# 4.7.21

Created: 2021-07-21 21:25:31 +0000 UTC

Image Digest: `sha256:60454c3270a61432447c752a9d5ee3e7d84cebcfd5d371eb4daa263623923dac`

Promoted from registry.ci.openshift.org/ocp/release:4.7.0-0.nightly-2021-07-21-150523


## Changes from 4.7.12

### Components

* Kubernetes 1.20.0-beta.2
* Red Hat Enterprise Linux CoreOS upgraded from 47.83.202105200135-0 to 47.83.202107210005-0


### Rebuilt images without code change

* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [f6a71bf7](https://github.com/openshift/aws-ebs-csi-driver/commit/f6a71bf783f3b7429a8c2fbbc6f3d586e6a7eb60) `sha256:d3f83158bd0532852499506456536116295f6d8745728d5cbfb65e1c249300d4`
* [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator) git [97f73eb7](https://github.com/openshift/aws-ebs-csi-driver-operator/commit/97f73eb7de4b474497169771239dcd81990d3f2e) `sha256:eafcca49321cfbfc9464d75ba95a6cc7d3566c5f975ccb7cbfd46a13df5f0c69`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [0074d6af](https://github.com/openshift/aws-pod-identity-webhook/commit/0074d6afef9e20f5a1bcbde85cd7c01e422202ca) `sha256:340983b4a5d058d6b82272db08464ac684bcac8b4db2d3c08f13136513b49020`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [25cbb8d8](https://github.com/openshift/cluster-api-provider-baremetal/commit/25cbb8d8f9e52244ccd6bf459e6dd4b84749de56) `sha256:a798c6a40461e5a9ea599944b437391814ebf5463261ce06662a83f6658a2861`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [6665cae3](https://github.com/openshift/cluster-bootstrap/commit/6665cae3374c18d466f11c9e0b8e41a61fcb0819) `sha256:c23f96a2ab9cbaa880c32afcb3b80483a276d481a954f674dd0f24a057adbc81`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [07e059a6](https://github.com/openshift/cluster-config-operator/commit/07e059a6b0c98e98d71f0c08dc741605e2431914) `sha256:a134aadc1a4d3926d92823391b1e8c05567da9811e183ac2cb2d9763688bc897`
* [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator) git [099c6afa](https://github.com/openshift/cluster-kube-apiserver-operator/commit/099c6afa1f8b4fe7654207f7eabd7784b42ce2e3) `sha256:a3240e9d7853d48f138e4411140558f4fa091368103f46bfd29d796425aee85d`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [28159093](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/281590936f3a94d4ae1eb008709fda6614fe763b) `sha256:42d51ef92251a54c40e81f052429482c4bf7ff08e6d4db117194f36fa4b41744`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [b2204ca2](https://github.com/openshift/cluster-kube-scheduler-operator/commit/b2204ca23a57e9f01af915375e6a18fc86ffecda) `sha256:3f3917102c56310c1fbecfac1de6d8318226c345c628e75880a6675a8027709f`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [54484757](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/54484757581ec26f178c599215715bafd6029582) `sha256:105fb893c16260d866b594946c02db63c594f959d09d6831383f433a7a583f87`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [ecfa2d95](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/ecfa2d959fe2afcbd3e947658d267b085a1b2063) `sha256:5d06783cbb5563051379ab4e4883348ca0225b667be5ec9ecc106a129ca1e335`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [245005e3](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/245005e3065238ecd4aef208c21456afa09ec38e) `sha256:39cf49293213ebbfa90d27bd07e402e9230563bc1b4cb044a4904af32be385f4`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [42791bac](https://github.com/openshift/cluster-policy-controller/commit/42791bac64066daac0922b3d77e4bd86edae3b4e) `sha256:f707cea1b0551a863bff17b8c5d9694ec4b6f87330db53105eed5577b4885e24`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [25dfb671](https://github.com/openshift/configmap-reload/commit/25dfb671c6ce9a73f5594efe699ed410fbf01d44) `sha256:9defa0dd5339a3eb1277cbad710c6cd37fdf889de6b42aec5f88486369eeda07`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [fc27124d](https://github.com/openshift/containernetworking-plugins/commit/fc27124d43b9dc995057b1f309d5f16e1b2ef151) `sha256:f11c5a5419d85b9579abe0ab27b07ef162d0501efe3dd2d6a0ae9861cfdf04cc`
* [coredns](https://github.com/openshift/coredns) git [d4a3ba3f](https://github.com/openshift/coredns/commit/d4a3ba3f6e03426d2623da86635caba17c0c3926) `sha256:b70ae7a8ffe39c148fca93e6358a1256d52372233571b020fb089c23f1ce66c6`
* [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator) git [00b1f648](https://github.com/openshift/csi-driver-manila-operator/commit/00b1f648e74d8008ce32ae65eb4d6d8b5ac1bbed) `sha256:9e3dd6f1c4fe346bc1a02b68af0c90154eb44f578a71434544b560f775890b9c`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [9404d343](https://github.com/openshift/csi-driver-nfs/commit/9404d343c020fd1806691704f64d930c779ad639) `sha256:5ab250149ab64d6063a13681f0b696ee06e3cf5c05d3ce1add99930bc61232d2`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [f152de8a](https://github.com/openshift/csi-external-attacher/commit/f152de8ab08d9a4f13c97941afa01ef343b92b68) `sha256:e544fafcfb07d7fd362f7f37c017d7897fc88c2d4ac51800d2753da70ba41b4b`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [a49415e1](https://github.com/openshift/csi-external-provisioner/commit/a49415e114b90060c8cdbb88b1ca3f0a4c5d2ebc) `sha256:50f1227c0acd871ca0decc4de6bb85f18bdb30578ec93de00094d460d1752020`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [f77279e9](https://github.com/openshift/csi-external-resizer/commit/f77279e9561a02c18676dbcafcbe6db7d0ebd077) `sha256:be1bf5dd7d9bb37a972c5182451a1e4394fe7132a280c27f26fc46b3c77643a5`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [26773735](https://github.com/openshift/csi-external-snapshotter/commit/26773735c1cbf09de9bf31cb3c640abdca04cd83) `sha256:c5c96aa734a9144ccdd9f97337dd0f5010d9524d8108493642bdcdd84ee5307e`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [3dad0280](https://github.com/openshift/csi-livenessprobe/commit/3dad0280ea630cfcc87bcf02806c75b7a066d81e) `sha256:fcfcc90a8f0b0e70b3da0869e0c37e29cf68d8a681c6802a32227644612f9c58`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [2a77963e](https://github.com/openshift/csi-node-driver-registrar/commit/2a77963e5458da1bcde318b4609a6abefaf868d7) `sha256:a00ef0658d7d5b15aa4f24b849c476ea032e89ac3370488063e66abb840d106d`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [26773735](https://github.com/openshift/csi-external-snapshotter/commit/26773735c1cbf09de9bf31cb3c640abdca04cd83) `sha256:7780cca4686b3fddb551d3595910b1a864ad65da8425cc9219abc708f470bfd9`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [26773735](https://github.com/openshift/csi-external-snapshotter/commit/26773735c1cbf09de9bf31cb3c640abdca04cd83) `sha256:635296e6f91e60be3607c8954fc8eb5efa8b6c5f0465b004842882de280bc1f6`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [96ebd378](https://github.com/openshift/egress-router-cni/commit/96ebd3782cbb63de098e75ebcedeac60546cfee3) `sha256:581d4202e57825e09ef0410883975c75df80a8a9bb4c83f45de43080381f8999`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [091f0212](https://github.com/openshift/gcp-pd-csi-driver/commit/091f0212dfa6d93df37b99fcd2b4b9a4c6d5bbba) `sha256:5ebaeae1108fb28676e530718b381637a5a807fb3d3744fd11ea9211dca349fc`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [9ffe95b9](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/9ffe95b9499258b8e2b5e1b8df9889abe3c9f73f) `sha256:8051142662243323c4bef6432842e66c239d817d97fba55484e52b2e8e2691b1`
* [grafana](https://github.com/openshift/grafana) git [b02c35dc](https://github.com/openshift/grafana/commit/b02c35dc2d01fce696a3edc28839a9f9fd0150a3) `sha256:85d0924c180173eb606eb27e5d114db2df7ac6c51adb44284ff10ab529c0d304`
* [ironic](https://github.com/openshift/ironic-image) git [1a7f41bb](https://github.com/openshift/ironic-image/commit/1a7f41bb1c2c04ccd06958669a24a08a0bf22258) `sha256:2ed6a85131fc31902804fc846391968285ac0ccea811494e992a2ad5ae3d1ed3`
* [ironic-hardware-inventory-recorder](https://github.com/openshift/ironic-hardware-inventory-recorder-image) git [61c4cc7d](https://github.com/openshift/ironic-hardware-inventory-recorder-image/commit/61c4cc7dc99601fe32b239be8923a6ed693908b0) `sha256:2b6d470918ce293f6776dd1a81b0bcebc977225d490d3ca12e4289e6829c2300`
* [ironic-inspector](https://github.com/openshift/ironic-inspector-image) git [916bdc6e](https://github.com/openshift/ironic-inspector-image/commit/916bdc6e005aaa73ef5c3a9b60f5c47cd0a10e29) `sha256:d965ac8f37325e9f738e10edb3751818044ad221c2e9766b98ecd17bb84161f4`
* [ironic-ipa-downloader](https://github.com/openshift/ironic-ipa-downloader) git [df6bb639](https://github.com/openshift/ironic-ipa-downloader/commit/df6bb639fd9bf26ce276ae78e78548fba53783d1) `sha256:376fb76193661e1460b17c97114703d18b9c13103eb4a9b6d26b51d341c6126a`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [43d640a0](https://github.com/openshift/ironic-static-ip-manager/commit/43d640a07582a5aaaa485ea85319bb0721dea251) `sha256:0054fcdaef6d766c0f4e24a14bb57ac6e5ddd7142cb8f5b659cbbc5fc8baa99e`
* [jenkins](https://github.com/openshift/jenkins) git [d3eacc24](https://github.com/openshift/jenkins/commit/d3eacc24156ef726caae230b9b4620059a76f781) `sha256:50d1ea6c0f59c8871978c4daace080307cea85a32e42e845a61acdbd232de6fa`
* [jenkins-agent-base](https://github.com/openshift/jenkins) git [d3eacc24](https://github.com/openshift/jenkins/commit/d3eacc24156ef726caae230b9b4620059a76f781) `sha256:cfd5cdc216344857996619bd197b592011af769b00b91d81e2a926f05cee0274`
* [jenkins-agent-maven](https://github.com/openshift/jenkins) git [d3eacc24](https://github.com/openshift/jenkins/commit/d3eacc24156ef726caae230b9b4620059a76f781) `sha256:064e1a20db027207d3cb2878e468a769a922865c37d1b417cb55f07537e8939e`
* [jenkins-agent-nodejs](https://github.com/openshift/jenkins) git [d3eacc24](https://github.com/openshift/jenkins/commit/d3eacc24156ef726caae230b9b4620059a76f781) `sha256:69feab8e70c3bcc0272b8f463cd0112d261e326dc00bad3a10c5359e73197ecf`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [212d80b4](https://github.com/openshift/k8s-prometheus-adapter/commit/212d80b4bd35fc6f19ec9ec537d0261a2a300cfd) `sha256:b467c2f587c62d94facc04777b176f73661b999282b44c6d7675baa1fc8f6d37`
* [keepalived-ipfailover](https://github.com/openshift/images) git [0e45f638](https://github.com/openshift/images/commit/0e45f638fbf5fa9e9bdb507d81b2cb9f12fadbaf) `sha256:a6b028eee7e9ec4cae33c086e6372fbf226f8fbe502525109d28b07d727e72fe`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [14c288e6](https://github.com/openshift/kube-rbac-proxy/commit/14c288e6d19578d96e502def75995b882f1c9b37) `sha256:0134dcb8750dd70fd08603d11ab600e875e9f853d114feaed9f349a9ba990e1c`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [04bff708](https://github.com/openshift/kube-state-metrics/commit/04bff708e05190cbc18182a2dbb8a10930433c1d) `sha256:eb2a30e7f6c665a68c4e6cd100ba35186683eab5dda13e4c72670aed28001d3b`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [329a4b06](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/329a4b06361cef8d70c8424d57466a6f5bcd4a59) `sha256:0d965f1f92b2cd65feea60929d3557f32aaf0f6f37247fc85fa557171b8d8d20`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [033be25c](https://github.com/openshift/cluster-api-provider-libvirt/commit/033be25ca038fe773b23c076e9ac64926de72474) `sha256:c11b06da9338bb47d9d3a3564b017144171500c9113858a22e9e5632622e1838`
* machine-os-content `sha256:2e7b5fe6a2d6f6a9aff1a33e839f747a9d3d9a327b6492d4ac0a1c528279a17c`
* [mdns-publisher](https://github.com/openshift/mdns-publisher) git [207a7e5d](https://github.com/openshift/mdns-publisher/commit/207a7e5d80dbca3ffb2dc205ebba516e29ebaa6d) `sha256:76fd21585b8ec59ca792fe1e31a701f15cbd59aa776820ba672ef810dcfa57ca`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [a7312f5e](https://github.com/openshift/multus-admission-controller/commit/a7312f5e55e9f34cc8b20f6cbfe1af0f363ca1e6) `sha256:68b86d9d20574adf08f0565c264315bf2fcab5d5ba6725aa7ae03f9bf0606679`
* [multus-cni](https://github.com/openshift/multus-cni) git [5530094d](https://github.com/openshift/multus-cni/commit/5530094db7607fc9292e3b269fcf5a85b0dad3df) `sha256:968f2e0eb0b08926ac5717c6c80afff8892bd51b0095ea0cfafbca12cbc5c7c1`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [1662c3ec](https://github.com/openshift/route-override-cni/commit/1662c3ec79b880fce5cd9c4e64f5ba0d4daffc00) `sha256:d88254197c3df1f0e378606ec1a99c151202ba524c4aadc7237f015d606d746b`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [dfe6b395](https://github.com/openshift/whereabouts-cni/commit/dfe6b395b67c0cede73e6edf758976ae208b930c) `sha256:1c196ea806f8e6e20c73da94866fc4fa5f9c5710938af88b8a3c687bb0112cb8`
* [must-gather](https://github.com/openshift/must-gather) git [140ea5e8](https://github.com/openshift/must-gather/commit/140ea5e8081106c68668b6bd2d0873dc9032af0b) `sha256:9a2535b21ca764f48fb967704f569c1fd34b21190d2e50462fe22f466cc67001`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [b1926150](https://github.com/openshift/network-metrics-daemon/commit/b1926150fd61d1f5137d18606661ff451f504a98) `sha256:7d5d8db868c8980662600680d79fd3eddb0131a35c86ae7282369fd27380ac05`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [69f527e9](https://github.com/openshift/oauth-apiserver/commit/69f527e90f599e0f509cfce73ba7b95656f03f7f) `sha256:12893ad039e8a50b4e351a429b9efe39d92aa0b8c55b5b26a03e65feb44fb7b1`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [4bd47050](https://github.com/openshift/oauth-proxy/commit/4bd4705011c19a7556551c9a1dfaaa5eacc7898c) `sha256:f8900a0feeb2d12b81ec2b6f863a1bf6a96faef4981710d668680b6521639026`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [40b0968e](https://github.com/openshift/openshift-state-metrics/commit/40b0968ee1d488b791cdd6750fac6534abac122e) `sha256:2625d2fe24be9cd4fb6e3a4f0cbae8495af962a98e542e880ab4470939bf9a8e`
* [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator) git [117ce62c](https://github.com/openshift/openstack-cinder-csi-driver-operator/commit/117ce62c69b399c524850f4ca32324a4ed288acd) `sha256:fe2251d5ac73ed007bc7e81a055cdd9e84c2e33187b1beae6e8dce610e55cca1`
* [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [471cf3ab](https://github.com/openshift/cluster-api-provider-openstack/commit/471cf3ab636c26ed7c9fba6330374a5ea1b36b43) `sha256:cb8f406d1de9a9b0dd5b6ca8db69e938c139af2ec2d6369a34ce425ef7e03e57`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [96bab9b9](https://github.com/operator-framework/operator-marketplace/commit/96bab9b9f5bb2c8fce141992230cf75e48f14f78) `sha256:5d1f1ad4228091533bc4f5730db5aaded511c9748e8c38b657f8b4d90a4e2302`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [72545e63](https://github.com/openshift/ovirt-csi-driver/commit/72545e6381b3625bcb37e37c4c713862d04cb145) `sha256:52b0cf2e3767f535f31caea3fddf7249acf723e37d6a6047067fa57ba6e28989`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [f8808a04](https://github.com/openshift/ovirt-csi-driver-operator/commit/f8808a04dc6bfe7ce36a8238089dbae7ab29cbb6) `sha256:7d82a9004b883b422ff8d439c0316925f7d388f43e6396c7b47bf0b7d7f37943`
* [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [01b9bf83](https://github.com/openshift/cluster-api-provider-ovirt/commit/01b9bf8368a3da974bf1c9114c618a548d346acd) `sha256:07942280b847dc398850639982e5081abf283f4e1240dd6af20ca38a96cdf04b`
* [pod](https://github.com/openshift/images) git [0e45f638](https://github.com/openshift/images/commit/0e45f638fbf5fa9e9bdb507d81b2cb9f12fadbaf) `sha256:dd4d47c77836319287ca2c052c8b5d5deceba3f15f093fb28ab5c6f86f1c9a22`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [db87872c](https://github.com/openshift/prom-label-proxy/commit/db87872c6aba7e4e9def29b33beea582557ce940) `sha256:092776712c84ef937d9ee5857a72e28e4e890677544124041b3778da871b15fd`
* [prometheus](https://github.com/openshift/prometheus) git [cb5e53cd](https://github.com/openshift/prometheus/commit/cb5e53cdfedfee185feffcec13304dda87ff3055) `sha256:d61578fab2403067d8bdef920c3618c2d2557ad12fc40c76f3af511856d452f5`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [9954cc42](https://github.com/openshift/prometheus-alertmanager/commit/9954cc421d26ecf498ac82f3cbdc64ce3afa4c74) `sha256:6a3e096e41f22f66c098e4eabd9ee3465ed71fc0750de778cd2ca3fddf1fac40`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [1f0fd51d](https://github.com/openshift/prometheus-operator/commit/1f0fd51df863c8773d2094e4ca78b4bd14cbf6e6) `sha256:02779f48b721b0a983a956ce7ff92589140643a73d1337db16653dba9c8a8892`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [76974e2e](https://github.com/openshift/node_exporter/commit/76974e2ed037c4bf81387dabf7ccd388a724c5aa) `sha256:1c65bebe21d4132f2bfefeaf769218718cca2f48f42667d3bb5db0adb3975055`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [1f0fd51d](https://github.com/openshift/prometheus-operator/commit/1f0fd51df863c8773d2094e4ca78b4bd14cbf6e6) `sha256:676e8ae04fc442d38bb33515c4ed04e98eb8339b95dcf435e15b857c2d9ee71c`
* [telemeter](https://github.com/openshift/telemeter) git [e4dac512](https://github.com/openshift/telemeter/commit/e4dac5123ef6b3ecb16b5151e2e8f8aeb8b1f21a) `sha256:82144e0f3dd043990464c0282c9d138c39bbe07e6370139b711d7e5ce822792c`


### [aws-machine-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/5368195c02ca672dc7f7a4ad571df5584fa4087f)

* [Bug 1976192](https://bugzilla.redhat.com/show_bug.cgi?id=1976192): update aws-sdk-go to v1.38.25 [#415](https://github.com/openshift/cluster-api-provider-aws/pull/415)
* [Bug 1942966](https://bugzilla.redhat.com/show_bug.cgi?id=1942966): Update EC2 instance types [#398](https://github.com/openshift/cluster-api-provider-aws/pull/398)
* Updating ose-aws-machine-controllers builder & base images to be consistent with ART [#373](https://github.com/openshift/cluster-api-provider-aws/pull/373)
* [Bug 1924471](https://bugzilla.redhat.com/show_bug.cgi?id=1924471): Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 [#409](https://github.com/openshift/cluster-api-provider-aws/pull/409)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/3967c28618011ff39afc56388f3e4d70aa051db9...5368195c02ca672dc7f7a4ad571df5584fa4087f)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/23a2fe80a021a19ab4364904f6928a1f8c715dc0)

* [Bug 1977481](https://bugzilla.redhat.com/show_bug.cgi?id=1977481): Dockerfile: repin libvirt [#5043](https://github.com/openshift/installer/pull/5043)
* [Bug 1975819](https://bugzilla.redhat.com/show_bug.cgi?id=1975819): upi/vsphere: Use Afterburn guestinfo for static IP and hostname config [#5025](https://github.com/openshift/installer/pull/5025)
* [Bug 1974282](https://bugzilla.redhat.com/show_bug.cgi?id=1974282): gather: collect networking information in log bundle [#5017](https://github.com/openshift/installer/pull/5017)
* [Bug 1971163](https://bugzilla.redhat.com/show_bug.cgi?id=1971163): Updating AWS instance types [#4992](https://github.com/openshift/installer/pull/4992)
* [Bug 1945467](https://bugzilla.redhat.com/show_bug.cgi?id=1945467): aws: allow use of unknown regions in known partitions [#4807](https://github.com/openshift/installer/pull/4807)
* [Bug 1938426](https://bugzilla.redhat.com/show_bug.cgi?id=1938426): Set default values to machine pools before validation [#4750](https://github.com/openshift/installer/pull/4750)
* [Bug 1967355](https://bugzilla.redhat.com/show_bug.cgi?id=1967355): pattern removed from sed to prevent expansion [#4975](https://github.com/openshift/installer/pull/4975)
* [Bug 1956483](https://bugzilla.redhat.com/show_bug.cgi?id=1956483): Bump boot images for RHCOS fixes [#4961](https://github.com/openshift/installer/pull/4961)
* [Bug 1947427](https://bugzilla.redhat.com/show_bug.cgi?id=1947427): add proxy params to bootstrap ignition [#4830](https://github.com/openshift/installer/pull/4830)
* [Bug 1939014](https://bugzilla.redhat.com/show_bug.cgi?id=1939014): generate glance url considering the region [#4753](https://github.com/openshift/installer/pull/4753)
* [Bug 1947216](https://bugzilla.redhat.com/show_bug.cgi?id=1947216): pkg/asset/installconfig/aws: Add iam permission for destorying clusters [#4827](https://github.com/openshift/installer/pull/4827)
* [Bug 1948398](https://bugzilla.redhat.com/show_bug.cgi?id=1948398): remove ovirt_cafile from ovirt-credentials secret [#4842](https://github.com/openshift/installer/pull/4842)
* [Bug 1962435](https://bugzilla.redhat.com/show_bug.cgi?id=1962435): aws: using dotted domain when looking for public hosted zone [#4948](https://github.com/openshift/installer/pull/4948)
* [Full changelog](https://github.com/openshift/installer/compare/d585f92b720275809904ba351dddc1d00a50e544...23a2fe80a021a19ab4364904f6928a1f8c715dc0)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/e36cbc13f82e290ca5f525a4da0fab516808d113)

* [Bug 1972430](https://bugzilla.redhat.com/show_bug.cgi?id=1972430): Don't deprovision provisioned host due to error [#159](https://github.com/openshift/baremetal-operator/pull/159)
* [Bug 1961341](https://bugzilla.redhat.com/show_bug.cgi?id=1961341): config: use rbacv1 instead of rbacv1beta1 [#148](https://github.com/openshift/baremetal-operator/pull/148)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/74c60aa957f53432d0a98afc78099add55d27c44...e36cbc13f82e290ca5f525a4da0fab516808d113)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/9c5da32ba602e5881178e56269b0506fcb54ff92)

* [Bug 1962949](https://bugzilla.redhat.com/show_bug.cgi?id=1962949): Keepalived- verify that unicast peers list isn't empty on master nodes [#140](https://github.com/openshift/baremetal-runtimecfg/pull/140)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/4e6ac5edae9417bd673e8f37ee12f92e9d333397...9c5da32ba602e5881178e56269b0506fcb54ff92)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/8b4b09487463415374368af3bbc4ff2e6366477b)

* [Bug 1976284](https://bugzilla.redhat.com/show_bug.cgi?id=1976284): skip-multiple-scopes with adm catalog mirror [#869](https://github.com/openshift/oc/pull/869)
* [Bug 1963784](https://bugzilla.redhat.com/show_bug.cgi?id=1963784): Preserve AuthInfo when switching projects [#861](https://github.com/openshift/oc/pull/861)
* [Bug 1970811](https://bugzilla.redhat.com/show_bug.cgi?id=1970811): set User-Agent when talking with registries [#848](https://github.com/openshift/oc/pull/848)
* [Bug 1969928](https://bugzilla.redhat.com/show_bug.cgi?id=1969928): exclude security during exctraction [#844](https://github.com/openshift/oc/pull/844)
* Fix unit test failure [#838](https://github.com/openshift/oc/pull/838)
* [Full changelog](https://github.com/openshift/oc/compare/95881afb5df065c250d98cf7f30ee4bb6d281acf...8b4b09487463415374368af3bbc4ff2e6366477b)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/0783477aa72edf998344740933a99c0417ebe573)

* [Bug 1958983](https://bugzilla.redhat.com/show_bug.cgi?id=1958983): rework GCP passthrough permissions checking [#338](https://github.com/openshift/cloud-credential-operator/pull/338)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/d088f49b436447a29a50958ddafd44e3362fb8ab...0783477aa72edf998344740933a99c0417ebe573)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/16bd3f3f4584442f42a83b4d8ee8e2f9fd0acb87)

* [Bug 1971087](https://bugzilla.redhat.com/show_bug.cgi?id=1971087): add a controller to remove webhooktokenauthenticator config [#418](https://github.com/openshift/cluster-authentication-operator/pull/418)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/a28bdc97c7f9d1ec4a0a859abeaeda41b37e381f...16bd3f3f4584442f42a83b4d8ee8e2f9fd0acb87)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/c882ab7f35adfb0f438fa28f6579092aa0deea59)

* Updating atomic-openshift-cluster-autoscaler builder & base images to be consistent with ART [#187](https://github.com/openshift/kubernetes-autoscaler/pull/187)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/ac544d46b0f4aa100e40336d87ec069eca335323...c882ab7f35adfb0f438fa28f6579092aa0deea59)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/a3fecc8e7dc5d793eecf8bf77e311f5b29f5e7dd)

* [Bug 1924478](https://bugzilla.redhat.com/show_bug.cgi?id=1924478): Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 [#207](https://github.com/openshift/cluster-autoscaler-operator/pull/207)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/4b0831e0a8c151850e73ab643c2e15f5ffe22c23...a3fecc8e7dc5d793eecf8bf77e311f5b29f5e7dd)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/cb7d1e4ee178ea3f33eb9fc492bd002386006693)

* [Bug 1972291](https://bugzilla.redhat.com/show_bug.cgi?id=1972291): Use a cache URL with the .svc.cluster.local suffix [#161](https://github.com/openshift/cluster-baremetal-operator/pull/161)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/175f8f5283faebd81fb9d1fb2915eb2682622e1e...cb7d1e4ee178ea3f33eb9fc492bd002386006693)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/fc036b59b83b25ac6d1050aee0a172abb54502c6)

* [Bug 1961719](https://bugzilla.redhat.com/show_bug.cgi?id=1961719): manifests/05_operator_rbac: Drop the unused namespace property [#89](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/89)
* [Bug 1967328](https://bugzilla.redhat.com/show_bug.cgi?id=1967328): Remove exclude annotation from manifests to include in ROKS [#91](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/91)
* [Bug 1929881](https://bugzilla.redhat.com/show_bug.cgi?id=1929881): Fix installation on ROKS [#80](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/80)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/95d85d4a9c9d61e02c980df28da66c5455028177...fc036b59b83b25ac6d1050aee0a172abb54502c6)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/cf8be7b279499d5010894b8c9bf79acc9853be36)

* [Bug 1967766](https://bugzilla.redhat.com/show_bug.cgi?id=1967766): Corefile: Set bufsize to 512 bytes for all servers [#277](https://github.com/openshift/cluster-dns-operator/pull/277)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/d6ba05f21dacb373c9d3386fc15e755718b03d4d...cf8be7b279499d5010894b8c9bf79acc9853be36)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/51cb8c4147c45672c9645fae39bfcc6d696adc85)

* [Bug 1976988](https://bugzilla.redhat.com/show_bug.cgi?id=1976988): [release-4.7]: Increase inertia duration for the EtcdMembersDegraded condition [#618](https://github.com/openshift/cluster-etcd-operator/pull/618)
* [Bug 1976287](https://bugzilla.redhat.com/show_bug.cgi?id=1976287): Validate the status of the etcd snapshot during backup and restore [#617](https://github.com/openshift/cluster-etcd-operator/pull/617)
* [Bug 1951447](https://bugzilla.redhat.com/show_bug.cgi?id=1951447): pkg/etcdenvvar/etcd_env.go: Sort endpoints to prevent rollout [#568](https://github.com/openshift/cluster-etcd-operator/pull/568)
* [Bug 1958416](https://bugzilla.redhat.com/show_bug.cgi?id=1958416): pkg/dnshelpers: fallback to spec if status is not populated for serviceNetwork [#594](https://github.com/openshift/cluster-etcd-operator/pull/594)
* [Bug 1955418](https://bugzilla.redhat.com/show_bug.cgi?id=1955418): manifests: Shift FlowSchema to level 50 [#582](https://github.com/openshift/cluster-etcd-operator/pull/582)
* [Bug 1954121](https://bugzilla.redhat.com/show_bug.cgi?id=1954121): [release-4.7] Improve cert controller detection and correction of invalid certs [#577](https://github.com/openshift/cluster-etcd-operator/pull/577)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/9c724b82b3fc7704daf97e493f9092032a37b7fa...51cb8c4147c45672c9645fae39bfcc6d696adc85)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/0f2df0aacba8c9c86ea45db241747a979af4028a)

* [Bug 1977159](https://bugzilla.redhat.com/show_bug.cgi?id=1977159): bump aws-sdk-go to v1.38.35 [#704](https://github.com/openshift/cluster-image-registry-operator/pull/704)
* [Bug 1973693](https://bugzilla.redhat.com/show_bug.cgi?id=1973693): Setting required pod anti-affinity rules [#697](https://github.com/openshift/cluster-image-registry-operator/pull/697)
* [Bug 1960562](https://bugzilla.redhat.com/show_bug.cgi?id=1960562): manifests: fix selector in image-registry-operator [#689](https://github.com/openshift/cluster-image-registry-operator/pull/689)
* [Bug 1957308](https://bugzilla.redhat.com/show_bug.cgi?id=1957308): Setting user tags always when Storage is Managed [#684](https://github.com/openshift/cluster-image-registry-operator/pull/684)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/3cbefc795a0d9b8f6194f65d03f194bb4d9fcbce...0f2df0aacba8c9c86ea45db241747a979af4028a)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/b86f935f5e693f48dbf6ec23a490422b6e295eb7)

* [Bug 1978845](https://bugzilla.redhat.com/show_bug.cgi?id=1978845): Specify topology spread constraints [#632](https://github.com/openshift/cluster-ingress-operator/pull/632)
* [Bug 1973983](https://bugzilla.redhat.com/show_bug.cgi?id=1973983): Canary: Handle downgrades from 4.8 to 4.7 properly [#627](https://github.com/openshift/cluster-ingress-operator/pull/627)
* [Bug 1960776](https://bugzilla.redhat.com/show_bug.cgi?id=1960776): Reconcile openshift-ingress namespace on upgrade [#616](https://github.com/openshift/cluster-ingress-operator/pull/616)
* [Bug 1942603](https://bugzilla.redhat.com/show_bug.cgi?id=1942603): [release-4.7] Add the new NetworkPolicy-matching label to the namespace [#615](https://github.com/openshift/cluster-ingress-operator/pull/615)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/1cf30874211a37e916b0822a0540ff6d34103ab9...b86f935f5e693f48dbf6ec23a490422b6e295eb7)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/9043e2bba8f4707a578895f8b29d4736a61a010c)

* [Bug 1924492](https://bugzilla.redhat.com/show_bug.cgi?id=1924492): Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 [#120](https://github.com/openshift/cluster-machine-approver/pull/120)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/6f49a9facf8b2764fa4c1482624fa1f7762e41ed...9043e2bba8f4707a578895f8b29d4736a61a010c)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/d6725052e00a206cab10f6c40abdfa1a3c2aff0f)

* [Bug 1969963](https://bugzilla.redhat.com/show_bug.cgi?id=1969963): Recording rule for builds by strategy [#1206](https://github.com/openshift/cluster-monitoring-operator/pull/1206)
* [Bug 1967966](https://bugzilla.redhat.com/show_bug.cgi?id=1967966): Switch back anti-affinity to soft from hard for Prometheus [#1200](https://github.com/openshift/cluster-monitoring-operator/pull/1200)
* [Bug 1956565](https://bugzilla.redhat.com/show_bug.cgi?id=1956565): manifest allowlist: add acm_managed_cluster_info in 4.7 [#1144](https://github.com/openshift/cluster-monitoring-operator/pull/1144)
* [Bug 1961069](https://bugzilla.redhat.com/show_bug.cgi?id=1961069): remove dependency of e2e tests on AWS [#1162](https://github.com/openshift/cluster-monitoring-operator/pull/1162)
* [Bug 1957703](https://bugzilla.redhat.com/show_bug.cgi?id=1957703): [4.7]: Add hard anti-affinity constraints to Prometheuses [#1150](https://github.com/openshift/cluster-monitoring-operator/pull/1150)
* [Bug 1950290](https://bugzilla.redhat.com/show_bug.cgi?id=1950290): remove KubeClientCertificateExpiration alert rule [#1171](https://github.com/openshift/cluster-monitoring-operator/pull/1171)
* [Bug 1955482](https://bugzilla.redhat.com/show_bug.cgi?id=1955482): fix kube-state-metrics regexp patterns [#1163](https://github.com/openshift/cluster-monitoring-operator/pull/1163)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/5b48d8f445f9c0ac3bf99b68c5ee4a909da950b9...d6725052e00a206cab10f6c40abdfa1a3c2aff0f)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/6fc60497ad47aed067d17b35b6d144f6f15b80f5)

* [Bug 1982217](https://bugzilla.redhat.com/show_bug.cgi?id=1982217): Use 10% for ovnkube-node for maxUnavailable [#1153](https://github.com/openshift/cluster-network-operator/pull/1153)
* [Bug 1969860](https://bugzilla.redhat.com/show_bug.cgi?id=1969860): Escape characters on ini file [#1127](https://github.com/openshift/cluster-network-operator/pull/1127)
* [Bug 1967994](https://bugzilla.redhat.com/show_bug.cgi?id=1967994): Backport daemonset to drop icmp frag needed packets received from other nodes in the cluster to Rel 4.7 [#1119](https://github.com/openshift/cluster-network-operator/pull/1119)
* [Bug 1972183](https://bugzilla.redhat.com/show_bug.cgi?id=1972183): config: Set enable-profiling true by default and allow enable-profiling as a proxy argument [#1129](https://github.com/openshift/cluster-network-operator/pull/1129)
* [Bug 1967388](https://bugzilla.redhat.com/show_bug.cgi?id=1967388): annotate flowcontrol with `networkoperator.openshift.io/ignore-errors` [#1118](https://github.com/openshift/cluster-network-operator/pull/1118)
* [Bug 1967972](https://bugzilla.redhat.com/show_bug.cgi?id=1967972): Add tokenreviews permissions for kube-proxy [#1120](https://github.com/openshift/cluster-network-operator/pull/1120)
* [Bug 1942603](https://bugzilla.redhat.com/show_bug.cgi?id=1942603): [release-4.7] Allow from router policy support for cluster network operator [#1087](https://github.com/openshift/cluster-network-operator/pull/1087)
* [Bug 1937396](https://bugzilla.redhat.com/show_bug.cgi?id=1937396): kuryr/alerts: change the rule for free count [#1011](https://github.com/openshift/cluster-network-operator/pull/1011)
* [Bug 1957749](https://bugzilla.redhat.com/show_bug.cgi?id=1957749): ovnkube: add missing resource requests for SBDB [#1088](https://github.com/openshift/cluster-network-operator/pull/1088)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/011403f5fc7b87bf0c58f218d37c261461c2c8da...6fc60497ad47aed067d17b35b6d144f6f15b80f5)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/d546b54bcb292cd3691f4d25bbb8899690d5adab)

* [Bug 1958885](https://bugzilla.redhat.com/show_bug.cgi?id=1958885): Switch to client-go leader-with-lease election. [#238](https://github.com/openshift/cluster-node-tuning-operator/pull/238)
* [Bug 1960542](https://bugzilla.redhat.com/show_bug.cgi?id=1960542): manifests: fix selector in node-tuning-operator ServiceMonitor [#228](https://github.com/openshift/cluster-node-tuning-operator/pull/228)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/78e1417e306a54b589c5cfce659f672a74bc0456...d546b54bcb292cd3691f4d25bbb8899690d5adab)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/0df8f92c275b9eccfb1b3ccdd79fb861ddee1d99)

* [Bug 1923036](https://bugzilla.redhat.com/show_bug.cgi?id=1923036): Update Jenkins monitored templates names [#359](https://github.com/openshift/cluster-samples-operator/pull/359)
* [Bug 1961518](https://bugzilla.redhat.com/show_bug.cgi?id=1961518): manifests: fix selector in ServiceMonitor [#375](https://github.com/openshift/cluster-samples-operator/pull/375)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/257793946a0655f7af4597c3b7da2de2b4249702...0df8f92c275b9eccfb1b3ccdd79fb861ddee1d99)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/6d2c25f3cfb931deca457a0c6261651c1a64c464)

* [Bug 1961719](https://bugzilla.redhat.com/show_bug.cgi?id=1961719): manifests: remove namespace from cluster-storage-operator-role binding [#170](https://github.com/openshift/cluster-storage-operator/pull/170)
* [Bug 1959546](https://bugzilla.redhat.com/show_bug.cgi?id=1959546): Add alert about vsphere-problem-detector unable to connect [#169](https://github.com/openshift/cluster-storage-operator/pull/169)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/fd2b47c06d0c7efae84c6ff44680f9025ac4f283...6d2c25f3cfb931deca457a0c6261651c1a64c464)


### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/b7e791773b67f9acd6f521b8c1f69778e43a7d94)

* Pack both keys in one verifier-public-key-ci entry [#36](https://github.com/openshift/cluster-update-keys/pull/36)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/a15fb1ed24e4c1478c67cf2f87d9319365d90c5b...b7e791773b67f9acd6f521b8c1f69778e43a7d94)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/fa7bfbc485b4256535b7de172d1083f83c9409ce)

* [Bug 1970272](https://bugzilla.redhat.com/show_bug.cgi?id=1970272): Fixing the log message in rbac.go for clusterrole [#609](https://github.com/openshift/cluster-version-operator/pull/609)
* [Bug 1970272](https://bugzilla.redhat.com/show_bug.cgi?id=1970272): Log object updates and show existing/required diff [#589](https://github.com/openshift/cluster-version-operator/pull/589)
* [Bug 1969501](https://bugzilla.redhat.com/show_bug.cgi?id=1969501): install/0000_90_cluster-version-operator_02_servicemonitor: Soften ClusterOperatorDegraded [#587](https://github.com/openshift/cluster-version-operator/pull/587)
* [Bug 1969378](https://bugzilla.redhat.com/show_bug.cgi?id=1969378): avoid hotlooping on RoleBindings with empty APIGroup [#584](https://github.com/openshift/cluster-version-operator/pull/584)
* [Bug 1966977](https://bugzilla.redhat.com/show_bug.cgi?id=1966977): Prevent hotlooping in ImageStreams [#580](https://github.com/openshift/cluster-version-operator/pull/580)
* [Bug 1959238](https://bugzilla.redhat.com/show_bug.cgi?id=1959238): pkg/cvo/sync_worker: Shift ClusterOperator pre-creation into the manifest-task node [#557](https://github.com/openshift/cluster-version-operator/pull/557)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/1db886781f4e1f18965e60d89da80ec1d677228b...fa7bfbc485b4256535b7de172d1083f83c9409ce)


### [console](https://github.com/openshift/console/tree/b571ac9bad467db8459f25de9c5a4f3b54789312)

* [Bug 1973572](https://bugzilla.redhat.com/show_bug.cgi?id=1973572): Hardcode strings in Home->Overview page [#9322](https://github.com/openshift/console/pull/9322)
* [Bug 1942864](https://bugzilla.redhat.com/show_bug.cgi?id=1942864): Warning Alert for Encrypted PVs in Create StorageClass [#8464](https://github.com/openshift/console/pull/8464)
* [Bug 1965526](https://bugzilla.redhat.com/show_bug.cgi?id=1965526): Removing library charts from the merged helm repo index entries. [#9076](https://github.com/openshift/console/pull/9076)
* [Bug 1970796](https://bugzilla.redhat.com/show_bug.cgi?id=1970796): update cluster-local label for ksvc [#9220](https://github.com/openshift/console/pull/9220)
* [Bug 1970720](https://bugzilla.redhat.com/show_bug.cgi?id=1970720): fix rotated pipelinerun status icon issue in safari [#9216](https://github.com/openshift/console/pull/9216)
* [Bug 1969536](https://bugzilla.redhat.com/show_bug.cgi?id=1969536): Omit bitbucket branch in URL if it contains slash [#9180](https://github.com/openshift/console/pull/9180)
* [Bug 1954962](https://bugzilla.redhat.com/show_bug.cgi?id=1954962): removes extra annotations form spec template for ksvc [#8823](https://github.com/openshift/console/pull/8823)
* [Bug 1948537](https://bugzilla.redhat.com/show_bug.cgi?id=1948537): add hide/reveal button for kms token [#8616](https://github.com/openshift/console/pull/8616)
* [Bug 1942160](https://bugzilla.redhat.com/show_bug.cgi?id=1942160): Update the scope of GitOpsService resource [#8450](https://github.com/openshift/console/pull/8450)
* [Bug 1971667](https://bugzilla.redhat.com/show_bug.cgi?id=1971667): Track and show error messages in modals [#9232](https://github.com/openshift/console/pull/9232)
* [Bug 1969791](https://bugzilla.redhat.com/show_bug.cgi?id=1969791): fixes: WebTerminal widget should send resize events [#9190](https://github.com/openshift/console/pull/9190)
* [Bug 1969105](https://bugzilla.redhat.com/show_bug.cgi?id=1969105): Update IP address on pods list to show podIP other than … [#9172](https://github.com/openshift/console/pull/9172)
* [Bug 1967106](https://bugzilla.redhat.com/show_bug.cgi?id=1967106): can't open terminal for pods that have more than one co… [#9117](https://github.com/openshift/console/pull/9117)
* [Bug 1966275](https://bugzilla.redhat.com/show_bug.cgi?id=1966275): Fix Pipeline Parameters in Modals accept empty string defaults [#9085](https://github.com/openshift/console/pull/9085)
* [Bug 1961567](https://bugzilla.redhat.com/show_bug.cgi?id=1961567): Remove the broken Devfile Sample for BuildConfigs [#8956](https://github.com/openshift/console/pull/8956)
* [Bug 1963025](https://bugzilla.redhat.com/show_bug.cgi?id=1963025): Fix documentation link to network policies [#8953](https://github.com/openshift/console/pull/8953)
* [Bug 1953606](https://bugzilla.redhat.com/show_bug.cgi?id=1953606): Fixing failure domain issue with custom pools (4.7 backport) [#8775](https://github.com/openshift/console/pull/8775)
* [Bug 1970485](https://bugzilla.redhat.com/show_bug.cgi?id=1970485): Add pipeline annotation to secrets for private git repo import with pipeline [#9207](https://github.com/openshift/console/pull/9207)
* [Bug 1964400](https://bugzilla.redhat.com/show_bug.cgi?id=1964400): Fix RGW Total Used Query [#9038](https://github.com/openshift/console/pull/9038)
* [Bug 1958873](https://bugzilla.redhat.com/show_bug.cgi?id=1958873): Fix disk replacement during second replacement [#9083](https://github.com/openshift/console/pull/9083)
* [Bug 1961887](https://bugzilla.redhat.com/show_bug.cgi?id=1961887): Update Taskrun tab to make namespace based calls [#8968](https://github.com/openshift/console/pull/8968)
* [Bug 1959356](https://bugzilla.redhat.com/show_bug.cgi?id=1959356): Tech preview badge for arbiter [#8870](https://github.com/openshift/console/pull/8870)
* [Bug 1964322](https://bugzilla.redhat.com/show_bug.cgi?id=1964322): The status of "Used Capacity Breakdown [Pods]" is "Not available" [#9028](https://github.com/openshift/console/pull/9028)
* [Bug 1957499](https://bugzilla.redhat.com/show_bug.cgi?id=1957499): OperatorHub - console accepts any value for infraFeatures [#8859](https://github.com/openshift/console/pull/8859)
* [Bug 1960686](https://bugzilla.redhat.com/show_bug.cgi?id=1960686): Fix hot loop in global config page [#8935](https://github.com/openshift/console/pull/8935)
* [Bug 1947091](https://bugzilla.redhat.com/show_bug.cgi?id=1947091): Fix skipped task status when using conditions [#8582](https://github.com/openshift/console/pull/8582)
* [Bug 1962493](https://bugzilla.redhat.com/show_bug.cgi?id=1962493): Hide TaskRun edit actions for rows in Pipelinerun's TaskRun tab [#8987](https://github.com/openshift/console/pull/8987)
* [Bug 1966798](https://bugzilla.redhat.com/show_bug.cgi?id=1966798): [release-4.7] Remove monitoring labelling step for 4.7 tests [#9073](https://github.com/openshift/console/pull/9073)
* [Bug 1951210](https://bugzilla.redhat.com/show_bug.cgi?id=1951210): Fix default resource log download file name [#8707](https://github.com/openshift/console/pull/8707)
* [Bug 1944046](https://bugzilla.redhat.com/show_bug.cgi?id=1944046): Warn using an unsupported IE browser [#8494](https://github.com/openshift/console/pull/8494)
* [release 4.7] Bug 1939553: Support binary file type secret entries [#8389](https://github.com/openshift/console/pull/8389)
* [Bug 1960544](https://bugzilla.redhat.com/show_bug.cgi?id=1960544): Overly generic CSS rules for dd and dt elements breaks styling elsewhere in console [#8925](https://github.com/openshift/console/pull/8925)
* [Bug 1960093](https://bugzilla.redhat.com/show_bug.cgi?id=1960093): Make console works against api proxy [#8914](https://github.com/openshift/console/pull/8914)
* [Full changelog](https://github.com/openshift/console/compare/110b70f6e5cf53c045a59034e234efbae23ddbe8...b571ac9bad467db8459f25de9c5a4f3b54789312)


### [console-operator](https://github.com/openshift/console-operator/tree/44a0308f894abae02f066a40ba394c8aa7331424)

* [Bug 1960589](https://bugzilla.redhat.com/show_bug.cgi?id=1960589): [release-4.7] quickstarts: remove "spec.version" [#547](https://github.com/openshift/console-operator/pull/547)
* [Full changelog](https://github.com/openshift/console-operator/compare/4f933d59784bd37216466ca329ea51fc797b99a1...44a0308f894abae02f066a40ba394c8aa7331424)


### [csi-driver-manila, openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack/tree/d3f709218512df9f46e11c1d13347fc68774d72c)

* [Bug 1969345](https://bugzilla.redhat.com/show_bug.cgi?id=1969345): Backport ignore proxy connecting to CSI sockets [#54](https://github.com/openshift/cloud-provider-openstack/pull/54)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/5202bfdc042bafa732f19dcbec31ca6137fa3fa4...d3f709218512df9f46e11c1d13347fc68774d72c)


### [docker-builder](https://github.com/openshift/builder/tree/82eeeac0c8cbad90f951885cc11939ecd51eda76)

* Updating openshift-enterprise-builder builder & base images to be consistent with ART [#188](https://github.com/openshift/builder/pull/188)
* [Full changelog](https://github.com/openshift/builder/compare/df50aa9a4dd8e378d77c398b4d5c55211b9d14ba...82eeeac0c8cbad90f951885cc11939ecd51eda76)


### [docker-registry](https://github.com/openshift/image-registry/tree/ef29671b437cfa7ac82a17001ce57fe527539d53)

* [Bug 1977159](https://bugzilla.redhat.com/show_bug.cgi?id=1977159): bump aws-sdk-go to v1.38.35 [#282](https://github.com/openshift/image-registry/pull/282)
* [Full changelog](https://github.com/openshift/image-registry/compare/8e0c068aef607fceffe3e179c3a9701f51c51dff...ef29671b437cfa7ac82a17001ce57fe527539d53)


### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/044d4be053f86d8f059197a76f641f99cf07d444)

* [Bug 1976302](https://bugzilla.redhat.com/show_bug.cgi?id=1976302): Cherry pick gcc to release 4.7 [#41](https://github.com/openshift/driver-toolkit/pull/41)
* [Bug 1975480](https://bugzilla.redhat.com/show_bug.cgi?id=1975480): DPDK KNI modules need some additional tools [#40](https://github.com/openshift/driver-toolkit/pull/40)
* [Bug 1975479](https://bugzilla.redhat.com/show_bug.cgi?id=1975479): Requirements for authenticating kernel modules with X.509 keys [#39](https://github.com/openshift/driver-toolkit/pull/39)
* [Bug 1962285](https://bugzilla.redhat.com/show_bug.cgi?id=1962285): Update Dockerfile [#21](https://github.com/openshift/driver-toolkit/pull/21)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/bbf091e64bb3cf06edd61e39877ebe534037de3c...044d4be053f86d8f059197a76f641f99cf07d444)


### [etcd](https://github.com/openshift/etcd/tree/c61e5afde9485fac9233c0db6ab950bfb511e1b5)

* [Bug 1970141](https://bugzilla.redhat.com/show_bug.cgi?id=1970141): discover-etcd-initial-cluster: retry if member is not part of member list and dataDir exists [#82](https://github.com/openshift/etcd/pull/82)
* [Full changelog](https://github.com/openshift/etcd/compare/45b6800c4fab213e7afee1e406abe48cc14ee020...c61e5afde9485fac9233c0db6ab950bfb511e1b5)


### [gcp-machine-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/5f6589d4ef9496e63ebc072f4d863151bbeb4407)

* [Bug 1924508](https://bugzilla.redhat.com/show_bug.cgi?id=1924508): Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 [#164](https://github.com/openshift/cluster-api-provider-gcp/pull/164)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/7215497c95a43c5f633bc511e3e85dd1d956a931...5f6589d4ef9496e63ebc072f4d863151bbeb4407)


### [haproxy-router](https://github.com/openshift/router/tree/9cc0c8fcebf613785511468c7df601117b13e5aa)

* [Bug 1967733](https://bugzilla.redhat.com/show_bug.cgi?id=1967733): template helper - generateHAProxyWhiteListFile, use right arg type [#297](https://github.com/openshift/router/pull/297)
* [Bug 1965402](https://bugzilla.redhat.com/show_bug.cgi?id=1965402): Revert 'Bug 1896977: Enhance host name validation in router' [#293](https://github.com/openshift/router/pull/293)
* [Bug 1963243](https://bugzilla.redhat.com/show_bug.cgi?id=1963243): Add a condition to check if the Endpoints ID is duplicated [#288](https://github.com/openshift/router/pull/288)
* [Full changelog](https://github.com/openshift/router/compare/130b5993726c46e83ca871a97a930d73f2c433a8...9cc0c8fcebf613785511468c7df601117b13e5aa)


### [hello-openshift, tests](https://github.com/openshift/origin/tree/f59ac6a11e0dbe8590181dd823ef8e5b87e784a9)

* Re-enable quota test [#26284](https://github.com/openshift/origin/pull/26284)
* [Bug 1980540](https://bugzilla.redhat.com/show_bug.cgi?id=1980540): Use cluster-logging for operator installation smoke test. [#26315](https://github.com/openshift/origin/pull/26315)
* [Bug 1977383](https://bugzilla.redhat.com/show_bug.cgi?id=1977383): [release-4.7] Update resource quota test for compatibility with service ca configmap publishing [#26303](https://github.com/openshift/origin/pull/26303)
* [Bug 1928862](https://bugzilla.redhat.com/show_bug.cgi?id=1928862): [4.7] Bump openshift/kubernetes [#26259](https://github.com/openshift/origin/pull/26259)
* [Bug 1978000](https://bugzilla.redhat.com/show_bug.cgi?id=1978000): builds: comment out multi-namespace template test [#26296](https://github.com/openshift/origin/pull/26296)
* NOOP - Trigger a new CI build [#26291](https://github.com/openshift/origin/pull/26291)
* [Bug 1977383](https://bugzilla.redhat.com/show_bug.cgi?id=1977383): [release-4.7] Skip cluster quota test to enable service ca publisher to merge to o/k [#26283](https://github.com/openshift/origin/pull/26283)
* [Bug 1970411](https://bugzilla.redhat.com/show_bug.cgi?id=1970411): properly remove project after test ends [#26217](https://github.com/openshift/origin/pull/26217)
* [Bug 1966358](https://bugzilla.redhat.com/show_bug.cgi?id=1966358): Dockerfile.rhel: fix a bash typo [#26194](https://github.com/openshift/origin/pull/26194)
* [Bug 1961367](https://bugzilla.redhat.com/show_bug.cgi?id=1961367): Add Cinder client to the test image [#26171](https://github.com/openshift/origin/pull/26171)
* [Bug 1955600](https://bugzilla.redhat.com/show_bug.cgi?id=1955600): test/extended/router: Fix-up Unidling test [#26120](https://github.com/openshift/origin/pull/26120)
* [Bug 1963115](https://bugzilla.redhat.com/show_bug.cgi?id=1963115): narrow verify /run test to /run/secrets [#26180](https://github.com/openshift/origin/pull/26180)
* [Bug 1963115](https://bugzilla.redhat.com/show_bug.cgi?id=1963115): move verify run test from tools to cli image to avoid additional /run content [#26176](https://github.com/openshift/origin/pull/26176)
* [Full changelog](https://github.com/openshift/origin/compare/ca0d30fdf36640b2db6dbdc0530933d672f31605...f59ac6a11e0dbe8590181dd823ef8e5b87e784a9)


### [hyperkube](https://github.com/openshift/kubernetes/tree/558d959332b3f1f7bf786673bf294e6e0932bb18)

* [Bug 1981634](https://bugzilla.redhat.com/show_bug.cgi?id=1981634): UPSTREAM: <drop>: use the legacy service-ca.crt content for clusters started in 4.7 or before [#857](https://github.com/openshift/kubernetes/pull/857)
* [Bug 1977383](https://bugzilla.redhat.com/show_bug.cgi?id=1977383): [release-4.7] Ensure service ca configmap is created in all namespaces [#834](https://github.com/openshift/kubernetes/pull/834)
* [Bug 1977383](https://bugzilla.redhat.com/show_bug.cgi?id=1977383): [release-4.7] Fix watch conformance test [#843](https://github.com/openshift/kubernetes/pull/843)
* [Bug 1977383](https://bugzilla.redhat.com/show_bug.cgi?id=1977383): Update resource quota test for compatibility with service ca configmap publishing [#839](https://github.com/openshift/kubernetes/pull/839)
* [Bug 1975553](https://bugzilla.redhat.com/show_bug.cgi?id=1975553): only chown if non-windows machine with projected volumes [#826](https://github.com/openshift/kubernetes/pull/826)
* [Bug 1928862](https://bugzilla.redhat.com/show_bug.cgi?id=1928862): [release-4.7] UPSTREAM: <carry>: kube-apiserver: ignore SIGTERM/INT after the first one [#739](https://github.com/openshift/kubernetes/pull/739)
* [Bug 1966810](https://bugzilla.redhat.com/show_bug.cgi?id=1966810): UPSTREAM: 102224: Fix expired unit test certs [#780](https://github.com/openshift/kubernetes/pull/780)
* [Bug 1963263](https://bugzilla.redhat.com/show_bug.cgi?id=1963263): UPSTREAM: 102000: Ref counting is only applicable to Remote endpoints [#763](https://github.com/openshift/kubernetes/pull/763)
* [Full changelog](https://github.com/openshift/kubernetes/compare/df9c8387b2dc2308da01706ff89982c6b7ad9c48...558d959332b3f1f7bf786673bf294e6e0932bb18)


### [insights-operator](https://github.com/openshift/insights-operator/tree/e7955cf0b199caa53726431df5d8800be5af049a)

* [release 4.7] Bug 1960645: Adds virt_platform metric to the collected metrics (#428) [#428](https://github.com/openshift/insights-operator/pull/428)
* [Full changelog](https://github.com/openshift/insights-operator/compare/b0817c95c78b7b750ad3f966c500aa8bd7353b42...e7955cf0b199caa53726431df5d8800be5af049a)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/7ef152158f515f17a2678f7ead8a7363644cdf02)

* [Bug 1973367](https://bugzilla.redhat.com/show_bug.cgi?id=1973367): Modify dhcp kernel args based on ipv4/ipv6 [#55](https://github.com/openshift/ironic-rhcos-downloader/pull/55)
* [Bug 1971549](https://bugzilla.redhat.com/show_bug.cgi?id=1971549): Unconditionally remove TMPDIR [#45](https://github.com/openshift/ironic-rhcos-downloader/pull/45)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/4cdc8c311630d0d9807accb12e63bbfa8bbc3ad4...7ef152158f515f17a2678f7ead8a7363644cdf02)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/798a46be0fa09aeec90b25a4c4cf11bf0b2c5b6f)

* [Bug 1962637](https://bugzilla.redhat.com/show_bug.cgi?id=1962637): ValidateMTU: check only the interface that holds the node ip [#304](https://github.com/openshift/sdn/pull/304)
* [Bug 1923231](https://bugzilla.redhat.com/show_bug.cgi?id=1923231): rebase to sdn-4.7-kubernetes-1.20.0-rc.0 [#286](https://github.com/openshift/sdn/pull/286)
* [Full changelog](https://github.com/openshift/sdn/compare/2310aee1ebfca13a25162f754908e35aa1550d6d...798a46be0fa09aeec90b25a4c4cf11bf0b2c5b6f)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/c7654fb7ee98d42b3c2329f4ad0039f8f87828f0)

* [Bug 1972631](https://bugzilla.redhat.com/show_bug.cgi?id=1972631): Workaround OVN bug causing subports to be DOWN [#525](https://github.com/openshift/kuryr-kubernetes/pull/525)
* [Bug 1970320](https://bugzilla.redhat.com/show_bug.cgi?id=1970320): Fix Subnet retrival when creating Service without Selector [#522](https://github.com/openshift/kuryr-kubernetes/pull/522)
* [Bug 1949541](https://bugzilla.redhat.com/show_bug.cgi?id=1949541): Fixing bug, Kuryr-Controller crashes when it's missing the status [#501](https://github.com/openshift/kuryr-kubernetes/pull/501)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/8b61936867e8f3b224f0507685ba0e76e6d3bb95...c7654fb7ee98d42b3c2329f4ad0039f8f87828f0)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/e179bb5ce397b543cd3f716f75fa4cd40046e0ad)

* [Bug 1924517](https://bugzilla.redhat.com/show_bug.cgi?id=1924517): Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 [#867](https://github.com/openshift/machine-api-operator/pull/867)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/bb9e0b5c11708f2cfc3ed069928e51453b7a42f3...e179bb5ce397b543cd3f716f75fa4cd40046e0ad)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/8eadb800abc91dd9759edc4be57235eb80ad695d)

* [Bug 1976232](https://bugzilla.redhat.com/show_bug.cgi?id=1976232): Explicitly set keyfile as the default plugin of NetworkManager for RHEL7 [#2641](https://github.com/openshift/machine-config-operator/pull/2641)
* [Bug 1971864](https://bugzilla.redhat.com/show_bug.cgi?id=1971864): Stop setting nopreempt on bootstrap keepalived.conf [#2616](https://github.com/openshift/machine-config-operator/pull/2616)
* [Bug 1973006](https://bugzilla.redhat.com/show_bug.cgi?id=1973006): daemon: cordon the node before performing drain [#2623](https://github.com/openshift/machine-config-operator/pull/2623)
* [Bug 1961341](https://bugzilla.redhat.com/show_bug.cgi?id=1961341): rbac: update remaining apis to v1 [#2620](https://github.com/openshift/machine-config-operator/pull/2620)
* [Bug 1971374](https://bugzilla.redhat.com/show_bug.cgi?id=1971374): daemon/drain.go: bump initial drain sleeps down to 1min [#2612](https://github.com/openshift/machine-config-operator/pull/2612)
* [Bug 1970154](https://bugzilla.redhat.com/show_bug.cgi?id=1970154): operator/sync.go confirm renderedconfig osimageurl matches cvo [#2607](https://github.com/openshift/machine-config-operator/pull/2607)
* [Bug 1968759](https://bugzilla.redhat.com/show_bug.cgi?id=1968759): Bump drain timeout to 1h [#2605](https://github.com/openshift/machine-config-operator/pull/2605)
* [Bug 1949348](https://bugzilla.redhat.com/show_bug.cgi?id=1949348): gcp-routes should wait until network is stopped [#2593](https://github.com/openshift/machine-config-operator/pull/2593)
* [Bug 1962288](https://bugzilla.redhat.com/show_bug.cgi?id=1962288): [ovirt] Stop using db file for static internal records [#2581](https://github.com/openshift/machine-config-operator/pull/2581)
* [Bug 1964568](https://bugzilla.redhat.com/show_bug.cgi?id=1964568): Delete duplicated generated mc [#2591](https://github.com/openshift/machine-config-operator/pull/2591)
* Updating ose-machine-config-operator builder & base images to be consistent with ART [#2399](https://github.com/openshift/machine-config-operator/pull/2399)
* [Bug 1949348](https://bugzilla.redhat.com/show_bug.cgi?id=1949348): not allow healthcheck traffic to loop through the node [#2526](https://github.com/openshift/machine-config-operator/pull/2526)
* [Bug 1953475](https://bugzilla.redhat.com/show_bug.cgi?id=1953475): daemon: return nil for unsupported operation on an OS [#2544](https://github.com/openshift/machine-config-operator/pull/2544)
* docs/README: Useless bump to get a new commit hash [#2584](https://github.com/openshift/machine-config-operator/pull/2584)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/e3863b02b7403342cdf0f981889e8c3cfc2d86bb...8eadb800abc91dd9759edc4be57235eb80ad695d)


### [oauth-server](https://github.com/openshift/oauth-server/tree/61db550b94b09356eebabcffd39aea8d90eb6089)

* [Bug 1965932](https://bugzilla.redhat.com/show_bug.cgi?id=1965932): bump kube to 0.20.4 [#79](https://github.com/openshift/oauth-server/pull/79)
* [Full changelog](https://github.com/openshift/oauth-server/compare/3215761a70426326f0be2ca675b0e9b9fdae341e...61db550b94b09356eebabcffd39aea8d90eb6089)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/f9ac08715d1b7890a5aa66a8fb16e847a7f6b727)

* [Bug 1965402](https://bugzilla.redhat.com/show_bug.cgi?id=1965402): Revert 'Bug 1965402: Enhance API host name validation' [#211](https://github.com/openshift/openshift-apiserver/pull/211)
* [Bug 1961557](https://bugzilla.redhat.com/show_bug.cgi?id=1961557): sets shutdown-delay-duration from OpenShiftAPIServerConfig [#199](https://github.com/openshift/openshift-apiserver/pull/199)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/a0f41548179e57e9b184a3e713ac6227cc4385ff...f9ac08715d1b7890a5aa66a8fb16e847a7f6b727)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/39b6393236e5abab331de1ab3384d0d165510457)

* [Bug 1955210](https://bugzilla.redhat.com/show_bug.cgi?id=1955210): fixed LANG for the builder container [#180](https://github.com/openshift/openshift-controller-manager/pull/180)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/e0755cd0dca5e8a0cdae0a52d7127f75f20b1e9a...39b6393236e5abab331de1ab3384d0d165510457)


### [operator-lifecycle-manager](https://github.com/operator-framework/operator-lifecycle-manager/tree/c6d1c295b5d995f61cfe496359d3e70bdbc244a7)

* [Bug 1972075](https://bugzilla.redhat.com/show_bug.cgi?id=1972075): Add OperatorCondition status sync and update operator upgradeable check [#2206](https://github.com/operator-framework/operator-lifecycle-manager/pull/2206)
* [Bug 1945702](https://bugzilla.redhat.com/show_bug.cgi?id=1945702): Fix inconsistent dependency candidate order. [#2149](https://github.com/operator-framework/operator-lifecycle-manager/pull/2149)
* [Bug 1962314](https://bugzilla.redhat.com/show_bug.cgi?id=1962314): Explicitly set `readOnlyRootFilesystem: false` on created registry pods. [#2171](https://github.com/operator-framework/operator-lifecycle-manager/pull/2171)
* [Bug 1963141](https://bugzilla.redhat.com/show_bug.cgi?id=1963141): Make ClusterOperator Available condition sticky. [#2173](https://github.com/operator-framework/operator-lifecycle-manager/pull/2173)
* [Bug 1962312](https://bugzilla.redhat.com/show_bug.cgi?id=1962312): Simplify deployment status check to reduce flapping. [#2170](https://github.com/operator-framework/operator-lifecycle-manager/pull/2170)
* [Bug 1962302](https://bugzilla.redhat.com/show_bug.cgi?id=1962302): Set reason/message for Available condition in packageserver co [#2168](https://github.com/operator-framework/operator-lifecycle-manager/pull/2168)
* [Full changelog](https://github.com/operator-framework/operator-lifecycle-manager/compare/eaf3ca9bbd84af0a7edd6fed89132efea040d07c...c6d1c295b5d995f61cfe496359d3e70bdbc244a7)


### [operator-registry](https://github.com/operator-framework/operator-registry/tree/06e950de5ebca66e493f6cd2414e73c8978090d3)

* [Bug 1968680](https://bugzilla.redhat.com/show_bug.cgi?id=1968680): fix(containerd): drop xattrs during unpack [#676](https://github.com/operator-framework/operator-registry/pull/676)
* [Full changelog](https://github.com/operator-framework/operator-registry/compare/5ccabf956d25a2788cc64ad5591c404d7b950207...06e950de5ebca66e493f6cd2414e73c8978090d3)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/5354db111f53d4414fb9f86e90cb410fcb14ebd1)

* [Bug 1972484](https://bugzilla.redhat.com/show_bug.cgi?id=1972484): egress firewall as ACLs + service connectivity fixes [#592](https://github.com/openshift/ovn-kubernetes/pull/592)
* [Bug 1940566](https://bugzilla.redhat.com/show_bug.cgi?id=1940566): Properly log when hybrid overlay errors out [#543](https://github.com/openshift/ovn-kubernetes/pull/543)
* [Bug 1970779](https://bugzilla.redhat.com/show_bug.cgi?id=1970779): Remove getDefaultIfAddr and use getNetworkInterfaceIPAddresses [#571](https://github.com/openshift/ovn-kubernetes/pull/571)
* [Bug 1962590](https://bugzilla.redhat.com/show_bug.cgi?id=1962590): NewAddressSet: return nil in case of error [#546](https://github.com/openshift/ovn-kubernetes/pull/546)
* [Bug 1970322](https://bugzilla.redhat.com/show_bug.cgi?id=1970322): revert 487 [#570](https://github.com/openshift/ovn-kubernetes/pull/570)
* [Bug 1962819](https://bugzilla.redhat.com/show_bug.cgi?id=1962819): CNI cmdCheck: treat ingress_policing_rate=0 as not found [#548](https://github.com/openshift/ovn-kubernetes/pull/548)
* [Bug 1965075](https://bugzilla.redhat.com/show_bug.cgi?id=1965075): CARRY: fix missed learn for hybrid exgw [#556](https://github.com/openshift/ovn-kubernetes/pull/556)
* [Bug 1946682](https://bugzilla.redhat.com/show_bug.cgi?id=1946682): egress firewall as ACLs [#487](https://github.com/openshift/ovn-kubernetes/pull/487)
* [Bug 1942603](https://bugzilla.redhat.com/show_bug.cgi?id=1942603): [release-4.7] Allow from router network policy support [#526](https://github.com/openshift/ovn-kubernetes/pull/526)
* [Bug 1956980](https://bugzilla.redhat.com/show_bug.cgi?id=1956980): [release-4.7] fix ForEachAddressSet() as it is not calling the callback functions [#523](https://github.com/openshift/ovn-kubernetes/pull/523)
* [Bug 1959737](https://bugzilla.redhat.com/show_bug.cgi?id=1959737): Fix: egress IP route health check detection state on restart [#538](https://github.com/openshift/ovn-kubernetes/pull/538)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/e2be0be9cf8d4021ce365e73f12f4aca632abbd0...5354db111f53d4414fb9f86e90cb410fcb14ebd1)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/f65053f55de7b1793956629c8fa02edb7bb0e5cc)

* [Bug 1981634](https://bugzilla.redhat.com/show_bug.cgi?id=1981634): add vulnerable legacy injector to allow for upgrade clusters to use [#170](https://github.com/openshift/service-ca-operator/pull/170)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/e113f2498bb2b54202449ddc3488cb8471997a10...f65053f55de7b1793956629c8fa02edb7bb0e5cc)


### [thanos](https://github.com/openshift/thanos/tree/823d7cd2ee5de3cdab771cfd4b2557852dff7514)

* [Bug 1944575](https://bugzilla.redhat.com/show_bug.cgi?id=1944575): pkg/rules: fix deduplication of equal alerts with different labels [#52](https://github.com/openshift/thanos/pull/52)
* [Full changelog](https://github.com/openshift/thanos/compare/cebfd5988491f80b1556a5beecd830d4888615b8...823d7cd2ee5de3cdab771cfd4b2557852dff7514)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/8f7c1246e6bcb99d8cdf667851b8d61f637f2801)

* [Bug 1959546](https://bugzilla.redhat.com/show_bug.cgi?id=1959546): Update to current master [#40](https://github.com/openshift/vsphere-problem-detector/pull/40)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/077d6bef3bc1e003188e0bea4e086c874f97f944...8f7c1246e6bcb99d8cdf667851b8d61f637f2801)