10173](https://issues.redhat.com/browse/OCPBUGS-10173): Updating oauth-server images to be consistent with ART [#134](https://github.com/openshift/oauth-server/pull/134)
* [Full changelog](https://github.com/openshift/oauth-server/compare/a06e5302aa7cfc99bd3ab003e3790c36873a181c...37df9ffc9d961eb5e2eaae5ca45cc7cadce34e75)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/68cf97ec715ad2d78fb2bac411a118709c191719)

* Fixes HTTP 401 issues when several catalogs are being mirrored and need to be rendered using operator-registry (#704) (#706) [#704](https://github.com/openshift/oc-mirror/pull/704)
* Fix OCPBUGS-17546: pod catalogsource generated by oc-mirror will crashloopBackOff randomly (#699) [#699](https://github.com/openshift/oc-mirror/pull/699)
* [OCPBUGS-17545](https://issues.redhat.com/browse/OCPBUGS-17545): Improve extracting opm binary from catalogs (#676) [#676](https://github.com/openshift/oc-mirror/pull/676)
* [OCPBUGS-7465](https://issues.redhat.com/browse/OCPBUGS-7465): Fix 401 Unauthorized due to stale auth token (#678) [#678](https://github.com/openshift/oc-mirror/pull/678)
* Fix OCPBUGS-14402 - case where catalog is on a mirror from registries.conf (#682) [#682](https://github.com/openshift/oc-mirror/pull/682)
* [OCPBUGS-17998](https://issues.redhat.com/browse/OCPBUGS-17998): fix: ICSP with incorrect mirror path (#681) [#681](https://github.com/openshift/oc-mirror/pull/681)
* [OCPBUGS-17714](https://issues.redhat.com/browse/OCPBUGS-17714): Ensure errors are nil before closing registry to avoid… (#680) [#680](https://github.com/openshift/oc-mirror/pull/680)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/dba4a0cfd0a9fd29c1e4b5bc1da737e1153cc679...68cf97ec715ad2d78fb2bac411a118709c191719)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/69bd018865f9a729001244d0ae2ad0a444f59eb0)

* [OCPBUGS-18980](https://issues.redhat.com/browse/OCPBUGS-18980): Disable Build and DeploymentConfig Informers if their caps are disabled [#271](https://github.com/openshift/openshift-controller-manager/pull/271)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/66b616997963132f90abd5dfdb11c75e82bdabde...69bd018865f9a729001244d0ae2ad0a444f59eb0)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/47ad2845b2477e1bce01eca4ffc016c2a2af9bf8)

* Bug OCPBUGS-18806: Set controller's SyncPeriod to 1 hour [#81](https://github.com/openshift/machine-api-provider-openstack/pull/81)
* Bump CAPO to match branch release-0.7 [#80](https://github.com/openshift/machine-api-provider-openstack/pull/80)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/cd7f2c158ebf269ab184aaa3f8df74b655c1f18f...47ad2845b2477e1bce01eca4ffc016c2a2af9bf8)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/6799db7a86240d442faf87bd5c78dbe554f8a64b)

* [OCPBUGS-17950](https://issues.redhat.com/browse/OCPBUGS-17950): Make packageserver wakeup interval configurable [#555](https://github.com/openshift/operator-framework-olm/pull/555)
* scripts/bumper: automate pushing changes and creating PRs [#550](https://github.com/openshift/operator-framework-olm/pull/550)
* [OCPBUGS-17157](https://issues.redhat.com/browse/OCPBUGS-17157): scripts: add a Go-based bumper, sync upstream [#534](https://github.com/openshift/operator-framework-olm/pull/534)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/6a20d96c59a221d00a3a0c0784b1973dc214dc06...6799db7a86240d442faf87bd5c78dbe554f8a64b)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/41f3c8f35d6a2a5d5c46de6f4cc76331b16b8e0c)

* [OCPBUGS-19075](https://issues.redhat.com/browse/OCPBUGS-19075): Updating marketplace-operator images to be consistent with ART [#535](https://github.com/operator-framework/operator-marketplace/pull/535)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/15c081de2f235e938abf10efc0b98f4d708621d2...41f3c8f35d6a2a5d5c46de6f4cc76331b16b8e0c)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/5366edeb9dd8a7ac21d2ebcdcb4a5dac8d785023)

* [OCPBUGS-19932](https://issues.redhat.com/browse/OCPBUGS-19932): OCPBUGS-19931: DownStream Batch Merge Blocker Bug 29th september 2023 [#1920](https://github.com/openshift/ovn-kubernetes/pull/1920)
* [OCPBUGS-19886](https://issues.redhat.com/browse/OCPBUGS-19886), [OCPBUGS-19887](https://issues.redhat.com/browse/OCPBUGS-19887), [OCPBUGS-19888](https://issues.redhat.com/browse/OCPBUGS-19888), [OCPBUGS-19889](https://issues.redhat.com/browse/OCPBUGS-19889): EIP fixes, remove ippool dupe call, allow gw mtu in webhook and ovnkube node can set mgt port for dpu [#1915](https://github.com/openshift/ovn-kubernetes/pull/1915)
* [OCPBUGS-19812](https://issues.redhat.com/browse/OCPBUGS-19812), [OCPBUGS-19813](https://issues.redhat.com/browse/OCPBUGS-19813), [OCPBUGS-19814](https://issues.redhat.com/browse/OCPBUGS-19814), [OCPBUGS-19815](https://issues.redhat.com/browse/OCPBUGS-19815): release 4.14 blocker fixes [#1909](https://github.com/openshift/ovn-kubernetes/pull/1909)
* [OCPBUGS-18427](https://issues.redhat.com/browse/OCPBUGS-18427), [OCPBUGS-19507](https://issues.redhat.com/browse/OCPBUGS-19507), [OCPBUGS-19538](https://issues.redhat.com/browse/OCPBUGS-19538), [OCPBUGS-19568](https://issues.redhat.com/browse/OCPBUGS-19568): merging from master to release-4.14 [#1889](https://github.com/openshift/ovn-kubernetes/pull/1889)
* [OCPBUGS-18977](https://issues.redhat.com/browse/OCPBUGS-18977): Update bridge flow cache when the host address changes [#1874](https://github.com/openshift/ovn-kubernetes/pull/1874)
* [OCPBUGS-19503](https://issues.redhat.com/browse/OCPBUGS-19503), [OCPBUGS-19649](https://issues.redhat.com/browse/OCPBUGS-19649): Use status subresource, Introduce per-node certs with webhook [#1898](https://github.com/openshift/ovn-kubernetes/pull/1898)
* [OCPBUGS-18584](https://issues.redhat.com/browse/OCPBUGS-18584): Check libovsdbclient.ErrNotFound on wrapped errors [#1863](https://github.com/openshift/ovn-kubernetes/pull/1863)
* [OCPBUGS-19087](https://issues.redhat.com/browse/OCPBUGS-19087): Dockerfile: bump OVN to ovn23.09-23.09.0-beta.31.el9fdp [#1879](https://github.com/openshift/ovn-kubernetes/pull/1879)
* [OCPBUGS-12146](https://issues.redhat.com/browse/OCPBUGS-12146): Updating ovn-kubernetes-microshift images to be consistent with ART [#1656](https://github.com/openshift/ovn-kubernetes/pull/1656)
* [OCPBUGS-18467](https://issues.redhat.com/browse/OCPBUGS-18467): Fix OVN SNATing on GR by enabling gateway_mtu on rtoe port of GR [#1854](https://github.com/openshift/ovn-kubernetes/pull/1854)
* [OCPBUGS-14709](https://issues.redhat.com/browse/OCPBUGS-14709), [OCPBUGS-16617](https://issues.redhat.com/browse/OCPBUGS-16617), [OCPBUGS-18603](https://issues.redhat.com/browse/OCPBUGS-18603): Bump to OVN 23.09 [#1842](https://github.com/openshift/ovn-kubernetes/pull/1842)
* [OCPBUGS-18378](https://issues.redhat.com/browse/OCPBUGS-18378): LGW: Fix the precedence of rules in FORWARD chain [#1851](https://github.com/openshift/ovn-kubernetes/pull/1851)
* [OCPBUGS-17773](https://issues.redhat.com/browse/OCPBUGS-17773): Perf increases to pod deletion [#1847](https://github.com/openshift/ovn-kubernetes/pull/1847)
* [OCPBUGS-17731](https://issues.redhat.com/browse/OCPBUGS-17731): move clearInitialNodeNetworkUnavailableCondition to clustermanager [#1839](https://github.com/openshift/ovn-kubernetes/pull/1839)
* [OCPBUGS-18110](https://issues.redhat.com/browse/OCPBUGS-18110): Fix encap port configuration for remote chassis [#1836](https://github.com/openshift/ovn-kubernetes/pull/1836)
* [OCPBUGS-17406](https://issues.redhat.com/browse/OCPBUGS-17406), [OCPBUGS-17844](https://issues.redhat.com/browse/OCPBUGS-17844), [OCPBUGS-17970](https://issues.redhat.com/browse/OCPBUGS-17970): [DownstreamMerge] 24 Aug 2023 [#1833](https://github.com/openshift/ovn-kubernetes/pull/1833)
* [OCPBUGS-17867](https://issues.redhat.com/browse/OCPBUGS-17867): CARRY: Removes restriction for ip scope universe on node ips [#1822](https://github.com/openshift/ovn-kubernetes/pull/1822)
* 8-16-23 [#1820](https://github.com/openshift/ovn-kubernetes/pull/1820)
* [OCPBUGS-17666](https://issues.redhat.com/browse/OCPBUGS-17666): Downstream Merge august 15th 2023 [#1817](https://github.com/openshift/ovn-kubernetes/pull/1817)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/6c34041f838cd4c7628a399bac1ed3d24718837c...5366edeb9dd8a7ac21d2ebcdcb4a5dac8d785023)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/4657064e0f49758473f35b10c9da0290518da949)

* cherry-pick: Improve delete device failure logs in driver node [#48](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/48)
* [OCPBUGS-17309](https://issues.redhat.com/browse/OCPBUGS-17309): Updated golang.org/x/net/html dependency. [#43](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/43)
* Rebase with upstream: v0.4.0 changes [#42](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/42)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/a83aec959629aab549501bc55c3b6a2963a49f0a...4657064e0f49758473f35b10c9da0290518da949)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/d487830f1c85e15d460eaacb02d98f91aec6519b)

* [OCPBUGS-18338](https://issues.redhat.com/browse/OCPBUGS-18338): Fix CI by running tests natively by default [#50](https://github.com/openshift/machine-api-provider-powervs/pull/50)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/b9e006631e323b12521cc56703c1ace0e11c0080...d487830f1c85e15d460eaacb02d98f91aec6519b)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/030a429b314d772b7cc7a1dd9af2073988a5b0a5)

* [OCPBUGS-19318](https://issues.redhat.com/browse/OCPBUGS-19318): fix admission webhook CA injection [#222](https://github.com/openshift/service-ca-operator/pull/222)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/5e9dfaadeb46f3ca7ff4343ed4f76f1186ea3003...030a429b314d772b7cc7a1dd9af2073988a5b0a5)


### [tests](https://github.com/openshift/origin/tree/7de11e08b8c4d4a91bd26f40f746650ce1589702)

* [OCPBUGS-20308](https://issues.redhat.com/browse/OCPBUGS-20308): Backport PR 28295 and 28238 [#28304](https://github.com/openshift/origin/pull/28304)
* [OCPBUGS-19903](https://issues.redhat.com/browse/OCPBUGS-19903): kubevirt: add live migration tests [#28281](https://github.com/openshift/origin/pull/28281)
* wait for the service to have endpoints before starting pollers [#28279](https://github.com/openshift/origin/pull/28279)
* some monitor tests only function on disruptive tests [#28287](https://github.com/openshift/origin/pull/28287)
* [OCPBUGS-19718](https://issues.redhat.com/browse/OCPBUGS-19718): rteval [#28276](https://github.com/openshift/origin/pull/28276)
* [OCPBUGS-19547](https://issues.redhat.com/browse/OCPBUGS-19547): fix: add rteval to the test image [#28269](https://github.com/openshift/origin/pull/28269)
* [TRT-1244](https://issues.redhat.com/browse/TRT-1244): Bump aws-ovn upgradeDurationLimits to 130 [#28265](https://github.com/openshift/origin/pull/28265)
* [OCPBUGS-19061](https://issues.redhat.com/browse/OCPBUGS-19061): Remove duplicate connection type from disruption name [#28260](https://github.com/openshift/origin/pull/28260)
* [USHIFT-1590](https://issues.redhat.com/browse/USHIFT-1590): skip failing invariants in MicroShift [#28193](https://github.com/openshift/origin/pull/28193)
* Revert "created persistent volume claims can not exceed the limitation" [#28232](https://github.com/openshift/origin/pull/28232)
* Revert "in-cluster disruption: ensure that only one monitor is started in cluster" [#28230](https://github.com/openshift/origin/pull/28230)
* created persistent volume claims can not exceed the limitation [#28224](https://github.com/openshift/origin/pull/28224)
* Revert "Fail on APIs removed in the next release" [#28227](https://github.com/openshift/origin/pull/28227)
* [OCPBUGS-13158](https://issues.redhat.com/browse/OCPBUGS-13158): in-cluster disruption: ensure that only one monitor is started in cluster [#28081](https://github.com/openshift/origin/pull/28081)
* Fail on APIs removed in the next release [#27561](https://github.com/openshift/origin/pull/27561)
* Service invariant [#28202](https://github.com/openshift/origin/pull/28202)
* prevent secondary errors reported in prior steps [#28221](https://github.com/openshift/origin/pull/28221)
* [OCPBUGS-17477](https://issues.redhat.com/browse/OCPBUGS-17477): requestheader: wait for only 3 oauth-servers to be available [#28161](https://github.com/openshift/origin/pull/28161)
* [test/extended/networking] Rename ovnkube containers [#28219](https://github.com/openshift/origin/pull/28219)
* Reduce usage of dcs [#28212](https://github.com/openshift/origin/pull/28212)
* Do not fail etcd storage path test for GVRs that are not served. [#28214](https://github.com/openshift/origin/pull/28214)
* move graceful shutdown to monitor test [#28201](https://github.com/openshift/origin/pull/28201)
* move PDBUnhealthyPodEvictionPolicy from TP to beta [#28206](https://github.com/openshift/origin/pull/28206)
* if no openshift-tests image can be auto-detected or specified, skip it [#28207](https://github.com/openshift/origin/pull/28207)
* allow failures for tests intentionally producing failures [#28211](https://github.com/openshift/origin/pull/28211)
* fix *-to-host sampler failure calculation [#28209](https://github.com/openshift/origin/pull/28209)
* skip test with intermittent serial problems [#28208](https://github.com/openshift/origin/pull/28208)
* point host network, network disruption at the kubelet [#28191](https://github.com/openshift/origin/pull/28191)
* migrate some watching code to monitortests [#28188](https://github.com/openshift/origin/pull/28188)
* fail if no sampler output is found for the poller [#28198](https://github.com/openshift/origin/pull/28198)
* Fix possibility of intervals without from/to by requiring when we Build() [#28182](https://github.com/openshift/origin/pull/28182)
* [OCPBUGS-17497](https://issues.redhat.com/browse/OCPBUGS-17497): Skip invariant load balancer test for None platform [#28180](https://github.com/openshift/origin/pull/28180)
* tolerate cluster without clusterversion [#28197](https://github.com/openshift/origin/pull/28197)
* select poller image from payload [#28194](https://github.com/openshift/origin/pull/28194)
* [AUTH-409](https://issues.redhat.com/browse/AUTH-409): bump o/k for the updated PSa labels [#28192](https://github.com/openshift/origin/pull/28192)
* Fixes openshift-tests dry-run failure asking for KUBERNETES_MASTER [#28165](https://github.com/openshift/origin/pull/28165)
* [TRT-930](https://issues.redhat.com/browse/TRT-930): Update test to support 2 release query_results.json [#28149](https://github.com/openshift/origin/pull/28149)
* add e2e non-functional test for required-scc SCCs [#28142](https://github.com/openshift/origin/pull/28142)
* Add a test to flake if we see NetworkManager log "too many netlink events" [#28098](https://github.com/openshift/origin/pull/28098)
* [OCPBUGS-16615](https://issues.redhat.com/browse/OCPBUGS-16615): Making prometheus telemetry test flake [#28181](https://github.com/openshift/origin/pull/28181)
* update watch-endpoint-slices to usable shape [#28184](https://github.com/openshift/origin/pull/28184)
* [Full changelog](https://github.com/openshift/origin/compare/b88c95199aec33257d48cd6e3954e7c4fe22ed89...7de11e08b8c4d4a91bd26f40f746650ce1589702)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/a8c196e8cc6061b60af066a490966608c26b19ce)

* [OCPBUGS-13084](https://issues.redhat.com/browse/OCPBUGS-13084): disable controller hostNetwork [#162](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/162)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/4f65dc841ffac4797b6c419578d259ea6e61eb30...a8c196e8cc6061b60af066a490966608c26b19ce)