# 4.7.39

Created: 2021-12-01 08:43:12 +0000 UTC

Image Digest: `sha256:eb7445383a461512075b5a99a3a4bc7c811ba174f53218c8840ac67e7664aa36`

Promoted from registry.ci.openshift.org/ocp/release:4.7.0-0.nightly-2021-12-01-040519


## Changes from 4.7.22

### Components

* Kubernetes upgraded from 1.20.0-beta.2 to 1.20.11
* Red Hat Enterprise Linux CoreOS upgraded from 47.83.202107271839-0 to 47.84.202111300903-0


### Rebuilt images without code change

* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [f6a71bf7](https://github.com/openshift/aws-ebs-csi-driver/commit/f6a71bf783f3b7429a8c2fbbc6f3d586e6a7eb60) `sha256:f98412b896e66d2a8d52fa9346c5847c6a0e19651480f9e53945f38f6524fff5`
* [aws-machine-controllers](https://github.com/openshift/cluster-api-provider-aws) git [5368195c](https://github.com/openshift/cluster-api-provider-aws/commit/5368195c02ca672dc7f7a4ad571df5584fa4087f) `sha256:a733c7302d70cfa71ee9da48c27e5601c417c6acff31fd6e7c12506721f22579`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [0074d6af](https://github.com/openshift/aws-pod-identity-webhook/commit/0074d6afef9e20f5a1bcbde85cd7c01e422202ca) `sha256:1025300933073063f51e930af68e822be1f7cfe6e8dd02b35f5006d6c24eea56`
* [baremetal-operator](https://github.com/openshift/baremetal-operator) git [e36cbc13](https://github.com/openshift/baremetal-operator/commit/e36cbc13f82e290ca5f525a4da0fab516808d113) `sha256:f139e2663857a05b8e19cfab244405758dea2b2577f02a42ce99d34ba608b01d`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [9c5da32b](https://github.com/openshift/baremetal-runtimecfg/commit/9c5da32ba602e5881178e56269b0506fcb54ff92) `sha256:f998b92d725765d83af6ba713ef3fe9cfdc70e3ff9103f390529dd4818b3f19a`
* [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator) git [0783477a](https://github.com/openshift/cloud-credential-operator/commit/0783477aa72edf998344740933a99c0417ebe573) `sha256:6059ab1acda796618e22c94a8573b5c255c95e76e031630133e9bdbb2feb10d1`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [6665cae3](https://github.com/openshift/cluster-bootstrap/commit/6665cae3374c18d466f11c9e0b8e41a61fcb0819) `sha256:056f516f159c984b07e9ccc6967eb2523b715dbce2abffbe1ad65ae91d00215e`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [07e059a6](https://github.com/openshift/cluster-config-operator/commit/07e059a6b0c98e98d71f0c08dc741605e2431914) `sha256:d89ac4eceac49519d03aa9793375154de7e3fd87ecb2ce8405b1f6e95bddd224`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [fc036b59](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/fc036b59b83b25ac6d1050aee0a172abb54502c6) `sha256:e254220f8fbd713292d0e8e2acd1f39787bcfdfc209e36b115c21ec8fbd20e48`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [cf8be7b2](https://github.com/openshift/cluster-dns-operator/commit/cf8be7b279499d5010894b8c9bf79acc9853be36) `sha256:14a47898cbbc2578fc428ceb552702e98e97d28cd1fc8d4f982261d9559cf309`
* [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator) git [51cb8c41](https://github.com/openshift/cluster-etcd-operator/commit/51cb8c4147c45672c9645fae39bfcc6d696adc85) `sha256:6aef9b8fc2b9c25b5fa2e0caafcc713870a7918b1e3d37aa0e56f43f1315b642`
* [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator) git [099c6afa](https://github.com/openshift/cluster-kube-apiserver-operator/commit/099c6afa1f8b4fe7654207f7eabd7784b42ce2e3) `sha256:8a01a9cef96ed9c649fa4eb80551fc50dc0046753ea3cf15b15277348531d813`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [28159093](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/281590936f3a94d4ae1eb008709fda6614fe763b) `sha256:a1f6840eac49d32390b5a06106c3b2dbf29d9ef9353a0b5c0d704862d37799b0`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [b2204ca2](https://github.com/openshift/cluster-kube-scheduler-operator/commit/b2204ca23a57e9f01af915375e6a18fc86ffecda) `sha256:78d752fb7002bfa3032513893e897d595a3880249986bdcae4456de9b0b67531`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [54484757](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/54484757581ec26f178c599215715bafd6029582) `sha256:c2de028b0d9621995c1b6a156174163bce4977f634dbdc258a33f9b838cdb4bf`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [9043e2bb](https://github.com/openshift/cluster-machine-approver/commit/9043e2bba8f4707a578895f8b29d4736a61a010c) `sha256:a9dda7796af105f568210ec60b2f41d04df6cb2b8f1ff7753459933d46821aa1`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [42791bac](https://github.com/openshift/cluster-policy-controller/commit/42791bac64066daac0922b3d77e4bd86edae3b4e) `sha256:32b47779a35a3eaf9277d5602a12ead29baf4fe6e96faeffbe7b2c954a839bfa`
* [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [6d2c25f3](https://github.com/openshift/cluster-storage-operator/commit/6d2c25f3cfb931deca457a0c6261651c1a64c464) `sha256:3ba13d75747f55a4ab27d2e200ee0d551ca044ba3546c068dc3122822919d7a3`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [b7e79177](https://github.com/openshift/cluster-update-keys/commit/b7e791773b67f9acd6f521b8c1f69778e43a7d94) `sha256:6caac990594ef7c975f06f51c822f2b569dfeff27ece8b7fe88c396d6484d58e`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [fc27124d](https://github.com/openshift/containernetworking-plugins/commit/fc27124d43b9dc995057b1f309d5f16e1b2ef151) `sha256:a0d51f4d8dd363773e26e0f84c2c27d72cfacaad67a87a452f2e9300abf40c90`
* [coredns](https://github.com/openshift/coredns) git [d4a3ba3f](https://github.com/openshift/coredns/commit/d4a3ba3f6e03426d2623da86635caba17c0c3926) `sha256:790915e54be36106bd8e7700780cee399be71569f83d6aee6747c6a0131eb749`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [d3f70921](https://github.com/openshift/cloud-provider-openstack/commit/d3f709218512df9f46e11c1d13347fc68774d72c) `sha256:7e51b8ab3791d904fdbd62702cc00b855b0c11c6eb9f9436d379df7cab44c876`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [9404d343](https://github.com/openshift/csi-driver-nfs/commit/9404d343c020fd1806691704f64d930c779ad639) `sha256:246a8e89bcd2051277baec27e3ea0d0c57259e3a11dcead835795376c7143a68`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [f152de8a](https://github.com/openshift/csi-external-attacher/commit/f152de8ab08d9a4f13c97941afa01ef343b92b68) `sha256:f50b6375b25f972f837f9defff0c9af356911022b35d1bca144c8bd221927d16`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [a49415e1](https://github.com/openshift/csi-external-provisioner/commit/a49415e114b90060c8cdbb88b1ca3f0a4c5d2ebc) `sha256:f68d883f2f48a03e54c4b9a77ba1e5519688c91aebb9076f775a030b762e2953`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [f77279e9](https://github.com/openshift/csi-external-resizer/commit/f77279e9561a02c18676dbcafcbe6db7d0ebd077) `sha256:10a6f9df8230fa64d2786dbbdeafbbdc94eb587271479ed7a351c514da2f6847`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [26773735](https://github.com/openshift/csi-external-snapshotter/commit/26773735c1cbf09de9bf31cb3c640abdca04cd83) `sha256:c004c2d9bba45f039661a4422566d2adb8705803bae8c325b91d48da06acd0bb`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [3dad0280](https://github.com/openshift/csi-livenessprobe/commit/3dad0280ea630cfcc87bcf02806c75b7a066d81e) `sha256:e484bbbea8aa6e7f4fd7f99661fdd4be03c24cf69cb5484fd44a3b6643fdd215`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [2a77963e](https://github.com/openshift/csi-node-driver-registrar/commit/2a77963e5458da1bcde318b4609a6abefaf868d7) `sha256:4a5df4694338fd03d898798ce2504879f756a5a9a5812c8b47a7e7c5b037e23e`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [26773735](https://github.com/openshift/csi-external-snapshotter/commit/26773735c1cbf09de9bf31cb3c640abdca04cd83) `sha256:38fbb33b5db9774434769a6a2546f25532b6d1f379dea2e4bccacff1143006cc`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [26773735](https://github.com/openshift/csi-external-snapshotter/commit/26773735c1cbf09de9bf31cb3c640abdca04cd83) `sha256:5715985d6bb6147a0caaa79a8d783ff303611aa1d01d093409b8be6aa81ffecc`
* [docker-registry](https://github.com/openshift/image-registry) git [8b03485a](https://github.com/openshift/image-registry/commit/8b03485af777f8d718427393aa575bbaf6f21610) `sha256:e4599f6340b9b731e46b227ea3f1aa46fb3b5a5d16c8734a87ac4b0cb50984f4`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [96ebd378](https://github.com/openshift/egress-router-cni/commit/96ebd3782cbb63de098e75ebcedeac60546cfee3) `sha256:ff181f234366a2eee7e8d5cb4301859e7de6c719afa3f5d50a27dbf5fcfbadad`
* [etcd](https://github.com/openshift/etcd) git [c61e5afd](https://github.com/openshift/etcd/commit/c61e5afde9485fac9233c0db6ab950bfb511e1b5) `sha256:7fcebfd904e565707b9b22048e525cfe8b575c43d6ed4093ed45e757777c4e7c`
* [gcp-machine-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [5f6589d4](https://github.com/openshift/cluster-api-provider-gcp/commit/5f6589d4ef9496e63ebc072f4d863151bbeb4407) `sha256:61a5e3b332929269c14428bffcf6949f94a1909362658f0b9997fc1aaa585ca8`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [0cb61d20](https://github.com/openshift/gcp-pd-csi-driver/commit/0cb61d205d0f911fe8ca614094f0cd3f911d665c) `sha256:c848f9c5a9dfbabdbd8dae29d446880729eb9ae2cd180ccd89c21bccd805078b`
* [grafana](https://github.com/openshift/grafana) git [b02c35dc](https://github.com/openshift/grafana/commit/b02c35dc2d01fce696a3edc28839a9f9fd0150a3) `sha256:db1f6e0c0be03e8295023f61e905b6412c4a28f811f86191fc8fd8da77c0074b`
* [ironic](https://github.com/openshift/ironic-image) git [1a7f41bb](https://github.com/openshift/ironic-image/commit/1a7f41bb1c2c04ccd06958669a24a08a0bf22258) `sha256:0643784e2b51831accbefaea0f2902f1db205ecebec7d008f8b38723fc3aa334`
* [ironic-hardware-inventory-recorder](https://github.com/openshift/ironic-hardware-inventory-recorder-image) git [564aaca3](https://github.com/openshift/ironic-hardware-inventory-recorder-image/commit/564aaca3b4bd95007472d3c3cd8d2d0748778ef4) `sha256:804a4df6f329fd1f93edc05e1cbe4388a2a65af7e7f0bffc6517aa3a73e96d9f`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [43d640a0](https://github.com/openshift/ironic-static-ip-manager/commit/43d640a07582a5aaaa485ea85319bb0721dea251) `sha256:717af3279de7d8413861876fa1dcc607567288181f77193e25662846c97f60d4`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [212d80b4](https://github.com/openshift/k8s-prometheus-adapter/commit/212d80b4bd35fc6f19ec9ec537d0261a2a300cfd) `sha256:e42d6439d581552a9bce6393e5250af2b1815bc0cbeaba8f8a7786ff30955d3d`
* [keepalived-ipfailover](https://github.com/openshift/images) git [0e45f638](https://github.com/openshift/images/commit/0e45f638fbf5fa9e9bdb507d81b2cb9f12fadbaf) `sha256:35fb1fa332ccc62cd5d766cebd15a5851c350a8f0d3f0acc341941cab2a76e81`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [14c288e6](https://github.com/openshift/kube-rbac-proxy/commit/14c288e6d19578d96e502def75995b882f1c9b37) `sha256:657af8db1d09c9b265127dbb536c307d47aecc9e4350e98aa6b9ff0604c2fc19`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [04bff708](https://github.com/openshift/kube-state-metrics/commit/04bff708e05190cbc18182a2dbb8a10930433c1d) `sha256:2ce0654b1005c457e7cf2581b8d1ae6edaafdcff9fceb9cdf6b767027142ded1`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [329a4b06](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/329a4b06361cef8d70c8424d57466a6f5bcd4a59) `sha256:405904772dd45fe982618bf15f9bad140dc1eeb8764017d870699e6156239006`
* machine-os-content `sha256:cf1eb97af68979369dfbfef18468da6343ae12c4db9c3e023898dab97535d665`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [a7312f5e](https://github.com/openshift/multus-admission-controller/commit/a7312f5e55e9f34cc8b20f6cbfe1af0f363ca1e6) `sha256:8a6f28b5fd6e013dad5b1142eaa307c45e75e62d2780fb60a0ac54f4cf35d0a2`
* [multus-cni](https://github.com/openshift/multus-cni) git [5530094d](https://github.com/openshift/multus-cni/commit/5530094db7607fc9292e3b269fcf5a85b0dad3df) `sha256:4bb778049fdae8646233b3de19ab977fab0e4f73f0a325c5fe06dbdf7181764d`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [1662c3ec](https://github.com/openshift/route-override-cni/commit/1662c3ec79b880fce5cd9c4e64f5ba0d4daffc00) `sha256:fa17444c55236610f4dc73fc26b4435f573a0ad11aecb998ded9aafc504716a9`
* [must-gather](https://github.com/openshift/must-gather) git [205d4e3c](https://github.com/openshift/must-gather/commit/205d4e3cffb19bda7a658836c84587f2ac78d82c) `sha256:348fecfb6cddfb87b8069e02befa46823807658a203a628249dcc58663061ad4`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [b1926150](https://github.com/openshift/network-metrics-daemon/commit/b1926150fd61d1f5137d18606661ff451f504a98) `sha256:0ad32c07e0c08419ee88317e410d1eeec0feac96fb2f0c3745940aa0e2755841`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [69f527e9](https://github.com/openshift/oauth-apiserver/commit/69f527e90f599e0f509cfce73ba7b95656f03f7f) `sha256:487aea3bfb6bb3bb0c9921feba3ccadc9f119b2bd290cc5c092259e4f7ff0113`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [fd4dfe78](https://github.com/openshift/oauth-proxy/commit/fd4dfe78bcd8373c545284a671499681f824c645) `sha256:7b0b4b101433848320011872d52321bad73401167fe1465d3a8bf34d4bd3aad1`
* [oauth-server](https://github.com/openshift/oauth-server) git [61db550b](https://github.com/openshift/oauth-server/commit/61db550b94b09356eebabcffd39aea8d90eb6089) `sha256:597f1fd0b386f3c6bf909334eb843687f6d7938b89f0b364ba73919fab669fcf`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [40b0968e](https://github.com/openshift/openshift-state-metrics/commit/40b0968ee1d488b791cdd6750fac6534abac122e) `sha256:4af71b38c0444111c444ddb8f4ceedc47a39d5b07f183066d5f2c1eee42c598e`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [d3f70921](https://github.com/openshift/cloud-provider-openstack/commit/d3f709218512df9f46e11c1d13347fc68774d72c) `sha256:3e31d1473cae2138570b84c5ccf25f08c6f909d22e87db8c193b7626a13e854b`
* [operator-registry](https://github.com/operator-framework/operator-registry) git [06e950de](https://github.com/operator-framework/operator-registry/commit/06e950de5ebca66e493f6cd2414e73c8978090d3) `sha256:17fb8c4a4d349f29ebedc98b9757682ce42ca1b8fa07066a9c88513abdf4364d`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [72545e63](https://github.com/openshift/ovirt-csi-driver/commit/72545e6381b3625bcb37e37c4c713862d04cb145) `sha256:08d7a0bd53021738d51840d893786a638088262afdc1088ad0fe5fb0535d2f1d`
* [pod](https://github.com/openshift/images) git [0e45f638](https://github.com/openshift/images/commit/0e45f638fbf5fa9e9bdb507d81b2cb9f12fadbaf) `sha256:4ae919a68552d6ae04c761487126f96ed4b2decc86d42634759fea6faea65c1c`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [db87872c](https://github.com/openshift/prom-label-proxy/commit/db87872c6aba7e4e9def29b33beea582557ce940) `sha256:3c265689c1a20f88e196644eab17bdc2ad0c579e912208c8529593ae959d4341`
* [prometheus](https://github.com/openshift/prometheus) git [cb5e53cd](https://github.com/openshift/prometheus/commit/cb5e53cdfedfee185feffcec13304dda87ff3055) `sha256:a49a35d45374ad84fe28422751694502e1c680c871109f5f175df276ce7cb156`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [9954cc42](https://github.com/openshift/prometheus-alertmanager/commit/9954cc421d26ecf498ac82f3cbdc64ce3afa4c74) `sha256:8fa6e19f7318db7ca3310f13f809a54e0304a9e1338c81ff6bde1eda9d7d35c9`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [1f0fd51d](https://github.com/openshift/prometheus-operator/commit/1f0fd51df863c8773d2094e4ca78b4bd14cbf6e6) `sha256:31d1dfb062649f79aa07867025cec87bd1f8f26b6993c941190abd7703f5d70c`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [76974e2e](https://github.com/openshift/node_exporter/commit/76974e2ed037c4bf81387dabf7ccd388a724c5aa) `sha256:40e49761857e2c73e764c84f4c1cb53deb5cbb2bbea741bd2a3a601c1d662474`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [1f0fd51d](https://github.com/openshift/prometheus-operator/commit/1f0fd51df863c8773d2094e4ca78b4bd14cbf6e6) `sha256:e4e0a9f84a462649cf3fbf50100314b0881c7c06af9ccadeda5850139782a87e`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [f65053f5](https://github.com/openshift/service-ca-operator/commit/f65053f55de7b1793956629c8fa02edb7bb0e5cc) `sha256:d1a8dc59a7d434af0fff7152ab27feac155d57525ad8236c34ca3f23cda3b832`
* [telemeter](https://github.com/openshift/telemeter) git [e4dac512](https://github.com/openshift/telemeter/commit/e4dac5123ef6b3ecb16b5151e2e8f8aeb8b1f21a) `sha256:c6dc4d6d1c2c6ed1e84784084cb12759994a45ec81bc6ac3f2a011995b68b499`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [8f7c1246](https://github.com/openshift/vsphere-problem-detector/commit/8f7c1246e6bcb99d8cdf667851b8d61f637f2801) `sha256:5f1f8b551b1331410fdbc95f02539e3fe1ce9c1d396b42b856e9076fb271b477`


### [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator/tree/3a9ff17d523a342ee71a967a2b82d5cf044f1eb8)

* [Bug 1996070](https://bugzilla.redhat.com/show_bug.cgi?id=1996070): Add maxUnavailable to DaemonSets [#135](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/135)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver-operator/compare/97f73eb7de4b474497169771239dcd81990d3f2e...3a9ff17d523a342ee71a967a2b82d5cf044f1eb8)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/050a9f4e92166e7a290d8f0c412bf58ff7312781)

* [Bug 1964753](https://bugzilla.redhat.com/show_bug.cgi?id=1964753): Bump RHCOS 4.7 boot image [#5229](https://github.com/openshift/installer/pull/5229)
* Update OWNERS [#5243](https://github.com/openshift/installer/pull/5243)
* [Bug 1980866](https://bugzilla.redhat.com/show_bug.cgi?id=1980866): [4.7] Prefer IPv6 hostIP on bootstrap IPv6 deployments [#5067](https://github.com/openshift/installer/pull/5067)
* [Bug 1981553](https://bugzilla.redhat.com/show_bug.cgi?id=1981553): [release-4.7] aws: move elastic ip permissions to create networking category [#5055](https://github.com/openshift/installer/pull/5055)
* [Bug 1954595](https://bugzilla.redhat.com/show_bug.cgi?id=1954595): Validate noProxy input and add prefix for proxy urls [#5060](https://github.com/openshift/installer/pull/5060)
* OWNERS: add more core team members as approvers [#5123](https://github.com/openshift/installer/pull/5123)
* [Full changelog](https://github.com/openshift/installer/compare/23a2fe80a021a19ab4364904f6928a1f8c715dc0...050a9f4e92166e7a290d8f0c412bf58ff7312781)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/6d86e627a0150115deffbba726b56e04e6b7ca0e)

* Updating baremetal-machine-controller images to be consistent with ART [#161](https://github.com/openshift/cluster-api-provider-baremetal/pull/161)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/726d97e15db78b767234da98d2c75f794f4bf158...6d86e627a0150115deffbba726b56e04e6b7ca0e)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/25914b8f5892a73aa85ac242c30512da6da42298)

* [Bug 2004194](https://bugzilla.redhat.com/show_bug.cgi?id=2004194): Registry mirror panic [#927](https://github.com/openshift/oc/pull/927)
* [Bug 1995074](https://bugzilla.redhat.com/show_bug.cgi?id=1995074): revert incorrect allowance of ssh:// prefix with scp styled URLs [#902](https://github.com/openshift/oc/pull/902)
* [Bug 1974264](https://bugzilla.redhat.com/show_bug.cgi?id=1974264): make oc logs work with BuildConfig's JenkinsPipeline strategy [#864](https://github.com/openshift/oc/pull/864)
* [Full changelog](https://github.com/openshift/oc/compare/8b4b09487463415374368af3bbc4ff2e6366477b...25914b8f5892a73aa85ac242c30512da6da42298)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/5c93df529fa7cf9a7081d845a496aa17f92b937b)

* [Bug 2003633](https://bugzilla.redhat.com/show_bug.cgi?id=2003633): manifests, bindata: explicitely set runAsUser for operator and operand [#485](https://github.com/openshift/cluster-authentication-operator/pull/485)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/4c02b7b2322eab9bbcb969886211d541e5e4fcde...5c93df529fa7cf9a7081d845a496aa17f92b937b)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/8b2e494f7796639b46f9867407fe21546cfc01c3)

* [Bug 1924416](https://bugzilla.redhat.com/show_bug.cgi?id=1924416): Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 [#204](https://github.com/openshift/kubernetes-autoscaler/pull/204)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/c882ab7f35adfb0f438fa28f6579092aa0deea59...8b2e494f7796639b46f9867407fe21546cfc01c3)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/7658bea6c42d770029e6928c1d74ec3bf0175a49)

* [Bug 1961341](https://bugzilla.redhat.com/show_bug.cgi?id=1961341): manifests: use v1 for RBAC [#206](https://github.com/openshift/cluster-autoscaler-operator/pull/206)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/a3fecc8e7dc5d793eecf8bf77e311f5b29f5e7dd...7658bea6c42d770029e6928c1d74ec3bf0175a49)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/f73e5fcb432e4b847cddec5ce8570f8c5c32e902)

* [Bug 1976924](https://bugzilla.redhat.com/show_bug.cgi?id=1976924): Update bmh crd [#190](https://github.com/openshift/cluster-baremetal-operator/pull/190)
* [Bug 1933726](https://bugzilla.redhat.com/show_bug.cgi?id=1933726): provisioning: configure DHCP range with netmask [#112](https://github.com/openshift/cluster-baremetal-operator/pull/112)
* [Bug 1973367](https://bugzilla.redhat.com/show_bug.cgi?id=1973367): Pass IP_OPTIONS=dhcp|dhcp6 down to OS Downloader container [#171](https://github.com/openshift/cluster-baremetal-operator/pull/171)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/cb7d1e4ee178ea3f33eb9fc492bd002386006693...f73e5fcb432e4b847cddec5ce8570f8c5c32e902)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/70a85883e406641339251b5c1473e4dec7083928)

* [Bug 1988388](https://bugzilla.redhat.com/show_bug.cgi?id=1988388): Properly set custom tolerations [#708](https://github.com/openshift/cluster-image-registry-operator/pull/708)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/a04cd81327c720c5fd54f7be8dcd42b553251ba2...70a85883e406641339251b5c1473e4dec7083928)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/e76561d4a0e8976f44c6eaf5e7360827b583a21a)

* [Bug 1996897](https://bugzilla.redhat.com/show_bug.cgi?id=1996897): Add startup probe to the router deployment [#645](https://github.com/openshift/cluster-ingress-operator/pull/645)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/b86f935f5e693f48dbf6ec23a490422b6e295eb7...e76561d4a0e8976f44c6eaf5e7360827b583a21a)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/0f7da469218513896435381193ff97df3b23f66a)

* [Bug 2014023](https://bugzilla.redhat.com/show_bug.cgi?id=2014023): Backport etcd telemetry [#1433](https://github.com/openshift/cluster-monitoring-operator/pull/1433)
* [Bug 1986591](https://bugzilla.redhat.com/show_bug.cgi?id=1986591): node exporter calls /proc/cpuinfo multiple times causing the node to freeze [#1300](https://github.com/openshift/cluster-monitoring-operator/pull/1300)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/d6725052e00a206cab10f6c40abdfa1a3c2aff0f...0f7da469218513896435381193ff97df3b23f66a)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/d5d60457119f196c0fe2a01c2b21a1287e521bc3)

* [Bug 1990932](https://bugzilla.redhat.com/show_bug.cgi?id=1990932): [Backport 4.7] Whereabouts should have RBAC for leases [#1186](https://github.com/openshift/cluster-network-operator/pull/1186)
* [Bug 2003800](https://bugzilla.redhat.com/show_bug.cgi?id=2003800): Use 10% for sdn maxUnavailable for rolling update [#1202](https://github.com/openshift/cluster-network-operator/pull/1202)
* [Bug 1996063](https://bugzilla.redhat.com/show_bug.cgi?id=1996063): Use 10% for nw-check-target maxUnavailable [#1184](https://github.com/openshift/cluster-network-operator/pull/1184)
* [Bug 1988426](https://bugzilla.redhat.com/show_bug.cgi?id=1988426): Change to use mountPath: /host [#1170](https://github.com/openshift/cluster-network-operator/pull/1170)
* [Bug 1962036](https://bugzilla.redhat.com/show_bug.cgi?id=1962036): Use the election mechanism provided by library-go [#1098](https://github.com/openshift/cluster-network-operator/pull/1098)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/11dd29b9de0cd9ff52e18ff0581d5d93d06b6d2b...d5d60457119f196c0fe2a01c2b21a1287e521bc3)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/93164875e3bc9030e995b465c91aafb29226ac39)

* [Bug 2014430](https://bugzilla.redhat.com/show_bug.cgi?id=2014430): stalld: update to v1.13.0 [#281](https://github.com/openshift/cluster-node-tuning-operator/pull/281)
* [Bug 1986739](https://bugzilla.redhat.com/show_bug.cgi?id=1986739): gather all Tuned CRs [#255](https://github.com/openshift/cluster-node-tuning-operator/pull/255)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/d546b54bcb292cd3691f4d25bbb8899690d5adab...93164875e3bc9030e995b465c91aafb29226ac39)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/df9b1a45165dd1a2cc17b5a885370093bb237e41)

* [Bug 1996045](https://bugzilla.redhat.com/show_bug.cgi?id=1996045): bindata: run openshift-apiserver as root explicitly. [#468](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/468)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/fa6d8e1cc9d57566fa3fbe4dbb361892ccf9e17d...df9b1a45165dd1a2cc17b5a885370093bb237e41)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/2a8963a9c5755d4951d882bd816cd4d6ccdf02cd)

* [Bug 1924494](https://bugzilla.redhat.com/show_bug.cgi?id=1924494): Update k8s.io dependencies to address CVE-2021-3121 [#222](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/222)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/245005e3065238ecd4aef208c21456afa09ec38e...2a8963a9c5755d4951d882bd816cd4d6ccdf02cd)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/1892553d5556068b3e1d89336a349e1e3b3511af)

* [Bug 2001977](https://bugzilla.redhat.com/show_bug.cgi?id=2001977): delete hello-openshift in payload imagestream [#393](https://github.com/openshift/cluster-samples-operator/pull/393)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/0df8f92c275b9eccfb1b3ccdd79fb861ddee1d99...1892553d5556068b3e1d89336a349e1e3b3511af)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/4e7c701d940682bbfe7ba6ed0bdf4c814b4694a6)

* [Bug 2007674](https://bugzilla.redhat.com/show_bug.cgi?id=2007674): pkg/cvo/egress: Load HTTPS proxy from Proxy status [#664](https://github.com/openshift/cluster-version-operator/pull/664)
* [Bug 1961341](https://bugzilla.redhat.com/show_bug.cgi?id=1961341): Remove rbacv1beta1 support [#652](https://github.com/openshift/cluster-version-operator/pull/652)
* [Bug 1991010](https://bugzilla.redhat.com/show_bug.cgi?id=1991010): pkg/cvo/metrics: Ignore Degraded for cluster_operator_up [#638](https://github.com/openshift/cluster-version-operator/pull/638)
* [Bug 1924428](https://bugzilla.redhat.com/show_bug.cgi?id=1924428): CVE-2021-3121 gogo/protobuf lacks certain index validation [#625](https://github.com/openshift/cluster-version-operator/pull/625)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/fa7bfbc485b4256535b7de172d1083f83c9409ce...4e7c701d940682bbfe7ba6ed0bdf4c814b4694a6)


### [configmap-reloader](https://github.com/openshift/configmap-reload/tree/b957dff7cc1887f844938383237ed0e9c3577beb)

* Updating configmap-reload builder & base images to be consistent with ART [#27](https://github.com/openshift/configmap-reload/pull/27)
* vendor: regenerate [#31](https://github.com/openshift/configmap-reload/pull/31)
* [Full changelog](https://github.com/openshift/configmap-reload/compare/25dfb671c6ce9a73f5594efe699ed410fbf01d44...b957dff7cc1887f844938383237ed0e9c3577beb)


### [console](https://github.com/openshift/console/tree/c2bc5b2843214e6afd326d2776f094c696aeaefd)

* (4.7 Backport) Bug 1981412: Change OCM links from cloud. to console.redhat.com #9470 [#9471](https://github.com/openshift/console/pull/9471)
* [Bug 2005298](https://bugzilla.redhat.com/show_bug.cgi?id=2005298): Block and File and Object dashboards should not be part of OCP Console for ODF Managed Services [#10097](https://github.com/openshift/console/pull/10097)
* [Bug 2005138](https://bugzilla.redhat.com/show_bug.cgi?id=2005138): Console overview operators shown upgrading when still waiting on approval [#10093](https://github.com/openshift/console/pull/10093)
* [release 4.7] Bug 1969754: windows vms fail to start rls 4.7 [#9657](https://github.com/openshift/console/pull/9657)
* [Bug 2004946](https://bugzilla.redhat.com/show_bug.cgi?id=2004946): Use httpd in workload YAML templates [#10089](https://github.com/openshift/console/pull/10089)
* [Bug 1973707](https://bugzilla.redhat.com/show_bug.cgi?id=1973707): Add chart URl to annotations during helm install/upgrade [#9299](https://github.com/openshift/console/pull/9299)
* [Bug 1995617](https://bugzilla.redhat.com/show_bug.cgi?id=1995617): Fix Pipeline Download All [#9839](https://github.com/openshift/console/pull/9839)
* [Bug 1986724](https://bugzilla.redhat.com/show_bug.cgi?id=1986724): Show the content of Insights widget when there are 0 recommendations for cluster [#9655](https://github.com/openshift/console/pull/9655)
* [Bug 1989642](https://bugzilla.redhat.com/show_bug.cgi?id=1989642): Preserve user annotations while editing an app [#9714](https://github.com/openshift/console/pull/9714)
* [Bug 1975560](https://bugzilla.redhat.com/show_bug.cgi?id=1975560): Fix typo in olm message [#9335](https://github.com/openshift/console/pull/9335)
* [Bug 1975469](https://bugzilla.redhat.com/show_bug.cgi?id=1975469): Handle array to string conversion for HTTPS checkbox value [#9332](https://github.com/openshift/console/pull/9332)
* [Full changelog](https://github.com/openshift/console/compare/d45fb8eea77f97830b75f644380a4fc5a0177163...c2bc5b2843214e6afd326d2776f094c696aeaefd)


### [console-operator](https://github.com/openshift/console-operator/tree/fe5bcfaf312a4da5e26676d1c60049d706962353)

* [Bug 2016654](https://bugzilla.redhat.com/show_bug.cgi?id=2016654): Use hard requirements for antiaffinity rules [#605](https://github.com/openshift/console-operator/pull/605)
* [Full changelog](https://github.com/openshift/console-operator/compare/44a0308f894abae02f066a40ba394c8aa7331424...fe5bcfaf312a4da5e26676d1c60049d706962353)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/b652a62f269127e6e9195383eab951d59c6d7a6d)

* [Bug 2002555](https://bugzilla.redhat.com/show_bug.cgi?id=2002555): Do not degrade cluster on failure to reach Manila [#126](https://github.com/openshift/csi-driver-manila-operator/pull/126)
* [Bug 1987036](https://bugzilla.redhat.com/show_bug.cgi?id=1987036): Use cluster Proxy when available [#110](https://github.com/openshift/csi-driver-manila-operator/pull/110)
* [Bug 1996070](https://bugzilla.redhat.com/show_bug.cgi?id=1996070): Add maxUnavailable to DaemonSets [#116](https://github.com/openshift/csi-driver-manila-operator/pull/116)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/00b1f648e74d8008ce32ae65eb4d6d8b5ac1bbed...b652a62f269127e6e9195383eab951d59c6d7a6d)


### [docker-builder](https://github.com/openshift/builder/tree/5a46979e5e747b6df27a1b50ec0c922a172298f2)

* [Bug 1995074](https://bugzilla.redhat.com/show_bug.cgi?id=1995074): bump(s2i): revert incorrect ssh scp fix [#261](https://github.com/openshift/builder/pull/261)
* [Bug 1924455](https://bugzilla.redhat.com/show_bug.cgi?id=1924455): Update dependencies to address CVE-2021-3121 [#258](https://github.com/openshift/builder/pull/258)
* [Full changelog](https://github.com/openshift/builder/compare/82eeeac0c8cbad90f951885cc11939ecd51eda76...5a46979e5e747b6df27a1b50ec0c922a172298f2)


### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/bcd11a1f0137bb10b1958f1e27e04a213aef96be)

* [Bug 1985545](https://bugzilla.redhat.com/show_bug.cgi?id=1985545): Use kernel config to determine GCC version [#56](https://github.com/openshift/driver-toolkit/pull/56)
* [Bug 1985545](https://bugzilla.redhat.com/show_bug.cgi?id=1985545): Remove curl of extract-vmlinux [#50](https://github.com/openshift/driver-toolkit/pull/50)
* [Bug 1985546](https://bugzilla.redhat.com/show_bug.cgi?id=1985546): /etc/driver-toolkit-release.json kernel version match rpm -q output [#51](https://github.com/openshift/driver-toolkit/pull/51)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/044d4be053f86d8f059197a76f641f99cf07d444...bcd11a1f0137bb10b1958f1e27e04a213aef96be)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/d40dd57595673e4737fa77e29a955f6beefac284)

* [Bug 1996070](https://bugzilla.redhat.com/show_bug.cgi?id=1996070): Add maxUnavailable to DaemonSets [#33](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/33)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/9ffe95b9499258b8e2b5e1b8df9889abe3c9f73f...d40dd57595673e4737fa77e29a955f6beefac284)


### [haproxy-router](https://github.com/openshift/router/tree/4ab216f0090a985f041cea3e411075a04e2ace0a)

* [Bug 1994645](https://bugzilla.redhat.com/show_bug.cgi?id=1994645): config template: accept IPv6 IPs for whitelisting [#325](https://github.com/openshift/router/pull/325)
* [Full changelog](https://github.com/openshift/router/compare/9cc0c8fcebf613785511468c7df601117b13e5aa...4ab216f0090a985f041cea3e411075a04e2ace0a)


### [hello-openshift, tests](https://github.com/openshift/origin/tree/e39a8bfd3b743003fa4a96fd8d0a7aa57799db8e)

* [Bug 2019520](https://bugzilla.redhat.com/show_bug.cgi?id=2019520): Skip test 'clone repository using git:// protocol should clone using git:// if no proxy is configured' [#26563](https://github.com/openshift/origin/pull/26563)
* [Bug 1983616](https://bugzilla.redhat.com/show_bug.cgi?id=1983616): Wait longer in tests where namespace cleanup is slow [#26282](https://github.com/openshift/origin/pull/26282)
* [Bug 1982929](https://bugzilla.redhat.com/show_bug.cgi?id=1982929): Improve GC Check for Builds [#26334](https://github.com/openshift/origin/pull/26334)
* [Full changelog](https://github.com/openshift/origin/compare/f59ac6a11e0dbe8590181dd823ef8e5b87e784a9...e39a8bfd3b743003fa4a96fd8d0a7aa57799db8e)


### [hyperkube](https://github.com/openshift/kubernetes/tree/63f841a28af5e728ed7e16278cddfbe66adfe805)

* [Bug 2022188](https://bugzilla.redhat.com/show_bug.cgi?id=2022188): Image policy should mutate DeploymentConfigs, StatefulSets, and new CronJobs [#1073](https://github.com/openshift/kubernetes/pull/1073)
* [Bug 2022259](https://bugzilla.redhat.com/show_bug.cgi?id=2022259): Rebase v1.20.12 [#1046](https://github.com/openshift/kubernetes/pull/1046)
* [Bug 1939537](https://bugzilla.redhat.com/show_bug.cgi?id=1939537): UPSTREAM: 100678: apf: exempt probes /healthz /livez /readyz [#658](https://github.com/openshift/kubernetes/pull/658)
* [Bug 1926724](https://bugzilla.redhat.com/show_bug.cgi?id=1926724): UPSTREAM: 98028: add auto update for priority & fairness bootstrap configuration objects [#563](https://github.com/openshift/kubernetes/pull/563)
* [Bug 2008508](https://bugzilla.redhat.com/show_bug.cgi?id=2008508): Rebase v1.20.11 [#982](https://github.com/openshift/kubernetes/pull/982)
* [Bug 1993753](https://bugzilla.redhat.com/show_bug.cgi?id=1993753): UPSTREAM: 104348: Pass additional flags to subpath mount to avoid fla… [#941](https://github.com/openshift/kubernetes/pull/941)
* [Bug 2003027](https://bugzilla.redhat.com/show_bug.cgi?id=2003027): Rebase 1.20.10 [#935](https://github.com/openshift/kubernetes/pull/935)
* [Bug 1996846](https://bugzilla.redhat.com/show_bug.cgi?id=1996846): UPSTREAM: 98571: kubelet: Stop probing a pod during graceful shutdown [#901](https://github.com/openshift/kubernetes/pull/901)
* [Bug 1973766](https://bugzilla.redhat.com/show_bug.cgi?id=1973766): 4.7: Do not throw error when we can't get canonical path [#881](https://github.com/openshift/kubernetes/pull/881)
* [Bug 1981775](https://bugzilla.redhat.com/show_bug.cgi?id=1981775): Bump apiserver libary go 4.7 [#879](https://github.com/openshift/kubernetes/pull/879)
* [Full changelog](https://github.com/openshift/kubernetes/compare/558d959332b3f1f7bf786673bf294e6e0932bb18...63f841a28af5e728ed7e16278cddfbe66adfe805)


### [insights-operator](https://github.com/openshift/insights-operator/tree/8c15c71cea37246c3310867d0b7d8b5e2c4a3f9e)

* [Bug 2026410](https://bugzilla.redhat.com/show_bug.cgi?id=2026410): Fix PDB gatherer (#552) [#552](https://github.com/openshift/insights-operator/pull/552)
* [Bug 2024614](https://bugzilla.redhat.com/show_bug.cgi?id=2024614): Anonymize identity provider attributes in the (#520) (#527) (#541) (#549) [#520](https://github.com/openshift/insights-operator/pull/520)
* [Bug 2022637](https://bugzilla.redhat.com/show_bug.cgi?id=2022637): Anonymize the ImageRegistry storage information also in status (#546) [#546](https://github.com/openshift/insights-operator/pull/546)
* [Bug 2002539](https://bugzilla.redhat.com/show_bug.cgi?id=2002539): Fix wrong rebase of PSP gatherer (#512) [#512](https://github.com/openshift/insights-operator/pull/512)
* [Bug 2002539](https://bugzilla.redhat.com/show_bug.cgi?id=2002539): Gather installed PSP names (#489) (#493) [#489](https://github.com/openshift/insights-operator/pull/489)
* [Bug 1982170](https://bugzilla.redhat.com/show_bug.cgi?id=1982170): Set also the summary operation when updating status (#480) [#480](https://github.com/openshift/insights-operator/pull/480)
* [Full changelog](https://github.com/openshift/insights-operator/compare/e7955cf0b199caa53726431df5d8800be5af049a...8c15c71cea37246c3310867d0b7d8b5e2c4a3f9e)


### [ironic-inspector](https://github.com/openshift/ironic-inspector-image/tree/b6cbf0338ba9f892735d09093ba4732ab3602b43)

* [Bug 2002405](https://bugzilla.redhat.com/show_bug.cgi?id=2002405): Sync inspector to include the latest bugfixes for 4.7 [#70](https://github.com/openshift/ironic-inspector-image/pull/70)
* [Full changelog](https://github.com/openshift/ironic-inspector-image/compare/916bdc6e005aaa73ef5c3a9b60f5c47cd0a10e29...b6cbf0338ba9f892735d09093ba4732ab3602b43)


### [ironic-ipa-downloader](https://github.com/openshift/ironic-ipa-downloader/tree/f33b14ad0d4f9e4b11b053a4423ebdec62709035)

* [Bug 2013591](https://bugzilla.redhat.com/show_bug.cgi?id=2013591): Bump IPA version to 15.2-20211013.1 [#86](https://github.com/openshift/ironic-ipa-downloader/pull/86)
* [Bug 1963210](https://bugzilla.redhat.com/show_bug.cgi?id=1963210): Add support for no_proxy [#78](https://github.com/openshift/ironic-ipa-downloader/pull/78)
* [Full changelog](https://github.com/openshift/ironic-ipa-downloader/compare/df6bb639fd9bf26ce276ae78e78548fba53783d1...f33b14ad0d4f9e4b11b053a4423ebdec62709035)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/870afcb36a7ee4a2bef59845981821453b4174dd)

* [Bug 1963210](https://bugzilla.redhat.com/show_bug.cgi?id=1963210): Add support for no_proxy [#53](https://github.com/openshift/ironic-rhcos-downloader/pull/53)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/7ef152158f515f17a2678f7ead8a7363644cdf02...870afcb36a7ee4a2bef59845981821453b4174dd)


### [jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/1524f28a04cf6882177968c95b11a8018596e05c)

* [Bug 2020613](https://bugzilla.redhat.com/show_bug.cgi?id=2020613): Update Jenkins and plugins per 2021-11 advisory [#1348](https://github.com/openshift/jenkins/pull/1348)
* [Bug 1972361](https://bugzilla.redhat.com/show_bug.cgi?id=1972361): Bump jenkins version 2.289.2 [#1281](https://github.com/openshift/jenkins/pull/1281)
* [Full changelog](https://github.com/openshift/jenkins/compare/d3eacc24156ef726caae230b9b4620059a76f781...1524f28a04cf6882177968c95b11a8018596e05c)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/0e051e55d52b142d14254d9fcf4f14543a8b71eb)

* [Bug 2005494](https://bugzilla.redhat.com/show_bug.cgi?id=2005494): Support allow-from-router feature using openshift-host-network namespace [#300](https://github.com/openshift/sdn/pull/300)
* [Bug 2002291](https://bugzilla.redhat.com/show_bug.cgi?id=2002291): [4.7] proxy: don't re-check every userspace proxy rule on every change [#348](https://github.com/openshift/sdn/pull/348)
* [Bug 1987297](https://bugzilla.redhat.com/show_bug.cgi?id=1987297): when assigning and releasing egressIP try more than once before failing [#327](https://github.com/openshift/sdn/pull/327)
* [Bug 2001531](https://bugzilla.redhat.com/show_bug.cgi?id=2001531): improve SDN's OVS healthcheck and logging [#343](https://github.com/openshift/sdn/pull/343)
* [Bug 1995872](https://bugzilla.redhat.com/show_bug.cgi?id=1995872): Disable conntrack for vxlan traffic [#338](https://github.com/openshift/sdn/pull/338)
* [Bug 1971669](https://bugzilla.redhat.com/show_bug.cgi?id=1971669): Fix 4.7 SDN Egress Network Policy [#334](https://github.com/openshift/sdn/pull/334)
* [Full changelog](https://github.com/openshift/sdn/compare/798a46be0fa09aeec90b25a4c4cf11bf0b2c5b6f...0e051e55d52b142d14254d9fcf4f14543a8b71eb)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/1aacfbf90868b3af2f641e3d221ccb746e195288)

* [Bug 2018244](https://bugzilla.redhat.com/show_bug.cgi?id=2018244): Update TOX_CONSTRAINTS_FILE for stable/xena [#588](https://github.com/openshift/kuryr-kubernetes/pull/588)
* [Bug 2001518](https://bugzilla.redhat.com/show_bug.cgi?id=2001518): Increase keystoneauth's connection pool size [#554](https://github.com/openshift/kuryr-kubernetes/pull/554)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/c7654fb7ee98d42b3c2329f4ad0039f8f87828f0...1aacfbf90868b3af2f641e3d221ccb746e195288)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/eb819cb931e86f66853ad24b919e251369ec83c1)

* Updating ose-libvirt-machine-controllers builder & base images to be consistent with ART [#212](https://github.com/openshift/cluster-api-provider-libvirt/pull/212)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/033be25ca038fe773b23c076e9ac64926de72474...eb819cb931e86f66853ad24b919e251369ec83c1)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/8578fefdadf45cde741447871ca0ccf9a74451c5)

* [Bug 2022839](https://bugzilla.redhat.com/show_bug.cgi?id=2022839): GCP CI runs are complaining about APIs not being enabled [#954](https://github.com/openshift/machine-api-operator/pull/954)
* Bump some SHAs [#937](https://github.com/openshift/machine-api-operator/pull/937)
* [Bug 1993118](https://bugzilla.redhat.com/show_bug.cgi?id=1993118): Make sure nodes don't have attached volumes before vm deletion [#904](https://github.com/openshift/machine-api-operator/pull/904)
* [Bug 1999590](https://bugzilla.redhat.com/show_bug.cgi?id=1999590): [release-4.7] add alert for machine with long deletion phase [#907](https://github.com/openshift/machine-api-operator/pull/907)
* [Bug 1989648](https://bugzilla.redhat.com/show_bug.cgi?id=1989648): Prevent machine from stucking in Deleting phase on vSphere if related node object not found [#895](https://github.com/openshift/machine-api-operator/pull/895)
* [Bug 1933586](https://bugzilla.redhat.com/show_bug.cgi?id=1933586): Make sure phase is always set before creation [#858](https://github.com/openshift/machine-api-operator/pull/858)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/e179bb5ce397b543cd3f716f75fa4cd40046e0ad...8578fefdadf45cde741447871ca0ccf9a74451c5)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/04bcf9c68926dc323eba73bd85cd22d13efafef7)

* [Bug 1975174](https://bugzilla.redhat.com/show_bug.cgi?id=1975174): configure-ovs: fix nondeterministic master in slave profiles [#2640](https://github.com/openshift/machine-config-operator/pull/2640)
* [Bug 2008692](https://bugzilla.redhat.com/show_bug.cgi?id=2008692): Don't write empty static pod manifests [#2783](https://github.com/openshift/machine-config-operator/pull/2783)
* [Bug 1995621](https://bugzilla.redhat.com/show_bug.cgi?id=1995621): Backport fix 1 to 1 relation to kubelet configs and machine config pools [#2759](https://github.com/openshift/machine-config-operator/pull/2759)
* [Bug 2011375](https://bugzilla.redhat.com/show_bug.cgi?id=2011375): templates: Silence audit events from container infra by default [#2792](https://github.com/openshift/machine-config-operator/pull/2792)
* [Bug 2008759](https://bugzilla.redhat.com/show_bug.cgi?id=2008759): Set timeoutSeconds for keepalived liveness probe [#2773](https://github.com/openshift/machine-config-operator/pull/2773)
* [Bug 2008588](https://bugzilla.redhat.com/show_bug.cgi?id=2008588): Check suffix annotation is a number [#2781](https://github.com/openshift/machine-config-operator/pull/2781)
* [Bug 2004581](https://bugzilla.redhat.com/show_bug.cgi?id=2004581): Set ovs syslog level to info [#2767](https://github.com/openshift/machine-config-operator/pull/2767)
* [Bug 2000501](https://bugzilla.redhat.com/show_bug.cgi?id=2000501): bump SystemMemoryExceedsReservation alert threshold to 95% [#2749](https://github.com/openshift/machine-config-operator/pull/2749)
* [Bug 1989751](https://bugzilla.redhat.com/show_bug.cgi?id=1989751): [on-prem] Disable liveness probe until keepalived.conf exists [#2701](https://github.com/openshift/machine-config-operator/pull/2701)
* [Bug 1995853](https://bugzilla.redhat.com/show_bug.cgi?id=1995853): Gracefully shutdown taking around 6-7 mins (libvirt provider) [#2727](https://github.com/openshift/machine-config-operator/pull/2727)
* [Bug 1988102](https://bugzilla.redhat.com/show_bug.cgi?id=1988102): [release-4.7] On-prem: add default ingress track script to Keepalived [#2697](https://github.com/openshift/machine-config-operator/pull/2697)
* [Bug 1998112](https://bugzilla.redhat.com/show_bug.cgi?id=1998112): vSpehere: disable vmxnet3 tx csum offload [#2738](https://github.com/openshift/machine-config-operator/pull/2738)
* [Bug 1995810](https://bugzilla.redhat.com/show_bug.cgi?id=1995810): crio: complete crio default config [#2725](https://github.com/openshift/machine-config-operator/pull/2725)
* [Bug 1992240](https://bugzilla.redhat.com/show_bug.cgi?id=1992240): change system-connections-merged directory to systemConnectionsMerged [#2709](https://github.com/openshift/machine-config-operator/pull/2709)
* [Bug 1956462](https://bugzilla.redhat.com/show_bug.cgi?id=1956462): ensure SSH key uniqueness [#2563](https://github.com/openshift/machine-config-operator/pull/2563)
* [Bug 1993386](https://bugzilla.redhat.com/show_bug.cgi?id=1993386): crio: use conmon from path [#2715](https://github.com/openshift/machine-config-operator/pull/2715)
* [Bug 1992687](https://bugzilla.redhat.com/show_bug.cgi?id=1992687): alerts: SystemMemoryExceedsReservation triggers too quickly [#2710](https://github.com/openshift/machine-config-operator/pull/2710)
* [Bug 1970166](https://bugzilla.redhat.com/show_bug.cgi?id=1970166): MCO: maxUnavailable of ds/machine-config-daemon does not get updated due to missing resourcemerge check [#2682](https://github.com/openshift/machine-config-operator/pull/2682)
* [Bug 1977432](https://bugzilla.redhat.com/show_bug.cgi?id=1977432): crio: enable internal_wipe option [#2649](https://github.com/openshift/machine-config-operator/pull/2649)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/7cdf2e35b79a12590e0ae86fe99fbfe9b4c174d5...04bcf9c68926dc323eba73bd85cd22d13efafef7)


### [mdns-publisher](https://github.com/openshift/mdns-publisher/tree/af3f360536eca53d47ada65c3ddc842888432198)

* [Bug 2004537](https://bugzilla.redhat.com/show_bug.cgi?id=2004537): Update zeroconf vendoring [#39](https://github.com/openshift/mdns-publisher/pull/39)
* [Bug 1983695](https://bugzilla.redhat.com/show_bug.cgi?id=1983695): [release-4.7] Truncate long service names to 63 characters [#34](https://github.com/openshift/mdns-publisher/pull/34)
* [Full changelog](https://github.com/openshift/mdns-publisher/compare/207a7e5d80dbca3ffb2dc205ebba516e29ebaa6d...af3f360536eca53d47ada65c3ddc842888432198)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/cb519dfbaf608b86a811d6469321f6a33e1f2a17)

* [Bug 1965268](https://bugzilla.redhat.com/show_bug.cgi?id=1965268): Syncs with upstream for leader election [backport 4.7] [#65](https://github.com/openshift/whereabouts-cni/pull/65)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/dfe6b395b67c0cede73e6edf758976ae208b930c...cb519dfbaf608b86a811d6469321f6a33e1f2a17)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/c35a474587b5ef4bc7cc111e0f7e57860a253fa5)

* [Bug 2022188](https://bugzilla.redhat.com/show_bug.cgi?id=2022188): Image policy should mutate DeploymentConfigs [#261](https://github.com/openshift/openshift-apiserver/pull/261)
* [Bug 1995074](https://bugzilla.redhat.com/show_bug.cgi?id=1995074): revert incorrect ssh scp fix [#242](https://github.com/openshift/openshift-apiserver/pull/242)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/f9ac08715d1b7890a5aa66a8fb16e847a7f6b727...c35a474587b5ef4bc7cc111e0f7e57860a253fa5)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/c93745bf6898f41c6d10c66e7024238ddf20a86d)

* [Bug 1924531](https://bugzilla.redhat.com/show_bug.cgi?id=1924531): Update k8s.io dependencies to address CVE-2021-3121 [#191](https://github.com/openshift/openshift-controller-manager/pull/191)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/39b6393236e5abab331de1ab3384d0d165510457...c93745bf6898f41c6d10c66e7024238ddf20a86d)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/bfb0e084ae83e588b2793e8901ada814f8052fcc)

* [Bug 2016286](https://bugzilla.redhat.com/show_bug.cgi?id=2016286): Fix error when mounting /var/lib/kubelet/pods [#58](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/58)
* [Bug 1996070](https://bugzilla.redhat.com/show_bug.cgi?id=1996070): Add maxUnavailable to DaemonSets [#54](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/54)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/117ce62c69b399c524850f4ca32324a4ed288acd...bfb0e084ae83e588b2793e8901ada814f8052fcc)


### [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/dcb7828fd3753b90a5f617349495e59eca0307d1)

* [Bug 2000551](https://bugzilla.redhat.com/show_bug.cgi?id=2000551): Adds Proxy to provider client http transport [#200](https://github.com/openshift/cluster-api-provider-openstack/pull/200)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/471cf3ab636c26ed7c9fba6330374a5ea1b36b43...dcb7828fd3753b90a5f617349495e59eca0307d1)


### [operator-lifecycle-manager](https://github.com/operator-framework/operator-lifecycle-manager/tree/6bc6b9cf9c6357b94eee8ceb057260bb0b4a3fd7)

* Fix kubebuilder installation in the build root Dockerfile [#2351](https://github.com/operator-framework/operator-lifecycle-manager/pull/2351)
* [Full changelog](https://github.com/operator-framework/operator-lifecycle-manager/compare/dcbab9aff049c39d3a8a4b544d8829b7ce93d8f8...6bc6b9cf9c6357b94eee8ceb057260bb0b4a3fd7)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/23f38d3c0385e3fef87848c3378cf6c0a4cbe4d7)

* [Bug 1961341](https://bugzilla.redhat.com/show_bug.cgi?id=1961341): [release-4.7] Update openshift rolebindings to v1 [#409](https://github.com/operator-framework/operator-marketplace/pull/409)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/96bab9b9f5bb2c8fce141992230cf75e48f14f78...23f38d3c0385e3fef87848c3378cf6c0a4cbe4d7)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/5e51508c107a161416c0ffffdd17163f14136478)

* [Bug 1996070](https://bugzilla.redhat.com/show_bug.cgi?id=1996070): Backport maxUnavailable: 10% for DaemonSets [#69](https://github.com/openshift/ovirt-csi-driver-operator/pull/69)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/f8808a04dc6bfe7ce36a8238089dbae7ab29cbb6...5e51508c107a161416c0ffffdd17163f14136478)


### [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt/tree/75b327298f514972f4f27ea8f401dd354471dc7d)

* [Bug 2001287](https://bugzilla.redhat.com/show_bug.cgi?id=2001287): correct IPAddress detection for OVNKubernetes [#120](https://github.com/openshift/cluster-api-provider-ovirt/pull/120)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ovirt/compare/01b9bf8368a3da974bf1c9114c618a548d346acd...75b327298f514972f4f27ea8f401dd354471dc7d)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/8ca2b7caae9d2102235145f5c0168a6023d2963f)

* [Bug 2014360](https://bugzilla.redhat.com/show_bug.cgi?id=2014360): [4.7z] Scale fixes for pods/exgws [#799](https://github.com/openshift/ovn-kubernetes/pull/799)
* [Bug 2011402](https://bugzilla.redhat.com/show_bug.cgi?id=2011402): [4.7] bump OVN to 20.12.0-183.el8fdp [#786](https://github.com/openshift/ovn-kubernetes/pull/786)
* [Bug 1935149](https://bugzilla.redhat.com/show_bug.cgi?id=1935149): Resync node management port on subnet change [#456](https://github.com/openshift/ovn-kubernetes/pull/456)
* [Bug 2005519](https://bugzilla.redhat.com/show_bug.cgi?id=2005519): [4.7z] Remove waiting for namespace and namespace lock contention [#766](https://github.com/openshift/ovn-kubernetes/pull/766)
* [Bug 2005468](https://bugzilla.redhat.com/show_bug.cgi?id=2005468): [4.7z] Fixes skipping pods accidentally in retry [#759](https://github.com/openshift/ovn-kubernetes/pull/759)
* [Bug 2007653](https://bugzilla.redhat.com/show_bug.cgi?id=2007653): Fix ensurePod to call addPortExternalGW only for annotation updates [#765](https://github.com/openshift/ovn-kubernetes/pull/765)
* [Bug 2006159](https://bugzilla.redhat.com/show_bug.cgi?id=2006159): Fix duplicate incrementing of subnet allocation metric [#764](https://github.com/openshift/ovn-kubernetes/pull/764)
* [Bug 2004489](https://bugzilla.redhat.com/show_bug.cgi?id=2004489): panic after EgressFirewall deletion and DNS record expiration [#751](https://github.com/openshift/ovn-kubernetes/pull/751)
* [Bug 2007665](https://bugzilla.redhat.com/show_bug.cgi?id=2007665): [4.7z] Ensure host interfaces are deleted by CNI [#769](https://github.com/openshift/ovn-kubernetes/pull/769)
* [Bug 2005391](https://bugzilla.redhat.com/show_bug.cgi?id=2005391): [4.7z] Fixes misuse of pod annotations during update event [#754](https://github.com/openshift/ovn-kubernetes/pull/754)
* [Bug 2005913](https://bugzilla.redhat.com/show_bug.cgi?id=2005913): [4.7z] Sync ECMP routes on startup and fixes stale ECMP routes [#763](https://github.com/openshift/ovn-kubernetes/pull/763)
* [Bug 2001543](https://bugzilla.redhat.com/show_bug.cgi?id=2001543): fix reserve joinSwitch LRP IPs [#721](https://github.com/openshift/ovn-kubernetes/pull/721)
* [Bug 2001364](https://bugzilla.redhat.com/show_bug.cgi?id=2001364): [4.7z] Ensure client handling of canceled/dropped OVSDB monitor [#719](https://github.com/openshift/ovn-kubernetes/pull/719)
* [Bug 2001998](https://bugzilla.redhat.com/show_bug.cgi?id=2001998): egressfirewall not set after upgrade [#724](https://github.com/openshift/ovn-kubernetes/pull/724)
* [Bug 1988495](https://bugzilla.redhat.com/show_bug.cgi?id=1988495): Fix LocalGatway ExternalIP [#638](https://github.com/openshift/ovn-kubernetes/pull/638)
* [Bug 1999896](https://bugzilla.redhat.com/show_bug.cgi?id=1999896): Revert "[release-4.7] fix reserve joinSwitch LRP IPs" [#707](https://github.com/openshift/ovn-kubernetes/pull/707)
* [Bug 1997574](https://bugzilla.redhat.com/show_bug.cgi?id=1997574): Fix: sync egress IP for missed events on start-up [#687](https://github.com/openshift/ovn-kubernetes/pull/687)
* [Bug 1976242](https://bugzilla.redhat.com/show_bug.cgi?id=1976242): Update existing policy ACLs on start [#650](https://github.com/openshift/ovn-kubernetes/pull/650)
* [Bug 1997104](https://bugzilla.redhat.com/show_bug.cgi?id=1997104): fix reserve joinSwitch LRP IPs [#683](https://github.com/openshift/ovn-kubernetes/pull/683)
* [Bug 1995910](https://bugzilla.redhat.com/show_bug.cgi?id=1995910): Backport ovnkube-trace requires ip package to be installed [#674](https://github.com/openshift/ovn-kubernetes/pull/674)
* [Bug 1991445](https://bugzilla.redhat.com/show_bug.cgi?id=1991445): Bump OVN to 20.12.0-140.el8fdp [#649](https://github.com/openshift/ovn-kubernetes/pull/649)
* [Bug 1967132](https://bugzilla.redhat.com/show_bug.cgi?id=1967132): policy: handle NetworkPolicies single "from" multiple "ipBlock" [#562](https://github.com/openshift/ovn-kubernetes/pull/562)
* [Bug 1985516](https://bugzilla.redhat.com/show_bug.cgi?id=1985516): Add v6 management interface address for host network policy [#625](https://github.com/openshift/ovn-kubernetes/pull/625)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/81eb0cb1133ce68e30bb3a32040932d3c992d875...8ca2b7caae9d2102235145f5c0168a6023d2963f)


### [thanos](https://github.com/openshift/thanos/tree/319e70c1dacc87e9d88c4f364541699979c31602)

* [Bug 1994123](https://bugzilla.redhat.com/show_bug.cgi?id=1994123): dockerignore: remove vendor from ignored list [#69](https://github.com/openshift/thanos/pull/69)
* [Full changelog](https://github.com/openshift/thanos/compare/823d7cd2ee5de3cdab771cfd4b2557852dff7514...319e70c1dacc87e9d88c4f364541699979c31602)