# 4.8.42

Created: 2022-05-25 10:14:31 +0000 UTC

Image Digest: `sha256:ed5dba0be0d3c7d40eaaead9157517067bd7080db8ab14ebcc900fc3a09b5b07`

Promoted from registry.ci.openshift.org/ocp/release:4.8.0-0.nightly-2022-05-24-191650


## Changes from 4.7.42

### Components

* Kubernetes upgraded from 1.20.11 to 1.21.11
* Red Hat Enterprise Linux CoreOS upgraded from 47.84.202201191903-0 to 48.84.202205232135-0


### New images

* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [2d461b39](https://github.com/openshift/azure-disk-csi-driver/commit/2d461b39bacc76f0b879f943015df4d2191f72f4) `sha256:ab9cd93046293c4de1458c36e5dc5838300264d3616330a6eb9afdf5eab71f2d`
* [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator) git [d3a3c298](https://github.com/openshift/azure-disk-csi-driver-operator/commit/d3a3c298c91371ccd37896857f623f4494dd78a6) `sha256:0a96dbc66a27d565700743763e555a6af2639c819cd4c14f4e8e9bf8e2459164`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [187ad91f](https://github.com/openshift/multus-networkpolicy/commit/187ad91f119ff6b73610922012e7af4e704c5e93) `sha256:7f7778a7c91fc338dd92a2eaaf73ccbe59da39280a1139636fa81b47d16df12d`
* [network-tools](https://github.com/openshift/network-tools) git [5ac3739e](https://github.com/openshift/network-tools/commit/5ac3739e4382eb10cdd9209c8947096997fe38a2) `sha256:7764b75cb2d38b354cd1c51187eda98ab5285a29936a3a008d1cbf722176509d`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [dd5345eb](https://github.com/openshift/vmware-vsphere-csi-driver/commit/dd5345eb7ed3c68eff6619ca434b5e83083f5bc9) `sha256:6634e6d252f3a1468230496cddccb072d880d578b648d3e4194ea6ee3b4ee3cd`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [18cd9873](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/18cd9873078206f26d25ecf18893ba0864c0cf62) `sha256:ad5c8e8182181fc064363bce4b3c639245146012e84aa4c7434ba44faf525301`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [dd5345eb](https://github.com/openshift/vmware-vsphere-csi-driver/commit/dd5345eb7ed3c68eff6619ca434b5e83083f5bc9) `sha256:5523531fe4859fafc324c0f906efeaad3fe6922f435688dacf661cfe810ccc73`


### Removed images

* hello-openshift


### Rebuilt images without code change

* machine-os-content `sha256:f64855ccc6b1f3c0f4a1349372f49741973d6785933ca8ed1aab2420e966ed4c`


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/8c036e44147d9e4546c726b934dedda3940790af)

* [Bug 1962415](https://bugzilla.redhat.com/show_bug.cgi?id=1962415): Rebase v1.1.0 [#187](https://github.com/openshift/aws-ebs-csi-driver/pull/187)
* [Bug 1955474](https://bugzilla.redhat.com/show_bug.cgi?id=1955474): Rebase v1.0.0 [#185](https://github.com/openshift/aws-ebs-csi-driver/pull/185)
* [Bug 1932152](https://bugzilla.redhat.com/show_bug.cgi?id=1932152): UPSTREAM: 809: Cap IOPS when calculating from iopsPerGB [#184](https://github.com/openshift/aws-ebs-csi-driver/pull/184)
* [Bug 1942883](https://bugzilla.redhat.com/show_bug.cgi?id=1942883): Rebase to v0.10.1 [#183](https://github.com/openshift/aws-ebs-csi-driver/pull/183)
* Updating ose-aws-ebs-csi-driver builder & base images to be consistent with ART [#182](https://github.com/openshift/aws-ebs-csi-driver/pull/182)
* Add BZ component to OWNERS [#181](https://github.com/openshift/aws-ebs-csi-driver/pull/181)
* [Bug 1932229](https://bugzilla.redhat.com/show_bug.cgi?id=1932229): Rebase to v0.9.0 [#180](https://github.com/openshift/aws-ebs-csi-driver/pull/180)
* Updating ose-aws-ebs-csi-driver builder & base images to be consistent with ART [#179](https://github.com/openshift/aws-ebs-csi-driver/pull/179)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/f6a71bf783f3b7429a8c2fbbc6f3d586e6a7eb60...8c036e44147d9e4546c726b934dedda3940790af)


### [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator/tree/d1fe616c0da0edddb7019a64b0ad1136b36a5f26)

* [Bug 1969538](https://bugzilla.redhat.com/show_bug.cgi?id=1969538): Include default VolumeSnapshotClass [#129](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/129)
* [Bug 1960732](https://bugzilla.redhat.com/show_bug.cgi?id=1960732): update manifest and readme [#127](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/127)
* [Bug 1947402](https://bugzilla.redhat.com/show_bug.cgi?id=1947402): Deploy multiple replicas of CSI Controller Service [#122](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/122)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): DelegatingAuthenticationOptions TokenReview request timeout [#126](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/126)
* [Bug 1951952](https://bugzilla.redhat.com/show_bug.cgi?id=1951952): Metrics for cloudprovider error requests are lost [#125](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/125)
* [Bug 1956411](https://bugzilla.redhat.com/show_bug.cgi?id=1956411): Add custom tags from Infrastructure [#116](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/116)
* [Bug 1947774](https://bugzilla.redhat.com/show_bug.cgi?id=1947774): fix imagePullPolicy to ifNotPresent [#120](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/120)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): DelegatingAuthenticationOptions TokenReview request timeout [#121](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/121)
* [Bug 1924470](https://bugzilla.redhat.com/show_bug.cgi?id=1924470): Bump Kubernetes to 1.21 [#119](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/119)
* Fix kube-rbac-proxy image reference [#118](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/118)
* Add metrics scraping [#117](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/117)
* Updating ose-aws-ebs-csi-driver-operator builder & base images to be consistent with ART [#115](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/115)
* [Bug 1933184](https://bugzilla.redhat.com/show_bug.cgi?id=1933184): Add maxUnavailable to DaemonSets [#114](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/114)
* Updating ose-aws-ebs-csi-driver-operator builder & base images to be consistent with ART [#112](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/112)
* Cleanup: Remove serviceName from controller manifest [#113](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/113)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver-operator/compare/3a9ff17d523a342ee71a967a2b82d5cf044f1eb8...d1fe616c0da0edddb7019a64b0ad1136b36a5f26)


### [aws-machine-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/4b38982f44a3446a5443076fe20c11d136f7b629)

* [Bug 2066675](https://bugzilla.redhat.com/show_bug.cgi?id=2066675): Ensure IOPS setting is honoured on all supported block device types [#437](https://github.com/openshift/cluster-api-provider-aws/pull/437)
* [Bug 2031905](https://bugzilla.redhat.com/show_bug.cgi?id=2031905): Prevent Machine from being considered provisioned until it exists in AWS [#432](https://github.com/openshift/cluster-api-provider-aws/pull/432)
* [Bug 2016926](https://bugzilla.redhat.com/show_bug.cgi?id=2016926): do not requeue if the machine has been updated [#426](https://github.com/openshift/cluster-api-provider-aws/pull/426)
* [Bug 1974680](https://bugzilla.redhat.com/show_bug.cgi?id=1974680): Fix eventual consistency logic to be consistent [#416](https://github.com/openshift/cluster-api-provider-aws/pull/416)
* [Bug 1948719](https://bugzilla.redhat.com/show_bug.cgi?id=1948719): update controller-runtime dependency [#408](https://github.com/openshift/cluster-api-provider-aws/pull/408)
* [Bug 1954177](https://bugzilla.redhat.com/show_bug.cgi?id=1954177): Update mao dependency for webhook v1 changes [#407](https://github.com/openshift/cluster-api-provider-aws/pull/407)
* [Bug 1949626](https://bugzilla.redhat.com/show_bug.cgi?id=1949626): update aws-sdk-go to v1.38.25 [#403](https://github.com/openshift/cluster-api-provider-aws/pull/403)
* [Bug 1952611](https://bugzilla.redhat.com/show_bug.cgi?id=1952611): [OCPCLOUD-1115] Get instance tags from infrastructure object [#402](https://github.com/openshift/cluster-api-provider-aws/pull/402)
* [Bug 1948719](https://bugzilla.redhat.com/show_bug.cgi?id=1948719): update makefile to ensure that CGO_ENABLE is set properly [#401](https://github.com/openshift/cluster-api-provider-aws/pull/401)
* [Bug 1948719](https://bugzilla.redhat.com/show_bug.cgi?id=1948719): update dependencies to 1.21 [#399](https://github.com/openshift/cluster-api-provider-aws/pull/399)
* Updating ose-aws-machine-controllers builder & base images to be consistent with ART [#385](https://github.com/openshift/cluster-api-provider-aws/pull/385)
* [Bug 1918910](https://bugzilla.redhat.com/show_bug.cgi?id=1918910): Only log error on wrong instance type for scale from zero [#397](https://github.com/openshift/cluster-api-provider-aws/pull/397)
* [Bug 1880757](https://bugzilla.redhat.com/show_bug.cgi?id=1880757): Unset target groups from LB on deletion [#389](https://github.com/openshift/cluster-api-provider-aws/pull/389)
* [Bug 1910318](https://bugzilla.redhat.com/show_bug.cgi?id=1910318): Ensure original conditions aren't mutated during reconcile [#396](https://github.com/openshift/cluster-api-provider-aws/pull/396)
* Update EC2 instance types [#393](https://github.com/openshift/cluster-api-provider-aws/pull/393)
* [Bug 1910318](https://bugzilla.redhat.com/show_bug.cgi?id=1910318): Add condition to show actuator exists condition on machine [#392](https://github.com/openshift/cluster-api-provider-aws/pull/392)
* Makefile fix [#386](https://github.com/openshift/cluster-api-provider-aws/pull/386)
* [Bug 1934021](https://bugzilla.redhat.com/show_bug.cgi?id=1934021): Ensure response body is closed when we are finished with the request [#390](https://github.com/openshift/cluster-api-provider-aws/pull/390)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/5368195c02ca672dc7f7a4ad571df5584fa4087f...4b38982f44a3446a5443076fe20c11d136f7b629)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/58ef8af861317beceac26691d5c452af45ca0e4a)

* [Bug 2029253](https://bugzilla.redhat.com/show_bug.cgi?id=2029253): update go.mod for go1.16 [#148](https://github.com/openshift/aws-pod-identity-webhook/pull/148)
* Updating ose-aws-pod-identity-webhook images to be consistent with ART [#141](https://github.com/openshift/aws-pod-identity-webhook/pull/141)
* [Bug 1958492](https://bugzilla.redhat.com/show_bug.cgi?id=1958492): UPSTREAM: 115: certificatesigningrequests/v1beta1 to v1 [#138](https://github.com/openshift/aws-pod-identity-webhook/pull/138)
* Updating ose-aws-pod-identity-webhook builder & base images to be consistent with ART [#132](https://github.com/openshift/aws-pod-identity-webhook/pull/132)
* [Bug 1924472](https://bugzilla.redhat.com/show_bug.cgi?id=1924472): UPSTREAM: 106: vendor bump to gogo/protobuf 1.3.2 [#136](https://github.com/openshift/aws-pod-identity-webhook/pull/136)
* Rebase master [#135](https://github.com/openshift/aws-pod-identity-webhook/pull/135)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/0074d6afef9e20f5a1bcbde85cd7c01e422202ca...58ef8af861317beceac26691d5c452af45ca0e4a)


### [azure-machine-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/ad5852b1255c2ecd3c5e385fee4a5e56b8ed8b22)

* [Bug 2051576](https://bugzilla.redhat.com/show_bug.cgi?id=2051576): Requeue create on invalid credentials errors [#253](https://github.com/openshift/cluster-api-provider-azure/pull/253)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/723b7ab157677bbeac6b9fa72ddeaf865aab54bf...ad5852b1255c2ecd3c5e385fee4a5e56b8ed8b22)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/45c6c1d018280e88e989ec066918f0d93afd3535)

* [Bug 2069166](https://bugzilla.redhat.com/show_bug.cgi?id=2069166): stop considering Mint mode as supported on Azure (#5699) [#5753](https://github.com/openshift/installer/pull/5753)
* [Bug 2022171](https://bugzilla.redhat.com/show_bug.cgi?id=2022171): Relax vcenter hostname check [#5371](https://github.com/openshift/installer/pull/5371)
* Updating ose-installer-artifacts builder & base images to be consistent with ART [#4782](https://github.com/openshift/installer/pull/4782)
* [Bug 2023363](https://bugzilla.redhat.com/show_bug.cgi?id=2023363): Add ingress rules to master SG for compact clusters [#5386](https://github.com/openshift/installer/pull/5386)
* [Bug 2017986](https://bugzilla.redhat.com/show_bug.cgi?id=2017986): Set AWS Bootstrap Type == Master [#5338](https://github.com/openshift/installer/pull/5338)
* [Bug 2017258](https://bugzilla.redhat.com/show_bug.cgi?id=2017258): bump oVirt terraform provider version which fix "Disk is locked" bug [#5329](https://github.com/openshift/installer/pull/5329)
* [Bug 2002349](https://bugzilla.redhat.com/show_bug.cgi?id=2002349): Fix invalid UPI AWS instance type [#5199](https://github.com/openshift/installer/pull/5199)
* [Bug 2008823](https://bugzilla.redhat.com/show_bug.cgi?id=2008823): baremetal: Ensure ipv6 bootstrap VM client-id is predictable [#5250](https://github.com/openshift/installer/pull/5250)
* [Bug 2009019](https://bugzilla.redhat.com/show_bug.cgi?id=2009019): update legacy RHCOS boot image metadata [#5255](https://github.com/openshift/installer/pull/5255)
* [Bug 1982001](https://bugzilla.redhat.com/show_bug.cgi?id=1982001): Bump RHCOS 4.8 boot image [#5227](https://github.com/openshift/installer/pull/5227)
* Update OWNERS [#5242](https://github.com/openshift/installer/pull/5242)
* [Bug 2004236](https://bugzilla.redhat.com/show_bug.cgi?id=2004236): Document how to enable Octavia Day 2 [#5161](https://github.com/openshift/installer/pull/5161)
* [Bug 1973421](https://bugzilla.redhat.com/show_bug.cgi?id=1973421): [4.8] improve dual-stack install-config validation [#5114](https://github.com/openshift/installer/pull/5114)
* [Bug 1987848](https://bugzilla.redhat.com/show_bug.cgi?id=1987848): openstack: quotas/BYON improvements [#5122](https://github.com/openshift/installer/pull/5122)
* [Bug 1969651](https://bugzilla.redhat.com/show_bug.cgi?id=1969651): bump RHCOS 4.8 boot images [#5051](https://github.com/openshift/installer/pull/5051)
* [Bug 1981548](https://bugzilla.redhat.com/show_bug.cgi?id=1981548): [release-4.8] aws: move elastic ip permissions to create networking category [#5056](https://github.com/openshift/installer/pull/5056)
* OWNERS: add more core team members as approvers [#5124](https://github.com/openshift/installer/pull/5124)
* Updating ose-installer builder & base images to be consistent with ART [#4780](https://github.com/openshift/installer/pull/4780)
* [Bug 1962850](https://bugzilla.redhat.com/show_bug.cgi?id=1962850): Bump RHCOS bootimages for various fixes [#4977](https://github.com/openshift/installer/pull/4977)
* [Bug 1971068](https://bugzilla.redhat.com/show_bug.cgi?id=1971068): Updating AWS instance types [#4990](https://github.com/openshift/installer/pull/4990)
* [Bug 1946079](https://bugzilla.redhat.com/show_bug.cgi?id=1946079): baremetal: pass IP_OPTIONS to os downloader [#4989](https://github.com/openshift/installer/pull/4989)
* [Bug 1955697](https://bugzilla.redhat.com/show_bug.cgi?id=1955697): Revert "tfvars/vsphere: use explicit path for datacenter." [#4978](https://github.com/openshift/installer/pull/4978)
* [Bug 1925343](https://bugzilla.redhat.com/show_bug.cgi?id=1925343): upi/metal: add more configuration options for bare metal [#4938](https://github.com/openshift/installer/pull/4938)
* [Bug 1970415](https://bugzilla.redhat.com/show_bug.cgi?id=1970415): Document SR-IOV use case: using network with port security disabled [#4958](https://github.com/openshift/installer/pull/4958)
* [Bug 1969601](https://bugzilla.redhat.com/show_bug.cgi?id=1969601): manifests: link networking CRD from API [#4984](https://github.com/openshift/installer/pull/4984)
* [Bug 1969578](https://bugzilla.redhat.com/show_bug.cgi?id=1969578): manifests: don't use deprecated api in role-cloud-creds-secret-reader [#4982](https://github.com/openshift/installer/pull/4982)
* /pkg/tfvars/vsphere: add OWNERS [#4980](https://github.com/openshift/installer/pull/4980)
* [Bug 1952604](https://bugzilla.redhat.com/show_bug.cgi?id=1952604): [baremetal] Fix port in external loadbalancer example config [#4867](https://github.com/openshift/installer/pull/4867)
* [Bug 1963205](https://bugzilla.redhat.com/show_bug.cgi?id=1963205): rhcos: Use ART redirector [#4928](https://github.com/openshift/installer/pull/4928)
* [Bug 1967623](https://bugzilla.redhat.com/show_bug.cgi?id=1967623): oVirt: Fix password input [#4976](https://github.com/openshift/installer/pull/4976)
* [Bug 1820238](https://bugzilla.redhat.com/show_bug.cgi?id=1820238): delete manila shares and snapshots along with the cluster [#4952](https://github.com/openshift/installer/pull/4952)
* [Bug 1965182](https://bugzilla.redhat.com/show_bug.cgi?id=1965182): update baremetal-operator to fix miss IPMI credentials [#4965](https://github.com/openshift/installer/pull/4965)
* [Bug 1966862](https://bugzilla.redhat.com/show_bug.cgi?id=1966862): pattern removed from sed to prevent expansion [#4973](https://github.com/openshift/installer/pull/4973)
* [Bug 1949859](https://bugzilla.redhat.com/show_bug.cgi?id=1949859): baremetal: stop provisioning services once control plane is deployed [#4900](https://github.com/openshift/installer/pull/4900)
* [Bug 1965921](https://bugzilla.redhat.com/show_bug.cgi?id=1965921): [oVirt] High performance VMs shouldn't be created with Existing policy [#4969](https://github.com/openshift/installer/pull/4969)
* [Bug 1909136](https://bugzilla.redhat.com/show_bug.cgi?id=1909136): OpenStack: delete volume snapshots [#4962](https://github.com/openshift/installer/pull/4962)
* Updates azure-reviewers [#4878](https://github.com/openshift/installer/pull/4878)
* [Bug 1946506](https://bugzilla.redhat.com/show_bug.cgi?id=1946506): Bootstrap no longer relies on mdns [#4821](https://github.com/openshift/installer/pull/4821)
* [Bug 1951713](https://bugzilla.redhat.com/show_bug.cgi?id=1951713): docs/openstack/known-issues: add section for machine spec edits [#4959](https://github.com/openshift/installer/pull/4959)
* [Bug 1962274](https://bugzilla.redhat.com/show_bug.cgi?id=1962274): oVirt move affinity groups validations to ValidateForProvisioning [#4944](https://github.com/openshift/installer/pull/4944)
* [Bug 1957260](https://bugzilla.redhat.com/show_bug.cgi?id=1957260): gcp: add new region europe-central2 [#4901](https://github.com/openshift/installer/pull/4901)
* [Bug 1956480](https://bugzilla.redhat.com/show_bug.cgi?id=1956480): Boot image bump for RHEL 8.4 GA [#4942](https://github.com/openshift/installer/pull/4942)
* [Bug 1959920](https://bugzilla.redhat.com/show_bug.cgi?id=1959920): baremetal: Do not use ironic allocation [#4941](https://github.com/openshift/installer/pull/4941)
* [Bug 1926547](https://bugzilla.redhat.com/show_bug.cgi?id=1926547): pkg/destroy/aws: Log errors untagging shared resources [#4913](https://github.com/openshift/installer/pull/4913)
* [Bug 1959981](https://bugzilla.redhat.com/show_bug.cgi?id=1959981): oVirt: fix empty AffinityGroupsNames handling [#4935](https://github.com/openshift/installer/pull/4935)
* [Bug 1954873](https://bugzilla.redhat.com/show_bug.cgi?id=1954873): CoreOS only supports three dns namservers [#4939](https://github.com/openshift/installer/pull/4939)
* [Bug 1957597](https://bugzilla.redhat.com/show_bug.cgi?id=1957597): aws: using dotted domain when looking for public hosted zone [#4933](https://github.com/openshift/installer/pull/4933)
* [Bug 1955697](https://bugzilla.redhat.com/show_bug.cgi?id=1955697): tfvars/vsphere: use explicit path for datacenter. [#4894](https://github.com/openshift/installer/pull/4894)
* [Bug 1959703](https://bugzilla.redhat.com/show_bug.cgi?id=1959703): Avoid scp wildcard recursion with installer-masters-gather.sh [#4896](https://github.com/openshift/installer/pull/4896)
* [Bug 1955336](https://bugzilla.redhat.com/show_bug.cgi?id=1955336): Check cluster name for similarities with word 'google' [#4925](https://github.com/openshift/installer/pull/4925)
* [Bug 1960323](https://bugzilla.redhat.com/show_bug.cgi?id=1960323): Address issues raised by coverity security scan [#4932](https://github.com/openshift/installer/pull/4932)
* [Bug 1940159](https://bugzilla.redhat.com/show_bug.cgi?id=1940159): Fix Routers destroy with BYO [#4919](https://github.com/openshift/installer/pull/4919)
* [Bug 1947067](https://bugzilla.redhat.com/show_bug.cgi?id=1947067): vendor/AlecAivazis/survey: Bump API to v2 [#4895](https://github.com/openshift/installer/pull/4895)
* [Bug 1953019](https://bugzilla.redhat.com/show_bug.cgi?id=1953019): Baremetal: While deleting cluster, warn instead of exiting [#4897](https://github.com/openshift/installer/pull/4897)
* [Bug 1953035](https://bugzilla.redhat.com/show_bug.cgi?id=1953035): Disallow publish internal for non-cloud installations [#4905](https://github.com/openshift/installer/pull/4905)
* [Bug 1940337](https://bugzilla.redhat.com/show_bug.cgi?id=1940337): openstack: Report missing flavor [#4924](https://github.com/openshift/installer/pull/4924)
* [Bug 1957809](https://bugzilla.redhat.com/show_bug.cgi?id=1957809): Validation of platform.openstack.machineSubnet [#4917](https://github.com/openshift/installer/pull/4917)
* [Bug 1958884](https://bugzilla.redhat.com/show_bug.cgi?id=1958884): openstack: Fix error message typo when getting volume availability zones [#4911](https://github.com/openshift/installer/pull/4911)
* [Bug 1957869](https://bugzilla.redhat.com/show_bug.cgi?id=1957869): vendor: update baremetal-operator to align irmc PowerInterface [#4908](https://github.com/openshift/installer/pull/4908)
* [Bug 1953551](https://bugzilla.redhat.com/show_bug.cgi?id=1953551): Revert "Link ppc64le binary dynamically" [#4890](https://github.com/openshift/installer/pull/4890)
* [Bug 1958420](https://bugzilla.redhat.com/show_bug.cgi?id=1958420): aws: restore setting aws platform spec in infra resource [#4916](https://github.com/openshift/installer/pull/4916)
* [Bug 1956208](https://bugzilla.redhat.com/show_bug.cgi?id=1956208): openstack: add validation for volume types [#4904](https://github.com/openshift/installer/pull/4904)
* [Bug 1948563](https://bugzilla.redhat.com/show_bug.cgi?id=1948563): Handle instance_info capabilities and update ironic-terraform [#4903](https://github.com/openshift/installer/pull/4903)
* [Bug 1958216](https://bugzilla.redhat.com/show_bug.cgi?id=1958216): libvirt: Allow duplicate dnsmasq options [#4852](https://github.com/openshift/installer/pull/4852)
* [Bug 1957951](https://bugzilla.redhat.com/show_bug.cgi?id=1957951): AWS: Periodically send shut down requests for stuck EC2 instances [#4848](https://github.com/openshift/installer/pull/4848)
* [Bug 1956281](https://bugzilla.redhat.com/show_bug.cgi?id=1956281): crio: fix bootstrap given new crio config behavior [#4898](https://github.com/openshift/installer/pull/4898)
* [Bug 1943175](https://bugzilla.redhat.com/show_bug.cgi?id=1943175): azure: set storage account tls default to 1.2 [#4883](https://github.com/openshift/installer/pull/4883)
* [Bug 1931217](https://bugzilla.redhat.com/show_bug.cgi?id=1931217): add affinity groups to oVirt installer [#4674](https://github.com/openshift/installer/pull/4674)
* [Bug 1956978](https://bugzilla.redhat.com/show_bug.cgi?id=1956978): install-gather: use names in pod logs too [#4902](https://github.com/openshift/installer/pull/4902)
* [Bug 1956496](https://bugzilla.redhat.com/show_bug.cgi?id=1956496): Openstack SRIOV docs [#4718](https://github.com/openshift/installer/pull/4718)
* [Bug 1949923](https://bugzilla.redhat.com/show_bug.cgi?id=1949923): apply defaults for root volume AZs if they aren't set [#4860](https://github.com/openshift/installer/pull/4860)
* [Bug 1951670](https://bugzilla.redhat.com/show_bug.cgi?id=1951670): Error gathering bootstrap log after pivot: The bootstrap… [#4872](https://github.com/openshift/installer/pull/4872)
* [Bug 1956079](https://bugzilla.redhat.com/show_bug.cgi?id=1956079): gather: collect networking information in log bundle [#4892](https://github.com/openshift/installer/pull/4892)
* [Bug 1953803](https://bugzilla.redhat.com/show_bug.cgi?id=1953803): aws: validate byo hostedzone is parent of cluster domain [#4886](https://github.com/openshift/installer/pull/4886)
* [Bug 1955701](https://bugzilla.redhat.com/show_bug.cgi?id=1955701): Bump boot images for RHEL 8.4 Beta [#4861](https://github.com/openshift/installer/pull/4861)
* [Bug 1878655](https://bugzilla.redhat.com/show_bug.cgi?id=1878655): aws installconfig: endpoint validation should be before others [#4805](https://github.com/openshift/installer/pull/4805)
* [Bug 1943219](https://bugzilla.redhat.com/show_bug.cgi?id=1943219): azure: remove bootstrap ssh rule on private clusters [#4864](https://github.com/openshift/installer/pull/4864)
* [Bug 1948359](https://bugzilla.redhat.com/show_bug.cgi?id=1948359): destroy: remove shared tag from byo aws iam role [#4881](https://github.com/openshift/installer/pull/4881)
* [Bug 1953551](https://bugzilla.redhat.com/show_bug.cgi?id=1953551): Link ppc64le binary dynamically [#4875](https://github.com/openshift/installer/pull/4875)
* [Bug 1952632](https://bugzilla.redhat.com/show_bug.cgi?id=1952632): data/manifests/bootkube/cvo-overrides: Bump default to stable-4.8 [#4868](https://github.com/openshift/installer/pull/4868)
* [Bug 1950113](https://bugzilla.redhat.com/show_bug.cgi?id=1950113): manifests: populate aws user tags in infrastructure [#4755](https://github.com/openshift/installer/pull/4755)
* [Bug 1948359](https://bugzilla.redhat.com/show_bug.cgi?id=1948359): aws: add permissions for untagging shared byo instance roles [#4859](https://github.com/openshift/installer/pull/4859)
* [Bug 1948923](https://bugzilla.redhat.com/show_bug.cgi?id=1948923): aws: improve ami validation [#4846](https://github.com/openshift/installer/pull/4846)
* [Bug 1951174](https://bugzilla.redhat.com/show_bug.cgi?id=1951174): Dockerfile: repin libvirt [#4854](https://github.com/openshift/installer/pull/4854)
* [Bug 1909136](https://bugzilla.redhat.com/show_bug.cgi?id=1909136): destroy volumes and snapshots created by Cinder CSI driver [#4858](https://github.com/openshift/installer/pull/4858)
* [Bug 1931974](https://bugzilla.redhat.com/show_bug.cgi?id=1931974): Prefer IPv6 hostIP on bootstrap IPv6 deployments [#4756](https://github.com/openshift/installer/pull/4756)
* [Bug 1923786](https://bugzilla.redhat.com/show_bug.cgi?id=1923786): UPI oVirt - replace word in docs [#4855](https://github.com/openshift/installer/pull/4855)
* [Bug 1949923](https://bugzilla.redhat.com/show_bug.cgi?id=1949923): OpenStack: validate root volume availability zones [#4851](https://github.com/openshift/installer/pull/4851)
* [Bug 1936223](https://bugzilla.redhat.com/show_bug.cgi?id=1936223): [ovirt] Fix typo in connect to Engine [#4719](https://github.com/openshift/installer/pull/4719)
* [Bug 1950007](https://bugzilla.redhat.com/show_bug.cgi?id=1950007): UPI image: use get-pip instead of easy_install [#4850](https://github.com/openshift/installer/pull/4850)
* [Bug 1941759](https://bugzilla.redhat.com/show_bug.cgi?id=1941759): Make failure to fetch cloud info non-fatal [#4733](https://github.com/openshift/installer/pull/4733)
* aws: support for bring-your-own hosted zone [#4772](https://github.com/openshift/installer/pull/4772)
* update terraform-provider-ironic to v0.2.5 to get better error handling [#4835](https://github.com/openshift/installer/pull/4835)
* pkg/destroy/gcp: fix dropped error [#4836](https://github.com/openshift/installer/pull/4836)
* Revert "Dockerfile.upi.ci: Drop pip+pyopenssl installs" [#4831](https://github.com/openshift/installer/pull/4831)
* [Bug 1945659](https://bugzilla.redhat.com/show_bug.cgi?id=1945659): remove ovirt_cafile from ovirt-credentials secret [#4809](https://github.com/openshift/installer/pull/4809)
* OpenStack: Availability zones for root volumes [#4707](https://github.com/openshift/installer/pull/4707)
* [Bug 1945236](https://bugzilla.redhat.com/show_bug.cgi?id=1945236): add proxy params to bootstrap ignition [#4804](https://github.com/openshift/installer/pull/4804)
* [Bug 1938131](https://bugzilla.redhat.com/show_bug.cgi?id=1938131): pkg/asset/installconfig/aws: Add iam permission for destorying clusters [#4825](https://github.com/openshift/installer/pull/4825)
* [Bug 1946307](https://bugzilla.redhat.com/show_bug.cgi?id=1946307): gcp: install google cloud sdk with yum the recommended way [#4819](https://github.com/openshift/installer/pull/4819)
* cmd: diagnose problems downloading release image [#4751](https://github.com/openshift/installer/pull/4751)
* [Bug 1937722](https://bugzilla.redhat.com/show_bug.cgi?id=1937722): OCP 4.8: Passing oVirt certificate information to Terraform [#4737](https://github.com/openshift/installer/pull/4737)
* [Bug 1946119](https://bugzilla.redhat.com/show_bug.cgi?id=1946119): aws: support setting IAM role in the default AWS machine platform [#4818](https://github.com/openshift/installer/pull/4818)
* hack: use yaml for coreos manifest [#4814](https://github.com/openshift/installer/pull/4814)
* Updating ose-baremetal-installer builder & base images to be consistent with ART [#4781](https://github.com/openshift/installer/pull/4781)
* pkg/destroy/aws: fix dropped error [#4815](https://github.com/openshift/installer/pull/4815)
* Baremetal: Remove the -openstack rename in the os image. [#4725](https://github.com/openshift/installer/pull/4725)
* Byo IAM roles for IPI install [#4790](https://github.com/openshift/installer/pull/4790)
* Test GCP versioned binary [#4811](https://github.com/openshift/installer/pull/4811)
* [Bug 1944268](https://bugzilla.redhat.com/show_bug.cgi?id=1944268): aws: allow use of unknown regions in known partitions [#4801](https://github.com/openshift/installer/pull/4801)
* Fix ipv6/dual-stack validation with Azure [#4766](https://github.com/openshift/installer/pull/4766)
* installer-create: Provide user friendly error messages during failures [#4800](https://github.com/openshift/installer/pull/4800)
* data/bootstrap: Check if release image architecture matches host architecture [#4592](https://github.com/openshift/installer/pull/4592)
* installer/pkg/asset/installconfig/azure: fix dropped error [#4793](https://github.com/openshift/installer/pull/4793)
* [Bug 1925216](https://bugzilla.redhat.com/show_bug.cgi?id=1925216): Bump gophercloud utils [#4786](https://github.com/openshift/installer/pull/4786)
* Inject CoreOS stream metadata as configmap via CVO manifest [#4760](https://github.com/openshift/installer/pull/4760)
* pkg/asset/cluster: fix dropped error [#4770](https://github.com/openshift/installer/pull/4770)
* Add and use stream metadata for RHCOS, add openshift-install coreos print-stream-json [#4582](https://github.com/openshift/installer/pull/4582)
* [Bug 1931115](https://bugzilla.redhat.com/show_bug.cgi?id=1931115): Azure: Check Azure disk Instance Type for PremiumIO Capabilities [#4726](https://github.com/openshift/installer/pull/4726)
* Validate HotplugVolumes feature gate in Kubevirt [#4650](https://github.com/openshift/installer/pull/4650)
* [Bug 1934557](https://bugzilla.redhat.com/show_bug.cgi?id=1934557): RHCOS boot image bump for LUKS fixes [#4778](https://github.com/openshift/installer/pull/4778)
* images: Add Dockerfile.upi.ci.rhel8 [#4785](https://github.com/openshift/installer/pull/4785)
* gather-bootstrap: Gather logs before bootstrap shuts down [#4693](https://github.com/openshift/installer/pull/4693)
* Revert "Check if VIP IPs overlap with machine CIDR provided during vsphere installation" [#4779](https://github.com/openshift/installer/pull/4779)
* Dockerfile.upi.ci: Drop pip+pyopenssl installs [#4784](https://github.com/openshift/installer/pull/4784)
* Add resource filter that matches Label or ClusterID [#4717](https://github.com/openshift/installer/pull/4717)
* Update cluster-api-provider-ovirt, cluster-api-provider-aws and baremetal-operator [#4700](https://github.com/openshift/installer/pull/4700)
* Enable forward compatibility with kcmo rendering of signing keypair [#4771](https://github.com/openshift/installer/pull/4771)
* [Bug 1939513](https://bugzilla.redhat.com/show_bug.cgi?id=1939513): KubeVirt platform: Add the immediate request annotation to the source PVC [#4759](https://github.com/openshift/installer/pull/4759)
* [Bug 1918469](https://bugzilla.redhat.com/show_bug.cgi?id=1918469): Check if VIP IPs overlap with machine CIDR provided during vsphere installation [#4754](https://github.com/openshift/installer/pull/4754)
* Update owners with new Installer Team members [#4774](https://github.com/openshift/installer/pull/4774)
* asset/tls: fixes certkey unit test for Go >= 1.15 [#4769](https://github.com/openshift/installer/pull/4769)
* Baremetal: Explicitly set watchAllNamespaces [#4709](https://github.com/openshift/installer/pull/4709)
* README: change install to create [#4747](https://github.com/openshift/installer/pull/4747)
* gcp: add kubernetes owned label to master machines [#4752](https://github.com/openshift/installer/pull/4752)
* bootstrap: record progress of services [#4742](https://github.com/openshift/installer/pull/4742)
* gcp: divide machine CIDR into 2 networks for subnets [#4749](https://github.com/openshift/installer/pull/4749)
* Support configurable libvirt disk size [#4757](https://github.com/openshift/installer/pull/4757)
* IPI-BAREMETAL: document how to use external LB for api/ingress traffic [#4765](https://github.com/openshift/installer/pull/4765)
* [Bug 1804230](https://bugzilla.redhat.com/show_bug.cgi?id=1804230): fix broken ETCD link in user docs [#4764](https://github.com/openshift/installer/pull/4764)
* docs/user/aws/customization: Fix KMS-key link format [#4762](https://github.com/openshift/installer/pull/4762)
* [Bug 1933414](https://bugzilla.redhat.com/show_bug.cgi?id=1933414): openstack: Consistent port names [#4734](https://github.com/openshift/installer/pull/4734)
* [Bug 1934557](https://bugzilla.redhat.com/show_bug.cgi?id=1934557): bump RHCOS image for LUKS fix [#4745](https://github.com/openshift/installer/pull/4745)
* [Bug 1934123](https://bugzilla.redhat.com/show_bug.cgi?id=1934123): generate glance url considering the region [#4740](https://github.com/openshift/installer/pull/4740)
* installconfig/aws: validate connectivity to service endpoints. [#4699](https://github.com/openshift/installer/pull/4699)
* [Bug 1937460](https://bugzilla.redhat.com/show_bug.cgi?id=1937460): Update gophercloud module from master [#4741](https://github.com/openshift/installer/pull/4741)
* pkg/asset/cluster/aws: fix dropped error [#4727](https://github.com/openshift/installer/pull/4727)
* [Bug 1903055](https://bugzilla.redhat.com/show_bug.cgi?id=1903055): Set default values to machine pools before validation [#4695](https://github.com/openshift/installer/pull/4695)
* Add docs about issues on UPI with Kuryr [#4649](https://github.com/openshift/installer/pull/4649)
* [Bug 1936443](https://bugzilla.redhat.com/show_bug.cgi?id=1936443): Revert "baremetal: send full ignition to masters" [#4722](https://github.com/openshift/installer/pull/4722)
* kubevirt platfrom validate permissions [#4720](https://github.com/openshift/installer/pull/4720)
* Transition responsibility for CEO asset creation and placement [#4691](https://github.com/openshift/installer/pull/4691)
* [Bug 1930240](https://bugzilla.redhat.com/show_bug.cgi?id=1930240): baremetal: Set missing IP in clouds.yaml [#4702](https://github.com/openshift/installer/pull/4702)
* openstack: add networking quota checks [#4481](https://github.com/openshift/installer/pull/4481)
* docs/user/azure: add resourceGroupName customization [#4728](https://github.com/openshift/installer/pull/4728)
* cmd/openshift-install: fix dropped error [#4681](https://github.com/openshift/installer/pull/4681)
* : Removed '0' from machineset name [#4723](https://github.com/openshift/installer/pull/4723)
* vsphere: Validate vcenter user input to match RFC standards [#4708](https://github.com/openshift/installer/pull/4708)
* [Bug 1926364](https://bugzilla.redhat.com/show_bug.cgi?id=1926364): baremetal: update terraform diagnosis for API timeout [#4715](https://github.com/openshift/installer/pull/4715)
* Adjust master-update.fcc to the new ceo render secret structure [#4712](https://github.com/openshift/installer/pull/4712)
* [Bug 1924474](https://bugzilla.redhat.com/show_bug.cgi?id=1924474): upgrade gogo/protobuf to v1.3.2 and k8s.io/api to v0.20.1 [#4716](https://github.com/openshift/installer/pull/4716)
* [Bug 1923038](https://bugzilla.redhat.com/show_bug.cgi?id=1923038): OpenStack: cache cloud info [#4606](https://github.com/openshift/installer/pull/4606)
* [Bug 1894774](https://bugzilla.redhat.com/show_bug.cgi?id=1894774): openstack: Document setting affinity for workers [#4687](https://github.com/openshift/installer/pull/4687)
* [Bug 1932799](https://bugzilla.redhat.com/show_bug.cgi?id=1932799): baremetal: always use API VIP for installer communication [#4692](https://github.com/openshift/installer/pull/4692)
* [Bug 1880758](https://bugzilla.redhat.com/show_bug.cgi?id=1880758): Replace description to a more meaningful one [#4636](https://github.com/openshift/installer/pull/4636)
* doc: openstack/IPI - Provider Networks [#4646](https://github.com/openshift/installer/pull/4646)
* [Bug 1868755](https://bugzilla.redhat.com/show_bug.cgi?id=1868755): vsphereprivate: tf plugin to no longer error if no network found. [#4678](https://github.com/openshift/installer/pull/4678)
* [Bug 1932789](https://bugzilla.redhat.com/show_bug.cgi?id=1932789): Fix proxy validation when specified with port. [#4694](https://github.com/openshift/installer/pull/4694)
* [Bug 1873079](https://bugzilla.redhat.com/show_bug.cgi?id=1873079): openstack: restrict SSH to machineNetwork CIDR [#4659](https://github.com/openshift/installer/pull/4659)
* Enable bootkube compatibility for ceo rendering improvements [#4686](https://github.com/openshift/installer/pull/4686)
* OpenStack: Stop using deprecated interpolation syntax [#4679](https://github.com/openshift/installer/pull/4679)
* baremetal: automatic UEFI secure boot configuration [#4675](https://github.com/openshift/installer/pull/4675)
* use vendored mockgen for generating mock clients [#4662](https://github.com/openshift/installer/pull/4662)
* docs/aws-iam: improving the concepts for Account root user and IAM user [#4556](https://github.com/openshift/installer/pull/4556)
* Make copies of machine pools in machines asset [#4666](https://github.com/openshift/installer/pull/4666)
* docs: fix small typo in ignition url [#4685](https://github.com/openshift/installer/pull/4685)
* pkg/metrics/builder: fix test errors [#4028](https://github.com/openshift/installer/pull/4028)
* [Bug 1925291](https://bugzilla.redhat.com/show_bug.cgi?id=1925291): baremetal: include netmask in DNSMasq dhcp range [#4639](https://github.com/openshift/installer/pull/4639)
* baremetal:  pass an sshKey to ironic [#4677](https://github.com/openshift/installer/pull/4677)
* openstack: Test AZ Machines generation [#4473](https://github.com/openshift/installer/pull/4473)
* [Bug 1910067](https://bugzilla.redhat.com/show_bug.cgi?id=1910067): openstack UPI: Set the API microversion when operating openstack server groups [#4375](https://github.com/openshift/installer/pull/4375)
* baremetal: sync baremetal-operator [#4669](https://github.com/openshift/installer/pull/4669)
* [Bug 1917931](https://bugzilla.redhat.com/show_bug.cgi?id=1917931): Fix GCP openssl not found error [#4656](https://github.com/openshift/installer/pull/4656)
* openstack: allow for fewer than 3 masters [#4672](https://github.com/openshift/installer/pull/4672)
* proxy: Check if proxies are in cluster and service networks [#4670](https://github.com/openshift/installer/pull/4670)
* update ci image references [#4661](https://github.com/openshift/installer/pull/4661)
* Bump bootstrap in place MCS master ignition to v3_2 [#4668](https://github.com/openshift/installer/pull/4668)
* bootstrap: Ensure temp compat for old and new ceo secret structure [#4667](https://github.com/openshift/installer/pull/4667)
* Stream metadata prep [#4576](https://github.com/openshift/installer/pull/4576)
* vSphere: mark imported virtual machines as template [#4660](https://github.com/openshift/installer/pull/4660)
* vendor/hashicorp: Bump terraform-provider-vsphere [#4644](https://github.com/openshift/installer/pull/4644)
* openstack: refactor getZones() to use gophercloud/utils [#4462](https://github.com/openshift/installer/pull/4462)
* [Bug 1786314](https://bugzilla.redhat.com/show_bug.cgi?id=1786314): openstack: cacert does not require system trust [#4647](https://github.com/openshift/installer/pull/4647)
* [Bug 1786314](https://bugzilla.redhat.com/show_bug.cgi?id=1786314): Bump dependencies [#4561](https://github.com/openshift/installer/pull/4561)
* upi/vsphere: Use Afterburn guestinfo for static IP and hostname config [#3533](https://github.com/openshift/installer/pull/3533)
* [Bug 1928537](https://bugzilla.redhat.com/show_bug.cgi?id=1928537): bump ignition to v3_2 [#4653](https://github.com/openshift/installer/pull/4653)
* update iptables call with sudo [#4623](https://github.com/openshift/installer/pull/4623)
* Updating ose-installer-artifacts builder & base images to be consistent with ART [#4631](https://github.com/openshift/installer/pull/4631)
* Cleanup argument usage in bootkube.sh for ceo [#4609](https://github.com/openshift/installer/pull/4609)
* Updating ose-baremetal-installer builder & base images to be consistent with ART [#4630](https://github.com/openshift/installer/pull/4630)
* [Bug 1924701](https://bugzilla.redhat.com/show_bug.cgi?id=1924701): Fix FIP detach from Router [#4637](https://github.com/openshift/installer/pull/4637)
* Updating ose-installer builder & base images to be consistent with ART [#4629](https://github.com/openshift/installer/pull/4629)
* aws/session.go: include another internal provider name for static creds [#4655](https://github.com/openshift/installer/pull/4655)
* [Bug 1873649](https://bugzilla.redhat.com/show_bug.cgi?id=1873649): Validate noProxy input and add prefix for proxy urls [#4632](https://github.com/openshift/installer/pull/4632)
* asset: move common bootstrap ignition code into a helper type [#4652](https://github.com/openshift/installer/pull/4652)
* Add bootstrap-in-place files to bootstrap-in-place-for-live-iso.ign [#4651](https://github.com/openshift/installer/pull/4651)
* Workaround golang linux/arm64 link error [#4243](https://github.com/openshift/installer/pull/4243)
* OWNERS: Remove ehashman and asalkeld from azure reviewers [#4531](https://github.com/openshift/installer/pull/4531)
* vSphere: Updating Privileges, roles and permissions [#4466](https://github.com/openshift/installer/pull/4466)
* aws: support more auth options in manual mode [#4596](https://github.com/openshift/installer/pull/4596)
* Single Node deployment with bootstrap-in-place [#4482](https://github.com/openshift/installer/pull/4482)
* [Bug 1916593](https://bugzilla.redhat.com/show_bug.cgi?id=1916593): OpenStack UPI: Tag all resources with clusterID [#4622](https://github.com/openshift/installer/pull/4622)
* [Bug 1912571](https://bugzilla.redhat.com/show_bug.cgi?id=1912571): libvirt: support setting network dnsmasq options through the install config [#4494](https://github.com/openshift/installer/pull/4494)
* [Bug 1924140](https://bugzilla.redhat.com/show_bug.cgi?id=1924140): fix a typo in an env variable name [#4608](https://github.com/openshift/installer/pull/4608)
* machines/openstack: re-enable external clientOpts [#4638](https://github.com/openshift/installer/pull/4638)
* vSphere: add missing destroy OWNERS & update OWNERS_ALIASES [#4581](https://github.com/openshift/installer/pull/4581)
* Fix OWNERS for openstack [#4641](https://github.com/openshift/installer/pull/4641)
* data/rhcos.json: Update boot images [#4633](https://github.com/openshift/installer/pull/4633)
* Add controlPlaneTopology to infrastructure manifest [#4497](https://github.com/openshift/installer/pull/4497)
* [Full changelog](https://github.com/openshift/installer/compare/b406013d9ee4ae679ca4a3ea39a494a54e39fd77...45c6c1d018280e88e989ec066918f0d93afd3535)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/a60d493e45aa9d3c0391297fd77cb168092fed35)

* [Bug 1954177](https://bugzilla.redhat.com/show_bug.cgi?id=1954177): Update mao dependency for webhook v1 changes [#151](https://github.com/openshift/cluster-api-provider-baremetal/pull/151)
* [Bug 1949316](https://bugzilla.redhat.com/show_bug.cgi?id=1949316): Update BMO vendor to v0.0.0-20210303141721-86a42dcb0150 [#149](https://github.com/openshift/cluster-api-provider-baremetal/pull/149)
* [Bug 1857008](https://bugzilla.redhat.com/show_bug.cgi?id=1857008): Set the machine instance state annotation [#142](https://github.com/openshift/cluster-api-provider-baremetal/pull/142)
* Updating baremetal-machine-controller builder & base images to be consistent with ART [#135](https://github.com/openshift/cluster-api-provider-baremetal/pull/135)
* Updating baremetal-machine-controller builder & base images to be consistent with ART [#121](https://github.com/openshift/cluster-api-provider-baremetal/pull/121)
* Changing the default behaviour of the CAPBM to request hard reboot [#138](https://github.com/openshift/cluster-api-provider-baremetal/pull/138)
* add stbenjam to owners file [#141](https://github.com/openshift/cluster-api-provider-baremetal/pull/141)
* stop generating CRDs for provider spec and status [#140](https://github.com/openshift/cluster-api-provider-baremetal/pull/140)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/6d86e627a0150115deffbba726b56e04e6b7ca0e...a60d493e45aa9d3c0391297fd77cb168092fed35)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/02a2d3cf8747de12f8f845575a11b7dd4519046d)

* [Bug 2000442](https://bugzilla.redhat.com/show_bug.cgi?id=2000442): Add LIVE_ISO_FORCE_PERSISTENT_BOOT_DEVICE variable [#174](https://github.com/openshift/baremetal-operator/pull/174)
* [Bug 1972426](https://bugzilla.redhat.com/show_bug.cgi?id=1972426): Don't deprovision provisioned host due to error [#158](https://github.com/openshift/baremetal-operator/pull/158)
* [Bug 1969487](https://bugzilla.redhat.com/show_bug.cgi?id=1969487): Disable RAID for all drivers [#153](https://github.com/openshift/baremetal-operator/pull/153)
* [Bug 1969487](https://bugzilla.redhat.com/show_bug.cgi?id=1969487): Disable raid feature for iRMC server [#152](https://github.com/openshift/baremetal-operator/pull/152)
* [Bug 1969903](https://bugzilla.redhat.com/show_bug.cgi?id=1969903): Increase the default $BMO_CONCURRENCY for scale [#151](https://github.com/openshift/baremetal-operator/pull/151)
* [Bug 1965182](https://bugzilla.redhat.com/show_bug.cgi?id=1965182): IRMC fix missing IPMI credentials in node driver_info [#149](https://github.com/openshift/baremetal-operator/pull/149)
* [Bug 1960554](https://bugzilla.redhat.com/show_bug.cgi?id=1960554): config: use rbacv1 instead of rbacv1beta1 [#147](https://github.com/openshift/baremetal-operator/pull/147)
* [Bug 1956607](https://bugzilla.redhat.com/show_bug.cgi?id=1956607): Fix resources added to 0000_30_baremetal-operator_01_baremetalhost.crd.yaml [#146](https://github.com/openshift/baremetal-operator/pull/146)
* [Bug 1951671](https://bugzilla.redhat.com/show_bug.cgi?id=1951671): Lazily update Node image options in Ironic [#145](https://github.com/openshift/baremetal-operator/pull/145)
* [Bug 1949898](https://bugzilla.redhat.com/show_bug.cgi?id=1949898): modify power_interface for irmc [#144](https://github.com/openshift/baremetal-operator/pull/144)
* Merge upstream 2021-04-06 [#142](https://github.com/openshift/baremetal-operator/pull/142)
* Merge upstream 2021-03-30 [#139](https://github.com/openshift/baremetal-operator/pull/139)
* Updating ose-baremetal-operator builder & base images to be consistent with ART [#136](https://github.com/openshift/baremetal-operator/pull/136)
* [Bug 1941636](https://bugzilla.redhat.com/show_bug.cgi?id=1941636): BM worker nodes deployment with virtual media failed while trying to clean raid [#138](https://github.com/openshift/baremetal-operator/pull/138)
* Copy generated BMH CRD to /manifests directory for CVO to install it [#135](https://github.com/openshift/baremetal-operator/pull/135)
* Generate BMH CRD with annotations needed for OpenShift [#134](https://github.com/openshift/baremetal-operator/pull/134)
* Merge upstream 20210311 [#133](https://github.com/openshift/baremetal-operator/pull/133)
* [Bug 1927678](https://bugzilla.redhat.com/show_bug.cgi?id=1927678): Backporting BMO extensions to support different reboot modes [#128](https://github.com/openshift/baremetal-operator/pull/128)
* Remove yum install genisoimage from Dockerfile.ocp [#126](https://github.com/openshift/baremetal-operator/pull/126)
* Merge upstream 2021-02-11 [#125](https://github.com/openshift/baremetal-operator/pull/125)
* Updating ose-baremetal-operator builder & base images to be consistent with ART [#124](https://github.com/openshift/baremetal-operator/pull/124)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/e36cbc13f82e290ca5f525a4da0fab516808d113...02a2d3cf8747de12f8f845575a11b7dd4519046d)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/710cb737702d9a13b3cfeead4386bd9a7fa9435a)

* [Bug 2059584](https://bugzilla.redhat.com/show_bug.cgi?id=2059584): Ignore VIPs in node-ip show [#172](https://github.com/openshift/baremetal-runtimecfg/pull/172)
* [Bug 2053720](https://bugzilla.redhat.com/show_bug.cgi?id=2053720): Avoid dynamically allocated port range for haproxy [#171](https://github.com/openshift/baremetal-runtimecfg/pull/171)
* [Bug 2050288](https://bugzilla.redhat.com/show_bug.cgi?id=2050288): Add delay after sending bootstrap stop and start messages [#170](https://github.com/openshift/baremetal-runtimecfg/pull/170)
* [Bug 1996573](https://bugzilla.redhat.com/show_bug.cgi?id=1996573): CoreDNS Corefile hosts - add support for dual-stack [#149](https://github.com/openshift/baremetal-runtimecfg/pull/149)
* [Bug 1886572](https://bugzilla.redhat.com/show_bug.cgi?id=1886572): Calculate keepalived priority for ingress [#141](https://github.com/openshift/baremetal-runtimecfg/pull/141)
* [Bug 1924476](https://bugzilla.redhat.com/show_bug.cgi?id=1924476): handle CVE-2021-3121 [#139](https://github.com/openshift/baremetal-runtimecfg/pull/139)
* Remove Brad from OWNERS [#142](https://github.com/openshift/baremetal-runtimecfg/pull/142)
* [Bug 1949859](https://bugzilla.redhat.com/show_bug.cgi?id=1949859): Add Ironic healthcheck to bootstrap keepalived checks [#135](https://github.com/openshift/baremetal-runtimecfg/pull/135)
* [Bug 1960716](https://bugzilla.redhat.com/show_bug.cgi?id=1960716): Log the output of render operations [#138](https://github.com/openshift/baremetal-runtimecfg/pull/138)
* [Bug 1957708](https://bugzilla.redhat.com/show_bug.cgi?id=1957708): Keepalived- verify that unicast peers list isn't empty on master nodes [#137](https://github.com/openshift/baremetal-runtimecfg/pull/137)
* Remove etcd name logic [#134](https://github.com/openshift/baremetal-runtimecfg/pull/134)
* Updating baremetal-runtimecfg builder & base images to be consistent with ART [#131](https://github.com/openshift/baremetal-runtimecfg/pull/131)
* Add node resolution to corednsmonitor [#129](https://github.com/openshift/baremetal-runtimecfg/pull/129)
* [Bug 1939740](https://bugzilla.redhat.com/show_bug.cgi?id=1939740): sort AddressesDefault by ifindex and IPv4/IPv6 preference [#130](https://github.com/openshift/baremetal-runtimecfg/pull/130)
* Build all commands at once in Dockerfiles [#127](https://github.com/openshift/baremetal-runtimecfg/pull/127)
* Sort node-ip addresses based on default route priority [#125](https://github.com/openshift/baremetal-runtimecfg/pull/125)
* Delete DNS-VIP and DNSVirtualRouterID [#124](https://github.com/openshift/baremetal-runtimecfg/pull/124)
* Switch Dockerfile to new image registry [#126](https://github.com/openshift/baremetal-runtimecfg/pull/126)
* Add dnsmasqmonitor [#118](https://github.com/openshift/baremetal-runtimecfg/pull/118)
* Updating baremetal-runtimecfg builder & base images to be consistent with ART [#120](https://github.com/openshift/baremetal-runtimecfg/pull/120)
* Move to quay.io dhcp image to avoid Dockerhub limits [#113](https://github.com/openshift/baremetal-runtimecfg/pull/113)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/9c5da32ba602e5881178e56269b0506fcb54ff92...710cb737702d9a13b3cfeead4386bd9a7fa9435a)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/41ff67edf43f0304d1482882f85e0069f175d521)

* [Bug 2066760](https://bugzilla.redhat.com/show_bug.cgi?id=2066760): Add TMOUT env to debug node pod [#1095](https://github.com/openshift/oc/pull/1095)
* [Bug 2039762](https://bugzilla.redhat.com/show_bug.cgi?id=2039762): Remove `git://` from new-app tests [#1023](https://github.com/openshift/oc/pull/1023)
* [Bug 2053223](https://bugzilla.redhat.com/show_bug.cgi?id=2053223): Fix mirroring images that have dots in their namespace [#1069](https://github.com/openshift/oc/pull/1069)
* [Bug 2038931](https://bugzilla.redhat.com/show_bug.cgi?id=2038931): properly handle --dry-run=server [#1017](https://github.com/openshift/oc/pull/1017)
* [Bug 2004193](https://bugzilla.redhat.com/show_bug.cgi?id=2004193): Registry mirror panic [#926](https://github.com/openshift/oc/pull/926)
* Add kevinrizza as catalog-approver [#921](https://github.com/openshift/oc/pull/921)
* [Bug 1992639](https://bugzilla.redhat.com/show_bug.cgi?id=1992639): revert incorrect allowance of ssh:// prefix with scp styled URLs [#898](https://github.com/openshift/oc/pull/898)
* [Bug 1974267](https://bugzilla.redhat.com/show_bug.cgi?id=1974267): make oc logs work with BuildConfig's JenkinsPipeline strategy [#867](https://github.com/openshift/oc/pull/867)
* [Bug 1954124](https://bugzilla.redhat.com/show_bug.cgi?id=1954124): deprecate storage-class annotation in favor of spec.StorageClassName [#840](https://github.com/openshift/oc/pull/840)
* [Bug 1951203](https://bugzilla.redhat.com/show_bug.cgi?id=1951203): Allow users to set a limit on ICSP file size [#818](https://github.com/openshift/oc/pull/818)
* [Bug 1968515](https://bugzilla.redhat.com/show_bug.cgi?id=1968515): set User-Agent when talking with registries [#841](https://github.com/openshift/oc/pull/841)
* [Bug 1965330](https://bugzilla.redhat.com/show_bug.cgi?id=1965330): exclude security during exctraction [#835](https://github.com/openshift/oc/pull/835)
* [Bug 1893999](https://bugzilla.redhat.com/show_bug.cgi?id=1893999): guide user to provide username with basic auth error/only password IDP and no username provided [#834](https://github.com/openshift/oc/pull/834)
* [Bug 1936904](https://bugzilla.redhat.com/show_bug.cgi?id=1936904): Insert apiVersion and Kind into `oc adm groups sync` list output [#759](https://github.com/openshift/oc/pull/759)
* [Bug 1953563](https://bugzilla.redhat.com/show_bug.cgi?id=1953563): Makefile: add verify-golang-versions [#814](https://github.com/openshift/oc/pull/814)
* [Bug 1964936](https://bugzilla.redhat.com/show_bug.cgi?id=1964936): fix error log for "oc adm catalog mirror" [#836](https://github.com/openshift/oc/pull/836)
* [Bug 1960758](https://bugzilla.redhat.com/show_bug.cgi?id=1960758): use recent pull spec for must-gather and debug [#833](https://github.com/openshift/oc/pull/833)
* [Bug 1942915](https://bugzilla.redhat.com/show_bug.cgi?id=1942915): pkg/.../create_error_template: fix error page template [#828](https://github.com/openshift/oc/pull/828)
* [Bug 1949050](https://bugzilla.redhat.com/show_bug.cgi?id=1949050): Bump k8s to 1.21 [#831](https://github.com/openshift/oc/pull/831)
* Generate docs separately for admin and non-admin users [#827](https://github.com/openshift/oc/pull/827)
* [Bug 1944581](https://bugzilla.redhat.com/show_bug.cgi?id=1944581): Preserve AuthInfo when switching projects [#692](https://github.com/openshift/oc/pull/692)
* Transfer root-image configuration to this repository [#823](https://github.com/openshift/oc/pull/823)
* Fix unit test failure [#821](https://github.com/openshift/oc/pull/821)
* [Bug 1957295](https://bugzilla.redhat.com/show_bug.cgi?id=1957295): Must gather pod should have priority class [#820](https://github.com/openshift/oc/pull/820)
* [Bug 1937020](https://bugzilla.redhat.com/show_bug.cgi?id=1937020): Releases from image streams must prefer status tag [#815](https://github.com/openshift/oc/pull/815)
* Add stress and fio packages to tools image [#771](https://github.com/openshift/oc/pull/771)
* [Bug 1949820](https://bugzilla.redhat.com/show_bug.cgi?id=1949820): Add an alias to imagestreams in top command [#810](https://github.com/openshift/oc/pull/810)
* [Bug 1937020](https://bugzilla.redhat.com/show_bug.cgi?id=1937020): `oc adm release new` should look at image stream status tags [#797](https://github.com/openshift/oc/pull/797)
* [Bug 1949050](https://bugzilla.redhat.com/show_bug.cgi?id=1949050): Update containers/image [#737](https://github.com/openshift/oc/pull/737)
* Remove tnozicka from OWNERS and clean those files too [#726](https://github.com/openshift/oc/pull/726)
* Remove `oc adm catalog build` [#787](https://github.com/openshift/oc/pull/787)
* [Bug 1890828](https://bugzilla.redhat.com/show_bug.cgi?id=1890828): Skip images that has already been deleted [#805](https://github.com/openshift/oc/pull/805)
* [Bug 1925148](https://bugzilla.redhat.com/show_bug.cgi?id=1925148): ImageRef Stream name priority increased [#768](https://github.com/openshift/oc/pull/768)
* [Bug 1946839](https://bugzilla.redhat.com/show_bug.cgi?id=1946839): Revert: Split work of oc image mirror [#780](https://github.com/openshift/oc/pull/780)
* [OSDOCS-2033](https://issues.redhat.com/browse/OSDOCS-2033): Adding examples for some CLI commands [#801](https://github.com/openshift/oc/pull/801)
* Updating generate docs output for product docs [#798](https://github.com/openshift/oc/pull/798)
* Updating oc-specific descriptions [#800](https://github.com/openshift/oc/pull/800)
* Bump 4.8 kubernetes 1 21 0 beta 1 [#773](https://github.com/openshift/oc/pull/773)
* Updating openshift-enterprise-cli builder & base images to be consistent with ART [#799](https://github.com/openshift/oc/pull/799)
* Fix usage error print [#788](https://github.com/openshift/oc/pull/788)
* Fixing oc status help example message [#791](https://github.com/openshift/oc/pull/791)
* Fix govet error after golang 1.16 bump [#796](https://github.com/openshift/oc/pull/796)
* Updating ose-cli-artifacts builder & base images to be consistent with ART [#794](https://github.com/openshift/oc/pull/794)
* Updating openshift-enterprise-cli builder & base images to be consistent with ART [#793](https://github.com/openshift/oc/pull/793)
* [Bug 1919168](https://bugzilla.redhat.com/show_bug.cgi?id=1919168): when mirroring to a file destination, mount images under the index location [#772](https://github.com/openshift/oc/pull/772)
* prevent inspect from panic-ing if pods are missing [#762](https://github.com/openshift/oc/pull/762)
* stop trying to gather metrics and other endpoints directly from pods [#763](https://github.com/openshift/oc/pull/763)
* [Bug 1874106](https://bugzilla.redhat.com/show_bug.cgi?id=1874106): Split work of oc image mirror to avoid AuthHeaderTooLong error from registry [#761](https://github.com/openshift/oc/pull/761)
* Fix unit test to use new IS [#765](https://github.com/openshift/oc/pull/765)
* [Bug 1935102](https://bugzilla.redhat.com/show_bug.cgi?id=1935102): Revert Avoid TLS cert checking when login with --insecure-skip-tls-verify=true [#757](https://github.com/openshift/oc/pull/757)
* inspect clusteroperators as a backup to must-gather if it fails [#749](https://github.com/openshift/oc/pull/749)
* pkg/cli/admin/inspect/namespace: Gather PDBs too [#750](https://github.com/openshift/oc/pull/750)
* [Bug 1880865](https://bugzilla.redhat.com/show_bug.cgi?id=1880865): Avoid TLS cert checking when login with --insecure-skip-tls-verify=true [#746](https://github.com/openshift/oc/pull/746)
* indicate how many bytes the hidden secret key was [#752](https://github.com/openshift/oc/pull/752)
* Remove old dependencies on dockerv1client and replace with newer equivalents [#745](https://github.com/openshift/oc/pull/745)
* [Bug 1928850](https://bugzilla.redhat.com/show_bug.cgi?id=1928850): update new-app help to avoid image references without registry/repository (docker.io throttling related) [#742](https://github.com/openshift/oc/pull/742)
* [Bug 1920024](https://bugzilla.redhat.com/show_bug.cgi?id=1920024): Allow debug to start with a single `--image` argument [#399](https://github.com/openshift/oc/pull/399)
* Add summary to oc must-gather [#738](https://github.com/openshift/oc/pull/738)
* [Bug 1925236](https://bugzilla.redhat.com/show_bug.cgi?id=1925236): RouteDescriber: Filter endpoints on route.Spec.Port [#730](https://github.com/openshift/oc/pull/730)
* Updating ose-cli-artifacts builder & base images to be consistent with ART [#735](https://github.com/openshift/oc/pull/735)
* [Bug 1904006](https://bugzilla.redhat.com/show_bug.cgi?id=1904006): update and clarify --dir --from-dir flags with 'oc image' [#729](https://github.com/openshift/oc/pull/729)
* Updating ose-tools builder & base images to be consistent with ART [#734](https://github.com/openshift/oc/pull/734)
* Updating openshift-enterprise-deployer builder & base images to be consistent with ART [#733](https://github.com/openshift/oc/pull/733)
* Updating openshift-enterprise-cli builder & base images to be consistent with ART [#732](https://github.com/openshift/oc/pull/732)
* upate registry.svc.ci->registry.ci [#731](https://github.com/openshift/oc/pull/731)
* add simple debug for image serve [#690](https://github.com/openshift/oc/pull/690)
* Add help text to 'oc registry login' when using --registry flag [#721](https://github.com/openshift/oc/pull/721)
* [Bug 1919032](https://bugzilla.redhat.com/show_bug.cgi?id=1919032): Fix image extract from Root Directory [#713](https://github.com/openshift/oc/pull/713)
* [Full changelog](https://github.com/openshift/oc/compare/25914b8f5892a73aa85ac242c30512da6da42298...41ff67edf43f0304d1482882f85e0069f175d521)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/c21a2f905948b8879c747da08cd8ed1c7091d43f)

* [Bug 2058270](https://bugzilla.redhat.com/show_bug.cgi?id=2058270): Remove Azure mint mode support as Active Directory Graph API will be sunset [#454](https://github.com/openshift/cloud-credential-operator/pull/454)
* [Bug 2027928](https://bugzilla.redhat.com/show_bug.cgi?id=2027928): pod-identity-webhook starts without tls [#429](https://github.com/openshift/cloud-credential-operator/pull/429)
* [Bug 2027832](https://bugzilla.redhat.com/show_bug.cgi?id=2027832): Stop putting CCO in degraded state when stale credentials are found [#428](https://github.com/openshift/cloud-credential-operator/pull/428)
* [Bug 2026098](https://bugzilla.redhat.com/show_bug.cgi?id=2026098): Check for aws status in infra platform status field before client setup [#425](https://github.com/openshift/cloud-credential-operator/pull/425)
* [Bug 1970062](https://bugzilla.redhat.com/show_bug.cgi?id=1970062): use shared session setup in ccoctl create-all [#354](https://github.com/openshift/cloud-credential-operator/pull/354)
* [Bug 1967531](https://bugzilla.redhat.com/show_bug.cgi?id=1967531): Fix ccoctl delete not removing iam roles [#351](https://github.com/openshift/cloud-credential-operator/pull/351)
* [Bug 1970062](https://bugzilla.redhat.com/show_bug.cgi?id=1970062): delete client should also use shared session function [#353](https://github.com/openshift/cloud-credential-operator/pull/353)
* [Bug 1970062](https://bugzilla.redhat.com/show_bug.cgi?id=1970062): enable shared config files for AWS SDK [#352](https://github.com/openshift/cloud-credential-operator/pull/352)
* [Bug 1960176](https://bugzilla.redhat.com/show_bug.cgi?id=1960176): Make sure credentials have newly generated azure client secret [#349](https://github.com/openshift/cloud-credential-operator/pull/349)
* [Bug 1957165](https://bugzilla.redhat.com/show_bug.cgi?id=1957165): Use gofrs/uuid for uuid generation [#350](https://github.com/openshift/cloud-credential-operator/pull/350)
* [Bug 1957446](https://bugzilla.redhat.com/show_bug.cgi?id=1957446): v1beta to v1 for the CredentialsRequest CRD [#336](https://github.com/openshift/cloud-credential-operator/pull/336)
* [Bug 1960176](https://bugzilla.redhat.com/show_bug.cgi?id=1960176): Recreate user when deleted in cloud providers [#345](https://github.com/openshift/cloud-credential-operator/pull/345)
* [Bug 1962602](https://bugzilla.redhat.com/show_bug.cgi?id=1962602): Remove log statement in frequently called function. [#343](https://github.com/openshift/cloud-credential-operator/pull/343)
* [Bug 1910396](https://bugzilla.redhat.com/show_bug.cgi?id=1910396): Add ErrorScrub utility to prevent infinite update/reconc… [#342](https://github.com/openshift/cloud-credential-operator/pull/342)
* [Bug 1864116](https://bugzilla.redhat.com/show_bug.cgi?id=1864116): Fix "unsupported platform type" log spamming on BareMetal. [#341](https://github.com/openshift/cloud-credential-operator/pull/341)
* [Bug 1958861](https://bugzilla.redhat.com/show_bug.cgi?id=1958861): back to no CSR permissions for pod-id-webhook [#340](https://github.com/openshift/cloud-credential-operator/pull/340)
* [Bug 1953077](https://bugzilla.redhat.com/show_bug.cgi?id=1953077): rework GCP passthrough permissions checking [#330](https://github.com/openshift/cloud-credential-operator/pull/330)
* [Bug 1954765](https://bugzilla.redhat.com/show_bug.cgi?id=1954765): v1beta1 to v1 mutatingwebhookconfiguration [#333](https://github.com/openshift/cloud-credential-operator/pull/333)
* [Bug 1949862](https://bugzilla.redhat.com/show_bug.cgi?id=1949862): avoid referencing object after error [#328](https://github.com/openshift/cloud-credential-operator/pull/328)
* [Bug 1954615](https://bugzilla.redhat.com/show_bug.cgi?id=1954615): do not assume result is valid after error [#335](https://github.com/openshift/cloud-credential-operator/pull/335)
* [Bug 1954865](https://bugzilla.redhat.com/show_bug.cgi?id=1954865): add priorityClass to pod-identity Deployment [#334](https://github.com/openshift/cloud-credential-operator/pull/334)
* [Bug 1952891](https://bugzilla.redhat.com/show_bug.cgi?id=1952891): Fix OpenStack clouds.yaml updating in secretannotator [#332](https://github.com/openshift/cloud-credential-operator/pull/332)
* [Bug 1949866](https://bugzilla.redhat.com/show_bug.cgi?id=1949866): use initialization structure for ID provider [#327](https://github.com/openshift/cloud-credential-operator/pull/327)
* Rename workload annotations [#329](https://github.com/openshift/cloud-credential-operator/pull/329)
* [Bug 1949218](https://bugzilla.redhat.com/show_bug.cgi?id=1949218): build and include ccoctl into image [#323](https://github.com/openshift/cloud-credential-operator/pull/323)
* [Bug 1927017](https://bugzilla.redhat.com/show_bug.cgi?id=1927017): Use file observer for Proxy CA changes [#320](https://github.com/openshift/cloud-credential-operator/pull/320)
* [Bug 1948628](https://bugzilla.redhat.com/show_bug.cgi?id=1948628): Fix ccoctl create aws iam-roles command and docs [#325](https://github.com/openshift/cloud-credential-operator/pull/325)
* [Bug 1948628](https://bugzilla.redhat.com/show_bug.cgi?id=1948628): Add aws subcommand to ccoctl and additional UX changes [#321](https://github.com/openshift/cloud-credential-operator/pull/321)
* [Bug 1946097](https://bugzilla.redhat.com/show_bug.cgi?id=1946097): oVirt credentials secret contains unnecessary "ovirt_cafile" [#317](https://github.com/openshift/cloud-credential-operator/pull/317)
* Add management workload annotations [#319](https://github.com/openshift/cloud-credential-operator/pull/319)
* [Bug 1940142](https://bugzilla.redhat.com/show_bug.cgi?id=1940142): Correct incorrect CACert in secrets created prior to 4.6 [#314](https://github.com/openshift/cloud-credential-operator/pull/314)
* installer manifests and 'all' subcommand [#311](https://github.com/openshift/cloud-credential-operator/pull/311)
* [CCO-73](https://issues.redhat.com/browse/CCO-73): Add command to delete resources created by ccoctl [#312](https://github.com/openshift/cloud-credential-operator/pull/312)
* make docs reflect reality of parameter names [#316](https://github.com/openshift/cloud-credential-operator/pull/316)
* Ccoctl docs [#307](https://github.com/openshift/cloud-credential-operator/pull/307)
* iam-roles subcommand [#306](https://github.com/openshift/cloud-credential-operator/pull/306)
* add generate-only mode for ccoctl create identity-provider [#304](https://github.com/openshift/cloud-credential-operator/pull/304)
* Updating ose-cloud-credential-operator builder & base images to be consistent with ART [#313](https://github.com/openshift/cloud-credential-operator/pull/313)
* [Bug 1927017](https://bugzilla.redhat.com/show_bug.cgi?id=1927017): Context cancel on stopped leading [#310](https://github.com/openshift/cloud-credential-operator/pull/310)
* manifests/0000_90_cloud-credential-operator_04_alertrules: Drop CloudCredentialOperatorDown [#308](https://github.com/openshift/cloud-credential-operator/pull/308)
* no error when SecretRef does not exist [#305](https://github.com/openshift/cloud-credential-operator/pull/305)
* require annotation before upgrade when in manual mode [#286](https://github.com/openshift/cloud-credential-operator/pull/286)
* report STS as a submode of Manual [#303](https://github.com/openshift/cloud-credential-operator/pull/303)
* [CCO-67](https://issues.redhat.com/browse/CCO-67): Add command to setup OpenID Connect provider [#302](https://github.com/openshift/cloud-credential-operator/pull/302)
* Add service account names to credentials request manifest [#298](https://github.com/openshift/cloud-credential-operator/pull/298)
* Add a CredentialsRequest field to store service account names [#299](https://github.com/openshift/cloud-credential-operator/pull/299)
* new binary for setting up credentials outside of cluster [#296](https://github.com/openshift/cloud-credential-operator/pull/296)
* [Bug 1927925](https://bugzilla.redhat.com/show_bug.cgi?id=1927925): spell fix user-visible string [#300](https://github.com/openshift/cloud-credential-operator/pull/300)
* [Bug 1924477](https://bugzilla.redhat.com/show_bug.cgi?id=1924477): Tag gogo/protobuf to v1.3.2 [#297](https://github.com/openshift/cloud-credential-operator/pull/297)
* Updating ose-cloud-credential-operator builder & base images to be consistent with ART [#295](https://github.com/openshift/cloud-credential-operator/pull/295)
* Add controller to cleanup stale credentials requests [#285](https://github.com/openshift/cloud-credential-operator/pull/285)
* specify Azure and GCP as supporting Manual mode [#291](https://github.com/openshift/cloud-credential-operator/pull/291)
* Add initial documentation for using AWS Security Token Service [#290](https://github.com/openshift/cloud-credential-operator/pull/290)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/e4c8b058e277bd1d92796fc8e3c15b818e30e392...c21a2f905948b8879c747da08cd8ed1c7091d43f)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/a180c2ab5c9b09746e984f4f6459b4e8cc06de82)

* [Bug 2062591](https://bugzilla.redhat.com/show_bug.cgi?id=2062591): e2e: Pin Keycloack to the legacy variant [#557](https://github.com/openshift/cluster-authentication-operator/pull/557)
* [Bug 1997906](https://bugzilla.redhat.com/show_bug.cgi?id=1997906): csr request: use generate names to prevent getting stuck waiting for a cert [#494](https://github.com/openshift/cluster-authentication-operator/pull/494)
* [Bug 2003632](https://bugzilla.redhat.com/show_bug.cgi?id=2003632): manifests, bindata: explicitely set runAsUser for operator and operand [#484](https://github.com/openshift/cluster-authentication-operator/pull/484)
* [Bug 2003946](https://bugzilla.redhat.com/show_bug.cgi?id=2003946): Deploy PDB to prevent more than one replica going unavailable [#488](https://github.com/openshift/cluster-authentication-operator/pull/488)
* [Bug 1989587](https://bugzilla.redhat.com/show_bug.cgi?id=1989587): pkg/operator: Add deprecated stale status [#471](https://github.com/openshift/cluster-authentication-operator/pull/471)
* [Bug 1979303](https://bugzilla.redhat.com/show_bug.cgi?id=1979303): clear encryption conditions when there is no work to be done [#467](https://github.com/openshift/cluster-authentication-operator/pull/467)
* [Bug 1977233](https://bugzilla.redhat.com/show_bug.cgi?id=1977233): observe api-audiences for the oauth-apiserver [#459](https://github.com/openshift/cluster-authentication-operator/pull/459)
* [Bug 1969631](https://bugzilla.redhat.com/show_bug.cgi?id=1969631): encryption controllers wait for all informers before running the sync loops [#453](https://github.com/openshift/cluster-authentication-operator/pull/453)
* [Bug 1879182](https://bugzilla.redhat.com/show_bug.cgi?id=1879182): oauth-apiserver: audit policies now use 'secure-' by default [#451](https://github.com/openshift/cluster-authentication-operator/pull/451)
* [Bug 1965929](https://bugzilla.redhat.com/show_bug.cgi?id=1965929): bump lib-go to get improved performance for the CSR approver [#450](https://github.com/openshift/cluster-authentication-operator/pull/450)
* [Bug 1965929](https://bugzilla.redhat.com/show_bug.cgi?id=1965929): wire certs as the authentication means to openshift webhook authenticator [#416](https://github.com/openshift/cluster-authentication-operator/pull/416)
* [Bug 1967398](https://bugzilla.redhat.com/show_bug.cgi?id=1967398): operator: add OAuthServiceEndpointsCheckEndpointAccessibleControllerDegraded to stale conditions [#449](https://github.com/openshift/cluster-authentication-operator/pull/449)
* [Bug 1943804](https://bugzilla.redhat.com/show_bug.cgi?id=1943804): splits the encryption tests [#447](https://github.com/openshift/cluster-authentication-operator/pull/447)
* [Bug 1943804](https://bugzilla.redhat.com/show_bug.cgi?id=1943804): stub for splitting encryption tests [#446](https://github.com/openshift/cluster-authentication-operator/pull/446)
* [Bug 1950379](https://bugzilla.redhat.com/show_bug.cgi?id=1950379): routersecret: sync only the cert/key pair for the default domain [#438](https://github.com/openshift/cluster-authentication-operator/pull/438)
* [Bug 1953563](https://bugzilla.redhat.com/show_bug.cgi?id=1953563): Add .ci-operator.yaml with build_root_image [#439](https://github.com/openshift/cluster-authentication-operator/pull/439)
* [Bug 1953041](https://bugzilla.redhat.com/show_bug.cgi?id=1953041): manifests/deployment: bump cpu and memory resource requests [#444](https://github.com/openshift/cluster-authentication-operator/pull/444)
* [Bug 1955749](https://bugzilla.redhat.com/show_bug.cgi?id=1955749): OCP oauth translations for login pages [#428](https://github.com/openshift/cluster-authentication-operator/pull/428)
* [Bug 1939580](https://bugzilla.redhat.com/show_bug.cgi?id=1939580): wellknownready: delay going degraded on oauthmetadata changes [#442](https://github.com/openshift/cluster-authentication-operator/pull/442)
* [Bug 1954544](https://bugzilla.redhat.com/show_bug.cgi?id=1954544): endpoints controller: actually use the context-constrained request [#441](https://github.com/openshift/cluster-authentication-operator/pull/441)
* Rename workload annotations [#434](https://github.com/openshift/cluster-authentication-operator/pull/434)
* [Bug 1946540](https://bugzilla.redhat.com/show_bug.cgi?id=1946540): fix configuring webhook authenticators on upgrade [#435](https://github.com/openshift/cluster-authentication-operator/pull/435)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): DelegatingAuthenticationOptions TokenReview request timeout [#436](https://github.com/openshift/cluster-authentication-operator/pull/436)
* Add management workload annotations [#431](https://github.com/openshift/cluster-authentication-operator/pull/431)
* [Bug 1946540](https://bugzilla.redhat.com/show_bug.cgi?id=1946540): only configure webhook authenticators when oauth-apiservers are ready during upgrade [#433](https://github.com/openshift/cluster-authentication-operator/pull/433)
* e2e: fix the token names in tokentimeout test to match the new format [#432](https://github.com/openshift/cluster-authentication-operator/pull/432)
* extends shutdown delay duration to 10 seconds [#429](https://github.com/openshift/cluster-authentication-operator/pull/429)
* move the oauth-server deployment into a generic workloads controller [#414](https://github.com/openshift/cluster-authentication-operator/pull/414)
* oauth-apiserver: add access token inactivity timeout observer [#422](https://github.com/openshift/cluster-authentication-operator/pull/422)
* Updating ose-cluster-authentication-operator builder & base images to be consistent with ART [#421](https://github.com/openshift/cluster-authentication-operator/pull/421)
* follow up changes to clean up endpoint accessible controller [#404](https://github.com/openshift/cluster-authentication-operator/pull/404)
* [Bug 1934107](https://bugzilla.redhat.com/show_bug.cgi?id=1934107): webhook authentication: fix oauth-apiserver IP for IPv6 environments [#415](https://github.com/openshift/cluster-authentication-operator/pull/415)
* switch to v1beta1 for the p&f APIs [#393](https://github.com/openshift/cluster-authentication-operator/pull/393)
* wire openshift authentication as a webhook authenticator [#304](https://github.com/openshift/cluster-authentication-operator/pull/304)
* removes the encryption provider [#409](https://github.com/openshift/cluster-authentication-operator/pull/409)
* e2e: Pin gitlab docker image to 13.8.4-ce.0 [#413](https://github.com/openshift/cluster-authentication-operator/pull/413)
* Remove the 'authentication.operator.openshift.io/managed' annotation from user,oauth apiservices [#407](https://github.com/openshift/cluster-authentication-operator/pull/407)
* Updating ose-cluster-authentication-operator builder & base images to be consistent with ART [#406](https://github.com/openshift/cluster-authentication-operator/pull/406)
* Support non-HA mode [#391](https://github.com/openshift/cluster-authentication-operator/pull/391)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/5c93df529fa7cf9a7081d845a496aa17f92b937b...a180c2ab5c9b09746e984f4f6459b4e8cc06de82)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/7bbde4cc4ddb1d0030f23b789b4bbf48ab3ef79d)

* [Bug 1948719](https://bugzilla.redhat.com/show_bug.cgi?id=1948719): updating CA version to 1.21.0 [#203](https://github.com/openshift/kubernetes-autoscaler/pull/203)
* [Bug 1948719](https://bugzilla.redhat.com/show_bug.cgi?id=1948719): rebase on top of kubernetes/autoscaler 1.21 [#201](https://github.com/openshift/kubernetes-autoscaler/pull/201)
* [Bug 1955324](https://bugzilla.redhat.com/show_bug.cgi?id=1955324): update testing scripts to use go 1.16 [#202](https://github.com/openshift/kubernetes-autoscaler/pull/202)
* Fix build with Go 1.16 [#200](https://github.com/openshift/kubernetes-autoscaler/pull/200)
* Updating vertical-pod-autoscaler builder & base images to be consistent with ART [#199](https://github.com/openshift/kubernetes-autoscaler/pull/199)
* Housekeeping: add Chen to approvers, update to ci registry [#197](https://github.com/openshift/kubernetes-autoscaler/pull/197)
* Updating vertical-pod-autoscaler builder & base images to be consistent with ART [#193](https://github.com/openshift/kubernetes-autoscaler/pull/193)
* Updating atomic-openshift-cluster-autoscaler builder & base images to be consistent with ART [#192](https://github.com/openshift/kubernetes-autoscaler/pull/192)
* add component and subcomponent to OWNERS [#191](https://github.com/openshift/kubernetes-autoscaler/pull/191)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/8b2e494f7796639b46f9867407fe21546cfc01c3...7bbde4cc4ddb1d0030f23b789b4bbf48ab3ef79d)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/917d395f0483ba1b0f516283d9247c585039347a)

* Updating ose-cluster-autoscaler-operator builder & base images to be consistent with ART [#193](https://github.com/openshift/cluster-autoscaler-operator/pull/193)
* [Bug 2026237](https://bugzilla.redhat.com/show_bug.cgi?id=2026237): Change ClusterAutoscalerUnschedulablePods severity to info [#232](https://github.com/openshift/cluster-autoscaler-operator/pull/232)
* [Bug 1995595](https://bugzilla.redhat.com/show_bug.cgi?id=1995595): add csidrivers and csistoragecapacities to autoscaler cluster role [#220](https://github.com/openshift/cluster-autoscaler-operator/pull/220)
* [Bug 1991501](https://bugzilla.redhat.com/show_bug.cgi?id=1991501): Do not recreate CA deployment when CA CR is being deleted [#217](https://github.com/openshift/cluster-autoscaler-operator/pull/217)
* [Bug 1947785](https://bugzilla.redhat.com/show_bug.cgi?id=1947785): Move all webhooks to v1 [#202](https://github.com/openshift/cluster-autoscaler-operator/pull/202)
* [Bug 1960554](https://bugzilla.redhat.com/show_bug.cgi?id=1960554): manifests: use v1 for RBAC [#205](https://github.com/openshift/cluster-autoscaler-operator/pull/205)
* [Bug 1948719](https://bugzilla.redhat.com/show_bug.cgi?id=1948719): update controller-runtime dependency [#204](https://github.com/openshift/cluster-autoscaler-operator/pull/204)
* [Bug 1948719](https://bugzilla.redhat.com/show_bug.cgi?id=1948719): update dependencies to 1.21 [#200](https://github.com/openshift/cluster-autoscaler-operator/pull/200)
* Add management workload annotations [#198](https://github.com/openshift/cluster-autoscaler-operator/pull/198)
* [Bug 1948706](https://bugzilla.redhat.com/show_bug.cgi?id=1948706): Add IBM Cloud managed annotations to CVO manifests [#183](https://github.com/openshift/cluster-autoscaler-operator/pull/183)
* [Bug 1938467](https://bugzilla.redhat.com/show_bug.cgi?id=1938467): Fix cluster autoscaler pod requests [#201](https://github.com/openshift/cluster-autoscaler-operator/pull/201)
* [Bug 1938467](https://bugzilla.redhat.com/show_bug.cgi?id=1938467): The default cluster-autoscaler should get default cpu and memory requests if user omits them [#197](https://github.com/openshift/cluster-autoscaler-operator/pull/197)
* [Bug 1947785](https://bugzilla.redhat.com/show_bug.cgi?id=1947785): Move webhook to v1 [#199](https://github.com/openshift/cluster-autoscaler-operator/pull/199)
* install/90_alertrules: Drop ClusterAutoscalerOperatorDown [#196](https://github.com/openshift/cluster-autoscaler-operator/pull/196)
* [Bug 1923823](https://bugzilla.redhat.com/show_bug.cgi?id=1923823): Improve TLS configuration for Kube RBAC Proxy [#194](https://github.com/openshift/cluster-autoscaler-operator/pull/194)
* Add dgrigore to owners [#182](https://github.com/openshift/cluster-autoscaler-operator/pull/182)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/7658bea6c42d770029e6928c1d74ec3bf0175a49...917d395f0483ba1b0f516283d9247c585039347a)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/7cf2c50d413d323fe1fa8c2f841c752d903eac81)

* [Bug 2055279](https://bugzilla.redhat.com/show_bug.cgi?id=2055279): Calculating network stack only on supported Platforms [#248](https://github.com/openshift/cluster-baremetal-operator/pull/248)
* [Bug 2000445](https://bugzilla.redhat.com/show_bug.cgi?id=2000445): Set LIVE_ISO_FORCE_PERSISTENT_BOOT_DEVICE=Never [#194](https://github.com/openshift/cluster-baremetal-operator/pull/194)
* [Bug 1975711](https://bugzilla.redhat.com/show_bug.cgi?id=1975711): Only start static ip set if provisioning net not disabled [#166](https://github.com/openshift/cluster-baremetal-operator/pull/166)
* [Bug 1946079](https://bugzilla.redhat.com/show_bug.cgi?id=1946079): Fix network stack calculation [#158](https://github.com/openshift/cluster-baremetal-operator/pull/158)
* [Bug 1968701](https://bugzilla.redhat.com/show_bug.cgi?id=1968701): Add ironic/inspector TlsMounts to baremetal pod [#156](https://github.com/openshift/cluster-baremetal-operator/pull/156)
* [Bug 1968615](https://bugzilla.redhat.com/show_bug.cgi?id=1968615): Restrict watches to openshift-machine-api [#153](https://github.com/openshift/cluster-baremetal-operator/pull/153)
* [Bug 1946079](https://bugzilla.redhat.com/show_bug.cgi?id=1946079): Fix parsing of IPv6 APIserver IP address [#151](https://github.com/openshift/cluster-baremetal-operator/pull/151)
* [Bug 1946079](https://bugzilla.redhat.com/show_bug.cgi?id=1946079): pass IP_OPTIONS env down to the OS downloader container [#148](https://github.com/openshift/cluster-baremetal-operator/pull/148)
* [Bug 1940518](https://bugzilla.redhat.com/show_bug.cgi?id=1940518): Set default resource requests for all containers [#121](https://github.com/openshift/cluster-baremetal-operator/pull/121)
* [Bug 1952448](https://bugzilla.redhat.com/show_bug.cgi?id=1952448): Fix condition for starting the metal3StaticIpManager container [#146](https://github.com/openshift/cluster-baremetal-operator/pull/146)
* [Bug 1962592](https://bugzilla.redhat.com/show_bug.cgi?id=1962592): Use a cache URL with the .svc.cluster.local suffix [#147](https://github.com/openshift/cluster-baremetal-operator/pull/147)
* [Bug 1947293](https://bugzilla.redhat.com/show_bug.cgi?id=1947293): Document ipv6 provisioning network size limitation [#145](https://github.com/openshift/cluster-baremetal-operator/pull/145)
* [Bug 1948787](https://bugzilla.redhat.com/show_bug.cgi?id=1948787): follow up : Use ApplySecret() [#127](https://github.com/openshift/cluster-baremetal-operator/pull/127)
* Revert "Bug 1953795: Set Ironic webserver_verify_ca" [#142](https://github.com/openshift/cluster-baremetal-operator/pull/142)
* [Bug 1952448](https://bugzilla.redhat.com/show_bug.cgi?id=1952448): Update condition for starting the metal3StaticIpManager container [#140](https://github.com/openshift/cluster-baremetal-operator/pull/140)
* [Bug 1954768](https://bugzilla.redhat.com/show_bug.cgi?id=1954768): Use AdmissionRegistration v1 not v1beta1 as it is going away [#141](https://github.com/openshift/cluster-baremetal-operator/pull/141)
* [Bug 1953795](https://bugzilla.redhat.com/show_bug.cgi?id=1953795): Set Ironic webserver_verify_ca [#139](https://github.com/openshift/cluster-baremetal-operator/pull/139)
* Rename workload annotations [#130](https://github.com/openshift/cluster-baremetal-operator/pull/130)
* [Bug 1952667](https://bugzilla.redhat.com/show_bug.cgi?id=1952667): Update Readme with detailed information about the CBO [#131](https://github.com/openshift/cluster-baremetal-operator/pull/131)
* [Bug 1903700](https://bugzilla.redhat.com/show_bug.cgi?id=1903700): Fix Pod Selectors in metal3 pods created by CBO [#126](https://github.com/openshift/cluster-baremetal-operator/pull/126)
* Add management workload annotations [#124](https://github.com/openshift/cluster-baremetal-operator/pull/124)
* [Bug 1948787](https://bugzilla.redhat.com/show_bug.cgi?id=1948787): secret.StringData is a WriteOnly convience field, stop using it to read [#125](https://github.com/openshift/cluster-baremetal-operator/pull/125)
* Updating ose-cluster-baremetal-operator builder & base images to be consistent with ART [#123](https://github.com/openshift/cluster-baremetal-operator/pull/123)
* Use BMH manifest provided by openshift/baremetal-operator [#122](https://github.com/openshift/cluster-baremetal-operator/pull/122)
* Use the webhook for CR validation [#84](https://github.com/openshift/cluster-baremetal-operator/pull/84)
* Support TLS for ironic and inspector [#80](https://github.com/openshift/cluster-baremetal-operator/pull/80)
* Ensure WATCH_NAMESPACE is always set whether enabled or not [#120](https://github.com/openshift/cluster-baremetal-operator/pull/120)
* Create a webhook for CR validation [#87](https://github.com/openshift/cluster-baremetal-operator/pull/87)
* Update BMH CRD [#118](https://github.com/openshift/cluster-baremetal-operator/pull/118)
* Only set IMAGES_JSON if not previously set [#116](https://github.com/openshift/cluster-baremetal-operator/pull/116)
* [Bug 1885349](https://bugzilla.redhat.com/show_bug.cgi?id=1885349): Inject proxy environment variables everywhere [#109](https://github.com/openshift/cluster-baremetal-operator/pull/109)
* Simplify the rbac roles under common groups if the verbs are the same [#113](https://github.com/openshift/cluster-baremetal-operator/pull/113)
* Allow BMO to watch all Namespaces [#106](https://github.com/openshift/cluster-baremetal-operator/pull/106)
* Add a couple more linters and fix some issues raised [#108](https://github.com/openshift/cluster-baremetal-operator/pull/108)
* Remove the CBO down alert [#111](https://github.com/openshift/cluster-baremetal-operator/pull/111)
* Fix annotations for the prometheus manifests [#110](https://github.com/openshift/cluster-baremetal-operator/pull/110)
* [Bug 1927068](https://bugzilla.redhat.com/show_bug.cgi?id=1927068): provisioning: configure DHCP range with netmask [#104](https://github.com/openshift/cluster-baremetal-operator/pull/104)
* Add POD_NAMESPACE env variable to bmo container [#107](https://github.com/openshift/cluster-baremetal-operator/pull/107)
* [Bug 1906102](https://bugzilla.redhat.com/show_bug.cgi?id=1906102): Add standard metrics support for CBO [#26](https://github.com/openshift/cluster-baremetal-operator/pull/26)
* Update BMH CRD from metal3-io/baremetal-operator [#105](https://github.com/openshift/cluster-baremetal-operator/pull/105)
* Updating ose-cluster-baremetal-operator builder & base images to be consistent with ART [#101](https://github.com/openshift/cluster-baremetal-operator/pull/101)
* Update bmh crd [#100](https://github.com/openshift/cluster-baremetal-operator/pull/100)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/f73e5fcb432e4b847cddec5ce8570f8c5c32e902...7cf2c50d413d323fe1fa8c2f841c752d903eac81)


### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/1af395b7881d951a824858f5d393357609bddbf0)

* [Bug 1953563](https://bugzilla.redhat.com/show_bug.cgi?id=1953563): Add .ci-operator.yaml with build_root_image [#60](https://github.com/openshift/cluster-bootstrap/pull/60)
* [Bug 1951639](https://bugzilla.redhat.com/show_bug.cgi?id=1951639): Add --tear-down-delay and --tear-down-termination-timeout [#58](https://github.com/openshift/cluster-bootstrap/pull/58)
* Updating ose-cluster-bootstrap builder & base images to be consistent with ART [#54](https://github.com/openshift/cluster-bootstrap/pull/54)
* [Bug 1933263](https://bugzilla.redhat.com/show_bug.cgi?id=1933263): bump(library-go) [#56](https://github.com/openshift/cluster-bootstrap/pull/56)
* allow bootstrapping to create SCCs [#55](https://github.com/openshift/cluster-bootstrap/pull/55)
* Single Node deployment with bootstrap-in-place [#51](https://github.com/openshift/cluster-bootstrap/pull/51)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/6665cae3374c18d466f11c9e0b8e41a61fcb0819...1af395b7881d951a824858f5d393357609bddbf0)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/c1022410bf9a000e84d9764f8e8a5cfa35cfa452)

* [Bug 1957822](https://bugzilla.redhat.com/show_bug.cgi?id=1957822): bump o/api to get the apiserver.TLSProfile doc update [#206](https://github.com/openshift/cluster-config-operator/pull/206)
* [Bug 1960339](https://bugzilla.redhat.com/show_bug.cgi?id=1960339): openshift-user-critical: unset globalDefault [#205](https://github.com/openshift/cluster-config-operator/pull/205)
* bump(*): openshift/api to pickup updated CRD's [#203](https://github.com/openshift/cluster-config-operator/pull/203)
* [Bug 1953563](https://bugzilla.redhat.com/show_bug.cgi?id=1953563): Add .ci-operator.yaml with build_root_image [#198](https://github.com/openshift/cluster-config-operator/pull/198)
* [Bug 1960339](https://bugzilla.redhat.com/show_bug.cgi?id=1960339): manifests: add preemptionPolicy for openshift-user-critical [#202](https://github.com/openshift/cluster-config-operator/pull/202)
* [Bug 1947803](https://bugzilla.redhat.com/show_bug.cgi?id=1947803): quota: switch to v1 crd [#201](https://github.com/openshift/cluster-config-operator/pull/201)
* Rename workload annotations [#194](https://github.com/openshift/cluster-config-operator/pull/194)
* [Bug 1950113](https://bugzilla.redhat.com/show_bug.cgi?id=1950113): vendor: bump to the latest openshift/api [#199](https://github.com/openshift/cluster-config-operator/pull/199)
* [Bug 1878199](https://bugzilla.redhat.com/show_bug.cgi?id=1878199): remove log level normalizer [#197](https://github.com/openshift/cluster-config-operator/pull/197)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): DelegatingAuthenticationOptions TokenReview request timeout [#195](https://github.com/openshift/cluster-config-operator/pull/195)
* [Bug 1947800](https://bugzilla.redhat.com/show_bug.cgi?id=1947800): Bump openshift/api (and Kube 1.21 release) [#192](https://github.com/openshift/cluster-config-operator/pull/192)
* Add management workload annotations [#190](https://github.com/openshift/cluster-config-operator/pull/190)
* [Bug 1949145](https://bugzilla.redhat.com/show_bug.cgi?id=1949145): Add missing annotations to upc [#193](https://github.com/openshift/cluster-config-operator/pull/193)
* [Bug 1949145](https://bugzilla.redhat.com/show_bug.cgi?id=1949145): Add user facing priority class [#191](https://github.com/openshift/cluster-config-operator/pull/191)
* Add IBM Cloud managed annotations to CVO manifests [#166](https://github.com/openshift/cluster-config-operator/pull/166)
* pkg/operator/kube_cloud_config: Fix "kuberneted" -> "Kubernetes" doc typo [#172](https://github.com/openshift/cluster-config-operator/pull/172)
* [Bug 1901535](https://bugzilla.redhat.com/show_bug.cgi?id=1901535): Update openshift/api dependency [#187](https://github.com/openshift/cluster-config-operator/pull/187)
* Mark operator pod as system-cluster-critical [#184](https://github.com/openshift/cluster-config-operator/pull/184)
* Updating ose-cluster-config-operator builder & base images to be consistent with ART [#188](https://github.com/openshift/cluster-config-operator/pull/188)
* Updating ose-cluster-config-operator builder & base images to be consistent with ART [#182](https://github.com/openshift/cluster-config-operator/pull/182)
* bump openshift/api to support new field controlPlaneToplogy in [#175](https://github.com/openshift/cluster-config-operator/pull/175)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/07e059a6b0c98e98d71f0c08dc741605e2431914...c1022410bf9a000e84d9764f8e8a5cfa35cfa452)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/07b3f81036401073d68eb1ef152b96ab5e5a2fc6)

* [Bug 1940940](https://bugzilla.redhat.com/show_bug.cgi?id=1940940): Deploy multiple operand replicas [#88](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/88)
* [Bug 1961538](https://bugzilla.redhat.com/show_bug.cgi?id=1961538): manifests/05_operator_rbac: Drop the unused namespace property [#87](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/87)
* [Bug 1951066](https://bugzilla.redhat.com/show_bug.cgi?id=1951066): Remove exclude annotation from manifests to include in ROKS [#81](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/81)
* Add management workload annotations [#84](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/84)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): DelegatingAuthenticationOptions TokenReview request timeout [#86](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/86)
* [Bug 1924483](https://bugzilla.redhat.com/show_bug.cgi?id=1924483): Bump Kubernetes to 1.21 [#85](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/85)
* Updating ose-cluster-csi-snapshot-controller-operator builder & base images to be consistent with ART [#83](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/83)
* [Bug 1926444](https://bugzilla.redhat.com/show_bug.cgi?id=1926444): Fix installation on ROKS [#79](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/79)
* Updating ose-cluster-csi-snapshot-controller-operator builder & base images to be consistent with ART [#77](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/77)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/fc036b59b83b25ac6d1050aee0a172abb54502c6...07b3f81036401073d68eb1ef152b96ab5e5a2fc6)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/fdb2ebecdeb992444964f84fd0b5c17f37d80536)

* [Bug 1974978](https://bugzilla.redhat.com/show_bug.cgi?id=1974978): status: Watch daemonsets [#284](https://github.com/openshift/cluster-dns-operator/pull/284)
* [Bug 1951853](https://bugzilla.redhat.com/show_bug.cgi?id=1951853): Bump openshift/api for node placement API godoc fix [#278](https://github.com/openshift/cluster-dns-operator/pull/278)
* [Bug 1939723](https://bugzilla.redhat.com/show_bug.cgi?id=1939723): Don't check node-resolver status for DNS Degraded condition [#273](https://github.com/openshift/cluster-dns-operator/pull/273)
* [Bug 1966116](https://bugzilla.redhat.com/show_bug.cgi?id=1966116): Corefile: Set bufsize to 512 bytes for all servers [#276](https://github.com/openshift/cluster-dns-operator/pull/276)
* [Bug 1952174](https://bugzilla.redhat.com/show_bug.cgi?id=1952174): status: Report old versions while rolling out new [#274](https://github.com/openshift/cluster-dns-operator/pull/274)
* [Bug 1952174](https://bugzilla.redhat.com/show_bug.cgi?id=1952174): status: Report old versions while progressing [#269](https://github.com/openshift/cluster-dns-operator/pull/269)
* Rename workload annotations [#264](https://github.com/openshift/cluster-dns-operator/pull/264)
* [Bug 1948232](https://bugzilla.redhat.com/show_bug.cgi?id=1948232): Fix for daemonset's maxSurge and service's ipFamilies and ipFamilyPolicy defaulting [#263](https://github.com/openshift/cluster-dns-operator/pull/263)
* [Bug 1950270](https://bugzilla.redhat.com/show_bug.cgi?id=1950270): go.mod: Update openshift/api & go version [#265](https://github.com/openshift/cluster-dns-operator/pull/265)
* [Bug 1953280](https://bugzilla.redhat.com/show_bug.cgi?id=1953280): node-resolver: Set owner reference on the dns [#270](https://github.com/openshift/cluster-dns-operator/pull/270)
* [Bug 1946929](https://bugzilla.redhat.com/show_bug.cgi?id=1946929): Fix status reporting for default node placement [#262](https://github.com/openshift/cluster-dns-operator/pull/262)
* [Bug 1949361](https://bugzilla.redhat.com/show_bug.cgi?id=1949361): Corefile: Enable bufsize plugin for all servers [#266](https://github.com/openshift/cluster-dns-operator/pull/266)
* Add management workload annotations [#259](https://github.com/openshift/cluster-dns-operator/pull/259)
* [Bug 1946893](https://bugzilla.redhat.com/show_bug.cgi?id=1946893): update inconsistent error message for AvailableCondition [#258](https://github.com/openshift/cluster-dns-operator/pull/258)
* [Bug 1948708](https://bugzilla.redhat.com/show_bug.cgi?id=1948708): IBM Cloud manifest profile patch [#215](https://github.com/openshift/cluster-dns-operator/pull/215)
* Bump openshift/api, controller runtime, and kube component versions [#257](https://github.com/openshift/cluster-dns-operator/pull/257)
* node-resolver: Use "kubernetes.io/os" node label [#255](https://github.com/openshift/cluster-dns-operator/pull/255)
* Updating ose-cluster-dns-operator builder & base images to be consistent with ART [#249](https://github.com/openshift/cluster-dns-operator/pull/249)
* Add node-resolver daemonset [#209](https://github.com/openshift/cluster-dns-operator/pull/209)
* [Bug 1915473](https://bugzilla.redhat.com/show_bug.cgi?id=1915473): Annotate manifests for single-node-developer cluster profile [#216](https://github.com/openshift/cluster-dns-operator/pull/216)
* [Bug 1943578](https://bugzilla.redhat.com/show_bug.cgi?id=1943578): Corefile: Use 30 second max TTL for caching of negative responses [#253](https://github.com/openshift/cluster-dns-operator/pull/253)
* [Bug 1936022](https://bugzilla.redhat.com/show_bug.cgi?id=1936022): Fix spurious reconciliation of DNS daemonset and service [#243](https://github.com/openshift/cluster-dns-operator/pull/243)
* [NE-515](https://issues.redhat.com/browse/NE-515): Alerts: Update prometheus alert rules for CoreDNS v1.8.z [#239](https://github.com/openshift/cluster-dns-operator/pull/239)
* [Bug 1884053](https://bugzilla.redhat.com/show_bug.cgi?id=1884053): Configure CoreDNS to shut down gracefully [#237](https://github.com/openshift/cluster-dns-operator/pull/237)
* Give CoreDNS access to endpointslices [#244](https://github.com/openshift/cluster-dns-operator/pull/244)
* [Bug 1934905](https://bugzilla.redhat.com/show_bug.cgi?id=1934905): Enable errors plugin for custom upstream resolvers [#241](https://github.com/openshift/cluster-dns-operator/pull/241)
* [Bug 1933761](https://bugzilla.redhat.com/show_bug.cgi?id=1933761): Set CoreDNS's cache's maximum TTL to 900 seconds [#240](https://github.com/openshift/cluster-dns-operator/pull/240)
* [NE-514](https://issues.redhat.com/browse/NE-514): Corefile: Drop deprecated kubernetes `upstream` option [#238](https://github.com/openshift/cluster-dns-operator/pull/238)
* [Bug 1919737](https://bugzilla.redhat.com/show_bug.cgi?id=1919737): Set CoreDNS readiness probe period and timeout each to 3 seconds [#234](https://github.com/openshift/cluster-dns-operator/pull/234)
* Updating ose-cluster-dns-operator builder & base images to be consistent with ART [#233](https://github.com/openshift/cluster-dns-operator/pull/233)
* Add rfredette to OWNERS [#224](https://github.com/openshift/cluster-dns-operator/pull/224)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/cf8be7b279499d5010894b8c9bf79acc9853be36...fdb2ebecdeb992444964f84fd0b5c17f37d80536)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/35672edef2c867e135b0e9378a00764b363d8ba5)

* [Bug 2008414](https://bugzilla.redhat.com/show_bug.cgi?id=2008414): pkg/operator/metriccontroller: read etcd-operator SA token rather than using prometheus [#665](https://github.com/openshift/cluster-etcd-operator/pull/665)
* [Bug 1994483](https://bugzilla.redhat.com/show_bug.cgi?id=1994483): bindata/etcd: remove unix socket from advertised list [#642](https://github.com/openshift/cluster-etcd-operator/pull/642)
* [Bug 1999777](https://bugzilla.redhat.com/show_bug.cgi?id=1999777): [release-4.8]: pkg/operator: add cluster backup upgrade controller [#652](https://github.com/openshift/cluster-etcd-operator/pull/652)
* [Bug 1993800](https://bugzilla.redhat.com/show_bug.cgi?id=1993800): Bump library-go to include backoff fix of installers [#648](https://github.com/openshift/cluster-etcd-operator/pull/648)
* [Bug 1963730](https://bugzilla.redhat.com/show_bug.cgi?id=1963730): kube-apiserver failed to load SNI cert and key [#610](https://github.com/openshift/cluster-etcd-operator/pull/610)
* [Bug 1958405](https://bugzilla.redhat.com/show_bug.cgi?id=1958405): Improve etcd service observability and health checks [#596](https://github.com/openshift/cluster-etcd-operator/pull/596)
* [Bug 1965024](https://bugzilla.redhat.com/show_bug.cgi?id=1965024): Validate the status of the etcd snapshot during backup and restore [#603](https://github.com/openshift/cluster-etcd-operator/pull/603)
* [Bug 1966813](https://bugzilla.redhat.com/show_bug.cgi?id=1966813): Update the flowchart to accommodate modified logic [#601](https://github.com/openshift/cluster-etcd-operator/pull/601)
* [Bug 1924422](https://bugzilla.redhat.com/show_bug.cgi?id=1924422): go.mod, go.sum: Replace gogo/protobuf with v1.3.2 [#608](https://github.com/openshift/cluster-etcd-operator/pull/608)
* [Bug 1963871](https://bugzilla.redhat.com/show_bug.cgi?id=1963871): bump(*): Update the go version to 1.16 [#602](https://github.com/openshift/cluster-etcd-operator/pull/602)
* [Bug 1963871](https://bugzilla.redhat.com/show_bug.cgi?id=1963871): .ci-operator.yaml: Use golang-1.15 tag [#607](https://github.com/openshift/cluster-etcd-operator/pull/607)
* [Bug 1963871](https://bugzilla.redhat.com/show_bug.cgi?id=1963871): Move back to Golang 1.15 as in o/release [#599](https://github.com/openshift/cluster-etcd-operator/pull/599)
* Revert "Bug 1957498: Update policy.v1beta1 to v1 as it is deprecated in v1.21" [#592](https://github.com/openshift/cluster-etcd-operator/pull/592)
* [Bug 1902247](https://bugzilla.redhat.com/show_bug.cgi?id=1902247): pkg/dnshelpers: cleanup dead code [#591](https://github.com/openshift/cluster-etcd-operator/pull/591)
* [Bug 1958245](https://bugzilla.redhat.com/show_bug.cgi?id=1958245): etcd/pod: print static pod revision in logs [#586](https://github.com/openshift/cluster-etcd-operator/pull/586)
* [Bug 1957498](https://bugzilla.redhat.com/show_bug.cgi?id=1957498): Update policy.v1beta1 to v1 as it is deprecated in v1.21 [#589](https://github.com/openshift/cluster-etcd-operator/pull/589)
* [Bug 1902247](https://bugzilla.redhat.com/show_bug.cgi?id=1902247): pkg/dnshelpers: fallback to spec if status is not populated for serviceNetwork [#587](https://github.com/openshift/cluster-etcd-operator/pull/587)
* docs: Initial documentation for discover init cluster along with a flowchart [#585](https://github.com/openshift/cluster-etcd-operator/pull/585)
* [Bug 1946607](https://bugzilla.redhat.com/show_bug.cgi?id=1946607): bindata/etcd: improve readinessProbe checks by dialing unix socket target [#580](https://github.com/openshift/cluster-etcd-operator/pull/580)
* [Bug 1952268](https://bugzilla.redhat.com/show_bug.cgi?id=1952268): Increase inertia duration for the EtcdMembersDegraded condition [#579](https://github.com/openshift/cluster-etcd-operator/pull/579)
* [Bug 1952684](https://bugzilla.redhat.com/show_bug.cgi?id=1952684): pkg/operator/metriccontroller: check vector length [#584](https://github.com/openshift/cluster-etcd-operator/pull/584)
* OWNERS: add lilic as reviewer [#583](https://github.com/openshift/cluster-etcd-operator/pull/583)
* [Bug 1952684](https://bugzilla.redhat.com/show_bug.cgi?id=1952684): pkg/operator/metriccontroller: dont panic on invalid response from prom client [#573](https://github.com/openshift/cluster-etcd-operator/pull/573)
* [Bug 1952266](https://bugzilla.redhat.com/show_bug.cgi?id=1952266): Don't set operator version before operands update [#576](https://github.com/openshift/cluster-etcd-operator/pull/576)
* Rename workload annotations [#569](https://github.com/openshift/cluster-etcd-operator/pull/569)
* [Bug 1953563](https://bugzilla.redhat.com/show_bug.cgi?id=1953563): Add .ci-operator.yaml with build_root_image [#574](https://github.com/openshift/cluster-etcd-operator/pull/574)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): DelegatingAuthenticationOptions TokenReview request timeout [#570](https://github.com/openshift/cluster-etcd-operator/pull/570)
* [Bug 1950934](https://bugzilla.redhat.com/show_bug.cgi?id=1950934): pkg/etcdenvvar/etcd_env.go: Sort endpoints to prevent rollout [#567](https://github.com/openshift/cluster-etcd-operator/pull/567)
* Add management workload annotations [#560](https://github.com/openshift/cluster-etcd-operator/pull/560)
* [Bug 1949418](https://bugzilla.redhat.com/show_bug.cgi?id=1949418): bump(*): vendor update [#564](https://github.com/openshift/cluster-etcd-operator/pull/564)
* [Bug 1948553](https://bugzilla.redhat.com/show_bug.cgi?id=1948553): bindata, pkg: Propagate operator log level to etcd itself [#561](https://github.com/openshift/cluster-etcd-operator/pull/561)
* vendor: bump k8s v0.21.0-rc.0 [#563](https://github.com/openshift/cluster-etcd-operator/pull/563)
* [Bug 1948040](https://bugzilla.redhat.com/show_bug.cgi?id=1948040): *: enable zap as default logger [#562](https://github.com/openshift/cluster-etcd-operator/pull/562)
* [Bug 1927942](https://bugzilla.redhat.com/show_bug.cgi?id=1927942): pkg/etcdenvvar: enable SO_REUSEADDR [#553](https://github.com/openshift/cluster-etcd-operator/pull/553)
* Updating cluster-etcd-operator builder & base images to be consistent with ART [#557](https://github.com/openshift/cluster-etcd-operator/pull/557)
* update library-go to fix tight loops [#558](https://github.com/openshift/cluster-etcd-operator/pull/558)
* [Bug 1931658](https://bugzilla.redhat.com/show_bug.cgi?id=1931658): render: refactor scaling strategies [#547](https://github.com/openshift/cluster-etcd-operator/pull/547)
* Remove deprecated render options and remove default [#552](https://github.com/openshift/cluster-etcd-operator/pull/552)
* Remove unused render command options and configuration [#549](https://github.com/openshift/cluster-etcd-operator/pull/549)
* Migrate tls bootstrap from the installer [#546](https://github.com/openshift/cluster-etcd-operator/pull/546)
* pkg/etcdenvvar: set periodical watch progress notification to 5s [#548](https://github.com/openshift/cluster-etcd-operator/pull/548)
* Manage one aggregated cert secret rather than one per cert type [#544](https://github.com/openshift/cluster-etcd-operator/pull/544)
* switch to v1beta1 for the p&f APIs [#516](https://github.com/openshift/cluster-etcd-operator/pull/516)
* Refactor creation of aggregated cert secrets [#542](https://github.com/openshift/cluster-etcd-operator/pull/542)
* [Bug 1929359](https://bugzilla.redhat.com/show_bug.cgi?id=1929359): pkg/operator/quorumguardcontroller: use cli image from release payload [#543](https://github.com/openshift/cluster-etcd-operator/pull/543)
* Improve cert controller detection and correction of invalid certs [#540](https://github.com/openshift/cluster-etcd-operator/pull/540)
* Adding single node ocp cluster support [#527](https://github.com/openshift/cluster-etcd-operator/pull/527)
* Updating cluster-etcd-operator builder & base images to be consistent with ART [#538](https://github.com/openshift/cluster-etcd-operator/pull/538)
* [Bug 1925586](https://bugzilla.redhat.com/show_bug.cgi?id=1925586): pkg/operator/metriccontroller: cleanup transports [#534](https://github.com/openshift/cluster-etcd-operator/pull/534)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/51cb8c4147c45672c9645fae39bfcc6d696adc85...35672edef2c867e135b0e9378a00764b363d8ba5)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/4aa1e6f3e0321df1109672d2d105de5a8b913cb5)

* [Bug 2074053](https://bugzilla.redhat.com/show_bug.cgi?id=2074053): Deployment annotations, runtimeClassName override and fs policy change [#767](https://github.com/openshift/cluster-image-registry-operator/pull/767)
* [Bug 2067107](https://bugzilla.redhat.com/show_bug.cgi?id=2067107): Retry on pruner failures [#761](https://github.com/openshift/cluster-image-registry-operator/pull/761)
* [Bug 2015098](https://bugzilla.redhat.com/show_bug.cgi?id=2015098): Avoid disruptions [#725](https://github.com/openshift/cluster-image-registry-operator/pull/725)
* [Bug 2004028](https://bugzilla.redhat.com/show_bug.cgi?id=2004028): Update rolling update parameters [#717](https://github.com/openshift/cluster-image-registry-operator/pull/717)
* [Bug 1973662](https://bugzilla.redhat.com/show_bug.cgi?id=1973662): Properly set custom tolerations [#696](https://github.com/openshift/cluster-image-registry-operator/pull/696)
* Updating ose-cluster-image-registry-operator builder & base images to be consistent with ART [#673](https://github.com/openshift/cluster-image-registry-operator/pull/673)
* [Bug 1918376](https://bugzilla.redhat.com/show_bug.cgi?id=1918376): Allowing system:registry to list ICSP rules [#668](https://github.com/openshift/cluster-image-registry-operator/pull/668)
* [Bug 1966459](https://bugzilla.redhat.com/show_bug.cgi?id=1966459): Use batch/v1 and policy/v1 [#691](https://github.com/openshift/cluster-image-registry-operator/pull/691)
* [Bug 1937464](https://bugzilla.redhat.com/show_bug.cgi?id=1937464): Swift: Do not modify driver config [#674](https://github.com/openshift/cluster-image-registry-operator/pull/674)
* [Bug 1952610](https://bugzilla.redhat.com/show_bug.cgi?id=1952610): Bump dependencies [#685](https://github.com/openshift/cluster-image-registry-operator/pull/685)
* [Bug 1960330](https://bugzilla.redhat.com/show_bug.cgi?id=1960330): manifests: fix selector in image-registry-operator [#688](https://github.com/openshift/cluster-image-registry-operator/pull/688)
* [Bug 1954891](https://bugzilla.redhat.com/show_bug.cgi?id=1954891): Setting PriorityClassName for pruner cronjob [#687](https://github.com/openshift/cluster-image-registry-operator/pull/687)
* [IR-181](https://issues.redhat.com/browse/IR-181): Use only one replica on single node clusters [#670](https://github.com/openshift/cluster-image-registry-operator/pull/670)
* [Bug 1945387](https://bugzilla.redhat.com/show_bug.cgi?id=1945387): Setting required pod anti-affinity rules [#681](https://github.com/openshift/cluster-image-registry-operator/pull/681)
* [Bug 1955879](https://bugzilla.redhat.com/show_bug.cgi?id=1955879): Setting user tags always when Storage is Managed [#683](https://github.com/openshift/cluster-image-registry-operator/pull/683)
* Add management workload annotations [#677](https://github.com/openshift/cluster-image-registry-operator/pull/677)
* [Bug 1954095](https://bugzilla.redhat.com/show_bug.cgi?id=1954095): Setting user provided tags on bucket creation [#679](https://github.com/openshift/cluster-image-registry-operator/pull/679)
* [Bug 1948714](https://bugzilla.redhat.com/show_bug.cgi?id=1948714): IBM Cloud manifest profile patch [#643](https://github.com/openshift/cluster-image-registry-operator/pull/643)
* [Bug 1923811](https://bugzilla.redhat.com/show_bug.cgi?id=1923811): Report ready replicas [#669](https://github.com/openshift/cluster-image-registry-operator/pull/669)
* [Bug 1944762](https://bugzilla.redhat.com/show_bug.cgi?id=1944762): Allow disruptions when operand has only one replica [#676](https://github.com/openshift/cluster-image-registry-operator/pull/676)
* [Bug 1939731](https://bugzilla.redhat.com/show_bug.cgi?id=1939731): Add PodDisruptionBudget for image-registry [#671](https://github.com/openshift/cluster-image-registry-operator/pull/671)
* Add service account names to credentials request manifest [#664](https://github.com/openshift/cluster-image-registry-operator/pull/664)
* [Bug 1933180](https://bugzilla.redhat.com/show_bug.cgi?id=1933180): Allow more node-ca unavailable replicas during upgrade [#667](https://github.com/openshift/cluster-image-registry-operator/pull/667)
* [Bug 1929654](https://bugzilla.redhat.com/show_bug.cgi?id=1929654): Creating StorageAccount V2 instead of V1 [#665](https://github.com/openshift/cluster-image-registry-operator/pull/665)
* Updating ose-cluster-image-registry-operator builder & base images to be consistent with ART [#663](https://github.com/openshift/cluster-image-registry-operator/pull/663)
* [Bug 1902076](https://bugzilla.redhat.com/show_bug.cgi?id=1902076): Checking for route status [#660](https://github.com/openshift/cluster-image-registry-operator/pull/660)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/70a85883e406641339251b5c1473e4dec7083928...4aa1e6f3e0321df1109672d2d105de5a8b913cb5)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/f03d5e4a4ed014035ef97f86c70be30c69243015)

* [Bug 2066302](https://bugzilla.redhat.com/show_bug.cgi?id=2066302): Disable keepalive for canary probe [#726](https://github.com/openshift/cluster-ingress-operator/pull/726)
* [Bug 2017708](https://bugzilla.redhat.com/show_bug.cgi?id=2017708): Change default balancing algorithm to "leastconn" [#670](https://github.com/openshift/cluster-ingress-operator/pull/670)
* [Bug 1998103](https://bugzilla.redhat.com/show_bug.cgi?id=1998103): cleanup condition metrics for deleted ingress controllers [#649](https://github.com/openshift/cluster-ingress-operator/pull/649)
* [Bug 2000414](https://bugzilla.redhat.com/show_bug.cgi?id=2000414): Configure router to use "source" for passthrough [#651](https://github.com/openshift/cluster-ingress-operator/pull/651)
* [Bug 1935058](https://bugzilla.redhat.com/show_bug.cgi?id=1935058): Set AWS session region [#623](https://github.com/openshift/cluster-ingress-operator/pull/623)
* [Bug 1960284](https://bugzilla.redhat.com/show_bug.cgi?id=1960284): Set the "local-with-fallback" service annotation [#622](https://github.com/openshift/cluster-ingress-operator/pull/622)
* [Bug 1955822](https://bugzilla.redhat.com/show_bug.cgi?id=1955822): Ingress: Mount router stats secret as a volume [#621](https://github.com/openshift/cluster-ingress-operator/pull/621)
* [Bug 1881210](https://bugzilla.redhat.com/show_bug.cgi?id=1881210): desiredNodePortService: Add port 1936 [#466](https://github.com/openshift/cluster-ingress-operator/pull/466)
* [Bug 1901648](https://bugzilla.redhat.com/show_bug.cgi?id=1901648): Canonical router hostname not correct [#610](https://github.com/openshift/cluster-ingress-operator/pull/610)
* [Bug 1954892](https://bugzilla.redhat.com/show_bug.cgi?id=1954892): canary: Add priority class to canary daemonset [#620](https://github.com/openshift/cluster-ingress-operator/pull/620)
* [Bug 1959194](https://bugzilla.redhat.com/show_bug.cgi?id=1959194): Ingress rollouts should specify minReadySeconds [#569](https://github.com/openshift/cluster-ingress-operator/pull/569)
* [Bug 1949799](https://bugzilla.redhat.com/show_bug.cgi?id=1949799): Set maximum for ingresscontroller spec.tuningOptions.threadCount to 64 [#612](https://github.com/openshift/cluster-ingress-operator/pull/612)
* [Bug 1954330](https://bugzilla.redhat.com/show_bug.cgi?id=1954330): ingress: Fix up openshift-ingress namespace reconciliation [#611](https://github.com/openshift/cluster-ingress-operator/pull/611)
* [Bug 1955854](https://bugzilla.redhat.com/show_bug.cgi?id=1955854): Compute Available and Degraded from default ingress [#607](https://github.com/openshift/cluster-ingress-operator/pull/607)
* [Bug 1900819](https://bugzilla.redhat.com/show_bug.cgi?id=1900819): Specify topology spread constraints [#577](https://github.com/openshift/cluster-ingress-operator/pull/577)
* [Bug 1954330](https://bugzilla.redhat.com/show_bug.cgi?id=1954330): Reconcile openshift-ingress namespace on upgrade [#608](https://github.com/openshift/cluster-ingress-operator/pull/608)
* Rename workload annotations [#603](https://github.com/openshift/cluster-ingress-operator/pull/603)
* [Bug 1950270](https://bugzilla.redhat.com/show_bug.cgi?id=1950270): go.mod: Update openshift/api & go version [#604](https://github.com/openshift/cluster-ingress-operator/pull/604)
* [Bug 1950978](https://bugzilla.redhat.com/show_bug.cgi?id=1950978): ingressclass: Handle ingresscontroller deletion [#605](https://github.com/openshift/cluster-ingress-operator/pull/605)
* [Bug 1950284](https://bugzilla.redhat.com/show_bug.cgi?id=1950284): Annotate services of type LoadBalancer with user tags (AWS only) [#578](https://github.com/openshift/cluster-ingress-operator/pull/578)
* [Bug 1941592](https://bugzilla.redhat.com/show_bug.cgi?id=1941592): Alerts: Fix up HAProxyDown Alert Message [#597](https://github.com/openshift/cluster-ingress-operator/pull/597)
* Updating ose-cluster-ingress-operator builder & base images to be consistent with ART [#579](https://github.com/openshift/cluster-ingress-operator/pull/579)
* [Bug 1947498](https://bugzilla.redhat.com/show_bug.cgi?id=1947498): policy v1 beta1 PodDisruptionBudget is deprecated [#602](https://github.com/openshift/cluster-ingress-operator/pull/602)
* [Bug 1949435](https://bugzilla.redhat.com/show_bug.cgi?id=1949435): ingressclass: Fix API group name in watch predicate [#600](https://github.com/openshift/cluster-ingress-operator/pull/600)
* [Bug 1949880](https://bugzilla.redhat.com/show_bug.cgi?id=1949880): ingress: Propagate GCP ProviderParameters to Status [#599](https://github.com/openshift/cluster-ingress-operator/pull/599)
* [Bug 1919151](https://bugzilla.redhat.com/show_bug.cgi?id=1919151): Azure: Log when using domain not in zone [#537](https://github.com/openshift/cluster-ingress-operator/pull/537)
* [Bug 1948716](https://bugzilla.redhat.com/show_bug.cgi?id=1948716): IBM cloud managed profile patch [#587](https://github.com/openshift/cluster-ingress-operator/pull/587)
* [Bug 1948626](https://bugzilla.redhat.com/show_bug.cgi?id=1948626): test/e2e: Make `TestRouteAdmissionPolicy` deterministic. [#598](https://github.com/openshift/cluster-ingress-operator/pull/598)
* Add management workload annotations [#595](https://github.com/openshift/cluster-ingress-operator/pull/595)
* [NE-302](https://issues.redhat.com/browse/NE-302): Add field for configuring number of HAProxy threads in router [#580](https://github.com/openshift/cluster-ingress-operator/pull/580)
* Add h2spec client subcommand [#590](https://github.com/openshift/cluster-ingress-operator/pull/590)
* configurable_route_test: Preserve ingress spec [#593](https://github.com/openshift/cluster-ingress-operator/pull/593)
* [Bug 1946788](https://bugzilla.redhat.com/show_bug.cgi?id=1946788): ingressclass: Don't set default annotation [#592](https://github.com/openshift/cluster-ingress-operator/pull/592)
* ingressclass: New controller. [#574](https://github.com/openshift/cluster-ingress-operator/pull/574)
* [NE-551](https://issues.redhat.com/browse/NE-551): Configure router to use Power of Two Random Choices with Override [#589](https://github.com/openshift/cluster-ingress-operator/pull/589)
* [Bug 1943845](https://bugzilla.redhat.com/show_bug.cgi?id=1943845): Add startup probe to the router deployment [#583](https://github.com/openshift/cluster-ingress-operator/pull/583)
* Add http/2 and gRPC test server code as new subcommands [#585](https://github.com/openshift/cluster-ingress-operator/pull/585)
* Add the new NetworkPolicy-matching label to the namespace [#586](https://github.com/openshift/cluster-ingress-operator/pull/586)
* Introduce ingress controller [#552](https://github.com/openshift/cluster-ingress-operator/pull/552)
* [NE-553](https://issues.redhat.com/browse/NE-553): Implement the PROXY protocol API [#581](https://github.com/openshift/cluster-ingress-operator/pull/581)
* Add service account names to credentials request manifest [#548](https://github.com/openshift/cluster-ingress-operator/pull/548)
* [NE-354](https://issues.redhat.com/browse/NE-354): Implement Tunable router header buffers [#576](https://github.com/openshift/cluster-ingress-operator/pull/576)
* [Bug 1907315](https://bugzilla.redhat.com/show_bug.cgi?id=1907315): Change AWS interal LB annotation to match documentation [#543](https://github.com/openshift/cluster-ingress-operator/pull/543)
* [Bug 1928931](https://bugzilla.redhat.com/show_bug.cgi?id=1928931): Update DNSRecord CRD from v1beta1 to v1 [#575](https://github.com/openshift/cluster-ingress-operator/pull/575)
* NE 484: Use ingress-operator subcommand instead of hello-openshift [#561](https://github.com/openshift/cluster-ingress-operator/pull/561)
* Use HAProxy log level "info" to enable access logs [#572](https://github.com/openshift/cluster-ingress-operator/pull/572)
* [Bug 1936030](https://bugzilla.redhat.com/show_bug.cgi?id=1936030): Fix spurious reconciliation of NodePort services [#567](https://github.com/openshift/cluster-ingress-operator/pull/567)
* NE-518 GCP: Implement GCP Internal LB Global Access option [#550](https://github.com/openshift/cluster-ingress-operator/pull/550)
* [Bug 1935528](https://bugzilla.redhat.com/show_bug.cgi?id=1935528): Canary: Use cluster-wide proxy for canary client [#565](https://github.com/openshift/cluster-ingress-operator/pull/565)
* [Bug 1934773](https://bugzilla.redhat.com/show_bug.cgi?id=1934773): Canary: Perform canary test probes over https [#562](https://github.com/openshift/cluster-ingress-operator/pull/562)
* [Bug 1933102](https://bugzilla.redhat.com/show_bug.cgi?id=1933102): Canary: Schedule canary server pods to worker and infra nodes [#560](https://github.com/openshift/cluster-ingress-operator/pull/560)
* [Bug 1932401](https://bugzilla.redhat.com/show_bug.cgi?id=1932401): Canary: Add edge termination to canary route [#556](https://github.com/openshift/cluster-ingress-operator/pull/556)
* [Bug 1914127](https://bugzilla.redhat.com/show_bug.cgi?id=1914127): Delete the ingress.openshift.io/operator finalizer [#549](https://github.com/openshift/cluster-ingress-operator/pull/549)
* [Bug 1925245](https://bugzilla.redhat.com/show_bug.cgi?id=1925245): Verify that Serivce resources have idle annotations from corresponding Endpoint resources, should they exist. [#542](https://github.com/openshift/cluster-ingress-operator/pull/542)
* Updating ose-cluster-ingress-operator builder & base images to be consistent with ART [#544](https://github.com/openshift/cluster-ingress-operator/pull/544)
* Add rfredette to OWNERS [#513](https://github.com/openshift/cluster-ingress-operator/pull/513)
* NE-508 Support cluster HA mode [#519](https://github.com/openshift/cluster-ingress-operator/pull/519)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/e76561d4a0e8976f44c6eaf5e7360827b583a21a...f03d5e4a4ed014035ef97f86c70be30c69243015)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/25c54939bdd02bc8e68f1329fa3ebe16904b3282)

* [Bug 2026089](https://bugzilla.redhat.com/show_bug.cgi?id=2026089): library-go bump [#1320](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1320)
* [Bug 2016213](https://bugzilla.redhat.com/show_bug.cgi?id=2016213): Exempt metrics scrapes from APF. [#1247](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1247)
* [Bug 2012010](https://bugzilla.redhat.com/show_bug.cgi?id=2012010): alerts: give exact oc get apirequestcounts command in APIRemovedInNextReleaseInUse alert [#1241](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1241)
* [Bug 2001244](https://bugzilla.redhat.com/show_bug.cgi?id=2001244): Enforce OpenShift's defined kubelet version skew policies [#1224](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1224)
* [Bug 1993800](https://bugzilla.redhat.com/show_bug.cgi?id=1993800): bump(library-go): staticpod/installer: fix backoff of installers [#1214](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1214)
* [Bug 1979303](https://bugzilla.redhat.com/show_bug.cgi?id=1979303): clear encryption conditions when there is no work to be done [#1188](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1188)
* [Bug 1963730](https://bugzilla.redhat.com/show_bug.cgi?id=1963730): kube-apiserver failed to load SNI cert and key [#1153](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1153)
* [Bug 1974773](https://bugzilla.redhat.com/show_bug.cgi?id=1974773): SA token issuer observer: fix observing api-audiences [#1160](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1160)
* [Bug 1972768](https://bugzilla.redhat.com/show_bug.cgi?id=1972768): add sigterm handler to insecurereadyz [#1154](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1154)
* [Bug 1921139](https://bugzilla.redhat.com/show_bug.cgi?id=1921139): remove override for fast cert rotation for release [#1143](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1143)
* [Bug 1946479](https://bugzilla.redhat.com/show_bug.cgi?id=1946479): inject SA tokens as projected volumes to KAS install and prune pods [#1142](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1142)
* [Bug 1953798](https://bugzilla.redhat.com/show_bug.cgi?id=1953798): Fix incorrect 'scope' label in SLO recording rules [#1144](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1144)
* [Bug 1907309](https://bugzilla.redhat.com/show_bug.cgi?id=1907309): Add APF StorageVersionMigration manifest [#1139](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1139)
* [Bug 1966410](https://bugzilla.redhat.com/show_bug.cgi?id=1966410): alert: exclude kcm samples from removed API alerts [#1141](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1141)
* [Bug 1967090](https://bugzilla.redhat.com/show_bug.cgi?id=1967090): Revert webhookauth observer: set cache TTL to 30s [#1140](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1140)
* [Bug 1967090](https://bugzilla.redhat.com/show_bug.cgi?id=1967090): webhookauth observer: set cache TTL to 30s [#1129](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1129)
* [Bug 1956606](https://bugzilla.redhat.com/show_bug.cgi?id=1956606): Revert "Merge pull request #1060" (Use the flow schema introduced in upstream) [#1099](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1099)
* [Bug 1953798](https://bugzilla.redhat.com/show_bug.cgi?id=1953798): Add apiserver burn rate SLO alerts [#1126](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1126)
* [Bug 1963730](https://bugzilla.redhat.com/show_bug.cgi?id=1963730): Bump library-go for unrevisioned resourcs [#1136](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1136)
* [Bug 1943804](https://bugzilla.redhat.com/show_bug.cgi?id=1943804): increases termination timeouts for AWS [#1079](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1079)
* [Bug 1957645](https://bugzilla.redhat.com/show_bug.cgi?id=1957645): avoid warm loop for writing prometheus rules [#1127](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1127)
* [Bug 1961173](https://bugzilla.redhat.com/show_bug.cgi?id=1961173): bump(*): library-go update [#1132](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1132)
* Set proper root image in .ci-operator.yaml [#1134](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1134)
* [Bug 1943804](https://bugzilla.redhat.com/show_bug.cgi?id=1943804): split encryption tests [#1131](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1131)
* fixup ci-operator.yaml [#1133](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1133)
* [Bug 1959513](https://bugzilla.redhat.com/show_bug.cgi?id=1959513): add default policy, use lib go audit [#1089](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1089)
* [Bug 1958094](https://bugzilla.redhat.com/show_bug.cgi?id=1958094): Add flock to kube-apiserver startup [#1128](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1128)
* Add a nominal request to the kube-apiserver init container [#1124](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1124)
* [Bug 1954937](https://bugzilla.redhat.com/show_bug.cgi?id=1954937): update printer columns for apirequestcounts [#1123](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1123)
* [Bug 1956081](https://bugzilla.redhat.com/show_bug.cgi?id=1956081): Update bootstrap manifest namespace for SNO compatibility [#1125](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1125)
* [Bug 1955226](https://bugzilla.redhat.com/show_bug.cgi?id=1955226): update library-go to avoid CRD update loop [#1121](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1121)
* [Bug 1955256](https://bugzilla.redhat.com/show_bug.cgi?id=1955256): stop collecting deprecateapicount [#1122](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1122)
* [Bug 1953798](https://bugzilla.redhat.com/show_bug.cgi?id=1953798): stop doing live gets for optional cert syncer files that don't exist on disk yet [#1120](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1120)
* Rename workload annotations [#1111](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1111)
* [Bug 1949306](https://bugzilla.redhat.com/show_bug.cgi?id=1949306): stop created deprecateapirequests [#1115](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1115)
* [Bug 1953563](https://bugzilla.redhat.com/show_bug.cgi?id=1953563): Add .ci-operator.yaml with build_root_image [#1116](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1116)
* [Bug 1951637](https://bugzilla.redhat.com/show_bug.cgi?id=1951637): don't roll a new revision on tokentimeout changes [#1109](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1109)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): DelegatingAuthenticationOptions TokenReview request timeout [#1110](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1110)
* [Bug 1949956](https://bugzilla.redhat.com/show_bug.cgi?id=1949956): add minreadyseconds to ensure we don't have an LB outage on kas [#1091](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1091)
* [Bug 1949306](https://bugzilla.redhat.com/show_bug.cgi?id=1949306): collect new style counts [#1107](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1107)
* [Bug 1949306](https://bugzilla.redhat.com/show_bug.cgi?id=1949306): switch APIRequestCount from DeprecatedAPIRequest [#1106](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1106)
* [Bug 1949591](https://bugzilla.redhat.com/show_bug.cgi?id=1949591): tweak removed api in use alert expression [#1044](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1044)
* Add management workload annotations [#1095](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1095)
* [Bug 1932165](https://bugzilla.redhat.com/show_bug.cgi?id=1932165): variables in DeprecatedAPIInUse alert's annotations.message are not parsed to existing values [#1055](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1055)
* [Bug 1949418](https://bugzilla.redhat.com/show_bug.cgi?id=1949418): bump(*): vendor update [#1103](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1103)
* [Bug 1949593](https://bugzilla.redhat.com/show_bug.cgi?id=1949593): rename DeprecatedAPIInUse alert to APIRemovedInNextReleaseInUse [#1045](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1045)
* [Bug 1949306](https://bugzilla.redhat.com/show_bug.cgi?id=1949306): add deprecated CRD manifest [#1102](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1102)
* [Bug 1948431](https://bugzilla.redhat.com/show_bug.cgi?id=1948431): Bump openshift/api to get the necessary CSIMigration feature gates [#1098](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1098)
* Update DeprecatedAPIInUse alert for new release. [#1092](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1092)
* bump(k8s.io/*): 1.21 [#1080](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1080)
* [Bug 1909600](https://bugzilla.redhat.com/show_bug.cgi?id=1909600): static-pods: retry failed installers [#1035](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1035)
* [Bug 1939226](https://bugzilla.redhat.com/show_bug.cgi?id=1939226): make kube-apiserver readiness checks, check readyz [#1065](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1065)
* Updating ose-cluster-kube-apiserver-operator builder & base images to be consistent with ART [#1039](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1039)
* [Bug 1937916](https://bugzilla.redhat.com/show_bug.cgi?id=1937916): add a flowschema to ensure that probes never get 429s [#1060](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1060)
* e2e token timeouts: remove the test that moved to CAO [#1076](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1076)
* config api-audiences along with SA issuer [#1050](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1050)
* [Bug 1939227](https://bugzilla.redhat.com/show_bug.cgi?id=1939227): make liveness hit livez [#1066](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1066)
* switch to v1beta1 for the p&f APIs [#1028](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1028)
* make KAS-o upgradable even when webhook authenticators are set [#1052](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1052)
* token inactivity e2e: wait for KAS to stop progressing [#1047](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1047)
* render initial SCC in addition to having the CVO reconcile [#1049](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1049)
* bump to get latest openshift api [#1048](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1048)
* clean up: uses a static encryption provider form the library-go [#1043](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1043)
* add DeprecatedAPIInUse alert [#1018](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1018)
* Speed up port reuse via SO_REUSEADDR [#1046](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1046)
* add rolebinding for delegated in-cluster authentication [#1038](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1038)
* [Bug 1926465](https://bugzilla.redhat.com/show_bug.cgi?id=1926465): bootstrap: add --advertise-address=pod.status.hostIP [#1040](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1040)
* [Bug 1926867](https://bugzilla.redhat.com/show_bug.cgi?id=1926867): competing connectivitycheckcontrollers cause pod restarts during upgrades [#1036](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1036)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/d5d5759042b1820715983fb5546fcf2ea1183e66...25c54939bdd02bc8e68f1329fa3ebe16904b3282)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/7fa48ebf34e8c810ce8cbe8b62a4e10a7326856c)

* [Bug 1993800](https://bugzilla.redhat.com/show_bug.cgi?id=1993800): Bump library-go to include backoff fix of installers [#560](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/560)
* [Bug 1981633](https://bugzilla.redhat.com/show_bug.cgi?id=1981633): allow upgraded clusters to use the vulnerable service-ca.crt [#549](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/549)
* [Bug 1963730](https://bugzilla.redhat.com/show_bug.cgi?id=1963730): kube-apiserver failed to load SNI cert and key [#532](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/532)
* [Bug 1938636](https://bugzilla.redhat.com/show_bug.cgi?id=1938636): Set logLevel for policy and recovery controllers [#511](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/511)
* [Bug 1954790](https://bugzilla.redhat.com/show_bug.cgi?id=1954790): pdb: Increase PDBAtLimit timeout [#534](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/534)
* [Bug 1946479](https://bugzilla.redhat.com/show_bug.cgi?id=1946479): manifests: use manual service account mounts [#531](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/531)
* [Bug 1954790](https://bugzilla.redhat.com/show_bug.cgi?id=1954790): Use appropriate metric for PDB alerts [#527](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/527)
* [Bug 1966126](https://bugzilla.redhat.com/show_bug.cgi?id=1966126): manifests: drop root_ca_cert_publisher_sync_duration_seconds metric [#526](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/526)
* [Bug 1963079](https://bugzilla.redhat.com/show_bug.cgi?id=1963079): a smoke test for preferred host for KCM [#510](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/510)
* [Bug 1961173](https://bugzilla.redhat.com/show_bug.cgi?id=1961173): bump(*): vendor update [#524](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/524)
* Rename workload annotations [#521](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/521)
* [Bug 1953563](https://bugzilla.redhat.com/show_bug.cgi?id=1953563): Makefile: add verify-golang-versions [#523](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/523)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): DelegatingAuthenticationOptions TokenReview request timeout [#522](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/522)
* Add management workload annotations [#516](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/516)
* [Bug 1949418](https://bugzilla.redhat.com/show_bug.cgi?id=1949418): bump(*): vendor update [#519](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/519)
* Remove tnozicka from OWNERS [#502](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/502)
* [Bug 1948431](https://bugzilla.redhat.com/show_bug.cgi?id=1948431): Bump openshift api version to get CSIMigrationXXX feature gates [#518](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/518)
* bump(k8s.io/*): 1.21 [#515](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/515)
* update library-go to fix tight loops [#514](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/514)
* Migrate to using keypair generation and validation from library-go [#512](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/512)
* Updating ose-cluster-kube-controller-manager-operator builder & base images to be consistent with ART [#513](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/513)
* defines test-e2e-preferred-host job for running smoke tests to check if KCM talks to Kube over a preferred host [#509](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/509)
* [Bug 1934132](https://bugzilla.redhat.com/show_bug.cgi?id=1934132): Bump github.com/gogo/protobuf to v1.3.2 [#507](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/507)
* [Bug 1844989](https://bugzilla.redhat.com/show_bug.cgi?id=1844989): Allow to set --tls-cipher-suites and --tls-min-version of KCM instances through observed config [#506](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/506)
* Updating ose-cluster-kube-controller-manager-operator builder & base images to be consistent with ART [#504](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/504)
* [Bug 1911211](https://bugzilla.redhat.com/show_bug.cgi?id=1911211): Update build-machinery-go to the latest master HEAD [#505](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/505)
* fixes Developing and debugging the operator section in the readme file. [#503](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/503)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/281590936f3a94d4ae1eb008709fda6614fe763b...7fa48ebf34e8c810ce8cbe8b62a4e10a7326856c)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/1b3b34440de93395c46c7a6526be9870e8914ce8)

* [Bug 2026110](https://bugzilla.redhat.com/show_bug.cgi?id=2026110): Disable balancedAllocation and add weight for HighNodeUtilization profile [#380](https://github.com/openshift/cluster-kube-scheduler-operator/pull/380)
* [Bug 1993800](https://bugzilla.redhat.com/show_bug.cgi?id=1993800): Bump library-go to include backoff fix of installers [#366](https://github.com/openshift/cluster-kube-scheduler-operator/pull/366)
* [Bug 1963730](https://bugzilla.redhat.com/show_bug.cgi?id=1963730): kube-apiserver failed to load SNI cert and key [#354](https://github.com/openshift/cluster-kube-scheduler-operator/pull/354)
* [Bug 1946479](https://bugzilla.redhat.com/show_bug.cgi?id=1946479): use manual service account tokens [#355](https://github.com/openshift/cluster-kube-scheduler-operator/pull/355)
* Added more complete unit tests [#352](https://github.com/openshift/cluster-kube-scheduler-operator/pull/352)
* [Bug 1963079](https://bugzilla.redhat.com/show_bug.cgi?id=1963079): Add e2e test for preferred host [#351](https://github.com/openshift/cluster-kube-scheduler-operator/pull/351)
* [Bug 1953563](https://bugzilla.redhat.com/show_bug.cgi?id=1953563): Enable golang version verify target [#349](https://github.com/openshift/cluster-kube-scheduler-operator/pull/349)
* Transfer root-image configuration to this repository [#350](https://github.com/openshift/cluster-kube-scheduler-operator/pull/350)
* [Bug 1954087](https://bugzilla.redhat.com/show_bug.cgi?id=1954087): added test for manage config maps in targetconfigcontroller [#346](https://github.com/openshift/cluster-kube-scheduler-operator/pull/346)
* Rename workload annotations [#347](https://github.com/openshift/cluster-kube-scheduler-operator/pull/347)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): DelegatingAuthenticationOptions TokenReview request timeout [#348](https://github.com/openshift/cluster-kube-scheduler-operator/pull/348)
* Add management workload annotations [#343](https://github.com/openshift/cluster-kube-scheduler-operator/pull/343)
* [Bug 1949364](https://bugzilla.redhat.com/show_bug.cgi?id=1949364): Mention scheduling profiles [#345](https://github.com/openshift/cluster-kube-scheduler-operator/pull/345)
* [Bug 1948431](https://bugzilla.redhat.com/show_bug.cgi?id=1948431): Bump openshift/api to get the necessary CSIMigration feature gates [#344](https://github.com/openshift/cluster-kube-scheduler-operator/pull/344)
* passing additional args to kubernetes-scheduler [#336](https://github.com/openshift/cluster-kube-scheduler-operator/pull/336)
* servicemonitor: Relabel kube_pod_resource_* pod/namespace labels [#340](https://github.com/openshift/cluster-kube-scheduler-operator/pull/340)
* bump(k8s.io/*): 1.21 [#342](https://github.com/openshift/cluster-kube-scheduler-operator/pull/342)
* Fix development readme to refer to actual pod/container [#339](https://github.com/openshift/cluster-kube-scheduler-operator/pull/339)
* update library-go to fix tight loops [#341](https://github.com/openshift/cluster-kube-scheduler-operator/pull/341)
* defines test-e2e-preferred-host job for running smoke tests to check if KS talks to Kube over a preferred host [#338](https://github.com/openshift/cluster-kube-scheduler-operator/pull/338)
* Updating ose-cluster-kube-scheduler-operator builder & base images to be consistent with ART [#337](https://github.com/openshift/cluster-kube-scheduler-operator/pull/337)
* [Bug 1938468](https://bugzilla.redhat.com/show_bug.cgi?id=1938468): Specify cpu resource request for kube-scheduler-operator-container container [#335](https://github.com/openshift/cluster-kube-scheduler-operator/pull/335)
* [Bug 1934154](https://bugzilla.redhat.com/show_bug.cgi?id=1934154): Bump github.com/gogo/protobuf to v1.3.2 [#333](https://github.com/openshift/cluster-kube-scheduler-operator/pull/333)
* [Bug 1844989](https://bugzilla.redhat.com/show_bug.cgi?id=1844989): Set --tls-cipher-suites, resp. --tls-min-version only when the fields under servingInfo observedConfig are found [#332](https://github.com/openshift/cluster-kube-scheduler-operator/pull/332)
* [Bug 1844989](https://bugzilla.redhat.com/show_bug.cgi?id=1844989): Allow to set --tls-cipher-suites and --tls-min-version of KS instances through observed config [#331](https://github.com/openshift/cluster-kube-scheduler-operator/pull/331)
* [Bug 1926579](https://bugzilla.redhat.com/show_bug.cgi?id=1926579): Move warning about deprecated spec.policy field [#330](https://github.com/openshift/cluster-kube-scheduler-operator/pull/330)
* Updating ose-cluster-kube-scheduler-operator builder & base images to be consistent with ART [#329](https://github.com/openshift/cluster-kube-scheduler-operator/pull/329)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/b2204ca23a57e9f01af915375e6a18fc86ffecda...1b3b34440de93395c46c7a6526be9870e8914ce8)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/50c639cc7e318c1dab38a2869b928cf703a38515)

* [Bug 2022844](https://bugzilla.redhat.com/show_bug.cgi?id=2022844): Extensive number of requests from storage version operator in cluster – Part 4 [#79](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/79)
* [Bug 2022844](https://bugzilla.redhat.com/show_bug.cgi?id=2022844): Extensive number of requests from storage version operator in cluster – Part 1 [#78](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/78)
* README: Stub in brief purpose docs [#44](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/44)
* [Bug 1962687](https://bugzilla.redhat.com/show_bug.cgi?id=1962687): manifests,assets: set runAsUser to not run as root [#58](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/58)
* [Bug 1957908](https://bugzilla.redhat.com/show_bug.cgi?id=1957908): stop reporting empty version [#57](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/57)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): DelegatingAuthenticationOptions TokenReview request timeout [#56](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/56)
* [Bug 1947801](https://bugzilla.redhat.com/show_bug.cgi?id=1947801): Switch to v1 upstream CRDs [#55](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/55)
* Add management workload annotations [#52](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/52)
* [Bug 1953539](https://bugzilla.redhat.com/show_bug.cgi?id=1953539): Set priorityClassName: system-cluster-critical [#54](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/54)
* Add IBM cloud managed profile manifest patch [#51](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/51)
* add storageversionmigrations to related objects [#42](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/42)
* [Bug 1881938](https://bugzilla.redhat.com/show_bug.cgi?id=1881938): migrator deployment doesn't tolerate masters [#31](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/31)
* Updating ose-cluster-kube-storage-version-migrator-operator builder & base images to be consistent with ART [#43](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/43)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/54484757581ec26f178c599215715bafd6029582...50c639cc7e318c1dab38a2869b928cf703a38515)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/f0a396eee469a3ace9e473c0476a29d8983671eb)

* [Bug 2031047](https://bugzilla.redhat.com/show_bug.cgi?id=2031047): Ensure pending CSR count is valid post approval [#146](https://github.com/openshift/cluster-machine-approver/pull/146)
* [Bug 2032092](https://bugzilla.redhat.com/show_bug.cgi?id=2032092): Replace certificates with generated certificates [#148](https://github.com/openshift/cluster-machine-approver/pull/148)
* [Bug 2024689](https://bugzilla.redhat.com/show_bug.cgi?id=2024689): Allow fallback to serving cert renewal accounting for egress IPs on SDN [#142](https://github.com/openshift/cluster-machine-approver/pull/142)
* [Bug 1956609](https://bugzilla.redhat.com/show_bug.cgi?id=1956609): Use a direct client for uncached reads [#123](https://github.com/openshift/cluster-machine-approver/pull/123)
* [Bug 1956609](https://bugzilla.redhat.com/show_bug.cgi?id=1956609): Bypass cache when reading Node and Machine objects [#121](https://github.com/openshift/cluster-machine-approver/pull/121)
* [Bug 1948719](https://bugzilla.redhat.com/show_bug.cgi?id=1948719): update controller-runtime dependency [#119](https://github.com/openshift/cluster-machine-approver/pull/119)
* Add management workload annotations [#110](https://github.com/openshift/cluster-machine-approver/pull/110)
* [Bug 1952282](https://bugzilla.redhat.com/show_bug.cgi?id=1952282): Ensure serving certs requeued [#118](https://github.com/openshift/cluster-machine-approver/pull/118)
* [Bug 1940972](https://bugzilla.redhat.com/show_bug.cgi?id=1940972): Increase cache resync period to 10 min instead of 10 hours [#117](https://github.com/openshift/cluster-machine-approver/pull/117)
* [Bug 1948719](https://bugzilla.redhat.com/show_bug.cgi?id=1948719): update dependencies to 1.21 [#115](https://github.com/openshift/cluster-machine-approver/pull/115)
* [Bug 1949741](https://bugzilla.redhat.com/show_bug.cgi?id=1949741): bump golang versions [#113](https://github.com/openshift/cluster-machine-approver/pull/113)
* [Bug 1947785](https://bugzilla.redhat.com/show_bug.cgi?id=1947785): Move certificates to v1 [#111](https://github.com/openshift/cluster-machine-approver/pull/111)
* Add IBM Cloud managed annotations to CVO manifests [#93](https://github.com/openshift/cluster-machine-approver/pull/93)
* Enable running make targets inside container [#107](https://github.com/openshift/cluster-machine-approver/pull/107)
* Refactor logging and error handling [#108](https://github.com/openshift/cluster-machine-approver/pull/108)
* [Bug 1923823](https://bugzilla.redhat.com/show_bug.cgi?id=1923823): Improve TLS configuration for Kube RBAC Proxy [#105](https://github.com/openshift/cluster-machine-approver/pull/105)
* Refactor csr approver to use controller runtime [#101](https://github.com/openshift/cluster-machine-approver/pull/101)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/9043e2bba8f4707a578895f8b29d4736a61a010c...f0a396eee469a3ace9e473c0476a29d8983671eb)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/edfadfb58c4167a62a7a7c1bf164c882b73eedb3)

* [Bug 2030698](https://bugzilla.redhat.com/show_bug.cgi?id=2030698): KubePodCrashLooping may fire when pod is not in CrashLoopBackOff [#1619](https://github.com/openshift/cluster-monitoring-operator/pull/1619)
* [Bug 2039538](https://bugzilla.redhat.com/show_bug.cgi?id=2039538): Add custom profile metric for Node Tuning Operator to telemetry [#1565](https://github.com/openshift/cluster-monitoring-operator/pull/1565)
* [Bug 2018431](https://bugzilla.redhat.com/show_bug.cgi?id=2018431): [4.8] add kube_persistentvolumeclaim_labels and kube_persistentvolume_labels [#1459](https://github.com/openshift/cluster-monitoring-operator/pull/1459)
* [Bug 2012039](https://bugzilla.redhat.com/show_bug.cgi?id=2012039): Allow namespace label in metric allow list [#1436](https://github.com/openshift/cluster-monitoring-operator/pull/1436)
* [Bug 2005205](https://bugzilla.redhat.com/show_bug.cgi?id=2005205): improve update and status reporting 4.8 [#1428](https://github.com/openshift/cluster-monitoring-operator/pull/1428)
* Revert "Bug 1999057: jsonnet: Sync with kube-prometheus" [#1394](https://github.com/openshift/cluster-monitoring-operator/pull/1394)
* [Bug 1999057](https://bugzilla.redhat.com/show_bug.cgi?id=1999057): jsonnet: Sync with kube-prometheus [#1360](https://github.com/openshift/cluster-monitoring-operator/pull/1360)
* [Bug 1997497](https://bugzilla.redhat.com/show_bug.cgi?id=1997497): Backport etcd telemetry [#1344](https://github.com/openshift/cluster-monitoring-operator/pull/1344)
* [Bug 1995699](https://bugzilla.redhat.com/show_bug.cgi?id=1995699): Get insights on series churn during upgrades [#1349](https://github.com/openshift/cluster-monitoring-operator/pull/1349)
* [Bug 1999148](https://bugzilla.redhat.com/show_bug.cgi?id=1999148): alert: ClusterMonitoringOperatorReconciliationErrors: reduce range du… [#1351](https://github.com/openshift/cluster-monitoring-operator/pull/1351)
* [Bug 1991836](https://bugzilla.redhat.com/show_bug.cgi?id=1991836): Revise Alert Severity in OCP 4.8 [#1342](https://github.com/openshift/cluster-monitoring-operator/pull/1342)
* [Bug 1984753](https://bugzilla.redhat.com/show_bug.cgi?id=1984753): jsonnet: Sync with kube-prometheus [#1323](https://github.com/openshift/cluster-monitoring-operator/pull/1323)
* [Bug 1978208](https://bugzilla.redhat.com/show_bug.cgi?id=1978208): Sync dependencies for 4.8 release backports [#1264](https://github.com/openshift/cluster-monitoring-operator/pull/1264)
* [Bug 1982778](https://bugzilla.redhat.com/show_bug.cgi?id=1982778): jsonnet: thanosquery: Use HTTP probes as opposed to exec [#1289](https://github.com/openshift/cluster-monitoring-operator/pull/1289)
* [Bug 1976765](https://bugzilla.redhat.com/show_bug.cgi?id=1976765): Update AlertmanagerMembersInconsistent rule [#1283](https://github.com/openshift/cluster-monitoring-operator/pull/1283)
* [Bug 1988991](https://bugzilla.redhat.com/show_bug.cgi?id=1988991): pkg/client/client.go: Add retry logic for daemonset create [#1309](https://github.com/openshift/cluster-monitoring-operator/pull/1309)
* [Bug 1982369](https://bugzilla.redhat.com/show_bug.cgi?id=1982369): Fix deployment update with retry option [#1285](https://github.com/openshift/cluster-monitoring-operator/pull/1285)
* [Bug 1981246](https://bugzilla.redhat.com/show_bug.cgi?id=1981246): [4.8]: Add HighlyAvailableWorkloadIncorrectlySpread alert [#1276](https://github.com/openshift/cluster-monitoring-operator/pull/1276)
* [Bug 1943565](https://bugzilla.redhat.com/show_bug.cgi?id=1943565): ThanosSidecarUnhealthy will never fire if the sidecar is never healthy [#1265](https://github.com/openshift/cluster-monitoring-operator/pull/1265)
* [Bug 1981871](https://bugzilla.redhat.com/show_bug.cgi?id=1981871): jsonnet: Disable cpufreq collector in node_exporter [#1272](https://github.com/openshift/cluster-monitoring-operator/pull/1272)
* [Bug 1967803](https://bugzilla.redhat.com/show_bug.cgi?id=1967803): update Grafana version to 7.5.5 [#1210](https://github.com/openshift/cluster-monitoring-operator/pull/1210)
* [Bug 1970624](https://bugzilla.redhat.com/show_bug.cgi?id=1970624): jsonnet: reduce threshold of AggregatedAPIDown [#1211](https://github.com/openshift/cluster-monitoring-operator/pull/1211)
* Extended PrometheusK8sConfig and PrometheusRestrictedConfig with AdditionalAlertManagerConfigs [#1132](https://github.com/openshift/cluster-monitoring-operator/pull/1132)
* [Bug 1949711](https://bugzilla.redhat.com/show_bug.cgi?id=1949711): Ignore failures from prometheusrules.openshift.io webhook [#1203](https://github.com/openshift/cluster-monitoring-operator/pull/1203)
* [Bug 1955589](https://bugzilla.redhat.com/show_bug.cgi?id=1955589): add PodDisruptionBudget to ThanosQuerier to meet HA requ… [#1202](https://github.com/openshift/cluster-monitoring-operator/pull/1202)
* [Bug 1964332](https://bugzilla.redhat.com/show_bug.cgi?id=1964332): upgrade prometheus to version 2.26.1 [#1208](https://github.com/openshift/cluster-monitoring-operator/pull/1208)
* [Bug 1967614](https://bugzilla.redhat.com/show_bug.cgi?id=1967614): Remove PDB for prometheus and alertmanager [#1204](https://github.com/openshift/cluster-monitoring-operator/pull/1204)
* [Bug 1967614](https://bugzilla.redhat.com/show_bug.cgi?id=1967614): Revert anti-affinity to soft [#1198](https://github.com/openshift/cluster-monitoring-operator/pull/1198)
* [Bug 1879495](https://bugzilla.redhat.com/show_bug.cgi?id=1879495): jsonnet: update prometheus-operator to 0.48 [#1187](https://github.com/openshift/cluster-monitoring-operator/pull/1187)
* [Bug 1933708](https://bugzilla.redhat.com/show_bug.cgi?id=1933708): Add deployment config in recording rule [#1192](https://github.com/openshift/cluster-monitoring-operator/pull/1192)
* [Bug 1945500](https://bugzilla.redhat.com/show_bug.cgi?id=1945500): Bump thanos version to v0.20.2 [#1190](https://github.com/openshift/cluster-monitoring-operator/pull/1190)
* [Bug 1966654](https://bugzilla.redhat.com/show_bug.cgi?id=1966654): pkg/tasks: fix creation of alertmanager PDB [#1189](https://github.com/openshift/cluster-monitoring-operator/pull/1189)
* [Bug 1958367](https://bugzilla.redhat.com/show_bug.cgi?id=1958367): Add recording rule for builds by strategy [#1136](https://github.com/openshift/cluster-monitoring-operator/pull/1136)
* [Bug 1964334](https://bugzilla.redhat.com/show_bug.cgi?id=1964334): guard monitoring related /metrics endpoint from unauthorised access [#1183](https://github.com/openshift/cluster-monitoring-operator/pull/1183)
* [Bug 1957190](https://bugzilla.redhat.com/show_bug.cgi?id=1957190): use NamespaceSelector instead of explicit allow/deny list [#1168](https://github.com/openshift/cluster-monitoring-operator/pull/1168)
* [Bug 1965367](https://bugzilla.redhat.com/show_bug.cgi?id=1965367): pkg/operator: Fix typo in etcd-metric-serving-ca resource name [#1185](https://github.com/openshift/cluster-monitoring-operator/pull/1185)
* [Bug 1958016](https://bugzilla.redhat.com/show_bug.cgi?id=1958016): should update to 0.47.1 for prometheus-operator resources label [#1182](https://github.com/openshift/cluster-monitoring-operator/pull/1182)
* [Bug 1961081](https://bugzilla.redhat.com/show_bug.cgi?id=1961081): update pdb apiversion to v1 [#1184](https://github.com/openshift/cluster-monitoring-operator/pull/1184)
* [Bug 1961081](https://bugzilla.redhat.com/show_bug.cgi?id=1961081): update PodDisruptionBudget api version to policy/v1 [#1179](https://github.com/openshift/cluster-monitoring-operator/pull/1179)
* [Bug 1953798](https://bugzilla.redhat.com/show_bug.cgi?id=1953798): Remove the upstream KubeAPIErrorBudgetBurn alerts [#1164](https://github.com/openshift/cluster-monitoring-operator/pull/1164)
* [Bug 1962172](https://bugzilla.redhat.com/show_bug.cgi?id=1962172): increase scrape timeouts for kubelet endpoints [#1175](https://github.com/openshift/cluster-monitoring-operator/pull/1175)
* [Bug 1963833](https://bugzilla.redhat.com/show_bug.cgi?id=1963833): don't attempt to delete nil PodDisruptionBudget object [#1176](https://github.com/openshift/cluster-monitoring-operator/pull/1176)
* [Bug 1960767](https://bugzilla.redhat.com/show_bug.cgi?id=1960767): Protect Grafana metrics endpoint [#1165](https://github.com/openshift/cluster-monitoring-operator/pull/1165)
* [Bug 1962261](https://bugzilla.redhat.com/show_bug.cgi?id=1962261): further adjust memory usage [#1172](https://github.com/openshift/cluster-monitoring-operator/pull/1172)
* [Bug 1955478](https://bugzilla.redhat.com/show_bug.cgi?id=1955478): fix regex patterns in kube-state-metrics deny list [#1173](https://github.com/openshift/cluster-monitoring-operator/pull/1173)
* [Bug 1933847](https://bugzilla.redhat.com/show_bug.cgi?id=1933847): Manage PodDisruptionBudget objects [#1151](https://github.com/openshift/cluster-monitoring-operator/pull/1151)
* [Bug 1959278](https://bugzilla.redhat.com/show_bug.cgi?id=1959278): Remove obsolete user-workload ServiceMonitor [#1166](https://github.com/openshift/cluster-monitoring-operator/pull/1166)
* [Bug 1962261](https://bugzilla.redhat.com/show_bug.cgi?id=1962261): jsonnet: consolidate memory requests for all resources [#1158](https://github.com/openshift/cluster-monitoring-operator/pull/1158)
* [Bug 1952744](https://bugzilla.redhat.com/show_bug.cgi?id=1952744): Remove obsolete prometheus service monitor [#1146](https://github.com/openshift/cluster-monitoring-operator/pull/1146)
* [Bug 1953647](https://bugzilla.redhat.com/show_bug.cgi?id=1953647): Add prometheus-adapter PodDisruptionBudget [#1149](https://github.com/openshift/cluster-monitoring-operator/pull/1149)
* [Bug 1958015](https://bugzilla.redhat.com/show_bug.cgi?id=1958015): jsonnet: fix setting resource limits on config-reloader containers [#1152](https://github.com/openshift/cluster-monitoring-operator/pull/1152)
* [Bug 1955445](https://bugzilla.redhat.com/show_bug.cgi?id=1955445): drop more CRI-O metrics [#1148](https://github.com/openshift/cluster-monitoring-operator/pull/1148)
* [Bug 1957832](https://bugzilla.redhat.com/show_bug.cgi?id=1957832): remove dependency of e2e tests on AWS [#1143](https://github.com/openshift/cluster-monitoring-operator/pull/1143)
* [Bug 1950908](https://bugzilla.redhat.com/show_bug.cgi?id=1950908): Allow all pod labels in metric labels [#1145](https://github.com/openshift/cluster-monitoring-operator/pull/1145)
* [Bug 1955478](https://bugzilla.redhat.com/show_bug.cgi?id=1955478): drop high-cardinality metrics from kube-state-metrics which aren't used [#1142](https://github.com/openshift/cluster-monitoring-operator/pull/1142)
* [Bug 1955051](https://bugzilla.redhat.com/show_bug.cgi?id=1955051): Update kube node status capacity metric [#1140](https://github.com/openshift/cluster-monitoring-operator/pull/1140)
* [Bug 1955467](https://bugzilla.redhat.com/show_bug.cgi?id=1955467): remove node_mountstats_nfs_* metrics [#1139](https://github.com/openshift/cluster-monitoring-operator/pull/1139)
* [Bug 1940933](https://bugzilla.redhat.com/show_bug.cgi?id=1940933): Revert "jsonnet: make AggregatedAPIDown more resilient" [#1120](https://github.com/openshift/cluster-monitoring-operator/pull/1120)
* [Bug 1946865](https://bugzilla.redhat.com/show_bug.cgi?id=1946865): Update kube prometheus and related assets [#1127](https://github.com/openshift/cluster-monitoring-operator/pull/1127)
* [Bug 1955445](https://bugzilla.redhat.com/show_bug.cgi?id=1955445): fix dropped crio metrics [#1133](https://github.com/openshift/cluster-monitoring-operator/pull/1133)
* [Bug 1955457](https://bugzilla.redhat.com/show_bug.cgi?id=1955457): drop container_memory_failures_total metric [#1131](https://github.com/openshift/cluster-monitoring-operator/pull/1131)
* [Bug 1949262](https://bugzilla.redhat.com/show_bug.cgi?id=1949262): jsonnet: add hard anti-affinity to Prometheuses [#1135](https://github.com/openshift/cluster-monitoring-operator/pull/1135)
* Rename workload annotations [#1123](https://github.com/openshift/cluster-monitoring-operator/pull/1123)
* [Bug 1948711](https://bugzilla.redhat.com/show_bug.cgi?id=1948711): Apply HA conventions to prometheus-adapter and thanos-ruler [#1124](https://github.com/openshift/cluster-monitoring-operator/pull/1124)
* [Bug 1952032](https://bugzilla.redhat.com/show_bug.cgi?id=1952032): jsonnet: add format changes made by make jsonnet-fmt [#1129](https://github.com/openshift/cluster-monitoring-operator/pull/1129)
* [Bug 1951052](https://bugzilla.redhat.com/show_bug.cgi?id=1951052): drop CRI-O image metrics [#1125](https://github.com/openshift/cluster-monitoring-operator/pull/1125)
* [Bug 1951505](https://bugzilla.redhat.com/show_bug.cgi?id=1951505): Remove deprecated techPreviewUserWorkload [#1126](https://github.com/openshift/cluster-monitoring-operator/pull/1126)
* [Bug 1950761](https://bugzilla.redhat.com/show_bug.cgi?id=1950761): Revert: jsonnet: apply HA conventions [#1122](https://github.com/openshift/cluster-monitoring-operator/pull/1122)
* [Bug 1945677](https://bugzilla.redhat.com/show_bug.cgi?id=1945677): manifest allowlist: add acm_managed_cluster_info [#1102](https://github.com/openshift/cluster-monitoring-operator/pull/1102)
* BUG 1949145: Delete 0000_50_cluster-monitoring-operator_00_0user-priority-class.yaml [#1115](https://github.com/openshift/cluster-monitoring-operator/pull/1115)
* [Bug 1948711](https://bugzilla.redhat.com/show_bug.cgi?id=1948711): jsonnet: apply HA conventions [#1119](https://github.com/openshift/cluster-monitoring-operator/pull/1119)
* [Bug 1948082](https://bugzilla.redhat.com/show_bug.cgi?id=1948082): Set unavailable message [#1112](https://github.com/openshift/cluster-monitoring-operator/pull/1112)
* Add management workload annotations [#1109](https://github.com/openshift/cluster-monitoring-operator/pull/1109)
* [Bug 1940933](https://bugzilla.redhat.com/show_bug.cgi?id=1940933): jsonnet: make AggregatedAPIDown more resilient to OCP upgrades [#1117](https://github.com/openshift/cluster-monitoring-operator/pull/1117)
* [Bug 1920700](https://bugzilla.redhat.com/show_bug.cgi?id=1920700): Bump prometheus-adapter to v0.8.4 [#1113](https://github.com/openshift/cluster-monitoring-operator/pull/1113)
* Refactor proxy config [#1108](https://github.com/openshift/cluster-monitoring-operator/pull/1108)
* Update denied metrics for kube-state-metrics [#1104](https://github.com/openshift/cluster-monitoring-operator/pull/1104)
* IBM Cloud manifest profile patch [#986](https://github.com/openshift/cluster-monitoring-operator/pull/986)
* [Bug 1934516](https://bugzilla.redhat.com/show_bug.cgi?id=1934516): Change prometheus priority class to system-cluster-critical again [#1110](https://github.com/openshift/cluster-monitoring-operator/pull/1110)
* [Bug 1938465](https://bugzilla.redhat.com/show_bug.cgi?id=1938465): increase CPU requests for Thanos querier [#1106](https://github.com/openshift/cluster-monitoring-operator/pull/1106)
* [Bug 1943667](https://bugzilla.redhat.com/show_bug.cgi?id=1943667): fix alert description [#1100](https://github.com/openshift/cluster-monitoring-operator/pull/1100)
* [Bug 1944974](https://bugzilla.redhat.com/show_bug.cgi?id=1944974): remove KubeControllerManagerDown and KubeSchedulerDown alerts [#1098](https://github.com/openshift/cluster-monitoring-operator/pull/1098)
* Bump kube-state-metrics to v2.0.0-rc.1 [#1099](https://github.com/openshift/cluster-monitoring-operator/pull/1099)
* jsonnet: replace external commit import [#1092](https://github.com/openshift/cluster-monitoring-operator/pull/1092)
* [Bug 1943667](https://bugzilla.redhat.com/show_bug.cgi?id=1943667): increase for duration of KubeDaemonSetRolloutStuck [#1094](https://github.com/openshift/cluster-monitoring-operator/pull/1094)
* Remove kube-state-metrics flag temporary [#1095](https://github.com/openshift/cluster-monitoring-operator/pull/1095)
* [Bug 1932624](https://bugzilla.redhat.com/show_bug.cgi?id=1932624): jsonnet/rules,pkg/operator: use gauge based reconcilation state metrics and alerting [#1078](https://github.com/openshift/cluster-monitoring-operator/pull/1078)
* [Bug 1934163](https://bugzilla.redhat.com/show_bug.cgi?id=1934163): adjust Thanos querier alerting rules [#1087](https://github.com/openshift/cluster-monitoring-operator/pull/1087)
* OWNERS: add Jan [#1089](https://github.com/openshift/cluster-monitoring-operator/pull/1089)
* Updating cluster-monitoring-operator builder & base images to be consistent with ART [#1088](https://github.com/openshift/cluster-monitoring-operator/pull/1088)
* [Bug 1921335](https://bugzilla.redhat.com/show_bug.cgi?id=1921335): Fix and adjust ThanosSidecarUnhealthy alert [#1090](https://github.com/openshift/cluster-monitoring-operator/pull/1090)
* Adapt deployment mode based on the infrastructure topology [#1077](https://github.com/openshift/cluster-monitoring-operator/pull/1077)
* hack: add check script for unused rules [#1082](https://github.com/openshift/cluster-monitoring-operator/pull/1082)
* Add jsonnet function to patch upstream rules [#1073](https://github.com/openshift/cluster-monitoring-operator/pull/1073)
* jsonnet: fix etcd mixin import [#1084](https://github.com/openshift/cluster-monitoring-operator/pull/1084)
* [Bug 1933805](https://bugzilla.redhat.com/show_bug.cgi?id=1933805): TargetDown should exclude unschedulable nodes [#1072](https://github.com/openshift/cluster-monitoring-operator/pull/1072)
* *: include all groups when testing prometheus rules [#1081](https://github.com/openshift/cluster-monitoring-operator/pull/1081)
* Run jsonnet-fmt [#1079](https://github.com/openshift/cluster-monitoring-operator/pull/1079)
* [Bug 1925061](https://bugzilla.redhat.com/show_bug.cgi?id=1925061): Remove the "instance" and "pod" labels for kube-state-metrics metrics [#1052](https://github.com/openshift/cluster-monitoring-operator/pull/1052)
* [Bug 1923984](https://bugzilla.redhat.com/show_bug.cgi?id=1923984): Refactor jsonnet to include latest kube-prometheus [#1044](https://github.com/openshift/cluster-monitoring-operator/pull/1044)
* [Bug 1929056](https://bugzilla.redhat.com/show_bug.cgi?id=1929056): Remove kube-apiserver-availability.rules [#1068](https://github.com/openshift/cluster-monitoring-operator/pull/1068)
* pkg/manifests: fix data race when accessing assets [#1054](https://github.com/openshift/cluster-monitoring-operator/pull/1054)
* jsonnet/rules: Mask KubeDeploymentReplicasMismatch alert for upgrade [#1065](https://github.com/openshift/cluster-monitoring-operator/pull/1065)
* [Bug 1929944](https://bugzilla.redhat.com/show_bug.cgi?id=1929944): etcdInsufficientMembers is wrong when etcd is in a pod [#1064](https://github.com/openshift/cluster-monitoring-operator/pull/1064)
* [Bug 1929277](https://bugzilla.redhat.com/show_bug.cgi?id=1929277): [master] jsonnet/prometheus.jsonnet: Apply openshift-user-critical class to cluster Prometheus [#1063](https://github.com/openshift/cluster-monitoring-operator/pull/1063)
* Updating cluster-monitoring-operator builder & base images to be consistent with ART [#1050](https://github.com/openshift/cluster-monitoring-operator/pull/1050)
* [Bug 1920901](https://bugzilla.redhat.com/show_bug.cgi?id=1920901): pkg/manifests: fix prometheus-proxy trustedCA [#1047](https://github.com/openshift/cluster-monitoring-operator/pull/1047)
* docs(data-collection): add newlines for visibility [#1031](https://github.com/openshift/cluster-monitoring-operator/pull/1031)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/0f7da469218513896435381193ff97df3b23f66a...edfadfb58c4167a62a7a7c1bf164c882b73eedb3)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/6d78d0102eab4e4141533192479dff37dc100e91)

* Adds dougbtv to owners [release-4.8] [#1403](https://github.com/openshift/cluster-network-operator/pull/1403)
* [Bug 2058674](https://bugzilla.redhat.com/show_bug.cgi?id=2058674): ip-reconciler cronjob specification requires hostnetwork, api-int lb usage & proper backoff [backport 4.8] [#1324](https://github.com/openshift/cluster-network-operator/pull/1324)
* [Bug 2038295](https://bugzilla.redhat.com/show_bug.cgi?id=2038295): Backport 4.8 OVN drop icmp frag from other nodes on Azure cluster [#1274](https://github.com/openshift/cluster-network-operator/pull/1274)
* [Bug 2068895](https://bugzilla.redhat.com/show_bug.cgi?id=2068895): Do not apply OVN-Kubernetes PodDisruptionBudget on single-node clusters [#1351](https://github.com/openshift/cluster-network-operator/pull/1351)
* [release 4.8] Updates owners [#1334](https://github.com/openshift/cluster-network-operator/pull/1334)
* [Bug 2054642](https://bugzilla.redhat.com/show_bug.cgi?id=2054642): sbdb and nbdb containers leave pid around if they restarted or crashed [#1310](https://github.com/openshift/cluster-network-operator/pull/1310)
* [Bug 2023426](https://bugzilla.redhat.com/show_bug.cgi?id=2023426): Add ip6tables NOTRACK rules for udp/6081 [#1228](https://github.com/openshift/cluster-network-operator/pull/1228)
* [Bug 2021221](https://bugzilla.redhat.com/show_bug.cgi?id=2021221): ovnkube: set ovn-controller lflow cache limit to 1GB [#1278](https://github.com/openshift/cluster-network-operator/pull/1278)
* [Bug 2034352](https://bugzilla.redhat.com/show_bug.cgi?id=2034352): Whereabouts IP Reconciliaton [backport 4.8] [#1265](https://github.com/openshift/cluster-network-operator/pull/1265)
* [Bug 2022747](https://bugzilla.redhat.com/show_bug.cgi?id=2022747): Allow to use proxy to connect to OSP cloud [#1225](https://github.com/openshift/cluster-network-operator/pull/1225)
* [Bug 2037500](https://bugzilla.redhat.com/show_bug.cgi?id=2037500): Bump openshift/build-machinery-go [#1271](https://github.com/openshift/cluster-network-operator/pull/1271)
* [Bug 2029590](https://bugzilla.redhat.com/show_bug.cgi?id=2029590): Set upgrade strategy on kube-proxy #1244 [#1244](https://github.com/openshift/cluster-network-operator/pull/1244)
* [Bug 2018513](https://bugzilla.redhat.com/show_bug.cgi?id=2018513): ovnkube: use ovn-nbctl daemon monitor mode to restart and log issues [#1211](https://github.com/openshift/cluster-network-operator/pull/1211)
* [Bug 2008589](https://bugzilla.redhat.com/show_bug.cgi?id=2008589): [4.8z] Slow OVN Recovery on SNO [#1200](https://github.com/openshift/cluster-network-operator/pull/1200)
* [Bug 1985308](https://bugzilla.redhat.com/show_bug.cgi?id=1985308): Add a newline between user CAs and system CAs [#1162](https://github.com/openshift/cluster-network-operator/pull/1162)
* [Bug 1990928](https://bugzilla.redhat.com/show_bug.cgi?id=1990928): [Backport 4.8] Whereabouts should have RBAC for leases [#1185](https://github.com/openshift/cluster-network-operator/pull/1185)
* [Bug 1985588](https://bugzilla.redhat.com/show_bug.cgi?id=1985588): Update service network status to reflect dual stack entries [#1164](https://github.com/openshift/cluster-network-operator/pull/1164)
* [Bug 1987046](https://bugzilla.redhat.com/show_bug.cgi?id=1987046): Add pre-puller ds to reduce upgrade downtime [#1167](https://github.com/openshift/cluster-network-operator/pull/1167)
* [Bug 1988425](https://bugzilla.redhat.com/show_bug.cgi?id=1988425): Change to use mountPath: /host [#1169](https://github.com/openshift/cluster-network-operator/pull/1169)
* [Bug 1967933](https://bugzilla.redhat.com/show_bug.cgi?id=1967933): Add network-tools to image-stream [#1126](https://github.com/openshift/cluster-network-operator/pull/1126)
* [Bug 1963964](https://bugzilla.redhat.com/show_bug.cgi?id=1963964): Escape characters on ini file [#1115](https://github.com/openshift/cluster-network-operator/pull/1115)
* [Bug 1968567](https://bugzilla.redhat.com/show_bug.cgi?id=1968567): egress router CNI command is missing [#1125](https://github.com/openshift/cluster-network-operator/pull/1125)
* [Bug 1955548](https://bugzilla.redhat.com/show_bug.cgi?id=1955548): Kuryr: Do not expand services subnet with OVN [#1100](https://github.com/openshift/cluster-network-operator/pull/1100)
* [Bug 1954870](https://bugzilla.redhat.com/show_bug.cgi?id=1954870): Add priorityClass to allow user load to preempt tests [#1110](https://github.com/openshift/cluster-network-operator/pull/1110)
* [Bug 1951158](https://bugzilla.redhat.com/show_bug.cgi?id=1951158): Fix generated JSON format [#1117](https://github.com/openshift/cluster-network-operator/pull/1117)
* [Bug 1825219](https://bugzilla.redhat.com/show_bug.cgi?id=1825219): Fix nil checks in bootstrapSDN [#1107](https://github.com/openshift/cluster-network-operator/pull/1107)
* [Bug 1965834](https://bugzilla.redhat.com/show_bug.cgi?id=1965834): add management annotation to multus-additional-cni-plugins pods [#1114](https://github.com/openshift/cluster-network-operator/pull/1114)
* [Bug 1951158](https://bugzilla.redhat.com/show_bug.cgi?id=1951158): Update egress router CRD from vendor to manifests [#1116](https://github.com/openshift/cluster-network-operator/pull/1116)
* [Bug 1954773](https://bugzilla.redhat.com/show_bug.cgi?id=1954773): update the cno to use the egressfirewall flag [#1095](https://github.com/openshift/cluster-network-operator/pull/1095)
* [Bug 1960711](https://bugzilla.redhat.com/show_bug.cgi?id=1960711): Revert "ipsec: Allow enablement/disablement at runtime" [#1108](https://github.com/openshift/cluster-network-operator/pull/1108)
* [Bug 1951158](https://bugzilla.redhat.com/show_bug.cgi?id=1951158): Addressing original PR 1064 review comments. [#1094](https://github.com/openshift/cluster-network-operator/pull/1094)
* [Bug 1949677](https://bugzilla.redhat.com/show_bug.cgi?id=1949677): The Multus daemonset should be separate other CNI binary installation [#1058](https://github.com/openshift/cluster-network-operator/pull/1058)
* [Bug 1825219](https://bugzilla.redhat.com/show_bug.cgi?id=1825219): drop icmp frag needed received from other nodes in the cluster [#1059](https://github.com/openshift/cluster-network-operator/pull/1059)
* [Bug 1959406](https://bugzilla.redhat.com/show_bug.cgi?id=1959406): ovn-kube: enable pprof on the metrics endpoint [#1091](https://github.com/openshift/cluster-network-operator/pull/1091)
* [Bug 1958126](https://bugzilla.redhat.com/show_bug.cgi?id=1958126): Remove OVN "--disable-snat-multiple-gws" parameter [#1090](https://github.com/openshift/cluster-network-operator/pull/1090)
* [Bug 1952001](https://bugzilla.redhat.com/show_bug.cgi?id=1952001): Updating api to reduce the  number of watch requests [#1077](https://github.com/openshift/cluster-network-operator/pull/1077)
* [Bug 1954755](https://bugzilla.redhat.com/show_bug.cgi?id=1954755): Multus configuration should allow for net-attach-defs in certain namespaces to be used across namespaces [#956](https://github.com/openshift/cluster-network-operator/pull/956)
* [Bug 1952665](https://bugzilla.redhat.com/show_bug.cgi?id=1952665): Update multi-networkpolicy memory limits/requests [#1072](https://github.com/openshift/cluster-network-operator/pull/1072)
* [Bug 1951891](https://bugzilla.redhat.com/show_bug.cgi?id=1951891): Allow changing cluster network cidr during a migration [#1067](https://github.com/openshift/cluster-network-operator/pull/1067)
* [Bug 1939726](https://bugzilla.redhat.com/show_bug.cgi?id=1939726): Enclose ApplyObject on RetryOnConflict [#1056](https://github.com/openshift/cluster-network-operator/pull/1056)
* [Bug 1947795](https://bugzilla.redhat.com/show_bug.cgi?id=1947795): Remove reference to v1beta1 API [#1083](https://github.com/openshift/cluster-network-operator/pull/1083)
* [Bug 1948582](https://bugzilla.redhat.com/show_bug.cgi?id=1948582): Allow for local gateway mode to be configured [#1066](https://github.com/openshift/cluster-network-operator/pull/1066)
* [Bug 1954187](https://bugzilla.redhat.com/show_bug.cgi?id=1954187): The multus admission controller admissionReviewVersions should be v1 [#1079](https://github.com/openshift/cluster-network-operator/pull/1079)
* Rename workload annotations [#1065](https://github.com/openshift/cluster-network-operator/pull/1065)
* [Bug 1948718](https://bugzilla.redhat.com/show_bug.cgi?id=1948718): IBM Cloud manifest profile patch [#884](https://github.com/openshift/cluster-network-operator/pull/884)
* [Bug 1907353](https://bugzilla.redhat.com/show_bug.cgi?id=1907353): Remove OVS daemonsets [#1028](https://github.com/openshift/cluster-network-operator/pull/1028)
* [Bug 1950935](https://bugzilla.redhat.com/show_bug.cgi?id=1950935): Updating cluster-network-operator builder & base images to be consistent with ART [#974](https://github.com/openshift/cluster-network-operator/pull/974)
* [Bug 1942555](https://bugzilla.redhat.com/show_bug.cgi?id=1942555): Rely on status for ingress controller for endpointPublishingStrategy [#1062](https://github.com/openshift/cluster-network-operator/pull/1062)
* [Bug 1950590](https://bugzilla.redhat.com/show_bug.cgi?id=1950590): Bump openshift/api and update-codegen for netflow maxitems [#1068](https://github.com/openshift/cluster-network-operator/pull/1068)
* [Bug 1952079](https://bugzilla.redhat.com/show_bug.cgi?id=1952079): Don't try to disable the EndpointSlice feature gate [#1069](https://github.com/openshift/cluster-network-operator/pull/1069)
* [Bug 1937594](https://bugzilla.redhat.com/show_bug.cgi?id=1937594): Update the codegen with the latest API [#1063](https://github.com/openshift/cluster-network-operator/pull/1063)
* [Bug 1937594](https://bugzilla.redhat.com/show_bug.cgi?id=1937594): Split SDN migration into 2 phase [#763](https://github.com/openshift/cluster-network-operator/pull/763)
* Add management workload annotations [#1051](https://github.com/openshift/cluster-network-operator/pull/1051)
* [Bug 1937594](https://bugzilla.redhat.com/show_bug.cgi?id=1937594): Bump openshift/api [#1057](https://github.com/openshift/cluster-network-operator/pull/1057)
* [Bug 1948592](https://bugzilla.redhat.com/show_bug.cgi?id=1948592): Add Egress Router Controller [#887](https://github.com/openshift/cluster-network-operator/pull/887)
* [Bug 1949099](https://bugzilla.redhat.com/show_bug.cgi?id=1949099): Fix up network-check-target [#1049](https://github.com/openshift/cluster-network-operator/pull/1049)
* Set the host-network-namespace parameter for ovn-kubernetes [#1033](https://github.com/openshift/cluster-network-operator/pull/1033)
* Add capabilities in simpleMacvlan's staticIPAM config [#353](https://github.com/openshift/cluster-network-operator/pull/353)
* Fix run_locally namespace [#1054](https://github.com/openshift/cluster-network-operator/pull/1054)
* Minor cleanups [#1053](https://github.com/openshift/cluster-network-operator/pull/1053)
* automatic dual-stack conversion [#1034](https://github.com/openshift/cluster-network-operator/pull/1034)
* Remove LB management [#1014](https://github.com/openshift/cluster-network-operator/pull/1014)
* [Bug 1936515](https://bugzilla.redhat.com/show_bug.cgi?id=1936515): Use the election mechanism provided by library-go [#1052](https://github.com/openshift/cluster-network-operator/pull/1052)
* Allow Pods Network MTU to be configurable [#1043](https://github.com/openshift/cluster-network-operator/pull/1043)
* [Bug 1944160](https://bugzilla.redhat.com/show_bug.cgi?id=1944160): ovn: log more info about nbctl daemon database reconnections [#1040](https://github.com/openshift/cluster-network-operator/pull/1040)
* copy the service network slice [#1048](https://github.com/openshift/cluster-network-operator/pull/1048)
* [Bug 1943649](https://bugzilla.redhat.com/show_bug.cgi?id=1943649): Add command for network-check-target instead of hello-openshift [#1046](https://github.com/openshift/cluster-network-operator/pull/1046)
* Kuryr: Update OWNERS [#1044](https://github.com/openshift/cluster-network-operator/pull/1044)
* Update CNO for OVN acl audit logging [#993](https://github.com/openshift/cluster-network-operator/pull/993)
* Kuryr: Update CRDs from upstream [#1045](https://github.com/openshift/cluster-network-operator/pull/1045)
* Add support for exporting network flows [#1021](https://github.com/openshift/cluster-network-operator/pull/1021)
* Allow from router support in CNO [#981](https://github.com/openshift/cluster-network-operator/pull/981)
* [Bug 1905331](https://bugzilla.redhat.com/show_bug.cgi?id=1905331): Set requests on multus components [#1038](https://github.com/openshift/cluster-network-operator/pull/1038)
* [SDN-1249](https://issues.redhat.com/browse/SDN-1249): Bump openshift/api vendoring to pull egressrouter CRD [#1037](https://github.com/openshift/cluster-network-operator/pull/1037)
* [Bug 1916809](https://bugzilla.redhat.com/show_bug.cgi?id=1916809): mount node ovs db for multi-gather gather_network_logs [#1025](https://github.com/openshift/cluster-network-operator/pull/1025)
* Re-enable shared gateway mode [#897](https://github.com/openshift/cluster-network-operator/pull/897)
* MultiNetworkPolicy integration [#923](https://github.com/openshift/cluster-network-operator/pull/923)
* Update remaining CRDs and webhooks to v1 [#968](https://github.com/openshift/cluster-network-operator/pull/968)
* [Bug 1931997](https://bugzilla.redhat.com/show_bug.cgi?id=1931997): mark network-check-target non critical [#1004](https://github.com/openshift/cluster-network-operator/pull/1004)
* ovnkube: better logging for upgrades/downgrades [#1023](https://github.com/openshift/cluster-network-operator/pull/1023)
* [Bug 1939060](https://bugzilla.redhat.com/show_bug.cgi?id=1939060): OVN Upgrade: fix upgrade order of node and master [#1027](https://github.com/openshift/cluster-network-operator/pull/1027)
* ovn/ipsec: set maxUnavailable to 10% [#1024](https://github.com/openshift/cluster-network-operator/pull/1024)
* [Bug 1939752](https://bugzilla.redhat.com/show_bug.cgi?id=1939752): ovnkube: add missing resource requests for SBDB [#1026](https://github.com/openshift/cluster-network-operator/pull/1026)
* [Bug 1933159](https://bugzilla.redhat.com/show_bug.cgi?id=1933159): The Multus daemonset should handle 10% maxUnavailable [#992](https://github.com/openshift/cluster-network-operator/pull/992)
* [Bug 1938920](https://bugzilla.redhat.com/show_bug.cgi?id=1938920): Set maxUnavailable for ovs-node daemonset [#1020](https://github.com/openshift/cluster-network-operator/pull/1020)
* [Bug 1937452](https://bugzilla.redhat.com/show_bug.cgi?id=1937452): Fix golangci-lint violations [#1013](https://github.com/openshift/cluster-network-operator/pull/1013)
* Allow dual stack migration [#959](https://github.com/openshift/cluster-network-operator/pull/959)
* sdn: Add list/watch RBAC for endpointslices to openshift-sdn [#1003](https://github.com/openshift/cluster-network-operator/pull/1003)
* Fix possible name patterns on regex [#1015](https://github.com/openshift/cluster-network-operator/pull/1015)
* SDN-1571 ipsec: Allow enablement/disablement at runtime [#975](https://github.com/openshift/cluster-network-operator/pull/975)
* [Bug 1937005](https://bugzilla.redhat.com/show_bug.cgi?id=1937005): kuryr/alerts: change the rule for free count [#1009](https://github.com/openshift/cluster-network-operator/pull/1009)
* [Bug 1933174](https://bugzilla.redhat.com/show_bug.cgi?id=1933174): Use 10% for ovs maxUnavailable for rolling update [#996](https://github.com/openshift/cluster-network-operator/pull/996)
* config: Set enable-profiling true by default and allow `enable-profiling` as a proxy argument [#988](https://github.com/openshift/cluster-network-operator/pull/988)
* OSD-6600 network-metrics missing priorityClass [#994](https://github.com/openshift/cluster-network-operator/pull/994)
* [Bug 1934711](https://bugzilla.redhat.com/show_bug.cgi?id=1934711): Use 10% for ovnkube-node for maxUnavailable [#1000](https://github.com/openshift/cluster-network-operator/pull/1000)
* [Bug 1933173](https://bugzilla.redhat.com/show_bug.cgi?id=1933173): Use 10% for sdn maxUnavailable for rolling update [#995](https://github.com/openshift/cluster-network-operator/pull/995)
* [Bug 1933179](https://bugzilla.redhat.com/show_bug.cgi?id=1933179): Use 10% for nw-check-target maxUnavailable [#997](https://github.com/openshift/cluster-network-operator/pull/997)
* bump api version to get multiNetworkPolicy changes [#1005](https://github.com/openshift/cluster-network-operator/pull/1005)
* [Bug 1933269](https://bugzilla.redhat.com/show_bug.cgi?id=1933269): Include LB members for Machines created on day-2 operation [#999](https://github.com/openshift/cluster-network-operator/pull/999)
* cmd: stop using URL_ONLY_KUBECONFIG [#976](https://github.com/openshift/cluster-network-operator/pull/976)
* [Bug 1908916](https://bugzilla.redhat.com/show_bug.cgi?id=1908916): disable ovsdb column diffs if supported [#964](https://github.com/openshift/cluster-network-operator/pull/964)
* Enable golangci-lint; fix up lint issues [#984](https://github.com/openshift/cluster-network-operator/pull/984)
* [Bug 1924425](https://bugzilla.redhat.com/show_bug.cgi?id=1924425): Update protobuf version to address CVE-2021-3121 [#985](https://github.com/openshift/cluster-network-operator/pull/985)
* [Bug 1920209](https://bugzilla.redhat.com/show_bug.cgi?id=1920209): The pods in the Multus daemonset should exit in a reasonable time during an upgrade. [#962](https://github.com/openshift/cluster-network-operator/pull/962)
* [Bug 1927244](https://bugzilla.redhat.com/show_bug.cgi?id=1927244): Kuryr: Always set worker_nodes_subnets [#980](https://github.com/openshift/cluster-network-operator/pull/980)
* [Bug 1928157](https://bugzilla.redhat.com/show_bug.cgi?id=1928157): Don't set ClusterOperator Version until rollout is complete [#979](https://github.com/openshift/cluster-network-operator/pull/979)
* : Bug 1913399: Bump flow control apiVersion to beta [#937](https://github.com/openshift/cluster-network-operator/pull/937)
* Suppress sleep message in ovn-ipsec container [#971](https://github.com/openshift/cluster-network-operator/pull/971)
* [Bug 1921184](https://bugzilla.redhat.com/show_bug.cgi?id=1921184): Kuryr: Let Kuryr autodetect primary CNI interface [#969](https://github.com/openshift/cluster-network-operator/pull/969)
* [Bug 1838343](https://bugzilla.redhat.com/show_bug.cgi?id=1838343): Improve the sb-db and nb-db readiness check to ensure it fails when cluster is not stable. [#655](https://github.com/openshift/cluster-network-operator/pull/655)
* [Bug 1912820](https://bugzilla.redhat.com/show_bug.cgi?id=1912820): competing connectivitycheckcontrollers cause pod restarts during upgrades [#970](https://github.com/openshift/cluster-network-operator/pull/970)
* [Bug 1918375](https://bugzilla.redhat.com/show_bug.cgi?id=1918375): Add tokenreviews permissions for kube-proxy [#960](https://github.com/openshift/cluster-network-operator/pull/960)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/a5e95f43675da75519fe12bb8eaf16d421d1f0ef...6d78d0102eab4e4141533192479dff37dc100e91)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/9e185d59cfbb4dd083c0ae3c82014aea110697b3)

* [Bug 2018053](https://bugzilla.redhat.com/show_bug.cgi?id=2018053): tuned: add timeout and restarts [#286](https://github.com/openshift/cluster-node-tuning-operator/pull/286)
* [Bug 2013678](https://bugzilla.redhat.com/show_bug.cgi?id=2013678): TuneD: workaround for high CPU utilization of [scheduler] plug-in. [#280](https://github.com/openshift/cluster-node-tuning-operator/pull/280)
* [Bug 1998120](https://bugzilla.redhat.com/show_bug.cgi?id=1998120): Add a cgroup blacklisting rule to parent openshift profile. [#266](https://github.com/openshift/cluster-node-tuning-operator/pull/266)
* [Bug 1999608](https://bugzilla.redhat.com/show_bug.cgi?id=1999608): Reload when deps of recommended profile change. [#268](https://github.com/openshift/cluster-node-tuning-operator/pull/268)
* [Bug 1986992](https://bugzilla.redhat.com/show_bug.cgi?id=1986992): Handle kube-apiserver disruption more gracefully. [#257](https://github.com/openshift/cluster-node-tuning-operator/pull/257)
* [Bug 1985908](https://bugzilla.redhat.com/show_bug.cgi?id=1985908): scheduler: new option cgroup_ps_blacklist [#254](https://github.com/openshift/cluster-node-tuning-operator/pull/254)
* [Bug 1980788](https://bugzilla.redhat.com/show_bug.cgi?id=1980788): Updating to the latest stalld v1.13.0. [#247](https://github.com/openshift/cluster-node-tuning-operator/pull/247)
* [Bug 1974718](https://bugzilla.redhat.com/show_bug.cgi?id=1974718): Fix conditional order for setting net device param. [#240](https://github.com/openshift/cluster-node-tuning-operator/pull/240)
* [Bug 1973237](https://bugzilla.redhat.com/show_bug.cgi?id=1973237): Switch back to NTO-shipped stalld. [#237](https://github.com/openshift/cluster-node-tuning-operator/pull/237)
* [Bug 1969832](https://bugzilla.redhat.com/show_bug.cgi?id=1969832): TuneD: fix multiple inheritance where parents include common ancestor [#233](https://github.com/openshift/cluster-node-tuning-operator/pull/233)
* [Bug 1966294](https://bugzilla.redhat.com/show_bug.cgi?id=1966294): Address CVE-2021-33194 in golang.org/x/net [#232](https://github.com/openshift/cluster-node-tuning-operator/pull/232)
* [Bug 1963848](https://bugzilla.redhat.com/show_bug.cgi?id=1963848): Use OS-shipped stalld vs. the NTO-shipped one. [#226](https://github.com/openshift/cluster-node-tuning-operator/pull/226)
* [Bug 1963866](https://bugzilla.redhat.com/show_bug.cgi?id=1963866): Bump vendor dependencies to k8s 1.21.1 [#231](https://github.com/openshift/cluster-node-tuning-operator/pull/231)
* [Bug 1962219](https://bugzilla.redhat.com/show_bug.cgi?id=1962219): Switch to client-go leader-with-lease election. [#229](https://github.com/openshift/cluster-node-tuning-operator/pull/229)
* [Bug 1962630](https://bugzilla.redhat.com/show_bug.cgi?id=1962630): Update to the current upstream TuneD. [#230](https://github.com/openshift/cluster-node-tuning-operator/pull/230)
* [Bug 1960337](https://bugzilla.redhat.com/show_bug.cgi?id=1960337): manifests: fix selector in node-tuning-operator ServiceMonitor [#227](https://github.com/openshift/cluster-node-tuning-operator/pull/227)
* Rename workload annotations [#225](https://github.com/openshift/cluster-node-tuning-operator/pull/225)
* [Bug 1948782](https://bugzilla.redhat.com/show_bug.cgi?id=1948782): Revert "add 'single-node-production-edge' annotations to CVO manifests." [#224](https://github.com/openshift/cluster-node-tuning-operator/pull/224)
* Bump to golang 1.16 and various vendor deps. [#222](https://github.com/openshift/cluster-node-tuning-operator/pull/222)
* Add management workload annotations [#223](https://github.com/openshift/cluster-node-tuning-operator/pull/223)
* TuneD: udev: explicitly sort udev properties [#221](https://github.com/openshift/cluster-node-tuning-operator/pull/221)
* Add additionalPrinterColumns to profiles CRD. [#220](https://github.com/openshift/cluster-node-tuning-operator/pull/220)
* Updating cluster-node-tuning-operator builder & base images to be consistent with ART [#218](https://github.com/openshift/cluster-node-tuning-operator/pull/218)
* Add "core" e2e tests. [#217](https://github.com/openshift/cluster-node-tuning-operator/pull/217)
* Bump to the latest ignition 3.2 [#216](https://github.com/openshift/cluster-node-tuning-operator/pull/216)
* Add e2e test for adjusting netdev queue count. [#214](https://github.com/openshift/cluster-node-tuning-operator/pull/214)
* Updating to the latest stalld v1.9.0. [#213](https://github.com/openshift/cluster-node-tuning-operator/pull/213)
* Do not manupulate BLS entries and grub config [#212](https://github.com/openshift/cluster-node-tuning-operator/pull/212)
* [Bug 1926903](https://bugzilla.redhat.com/show_bug.cgi?id=1926903): Keep ignition units in sync with [service] plugin. [#211](https://github.com/openshift/cluster-node-tuning-operator/pull/211)
* [Bug 1926903](https://bugzilla.redhat.com/show_bug.cgi?id=1926903): Instantiate the stalld systemd unit as disabled. [#207](https://github.com/openshift/cluster-node-tuning-operator/pull/207)
* stalld: Remove another architecture specific gcc flag [#209](https://github.com/openshift/cluster-node-tuning-operator/pull/209)
* Do not include *-patch files in /manifests. [#208](https://github.com/openshift/cluster-node-tuning-operator/pull/208)
* Remove Dockerfile.rhel7 no longer needed [#203](https://github.com/openshift/cluster-node-tuning-operator/pull/203)
* Updating cluster-node-tuning-operator images to be consistent with new ART images [#194](https://github.com/openshift/cluster-node-tuning-operator/pull/194)
* Support for adjusting netdev queue count. [#205](https://github.com/openshift/cluster-node-tuning-operator/pull/205)
* Add more related objects to ClusterOperator. [#206](https://github.com/openshift/cluster-node-tuning-operator/pull/206)
* Updating cluster-node-tuning-operator builder & base images to be consistent with ART [#204](https://github.com/openshift/cluster-node-tuning-operator/pull/204)
* Add status conditions and profile applied to Profile(s) [#188](https://github.com/openshift/cluster-node-tuning-operator/pull/188)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/93164875e3bc9030e995b465c91aafb29226ac39...9e185d59cfbb4dd083c0ae3c82014aea110697b3)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/7f0e9b6659949421100469e3af399888cca7042e)

* [Bug 2052097](https://bugzilla.redhat.com/show_bug.cgi?id=2052097): global pull secret not working in OCP4.7.4+ for additio… [#493](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/493)
* [Bug 2003946](https://bugzilla.redhat.com/show_bug.cgi?id=2003946): Deploy PDB to prevent more than one replica going unavailable [#473](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/473)
* [Bug 1994655](https://bugzilla.redhat.com/show_bug.cgi?id=1994655): apiservice-controller: don't update the failing condition when an operator has been requested to shutdown [#482](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/482)
* [Bug 1996044](https://bugzilla.redhat.com/show_bug.cgi?id=1996044): bindata: run openshift-apiserver as root explicitly. [#467](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/467)
* [Bug 1979303](https://bugzilla.redhat.com/show_bug.cgi?id=1979303): clear encryption conditions when there is no work to be done [#463](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/463)
* [Bug 1969631](https://bugzilla.redhat.com/show_bug.cgi?id=1969631): encryption controllers wait for all informers before running the sync loops [#456](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/456)
* [Bug 1879182](https://bugzilla.redhat.com/show_bug.cgi?id=1879182): audit policies now use 'secure-' by default, remove custom getter [#455](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/455)
* [Bug 1943804](https://bugzilla.redhat.com/show_bug.cgi?id=1943804): splits the encryption tests [#454](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/454)
* [Bug 1943804](https://bugzilla.redhat.com/show_bug.cgi?id=1943804): stub for splitting encryption tests [#453](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/453)
* [Bug 1961561](https://bugzilla.redhat.com/show_bug.cgi?id=1961561): pick up the precondition checker for reducing encryption QPS [#451](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/451)
* [Bug 1953563](https://bugzilla.redhat.com/show_bug.cgi?id=1953563): Switch to Golang 1.16 for build-root [#448](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/448)
* [Bug 1953563](https://bugzilla.redhat.com/show_bug.cgi?id=1953563): Add .ci-operator.yaml with build_root_image [#452](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/452)
* Rename workload annotations [#446](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/446)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): DelegatingAuthenticationOptions TokenReview request timeout [#447](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/447)
* Add management workload annotations [#443](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/443)
* [Bug 1942725](https://bugzilla.redhat.com/show_bug.cgi?id=1942725): explicitly allow apiserver pods to write to their root FS [#437](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/437)
* extends shutdown delay duration to 10 seconds [#442](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/442)
* expose pod information to oas container via env variables [#440](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/440)
* bump lib-go to pick up workload progressing changes [#439](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/439)
* update library-go to fix tight loops [#438](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/438)
* Updating ose-cluster-openshift-apiserver-operator builder & base images to be consistent with ART [#436](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/436)
* bump lib-go ti pick up latest audit config and workload controller changes [#435](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/435)
* removes the encryption provider [#432](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/432)
* Updating ose-cluster-openshift-apiserver-operator builder & base images to be consistent with ART [#431](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/431)
* switch to v1beta1 for the p&f APIs [#425](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/425)
* [Bug 1912820](https://bugzilla.redhat.com/show_bug.cgi?id=1912820): competing connectivitycheckcontrollers cause pod restarts during upgrades [#430](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/430)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/df9b1a45165dd1a2cc17b5a885370093bb237e41...7f0e9b6659949421100469e3af399888cca7042e)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/286c157755c8120ce969c7c15f969737b46b1a0a)

* [Bug 1965283](https://bugzilla.redhat.com/show_bug.cgi?id=1965283): Static Resources Controller for Sync [#216](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/216)
* [Bug 1925409](https://bugzilla.redhat.com/show_bug.cgi?id=1925409): Let openshift-controller-manager create service account tokens [#213](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/213)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): DelegatingAuthenticationOptions TokenReview request timeout [#212](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/212)
* [Bug 1948011](https://bugzilla.redhat.com/show_bug.cgi?id=1948011): seed upgradeable condition in ocm-o cluster operator status so library-go union code can find it [#210](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/210)
* Add management workload annotations [#206](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/206)
* [Bug 1947793](https://bugzilla.redhat.com/show_bug.cgi?id=1947793): Deprecated API in use [#208](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/208)
* Updating ose-cluster-openshift-controller-manager-operator builder & base images to be consistent with ART [#202](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/202)
* [Bug 1941526](https://bugzilla.redhat.com/show_bug.cgi?id=1941526): Bump kubernetes to 0.20.5 [#203](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/203)
* [BUILD-186](https://issues.redhat.com/browse/BUILD-186): add buildconfig/status permissions to ocm [#201](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/201)
* switch to v1beta1 for the p&f APIs [#192](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/192)
* [Bug 1911470](https://bugzilla.redhat.com/show_bug.cgi?id=1911470): Set registry routes in operand config [#197](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/197)
* Updating ose-cluster-openshift-controller-manager-operator builder & base images to be consistent with ART [#198](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/198)
* Remove tnozicka from OWNERS [#196](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/196)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/2a8963a9c5755d4951d882bd816cd4d6ccdf02cd...286c157755c8120ce969c7c15f969737b46b1a0a)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/ec46ea5ce3735fcb3d10290834f9ae5fb31148f0)

* Updating cluster-policy-controller builder & base images to be consistent with ART [#59](https://github.com/openshift/cluster-policy-controller/pull/59)
* [Bug 1934164](https://bugzilla.redhat.com/show_bug.cgi?id=1934164): Bump github.com/gogo/protobuf to v1.3.2 [#57](https://github.com/openshift/cluster-policy-controller/pull/57)
* Sync with the latest library-go to pull new crypto ciphers [#56](https://github.com/openshift/cluster-policy-controller/pull/56)
* Updating cluster-policy-controller builder & base images to be consistent with ART [#55](https://github.com/openshift/cluster-policy-controller/pull/55)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/42791bac64066daac0922b3d77e4bd86edae3b4e...ec46ea5ce3735fcb3d10290834f9ae5fb31148f0)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/31fb491fc14faed6ebbe41a526764947069ff0a2)

* seed relatedObjects in manifest yaml [#376](https://github.com/openshift/cluster-samples-operator/pull/376)
* [Bug 1960334](https://bugzilla.redhat.com/show_bug.cgi?id=1960334): manifests: fix selector in ServiceMonitor [#374](https://github.com/openshift/cluster-samples-operator/pull/374)
* [Bug 1955100](https://bugzilla.redhat.com/show_bug.cgi?id=1955100): Fixing Deprecated API in use [#373](https://github.com/openshift/cluster-samples-operator/pull/373)
* Rename workload annotations [#372](https://github.com/openshift/cluster-samples-operator/pull/372)
* [Bug 1949481](https://bugzilla.redhat.com/show_bug.cgi?id=1949481): add DeepCopy to avoid SharedInformer cache mutation [#369](https://github.com/openshift/cluster-samples-operator/pull/369)
* [Bug 1950236](https://bugzilla.redhat.com/show_bug.cgi?id=1950236): OKD: replace some docker.io images with quay.io [#360](https://github.com/openshift/cluster-samples-operator/pull/360)
* [BUILD-249](https://issues.redhat.com/browse/BUILD-249): openshift/library sync for 4.8 [#367](https://github.com/openshift/cluster-samples-operator/pull/367)
* [Bug 1948782](https://bugzilla.redhat.com/show_bug.cgi?id=1948782): revert single-node-production-edge annotation [#368](https://github.com/openshift/cluster-samples-operator/pull/368)
* bump(k8s) 1.21.0 [#365](https://github.com/openshift/cluster-samples-operator/pull/365)
* Add management workload annotations [#366](https://github.com/openshift/cluster-samples-operator/pull/366)
* Fix Typo [#364](https://github.com/openshift/cluster-samples-operator/pull/364)
* Add IBM cloud managed profile manifest patch [#363](https://github.com/openshift/cluster-samples-operator/pull/363)
* Remove hello-openshift imagestream [#362](https://github.com/openshift/cluster-samples-operator/pull/362)
* Updating ose-cluster-samples-operator builder & base images to be consistent with ART [#361](https://github.com/openshift/cluster-samples-operator/pull/361)
* Updating ose-cluster-samples-operator builder & base images to be consistent with ART [#355](https://github.com/openshift/cluster-samples-operator/pull/355)
* [Bug 1930570](https://bugzilla.redhat.com/show_bug.cgi?id=1930570): Update Jenkins monitored templates names [#357](https://github.com/openshift/cluster-samples-operator/pull/357)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/1892553d5556068b3e1d89336a349e1e3b3511af...31fb491fc14faed6ebbe41a526764947069ff0a2)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/54f1a906734849db6daf4951346816f005803d66)

* [Bug 2034270](https://bugzilla.redhat.com/show_bug.cgi?id=2034270): Add trusted CA bundle to vsphere operators [#249](https://github.com/openshift/cluster-storage-operator/pull/249)
* [Bug 1996672](https://bugzilla.redhat.com/show_bug.cgi?id=1996672): Add proxy support to cinder CSI [#210](https://github.com/openshift/cluster-storage-operator/pull/210)
* [Bug 1986026](https://bugzilla.redhat.com/show_bug.cgi?id=1986026): Manila CSI driver is not in must-gather [#192](https://github.com/openshift/cluster-storage-operator/pull/192)
* [Bug 1947402](https://bugzilla.redhat.com/show_bug.cgi?id=1947402): Add permissions poddisruptionbudgets in AWS CSI operator' [#171](https://github.com/openshift/cluster-storage-operator/pull/171)
* [Bug 1961120](https://bugzilla.redhat.com/show_bug.cgi?id=1961120): added permissions to service monitoring [#167](https://github.com/openshift/cluster-storage-operator/pull/167)
* [Bug 1936871](https://bugzilla.redhat.com/show_bug.cgi?id=1936871): Add volumes with credentials to Cinder operator deployment [#141](https://github.com/openshift/cluster-storage-operator/pull/141)
* [Bug 1961538](https://bugzilla.redhat.com/show_bug.cgi?id=1961538): manifests: remove namespace from cluster-storage-operator-role binding [#168](https://github.com/openshift/cluster-storage-operator/pull/168)
* [Bug 1943719](https://bugzilla.redhat.com/show_bug.cgi?id=1943719): Add alert about vsphere-problem-detector unable to connect [#166](https://github.com/openshift/cluster-storage-operator/pull/166)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): DelegatingAuthenticationOptions TokenReview request timeout [#165](https://github.com/openshift/cluster-storage-operator/pull/165)
* Rename workload annotations [#164](https://github.com/openshift/cluster-storage-operator/pull/164)
* [Bug 1949357](https://bugzilla.redhat.com/show_bug.cgi?id=1949357): Add missing RBAC rules to Manila operator [#163](https://github.com/openshift/cluster-storage-operator/pull/163)
* [Bug 1948505](https://bugzilla.redhat.com/show_bug.cgi?id=1948505): Add missing RBAC rules for vSphere [#156](https://github.com/openshift/cluster-storage-operator/pull/156)
* [Bug 1948721](https://bugzilla.redhat.com/show_bug.cgi?id=1948721): IBM Cloud manifest profile patch [#146](https://github.com/openshift/cluster-storage-operator/pull/146)
* [Bug 1947360](https://bugzilla.redhat.com/show_bug.cgi?id=1947360): vSphere: set CPU/memory resource request [#157](https://github.com/openshift/cluster-storage-operator/pull/157)
* [Bug 1949357](https://bugzilla.redhat.com/show_bug.cgi?id=1949357): Allow Manila operator to create ServiceMonitor in the driver namespace [#162](https://github.com/openshift/cluster-storage-operator/pull/162)
* [Bug 1947866](https://bugzilla.redhat.com/show_bug.cgi?id=1947866): Add log level to Azure Disk CSI Operator [#159](https://github.com/openshift/cluster-storage-operator/pull/159)
* [Bug 1948448](https://bugzilla.redhat.com/show_bug.cgi?id=1948448): Add log level to vSphere operator [#158](https://github.com/openshift/cluster-storage-operator/pull/158)
* [Bug 1949554](https://bugzilla.redhat.com/show_bug.cgi?id=1949554): Pass KUBE_RBAC_PROXY to vSphere CSI driver operator [#161](https://github.com/openshift/cluster-storage-operator/pull/161)
* [Bug 1924500](https://bugzilla.redhat.com/show_bug.cgi?id=1924500): Rebase to Kubernetes 1.21 libraries [#160](https://github.com/openshift/cluster-storage-operator/pull/160)
* [Bug 1949041](https://bugzilla.redhat.com/show_bug.cgi?id=1949041): Update image-references for vsphere [#155](https://github.com/openshift/cluster-storage-operator/pull/155)
* Remove "vmware" prefix from CSI operator and driver [#149](https://github.com/openshift/cluster-storage-operator/pull/149)
* Add management workload annotations [#150](https://github.com/openshift/cluster-storage-operator/pull/150)
* Add vsphere syncer deployment [#153](https://github.com/openshift/cluster-storage-operator/pull/153)
* Degrade the cluster when an unsupported CSI driver is already installed [#152](https://github.com/openshift/cluster-storage-operator/pull/152)
* Add TokenReview permissions to newly introduced operators [#154](https://github.com/openshift/cluster-storage-operator/pull/154)
* Pass KUBE_RBAC_PROXY_IMAGE to CSI driver operators [#151](https://github.com/openshift/cluster-storage-operator/pull/151)
* Add AzureDisk CSI driver installation [#148](https://github.com/openshift/cluster-storage-operator/pull/148)
* Start tech-preview CSI driver operators when tech preview is enabled [#144](https://github.com/openshift/cluster-storage-operator/pull/144)
* Prepare for metrics collection in CSI driver operators [#145](https://github.com/openshift/cluster-storage-operator/pull/145)
* Add service account names to credentials request manifest [#136](https://github.com/openshift/cluster-storage-operator/pull/136)
* Updating cluster-storage-operator builder & base images to be consistent with ART [#143](https://github.com/openshift/cluster-storage-operator/pull/143)
* Allow log level to be replaced [#142](https://github.com/openshift/cluster-storage-operator/pull/142)
* Prevent panic on webhook authenticator and authorizer timeout before response [#139](https://github.com/openshift/cluster-storage-operator/pull/139)
* Propagate log level to GCE and Cinder CSI driver operators [#138](https://github.com/openshift/cluster-storage-operator/pull/138)
* Updating cluster-storage-operator builder & base images to be consistent with ART [#135](https://github.com/openshift/cluster-storage-operator/pull/135)
* Fix typo in README.md [#116](https://github.com/openshift/cluster-storage-operator/pull/116)
* vsphere: don't redeploy StorageClass in every sync [#129](https://github.com/openshift/cluster-storage-operator/pull/129)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/d6f34df7b01139ec35602261b46da91f3eedf0b4...54f1a906734849db6daf4951346816f005803d66)


### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/87835b737f0a90a6259150746114f251241bf52e)

* Pack both keys in one verifier-public-key-ci entry [#35](https://github.com/openshift/cluster-update-keys/pull/35)
* Adding the new Openshift CI Signer key [#33](https://github.com/openshift/cluster-update-keys/pull/33)
* [Bug 1919356](https://bugzilla.redhat.com/show_bug.cgi?id=1919356): Add IBM Cloud managed annotations to CVO manifests [#24](https://github.com/openshift/cluster-update-keys/pull/24)
* Updating ose-cluster-update-keys builder & base images to be consistent with ART [#31](https://github.com/openshift/cluster-update-keys/pull/31)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/b7e791773b67f9acd6f521b8c1f69778e43a7d94...87835b737f0a90a6259150746114f251241bf52e)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/4b28e9e5d342f14fd599174c2dc2083e5ccdf3b4)

* [Bug 2047434](https://bugzilla.redhat.com/show_bug.cgi?id=2047434): Changing the ClusterNotUpgradeable alert to info [#731](https://github.com/openshift/cluster-version-operator/pull/731)
* [Bug 2038936](https://bugzilla.redhat.com/show_bug.cgi?id=2038936): *: Use --v=2 logging to drop client-side throttling noise [#724](https://github.com/openshift/cluster-version-operator/pull/724)
* [Bug 1982683](https://bugzilla.redhat.com/show_bug.cgi?id=1982683): [release-4.8] Respect noProxy [#691](https://github.com/openshift/cluster-version-operator/pull/691)
* [Bug 2025955](https://bugzilla.redhat.com/show_bug.cgi?id=2025955): Removing the extra indentation [#696](https://github.com/openshift/cluster-version-operator/pull/696)
* [Bug 2015025](https://bugzilla.redhat.com/show_bug.cgi?id=2015025): lib/resourcemerge/imagestream.go: Copy all data for new tag reference [#679](https://github.com/openshift/cluster-version-operator/pull/679)
* [Bug 2011954](https://bugzilla.redhat.com/show_bug.cgi?id=2011954): pkg/cvo/upgradeable: Include messages for multiple-reason Upgradeable=False [#672](https://github.com/openshift/cluster-version-operator/pull/672)
* [Bug 1999092](https://bugzilla.redhat.com/show_bug.cgi?id=1999092): Add and enable admin ack Upgradeable condition gate [#647](https://github.com/openshift/cluster-version-operator/pull/647)
* [Bug 1999777](https://bugzilla.redhat.com/show_bug.cgi?id=1999777): Ensure recent etcd backup before allowing minor-version updates [#649](https://github.com/openshift/cluster-version-operator/pull/649)
* [Bug 1980411](https://bugzilla.redhat.com/show_bug.cgi?id=1980411): [release-4.8] pkg/cvo/egress: Load HTTPS proxy from Proxy status [#627](https://github.com/openshift/cluster-version-operator/pull/627)
* [Bug 1879184](https://bugzilla.redhat.com/show_bug.cgi?id=1879184): Fixing the log message in rbac.go for clusterrole [#588](https://github.com/openshift/cluster-version-operator/pull/588)
* [Bug 1879184](https://bugzilla.redhat.com/show_bug.cgi?id=1879184): Log object updates and show existing/required diff [#561](https://github.com/openshift/cluster-version-operator/pull/561)
* [Bug 1946479](https://bugzilla.redhat.com/show_bug.cgi?id=1946479): prevent pod deployment deadlock due to custom SA projected volume injection [#585](https://github.com/openshift/cluster-version-operator/pull/585)
* docs/dev: Fix code block brackets in run-cvo-locally.md [#581](https://github.com/openshift/cluster-version-operator/pull/581)
* [Bug 1881484](https://bugzilla.redhat.com/show_bug.cgi?id=1881484): Set defaults in deployment [#559](https://github.com/openshift/cluster-version-operator/pull/559)
* [Bug 1941901](https://bugzilla.redhat.com/show_bug.cgi?id=1941901): lib/resourcemerge/core: Fix toleration matching logic [#578](https://github.com/openshift/cluster-version-operator/pull/578)
* [Bug 1881514](https://bugzilla.redhat.com/show_bug.cgi?id=1881514): Prevent hotlooping in ImageStreams [#579](https://github.com/openshift/cluster-version-operator/pull/579)
* hack/generate-lib-resources: Use library-go manifests [#552](https://github.com/openshift/cluster-version-operator/pull/552)
* [Bug 1947797](https://bugzilla.redhat.com/show_bug.cgi?id=1947797): Bumping openshift/api to vendor apiextensions.k8s.io/v1 [#567](https://github.com/openshift/cluster-version-operator/pull/567)
* Update a doc example to match modern OCP [#524](https://github.com/openshift/cluster-version-operator/pull/524)
* [Bug 1962882](https://bugzilla.redhat.com/show_bug.cgi?id=1962882): pkg/cvo/updatepayload: Set priorityClassName for the version Job [#571](https://github.com/openshift/cluster-version-operator/pull/571)
* [Bug 1927168](https://bugzilla.redhat.com/show_bug.cgi?id=1927168): pkg/cvo/sync_worker: Increment Attempt on failed reconciliation [#569](https://github.com/openshift/cluster-version-operator/pull/569)
* [Bug 1881481](https://bugzilla.redhat.com/show_bug.cgi?id=1881481): TargetPort should default to port in ServicePort if unset [#563](https://github.com/openshift/cluster-version-operator/pull/563)
* [Bug 1881520](https://bugzilla.redhat.com/show_bug.cgi?id=1881520): avoid hotlooping on RoleBindings with empty APIGroup [#562](https://github.com/openshift/cluster-version-operator/pull/562)
* Dockerfile*: Bump to Go 1.16 [#564](https://github.com/openshift/cluster-version-operator/pull/564)
* [Bug 1960554](https://bugzilla.redhat.com/show_bug.cgi?id=1960554): Remove rbacv1beta1 support [#565](https://github.com/openshift/cluster-version-operator/pull/565)
* [Bug 1927168](https://bugzilla.redhat.com/show_bug.cgi?id=1927168): pkg/cvo/internal/operatorstatus: Replace wait-for with single-shot "is it alive now?" [#560](https://github.com/openshift/cluster-version-operator/pull/560)
* [Bug 1881481](https://bugzilla.redhat.com/show_bug.cgi?id=1881481): Only compare ServiceType when set in manifest [#558](https://github.com/openshift/cluster-version-operator/pull/558)
* [Bug 1957991](https://bugzilla.redhat.com/show_bug.cgi?id=1957991): install/0000_90_cluster-version-operator_02_servicemonitor: Update ClusterOperatorDegraded message to 30m [#556](https://github.com/openshift/cluster-version-operator/pull/556)
* [Bug 1957775](https://bugzilla.redhat.com/show_bug.cgi?id=1957775): pkg/cvo/sync_worker: Shift ClusterOperator pre-creation into the manifest-task node [#553](https://github.com/openshift/cluster-version-operator/pull/553)
* [Bug 1957991](https://bugzilla.redhat.com/show_bug.cgi?id=1957991): install/0000_90_cluster-version-operator_02_servicemonitor: Soften ClusterOperatorDegraded [#554](https://github.com/openshift/cluster-version-operator/pull/554)
* [Bug 1834551](https://bugzilla.redhat.com/show_bug.cgi?id=1834551): pkg/cvo/metrics: Ignore Degraded for cluster_operator_up [#550](https://github.com/openshift/cluster-version-operator/pull/550)
* Rename workload annotations [#548](https://github.com/openshift/cluster-version-operator/pull/548)
* [Bug 1951339](https://bugzilla.redhat.com/show_bug.cgi?id=1951339): lib/resourcemerge/core: Clear env and envFrom if unset in manifest [#549](https://github.com/openshift/cluster-version-operator/pull/549)
* [Bug 1950430](https://bugzilla.redhat.com/show_bug.cgi?id=1950430): pkg/cvo/metrics: Drop HTTP, require HTTPS for metrics access [#481](https://github.com/openshift/cluster-version-operator/pull/481)
* Add management workload annotations [#543](https://github.com/openshift/cluster-version-operator/pull/543)
* docs/user/reconciliation: Add some English to the release image inspection [#542](https://github.com/openshift/cluster-version-operator/pull/542)
* pkg/cvo/internal/operatorstatus: Drop deprecated failing/progressing handling [#527](https://github.com/openshift/cluster-version-operator/pull/527)
* lib/resourcemerge/rbac: Reconcile ClusterRole.AggregationRule [#544](https://github.com/openshift/cluster-version-operator/pull/544)
* docs/user/status: Mention channel-clearing for VersionNotFound [#541](https://github.com/openshift/cluster-version-operator/pull/541)
* [Bug 1938947](https://bugzilla.redhat.com/show_bug.cgi?id=1938947): Ensure automountServiceAccountToken is synced on service account updates [#537](https://github.com/openshift/cluster-version-operator/pull/537)
* Document impact of upgradeable condition on the ability to begin an upgrade [#538](https://github.com/openshift/cluster-version-operator/pull/538)
* Updating cluster-version-operator builder & base images to be consistent with ART [#515](https://github.com/openshift/cluster-version-operator/pull/515)
* [Bug 1871303](https://bugzilla.redhat.com/show_bug.cgi?id=1871303): metrics: serve metrics after leader lock acquired [#528](https://github.com/openshift/cluster-version-operator/pull/528)
* pkg/cvo/metrics: Exclude unrecognized statuses from cluster_operator_conditions [#530](https://github.com/openshift/cluster-version-operator/pull/530)
* [Bug 1929917](https://bugzilla.redhat.com/show_bug.cgi?id=1929917): pkg/cvo/sync_worker: Skip precreation of baremetal ClusterOperator [#531](https://github.com/openshift/cluster-version-operator/pull/531)
* pkg/cvo/internal/operatorstatus: Change nested message [#514](https://github.com/openshift/cluster-version-operator/pull/514)
* Use profile from the installer to render CVO manifests [#522](https://github.com/openshift/cluster-version-operator/pull/522)
* Revert "Merge pull request #523 from jottofar/cv-logging" [#529](https://github.com/openshift/cluster-version-operator/pull/529)
* pkg/cvo: Add logging to track ClusterVersion [#523](https://github.com/openshift/cluster-version-operator/pull/523)
* pkg/payload/task: Fix UpdateEffectType const comments [#513](https://github.com/openshift/cluster-version-operator/pull/513)
* [Bug 1927944](https://bugzilla.redhat.com/show_bug.cgi?id=1927944): pkg/start: Fix shutdown deadlock when die before getting a leader lock [#519](https://github.com/openshift/cluster-version-operator/pull/519)
* pkg/cvo/upgradeable: Fix "Upgradebale" -> "Upgradeable" [#459](https://github.com/openshift/cluster-version-operator/pull/459)
* pkg/cvo/metrics: Log metrics-server shutdown [#453](https://github.com/openshift/cluster-version-operator/pull/453)
* pkg/cvo/sync_worker: Make expected/actual version mismatch fatal [#431](https://github.com/openshift/cluster-version-operator/pull/431)
* [Bug 1926310](https://bugzilla.redhat.com/show_bug.cgi?id=1926310): install/0000_90_cluster-version-operator_02_servicemonitor.yaml: adjust "CannotRetrieveUpdates" to "warning" [#509](https://github.com/openshift/cluster-version-operator/pull/509)
* pkg/cvo/updatepayload: Fix "verifcation" -> "verification" typo [#511](https://github.com/openshift/cluster-version-operator/pull/511)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/4e7c701d940682bbfe7ba6ed0bdf4c814b4694a6...4b28e9e5d342f14fd599174c2dc2083e5ccdf3b4)


### [configmap-reloader](https://github.com/openshift/configmap-reload/tree/0d221296e3918abc3c1367a1e7c220baf000965a)

* Updating configmap-reload builder & base images to be consistent with ART [#32](https://github.com/openshift/configmap-reload/pull/32)
* vendor: fix inconsistent vendoring [#30](https://github.com/openshift/configmap-reload/pull/30)
* Updating configmap-reload builder & base images to be consistent with ART [#28](https://github.com/openshift/configmap-reload/pull/28)
* vendor: regenerate [#29](https://github.com/openshift/configmap-reload/pull/29)
* [Full changelog](https://github.com/openshift/configmap-reload/compare/b957dff7cc1887f844938383237ed0e9c3577beb...0d221296e3918abc3c1367a1e7c220baf000965a)


### [console](https://github.com/openshift/console/tree/07c998f99523c549c45fadc890a7fccebc8d7874)

* [Bug 2079436](https://bugzilla.redhat.com/show_bug.cgi?id=2079436): Pipeline metrics: use prometheus-tenancy API to get data [#11409](https://github.com/openshift/console/pull/11409)
* [Bug 2066365](https://bugzilla.redhat.com/show_bug.cgi?id=2066365): (Topology) Performance improvement by reducing rerenderings and deep-copy toJSON() calls [#11271](https://github.com/openshift/console/pull/11271)
* [Bug 2060450](https://bugzilla.redhat.com/show_bug.cgi?id=2060450): Fix that the preferred namespace was not selected when it contains just numbers [#11134](https://github.com/openshift/console/pull/11134)
* [Bug 2055132](https://bugzilla.redhat.com/show_bug.cgi?id=2055132): Fix TypeError when application has HelmRelease [#11069](https://github.com/openshift/console/pull/11069)
* [Bug 2060616](https://bugzilla.redhat.com/show_bug.cgi?id=2060616): Add error boundary in edit-flows [#11137](https://github.com/openshift/console/pull/11137)
* [Bug 2061266](https://bugzilla.redhat.com/show_bug.cgi?id=2061266): Update e2e test to use 3scale operator to increase test stability [#11141](https://github.com/openshift/console/pull/11141)
* [Bug 2046215](https://bugzilla.redhat.com/show_bug.cgi?id=2046215): Filter superseded helm secrets and fix firehose to support partial metadata [#10936](https://github.com/openshift/console/pull/10936)
* [Bug 2045592](https://bugzilla.redhat.com/show_bug.cgi?id=2045592): Check if name label exists before comparing [#10929](https://github.com/openshift/console/pull/10929)
* [Bug 2048900](https://bugzilla.redhat.com/show_bug.cgi?id=2048900): Fix knative function label cherry pick [#10987](https://github.com/openshift/console/pull/10987)
* [Bug 2045051](https://bugzilla.redhat.com/show_bug.cgi?id=2045051): Add subject name selector field to SinkBinding form [#10925](https://github.com/openshift/console/pull/10925)
* [Bug 2046051](https://bugzilla.redhat.com/show_bug.cgi?id=2046051): Add support for fetching partial metadata and fix helm list page crash [#10932](https://github.com/openshift/console/pull/10932)
* [Bug 2004086](https://bugzilla.redhat.com/show_bug.cgi?id=2004086): Add name field in edit deployment form [#10873](https://github.com/openshift/console/pull/10873)
* [Bug 2046043](https://bugzilla.redhat.com/show_bug.cgi?id=2046043): Topology performance: Do not fetch HPA for each Deployment (Pod Ring) [#10931](https://github.com/openshift/console/pull/10931)
* [Bug 2008141](https://bugzilla.redhat.com/show_bug.cgi?id=2008141): Allow web terminal to be installed in any namespace [#10134](https://github.com/openshift/console/pull/10134)
* [Bug 2019301](https://bugzilla.redhat.com/show_bug.cgi?id=2019301): Check for resource in ServiceBinding spec's service reference [#10376](https://github.com/openshift/console/pull/10376)
* [Bug 2018064](https://bugzilla.redhat.com/show_bug.cgi?id=2018064): fix dev-catalog stuck in loading state [#10346](https://github.com/openshift/console/pull/10346)
* [Bug 2044571](https://bugzilla.redhat.com/show_bug.cgi?id=2044571): Update CRW operator name to fix failing e2e tests [#10918](https://github.com/openshift/console/pull/10918)
* [Bug 2036045](https://bugzilla.redhat.com/show_bug.cgi?id=2036045): fix resource limit form validation [#10788](https://github.com/openshift/console/pull/10788)
* [Bug 2034640](https://bugzilla.redhat.com/show_bug.cgi?id=2034640): cant delete VM with un-owned pvc attached [#10718](https://github.com/openshift/console/pull/10718)
* [Bug 2030443](https://bugzilla.redhat.com/show_bug.cgi?id=2030443): Fix ClusterOperators link [#10638](https://github.com/openshift/console/pull/10638)
* [Bug 2024206](https://bugzilla.redhat.com/show_bug.cgi?id=2024206): Fix resource metrics 403 errors for project admin users [#10496](https://github.com/openshift/console/pull/10496)
* [Bug 2026950](https://bugzilla.redhat.com/show_bug.cgi?id=2026950): Fix autofocus on pf select component for search resource dropdown [#10577](https://github.com/openshift/console/pull/10577)
* [Bug 2017469](https://bugzilla.redhat.com/show_bug.cgi?id=2017469): key not a valid prop name causing display issue in env editor [#10419](https://github.com/openshift/console/pull/10419)
* [Bug 2009224](https://bugzilla.redhat.com/show_bug.cgi?id=2009224): Regular user cannot restore VM snapshot [#10436](https://github.com/openshift/console/pull/10436)
* [Bug 2020162](https://bugzilla.redhat.com/show_bug.cgi?id=2020162): PVC is deleted along with VM even with "Delete Disks" unchecked [#10399](https://github.com/openshift/console/pull/10399)
* [Bug 2017326](https://bugzilla.redhat.com/show_bug.cgi?id=2017326): Update PatternFly/react-console [#10384](https://github.com/openshift/console/pull/10384)
* [Bug 1984102](https://bugzilla.redhat.com/show_bug.cgi?id=1984102): Switch Cypress OLM tests to use supported Red Hat operators [#9560](https://github.com/openshift/console/pull/9560)
* [Bug 2005871](https://bugzilla.redhat.com/show_bug.cgi?id=2005871): Cannot create Network Attachment Definition through UI [#10314](https://github.com/openshift/console/pull/10314)
* [Bug 1997901](https://bugzilla.redhat.com/show_bug.cgi?id=1997901): Cannot delete user created vm template [#10367](https://github.com/openshift/console/pull/10367)
* [Bug 2001212](https://bugzilla.redhat.com/show_bug.cgi?id=2001212): Notifications is not translated on the top right bar [#10040](https://github.com/openshift/console/pull/10040)
* [Bug 2002649](https://bugzilla.redhat.com/show_bug.cgi?id=2002649): Fix SerialConsole display bug [#10034](https://github.com/openshift/console/pull/10034)
* [Bug 1994983](https://bugzilla.redhat.com/show_bug.cgi?id=1994983): use strict promoted template list [#9824](https://github.com/openshift/console/pull/9824)
* [Bug 1977659](https://bugzilla.redhat.com/show_bug.cgi?id=1977659): Adjusting to new reference models changes - cherry-picked rls 4.8 [#9379](https://github.com/openshift/console/pull/9379)
* [Bug 2013091](https://bugzilla.redhat.com/show_bug.cgi?id=2013091): adds check for status in ksvc in util logic [#10211](https://github.com/openshift/console/pull/10211)
* [Bug 1998692](https://bugzilla.redhat.com/show_bug.cgi?id=1998692): Normal user cannot create VM because it cannot access v2v-vmware [#10171](https://github.com/openshift/console/pull/10171)
* (4.8 Backport) Bug 1981416: Change OCM links from cloud. to console.redhat.com [#9470](https://github.com/openshift/console/pull/9470)
* [Bug 2010076](https://bugzilla.redhat.com/show_bug.cgi?id=2010076): Update prow setup v4.8 [#10168](https://github.com/openshift/console/pull/10168)
* [Bug 1999717](https://bugzilla.redhat.com/show_bug.cgi?id=1999717): Block and File and Object dashboards should not be part of OCP Console for ODF Managed Services [#9952](https://github.com/openshift/console/pull/9952)
* [Bug 2005917](https://bugzilla.redhat.com/show_bug.cgi?id=2005917): CONSOLE-2152: Improve upgrade messaging when ClusterVersion Upgradeable=False [#10103](https://github.com/openshift/console/pull/10103)
* [Bug 1993236](https://bugzilla.redhat.com/show_bug.cgi?id=1993236): Do not drop environment variables without name but with a value, also fix crash when ref is empty [#9799](https://github.com/openshift/console/pull/9799)
* [Bug 2000474](https://bugzilla.redhat.com/show_bug.cgi?id=2000474): Create BuildConfig webhook secrets before creating knative resources [#9970](https://github.com/openshift/console/pull/9970)
* [Bug 1996758](https://bugzilla.redhat.com/show_bug.cgi?id=1996758): Update Resource Dropdown Tech preview text [Release-4.8] [#9838](https://github.com/openshift/console/pull/9838)
* [Bug 1990141](https://bugzilla.redhat.com/show_bug.cgi?id=1990141): Console overview operators shown upgrading when still waiting on approval [#9732](https://github.com/openshift/console/pull/9732)
* [Bug 1995118](https://bugzilla.redhat.com/show_bug.cgi?id=1995118): Virtualization is not available in Home Overview [#9826](https://github.com/openshift/console/pull/9826)
* [Bug 1999931](https://bugzilla.redhat.com/show_bug.cgi?id=1999931): move event sources add option to serverless add group [#9958](https://github.com/openshift/console/pull/9958)
* [Bug 1984367](https://bugzilla.redhat.com/show_bug.cgi?id=1984367): OCS deployment using Multus: UI allows StorageCluster creation with empty public and cluster network in "Internal - Attached Devices" [#9566](https://github.com/openshift/console/pull/9566)
* [Bug 1992720](https://bugzilla.redhat.com/show_bug.cgi?id=1992720): Update Ingress to v1 API version [#9788](https://github.com/openshift/console/pull/9788)
* [Bug 1983644](https://bugzilla.redhat.com/show_bug.cgi?id=1983644): Add a TechPreviewBadge for Multus [#9539](https://github.com/openshift/console/pull/9539)
* [Bug 1972987](https://bugzilla.redhat.com/show_bug.cgi?id=1972987): chore(i18n): update translations [#9284](https://github.com/openshift/console/pull/9284)
* [Bug 1982458](https://bugzilla.redhat.com/show_bug.cgi?id=1982458): Remove kube admin notifier for kubeadmin crc user [#9516](https://github.com/openshift/console/pull/9516)
* [Bug 1985193](https://bugzilla.redhat.com/show_bug.cgi?id=1985193): Add create resource extension [#9601](https://github.com/openshift/console/pull/9601)
* [Bug 1989798](https://bugzilla.redhat.com/show_bug.cgi?id=1989798): Fix previously deleted dragged files that show up in import yaml editor [#9718](https://github.com/openshift/console/pull/9718)
* [Bug 1985081](https://bugzilla.redhat.com/show_bug.cgi?id=1985081): Fix Pipeline Download All [#9596](https://github.com/openshift/console/pull/9596)
* [Bug 1987167](https://bugzilla.redhat.com/show_bug.cgi?id=1987167): Add inspect url to devconsole monitoring chart [#9671](https://github.com/openshift/console/pull/9671)
* [Bug 1972258](https://bugzilla.redhat.com/show_bug.cgi?id=1972258): adds check for kamelet source in provider [#9254](https://github.com/openshift/console/pull/9254)
* [Bug 1971911](https://bugzilla.redhat.com/show_bug.cgi?id=1971911): Do not render samples column and helm link when add page customization disabled them [#9240](https://github.com/openshift/console/pull/9240)
* [Bug 1976144](https://bugzilla.redhat.com/show_bug.cgi?id=1976144): fix optional workspace checkbox check/uncheck [#9343](https://github.com/openshift/console/pull/9343)
* [Bug 1984242](https://bugzilla.redhat.com/show_bug.cgi?id=1984242): filter null yaml objects before validating to prevent undefined exception [#9565](https://github.com/openshift/console/pull/9565)
* [Bug 1973696](https://bugzilla.redhat.com/show_bug.cgi?id=1973696): Fix time range issue for devconsole monitoring dashboard [#9298](https://github.com/openshift/console/pull/9298)
* [Bug 1986581](https://bugzilla.redhat.com/show_bug.cgi?id=1986581): Web console doesn't list all the registries credentials in a secret [#9651](https://github.com/openshift/console/pull/9651)
* [Bug 1985356](https://bugzilla.redhat.com/show_bug.cgi?id=1985356): Check for nonexistent CSVs in installed block [#9735](https://github.com/openshift/console/pull/9735)
* [Bug 1989152](https://bugzilla.redhat.com/show_bug.cgi?id=1989152): [Release-4.8] Use specific release for files used in e2e tests [#9700](https://github.com/openshift/console/pull/9700)
* [Bug 1982246](https://bugzilla.redhat.com/show_bug.cgi?id=1982246): Skip empty categories (id and label) in OperatorHub tab view [#9509](https://github.com/openshift/console/pull/9509)
* [Bug 1980136](https://bugzilla.redhat.com/show_bug.cgi?id=1980136): Add cypress tests for key/value secrets with binary, ascii, and unicode values. [#9439](https://github.com/openshift/console/pull/9439)
* [Bug 1978043](https://bugzilla.redhat.com/show_bug.cgi?id=1978043): Monitoring dashboards: Dropdowns default to "All" if present [#9388](https://github.com/openshift/console/pull/9388)
* [Bug 1976008](https://bugzilla.redhat.com/show_bug.cgi?id=1976008): Monitoring dashboards: Custom time range fixes [#9342](https://github.com/openshift/console/pull/9342)
* [Bug 1975559](https://bugzilla.redhat.com/show_bug.cgi?id=1975559): Fix typo in olm message [#9334](https://github.com/openshift/console/pull/9334)
* [Bug 1972478](https://bugzilla.redhat.com/show_bug.cgi?id=1972478): improve failure alert for copied CSV [#9266](https://github.com/openshift/console/pull/9266)
* [Bug 1986955](https://bugzilla.redhat.com/show_bug.cgi?id=1986955): Fix to persist YAML Editor success message [#9664](https://github.com/openshift/console/pull/9664)
* [Bug 1982221](https://bugzilla.redhat.com/show_bug.cgi?id=1982221): Increase HTTP plugin proxy request timeout [#9506](https://github.com/openshift/console/pull/9506)
* [Bug 1977782](https://bugzilla.redhat.com/show_bug.cgi?id=1977782): Preserve user annotations while editing an app [#9381](https://github.com/openshift/console/pull/9381)
* [Bug 1974812](https://bugzilla.redhat.com/show_bug.cgi?id=1974812): In customize create vm wizard, warning on vm missing model [#9317](https://github.com/openshift/console/pull/9317)
* [Bug 1972788](https://bugzilla.redhat.com/show_bug.cgi?id=1972788): Convert probe data values from string to number type [#9277](https://github.com/openshift/console/pull/9277)
* [Bug 1980302](https://bugzilla.redhat.com/show_bug.cgi?id=1980302): VNC console stays in Connecting state [#9442](https://github.com/openshift/console/pull/9442)
* [Bug 1971188](https://bugzilla.redhat.com/show_bug.cgi?id=1971188): Creating a VM from the UI on OKD 4.7 fails [#9326](https://github.com/openshift/console/pull/9326)
* cnv-5162: [dev] change mouse cursor and add URL to results step [#9112](https://github.com/openshift/console/pull/9112)
* [Bug 1949019](https://bugzilla.redhat.com/show_bug.cgi?id=1949019): - PersistentVolumes page cannot sync project status automatically which will block user to create PV [#8726](https://github.com/openshift/console/pull/8726)
* [Bug 1967667](https://bugzilla.redhat.com/show_bug.cgi?id=1967667): Update translations for Sprint 202 (first half) [#9135](https://github.com/openshift/console/pull/9135)
* No color change on Add card hover [#9159](https://github.com/openshift/console/pull/9159)
* [Bug 1965909](https://bugzilla.redhat.com/show_bug.cgi?id=1965909): Replace "Enable Taint Nodes" by "Mark nodes as dedicated" [#9078](https://github.com/openshift/console/pull/9078)
* (fix): Hide RGW storage class in add capacity modal [#9225](https://github.com/openshift/console/pull/9225)
* Update Web Terminal custom resources to use v1alpha2 [#9144](https://github.com/openshift/console/pull/9144)
* [Bug 1967639](https://bugzilla.redhat.com/show_bug.cgi?id=1967639): fixes: console whitescreens if user settings fails to load [#9153](https://github.com/openshift/console/pull/9153)
* Block pool deletion testing - cypress [#8661](https://github.com/openshift/console/pull/8661)
* adds feature flag for revision decorator plugin [#9219](https://github.com/openshift/console/pull/9219)
* Fix quick starts label text [#9218](https://github.com/openshift/console/pull/9218)
* Fix a11y issue in virtualized tables with sortable headers and redesigned add page [#9217](https://github.com/openshift/console/pull/9217)
* translate the page heading in the edit flow [#9214](https://github.com/openshift/console/pull/9214)
* [Bug 1963027](https://bugzilla.redhat.com/show_bug.cgi?id=1963027): Upload qcow2 too PVC to small [#9179](https://github.com/openshift/console/pull/9179)
* Refactor multiple-storage-class-selection tests [#9123](https://github.com/openshift/console/pull/9123)
* [Bug 1966672](https://bugzilla.redhat.com/show_bug.cgi?id=1966672): Update translations for Sprint 201 [#9104](https://github.com/openshift/console/pull/9104)
* [ODC-5922](https://issues.redhat.com/browse/ODC-5922): pipeline workspaces script fixes [#9115](https://github.com/openshift/console/pull/9115)
* [ODC-5918](https://issues.redhat.com/browse/ODC-5918): fixed the create from builder image feature scripts [#9211](https://github.com/openshift/console/pull/9211)
* [ODC-5920](https://issues.redhat.com/browse/ODC-5920): Fixing Pipeline runs scripts [#9109](https://github.com/openshift/console/pull/9109)
* Install workflows - textual updates based on doc review [#8197](https://github.com/openshift/console/pull/8197)
* [ODC-5954](https://issues.redhat.com/browse/ODC-5954): Clean up code for 4.8 release [#9212](https://github.com/openshift/console/pull/9212)
* Filter disabled add actions for topology menus [#9210](https://github.com/openshift/console/pull/9210)
* Add support for default repo overwrites [#9001](https://github.com/openshift/console/pull/9001)
* [CONSOLE-1338](https://issues.redhat.com/browse/CONSOLE-1338): Add support for multiple documents when importing YAML [#8865](https://github.com/openshift/console/pull/8865)
* [CONSOLE-2384](https://issues.redhat.com/browse/CONSOLE-2384): Add metrics tab to select resources [#8763](https://github.com/openshift/console/pull/8763)
* [Bug 1970381](https://bugzilla.redhat.com/show_bug.cgi?id=1970381): Monitoring dashboards: Custom time range inputs should retain values [#9204](https://github.com/openshift/console/pull/9204)
* Remove ' from the text [#9203](https://github.com/openshift/console/pull/9203)
* replace storage cluster with StorageCluster in external dashboard [#9202](https://github.com/openshift/console/pull/9202)
* [CNV-6896](https://issues.redhat.com/browse/CNV-6896): New IP's popover for multi ip's [#9201](https://github.com/openshift/console/pull/9201)
* show `Stop` pipelinerun action if any of the tasks is running [#9200](https://github.com/openshift/console/pull/9200)
* Gherkin updation for topology and pipeline [#9195](https://github.com/openshift/console/pull/9195)
* fix guided tour spotlight [#9193](https://github.com/openshift/console/pull/9193)
* [Bug 1969891](https://bugzilla.redhat.com/show_bug.cgi?id=1969891): fix rotated pipelinerun status icon issue in safari [#9188](https://github.com/openshift/console/pull/9188)
* Updating the quick starts gherkin scripts with respect to latest UX [#9187](https://github.com/openshift/console/pull/9187)
* Update helm OWNERS [#9181](https://github.com/openshift/console/pull/9181)
* Fix rendering of add-capacity modal for smaller screen [#9178](https://github.com/openshift/console/pull/9178)
* Update hard coded colors to PF tokens and vars [#9164](https://github.com/openshift/console/pull/9164)
* [Bug 1933101](https://bugzilla.redhat.com/show_bug.cgi?id=1933101): Add chart URl to annotations during helm install/upgrade [#9161](https://github.com/openshift/console/pull/9161)
* GitOps environment UI page validation [#9150](https://github.com/openshift/console/pull/9150)
* Service mesh [#9141](https://github.com/openshift/console/pull/9141)
* add vm creation to smoke tests [#8997](https://github.com/openshift/console/pull/8997)
* fix(OCS dashboard): s/namesapce/namespace/ prometheus query typos [#8863](https://github.com/openshift/console/pull/8863)
* Block pool update testing - cypress [#8660](https://github.com/openshift/console/pull/8660)
* handles route decorator for revision [#9209](https://github.com/openshift/console/pull/9209)
* [Bug 1890678](https://bugzilla.redhat.com/show_bug.cgi?id=1890678): Fix different accessibility in developer catalog, topology and pipelines [#9124](https://github.com/openshift/console/pull/9124)
* [Bug 1955220](https://bugzilla.redhat.com/show_bug.cgi?id=1955220): Bump postcss [#8838](https://github.com/openshift/console/pull/8838)
* [Bug 1969951](https://bugzilla.redhat.com/show_bug.cgi?id=1969951): update cluster-local label for ksvc [#9197](https://github.com/openshift/console/pull/9197)
* [Bug 1969386](https://bugzilla.redhat.com/show_bug.cgi?id=1969386): deprecated metric kubevirt_vmi_storage_traffic_bytes_total [#9182](https://github.com/openshift/console/pull/9182)
* Replace storage class with StorageClass [#9176](https://github.com/openshift/console/pull/9176)
* Restructure Knative Plugin [#9194](https://github.com/openshift/console/pull/9194)
* Deploy new version of FormWithEditor. [#9191](https://github.com/openshift/console/pull/9191)
* [Bug 1967275](https://bugzilla.redhat.com/show_bug.cgi?id=1967275): Prevent awkward wrap of icons with getting started links and buttons [#9184](https://github.com/openshift/console/pull/9184)
* Fix issue with selected capacity donut chart [#9156](https://github.com/openshift/console/pull/9156)
* kubevirt: Add ci scripts [#9152](https://github.com/openshift/console/pull/9152)
* add unique name to the radio buttons to avoid name collision [#9146](https://github.com/openshift/console/pull/9146)
* ODC 5908-Helm update test cases [#9114](https://github.com/openshift/console/pull/9114)
* [Bug 1966677](https://bugzilla.redhat.com/show_bug.cgi?id=1966677): Change comma to semicolon [#9110](https://github.com/openshift/console/pull/9110)
* [ODC-5917](https://issues.redhat.com/browse/ODC-5917): Fix the scripts for create-from-add-options feature [#9103](https://github.com/openshift/console/pull/9103)
* Console-2857: port protractor Overview list tests [#8967](https://github.com/openshift/console/pull/8967)
* [Bug 1969900](https://bugzilla.redhat.com/show_bug.cgi?id=1969900): Move testing CRDs from v1beta1 to v1 [#9131](https://github.com/openshift/console/pull/9131)
* [Bug 1936788](https://bugzilla.redhat.com/show_bug.cgi?id=1936788): Fix for RBD + RWX Access Mode  UI issue [#8380](https://github.com/openshift/console/pull/8380)
* Topology - Connecting Workloads using Edit Annotations [#9177](https://github.com/openshift/console/pull/9177)
* kubevirt e2e: Scroll dev console add+ tab to bottom [#9175](https://github.com/openshift/console/pull/9175)
* fix pipeline graph height restriction issue [#9173](https://github.com/openshift/console/pull/9173)
* Tier-1 test cases for KMS workflow [#7683](https://github.com/openshift/console/pull/7683)
* Update  gherkin files according to test defenition implementation [#9151](https://github.com/openshift/console/pull/9151)
* [Bug 1967207](https://bugzilla.redhat.com/show_bug.cgi?id=1967207): Update "Getting started resources" links [#9121](https://github.com/openshift/console/pull/9121)
* Add pipeline annotation to secrets for private git repo import with pipeline [#9058](https://github.com/openshift/console/pull/9058)
* Fix project access reload and form footer [#8940](https://github.com/openshift/console/pull/8940)
* [Bug 1967316](https://bugzilla.redhat.com/show_bug.cgi?id=1967316): Sweep frontend/public folder for i18n - part 1 [#7720](https://github.com/openshift/console/pull/7720)
* [Bug 1967234](https://bugzilla.redhat.com/show_bug.cgi?id=1967234): Console is continuously polling for ConsoleLink acm-link [#9169](https://github.com/openshift/console/pull/9169)
* [Bug 1963209](https://bugzilla.redhat.com/show_bug.cgi?id=1963209): Some strings in public.json have errors [#9170](https://github.com/openshift/console/pull/9170)
* Inline Event Listener URL [#9166](https://github.com/openshift/console/pull/9166)
* [Bug 1966684](https://bugzilla.redhat.com/show_bug.cgi?id=1966684): Fix creating snapshot for claim <name> string [#9163](https://github.com/openshift/console/pull/9163)
* update eventsources static model version to latest supported [#9154](https://github.com/openshift/console/pull/9154)
* Update the name and value titles to primary texts [#9132](https://github.com/openshift/console/pull/9132)
* Explicitly touch pipeline builder task fields when workspaces are changed [#9130](https://github.com/openshift/console/pull/9130)
* add cypress automation script for pipeline builder [#9128](https://github.com/openshift/console/pull/9128)
* [Bug 1969284](https://bugzilla.redhat.com/show_bug.cgi?id=1969284): Query Browser: Fix resetting the zoom after dragging to zoom [#9174](https://github.com/openshift/console/pull/9174)
* Add error boundary to topology page [#9167](https://github.com/openshift/console/pull/9167)
* Omit bitbucket branch in URL if it contains slash [#9111](https://github.com/openshift/console/pull/9111)
* [ODC-5915](https://issues.redhat.com/browse/ODC-5915): update create from git feature scripts [#9165](https://github.com/openshift/console/pull/9165)
* Block pool management page capitalization [#9099](https://github.com/openshift/console/pull/9099)
* [CNV-6685](https://issues.redhat.com/browse/CNV-6685): UI: Add preallocation option to advanced VM disk parameters [#9079](https://github.com/openshift/console/pull/9079)
* [Bug 1965391](https://bugzilla.redhat.com/show_bug.cgi?id=1965391): Skip to 3rd step when SC present [#9077](https://github.com/openshift/console/pull/9077)
* [Bug 1966077](https://bugzilla.redhat.com/show_bug.cgi?id=1966077): Don't show empty hidden fields on operand details page [#9168](https://github.com/openshift/console/pull/9168)
* Allow passing additional arguments to run-bridge.sh [#9162](https://github.com/openshift/console/pull/9162)
* [Bug 1966487](https://bugzilla.redhat.com/show_bug.cgi?id=1966487): Update IP address on pods list to show podIP other than … [#9089](https://github.com/openshift/console/pull/9089)
* [Bug 1967717](https://bugzilla.redhat.com/show_bug.cgi?id=1967717): Rename Insights to Insights Advisor and add missing paragraph [#9139](https://github.com/openshift/console/pull/9139)
* [Bug 1934229](https://bugzilla.redhat.com/show_bug.cgi?id=1934229): Improve performance of ToolbarFilter [#8821](https://github.com/openshift/console/pull/8821)
* Resized Perspective Switcher to match height of side Nav Items [#9160](https://github.com/openshift/console/pull/9160)
* [ODC-5013](https://issues.redhat.com/browse/ODC-5013): Epic Automation [#9155](https://github.com/openshift/console/pull/9155)
* [Bug 1967713](https://bugzilla.redhat.com/show_bug.cgi?id=1967713): Show link to the OCM landing page when cluster ID is missing [#9138](https://github.com/openshift/console/pull/9138)
* Add Codeready Workspaces feature files. [#9113](https://github.com/openshift/console/pull/9113)
* [Bug 1966675](https://bugzilla.redhat.com/show_bug.cgi?id=1966675): Update Image Stream to ImageStream [#9137](https://github.com/openshift/console/pull/9137)
* [Bug 1888517](https://bugzilla.redhat.com/show_bug.cgi?id=1888517): Text changes in expand PVC modal [#8788](https://github.com/openshift/console/pull/8788)
* [Bug 1961391](https://bugzilla.redhat.com/show_bug.cgi?id=1961391): String updates [#9017](https://github.com/openshift/console/pull/9017)
* Remove tabIndex from scrollable containers to fix keyboard scroll issue [#9140](https://github.com/openshift/console/pull/9140)
* [Bug 1967276](https://bugzilla.redhat.com/show_bug.cgi?id=1967276): Remove tooltips from masthead toolbar [#9134](https://github.com/openshift/console/pull/9134)
* [ODC-5916](https://issues.redhat.com/browse/ODC-5916): Fix the pipeline triggers scripts [#9106](https://github.com/openshift/console/pull/9106)
* Fix isSubmitting logic of formik forms [#8984](https://github.com/openshift/console/pull/8984)
* Revert unintended changes during translations [#9145](https://github.com/openshift/console/pull/9145)
* fixes: WebTerminal widget should send resize events [#8909](https://github.com/openshift/console/pull/8909)
* pipeline builder cleanup [#9143](https://github.com/openshift/console/pull/9143)
* [Bug 1942125](https://bugzilla.redhat.com/show_bug.cgi?id=1942125): add i18n for serverless breadcrumbs [#9107](https://github.com/openshift/console/pull/9107)
* fixes: multiline code snippet buttons doesn't work properly [#9105](https://github.com/openshift/console/pull/9105)
* [CONSOLE-2769](https://issues.redhat.com/browse/CONSOLE-2769): Remove console plugin on operator uninstall [#8895](https://github.com/openshift/console/pull/8895)
* test: test pseudolocalization of all pages in CRUD tests [#9129](https://github.com/openshift/console/pull/9129)
* Make string interpolated in PROGRESS_STATUS function for i18n [#9147](https://github.com/openshift/console/pull/9147)
* Gherkin: customization of available roles in project membership [#9133](https://github.com/openshift/console/pull/9133)
* [ODC-5919](https://issues.redhat.com/browse/ODC-5919): Pipeline Actions script fixes [#9108](https://github.com/openshift/console/pull/9108)
* fix terminal new tab redirect [#9059](https://github.com/openshift/console/pull/9059)
* Block pool creation testing - cypress [#8657](https://github.com/openshift/console/pull/8657)
* [Bug 1957457](https://bugzilla.redhat.com/show_bug.cgi?id=1957457): Support secondary text in ResourceDropdown [#8973](https://github.com/openshift/console/pull/8973)
* [Bug 1967208](https://bugzilla.redhat.com/show_bug.cgi?id=1967208): Use semver to parse version for "Getting started" card [#9122](https://github.com/openshift/console/pull/9122)
* [Bug 1967316](https://bugzilla.redhat.com/show_bug.cgi?id=1967316): Sweep frontend/public folder for i18n - part 2 (was CONSOLE-2474) [#7670](https://github.com/openshift/console/pull/7670)
* Allow installation storageClass as default in the add capacity modal [#9084](https://github.com/openshift/console/pull/9084)
* [Bug 1967197](https://bugzilla.redhat.com/show_bug.cgi?id=1967197): Fix 404 errors loading i18n namespaces [#9119](https://github.com/openshift/console/pull/9119)
* handles check for kafkasource update with managed kafka [#9116](https://github.com/openshift/console/pull/9116)
* ODC 5914 update addflow gherkin scripts [#9098](https://github.com/openshift/console/pull/9098)
* [Bug 1964902](https://bugzilla.redhat.com/show_bug.cgi?id=1964902): rework network policy details page [#9102](https://github.com/openshift/console/pull/9102)
* Gherkin: Devfile samples should be included in Samples catalog & "searchable" via Topology [#9062](https://github.com/openshift/console/pull/9062)
* [Bug 1960612](https://bugzilla.redhat.com/show_bug.cgi?id=1960612): Make filesystem queries use all devices [#8978](https://github.com/openshift/console/pull/8978)
* [Bug 1938903](https://bugzilla.redhat.com/show_bug.cgi?id=1938903): Monitoring dashboards: Add "Custom time range" modal [#8701](https://github.com/openshift/console/pull/8701)
* [ODC-5910](https://issues.redhat.com/browse/ODC-5910): update kafka event source feature file [#9092](https://github.com/openshift/console/pull/9092)
* [Bug 1942736](https://bugzilla.redhat.com/show_bug.cgi?id=1942736): update Admin resource translations to new standard [#9094](https://github.com/openshift/console/pull/9094)
* [Bug 1966520](https://bugzilla.redhat.com/show_bug.cgi?id=1966520): Add button from ocs add capacity should not be enabled if there are no PV's [#9097](https://github.com/openshift/console/pull/9097)
* [Bug 1935087](https://bugzilla.redhat.com/show_bug.cgi?id=1935087): Align Arbiter text with the new behaviour introduced by BZ #1928319 [#9019](https://github.com/openshift/console/pull/9019)
* Disable portworx operator Cypress test until upstream version change is merged [#9100](https://github.com/openshift/console/pull/9100)
* Update failure_domain field of block pool from storage cluster CR [#9093](https://github.com/openshift/console/pull/9093)
* Fix traffic splitting modal crashing UI with no revision loaded [#9091](https://github.com/openshift/console/pull/9091)
* updates kafka source gherkin script [#9090](https://github.com/openshift/console/pull/9090)
* Update OWNERS for Insights Advisor plugin [#9080](https://github.com/openshift/console/pull/9080)
* Fix keyboard scroll issue of namespaced pages [#9068](https://github.com/openshift/console/pull/9068)
* remove visual fix that was breaking patternfly table [#9049](https://github.com/openshift/console/pull/9049)
* update table column classes for pipeline, helm, revision [#8936](https://github.com/openshift/console/pull/8936)
* [Bug 1962429](https://bugzilla.redhat.com/show_bug.cgi?id=1962429): Images are now saved in redux and can be accessed earlier in vm creation [#9065](https://github.com/openshift/console/pull/9065)
* [Bug 1966401](https://bugzilla.redhat.com/show_bug.cgi?id=1966401): Revamp Ceph Table in Install Wizard flow [#9087](https://github.com/openshift/console/pull/9087)
* Supplement: Add and update data-test for new add page [#8998](https://github.com/openshift/console/pull/8998)
* show helptext for workspaces in start pipeline form [#9081](https://github.com/openshift/console/pull/9081)
* Increase timeout for deployment created in OBC test. [#9082](https://github.com/openshift/console/pull/9082)
* Missing parens in the Last deployment column (#5899) [#9075](https://github.com/openshift/console/pull/9075)
* [ODC-5859](https://issues.redhat.com/browse/ODC-5859): Add owners to web terminal features folder [#9000](https://github.com/openshift/console/pull/9000)
* [Bug 1951043](https://bugzilla.redhat.com/show_bug.cgi?id=1951043): Fix Pipeline Parameters in Modals accept empty string defaults [#9074](https://github.com/openshift/console/pull/9074)
* [ODC-5837](https://issues.redhat.com/browse/ODC-5837): Add owners file to service mesh features folder [#8928](https://github.com/openshift/console/pull/8928)
* [ODC-5898](https://issues.redhat.com/browse/ODC-5898): Configuring gherkin-lintrc file [#9072](https://github.com/openshift/console/pull/9072)
* [Bug 1926029](https://bugzilla.redhat.com/show_bug.cgi?id=1926029): Disable snapshot save button when save isn't possible [#8962](https://github.com/openshift/console/pull/8962)
* [ODC-5895](https://issues.redhat.com/browse/ODC-5895): Fixed Gherkin linter errors in Dev Console folder [#9071](https://github.com/openshift/console/pull/9071)
* [Bug 1964756](https://bugzilla.redhat.com/show_bug.cgi?id=1964756): PVC status is always in Bound status when it is actually cloning [#9067](https://github.com/openshift/console/pull/9067)
* [Bug 1964472](https://bugzilla.redhat.com/show_bug.cgi?id=1964472): Make project and namespace requirements more visible rather than giving me an error after submission [#9060](https://github.com/openshift/console/pull/9060)
* Fix the alignment of success ratio and pipeline run count chart [#9022](https://github.com/openshift/console/pull/9022)
* [ODC-5863](https://issues.redhat.com/browse/ODC-5863): github templates [#9014](https://github.com/openshift/console/pull/9014)
* [Bug 1965116](https://bugzilla.redhat.com/show_bug.cgi?id=1965116): Add max height to resource and filter drop downs [#9061](https://github.com/openshift/console/pull/9061)
* [Bug 1964997](https://bugzilla.redhat.com/show_bug.cgi?id=1964997): Removing library charts from the merged helm repo index entries. [#9035](https://github.com/openshift/console/pull/9035)
* [Bug 1963213](https://bugzilla.redhat.com/show_bug.cgi?id=1963213): Fixed bug in Memsource download script [#9024](https://github.com/openshift/console/pull/9024)
* Add page loading indicator [#8974](https://github.com/openshift/console/pull/8974)
* Add tooltips to masthead icons and remove hover state from notification [#9041](https://github.com/openshift/console/pull/9041)
* PF Update to 2021-6 [#8937](https://github.com/openshift/console/pull/8937)
* Fix git type dropdown reset issue [#9056](https://github.com/openshift/console/pull/9056)
* PR 9051 review: Replace "RAW" by "Raw" in "Raw Capacity" card. [#9063](https://github.com/openshift/console/pull/9063)
* show menuaction label over model label on multiTabListPage create options [#9048](https://github.com/openshift/console/pull/9048)
* Change alignment of actions on the add page on small screens [#9046](https://github.com/openshift/console/pull/9046)
* Fix git type dropdown showing while form is submitting [#9045](https://github.com/openshift/console/pull/9045)
* Minor typo corrections [#8982](https://github.com/openshift/console/pull/8982)
* [CONSOLE-2223](https://issues.redhat.com/browse/CONSOLE-2223): Past logs for selected container on pod logs tab. [#8896](https://github.com/openshift/console/pull/8896)
* adding console.topology extension types to dynamic-plugin-sdk [#8847](https://github.com/openshift/console/pull/8847)
* Improve form validation and allow optional resources and workspaces [#8832](https://github.com/openshift/console/pull/8832)
* Monitoring dashboards: Show dashboard's tags in Dashboards dropdown [#8728](https://github.com/openshift/console/pull/8728)
* fix react-refresh not initiating on dev server [#9057](https://github.com/openshift/console/pull/9057)
* Force en_US locale for jest tests [#9052](https://github.com/openshift/console/pull/9052)
* Added Test Case IDs [#9050](https://github.com/openshift/console/pull/9050)
* [Bug 1957756](https://bugzilla.redhat.com/show_bug.cgi?id=1957756): Missing already replaced condition in disk modal [#9025](https://github.com/openshift/console/pull/9025)
* Gherkin Script Design: ODC-5013(Add Page Modification) [#9026](https://github.com/openshift/console/pull/9026)
* [Bug 1942614](https://bugzilla.redhat.com/show_bug.cgi?id=1942614): Externalization in storage menu navigation [#8954](https://github.com/openshift/console/pull/8954)
* Use same icon in status and list [#9043](https://github.com/openshift/console/pull/9043)
* fixes minimize/restore tooltip for web terminal [#9037](https://github.com/openshift/console/pull/9037)
* [Bug 1924916](https://bugzilla.redhat.com/show_bug.cgi?id=1924916): PVC reported as Uploading when it is actually cloning [#9033](https://github.com/openshift/console/pull/9033)
* [Bug 1962569](https://bugzilla.redhat.com/show_bug.cgi?id=1962569): Show NetworkPolicy egress rules [#9032](https://github.com/openshift/console/pull/9032)
* Adds tests for namespace bucket classes [#8721](https://github.com/openshift/console/pull/8721)
* Correcting some nits in gherkin [#9039](https://github.com/openshift/console/pull/9039)
* [Bug 1947663](https://bugzilla.redhat.com/show_bug.cgi?id=1947663): Disable BMN disks tab when LSO is installed [#9036](https://github.com/openshift/console/pull/9036)
* fix kafka connections topology sidebar heading [#9034](https://github.com/openshift/console/pull/9034)
* [Bug 1908169](https://bugzilla.redhat.com/show_bug.cgi?id=1908169): The example of Import URL is "Fedora cloud image list" for all templates. [#9031](https://github.com/openshift/console/pull/9031)
* [Bug 1934304](https://bugzilla.redhat.com/show_bug.cgi?id=1934304): Change query for top consumer pods in Nodes Page Memory Pressure popover [#9030](https://github.com/openshift/console/pull/9030)
* convert kubevirt dashboard extensions to dynamic [#9029](https://github.com/openshift/console/pull/9029)
* fixes scrollbar issue over topology on file drag [#9016](https://github.com/openshift/console/pull/9016)
* [Bug 1963267](https://bugzilla.redhat.com/show_bug.cgi?id=1963267): Fix console warnings about classnames when rendering volumes table [#9007](https://github.com/openshift/console/pull/9007)
* Removed references to Protractor tests which no longer exist [#8993](https://github.com/openshift/console/pull/8993)
* Wording changes in vm status [#9042](https://github.com/openshift/console/pull/9042)
* Add getting started section to the admin cluster dashboard [#8951](https://github.com/openshift/console/pull/8951)
* fixes terminal loading screen height on safari [#9027](https://github.com/openshift/console/pull/9027)
* Fix scrollbar height issue in pod terminal [#9020](https://github.com/openshift/console/pull/9020)
* adding dynamic plugin sdk support for dashboard extensions [#8837](https://github.com/openshift/console/pull/8837)
* [Bug 1963211](https://bugzilla.redhat.com/show_bug.cgi?id=1963211): Kubevirt i18n typo [#9009](https://github.com/openshift/console/pull/9009)
* Fix number spinner in  NumberSizeInput without default values [#9023](https://github.com/openshift/console/pull/9023)
* [Bug 1957982](https://bugzilla.redhat.com/show_bug.cgi?id=1957982): Make disabled action items not clickable and focusable [#9018](https://github.com/openshift/console/pull/9018)
* [Bug 1963896](https://bugzilla.redhat.com/show_bug.cgi?id=1963896): Add PVC link to disk table [#9021](https://github.com/openshift/console/pull/9021)
* converting yaml-templates extension types to dynamic-plugin-sdk [#8400](https://github.com/openshift/console/pull/8400)
* [Bug 1963502](https://bugzilla.redhat.com/show_bug.cgi?id=1963502): Add tooltip to creat new template kebab action item [#9011](https://github.com/openshift/console/pull/9011)
* Gherkin: QuickStarts-enhanced-capabilities [#8927](https://github.com/openshift/console/pull/8927)
* Gherkin:Add certification filter and certified badge in helm catalog [#8945](https://github.com/openshift/console/pull/8945)
* [Bug 1947311](https://bugzilla.redhat.com/show_bug.cgi?id=1947311): Run discovery directly on nodes [#8591](https://github.com/openshift/console/pull/8591)
* [Bug 1963676](https://bugzilla.redhat.com/show_bug.cgi?id=1963676): Vm wizard choose os not template [#9012](https://github.com/openshift/console/pull/9012)
* adjust styles of add page and getting started to align with UX [#9008](https://github.com/openshift/console/pull/9008)
* [Bug 1963159](https://bugzilla.redhat.com/show_bug.cgi?id=1963159): Add Sprint 200 translations [#9004](https://github.com/openshift/console/pull/9004)
* [Bug 1955803](https://bugzilla.redhat.com/show_bug.cgi?id=1955803): OperatorHub duplicate item details and empty infraFeatures [#9006](https://github.com/openshift/console/pull/9006)
* [Bug 1961897](https://bugzilla.redhat.com/show_bug.cgi?id=1961897): Remove history listener before console UI is unmounted [#8969](https://github.com/openshift/console/pull/8969)
* [Bug 1963219](https://bugzilla.redhat.com/show_bug.cgi?id=1963219): i18n ImageStreamTag page [#9005](https://github.com/openshift/console/pull/9005)
* Auto focus first input field of import forms [#8996](https://github.com/openshift/console/pull/8996)
* [Bug 1945312](https://bugzilla.redhat.com/show_bug.cgi?id=1945312): Fix project deletion issue and reset active namespace [#9003](https://github.com/openshift/console/pull/9003)
* [Bug 1962153](https://bugzilla.redhat.com/show_bug.cgi?id=1962153): fix VolumeSnapshot routes [#8979](https://github.com/openshift/console/pull/8979)
* [Bug 1961829](https://bugzilla.redhat.com/show_bug.cgi?id=1961829): Fix quick start prerequisites getting truncated [#8994](https://github.com/openshift/console/pull/8994)
* Gherkin: Implement the support needed for managed kafka connection, Visualisation of the serverless function in topology and Connection from kafka source to kafka connection [#8891](https://github.com/openshift/console/pull/8891)
* [ODC-5854](https://issues.redhat.com/browse/ODC-5854): updated helm automation scripts [#8981](https://github.com/openshift/console/pull/8981)
* Add helm config export in oc-environment script [#8910](https://github.com/openshift/console/pull/8910)
* Topology-Edit Workload and Resource Type [#8988](https://github.com/openshift/console/pull/8988)
* Gherkin for making deployment/deployment-config serverless [#8972](https://github.com/openshift/console/pull/8972)
* [Bug 1960534](https://bugzilla.redhat.com/show_bug.cgi?id=1960534): Monitoring dashboards: Always allow custom format for tooltip entries [#8986](https://github.com/openshift/console/pull/8986)
* [Bug 1962256](https://bugzilla.redhat.com/show_bug.cgi?id=1962256): Use shiny new rhel8 image in yaml [#8985](https://github.com/openshift/console/pull/8985)
* pipelinerun visualisation for status PipelineRunPending [#8664](https://github.com/openshift/console/pull/8664)
* Fix golang detection regex to only match .go files [#8992](https://github.com/openshift/console/pull/8992)
* Add getting started section to the add page in developer perspective [#8950](https://github.com/openshift/console/pull/8950)
* [Bug 1949338](https://bugzilla.redhat.com/show_bug.cgi?id=1949338): show the content of Insights widget when there are 0 recommendations for cluster [#8989](https://github.com/openshift/console/pull/8989)
* fix dev-catalog type tooltip [#8965](https://github.com/openshift/console/pull/8965)
* [Bug 1908169](https://bugzilla.redhat.com/show_bug.cgi?id=1908169): The example of Import URL is "Fedora cloud image list" for all templates. [#8920](https://github.com/openshift/console/pull/8920)
* [Bug 1960129](https://bugzilla.redhat.com/show_bug.cgi?id=1960129): Add smoke tests to verify pages are able to load [#8916](https://github.com/openshift/console/pull/8916)
* Redesign add page to follow masonry layout [#8867](https://github.com/openshift/console/pull/8867)
* Fix duplicate helm charts not showing up in catalog [#8983](https://github.com/openshift/console/pull/8983)
* [Bug 1962256](https://bugzilla.redhat.com/show_bug.cgi?id=1962256): virt: use the new rhel8 image as an example [#8980](https://github.com/openshift/console/pull/8980)
* [Bug 1961363](https://bugzilla.redhat.com/show_bug.cgi?id=1961363): remove extra space in string [#8977](https://github.com/openshift/console/pull/8977)
* Remove guards from Core OCS Operator API Pages [#8976](https://github.com/openshift/console/pull/8976)
* [Bug 1961675](https://bugzilla.redhat.com/show_bug.cgi?id=1961675): Hide TaskRun edit actions for rows in Pipelinerun's TaskRun tab [#8960](https://github.com/openshift/console/pull/8960)
* [Bug 1949889](https://bugzilla.redhat.com/show_bug.cgi?id=1949889): Enables text input for volume count in backingstore page [#8748](https://github.com/openshift/console/pull/8748)
* [Bug 1962062](https://bugzilla.redhat.com/show_bug.cgi?id=1962062): Monitoring dashboards: Allow variable dropdowns to default to "All" [#8975](https://github.com/openshift/console/pull/8975)
* Re enable customize boot source tests [#8959](https://github.com/openshift/console/pull/8959)
* ODC- 5807-Update add flow automation scripts [#8911](https://github.com/openshift/console/pull/8911)
* [Bug 1961393](https://bugzilla.redhat.com/show_bug.cgi?id=1961393): Use K8sModel as kindObj if available [#8888](https://github.com/openshift/console/pull/8888)
* [Bug 1917328](https://bugzilla.redhat.com/show_bug.cgi?id=1917328): Default to current namespace for non-common templates [#8939](https://github.com/openshift/console/pull/8939)
* remove quick starts check on Add page [#8970](https://github.com/openshift/console/pull/8970)
* [Bug 1961878](https://bugzilla.redhat.com/show_bug.cgi?id=1961878): Add Sprint 199 translations [#8912](https://github.com/openshift/console/pull/8912)
* [Bug 1932472](https://bugzilla.redhat.com/show_bug.cgi?id=1932472): Allow ManagedFields Code Folding on Form/YAML Switcher [#8964](https://github.com/openshift/console/pull/8964)
* [Bug 1961356](https://bugzilla.redhat.com/show_bug.cgi?id=1961356): Switch to double quotes in translation [#8963](https://github.com/openshift/console/pull/8963)
* [Bug 1961466](https://bugzilla.redhat.com/show_bug.cgi?id=1961466): Some dropdown placeholder text on route creation page is not translated [#8961](https://github.com/openshift/console/pull/8961)
* [Bug 1961452](https://bugzilla.redhat.com/show_bug.cgi?id=1961452): Monitoring: Remove "Alertmanager UI" link [#8952](https://github.com/openshift/console/pull/8952)
* Fix pipelinerun and taskrun log snippet message for timeout issue [#8907](https://github.com/openshift/console/pull/8907)
* [Bug 1943238](https://bugzilla.redhat.com/show_bug.cgi?id=1943238): Display olm conditions descriptors in their own page section on operand details pages [#8882](https://github.com/openshift/console/pull/8882)
* Fix tooltip on pipelineRunCount and TaskRunDuration graphs based of P… [#8868](https://github.com/openshift/console/pull/8868)
* [Bug 1924729](https://bugzilla.redhat.com/show_bug.cgi?id=1924729): Create Storageclass for CephFS provisioner assumes incorrect default FSName in external mode [#8825](https://github.com/openshift/console/pull/8825)
* [CONSOLE-2506](https://issues.redhat.com/browse/CONSOLE-2506): Added 'Advanced Cluster Management' to Perspective Switcher [#8199](https://github.com/openshift/console/pull/8199)
* [Bug 1954460](https://bugzilla.redhat.com/show_bug.cgi?id=1954460): The status of "Used Capacity Breakdown [Pods]" is "Not available" [#8955](https://github.com/openshift/console/pull/8955)
* Convert form field help uses of Popover to FieldLevelHelp [#8856](https://github.com/openshift/console/pull/8856)
* Add tests for creating custom templates from common templates [#8428](https://github.com/openshift/console/pull/8428)
* [Bug 1950916](https://bugzilla.redhat.com/show_bug.cgi?id=1950916): added warning message when vm is paused on console page and the option to pause a machine from kebab menu [#8957](https://github.com/openshift/console/pull/8957)
* [Bug 1961336](https://bugzilla.redhat.com/show_bug.cgi?id=1961336): Remove the broken Devfile Sample for BuildConfigs [#8948](https://github.com/openshift/console/pull/8948)
* Adding support to consume latest stable images of ocs operator [#8924](https://github.com/openshift/console/pull/8924)
* [Bug 1960683](https://bugzilla.redhat.com/show_bug.cgi?id=1960683): Fix hot loop in global config page [#8934](https://github.com/openshift/console/pull/8934)
* [CONSOLE-2855](https://issues.redhat.com/browse/CONSOLE-2855): Cypress: port protractor Storage tests [#8923](https://github.com/openshift/console/pull/8923)
* [Bug 1897621](https://bugzilla.redhat.com/show_bug.cgi?id=1897621): Auth test.Login times out - Wait for Cluster Auth Operator to start and finish Progressing 'test' IDP before e2e tests starts [#8820](https://github.com/openshift/console/pull/8820)
* Fix to hide object updated alert on reload in yaml view [#8946](https://github.com/openshift/console/pull/8946)
* fix helm rollback form footer alignment [#8933](https://github.com/openshift/console/pull/8933)
* Updated helm chart annotations namespace [#8908](https://github.com/openshift/console/pull/8908)
* [Bug 1960531](https://bugzilla.redhat.com/show_bug.cgi?id=1960531): Monitoring dashboards: Fix bug where panels could be duplicated [#8943](https://github.com/openshift/console/pull/8943)
* [CONSOLE-2527](https://issues.redhat.com/browse/CONSOLE-2527): Sprint 198 translations [#8720](https://github.com/openshift/console/pull/8720)
* Fix gitlab & bitbucket builder image detection [#8879](https://github.com/openshift/console/pull/8879)
* fixes issue with create menuitems on serverless, pipelines nav options [#8938](https://github.com/openshift/console/pull/8938)
* [Bug 1961064](https://bugzilla.redhat.com/show_bug.cgi?id=1961064): Fix documentation link to network policies [#8869](https://github.com/openshift/console/pull/8869)
* Topology - Delete Workload [#8942](https://github.com/openshift/console/pull/8942)
* [Bug 1954105](https://bugzilla.redhat.com/show_bug.cgi?id=1954105): Update Taskrun tab to make namespace based calls [#8860](https://github.com/openshift/console/pull/8860)
* GitOps: Add Sync Status and Latest Deployment Time to List Page (751) [#8931](https://github.com/openshift/console/pull/8931)
* [Bug 1942117](https://bugzilla.redhat.com/show_bug.cgi?id=1942117): i18n Add Storage page [#8932](https://github.com/openshift/console/pull/8932)
* Fix crashing of VM Templates page [#8922](https://github.com/openshift/console/pull/8922)
* [Bug 1960089](https://bugzilla.redhat.com/show_bug.cgi?id=1960089): CamelCase ImageStream related pages and breadcrumb [#8917](https://github.com/openshift/console/pull/8917)
* Fix Uncaught TypeError for OCS Internal mode [#8906](https://github.com/openshift/console/pull/8906)
* fixes monitoring nav route for dev perspective [#8929](https://github.com/openshift/console/pull/8929)
* Pipeline i18n refactor [#8894](https://github.com/openshift/console/pull/8894)
* [ODC-5364](https://issues.redhat.com/browse/ODC-5364): Consolidate plugins/index.js file in cypress framework [#8325](https://github.com/openshift/console/pull/8325)
* [ODC-5803](https://issues.redhat.com/browse/ODC-5803): epic automation for workspaces [#8836](https://github.com/openshift/console/pull/8836)
* [Bug 1958753](https://bugzilla.redhat.com/show_bug.cgi?id=1958753): added a check on vmiProp [#8899](https://github.com/openshift/console/pull/8899)
* [Bug 1951486](https://bugzilla.redhat.com/show_bug.cgi?id=1951486): replace metrics queries [#8904](https://github.com/openshift/console/pull/8904)
* [Bug 1920307](https://bugzilla.redhat.com/show_bug.cgi?id=1920307): changed comparison type [#8902](https://github.com/openshift/console/pull/8902)
* [Bug 1959550](https://bugzilla.redhat.com/show_bug.cgi?id=1959550): Overly generic CSS rules for dd and dt elements breaks styling elsewhere in console [#8901](https://github.com/openshift/console/pull/8901)
* [Bug 1957756](https://bugzilla.redhat.com/show_bug.cgi?id=1957756): Fix key value in replacement object [#8880](https://github.com/openshift/console/pull/8880)
* update dnd icon [#8848](https://github.com/openshift/console/pull/8848)
* Followup to PR #8843 [#8918](https://github.com/openshift/console/pull/8918)
* [Bug 1960059](https://bugzilla.redhat.com/show_bug.cgi?id=1960059): Monitoring dashboards: Remove the "Grafana UI" link [#8900](https://github.com/openshift/console/pull/8900)
* Added missing icons to VM states and removing popup when no actual message available [#8886](https://github.com/openshift/console/pull/8886)
* [Bug 1958868](https://bugzilla.redhat.com/show_bug.cgi?id=1958868): Depracte isvmready [#8875](https://github.com/openshift/console/pull/8875)
* [Bug 1926776](https://bugzilla.redhat.com/show_bug.cgi?id=1926776): "Template support" modal appears when select the RHEL6 common template [#8905](https://github.com/openshift/console/pull/8905)
* [Bug 1930007](https://bugzilla.redhat.com/show_bug.cgi?id=1930007): Allow multiple selection on resources drop down [#8877](https://github.com/openshift/console/pull/8877)
* [Bug 1940318](https://bugzilla.redhat.com/show_bug.cgi?id=1940318): Monitoring dashboards: Support colored text for single values [#8921](https://github.com/openshift/console/pull/8921)
* GitOps- Convert list card view to table view [#8804](https://github.com/openshift/console/pull/8804)
* [Bug 1958811](https://bugzilla.redhat.com/show_bug.cgi?id=1958811): KubeVirt v1 GA api [#8874](https://github.com/openshift/console/pull/8874)
* [CONSOLE-2847](https://issues.redhat.com/browse/CONSOLE-2847): Cypress: port protractor Filtering tests [#8913](https://github.com/openshift/console/pull/8913)
* [Bug 1935814](https://bugzilla.redhat.com/show_bug.cgi?id=1935814): Fix row heights when additional columns in the pod & node list page have long text [#8851](https://github.com/openshift/console/pull/8851)
* [CONSOLE-2508](https://issues.redhat.com/browse/CONSOLE-2508): Memsource automation [#8819](https://github.com/openshift/console/pull/8819)
* adds devfile provider for dev catalog [#8812](https://github.com/openshift/console/pull/8812)
* [Bug 1959916](https://bugzilla.redhat.com/show_bug.cgi?id=1959916): Make console works against api proxy [#8872](https://github.com/openshift/console/pull/8872)
* [Bug 1959519](https://bugzilla.redhat.com/show_bug.cgi?id=1959519): Fix typo in OperandDetails components [#8893](https://github.com/openshift/console/pull/8893)
* [Bug 1959041](https://bugzilla.redhat.com/show_bug.cgi?id=1959041): "Troubleshoot" link doesn't exist after scaling down OSD pod [#8898](https://github.com/openshift/console/pull/8898)
* Topology List View Automation [#8884](https://github.com/openshift/console/pull/8884)
* Fix node-v15 pipeline test failures [#8892](https://github.com/openshift/console/pull/8892)
* Add devfile samples to samples catalog [#8794](https://github.com/openshift/console/pull/8794)
* [Bug 1946243](https://bugzilla.redhat.com/show_bug.cgi?id=1946243): Fix pool creation timout issue when PG count is limit is… [#8689](https://github.com/openshift/console/pull/8689)
* [Bug 1958679](https://bugzilla.redhat.com/show_bug.cgi?id=1958679): Disable pool compression via UI [#8897](https://github.com/openshift/console/pull/8897)
* Add Devfile Sample Endpoint [#8687](https://github.com/openshift/console/pull/8687)
* Navigate user to respective catalog-page on pressing enter while focused on quick-add view-all link [#8890](https://github.com/openshift/console/pull/8890)
* [Bug 1957590](https://bugzilla.redhat.com/show_bug.cgi?id=1957590): Translation of cluster updating message [#8889](https://github.com/openshift/console/pull/8889)
* [Bug 1958439](https://bugzilla.redhat.com/show_bug.cgi?id=1958439): fixes issue with html5 required validation for dynamic forms [#8887](https://github.com/openshift/console/pull/8887)
* give feedback when modal submit is clicked [#8855](https://github.com/openshift/console/pull/8855)
* [Bug 1952832](https://bugzilla.redhat.com/show_bug.cgi?id=1952832): Enable external mode for IBM cloud [#8790](https://github.com/openshift/console/pull/8790)
* [Bug 1942715](https://bugzilla.redhat.com/show_bug.cgi?id=1942715): Fix User Management i18n misses [#8786](https://github.com/openshift/console/pull/8786)
* Fix that boolean values (esp. false) are not loaded and synced correctly [#8885](https://github.com/openshift/console/pull/8885)
* [Bug 1957561](https://bugzilla.redhat.com/show_bug.cgi?id=1957561): lack of pseudolocalization for some text on Cluster Setting [#8883](https://github.com/openshift/console/pull/8883)
* [Bug 1957895](https://bugzilla.redhat.com/show_bug.cgi?id=1957895): Cypress helper projectDropdown.shouldContain is not an assertion [#8878](https://github.com/openshift/console/pull/8878)
* [Bug 1950460](https://bugzilla.redhat.com/show_bug.cgi?id=1950460): Change Request size input to a number spinner input [#8713](https://github.com/openshift/console/pull/8713)
* Adding login template strings for translation [#8587](https://github.com/openshift/console/pull/8587)
* [Bug 1885242](https://bugzilla.redhat.com/show_bug.cgi?id=1885242): Disables the clone button if no storage class available [#8744](https://github.com/openshift/console/pull/8744)
* Update prow deployment script [#8608](https://github.com/openshift/console/pull/8608)
* chore(OWNERS): add christianvogt to root OWNERS file [#8881](https://github.com/openshift/console/pull/8881)
* [Bug 1952487](https://bugzilla.redhat.com/show_bug.cgi?id=1952487): Template filter does not work properly [#8843](https://github.com/openshift/console/pull/8843)
* Added an icon prop to the HealthItem component, can now override default icon [#8876](https://github.com/openshift/console/pull/8876)
* [Bug 1942117](https://bugzilla.redhat.com/show_bug.cgi?id=1942117): Fix Workloads i18n misses [#8505](https://github.com/openshift/console/pull/8505)
* [Bug 1957967](https://bugzilla.redhat.com/show_bug.cgi?id=1957967): Increase specificity of listPage.row.clickRowByName [#8866](https://github.com/openshift/console/pull/8866)
* Make multus public network optional [#8834](https://github.com/openshift/console/pull/8834)
* Replaces OCS with storage in storage overiew page [#8849](https://github.com/openshift/console/pull/8849)
* SSH strings changes [#8871](https://github.com/openshift/console/pull/8871)
* [Bug 1924968](https://bugzilla.redhat.com/show_bug.cgi?id=1924968): Monitoring: Add some missing translations [#8048](https://github.com/openshift/console/pull/8048)
* [ODC-5592](https://issues.redhat.com/browse/ODC-5592): CI implementation for pipelines [#8320](https://github.com/openshift/console/pull/8320)
* [CONSOLE-2774](https://issues.redhat.com/browse/CONSOLE-2774): Consolidate i18n namespaces k-m [#8805](https://github.com/openshift/console/pull/8805)
* [CONSOLE-2775](https://issues.redhat.com/browse/CONSOLE-2775): Consolidate i18n namespaces n-r [#8806](https://github.com/openshift/console/pull/8806)
* Show roles in project access page based on customization [#8672](https://github.com/openshift/console/pull/8672)
* [CONSOLE-2776](https://issues.redhat.com/browse/CONSOLE-2776): Consolidate i18n namespaces s-z [#8808](https://github.com/openshift/console/pull/8808)
* Fix noobaa-namespace-store and noobaa-backing-store dropdown [#8675](https://github.com/openshift/console/pull/8675)
* [Bug 1956920](https://bugzilla.redhat.com/show_bug.cgi?id=1956920): can't open terminal for pods that have more than one co… [#8853](https://github.com/openshift/console/pull/8853)
* [Bug 1957756](https://bugzilla.redhat.com/show_bug.cgi?id=1957756): Device Replacemet UI, The status of the disk is "replacement ready" before I clicked on "start replacement" [#8864](https://github.com/openshift/console/pull/8864)
* [Bug 1937102](https://bugzilla.redhat.com/show_bug.cgi?id=1937102): i18n Pod Containers, labels [#8441](https://github.com/openshift/console/pull/8441)
* Yaml editor with connected form fields [#8862](https://github.com/openshift/console/pull/8862)
* add new approvers to console frontend OWNERS [#8854](https://github.com/openshift/console/pull/8854)
* fixes default image for operator backed list view [#8840](https://github.com/openshift/console/pull/8840)
* Add customized project access list to server flags [#8502](https://github.com/openshift/console/pull/8502)
* Fix Dev perspective nav items [#8861](https://github.com/openshift/console/pull/8861)
* externalize OCS [#8857](https://github.com/openshift/console/pull/8857)
* Add functionality to edit d/dc via form or yaml interchangeably [#8723](https://github.com/openshift/console/pull/8723)
* [Bug 1940206](https://bugzilla.redhat.com/show_bug.cgi?id=1940206): i18n details page text [#8407](https://github.com/openshift/console/pull/8407)
* [Bug 1955803](https://bugzilla.redhat.com/show_bug.cgi?id=1955803): OperatorHub - console accepts any value for infraFeatures [#8844](https://github.com/openshift/console/pull/8844)
* Make FieldLevelHelp button identifiable for testing [#8858](https://github.com/openshift/console/pull/8858)
* Use latest WebTerminal plugin instead of 4.5.0 [#8795](https://github.com/openshift/console/pull/8795)
* converting navigation extensions to dynamic-plugin-sdk [#8438](https://github.com/openshift/console/pull/8438)
* Add popover to storage in overview status card [#8835](https://github.com/openshift/console/pull/8835)
* Fix the add support annotations script [#8846](https://github.com/openshift/console/pull/8846)
* [Bug 1930007](https://bugzilla.redhat.com/show_bug.cgi?id=1930007): Filter dropdown doesn’t support multi selection [#8802](https://github.com/openshift/console/pull/8802)
* [Bug 1956353](https://bugzilla.redhat.com/show_bug.cgi?id=1956353): Fix analyze script [#8845](https://github.com/openshift/console/pull/8845)
* [Bug 1942548](https://bugzilla.redhat.com/show_bug.cgi?id=1942548): i18n translation of create route form [#8747](https://github.com/openshift/console/pull/8747)
* adding console.dashboards extension types to dynamic-plugin-sdk [#8339](https://github.com/openshift/console/pull/8339)
* convert kubevirt page extensions to dynamic [#8839](https://github.com/openshift/console/pull/8839)
* adding sdk support for dynamic page extensions [#8826](https://github.com/openshift/console/pull/8826)
* adding console.pages extension types to dynamic-plugin-sdk [#8818](https://github.com/openshift/console/pull/8818)
* Plugin SDK: Improve TS diagnostics reporting when parsing TS files [#8831](https://github.com/openshift/console/pull/8831)
* Reducer - convert extensions from static to dynamic [#7854](https://github.com/openshift/console/pull/7854)
* [Bug 1944761](https://bugzilla.redhat.com/show_bug.cgi?id=1944761): Use FieldLevelHelp component instead of Popover [#8793](https://github.com/openshift/console/pull/8793)
* Bump SDK dependencies: ts-json-schema-generator, typescript [#8828](https://github.com/openshift/console/pull/8828)
* multiline pipeline params: remove max height for multilined fields [#8797](https://github.com/openshift/console/pull/8797)
* Remove spaces between Pipeline Kinds translations [#8644](https://github.com/openshift/console/pull/8644)
* Provide add page customization config object as server flag and hide actions from the Add page [#8643](https://github.com/openshift/console/pull/8643)
* [CONSOLE-2773](https://issues.redhat.com/browse/CONSOLE-2773): Consolidate E-I namespaces [#8280](https://github.com/openshift/console/pull/8280)
* [Bug 1954566](https://bugzilla.redhat.com/show_bug.cgi?id=1954566): Cannot update a component (`UtilizationCard`) error [#8833](https://github.com/openshift/console/pull/8833)
* [Bug 1891696](https://bugzilla.redhat.com/show_bug.cgi?id=1891696): [LSO] Add capacity UI does not check for node present in selected storageclass [#8754](https://github.com/openshift/console/pull/8754)
* show all visited tasks of quickstart, change icon of failed tasks [#8757](https://github.com/openshift/console/pull/8757)
* [Bug 1944674](https://bugzilla.redhat.com/show_bug.cgi?id=1944674): Project field become to "All projects" and disabled [#8811](https://github.com/openshift/console/pull/8811)
* Add when expression in pipeline builder [#8779](https://github.com/openshift/console/pull/8779)
* Revert "Disable Alertmanager e2e tests" [#8824](https://github.com/openshift/console/pull/8824)
* Split cloud-init component to different logic and view components [#8817](https://github.com/openshift/console/pull/8817)
* add support for login with normal user [#8809](https://github.com/openshift/console/pull/8809)
* CONSOLE-2351 Add a "Wrap lines" toggle to log viewers [#8683](https://github.com/openshift/console/pull/8683)
* [CONSOLE-2772](https://issues.redhat.com/browse/CONSOLE-2772): Consolidate A-D i18n namespaces [#8279](https://github.com/openshift/console/pull/8279)
* [Bug 1953703](https://bugzilla.redhat.com/show_bug.cgi?id=1953703): Enable tech preview badge for arbiter [#8822](https://github.com/openshift/console/pull/8822)
* [Bug 1941669](https://bugzilla.redhat.com/show_bug.cgi?id=1941669): Translate pinned resources when labelPluralKey is available [#8816](https://github.com/openshift/console/pull/8816)
* [Bug 1952759](https://bugzilla.redhat.com/show_bug.cgi?id=1952759): It was not immediately clear what the Star icon meant [#8776](https://github.com/openshift/console/pull/8776)
* [Bug 1947665](https://bugzilla.redhat.com/show_bug.cgi?id=1947665): Replace dashboard namespace with ceph [#8764](https://github.com/openshift/console/pull/8764)
* [Bug 1952732](https://bugzilla.redhat.com/show_bug.cgi?id=1952732): Users did not understand the boot source labels [#8771](https://github.com/openshift/console/pull/8771)
* Migrate helm actions to use new action extensions [#8629](https://github.com/openshift/console/pull/8629)
* [Bug 1952214](https://bugzilla.redhat.com/show_bug.cgi?id=1952214): Save additional Devfile container parameters from build guidance container and drop it to fix ImagePullBackOff [#8807](https://github.com/openshift/console/pull/8807)
* [Bug 1952635](https://bugzilla.redhat.com/show_bug.cgi?id=1952635): fixes: Web console displays a blank page- white space instead of cluster information [#8810](https://github.com/openshift/console/pull/8810)
* Add certification filter and certified badge in helm catalog [#8662](https://github.com/openshift/console/pull/8662)
* Query Browser: Add seconds back to query browser tooltips [#8815](https://github.com/openshift/console/pull/8815)
* adds samples to topology quick search [#8789](https://github.com/openshift/console/pull/8789)
* [Bug 1926131](https://bugzilla.redhat.com/show_bug.cgi?id=1926131): Adding i18n for missed HPA form [#8272](https://github.com/openshift/console/pull/8272)
* Fix IO operations ChartTooltip (Performance Card, Object Dashboard) [#8798](https://github.com/openshift/console/pull/8798)
* Pipeline Builder AutoComplete (Part 2 - Improved UX) [#8752](https://github.com/openshift/console/pull/8752)
* [Bug 1941625](https://bugzilla.redhat.com/show_bug.cgi?id=1941625): Add two missing translations for topology list view [#8813](https://github.com/openshift/console/pull/8813)
* [Bug 1945103](https://bugzilla.redhat.com/show_bug.cgi?id=1945103): Not showing user creds if vm isnt up [#8791](https://github.com/openshift/console/pull/8791)
* [Bug 1951858](https://bugzilla.redhat.com/show_bug.cgi?id=1951858): Unexpected text '0' on filter toolbar [#8733](https://github.com/openshift/console/pull/8733)
* [Bug 1951212](https://bugzilla.redhat.com/show_bug.cgi?id=1951212): User/Group details shows unrelated subjects in role bindings tab [#8799](https://github.com/openshift/console/pull/8799)
* [Bug 1954248](https://bugzilla.redhat.com/show_bug.cgi?id=1954248): Disable Alertmanager e2e tests [#8801](https://github.com/openshift/console/pull/8801)
* [Bug 1952372](https://bugzilla.redhat.com/show_bug.cgi?id=1952372): VM stop action should not be there if the VM is not running [#8766](https://github.com/openshift/console/pull/8766)
* [Bug 1953418](https://bugzilla.redhat.com/show_bug.cgi?id=1953418): fix wizard validate tests [#8769](https://github.com/openshift/console/pull/8769)
* [Bug 1952325](https://bugzilla.redhat.com/show_bug.cgi?id=1952325): Check support modal in ssh tests and skip template parentSupport [#8737](https://github.com/openshift/console/pull/8737)
* [ODC-5786](https://issues.redhat.com/browse/ODC-5786): suppress focus outline on topology group elements [#8785](https://github.com/openshift/console/pull/8785)
* [Bug 1941798](https://bugzilla.redhat.com/show_bug.cgi?id=1941798): i18n kind on LimitRange and ResourceQuota list pages [#8782](https://github.com/openshift/console/pull/8782)
* [Bug 1941801](https://bugzilla.redhat.com/show_bug.cgi?id=1941801): Role bind toolbar dropdowns haven't been internationalized [#8781](https://github.com/openshift/console/pull/8781)
* [Bug 1952730](https://bugzilla.redhat.com/show_bug.cgi?id=1952730): “Customize virtual machine” and the “Advanced” feature are confusing in wizard [#8773](https://github.com/openshift/console/pull/8773)
* Add Trigger Param Auto Complete [#8753](https://github.com/openshift/console/pull/8753)
* [Bug 1952545](https://bugzilla.redhat.com/show_bug.cgi?id=1952545): Fix new selection after inserting a YAML snippet [#8741](https://github.com/openshift/console/pull/8741)
* disable Quick Starts [#8731](https://github.com/openshift/console/pull/8731)
* [Bug 1939753](https://bugzilla.redhat.com/show_bug.cgi?id=1939753): Track and show error messages in modals [#8439](https://github.com/openshift/console/pull/8439)
* Add .dockerignore file so that all node_modules are ignored [#8026](https://github.com/openshift/console/pull/8026)
* [Bug 1953691](https://bugzilla.redhat.com/show_bug.cgi?id=1953691): Remove unused mock file [#8778](https://github.com/openshift/console/pull/8778)
* [Bug 1952111](https://bugzilla.redhat.com/show_bug.cgi?id=1952111): Optimized imports from @patternfly/react-tokens [#8777](https://github.com/openshift/console/pull/8777)
* [Bug 1952728](https://bugzilla.redhat.com/show_bug.cgi?id=1952728): VM will be turned off when creating snapshots and a warning will be presented [#8774](https://github.com/openshift/console/pull/8774)
* [Bug 1952625](https://bugzilla.redhat.com/show_bug.cgi?id=1952625): Remove model and use Trans [#8750](https://github.com/openshift/console/pull/8750)
* fix: Update token length [#8770](https://github.com/openshift/console/pull/8770)
* [Bug 1952367](https://bugzilla.redhat.com/show_bug.cgi?id=1952367): No VM status on overview page when VM is pending [#8767](https://github.com/openshift/console/pull/8767)
* Avoid setting JAVA_ARGS if cmd args are not provided [#8758](https://github.com/openshift/console/pull/8758)
* [Bug 1921106](https://bugzilla.redhat.com/show_bug.cgi?id=1921106): A11y Violation: button name(s) on Utilization Card on Cluster Dashboard [#8706](https://github.com/openshift/console/pull/8706)
* add data for quickStarts from configmap to window.SERVER_FLAGS [#8695](https://github.com/openshift/console/pull/8695)
* fixes issue with kamelets not shown on catalog for sources [#8772](https://github.com/openshift/console/pull/8772)
* [Bug 1952495](https://bugzilla.redhat.com/show_bug.cgi?id=1952495): “Create” button on the Templates page is confuse [#8765](https://github.com/openshift/console/pull/8765)
* [Bug 1952394](https://bugzilla.redhat.com/show_bug.cgi?id=1952394): Not able to create a project in the wizard [#8743](https://github.com/openshift/console/pull/8743)
* [Bug 1926776](https://bugzilla.redhat.com/show_bug.cgi?id=1926776): "Template support" modal appears when select the RHEL6 common template [#8739](https://github.com/openshift/console/pull/8739)
* Use catalog extension type for catalog item labels [#8704](https://github.com/openshift/console/pull/8704)
* Added styling to vm status events [#8746](https://github.com/openshift/console/pull/8746)
* [Bug 1952310](https://bugzilla.redhat.com/show_bug.cgi?id=1952310): Added a create override options on useSecret hook [#8738](https://github.com/openshift/console/pull/8738)
* Kubevirt plugin falcky tests [#8768](https://github.com/openshift/console/pull/8768)
* Change tooltips for storage-efficiency-card [#8755](https://github.com/openshift/console/pull/8755)
* [Bug 1887849](https://bugzilla.redhat.com/show_bug.cgi?id=1887849): Fix for  new storage pool failure_domain missing [#8745](https://github.com/openshift/console/pull/8745)
* Add support for showing the dashboard based on components [#8669](https://github.com/openshift/console/pull/8669)
* Fixes used capacity based on storage class selection [#8647](https://github.com/openshift/console/pull/8647)
* QuickStart Actions [#8622](https://github.com/openshift/console/pull/8622)
* [Bug 1952958](https://bugzilla.redhat.com/show_bug.cgi?id=1952958): Gracefully degrade when `Intl.RelativeTimeFormat` unavailable [#8761](https://github.com/openshift/console/pull/8761)
* Add new customization snippet to list all available Add page actions [#8717](https://github.com/openshift/console/pull/8717)
* adds DnD support to TextColumnField component [#8715](https://github.com/openshift/console/pull/8715)
* [Bug 1951169](https://bugzilla.redhat.com/show_bug.cgi?id=1951169): Change "Explore" to "API Explorer" [#8682](https://github.com/openshift/console/pull/8682)
* [Bug 1950219](https://bugzilla.redhat.com/show_bug.cgi?id=1950219): fixes issue with KnativeServing not shown in list on global config page [#8740](https://github.com/openshift/console/pull/8740)
* fix Quick Search CTA in topology [#8718](https://github.com/openshift/console/pull/8718)
* fixes issue with ksvc edit for upload jar flow [#8759](https://github.com/openshift/console/pull/8759)
* [Bug 1942086](https://bugzilla.redhat.com/show_bug.cgi?id=1942086): Fix Home i18n misses [#8571](https://github.com/openshift/console/pull/8571)
* [Bug 1928319](https://bugzilla.redhat.com/show_bug.cgi?id=1928319): Stretch cluster installed on 6 storage node cluster with 2 LSO devices on each storage node fails to utilize 8 LSO devices [#8326](https://github.com/openshift/console/pull/8326)
* [Bug 1952697](https://bugzilla.redhat.com/show_bug.cgi?id=1952697): Add Segment support for analytics [#8638](https://github.com/openshift/console/pull/8638)
* [Bug 1952585](https://bugzilla.redhat.com/show_bug.cgi?id=1952585): Enhance operator modal repo and container links [#8703](https://github.com/openshift/console/pull/8703)
* [Bug 1944763](https://bugzilla.redhat.com/show_bug.cgi?id=1944763): Fix tooltips to use common component <FieldLevelHelp> [#8690](https://github.com/openshift/console/pull/8690)
* Add No Workspace value to Start Modal [#8663](https://github.com/openshift/console/pull/8663)
* fix(rhoas-plugin): Design alignments, add strings, and fix bugs [#8637](https://github.com/openshift/console/pull/8637)
* Workspaces and Resource dropdowns are FormSelect [#8624](https://github.com/openshift/console/pull/8624)
* Pipeline Builder Param AutoComplete (part 1) [#8692](https://github.com/openshift/console/pull/8692)
* Fixes time in cache bucket class review page [#8667](https://github.com/openshift/console/pull/8667)
* [Bug 1839101](https://bugzilla.redhat.com/show_bug.cgi?id=1839101): Add namespaced attribute to main navigation links [#8249](https://github.com/openshift/console/pull/8249)
* Support user help for workspaces over resources in the Pipeline Builder [#8735](https://github.com/openshift/console/pull/8735)
* [Bug 1951221](https://bugzilla.redhat.com/show_bug.cgi?id=1951221): remove VMDisksFirehose component in favor of a hook [#8711](https://github.com/openshift/console/pull/8711)
* Refactor Console plugin init code [#8676](https://github.com/openshift/console/pull/8676)
* [Bug 1949810](https://bugzilla.redhat.com/show_bug.cgi?id=1949810): adds check for templates [#8732](https://github.com/openshift/console/pull/8732)
* Guard OBC from showing up in Attach Storage [#8727](https://github.com/openshift/console/pull/8727)
* [Bug 1948789](https://bugzilla.redhat.com/show_bug.cgi?id=1948789): Pass all queries for area chart [#8697](https://github.com/openshift/console/pull/8697)
* Cypress:  numerically naming cypress screenshot files [#8408](https://github.com/openshift/console/pull/8408)
* Added a check for okd in ssh cypress testing [#8722](https://github.com/openshift/console/pull/8722)
* [Bug 1950532](https://bugzilla.redhat.com/show_bug.cgi?id=1950532): Include "update" when referring to operator approval [#8712](https://github.com/openshift/console/pull/8712)
* [Bug 1950196](https://bugzilla.redhat.com/show_bug.cgi?id=1950196): Added a check for enableSSHService before adding a secret to a machine [#8724](https://github.com/openshift/console/pull/8724)
* [Bug 1951209](https://bugzilla.redhat.com/show_bug.cgi?id=1951209): kubevirt-plugin: take into account Succeeded VMI Phase [#8708](https://github.com/openshift/console/pull/8708)
* [Bug 1942839](https://bugzilla.redhat.com/show_bug.cgi?id=1942839): Fix async return [#8719](https://github.com/openshift/console/pull/8719)
* Support webpack ConcatenatedModule in ExtensionValidator [#8705](https://github.com/openshift/console/pull/8705)
* [Bug 1949404](https://bugzilla.redhat.com/show_bug.cgi?id=1949404): Fix label selector translation on pvc creation page [#8688](https://github.com/openshift/console/pull/8688)
* build strategy i18n miss [#8659](https://github.com/openshift/console/pull/8659)
* [Bug 1942673](https://bugzilla.redhat.com/show_bug.cgi?id=1942673): Fix pipeline model label references not using keys [#8628](https://github.com/openshift/console/pull/8628)
* [Bug 1922063](https://bugzilla.redhat.com/show_bug.cgi?id=1922063): "Virtual Machine" should be "Templates" in template wizard [#8691](https://github.com/openshift/console/pull/8691)
* [Bug 1949384](https://bugzilla.redhat.com/show_bug.cgi?id=1949384): Localize Default Pull Secret modal [#8680](https://github.com/openshift/console/pull/8680)
* [Bug 1951214](https://bugzilla.redhat.com/show_bug.cgi?id=1951214): fix isEnvType null ptr and add missing volume types [#8709](https://github.com/openshift/console/pull/8709)
* [Bug 1922280](https://bugzilla.redhat.com/show_bug.cgi?id=1922280): No oVirt label in upstream [#8698](https://github.com/openshift/console/pull/8698)
* [Bug 1924728](https://bugzilla.redhat.com/show_bug.cgi?id=1924728): Add warning events to vm status and changed appearance to be more similar to cluster overview [#8700](https://github.com/openshift/console/pull/8700)
* [Bug 1950912](https://bugzilla.redhat.com/show_bug.cgi?id=1950912): kubevirt devconsole tests [#8352](https://github.com/openshift/console/pull/8352)
* Moved isWinToolsImage function to a different file [#8699](https://github.com/openshift/console/pull/8699)
* [Bug 1862989](https://bugzilla.redhat.com/show_bug.cgi?id=1862989): [RFE]VM import wizard - storage class filter or a tooltip [#8610](https://github.com/openshift/console/pull/8610)
* [Bug 1924788](https://bugzilla.redhat.com/show_bug.cgi?id=1924788): Not clear error message when there are no NADs available for the user [#8625](https://github.com/openshift/console/pull/8625)
* [Bug 1949155](https://bugzilla.redhat.com/show_bug.cgi?id=1949155): correctly check for favorited or last namespace on load [#8639](https://github.com/openshift/console/pull/8639)
* provide code snippet to customize roles in project access [#8533](https://github.com/openshift/console/pull/8533)
* Fix dynamic demo plugin build [#8677](https://github.com/openshift/console/pull/8677)
* [Bug 1949411](https://bugzilla.redhat.com/show_bug.cgi?id=1949411): VolumeSnapshot, VolumeSnapshotClass and VolumeSnapshotConent Details tab is not translated - i18n misses [#8684](https://github.com/openshift/console/pull/8684)
* [Bug 1948788](https://bugzilla.redhat.com/show_bug.cgi?id=1948788): always link to metrics viewer even if graph is empty [#8678](https://github.com/openshift/console/pull/8678)
* [Bug 1949774](https://bugzilla.redhat.com/show_bug.cgi?id=1949774): force postcss to ^8.2.0 [#8674](https://github.com/openshift/console/pull/8674)
* Avoid memoizing topology sidebar components [#8671](https://github.com/openshift/console/pull/8671)
* [Bug 1888517](https://bugzilla.redhat.com/show_bug.cgi?id=1888517): Implements increament when expanding storage [#8257](https://github.com/openshift/console/pull/8257)
* [Bug 1949410](https://bugzilla.redhat.com/show_bug.cgi?id=1949410): Fix "Create binding" link from Role page, RoleBindings tab [#8653](https://github.com/openshift/console/pull/8653)
* [Bug 1862084](https://bugzilla.redhat.com/show_bug.cgi?id=1862084): Consistent formatting of dates and times [#8490](https://github.com/openshift/console/pull/8490)
* fixes multi-namespace bucket class page, table and dropdown sync [#8656](https://github.com/openshift/console/pull/8656)
* [Bug 1948427](https://bugzilla.redhat.com/show_bug.cgi?id=1948427): Fix issue where react-modal was removing Operator modal from the DOM [#8679](https://github.com/openshift/console/pull/8679)
* [Bug 1949935](https://bugzilla.redhat.com/show_bug.cgi?id=1949935): Fix start pipeline action access review [#8670](https://github.com/openshift/console/pull/8670)
* Highlight only the navigation button when quick start hint clicked [#8668](https://github.com/openshift/console/pull/8668)
* Insights Makes review page for multiple namespace bucket class consistent [#8666](https://github.com/openshift/console/pull/8666)
* [Bug 1926289](https://bugzilla.redhat.com/show_bug.cgi?id=1926289): create app-content div with modal-container as sibling [#8617](https://github.com/openshift/console/pull/8617)
* [Bug 1888521](https://bugzilla.redhat.com/show_bug.cgi?id=1888521): Add support for adding dynamic storage providers for a Deployment [#8560](https://github.com/openshift/console/pull/8560)
* Topology - Workload Sidebar [#8651](https://github.com/openshift/console/pull/8651)
* Update CTA and description based on design [#8650](https://github.com/openshift/console/pull/8650)
* [ODC-5698](https://issues.redhat.com/browse/ODC-5698): knative smoke test cases [#8356](https://github.com/openshift/console/pull/8356)
* [Bug 1888525](https://bugzilla.redhat.com/show_bug.cgi?id=1888525): Adding capacity to the storage cluster [RHOCS Usability Study] [#8291](https://github.com/openshift/console/pull/8291)
* [Bug 1949514](https://bugzilla.redhat.com/show_bug.cgi?id=1949514): make Location column visible at smaller screen resolutions [#8658](https://github.com/openshift/console/pull/8658)
* [Bug 1942858](https://bugzilla.redhat.com/show_bug.cgi?id=1942858): [RFE]Confusing detach volume UX [#8652](https://github.com/openshift/console/pull/8652)
* Disallow executable permissions for all groups. [#8649](https://github.com/openshift/console/pull/8649)
* Add files required for plow deployment script [#8654](https://github.com/openshift/console/pull/8654)
* [Bug 1916553](https://bugzilla.redhat.com/show_bug.cgi?id=1916553): Default template description is empty on details tab [#8636](https://github.com/openshift/console/pull/8636)
* Remove noobaa package [#8648](https://github.com/openshift/console/pull/8648)
* [Bug 1949180](https://bugzilla.redhat.com/show_bug.cgi?id=1949180): Parse Pipelines kinds [#8640](https://github.com/openshift/console/pull/8640)
* fixes issue with kn resources not shown if KS is created [#8632](https://github.com/openshift/console/pull/8632)
* [Bug 1946705](https://bugzilla.redhat.com/show_bug.cgi?id=1946705): Use search terms as separate words in quick add search [#8572](https://github.com/openshift/console/pull/8572)
* [Bug 1924916](https://bugzilla.redhat.com/show_bug.cgi?id=1924916): PVC reported as Uploading when it is actually cloning [#8612](https://github.com/openshift/console/pull/8612)
* topology i18n misses [#8603](https://github.com/openshift/console/pull/8603)
* [Bug 1949093](https://bugzilla.redhat.com/show_bug.cgi?id=1949093): fix a.pf-c-button hover issues [#8634](https://github.com/openshift/console/pull/8634)
* [Bug 1948919](https://bugzilla.redhat.com/show_bug.cgi?id=1948919): change "desired channel" to "desired version" [#8635](https://github.com/openshift/console/pull/8635)
* [Bug 1948333](https://bugzilla.redhat.com/show_bug.cgi?id=1948333): Force glob-parent version to ^5.1.2 [#8620](https://github.com/openshift/console/pull/8620)
* Support Embedded Task/Pipeline/Pipeline Resources [#8630](https://github.com/openshift/console/pull/8630)
* [Bug 1918785](https://bugzilla.redhat.com/show_bug.cgi?id=1918785): Update all resource request/limit queries based on new labels [#8606](https://github.com/openshift/console/pull/8606)
* [Bug 1946922](https://bugzilla.redhat.com/show_bug.cgi?id=1946922): Fix ingress details page to show referenced secret name [#8623](https://github.com/openshift/console/pull/8623)
* Fix broken link document Sealing Virtual Machines on CNV [#8626](https://github.com/openshift/console/pull/8626)
* Misc Pipeline Workspace updates [#8604](https://github.com/openshift/console/pull/8604)
* Use active namespace for creating sample href [#8621](https://github.com/openshift/console/pull/8621)
* Added missing styling and machine ready check [#8618](https://github.com/openshift/console/pull/8618)
* [Bug 1922065](https://bugzilla.redhat.com/show_bug.cgi?id=1922065): Rootdisk size is default to 15GiB in customize wizard [#8615](https://github.com/openshift/console/pull/8615)
* imports sorting part 4 [#8567](https://github.com/openshift/console/pull/8567)
* [Bug 1942839](https://bugzilla.redhat.com/show_bug.cgi?id=1942839): Image is now pulled from config map data [#8549](https://github.com/openshift/console/pull/8549)
* show type header for serverless function in topology [#8516](https://github.com/openshift/console/pull/8516)
* converting pvc extension types to dynamic-plugin-sdk [#8162](https://github.com/openshift/console/pull/8162)
* [Bug 1925207](https://bugzilla.redhat.com/show_bug.cgi?id=1925207): fix custom template cloudint disk [#8611](https://github.com/openshift/console/pull/8611)
* Converting context provider extensions to dynamic [#8156](https://github.com/openshift/console/pull/8156)
* Prow script point to deleted resource [#8609](https://github.com/openshift/console/pull/8609)
* Improve generated dist/doc/console-extensions.md [#8543](https://github.com/openshift/console/pull/8543)
* Edit flow for knatified workload for git import with buildConfig, Pipelines and Container Image [#8607](https://github.com/openshift/console/pull/8607)
* Added plugin for delete block pool modal [#8600](https://github.com/openshift/console/pull/8600)
* Use redhat-developer devfile sample repository [#8585](https://github.com/openshift/console/pull/8585)
* [Bug 1946320](https://bugzilla.redhat.com/show_bug.cgi?id=1946320): Fix empty state message for PVC dropdown [#8561](https://github.com/openshift/console/pull/8561)
* Gherkin script for Pipeline Builder enhancements and parity with Tekton [#8501](https://github.com/openshift/console/pull/8501)
* Support FormSelect for Pipeline Resources [#8595](https://github.com/openshift/console/pull/8595)
* Fix for creation of visual connectors [#8541](https://github.com/openshift/console/pull/8541)
* Create component to visualize copy/execute snippets in the Quickstarts [#8527](https://github.com/openshift/console/pull/8527)
* fix: remove stray `}` from end of aria-label in delete dialog [#8484](https://github.com/openshift/console/pull/8484)
* [Bug 1947828](https://bugzilla.redhat.com/show_bug.cgi?id=1947828): fix resource log download filename for long lines [#8598](https://github.com/openshift/console/pull/8598)
* (fix): Remove `i18nKey` for translation [#8605](https://github.com/openshift/console/pull/8605)
* Add support to override and hide CSV Actions [#8597](https://github.com/openshift/console/pull/8597)
* Pool management - delete [#8550](https://github.com/openshift/console/pull/8550)
* [CONSOLE-2379](https://issues.redhat.com/browse/CONSOLE-2379): Add build config for dynamic plugin SDK [#8378](https://github.com/openshift/console/pull/8378)
* [Bug 1848151](https://bugzilla.redhat.com/show_bug.cgi?id=1848151): Don't poll ClusterVersion when user doesn't have authority [#8602](https://github.com/openshift/console/pull/8602)
* [Bug 1942193](https://bugzilla.redhat.com/show_bug.cgi?id=1942193): Override default PF Accordion blue border on the edit Operator form. Only target the field group heading when used to display dynamic form field groups. [#8575](https://github.com/openshift/console/pull/8575)
* show modal for editing resource limits [#8457](https://github.com/openshift/console/pull/8457)
* [Bug 1910500](https://bugzilla.redhat.com/show_bug.cgi?id=1910500): Fixes CSI provisioner additional parameters [#8337](https://github.com/openshift/console/pull/8337)
* Make multus behaviour common between two modes [#8599](https://github.com/openshift/console/pull/8599)
* Adds support to edit bucket class with namespace store resources [#8594](https://github.com/openshift/console/pull/8594)
* Gherkin script for Form based edit for Deployment & DeploymentConfig-ODC-5007 [#8588](https://github.com/openshift/console/pull/8588)
* Gherkin Script for Enhancements for feature parity with Tekton-ODC-5151 [#8555](https://github.com/openshift/console/pull/8555)
* [Bug 1943449](https://bugzilla.redhat.com/show_bug.cgi?id=1943449): Bump hosted-git-info package as part of CVE [#8481](https://github.com/openshift/console/pull/8481)
* Fixes inconsistency in tables in attached devices [#8578](https://github.com/openshift/console/pull/8578)
* [Bug 1866318](https://bugzilla.redhat.com/show_bug.cgi?id=1866318): [RHOCS Usability Study][Dashboard] Users found it difficult to navigate to the OCS dashboard [#8496](https://github.com/openshift/console/pull/8496)
* Gherkin script for updating empty state of topology-ODC-5595 [#8592](https://github.com/openshift/console/pull/8592)
* [Bug 1866331](https://bugzilla.redhat.com/show_bug.cgi?id=1866331): Add tooltips [#8590](https://github.com/openshift/console/pull/8590)
* [Bug 1942557](https://bugzilla.redhat.com/show_bug.cgi?id=1942557): Remove cluster label from predefined monitoring queries [#8519](https://github.com/openshift/console/pull/8519)
* Adds description in bucket class dropdown for OBC page [#8589](https://github.com/openshift/console/pull/8589)
* add support for workspaces [#8573](https://github.com/openshift/console/pull/8573)
* Add support for Alert Action in Dynamic SDK [#8569](https://github.com/openshift/console/pull/8569)
* Kafka Source creation form to support bootstrap server host from KC [#8518](https://github.com/openshift/console/pull/8518)
* View shortcuts on the topology list view [#8515](https://github.com/openshift/console/pull/8515)
* Add support for conditionally task in pipeline visualization [#8581](https://github.com/openshift/console/pull/8581)
* Fix remove trigger issue [#8521](https://github.com/openshift/console/pull/8521)
* [Bug 1942749](https://bugzilla.redhat.com/show_bug.cgi?id=1942749): standardize field level help to use FieldLevelHelp [#8471](https://github.com/openshift/console/pull/8471)
* Adds support for creating multi namespace bucket class [#8293](https://github.com/openshift/console/pull/8293)
* show kafka source connector [#8415](https://github.com/openshift/console/pull/8415)
* [Bug 1930015](https://bugzilla.redhat.com/show_bug.cgi?id=1930015): OS list is overlapped by buttons in template wizard [#8579](https://github.com/openshift/console/pull/8579)
* [Bug 1942716](https://bugzilla.redhat.com/show_bug.cgi?id=1942716): Fix different Image Manifest Vulnerabilities issues [#8474](https://github.com/openshift/console/pull/8474)
* [Bug 1940361](https://bugzilla.redhat.com/show_bug.cgi?id=1940361): enhance vm action test with storageClass HPP [#8411](https://github.com/openshift/console/pull/8411)
* Reconcile resolved extension types [#8224](https://github.com/openshift/console/pull/8224)
* [Bug 1935176](https://bugzilla.redhat.com/show_bug.cgi?id=1935176): Indicate single node deployment on cluster overview page [#8432](https://github.com/openshift/console/pull/8432)
* Replaces _.get with optional chaining in Ceph Storage Plugin [#8161](https://github.com/openshift/console/pull/8161)
* [Bug 1941915](https://bugzilla.redhat.com/show_bug.cgi?id=1941915): Added validation check for in progress custom boot source template name [#8580](https://github.com/openshift/console/pull/8580)
* Add support for MultiColumnField to support multiline [#8576](https://github.com/openshift/console/pull/8576)
* Adds UI support for creating cache bucket class [#8497](https://github.com/openshift/console/pull/8497)
* update label app.kubernetes.io/name and remove unused yamls [#8574](https://github.com/openshift/console/pull/8574)
* [Bug 1946449](https://bugzilla.redhat.com/show_bug.cgi?id=1946449): fix cloud init tests as UI changed [#8566](https://github.com/openshift/console/pull/8566)
* Create Edit flow for Upload Jar Form [#8458](https://github.com/openshift/console/pull/8458)
* converting global config extension to dynamic-plugin-sdk [#8088](https://github.com/openshift/console/pull/8088)
* Fix for Protractor project details dashboard card (Labels) test [#8586](https://github.com/openshift/console/pull/8586)
* cypress tests for ssh [#8565](https://github.com/openshift/console/pull/8565)
* Fix skipped task status when using conditions [#8577](https://github.com/openshift/console/pull/8577)
* ODC 5602: Added step definitions related to eventing features smoke test cases [#8564](https://github.com/openshift/console/pull/8564)
* Updating openshift-enterprise-console images to be consistent with ART [#8562](https://github.com/openshift/console/pull/8562)
* Test vm ssh connect - cypress [#8554](https://github.com/openshift/console/pull/8554)
* Embedded Tasks in Pipeline Builder [#8538](https://github.com/openshift/console/pull/8538)
* updates icon for serverless functions [#8525](https://github.com/openshift/console/pull/8525)
* Pool management - Update block pool [#8330](https://github.com/openshift/console/pull/8330)
* [CONSOLE-2400](https://issues.redhat.com/browse/CONSOLE-2400): Bump react to v17 [#7736](https://github.com/openshift/console/pull/7736)
* [Bug 1937941](https://bugzilla.redhat.com/show_bug.cgi?id=1937941): Fix wording for favorite templates [#8570](https://github.com/openshift/console/pull/8570)
* [Bug 1937717](https://bugzilla.redhat.com/show_bug.cgi?id=1937717): Set a kebab column in the template list [#8568](https://github.com/openshift/console/pull/8568)
* Rework terminal to check if the operator is installed before showing the terminal button [#8342](https://github.com/openshift/console/pull/8342)
* Create KSVC with min/max scale if workload has related HPA [#8476](https://github.com/openshift/console/pull/8476)
* Monitoring: Tidy files & imports [#8544](https://github.com/openshift/console/pull/8544)
* [Bug 1936620](https://bugzilla.redhat.com/show_bug.cgi?id=1936620): Fix create operand form default boolean field [#8504](https://github.com/openshift/console/pull/8504)
* Organize remaining files [#8557](https://github.com/openshift/console/pull/8557)
* Monitoring dashboards: All optional "All" to variable dropdowns [#8553](https://github.com/openshift/console/pull/8553)
* [Bug 1945630](https://bugzilla.redhat.com/show_bug.cgi?id=1945630): Fix default resource log download file name [#8559](https://github.com/openshift/console/pull/8559)
* [ODC-5507](https://issues.redhat.com/browse/ODC-5507): Topology cypress cucumber setup [#8530](https://github.com/openshift/console/pull/8530)
* part 2 of sorting imports [#8551](https://github.com/openshift/console/pull/8551)
* Adds support for creating single namespace store bucket class [#8266](https://github.com/openshift/console/pull/8266)
* Adding data test for ssh cypress tests [#8520](https://github.com/openshift/console/pull/8520)
* organized kubevirt plugin imports files [#8535](https://github.com/openshift/console/pull/8535)
* convert samples page to use catalog extensions [#8492](https://github.com/openshift/console/pull/8492)
* Simplify Console extension types [#8506](https://github.com/openshift/console/pull/8506)
* workspaces in pipeline start modal [#8372](https://github.com/openshift/console/pull/8372)
* [Bug 1916116](https://bugzilla.redhat.com/show_bug.cgi?id=1916116): Pf update to fix NavExpandable component [#8534](https://github.com/openshift/console/pull/8534)
* [Bug 1932673](https://bugzilla.redhat.com/show_bug.cgi?id=1932673): Virtual machine template provided by red hat should not be editable [#8540](https://github.com/openshift/console/pull/8540)
* Support URLs in Result values [#8522](https://github.com/openshift/console/pull/8522)
* [Bug 1945637](https://bugzilla.redhat.com/show_bug.cgi?id=1945637): odc 5666 fixing pipelines scripts issues [#8422](https://github.com/openshift/console/pull/8422)
* Changes according to UX requirements [#8529](https://github.com/openshift/console/pull/8529)
* Align checkboxes [#8510](https://github.com/openshift/console/pull/8510)
* Add extension types for console actions and topology details panel [#8467](https://github.com/openshift/console/pull/8467)
* [Bug 1933857](https://bugzilla.redhat.com/show_bug.cgi?id=1933857): Follow on fix to ensure operand details page 404s when no model is found [#8443](https://github.com/openshift/console/pull/8443)
* [CONSOLE-2524](https://issues.redhat.com/browse/CONSOLE-2524): Add Kata container RuntimeClass to workload detail pages [#8406](https://github.com/openshift/console/pull/8406)
* [Bug 1932281](https://bugzilla.redhat.com/show_bug.cgi?id=1932281): inform user when channels are unknown [#8392](https://github.com/openshift/console/pull/8392)
* [ODC-5545](https://issues.redhat.com/browse/ODC-5545): cypress cucumber helm setup [#8387](https://github.com/openshift/console/pull/8387)
* [Bug 1943356](https://bugzilla.redhat.com/show_bug.cgi?id=1943356): change "UI extension" to "plugin" [#8479](https://github.com/openshift/console/pull/8479)
* [Bug 1942839](https://bugzilla.redhat.com/show_bug.cgi?id=1942839): Use digest for virtio-win container image [#8514](https://github.com/openshift/console/pull/8514)
* [ODC-5725](https://issues.redhat.com/browse/ODC-5725): Add owners file to topology folder [#8539](https://github.com/openshift/console/pull/8539)
* [Bug 1945146](https://bugzilla.redhat.com/show_bug.cgi?id=1945146): Remove pipeline Tech preview badge for  pipelines GA operator [#8526](https://github.com/openshift/console/pull/8526)
* [Bug 1944602](https://bugzilla.redhat.com/show_bug.cgi?id=1944602): fixing-project-creation-and-updated-packageJson [#8513](https://github.com/openshift/console/pull/8513)
* [Bug 1939069](https://bugzilla.redhat.com/show_bug.cgi?id=1939069): Add source to vm template silently failed [#8512](https://github.com/openshift/console/pull/8512)
* [CONSOLE-2527](https://issues.redhat.com/browse/CONSOLE-2527): Add translations from Sprint 197 [#8404](https://github.com/openshift/console/pull/8404)
* changed ssh copy command to work with http and not only https [#8532](https://github.com/openshift/console/pull/8532)
* Fix to show resources to filter by in Topology [#8517](https://github.com/openshift/console/pull/8517)
* Query Browser: Switch colors to `ChartThemeColor.multiUnordered` [#8507](https://github.com/openshift/console/pull/8507)
* Adding aggregated services to catalog, topology and various views. [#8146](https://github.com/openshift/console/pull/8146)
* The field name VolumeSnapshotContent is wrong on VolumeSnapshotContent detail page [#8511](https://github.com/openshift/console/pull/8511)
* [Bug 1942673](https://bugzilla.redhat.com/show_bug.cgi?id=1942673): Fix breadcrumbs, delete modal, and create for i18n in pipelines models (and other kinds). [#8486](https://github.com/openshift/console/pull/8486)
* [Bug 1944509](https://bugzilla.redhat.com/show_bug.cgi?id=1944509): Add context to translation strings [#8508](https://github.com/openshift/console/pull/8508)
* [Bug 1944273](https://bugzilla.redhat.com/show_bug.cgi?id=1944273): don't use latest virtio disk image for downstream [#8509](https://github.com/openshift/console/pull/8509)
* [Bug 1943996](https://bugzilla.redhat.com/show_bug.cgi?id=1943996): Bump ua-parser-js to avoid ReDoS via malicious User-Agent header [#8495](https://github.com/openshift/console/pull/8495)
* Pipeline Builder Validation Rework [#8460](https://github.com/openshift/console/pull/8460)
* [RHSTOR-1554](https://issues.redhat.com/browse/RHSTOR-1554): Migrate object service dashboard tests [#8270](https://github.com/openshift/console/pull/8270)
* adds topology actions to upload a jar file [#8456](https://github.com/openshift/console/pull/8456)
* [Bug 1941995](https://bugzilla.redhat.com/show_bug.cgi?id=1941995): fix backwards incompatible trigger api changes [#8437](https://github.com/openshift/console/pull/8437)
* Added OWNERS file to frontend/packages/integration-tests-cypress [#8451](https://github.com/openshift/console/pull/8451)
* [Bug 1942641](https://bugzilla.redhat.com/show_bug.cgi?id=1942641): Fix build related i18n misses [#8473](https://github.com/openshift/console/pull/8473)
* [Bug 1943543](https://bugzilla.redhat.com/show_bug.cgi?id=1943543): Fix to include template and selected options for RC rollbacks [#8482](https://github.com/openshift/console/pull/8482)
* Fix for topology sub context menus placement [#8470](https://github.com/openshift/console/pull/8470)
* fix Task badge color in pipeline builder page [#8478](https://github.com/openshift/console/pull/8478)
* Update Dockerfile.product for nodejs v14.16.0 [#8427](https://github.com/openshift/console/pull/8427)
* Fix for topology crash on load when application group is selected [#8472](https://github.com/openshift/console/pull/8472)
* [Bug 1927902](https://bugzilla.redhat.com/show_bug.cgi?id=1927902): i18n Cluster Utilization dashboard durations [#8332](https://github.com/openshift/console/pull/8332)
* [Bug 1766287](https://bugzilla.redhat.com/show_bug.cgi?id=1766287): Use httpd in workload YAML templates [#8459](https://github.com/openshift/console/pull/8459)
* quick search modal close on starting quickstart [#8403](https://github.com/openshift/console/pull/8403)
* [Bug 1938140](https://bugzilla.redhat.com/show_bug.cgi?id=1938140): Add 'Roll Back' action for Replication Controllers and Replica Sets [#8381](https://github.com/openshift/console/pull/8381)
* Added thick-provision feature flag in Readme [#8468](https://github.com/openshift/console/pull/8468)
* [Bug 1942395](https://bugzilla.redhat.com/show_bug.cgi?id=1942395): Display Failed status for DeploymentConfig [#8463](https://github.com/openshift/console/pull/8463)
* [Bug 1942694](https://bugzilla.redhat.com/show_bug.cgi?id=1942694): decodeURIComponent for name in <title> so special chars… [#8466](https://github.com/openshift/console/pull/8466)
* [Bug 1915971](https://bugzilla.redhat.com/show_bug.cgi?id=1915971): Role and Role Binding breadcrumbs do not work as expected [#8010](https://github.com/openshift/console/pull/8010)
* [Bug 1927423](https://bugzilla.redhat.com/show_bug.cgi?id=1927423): Monitoring: Add warning to list pages when silences cannot be loaded [#8461](https://github.com/openshift/console/pull/8461)
* Pool management list and creation [#8254](https://github.com/openshift/console/pull/8254)
* Fix Add HorizontalPodAutoscaler page layout [#8455](https://github.com/openshift/console/pull/8455)
* Gherkin Script:Add workspaces support for pipelines-ODC-3991 [#8361](https://github.com/openshift/console/pull/8361)
* [Bug 1924641](https://bugzilla.redhat.com/show_bug.cgi?id=1924641): Remove error message for "missing storage class" [#8259](https://github.com/openshift/console/pull/8259)
* [Bug 1909091](https://bugzilla.redhat.com/show_bug.cgi?id=1909091): Removed prefix check [#8454](https://github.com/openshift/console/pull/8454)
* [Bug 1941667](https://bugzilla.redhat.com/show_bug.cgi?id=1941667): fixes i18n miss in ProjectAccess [#8447](https://github.com/openshift/console/pull/8447)
* odc 5670 code refactoring [#8433](https://github.com/openshift/console/pull/8433)
* Adds resource page for creating namespacestore CRs [#8223](https://github.com/openshift/console/pull/8223)
* ssh to vm [#8263](https://github.com/openshift/console/pull/8263)
* Improve fetching LSO status during cluster installation [#8159](https://github.com/openshift/console/pull/8159)
* [Bug 1941990](https://bugzilla.redhat.com/show_bug.cgi?id=1941990): fix pipeline metrics endpoint for 1.4 osp [#8445](https://github.com/openshift/console/pull/8445)
* Thick provisioned for Ceph RBD [#8186](https://github.com/openshift/console/pull/8186)
* Implement Add Capacity Modal using PF [#8178](https://github.com/openshift/console/pull/8178)
* [Bug 1905627](https://bugzilla.redhat.com/show_bug.cgi?id=1905627): Warn using an unsupported IE browser [#8384](https://github.com/openshift/console/pull/8384)
* Updating openshift-enterprise-console builder & base images to be consistent with ART [#8449](https://github.com/openshift/console/pull/8449)
* [Bug 1938321](https://bugzilla.redhat.com/show_bug.cgi?id=1938321): PackageManifest lists link to details pages [#8444](https://github.com/openshift/console/pull/8444)
* [Bug 1939606](https://bugzilla.redhat.com/show_bug.cgi?id=1939606): Attempting to put a host into maintenance mode warns about Ceph cluster health, but no storage cluster problems are apparent [#8446](https://github.com/openshift/console/pull/8446)
* [Bug 1937496](https://bugzilla.redhat.com/show_bug.cgi?id=1937496): Query Browser: Add timestamp date to tooltips [#8420](https://github.com/openshift/console/pull/8420)
* adding console.resource-metadata extension types to dynamic-plugin-sdk [#8284](https://github.com/openshift/console/pull/8284)
* [Bug 1939815](https://bugzilla.redhat.com/show_bug.cgi?id=1939815): Modified warning Alert for Encrypted PVs in Create StorageClass [#8435](https://github.com/openshift/console/pull/8435)
* Fix BRIDGE_K8S_AUTH_BEARER_TOKEN env var in readme [#8434](https://github.com/openshift/console/pull/8434)
* Monitoring: Fix list page default sort [#8429](https://github.com/openshift/console/pull/8429)
* [Bug 1928008](https://bugzilla.redhat.com/show_bug.cgi?id=1928008): Persist state on back navigation [#8157](https://github.com/openshift/console/pull/8157)
* Update the catalog item filter for vm templates [#8442](https://github.com/openshift/console/pull/8442)
* [Bug 1824911](https://bugzilla.redhat.com/show_bug.cgi?id=1824911): Fix RBAC check when creating a resource [#8440](https://github.com/openshift/console/pull/8440)
* [CONSOLE-2389](https://issues.redhat.com/browse/CONSOLE-2389): i18n translation of Storage section [#7123](https://github.com/openshift/console/pull/7123)
* [Bug 1937658](https://bugzilla.redhat.com/show_bug.cgi?id=1937658): Modified description for storage class encryption [#8402](https://github.com/openshift/console/pull/8402)
* Fix LSO's local-volume-discovery radio buttons [#8426](https://github.com/openshift/console/pull/8426)
* Make customize form footer sticky [#8409](https://github.com/openshift/console/pull/8409)
* [Bug 1879140](https://bugzilla.redhat.com/show_bug.cgi?id=1879140): Set proper loglevel for auth errors [#7217](https://github.com/openshift/console/pull/7217)
* [Bug 1937666](https://bugzilla.redhat.com/show_bug.cgi?id=1937666): Fixes mouseover on headline [#8430](https://github.com/openshift/console/pull/8430)
* [Bug 1931279](https://bugzilla.redhat.com/show_bug.cgi?id=1931279): Bump lodash-es to latest v4.17.21, to remove security vulnerabilities [#8247](https://github.com/openshift/console/pull/8247)
* GitOps Environment card title layout issue [#8316](https://github.com/openshift/console/pull/8316)
* Fix for creating visual connectors to operator workload nodes [#8423](https://github.com/openshift/console/pull/8423)
* Monitoring dashboards: Fix clearing queries when dashboard unmounts [#8419](https://github.com/openshift/console/pull/8419)
* Query Browser: Fix cutoff for when to show X axis seconds [#8418](https://github.com/openshift/console/pull/8418)
* [ODC-5660](https://issues.redhat.com/browse/ODC-5660): fixing linter issues in topology gherkin features [#8412](https://github.com/openshift/console/pull/8412)
* drag and drop jar file on topology graph / list view [#8374](https://github.com/openshift/console/pull/8374)
* truncate select task text to prevent overlap with the dropdown icon [#8328](https://github.com/openshift/console/pull/8328)
* Add provder and support fields when customizing source [#8313](https://github.com/openshift/console/pull/8313)
* [Bug 1940755](https://bugzilla.redhat.com/show_bug.cgi?id=1940755): Remove wrongly set namespace parameter when creating LocalVolumeSet [#8421](https://github.com/openshift/console/pull/8421)
* [Bug 1930546](https://bugzilla.redhat.com/show_bug.cgi?id=1930546): show error in RsourceDropdown on load error [#8275](https://github.com/openshift/console/pull/8275)
* [Bug 1925087](https://bugzilla.redhat.com/show_bug.cgi?id=1925087): Add i18n support to the Secret modals and add new hint for the servername [#8047](https://github.com/openshift/console/pull/8047)
* fix autofill name field values [#8414](https://github.com/openshift/console/pull/8414)
* Adds spinner for donut chart [#8397](https://github.com/openshift/console/pull/8397)
* [Bug 1939573](https://bugzilla.redhat.com/show_bug.cgi?id=1939573): Warn if git provider rate limits [#8390](https://github.com/openshift/console/pull/8390)
* Gherkin Script:Getting Started - Spring Boot-ODC-4389 [#8362](https://github.com/openshift/console/pull/8362)
* JAR upload from Add flow [#8355](https://github.com/openshift/console/pull/8355)
* Pipeline diagram finally task [#8399](https://github.com/openshift/console/pull/8399)
* Add form component for editing deployments [#8401](https://github.com/openshift/console/pull/8401)
* Monitoring: Replacing connect with useDispatch / useSelector [#8413](https://github.com/openshift/console/pull/8413)
* Remove unused Dex dependency [#8340](https://github.com/openshift/console/pull/8340)
* [CONSOLE-2494](https://issues.redhat.com/browse/CONSOLE-2494): Bump node and yarn versions in docker builder file [#7306](https://github.com/openshift/console/pull/7306)
* Add more space between template name and checkbox in Finish modal [#8410](https://github.com/openshift/console/pull/8410)
* Add info about customize flow when adding source [#8314](https://github.com/openshift/console/pull/8314)
* Feature: Taint Nodes [#8218](https://github.com/openshift/console/pull/8218)
* add support for finally tasks in pipeline builder [#8385](https://github.com/openshift/console/pull/8385)
* Update Dev perspective to show `Add` page on first visit [#8373](https://github.com/openshift/console/pull/8373)
* Query Browser: Show dates on X-axis when time range is over one day [#8365](https://github.com/openshift/console/pull/8365)
* [Bug 1926106](https://bugzilla.redhat.com/show_bug.cgi?id=1926106): i18n translation of create & delete project namespace modal [#8204](https://github.com/openshift/console/pull/8204)
* Fix for a11y issue on monitoring page [#8393](https://github.com/openshift/console/pull/8393)
* Migrate all usage of static catalog extensions to dynamic extensions [#8405](https://github.com/openshift/console/pull/8405)
* [Bug 1939869](https://bugzilla.redhat.com/show_bug.cgi?id=1939869): Add annotations to datavolume for HPP [#8398](https://github.com/openshift/console/pull/8398)
* Remove "Tech preview" encryption label [#8396](https://github.com/openshift/console/pull/8396)
* [Bug 1926798](https://bugzilla.redhat.com/show_bug.cgi?id=1926798): Check undefined values for Arbiter dropdown [#8388](https://github.com/openshift/console/pull/8388)
* [RHSTOR-1643](https://issues.redhat.com/browse/RHSTOR-1643): Fix Import Order [#8131](https://github.com/openshift/console/pull/8131)
* Monitoring dashboards: Support grouping of panels into rows [#8364](https://github.com/openshift/console/pull/8364)
* [Bug 1937018](https://bugzilla.redhat.com/show_bug.cgi?id=1937018): Fix null handling in FilterToolbar_ to prevent possible exceptions [#8391](https://github.com/openshift/console/pull/8391)
* adding navigation extension types to dynamic-plugin-sdk [#8171](https://github.com/openshift/console/pull/8171)
* Cypress: fixed skipping login when running locally [#8341](https://github.com/openshift/console/pull/8341)
* Monitoring: Highlight {{ ... }} tags in Prometheus templates [#8333](https://github.com/openshift/console/pull/8333)
* bump react-refresh versions [#8303](https://github.com/openshift/console/pull/8303)
* [Bug 1924536](https://bugzilla.redhat.com/show_bug.cgi?id=1924536): Change link for not available state [#8232](https://github.com/openshift/console/pull/8232)
* Update the scope of GitOpsService resource [#8379](https://github.com/openshift/console/pull/8379)
* Monitoring: Add missing i18n for "Stacked" [#8376](https://github.com/openshift/console/pull/8376)
* Update empty state for TopologyView [#8370](https://github.com/openshift/console/pull/8370)
* create infra to execute commands in terminal [#8302](https://github.com/openshift/console/pull/8302)
* Customize VM template boot source [#8151](https://github.com/openshift/console/pull/8151)
* (bug-fix): Fixes donut chart loading [#8383](https://github.com/openshift/console/pull/8383)
* YAML Editor Automation [#8369](https://github.com/openshift/console/pull/8369)
* Update descriptor reference doc to remove fieldDependency sibling restriction. [#8278](https://github.com/openshift/console/pull/8278)
* adding global config extension types to dynamic-plugin-sdk [#8087](https://github.com/openshift/console/pull/8087)
* [ODC-5622](https://issues.redhat.com/browse/ODC-5622): Create Namespaces script is failing on CI due to load issue [#8375](https://github.com/openshift/console/pull/8375)
* (refactor): Fix handling of nodes in internal attached devices wizard [#8256](https://github.com/openshift/console/pull/8256)
* Migrate all static AddAction extensions to dynamic extensions [#8371](https://github.com/openshift/console/pull/8371)
* [Bug 1937628](https://bugzilla.redhat.com/show_bug.cgi?id=1937628): Bump upgrade channels for 4.8 [#8367](https://github.com/openshift/console/pull/8367)
* Update PF package versions to 2021-3 [#8331](https://github.com/openshift/console/pull/8331)
* improve i18n parser to support console-extensions.json [#8363](https://github.com/openshift/console/pull/8363)
* [Bug 1937683](https://bugzilla.redhat.com/show_bug.cgi?id=1937683): Show plane image destination of output in buildConfig when the destination is a DockerImage [#8368](https://github.com/openshift/console/pull/8368)
* Improve Console TypeScript type declarations [#8343](https://github.com/openshift/console/pull/8343)
* Upgrade xterm v3.12.0 to v4.10.0 [#8260](https://github.com/openshift/console/pull/8260)
* Adding useSSHKeys hook, core usage for ssh feature [#8366](https://github.com/openshift/console/pull/8366)
* Fix ResolvedExtension type inference [#8358](https://github.com/openshift/console/pull/8358)
* Add .eslintrc to dynamic plugin SDK scripts directory [#8359](https://github.com/openshift/console/pull/8359)
* [Bug 1929243](https://bugzilla.redhat.com/show_bug.cgi?id=1929243): override normal namespace hiding for pods view in node details [#8253](https://github.com/openshift/console/pull/8253)
* Fix @console/active-plugins generation interfering with i18n [#8344](https://github.com/openshift/console/pull/8344)
* Query Browser: Fix bug where lines briefly appear outside graph frame [#8334](https://github.com/openshift/console/pull/8334)
* Monitoring dashboards: Fix bug where end time was not reset after zoom [#8321](https://github.com/openshift/console/pull/8321)
* [Bug 1926126](https://bugzilla.redhat.com/show_bug.cgi?id=1926126): Remove period in translation [#8129](https://github.com/openshift/console/pull/8129)
* adding yaml templates extension types to dynamic-plugin-sdk [#7935](https://github.com/openshift/console/pull/7935)
* [Bug 1909091](https://bugzilla.redhat.com/show_bug.cgi?id=1909091): Pod/node/ip/template isn't showing when vm is running [#8350](https://github.com/openshift/console/pull/8350)
* Consolidate Noobaa and Ceph Plugin [#8185](https://github.com/openshift/console/pull/8185)
* [Bug 1936854](https://bugzilla.redhat.com/show_bug.cgi?id=1936854): Fix to show correct internal image-stream name in container image edit flow's internal registry image-stream dropdown for kn service [#8338](https://github.com/openshift/console/pull/8338)
* [Bug 1936983](https://bugzilla.redhat.com/show_bug.cgi?id=1936983): Removed loaded prop and nested component [#8347](https://github.com/openshift/console/pull/8347)
* fixes shadow and form footer for edit form [#8346](https://github.com/openshift/console/pull/8346)
* Update console-extensions.json format [#8252](https://github.com/openshift/console/pull/8252)
* [Bug 1879638](https://bugzilla.redhat.com/show_bug.cgi?id=1879638): Support binary file type secret entries [#7399](https://github.com/openshift/console/pull/7399)
* [Bug 1935269](https://bugzilla.redhat.com/show_bug.cgi?id=1935269): Include jobs in operator backed sidebar & resource details page [#8306](https://github.com/openshift/console/pull/8306)
* [Bug 1928875](https://bugzilla.redhat.com/show_bug.cgi?id=1928875): Update translations [#8101](https://github.com/openshift/console/pull/8101)
* fix helm nav item delay to show up on page load [#8336](https://github.com/openshift/console/pull/8336)
* Improve plugin JSON schema generator code [#8297](https://github.com/openshift/console/pull/8297)
* Add workspaces to Pipeline Details Page [#8238](https://github.com/openshift/console/pull/8238)
* [Bug 1931005](https://bugzilla.redhat.com/show_bug.cgi?id=1931005): include related objects without a name [#8329](https://github.com/openshift/console/pull/8329)
* [Bug 1931755](https://bugzilla.redhat.com/show_bug.cgi?id=1931755): Fix test about VM start via kebab action [#8219](https://github.com/openshift/console/pull/8219)
* removes references of deprecated selfLink [#8318](https://github.com/openshift/console/pull/8318)
* Migrate obcTest.scenario.ts [#8061](https://github.com/openshift/console/pull/8061)
* [ODC-5596](https://issues.redhat.com/browse/ODC-5596): Updated cypress extensibility related files [#8305](https://github.com/openshift/console/pull/8305)
* [Bug 1883587](https://bugzilla.redhat.com/show_bug.cgi?id=1883587): Adds volume mode selector when restoring a volumesnapshot [#8136](https://github.com/openshift/console/pull/8136)
* display full quick start prerequisites in quick search [#8308](https://github.com/openshift/console/pull/8308)
* adding pvc extension types to dynamic-plugin-sdk [#7912](https://github.com/openshift/console/pull/7912)
* Install Web Terminal Operator [#8319](https://github.com/openshift/console/pull/8319)
* support service binding operator version 0.5.0 [#8309](https://github.com/openshift/console/pull/8309)
* odc-5564-select the builder image when git url is not validated [#8295](https://github.com/openshift/console/pull/8295)
* fixes shadow and form footer for ksvc form [#8285](https://github.com/openshift/console/pull/8285)
* odc-5571-fixed page details related smoke test case [#8287](https://github.com/openshift/console/pull/8287)
* [Bug 1888561](https://bugzilla.redhat.com/show_bug.cgi?id=1888561): Fixes MCG info [#8281](https://github.com/openshift/console/pull/8281)
* [Bug 1934329](https://bugzilla.redhat.com/show_bug.cgi?id=1934329): Bump sanitize-html version to 2.3.2 to improperly validate the hostnames [#8294](https://github.com/openshift/console/pull/8294)
* [CONSOLE-2380](https://issues.redhat.com/browse/CONSOLE-2380): Add UI for enabling/disabling dynamic plugins during op… [#8175](https://github.com/openshift/console/pull/8175)
* [Bug 1857477](https://bugzilla.redhat.com/show_bug.cgi?id=1857477): Updates helptext for storage cluster creation [#8237](https://github.com/openshift/console/pull/8237)
* [Bug 1918729](https://bugzilla.redhat.com/show_bug.cgi?id=1918729): add hide/reveal button for kms token [#8196](https://github.com/openshift/console/pull/8196)
* Monitoring dashboards: Allow zooming all graphs and sync their ranges [#8273](https://github.com/openshift/console/pull/8273)
* [Bug 1932453](https://bugzilla.redhat.com/show_bug.cgi?id=1932453): Update format for Japanese date/times [#8242](https://github.com/openshift/console/pull/8242)
* [Bug 1933857](https://bugzilla.redhat.com/show_bug.cgi?id=1933857): Fix uncaught exception in DetailsPage component [#8271](https://github.com/openshift/console/pull/8271)
* [CONSOLE-2758](https://issues.redhat.com/browse/CONSOLE-2758): Bump webpack-cli and webpack-dev-server to latest version [#8269](https://github.com/openshift/console/pull/8269)
* [Bug 1928893](https://bugzilla.redhat.com/show_bug.cgi?id=1928893): Fix mismatched disk and memory pressure condition status [#8268](https://github.com/openshift/console/pull/8268)
* Fix topology crash due to selfLink deprecation [#8264](https://github.com/openshift/console/pull/8264)
* Monitoring dashboards: Add "Last" to the time interval descriptions [#8258](https://github.com/openshift/console/pull/8258)
* [Bug 1919406](https://bugzilla.redhat.com/show_bug.cgi?id=1919406): Update OperatorHub 'Provider type' filter to 'Source' [#8251](https://github.com/openshift/console/pull/8251)
* [Bug 1927941](https://bugzilla.redhat.com/show_bug.cgi?id=1927941): Fix frontend descriptor API edge cases [#8145](https://github.com/openshift/console/pull/8145)
* [ODC-5590](https://issues.redhat.com/browse/ODC-5590): segregated the knative test cases [#8286](https://github.com/openshift/console/pull/8286)
* (bug-fix)Fix Object storage event filter [#8283](https://github.com/openshift/console/pull/8283)
* Remove unused /frontend/public/components/operator-hub/operator-hub-community-provider-modal.tsx [#8276](https://github.com/openshift/console/pull/8276)
* fix Create route text for import forms [#8274](https://github.com/openshift/console/pull/8274)
* [Bug 1933284](https://bugzilla.redhat.com/show_bug.cgi?id=1933284): Sort sample and snippets in the resource sidebar [#8262](https://github.com/openshift/console/pull/8262)
* [Bug 1852743](https://bugzilla.redhat.com/show_bug.cgi?id=1852743): Use consistent labels for CPU in node list [#8250](https://github.com/openshift/console/pull/8250)
* test: clear the session token before login [#8289](https://github.com/openshift/console/pull/8289)
* Update to PF4 Access Consoles [#8169](https://github.com/openshift/console/pull/8169)
* Add single control point of all toast notifications [#8227](https://github.com/openshift/console/pull/8227)
* Create workloads from Templates [#8246](https://github.com/openshift/console/pull/8246)
* Gherkin: Improve knative & build integration [#8235](https://github.com/openshift/console/pull/8235)
* Create ImageStream and other resources for samples step by step [#8222](https://github.com/openshift/console/pull/8222)
* change addForm layout to make footer full length [#8213](https://github.com/openshift/console/pull/8213)
* Make workload serverless [#8200](https://github.com/openshift/console/pull/8200)
* Gherkin:Added topology regression cases: ODC-4179 [#8228](https://github.com/openshift/console/pull/8228)
* Update topology quick search to include results from quick starts catalog [#8225](https://github.com/openshift/console/pull/8225)
* gherkin for scaling advanced option for knative service ODC-4744 [#8241](https://github.com/openshift/console/pull/8241)
* Migrate bucket class test into cypress [#7652](https://github.com/openshift/console/pull/7652)
* visualize serverless function in topology [#8233](https://github.com/openshift/console/pull/8233)
* Fix builder image version dropdown value in pipeline edit flow [#8215](https://github.com/openshift/console/pull/8215)
* [Bug 1929577](https://bugzilla.redhat.com/show_bug.cgi?id=1929577): Fix to avoid overriding of d/dc pod template container values [#8201](https://github.com/openshift/console/pull/8201)
* (test): Unit tests for flexible scaling feature [#7653](https://github.com/openshift/console/pull/7653)
* Avoid deep merging extension properties [#8243](https://github.com/openshift/console/pull/8243)
* Advance Scaling options 'Autoscale window and concurrency utilization' for Serverless [#8108](https://github.com/openshift/console/pull/8108)
* fix validation in number type input field [#8198](https://github.com/openshift/console/pull/8198)
* Add support for workspaces in pipeline builder [#8214](https://github.com/openshift/console/pull/8214)
* Improve standalone route page extension processing [#8192](https://github.com/openshift/console/pull/8192)
* Add badges support in catalog items and make cta optional [#8239](https://github.com/openshift/console/pull/8239)
* Remove offensive language [#8206](https://github.com/openshift/console/pull/8206)
* Recently running pipeline should be listed first [#8183](https://github.com/openshift/console/pull/8183)
* Monitoring: Add `title`s to the alert and alerting rule list rows [#8230](https://github.com/openshift/console/pull/8230)
* [Bug 1924083](https://bugzilla.redhat.com/show_bug.cgi?id=1924083): Fix Noobaa events filters [#8084](https://github.com/openshift/console/pull/8084)
* [Bug 1866322](https://bugzilla.redhat.com/show_bug.cgi?id=1866322): Add prop to AlertItem to hide default link [#8231](https://github.com/openshift/console/pull/8231)
* Consume KebabActions extension via standard API [#8226](https://github.com/openshift/console/pull/8226)
* fix alerts notification layout [#8181](https://github.com/openshift/console/pull/8181)
* move route section 'after create a route to the application' option [#8189](https://github.com/openshift/console/pull/8189)
* [Bug 1928045](https://bugzilla.redhat.com/show_bug.cgi?id=1928045): Fixes N+1 scaling info [#8217](https://github.com/openshift/console/pull/8217)
* [ODC-5474](https://issues.redhat.com/browse/ODC-5474): gitops cypress cucumber setup [#8180](https://github.com/openshift/console/pull/8180)
* [Bug 1917241](https://bugzilla.redhat.com/show_bug.cgi?id=1917241): Format UTC date in tooltips [#8193](https://github.com/openshift/console/pull/8193)
* Console extension processing improvements [#8202](https://github.com/openshift/console/pull/8202)
* refactor: Local volume discovery request and wizard footer changes for attached devices wizard [#8158](https://github.com/openshift/console/pull/8158)
* [Bug 1906304](https://bugzilla.redhat.com/show_bug.cgi?id=1906304): Fix NaN in Memory/CPU pod charts [#7806](https://github.com/openshift/console/pull/7806)
* QuickStart highlight fixed for collapsed nav [#8152](https://github.com/openshift/console/pull/8152)
* [Bug 1908343](https://bugzilla.redhat.com/show_bug.cgi?id=1908343): Allow clicking on column labels to configure column management in dialog [#7624](https://github.com/openshift/console/pull/7624)
* fix spacing for MulitColumnField component [#8208](https://github.com/openshift/console/pull/8208)
* add text area for multiline task param [#8195](https://github.com/openshift/console/pull/8195)
* Update the Task Results error message to be an empty state message [#8194](https://github.com/openshift/console/pull/8194)
* Remove dead code related to old catalog extension [#8191](https://github.com/openshift/console/pull/8191)
* Moved api types files to types/api folder, added index file [#8023](https://github.com/openshift/console/pull/8023)
* Gherkin Scripts: Deploy Application using Templates [#8207](https://github.com/openshift/console/pull/8207)
* [Bug 1929803](https://bugzilla.redhat.com/show_bug.cgi?id=1929803): Hide pipeline section in container image edit flow [#8184](https://github.com/openshift/console/pull/8184)
* [Bug 1899587](https://bugzilla.redhat.com/show_bug.cgi?id=1899587): Fix RGW Total Used Query [#8050](https://github.com/openshift/console/pull/8050)
* [Bug 1925261](https://bugzilla.redhat.com/show_bug.cgi?id=1925261): Fix KMS validation error [#8147](https://github.com/openshift/console/pull/8147)
* test: increase analyze script heap size [#8203](https://github.com/openshift/console/pull/8203)
* [Bug 1916450](https://bugzilla.redhat.com/show_bug.cgi?id=1916450): Alertmanager: add Title and Text fields to Adv. config section of Slack Receiver form [#7921](https://github.com/openshift/console/pull/7921)
* add close [x] button in the pipeline task sidebar [#8174](https://github.com/openshift/console/pull/8174)
* [Bug 1920677](https://bugzilla.redhat.com/show_bug.cgi?id=1920677): fixes missing i18n for create a project [#8069](https://github.com/openshift/console/pull/8069)
* Fix environment tests [#8163](https://github.com/openshift/console/pull/8163)
* Gherkin for Alert details page- ODC-5485 [#8132](https://github.com/openshift/console/pull/8132)
* odc-5518-cypress dev file[add flow] automation [#8141](https://github.com/openshift/console/pull/8141)
* [Bug 1929769](https://bugzilla.redhat.com/show_bug.cgi?id=1929769): Switch to correct perspective when loading non-shared routes [#8182](https://github.com/openshift/console/pull/8182)
* Add dynamic extension for standalone pages [#8170](https://github.com/openshift/console/pull/8170)
* [ODC-5473](https://issues.redhat.com/browse/ODC-5473): Moved the pipelines scripts from dev console to pipelines folder [#8124](https://github.com/openshift/console/pull/8124)
* make quickstart drawer resizable [#8089](https://github.com/openshift/console/pull/8089)
* Fix issues related to loading plugins via SERVER_FLAGS.consolePlugins [#8076](https://github.com/openshift/console/pull/8076)
* [Bug 1924983](https://bugzilla.redhat.com/show_bug.cgi?id=1924983): localize components in utils directory [#8049](https://github.com/openshift/console/pull/8049)
* Remove dead code for in context binding and fix wrong import [#8168](https://github.com/openshift/console/pull/8168)
* Pipeline Results [#8095](https://github.com/openshift/console/pull/8095)
* [Bug 1930064](https://bugzilla.redhat.com/show_bug.cgi?id=1930064): Do not fail new VM wizard when no storage classes are available [#8188](https://github.com/openshift/console/pull/8188)
* [Bug 1928869](https://bugzilla.redhat.com/show_bug.cgi?id=1928869): remove css overrides for search component and update pf dependency to 2021.2 [#8166](https://github.com/openshift/console/pull/8166)
* [Bug 1888561](https://bugzilla.redhat.com/show_bug.cgi?id=1888561): Improve explanations and definitions for MCG [#8179](https://github.com/openshift/console/pull/8179)
* YAMLs to install operator [#8134](https://github.com/openshift/console/pull/8134)
* Refactor Ceph Plugin Dashboard Directory Structure [#8111](https://github.com/openshift/console/pull/8111)
* Add default value to the runtime VERSION parameter in add flow pipelines [#8127](https://github.com/openshift/console/pull/8127)
* Interop UI install helmchart [#8090](https://github.com/openshift/console/pull/8090)
* [Bug 1888519](https://bugzilla.redhat.com/show_bug.cgi?id=1888519): Links OCS page from dashboard [#8148](https://github.com/openshift/console/pull/8148)
* [Bug 1926154](https://bugzilla.redhat.com/show_bug.cgi?id=1926154): Fix pool replica for arbiter [#8177](https://github.com/openshift/console/pull/8177)
* fix pipelinerun status icon rendering issue [#8173](https://github.com/openshift/console/pull/8173)
* [Bug 1924747](https://bugzilla.redhat.com/show_bug.cgi?id=1924747): InventoryItems aren't internationalized [#8040](https://github.com/openshift/console/pull/8040)
* [Bug 1922264](https://bugzilla.redhat.com/show_bug.cgi?id=1922264): Fix rendering of access-mode selector [#8055](https://github.com/openshift/console/pull/8055)
* Monitoring dashboards: Click a graph card to open the Metrics page [#7437](https://github.com/openshift/console/pull/7437)
* Gherkin: Added all types of health check [#8135](https://github.com/openshift/console/pull/8135)
* [Bug 1926154](https://bugzilla.redhat.com/show_bug.cgi?id=1926154): Fix for creating new pool with arbiter -  wrong replica [#8117](https://github.com/openshift/console/pull/8117)
* [Bug 1927882](https://bugzilla.redhat.com/show_bug.cgi?id=1927882): allow choice of binding type when creating RoleBinding [#8167](https://github.com/openshift/console/pull/8167)
* [Bug 1927797](https://bugzilla.redhat.com/show_bug.cgi?id=1927797): Add "Pod" in HPA pod donut label [#8137](https://github.com/openshift/console/pull/8137)
* [Bug 1926336](https://bugzilla.redhat.com/show_bug.cgi?id=1926336): Switch grid column responsive size to prevent breakage of Service port mappings content [#8164](https://github.com/openshift/console/pull/8164)
* [Bug 1905147](https://bugzilla.redhat.com/show_bug.cgi?id=1905147): Show multiple pre-requisites as unordered list in popover [#8133](https://github.com/openshift/console/pull/8133)
* [Bug 1924586](https://bugzilla.redhat.com/show_bug.cgi?id=1924586): internationalize control plane and operator status [#8113](https://github.com/openshift/console/pull/8113)
* Add support for taskSpec in pipeline visualization component in the pipeline details page. [#8106](https://github.com/openshift/console/pull/8106)
* Check for kindObj before accessing its properties [#8160](https://github.com/openshift/console/pull/8160)
* odc-5475-updated setting.json in frontend folder [#8082](https://github.com/openshift/console/pull/8082)
* [Bug 1927898](https://bugzilla.redhat.com/show_bug.cgi?id=1927898): i18n Admin Notifier [#8144](https://github.com/openshift/console/pull/8144)
* [Bug 1901207](https://bugzilla.redhat.com/show_bug.cgi?id=1901207): Pipeline resources table not immediately updated after Name filter applied or removed [#8142](https://github.com/openshift/console/pull/8142)
* [Bug 1927465](https://bugzilla.redhat.com/show_bug.cgi?id=1927465): i18n Dashboard content [#8143](https://github.com/openshift/console/pull/8143)
* Adds Christoph as an approver to DevConsole packages [#8153](https://github.com/openshift/console/pull/8153)
* Fix tests for CNV 2.5 [#8125](https://github.com/openshift/console/pull/8125)
* [Bug 1926072](https://bugzilla.redhat.com/show_bug.cgi?id=1926072): Fix close button in the new 'Storage cluster exists' warning alert modal [#8105](https://github.com/openshift/console/pull/8105)
* [Bug 1891766](https://bugzilla.redhat.com/show_bug.cgi?id=1891766): Disable submit button for incorrect validations (LSO/OCS local volume set) [#8092](https://github.com/openshift/console/pull/8092)
* Migrates backing store test to cypress [#7617](https://github.com/openshift/console/pull/7617)
* add copy to clipboard functionality to EventListenerURL [#8097](https://github.com/openshift/console/pull/8097)
* Remove dead code related to developer catalog and service catalog [#8112](https://github.com/openshift/console/pull/8112)
* Use dry run options directly to remove bad dependency [#8114](https://github.com/openshift/console/pull/8114)
* [Bug 1920699](https://bugzilla.redhat.com/show_bug.cgi?id=1920699): retry co-fetch on 409 POST or 429 [#8116](https://github.com/openshift/console/pull/8116)
* [Bug 1926843](https://bugzilla.redhat.com/show_bug.cgi?id=1926843): Consider finally tasks when calculating task status [#8110](https://github.com/openshift/console/pull/8110)
* [Bug 1921227](https://bugzilla.redhat.com/show_bug.cgi?id=1921227): Avoid require()'ing modules when generating @console/active-plugins [#7919](https://github.com/openshift/console/pull/7919)
* Refactor constants in Ceph Plugin [#5978](https://github.com/openshift/console/pull/5978)
* [Bug 1925083](https://bugzilla.redhat.com/show_bug.cgi?id=1925083): IDP Creation not fully i18ned [#8077](https://github.com/openshift/console/pull/8077)
* Fix flakes in Ceph CI [#8122](https://github.com/openshift/console/pull/8122)
* Fixes inconsistent fonts on step 1 and step 2 of baremetal wizard [#8103](https://github.com/openshift/console/pull/8103)
* Workloads on Topology Page Automation [#8037](https://github.com/openshift/console/pull/8037)
* [Bug 1921267](https://bugzilla.redhat.com/show_bug.cgi?id=1921267): i18n ResourceListDropdown [#7955](https://github.com/openshift/console/pull/7955)
* [Bug 1874931](https://bugzilla.redhat.com/show_bug.cgi?id=1874931): Add shortcut above YAML editor and tab toggle action shortcut to popover to improve accessibility [#8115](https://github.com/openshift/console/pull/8115)
* [Bug 1921227](https://bugzilla.redhat.com/show_bug.cgi?id=1921227): Improve code reference handling for Console dynamic plugins [#7898](https://github.com/openshift/console/pull/7898)
* [Bug 1927013](https://bugzilla.redhat.com/show_bug.cgi?id=1927013): update pf virtualized dependency to fix breakpoint prop missing in virtualized table [#8119](https://github.com/openshift/console/pull/8119)
* [Bug 1922992](https://bugzilla.redhat.com/show_bug.cgi?id=1922992): i18n missing items in YAML sidebar [#8027](https://github.com/openshift/console/pull/8027)
* adding context provider extension types to dynamic-plugin-sdk [#7882](https://github.com/openshift/console/pull/7882)
* [Bug 1902003](https://bugzilla.redhat.com/show_bug.cgi?id=1902003): Clarification of Jobs completions column data when sorting [#7760](https://github.com/openshift/console/pull/7760)
* Fix filname for multiple storage class test in cypress [#8081](https://github.com/openshift/console/pull/8081)
* [ODC-5076](https://issues.redhat.com/browse/ODC-5076): Updated knative-automation framework setup [#7875](https://github.com/openshift/console/pull/7875)
* Model Feature Flag - convert kubevirt extension to dynamic [#7881](https://github.com/openshift/console/pull/7881)
* [Bug 1927075](https://bugzilla.redhat.com/show_bug.cgi?id=1927075): fix pvc string in pvc.view [#8118](https://github.com/openshift/console/pull/8118)
* i18n: avoid 404 errors attempting to load en-US [#8100](https://github.com/openshift/console/pull/8100)
* [Bug 1921780](https://bugzilla.redhat.com/show_bug.cgi?id=1921780): Clean up Search i18n [#7967](https://github.com/openshift/console/pull/7967)
* [Bug 1926735](https://bugzilla.redhat.com/show_bug.cgi?id=1926735): add template support check if use it separately [#8107](https://github.com/openshift/console/pull/8107)
* Remove Noobaa Operator Page as this is an Internal CRD [#8102](https://github.com/openshift/console/pull/8102)
* Remove stale files and functions which are not required [#8094](https://github.com/openshift/console/pull/8094)
* [Bug 1921781](https://bugzilla.redhat.com/show_bug.cgi?id=1921781): i18n DefaultList [#7968](https://github.com/openshift/console/pull/7968)
* adding reducer extension types to dynamic-plugin-sdk [#7860](https://github.com/openshift/console/pull/7860)
* Document kubevirt DOWNSTREAM variable [#8086](https://github.com/openshift/console/pull/8086)
* Updating openshift-enterprise-console builder & base images to be consistent with ART [#8104](https://github.com/openshift/console/pull/8104)
* [Bug 1925017](https://bugzilla.redhat.com/show_bug.cgi?id=1925017): Remove trailing comma [#8079](https://github.com/openshift/console/pull/8079)
* Add storage.bind.immediate.requested annotation to golden image dvs [#8085](https://github.com/openshift/console/pull/8085)
* Interop UI - actions on helm release [#8091](https://github.com/openshift/console/pull/8091)
* Fix pipeline types [#8080](https://github.com/openshift/console/pull/8080)
* Update OWNERS components [#8073](https://github.com/openshift/console/pull/8073)
* [Bug 1924585](https://bugzilla.redhat.com/show_bug.cgi?id=1924585): Fix translation for edit annotation [#8075](https://github.com/openshift/console/pull/8075)
* [Full changelog](https://github.com/openshift/console/compare/c2bc5b2843214e6afd326d2776f094c696aeaefd...07c998f99523c549c45fadc890a7fccebc8d7874)


### [console-operator](https://github.com/openshift/console-operator/tree/2bee8bd9b1c9ad46015f4e0ff13b6b5ce09fd2b6)

* [Bug 2071200](https://bugzilla.redhat.com/show_bug.cgi?id=2071200): Fix setting of custom cert for default route [#643](https://github.com/openshift/console-operator/pull/643)
* [Bug 2008141](https://bugzilla.redhat.com/show_bug.cgi?id=2008141): Change web terminal subscription permissions from get to list [#595](https://github.com/openshift/console-operator/pull/595)
* [Bug 2041359](https://bugzilla.redhat.com/show_bug.cgi?id=2041359): Bump build-machinery-go for console-operator to pickup change in yaml-patch repository [#627](https://github.com/openshift/console-operator/pull/627)
* [Bug 2018391](https://bugzilla.redhat.com/show_bug.cgi?id=2018391): Remove SimpleHTTP 'server' response header value [#606](https://github.com/openshift/console-operator/pull/606)
* [Bug 1987315](https://bugzilla.redhat.com/show_bug.cgi?id=1987315): Bump openshift/api to add missing 'include.release.openshift.io/single-node-developer' annotation to the ConsolePlugin CRD [#591](https://github.com/openshift/console-operator/pull/591)
* [Bug 2003639](https://bugzilla.redhat.com/show_bug.cgi?id=2003639): Use kubernetes.io/hostname for workload anti-affi… …nity [#589](https://github.com/openshift/console-operator/pull/589)
* [Bug 2001268](https://bugzilla.redhat.com/show_bug.cgi?id=2001268): console-operator should report Available=true when at least available replica exists [#583](https://github.com/openshift/console-operator/pull/583)
* [Bug 1976349](https://bugzilla.redhat.com/show_bug.cgi?id=1976349): Add policy-group label to the openshift-console namespace manifest [#561](https://github.com/openshift/console-operator/pull/561)
* [Bug 1952405](https://bugzilla.redhat.com/show_bug.cgi?id=1952405): Console operator should report Available:False when it's route is not accessible [#552](https://github.com/openshift/console-operator/pull/552)
* Switching the URL of the default openshift helm repo. [#545](https://github.com/openshift/console-operator/pull/545)
* [Bug 1962698](https://bugzilla.redhat.com/show_bug.cgi?id=1962698): Console-operator can not create resource console-public configmap in the openshift-config-managed namespace [#548](https://github.com/openshift/console-operator/pull/548)
* [CONSOLE-2768](https://issues.redhat.com/browse/CONSOLE-2768): Update the console public configmap manifests to use bindata [#543](https://github.com/openshift/console-operator/pull/543)
* [Bug 1960324](https://bugzilla.redhat.com/show_bug.cgi?id=1960324): quickstarts: remove "spec.version" [#546](https://github.com/openshift/console-operator/pull/546)
* [Bug 1959696](https://bugzilla.redhat.com/show_bug.cgi?id=1959696): Add warning log message when custom domain is configured on console-operator config [#544](https://github.com/openshift/console-operator/pull/544)
* [Bug 1957198](https://bugzilla.redhat.com/show_bug.cgi?id=1957198): Remove misspelled console-operator condition [#541](https://github.com/openshift/console-operator/pull/541)
* [Bug 1954866](https://bugzilla.redhat.com/show_bug.cgi?id=1954866): Add necessary priority class to downloads [#542](https://github.com/openshift/console-operator/pull/542)
* [Bug 1948524](https://bugzilla.redhat.com/show_bug.cgi?id=1948524): Update operator's status with downloads deployment generation && pull route health check into a standalone controller [#531](https://github.com/openshift/console-operator/pull/531)
* [Bug 1956610](https://bugzilla.redhat.com/show_bug.cgi?id=1956610): Add missing cluster profile annotations to manage-helm-repos quickstart manifest [#539](https://github.com/openshift/console-operator/pull/539)
* Copy AddPage customization object [#527](https://github.com/openshift/console-operator/pull/527)
* [CONSOLE-2793](https://issues.redhat.com/browse/CONSOLE-2793): Implement console-operator changes to consume new CustomDomains API [#522](https://github.com/openshift/console-operator/pull/522)
* [Bug 1947794](https://bugzilla.redhat.com/show_bug.cgi?id=1947794): Pull HelmChartRepository CRD v1 [#535](https://github.com/openshift/console-operator/pull/535)
* Update README.md for MacOS [#536](https://github.com/openshift/console-operator/pull/536)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): DelegatingAuthenticationOptions TokenReview request timeout [#532](https://github.com/openshift/console-operator/pull/532)
* Rename workload annotations [#530](https://github.com/openshift/console-operator/pull/530)
* update to non-deprecated NewCommand method [#534](https://github.com/openshift/console-operator/pull/534)
* [Bug 1948782](https://bugzilla.redhat.com/show_bug.cgi?id=1948782): remove stale annotation for single-node [#529](https://github.com/openshift/console-operator/pull/529)
* Export quickStarts data to console-config ConfigMap [#528](https://github.com/openshift/console-operator/pull/528)
* Add management workload annotations [#523](https://github.com/openshift/console-operator/pull/523)
* [Bug 1948524](https://bugzilla.redhat.com/show_bug.cgi?id=1948524): Remove ResyncEvery method from the operator sync loop [#525](https://github.com/openshift/console-operator/pull/525)
* [Bug 1947789](https://bugzilla.redhat.com/show_bug.cgi?id=1947789): Bump deps to pickup CRD apiVersion bump [#524](https://github.com/openshift/console-operator/pull/524)
* Export project access details to console-config ConfigMap [#514](https://github.com/openshift/console-operator/pull/514)
* IBM Cloud manifest profile patch [#520](https://github.com/openshift/console-operator/pull/520)
* [Bug 1945326](https://bugzilla.redhat.com/show_bug.cgi?id=1945326): Resync controllers every minute [#521](https://github.com/openshift/console-operator/pull/521)
* Bump openshift/api to get project access role cuztomization changes [#519](https://github.com/openshift/console-operator/pull/519)
* Add in get subscriptions to console service account [#513](https://github.com/openshift/console-operator/pull/513)
* Add e2e test to check correct deployment replicas, based on the Infrastructure config TopologyMode [#510](https://github.com/openshift/console-operator/pull/510)
* [CONSOLE-2792](https://issues.redhat.com/browse/CONSOLE-2792): Bump openshift/api dependecy in console-operator to get CustomDomain API for Ingress config [#517](https://github.com/openshift/console-operator/pull/517)
* Updating openshift-enterprise-console-operator builder & base images to be consistent with ART [#518](https://github.com/openshift/console-operator/pull/518)
* [Bug 1937627](https://bugzilla.redhat.com/show_bug.cgi?id=1937627): Bump DEFAULT_DOC_URL for 4.8 [#515](https://github.com/openshift/console-operator/pull/515)
* [Bug 1935541](https://bugzilla.redhat.com/show_bug.cgi?id=1935541): Check for error when generating default and user-defined config for the console-config configmap [#511](https://github.com/openshift/console-operator/pull/511)
* [CONSOLE-2526](https://issues.redhat.com/browse/CONSOLE-2526): Update console operator for single-node clusters [#508](https://github.com/openshift/console-operator/pull/508)
* [Bug 1931760](https://bugzilla.redhat.com/show_bug.cgi?id=1931760): Non-unified reference to OCS in quickstarts [#509](https://github.com/openshift/console-operator/pull/509)
* [CONSOLE-2366](https://issues.redhat.com/browse/CONSOLE-2366): Move the operator's controllers to lib-go controller factory [#500](https://github.com/openshift/console-operator/pull/500)
* [CONSOLE-2757](https://issues.redhat.com/browse/CONSOLE-2757): Bump github.com/openshift/api [#506](https://github.com/openshift/console-operator/pull/506)
* Updating openshift-enterprise-console-operator builder & base images to be consistent with ART [#505](https://github.com/openshift/console-operator/pull/505)
* Bump polling interval when checking for resource unavailability [#507](https://github.com/openshift/console-operator/pull/507)
* RetryOnConflict should be fetching latest version of console-operator config [#504](https://github.com/openshift/console-operator/pull/504)
* [Full changelog](https://github.com/openshift/console-operator/compare/fe5bcfaf312a4da5e26676d1c60049d706962353...2bee8bd9b1c9ad46015f4e0ff13b6b5ce09fd2b6)


### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/71a8b3469df865daf68cb893bfe313328d4be992)

* Updating ose-containernetworking-plugins builder & base images to be consistent with ART [#42](https://github.com/openshift/containernetworking-plugins/pull/42)
* [Bug 1926502](https://bugzilla.redhat.com/show_bug.cgi?id=1926502): vendor: bump libcni [#45](https://github.com/openshift/containernetworking-plugins/pull/45)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/fc27124d43b9dc995057b1f309d5f16e1b2ef151...71a8b3469df865daf68cb893bfe313328d4be992)


### [coredns](https://github.com/openshift/coredns/tree/642b46ef468d132d26c3f84a8bcb4b542d8df1e6)

* [Bug 1961201](https://bugzilla.redhat.com/show_bug.cgi?id=1961201): plugin/kubernetes: Treat Endpointslices with a nil ready condition as "ready" [#57](https://github.com/openshift/coredns/pull/57)
* [Bug 1947478](https://bugzilla.redhat.com/show_bug.cgi?id=1947478): Upstream cherry-picks and downstream dep bumps for kube 1.21 compatability [#56](https://github.com/openshift/coredns/pull/56)
* Updating coredns builder & base images to be consistent with ART [#55](https://github.com/openshift/coredns/pull/55)
* Upstream #4430: Corrected detection of K8s minor version [#54](https://github.com/openshift/coredns/pull/54)
* [NE-514](https://issues.redhat.com/browse/NE-514): Rebase to upstream v1.8.1 [#52](https://github.com/openshift/coredns/pull/52)
* Updating coredns builder & base images to be consistent with ART [#51](https://github.com/openshift/coredns/pull/51)
* Add rfredette to OWNERS [#48](https://github.com/openshift/coredns/pull/48)
* [Full changelog](https://github.com/openshift/coredns/compare/d4a3ba3f6e03426d2623da86635caba17c0c3926...642b46ef468d132d26c3f84a8bcb4b542d8df1e6)


### [csi-driver-manila, openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack/tree/3579eadc9b0e195a4bb80d9a43a33a250c4a8dd6)

* [Bug 1944655](https://bugzilla.redhat.com/show_bug.cgi?id=1944655): Ignore proxy connecting to CSI sockets [#53](https://github.com/openshift/cloud-provider-openstack/pull/53)
* [Bug 1952211](https://bugzilla.redhat.com/show_bug.cgi?id=1952211): Merge tag 'v1.21.0' into openshift-master [#52](https://github.com/openshift/cloud-provider-openstack/pull/52)
* [Bug 1919291](https://bugzilla.redhat.com/show_bug.cgi?id=1919291): UPSTREAM: 1434: [cinder-csi-plugin] Fix filesystem resize [#49](https://github.com/openshift/cloud-provider-openstack/pull/49)
* Updating ose-openstack-cinder-csi-driver builder & base images to be consistent with ART [#50](https://github.com/openshift/cloud-provider-openstack/pull/50)
* Updating csi-driver-manila builder & base images to be consistent with ART [#51](https://github.com/openshift/cloud-provider-openstack/pull/51)
* [Bug 1930220](https://bugzilla.redhat.com/show_bug.cgi?id=1930220): Add udev to the driver image [#45](https://github.com/openshift/cloud-provider-openstack/pull/45)
* Updating csi-driver-manila builder & base images to be consistent with ART [#44](https://github.com/openshift/cloud-provider-openstack/pull/44)
* Updating ose-openstack-cinder-csi-driver builder & base images to be consistent with ART [#43](https://github.com/openshift/cloud-provider-openstack/pull/43)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/d3f709218512df9f46e11c1d13347fc68774d72c...3579eadc9b0e195a4bb80d9a43a33a250c4a8dd6)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/f6ffb0d7c2935db9d349f8dc1c51d9ea1b0df5ce)

* [Bug 2002554](https://bugzilla.redhat.com/show_bug.cgi?id=2002554): Do not degrade cluster on failure to reach Manila [#125](https://github.com/openshift/csi-driver-manila-operator/pull/125)
* [Bug 1987020](https://bugzilla.redhat.com/show_bug.cgi?id=1987020): Use cluster Proxy when available [#109](https://github.com/openshift/csi-driver-manila-operator/pull/109)
* [Bug 1988506](https://bugzilla.redhat.com/show_bug.cgi?id=1988506): Backport e2e testing [#111](https://github.com/openshift/csi-driver-manila-operator/pull/111)
* [Bug 1820238](https://bugzilla.redhat.com/show_bug.cgi?id=1820238): add cluster id to share metadata [#98](https://github.com/openshift/csi-driver-manila-operator/pull/98)
* [Bug 1947774](https://bugzilla.redhat.com/show_bug.cgi?id=1947774): fix imagePullPolicy to ifNotPresent [#97](https://github.com/openshift/csi-driver-manila-operator/pull/97)
* [Bug 1949357](https://bugzilla.redhat.com/show_bug.cgi?id=1949357): Fix namespace in metrics collection objects [#96](https://github.com/openshift/csi-driver-manila-operator/pull/96)
* Manila: Add metrics scraping [#95](https://github.com/openshift/csi-driver-manila-operator/pull/95)
* Updating csi-driver-manila-operator builder & base images to be consistent with ART [#94](https://github.com/openshift/csi-driver-manila-operator/pull/94)
* [Bug 1918564](https://bugzilla.redhat.com/show_bug.cgi?id=1918564): bump library-go [#93](https://github.com/openshift/csi-driver-manila-operator/pull/93)
* [Bug 1933184](https://bugzilla.redhat.com/show_bug.cgi?id=1933184): Add maxUnavailable to DaemonSets [#92](https://github.com/openshift/csi-driver-manila-operator/pull/92)
* Updating csi-driver-manila-operator builder & base images to be consistent with ART [#89](https://github.com/openshift/csi-driver-manila-operator/pull/89)
* Cleanup: Remove serviceName from controller manifest [#90](https://github.com/openshift/csi-driver-manila-operator/pull/90)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/b652a62f269127e6e9195383eab951d59c6d7a6d...f6ffb0d7c2935db9d349f8dc1c51d9ea1b0df5ce)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/583088efa37346e23ed056b57ea24e61b0e5b9d8)

* Updating csi-driver-nfs builder & base images to be consistent with ART [#40](https://github.com/openshift/csi-driver-nfs/pull/40)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/9404d343c020fd1806691704f64d930c779ad639...583088efa37346e23ed056b57ea24e61b0e5b9d8)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/596da63ecf2886a9bce19c08ad1120e123b498af)

* [Bug 1924432](https://bugzilla.redhat.com/show_bug.cgi?id=1924432): Rebase v3.2.1 [#31](https://github.com/openshift/csi-external-attacher/pull/31)
* Updating csi-attacher builder & base images to be consistent with ART [#30](https://github.com/openshift/csi-external-attacher/pull/30)
* Updating csi-attacher builder & base images to be consistent with ART [#29](https://github.com/openshift/csi-external-attacher/pull/29)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/f152de8ab08d9a4f13c97941afa01ef343b92b68...596da63ecf2886a9bce19c08ad1120e123b498af)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/3ea7e68a518870d63c7da9485f8a69fa1555b452)

* [Bug 1956768](https://bugzilla.redhat.com/show_bug.cgi?id=1956768): UPSTREAM: 620: Fix migration metric registration [#41](https://github.com/openshift/csi-external-provisioner/pull/41)
* [Bug 1924439](https://bugzilla.redhat.com/show_bug.cgi?id=1924439): Rebase v2.2.0 [#39](https://github.com/openshift/csi-external-provisioner/pull/39)
* Updating csi-provisioner builder & base images to be consistent with ART [#38](https://github.com/openshift/csi-external-provisioner/pull/38)
* Updating csi-provisioner builder & base images to be consistent with ART [#37](https://github.com/openshift/csi-external-provisioner/pull/37)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/a49415e114b90060c8cdbb88b1ca3f0a4c5d2ebc...3ea7e68a518870d63c7da9485f8a69fa1555b452)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/b5dd2b39e9dfb83addd0c07654c3b9119e24cb36)

* [Bug 1924503](https://bugzilla.redhat.com/show_bug.cgi?id=1924503): Rebase v1.2.0 [#120](https://github.com/openshift/csi-external-resizer/pull/120)
* Updating ose-csi-external-resizer builder & base images to be consistent with ART [#119](https://github.com/openshift/csi-external-resizer/pull/119)
* Updating ose-csi-external-resizer builder & base images to be consistent with ART [#118](https://github.com/openshift/csi-external-resizer/pull/118)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/f77279e9561a02c18676dbcafcbe6db7d0ebd077...b5dd2b39e9dfb83addd0c07654c3b9119e24cb36)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/1e2cca95999057e16fcfee07e8068f7a77f2e164)

* [Bug 1924504](https://bugzilla.redhat.com/show_bug.cgi?id=1924504): Rebase v4.1.0 [#50](https://github.com/openshift/csi-external-snapshotter/pull/50)
* UPSTREAM: 502: Bug 1949018: Correct snapshotContent error propagation [#48](https://github.com/openshift/csi-external-snapshotter/pull/48)
* Updating ose-csi-external-snapshotter builder & base images to be consistent with ART [#46](https://github.com/openshift/csi-external-snapshotter/pull/46)
* Updating ose-csi-snapshot-controller builder & base images to be consistent with ART [#45](https://github.com/openshift/csi-external-snapshotter/pull/45)
* Updating csi-snapshot-validation-webhook builder & base images to be consistent with ART [#47](https://github.com/openshift/csi-external-snapshotter/pull/47)
* Updating ose-csi-external-snapshotter builder & base images to be consistent with ART [#43](https://github.com/openshift/csi-external-snapshotter/pull/43)
* Updating csi-snapshot-validation-webhook builder & base images to be consistent with ART [#44](https://github.com/openshift/csi-external-snapshotter/pull/44)
* Updating ose-csi-snapshot-controller builder & base images to be consistent with ART [#42](https://github.com/openshift/csi-external-snapshotter/pull/42)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/26773735c1cbf09de9bf31cb3c640abdca04cd83...1e2cca95999057e16fcfee07e8068f7a77f2e164)


### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/a29b1153451d6ffa6fbcb1dacbe25639c2523488)

* Updating csi-livenessprobe builder & base images to be consistent with ART [#23](https://github.com/openshift/csi-livenessprobe/pull/23)
* Updating csi-livenessprobe builder & base images to be consistent with ART [#22](https://github.com/openshift/csi-livenessprobe/pull/22)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/3dad0280ea630cfcc87bcf02806c75b7a066d81e...a29b1153451d6ffa6fbcb1dacbe25639c2523488)


### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/0519730f75f89c11f1ee07c7f81b0bcae1ddf705)

* Updating csi-node-driver-registrar builder & base images to be consistent with ART [#28](https://github.com/openshift/csi-node-driver-registrar/pull/28)
* Updating csi-node-driver-registrar builder & base images to be consistent with ART [#27](https://github.com/openshift/csi-node-driver-registrar/pull/27)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/2a77963e5458da1bcde318b4609a6abefaf868d7...0519730f75f89c11f1ee07c7f81b0bcae1ddf705)


### [docker-builder](https://github.com/openshift/builder/tree/dc2c0061e5db06d96bac966bdfe2603fe7bbfa06)

* [Bug 2053122](https://bugzilla.redhat.com/show_bug.cgi?id=2053122): [release-4.8] getAssembleUser(): strip the group part out before checking the UID [#289](https://github.com/openshift/builder/pull/289)
* Update OWNERS file [#290](https://github.com/openshift/builder/pull/290)
* [Bug 1992639](https://bugzilla.redhat.com/show_bug.cgi?id=1992639): bump(s2i): revert incorrect ssh scp fix [#259](https://github.com/openshift/builder/pull/259)
* [Bug 1981939](https://bugzilla.redhat.com/show_bug.cgi?id=1981939): Updating openshift-enterprise-builder builder & base images to be consistent with ART [#230](https://github.com/openshift/builder/pull/230)
* [Bug 1925412](https://bugzilla.redhat.com/show_bug.cgi?id=1925412): update dependencies affected by CVE-2021-3121 [#244](https://github.com/openshift/builder/pull/244)
* [Bug 1951084](https://bugzilla.redhat.com/show_bug.cgi?id=1951084): remove mounts.conf again, but patch buildah change needed to make transient mounts work for us [#239](https://github.com/openshift/builder/pull/239)
* [Bug 1940479](https://bugzilla.redhat.com/show_bug.cgi?id=1940479): bump(containers/buildah) 1.20.0 [#243](https://github.com/openshift/builder/pull/243)
* [Bug 1947164](https://bugzilla.redhat.com/show_bug.cgi?id=1947164): Print "Successfully pushed" only if push succeeded [#232](https://github.com/openshift/builder/pull/232)
* [Bug 1940488](https://bugzilla.redhat.com/show_bug.cgi?id=1940488): move entitlement related secrets back to mounts.conf [#238](https://github.com/openshift/builder/pull/238)
* [Bug 1943614](https://bugzilla.redhat.com/show_bug.cgi?id=1943614): add explict exit log after buildah pull image; tweak existing start log priot to buildah pull image call [#236](https://github.com/openshift/builder/pull/236)
* [Bug 1943614](https://bugzilla.redhat.com/show_bug.cgi?id=1943614): add enter/exit logging around buildah pull image [#233](https://github.com/openshift/builder/pull/233)
* [Bug 1940488](https://bugzilla.redhat.com/show_bug.cgi?id=1940488): add etc-pki-entitlements from pod secrets if available to build container [#228](https://github.com/openshift/builder/pull/228)
* [Bug 1926021](https://bugzilla.redhat.com/show_bug.cgi?id=1926021): Update buildah to v1.19.8, containernetworking/cni to v0.8.1 [#229](https://github.com/openshift/builder/pull/229)
* Updating openshift-enterprise-builder builder & base images to be consistent with ART [#217](https://github.com/openshift/builder/pull/217)
* [Bug 1905095](https://bugzilla.redhat.com/show_bug.cgi?id=1905095): bump github.com/containers/image [#221](https://github.com/openshift/builder/pull/221)
* [Bug 1937535](https://bugzilla.redhat.com/show_bug.cgi?id=1937535): retry image pulls during builds [#222](https://github.com/openshift/builder/pull/222)
* [Bug 1895053](https://bugzilla.redhat.com/show_bug.cgi?id=1895053): Mount CA trust store in builds [#218](https://github.com/openshift/builder/pull/218)
* [Full changelog](https://github.com/openshift/builder/compare/5a46979e5e747b6df27a1b50ec0c922a172298f2...dc2c0061e5db06d96bac966bdfe2603fe7bbfa06)


### [docker-registry](https://github.com/openshift/image-registry/tree/bc68848bf1e6fe91378510a0b0ef30cfcb6ec39e)

* [Bug 2042678](https://bugzilla.redhat.com/show_bug.cgi?id=2042678): Fix auth for docker.io images [#306](https://github.com/openshift/image-registry/pull/306)
* [Bug 2053223](https://bugzilla.redhat.com/show_bug.cgi?id=2053223): Fix pull-through for images that have dots in their namespace [#310](https://github.com/openshift/image-registry/pull/310)
* [Bug 2012163](https://bugzilla.redhat.com/show_bug.cgi?id=2012163): Supporting mirror authentication during pull through [#297](https://github.com/openshift/image-registry/pull/297)
* Updating openshift-enterprise-registry builder & base images to be consistent with ART [#270](https://github.com/openshift/image-registry/pull/270)
* [Bug 1918376](https://bugzilla.redhat.com/show_bug.cgi?id=1918376): ICSP support during Image Registry pullthrough [#277](https://github.com/openshift/image-registry/pull/277)
* [Bug 1918376](https://bugzilla.redhat.com/show_bug.cgi?id=1918376): Bumping openshift/library-go [#278](https://github.com/openshift/image-registry/pull/278)
* [Bug 1924462](https://bugzilla.redhat.com/show_bug.cgi?id=1924462): Bump openshift/api [#276](https://github.com/openshift/image-registry/pull/276)
* [Bug 1952610](https://bugzilla.redhat.com/show_bug.cgi?id=1952610): Bump dependencies [#272](https://github.com/openshift/image-registry/pull/272)
* [Bug 1960619](https://bugzilla.redhat.com/show_bug.cgi?id=1960619): Use sha256 oauth tokens in tests [#274](https://github.com/openshift/image-registry/pull/274)
* Better log message when action is not allowed [#268](https://github.com/openshift/image-registry/pull/268)
* Updating openshift-enterprise-registry builder & base images to be consistent with ART [#264](https://github.com/openshift/image-registry/pull/264)
* [Bug 1924568](https://bugzilla.redhat.com/show_bug.cgi?id=1924568): Bumping docker distribution dependency [#265](https://github.com/openshift/image-registry/pull/265)
* [Full changelog](https://github.com/openshift/image-registry/compare/8b03485af777f8d718427393aa575bbaf6f21610...bc68848bf1e6fe91378510a0b0ef30cfcb6ec39e)


### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/076a9209048c7d478f59084409c2dca5e3a6f2d8)

* [Bug 2031938](https://bugzilla.redhat.com/show_bug.cgi?id=2031938): Add e2e test to 4.9 branch [#72](https://github.com/openshift/driver-toolkit/pull/72)
* [Bug 2011460](https://bugzilla.redhat.com/show_bug.cgi?id=2011460): Add imagestream for driver-toolkit [#65](https://github.com/openshift/driver-toolkit/pull/65)
* [Bug 1988478](https://bugzilla.redhat.com/show_bug.cgi?id=1988478): Use kernel config to determine GCC version [#55](https://github.com/openshift/driver-toolkit/pull/55)
* [Bug 1979984](https://bugzilla.redhat.com/show_bug.cgi?id=1979984): Remove curl of extract-vmlinux [#48](https://github.com/openshift/driver-toolkit/pull/48)
* [Bug 1977982](https://bugzilla.redhat.com/show_bug.cgi?id=1977982): /etc/driver-toolkit-release.json kernel version match rpm -q output [#45](https://github.com/openshift/driver-toolkit/pull/45)
* [release 4.8] Bug 1974447: Cherry pick gcc to release 4.8 [#38](https://github.com/openshift/driver-toolkit/pull/38)
* [Bug 1972662](https://bugzilla.redhat.com/show_bug.cgi?id=1972662): DPDK KNI modules need some additional tools [#28](https://github.com/openshift/driver-toolkit/pull/28)
* [Bug 1972676](https://bugzilla.redhat.com/show_bug.cgi?id=1972676): Requirements for authenticating kernel modules with X.509 keys [#37](https://github.com/openshift/driver-toolkit/pull/37)
* [Bug 1961656](https://bugzilla.redhat.com/show_bug.cgi?id=1961656): Update Dockerfile [#20](https://github.com/openshift/driver-toolkit/pull/20)
* [Bug 1959190](https://bugzilla.redhat.com/show_bug.cgi?id=1959190): Add LABEL io.openshift.release.operator=true for addition to payload [#17](https://github.com/openshift/driver-toolkit/pull/17)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/bcd11a1f0137bb10b1958f1e27e04a213aef96be...076a9209048c7d478f59084409c2dca5e3a6f2d8)


### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/016bea1a6f5ec53aab8e936f4120c32a05322027)

* [Bug 1951158](https://bugzilla.redhat.com/show_bug.cgi?id=1951158): Update doc to reflect ip field is in CIDR format not just an IP [#48](https://github.com/openshift/egress-router-cni/pull/48)
* [Bug 1962740](https://bugzilla.redhat.com/show_bug.cgi?id=1962740): Add documentation related CNO controller [#42](https://github.com/openshift/egress-router-cni/pull/42)
* [Bug 1951158](https://bugzilla.redhat.com/show_bug.cgi?id=1951158): Protocol needs to be lower case for iptables rules. [#46](https://github.com/openshift/egress-router-cni/pull/46)
* [Bug 1951158](https://bugzilla.redhat.com/show_bug.cgi?id=1951158): Fix non-proper convert to lowercase for protocol [#43](https://github.com/openshift/egress-router-cni/pull/43)
* Updating egress-router-cni builder & base images to be consistent with ART [#41](https://github.com/openshift/egress-router-cni/pull/41)
* Fix gofmt linting issues on macvlan_test [#40](https://github.com/openshift/egress-router-cni/pull/40)
* Include build-machinery-go tests [#39](https://github.com/openshift/egress-router-cni/pull/39)
* Enable unit testing [#37](https://github.com/openshift/egress-router-cni/pull/37)
* Remove valadas from owners [#38](https://github.com/openshift/egress-router-cni/pull/38)
* Update go.mod file [#36](https://github.com/openshift/egress-router-cni/pull/36)
* add unit tests for `fillNetConfDefaults()` in macvlan.go [#31](https://github.com/openshift/egress-router-cni/pull/31)
* Add developer documentation [#25](https://github.com/openshift/egress-router-cni/pull/25)
* [SDN-1569](https://issues.redhat.com/browse/SDN-1569): Add support for multiple destinations in redirect mode [#34](https://github.com/openshift/egress-router-cni/pull/34)
* Updating egress-router-cni builder & base images to be consistent with ART [#35](https://github.com/openshift/egress-router-cni/pull/35)
* Update README to current implementation [#29](https://github.com/openshift/egress-router-cni/pull/29)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/96ebd3782cbb63de098e75ebcedeac60546cfee3...016bea1a6f5ec53aab8e936f4120c32a05322027)


### [etcd](https://github.com/openshift/etcd/tree/3cc60d0a8d1b0df6c0262809ac5b14611f300c86)

* Update OWNERS [#125](https://github.com/openshift/etcd/pull/125)
* [Bug 1958913](https://bugzilla.redhat.com/show_bug.cgi?id=1958913): discover-etcd-initial-cluster: retry if member is not part of member list and dataDir exists [#81](https://github.com/openshift/etcd/pull/81)
* [Bug 1958405](https://bugzilla.redhat.com/show_bug.cgi?id=1958405): UPSTREAM: <carry>: etcdserver/api/etcdhttp: log successful etcd server side health check in debug level [#80](https://github.com/openshift/etcd/pull/80)
* [Bug 1958405](https://bugzilla.redhat.com/show_bug.cgi?id=1958405): UPSTREAM: <carry>: *: log server-side /health checks [#79](https://github.com/openshift/etcd/pull/79)
* [Bug 1958405](https://bugzilla.redhat.com/show_bug.cgi?id=1958405): UPSTREAM: <carry>: server: add support for log rotation (#12774) [#78](https://github.com/openshift/etcd/pull/78)
* UPSTREAM: <carry>: *: ensure zap logger is set before use [#75](https://github.com/openshift/etcd/pull/75)
* [ETCD-180](https://issues.redhat.com/browse/ETCD-180): Bug 1927942: UPSTREAM: <carry>: *: add support for socket options [#70](https://github.com/openshift/etcd/pull/70)
* [ETCD-178](https://issues.redhat.com/browse/ETCD-178): Bug 1931652: openshift-tools: fix on off flow and add unit tests [#73](https://github.com/openshift/etcd/pull/73)
* Updating ose-etcd builder & base images to be consistent with ART [#68](https://github.com/openshift/etcd/pull/68)
* [Bug 1870189](https://bugzilla.redhat.com/show_bug.cgi?id=1870189): Bump v3.4.14 [#65](https://github.com/openshift/etcd/pull/65)
* [Full changelog](https://github.com/openshift/etcd/compare/c61e5afde9485fac9233c0db6ab950bfb511e1b5...3cc60d0a8d1b0df6c0262809ac5b14611f300c86)


### [gcp-machine-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/34db56ebf7a8a46828f5830d42b26f9d2bdd0db1)

* [Bug 1948719](https://bugzilla.redhat.com/show_bug.cgi?id=1948719): update controller-runtime dependency [#163](https://github.com/openshift/cluster-api-provider-gcp/pull/163)
* [Bug 1954177](https://bugzilla.redhat.com/show_bug.cgi?id=1954177): Update mao dependency for webhook v1 changes [#161](https://github.com/openshift/cluster-api-provider-gcp/pull/161)
* [Bug 1948719](https://bugzilla.redhat.com/show_bug.cgi?id=1948719): update k8s dependencies to 1.21 [#159](https://github.com/openshift/cluster-api-provider-gcp/pull/159)
* [Bug 1918910](https://bugzilla.redhat.com/show_bug.cgi?id=1918910): Only log error on nonexistent instance type for scale from zero [#157](https://github.com/openshift/cluster-api-provider-gcp/pull/157)
* Updating ose-gcp-machine-controllers builder & base images to be consistent with ART [#156](https://github.com/openshift/cluster-api-provider-gcp/pull/156)
* [Bug 1910318](https://bugzilla.redhat.com/show_bug.cgi?id=1910318): Ensure original conditions aren't mutated during reconcile [#155](https://github.com/openshift/cluster-api-provider-gcp/pull/155)
* [Bug 1910318](https://bugzilla.redhat.com/show_bug.cgi?id=1910318): Add condition to show actuator exists condition on machine [#152](https://github.com/openshift/cluster-api-provider-gcp/pull/152)
* [Bug 1934021](https://bugzilla.redhat.com/show_bug.cgi?id=1934021): Ensure response body is closed when we are finished with the request [#150](https://github.com/openshift/cluster-api-provider-gcp/pull/150)
* Try to mark node for up to 30 seconds when termination notice observed [#145](https://github.com/openshift/cluster-api-provider-gcp/pull/145)
* Updating ose-gcp-machine-controllers builder & base images to be consistent with ART [#146](https://github.com/openshift/cluster-api-provider-gcp/pull/146)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/5f6589d4ef9496e63ebc072f4d863151bbeb4407...34db56ebf7a8a46828f5830d42b26f9d2bdd0db1)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/3978a2100d6ff938db2a0cf8d962ce9dce0c6e4c)

* [Bug 2052955](https://bugzilla.redhat.com/show_bug.cgi?id=2052955): Disable uuid checks on XFS [#23](https://github.com/openshift/gcp-pd-csi-driver/pull/23)
* Updating ose-gcp-pd-csi-driver builder & base images to be consistent with ART [#12](https://github.com/openshift/gcp-pd-csi-driver/pull/12)
* UPSTREAM: 693: Add CLI option to label the PD disks [#11](https://github.com/openshift/gcp-pd-csi-driver/pull/11)
* Updating ose-gcp-pd-csi-driver builder & base images to be consistent with ART [#9](https://github.com/openshift/gcp-pd-csi-driver/pull/9)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/0cb61d205d0f911fe8ca614094f0cd3f911d665c...3978a2100d6ff938db2a0cf8d962ce9dce0c6e4c)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/35ebe86003c339821d3a36186a66f8ef86049932)

* [Bug 1969538](https://bugzilla.redhat.com/show_bug.cgi?id=1969538): Include VolumeSnapshotClass by default [#25](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/25)
* [Bug 1947774](https://bugzilla.redhat.com/show_bug.cgi?id=1947774): fix imagePullPolicy to ifNotPresent [#23](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/23)
* [Bug 1951058](https://bugzilla.redhat.com/show_bug.cgi?id=1951058): Enable multipods capability in e2e tests [#22](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/22)
* GCP PD: Add metrics scraping [#21](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/21)
* Updating ose-gcp-pd-csi-driver-operator builder & base images to be consistent with ART [#19](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/19)
* [Bug 1939865](https://bugzilla.redhat.com/show_bug.cgi?id=1939865): Add CSIDriver object [#17](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/17)
* [Bug 1933184](https://bugzilla.redhat.com/show_bug.cgi?id=1933184): Add maxUnavailable to DaemonSets [#15](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/15)
* Change the disk label name [#16](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/16)
* Add cluster ID as extra label for newly created PDs. [#14](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/14)
* Update images in README.md [#8](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/8)
* Cleanup: Remove serviceName from controller manifest [#13](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/13)
* Updating ose-gcp-pd-csi-driver-operator builder & base images to be consistent with ART [#12](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/12)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/d40dd57595673e4737fa77e29a955f6beefac284...35ebe86003c339821d3a36186a66f8ef86049932)


### [grafana](https://github.com/openshift/grafana/tree/b987e4b1e20b6cf814bbc408dd2a740aed92e410)

* [Bug 1931277](https://bugzilla.redhat.com/show_bug.cgi?id=1931277): Bump v7.5.5 [#57](https://github.com/openshift/grafana/pull/57)
* Updating grafana builder & base images to be consistent with ART [#56](https://github.com/openshift/grafana/pull/56)
* Updating grafana builder & base images to be consistent with ART [#55](https://github.com/openshift/grafana/pull/55)
* [Full changelog](https://github.com/openshift/grafana/compare/b02c35dc2d01fce696a3edc28839a9f9fd0150a3...b987e4b1e20b6cf814bbc408dd2a740aed92e410)


### [haproxy-router](https://github.com/openshift/router/tree/d0d63803fbefba67f09df0edb271199623659ca8)

* [Bug 1990370](https://bugzilla.redhat.com/show_bug.cgi?id=1990370): haproxy-config.template: Fix power-of-two balancing [#324](https://github.com/openshift/router/pull/324)
* [Bug 1984565](https://bugzilla.redhat.com/show_bug.cgi?id=1984565): config template: accept IPv6 IPs for whitelisting [#321](https://github.com/openshift/router/pull/321)
* [Bug 1971730](https://bugzilla.redhat.com/show_bug.cgi?id=1971730): error pages - don't use bootstrap/normalize [#305](https://github.com/openshift/router/pull/305)
* [Bug 1964486](https://bugzilla.redhat.com/show_bug.cgi?id=1964486): template helper - generateHAProxyWhiteListFile, use right arg type [#295](https://github.com/openshift/router/pull/295)
* [Bug 1955822](https://bugzilla.redhat.com/show_bug.cgi?id=1955822): cmd: Add option to source stats auth from file [#291](https://github.com/openshift/router/pull/291)
* [Bug 1957584](https://bugzilla.redhat.com/show_bug.cgi?id=1957584): Revert 'Bug 1896977: Enhance host name validation in router' [#290](https://github.com/openshift/router/pull/290)
* [Bug 1961550](https://bugzilla.redhat.com/show_bug.cgi?id=1961550): Add a condition to check if the Endpoints ID is duplicated [#285](https://github.com/openshift/router/pull/285)
* [Bug 1947478](https://bugzilla.redhat.com/show_bug.cgi?id=1947478): Switch from discovery v1beta1 to discovery v1 [#282](https://github.com/openshift/router/pull/282)
* [Bug 1924461](https://bugzilla.redhat.com/show_bug.cgi?id=1924461): Deps: Bump for kube 1.21 [#278](https://github.com/openshift/router/pull/278)
* Add errorfile stanzas and dummy default html files to the router [#274](https://github.com/openshift/router/pull/274)
* haproxy-config.template: Use power-of-two balancing [#192](https://github.com/openshift/router/pull/192)
* haproxy-config.template: Re-indent. [#276](https://github.com/openshift/router/pull/276)
* Updating ose-haproxy-router-base builder & base images to be consistent with ART [#272](https://github.com/openshift/router/pull/272)
* [Bug 1925697](https://bugzilla.redhat.com/show_bug.cgi?id=1925697): Route admission should not use the override [#258](https://github.com/openshift/router/pull/258)
* [NE-417](https://issues.redhat.com/browse/NE-417): Allow configuring HAProxy header buffer sizes [#193](https://github.com/openshift/router/pull/193)
* [Bug 1937972](https://bugzilla.redhat.com/show_bug.cgi?id=1937972): router/template: Cache compiled regular expressions [#268](https://github.com/openshift/router/pull/268)
* [Bug 1909906](https://bugzilla.redhat.com/show_bug.cgi?id=1909906): Exit gracefully if metrics listener fails [#266](https://github.com/openshift/router/pull/266)
* [Bug 1903821](https://bugzilla.redhat.com/show_bug.cgi?id=1903821): contention: Contend over route ingress admission condition [#240](https://github.com/openshift/router/pull/240)
* template: Drop http-use-htx option [#261](https://github.com/openshift/router/pull/261)
* Switch to haproxy22 [#259](https://github.com/openshift/router/pull/259)
* Updating openshift-enterprise-haproxy-router builder & base images to be consistent with ART [#256](https://github.com/openshift/router/pull/256)
* Updating ose-haproxy-router-base builder & base images to be consistent with ART [#255](https://github.com/openshift/router/pull/255)
* [Bug 1801407](https://bugzilla.redhat.com/show_bug.cgi?id=1801407): Omit brackets around IPv4 addresses in v4v6 mode [#83](https://github.com/openshift/router/pull/83)
* Add rfredette to OWNERS [#237](https://github.com/openshift/router/pull/237)
* [Full changelog](https://github.com/openshift/router/compare/4ab216f0090a985f041cea3e411075a04e2ace0a...d0d63803fbefba67f09df0edb271199623659ca8)


### [hyperkube](https://github.com/openshift/kubernetes/tree/6b3cbdd0f0b90bc6b28fec91cce5b3c94d7d56a9)

* [Bug 2077004](https://bugzilla.redhat.com/show_bug.cgi?id=2077004): Rebase 1.21.11 [#1246](https://github.com/openshift/kubernetes/pull/1246)
* [Bug 2063953](https://bugzilla.redhat.com/show_bug.cgi?id=2063953): UPSTREAM: <carry>: use hardcoded rest mapper from library-go [#1245](https://github.com/openshift/kubernetes/pull/1245)
* [Bug 2075043](https://bugzilla.redhat.com/show_bug.cgi?id=2075043): golang toolchain unsupported parsers tag [#1240](https://github.com/openshift/kubernetes/pull/1240)
* [Bug 2043808](https://bugzilla.redhat.com/show_bug.cgi?id=2043808): IPs with leading zeros are still valid in the apiserver [#1173](https://github.com/openshift/kubernetes/pull/1173)
* [Bug 2060494](https://bugzilla.redhat.com/show_bug.cgi?id=2060494): Backports inotify leak fix into kubelet [#1203](https://github.com/openshift/kubernetes/pull/1203)
* [Bug 2024642](https://bugzilla.redhat.com/show_bug.cgi?id=2024642): Rebase v1.21.8 [#1102](https://github.com/openshift/kubernetes/pull/1102)
* [Bug 2050131](https://bugzilla.redhat.com/show_bug.cgi?id=2050131): UPSTREAM: <carry>: set correctly static pods CPUs when workload partitioning is disabled [#1168](https://github.com/openshift/kubernetes/pull/1168)
* [Bug 2039377](https://bugzilla.redhat.com/show_bug.cgi?id=2039377): UPSTREAM: 89885: SQUASH: Retry fetching clouds.conf [#1108](https://github.com/openshift/kubernetes/pull/1108)
* [Bug 2029466](https://bugzilla.redhat.com/show_bug.cgi?id=2029466): UPSTREAM: 107014: Mark volume as uncertain after Unmount* fails [#1146](https://github.com/openshift/kubernetes/pull/1146)
* [Bug 2024995](https://bugzilla.redhat.com/show_bug.cgi?id=2024995): Fix subpath source check [#1067](https://github.com/openshift/kubernetes/pull/1067)
* [Bug 2032325](https://bugzilla.redhat.com/show_bug.cgi?id=2032325): UPSTREAM: <carry>: api request counts for current hour are incorrect [#1092](https://github.com/openshift/kubernetes/pull/1092)
* [Bug 2022741](https://bugzilla.redhat.com/show_bug.cgi?id=2022741): UPSTREAM: 106260: Don't guess SELinux support on error [#1054](https://github.com/openshift/kubernetes/pull/1054)
* [Bug 2021997](https://bugzilla.redhat.com/show_bug.cgi?id=2021997): Read k8s version from hyperkube Dockerfile [#1045](https://github.com/openshift/kubernetes/pull/1045)
* Updating openshift-enterprise-hyperkube builder & base images to be consistent with ART [#559](https://github.com/openshift/kubernetes/pull/559)
* [Bug 2017027](https://bugzilla.redhat.com/show_bug.cgi?id=2017027): UPSTREAM: <drop>: bump apiserver-library-go [#1069](https://github.com/openshift/kubernetes/pull/1069)
* [Bug 2022265](https://bugzilla.redhat.com/show_bug.cgi?id=2022265): Rebase v1.21.6 [#1060](https://github.com/openshift/kubernetes/pull/1060)
* Updating openshift-enterprise-pod images to be consistent with ART [#680](https://github.com/openshift/kubernetes/pull/680)
* [Bug 2020644](https://bugzilla.redhat.com/show_bug.cgi?id=2020644): Image policy should mutate DeploymentConfigs, StatefulSets, and new CronJobs [#1050](https://github.com/openshift/kubernetes/pull/1050)
* [Bug 1994655](https://bugzilla.redhat.com/show_bug.cgi?id=1994655): openshift-apiserver should not set Available=False APIServicesAvailable on update [#955](https://github.com/openshift/kubernetes/pull/955)
* [Bug 2008403](https://bugzilla.redhat.com/show_bug.cgi?id=2008403): Rebase v1.21.5 [#981](https://github.com/openshift/kubernetes/pull/981)
* [Bug 2011460](https://bugzilla.redhat.com/show_bug.cgi?id=2011460): UPSTREAM: <carry>: openshift-hack/images/os/Dockerfile: Add io.openshift.build.versions, etc. [#1005](https://github.com/openshift/kubernetes/pull/1005)
* [Bug 1995714](https://bugzilla.redhat.com/show_bug.cgi?id=1995714): UPSTREAM: <carry>: admission/managementcpusoverride: cover the roll-back case [#895](https://github.com/openshift/kubernetes/pull/895)
* [Bug 1994457](https://bugzilla.redhat.com/show_bug.cgi?id=1994457): Update to kubernetes 1.21.4 [#888](https://github.com/openshift/kubernetes/pull/888)
* [Bug 1993754](https://bugzilla.redhat.com/show_bug.cgi?id=1993754): UPSTREAM: 104347: Pass additional flags to subpath mount to avoid fla… [#940](https://github.com/openshift/kubernetes/pull/940)
* [Bug 1998391](https://bugzilla.redhat.com/show_bug.cgi?id=1998391): UPSTREAM: 104530: [1.21] bump runc to 1.0.2 [#912](https://github.com/openshift/kubernetes/pull/912)
* [Bug 1957133](https://bugzilla.redhat.com/show_bug.cgi?id=1957133): do not throw error when we can't get canonical path [#854](https://github.com/openshift/kubernetes/pull/854)
* [Bug 1981770](https://bugzilla.redhat.com/show_bug.cgi?id=1981770): UPSTREAM: <drop>: bump(apiserver-library-go) [#864](https://github.com/openshift/kubernetes/pull/864)
* [Bug 1981633](https://bugzilla.redhat.com/show_bug.cgi?id=1981633): UPSTREAM: <carry>: prevent the kubecontrollermanager service-ca from getting less secure [#858](https://github.com/openshift/kubernetes/pull/858)
* [Bug 1981633](https://bugzilla.redhat.com/show_bug.cgi?id=1981633): UPSTREAM: <carry>: add a way to inject a vulnerable, legacy service-c… [#856](https://github.com/openshift/kubernetes/pull/856)
* [Bug 1977351](https://bugzilla.redhat.com/show_bug.cgi?id=1977351): UPSTREAM: <carry>: Reject the pod creation when we can not decide the cluster type [#833](https://github.com/openshift/kubernetes/pull/833)
* [Bug 1977924](https://bugzilla.redhat.com/show_bug.cgi?id=1977924): [release-4.8] Ensure scc compatibility with BoundServiceAccountTokenVolume [#842](https://github.com/openshift/kubernetes/pull/842)
* [Bug 1975938](https://bugzilla.redhat.com/show_bug.cgi?id=1975938): update Multi-AZ Cluster Volumes test name [#829](https://github.com/openshift/kubernetes/pull/829)
* [Bug 1973580](https://bugzilla.redhat.com/show_bug.cgi?id=1973580): only chown if non-windows machine with projected volumes [#815](https://github.com/openshift/kubernetes/pull/815)
* [Bug 1950993](https://bugzilla.redhat.com/show_bug.cgi?id=1950993): UPSTREAM: <drop>: bump cadvisor for 2868 upstream patch [#802](https://github.com/openshift/kubernetes/pull/802)
* BUG 1927359: Add support for gathering metrics from CSI block-mode volumes [#731](https://github.com/openshift/kubernetes/pull/731)
* [Bug 1954509](https://bugzilla.redhat.com/show_bug.cgi?id=1954509): UPSTREAM: multiple: Fix corruption of FibreChannel volumes [#788](https://github.com/openshift/kubernetes/pull/788)
* [Bug 1946479](https://bugzilla.redhat.com/show_bug.cgi?id=1946479): Re-enable BoundServiceAccountTokenVolume disabled by 1.21 rebase [#714](https://github.com/openshift/kubernetes/pull/714)
* [Bug 1950010](https://bugzilla.redhat.com/show_bug.cgi?id=1950010): UPSTREAM: <carry>: apirequestcount: smear out CR updates over interval [#798](https://github.com/openshift/kubernetes/pull/798)
* [Bug 1969626](https://bugzilla.redhat.com/show_bug.cgi?id=1969626): UPSTREAM: 102587: kubelet: Revert "Cleanup portforward streams after their usage" [#796](https://github.com/openshift/kubernetes/pull/796)
* [Bug 1966410](https://bugzilla.redhat.com/show_bug.cgi?id=1966410): kube-apiserver: add system_client=cluster-policy-controller to apiserver_request_total [#794](https://github.com/openshift/kubernetes/pull/794)
* [Bug 1965545](https://bugzilla.redhat.com/show_bug.cgi?id=1965545): vendor: bump runc to rc95 + "unit exists" fix [#790](https://github.com/openshift/kubernetes/pull/790)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): UPSTREAM: 102606: Bring back "client-go: add retry logic for Watch and Stream" and fix test flake [#792](https://github.com/openshift/kubernetes/pull/792)
* [Bug 1967591](https://bugzilla.redhat.com/show_bug.cgi?id=1967591): UPSTREAM: <carry>: do not mutate pods when it has a container with both CPU request and limit [#785](https://github.com/openshift/kubernetes/pull/785)
* [Bug 1966410](https://bugzilla.redhat.com/show_bug.cgi?id=1966410): UPSTREAM: <carry>: apiserver: add system_client=kube-{apiserver,cm,s} to apiserver_request_total [#784](https://github.com/openshift/kubernetes/pull/784)
* UPSTREAM: <carry>: kubelet: add ehashman as reviewer [#583](https://github.com/openshift/kubernetes/pull/583)
* [Bug 1967745](https://bugzilla.redhat.com/show_bug.cgi?id=1967745): Add DNS custom resource admission [#681](https://github.com/openshift/kubernetes/pull/681)
* [Bug 1927397](https://bugzilla.redhat.com/show_bug.cgi?id=1927397): UPSTREAM: 98028: add auto update for priority & fairness bootstrap configuration objects [#736](https://github.com/openshift/kubernetes/pull/736)
* [Bug 1964492](https://bugzilla.redhat.com/show_bug.cgi?id=1964492): UPSTREAM: 102171: Implement support for watch initialization in P&F [#773](https://github.com/openshift/kubernetes/pull/773)
* [Bug 1946479](https://bugzilla.redhat.com/show_bug.cgi?id=1946479): UPSTREAM: 101950: Make watch order conformance test reliable [#786](https://github.com/openshift/kubernetes/pull/786)
* [Bug 1953127](https://bugzilla.redhat.com/show_bug.cgi?id=1953127): UPSTREAM: <drop>: work around broken NetPol DNS rules [#770](https://github.com/openshift/kubernetes/pull/770)
* [Bug 1958329](https://bugzilla.redhat.com/show_bug.cgi?id=1958329): UPSTREAM: 97428: add more context to log after a request times out [#737](https://github.com/openshift/kubernetes/pull/737)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): UPSTREAM: 102107: client-go: add retry logic for Watch and Stream [#783](https://github.com/openshift/kubernetes/pull/783)
* [Bug 1961925](https://bugzilla.redhat.com/show_bug.cgi?id=1961925): UPSTREAM: <carry>: Does not prevent pod creation because of no nodes reason when it runs under the regular cluster [#756](https://github.com/openshift/kubernetes/pull/756)
* [Bug 1913974](https://bugzilla.redhat.com/show_bug.cgi?id=1913974): UPSTREAM: 102021: Update snapshotting tests to use volumeHandle for CSI volumes when waiting for NodeUnpublish [#769](https://github.com/openshift/kubernetes/pull/769)
* [Bug 1953102](https://bugzilla.redhat.com/show_bug.cgi?id=1953102): UPSTREAM: 102147: vendor: bump runc to rc95 [#761](https://github.com/openshift/kubernetes/pull/761)
* [Bug 1960205](https://bugzilla.redhat.com/show_bug.cgi?id=1960205): UPSTREAM: <carry>: verbosity of managed workloads logging [#771](https://github.com/openshift/kubernetes/pull/771)
* UPSTREAM: <carry>: update rebase doc [#768](https://github.com/openshift/kubernetes/pull/768)
* [Bug 1964197](https://bugzilla.redhat.com/show_bug.cgi?id=1964197): UPSTREAM: 102224: Fix expired unit test certs [#767](https://github.com/openshift/kubernetes/pull/767)
* [Bug 1949050](https://bugzilla.redhat.com/show_bug.cgi?id=1949050): Rebase 1.21.1 [#751](https://github.com/openshift/kubernetes/pull/751)
* UPSTREAM: 102089: Bug 1961644: Add Node IP IPv6 formatting in NodeAuthenticator tests [#760](https://github.com/openshift/kubernetes/pull/760)
* [Bug 1963079](https://bugzilla.redhat.com/show_bug.cgi?id=1963079): KCM with preferred host support [#759](https://github.com/openshift/kubernetes/pull/759)
* [Bug 1952460](https://bugzilla.redhat.com/show_bug.cgi?id=1952460): UPSTREAM: 101488: e2e/network/firewall: don't assume nodes are exposed externally [#738](https://github.com/openshift/kubernetes/pull/738)
* UPSTREAM: 101213: Bug 1881662: fix change erro to info [#744](https://github.com/openshift/kubernetes/pull/744)
* [Bug 1932280](https://bugzilla.redhat.com/show_bug.cgi?id=1932280): UPSTREAM: 101116: vSphere: Return useful errors from parameter validation [#707](https://github.com/openshift/kubernetes/pull/707)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): Handle 429 errors from watch requests in reflector [#669](https://github.com/openshift/kubernetes/pull/669)
* [Bug 1945091](https://bugzilla.redhat.com/show_bug.cgi?id=1945091): Don't force-disable IPv6, dual-stack, and SCTP tests [#565](https://github.com/openshift/kubernetes/pull/565)
* [Bug 1960780](https://bugzilla.redhat.com/show_bug.cgi?id=1960780): UPSTREAM: <carry>: Use policyv1beta1 [#752](https://github.com/openshift/kubernetes/pull/752)
* UPSTREAM: 101067: Bug 1946459: fix nfs storage ipv6 add square brackets [#743](https://github.com/openshift/kubernetes/pull/743)
* [Bug 1884800](https://bugzilla.redhat.com/show_bug.cgi?id=1884800): Reduce names of vsphere volumes even further [#701](https://github.com/openshift/kubernetes/pull/701)
* [Bug 1959471](https://bugzilla.redhat.com/show_bug.cgi?id=1959471): Conformance tests (sysctls) may not be excluded [#741](https://github.com/openshift/kubernetes/pull/741)
* [Bug 1923847](https://bugzilla.redhat.com/show_bug.cgi?id=1923847): openshift-kube-apiserver: use github.com/openshift/apiserver-library-go/pkg/labelselector [#708](https://github.com/openshift/kubernetes/pull/708)
* [Bug 1949105](https://bugzilla.redhat.com/show_bug.cgi?id=1949105): Reenable NetworkPolicy test. [#734](https://github.com/openshift/kubernetes/pull/734)
* [Bug 1957502](https://bugzilla.redhat.com/show_bug.cgi?id=1957502): UPSTREAM: <carry>: correct apirequestcount lock [#735](https://github.com/openshift/kubernetes/pull/735)
* [Bug 1956895](https://bugzilla.redhat.com/show_bug.cgi?id=1956895): UPSTREAM: 101593: kubelet: change cgroup move message to log level 3 [#732](https://github.com/openshift/kubernetes/pull/732)
* [Bug 1956898](https://bugzilla.redhat.com/show_bug.cgi?id=1956898): UPSTREAM: 99748: kubelet: fix log files being overwritten on containe… [#733](https://github.com/openshift/kubernetes/pull/733)
* [Bug 1949612](https://bugzilla.redhat.com/show_bug.cgi?id=1949612): UPSTREAM: 101708: Fix log spam for du failure on pod etc-hosts metrics [#729](https://github.com/openshift/kubernetes/pull/729)
* [Bug 1954696](https://bugzilla.redhat.com/show_bug.cgi?id=1954696): UPSTREAM: <carry>: add apirequestcount useragent [#716](https://github.com/openshift/kubernetes/pull/716)
* [Bug 1952666](https://bugzilla.redhat.com/show_bug.cgi?id=1952666): UPSTREAM: <carry>: management workloads enhancement 741(uint64) [#706](https://github.com/openshift/kubernetes/pull/706)
* [Bug 1953555](https://bugzilla.redhat.com/show_bug.cgi?id=1953555): UPSTREAM: <carry>: Skip GlusterFS tests [#723](https://github.com/openshift/kubernetes/pull/723)
* [Bug 1954770](https://bugzilla.redhat.com/show_bug.cgi?id=1954770): UPSTREAM: 99095: Prevent Kubelet stuck in DiskPressure when imagefs minreclaim is set [#717](https://github.com/openshift/kubernetes/pull/717)
* UPSTREAM: 101280: Bug 1913974: Force NodeUnstageVolume to finish for all distros [#700](https://github.com/openshift/kubernetes/pull/700)
* [Bug 1952224](https://bugzilla.redhat.com/show_bug.cgi?id=1952224): kubelet: do not cleanup volumes if pod is being killed [#709](https://github.com/openshift/kubernetes/pull/709)
* [Bug 1954972](https://bugzilla.redhat.com/show_bug.cgi?id=1954972): openshift-kube-apiserver/admission: fix featuregates resource name [#719](https://github.com/openshift/kubernetes/pull/719)
* [Bug 1954634](https://bugzilla.redhat.com/show_bug.cgi?id=1954634): UPSTREAM: <carry>: honor max users [#689](https://github.com/openshift/kubernetes/pull/689)
* [Bug 1951585](https://bugzilla.redhat.com/show_bug.cgi?id=1951585): Addresses build error pause [#685](https://github.com/openshift/kubernetes/pull/685)
* [Bug 1954638](https://bugzilla.redhat.com/show_bug.cgi?id=1954638): UPSTREAM: <carry>: apirequest count with empty .status.removedInRelease [#715](https://github.com/openshift/kubernetes/pull/715)
* [Bug 1927263](https://bugzilla.redhat.com/show_bug.cgi?id=1927263): UPSTREAM: 99336: kubelet: improve the node informer sync check [#704](https://github.com/openshift/kubernetes/pull/704)
* [Bug 1953555](https://bugzilla.redhat.com/show_bug.cgi?id=1953555): UPSTREAM: <carry>: Skip GlusterFS tests [#647](https://github.com/openshift/kubernetes/pull/647)
* [Bug 1953127](https://bugzilla.redhat.com/show_bug.cgi?id=1953127): Re-enable [Feature:NetworkPolicy] tests which were wrongly disabled in rebase [#655](https://github.com/openshift/kubernetes/pull/655)
* UPSTREAM: <drop>: update openshift/api for old API removal [#702](https://github.com/openshift/kubernetes/pull/702)
* UPSTREAM: <carry>: Provide a new admission plugin to mutate management pods CPUs requests [#632](https://github.com/openshift/kubernetes/pull/632)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): UPSTREAM: 100959: DelegatingAuthenticationOptions: TokenReview reques… [#654](https://github.com/openshift/kubernetes/pull/654)
* [Bug 1948953](https://bugzilla.redhat.com/show_bug.cgi?id=1948953): UPSTREAM: <carry>: Set informer for openstack [#662](https://github.com/openshift/kubernetes/pull/662)
* [Bug 1952333](https://bugzilla.redhat.com/show_bug.cgi?id=1952333): UPSTREAM: 101306: Additional CVE-2021-3121 fix [#699](https://github.com/openshift/kubernetes/pull/699)
* [Bug 1945104](https://bugzilla.redhat.com/show_bug.cgi?id=1945104): UPSTREAM: 101186: Fix RBAC of generic ephemeral volumes controller [#694](https://github.com/openshift/kubernetes/pull/694)
* [Bug 1944631](https://bugzilla.redhat.com/show_bug.cgi?id=1944631): openshift authenticator: don't allow old-style tokens [#667](https://github.com/openshift/kubernetes/pull/667)
* [Bug 1937299](https://bugzilla.redhat.com/show_bug.cgi?id=1937299): Fix mounting partitions on NVMe devices [#661](https://github.com/openshift/kubernetes/pull/661)
* [Bug 1949050](https://bugzilla.redhat.com/show_bug.cgi?id=1949050): UPSTREAM: 101287: Fail fast when image is specified w/o tag [#693](https://github.com/openshift/kubernetes/pull/693)
* [Bug 1949050](https://bugzilla.redhat.com/show_bug.cgi?id=1949050): UPSTREAM: 101337: Remove Limits from scheduling e2e balanced pod reso… [#696](https://github.com/openshift/kubernetes/pull/696)
* [Bug 1951558](https://bugzilla.redhat.com/show_bug.cgi?id=1951558): UPSTREAM: 101093: Fix startupProbe behaviour changed [#687](https://github.com/openshift/kubernetes/pull/687)
* [Bug 1949306](https://bugzilla.redhat.com/show_bug.cgi?id=1949306): UPSTREAM: <carry>: keep apirequestcounts for non-persisted users between updates [#684](https://github.com/openshift/kubernetes/pull/684)
* [Bug 1951042](https://bugzilla.redhat.com/show_bug.cgi?id=1951042): fix crash when killing container fails
 [#682](https://github.com/openshift/kubernetes/pull/682)
* [Bug 1934400](https://bugzilla.redhat.com/show_bug.cgi?id=1934400): bump(apiserver-library-go): scc-admission: don't apply defaultAllowPrivilegeEscalation:false when container is privileged [#673](https://github.com/openshift/kubernetes/pull/673)
* [Bug 1949661](https://bugzilla.redhat.com/show_bug.cgi?id=1949661): UPSTREAM: <carry>: management pinning annotations [#627](https://github.com/openshift/kubernetes/pull/627)
* [Bug 1949306](https://bugzilla.redhat.com/show_bug.cgi?id=1949306): UPSTREAM: <carry>: DeprecatedAPIRequestHandler unit tests [#675](https://github.com/openshift/kubernetes/pull/675)
* [Bug 1949306](https://bugzilla.redhat.com/show_bug.cgi?id=1949306): UPSTREAM: <carry>: DeprecatedAPIRequest Log [#663](https://github.com/openshift/kubernetes/pull/663)
* [Bug 1949050](https://bugzilla.redhat.com/show_bug.cgi?id=1949050): UPSTREAM: 101147: Limit image spec's hash length [#674](https://github.com/openshift/kubernetes/pull/674)
* [Bug 1949721](https://bugzilla.redhat.com/show_bug.cgi?id=1949721): UPSTREAM: 99237: Use the audit ID of a request for better correlation [#672](https://github.com/openshift/kubernetes/pull/672)
* [Bug 1934085](https://bugzilla.redhat.com/show_bug.cgi?id=1934085): UPSTREAM: 100128: [sig-scheduling] SchedulerPreemption|SchedulerPredicates|SchedulerPriorities: adjust some e2e tests to run in a single node cluster scenario [#665](https://github.com/openshift/kubernetes/pull/665)
* BUG 1948703: UPSTREAM: 100678: apf: exempt probes /healthz /livez /readyz [#656](https://github.com/openshift/kubernetes/pull/656)
* UPSTREAM: <carry>: Add Dockerfile to build pause image [#633](https://github.com/openshift/kubernetes/pull/633)
* <carry>: enable CSI migration gates in Attach/Detach controller [#601](https://github.com/openshift/kubernetes/pull/601)
* UPSTREAM: <carry>: bump tag version [#652](https://github.com/openshift/kubernetes/pull/652)
* UPSTREAM: <carry>: Disable CSI migration on OpenStack Cinder [#651](https://github.com/openshift/kubernetes/pull/651)
* KS with preferred host support [#638](https://github.com/openshift/kubernetes/pull/638)
* Rebase 1.21.0 rc.0 [#641](https://github.com/openshift/kubernetes/pull/641)
* Revert "UPSTREAM: 97295: Fix staticcheck in test/integration/{examples,framework}" [#648](https://github.com/openshift/kubernetes/pull/648)
* UPSTREAM: 97295: Fix staticcheck in test/integration/{examples,framework} [#644](https://github.com/openshift/kubernetes/pull/644)
* UPSTREAM: <carry>: rate limit initial watch storm from kubelets on apiserver restart [#629](https://github.com/openshift/kubernetes/pull/629)
* [Bug 1941000](https://bugzilla.redhat.com/show_bug.cgi?id=1941000): get AZ of cinder volume from cinder and not from metadata [#634](https://github.com/openshift/kubernetes/pull/634)
* upstream: 99817: Fix zero-value custom resource validation with go1.16 [#637](https://github.com/openshift/kubernetes/pull/637)
* UPSTREAM: <carry>: kube-apiserver: ignore SIGTERM/INT after the first one [#616](https://github.com/openshift/kubernetes/pull/616)
* improves the apiserver graceful shutdown procedure [#606](https://github.com/openshift/kubernetes/pull/606)
* Ensure multi-az test is run in the serial job [#626](https://github.com/openshift/kubernetes/pull/626)
* UPSTREAM: 96856: e2e network policy enclose IPv6 destinations [#628](https://github.com/openshift/kubernetes/pull/628)
* UPSTREAM: <carry>: provide events, messages, and bodies for probe failures of important pods [#609](https://github.com/openshift/kubernetes/pull/609)
* UPSTREAM: <carry>: allow kubelet to self-authorize metrics scraping [#598](https://github.com/openshift/kubernetes/pull/598)
* UPSTREAM: 91295: kubectl explain: detect resource group in case there… [#608](https://github.com/openshift/kubernetes/pull/608)
* use hardcoded authorizer for metrics [#588](https://github.com/openshift/kubernetes/pull/588)
* UPSTREAM: 96984: APF e2e: wait for steady state before proceeding [#599](https://github.com/openshift/kubernetes/pull/599)
* [Bug 1932097](https://bugzilla.redhat.com/show_bug.cgi?id=1932097): UPSTREAM: 98571: kubelet: Stop probing a pod during graceful shutdown [#594](https://github.com/openshift/kubernetes/pull/594)
* [Bug 1885717](https://bugzilla.redhat.com/show_bug.cgi?id=1885717): UPSTREAM: 98742: Sync completed pods until their containers have been terminated [#593](https://github.com/openshift/kubernetes/pull/593)
* UPSTREAM: 99199: delay serving CRD creates for a few seconds for HA consistency [#587](https://github.com/openshift/kubernetes/pull/587)
* [Bug 1931103](https://bugzilla.redhat.com/show_bug.cgi?id=1931103): UPSTREAM: 96958: kubelet: remove periodic messages from log-level 2 [#584](https://github.com/openshift/kubernetes/pull/584)
* [Bug 1916489](https://bugzilla.redhat.com/show_bug.cgi?id=1916489): (e2e/scheduler) Ensure minimum memory limit in createBalancedPodForNodes [#526](https://github.com/openshift/kubernetes/pull/526)
* [Bug 1908378](https://bugzilla.redhat.com/show_bug.cgi?id=1908378): kubelet: fix create sandbox delete pod race [#580](https://github.com/openshift/kubernetes/pull/580)
* UPSTREAM: 98956: Fix race when KillPod followed by IsPodPendingTermining [#578](https://github.com/openshift/kubernetes/pull/578)
* add failure details for SCC not used [#573](https://github.com/openshift/kubernetes/pull/573)
* [Bug 1897918](https://bugzilla.redhat.com/show_bug.cgi?id=1897918): UPSTREAM: 93861: apiserver: add --permit-address-sharing flag to listen with SO_REUSEADDR [#309](https://github.com/openshift/kubernetes/pull/309)
* [Bug 1876918](https://bugzilla.redhat.com/show_bug.cgi?id=1876918): Move deferred taint cleanup call to ensure all are removed [#513](https://github.com/openshift/kubernetes/pull/513)
* [Bug 1927391](https://bugzilla.redhat.com/show_bug.cgi?id=1927391): UPSTREAM: 98939: fixes race in TestSyncPodsDeletesWhenSourcesAreReady [#564](https://github.com/openshift/kubernetes/pull/564)
* [Bug 1926484](https://bugzilla.redhat.com/show_bug.cgi?id=1926484): UPSTREAM: <carry>: kube-apiserver: ignore SIGTERM/INT after the first one [#558](https://github.com/openshift/kubernetes/pull/558)
* [Bug 1926285](https://bugzilla.redhat.com/show_bug.cgi?id=1926285): UPSTREAM: <carry>: ignore not found errors in status messages [#557](https://github.com/openshift/kubernetes/pull/557)
* [Bug 1925493](https://bugzilla.redhat.com/show_bug.cgi?id=1925493): Enable snapshot tests [#555](https://github.com/openshift/kubernetes/pull/555)
* [Bug 1896558](https://bugzilla.redhat.com/show_bug.cgi?id=1896558): Balance nodes in scheduling e2e [#547](https://github.com/openshift/kubernetes/pull/547)
* [Full changelog](https://github.com/openshift/kubernetes/compare/e8800176876d1b7ee8446b6f6b0bda15910b9095...6b3cbdd0f0b90bc6b28fec91cce5b3c94d7d56a9)


### [insights-operator](https://github.com/openshift/insights-operator/tree/d7b81e65acdb8ef175037c4d4c5dafedf204e6e6)

* Add a workload fingerprint gatherer [#315](https://github.com/openshift/insights-operator/pull/315)
* Recorder refactoring that improves maintainability [#337](https://github.com/openshift/insights-operator/pull/337)
* Fixes changelog script code styling [#341](https://github.com/openshift/insights-operator/pull/341)
* Improve code removing some codesmells [#303](https://github.com/openshift/insights-operator/pull/303)
* Introduce parallelism to unit tests [#306](https://github.com/openshift/insights-operator/pull/306)
* Some charms to Makefile [#305](https://github.com/openshift/insights-operator/pull/305)
* [Bug 1923895](https://bugzilla.redhat.com/show_bug.cgi?id=1923895): Auto changelog [#318](https://github.com/openshift/insights-operator/pull/318)
* Disable instead of Degrade in case of gather fails [#336](https://github.com/openshift/insights-operator/pull/336)
* Do not create the metrics file in case of any error [#334](https://github.com/openshift/insights-operator/pull/334)
* Updating ose-insights-operator builder & base images to be consistent with ART [#333](https://github.com/openshift/insights-operator/pull/333)
* [Bug 1926082](https://bugzilla.redhat.com/show_bug.cgi?id=1926082): Relax the recent log gatherers to avoid degrading during… [#332](https://github.com/openshift/insights-operator/pull/332)
* [Full changelog](https://github.com/openshift/insights-operator/compare/accd49647d70932fe2c6cdfb113a6523053f55d7...d7b81e65acdb8ef175037c4d4c5dafedf204e6e6)


### [ironic](https://github.com/openshift/ironic-image/tree/9bba1014e5fac9b08b9ac2a5062e21f7602a330c)

* [Bug 2088196](https://bugzilla.redhat.com/show_bug.cgi?id=2088196): Backport weak eTag handling fix to OpenShift 4.8 [#276](https://github.com/openshift/ironic-image/pull/276)
* [Bug 2048672](https://bugzilla.redhat.com/show_bug.cgi?id=2048672): Enable vMedia provisioning of Nokia servers [#275](https://github.com/openshift/ironic-image/pull/275)
* [Bug 2023765](https://bugzilla.redhat.com/show_bug.cgi?id=2023765): Compare IPs using the short form of IPv6 address [#233](https://github.com/openshift/ironic-image/pull/233)
* [Bug 2017413](https://bugzilla.redhat.com/show_bug.cgi?id=2017413): [4.8] fix Image provisioning fails with file name too long [#229](https://github.com/openshift/ironic-image/pull/229)
* [Bug 2025755](https://bugzilla.redhat.com/show_bug.cgi?id=2025755): Enable vMedia provisioning of SuperMicro X11/X12 [#237](https://github.com/openshift/ironic-image/pull/237)
* [Bug 2003035](https://bugzilla.redhat.com/show_bug.cgi?id=2003035): Sync sushy to include the latest bugfixes for 4.8 [#214](https://github.com/openshift/ironic-image/pull/214)
* [Bug 1991979](https://bugzilla.redhat.com/show_bug.cgi?id=1991979): [4.8] Sync image with ironic [#206](https://github.com/openshift/ironic-image/pull/206)
* [Bug 1975137](https://bugzilla.redhat.com/show_bug.cgi?id=1975137): [4.8] Sync image with the latest ironic code [#187](https://github.com/openshift/ironic-image/pull/187)
* [Bug 1972213](https://bugzilla.redhat.com/show_bug.cgi?id=1972213): Update python-ironic-lib [#183](https://github.com/openshift/ironic-image/pull/183)
* [Bug 1897415](https://bugzilla.redhat.com/show_bug.cgi?id=1897415): Add cipher_suite_versions config [#177](https://github.com/openshift/ironic-image/pull/177)
* [Bug 1969212](https://bugzilla.redhat.com/show_bug.cgi?id=1969212): remove irmc from enabled_bios_interfaces [#178](https://github.com/openshift/ironic-image/pull/178)
* [Bug 1961717](https://bugzilla.redhat.com/show_bug.cgi?id=1961717): Update remaining out of date deps to Wallaby versions [#175](https://github.com/openshift/ironic-image/pull/175)
* [Bug 1962905](https://bugzilla.redhat.com/show_bug.cgi?id=1962905): Revert "Disable caching live boot iso by default" [#172](https://github.com/openshift/ironic-image/pull/172)
* [Bug 1963068](https://bugzilla.redhat.com/show_bug.cgi?id=1963068): Remove ironic entrypoint [#160](https://github.com/openshift/ironic-image/pull/160)
* [Bug 1961717](https://bugzilla.redhat.com/show_bug.cgi?id=1961717): Update dependencies to Wallaby versions [#170](https://github.com/openshift/ironic-image/pull/170)
* [Bug 1958802](https://bugzilla.redhat.com/show_bug.cgi?id=1958802): Include fix for CVE-2021-21419 [#168](https://github.com/openshift/ironic-image/pull/168)
* [Bug 1953979](https://bugzilla.redhat.com/show_bug.cgi?id=1953979): Disable caching live boot iso by default [#169](https://github.com/openshift/ironic-image/pull/169)
* [Bug 1957976](https://bugzilla.redhat.com/show_bug.cgi?id=1957976): update ironic packages for deploy_steps timeout [#167](https://github.com/openshift/ironic-image/pull/167)
* [Bug 1953979](https://bugzilla.redhat.com/show_bug.cgi?id=1953979): Add parameter to set boot iso source [#164](https://github.com/openshift/ironic-image/pull/164)
* [Bug 1953795](https://bugzilla.redhat.com/show_bug.cgi?id=1953795): Set webserver_verify_ca to certificate path or false [#163](https://github.com/openshift/ironic-image/pull/163)
* [Bug 1953670](https://bugzilla.redhat.com/show_bug.cgi?id=1953670): Increase ESP size [#162](https://github.com/openshift/ironic-image/pull/162)
* [Bug 1948981](https://bugzilla.redhat.com/show_bug.cgi?id=1948981): Update packages to latest for 4.8 [#159](https://github.com/openshift/ironic-image/pull/159)
* Upgrade to latest ironic-lib version [#157](https://github.com/openshift/ironic-image/pull/157)
* Update packages to pick up latest changes [#156](https://github.com/openshift/ironic-image/pull/156)
* [Bug 1888712](https://bugzilla.redhat.com/show_bug.cgi?id=1888712): Support for including vlan interfaces in introspection r… [#154](https://github.com/openshift/ironic-image/pull/154)
* Start using current ironic versions [#150](https://github.com/openshift/ironic-image/pull/150)
* Image sync [#151](https://github.com/openshift/ironic-image/pull/151)
* Updating ironic builder & base images to be consistent with ART [#146](https://github.com/openshift/ironic-image/pull/146)
* Prevent content override of /bin/ when building with imagebuilder [#149](https://github.com/openshift/ironic-image/pull/149)
* Add Support for Fedora-based OKD [#123](https://github.com/openshift/ironic-image/pull/123)
* Take advantage of multi files COPY to simplify Dockerfile [#144](https://github.com/openshift/ironic-image/pull/144)
* Supply a default for COPY args [#147](https://github.com/openshift/ironic-image/pull/147)
* [Full changelog](https://github.com/openshift/ironic-image/compare/1a7f41bb1c2c04ccd06958669a24a08a0bf22258...9bba1014e5fac9b08b9ac2a5062e21f7602a330c)


### [ironic-hardware-inventory-recorder](https://github.com/openshift/ironic-hardware-inventory-recorder-image/tree/b3ecae8d1c6cd84a8784cf3dd17532797af7b724)

* Updating ironic-hardware-inventory-recorder-image builder & base images to be consistent with ART [#504](https://github.com/openshift/ironic-hardware-inventory-recorder-image/pull/504)
* [Full changelog](https://github.com/openshift/ironic-hardware-inventory-recorder-image/compare/564aaca3b4bd95007472d3c3cd8d2d0748778ef4...b3ecae8d1c6cd84a8784cf3dd17532797af7b724)


### [ironic-inspector](https://github.com/openshift/ironic-inspector-image/tree/08761ed526b7817de7c92e0d621698404fca7a05)

* [Bug 2023765](https://bugzilla.redhat.com/show_bug.cgi?id=2023765): For inspector, compare IPs using the short form of IPv6 address [#71](https://github.com/openshift/ironic-inspector-image/pull/71)
* [Bug 1948981](https://bugzilla.redhat.com/show_bug.cgi?id=1948981): Update packages to latest for 4.8 [#64](https://github.com/openshift/ironic-inspector-image/pull/64)
* Upgrade to latest ironic-lib version [#63](https://github.com/openshift/ironic-inspector-image/pull/63)
* Update packages to pick up latest changes [#62](https://github.com/openshift/ironic-inspector-image/pull/62)
* Updating ironic-inspector builder & base images to be consistent with ART [#61](https://github.com/openshift/ironic-inspector-image/pull/61)
* Introduce separate ARG for extra packages list [#59](https://github.com/openshift/ironic-inspector-image/pull/59)
* [Full changelog](https://github.com/openshift/ironic-inspector-image/compare/b6cbf0338ba9f892735d09093ba4732ab3602b43...08761ed526b7817de7c92e0d621698404fca7a05)


### [ironic-ipa-downloader](https://github.com/openshift/ironic-ipa-downloader/tree/ba8783261ea8f21afdcd46eb8a86986597c38c75)

* [Bug 1972213](https://bugzilla.redhat.com/show_bug.cgi?id=1972213): Fix for UEFI bootloader entry [#74](https://github.com/openshift/ironic-ipa-downloader/pull/74)
* [Bug 1963204](https://bugzilla.redhat.com/show_bug.cgi?id=1963204): Update IPA ramdisk image for RHEL 8.4 [#70](https://github.com/openshift/ironic-ipa-downloader/pull/70)
* [Bug 1963204](https://bugzilla.redhat.com/show_bug.cgi?id=1963204): Update IPA ramdisk for RHEL 8.4 [#69](https://github.com/openshift/ironic-ipa-downloader/pull/69)
* [Bug 1955114](https://bugzilla.redhat.com/show_bug.cgi?id=1955114): Update to the latest ipa-ramdisk [#68](https://github.com/openshift/ironic-ipa-downloader/pull/68)
* [Bug 1948513](https://bugzilla.redhat.com/show_bug.cgi?id=1948513): Add support for no_proxy [#65](https://github.com/openshift/ironic-ipa-downloader/pull/65)
* Update ipa-ramdisk to latest for 4.8 [#66](https://github.com/openshift/ironic-ipa-downloader/pull/66)
* Upgrade to latest ipa-ramdisk [#64](https://github.com/openshift/ironic-ipa-downloader/pull/64)
* [Bug 1935419](https://bugzilla.redhat.com/show_bug.cgi?id=1935419): Fix failed to scale worker using virtualmedia on Dell R640 [#62](https://github.com/openshift/ironic-ipa-downloader/pull/62)
* Updating ironic-ipa-downloader builder & base images to be consistent with ART [#60](https://github.com/openshift/ironic-ipa-downloader/pull/60)
* [Full changelog](https://github.com/openshift/ironic-ipa-downloader/compare/f33b14ad0d4f9e4b11b053a4423ebdec62709035...ba8783261ea8f21afdcd46eb8a86986597c38c75)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/dceaf1333634a4aea3f211849e81a6247160122b)

* [Bug 2005805](https://bugzilla.redhat.com/show_bug.cgi?id=2005805): Clear proxy env variables if go would have [#72](https://github.com/openshift/ironic-rhcos-downloader/pull/72)
* [Bug 1973018](https://bugzilla.redhat.com/show_bug.cgi?id=1973018): Fix image incompatibility between 4.7 and 4.8 while upgrade [#51](https://github.com/openshift/ironic-rhcos-downloader/pull/51)
* [Bug 1946079](https://bugzilla.redhat.com/show_bug.cgi?id=1946079): Modify dhcp kernel args based on ipv4/ipv6 [#40](https://github.com/openshift/ironic-rhcos-downloader/pull/40)
* [Bug 1968754](https://bugzilla.redhat.com/show_bug.cgi?id=1968754): Unconditionally remove TMPDIR [#44](https://github.com/openshift/ironic-rhcos-downloader/pull/44)
* [Bug 1969969](https://bugzilla.redhat.com/show_bug.cgi?id=1969969): Use base image from new registry [#42](https://github.com/openshift/ironic-rhcos-downloader/pull/42)
* [Bug 1969969](https://bugzilla.redhat.com/show_bug.cgi?id=1969969): Use updated correct base image [#41](https://github.com/openshift/ironic-rhcos-downloader/pull/41)
* [Bug 1948513](https://bugzilla.redhat.com/show_bug.cgi?id=1948513): Add support for no_proxy [#39](https://github.com/openshift/ironic-rhcos-downloader/pull/39)
* [Bug 1906147](https://bugzilla.redhat.com/show_bug.cgi?id=1906147): Ensure curl uses the CA cert bundle instead of an insecure connection [#37](https://github.com/openshift/ironic-rhcos-downloader/pull/37)
* Remove hardcoded -openstack requirement in image name. [#26](https://github.com/openshift/ironic-rhcos-downloader/pull/26)
* Explicitly exit on retry failure [#33](https://github.com/openshift/ironic-rhcos-downloader/pull/33)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/870afcb36a7ee4a2bef59845981821453b4174dd...dceaf1333634a4aea3f211849e81a6247160122b)


### [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager/tree/d2e40e34f8284d0ac7c4e9133b537baeac07b408)

* [Bug 1972128](https://bugzilla.redhat.com/show_bug.cgi?id=1972128): Updating ironic-static-ip-manager builder & base images to be consistent with ART [#18](https://github.com/openshift/ironic-static-ip-manager/pull/18)
* [Full changelog](https://github.com/openshift/ironic-static-ip-manager/compare/43d640a07582a5aaaa485ea85319bb0721dea251...d2e40e34f8284d0ac7c4e9133b537baeac07b408)


### [jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/ca99ee68dfcf41ff07be2b298483f006994795c1)

* [Bug 2076251](https://bugzilla.redhat.com/show_bug.cgi?id=2076251): Mitigate multiple CVEs [#1435](https://github.com/openshift/jenkins/pull/1435)
* [Bug 2078477](https://bugzilla.redhat.com/show_bug.cgi?id=2078477): set necessary JVM args to allow jenkins JVM to come up on a FIPS node [#1439](https://github.com/openshift/jenkins/pull/1439)
* [Bug 2058750](https://bugzilla.redhat.com/show_bug.cgi?id=2058750): [release-4.8] 2022-02-15 Security Advisory [#1408](https://github.com/openshift/jenkins/pull/1408)
* [Bug 2055911](https://bugzilla.redhat.com/show_bug.cgi?id=2055911): bump openshift-sync to 1.0.53 [#1392](https://github.com/openshift/jenkins/pull/1392)
* [Bug 2044940](https://bugzilla.redhat.com/show_bug.cgi?id=2044940): Jenkins Fixes for CVE-2022-20617 and CVE-2022-20612 [#1370](https://github.com/openshift/jenkins/pull/1370)
* [Bug 2038960](https://bugzilla.redhat.com/show_bug.cgi?id=2038960): bump sync plugin to 1.0.52 [#1362](https://github.com/openshift/jenkins/pull/1362)
* [Bug 2037348](https://bugzilla.redhat.com/show_bug.cgi?id=2037348): Update openshift-sync-plugin to 1.0.51 and various dependant plugins [#1360](https://github.com/openshift/jenkins/pull/1360)
* [Bug 2020614](https://bugzilla.redhat.com/show_bug.cgi?id=2020614): Update Jenkins and plugins per 2021-11 advisory [#1347](https://github.com/openshift/jenkins/pull/1347)
* [Bug 2008114](https://bugzilla.redhat.com/show_bug.cgi?id=2008114): Upgrade Jenkins to 2.289.3 (and related fixes) [#1324](https://github.com/openshift/jenkins/pull/1324)
* [Bug 1972354](https://bugzilla.redhat.com/show_bug.cgi?id=1972354): Bump jenkins version 2.289.2 [#1282](https://github.com/openshift/jenkins/pull/1282)
* [release 4.8] Bug 1960019: Bump credentials plugin to 2.3.19 [#1271](https://github.com/openshift/jenkins/pull/1271)
* [Bug 1956220](https://bugzilla.redhat.com/show_bug.cgi?id=1956220): add proxy system properties as expected by kubernetes-client [#1263](https://github.com/openshift/jenkins/pull/1263)
* [Bug 1952563](https://bugzilla.redhat.com/show_bug.cgi?id=1952563): bump config-file-provider to 3.7.1 [#1264](https://github.com/openshift/jenkins/pull/1264)
* [Bug 1929052](https://bugzilla.redhat.com/show_bug.cgi?id=1929052): Add missing backslash to agent maven dockerfile [#1226](https://github.com/openshift/jenkins/pull/1226)
* [Bug 1940558](https://bugzilla.redhat.com/show_bug.cgi?id=1940558): Update Jenkins to 2.277.3 and disable startup wizard [#1258](https://github.com/openshift/jenkins/pull/1258)
* [Bug 1950175](https://bugzilla.redhat.com/show_bug.cgi?id=1950175): Build with Go 1.16 [#1246](https://github.com/openshift/jenkins/pull/1246)
* [Bug 1950384](https://bugzilla.redhat.com/show_bug.cgi?id=1950384): Revert "Update jenkins to 2.277.2" [#1257](https://github.com/openshift/jenkins/pull/1257)
* [Bug 1947358](https://bugzilla.redhat.com/show_bug.cgi?id=1947358): Update jenkins to 2.277.2 [#1249](https://github.com/openshift/jenkins/pull/1249)
* [Bug 1940558](https://bugzilla.redhat.com/show_bug.cgi?id=1940558): Update matrix-auth plugin to 2.6.6 [#1251](https://github.com/openshift/jenkins/pull/1251)
* Add another folder for agent-maven [#1239](https://github.com/openshift/jenkins/pull/1239)
* [Bug 1928845](https://bugzilla.redhat.com/show_bug.cgi?id=1928845): update openshift-sync plugin [#1227](https://github.com/openshift/jenkins/pull/1227)
* [Bug 1928658](https://bugzilla.redhat.com/show_bug.cgi?id=1928658): update kubernetes-client-api [#1225](https://github.com/openshift/jenkins/pull/1225)
* Updating ose-jenkins-agent-base builder & base images to be consistent with ART [#1215](https://github.com/openshift/jenkins/pull/1215)
* Updating ose-jenkins-agent-nodejs-12 builder & base images to be consistent with ART [#1218](https://github.com/openshift/jenkins/pull/1218)
* Updating ose-jenkins-agent-nodejs-10 builder & base images to be consistent with ART [#1219](https://github.com/openshift/jenkins/pull/1219)
* Updating ose-jenkins-agent-maven builder & base images to be consistent with ART [#1217](https://github.com/openshift/jenkins/pull/1217)
* Updating openshift-jenkins-2 builder & base images to be consistent with ART [#1216](https://github.com/openshift/jenkins/pull/1216)
* Upgrade Jenkins to 2.263.3 [#1207](https://github.com/openshift/jenkins/pull/1207)
* [Full changelog](https://github.com/openshift/jenkins/compare/1524f28a04cf6882177968c95b11a8018596e05c...ca99ee68dfcf41ff07be2b298483f006994795c1)


### [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter/tree/bfffea3bf70fc5203814886f6483a569f2f22c87)

* [Bug 2002281](https://bugzilla.redhat.com/show_bug.cgi?id=2002281): 4.8: pkg/resourceprovider: guard from negative metrics [#55](https://github.com/openshift/k8s-prometheus-adapter/pull/55)
* [Bug 1920700](https://bugzilla.redhat.com/show_bug.cgi?id=1920700): Bump prometheus-adapter to v0.8.4 [#47](https://github.com/openshift/k8s-prometheus-adapter/pull/47)
* Updating ose-prometheus-adapter builder & base images to be consistent with ART [#46](https://github.com/openshift/k8s-prometheus-adapter/pull/46)
* [Bug 1914994](https://bugzilla.redhat.com/show_bug.cgi?id=1914994): Bump k8s-prometheus-adapter to v0.8.3 [#45](https://github.com/openshift/k8s-prometheus-adapter/pull/45)
* Updating ose-prometheus-adapter builder & base images to be consistent with ART [#44](https://github.com/openshift/k8s-prometheus-adapter/pull/44)
* [Full changelog](https://github.com/openshift/k8s-prometheus-adapter/compare/212d80b4bd35fc6f19ec9ec537d0261a2a300cfd...bfffea3bf70fc5203814886f6483a569f2f22c87)


### [keepalived-ipfailover](https://github.com/openshift/images/tree/ad38e116f3533e0e78621a2887d8b70cde7cba31)

* [Bug 1960035](https://bugzilla.redhat.com/show_bug.cgi?id=1960035): Add iptables shims to ipfailover-keepalived image [#89](https://github.com/openshift/images/pull/89)
* pod: build with Go 1.16 [#87](https://github.com/openshift/images/pull/87)
* Use print() function in both Python 2 and Python 3 [#9](https://github.com/openshift/images/pull/9)
* Updating ose-egress-http-proxy builder & base images to be consistent with ART [#79](https://github.com/openshift/images/pull/79)
* Updating openshift-enterprise-egress-router builder & base images to be consistent with ART [#81](https://github.com/openshift/images/pull/81)
* Updating openshift-enterprise-pod builder & base images to be consistent with ART [#80](https://github.com/openshift/images/pull/80)
* Updating openshift-enterprise-egress-dns-proxy builder & base images to be consistent with ART [#83](https://github.com/openshift/images/pull/83)
* Updating openshift-enterprise-keepalived-ipfailover builder & base images to be consistent with ART [#82](https://github.com/openshift/images/pull/82)
* egress/dns-proxy: Switch to haproxy22 [#84](https://github.com/openshift/images/pull/84)
* Updating openshift-enterprise-base builder & base images to be consistent with ART [#77](https://github.com/openshift/images/pull/77)
* pod process container: drop unneeded log line [#65](https://github.com/openshift/images/pull/65)
* ipfailover: Add component to OWNERS [#62](https://github.com/openshift/images/pull/62)
* [Full changelog](https://github.com/openshift/images/compare/0e45f638fbf5fa9e9bdb507d81b2cb9f12fadbaf...ad38e116f3533e0e78621a2887d8b70cde7cba31)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/e709078839d1f216ac1de476c1a26de50b07ed04)

* Remove some binaries that accidentally got committed [#398](https://github.com/openshift/sdn/pull/398)
* [Bug 2027397](https://bugzilla.redhat.com/show_bug.cgi?id=2027397): [EgressIP] move ct(commit) action from OVS group to flow [#377](https://github.com/openshift/sdn/pull/377)
* [Bug 2014166](https://bugzilla.redhat.com/show_bug.cgi?id=2014166): Remove locking from EgressIPTracker.Ping [#362](https://github.com/openshift/sdn/pull/362)
* [Bug 2002290](https://bugzilla.redhat.com/show_bug.cgi?id=2002290): [4.8] proxy: don't re-check every userspace proxy rule on every change [#347](https://github.com/openshift/sdn/pull/347)
* [Bug 1987239](https://bugzilla.redhat.com/show_bug.cgi?id=1987239): when assigning and releasing egressIP try more than once before failing [#326](https://github.com/openshift/sdn/pull/326)
* [Bug 1999946](https://bugzilla.redhat.com/show_bug.cgi?id=1999946): improve SDN's OVS healthcheck and logging [#341](https://github.com/openshift/sdn/pull/341)
* [Bug 1995871](https://bugzilla.redhat.com/show_bug.cgi?id=1995871): Disable conntrack for vxlan traffic [#337](https://github.com/openshift/sdn/pull/337)
* Updating ose-sdn builder & base images to be consistent with ART [#255](https://github.com/openshift/sdn/pull/255)
* Updating kube-proxy builder & base images to be consistent with ART [#256](https://github.com/openshift/sdn/pull/256)
* [Bug 1972864](https://bugzilla.redhat.com/show_bug.cgi?id=1972864): [4.8] fix local-with-fallback [#322](https://github.com/openshift/sdn/pull/322)
* [Bug 1948436](https://bugzilla.redhat.com/show_bug.cgi?id=1948436): remove vxlan_monitor and OVS packet stat parsing [#311](https://github.com/openshift/sdn/pull/311)
* [Bug 1959711](https://bugzilla.redhat.com/show_bug.cgi?id=1959711): Reverse table order for egress IP and egress network policy set up [#299](https://github.com/openshift/sdn/pull/299)
* [Bug 1953257](https://bugzilla.redhat.com/show_bug.cgi?id=1953257): Fix invalid egress IP assignments in sdn-controller [#295](https://github.com/openshift/sdn/pull/295)
* [Bug 1960284](https://bugzilla.redhat.com/show_bug.cgi?id=1960284): Bump openshift/kubernetes for "local-with-fallback" [#310](https://github.com/openshift/sdn/pull/310)
* [Bug 1964625](https://bugzilla.redhat.com/show_bug.cgi?id=1964625): NETID duplicate check is only required in NetworkPolicy Mode [#307](https://github.com/openshift/sdn/pull/307)
* [Bug 1964059](https://bugzilla.redhat.com/show_bug.cgi?id=1964059): rebase to latest sdn-4.8-kubernetes-1.21.1 [#305](https://github.com/openshift/sdn/pull/305)
* [Bug 1928851](https://bugzilla.redhat.com/show_bug.cgi?id=1928851): prevent manually creating netns with existing NetID [#294](https://github.com/openshift/sdn/pull/294)
* [Bug 1879077](https://bugzilla.redhat.com/show_bug.cgi?id=1879077): ValidateMTU: check only the interface that holds the node ip [#289](https://github.com/openshift/sdn/pull/289)
* [Bug 1952079](https://bugzilla.redhat.com/show_bug.cgi?id=1952079): Revendor kubernetes to sdn-4.8-kubernetes-1.21.0-rc.0 [#267](https://github.com/openshift/sdn/pull/267)
* [Bug 1953530](https://bugzilla.redhat.com/show_bug.cgi?id=1953530): Fix flaky unit test `TestEgressCIDRAllocation` [#293](https://github.com/openshift/sdn/pull/293)
* [Bug 1948999](https://bugzilla.redhat.com/show_bug.cgi?id=1948999): Remove check enforcing single egress IP for automatic assignment [#287](https://github.com/openshift/sdn/pull/287)
* [Bug 1952079](https://bugzilla.redhat.com/show_bug.cgi?id=1952079): Don't require EndpointSlice to be disabled [#290](https://github.com/openshift/sdn/pull/290)
* egress IP traffic load-balancing [#277](https://github.com/openshift/sdn/pull/277)
* Add a unit test to ensure we don't change flows without changing ruleVersion [#276](https://github.com/openshift/sdn/pull/276)
* Fix multiple race conditions in networkpolicy_test.go [#282](https://github.com/openshift/sdn/pull/282)
* Add a networkpolicy test with empty namespaceSelector [#278](https://github.com/openshift/sdn/pull/278)
* [Bug 1926931](https://bugzilla.redhat.com/show_bug.cgi?id=1926931): Fix incorrect unmonitoring of egress nodes [#275](https://github.com/openshift/sdn/pull/275)
* Support allow-from-router feature using openshift-host-network namespace [#262](https://github.com/openshift/sdn/pull/262)
* [Bug 1933711](https://bugzilla.redhat.com/show_bug.cgi?id=1933711): EgressDNS: Keep short lived records at most 30s [#263](https://github.com/openshift/sdn/pull/263)
* [Bug 1910378](https://bugzilla.redhat.com/show_bug.cgi?id=1910378): networkpolicy: pass traffic through NAT to handle possible tuple collisions [#269](https://github.com/openshift/sdn/pull/269)
* [Bug 1924527](https://bugzilla.redhat.com/show_bug.cgi?id=1924527): CVE-2021-3121 gogo/protobuf lacks certain index validation [#260](https://github.com/openshift/sdn/pull/260)
* [Bug 1919737](https://bugzilla.redhat.com/show_bug.cgi?id=1919737): Prefer local endpoint for cluster DNS service [#254](https://github.com/openshift/sdn/pull/254)
* [Bug 1850060](https://bugzilla.redhat.com/show_bug.cgi?id=1850060): Make DNS queries for egress network policy async [#251](https://github.com/openshift/sdn/pull/251)
* Be less melodramatic when restarting due to OVS restart [#248](https://github.com/openshift/sdn/pull/248)
* [Full changelog](https://github.com/openshift/sdn/compare/0e051e55d52b142d14254d9fcf4f14543a8b71eb...e709078839d1f216ac1de476c1a26de50b07ed04)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/813c3da7222a4ccc95ef3827cd54b0ce93a8cbe5)

* Bump v0.9.0 [#45](https://github.com/openshift/kube-rbac-proxy/pull/45)
* Updating kube-rbac-proxy builder & base images to be consistent with ART [#44](https://github.com/openshift/kube-rbac-proxy/pull/44)
* add hardcoded authorizer to approve /metrics for metrics scraper [#43](https://github.com/openshift/kube-rbac-proxy/pull/43)
* Updating kube-rbac-proxy builder & base images to be consistent with ART [#41](https://github.com/openshift/kube-rbac-proxy/pull/41)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/14c288e6d19578d96e502def75995b882f1c9b37...813c3da7222a4ccc95ef3827cd54b0ce93a8cbe5)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/947166293195d115500d4479c0c40c8c01a25ad0)

* [Bug 1950908](https://bugzilla.redhat.com/show_bug.cgi?id=1950908): Add wildcard option to labels-metric-allow-list [#51](https://github.com/openshift/kube-state-metrics/pull/51)
* [Bug 1924446](https://bugzilla.redhat.com/show_bug.cgi?id=1924446): Bump kube-state-metrics to v2.0.0 [#49](https://github.com/openshift/kube-state-metrics/pull/49)
* Bump kube-state-metrics to be synced with release-2.0 branch [#48](https://github.com/openshift/kube-state-metrics/pull/48)
* Updating kube-state-metrics builder & base images to be consistent with ART [#46](https://github.com/openshift/kube-state-metrics/pull/46)
* Updating kube-state-metrics builder & base images to be consistent with ART [#44](https://github.com/openshift/kube-state-metrics/pull/44)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/04bff708e05190cbc18182a2dbb8a10930433c1d...947166293195d115500d4479c0c40c8c01a25ad0)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/38e0105c9fc5367a2e0bd22446b10a1f65fcb416)

* Updating ose-kube-storage-version-migrator images to be consistent with ART [#174](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/174)
* [Bug 1947801](https://bugzilla.redhat.com/show_bug.cgi?id=1947801): UPSTREAM: 93: Move metadata.name description into yaml-patch to move around inability of kubebuilder to express that [#177](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/177)
* [Bug 1947801](https://bugzilla.redhat.com/show_bug.cgi?id=1947801): Add doc.go [#176](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/176)
* [Bug 1947801](https://bugzilla.redhat.com/show_bug.cgi?id=1947801): bump(build-machinery-go) [#175](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/175)
* [Bug 1947801](https://bugzilla.redhat.com/show_bug.cgi?id=1947801): Rebase to upstream 82e8a25 [#173](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/173)
* [Bug 1947801](https://bugzilla.redhat.com/show_bug.cgi?id=1947801): ci-operator: switch to Golang 1.15 before 1.21.0 bump [#172](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/172)
* [Bug 1947801](https://bugzilla.redhat.com/show_bug.cgi?id=1947801): Pre-rebase: squash commits [#171](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/171)
* Updating ose-kube-storage-version-migrator builder & base images to be consistent with ART [#168](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/168)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/329a4b06361cef8d70c8424d57466a6f5bcd4a59...38e0105c9fc5367a2e0bd22446b10a1f65fcb416)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/ddd2c3adeac4d31711a7949c347f444ee4fdce6d)

* [Bug 2037745](https://bugzilla.redhat.com/show_bug.cgi?id=2037745): Improve retrieval of Trunks info [#621](https://github.com/openshift/kuryr-kubernetes/pull/621)
* [Bug 2028307](https://bugzilla.redhat.com/show_bug.cgi?id=2028307): [4.8] Do not restart Kuryr-Controller when LB is stuck in PENDING_UPDATE state or Neutron port is DOWN [#607](https://github.com/openshift/kuryr-kubernetes/pull/607)
* [Bug 2028274](https://bugzilla.redhat.com/show_bug.cgi?id=2028274): Ensure DOWN subports are cleaned up [#606](https://github.com/openshift/kuryr-kubernetes/pull/606)
* [Bug 2022722](https://bugzilla.redhat.com/show_bug.cgi?id=2022722): Make completed Pods Ports reusable [#600](https://github.com/openshift/kuryr-kubernetes/pull/600)
* [Bug 2018232](https://bugzilla.redhat.com/show_bug.cgi?id=2018232): Update TOX_CONSTRAINTS_FILE for stable/xena [#587](https://github.com/openshift/kuryr-kubernetes/pull/587)
* [Bug 1995013](https://bugzilla.redhat.com/show_bug.cgi?id=1995013): Remove ep_slices from klb on endpoint delete event [#550](https://github.com/openshift/kuryr-kubernetes/pull/550)
* [Bug 1989550](https://bugzilla.redhat.com/show_bug.cgi?id=1989550): Increase keystoneauth's connection pool size [#546](https://github.com/openshift/kuryr-kubernetes/pull/546)
* [Bug 1969397](https://bugzilla.redhat.com/show_bug.cgi?id=1969397): Workaround OVN bug causing subports to be DOWN [#521](https://github.com/openshift/kuryr-kubernetes/pull/521)
* [Bug 1968436](https://bugzilla.redhat.com/show_bug.cgi?id=1968436): Fix Listener timeouts update [#520](https://github.com/openshift/kuryr-kubernetes/pull/520)
* [Bug 1933880](https://bugzilla.redhat.com/show_bug.cgi?id=1933880): Ignore 422 Unprocessable Entity on KLB patching [#517](https://github.com/openshift/kuryr-kubernetes/pull/517)
* [Bug 1957315](https://bugzilla.redhat.com/show_bug.cgi?id=1957315): Fix readiness quota check [#514](https://github.com/openshift/kuryr-kubernetes/pull/514)
* [Bug 1920532](https://bugzilla.redhat.com/show_bug.cgi?id=1920532): Fix NPs for OVN LBs with hairpin traffic [#510](https://github.com/openshift/kuryr-kubernetes/pull/510)
* [Bug 1949480](https://bugzilla.redhat.com/show_bug.cgi?id=1949480): Fix constant update of Listeners timeout [#503](https://github.com/openshift/kuryr-kubernetes/pull/503)
* [Bug 1933880](https://bugzilla.redhat.com/show_bug.cgi?id=1933880): Fixing bug, Kuryr-Controller crashes when it's missing the status [#499](https://github.com/openshift/kuryr-kubernetes/pull/499)
* [Bug 1921878](https://bugzilla.redhat.com/show_bug.cgi?id=1921878): Include service subnet to be open for namespaceSelector set to all. [#498](https://github.com/openshift/kuryr-kubernetes/pull/498)
* Rebase openshift/kuryr-kubernetes from https://opendev.org/openstack/kuryr-kubernetes [#497](https://github.com/openshift/kuryr-kubernetes/pull/497)
* Handle default Kubernetes Service [#491](https://github.com/openshift/kuryr-kubernetes/pull/491)
* Rebase openshift/kuryr-kubernetes from https://opendev.org/openstack/kuryr-kubernetes [#495](https://github.com/openshift/kuryr-kubernetes/pull/495)
* Rebase openshift/kuryr-kubernetes from https://opendev.org/openstack/kuryr-kubernetes [#493](https://github.com/openshift/kuryr-kubernetes/pull/493)
* Update OWNERS [#494](https://github.com/openshift/kuryr-kubernetes/pull/494)
* [Bug 1936342](https://bugzilla.redhat.com/show_bug.cgi?id=1936342): kuryr-controller restarting after 3 days cluster running - pools without members [#492](https://github.com/openshift/kuryr-kubernetes/pull/492)
* Updating kuryr-cni builder & base images to be consistent with ART [#486](https://github.com/openshift/kuryr-kubernetes/pull/486)
* Rebase openshift/kuryr-kubernetes from https://opendev.org/openstack/kuryr-kubernetes [#483](https://github.com/openshift/kuryr-kubernetes/pull/483)
* Rebase openshift/kuryr-kubernetes from https://opendev.org/openstack/kuryr-kubernetes [#479](https://github.com/openshift/kuryr-kubernetes/pull/479)
* Rebase openshift/kuryr-kubernetes from https://opendev.org/openstack/kuryr-kubernetes [#477](https://github.com/openshift/kuryr-kubernetes/pull/477)
* [Bug 1937459](https://bugzilla.redhat.com/show_bug.cgi?id=1937459): Fix Subnet retrival when creating Service without Selector [#476](https://github.com/openshift/kuryr-kubernetes/pull/476)
* Rebase from OpenStack master [#475](https://github.com/openshift/kuryr-kubernetes/pull/475)
* [Bug 1924075](https://bugzilla.redhat.com/show_bug.cgi?id=1924075): Skip pool pre population if no Status is present on CRD [#470](https://github.com/openshift/kuryr-kubernetes/pull/470)
* [Bug 1919398](https://bugzilla.redhat.com/show_bug.cgi?id=1919398): Do not default protocol to TCP for allow-all NPs [#461](https://github.com/openshift/kuryr-kubernetes/pull/461)
* [Bug 1921878](https://bugzilla.redhat.com/show_bug.cgi?id=1921878): Narrow connection to the cluster only on namespaceSelector [#459](https://github.com/openshift/kuryr-kubernetes/pull/459)
* [Bug 1927244](https://bugzilla.redhat.com/show_bug.cgi?id=1927244): OpenShift: Add configured subnets to the detected [#454](https://github.com/openshift/kuryr-kubernetes/pull/454)
* Removing the upgrade code from Kuryr-Kubernetes repo [#453](https://github.com/openshift/kuryr-kubernetes/pull/453)
* [Bug 1924075](https://bugzilla.redhat.com/show_bug.cgi?id=1924075): Fix port pools [#452](https://github.com/openshift/kuryr-kubernetes/pull/452)
* Rebase openshift/kuryr-kubernetes from https://opendev.org/openstack/kuryr-kubernetes [#448](https://github.com/openshift/kuryr-kubernetes/pull/448)
* Updating kuryr-cni builder & base images to be consistent with ART [#443](https://github.com/openshift/kuryr-kubernetes/pull/443)
* Updating kuryr-controller builder & base images to be consistent with ART [#442](https://github.com/openshift/kuryr-kubernetes/pull/442)
* [Bug 1924917](https://bugzilla.redhat.com/show_bug.cgi?id=1924917): Get trunks more diligently [#446](https://github.com/openshift/kuryr-kubernetes/pull/446)
* Rebase from OpenStack's master [#444](https://github.com/openshift/kuryr-kubernetes/pull/444)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/72de60e9d56489a9c3874a1592fb3382f9eb93c6...ddd2c3adeac4d31711a7949c347f444ee4fdce6d)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/9542e5ac08b7731a37d20c881695aab904201c22)

* Updating ose-libvirt-machine-controllers builder & base images to be consistent with ART [#217](https://github.com/openshift/cluster-api-provider-libvirt/pull/217)
* [Bug 1936488](https://bugzilla.redhat.com/show_bug.cgi?id=1936488): Update MAO and set metrics on :8081 address [#218](https://github.com/openshift/cluster-api-provider-libvirt/pull/218)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/eb819cb931e86f66853ad24b919e251369ec83c1...9542e5ac08b7731a37d20c881695aab904201c22)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/edc3e864006486a7a85e2e5e4297e307339e9f0e)

* [Bug 2048496](https://bugzilla.redhat.com/show_bug.cgi?id=2048496): Fix user-agent in vCenter sessions list [#984](https://github.com/openshift/machine-api-operator/pull/984)
* [Bug 2027896](https://bugzilla.redhat.com/show_bug.cgi?id=2027896): [release-4.8] Add support for Azure Marketplace Images [#970](https://github.com/openshift/machine-api-operator/pull/970)
* [Bug 2026562](https://bugzilla.redhat.com/show_bug.cgi?id=2026562): MaxUnhealthy should not be a string type [#962](https://github.com/openshift/machine-api-operator/pull/962)
* [Bug 2022838](https://bugzilla.redhat.com/show_bug.cgi?id=2022838): GCP CI runs are complaining about APIs not being enabled [#953](https://github.com/openshift/machine-api-operator/pull/953)
* [Bug 1999585](https://bugzilla.redhat.com/show_bug.cgi?id=1999585): [release-4.8] add alert for machine with long deletion phase [#908](https://github.com/openshift/machine-api-operator/pull/908)
* [Bug 2000038](https://bugzilla.redhat.com/show_bug.cgi?id=2000038): Respect MaxUnhealthy limit for external remediation [#910](https://github.com/openshift/machine-api-operator/pull/910)
* [Bug 1993117](https://bugzilla.redhat.com/show_bug.cgi?id=1993117): Make sure nodes don't have attached volumes before vm deletion [#903](https://github.com/openshift/machine-api-operator/pull/903)
* [Bug 1977634](https://bugzilla.redhat.com/show_bug.cgi?id=1977634): Prevent machine from stucking in Deleting phase on vSphere if related node object not found [#896](https://github.com/openshift/machine-api-operator/pull/896)
* Updating ose-machine-api-operator builder & base images to be consistent with ART [#796](https://github.com/openshift/machine-api-operator/pull/796)
* [Bug 1973233](https://bugzilla.redhat.com/show_bug.cgi?id=1973233): [release-4.8] remove kubevirt images and references [#876](https://github.com/openshift/machine-api-operator/pull/876)
* [Bug 1967662](https://bugzilla.redhat.com/show_bug.cgi?id=1967662): change provider config to look at PlatformStatus.Type [#868](https://github.com/openshift/machine-api-operator/pull/868)
* [Bug 1948719](https://bugzilla.redhat.com/show_bug.cgi?id=1948719): update controller-runtime dependency [#866](https://github.com/openshift/machine-api-operator/pull/866)
* [Bug 1939054](https://bugzilla.redhat.com/show_bug.cgi?id=1939054): Disable startup timeout for Spot MHC [#830](https://github.com/openshift/machine-api-operator/pull/830)
* [Bug 1954177](https://bugzilla.redhat.com/show_bug.cgi?id=1954177): add constant variables back into machine v1beta1 [#862](https://github.com/openshift/machine-api-operator/pull/862)
* [Bug 1954177](https://bugzilla.redhat.com/show_bug.cgi?id=1954177): update AdmissionReviewVersions to v1 [#855](https://github.com/openshift/machine-api-operator/pull/855)
* [Bug 1918101](https://bugzilla.redhat.com/show_bug.cgi?id=1918101): Fix deleting for machine stucked in provisioning state on vSphere [#854](https://github.com/openshift/machine-api-operator/pull/854)
* [Bug 1955554](https://bugzilla.redhat.com/show_bug.cgi?id=1955554): Webhook filter should check for both mutating and validating webhooks [#860](https://github.com/openshift/machine-api-operator/pull/860)
* Add management workload annotations [#844](https://github.com/openshift/machine-api-operator/pull/844)
* [Bug 1925276](https://bugzilla.redhat.com/show_bug.cgi?id=1925276): Make sure phase is always set before creation [#857](https://github.com/openshift/machine-api-operator/pull/857)
* [Bug 1951029](https://bugzilla.redhat.com/show_bug.cgi?id=1951029): Drainer panics on missing context for node patch [#851](https://github.com/openshift/machine-api-operator/pull/851)
* [Bug 1910318](https://bugzilla.redhat.com/show_bug.cgi?id=1910318): Ensure conditions are correctly copied before annotations are patched [#849](https://github.com/openshift/machine-api-operator/pull/849)
* [Bug 1880757](https://bugzilla.redhat.com/show_bug.cgi?id=1880757): Add missing permission for target group de-registration [#835](https://github.com/openshift/machine-api-operator/pull/835)
* [Bug 1948719](https://bugzilla.redhat.com/show_bug.cgi?id=1948719): update dependencies to 1.21 [#848](https://github.com/openshift/machine-api-operator/pull/848)
* [Bug 1948471](https://bugzilla.redhat.com/show_bug.cgi?id=1948471): Add release inclusion annotations to external remediation cluster role [#847](https://github.com/openshift/machine-api-operator/pull/847)
* 4019 fencing  backport mhc external remediation template [#795](https://github.com/openshift/machine-api-operator/pull/795)
* Vsphere enable autoscaling from/to zero [#839](https://github.com/openshift/machine-api-operator/pull/839)
* Fix GCP default image name [#842](https://github.com/openshift/machine-api-operator/pull/842)
* Update hacking-guide.md with imagebuilder troubleshooting instructions [#822](https://github.com/openshift/machine-api-operator/pull/822)
* Update GCP default disk image to include ignition v3 [#833](https://github.com/openshift/machine-api-operator/pull/833)
* Don't mount service account token in termination daemonset [#836](https://github.com/openshift/machine-api-operator/pull/836)
* [Bug 1883993](https://bugzilla.redhat.com/show_bug.cgi?id=1883993): vSphere, detach virtual disks before virtual machine destroy if node not available [#815](https://github.com/openshift/machine-api-operator/pull/815)
* BUG 1932154: add warning for missing IAMInstanceProfile in AWS [#824](https://github.com/openshift/machine-api-operator/pull/824)
* [Bug 1910318](https://bugzilla.redhat.com/show_bug.cgi?id=1910318): Ensure original conditions aren't mutated during reconcile [#829](https://github.com/openshift/machine-api-operator/pull/829)
* Add service account names to credentials request manifest [#802](https://github.com/openshift/machine-api-operator/pull/802)
* [Bug 1938493](https://bugzilla.redhat.com/show_bug.cgi?id=1938493): Revert "Add resource limit to pods" [#827](https://github.com/openshift/machine-api-operator/pull/827)
* install/0000_90_machine-api-operator_04_alertrules: Drop MachineAPIOperatorDown [#826](https://github.com/openshift/machine-api-operator/pull/826)
* [Bug 1923823](https://bugzilla.redhat.com/show_bug.cgi?id=1923823): Improve TLS configuration for Kube RBAC Proxy [#823](https://github.com/openshift/machine-api-operator/pull/823)
* Add resource limit to pods [#825](https://github.com/openshift/machine-api-operator/pull/825)
* remove code [#791](https://github.com/openshift/machine-api-operator/pull/791)
* [Bug 1921892](https://bugzilla.redhat.com/show_bug.cgi?id=1921892): Ensure manager stops before ending the test [#809](https://github.com/openshift/machine-api-operator/pull/809)
* [Bug 1910318](https://bugzilla.redhat.com/show_bug.cgi?id=1910318): [OCPCLOUD-931] Add condition to show actuator exists output on machine status [#810](https://github.com/openshift/machine-api-operator/pull/810)
* [Bug 1934216](https://bugzilla.redhat.com/show_bug.cgi?id=1934216): reuse mgr client in webhooks [#817](https://github.com/openshift/machine-api-operator/pull/817)
* Ensure daemonset conforms to standards [#811](https://github.com/openshift/machine-api-operator/pull/811)
* : Aggregate operator errors before failing to sync [#691](https://github.com/openshift/machine-api-operator/pull/691)
* Enable Junit reports for CI unit tests runs [#806](https://github.com/openshift/machine-api-operator/pull/806)
* Update capz for disk encryption [#801](https://github.com/openshift/machine-api-operator/pull/801)
* Makefile fix [#799](https://github.com/openshift/machine-api-operator/pull/799)
* fix the link to capbm [#785](https://github.com/openshift/machine-api-operator/pull/785)
* Return a valid error message when multiple templates are found [#794](https://github.com/openshift/machine-api-operator/pull/794)
* Machine: Set ErrorReason when entering Failed phase [#701](https://github.com/openshift/machine-api-operator/pull/701)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/8578fefdadf45cde741447871ca0ccf9a74451c5...edc3e864006486a7a85e2e5e4297e307339e9f0e)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/58e73629d83330deae8b829b890b004de22b836b)

* [Bug 2057544](https://bugzilla.redhat.com/show_bug.cgi?id=2057544): daemon: Explicitly start rpm-ostreed, restart if we detect active txn [#2967](https://github.com/openshift/machine-config-operator/pull/2967)
* [Bug 2062655](https://bugzilla.redhat.com/show_bug.cgi?id=2062655): Fix bad cherry-pick at 9f7a7eb96 [#3065](https://github.com/openshift/machine-config-operator/pull/3065)
* [Bug 2062655](https://bugzilla.redhat.com/show_bug.cgi?id=2062655): Improvements for configure-ovs script [#3004](https://github.com/openshift/machine-config-operator/pull/3004)
* [Bug 2025396](https://bugzilla.redhat.com/show_bug.cgi?id=2025396): annotate rendered config with OCP version [#2972](https://github.com/openshift/machine-config-operator/pull/2972)
* [Bug 2059330](https://bugzilla.redhat.com/show_bug.cgi?id=2059330): ovs-configuration: use lower than NM default ethernet route metric [#2974](https://github.com/openshift/machine-config-operator/pull/2974)
* [Bug 2058789](https://bugzilla.redhat.com/show_bug.cgi?id=2058789): Prepend to search domains instead of replacing [#2970](https://github.com/openshift/machine-config-operator/pull/2970)
* [Bug 2028854](https://bugzilla.redhat.com/show_bug.cgi?id=2028854): Backport of SystemMemoryExceedsReservation alert rule [#2956](https://github.com/openshift/machine-config-operator/pull/2956)
* [Bug 2032996](https://bugzilla.redhat.com/show_bug.cgi?id=2032996): fixes 1 to 1 containerruntime config mapping [#2877](https://github.com/openshift/machine-config-operator/pull/2877)
* [Bug 2053720](https://bugzilla.redhat.com/show_bug.cgi?id=2053720): Avoid dynamically allocated port range for haproxy [#2951](https://github.com/openshift/machine-config-operator/pull/2951)
* [Bug 2028025](https://bugzilla.redhat.com/show_bug.cgi?id=2028025): [Release 4.8] daemon: make cordon/uncordon more robust and better logging [#2853](https://github.com/openshift/machine-config-operator/pull/2853)
* [Bug 2017493](https://bugzilla.redhat.com/show_bug.cgi?id=2017493): configure-ovs: Persist addr-gen-mode for ipv6 connections [#2810](https://github.com/openshift/machine-config-operator/pull/2810)
* [Bug 2021073](https://bugzilla.redhat.com/show_bug.cgi?id=2021073): [ipi onprem] cherry pick Keepalived default ingress scripts fixes [#2826](https://github.com/openshift/machine-config-operator/pull/2826)
* [Bug 2026085](https://bugzilla.redhat.com/show_bug.cgi?id=2026085): Send WARN message to stderr [#2836](https://github.com/openshift/machine-config-operator/pull/2836)
* [Bug 2024511](https://bugzilla.redhat.com/show_bug.cgi?id=2024511): [release-4.8] [on-prem] Manual backporting of keepalived arp retries [#2831](https://github.com/openshift/machine-config-operator/pull/2831)
* [Bug 2016275](https://bugzilla.redhat.com/show_bug.cgi?id=2016275): [on-prem] Set coredns bufsize to 512 [#2807](https://github.com/openshift/machine-config-operator/pull/2807)
* [Bug 2011083](https://bugzilla.redhat.com/show_bug.cgi?id=2011083): templates: Silence audit events from container infra by default [#2793](https://github.com/openshift/machine-config-operator/pull/2793)
* [Bug 1985736](https://bugzilla.redhat.com/show_bug.cgi?id=1985736): [ON-PREM] HAProxy - Verify that NM prepender script was applied using initcontainer [#2692](https://github.com/openshift/machine-config-operator/pull/2692)
* [Bug 2000958](https://bugzilla.redhat.com/show_bug.cgi?id=2000958): fixes 1 to 1 kubelet config mapping [#2753](https://github.com/openshift/machine-config-operator/pull/2753)
* [Bug 1999531](https://bugzilla.redhat.com/show_bug.cgi?id=1999531): Set timeoutSeconds for keepalived liveness probe [#2741](https://github.com/openshift/machine-config-operator/pull/2741)
* [Bug 2004122](https://bugzilla.redhat.com/show_bug.cgi?id=2004122): Set ovs syslog level to info [#2762](https://github.com/openshift/machine-config-operator/pull/2762)
* [Bug 1973873](https://bugzilla.redhat.com/show_bug.cgi?id=1973873): match tlsSecurityProfile  doc with kubelet.conf file [#2628](https://github.com/openshift/machine-config-operator/pull/2628)
* [Bug 2000500](https://bugzilla.redhat.com/show_bug.cgi?id=2000500): bump SystemMemoryExceedsReservation alert threshold to 95% [#2748](https://github.com/openshift/machine-config-operator/pull/2748)
* [Bug 1976110](https://bugzilla.redhat.com/show_bug.cgi?id=1976110): configure-ovs: fix nondeterministic master in slave profiles [#2644](https://github.com/openshift/machine-config-operator/pull/2644)
* [Bug 1985735](https://bugzilla.redhat.com/show_bug.cgi?id=1985735): [ON-PREM] HAProxy - enable listening sockets retrieval from old processes [#2691](https://github.com/openshift/machine-config-operator/pull/2691)
* [Bug 1998106](https://bugzilla.redhat.com/show_bug.cgi?id=1998106): vSpehere: disable vmxnet3 tx csum offload [#2736](https://github.com/openshift/machine-config-operator/pull/2736)
* [Bug 1995809](https://bugzilla.redhat.com/show_bug.cgi?id=1995809): crio: complete crio default config [#2724](https://github.com/openshift/machine-config-operator/pull/2724)
* [Bug 1993385](https://bugzilla.redhat.com/show_bug.cgi?id=1993385): crio: use conmon from path [#2714](https://github.com/openshift/machine-config-operator/pull/2714)
* [Bug 1975078](https://bugzilla.redhat.com/show_bug.cgi?id=1975078): Gracefully shutdown taking around 6-7 mins (libvirt provider) [#2636](https://github.com/openshift/machine-config-operator/pull/2636)
* Updating ose-machine-config-operator builder & base images to be consistent with ART [#2484](https://github.com/openshift/machine-config-operator/pull/2484)
* [Bug 1977426](https://bugzilla.redhat.com/show_bug.cgi?id=1977426): Fix team config JSON format for nmcli command [#2648](https://github.com/openshift/machine-config-operator/pull/2648)
* [Bug 1886572](https://bugzilla.redhat.com/show_bug.cgi?id=1886572): [on-prem] set keepalived ingress priority to variable [#2595](https://github.com/openshift/machine-config-operator/pull/2595)
* [Bug 1971080](https://bugzilla.redhat.com/show_bug.cgi?id=1971080): daemon/drain.go: bump initial drain sleeps down to 1min [#2611](https://github.com/openshift/machine-config-operator/pull/2611)
* [Bug 1958812](https://bugzilla.redhat.com/show_bug.cgi?id=1958812): daemon: Rework rpm-ostree synchronous invocation logging [#2587](https://github.com/openshift/machine-config-operator/pull/2587)
* [Bug 1943315](https://bugzilla.redhat.com/show_bug.cgi?id=1943315): daemon: make node drain logic smarter for ICSP changes [#2596](https://github.com/openshift/machine-config-operator/pull/2596)
* [Bug 1946584](https://bugzilla.redhat.com/show_bug.cgi?id=1946584): Check suffix annotation is a number [#2598](https://github.com/openshift/machine-config-operator/pull/2598)
* [Bug 1969681](https://bugzilla.redhat.com/show_bug.cgi?id=1969681): maxUnavailable of ds/machine-config-daemon isn't changed even after Bug 1899535 was fixed [#2601](https://github.com/openshift/machine-config-operator/pull/2601)
* [Bug 1817075](https://bugzilla.redhat.com/show_bug.cgi?id=1817075): Revert "operator/controller pods: faster leader elections" [#2604](https://github.com/openshift/machine-config-operator/pull/2604)
* [Bug 1817075](https://bugzilla.redhat.com/show_bug.cgi?id=1817075): operator/controller pods: faster leader elections [#2603](https://github.com/openshift/machine-config-operator/pull/2603)
* [Bug 1968019](https://bugzilla.redhat.com/show_bug.cgi?id=1968019): Bump drain timeout to 1h [#2597](https://github.com/openshift/machine-config-operator/pull/2597)
* [Bug 1916890](https://bugzilla.redhat.com/show_bug.cgi?id=1916890): Stop setting nopreempt on bootstrap keepalived.conf [#2586](https://github.com/openshift/machine-config-operator/pull/2586)
* [Bug 1966602](https://bugzilla.redhat.com/show_bug.cgi?id=1966602): Don't explicitly set the IPv6DualStack feature gate [#2580](https://github.com/openshift/machine-config-operator/pull/2580)
* [Bug 1927042](https://bugzilla.redhat.com/show_bug.cgi?id=1927042): [baremetal & friends] Don't write empty static pod manifests [#2413](https://github.com/openshift/machine-config-operator/pull/2413)
* [Bug 1921937](https://bugzilla.redhat.com/show_bug.cgi?id=1921937): crio: reject /etc/hostname mount if absent [#2575](https://github.com/openshift/machine-config-operator/pull/2575)
* [Bug 1960035](https://bugzilla.redhat.com/show_bug.cgi?id=1960035): Use host's iptables binary in keepalived container [#2579](https://github.com/openshift/machine-config-operator/pull/2579)
* [Bug 1928147](https://bugzilla.redhat.com/show_bug.cgi?id=1928147): Respect DHCP option 119 for on-prem [#2428](https://github.com/openshift/machine-config-operator/pull/2428)
* [Bug 1958812](https://bugzilla.redhat.com/show_bug.cgi?id=1958812): daemon: Display more non-JSON text from rpm-ostree status --json [#2588](https://github.com/openshift/machine-config-operator/pull/2588)
* [Bug 1958391](https://bugzilla.redhat.com/show_bug.cgi?id=1958391): configure kubelet with apiserver TLSSecurityProfile [#2573](https://github.com/openshift/machine-config-operator/pull/2573)
* [Bug 1955929](https://bugzilla.redhat.com/show_bug.cgi?id=1955929): operator/sync.go confirm renderedconfig osimageurl matches cvo [#2585](https://github.com/openshift/machine-config-operator/pull/2585)
* [Bug 1955517](https://bugzilla.redhat.com/show_bug.cgi?id=1955517): Add cleanUpDuplicatedMC [#2570](https://github.com/openshift/machine-config-operator/pull/2570)
* [Bug 1948137](https://bugzilla.redhat.com/show_bug.cgi?id=1948137): crio: enable internal_wipe option [#2574](https://github.com/openshift/machine-config-operator/pull/2574)
* [Bug 1958812](https://bugzilla.redhat.com/show_bug.cgi?id=1958812): daemon: Change runGetOut to not intermix stdout/stderr [#2583](https://github.com/openshift/machine-config-operator/pull/2583)
* [Bug 1957972](https://bugzilla.redhat.com/show_bug.cgi?id=1957972): Remove remnants of mdns functionality [#2571](https://github.com/openshift/machine-config-operator/pull/2571)
* [Bug 1943539](https://bugzilla.redhat.com/show_bug.cgi?id=1943539): templates: order service files that use podman around crio-wipe [#2551](https://github.com/openshift/machine-config-operator/pull/2551)
* [Bug 1917282](https://bugzilla.redhat.com/show_bug.cgi?id=1917282): Explicitly set keyfile as the default plugin of NetworkManager for RHEL7 [#2442](https://github.com/openshift/machine-config-operator/pull/2442)
* [Bug 1947791](https://bugzilla.redhat.com/show_bug.cgi?id=1947791): Switch CRDs to v1 [#2572](https://github.com/openshift/machine-config-operator/pull/2572)
* [Bug 1947066](https://bugzilla.redhat.com/show_bug.cgi?id=1947066): Allow wildcard in noProxy field [#2565](https://github.com/openshift/machine-config-operator/pull/2565)
* [Bug 1957374](https://bugzilla.redhat.com/show_bug.cgi?id=1957374): install: Automatically fill in the pod for MCDDrainError [#2568](https://github.com/openshift/machine-config-operator/pull/2568)
* [Bug 1956372](https://bugzilla.redhat.com/show_bug.cgi?id=1956372): gcp-routes should wait until network is stopped [#2561](https://github.com/openshift/machine-config-operator/pull/2561)
* [Bug 1953846](https://bugzilla.redhat.com/show_bug.cgi?id=1953846): Subtract hugepages from memory capacity and allocatables [#2555](https://github.com/openshift/machine-config-operator/pull/2555)
* [Bug 1946506](https://bugzilla.redhat.com/show_bug.cgi?id=1946506): Add hosts template for monitor-based resolution [#2465](https://github.com/openshift/machine-config-operator/pull/2465)
* [Bug 1952358](https://bugzilla.redhat.com/show_bug.cgi?id=1952358): vsphere: platform none, vmxnet3v4 fix move to base [#2559](https://github.com/openshift/machine-config-operator/pull/2559)
* [Bug 1931505](https://bugzilla.redhat.com/show_bug.cgi?id=1931505): [On-prem] - fix vip filtering syntax for Keepalived remove-vips [#2548](https://github.com/openshift/machine-config-operator/pull/2548)
* [Bug 1934176](https://bugzilla.redhat.com/show_bug.cgi?id=1934176): ensure SSH key uniqueness [#2540](https://github.com/openshift/machine-config-operator/pull/2540)
* Rename workload annotations [#2538](https://github.com/openshift/machine-config-operator/pull/2538)
* [Bug 1949664](https://bugzilla.redhat.com/show_bug.cgi?id=1949664): [on-prem] Disable liveness probe until keepalived.conf exists [#2528](https://github.com/openshift/machine-config-operator/pull/2528)
* [Bug 1950974](https://bugzilla.redhat.com/show_bug.cgi?id=1950974): change system-connections-merged directory to systemConnectionsMerged [#2543](https://github.com/openshift/machine-config-operator/pull/2543)
* [Bug 1954554](https://bugzilla.redhat.com/show_bug.cgi?id=1954554): add e2e for auto node sizing [#2546](https://github.com/openshift/machine-config-operator/pull/2546)
* [Bug 1949967](https://bugzilla.redhat.com/show_bug.cgi?id=1949967): vendor: update kubernetes dependencies to 1.21 [#2530](https://github.com/openshift/machine-config-operator/pull/2530)
* [Bug 1950133](https://bugzilla.redhat.com/show_bug.cgi?id=1950133): Add cleanupStatus to keep three kubelet config conditions [#2535](https://github.com/openshift/machine-config-operator/pull/2535)
* [Bug 1952368](https://bugzilla.redhat.com/show_bug.cgi?id=1952368): daemon: return nil for unsupported operation on an OS [#2542](https://github.com/openshift/machine-config-operator/pull/2542)
* [Bug 1949818](https://bugzilla.redhat.com/show_bug.cgi?id=1949818): test/e2e: add e2e test for Single Node OpenShift [#2507](https://github.com/openshift/machine-config-operator/pull/2507)
* [Bug 1950112](https://bugzilla.redhat.com/show_bug.cgi?id=1950112): properly return error in failed podman cp [#2534](https://github.com/openshift/machine-config-operator/pull/2534)
* [Bug 1950543](https://bugzilla.redhat.com/show_bug.cgi?id=1950543): document non-HA behaviors [#2522](https://github.com/openshift/machine-config-operator/pull/2522)
* [Bug 1949347](https://bugzilla.redhat.com/show_bug.cgi?id=1949347): apiserver-watcher support for dual-stack [#2479](https://github.com/openshift/machine-config-operator/pull/2479)
* Add management workload annotations [#2515](https://github.com/openshift/machine-config-operator/pull/2515)
* [Bug 1948022](https://bugzilla.redhat.com/show_bug.cgi?id=1948022): Add on-prem namespaces to relatedObjects [#2460](https://github.com/openshift/machine-config-operator/pull/2460)
* [Bug 1937594](https://bugzilla.redhat.com/show_bug.cgi?id=1937594): Respect status.Migration in network.config when exsits [#2518](https://github.com/openshift/machine-config-operator/pull/2518)
* [Bug 1931505](https://bugzilla.redhat.com/show_bug.cgi?id=1931505): [on-prem] Cleanup keepalived vips before starting service [#2511](https://github.com/openshift/machine-config-operator/pull/2511)
* [Bug 1949387](https://bugzilla.redhat.com/show_bug.cgi?id=1949387): Fix the typo in reserved calculation in auto sizing script [#2527](https://github.com/openshift/machine-config-operator/pull/2527)
* [Bug 1934443](https://bugzilla.redhat.com/show_bug.cgi?id=1934443): Fix ovs-configure script to detect team interface [#2512](https://github.com/openshift/machine-config-operator/pull/2512)
* [Bug 1947684](https://bugzilla.redhat.com/show_bug.cgi?id=1947684): delay kubelet config readiness until after pools and controller config are ready [#2517](https://github.com/openshift/machine-config-operator/pull/2517)
* [Bug 1948431](https://bugzilla.redhat.com/show_bug.cgi?id=1948431): Bump openshift/api [#2521](https://github.com/openshift/machine-config-operator/pull/2521)
* [Bug 1899187](https://bugzilla.redhat.com/show_bug.cgi?id=1899187): run afterburn-hostname only when Network Manager is up [#2516](https://github.com/openshift/machine-config-operator/pull/2516)
* [Bug 1940207](https://bugzilla.redhat.com/show_bug.cgi?id=1940207): create the ovs-config-executed file to signal ovs is running on the host [#2506](https://github.com/openshift/machine-config-operator/pull/2506)
* [Bug 1943320](https://bugzilla.redhat.com/show_bug.cgi?id=1943320): configure-ovs doesn't handle bond interfaces correctly for OVNKubernetes [#2519](https://github.com/openshift/machine-config-operator/pull/2519)
* [Bug 1933772](https://bugzilla.redhat.com/show_bug.cgi?id=1933772): Revert rework of signal handling [#2500](https://github.com/openshift/machine-config-operator/pull/2500)
* operator: upgradeable false when pools are still updating [#2487](https://github.com/openshift/machine-config-operator/pull/2487)
* [Bug 1946513](https://bugzilla.redhat.com/show_bug.cgi?id=1946513): Fix Auto node sizing to honor user input [#2514](https://github.com/openshift/machine-config-operator/pull/2514)
* Add new extension for sandboxed-containers [#2456](https://github.com/openshift/machine-config-operator/pull/2456)
* [Bug 1944986](https://bugzilla.redhat.com/show_bug.cgi?id=1944986): Doc fix for ContainerRuntimeConfig CR [#2503](https://github.com/openshift/machine-config-operator/pull/2503)
* [Bug 1899057](https://bugzilla.redhat.com/show_bug.cgi?id=1899057): configure-ovs-network: fix spurious OVS warnings [#2496](https://github.com/openshift/machine-config-operator/pull/2496)
* [Bug 1945431](https://bugzilla.redhat.com/show_bug.cgi?id=1945431): alerts: SystemMemoryExceedsReservation triggers too quickly [#2508](https://github.com/openshift/machine-config-operator/pull/2508)
* [Bug 1939740](https://bugzilla.redhat.com/show_bug.cgi?id=1939740): Use new --prefer-ipv6 flag to "runtimecfg node-ip" as appropriate [#2478](https://github.com/openshift/machine-config-operator/pull/2478)
* vSphere: Update reviewers and approvers [#2505](https://github.com/openshift/machine-config-operator/pull/2505)
* [Bug 1943329](https://bugzilla.redhat.com/show_bug.cgi?id=1943329): add tlsSecurityProfile to KubeletConfig manifest [#2492](https://github.com/openshift/machine-config-operator/pull/2492)
* [Bug 1920670](https://bugzilla.redhat.com/show_bug.cgi?id=1920670): [Baremetal and friends] Properly handle SIGTERM - Keepalived container [#2367](https://github.com/openshift/machine-config-operator/pull/2367)
* [Bug 1940939](https://bugzilla.redhat.com/show_bug.cgi?id=1940939): Do "systemctl daemon-reload" after running "runtimecfg node-ip" [#2470](https://github.com/openshift/machine-config-operator/pull/2470)
* [Bug 1941936](https://bugzilla.redhat.com/show_bug.cgi?id=1941936): drop LogSizeMax and OverlaySize in ContainerRuntimeConfiguration when not used [#2494](https://github.com/openshift/machine-config-operator/pull/2494)
* [OCPNODE-367](https://issues.redhat.com/browse/OCPNODE-367): Auto node sizing for Openshift [#2466](https://github.com/openshift/machine-config-operator/pull/2466)
* [Bug 1935539](https://bugzilla.redhat.com/show_bug.cgi?id=1935539): vSphere: udp tnl workaround cannot use nmcli [#2482](https://github.com/openshift/machine-config-operator/pull/2482)
* [Bug 1925698](https://bugzilla.redhat.com/show_bug.cgi?id=1925698): not allow healthcheck traffic to loop through the node [#2477](https://github.com/openshift/machine-config-operator/pull/2477)
* [Bug 1943145](https://bugzilla.redhat.com/show_bug.cgi?id=1943145): Strengthen kubelet service dependency on crio service [#2491](https://github.com/openshift/machine-config-operator/pull/2491)
* [Bug 1940950](https://bugzilla.redhat.com/show_bug.cgi?id=1940950): Strengthen kubelet service dependency on crio service [#2489](https://github.com/openshift/machine-config-operator/pull/2489)
* Fixes: Bug 1942207: [vsphere] hostnames are changed when upgrading from 4.6 to 4.7.x causing upgrades to fail [#2486](https://github.com/openshift/machine-config-operator/pull/2486)
* [Bug 1938084](https://bugzilla.redhat.com/show_bug.cgi?id=1938084): configure-ovs.sh:incorrect setting of cloned-mac-address field [#2468](https://github.com/openshift/machine-config-operator/pull/2468)
* Update Update-SSHKeys.md [#2483](https://github.com/openshift/machine-config-operator/pull/2483)
* [Bug 1930636](https://bugzilla.redhat.com/show_bug.cgi?id=1930636): fix error print verb [#2485](https://github.com/openshift/machine-config-operator/pull/2485)
* Makefile: Bump test-e2e timeout to 90 minutes [#2474](https://github.com/openshift/machine-config-operator/pull/2474)
* [Bug 1935539](https://bugzilla.redhat.com/show_bug.cgi?id=1935539): vSphere: Disable tx udp_csum segmentation [#2472](https://github.com/openshift/machine-config-operator/pull/2472)
* [Bug 1825417](https://bugzilla.redhat.com/show_bug.cgi?id=1825417): Make getting the suffix of an MC more robust [#2458](https://github.com/openshift/machine-config-operator/pull/2458)
* [Bug 1939270](https://bugzilla.redhat.com/show_bug.cgi?id=1939270): pkg/operator/status: Use 'DegradedPool' reason for Upgradeable=False [#2463](https://github.com/openshift/machine-config-operator/pull/2463)
* Bump haproxy http-request timeout to 30 seconds [#1743](https://github.com/openshift/machine-config-operator/pull/1743)
* Skip drain on Single Node deployment [#2457](https://github.com/openshift/machine-config-operator/pull/2457)
* [Bug 1840881](https://bugzilla.redhat.com/show_bug.cgi?id=1840881): Make getting the suffix of a kubeletconfig MC more robust [#2459](https://github.com/openshift/machine-config-operator/pull/2459)
* [Bug 1902963](https://bugzilla.redhat.com/show_bug.cgi?id=1902963): templates: add After=ostree-finalize-staged.service to kubelet.service [#2414](https://github.com/openshift/machine-config-operator/pull/2414)
* [Bug 1934113](https://bugzilla.redhat.com/show_bug.cgi?id=1934113): Improve error handling for os updates [#2449](https://github.com/openshift/machine-config-operator/pull/2449)
* [Bug 1930636](https://bugzilla.redhat.com/show_bug.cgi?id=1930636): Fix overlaySize & pidslimit ctrcfg [#2448](https://github.com/openshift/machine-config-operator/pull/2448)
* [Bug 1933805](https://bugzilla.redhat.com/show_bug.cgi?id=1933805): Add node label to service monitor [#2446](https://github.com/openshift/machine-config-operator/pull/2446)
* [Bug 1931522](https://bugzilla.redhat.com/show_bug.cgi?id=1931522): OVS Config: fixes detecting bond NM files with static IP [#2424](https://github.com/openshift/machine-config-operator/pull/2424)
* [OCPNODE-464](https://issues.redhat.com/browse/OCPNODE-464): add tls security profile support [#2324](https://github.com/openshift/machine-config-operator/pull/2324)
* [Bug 1932105](https://bugzilla.redhat.com/show_bug.cgi?id=1932105): pkg/operator/sync: More logging for syncRequiredMachineConfigPools [#2444](https://github.com/openshift/machine-config-operator/pull/2444)
* [Bug 1932105](https://bugzilla.redhat.com/show_bug.cgi?id=1932105): operator/sync.go restore err when required pools not leveled [#2440](https://github.com/openshift/machine-config-operator/pull/2440)
* [Bug 1871770](https://bugzilla.redhat.com/show_bug.cgi?id=1871770): Remove extraneous whitespace from keepalived peer list [#2409](https://github.com/openshift/machine-config-operator/pull/2409)
* [Bug 1927731](https://bugzilla.redhat.com/show_bug.cgi?id=1927731): Revert "pkg/daemon: Add IgnitionVersion to Daemon" [#2431](https://github.com/openshift/machine-config-operator/pull/2431)
* [Bug 1896226](https://bugzilla.redhat.com/show_bug.cgi?id=1896226): Remove recycler pod templates [#2318](https://github.com/openshift/machine-config-operator/pull/2318)
* [Bug 1844990](https://bugzilla.redhat.com/show_bug.cgi?id=1844990): server/api: Disable unsafe ciphers for CVE-2016-2183 [#2420](https://github.com/openshift/machine-config-operator/pull/2420)
* [Bug 1930620](https://bugzilla.redhat.com/show_bug.cgi?id=1930620): support trace loglevel [#2429](https://github.com/openshift/machine-config-operator/pull/2429)
* OWNERS: Surrendering membership [#2432](https://github.com/openshift/machine-config-operator/pull/2432)
* [Bug 1922997](https://bugzilla.redhat.com/show_bug.cgi?id=1922997): Connect default NIC to cluster network [#2384](https://github.com/openshift/machine-config-operator/pull/2384)
* [Bug 1928473](https://bugzilla.redhat.com/show_bug.cgi?id=1928473): Apply system-connections-merged to all platforms [#2425](https://github.com/openshift/machine-config-operator/pull/2425)
* Add kubelet CA to no-reboot action list/Do not drain for non-reboot actions [#2398](https://github.com/openshift/machine-config-operator/pull/2398)
* controller: remove etcd quorum-guard check on master pool [#2416](https://github.com/openshift/machine-config-operator/pull/2416)
* daemon: safer signal handling for shutdown [#2395](https://github.com/openshift/machine-config-operator/pull/2395)
* pkg/daemon: Drop unnecessary select from runLoginMonitor [#2406](https://github.com/openshift/machine-config-operator/pull/2406)
* vendor: update openshift/api to bring in new field controlPlaneTopology [#2417](https://github.com/openshift/machine-config-operator/pull/2417)
* [Bug 1927366](https://bugzilla.redhat.com/show_bug.cgi?id=1927366): Fixes ovs-configuration with cloned connections [#2402](https://github.com/openshift/machine-config-operator/pull/2402)
* [Bug 1840881](https://bugzilla.redhat.com/show_bug.cgi?id=1840881): Fix 1:1 mapping for kubeletconfig:MC and some e2e test fixes [#2408](https://github.com/openshift/machine-config-operator/pull/2408)
* Dockerfile: update reference to builder to new CI location [#2400](https://github.com/openshift/machine-config-operator/pull/2400)
* [Bug 1920807](https://bugzilla.redhat.com/show_bug.cgi?id=1920807): [vsphere] set hostname with --static to provide consistent node name for CSR approval [#2380](https://github.com/openshift/machine-config-operator/pull/2380)
* Updating ose-machine-config-operator builder & base images to be consistent with ART [#2396](https://github.com/openshift/machine-config-operator/pull/2396)
* OWNERS: drop @runcom with gratitude [#2379](https://github.com/openshift/machine-config-operator/pull/2379)
* [Bug 1885186](https://bugzilla.redhat.com/show_bug.cgi?id=1885186): handle Passwd.Users removal more gracefully [#2389](https://github.com/openshift/machine-config-operator/pull/2389)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/51dc0801ed7d705820f557fcabf04eff023bf568...58e73629d83330deae8b829b890b004de22b836b)


### [mdns-publisher](https://github.com/openshift/mdns-publisher/tree/1c707a28e88b42780fb37fad4532be7220acd1c5)

* [Bug 1988145](https://bugzilla.redhat.com/show_bug.cgi?id=1988145): Update zeroconf vendoring [#35](https://github.com/openshift/mdns-publisher/pull/35)
* Updating ose-mdns-publisher builder & base images to be consistent with ART [#28](https://github.com/openshift/mdns-publisher/pull/28)
* [Bug 1915122](https://bugzilla.redhat.com/show_bug.cgi?id=1915122): Truncate long service names to 63 characters [#24](https://github.com/openshift/mdns-publisher/pull/24)
* Updating ose-mdns-publisher builder & base images to be consistent with ART [#25](https://github.com/openshift/mdns-publisher/pull/25)
* [Full changelog](https://github.com/openshift/mdns-publisher/compare/af3f360536eca53d47ada65c3ddc842888432198...1c707a28e88b42780fb37fad4532be7220acd1c5)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/64645febe4129a794b1291d0a375a7b2bb7fba39)

* Updating ose-multus-admission-controller builder & base images to be consistent with ART [#32](https://github.com/openshift/multus-admission-controller/pull/32)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/a7312f5e55e9f34cc8b20f6cbfe1af0f363ca1e6...64645febe4129a794b1291d0a375a7b2bb7fba39)


### [multus-cni](https://github.com/openshift/multus-cni/tree/73d0cfedfff518269f7184615e120afc1406a466)

* Updating multus-cni builder & base images to be consistent with ART [#95](https://github.com/openshift/multus-cni/pull/95)
* [Bug 1972167](https://bugzilla.redhat.com/show_bug.cgi?id=1972167): Updates entrypoint to rebuild kubeconfig when service account token or ca changes [#108](https://github.com/openshift/multus-cni/pull/108)
* [Bug 1968625](https://bugzilla.redhat.com/show_bug.cgi?id=1968625): Use the default socket path in GetResourceClient when unspecified [#102](https://github.com/openshift/multus-cni/pull/102)
* [Bug 1927264](https://bugzilla.redhat.com/show_bug.cgi?id=1927264): Vendor bump for client-go fixes [#101](https://github.com/openshift/multus-cni/pull/101)
* [Bug 1957856](https://bugzilla.redhat.com/show_bug.cgi?id=1957856): Update net-attach-def client library [#97](https://github.com/openshift/multus-cni/pull/97)
* Change nil instead of error in case of no network annotation [#96](https://github.com/openshift/multus-cni/pull/96)
* Updating multus-cni builder & base images to be consistent with ART [#93](https://github.com/openshift/multus-cni/pull/93)
* Sync with upstream for OCP 4.8 [#88](https://github.com/openshift/multus-cni/pull/88)
* Updating multus-cni builder & base images to be consistent with ART [#86](https://github.com/openshift/multus-cni/pull/86)
* [Full changelog](https://github.com/openshift/multus-cni/compare/5530094db7607fc9292e3b269fcf5a85b0dad3df...73d0cfedfff518269f7184615e120afc1406a466)


### [multus-route-override-cni](https://github.com/openshift/route-override-cni/tree/64807ab77cf97eb69d4202f25840e921290b3e12)

* Updating ose-multus-route-override-cni builder & base images to be consistent with ART [#12](https://github.com/openshift/route-override-cni/pull/12)
* [Full changelog](https://github.com/openshift/route-override-cni/compare/1662c3ec79b880fce5cd9c4e64f5ba0d4daffc00...64807ab77cf97eb69d4202f25840e921290b3e12)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/d743a20fc84059e96b5f88ec4ce00073d0564fd1)

* [Bug 2028966](https://bugzilla.redhat.com/show_bug.cgi?id=2028966): Whereabouts should reconcile IP addresses [backport 4.8] [#78](https://github.com/openshift/whereabouts-cni/pull/78)
* [Bug 2009497](https://bugzilla.redhat.com/show_bug.cgi?id=2009497): Release on cancel, sync for 4.8 [#70](https://github.com/openshift/whereabouts-cni/pull/70)
* [Bug 1990113](https://bugzilla.redhat.com/show_bug.cgi?id=1990113): Syncs with upstream for leader election [backport 4.8] [#63](https://github.com/openshift/whereabouts-cni/pull/63)
* Fix IP address type size to 16 bytes [#51](https://github.com/openshift/whereabouts-cni/pull/51)
* [Bug 1919048](https://bugzilla.redhat.com/show_bug.cgi?id=1919048): Fix for IPv6 when leading hextets equal zero [#48](https://github.com/openshift/whereabouts-cni/pull/48)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/cb519dfbaf608b86a811d6469321f6a33e1f2a17...d743a20fc84059e96b5f88ec4ce00073d0564fd1)


### [must-gather](https://github.com/openshift/must-gather/tree/5f81377b92c181e9f3d140fd1124310459cc704f)

* [Bug 2057345](https://bugzilla.redhat.com/show_bug.cgi?id=2057345): Fix ovn-nbctl commands for ipv6 [#287](https://github.com/openshift/must-gather/pull/287)
* Updating ose-must-gather builder & base images to be consistent with ART [#221](https://github.com/openshift/must-gather/pull/221)
* [Bug 1958405](https://bugzilla.redhat.com/show_bug.cgi?id=1958405): add etcd health logs to audit [#235](https://github.com/openshift/must-gather/pull/235)
* [Bug 1953563](https://bugzilla.redhat.com/show_bug.cgi?id=1953563): Add .ci-operator.yaml with build_root_image [#232](https://github.com/openshift/must-gather/pull/232)
* [Bug 1958094](https://bugzilla.redhat.com/show_bug.cgi?id=1958094): gather_audit_logs: ignore .lock file [#231](https://github.com/openshift/must-gather/pull/231)
* [Bug 1907353](https://bugzilla.redhat.com/show_bug.cgi?id=1907353): Add ovs related services to GENERAL_SERVICES [#225](https://github.com/openshift/must-gather/pull/225)
* Add multi-networkpolicy object in must-gather [#226](https://github.com/openshift/must-gather/pull/226)
* gather multi-networkpolicy logs [#224](https://github.com/openshift/must-gather/pull/224)
* [Bug 1916809](https://bugzilla.redhat.com/show_bug.cgi?id=1916809): extend must-gather network log to include nodes' ovs DB [#218](https://github.com/openshift/must-gather/pull/218)
* [Bug 1916392](https://bugzilla.redhat.com/show_bug.cgi?id=1916392): Gather API priority and fairness debug endpoints [#204](https://github.com/openshift/must-gather/pull/204)
* Updating ose-must-gather builder & base images to be consistent with ART [#210](https://github.com/openshift/must-gather/pull/210)
* Gather ethtool info from driver and offload [#207](https://github.com/openshift/must-gather/pull/207)
* collect alerts from the cluster [#205](https://github.com/openshift/must-gather/pull/205)
* [Full changelog](https://github.com/openshift/must-gather/compare/205d4e3cffb19bda7a658836c84587f2ac78d82c...5f81377b92c181e9f3d140fd1124310459cc704f)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/332cd8e1bd53ac30512964b930d6b4df8eddbb9a)

* Fix field selector (#52) [#52](https://github.com/openshift/network-metrics-daemon/pull/52)
* Changed container repository from Docker to Quay (#36) [#36](https://github.com/openshift/network-metrics-daemon/pull/36)
* Updating ose-network-metrics-daemon builder & base images to be consistent with ART (#35) [#35](https://github.com/openshift/network-metrics-daemon/pull/35)
* deployments: Use 33% as the rollout maxUnavailable (#34) [#34](https://github.com/openshift/network-metrics-daemon/pull/34)
* Updating ose-network-metrics-daemon builder & base images to be consistent with ART (#33) [#33](https://github.com/openshift/network-metrics-daemon/pull/33)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/d73afb7cf70541e027e79ee4e70c81cb9f28b444...332cd8e1bd53ac30512964b930d6b4df8eddbb9a)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/961db5cc19f78cb73c628c5219a0c5a6dbde7a3e)

* [Bug 2043808](https://bugzilla.redhat.com/show_bug.cgi?id=2043808): IPs with leading zeros are still valid in the apiserver [#74](https://github.com/openshift/oauth-apiserver/pull/74)
* [Bug 1958097](https://bugzilla.redhat.com/show_bug.cgi?id=1958097): tokenreviews: improve errors on old-format access tokens [#52](https://github.com/openshift/oauth-apiserver/pull/52)
* [Bug 1949419](https://bugzilla.redhat.com/show_bug.cgi?id=1949419): Fix [SHOULD NOT HAPPEN] server-side-apply error for TokenReviews [#53](https://github.com/openshift/oauth-apiserver/pull/53)
* [Bug 1953563](https://bugzilla.redhat.com/show_bug.cgi?id=1953563): Add .ci-operator.yaml with build_root_image [#51](https://github.com/openshift/oauth-apiserver/pull/51)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): bump to kube 1.21.0 [#50](https://github.com/openshift/oauth-apiserver/pull/50)
* forbid the old token format [#44](https://github.com/openshift/oauth-apiserver/pull/44)
* prints flags at startup [#48](https://github.com/openshift/oauth-apiserver/pull/48)
* loosen up username and identity name validation [#47](https://github.com/openshift/oauth-apiserver/pull/47)
* [Bug 1933599](https://bugzilla.redhat.com/show_bug.cgi?id=1933599): bump k8s.io/apiserver to 1.20.4 [#45](https://github.com/openshift/oauth-apiserver/pull/45)
* add a custom authorizer to ensure kube-apiserver can always access tokenreviews webhook [#41](https://github.com/openshift/oauth-apiserver/pull/41)
* Add token validation for OpenShift OAuth access tokens [#9](https://github.com/openshift/oauth-apiserver/pull/9)
* Updating ose-oauth-apiserver builder & base images to be consistent with ART [#39](https://github.com/openshift/oauth-apiserver/pull/39)
* completeConfig: remove storage, storageErr state from config [#40](https://github.com/openshift/oauth-apiserver/pull/40)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/69f527e90f599e0f509cfce73ba7b95656f03f7f...961db5cc19f78cb73c628c5219a0c5a6dbde7a3e)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/3fc0d89b2607808927f5b48168342f5dc3a1a271)

* [Bug 1874322](https://bugzilla.redhat.com/show_bug.cgi?id=1874322): add bcrypt as a supported hashing method for htpasswd passwords [#186](https://github.com/openshift/oauth-proxy/pull/186)
* Updating golang-github-openshift-oauth-proxy builder & base images to be consistent with ART [#202](https://github.com/openshift/oauth-proxy/pull/202)
* [Bug 1958158](https://bugzilla.redhat.com/show_bug.cgi?id=1958158): providers/openshift: remove logging of authorizer decisions [#214](https://github.com/openshift/oauth-proxy/pull/214)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/fd4dfe78bcd8373c545284a671499681f824c645...3fc0d89b2607808927f5b48168342f5dc3a1a271)


### [oauth-server](https://github.com/openshift/oauth-server/tree/374e2ee38a1910c6d56172e9d4ec1828c4dea1be)

* [Bug 1970828](https://bugzilla.redhat.com/show_bug.cgi?id=1970828): fix projected service accounts as oauth-client [#80](https://github.com/openshift/oauth-server/pull/80)
* [Bug 1958080](https://bugzilla.redhat.com/show_bug.cgi?id=1958080): Add missing error page strings [#77](https://github.com/openshift/oauth-server/pull/77)
* [Bug 1953563](https://bugzilla.redhat.com/show_bug.cgi?id=1953563): Add .ci-operator.yaml with build_root_image [#76](https://github.com/openshift/oauth-server/pull/76)
* [Bug 1958080](https://bugzilla.redhat.com/show_bug.cgi?id=1958080): CONSOLE-2535: Internationalize login page [#71](https://github.com/openshift/oauth-server/pull/71)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): DelegatingAuthenticationOptions TokenReview request timeout [#75](https://github.com/openshift/oauth-server/pull/75)
* base64-encode usernames when they contain ':' or '/' [#72](https://github.com/openshift/oauth-server/pull/72)
* Remove the legacy Dockerfile [#73](https://github.com/openshift/oauth-server/pull/73)
* Updating oauth-server builder & base images to be consistent with ART [#70](https://github.com/openshift/oauth-server/pull/70)
* [Bug 1892642](https://bugzilla.redhat.com/show_bug.cgi?id=1892642): metrics: move unlabeled metrics to Counters, initialize all [#69](https://github.com/openshift/oauth-server/pull/69)
* [Full changelog](https://github.com/openshift/oauth-server/compare/55f888e101a2d2a7fe2b5f7d789cabe0628f1907...374e2ee38a1910c6d56172e9d4ec1828c4dea1be)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/43d6128c799a32b8a0f47c3ddb54155951a7f743)

* [Bug 2043808](https://bugzilla.redhat.com/show_bug.cgi?id=2043808): IPs with leading zeros are still valid in the apiserver [#280](https://github.com/openshift/openshift-apiserver/pull/280)
* [Bug 2053223](https://bugzilla.redhat.com/show_bug.cgi?id=2053223): Fix importing images that have dots in their namespace [#283](https://github.com/openshift/openshift-apiserver/pull/283)
* [Bug 2042732](https://bugzilla.redhat.com/show_bug.cgi?id=2042732): Make OriginImageMutators aware of origin objects [#271](https://github.com/openshift/openshift-apiserver/pull/271)
* [Bug 2020644](https://bugzilla.redhat.com/show_bug.cgi?id=2020644): Image policy should mutate DeploymentConfigs [#259](https://github.com/openshift/openshift-apiserver/pull/259)
* [Bug 1992639](https://bugzilla.redhat.com/show_bug.cgi?id=1992639): revert incorrect ssh scp fix [#241](https://github.com/openshift/openshift-apiserver/pull/241)
* [Bug 1972687](https://bugzilla.redhat.com/show_bug.cgi?id=1972687): openshift authorization proxy: escape header key values [#219](https://github.com/openshift/openshift-apiserver/pull/219)
* [Bug 1956826](https://bugzilla.redhat.com/show_bug.cgi?id=1956826): add restriction note to docker strategy build args [#213](https://github.com/openshift/openshift-apiserver/pull/213)
* [Bug 1940057](https://bugzilla.redhat.com/show_bug.cgi?id=1940057): Use listers to find pod info for build logs [#206](https://github.com/openshift/openshift-apiserver/pull/206)
* [Bug 1964888](https://bugzilla.redhat.com/show_bug.cgi?id=1964888): bump(k8s.io/apiserver) [#212](https://github.com/openshift/openshift-apiserver/pull/212)
* [Bug 1957584](https://bugzilla.redhat.com/show_bug.cgi?id=1957584): Revert 'Bug 1896977: Enhance API host name validation' [#210](https://github.com/openshift/openshift-apiserver/pull/210)
* [Bug 1957261](https://bugzilla.redhat.com/show_bug.cgi?id=1957261): BUILD-186 godoc cleanup [#207](https://github.com/openshift/openshift-apiserver/pull/207)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): bump to kube 1.21.0 and pick up the delegated AuthN fix [#202](https://github.com/openshift/openshift-apiserver/pull/202)
* [Bug 1923847](https://bugzilla.redhat.com/show_bug.cgi?id=1923847): Use github.com/openshift/apiserver-library-go/pkg/labelselector [#204](https://github.com/openshift/openshift-apiserver/pull/204)
* [Bug 1953563](https://bugzilla.redhat.com/show_bug.cgi?id=1953563): Add .ci-operator.yaml with build_root_image [#203](https://github.com/openshift/openshift-apiserver/pull/203)
* [BUILD-186](https://issues.redhat.com/browse/BUILD-186): build lastTriggeredID needs to be in status [#191](https://github.com/openshift/openshift-apiserver/pull/191)
* bump apiserver-lib-go for looser username validation [#195](https://github.com/openshift/openshift-apiserver/pull/195)
* sets shutdown-delay-duration from OpenShiftAPIServerConfig [#198](https://github.com/openshift/openshift-apiserver/pull/198)
* limit basic-user cluster role well-known access to oauth-authorization-server only [#192](https://github.com/openshift/openshift-apiserver/pull/192)
* [Bug 1895053](https://bugzilla.redhat.com/show_bug.cgi?id=1895053): Propagate new MountTrustedCA field [#185](https://github.com/openshift/openshift-apiserver/pull/185)
* [Bug 1933599](https://bugzilla.redhat.com/show_bug.cgi?id=1933599): bump k8s.io/apiserver to 1.20.4 [#190](https://github.com/openshift/openshift-apiserver/pull/190)
* Updating ose-openshift-apiserver builder & base images to be consistent with ART [#184](https://github.com/openshift/openshift-apiserver/pull/184)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/c35a474587b5ef4bc7cc111e0f7e57860a253fa5...43d6128c799a32b8a0f47c3ddb54155951a7f743)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/69a83a3f3c290519692a66fd5ffe89586eb1b4b9)

* [Bug 2006793](https://bugzilla.redhat.com/show_bug.cgi?id=2006793): BC ICT still must check spec last triggered image ID in case BC was last processed when cluster was pre 4.8 [#206](https://github.com/openshift/openshift-controller-manager/pull/206)
* [Bug 1954715](https://bugzilla.redhat.com/show_bug.cgi?id=1954715): Increase number of image-import controller workers [#178](https://github.com/openshift/openshift-controller-manager/pull/178)
* [Bug 1925409](https://bugzilla.redhat.com/show_bug.cgi?id=1925409): Rebase to k8s 1.21 [#184](https://github.com/openshift/openshift-controller-manager/pull/184)
* [Bug 1953798](https://bugzilla.redhat.com/show_bug.cgi?id=1953798): stop requeuing secret creation when namespaces are terminating [#179](https://github.com/openshift/openshift-controller-manager/pull/179)
* [Bug 1935165](https://bugzilla.redhat.com/show_bug.cgi?id=1935165): fixed LANG for the builder container [#176](https://github.com/openshift/openshift-controller-manager/pull/176)
* [BUILD-186](https://issues.redhat.com/browse/BUILD-186): build lastTriggeredID needs to be in status [#171](https://github.com/openshift/openshift-controller-manager/pull/171)
* [Bug 1947793](https://bugzilla.redhat.com/show_bug.cgi?id=1947793): Deprecated API in use [#175](https://github.com/openshift/openshift-controller-manager/pull/175)
* ingress: Migrate to networking.k8s.io/v1 [#172](https://github.com/openshift/openshift-controller-manager/pull/172)
* [Bug 1895053](https://bugzilla.redhat.com/show_bug.cgi?id=1895053): Instruct builds to optionally mount trusted CAs [#154](https://github.com/openshift/openshift-controller-manager/pull/154)
* Updating ose-openshift-controller-manager builder & base images to be consistent with ART [#174](https://github.com/openshift/openshift-controller-manager/pull/174)
* Updating ose-openshift-controller-manager builder & base images to be consistent with ART [#168](https://github.com/openshift/openshift-controller-manager/pull/168)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/c93745bf6898f41c6d10c66e7024238ddf20a86d...69a83a3f3c290519692a66fd5ffe89586eb1b4b9)


### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/101429149266e2c86a41b82baf47a033c9a93b02)

* Updating openshift-state-metrics builder & base images to be consistent with ART [#68](https://github.com/openshift/openshift-state-metrics/pull/68)
* Updating openshift-state-metrics builder & base images to be consistent with ART [#67](https://github.com/openshift/openshift-state-metrics/pull/67)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/40b0968ee1d488b791cdd6750fac6534abac122e...101429149266e2c86a41b82baf47a033c9a93b02)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/d431a72bce1aa5ce8d1e5cf7ba810ccaabacb5bb)

* [Bug 2049088](https://bugzilla.redhat.com/show_bug.cgi?id=2049088): Explicitly set default value for ReclaimPolicy [#71](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/71)
* [Bug 1960732](https://bugzilla.redhat.com/show_bug.cgi?id=1960732): delete manifests and update readme [#45](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/45)
* [Bug 1936871](https://bugzilla.redhat.com/show_bug.cgi?id=1936871): support clouds with multiple availability zones [#43](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/43)
* [Bug 1905849](https://bugzilla.redhat.com/show_bug.cgi?id=1905849): create default VolumeSnapshotClass [#40](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/40)
* [Bug 1952211](https://bugzilla.redhat.com/show_bug.cgi?id=1952211): Fix error when mounting /var/lib/kubelet/pods [#41](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/41)
* [Bug 1957149](https://bugzilla.redhat.com/show_bug.cgi?id=1957149): Revert "Bug 1905849: create default VolumeSnapshotClass" [#38](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/38)
* [Bug 1905849](https://bugzilla.redhat.com/show_bug.cgi?id=1905849): create default VolumeSnapshotClass [#36](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/36)
* [Bug 1954003](https://bugzilla.redhat.com/show_bug.cgi?id=1954003): Fix snapshotter metrics endpoint [#37](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/37)
* [Bug 1947774](https://bugzilla.redhat.com/show_bug.cgi?id=1947774): fix imagePullPolicy to ifNotPresent [#35](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/35)
* Cinder: Add metrics scraping [#34](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/34)
* [Bug 1909136](https://bugzilla.redhat.com/show_bug.cgi?id=1909136): Pass cluster ID to CSI driver [#33](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/33)
* Updating ose-openstack-cinder-csi-driver-operator builder & base images to be consistent with ART [#32](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/32)
* [Bug 1918562](https://bugzilla.redhat.com/show_bug.cgi?id=1918562): bump library-go [#30](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/30)
* [Bug 1933184](https://bugzilla.redhat.com/show_bug.cgi?id=1933184): Add maxUnavailable to DaemonSets [#28](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/28)
* Fix logLevel propagation to the operands [#27](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/27)
* Updating ose-openstack-cinder-csi-driver-operator builder & base images to be consistent with ART [#25](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/25)
* Cleanup: Remove serviceName from controller manifest [#26](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/26)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/bfb0e084ae83e588b2793e8901ada814f8052fcc...d431a72bce1aa5ce8d1e5cf7ba810ccaabacb5bb)


### [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/77840b9a431880b15ee05d4a3f327b7ff2a682e8)

* [Bug 2064634](https://bugzilla.redhat.com/show_bug.cgi?id=2064634): Ensure subnets belong to the queried network [#223](https://github.com/openshift/cluster-api-provider-openstack/pull/223)
* [Bug 2000542](https://bugzilla.redhat.com/show_bug.cgi?id=2000542): Adds Proxy to provider client http transport [#199](https://github.com/openshift/cluster-api-provider-openstack/pull/199)
* [Bug 1985015](https://bugzilla.redhat.com/show_bug.cgi?id=1985015): Eliminate instanceCreate volume leak [#192](https://github.com/openshift/cluster-api-provider-openstack/pull/192)
* [Bug 1954177](https://bugzilla.redhat.com/show_bug.cgi?id=1954177): Update mao dependency for webhook v1 changes [#180](https://github.com/openshift/cluster-api-provider-openstack/pull/180)
* [Bug 1955969](https://bugzilla.redhat.com/show_bug.cgi?id=1955969): - Makes port names unique. [#181](https://github.com/openshift/cluster-api-provider-openstack/pull/181)
* [Bug 1948546](https://bugzilla.redhat.com/show_bug.cgi?id=1948546): Allow all networking interfaces to be defined as ports [#179](https://github.com/openshift/cluster-api-provider-openstack/pull/179)
* [Bug 1952179](https://bugzilla.redhat.com/show_bug.cgi?id=1952179): Port Allowed Address Pairs UI [#178](https://github.com/openshift/cluster-api-provider-openstack/pull/178)
* [Bug 1948546](https://bugzilla.redhat.com/show_bug.cgi?id=1948546): Port create bugs [#175](https://github.com/openshift/cluster-api-provider-openstack/pull/175)
* Ports NetworkID json typo [#174](https://github.com/openshift/cluster-api-provider-openstack/pull/174)
* Sriov Addons [#173](https://github.com/openshift/cluster-api-provider-openstack/pull/173)
* Updating ose-openstack-machine-controllers builder & base images to be consistent with ART [#172](https://github.com/openshift/cluster-api-provider-openstack/pull/172)
* [Bug 1747270](https://bugzilla.redhat.com/show_bug.cgi?id=1747270): InstanceService.GetInstanceList should not do substring search on name [#171](https://github.com/openshift/cluster-api-provider-openstack/pull/171)
* Adds vnictype to port creation [#169](https://github.com/openshift/cluster-api-provider-openstack/pull/169)
* Add availability zone option to root volume [#168](https://github.com/openshift/cluster-api-provider-openstack/pull/168)
* Tag Ports Created By CAPO Based on Network or Subnet Attached [#166](https://github.com/openshift/cluster-api-provider-openstack/pull/166)
* Remove pkg/errors dependency [#155](https://github.com/openshift/cluster-api-provider-openstack/pull/155)
* Updating ose-openstack-machine-controllers builder & base images to be consistent with ART [#162](https://github.com/openshift/cluster-api-provider-openstack/pull/162)
* images: Remove openssh from the RHEL variant [#145](https://github.com/openshift/cluster-api-provider-openstack/pull/145)
* hack: Add verify-vendor.sh [#144](https://github.com/openshift/cluster-api-provider-openstack/pull/144)
* Update BZ component [#160](https://github.com/openshift/cluster-api-provider-openstack/pull/160)
* use gophercloud/utils to list available AZs [#146](https://github.com/openshift/cluster-api-provider-openstack/pull/146)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/dcb7828fd3753b90a5f617349495e59eca0307d1...77840b9a431880b15ee05d4a3f327b7ff2a682e8)


### [operator-lifecycle-manager](https://github.com/openshift/operator-framework-olm/tree/9e9736d6b162b877da9de3b760b06eeeb52ccd18)

* [Bug 2074680](https://bugzilla.redhat.com/show_bug.cgi?id=2074680): Emit CSV metric on startup [#288](https://github.com/openshift/operator-framework-olm/pull/288)
* [Bug 2073963](https://bugzilla.redhat.com/show_bug.cgi?id=2073963): Fix a bug in deletion of webhook service for replacement [#281](https://github.com/openshift/operator-framework-olm/pull/281)
* [Bug 2030489](https://bugzilla.redhat.com/show_bug.cgi?id=2030489): Remove oudated subscription update logic to improve resolution delay [#222](https://github.com/openshift/operator-framework-olm/pull/222)
* [Bug 1996162](https://bugzilla.redhat.com/show_bug.cgi?id=1996162): Check for pruned bundles on add in replaces mode [#165](https://github.com/openshift/operator-framework-olm/pull/165)
* [Bug 1986476](https://bugzilla.redhat.com/show_bug.cgi?id=1986476): resolver: remove legacy support for fallback parsing of CSVs [#140](https://github.com/openshift/operator-framework-olm/pull/140)
* [Bug 1994038](https://bugzilla.redhat.com/show_bug.cgi?id=1994038): clarify maxOpenShiftVersion upgrade error message [#173](https://github.com/openshift/operator-framework-olm/pull/173)
* [Bug 1994038](https://bugzilla.redhat.com/show_bug.cgi?id=1994038): Update kubebuilder installation in the build root dockerfile [#174](https://github.com/openshift/operator-framework-olm/pull/174)
* [Bug 1994110](https://bugzilla.redhat.com/show_bug.cgi?id=1994110): fix(openshift): drop z from next calculated y-stream [#167](https://github.com/openshift/operator-framework-olm/pull/167)
* [Bug 1989779](https://bugzilla.redhat.com/show_bug.cgi?id=1989779): installplans: retry crd updates on conflicts [#156](https://github.com/openshift/operator-framework-olm/pull/156)
* [Bug 1989711](https://bugzilla.redhat.com/show_bug.cgi?id=1989711): fix(openshift): block upgrades on invalid max properties (#2302) [#155](https://github.com/openshift/operator-framework-olm/pull/155)
* [Bug 1990650](https://bugzilla.redhat.com/show_bug.cgi?id=1990650): Add PriorityClass setting to registry pods for default CatalogSource (#2304) [#158](https://github.com/openshift/operator-framework-olm/pull/158)
* [Bug 1986023](https://bugzilla.redhat.com/show_bug.cgi?id=1986023): Translate legacy "bundle dependencies" to properties. [#134](https://github.com/openshift/operator-framework-olm/pull/134)
* [Bug 1979525](https://bugzilla.redhat.com/show_bug.cgi?id=1979525): OLM blocks minor OpenShift upgrades when incompatible optional operators are installed [#120](https://github.com/openshift/operator-framework-olm/pull/120)
* [Bug 1982294](https://bugzilla.redhat.com/show_bug.cgi?id=1982294): Fix for resolution error on channels with deprecated inner entries. [#118](https://github.com/openshift/operator-framework-olm/pull/118)
* [Bug 1982250](https://bugzilla.redhat.com/show_bug.cgi?id=1982250): (fix)InstallPlan: Do not tranisition IP to failed on OG/SA failure [#119](https://github.com/openshift/operator-framework-olm/pull/119)
* [Bug 1982252](https://bugzilla.redhat.com/show_bug.cgi?id=1982252): remove cleanup from startup [#117](https://github.com/openshift/operator-framework-olm/pull/117)
* [Bug 1977479](https://bugzilla.redhat.com/show_bug.cgi?id=1977479): fix configmap registry server liveness probe timeouts [#108](https://github.com/openshift/operator-framework-olm/pull/108)
* [Bug 1975432](https://bugzilla.redhat.com/show_bug.cgi?id=1975432): Resolve InstallPlanStepAppliedWithWarnings alert after some time. [#102](https://github.com/openshift/operator-framework-olm/pull/102)
* [Bug 1927340](https://bugzilla.redhat.com/show_bug.cgi?id=1927340): Add OperatorCondition status sync and update operator upgradeable check [#92](https://github.com/openshift/operator-framework-olm/pull/92)
* [Bug 1950047](https://bugzilla.redhat.com/show_bug.cgi?id=1950047): Fix Template Annotations on Webhooks/API Service CSVs [#90](https://github.com/openshift/operator-framework-olm/pull/90)
* [Bug 1958296](https://bugzilla.redhat.com/show_bug.cgi?id=1958296): Surface API server warnings when applying plan steps. [#85](https://github.com/openshift/operator-framework-olm/pull/85)
* [Bug 1968700](https://bugzilla.redhat.com/show_bug.cgi?id=1968700): Fix nil pointer dereference while reporting bundle unpack status. [#88](https://github.com/openshift/operator-framework-olm/pull/88)
* [Bug 1965334](https://bugzilla.redhat.com/show_bug.cgi?id=1965334): drop xattrs during unpack [#86](https://github.com/openshift/operator-framework-olm/pull/86)
* [Bug 1881522](https://bugzilla.redhat.com/show_bug.cgi?id=1881522): packageserver CSV: add missing properties [#84](https://github.com/openshift/operator-framework-olm/pull/84)
* [Bug 1945548](https://bugzilla.redhat.com/show_bug.cgi?id=1945548): Filter secret names for registry pod's sa [#83](https://github.com/openshift/operator-framework-olm/pull/83)
* [Bug 1961472](https://bugzilla.redhat.com/show_bug.cgi?id=1961472): Explicitly set `readOnlyRootFilesystem: false` on created registry pods. [#82](https://github.com/openshift/operator-framework-olm/pull/82)
* [Bug 1959158](https://bugzilla.redhat.com/show_bug.cgi?id=1959158): Make ClusterOperator Available condition sticky. [#81](https://github.com/openshift/operator-framework-olm/pull/81)
* [Bug 1961320](https://bugzilla.redhat.com/show_bug.cgi?id=1961320): feat(metrics): Emit metrics for CatalogSource state [#80](https://github.com/openshift/operator-framework-olm/pull/80)
* [Bug 1961314](https://bugzilla.redhat.com/show_bug.cgi?id=1961314): fix race in test with mockRepo/mockBlobStore [#79](https://github.com/openshift/operator-framework-olm/pull/79)
* [Bug 1951387](https://bugzilla.redhat.com/show_bug.cgi?id=1951387): Add after deprecation [#67](https://github.com/openshift/operator-framework-olm/pull/67)
* [Bug 1947946](https://bugzilla.redhat.com/show_bug.cgi?id=1947946): Annotate CRDs that are installed alongside CSVs. [#75](https://github.com/openshift/operator-framework-olm/pull/75)
* [Bug 1958285](https://bugzilla.redhat.com/show_bug.cgi?id=1958285): Simplify deployment status check to reduce flapping. [#76](https://github.com/openshift/operator-framework-olm/pull/76)
* [Bug 1921264](https://bugzilla.redhat.com/show_bug.cgi?id=1921264): Fail InstallPlan on bundle unpack timeout [#78](https://github.com/openshift/operator-framework-olm/pull/78)
* [Bug 1953977](https://bugzilla.redhat.com/show_bug.cgi?id=1953977): Add tolerant delegating auth config for PackageServer [#77](https://github.com/openshift/operator-framework-olm/pull/77)
* [Bug 1957127](https://bugzilla.redhat.com/show_bug.cgi?id=1957127): pin apiserver for DelegatingAuthenticationOptions TokenReview request timeout [#74](https://github.com/openshift/operator-framework-olm/pull/74)
* [Bug 1955761](https://bugzilla.redhat.com/show_bug.cgi?id=1955761): Set reason/message for Available condition in packageserver co [#72](https://github.com/openshift/operator-framework-olm/pull/72)
* [Bug 1956611](https://bugzilla.redhat.com/show_bug.cgi?id=1956611): Fix CR validation bug on go 1.16 [#70](https://github.com/openshift/operator-framework-olm/pull/70)
* [Bug 1957386](https://bugzilla.redhat.com/show_bug.cgi?id=1957386): Move config serve and validate to opm alpha [#71](https://github.com/openshift/operator-framework-olm/pull/71)
* [Bug 1945443](https://bugzilla.redhat.com/show_bug.cgi?id=1945443): Use DeploymentAvailable instead of custom test for CSV status. [#68](https://github.com/openshift/operator-framework-olm/pull/68)
* Rename workload annotations [#61](https://github.com/openshift/operator-framework-olm/pull/61)
* [Bug 1950025](https://bugzilla.redhat.com/show_bug.cgi?id=1950025): Bump the k8s.io dependencies to v1.20.6 [#56](https://github.com/openshift/operator-framework-olm/pull/56)
* [Bug 1952238](https://bugzilla.redhat.com/show_bug.cgi?id=1952238): Report catalog pod termination logs to catalog operator on exit [#65](https://github.com/openshift/operator-framework-olm/pull/65)
* [Bug 1934071](https://bugzilla.redhat.com/show_bug.cgi?id=1934071): fix(catalog): Reduce namespace resync in resolution failure [#62](https://github.com/openshift/operator-framework-olm/pull/62)
* Add verify target to Makefile. [#64](https://github.com/openshift/operator-framework-olm/pull/64)
* [Bug 1951652](https://bugzilla.redhat.com/show_bug.cgi?id=1951652): Retry failures when pulling images [#63](https://github.com/openshift/operator-framework-olm/pull/63)
* [Bug 1942522](https://bugzilla.redhat.com/show_bug.cgi?id=1942522): Fix resolution error if inner entry doesn't provide a required API. [#60](https://github.com/openshift/operator-framework-olm/pull/60)
* Add management workload annotations [#42](https://github.com/openshift/operator-framework-olm/pull/42)
* [Bug 1938492](https://bugzilla.redhat.com/show_bug.cgi?id=1938492): Add resource requests for bundle unpacker [#55](https://github.com/openshift/operator-framework-olm/pull/55)
* [Bug 1949294](https://bugzilla.redhat.com/show_bug.cgi?id=1949294): fix environment variable merging from subscription.config [#53](https://github.com/openshift/operator-framework-olm/pull/53)
* [Bug 1948725](https://bugzilla.redhat.com/show_bug.cgi?id=1948725): Add IBM managed cloud profile annotations to manifests [#50](https://github.com/openshift/operator-framework-olm/pull/50)
* [Bug 1934080](https://bugzilla.redhat.com/show_bug.cgi?id=1934080): Preserve existing ServiceAccount owner references during installs. [#41](https://github.com/openshift/operator-framework-olm/pull/41)
* [Bug 1948771](https://bugzilla.redhat.com/show_bug.cgi?id=1948771): Revert "set packageserver replicas to 1 for single node" [#51](https://github.com/openshift/operator-framework-olm/pull/51)
* staging/operator-registry: Pull in all non-opm-add declarative config updates [#47](https://github.com/openshift/operator-framework-olm/pull/47)
* Staged api to 01e8bf8b (v0.8.0) and olm to c480add3. [#49](https://github.com/openshift/operator-framework-olm/pull/49)
* staging/operator-registry: Pull in declarative config base packages + server command [#45](https://github.com/openshift/operator-framework-olm/pull/45)
* Update the staging/operator-lifecycle-manager tree [#46](https://github.com/openshift/operator-framework-olm/pull/46)
* [Bug 1946838](https://bugzilla.redhat.com/show_bug.cgi?id=1946838): Do not adopt copied CSVs [#44](https://github.com/openshift/operator-framework-olm/pull/44)
* [Bug 1913525](https://bugzilla.redhat.com/show_bug.cgi?id=1913525): Bump the k8s dependencies to v0.20.4 [#40](https://github.com/openshift/operator-framework-olm/pull/40)
* Upstream sync for operator-lifecycle-manager [#38](https://github.com/openshift/operator-framework-olm/pull/38)
* staging/olm: Re-generate test fake package(s) [#39](https://github.com/openshift/operator-framework-olm/pull/39)
* Upstream sync for operator-registry [#36](https://github.com/openshift/operator-framework-olm/pull/36)
* [Bug 1945584](https://bugzilla.redhat.com/show_bug.cgi?id=1945584): Remove overrides for GOOS and GOARCH in cpb Makefile recipe. [#35](https://github.com/openshift/operator-framework-olm/pull/35)
* Makefile: Use the full git commit hash when building binaries [#33](https://github.com/openshift/operator-framework-olm/pull/33)
* Remove the OLM_VERSION file and update the base.Dockerfile to use Go 1.16 [#32](https://github.com/openshift/operator-framework-olm/pull/32)
* Updating operator-lifecycle-manager builder & base images to be consistent with ART [#31](https://github.com/openshift/operator-framework-olm/pull/31)
* Updating operator-registry builder & base images to be consistent with ART [#30](https://github.com/openshift/operator-framework-olm/pull/30)
* Dockerfile,Makefile: Add opm binary and cross compilation target(s) [#29](https://github.com/openshift/operator-framework-olm/pull/29)
* add crd and manifest generation [#27](https://github.com/openshift/operator-framework-olm/pull/27)
* staging: Update OLM modules after recent changes [#26](https://github.com/openshift/operator-framework-olm/pull/26)
* Release 4.8 [#25](https://github.com/openshift/operator-framework-olm/pull/25)
* scripts: Update the unit.sh helper script and populate the nested staging directory [#21](https://github.com/openshift/operator-framework-olm/pull/21)
* Add additional make targets and update Dockerfile(s) [#20](https://github.com/openshift/operator-framework-olm/pull/20)
* Dockerfile: Update the Golang operator-registry base image tag [#19](https://github.com/openshift/operator-framework-olm/pull/19)
* Update repository layout [#18](https://github.com/openshift/operator-framework-olm/pull/18)
* Update helper scripts and root Makefile [#12](https://github.com/openshift/operator-framework-olm/pull/12)
* Update the CI registry in the registry Dockerfile and copy OLM_VERSION to root directory [#10](https://github.com/openshift/operator-framework-olm/pull/10)
* *.Dockerfile: Manually bump the image tags to 4.8 [#6](https://github.com/openshift/operator-framework-olm/pull/6)
* staging: Sync the vendor dependencies [#9](https://github.com/openshift/operator-framework-olm/pull/9)
* Add root .gitignore [#7](https://github.com/openshift/operator-framework-olm/pull/7)
* Add Ankita's initial commit + remove nested OWNERS files [#5](https://github.com/openshift/operator-framework-olm/pull/5)
* Create OWNERS [#1](https://github.com/openshift/operator-framework-olm/pull/1)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/6bc6b9cf9c6357b94eee8ceb057260bb0b4a3fd7...9e9736d6b162b877da9de3b760b06eeeb52ccd18)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/3f3d7d1f9e914aff08d2ca2b5663358c8b611656)

* [Bug 1998938](https://bugzilla.redhat.com/show_bug.cgi?id=1998938): Use client-go's leader election implementation [#421](https://github.com/operator-framework/operator-marketplace/pull/421)
* [Bug 1990650](https://bugzilla.redhat.com/show_bug.cgi?id=1990650): Add priorityclass annotation to default catalogsources [#418](https://github.com/operator-framework/operator-marketplace/pull/418)
* [Bug 1936585](https://bugzilla.redhat.com/show_bug.cgi?id=1936585): Add CVO specific annotations [#404](https://github.com/operator-framework/operator-marketplace/pull/404)
* [Bug 1936585](https://bugzilla.redhat.com/show_bug.cgi?id=1936585): Configure alerts for Non-Ready Default CatalogSources [#402](https://github.com/operator-framework/operator-marketplace/pull/402)
* [Bug 1950417](https://bugzilla.redhat.com/show_bug.cgi?id=1950417): Migrate to Go modules, bump k8s dependencies to v0.20.6 and sdk to v0.19.x [#391](https://github.com/operator-framework/operator-marketplace/pull/391)
* Rename workload annotations [#393](https://github.com/operator-framework/operator-marketplace/pull/393)
* [Bug 1946790](https://bugzilla.redhat.com/show_bug.cgi?id=1946790): Update clusteroperator status conditions on startup [#395](https://github.com/operator-framework/operator-marketplace/pull/395)
* [Bug 1950417](https://bugzilla.redhat.com/show_bug.cgi?id=1950417): Add the ability to override the operator-sdk binary in e2e tests [#394](https://github.com/operator-framework/operator-marketplace/pull/394)
* Update Dockerfile.okd [#392](https://github.com/operator-framework/operator-marketplace/pull/392)
* [Bug 1949277](https://bugzilla.redhat.com/show_bug.cgi?id=1949277): Add operator manifest specific to ibm-cloud-managed profile [#389](https://github.com/operator-framework/operator-marketplace/pull/389)
* [Bug 1947794](https://bugzilla.redhat.com/show_bug.cgi?id=1947794): Update openshift rolebindings to v1 [#390](https://github.com/operator-framework/operator-marketplace/pull/390)
* update defaults to 4.8 [#387](https://github.com/operator-framework/operator-marketplace/pull/387)
* Add management workload annotations [#388](https://github.com/operator-framework/operator-marketplace/pull/388)
* Build with Go 1.16 [#386](https://github.com/operator-framework/operator-marketplace/pull/386)
* Add ROKS profile annotation [#385](https://github.com/operator-framework/operator-marketplace/pull/385)
* Annotate manifests for single-node-developer cluster profile [#369](https://github.com/operator-framework/operator-marketplace/pull/369)
* [Bug 1927393](https://bugzilla.redhat.com/show_bug.cgi?id=1927393): update defaults to 4.7 [#380](https://github.com/operator-framework/operator-marketplace/pull/380)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/23f38d3c0385e3fef87848c3378cf6c0a4cbe4d7...3f3d7d1f9e914aff08d2ca2b5663358c8b611656)


### [operator-registry](https://github.com/openshift/operator-framework-olm/tree/9e9736d6b162b877da9de3b760b06eeeb52ccd18)

* [Bug 2074680](https://bugzilla.redhat.com/show_bug.cgi?id=2074680): Emit CSV metric on startup [#288](https://github.com/openshift/operator-framework-olm/pull/288)
* [Bug 2073963](https://bugzilla.redhat.com/show_bug.cgi?id=2073963): Fix a bug in deletion of webhook service for replacement [#281](https://github.com/openshift/operator-framework-olm/pull/281)
* [Bug 2030489](https://bugzilla.redhat.com/show_bug.cgi?id=2030489): Remove oudated subscription update logic to improve resolution delay [#222](https://github.com/openshift/operator-framework-olm/pull/222)
* [Bug 1996162](https://bugzilla.redhat.com/show_bug.cgi?id=1996162): Check for pruned bundles on add in replaces mode [#165](https://github.com/openshift/operator-framework-olm/pull/165)
* [Bug 1986476](https://bugzilla.redhat.com/show_bug.cgi?id=1986476): resolver: remove legacy support for fallback parsing of CSVs [#140](https://github.com/openshift/operator-framework-olm/pull/140)
* [Bug 1994038](https://bugzilla.redhat.com/show_bug.cgi?id=1994038): clarify maxOpenShiftVersion upgrade error message [#173](https://github.com/openshift/operator-framework-olm/pull/173)
* [Bug 1994038](https://bugzilla.redhat.com/show_bug.cgi?id=1994038): Update kubebuilder installation in the build root dockerfile [#174](https://github.com/openshift/operator-framework-olm/pull/174)
* [Bug 1994110](https://bugzilla.redhat.com/show_bug.cgi?id=1994110): fix(openshift): drop z from next calculated y-stream [#167](https://github.com/openshift/operator-framework-olm/pull/167)
* [Bug 1989779](https://bugzilla.redhat.com/show_bug.cgi?id=1989779): installplans: retry crd updates on conflicts [#156](https://github.com/openshift/operator-framework-olm/pull/156)
* [Bug 1989711](https://bugzilla.redhat.com/show_bug.cgi?id=1989711): fix(openshift): block upgrades on invalid max properties (#2302) [#155](https://github.com/openshift/operator-framework-olm/pull/155)
* [Bug 1990650](https://bugzilla.redhat.com/show_bug.cgi?id=1990650): Add PriorityClass setting to registry pods for default CatalogSource (#2304) [#158](https://github.com/openshift/operator-framework-olm/pull/158)
* [Bug 1986023](https://bugzilla.redhat.com/show_bug.cgi?id=1986023): Translate legacy "bundle dependencies" to properties. [#134](https://github.com/openshift/operator-framework-olm/pull/134)
* [Bug 1979525](https://bugzilla.redhat.com/show_bug.cgi?id=1979525): OLM blocks minor OpenShift upgrades when incompatible optional operators are installed [#120](https://github.com/openshift/operator-framework-olm/pull/120)
* [Bug 1982294](https://bugzilla.redhat.com/show_bug.cgi?id=1982294): Fix for resolution error on channels with deprecated inner entries. [#118](https://github.com/openshift/operator-framework-olm/pull/118)
* [Bug 1982250](https://bugzilla.redhat.com/show_bug.cgi?id=1982250): (fix)InstallPlan: Do not tranisition IP to failed on OG/SA failure [#119](https://github.com/openshift/operator-framework-olm/pull/119)
* [Bug 1982252](https://bugzilla.redhat.com/show_bug.cgi?id=1982252): remove cleanup from startup [#117](https://github.com/openshift/operator-framework-olm/pull/117)
* [Bug 1977479](https://bugzilla.redhat.com/show_bug.cgi?id=1977479): fix configmap registry server liveness probe timeouts [#108](https://github.com/openshift/operator-framework-olm/pull/108)
* [Bug 1975432](https://bugzilla.redhat.com/show_bug.cgi?id=1975432): Resolve InstallPlanStepAppliedWithWarnings alert after some time. [#102](https://github.com/openshift/operator-framework-olm/pull/102)
* [Bug 1927340](https://bugzilla.redhat.com/show_bug.cgi?id=1927340): Add OperatorCondition status sync and update operator upgradeable check [#92](https://github.com/openshift/operator-framework-olm/pull/92)
* [Bug 1950047](https://bugzilla.redhat.com/show_bug.cgi?id=1950047): Fix Template Annotations on Webhooks/API Service CSVs [#90](https://github.com/openshift/operator-framework-olm/pull/90)
* [Bug 1958296](https://bugzilla.redhat.com/show_bug.cgi?id=1958296): Surface API server warnings when applying plan steps. [#85](https://github.com/openshift/operator-framework-olm/pull/85)
* [Bug 1968700](https://bugzilla.redhat.com/show_bug.cgi?id=1968700): Fix nil pointer dereference while reporting bundle unpack status. [#88](https://github.com/openshift/operator-framework-olm/pull/88)
* [Bug 1965334](https://bugzilla.redhat.com/show_bug.cgi?id=1965334): drop xattrs during unpack [#86](https://github.com/openshift/operator-framework-olm/pull/86)
* [Bug 1881522](https://bugzilla.redhat.com/show_bug.cgi?id=1881522): packageserver CSV: add missing properties [#84](https://github.com/openshift/operator-framework-olm/pull/84)
* [Bug 1945548](https://bugzilla.redhat.com/show_bug.cgi?id=1945548): Filter secret names for registry pod's sa [#83](https://github.com/openshift/operator-framework-olm/pull/83)
* [Bug 1961472](https://bugzilla.redhat.com/show_bug.cgi?id=1961472): Explicitly set `readOnlyRootFilesystem: false` on created registry pods. [#82](https://github.com/openshift/operator-framework-olm/pull/82)
* [Bug 1959158](https://bugzilla.redhat.com/show_bug.cgi?id=1959158): Make ClusterOperator Available condition sticky. [#81](https://github.com/openshift/operator-framework-olm/pull/81)
* [Bug 1961320](https://bugzilla.redhat.com/show_bug.cgi?id=1961320): feat(metrics): Emit metrics for CatalogSource state [#80](https://github.com/openshift/operator-framework-olm/pull/80)
* [Bug 1961314](https://bugzilla.redhat.com/show_bug.cgi?id=1961314): fix race in test with mockRepo/mockBlobStore [#79](https://github.com/openshift/operator-framework-olm/pull/79)
* [Bug 1951387](https://bugzilla.redhat.com/show_bug.cgi?id=1951387): Add after deprecation [#67](https://github.com/openshift/operator-framework-olm/pull/67)
* [Bug 1947946](https://bugzilla.redhat.com/show_bug.cgi?id=1947946): Annotate CRDs that are installed alongside CSVs. [#75](https://github.com/openshift/operator-framework-olm/pull/75)
* [Bug 1958285](https://bugzilla.redhat.com/show_bug.cgi?id=1958285): Simplify deployment status check to reduce flapping. [#76](https://github.com/openshift/operator-framework-olm/pull/76)
* [Bug 1921264](https://bugzilla.redhat.com/show_bug.cgi?id=1921264): Fail InstallPlan on bundle unpack timeout [#78](https://github.com/openshift/operator-framework-olm/pull/78)
* [Bug 1953977](https://bugzilla.redhat.com/show_bug.cgi?id=1953977): Add tolerant delegating auth config for PackageServer [#77](https://github.com/openshift/operator-framework-olm/pull/77)
* [Bug 1957127](https://bugzilla.redhat.com/show_bug.cgi?id=1957127): pin apiserver for DelegatingAuthenticationOptions TokenReview request timeout [#74](https://github.com/openshift/operator-framework-olm/pull/74)
* [Bug 1955761](https://bugzilla.redhat.com/show_bug.cgi?id=1955761): Set reason/message for Available condition in packageserver co [#72](https://github.com/openshift/operator-framework-olm/pull/72)
* [Bug 1956611](https://bugzilla.redhat.com/show_bug.cgi?id=1956611): Fix CR validation bug on go 1.16 [#70](https://github.com/openshift/operator-framework-olm/pull/70)
* [Bug 1957386](https://bugzilla.redhat.com/show_bug.cgi?id=1957386): Move config serve and validate to opm alpha [#71](https://github.com/openshift/operator-framework-olm/pull/71)
* [Bug 1945443](https://bugzilla.redhat.com/show_bug.cgi?id=1945443): Use DeploymentAvailable instead of custom test for CSV status. [#68](https://github.com/openshift/operator-framework-olm/pull/68)
* Rename workload annotations [#61](https://github.com/openshift/operator-framework-olm/pull/61)
* [Bug 1950025](https://bugzilla.redhat.com/show_bug.cgi?id=1950025): Bump the k8s.io dependencies to v1.20.6 [#56](https://github.com/openshift/operator-framework-olm/pull/56)
* [Bug 1952238](https://bugzilla.redhat.com/show_bug.cgi?id=1952238): Report catalog pod termination logs to catalog operator on exit [#65](https://github.com/openshift/operator-framework-olm/pull/65)
* [Bug 1934071](https://bugzilla.redhat.com/show_bug.cgi?id=1934071): fix(catalog): Reduce namespace resync in resolution failure [#62](https://github.com/openshift/operator-framework-olm/pull/62)
* Add verify target to Makefile. [#64](https://github.com/openshift/operator-framework-olm/pull/64)
* [Bug 1951652](https://bugzilla.redhat.com/show_bug.cgi?id=1951652): Retry failures when pulling images [#63](https://github.com/openshift/operator-framework-olm/pull/63)
* [Bug 1942522](https://bugzilla.redhat.com/show_bug.cgi?id=1942522): Fix resolution error if inner entry doesn't provide a required API. [#60](https://github.com/openshift/operator-framework-olm/pull/60)
* Add management workload annotations [#42](https://github.com/openshift/operator-framework-olm/pull/42)
* [Bug 1938492](https://bugzilla.redhat.com/show_bug.cgi?id=1938492): Add resource requests for bundle unpacker [#55](https://github.com/openshift/operator-framework-olm/pull/55)
* [Bug 1949294](https://bugzilla.redhat.com/show_bug.cgi?id=1949294): fix environment variable merging from subscription.config [#53](https://github.com/openshift/operator-framework-olm/pull/53)
* [Bug 1948725](https://bugzilla.redhat.com/show_bug.cgi?id=1948725): Add IBM managed cloud profile annotations to manifests [#50](https://github.com/openshift/operator-framework-olm/pull/50)
* [Bug 1934080](https://bugzilla.redhat.com/show_bug.cgi?id=1934080): Preserve existing ServiceAccount owner references during installs. [#41](https://github.com/openshift/operator-framework-olm/pull/41)
* [Bug 1948771](https://bugzilla.redhat.com/show_bug.cgi?id=1948771): Revert "set packageserver replicas to 1 for single node" [#51](https://github.com/openshift/operator-framework-olm/pull/51)
* staging/operator-registry: Pull in all non-opm-add declarative config updates [#47](https://github.com/openshift/operator-framework-olm/pull/47)
* Staged api to 01e8bf8b (v0.8.0) and olm to c480add3. [#49](https://github.com/openshift/operator-framework-olm/pull/49)
* staging/operator-registry: Pull in declarative config base packages + server command [#45](https://github.com/openshift/operator-framework-olm/pull/45)
* Update the staging/operator-lifecycle-manager tree [#46](https://github.com/openshift/operator-framework-olm/pull/46)
* [Bug 1946838](https://bugzilla.redhat.com/show_bug.cgi?id=1946838): Do not adopt copied CSVs [#44](https://github.com/openshift/operator-framework-olm/pull/44)
* [Bug 1913525](https://bugzilla.redhat.com/show_bug.cgi?id=1913525): Bump the k8s dependencies to v0.20.4 [#40](https://github.com/openshift/operator-framework-olm/pull/40)
* Upstream sync for operator-lifecycle-manager [#38](https://github.com/openshift/operator-framework-olm/pull/38)
* staging/olm: Re-generate test fake package(s) [#39](https://github.com/openshift/operator-framework-olm/pull/39)
* Upstream sync for operator-registry [#36](https://github.com/openshift/operator-framework-olm/pull/36)
* [Bug 1945584](https://bugzilla.redhat.com/show_bug.cgi?id=1945584): Remove overrides for GOOS and GOARCH in cpb Makefile recipe. [#35](https://github.com/openshift/operator-framework-olm/pull/35)
* Makefile: Use the full git commit hash when building binaries [#33](https://github.com/openshift/operator-framework-olm/pull/33)
* Remove the OLM_VERSION file and update the base.Dockerfile to use Go 1.16 [#32](https://github.com/openshift/operator-framework-olm/pull/32)
* Updating operator-lifecycle-manager builder & base images to be consistent with ART [#31](https://github.com/openshift/operator-framework-olm/pull/31)
* Updating operator-registry builder & base images to be consistent with ART [#30](https://github.com/openshift/operator-framework-olm/pull/30)
* Dockerfile,Makefile: Add opm binary and cross compilation target(s) [#29](https://github.com/openshift/operator-framework-olm/pull/29)
* add crd and manifest generation [#27](https://github.com/openshift/operator-framework-olm/pull/27)
* staging: Update OLM modules after recent changes [#26](https://github.com/openshift/operator-framework-olm/pull/26)
* Release 4.8 [#25](https://github.com/openshift/operator-framework-olm/pull/25)
* scripts: Update the unit.sh helper script and populate the nested staging directory [#21](https://github.com/openshift/operator-framework-olm/pull/21)
* Add additional make targets and update Dockerfile(s) [#20](https://github.com/openshift/operator-framework-olm/pull/20)
* Dockerfile: Update the Golang operator-registry base image tag [#19](https://github.com/openshift/operator-framework-olm/pull/19)
* Update repository layout [#18](https://github.com/openshift/operator-framework-olm/pull/18)
* Update helper scripts and root Makefile [#12](https://github.com/openshift/operator-framework-olm/pull/12)
* Update the CI registry in the registry Dockerfile and copy OLM_VERSION to root directory [#10](https://github.com/openshift/operator-framework-olm/pull/10)
* *.Dockerfile: Manually bump the image tags to 4.8 [#6](https://github.com/openshift/operator-framework-olm/pull/6)
* staging: Sync the vendor dependencies [#9](https://github.com/openshift/operator-framework-olm/pull/9)
* Add root .gitignore [#7](https://github.com/openshift/operator-framework-olm/pull/7)
* Add Ankita's initial commit + remove nested OWNERS files [#5](https://github.com/openshift/operator-framework-olm/pull/5)
* Create OWNERS [#1](https://github.com/openshift/operator-framework-olm/pull/1)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/06e950de5ebca66e493f6cd2414e73c8978090d3...9e9736d6b162b877da9de3b760b06eeeb52ccd18)


### [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver/tree/c57863f25ec68b34f3928e02b9b750cfcef3c99c)

* [Bug 2013945](https://bugzilla.redhat.com/show_bug.cgi?id=2013945): pvc stuck on pending status when using preallocated storage domain [#89](https://github.com/openshift/ovirt-csi-driver/pull/89)
* Updating ose-ovirt-csi-driver builder & base images to be consistent with ART [#75](https://github.com/openshift/ovirt-csi-driver/pull/75)
* Updating ose-ovirt-csi-driver builder & base images to be consistent with ART [#70](https://github.com/openshift/ovirt-csi-driver/pull/70)
* Update OWNERS and Registry ci [#73](https://github.com/openshift/ovirt-csi-driver/pull/73)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver/compare/72545e6381b3625bcb37e37c4c713862d04cb145...c57863f25ec68b34f3928e02b9b750cfcef3c99c)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/3bab77baee7a006b7a96bea737828979d77cda9d)

* [Bug 2062745](https://bugzilla.redhat.com/show_bug.cgi?id=2062745): Increase timeouts for CSI driver [#90](https://github.com/openshift/ovirt-csi-driver-operator/pull/90)
* [Bug 1940876](https://bugzilla.redhat.com/show_bug.cgi?id=1940876): add resources to csi-provisioner [#57](https://github.com/openshift/ovirt-csi-driver-operator/pull/57)
* [Bug 1947774](https://bugzilla.redhat.com/show_bug.cgi?id=1947774): fix imagePullPolicy to ifNotPresent [#54](https://github.com/openshift/ovirt-csi-driver-operator/pull/54)
* oVirt: Add metrics scraping [#53](https://github.com/openshift/ovirt-csi-driver-operator/pull/53)
* Updating ose-cluster-ovirt-csi-operator builder & base images to be consistent with ART [#52](https://github.com/openshift/ovirt-csi-driver-operator/pull/52)
* [Bug 1933184](https://bugzilla.redhat.com/show_bug.cgi?id=1933184): Fix maxUnavailable value to 10% [#51](https://github.com/openshift/ovirt-csi-driver-operator/pull/51)
* [Bug 1933184](https://bugzilla.redhat.com/show_bug.cgi?id=1933184): Add maxUnavailable to DaemonSets [#50](https://github.com/openshift/ovirt-csi-driver-operator/pull/50)
* Run config informers when starting the operator [#48](https://github.com/openshift/ovirt-csi-driver-operator/pull/48)
* Cleanup: Remove serviceName from controller manifest [#46](https://github.com/openshift/ovirt-csi-driver-operator/pull/46)
* Updating ose-cluster-ovirt-csi-operator builder & base images to be consistent with ART [#45](https://github.com/openshift/ovirt-csi-driver-operator/pull/45)
* update manifests and README [#42](https://github.com/openshift/ovirt-csi-driver-operator/pull/42)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/5e51508c107a161416c0ffffdd17163f14136478...3bab77baee7a006b7a96bea737828979d77cda9d)


### [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt/tree/368223b8507596055a33b731a7942aab82f59ce0)

* [Bug 2046356](https://bugzilla.redhat.com/show_bug.cgi?id=2046356): detach non-bootable disks before removing the VM [#127](https://github.com/openshift/cluster-api-provider-ovirt/pull/127)
* [Bug 1989676](https://bugzilla.redhat.com/show_bug.cgi?id=1989676): correct IPAddress detection for OVNKubernetes [#116](https://github.com/openshift/cluster-api-provider-ovirt/pull/116)
* [Bug 1987182](https://bugzilla.redhat.com/show_bug.cgi?id=1987182): allow auto pinning new names [#115](https://github.com/openshift/cluster-api-provider-ovirt/pull/115)
* [Bug 1948719](https://bugzilla.redhat.com/show_bug.cgi?id=1948719): update controller-runtime dependency [#106](https://github.com/openshift/cluster-api-provider-ovirt/pull/106)
* [Bug 1954177](https://bugzilla.redhat.com/show_bug.cgi?id=1954177): Update mao dependency for webhook v1 changes [#103](https://github.com/openshift/cluster-api-provider-ovirt/pull/103)
* move to go 1.16 [#104](https://github.com/openshift/cluster-api-provider-ovirt/pull/104)
* Updating ose-ovirt-machine-controllers builder & base images to be consistent with ART [#101](https://github.com/openshift/cluster-api-provider-ovirt/pull/101)
* [Bug 1948963](https://bugzilla.redhat.com/show_bug.cgi?id=1948963): add support for hugepages [#102](https://github.com/openshift/cluster-api-provider-ovirt/pull/102)
* [Bug 1941334](https://bugzilla.redhat.com/show_bug.cgi?id=1941334): Add support for auto pinning policy [#100](https://github.com/openshift/cluster-api-provider-ovirt/pull/100)
* [Bug 1917485](https://bugzilla.redhat.com/show_bug.cgi?id=1917485): Add validations to machine object [#96](https://github.com/openshift/cluster-api-provider-ovirt/pull/96)
* [Bug 1937694](https://bugzilla.redhat.com/show_bug.cgi?id=1937694): providerIDController ignore nodes that have no machine [#95](https://github.com/openshift/cluster-api-provider-ovirt/pull/95)
* [Bug 1931215](https://bugzilla.redhat.com/show_bug.cgi?id=1931215): Add support for affinity group [#80](https://github.com/openshift/cluster-api-provider-ovirt/pull/80)
* [Bug 1920905](https://bugzilla.redhat.com/show_bug.cgi?id=1920905): extract node machine ipaddress from the engine instead using DNS . [#85](https://github.com/openshift/cluster-api-provider-ovirt/pull/85)
* credentials: handle error in the strconv.Parsebool [#94](https://github.com/openshift/cluster-api-provider-ovirt/pull/94)
* add custom capo readme [#88](https://github.com/openshift/cluster-api-provider-ovirt/pull/88)
* Updating ose-ovirt-machine-controllers builder & base images to be consistent with ART [#91](https://github.com/openshift/cluster-api-provider-ovirt/pull/91)
* [Bug 1926346](https://bugzilla.redhat.com/show_bug.cgi?id=1926346): move to go 1.15 and registry.ci.openshift.org [#87](https://github.com/openshift/cluster-api-provider-ovirt/pull/87)
* Updating ose-ovirt-machine-controllers builder & base images to be consistent with ART [#83](https://github.com/openshift/cluster-api-provider-ovirt/pull/83)
* [Bug 1926278](https://bugzilla.redhat.com/show_bug.cgi?id=1926278): Bump K8s dependencies to 1.20 [#86](https://github.com/openshift/cluster-api-provider-ovirt/pull/86)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ovirt/compare/75b327298f514972f4f27ea8f401dd354471dc7d...368223b8507596055a33b731a7942aab82f59ce0)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/f91171b4456cf881313b11aab9b9bebf6c915ae3)

* [Bug 2070762](https://bugzilla.redhat.com/show_bug.cgi?id=2070762): [release-4.8] Multiple ExGW cache validation/improvements [#1019](https://github.com/openshift/ovn-kubernetes/pull/1019)
* [Bug 2077370](https://bugzilla.redhat.com/show_bug.cgi?id=2077370): [release-4.8] fix ipv6 network policy [#1047](https://github.com/openshift/ovn-kubernetes/pull/1047)
* [Bug 2062842](https://bugzilla.redhat.com/show_bug.cgi?id=2062842): [4.8z] After reboot egress node, lr-policy-list was not correct, some duplicate records or missed internal IPs [#1009](https://github.com/openshift/ovn-kubernetes/pull/1009)
* [Bug 2065303](https://bugzilla.redhat.com/show_bug.cgi?id=2065303): [CARRY][Downstream-only] Give warning when ipFamilyPolicy implicitly set [#998](https://github.com/openshift/ovn-kubernetes/pull/998)
* [Bug 2070521](https://bugzilla.redhat.com/show_bug.cgi?id=2070521): egressgw: fix deadlock due to behavior of RWLock [#1018](https://github.com/openshift/ovn-kubernetes/pull/1018)
* [Bug 2063836](https://bugzilla.redhat.com/show_bug.cgi?id=2063836): backport 2052975 to 4.8 [#997](https://github.com/openshift/ovn-kubernetes/pull/997)
* [Bug 2068509](https://bugzilla.redhat.com/show_bug.cgi?id=2068509): EgressGW: only return unique elements from getRouteInfosForGateway() [#1011](https://github.com/openshift/ovn-kubernetes/pull/1011)
* [Bug 2065311](https://bugzilla.redhat.com/show_bug.cgi?id=2065311): [release-4.8] Network Policy fixes [#999](https://github.com/openshift/ovn-kubernetes/pull/999)
* [Bug 2057557](https://bugzilla.redhat.com/show_bug.cgi?id=2057557): Create iptables NAT rules also for loadbalancer services [#967](https://github.com/openshift/ovn-kubernetes/pull/967)
* [Bug 2058679](https://bugzilla.redhat.com/show_bug.cgi?id=2058679): Bumps ovn2.13-20.12.0-195.el8fdp [#979](https://github.com/openshift/ovn-kubernetes/pull/979)
* [release 4.8] Update project owners [#992](https://github.com/openshift/ovn-kubernetes/pull/992)
* [Bug 2057931](https://bugzilla.redhat.com/show_bug.cgi?id=2057931): Fix podHandlerCache key [#969](https://github.com/openshift/ovn-kubernetes/pull/969)
* [Bug 2057152](https://bugzilla.redhat.com/show_bug.cgi?id=2057152): Fix egress IP allocator sync [#965](https://github.com/openshift/ovn-kubernetes/pull/965)
* [Bug 2053611](https://bugzilla.redhat.com/show_bug.cgi?id=2053611): Lock the reassignment procedure during node deletion to avoid races [#970](https://github.com/openshift/ovn-kubernetes/pull/970)
* [Bug 2054225](https://bugzilla.redhat.com/show_bug.cgi?id=2054225): Fix gateway routers answer ARP/NDP requests for LoadBalancer/ExternalIP services [#957](https://github.com/openshift/ovn-kubernetes/pull/957)
* [Bug 2056975](https://bugzilla.redhat.com/show_bug.cgi?id=2056975): Don't return err when annotation cannot be unmarshalled [#963](https://github.com/openshift/ovn-kubernetes/pull/963)
* [Bug 2052966](https://bugzilla.redhat.com/show_bug.cgi?id=2052966): [release-4.8] bump ovn to 20.12.0-193 [#949](https://github.com/openshift/ovn-kubernetes/pull/949)
* [Bug 2043757](https://bugzilla.redhat.com/show_bug.cgi?id=2043757): Fix node connectivity to service backed by egress IP pods [#922](https://github.com/openshift/ovn-kubernetes/pull/922)
* [Bug 2042516](https://bugzilla.redhat.com/show_bug.cgi?id=2042516): Fixes for shared to local gateway migration [#916](https://github.com/openshift/ovn-kubernetes/pull/916)
* [Bug 2037884](https://bugzilla.redhat.com/show_bug.cgi?id=2037884): [4.8-backport] Fix nepol statefulset 4.8 [#894](https://github.com/openshift/ovn-kubernetes/pull/894)
* [Bug 2041767](https://bugzilla.redhat.com/show_bug.cgi?id=2041767): Fix pod handlers and pod IP parsing for egress IP [#912](https://github.com/openshift/ovn-kubernetes/pull/912)
* [Bug 2039279](https://bugzilla.redhat.com/show_bug.cgi?id=2039279): filter out KubeAPIAuth when logging CNI requests [#897](https://github.com/openshift/ovn-kubernetes/pull/897)
* [Bug 2021221](https://bugzilla.redhat.com/show_bug.cgi?id=2021221): Add ovn-controller logical flow cache options [#890](https://github.com/openshift/ovn-kubernetes/pull/890)
* [Bug 2030465](https://bugzilla.redhat.com/show_bug.cgi?id=2030465): Make config parsing more resilient for unknown fields [#868](https://github.com/openshift/ovn-kubernetes/pull/868)
* [Bug 2027873](https://bugzilla.redhat.com/show_bug.cgi?id=2027873): [4.8z] Fixes race between node handler and pod sync [#858](https://github.com/openshift/ovn-kubernetes/pull/858)
* [Bug 2027487](https://bugzilla.redhat.com/show_bug.cgi?id=2027487): [4.8z] addressManager should not call sync() from ErrorCallback [#853](https://github.com/openshift/ovn-kubernetes/pull/853)
* [Bug 2022043](https://bugzilla.redhat.com/show_bug.cgi?id=2022043): [4.8z] Avoid stale annotations by re-subscribing to netlink [#829](https://github.com/openshift/ovn-kubernetes/pull/829)
* [Bug 2014332](https://bugzilla.redhat.com/show_bug.cgi?id=2014332): [4.8z] Scale fixes for pods/exgws [#798](https://github.com/openshift/ovn-kubernetes/pull/798)
* [Bug 2011391](https://bugzilla.redhat.com/show_bug.cgi?id=2011391): [4.8] bump OVN to 20.12.0-183.el8fdp [#783](https://github.com/openshift/ovn-kubernetes/pull/783)
* [Bug 1986708](https://bugzilla.redhat.com/show_bug.cgi?id=1986708): Add routes for pod: fail only after checking all the gw addresses / ips [#774](https://github.com/openshift/ovn-kubernetes/pull/774)
* [Bug 2005480](https://bugzilla.redhat.com/show_bug.cgi?id=2005480): [4.8z] Remove waiting for namespace and namespace lock contention [#760](https://github.com/openshift/ovn-kubernetes/pull/760)
* [release 4.8] Bug 1994624: Infer subnet for node /128 IPv6 addresses [#661](https://github.com/openshift/ovn-kubernetes/pull/661)
* [Bug 2004336](https://bugzilla.redhat.com/show_bug.cgi?id=2004336): Ensure host interfaces are deleted by CNI [#745](https://github.com/openshift/ovn-kubernetes/pull/745)
* [Bug 2005464](https://bugzilla.redhat.com/show_bug.cgi?id=2005464): [4.8z] Fixes skipping pods accidentally in retry [#758](https://github.com/openshift/ovn-kubernetes/pull/758)
* [Bug 2005357](https://bugzilla.redhat.com/show_bug.cgi?id=2005357): [4.8z] Fixes misuse of pod annotations during update event [#753](https://github.com/openshift/ovn-kubernetes/pull/753)
* [Bug 1996739](https://bugzilla.redhat.com/show_bug.cgi?id=1996739): Fix ensurePod to call addPodExternalGW only for annotation updates [#752](https://github.com/openshift/ovn-kubernetes/pull/752)
* [Bug 2004488](https://bugzilla.redhat.com/show_bug.cgi?id=2004488): panic after EgressFirewall deletion and DNS record expiration [#749](https://github.com/openshift/ovn-kubernetes/pull/749)
* [Bug 2004269](https://bugzilla.redhat.com/show_bug.cgi?id=2004269): Sync ECMP routes on startup and fixes stale ECMP routes [#743](https://github.com/openshift/ovn-kubernetes/pull/743)
* [Bug 1999638](https://bugzilla.redhat.com/show_bug.cgi?id=1999638): Fix duplicate incrementing of subnet allocation metric [#700](https://github.com/openshift/ovn-kubernetes/pull/700)
* [Bug 1996729](https://bugzilla.redhat.com/show_bug.cgi?id=1996729): NetworkPolicy: bulk-add pods to new policies (or on restart) [#678](https://github.com/openshift/ovn-kubernetes/pull/678)
* [Bug 2000214](https://bugzilla.redhat.com/show_bug.cgi?id=2000214): Fix GetPortAddresses for HBO [#711](https://github.com/openshift/ovn-kubernetes/pull/711)
* [Bug 2001641](https://bugzilla.redhat.com/show_bug.cgi?id=2001641): egressfirewall not set after upgrade [#722](https://github.com/openshift/ovn-kubernetes/pull/722)
* [Bug 1996201](https://bugzilla.redhat.com/show_bug.cgi?id=1996201): Fixes cases of timed out while waiting for OVS port binding [#686](https://github.com/openshift/ovn-kubernetes/pull/686)
* [Bug 2001542](https://bugzilla.redhat.com/show_bug.cgi?id=2001542): fix reserve joinSwitch LRP IPs [#720](https://github.com/openshift/ovn-kubernetes/pull/720)
* [Bug 2001363](https://bugzilla.redhat.com/show_bug.cgi?id=2001363): [4.8z] Ensure client handling of canceled/dropped OVSDB monitor [#718](https://github.com/openshift/ovn-kubernetes/pull/718)
* [Bug 1999895](https://bugzilla.redhat.com/show_bug.cgi?id=1999895): Revert "[release-4.8] fix reserve joinSwitch LRP IPs" [#706](https://github.com/openshift/ovn-kubernetes/pull/706)
* [Bug 1996965](https://bugzilla.redhat.com/show_bug.cgi?id=1996965): Add quotes around nexthop and dst-ip fields [#680](https://github.com/openshift/ovn-kubernetes/pull/680)
* [Bug 1994937](https://bugzilla.redhat.com/show_bug.cgi?id=1994937): Fix: sync egress IP for missed events on start-up [#665](https://github.com/openshift/ovn-kubernetes/pull/665)
* [Bug 1997049](https://bugzilla.redhat.com/show_bug.cgi?id=1997049): fix reserve joinSwitch LRP IPs [#681](https://github.com/openshift/ovn-kubernetes/pull/681)
* [Bug 1985957](https://bugzilla.redhat.com/show_bug.cgi?id=1985957): Backport ovnkube-trace requires ip package to be installed to 4.8 [#656](https://github.com/openshift/ovn-kubernetes/pull/656)
* [Bug 1988487](https://bugzilla.redhat.com/show_bug.cgi?id=1988487): Fix lgw eip 4.8 [#636](https://github.com/openshift/ovn-kubernetes/pull/636)
* [Bug 1976241](https://bugzilla.redhat.com/show_bug.cgi?id=1976241): Update existing policy ACLs on start [#635](https://github.com/openshift/ovn-kubernetes/pull/635)
* Updating ose-ovn-kubernetes builder & base images to be consistent with ART [#473](https://github.com/openshift/ovn-kubernetes/pull/473)
* [Bug 1985514](https://bugzilla.redhat.com/show_bug.cgi?id=1985514): Add v6 management interface address for host network policy [#624](https://github.com/openshift/ovn-kubernetes/pull/624)
* [Bug 1986573](https://bugzilla.redhat.com/show_bug.cgi?id=1986573): Declare a maximum line length for batching [#631](https://github.com/openshift/ovn-kubernetes/pull/631)
* [Bug 1976644](https://bugzilla.redhat.com/show_bug.cgi?id=1976644): Bump OVN to 20.12.0-140.el8fdp [#591](https://github.com/openshift/ovn-kubernetes/pull/591)
* [Bug 1961506](https://bugzilla.redhat.com/show_bug.cgi?id=1961506): Detect if OVS supports check pkt length [#584](https://github.com/openshift/ovn-kubernetes/pull/584)
* [Bug 1973672](https://bugzilla.redhat.com/show_bug.cgi?id=1973672): Fix compatibility of multiple ipBlock NetworkPolicies [#581](https://github.com/openshift/ovn-kubernetes/pull/581)
* [Bug 1956955](https://bugzilla.redhat.com/show_bug.cgi?id=1956955): Batching: Fixes finding maximum bash arguments [#567](https://github.com/openshift/ovn-kubernetes/pull/567)
* [Bug 1970068](https://bugzilla.redhat.com/show_bug.cgi?id=1970068): Fixes getNodeIPs assuming dualstack [#568](https://github.com/openshift/ovn-kubernetes/pull/568)
* [Bug 1958972](https://bugzilla.redhat.com/show_bug.cgi?id=1958972): Fixes adding nodes to use new Services controller [#554](https://github.com/openshift/ovn-kubernetes/pull/554)
* [Bug 1927047](https://bugzilla.redhat.com/show_bug.cgi?id=1927047): Handling packet sizes greater than pod MTU [#559](https://github.com/openshift/ovn-kubernetes/pull/559)
* [Bug 1955783](https://bugzilla.redhat.com/show_bug.cgi?id=1955783): Add Namespace and rule Number to ACL name [#532](https://github.com/openshift/ovn-kubernetes/pull/532)
* [Bug 1961852](https://bugzilla.redhat.com/show_bug.cgi?id=1961852): policy: reduce lock contention on policy object [#560](https://github.com/openshift/ovn-kubernetes/pull/560)
* [Bug 1960757](https://bugzilla.redhat.com/show_bug.cgi?id=1960757): CARRY: block MCS for shared-gateway mode. [#542](https://github.com/openshift/ovn-kubernetes/pull/542)
* [Bug 1954773](https://bugzilla.redhat.com/show_bug.cgi?id=1954773): adding cli flag for egressfirewall and removing CRD watcher [#541](https://github.com/openshift/ovn-kubernetes/pull/541)
* [Bug 1962392](https://bugzilla.redhat.com/show_bug.cgi?id=1962392): CARRY: fix missed learn for hybrid exgw [#551](https://github.com/openshift/ovn-kubernetes/pull/551)
* [Bug 1956955](https://bugzilla.redhat.com/show_bug.cgi?id=1956955): Reduces number of OVN operations in services #2201 [#545](https://github.com/openshift/ovn-kubernetes/pull/545)
* [Bug 1958958](https://bugzilla.redhat.com/show_bug.cgi?id=1958958): NewAddressSet: return nil in case of error [#540](https://github.com/openshift/ovn-kubernetes/pull/540)
* [Bug 1952819](https://bugzilla.redhat.com/show_bug.cgi?id=1952819): Bump the go-ovn version to f0122836cc35fcadf72de8698b26157c5a42a9f8 [#537](https://github.com/openshift/ovn-kubernetes/pull/537)
* [Bug 1953680](https://bugzilla.redhat.com/show_bug.cgi?id=1953680): policy: handle NetworkPolicies single "from" multiple "ipBlock" [#530](https://github.com/openshift/ovn-kubernetes/pull/530)
* [Bug 1952819](https://bugzilla.redhat.com/show_bug.cgi?id=1952819): handle nbdb deletes on reconnect / delete stale ports using goovn client [#528](https://github.com/openshift/ovn-kubernetes/pull/528)
* [Bug 1957039](https://bugzilla.redhat.com/show_bug.cgi?id=1957039): Fix pod -> svc -> host LGW flow [#531](https://github.com/openshift/ovn-kubernetes/pull/531)
* [Bug 1959058](https://bugzilla.redhat.com/show_bug.cgi?id=1959058): policy: release LSP lock before adding pods to default-deny portgroups. [#529](https://github.com/openshift/ovn-kubernetes/pull/529)
* [Bug 1949582](https://bugzilla.redhat.com/show_bug.cgi?id=1949582): CNI cmdCheck: treat ingress_policing_rate=0 as not found [#522](https://github.com/openshift/ovn-kubernetes/pull/522)
* [Bug 1950471](https://bugzilla.redhat.com/show_bug.cgi?id=1950471): Purge only the lprs with nexthops of the same family of new nexthop [#516](https://github.com/openshift/ovn-kubernetes/pull/516)
* [Bug 1952262](https://bugzilla.redhat.com/show_bug.cgi?id=1952262): Revert "removing the hybrid overlay externalGW code" [#511](https://github.com/openshift/ovn-kubernetes/pull/511)
* [Bug 1953169](https://bugzilla.redhat.com/show_bug.cgi?id=1953169): endpoint slice controller doesn't handle services target port correctly [#515](https://github.com/openshift/ovn-kubernetes/pull/515)
* [Bug 1944121](https://bugzilla.redhat.com/show_bug.cgi?id=1944121): master: Delay deleting Namespace's address set for 20 seconds [#499](https://github.com/openshift/ovn-kubernetes/pull/499)
* [Bug 1947917](https://bugzilla.redhat.com/show_bug.cgi?id=1947917): fix deadlock in EgressFirewall DNS code [#502](https://github.com/openshift/ovn-kubernetes/pull/502)
* [Bug 1950159](https://bugzilla.redhat.com/show_bug.cgi?id=1950159): Fix linter errors in OCP Hacks [#495](https://github.com/openshift/ovn-kubernetes/pull/495)
* [Bug 1947712](https://bugzilla.redhat.com/show_bug.cgi?id=1947712): pods: bind pod logical switch ports to the node's chassis with requested-chassis [#500](https://github.com/openshift/ovn-kubernetes/pull/500)
* [Bug 1945948](https://bugzilla.redhat.com/show_bug.cgi?id=1945948): Fixes local node IP reachability in shared gateway mode [#498](https://github.com/openshift/ovn-kubernetes/pull/498)
* [Bug 1930248](https://bugzilla.redhat.com/show_bug.cgi?id=1930248): Sync management port for an existing node [#497](https://github.com/openshift/ovn-kubernetes/pull/497)
* 4-9-21 merge [#496](https://github.com/openshift/ovn-kubernetes/pull/496)
* Dockerfile: bump OVS to openvswitch2.15-2.15.0-9 [#492](https://github.com/openshift/ovn-kubernetes/pull/492)
* [Bug 1944180](https://bugzilla.redhat.com/show_bug.cgi?id=1944180): 3-30-21 merge [#480](https://github.com/openshift/ovn-kubernetes/pull/480)
* Dockerfile: bump OVS to openvswitch2.15-2.15.0-2 [#461](https://github.com/openshift/ovn-kubernetes/pull/461)
* Add wait to iptables commands for OCP Hacks [#476](https://github.com/openshift/ovn-kubernetes/pull/476)
* 3-24-21 merge [#475](https://github.com/openshift/ovn-kubernetes/pull/475)
* 3-22-21 merge [#472](https://github.com/openshift/ovn-kubernetes/pull/472)
* BZ 1927845: Bump OVS version to 2.13.0-79.5.el8fdp [#434](https://github.com/openshift/ovn-kubernetes/pull/434)
* Remove valadas from owners [#469](https://github.com/openshift/ovn-kubernetes/pull/469)
* Bump OVN to ovn2.13-20.12.0-25.el8fdp [#470](https://github.com/openshift/ovn-kubernetes/pull/470)
* [Bug 1934643](https://bugzilla.redhat.com/show_bug.cgi?id=1934643): Downstream merge 3-10-21 [#458](https://github.com/openshift/ovn-kubernetes/pull/458)
* Downstream merge 3-4-21 [#440](https://github.com/openshift/ovn-kubernetes/pull/440)
* Bump OVN to ovn2.13-20.12.0-24.el8fdp [#447](https://github.com/openshift/ovn-kubernetes/pull/447)
* Downstream merge 2-22-21 [#438](https://github.com/openshift/ovn-kubernetes/pull/438)
* [Bug 1918442](https://bugzilla.redhat.com/show_bug.cgi?id=1918442): Fix idling and rejects for 4.7 [#433](https://github.com/openshift/ovn-kubernetes/pull/433)
* Create a podman image to use with CI so linter/utests can be run [#431](https://github.com/openshift/ovn-kubernetes/pull/431)
* Updating ose-ovn-kubernetes builder & base images to be consistent with ART [#432](https://github.com/openshift/ovn-kubernetes/pull/432)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/cd1a152c3e3363ebd7dfc4ce83747fecf4804125...f91171b4456cf881313b11aab9b9bebf6c915ae3)


### [pod](https://github.com/openshift/kubernetes/tree/6b3cbdd0f0b90bc6b28fec91cce5b3c94d7d56a9)

* [Bug 2077004](https://bugzilla.redhat.com/show_bug.cgi?id=2077004): Rebase 1.21.11 [#1246](https://github.com/openshift/kubernetes/pull/1246)
* [Bug 2063953](https://bugzilla.redhat.com/show_bug.cgi?id=2063953): UPSTREAM: <carry>: use hardcoded rest mapper from library-go [#1245](https://github.com/openshift/kubernetes/pull/1245)
* [Bug 2075043](https://bugzilla.redhat.com/show_bug.cgi?id=2075043): golang toolchain unsupported parsers tag [#1240](https://github.com/openshift/kubernetes/pull/1240)
* [Bug 2043808](https://bugzilla.redhat.com/show_bug.cgi?id=2043808): IPs with leading zeros are still valid in the apiserver [#1173](https://github.com/openshift/kubernetes/pull/1173)
* [Bug 2060494](https://bugzilla.redhat.com/show_bug.cgi?id=2060494): Backports inotify leak fix into kubelet [#1203](https://github.com/openshift/kubernetes/pull/1203)
* [Bug 2024642](https://bugzilla.redhat.com/show_bug.cgi?id=2024642): Rebase v1.21.8 [#1102](https://github.com/openshift/kubernetes/pull/1102)
* [Bug 2050131](https://bugzilla.redhat.com/show_bug.cgi?id=2050131): UPSTREAM: <carry>: set correctly static pods CPUs when workload partitioning is disabled [#1168](https://github.com/openshift/kubernetes/pull/1168)
* [Bug 2039377](https://bugzilla.redhat.com/show_bug.cgi?id=2039377): UPSTREAM: 89885: SQUASH: Retry fetching clouds.conf [#1108](https://github.com/openshift/kubernetes/pull/1108)
* [Bug 2029466](https://bugzilla.redhat.com/show_bug.cgi?id=2029466): UPSTREAM: 107014: Mark volume as uncertain after Unmount* fails [#1146](https://github.com/openshift/kubernetes/pull/1146)
* [Bug 2024995](https://bugzilla.redhat.com/show_bug.cgi?id=2024995): Fix subpath source check [#1067](https://github.com/openshift/kubernetes/pull/1067)
* [Bug 2032325](https://bugzilla.redhat.com/show_bug.cgi?id=2032325): UPSTREAM: <carry>: api request counts for current hour are incorrect [#1092](https://github.com/openshift/kubernetes/pull/1092)
* [Bug 2022741](https://bugzilla.redhat.com/show_bug.cgi?id=2022741): UPSTREAM: 106260: Don't guess SELinux support on error [#1054](https://github.com/openshift/kubernetes/pull/1054)
* [Bug 2021997](https://bugzilla.redhat.com/show_bug.cgi?id=2021997): Read k8s version from hyperkube Dockerfile [#1045](https://github.com/openshift/kubernetes/pull/1045)
* Updating openshift-enterprise-hyperkube builder & base images to be consistent with ART [#559](https://github.com/openshift/kubernetes/pull/559)
* [Bug 2017027](https://bugzilla.redhat.com/show_bug.cgi?id=2017027): UPSTREAM: <drop>: bump apiserver-library-go [#1069](https://github.com/openshift/kubernetes/pull/1069)
* [Bug 2022265](https://bugzilla.redhat.com/show_bug.cgi?id=2022265): Rebase v1.21.6 [#1060](https://github.com/openshift/kubernetes/pull/1060)
* Updating openshift-enterprise-pod images to be consistent with ART [#680](https://github.com/openshift/kubernetes/pull/680)
* [Bug 2020644](https://bugzilla.redhat.com/show_bug.cgi?id=2020644): Image policy should mutate DeploymentConfigs, StatefulSets, and new CronJobs [#1050](https://github.com/openshift/kubernetes/pull/1050)
* [Bug 1994655](https://bugzilla.redhat.com/show_bug.cgi?id=1994655): openshift-apiserver should not set Available=False APIServicesAvailable on update [#955](https://github.com/openshift/kubernetes/pull/955)
* [Bug 2008403](https://bugzilla.redhat.com/show_bug.cgi?id=2008403): Rebase v1.21.5 [#981](https://github.com/openshift/kubernetes/pull/981)
* [Bug 2011460](https://bugzilla.redhat.com/show_bug.cgi?id=2011460): UPSTREAM: <carry>: openshift-hack/images/os/Dockerfile: Add io.openshift.build.versions, etc. [#1005](https://github.com/openshift/kubernetes/pull/1005)
* [Bug 1995714](https://bugzilla.redhat.com/show_bug.cgi?id=1995714): UPSTREAM: <carry>: admission/managementcpusoverride: cover the roll-back case [#895](https://github.com/openshift/kubernetes/pull/895)
* [Bug 1994457](https://bugzilla.redhat.com/show_bug.cgi?id=1994457): Update to kubernetes 1.21.4 [#888](https://github.com/openshift/kubernetes/pull/888)
* [Bug 1993754](https://bugzilla.redhat.com/show_bug.cgi?id=1993754): UPSTREAM: 104347: Pass additional flags to subpath mount to avoid fla… [#940](https://github.com/openshift/kubernetes/pull/940)
* [Bug 1998391](https://bugzilla.redhat.com/show_bug.cgi?id=1998391): UPSTREAM: 104530: [1.21] bump runc to 1.0.2 [#912](https://github.com/openshift/kubernetes/pull/912)
* [Bug 1957133](https://bugzilla.redhat.com/show_bug.cgi?id=1957133): do not throw error when we can't get canonical path [#854](https://github.com/openshift/kubernetes/pull/854)
* [Bug 1981770](https://bugzilla.redhat.com/show_bug.cgi?id=1981770): UPSTREAM: <drop>: bump(apiserver-library-go) [#864](https://github.com/openshift/kubernetes/pull/864)
* [Bug 1981633](https://bugzilla.redhat.com/show_bug.cgi?id=1981633): UPSTREAM: <carry>: prevent the kubecontrollermanager service-ca from getting less secure [#858](https://github.com/openshift/kubernetes/pull/858)
* [Bug 1981633](https://bugzilla.redhat.com/show_bug.cgi?id=1981633): UPSTREAM: <carry>: add a way to inject a vulnerable, legacy service-c… [#856](https://github.com/openshift/kubernetes/pull/856)
* [Bug 1977351](https://bugzilla.redhat.com/show_bug.cgi?id=1977351): UPSTREAM: <carry>: Reject the pod creation when we can not decide the cluster type [#833](https://github.com/openshift/kubernetes/pull/833)
* [Bug 1977924](https://bugzilla.redhat.com/show_bug.cgi?id=1977924): [release-4.8] Ensure scc compatibility with BoundServiceAccountTokenVolume [#842](https://github.com/openshift/kubernetes/pull/842)
* [Bug 1975938](https://bugzilla.redhat.com/show_bug.cgi?id=1975938): update Multi-AZ Cluster Volumes test name [#829](https://github.com/openshift/kubernetes/pull/829)
* [Bug 1973580](https://bugzilla.redhat.com/show_bug.cgi?id=1973580): only chown if non-windows machine with projected volumes [#815](https://github.com/openshift/kubernetes/pull/815)
* [Bug 1950993](https://bugzilla.redhat.com/show_bug.cgi?id=1950993): UPSTREAM: <drop>: bump cadvisor for 2868 upstream patch [#802](https://github.com/openshift/kubernetes/pull/802)
* BUG 1927359: Add support for gathering metrics from CSI block-mode volumes [#731](https://github.com/openshift/kubernetes/pull/731)
* [Bug 1954509](https://bugzilla.redhat.com/show_bug.cgi?id=1954509): UPSTREAM: multiple: Fix corruption of FibreChannel volumes [#788](https://github.com/openshift/kubernetes/pull/788)
* [Bug 1946479](https://bugzilla.redhat.com/show_bug.cgi?id=1946479): Re-enable BoundServiceAccountTokenVolume disabled by 1.21 rebase [#714](https://github.com/openshift/kubernetes/pull/714)
* [Bug 1950010](https://bugzilla.redhat.com/show_bug.cgi?id=1950010): UPSTREAM: <carry>: apirequestcount: smear out CR updates over interval [#798](https://github.com/openshift/kubernetes/pull/798)
* [Bug 1969626](https://bugzilla.redhat.com/show_bug.cgi?id=1969626): UPSTREAM: 102587: kubelet: Revert "Cleanup portforward streams after their usage" [#796](https://github.com/openshift/kubernetes/pull/796)
* [Bug 1966410](https://bugzilla.redhat.com/show_bug.cgi?id=1966410): kube-apiserver: add system_client=cluster-policy-controller to apiserver_request_total [#794](https://github.com/openshift/kubernetes/pull/794)
* [Bug 1965545](https://bugzilla.redhat.com/show_bug.cgi?id=1965545): vendor: bump runc to rc95 + "unit exists" fix [#790](https://github.com/openshift/kubernetes/pull/790)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): UPSTREAM: 102606: Bring back "client-go: add retry logic for Watch and Stream" and fix test flake [#792](https://github.com/openshift/kubernetes/pull/792)
* [Bug 1967591](https://bugzilla.redhat.com/show_bug.cgi?id=1967591): UPSTREAM: <carry>: do not mutate pods when it has a container with both CPU request and limit [#785](https://github.com/openshift/kubernetes/pull/785)
* [Bug 1966410](https://bugzilla.redhat.com/show_bug.cgi?id=1966410): UPSTREAM: <carry>: apiserver: add system_client=kube-{apiserver,cm,s} to apiserver_request_total [#784](https://github.com/openshift/kubernetes/pull/784)
* UPSTREAM: <carry>: kubelet: add ehashman as reviewer [#583](https://github.com/openshift/kubernetes/pull/583)
* [Bug 1967745](https://bugzilla.redhat.com/show_bug.cgi?id=1967745): Add DNS custom resource admission [#681](https://github.com/openshift/kubernetes/pull/681)
* [Bug 1927397](https://bugzilla.redhat.com/show_bug.cgi?id=1927397): UPSTREAM: 98028: add auto update for priority & fairness bootstrap configuration objects [#736](https://github.com/openshift/kubernetes/pull/736)
* [Bug 1964492](https://bugzilla.redhat.com/show_bug.cgi?id=1964492): UPSTREAM: 102171: Implement support for watch initialization in P&F [#773](https://github.com/openshift/kubernetes/pull/773)
* [Bug 1946479](https://bugzilla.redhat.com/show_bug.cgi?id=1946479): UPSTREAM: 101950: Make watch order conformance test reliable [#786](https://github.com/openshift/kubernetes/pull/786)
* [Bug 1953127](https://bugzilla.redhat.com/show_bug.cgi?id=1953127): UPSTREAM: <drop>: work around broken NetPol DNS rules [#770](https://github.com/openshift/kubernetes/pull/770)
* [Bug 1958329](https://bugzilla.redhat.com/show_bug.cgi?id=1958329): UPSTREAM: 97428: add more context to log after a request times out [#737](https://github.com/openshift/kubernetes/pull/737)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): UPSTREAM: 102107: client-go: add retry logic for Watch and Stream [#783](https://github.com/openshift/kubernetes/pull/783)
* [Bug 1961925](https://bugzilla.redhat.com/show_bug.cgi?id=1961925): UPSTREAM: <carry>: Does not prevent pod creation because of no nodes reason when it runs under the regular cluster [#756](https://github.com/openshift/kubernetes/pull/756)
* [Bug 1913974](https://bugzilla.redhat.com/show_bug.cgi?id=1913974): UPSTREAM: 102021: Update snapshotting tests to use volumeHandle for CSI volumes when waiting for NodeUnpublish [#769](https://github.com/openshift/kubernetes/pull/769)
* [Bug 1953102](https://bugzilla.redhat.com/show_bug.cgi?id=1953102): UPSTREAM: 102147: vendor: bump runc to rc95 [#761](https://github.com/openshift/kubernetes/pull/761)
* [Bug 1960205](https://bugzilla.redhat.com/show_bug.cgi?id=1960205): UPSTREAM: <carry>: verbosity of managed workloads logging [#771](https://github.com/openshift/kubernetes/pull/771)
* UPSTREAM: <carry>: update rebase doc [#768](https://github.com/openshift/kubernetes/pull/768)
* [Bug 1964197](https://bugzilla.redhat.com/show_bug.cgi?id=1964197): UPSTREAM: 102224: Fix expired unit test certs [#767](https://github.com/openshift/kubernetes/pull/767)
* [Bug 1949050](https://bugzilla.redhat.com/show_bug.cgi?id=1949050): Rebase 1.21.1 [#751](https://github.com/openshift/kubernetes/pull/751)
* UPSTREAM: 102089: Bug 1961644: Add Node IP IPv6 formatting in NodeAuthenticator tests [#760](https://github.com/openshift/kubernetes/pull/760)
* [Bug 1963079](https://bugzilla.redhat.com/show_bug.cgi?id=1963079): KCM with preferred host support [#759](https://github.com/openshift/kubernetes/pull/759)
* [Bug 1952460](https://bugzilla.redhat.com/show_bug.cgi?id=1952460): UPSTREAM: 101488: e2e/network/firewall: don't assume nodes are exposed externally [#738](https://github.com/openshift/kubernetes/pull/738)
* UPSTREAM: 101213: Bug 1881662: fix change erro to info [#744](https://github.com/openshift/kubernetes/pull/744)
* [Bug 1932280](https://bugzilla.redhat.com/show_bug.cgi?id=1932280): UPSTREAM: 101116: vSphere: Return useful errors from parameter validation [#707](https://github.com/openshift/kubernetes/pull/707)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): Handle 429 errors from watch requests in reflector [#669](https://github.com/openshift/kubernetes/pull/669)
* [Bug 1945091](https://bugzilla.redhat.com/show_bug.cgi?id=1945091): Don't force-disable IPv6, dual-stack, and SCTP tests [#565](https://github.com/openshift/kubernetes/pull/565)
* [Bug 1960780](https://bugzilla.redhat.com/show_bug.cgi?id=1960780): UPSTREAM: <carry>: Use policyv1beta1 [#752](https://github.com/openshift/kubernetes/pull/752)
* UPSTREAM: 101067: Bug 1946459: fix nfs storage ipv6 add square brackets [#743](https://github.com/openshift/kubernetes/pull/743)
* [Bug 1884800](https://bugzilla.redhat.com/show_bug.cgi?id=1884800): Reduce names of vsphere volumes even further [#701](https://github.com/openshift/kubernetes/pull/701)
* [Bug 1959471](https://bugzilla.redhat.com/show_bug.cgi?id=1959471): Conformance tests (sysctls) may not be excluded [#741](https://github.com/openshift/kubernetes/pull/741)
* [Bug 1923847](https://bugzilla.redhat.com/show_bug.cgi?id=1923847): openshift-kube-apiserver: use github.com/openshift/apiserver-library-go/pkg/labelselector [#708](https://github.com/openshift/kubernetes/pull/708)
* [Bug 1949105](https://bugzilla.redhat.com/show_bug.cgi?id=1949105): Reenable NetworkPolicy test. [#734](https://github.com/openshift/kubernetes/pull/734)
* [Bug 1957502](https://bugzilla.redhat.com/show_bug.cgi?id=1957502): UPSTREAM: <carry>: correct apirequestcount lock [#735](https://github.com/openshift/kubernetes/pull/735)
* [Bug 1956895](https://bugzilla.redhat.com/show_bug.cgi?id=1956895): UPSTREAM: 101593: kubelet: change cgroup move message to log level 3 [#732](https://github.com/openshift/kubernetes/pull/732)
* [Bug 1956898](https://bugzilla.redhat.com/show_bug.cgi?id=1956898): UPSTREAM: 99748: kubelet: fix log files being overwritten on containe… [#733](https://github.com/openshift/kubernetes/pull/733)
* [Bug 1949612](https://bugzilla.redhat.com/show_bug.cgi?id=1949612): UPSTREAM: 101708: Fix log spam for du failure on pod etc-hosts metrics [#729](https://github.com/openshift/kubernetes/pull/729)
* [Bug 1954696](https://bugzilla.redhat.com/show_bug.cgi?id=1954696): UPSTREAM: <carry>: add apirequestcount useragent [#716](https://github.com/openshift/kubernetes/pull/716)
* [Bug 1952666](https://bugzilla.redhat.com/show_bug.cgi?id=1952666): UPSTREAM: <carry>: management workloads enhancement 741(uint64) [#706](https://github.com/openshift/kubernetes/pull/706)
* [Bug 1953555](https://bugzilla.redhat.com/show_bug.cgi?id=1953555): UPSTREAM: <carry>: Skip GlusterFS tests [#723](https://github.com/openshift/kubernetes/pull/723)
* [Bug 1954770](https://bugzilla.redhat.com/show_bug.cgi?id=1954770): UPSTREAM: 99095: Prevent Kubelet stuck in DiskPressure when imagefs minreclaim is set [#717](https://github.com/openshift/kubernetes/pull/717)
* UPSTREAM: 101280: Bug 1913974: Force NodeUnstageVolume to finish for all distros [#700](https://github.com/openshift/kubernetes/pull/700)
* [Bug 1952224](https://bugzilla.redhat.com/show_bug.cgi?id=1952224): kubelet: do not cleanup volumes if pod is being killed [#709](https://github.com/openshift/kubernetes/pull/709)
* [Bug 1954972](https://bugzilla.redhat.com/show_bug.cgi?id=1954972): openshift-kube-apiserver/admission: fix featuregates resource name [#719](https://github.com/openshift/kubernetes/pull/719)
* [Bug 1954634](https://bugzilla.redhat.com/show_bug.cgi?id=1954634): UPSTREAM: <carry>: honor max users [#689](https://github.com/openshift/kubernetes/pull/689)
* [Bug 1951585](https://bugzilla.redhat.com/show_bug.cgi?id=1951585): Addresses build error pause [#685](https://github.com/openshift/kubernetes/pull/685)
* [Bug 1954638](https://bugzilla.redhat.com/show_bug.cgi?id=1954638): UPSTREAM: <carry>: apirequest count with empty .status.removedInRelease [#715](https://github.com/openshift/kubernetes/pull/715)
* [Bug 1927263](https://bugzilla.redhat.com/show_bug.cgi?id=1927263): UPSTREAM: 99336: kubelet: improve the node informer sync check [#704](https://github.com/openshift/kubernetes/pull/704)
* [Bug 1953555](https://bugzilla.redhat.com/show_bug.cgi?id=1953555): UPSTREAM: <carry>: Skip GlusterFS tests [#647](https://github.com/openshift/kubernetes/pull/647)
* [Bug 1953127](https://bugzilla.redhat.com/show_bug.cgi?id=1953127): Re-enable [Feature:NetworkPolicy] tests which were wrongly disabled in rebase [#655](https://github.com/openshift/kubernetes/pull/655)
* UPSTREAM: <drop>: update openshift/api for old API removal [#702](https://github.com/openshift/kubernetes/pull/702)
* UPSTREAM: <carry>: Provide a new admission plugin to mutate management pods CPUs requests [#632](https://github.com/openshift/kubernetes/pull/632)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): UPSTREAM: 100959: DelegatingAuthenticationOptions: TokenReview reques… [#654](https://github.com/openshift/kubernetes/pull/654)
* [Bug 1948953](https://bugzilla.redhat.com/show_bug.cgi?id=1948953): UPSTREAM: <carry>: Set informer for openstack [#662](https://github.com/openshift/kubernetes/pull/662)
* [Bug 1952333](https://bugzilla.redhat.com/show_bug.cgi?id=1952333): UPSTREAM: 101306: Additional CVE-2021-3121 fix [#699](https://github.com/openshift/kubernetes/pull/699)
* [Bug 1945104](https://bugzilla.redhat.com/show_bug.cgi?id=1945104): UPSTREAM: 101186: Fix RBAC of generic ephemeral volumes controller [#694](https://github.com/openshift/kubernetes/pull/694)
* [Bug 1944631](https://bugzilla.redhat.com/show_bug.cgi?id=1944631): openshift authenticator: don't allow old-style tokens [#667](https://github.com/openshift/kubernetes/pull/667)
* [Bug 1937299](https://bugzilla.redhat.com/show_bug.cgi?id=1937299): Fix mounting partitions on NVMe devices [#661](https://github.com/openshift/kubernetes/pull/661)
* [Bug 1949050](https://bugzilla.redhat.com/show_bug.cgi?id=1949050): UPSTREAM: 101287: Fail fast when image is specified w/o tag [#693](https://github.com/openshift/kubernetes/pull/693)
* [Bug 1949050](https://bugzilla.redhat.com/show_bug.cgi?id=1949050): UPSTREAM: 101337: Remove Limits from scheduling e2e balanced pod reso… [#696](https://github.com/openshift/kubernetes/pull/696)
* [Bug 1951558](https://bugzilla.redhat.com/show_bug.cgi?id=1951558): UPSTREAM: 101093: Fix startupProbe behaviour changed [#687](https://github.com/openshift/kubernetes/pull/687)
* [Bug 1949306](https://bugzilla.redhat.com/show_bug.cgi?id=1949306): UPSTREAM: <carry>: keep apirequestcounts for non-persisted users between updates [#684](https://github.com/openshift/kubernetes/pull/684)
* [Bug 1951042](https://bugzilla.redhat.com/show_bug.cgi?id=1951042): fix crash when killing container fails
 [#682](https://github.com/openshift/kubernetes/pull/682)
* [Bug 1934400](https://bugzilla.redhat.com/show_bug.cgi?id=1934400): bump(apiserver-library-go): scc-admission: don't apply defaultAllowPrivilegeEscalation:false when container is privileged [#673](https://github.com/openshift/kubernetes/pull/673)
* [Bug 1949661](https://bugzilla.redhat.com/show_bug.cgi?id=1949661): UPSTREAM: <carry>: management pinning annotations [#627](https://github.com/openshift/kubernetes/pull/627)
* [Bug 1949306](https://bugzilla.redhat.com/show_bug.cgi?id=1949306): UPSTREAM: <carry>: DeprecatedAPIRequestHandler unit tests [#675](https://github.com/openshift/kubernetes/pull/675)
* [Bug 1949306](https://bugzilla.redhat.com/show_bug.cgi?id=1949306): UPSTREAM: <carry>: DeprecatedAPIRequest Log [#663](https://github.com/openshift/kubernetes/pull/663)
* [Bug 1949050](https://bugzilla.redhat.com/show_bug.cgi?id=1949050): UPSTREAM: 101147: Limit image spec's hash length [#674](https://github.com/openshift/kubernetes/pull/674)
* [Bug 1949721](https://bugzilla.redhat.com/show_bug.cgi?id=1949721): UPSTREAM: 99237: Use the audit ID of a request for better correlation [#672](https://github.com/openshift/kubernetes/pull/672)
* [Bug 1934085](https://bugzilla.redhat.com/show_bug.cgi?id=1934085): UPSTREAM: 100128: [sig-scheduling] SchedulerPreemption|SchedulerPredicates|SchedulerPriorities: adjust some e2e tests to run in a single node cluster scenario [#665](https://github.com/openshift/kubernetes/pull/665)
* BUG 1948703: UPSTREAM: 100678: apf: exempt probes /healthz /livez /readyz [#656](https://github.com/openshift/kubernetes/pull/656)
* UPSTREAM: <carry>: Add Dockerfile to build pause image [#633](https://github.com/openshift/kubernetes/pull/633)
* <carry>: enable CSI migration gates in Attach/Detach controller [#601](https://github.com/openshift/kubernetes/pull/601)
* UPSTREAM: <carry>: bump tag version [#652](https://github.com/openshift/kubernetes/pull/652)
* UPSTREAM: <carry>: Disable CSI migration on OpenStack Cinder [#651](https://github.com/openshift/kubernetes/pull/651)
* KS with preferred host support [#638](https://github.com/openshift/kubernetes/pull/638)
* Rebase 1.21.0 rc.0 [#641](https://github.com/openshift/kubernetes/pull/641)
* Revert "UPSTREAM: 97295: Fix staticcheck in test/integration/{examples,framework}" [#648](https://github.com/openshift/kubernetes/pull/648)
* UPSTREAM: 97295: Fix staticcheck in test/integration/{examples,framework} [#644](https://github.com/openshift/kubernetes/pull/644)
* UPSTREAM: <carry>: rate limit initial watch storm from kubelets on apiserver restart [#629](https://github.com/openshift/kubernetes/pull/629)
* [Bug 1941000](https://bugzilla.redhat.com/show_bug.cgi?id=1941000): get AZ of cinder volume from cinder and not from metadata [#634](https://github.com/openshift/kubernetes/pull/634)
* upstream: 99817: Fix zero-value custom resource validation with go1.16 [#637](https://github.com/openshift/kubernetes/pull/637)
* UPSTREAM: <carry>: kube-apiserver: ignore SIGTERM/INT after the first one [#616](https://github.com/openshift/kubernetes/pull/616)
* improves the apiserver graceful shutdown procedure [#606](https://github.com/openshift/kubernetes/pull/606)
* Ensure multi-az test is run in the serial job [#626](https://github.com/openshift/kubernetes/pull/626)
* UPSTREAM: 96856: e2e network policy enclose IPv6 destinations [#628](https://github.com/openshift/kubernetes/pull/628)
* UPSTREAM: <carry>: provide events, messages, and bodies for probe failures of important pods [#609](https://github.com/openshift/kubernetes/pull/609)
* UPSTREAM: <carry>: allow kubelet to self-authorize metrics scraping [#598](https://github.com/openshift/kubernetes/pull/598)
* UPSTREAM: 91295: kubectl explain: detect resource group in case there… [#608](https://github.com/openshift/kubernetes/pull/608)
* use hardcoded authorizer for metrics [#588](https://github.com/openshift/kubernetes/pull/588)
* UPSTREAM: 96984: APF e2e: wait for steady state before proceeding [#599](https://github.com/openshift/kubernetes/pull/599)
* [Bug 1932097](https://bugzilla.redhat.com/show_bug.cgi?id=1932097): UPSTREAM: 98571: kubelet: Stop probing a pod during graceful shutdown [#594](https://github.com/openshift/kubernetes/pull/594)
* [Bug 1885717](https://bugzilla.redhat.com/show_bug.cgi?id=1885717): UPSTREAM: 98742: Sync completed pods until their containers have been terminated [#593](https://github.com/openshift/kubernetes/pull/593)
* UPSTREAM: 99199: delay serving CRD creates for a few seconds for HA consistency [#587](https://github.com/openshift/kubernetes/pull/587)
* [Bug 1931103](https://bugzilla.redhat.com/show_bug.cgi?id=1931103): UPSTREAM: 96958: kubelet: remove periodic messages from log-level 2 [#584](https://github.com/openshift/kubernetes/pull/584)
* [Bug 1916489](https://bugzilla.redhat.com/show_bug.cgi?id=1916489): (e2e/scheduler) Ensure minimum memory limit in createBalancedPodForNodes [#526](https://github.com/openshift/kubernetes/pull/526)
* [Bug 1908378](https://bugzilla.redhat.com/show_bug.cgi?id=1908378): kubelet: fix create sandbox delete pod race [#580](https://github.com/openshift/kubernetes/pull/580)
* UPSTREAM: 98956: Fix race when KillPod followed by IsPodPendingTermining [#578](https://github.com/openshift/kubernetes/pull/578)
* add failure details for SCC not used [#573](https://github.com/openshift/kubernetes/pull/573)
* [Bug 1897918](https://bugzilla.redhat.com/show_bug.cgi?id=1897918): UPSTREAM: 93861: apiserver: add --permit-address-sharing flag to listen with SO_REUSEADDR [#309](https://github.com/openshift/kubernetes/pull/309)
* [Bug 1876918](https://bugzilla.redhat.com/show_bug.cgi?id=1876918): Move deferred taint cleanup call to ensure all are removed [#513](https://github.com/openshift/kubernetes/pull/513)
* [Bug 1927391](https://bugzilla.redhat.com/show_bug.cgi?id=1927391): UPSTREAM: 98939: fixes race in TestSyncPodsDeletesWhenSourcesAreReady [#564](https://github.com/openshift/kubernetes/pull/564)
* [Bug 1926484](https://bugzilla.redhat.com/show_bug.cgi?id=1926484): UPSTREAM: <carry>: kube-apiserver: ignore SIGTERM/INT after the first one [#558](https://github.com/openshift/kubernetes/pull/558)
* [Bug 1926285](https://bugzilla.redhat.com/show_bug.cgi?id=1926285): UPSTREAM: <carry>: ignore not found errors in status messages [#557](https://github.com/openshift/kubernetes/pull/557)
* [Bug 1925493](https://bugzilla.redhat.com/show_bug.cgi?id=1925493): Enable snapshot tests [#555](https://github.com/openshift/kubernetes/pull/555)
* [Bug 1896558](https://bugzilla.redhat.com/show_bug.cgi?id=1896558): Balance nodes in scheduling e2e [#547](https://github.com/openshift/kubernetes/pull/547)
* BUG 1924870: UPSTREAM: 96901: plumb context with request deadline [#549](https://github.com/openshift/kubernetes/pull/549)
* [Bug 1915085](https://bugzilla.redhat.com/show_bug.cgi?id=1915085): UPSTREAM: 98424: register all pending pod deletions and check for kill [#551](https://github.com/openshift/kubernetes/pull/551)
* Updating openshift-enterprise-hyperkube builder & base images to be consistent with ART [#449](https://github.com/openshift/kubernetes/pull/449)
* [Bug 1894645](https://bugzilla.redhat.com/show_bug.cgi?id=1894645): UPSTREAM: 89885: SQUASH: Fix cinder crash [#510](https://github.com/openshift/kubernetes/pull/510)
* Revert OWNERS changes [#544](https://github.com/openshift/kubernetes/pull/544)
* [Bug 1917803](https://bugzilla.redhat.com/show_bug.cgi?id=1917803): UPSTREAM: 98187: Skip PD tests on 1 node cluster [#546](https://github.com/openshift/kubernetes/pull/546)
* [Bug 1896558](https://bugzilla.redhat.com/show_bug.cgi?id=1896558): Revert undesired multi az skip [#545](https://github.com/openshift/kubernetes/pull/545)
* [Bug 1920368](https://bugzilla.redhat.com/show_bug.cgi?id=1920368): UPSTREAM: 98019: specify the container CPU set during the creation [#541](https://github.com/openshift/kubernetes/pull/541)
* [Bug 1868645](https://bugzilla.redhat.com/show_bug.cgi?id=1868645): UPSTREAM: 94087: kubelet: node sync at least once [#522](https://github.com/openshift/kubernetes/pull/522)
* [Bug 1896558](https://bugzilla.redhat.com/show_bug.cgi?id=1896558): Skip multiaz e2e [#525](https://github.com/openshift/kubernetes/pull/525)
* Add DOWNSTREAM_OWNERS as preparation for https://github.com/kubernetes/test-infra/pull/20482 [#537](https://github.com/openshift/kubernetes/pull/537)
* [Bug 1870342](https://bugzilla.redhat.com/show_bug.cgi?id=1870342): UPSTREAM: 94684: e2e: Pod should avoid nodes that have avoidPod annotation: clean remaining pods [#534](https://github.com/openshift/kubernetes/pull/534)
* [Bug 1882750](https://bugzilla.redhat.com/show_bug.cgi?id=1882750): UPSTREAM: 98103: kubelet: Delete static pod gracefully and fix mirrorPodTerminationMap leak [#531](https://github.com/openshift/kubernetes/pull/531)
* [Bug 1899941](https://bugzilla.redhat.com/show_bug.cgi?id=1899941): Override termination grace period on annotation [#527](https://github.com/openshift/kubernetes/pull/527)
* [Bug 1915945](https://bugzilla.redhat.com/show_bug.cgi?id=1915945): UPSTREAM: 96990: Increase preemption timeout from 1 minute to 2 minutes [#530](https://github.com/openshift/kubernetes/pull/530)
* [Bug 1889420](https://bugzilla.redhat.com/show_bug.cgi?id=1889420): Add dangling volume check for vsphere [#445](https://github.com/openshift/kubernetes/pull/445)
* [Bug 1841119](https://bugzilla.redhat.com/show_bug.cgi?id=1841119): UPSTREAM: <carry>: kube-controller-manager: allow running bare kube-controller-manager [#415](https://github.com/openshift/kubernetes/pull/415)
* [Bug 1908880](https://bugzilla.redhat.com/show_bug.cgi?id=1908880): UPSTREAM: 97980: kubelet: revert checking sandbox deletion [#523](https://github.com/openshift/kubernetes/pull/523)
* [Bug 1915582](https://bugzilla.redhat.com/show_bug.cgi?id=1915582): UPSTREAM: 97860: move all variables in sampleAndWaterMarkHistograms::innerSet [#520](https://github.com/openshift/kubernetes/pull/520)
* [Bug 1903999](https://bugzilla.redhat.com/show_bug.cgi?id=1903999): Httplog response code is always zero [#494](https://github.com/openshift/kubernetes/pull/494)
* UPSTREAM: <carry>: (squash) Add detail to rebase doc [#487](https://github.com/openshift/kubernetes/pull/487)
* adds a unit test for checking if graceful shutdown of HTTP2 server works [#483](https://github.com/openshift/kubernetes/pull/483)
* [Bug 1877812](https://bugzilla.redhat.com/show_bug.cgi?id=1877812): UPSTREAM: 96889: Fix loopback device lookup [#512](https://github.com/openshift/kubernetes/pull/512)
* [Bug 1899760](https://bugzilla.redhat.com/show_bug.cgi?id=1899760): UPSTREAM: 96754: reduce buckets for etcd_request_duration_seconds [#515](https://github.com/openshift/kubernetes/pull/515)
* BUG 1913525: UPSTREAM: 97820: handle webhook authenticator and authorizer error [#516](https://github.com/openshift/kubernetes/pull/516)
* [Bug 1908407](https://bugzilla.redhat.com/show_bug.cgi?id=1908407): UPSTREAM: 95269: Fix panic when kubelet register if a node object already exists with no Status.Capacity or Status.Allocatable [#493](https://github.com/openshift/kubernetes/pull/493)
* [Bug 1895329](https://bugzilla.redhat.com/show_bug.cgi?id=1895329): UPSTREAM: 96751: Lower the frequency of volume plugin deprecation warning [#491](https://github.com/openshift/kubernetes/pull/491)
* [Bug 1912563](https://bugzilla.redhat.com/show_bug.cgi?id=1912563): UPSTREAM: 97206: clean up executing request on panic [#509](https://github.com/openshift/kubernetes/pull/509)
* [Bug 1912563](https://bugzilla.redhat.com/show_bug.cgi?id=1912563): UPSTREAM: 97323: fix the deadlock in priority and fairness config controller [#508](https://github.com/openshift/kubernetes/pull/508)
* [Bug 1913096](https://bugzilla.redhat.com/show_bug.cgi?id=1913096): UPSTREAM: 97006: kubelet: Fix cadvisor machine metrics [#507](https://github.com/openshift/kubernetes/pull/507)
* [Bug 1908389](https://bugzilla.redhat.com/show_bug.cgi?id=1908389): UPSTREAM: 97635: Cherry pick 443 and 448 from cloud provider azure [#500](https://github.com/openshift/kubernetes/pull/500)
* [Bug 1896244](https://bugzilla.redhat.com/show_bug.cgi?id=1896244): UPSTREAM: 96467: Add GinkgoRecover to a local storage go routine [#492](https://github.com/openshift/kubernetes/pull/492)
* [Bug 1903346](https://bugzilla.redhat.com/show_bug.cgi?id=1903346): UPSTREAM: 97013: Fix FibreChannel volume plugin corrupting filesystem on detach [#489](https://github.com/openshift/kubernetes/pull/489)
* add sjenning and mrunalp to approvers and reviewers [#505](https://github.com/openshift/kubernetes/pull/505)
* [Bug 1897603](https://bugzilla.redhat.com/show_bug.cgi?id=1897603): UPSTREAM: 96673: Fix Cinder volume detection on OpenStack Train [#490](https://github.com/openshift/kubernetes/pull/490)
* Fix vendoring of shared libraries missed by 1.20 rebase. [#488](https://github.com/openshift/kubernetes/pull/488)
* [Bug 1907373](https://bugzilla.redhat.com/show_bug.cgi?id=1907373): Rebase to kube v1.20.0 [#471](https://github.com/openshift/kubernetes/pull/471)
* [Bug 1770017](https://bugzilla.redhat.com/show_bug.cgi?id=1770017): kubelet: do not rerun init containers if any main containers have status [#481](https://github.com/openshift/kubernetes/pull/481)
* [Bug 1903248](https://bugzilla.redhat.com/show_bug.cgi?id=1903248): UPSTREAM: 87461: kubelet: ensure pod UIDs are unique [#474](https://github.com/openshift/kubernetes/pull/474)
* [Bug 1873114](https://bugzilla.redhat.com/show_bug.cgi?id=1873114): Nodes goes into NotReady state (VMware) [#472](https://github.com/openshift/kubernetes/pull/472)
* UPSTREAM: 94693: test/e2e: Busybox image is not being templatized [#452](https://github.com/openshift/kubernetes/pull/452)
* [Bug 1884800](https://bugzilla.redhat.com/show_bug.cgi?id=1884800): Reduce volume name length for vsphere [#461](https://github.com/openshift/kubernetes/pull/461)
* [Bug 1893972](https://bugzilla.redhat.com/show_bug.cgi?id=1893972): UPSTREAM: 96144: Skip the sig-storage e2e test as early as possible [#451](https://github.com/openshift/kubernetes/pull/451)
* UPSTREAM: <carry>: Skip "subPath should be able to unmount" NFS test [#450](https://github.com/openshift/kubernetes/pull/450)
* [Bug 1897754](https://bugzilla.redhat.com/show_bug.cgi?id=1897754): HPA: Ignore deleted pods. [#462](https://github.com/openshift/kubernetes/pull/462)
* [Bug 1893776](https://bugzilla.redhat.com/show_bug.cgi?id=1893776): UPSTREAM: 96054: Allow debugging kubelet image pull times [#460](https://github.com/openshift/kubernetes/pull/460)
* [OCPCLOUD-914](https://issues.redhat.com/browse/OCPCLOUD-914): UPSTREAM: 94526: Add vCenter info metric [#447](https://github.com/openshift/kubernetes/pull/447)
* [Bug 1877681](https://bugzilla.redhat.com/show_bug.cgi?id=1877681): UPSTREAM: 95174: Don't add empty AZ labels to OpenStack pre-provisioned PVs [#440](https://github.com/openshift/kubernetes/pull/440)
* UPSTREAM: 96571: Use the busybox shim image constant [#455](https://github.com/openshift/kubernetes/pull/455)
* scc-admission: add audit annotations with reason [#444](https://github.com/openshift/kubernetes/pull/444)
* UPSTREAM 95002: no stack on panic timeout [#456](https://github.com/openshift/kubernetes/pull/456)
* Revert "UPSTREAM: revert: <drop>: don't use dynamic tokens for KCM" [#459](https://github.com/openshift/kubernetes/pull/459)
* UPSTREAM: revert: <drop>: don't use dynamic tokens for KCM [#448](https://github.com/openshift/kubernetes/pull/448)
* [Bug 1862643](https://bugzilla.redhat.com/show_bug.cgi?id=1862643): UPSTREAM: 96120: kubelet: Expose a simple Get-WinEvent shim on the kubelet logs endpoint [#383](https://github.com/openshift/kubernetes/pull/383)
* [Bug 1870337](https://bugzilla.redhat.com/show_bug.cgi?id=1870337): UPSTREAM: 96310: PV e2e: fix race in NFS recycling test [#441](https://github.com/openshift/kubernetes/pull/441)
* UPSTREAM: <carry>: stop overriding flags that are explicitly set [#439](https://github.com/openshift/kubernetes/pull/439)
* [Bug 1887278](https://bugzilla.redhat.com/show_bug.cgi?id=1887278): UPSTREAM: 95236: vsphere: improve logging message on node cache refresh event [#432](https://github.com/openshift/kubernetes/pull/432)
* Revert "UPSTREAM: 95252: Kube-proxy: Perf-fix: Shrink INPUT chain" [#434](https://github.com/openshift/kubernetes/pull/434)
* [Bug 1816812](https://bugzilla.redhat.com/show_bug.cgi?id=1816812): Allow test images to be in a single mirror [#291](https://github.com/openshift/kubernetes/pull/291)
* [Bug 1873043](https://bugzilla.redhat.com/show_bug.cgi?id=1873043): Rebase to 1.19.2 [#361](https://github.com/openshift/kubernetes/pull/361)
* [Bug 1891459](https://bugzilla.redhat.com/show_bug.cgi?id=1891459): UPSTREAM: 95867: Log PodExec stdout + stderr [#427](https://github.com/openshift/kubernetes/pull/427)
* [Bug 1884041](https://bugzilla.redhat.com/show_bug.cgi?id=1884041): UPSTREAM: 95233: Add error text to kube-system wait error [#395](https://github.com/openshift/kubernetes/pull/395)
* [Bug 1879607](https://bugzilla.redhat.com/show_bug.cgi?id=1879607): UPSTREAM: 95252: Kube-proxy: Perf-fix: Shrink INPUT chain [#425](https://github.com/openshift/kubernetes/pull/425)
* UPSTREAM: 95495: remove secondary client retries in e2e tests [#405](https://github.com/openshift/kubernetes/pull/405)
* Add component to OWNERS [#422](https://github.com/openshift/kubernetes/pull/422)
* [Bug 1889891](https://bugzilla.redhat.com/show_bug.cgi?id=1889891): UPSTREAM: 94774: Fix misusage of RLock in timeCache lru.Cache.Get() [#418](https://github.com/openshift/kubernetes/pull/418)
* [Bug 1889786](https://bugzilla.redhat.com/show_bug.cgi?id=1889786): UPSTREAM: 94712: avoid potential secret leaking while reading .dockercfg [#417](https://github.com/openshift/kubernetes/pull/417)
* [Bug 1887026](https://bugzilla.redhat.com/show_bug.cgi?id=1887026): UPSTREAM: 95451: Fix fcpath [#413](https://github.com/openshift/kubernetes/pull/413)
* [Bug 1868527](https://bugzilla.redhat.com/show_bug.cgi?id=1868527): Fix vsphere disk detach failing [#408](https://github.com/openshift/kubernetes/pull/408)
* Fix networking-related test exclusions [#382](https://github.com/openshift/kubernetes/pull/382)
* [Bug 1888041](https://bugzilla.redhat.com/show_bug.cgi?id=1888041): UPSTREAM: 95561: kubelet container status calculation doesn't handle suddenly missing data properly [#411](https://github.com/openshift/kubernetes/pull/411)
* [Bug 1888663](https://bugzilla.redhat.com/show_bug.cgi?id=1888663): wait for oauth-apiserver accessibility [#403](https://github.com/openshift/kubernetes/pull/403)
* [Bug 1887292](https://bugzilla.redhat.com/show_bug.cgi?id=1887292): UPSTREAM: 95245: Mask Ceph RBD adminSecrets in logs when logLevel >= 4 [#406](https://github.com/openshift/kubernetes/pull/406)
* [Bug 1884035](https://bugzilla.redhat.com/show_bug.cgi?id=1884035): set lastterminationstate for container status even when CRI fails to return termination (or any) data [#393](https://github.com/openshift/kubernetes/pull/393)
* [Bug 1884697](https://bugzilla.redhat.com/show_bug.cgi?id=1884697): UPSTREAM: 95261: test: e2e: fix race in pods test [#385](https://github.com/openshift/kubernetes/pull/385)
* [Bug 1874583](https://bugzilla.redhat.com/show_bug.cgi?id=1874583): fix kube-apiserver termination event(s) validation failures [#336](https://github.com/openshift/kubernetes/pull/336)
* [Bug 1848358](https://bugzilla.redhat.com/show_bug.cgi?id=1848358): Show error in status if preserve unknown fields is true for nonstructural schemas [#355](https://github.com/openshift/kubernetes/pull/355)
* [Bug 1879057](https://bugzilla.redhat.com/show_bug.cgi?id=1879057): e2e: skip write/read cache when running Block-mode RWX PVC tests [#378](https://github.com/openshift/kubernetes/pull/378)
* [Bug 1882750](https://bugzilla.redhat.com/show_bug.cgi?id=1882750): UPSTREAM: <carry>: watch-termination: avoid false positives of NonGracefulTermination events [#379](https://github.com/openshift/kubernetes/pull/379)
* [Bug 1881144](https://bugzilla.redhat.com/show_bug.cgi?id=1881144): UPSTREAM: 95003: Fail a test on pre-provisioned Cinder volume deletion error [#380](https://github.com/openshift/kubernetes/pull/380)
* [Bug 1873043](https://bugzilla.redhat.com/show_bug.cgi?id=1873043): Stop annotating origin tests with [Suite:openshift] [#377](https://github.com/openshift/kubernetes/pull/377)
* [Bug 1883196](https://bugzilla.redhat.com/show_bug.cgi?id=1883196): kube-apiserver: silence own loopback requests before /readyz success [#376](https://github.com/openshift/kubernetes/pull/376)
* [Bug 1873043](https://bugzilla.redhat.com/show_bug.cgi?id=1873043): Update README.openshift to reflect transition to openshift/kubernetes [#366](https://github.com/openshift/kubernetes/pull/366)
* [Bug 1879837](https://bugzilla.redhat.com/show_bug.cgi?id=1879837): UPSTREAM: 94986: drop managed fields from audit entries [#375](https://github.com/openshift/kubernetes/pull/375)
* [Bug 1882446](https://bugzilla.redhat.com/show_bug.cgi?id=1882446): Fix pre-readyz request message without ?verbose [#374](https://github.com/openshift/kubernetes/pull/374)
* [Bug 1866836](https://bugzilla.redhat.com/show_bug.cgi?id=1866836): UPSTREAM: 95009: Remove ext2 + ext3 tests [#373](https://github.com/openshift/kubernetes/pull/373)
* [Bug 1881688](https://bugzilla.redhat.com/show_bug.cgi?id=1881688): UPSTREAM: 94984: check readyz before adding endpoint for kube-apiserver [#371](https://github.com/openshift/kubernetes/pull/371)
* [Bug 1881238](https://bugzilla.redhat.com/show_bug.cgi?id=1881238): UPSTREAM: 94903: Take into account latency incurred in server filters [#365](https://github.com/openshift/kubernetes/pull/365)
* [Bug 1881225](https://bugzilla.redhat.com/show_bug.cgi?id=1881225): UPSTREAM: <carry>: apiserver: create hasBeenReadyCh channel [#368](https://github.com/openshift/kubernetes/pull/368)
* [Bug 1877793](https://bugzilla.redhat.com/show_bug.cgi?id=1877793): Force releasing the lock on exit for KS [#367](https://github.com/openshift/kubernetes/pull/367)
* [Bug 1866814](https://bugzilla.redhat.com/show_bug.cgi?id=1866814): UPSTREAM: 94773: count of etcd object should be limited to the specified resource [#357](https://github.com/openshift/kubernetes/pull/357)
* [Bug 1880363](https://bugzilla.redhat.com/show_bug.cgi?id=1880363): UPSTREAM: 94888: apiextensions: prune array type without items in published OpenAPI [#362](https://github.com/openshift/kubernetes/pull/362)
* [Bug 1873043](https://bugzilla.redhat.com/show_bug.cgi?id=1873043): Add rebase instructions [#360](https://github.com/openshift/kubernetes/pull/360)
* [Bug 1880941](https://bugzilla.redhat.com/show_bug.cgi?id=1880941): kube-apiserver: log non-probe requests before ready [#356](https://github.com/openshift/kubernetes/pull/356)
* [Bug 1878163](https://bugzilla.redhat.com/show_bug.cgi?id=1878163): Updating openshift-hack/images/hyperkube/Dockerfile.rhel baseimages to mach ocp-build-data config [#358](https://github.com/openshift/kubernetes/pull/358)
* [Bug 1874920](https://bugzilla.redhat.com/show_bug.cgi?id=1874920): Revert "bug 1874919: UPSTREAM: 94423: debugger scheduler plugin" [#345](https://github.com/openshift/kubernetes/pull/345)
* [Bug 1880279](https://bugzilla.redhat.com/show_bug.cgi?id=1880279): [e2e] scheduling: Pod should avoid nodes that have avoidPod annotation: fail when not all pods are properly deleted [#352](https://github.com/openshift/kubernetes/pull/352)
* [Bug 1878163](https://bugzilla.redhat.com/show_bug.cgi?id=1878163): Build with golang 1.15 [#348](https://github.com/openshift/kubernetes/pull/348)
* [Bug 1877791](https://bugzilla.redhat.com/show_bug.cgi?id=1877791): Release lock on KCM and KS termination [#350](https://github.com/openshift/kubernetes/pull/350)
* [Bug 1873043](https://bugzilla.redhat.com/show_bug.cgi?id=1873043): Commit openapi definitions [#351](https://github.com/openshift/kubernetes/pull/351)
* [Bug 1877338](https://bugzilla.redhat.com/show_bug.cgi?id=1877338): UPSTREAM: 94653: Tolerate NotFound errors when deleting snapshots [#340](https://github.com/openshift/kubernetes/pull/340)
* [Bug 1873043](https://bugzilla.redhat.com/show_bug.cgi?id=1873043): Enable k8s-e2e-gcp-serial [#337](https://github.com/openshift/kubernetes/pull/337)
* [Bug 1867929](https://bugzilla.redhat.com/show_bug.cgi?id=1867929): Reduce offline volume expansion flake [#347](https://github.com/openshift/kubernetes/pull/347)
* [Bug 1875194](https://bugzilla.redhat.com/show_bug.cgi?id=1875194): UPSTREAM: 94609: Use namespace flag passed to RunKubectl* methods [#334](https://github.com/openshift/kubernetes/pull/334)
* [Bug 1873043](https://bugzilla.redhat.com/show_bug.cgi?id=1873043): Commit test/e2e/generated/bindata.go [#349](https://github.com/openshift/kubernetes/pull/349)
* [Bug 1874584](https://bugzilla.redhat.com/show_bug.cgi?id=1874584): UPSTREAM: <carry>: retry etcd errors [#327](https://github.com/openshift/kubernetes/pull/327)
* [Bug 1854434](https://bugzilla.redhat.com/show_bug.cgi?id=1854434): UPSTREAM: 94112: Remove canonicalization of endpoints by endpoints controller for better comparison [#318](https://github.com/openshift/kubernetes/pull/318)
* UPSTREAM: 89885: Bug 1850149: Include / prefix in the instance ID output [#343](https://github.com/openshift/kubernetes/pull/343)
* [Bug 1877001](https://bugzilla.redhat.com/show_bug.cgi?id=1877001): UPSTREAM: 92878: cleanup: print warning message only if the function does not finish within 30 seconds [#344](https://github.com/openshift/kubernetes/pull/344)
* [Bug 1873043](https://bugzilla.redhat.com/show_bug.cgi?id=1873043): Rebase 1.19.0 [#325](https://github.com/openshift/kubernetes/pull/325)
* [Bug 1875046](https://bugzilla.redhat.com/show_bug.cgi?id=1875046): Undiagnosed panic detected in pod: openshift-kube-apiserver_kube-apiserver: runtime.go:76: invalid memory address or nil pointer dereference [#338](https://github.com/openshift/kubernetes/pull/338)
* [Bug 1867103](https://bugzilla.redhat.com/show_bug.cgi?id=1867103): UPSTREAM: 93777: e2e storage: avoid flaky test failure when watch dies [#333](https://github.com/openshift/kubernetes/pull/333)
* [Bug 1821661](https://bugzilla.redhat.com/show_bug.cgi?id=1821661): UPSTREAM: 94614: e2e: fix deployment non-unique env vars to avoid SSA error [#335](https://github.com/openshift/kubernetes/pull/335)
* [Bug 1875841](https://bugzilla.redhat.com/show_bug.cgi?id=1875841): watch-termination: fix deletion race and write non-graceful message also to termination.log [#332](https://github.com/openshift/kubernetes/pull/332)
* BUG 1875041: UPSTREAM: 94134: Make similar buckets for api and etcd request duration histogram [#331](https://github.com/openshift/kubernetes/pull/331)
* [Bug 1872080](https://bugzilla.redhat.com/show_bug.cgi?id=1872080): Updating openshift-hack/images/hyperkube/Dockerfile.rhel baseimages to mach ocp-build-data config [#321](https://github.com/openshift/kubernetes/pull/321)
* [Bug 1874919](https://bugzilla.redhat.com/show_bug.cgi?id=1874919): UPSTREAM: 94423: debugger scheduler plugin [#330](https://github.com/openshift/kubernetes/pull/330)
* [Bug 1855500](https://bugzilla.redhat.com/show_bug.cgi?id=1855500): UPSTREAM: 94204: Add impersonated user to system:authenticated group [#323](https://github.com/openshift/kubernetes/pull/323)
* BUG 1863009: vSphere provision failure on ocp46 [#319](https://github.com/openshift/kubernetes/pull/319)
* BUG 1858871: UPSTREAM: 93478: kubelet: eviction: remove unexpected output from TestGetReclaimableThreshold [#295](https://github.com/openshift/kubernetes/pull/295)
* [Bug 1868750](https://bugzilla.redhat.com/show_bug.cgi?id=1868750): UPSTREAM: <drop>: don't use dynamic tokens for KCM [#320](https://github.com/openshift/kubernetes/pull/320)
* Misc post rebase cleanup [#298](https://github.com/openshift/kubernetes/pull/298)
* Enable gcp-e2e-kubernetes job [#304](https://github.com/openshift/kubernetes/pull/304)
* UPSTREAM: <carry>: only create valid LateConnections/GracefulTermination events [#308](https://github.com/openshift/kubernetes/pull/308)
* Switch to golang 1.14 [#297](https://github.com/openshift/kubernetes/pull/297)
* UPSTREAM: <carry>: add readyz check for openshift apiserver availability [#293](https://github.com/openshift/kubernetes/pull/293)
* oauth-token-authn: switch to sha256~ prefix [#305](https://github.com/openshift/kubernetes/pull/305)
* UPSTREAM: 93658: test/e2e: fail test rather than flooding logs if PVC watch is closed prematurely [#306](https://github.com/openshift/kubernetes/pull/306)
* [Bug 1861631](https://bugzilla.redhat.com/show_bug.cgi?id=1861631): UPSTREAM: 85983: fix metrics kubelet_running_pod_count [#303](https://github.com/openshift/kubernetes/pull/303)
* UPSTREAM: <carry>: Strip unnecessary security contexts on Windows [#301](https://github.com/openshift/kubernetes/pull/301)
* UPSTREAM: 93429: e2e: examples: fix test image reference [#299](https://github.com/openshift/kubernetes/pull/299)
* Add custom resource validation for network spec [#294](https://github.com/openshift/kubernetes/pull/294)
* Reapply: UPSTREAM: <carry>: oauth-authn: support sha256 prefixed tokens [#302](https://github.com/openshift/kubernetes/pull/302)
* UPSTREAM: 93508: add permissions required by endpoints controller for blockOwnerDeletion [#300](https://github.com/openshift/kubernetes/pull/300)
* Rebase 1.19.0-rc.2 [#166](https://github.com/openshift/kubernetes/pull/166)
* UPSTREAM: <carry>: Enable timeout validator to run in kube-apiserver [#263](https://github.com/openshift/kubernetes/pull/263)
* UPSTREAM: <carry>: oauth-authn: support sha256 prefixed tokens [#208](https://github.com/openshift/kubernetes/pull/208)
* Enable build and test for master [#164](https://github.com/openshift/kubernetes/pull/164)
* UPSTREAM: <carry>: apiserver: skip local IPs and probes for LateConnections – fix race [#25290](https://github.com/openshift/kubernetes/pull/25290)
* [Bug 1847043](https://bugzilla.redhat.com/show_bug.cgi?id=1847043): UPSTREAM: 89053: migration of re-usable package from pkg/kubelet/cm/cpumanager to pkg/kubelet/cm [#25111](https://github.com/openshift/kubernetes/pull/25111)
* wires the egress proxy to the kube-aggregator [#25258](https://github.com/openshift/kubernetes/pull/25258)
* IPFamily fixes from upstream [#24963](https://github.com/openshift/kubernetes/pull/24963)
* UPSTREAM: <carry>: eliminate unnecessary closure in openshift configu… [#24967](https://github.com/openshift/kubernetes/pull/24967)
* Pick scheduler v1beta1 componentconfig API [#25203](https://github.com/openshift/kubernetes/pull/25203)
* UPSTREAM: 92197: make log output of failed healthchecks more focused [#25132](https://github.com/openshift/kubernetes/pull/25132)
* [Bug 1843319](https://bugzilla.redhat.com/show_bug.cgi?id=1843319): Fix DS expectations on recreate [#25208](https://github.com/openshift/kubernetes/pull/25208)
* UPSTREAM: <carry>: apiserver: skip local IPs for LateConnections [#25199](https://github.com/openshift/kubernetes/pull/25199)
* [Bug 1839933](https://bugzilla.redhat.com/show_bug.cgi?id=1839933): UPSTREAM: 91307: CSI: Modify VolumeAttachment check to use Informer/Cache [#25109](https://github.com/openshift/kubernetes/pull/25109)
* UPSTREAM: 89164: Fix data race issue in unit test [#25205](https://github.com/openshift/kubernetes/pull/25205)
* [Bug 1806034](https://bugzilla.redhat.com/show_bug.cgi?id=1806034): UPSTREAM: 90638: Fix race in VSphere volume provisioning [#25047](https://github.com/openshift/kubernetes/pull/25047)
* only patch authenticators when there's no webhook authenticators [#25185](https://github.com/openshift/kubernetes/pull/25185)
* [Bug 1821280](https://bugzilla.redhat.com/show_bug.cgi?id=1821280): Unable to provision vSphere volume [#25166](https://github.com/openshift/kubernetes/pull/25166)
* [Bug 1814282](https://bugzilla.redhat.com/show_bug.cgi?id=1814282): Storage e2es leaving namespaces/pods around [#24981](https://github.com/openshift/kubernetes/pull/24981)
* [Bug 1842660](https://bugzilla.redhat.com/show_bug.cgi?id=1842660): 4.6: UPSTREAM: 91748: FieldManager: Reset if we receive nil or a list with one [#25153](https://github.com/openshift/kubernetes/pull/25153)
* [Bug 1848379](https://bugzilla.redhat.com/show_bug.cgi?id=1848379): UPSTREAM: 89937: portAllocator sync local data before allocate [#25150](https://github.com/openshift/kubernetes/pull/25150)
* [Bug 1849175](https://bugzilla.redhat.com/show_bug.cgi?id=1849175): UPSTREAM: 91569: kubelet: block non-forwarded packets from crossing the localhost boundary [#25141](https://github.com/openshift/kubernetes/pull/25141)
* [Bug 1847185](https://bugzilla.redhat.com/show_bug.cgi?id=1847185): fix: GetLabelsForVolume panic issue for azure disk PV [#25121](https://github.com/openshift/kubernetes/pull/25121)
* UPSTREAM: <carry>: apiserver: log new connections during termination [#25123](https://github.com/openshift/kubernetes/pull/25123)
* UPSTREAM: 91984: genericapiserver library must wait for server.Shutdown [#25108](https://github.com/openshift/kubernetes/pull/25108)
* kube-apiserver: drain HTTP/2 early during termination [#25106](https://github.com/openshift/kubernetes/pull/25106)
* UPSTREAM: 91816: GC doesn't have to create monitors in the constructor [#25024](https://github.com/openshift/kubernetes/pull/25024)
* [Bug 1838730](https://bugzilla.redhat.com/show_bug.cgi?id=1838730): UPSTREAM: 91642: Adjust Azure e2e binding mode [#25059](https://github.com/openshift/kubernetes/pull/25059)
* UPSTREAM: 89934: Simplify the unregistration of csiplugin [#24877](https://github.com/openshift/kubernetes/pull/24877)
* [Bug 1813894](https://bugzilla.redhat.com/show_bug.cgi?id=1813894): Disable the addition of service ca to token secrets [#24956](https://github.com/openshift/kubernetes/pull/24956)
* [Bug 1824423](https://bugzilla.redhat.com/show_bug.cgi?id=1824423): Revert "UPSTREAM: <drop>: Increate timeout in volume expansion test" [#25034](https://github.com/openshift/kubernetes/pull/25034)
* Bump to kube 1.18.3 [#25015](https://github.com/openshift/kubernetes/pull/25015)
* [Bug 1765301](https://bugzilla.redhat.com/show_bug.cgi?id=1765301): UPSTREAM: 89379: deflake grace period for pod deletion in node e2e [#25008](https://github.com/openshift/kubernetes/pull/25008)
* [Bug 1825915](https://bugzilla.redhat.com/show_bug.cgi?id=1825915): UPSTREAM: 90985: Set session scanning to manual to avoid discovering all iSCSI devices during login [#25007](https://github.com/openshift/kubernetes/pull/25007)
* [Bug 1827062](https://bugzilla.redhat.com/show_bug.cgi?id=1827062): UPSTREAM: 90608: Updates the fstype of Cinder volumes to be ext4 if nil [#24990](https://github.com/openshift/kubernetes/pull/24990)
* [Bug 1827071](https://bugzilla.redhat.com/show_bug.cgi?id=1827071): UPSTREAM: 90792: Send a nicer event when resizing attached Cinder volume [#24987](https://github.com/openshift/kubernetes/pull/24987)
* [Bug 1798282](https://bugzilla.redhat.com/show_bug.cgi?id=1798282): DROP: Avoid unnecessary calls to the cloud provider [#24532](https://github.com/openshift/kubernetes/pull/24532)
* [Bug 1832641](https://bugzilla.redhat.com/show_bug.cgi?id=1832641): UPSTREAM: 90823: Service load balancers should include unschedulable nodes [#24954](https://github.com/openshift/kubernetes/pull/24954)
* [Bug 1823406](https://bugzilla.redhat.com/show_bug.cgi?id=1823406): Upstream: 89160: Remove potentially unhealthy symlink only for dead containers [#24926](https://github.com/openshift/kubernetes/pull/24926)
* Bump to kubernetes v1.18.3 [#131](https://github.com/openshift/kubernetes/pull/131)
* base-images: Use debian-base:v2.1.0 and debian-iptables:v12.1.0 (includes CVE fixes) [#90863](https://github.com/openshift/kubernetes/pull/90863)
* Automated cherry pick of #91257: Use staging-csi to work around quay.io availability [#91272](https://github.com/openshift/kubernetes/pull/91272)
* Automated cherry pick of #91184: Azure: support non-VMSS instances removal [#91198](https://github.com/openshift/kubernetes/pull/91198)
* Automated cherry pick of #90645: kubeadm: fix flakes when performing etcd MemberAdd on slower [#91080](https://github.com/openshift/kubernetes/pull/91080)
* Automated cherry pick of #90989: count no nodes scheduling failure as unschedulable instead of [#91108](https://github.com/openshift/kubernetes/pull/91108)
* base-images: Update to kube-cross:v1.13.9-5 [#90964](https://github.com/openshift/kubernetes/pull/90964)
* Automated cherry pick of #90425: fix: ACR auth fails in private azure clouds [#90478](https://github.com/openshift/kubernetes/pull/90478)
* Automated cherry pick of #90749: fix: azure disk dangling attach issue [#90786](https://github.com/openshift/kubernetes/pull/90786)
* Automated cherry pick of #90162: Fix flaws in Azure CSI translation [#90324](https://github.com/openshift/kubernetes/pull/90324)
* Move ipvs lib to third_party/forked and fix address family bug present in old kernels [#90678](https://github.com/openshift/kubernetes/pull/90678)
* Automated cherry pick of #89222: bugfix: initcontainer wasn't considered when calculate [#90378](https://github.com/openshift/kubernetes/pull/90378)
* Automated cherry pick of #90373: kube-scheduler: compatibility with ServerSideApply [#90388](https://github.com/openshift/kubernetes/pull/90388)
* [1.18 cherrypick] Check Annotations map against nil for ConfigMapLock#Update() [#89909](https://github.com/openshift/kubernetes/pull/89909)
* Automated cherry pick of #90476: fix backoff manager timer initialization race [#90495](https://github.com/openshift/kubernetes/pull/90495)
* Manual cherry pick of #89833: preserve integers decoding raw JSON values [#90019](https://github.com/openshift/kubernetes/pull/90019)
* Automated cherry pick of #90468: Restore cache-control header filter [#90470](https://github.com/openshift/kubernetes/pull/90470)
* Automated cherry pick of #88006: Unregister csiplugin even if socket path is gone #89934: Simplify unregistration of csiplugin [#90125](https://github.com/openshift/kubernetes/pull/90125)
* Automated cherry pick of #90243: Revert "stop defaulting kubeconfig to http://localhost:8080" [#90244](https://github.com/openshift/kubernetes/pull/90244)
* Automated cherry pick of #90057: Fix Node initialization for GCP cloud provider [#90181](https://github.com/openshift/kubernetes/pull/90181)
* Automated cherry pick of #89188: Move PSP tests behind a feature tag [#90120](https://github.com/openshift/kubernetes/pull/90120)
* Automated cherry pick of #89589: Wait for APIServer 'ok' forever during CSINode [#89809](https://github.com/openshift/kubernetes/pull/89809)
* Automated cherry pick of #89963: Drop round-trip annotations in HPA conversion [#89965](https://github.com/openshift/kubernetes/pull/89965)
* Automated cherry pick of #89551 upstream release 1.18 [#90016](https://github.com/openshift/kubernetes/pull/90016)
* Automated cherry pick of #89902 upstream release 1.18 [#90048](https://github.com/openshift/kubernetes/pull/90048)
* Automated cherry pick of #89908: Skip updating cache on pod update if the node was deleted [#89959](https://github.com/openshift/kubernetes/pull/89959)
* Manual cherry pick of #89652: Fix client watch reestablishment handling of client-side timeouts [#89975](https://github.com/openshift/kubernetes/pull/89975)
* Automated cherry pick of #89970: Fix priorityClass typo, add numeric priority to static pods [#89971](https://github.com/openshift/kubernetes/pull/89971)
* Automated cherry pick of #89768: fix: update max azure disk max count [#89853](https://github.com/openshift/kubernetes/pull/89853)
* Automated cherry pick of #89741: Fix permissions for endpointslice controller [#89804](https://github.com/openshift/kubernetes/pull/89804)
* Automated cherry pick of #89722: Ensure Azure availability zone is always in lower cases [#89879](https://github.com/openshift/kubernetes/pull/89879)
* Automated cherry pick of #89664: Allow list-resources.sh to continue if a resource fails to [#89789](https://github.com/openshift/kubernetes/pull/89789)
* Automated cherry pick of #89848: Fixes problem where kubectl apply stops after first error [#89864](https://github.com/openshift/kubernetes/pull/89864)
* Automated cherry pick of #89706: fix a bug where spn: prefix is unexpectedly added to [#89783](https://github.com/openshift/kubernetes/pull/89783)
* Automated cherry pick of #89794: Clean up event messages for errors. [#89796](https://github.com/openshift/kubernetes/pull/89796)
* Automated cherry pick of #85027: Fix bug about unintentional scale out during updating [#89517](https://github.com/openshift/kubernetes/pull/89517)
* Automated cherry pick of #89795: Ensure diff doesn't persist patches [#89827](https://github.com/openshift/kubernetes/pull/89827)
* Automated cherry pick of #89540: fix cpu resource metric type by changing to counter [#89606](https://github.com/openshift/kubernetes/pull/89606)
* Automated cherry pick of #89604: fix concurreny issue in lb creation [#89605](https://github.com/openshift/kubernetes/pull/89605)
* Automated cherry pick of #89602: Kubeadm: fix Ready condition check [#89603](https://github.com/openshift/kubernetes/pull/89603)
* Automated cherry pick of #89227: Label Windows test as Serial. [#89376](https://github.com/openshift/kubernetes/pull/89376)
* Automated cherry pick of #89539: Fixes problem where kubectl apply stops after first error [#89607](https://github.com/openshift/kubernetes/pull/89607)
* Automated cherry pick of #89537: kubeadm: add missing RBAC for getting nodes on "upgrade [#89577](https://github.com/openshift/kubernetes/pull/89577)
* Automated cherry pick of #88348: Check that ImageInspect pointer is not nil [#89536](https://github.com/openshift/kubernetes/pull/89536)
* Update to Golang 1.13.9 [#89398](https://github.com/openshift/kubernetes/pull/89398)
* Automated cherry pick of #89444 upstream release 1.18 [#89449](https://github.com/openshift/kubernetes/pull/89449)
* Automated cherry pick of #89401: fix kubectl port-forward for services with explicit local [#89402](https://github.com/openshift/kubernetes/pull/89402)
* Automated cherry pick of #89337: Fix the VMSS name and resource group name when updating VMSS [#89355](https://github.com/openshift/kubernetes/pull/89355)
* Automated cherry pick of #89341: bump k8s.io utils [#89343](https://github.com/openshift/kubernetes/pull/89343)
* Automated cherry pick of #89232: Use discovery to test apply all status [#89333](https://github.com/openshift/kubernetes/pull/89333)
* Automated cherry pick of #89319: Update vendored MountSensitive code for Windows [#89331](https://github.com/openshift/kubernetes/pull/89331)
* Automated cherry pick of #88987: make filteredZones order predictable [#89238](https://github.com/openshift/kubernetes/pull/89238)
* Automated cherry pick of #89236: Restore orphaning check in gc test [#89237](https://github.com/openshift/kubernetes/pull/89237)
* changelog: add changelogs for all release back due branch FF merge issue [#89124](https://github.com/openshift/kubernetes/pull/89124)
* Cleanup CHANGELOG/README.md [#88334](https://github.com/openshift/kubernetes/pull/88334)
* Implement ItemBucketRateLimiter [#88261](https://github.com/openshift/kubernetes/pull/88261)
* chore: move Azure caches to a separate package [#88259](https://github.com/openshift/kubernetes/pull/88259)
* kubeadm config images list: implement structured output [#86810](https://github.com/openshift/kubernetes/pull/86810)
* Use ProxierHealthUpdater directly to avoid panic [#87870](https://github.com/openshift/kubernetes/pull/87870)
* test/e2e/framework:remove TODO and make func private [#88235](https://github.com/openshift/kubernetes/pull/88235)
* Fix route conflicted operations when updating multiple routes together [#88209](https://github.com/openshift/kubernetes/pull/88209)
* Graduate PodTopologySpread to Beta [#88105](https://github.com/openshift/kubernetes/pull/88105)
* Run Windows kubelet stats e2e tests serially to reduce test flakes [#87992](https://github.com/openshift/kubernetes/pull/87992)
* fix: update azure disk max count [#88201](https://github.com/openshift/kubernetes/pull/88201)
* Add deletion interfaces for VM, VMSS and interface clients [#88155](https://github.com/openshift/kubernetes/pull/88155)
* [Scheduler Framework]Remove `FilteredNodesStatuses` argument from `PreScore`'s interface [#88189](https://github.com/openshift/kubernetes/pull/88189)
* upgrade pause everywhere [#88173](https://github.com/openshift/kubernetes/pull/88173)
* Error if --local and --dry-run=server are passed [#88135](https://github.com/openshift/kubernetes/pull/88135)
* Pass context to tryAcquireOrRenew [#87899](https://github.com/openshift/kubernetes/pull/87899)
* If lastTimestamp is not set use firstTimestamp when printing event [#86557](https://github.com/openshift/kubernetes/pull/86557)
* Ineffassign fixes for pkg/volume [#87711](https://github.com/openshift/kubernetes/pull/87711)
* Version the API Priority and Fairness FieldManager values [#88171](https://github.com/openshift/kubernetes/pull/88171)
* fix path to prow size plugin [#80302](https://github.com/openshift/kubernetes/pull/80302)
* Shrink mutation detection critical section [#88131](https://github.com/openshift/kubernetes/pull/88131)
* Fix example of kubectl config set-credentials command [#88071](https://github.com/openshift/kubernetes/pull/88071)
* Ineffassign fixes for pkg/controller and kubelet [#87712](https://github.com/openshift/kubernetes/pull/87712)
* Report scheduler_perf integration test kube-scheduler metrics into artifacts dir [#88162](https://github.com/openshift/kubernetes/pull/88162)
* test/e2e/framework/:remove TODO and use framework.SingleCallTimeout [#88065](https://github.com/openshift/kubernetes/pull/88065)
* Remove PodBackoffMap [#87948](https://github.com/openshift/kubernetes/pull/87948)
* fix: get azure disk lun timeout issue [#88158](https://github.com/openshift/kubernetes/pull/88158)
* Reduce public methods for DryRunVerifier [#87489](https://github.com/openshift/kubernetes/pull/87489)
* e2e-topology-manager: single-NUMA-node test [#87645](https://github.com/openshift/kubernetes/pull/87645)
* Clean up TODO around running test as sudo [#87355](https://github.com/openshift/kubernetes/pull/87355)
* Update Release Engineering OWNERS [#88116](https://github.com/openshift/kubernetes/pull/88116)
* Fix shellcheck warnings/errors in /build/lib/release.sh [#87285](https://github.com/openshift/kubernetes/pull/87285)
* apps/StatefulSets: Garbage collector should be able to orphan ControllerRevisions too [#84984](https://github.com/openshift/kubernetes/pull/84984)
* kube-proxy: Only open ipv4 sockets for ipv4 clusters [#87699](https://github.com/openshift/kubernetes/pull/87699)
* Change line terminators from CRLF to LF [#88144](https://github.com/openshift/kubernetes/pull/88144)
* switch pause to docker manifest instead of manifest-tool [#88139](https://github.com/openshift/kubernetes/pull/88139)
* kube-proxy crash when load balancers use a different IP family [#87117](https://github.com/openshift/kubernetes/pull/87117)
* Create an OWNERS alias for net-driver-approvers [#88138](https://github.com/openshift/kubernetes/pull/88138)
* Add events to PV when mount fails on filesystem mismatch [#86982](https://github.com/openshift/kubernetes/pull/86982)
* Fix a bug in e2epod function [#88143](https://github.com/openshift/kubernetes/pull/88143)
* Construct http Request using http.NewRequest [#88140](https://github.com/openshift/kubernetes/pull/88140)
* add a changelog note for pause 3.2 [#88137](https://github.com/openshift/kubernetes/pull/88137)
* Switch test COS image to include runc-1.0.0-rc10 fix. [#88102](https://github.com/openshift/kubernetes/pull/88102)
* Fix gce-cos-master-reboot test [#88099](https://github.com/openshift/kubernetes/pull/88099)
* Set up connection onClose prior to adding to connection map [#88079](https://github.com/openshift/kubernetes/pull/88079)
* register queue metrics in controller manager [#87967](https://github.com/openshift/kubernetes/pull/87967)
* Separate containerd install from config, and other cleanups [#87907](https://github.com/openshift/kubernetes/pull/87907)
* Add twice refactored filter and config consumer for API Priority and Fairness [#87754](https://github.com/openshift/kubernetes/pull/87754)
* Fix typo from reseting to resetting [#87079](https://github.com/openshift/kubernetes/pull/87079)
* Fix a failing test in NetworkPolicy e2e [#85909](https://github.com/openshift/kubernetes/pull/85909)
* update pause to 3.2 since we changed the build [#88129](https://github.com/openshift/kubernetes/pull/88129)
* Fix impossible condition in test/e2e/framework/resource_usage_gatherer.go [#88104](https://github.com/openshift/kubernetes/pull/88104)
* Move skip method from e2e fw ginkgowrapper to e2e skipper fw [#88096](https://github.com/openshift/kubernetes/pull/88096)
* Replace Beta OS/arch labels with the GA ones [#88092](https://github.com/openshift/kubernetes/pull/88092)
* test/e2e/framework/util.go: make function LookForString private [#88067](https://github.com/openshift/kubernetes/pull/88067)
* Add buffer for GC resync retry to GC e2e tests [#88053](https://github.com/openshift/kubernetes/pull/88053)
* Remove HardPodAffinitySymmetricWeight from v1alpha2 Component Config [#88002](https://github.com/openshift/kubernetes/pull/88002)
* Collect some of scheduling metrics and scheduling throughput (vol. 2) [#87923](https://github.com/openshift/kubernetes/pull/87923)
* Update Abdullah as the scheduling feature approver [#88128](https://github.com/openshift/kubernetes/pull/88128)
* CHANGELOG: Update CHANGELOG-1.18.md [#88115](https://github.com/openshift/kubernetes/pull/88115)
* kubectl cluster-info dump: use file extension according to output format [#82070](https://github.com/openshift/kubernetes/pull/82070)
* don't specify apiVersion when getting AAD token [#87590](https://github.com/openshift/kubernetes/pull/87590)
* Provide OIDC discovery for service account token issuer [#80724](https://github.com/openshift/kubernetes/pull/80724)
* Remove tautological condition in test/e2e/framework/pod/resource.go [#88070](https://github.com/openshift/kubernetes/pull/88070)
* add azure disk WriteAccelerator support [#87945](https://github.com/openshift/kubernetes/pull/87945)
* [Scheduler Framework] Rename `PostFilter` plugin to `PreScore` [#87751](https://github.com/openshift/kubernetes/pull/87751)
* Use --dry-run=server in kubectl commands [#87714](https://github.com/openshift/kubernetes/pull/87714)
* add roycaihw to reviewers in apiextensions-apiserver [#82051](https://github.com/openshift/kubernetes/pull/82051)
* Add ephemeral containers to streamLocation name suggestions [#81678](https://github.com/openshift/kubernetes/pull/81678)
* Initialize http Request Header before RoundTrip to avoid panic [#88064](https://github.com/openshift/kubernetes/pull/88064)
* Don't show flags in api-versions help [#88084](https://github.com/openshift/kubernetes/pull/88084)
* Refactor e2e node selection [#88059](https://github.com/openshift/kubernetes/pull/88059)
* Change migrated-to annoation key to follow best practices by removing beta [#88032](https://github.com/openshift/kubernetes/pull/88032)
* kube-proxy: validate dual-stack cidrs [#87353](https://github.com/openshift/kubernetes/pull/87353)
* Return the error from copyInto [#86896](https://github.com/openshift/kubernetes/pull/86896)
* Create manual conversions for serializer testing types [#88018](https://github.com/openshift/kubernetes/pull/88018)
* Make Azure clients only retry on specified HTTP status codes [#88017](https://github.com/openshift/kubernetes/pull/88017)
* Staticcheck: vendor/k8s.io/kubectl/pkg/scale etc. [#87403](https://github.com/openshift/kubernetes/pull/87403)
* Add logs of port-forward-tester pod [#87057](https://github.com/openshift/kubernetes/pull/87057)
* kubeadm: remove 'kubeadm upgrade node config' command when v1.18 is released [#87975](https://github.com/openshift/kubernetes/pull/87975)
* cross build pause with buildx [#87954](https://github.com/openshift/kubernetes/pull/87954)
* Fix kubectl drain ignore daemonsets and others [#87361](https://github.com/openshift/kubernetes/pull/87361)
* fix golint error in plugin/pkg/auth/authorizer/rbac/bootstrappolicy [#87234](https://github.com/openshift/kubernetes/pull/87234)
* proxier: only get local addresses once per sync loop [#85617](https://github.com/openshift/kubernetes/pull/85617)
* Round managedFields times to the nearest second before sorting [#88035](https://github.com/openshift/kubernetes/pull/88035)
* Avoid running docker specific test in containerd [#88033](https://github.com/openshift/kubernetes/pull/88033)
* Add RegisterPluginAsExtensionsWithWeight [#88024](https://github.com/openshift/kubernetes/pull/88024)
* fix: add azure disk migration support on CSINode [#88014](https://github.com/openshift/kubernetes/pull/88014)
* Support for adding test-handler for containerd [#88010](https://github.com/openshift/kubernetes/pull/88010)
* Add missing tag to vSphere storage E2E tests [#88003](https://github.com/openshift/kubernetes/pull/88003)
* test/e2e/framework:move functions to test/e2e/scheduling/ [#87943](https://github.com/openshift/kubernetes/pull/87943)
* add indexer for pod storage [#87939](https://github.com/openshift/kubernetes/pull/87939)
* Remove the exponential backoff in NodeGetInfo [#87911](https://github.com/openshift/kubernetes/pull/87911)
* Make DisruptionController eviction tests serial to avoid flakes [#87819](https://github.com/openshift/kubernetes/pull/87819)
* Add kubectl diff exit code doc [#87805](https://github.com/openshift/kubernetes/pull/87805)
* WatchBasedManager stops  watching immutable objects [#87718](https://github.com/openshift/kubernetes/pull/87718)
* Add comments in several hack/*.sh [#87595](https://github.com/openshift/kubernetes/pull/87595)
* Add comments in several hack/verify-*.sh(s-v) [#87417](https://github.com/openshift/kubernetes/pull/87417)
* Add matthyx to sig-node-reviewers in OWNERS_ALIASES [#85234](https://github.com/openshift/kubernetes/pull/85234)
* add exponential backoff with cap and reset in reflector during retrying ListWatch [#87795](https://github.com/openshift/kubernetes/pull/87795)
* Migrate health monitor from read only port to healthz port [#87463](https://github.com/openshift/kubernetes/pull/87463)
* Lower ssa auto-enablement to 10% [#88019](https://github.com/openshift/kubernetes/pull/88019)
* Cleanup "slow-path" logic in scheduler Filters [#87847](https://github.com/openshift/kubernetes/pull/87847)
* Added 'No resources found' message to describe <type> and top pod commands [#87527](https://github.com/openshift/kubernetes/pull/87527)
* Use NodeSelector instead of NodeName in hostexec Pod [#87871](https://github.com/openshift/kubernetes/pull/87871)
* Enable field management for all new objects [#87984](https://github.com/openshift/kubernetes/pull/87984)
* Add damemi to sig-scheduling owners [#87982](https://github.com/openshift/kubernetes/pull/87982)
* test/ : fix non-ascii characters [#87950](https://github.com/openshift/kubernetes/pull/87950)
* Fix non-ascii characters in test/e2e_node and test/network. [#87949](https://github.com/openshift/kubernetes/pull/87949)
* remove authn/z.CreateContext expansions [#87991](https://github.com/openshift/kubernetes/pull/87991)
* Switch node authorizer indexes to reference counts, add fastpath edge removal [#87696](https://github.com/openshift/kubernetes/pull/87696)
* tolerate when bazel shutdown errors out [#87958](https://github.com/openshift/kubernetes/pull/87958)
* Refine WaitingPod interface for scheduler Permit plugin [#87936](https://github.com/openshift/kubernetes/pull/87936)
* Treat replaced events that didn't change resourceVersion as resync events [#87957](https://github.com/openshift/kubernetes/pull/87957)
* add StatusConflict(409) as non-retriable error for disksClient [#87959](https://github.com/openshift/kubernetes/pull/87959)
* Add error check in kubectl proxy on server setup [#80651](https://github.com/openshift/kubernetes/pull/80651)
* Ability to use containerd as runtime in kube-up (on Ubuntu) [#87931](https://github.com/openshift/kubernetes/pull/87931)
* Prevent returning invalid usageNanoCores value when cpuacct is reset in a live container [#83507](https://github.com/openshift/kubernetes/pull/83507)
* Support config kubelet provider id for local cluster [#87914](https://github.com/openshift/kubernetes/pull/87914)
* Remove references to prometheus is test/e2e [#85029](https://github.com/openshift/kubernetes/pull/85029)
* remove TODO and unused code [#87947](https://github.com/openshift/kubernetes/pull/87947)
* Flip CSIMigrationOpenStack flag to be beta and off by default [#85637](https://github.com/openshift/kubernetes/pull/85637)
* add *Options to Create, Update, and Patch in generated clientsets [#87952](https://github.com/openshift/kubernetes/pull/87952)
* Bump to latest SMD to pick up performance optimizations [#87908](https://github.com/openshift/kubernetes/pull/87908)
* Modify Kubelet Pod Resources API to get only active pods [#79409](https://github.com/openshift/kubernetes/pull/79409)
* kubeadm: remove 'kubeadm alpha kubelet config download' [#87944](https://github.com/openshift/kubernetes/pull/87944)
* kubeadm: deprecate --kubelet-version command line option [#87942](https://github.com/openshift/kubernetes/pull/87942)
* fix: add non-retriable errors in azure clients [#87941](https://github.com/openshift/kubernetes/pull/87941)
* Do lenient decoding only for kubescheduler.config.k8s.io/v1alpha1 [#87853](https://github.com/openshift/kubernetes/pull/87853)
* kubeadm: dual-stack validation allow single stack [#87453](https://github.com/openshift/kubernetes/pull/87453)
* Validate Except of IPBlock for NetworkPolicy spec [#86578](https://github.com/openshift/kubernetes/pull/86578)
* Fix golint in staging/src/k8s.io/apiserver/plugin/pkg/authenticator/password/passwordfile [#83546](https://github.com/openshift/kubernetes/pull/83546)
* kubelet: Debug pod status output diff is wrong [#87858](https://github.com/openshift/kubernetes/pull/87858)
* context in client-go [#87299](https://github.com/openshift/kubernetes/pull/87299)
* Ensure bazel is really brought down (ONLY on bazel-release target) [#87929](https://github.com/openshift/kubernetes/pull/87929)
* added env var WINDOWS_CNI_STORAGE_PATH and WINDOWS_CNI_VERSION [#87701](https://github.com/openshift/kubernetes/pull/87701)
* remove bash examples/comments from the v1beta1 and v1beta2 APIs [#87886](https://github.com/openshift/kubernetes/pull/87886)
* Add code to fix kubelet/metrics memory issue. [#87913](https://github.com/openshift/kubernetes/pull/87913)
* Fix non-ascii characters in test/e2e/storage [#87930](https://github.com/openshift/kubernetes/pull/87930)
* LogResult if there is an error [#87928](https://github.com/openshift/kubernetes/pull/87928)
* cluster: Add justaugustus as reviewer [#87877](https://github.com/openshift/kubernetes/pull/87877)
* Prevent error message from being displayed during plugin list when path includes empty string [#87633](https://github.com/openshift/kubernetes/pull/87633)
* staticcheck: pkg/volume/fc, pkg/volume/portworx and pkg/volume/vspher… [#87381](https://github.com/openshift/kubernetes/pull/87381)
* SchedulerPredicates [Serial] validates resource limits of pods that are allowed to run - set resource requests as well [#87242](https://github.com/openshift/kubernetes/pull/87242)
* token cache: make fetch_total a counter [#86921](https://github.com/openshift/kubernetes/pull/86921)
* `kubectl create clusterrolebinding` creates rbac.authorization.k8s.io/v1 object [#85889](https://github.com/openshift/kubernetes/pull/85889)
* Added server-side printers for API priority and fairness [#85321](https://github.com/openshift/kubernetes/pull/85321)
* Adds initial unit tests for tablegenerator.go [#84620](https://github.com/openshift/kubernetes/pull/84620)
* Remove deprecated fields from kubescheduler.config.k8s.io/v1alpha2 [#87904](https://github.com/openshift/kubernetes/pull/87904)
* Limit number of instances in single update to GCE target pool [#87881](https://github.com/openshift/kubernetes/pull/87881)
* Drop k8s.io/node-api packages [#87503](https://github.com/openshift/kubernetes/pull/87503)
* Fix Cpu Requests priority Windows. [#85856](https://github.com/openshift/kubernetes/pull/85856)
* add indexer for storage cacher [#85445](https://github.com/openshift/kubernetes/pull/85445)
* Fix Golint errors in pkg/registry/core/pod [#87885](https://github.com/openshift/kubernetes/pull/87885)
* Ensure kubectl is available in default PATH [#87772](https://github.com/openshift/kubernetes/pull/87772)
* Add defaults to pod affinity args [#87725](https://github.com/openshift/kubernetes/pull/87725)
* Fixed a failing test on a RBD mount scenario [#87609](https://github.com/openshift/kubernetes/pull/87609)
* Refactor docker specific oom const out of qos pkg [#87390](https://github.com/openshift/kubernetes/pull/87390)
* Register conversions for kubectl testing types [#87892](https://github.com/openshift/kubernetes/pull/87892)
* Fix non-ascii characters in  test/e2e/node/pods.go [#87841](https://github.com/openshift/kubernetes/pull/87841)
* Use longer pod start timeouts for specific tests [#87910](https://github.com/openshift/kubernetes/pull/87910)
* Remove Error log for nil StartTime in preemption candidates [#87900](https://github.com/openshift/kubernetes/pull/87900)
* Revert "Collect some of scheduling metrics and scheduling throughput" [#87897](https://github.com/openshift/kubernetes/pull/87897)
* Add UpdateTwice and UpdateApply benchmarks for fieldmanager [#87896](https://github.com/openshift/kubernetes/pull/87896)
* CHANGELOG: Move changelogs into a subdir to delegate releng approvals [#87879](https://github.com/openshift/kubernetes/pull/87879)
* fix staticcheck errors in vendor/k8s.io/legacy-cloud-providers/aws. [#87874](https://github.com/openshift/kubernetes/pull/87874)
* Fix non-ascii characters in test/e2e/common/projected_configmap.go [#87798](https://github.com/openshift/kubernetes/pull/87798)
* Add a fast path for adding new node in node_authorizer [#87688](https://github.com/openshift/kubernetes/pull/87688)
* fix command variable exited with status 1 [#87653](https://github.com/openshift/kubernetes/pull/87653)
* volume binder testing [#87642](https://github.com/openshift/kubernetes/pull/87642)
* add a flag in azure auth module to omit spn: prefix in audience claim [#87630](https://github.com/openshift/kubernetes/pull/87630)
* Openapi/delete return type [#87559](https://github.com/openshift/kubernetes/pull/87559)
* FC mount options [#87499](https://github.com/openshift/kubernetes/pull/87499)
* fix e2e dual-stack test flakiness [#87201](https://github.com/openshift/kubernetes/pull/87201)
* gce-addons: Make sure default/limit-range doesn't get overridden [#87902](https://github.com/openshift/kubernetes/pull/87902)
* PodTopologySpread plugin now excludes terminatingPods [#87845](https://github.com/openshift/kubernetes/pull/87845)
* snapshot clientsets pending context migration [#87734](https://github.com/openshift/kubernetes/pull/87734)
* Make oidc authenticator audience agnostic [#87612](https://github.com/openshift/kubernetes/pull/87612)
* build: Remove deb and rpm build definitions/specs [#87585](https://github.com/openshift/kubernetes/pull/87585)
* Explicitly shutdown bazel after the target finishes [#87866](https://github.com/openshift/kubernetes/pull/87866)
* Move 'path' package usage to 'path/filepath' (repeat the #87713) [#87838](https://github.com/openshift/kubernetes/pull/87838)
* Updating dependency sigs.k8s.io/yaml to version v1.2.0 [#87830](https://github.com/openshift/kubernetes/pull/87830)
* implement backoff manager [#87829](https://github.com/openshift/kubernetes/pull/87829)
* add myself to hack/OWNERS [#87826](https://github.com/openshift/kubernetes/pull/87826)
* Ensure testing credentials are labeled as such [#87823](https://github.com/openshift/kubernetes/pull/87823)
* Check getNodeInfoError against nil [#87818](https://github.com/openshift/kubernetes/pull/87818)
* kube-aggregator: increase log level of AggregationController API group logging [#87813](https://github.com/openshift/kubernetes/pull/87813)
* Reduce overhead of error message formatting and allocation for NodeResource filter [#87788](https://github.com/openshift/kubernetes/pull/87788)
* makes unavailableGauge metric to always reflect the current state of a service [#87778](https://github.com/openshift/kubernetes/pull/87778)
* Cleanup TopologyManager and update policy.Merge() [#87758](https://github.com/openshift/kubernetes/pull/87758)
* python snippets should work on both old and new python versions [#87741](https://github.com/openshift/kubernetes/pull/87741)
* update github.com/docker/libnetwork to c8a5fca4a652 [#87695](https://github.com/openshift/kubernetes/pull/87695)
* Move IngressFromManifest/IngressToManifest to ingress e2e fw [#87513](https://github.com/openshift/kubernetes/pull/87513)
* Add annotation updating for migration for PVs and PVCs [#87098](https://github.com/openshift/kubernetes/pull/87098)
* Windows kubelet stats timeout updates [#87730](https://github.com/openshift/kubernetes/pull/87730)
* Collect some of scheduling metrics and scheduling throughput [#85861](https://github.com/openshift/kubernetes/pull/85861)
* Cleanup manual conversions [#87007](https://github.com/openshift/kubernetes/pull/87007)
* test/e2e/framework: remove skip.go and use e2eskipper subpackage [#87358](https://github.com/openshift/kubernetes/pull/87358)
* fix static check errors in vendor/k8s.io/apimachinery/pkg/api/resource [#87492](https://github.com/openshift/kubernetes/pull/87492)
* remove stateCheckPeriod [#82111](https://github.com/openshift/kubernetes/pull/82111)
* kubectl: allow to preselect interesting container in logs [#87809](https://github.com/openshift/kubernetes/pull/87809)
* Add an option to external storage e2es to use a copy of a pre-installed StorageClass [#87793](https://github.com/openshift/kubernetes/pull/87793)
* remove authn/z expansions [#87791](https://github.com/openshift/kubernetes/pull/87791)
* Save log files for network proxy [#87786](https://github.com/openshift/kubernetes/pull/87786)
* Only set admission review reponse patch type if the patch is not empty [#87781](https://github.com/openshift/kubernetes/pull/87781)
* Ensure specified container runtimes are present [#87761](https://github.com/openshift/kubernetes/pull/87761)
* update network-y stuff for supporting ubuntu/bionic [#87760](https://github.com/openshift/kubernetes/pull/87760)
* Change HostPath to EmptyDir for VolumeSubpathEnvExpansion e2e tests [#87825](https://github.com/openshift/kubernetes/pull/87825)
* grammar(noun to pod adjective phases) change for pods status in tests [#87598](https://github.com/openshift/kubernetes/pull/87598)
* Avoid thundering herd of relists on etcd [#86430](https://github.com/openshift/kubernetes/pull/86430)
* Move 'path' package usage to 'path/filepath'. [#87713](https://github.com/openshift/kubernetes/pull/87713)
* Fix CreateVolume signature in comment [#87451](https://github.com/openshift/kubernetes/pull/87451)
* Use network proxy for aggregator api [#87515](https://github.com/openshift/kubernetes/pull/87515)
* Ineffassign fixes for pkg/proxy [#87710](https://github.com/openshift/kubernetes/pull/87710)
* Initial behavior examples for conformance [#85960](https://github.com/openshift/kubernetes/pull/85960)
* fix shell checks errors in cluster/common.sh [#82454](https://github.com/openshift/kubernetes/pull/82454)
* Log when client rate limiter latency is very high at a lower log level [#87740](https://github.com/openshift/kubernetes/pull/87740)
* Update GCP Windows node image versions [#87629](https://github.com/openshift/kubernetes/pull/87629)
* kubectl-diff: Return non-1 errors on kubectl failures [#87437](https://github.com/openshift/kubernetes/pull/87437)
* add to api repo documentation [#87663](https://github.com/openshift/kubernetes/pull/87663)
* kubelet/network: add sig-network-approvers to OWNERS [#85472](https://github.com/openshift/kubernetes/pull/85472)
* Fix non-ascii characters in test/e2e/common/runtime.go [#87680](https://github.com/openshift/kubernetes/pull/87680)
* Enable selinux tags in make targets [#87658](https://github.com/openshift/kubernetes/pull/87658)
* kubeadm: prevent bootstrap of nodes with known names [#81056](https://github.com/openshift/kubernetes/pull/81056)
* More unit tests for scheduler [#87565](https://github.com/openshift/kubernetes/pull/87565)
* Update OWNERS [#87732](https://github.com/openshift/kubernetes/pull/87732)
* Fix statefulset conversion [#87706](https://github.com/openshift/kubernetes/pull/87706)
* Fix comment whitespace [#87705](https://github.com/openshift/kubernetes/pull/87705)
* fix: missing variadic dots [#87689](https://github.com/openshift/kubernetes/pull/87689)
* Fix backoff retries for AzureFile client [#87686](https://github.com/openshift/kubernetes/pull/87686)
* Add disableAvailabilitySetNodes to avoid VM list for VMSS clusters [#87685](https://github.com/openshift/kubernetes/pull/87685)
* Set cache to nil data when Azure node provisioning state is deleting [#87635](https://github.com/openshift/kubernetes/pull/87635)
* Reduce default CPU requirement for konnectivity server [#87729](https://github.com/openshift/kubernetes/pull/87729)
* Extend --dry-run to support values 'client', 'server', 'none' [#87580](https://github.com/openshift/kubernetes/pull/87580)
* Fix some scheduler metrics(pending_pods and schedule_attempts_total) are not recorded. [#87692](https://github.com/openshift/kubernetes/pull/87692)
* Fix node authorizer index recomputation [#87693](https://github.com/openshift/kubernetes/pull/87693)
* Delete the sysctl runtime admit handler [#87394](https://github.com/openshift/kubernetes/pull/87394)
* Attach a new finalizer in GCE ILB creation. [#86793](https://github.com/openshift/kubernetes/pull/86793)
* Add support for pre-allocated hugepages with 2+ sizes [#82820](https://github.com/openshift/kubernetes/pull/82820)
* Allow Action's Matches function to specify a subresource. [#87687](https://github.com/openshift/kubernetes/pull/87687)
* Move mutating admission step into finishRequest in the create handler [#87671](https://github.com/openshift/kubernetes/pull/87671)
* Fix preemption race conditions on heavily utilized nodes for e2e tests [#82350](https://github.com/openshift/kubernetes/pull/82350)
* Fixed listType annotations for API Priority and Fairness [#87676](https://github.com/openshift/kubernetes/pull/87676)
* remove client label from apiserver request count metric since it is unbounded [#87669](https://github.com/openshift/kubernetes/pull/87669)
* Update GCE Windows smoke-test script to work with 1909 nodes. [#87632](https://github.com/openshift/kubernetes/pull/87632)
* Add kubescheduler.config.k8s.io/v1alpha2 [#87628](https://github.com/openshift/kubernetes/pull/87628)
* Cleanup validation for immutable secrets/configmaps [#87602](https://github.com/openshift/kubernetes/pull/87602)
* Bump dependency github.com/prometheus/client_model@v0.2.0 [#87517](https://github.com/openshift/kubernetes/pull/87517)
* Agnhost webhook sidecar [#87385](https://github.com/openshift/kubernetes/pull/87385)
* cleanup: delete unused func [#87384](https://github.com/openshift/kubernetes/pull/87384)
* changelog: clarify 1.17 upgrade requirements [#87090](https://github.com/openshift/kubernetes/pull/87090)
* apimachinery: fix bugs in a Test function [#85011](https://github.com/openshift/kubernetes/pull/85011)
* Do not serialize internal types in ComponentConfig tests [#86144](https://github.com/openshift/kubernetes/pull/86144)
* Fix cpu manager e2e test typo [#86413](https://github.com/openshift/kubernetes/pull/86413)
* Make schema error log message more useful [#87677](https://github.com/openshift/kubernetes/pull/87677)
* Add GC e2e debug logging [#87670](https://github.com/openshift/kubernetes/pull/87670)
* Allow update of onXPN field in fake GCE clients. [#87667](https://github.com/openshift/kubernetes/pull/87667)
* Update GCI_VERSION to cos-77-12371-114-0 as older image is deprecated [#87652](https://github.com/openshift/kubernetes/pull/87652)
* Move GetPortURL to ingress e2e fw [#87512](https://github.com/openshift/kubernetes/pull/87512)
* cni: Update CNI version to v0.8.5 [#78819](https://github.com/openshift/kubernetes/pull/78819)
* Revert "Merge pull request #87258 from verult/slow-rxm-attach" [#87664](https://github.com/openshift/kubernetes/pull/87664)
* Image Promoter: Cleans manifest list [#87647](https://github.com/openshift/kubernetes/pull/87647)
* Register RunPodSandbox* metrics [#87627](https://github.com/openshift/kubernetes/pull/87627)
* Fix back off when scheduling cycle is delayed [#87616](https://github.com/openshift/kubernetes/pull/87616)
* Refactor context handling in rest.Request [#87597](https://github.com/openshift/kubernetes/pull/87597)
* remove duplicate default etcd server version from CHANGELOG-1.17.md [#87588](https://github.com/openshift/kubernetes/pull/87588)
* Bump dependency opencontainers/runc@v1.0.0-rc10 [#87516](https://github.com/openshift/kubernetes/pull/87516)
* bump github.com/google/gofuzz [#87431](https://github.com/openshift/kubernetes/pull/87431)
* Add: ConfigMap lifecycle test [#87212](https://github.com/openshift/kubernetes/pull/87212)
* Add foreground deletion check to ensure GC is aware of the new custom type [#87665](https://github.com/openshift/kubernetes/pull/87665)
* Remove kubectl run generators [#87077](https://github.com/openshift/kubernetes/pull/87077)
* various context related cleanups to rest.Request [#87599](https://github.com/openshift/kubernetes/pull/87599)
* Skip default spreading scoring plugin for pods that define TopologySpreadConstraints [#87566](https://github.com/openshift/kubernetes/pull/87566)
* fix static check in pkg/volume/flocker [#87544](https://github.com/openshift/kubernetes/pull/87544)
* Promote: Secret patching test [#87262](https://github.com/openshift/kubernetes/pull/87262)
* Implement support for setting hugepages limit on container cgroup sandbox. [#84154](https://github.com/openshift/kubernetes/pull/84154)
* Fix kubectl taint's Complete parsing [#87423](https://github.com/openshift/kubernetes/pull/87423)
* Add: PodTemplate lifecycle test [#87219](https://github.com/openshift/kubernetes/pull/87219)
* Add: promotion for LimitRange defaults test to Conformance [#87371](https://github.com/openshift/kubernetes/pull/87371)
* import-boss reverse import [#83526](https://github.com/openshift/kubernetes/pull/83526)
* Clarify sha matching etcd release tag [#87614](https://github.com/openshift/kubernetes/pull/87614)
* Parallelize attach operations across different nodes for volumes that allow multi-attach [#87258](https://github.com/openshift/kubernetes/pull/87258)
* azure: switch log verbosity for cache refresh logs [#87601](https://github.com/openshift/kubernetes/pull/87601)
* add comment in several hack/ sh scripts. [#87446](https://github.com/openshift/kubernetes/pull/87446)
* Fix bug of hack/verify-api-groups.sh [#87514](https://github.com/openshift/kubernetes/pull/87514)
* azure: set nil cache entry based on old cache [#87531](https://github.com/openshift/kubernetes/pull/87531)
* add logging when kubelet is waiting for cert [#86458](https://github.com/openshift/kubernetes/pull/86458)
* Updates to roundtrip package [#86959](https://github.com/openshift/kubernetes/pull/86959)
* Add logging to scheduler's event handlers [#87548](https://github.com/openshift/kubernetes/pull/87548)
* Cleanup unused Azure client interfaces [#87555](https://github.com/openshift/kubernetes/pull/87555)
* Make API Priority and Fairness suggested config avoid the mandatory catch-all [#87528](https://github.com/openshift/kubernetes/pull/87528)
* test/e2e/framework: handle the case where BeforeEach was never called [#87511](https://github.com/openshift/kubernetes/pull/87511)
* kubeadm: improvements to the concurrent etcd member join support [#87505](https://github.com/openshift/kubernetes/pull/87505)
* /test/e2e/framework:remove TODO in  test/e2e/framework/util.go [#87525](https://github.com/openshift/kubernetes/pull/87525)
* fix static check in cluster/images/etcd-version-monitor [#87243](https://github.com/openshift/kubernetes/pull/87243)
* Adds unit test on Bind extension for the scheduler [#87455](https://github.com/openshift/kubernetes/pull/87455)
* Added relevent approvers and reviewers for gci. [#87529](https://github.com/openshift/kubernetes/pull/87529)
* Fix golint errors in test/e2e/storage/vsphere [#86910](https://github.com/openshift/kubernetes/pull/86910)
* Promote: find Kubernetes Service in default Namespace [#87260](https://github.com/openshift/kubernetes/pull/87260)
* Adding taint toleration error reasons [#87250](https://github.com/openshift/kubernetes/pull/87250)
* Refactor Topology Manager policies to reduce code duplication [#87460](https://github.com/openshift/kubernetes/pull/87460)
* Simplified and corrected logic around context cancelation in refactored QueueSet [#87362](https://github.com/openshift/kubernetes/pull/87362)
* Whitelisting *.pkg.dev for the GCP credential provider [#87509](https://github.com/openshift/kubernetes/pull/87509)
* remove unused layer of loop structure in processorListener::run [#87393](https://github.com/openshift/kubernetes/pull/87393)
* clean up node_authorizer code: verb judgement [#87239](https://github.com/openshift/kubernetes/pull/87239)
* Clean up commented assertions in tests [#87237](https://github.com/openshift/kubernetes/pull/87237)
* Revert "It fixes a bug where AAD token obtained by kubectl is incompa… [#87507](https://github.com/openshift/kubernetes/pull/87507)
* Default the --enable-cadvisor-endpoints flag to disabled [#87440](https://github.com/openshift/kubernetes/pull/87440)
* Update cri-tools to v1.17.0 [#86305](https://github.com/openshift/kubernetes/pull/86305)
* Add serathius to sig-instrumentation-approvers [#87518](https://github.com/openshift/kubernetes/pull/87518)
* Fix issue with GCE scripts assuming Python2. [#87504](https://github.com/openshift/kubernetes/pull/87504)
* Re-enable apply for 50% of requests [#87500](https://github.com/openshift/kubernetes/pull/87500)
* Debugging 87473, printing out the last state of the dependent [#87479](https://github.com/openshift/kubernetes/pull/87479)
* Remove deprecated GA feature gates that expire in 1.18 [#87475](https://github.com/openshift/kubernetes/pull/87475)
* Fix error-string-capitalization in clientset generator. [#87138](https://github.com/openshift/kubernetes/pull/87138)
* fix-staticcheck:pkg/volume/scaleio/ [#87183](https://github.com/openshift/kubernetes/pull/87183)
* kubeadm: kube-dns is deprecated and will not be supported in a future version [#86574](https://github.com/openshift/kubernetes/pull/86574)
* Update gopkg.in/yaml.v2 to v2.2.8 [#87467](https://github.com/openshift/kubernetes/pull/87467)
* add warning on ObjectReference [#87459](https://github.com/openshift/kubernetes/pull/87459)
* kubeadm: remove the deprecated GA CoreDNS feature-gate [#87400](https://github.com/openshift/kubernetes/pull/87400)
* Self nominate aojea as sig-network-reviewer [#87356](https://github.com/openshift/kubernetes/pull/87356)
* Promote: Namespace patch test [#87256](https://github.com/openshift/kubernetes/pull/87256)
* informers: Don't treat relist same as sync [#86015](https://github.com/openshift/kubernetes/pull/86015)
* Fix numPDBViolations when victims on same node are assigned same PDB [#82235](https://github.com/openshift/kubernetes/pull/82235)
* Remove `scheduler/algorithm/priorities` in import-restrictions [#87406](https://github.com/openshift/kubernetes/pull/87406)
* Fix staticcheck in pkg/controller/podgc [#87308](https://github.com/openshift/kubernetes/pull/87308)
* Image Promoter: Bump timeout limit [#87494](https://github.com/openshift/kubernetes/pull/87494)
* Image Promoter: Remove -it from docker command [#87483](https://github.com/openshift/kubernetes/pull/87483)
* Fix static check failures in test/e2e/instrumentation/logging/st… [#87178](https://github.com/openshift/kubernetes/pull/87178)
* Add env var(CNI_TAR_PREFIX) for cni install. [#87478](https://github.com/openshift/kubernetes/pull/87478)
* don't wait blindly [#87471](https://github.com/openshift/kubernetes/pull/87471)
* fix static check errors in test/integration/etcd [#87457](https://github.com/openshift/kubernetes/pull/87457)
* Delete TODO to use docker client [#87456](https://github.com/openshift/kubernetes/pull/87456)
* Update structured-merge-diff dependency to v3 [#87442](https://github.com/openshift/kubernetes/pull/87442)
* add crash protection to wait functions that were missing it [#87338](https://github.com/openshift/kubernetes/pull/87338)
* Support test deprecated metrics [#87241](https://github.com/openshift/kubernetes/pull/87241)
* pass through KUBE_BUILD_PLATFORMS to enable build on specified platforms [#87012](https://github.com/openshift/kubernetes/pull/87012)
* add dynamic reloading for CSR signing controllers [#86816](https://github.com/openshift/kubernetes/pull/86816)
* kube-proxy: fix incorrect log information [#87449](https://github.com/openshift/kubernetes/pull/87449)
* test images: Image Promoter fixes [#87188](https://github.com/openshift/kubernetes/pull/87188)
* Record overall Filter latency for all nodes in a scheduling cycle. [#87458](https://github.com/openshift/kubernetes/pull/87458)
* Enable verify-import-boss check for e2e framework [#87265](https://github.com/openshift/kubernetes/pull/87265)
* add myself to sig-network-approvers [#85612](https://github.com/openshift/kubernetes/pull/85612)
* Move default binding to a plugin [#87430](https://github.com/openshift/kubernetes/pull/87430)
* e2e-topology-manager: Initial commit for E2E tests [#86184](https://github.com/openshift/kubernetes/pull/86184)
* Fix grammar: have -> has [#85421](https://github.com/openshift/kubernetes/pull/85421)
* healthz: instrument root healthz requests for metrics [#83598](https://github.com/openshift/kubernetes/pull/83598)
* Fix: describe of statefulset prints pointer not value [#85846](https://github.com/openshift/kubernetes/pull/85846)
* Remove folder pkg/scheduler/algorithm [#87439](https://github.com/openshift/kubernetes/pull/87439)
* Fix static check errors in pkg/util/netsh [#87377](https://github.com/openshift/kubernetes/pull/87377)
* bumped pause-win to 1.1.0 [#87436](https://github.com/openshift/kubernetes/pull/87436)
* Use e2eskipper package in test/e2e/common/ [#87270](https://github.com/openshift/kubernetes/pull/87270)
* fix flaky test "should create a ResourceQuota and capture the life of a replication controller" [#87432](https://github.com/openshift/kubernetes/pull/87432)
* Deprecate scheduler's framework.plugins.RegistryArgs [#87407](https://github.com/openshift/kubernetes/pull/87407)
* Fix multinode storage e2e tests for multizone clusters [#85898](https://github.com/openshift/kubernetes/pull/85898)
* Promote a TCP socket probe test to Conformance [#85486](https://github.com/openshift/kubernetes/pull/85486)
* Move GeneralPredicates logic to kubelet. [#87342](https://github.com/openshift/kubernetes/pull/87342)
* Fix typo in comments for func GetFullContainerName [#87072](https://github.com/openshift/kubernetes/pull/87072)
* Move scheduler's SchedulerExtender interface to core/extenders.go [#87401](https://github.com/openshift/kubernetes/pull/87401)
* Support server-side dry-run in cli-runtime REST Helper [#86408](https://github.com/openshift/kubernetes/pull/86408)
* Enable bound tokens in local-up-cluster [#87386](https://github.com/openshift/kubernetes/pull/87386)
* fix static check failure in pkg/controller/disruption and pkg/control… [#87382](https://github.com/openshift/kubernetes/pull/87382)
* Add comments in several hack/verify-*.sh(g-r) [#87379](https://github.com/openshift/kubernetes/pull/87379)
* Use e2eskipper package in test/e2e/framework/ [#87317](https://github.com/openshift/kubernetes/pull/87317)
* Replace Scheduler.GetBinder with a method [#87297](https://github.com/openshift/kubernetes/pull/87297)
* Initialize CPUManager containerMap to set of initial containers [#87397](https://github.com/openshift/kubernetes/pull/87397)
* switch to docker command line in tests/e2e_node [#87335](https://github.com/openshift/kubernetes/pull/87335)
* Update logic in `CPUManager` `reconcileState()` [#84300](https://github.com/openshift/kubernetes/pull/84300)
* Remove check for empty activePods list in CPUManager removeStaleState [#87255](https://github.com/openshift/kubernetes/pull/87255)
* Update aws-sdk-go dependency to v1.28.2 [#87253](https://github.com/openshift/kubernetes/pull/87253)
* Bump golang/mock version to v1.3.1 [#87326](https://github.com/openshift/kubernetes/pull/87326)
* Return error instead of panic when cpu manager fails on startup. [#84705](https://github.com/openshift/kubernetes/pull/84705)
* fix staticcheck: pkg/volume/awsebs [#87074](https://github.com/openshift/kubernetes/pull/87074)
* fix staticcheck:pkg/volume/cinder [#87139](https://github.com/openshift/kubernetes/pull/87139)
* Add flowcontrol to apiVersionPriorities [#87357](https://github.com/openshift/kubernetes/pull/87357)
* hack/local-up-cluster.sh: unify --cluster-cidr in KCM and CCM [#87359](https://github.com/openshift/kubernetes/pull/87359)
* fix a bug that orphan revision cannot be adopted and statefulset cannot be synced [#86801](https://github.com/openshift/kubernetes/pull/86801)
* Updating protobuf (v1.3.1) and grpc (v1.26.0) [#87081](https://github.com/openshift/kubernetes/pull/87081)
* Add Azure storage clients with backoff retry [#87306](https://github.com/openshift/kubernetes/pull/87306)
* API for immutable Secrets and ConfigMaps [#86377](https://github.com/openshift/kubernetes/pull/86377)
* Update validation for API Priority and Fairness [#87313](https://github.com/openshift/kubernetes/pull/87313)
* Add comments in several hack/verify-generated-*.sh [#87307](https://github.com/openshift/kubernetes/pull/87307)
* Remove Brad Childs from OWNERS [#87347](https://github.com/openshift/kubernetes/pull/87347)
* Improve error message when diff binary is not in PATH [#87344](https://github.com/openshift/kubernetes/pull/87344)
* Fix static check failures in test/e2e/instrumentation/monitoring [#87221](https://github.com/openshift/kubernetes/pull/87221)
* Creating new EndpointSliceProxying feature gate for kube-proxy, enabling EndpointSlice feature gate by default [#86137](https://github.com/openshift/kubernetes/pull/86137)
* Move Snapshot to internal/cache [#87165](https://github.com/openshift/kubernetes/pull/87165)
* fix staticcheck errors in pkg/volume/hostpath. [#87245](https://github.com/openshift/kubernetes/pull/87245)
* Modify alias of e2e/framework/job to e2ejob [#87303](https://github.com/openshift/kubernetes/pull/87303)
* rename some declartions named context in tests [#87298](https://github.com/openshift/kubernetes/pull/87298)
* Remove Brad Childs from OWNERS files [#87293](https://github.com/openshift/kubernetes/pull/87293)
* Updated - topologymanager: Add Merge method to Policy [#85798](https://github.com/openshift/kubernetes/pull/85798)
* Check first if ipvs module is builtin [#82223](https://github.com/openshift/kubernetes/pull/82223)
* Implement default queue sort logic as a scheduler plugin [#87261](https://github.com/openshift/kubernetes/pull/87261)
* In test framework LoadConfig(), use CurrentContext.Server for TestCon… [#87030](https://github.com/openshift/kubernetes/pull/87030)
* kubeadm upgrades always persist the etcd backup for stacked [#86861](https://github.com/openshift/kubernetes/pull/86861)
* move function GetKubemarkMasterComponentResoureUsage and remove long-time TODO [#87271](https://github.com/openshift/kubernetes/pull/87271)
* test/e2e/framework/rc/:refactor function ByNameContainer remove unused flag [#87274](https://github.com/openshift/kubernetes/pull/87274)
* Add comments in several hack/verify-*.sh [#87272](https://github.com/openshift/kubernetes/pull/87272)
* add README.md in hack/ [#87065](https://github.com/openshift/kubernetes/pull/87065)
* Move ValidateEndpointsPorts() to e2e test [#87291](https://github.com/openshift/kubernetes/pull/87291)
* Fix the bug PIP's DNS is deleted if no DNS label service annotation isn't set. [#87246](https://github.com/openshift/kubernetes/pull/87246)
* Allow a preloaded gke-exec-auth-plugin [#87032](https://github.com/openshift/kubernetes/pull/87032)
* Add error check for instance insert in node e2e [#87003](https://github.com/openshift/kubernetes/pull/87003)
* Adding unit tests for kube-scheduler Config Complete() method. [#86709](https://github.com/openshift/kubernetes/pull/86709)
* Update bitmask printing to print in groups of 2 instead of all 64 bits [#87283](https://github.com/openshift/kubernetes/pull/87283)
* Use e2eskipper package in test/e2e/autoscaling [#87173](https://github.com/openshift/kubernetes/pull/87173)
* fix-staticcheck:pkg/volume/emptydir [#87128](https://github.com/openshift/kubernetes/pull/87128)
* Fix ineffectual assignment to CPUSets [#83904](https://github.com/openshift/kubernetes/pull/83904)
* fix ci-kubernetes-node-kubelet-serial Non-system critical priority classes are not allowed to have a value larger than HighestUserDefinablePriority [#82493](https://github.com/openshift/kubernetes/pull/82493)
* Fix link in readme [#86652](https://github.com/openshift/kubernetes/pull/86652)
* Fixed fluentd (addon) docker.log format (configuration) [#87041](https://github.com/openshift/kubernetes/pull/87041)
* pkg/master: fix staticcheck warning [#85171](https://github.com/openshift/kubernetes/pull/85171)
* simple typo fix [#87254](https://github.com/openshift/kubernetes/pull/87254)
* cleanup(scheduler): remove unused function, remove duplicate comment [#87238](https://github.com/openshift/kubernetes/pull/87238)
* add comment in hack/update-*.sh [#87181](https://github.com/openshift/kubernetes/pull/87181)
* use e2eskipper package in test/e2e/cloud [#87175](https://github.com/openshift/kubernetes/pull/87175)
* Update to golang@1.13.6 [#87106](https://github.com/openshift/kubernetes/pull/87106)
* Use e2eskipper package in test/e2e/auth [#87062](https://github.com/openshift/kubernetes/pull/87062)
* Add import-aliases check of e2e sub framework [#87042](https://github.com/openshift/kubernetes/pull/87042)
* Allow show hidden metrics in kube-controller-manager [#85281](https://github.com/openshift/kubernetes/pull/85281)
* Add integration test for NodeResourceLimits plugin [#87192](https://github.com/openshift/kubernetes/pull/87192)
* Fix a flaky scheduler preemption e2e [#86400](https://github.com/openshift/kubernetes/pull/86400)
* Pick closest tags for a few packages and avoid random SHA [#87158](https://github.com/openshift/kubernetes/pull/87158)
* Add PatchService method in service/helper. [#87217](https://github.com/openshift/kubernetes/pull/87217)
* Nominate alculquicondor to sig-scheduling-maintainers [#87202](https://github.com/openshift/kubernetes/pull/87202)
* remove TODO in test/e2e/framework/providers/gce/ingress.go [#87132](https://github.com/openshift/kubernetes/pull/87132)
* Revert "Revert "Add an option to specify kubelet flags for heapster node [#87013](https://github.com/openshift/kubernetes/pull/87013)
* Simplify code generator dependencies [#87226](https://github.com/openshift/kubernetes/pull/87226)
* Add Azure network and VM clients with backoff retry [#87122](https://github.com/openshift/kubernetes/pull/87122)
* remove TODO in test/e2e/framework/skip.go [#87230](https://github.com/openshift/kubernetes/pull/87230)
* using string instead of byte [#86569](https://github.com/openshift/kubernetes/pull/86569)
* Clarify intstr.IntValue() behavior [#86172](https://github.com/openshift/kubernetes/pull/86172)
* Fix apply --prune to visit cli specified namespace [#85613](https://github.com/openshift/kubernetes/pull/85613)
* Fix kubectl top sort-by cpu and sort-by memory options [#82333](https://github.com/openshift/kubernetes/pull/82333)
* cleanup(kubectl taint): fix Errorf and comment error, and remove unne… [#86347](https://github.com/openshift/kubernetes/pull/86347)
* Revert "list vm instead of get when getting virtual machine" [#87210](https://github.com/openshift/kubernetes/pull/87210)
* storage e2e: Add context to timeout errors [#87168](https://github.com/openshift/kubernetes/pull/87168)
* test/e2e/framework:remove generateWriteBlockCmd due to the repeat to … [#87021](https://github.com/openshift/kubernetes/pull/87021)
* Cleanup cloud controller manager when closing cluster. [#86955](https://github.com/openshift/kubernetes/pull/86955)
* Fix err variable shadowing issue in storage/utils [#86886](https://github.com/openshift/kubernetes/pull/86886)
* Add test coverage for oom watcher [#86728](https://github.com/openshift/kubernetes/pull/86728)
* Mark session affinity e2e tests as [Flaky] [#87222](https://github.com/openshift/kubernetes/pull/87222)
* Make sure PDB has observed pods before doing eviction in e2e test [#87205](https://github.com/openshift/kubernetes/pull/87205)
* Clean up rkt specific code in `pkg/kubelet/pleg` [#87193](https://github.com/openshift/kubernetes/pull/87193)
* Do not require token secrets when using bound service account tokens [#87029](https://github.com/openshift/kubernetes/pull/87029)
* Make CustomResourceDefinitionStatus fields +optional [#87213](https://github.com/openshift/kubernetes/pull/87213)
* make request logs greppable [#87203](https://github.com/openshift/kubernetes/pull/87203)
* remove TODO(random-liu): Move pod wait function into this file [#87189](https://github.com/openshift/kubernetes/pull/87189)
* Use e2eskipper package in e2e/scheduling and e2e/servicecatalog [#87169](https://github.com/openshift/kubernetes/pull/87169)
* Use v1 subjectaccessreview API in controller-manager CSR approver [#87164](https://github.com/openshift/kubernetes/pull/87164)
* set test image cloudbuild directory [#87162](https://github.com/openshift/kubernetes/pull/87162)
* Multi arch for nonroot image [#87153](https://github.com/openshift/kubernetes/pull/87153)
* Allow embedding logs command [#87152](https://github.com/openshift/kubernetes/pull/87152)
* e2e/gke_local_ssd.go and e2e/gke_node_pools.go:Use e2eskipper package [#87121](https://github.com/openshift/kubernetes/pull/87121)
* test/e2e/windows/:Use e2eskipper package [#87103](https://github.com/openshift/kubernetes/pull/87103)
* e2e/instrumentation:Use e2eskipper package [#87101](https://github.com/openshift/kubernetes/pull/87101)
* Remove last scheduler dependencies on predicates package [#87091](https://github.com/openshift/kubernetes/pull/87091)
* Remove direct use of Snapshot's data structures [#87038](https://github.com/openshift/kubernetes/pull/87038)
* Add Azure network security group resource group [#87035](https://github.com/openshift/kubernetes/pull/87035)
* Cleanup comments and names in client-go/tools/cache [#86774](https://github.com/openshift/kubernetes/pull/86774)
* fix broken link: https://kubernetes-csi.github.io/docs/Drivers.html [#86239](https://github.com/openshift/kubernetes/pull/86239)
* Enabled reading config files for vsphere e2e tests. [#82027](https://github.com/openshift/kubernetes/pull/82027)
* Stop tracking managedField on create/update [#87196](https://github.com/openshift/kubernetes/pull/87196)
* Included CSINode describer [#85283](https://github.com/openshift/kubernetes/pull/85283)
* Fixes unnecessary creation of default SG and trying to delete non-provisioned SG by k8s system when annotation [service.beta.kubernetes.io/aws-load-balancer-security-groups] is present [#84265](https://github.com/openshift/kubernetes/pull/84265)
* Refactor kubelet resource metrics [#86282](https://github.com/openshift/kubernetes/pull/86282)
* Fix(kubectl): the fields of history controllerrevision will be covered with daemonset [#86215](https://github.com/openshift/kubernetes/pull/86215)
* Clean deprecated metrics [#76496](https://github.com/openshift/kubernetes/pull/76496)
* Allow "kubelet --node-ip ::" to mean prefer IPv6 [#85850](https://github.com/openshift/kubernetes/pull/85850)
* test/e2e/ui and test/e2e/upgrades:Use e2eskipper package [#87125](https://github.com/openshift/kubernetes/pull/87125)
* test/e2e/storage:Use e2eskipper package [#87124](https://github.com/openshift/kubernetes/pull/87124)
* updating googleapis/gnostic to v0.1.0 [#87107](https://github.com/openshift/kubernetes/pull/87107)
* test/e2e/kubectl test/e2e_kubeadm:Use e2eskipper package [#87102](https://github.com/openshift/kubernetes/pull/87102)
* Drop random SHA and update gonum.org/v1/gonum to v0.6.2 [#87088](https://github.com/openshift/kubernetes/pull/87088)
* Remove unused KUBE_TEST_API logic [#87082](https://github.com/openshift/kubernetes/pull/87082)
* e2e/network/:Use e2eskipper package [#87073](https://github.com/openshift/kubernetes/pull/87073)
* Fix staticcheck failures of pkg/util/ipconfig pkg/util/iptables pkg/util/ipvs/testing [#87002](https://github.com/openshift/kubernetes/pull/87002)
* kubeadm: support automatic retry after failing to pull image [#86899](https://github.com/openshift/kubernetes/pull/86899)
* Centralizes images into agnhost (part 4) [#81170](https://github.com/openshift/kubernetes/pull/81170)
* Fix GetPodLogs failures in NetworkPolicy e2e tests [#85897](https://github.com/openshift/kubernetes/pull/85897)
* Enable tracking field management for some objects before they are applied to [#87044](https://github.com/openshift/kubernetes/pull/87044)
* change apply signature and move it's decoding into handler [#86560](https://github.com/openshift/kubernetes/pull/86560)
* Bootstrap flow-control objects [#85268](https://github.com/openshift/kubernetes/pull/85268)
* Update gopkg.in/yaml.v2 to v2.2.7 [#85458](https://github.com/openshift/kubernetes/pull/85458)
* Move from random SHA - update github.com/prometheus/client_model to v0.1.0 [#87093](https://github.com/openshift/kubernetes/pull/87093)
* Update hostpath and mock csi drivers with latest sidecars [#86939](https://github.com/openshift/kubernetes/pull/86939)
* Fix a flaky e2e test of Job completion [#86627](https://github.com/openshift/kubernetes/pull/86627)
* Create test to patch a secret [#86857](https://github.com/openshift/kubernetes/pull/86857)
* Remove duplicated ServiceStartTimeout [#87097](https://github.com/openshift/kubernetes/pull/87097)
* Add some comment to hack/verify-linkcheck.sh [#87076](https://github.com/openshift/kubernetes/pull/87076)
* Fix a comment typo in legacyNodeRoleBehaviorFeature [#84433](https://github.com/openshift/kubernetes/pull/84433)
* Use release tags for aec and goconvey [#87089](https://github.com/openshift/kubernetes/pull/87089)
* Remove no longer needed `modifyContainerPIDNamespaceOverrides` [#86783](https://github.com/openshift/kubernetes/pull/86783)
* Refactor oom watcher to allow greater test coverage [#86702](https://github.com/openshift/kubernetes/pull/86702)
* Ensure a provider ID is set on a node if expected [#87043](https://github.com/openshift/kubernetes/pull/87043)
* Remove workaround for RS bug in cmd apps test [#87023](https://github.com/openshift/kubernetes/pull/87023)
* add myself as feature approver (for SIG cloud provider) [#87084](https://github.com/openshift/kubernetes/pull/87084)
* e2e/node/:Use e2eskipper package [#87069](https://github.com/openshift/kubernetes/pull/87069)
* Use e2eskipper package in e2e/apps [#87061](https://github.com/openshift/kubernetes/pull/87061)
* Cleanup unused predicate error types. [#87055](https://github.com/openshift/kubernetes/pull/87055)
* Remove scheduler/algorithm/priorities/util package [#87051](https://github.com/openshift/kubernetes/pull/87051)
* Update Azure owners [#87034](https://github.com/openshift/kubernetes/pull/87034)
* Add a comment for function WithPlugin [#87005](https://github.com/openshift/kubernetes/pull/87005)
* fix: typos in comments of admission [#87060](https://github.com/openshift/kubernetes/pull/87060)
* fix golint error in pkg/apis/rbac [#87050](https://github.com/openshift/kubernetes/pull/87050)
* Cleanup scheduler/algorithm/predicates package [#87037](https://github.com/openshift/kubernetes/pull/87037)
* fix typo in ipvs proxier README [#87001](https://github.com/openshift/kubernetes/pull/87001)
* Add error handling of CloseWrite() [#87052](https://github.com/openshift/kubernetes/pull/87052)
* Fix comment [#87014](https://github.com/openshift/kubernetes/pull/87014)
* test images: Adds E2E test image automated build [#84058](https://github.com/openshift/kubernetes/pull/84058)
* Separate skip as framework subpackage [#87031](https://github.com/openshift/kubernetes/pull/87031)
* kubenet: replace gateway with cni result [#85993](https://github.com/openshift/kubernetes/pull/85993)
* Allow usage of consts and variables for stable metrics in static analysis [#84373](https://github.com/openshift/kubernetes/pull/84373)
* Bind  kube-dns containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes [#83358](https://github.com/openshift/kubernetes/pull/83358)
* refactor: remove several files in priorities package [#86997](https://github.com/openshift/kubernetes/pull/86997)
* Revert "fix flakes on e2e test TCP CLOSE_WAIT timeout" [#87036](https://github.com/openshift/kubernetes/pull/87036)
* feat(scheduling): address disabled plugins in scheduling framework [#86905](https://github.com/openshift/kubernetes/pull/86905)
* Break nodeunschedulable Filter plugins dependency on predicates package [#86848](https://github.com/openshift/kubernetes/pull/86848)
* fix: remove ErrTopologySpreadConstraintsNotMatch [#86999](https://github.com/openshift/kubernetes/pull/86999)
* Remove nodes from cache immediately on delete events [#86964](https://github.com/openshift/kubernetes/pull/86964)
* Cleanup/Enhance scheduler metrics [#86545](https://github.com/openshift/kubernetes/pull/86545)
* Add simple reference to synopsis of kube-scheduler [#86529](https://github.com/openshift/kubernetes/pull/86529)
* feat: remove several feature gates in 1.18 [#86210](https://github.com/openshift/kubernetes/pull/86210)
* Bind dns-horizontal containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes [#83364](https://github.com/openshift/kubernetes/pull/83364)
* Remove ErrServiceAffinityViolated scheduler predicate error [#86998](https://github.com/openshift/kubernetes/pull/86998)
* Remove uses of NodeInfoMap outside of snapshot and cache [#86981](https://github.com/openshift/kubernetes/pull/86981)
* fix kubectl annotate error when local=true is set. [#86952](https://github.com/openshift/kubernetes/pull/86952)
* Move yaml limit tests to benchmarks [#86885](https://github.com/openshift/kubernetes/pull/86885)
* Repair smoke-test for Windows GCE clusters [#86495](https://github.com/openshift/kubernetes/pull/86495)
* Add johnbelamaric as conformance code reviewer/approver [#85154](https://github.com/openshift/kubernetes/pull/85154)
* Update Calico to v3.8.4 [#84163](https://github.com/openshift/kubernetes/pull/84163)
* remove TODO in test/e2e/framework/node/resource.go [#86782](https://github.com/openshift/kubernetes/pull/86782)
* fix kubectl apply set last applied namespace error [#86474](https://github.com/openshift/kubernetes/pull/86474)
* Move TaintToleration predicate to its plugin [#86979](https://github.com/openshift/kubernetes/pull/86979)
* Add VolumeBinder to FrameworkHandle interface [#86940](https://github.com/openshift/kubernetes/pull/86940)
* Move IsAppArmorSupported() from e2e framework [#86991](https://github.com/openshift/kubernetes/pull/86991)
* Remove test/integration dependency on predicates and algorithmprovider [#86985](https://github.com/openshift/kubernetes/pull/86985)
* Move selector spreading priority code to plugin [#86890](https://github.com/openshift/kubernetes/pull/86890)
* Remove test/e2e dependency on scheduler/predicates package [#86983](https://github.com/openshift/kubernetes/pull/86983)
* Fix interpodaffinity issue [#86966](https://github.com/openshift/kubernetes/pull/86966)
* Update scheduler's RunFilterPlugins to return a plugin to status map [#86963](https://github.com/openshift/kubernetes/pull/86963)
* crd openapi e2e: increase waitForOpenAPISchema timeout [#86931](https://github.com/openshift/kubernetes/pull/86931)
* Break interpodaffinity Filter plugins dependency on predicates package [#86836](https://github.com/openshift/kubernetes/pull/86836)
* Change PDB tests to use pod conditions instead of phase [#86366](https://github.com/openshift/kubernetes/pull/86366)
* fix e2e test TCP CLOSE_WAIT [#86924](https://github.com/openshift/kubernetes/pull/86924)
* Use Network Proxy for Admission Webhooks [#85168](https://github.com/openshift/kubernetes/pull/85168)
* Demote Delete Grace Period test to [Flaky] [#86962](https://github.com/openshift/kubernetes/pull/86962)
* cleanup(api-machinery): remove unused struct and variable [#86950](https://github.com/openshift/kubernetes/pull/86950)
* Remove redundant nil check in apiserver integration test [#86947](https://github.com/openshift/kubernetes/pull/86947)
* fix typo [#86946](https://github.com/openshift/kubernetes/pull/86946)
* Add simple explanation to verify-spelling.sh [#86945](https://github.com/openshift/kubernetes/pull/86945)
* Use Snapshot.NodeInfoList for listing operations [#86930](https://github.com/openshift/kubernetes/pull/86930)
* Move publish and unpublish counting up in test [#86891](https://github.com/openshift/kubernetes/pull/86891)
* Addons: elasticsearch supports automatically setting the advertise address [#85944](https://github.com/openshift/kubernetes/pull/85944)
* Drop version from static openapi json file [#84654](https://github.com/openshift/kubernetes/pull/84654)
* Break serviceaffinity Filter plugins dependency on predicates package [#86764](https://github.com/openshift/kubernetes/pull/86764)
* Create test for finding service from listing all namespaces [#86856](https://github.com/openshift/kubernetes/pull/86856)
* Revert "fix flakiness on e2e test TCP CLOSE_WAIT timeout" [#86932](https://github.com/openshift/kubernetes/pull/86932)
* kubeadm: Fix a false positive in a warning [#86917](https://github.com/openshift/kubernetes/pull/86917)
* staticcheck:test/integration/master/ [#86901](https://github.com/openshift/kubernetes/pull/86901)
* Remove variable EXTERNAL_CLOUD_VOLUME_PLUGIN default value [#86893](https://github.com/openshift/kubernetes/pull/86893)
* fix log message error in nodelifecycle [#86871](https://github.com/openshift/kubernetes/pull/86871)
* Create namespace patch test [#86854](https://github.com/openshift/kubernetes/pull/86854)
* fix staticcheck of pkg/util/ebtables [#86775](https://github.com/openshift/kubernetes/pull/86775)
* Adding in missing Registry unit tests. [#86755](https://github.com/openshift/kubernetes/pull/86755)
* Lock checksum calculation for v1 CPUManager state to pre 1.18 logic [#86689](https://github.com/openshift/kubernetes/pull/86689)
* Add simple explanation to verify golint script [#86604](https://github.com/openshift/kubernetes/pull/86604)
* kubectl: remove unreachable code [#84241](https://github.com/openshift/kubernetes/pull/84241)
* refactor events utils in e2e [#85190](https://github.com/openshift/kubernetes/pull/85190)
* Fix golint failures for pkg/kubelet/config/... [#84927](https://github.com/openshift/kubernetes/pull/84927)
* Shorten health check timeout for AWS NLB with externalTrafficPolicy: Local [#73363](https://github.com/openshift/kubernetes/pull/73363)
* Fix how we check for node info list consistency [#86919](https://github.com/openshift/kubernetes/pull/86919)
* Break volumezone Filter plugins dependency on predicates package [#86852](https://github.com/openshift/kubernetes/pull/86852)
* Break nodelabel Filter plugins dependency on predicates package [#86847](https://github.com/openshift/kubernetes/pull/86847)
* move functions from e2e/framework/deployment/ to e2e/apps/ and e2e/up… [#86767](https://github.com/openshift/kubernetes/pull/86767)
* Revise SharedInformer godoc comments [#84453](https://github.com/openshift/kubernetes/pull/84453)
* fix a bug in scheduler's node resource limits score [#86913](https://github.com/openshift/kubernetes/pull/86913)
* Move RequestedToCapacityRatio argument processing to its plugin [#86875](https://github.com/openshift/kubernetes/pull/86875)
* Break nodevolumelimits Filter plugins dependency on predicates package [#86849](https://github.com/openshift/kubernetes/pull/86849)
* code-gen: fix argument type for plural exceptions [#86310](https://github.com/openshift/kubernetes/pull/86310)
* staticcheck:test/integration/auth/ [#86900](https://github.com/openshift/kubernetes/pull/86900)
* Remove dead code in fake docker client [#86832](https://github.com/openshift/kubernetes/pull/86832)
* Remove `recorder.PastEventf` method [#86727](https://github.com/openshift/kubernetes/pull/86727)
* allow an SNI cert to be used to respond for a particular IP [#85308](https://github.com/openshift/kubernetes/pull/85308)
* Dualstack support for kube-proxy iptables mode [#82462](https://github.com/openshift/kubernetes/pull/82462)
* kubemark use remote cri [#86575](https://github.com/openshift/kubernetes/pull/86575)
* add route.Get() and skip PUT if route exists [#86561](https://github.com/openshift/kubernetes/pull/86561)
* Reuse converter in crdHandler#getOrCreateServingInfoFor [#86501](https://github.com/openshift/kubernetes/pull/86501)
* Remove unused scheduler types [#86877](https://github.com/openshift/kubernetes/pull/86877)
* rename ExtenderConfig to Extender in comments [#86859](https://github.com/openshift/kubernetes/pull/86859)
* Correct comment around which integrations require cadvisor_stats [#86844](https://github.com/openshift/kubernetes/pull/86844)
* list vm instead of get when getting virtual machine [#86817](https://github.com/openshift/kubernetes/pull/86817)
* move funs of framework/volume to e2e/storage [#86748](https://github.com/openshift/kubernetes/pull/86748)
* remove  TODO in test/e2e/framework/auth/helpers [#86738](https://github.com/openshift/kubernetes/pull/86738)
* Update to golang@1.13.5 [#86707](https://github.com/openshift/kubernetes/pull/86707)
* Add public documentation for kubelet/apis/config [#85431](https://github.com/openshift/kubernetes/pull/85431)
* remove TODO: Use return type string instead of []string and update func [#86653](https://github.com/openshift/kubernetes/pull/86653)
* kubetestgen: improve errors handling [#86874](https://github.com/openshift/kubernetes/pull/86874)
* Add VMSS and VMSSVM clients with backoff retry [#86740](https://github.com/openshift/kubernetes/pull/86740)
* fix fake remote CRI [#86724](https://github.com/openshift/kubernetes/pull/86724)
* Copy nodeaffinity predicate to its filter plugin [#86718](https://github.com/openshift/kubernetes/pull/86718)
* fix flakiness on e2e test TCP CLOSE_WAIT timeout [#86708](https://github.com/openshift/kubernetes/pull/86708)
* Kubelet: add a metric to observe time since PLEG last seen [#86251](https://github.com/openshift/kubernetes/pull/86251)
* replace grpc.WithDialer which is deprecated [#84345](https://github.com/openshift/kubernetes/pull/84345)
* Fix staticcheck failures of test/integration/client test/integration/disruption [#86781](https://github.com/openshift/kubernetes/pull/86781)
* e2e: move funs of framework/viperconfig to e2e [#86743](https://github.com/openshift/kubernetes/pull/86743)
* Require client / server protocols [#86646](https://github.com/openshift/kubernetes/pull/86646)
* Remove `rkt` from container runtime options [#86845](https://github.com/openshift/kubernetes/pull/86845)
* Add klueska as an approver in test/e2e_node/OWNERS [#86438](https://github.com/openshift/kubernetes/pull/86438)
* Add klueska as an approver in pkg/kubelet/cm/OWNERS [#86344](https://github.com/openshift/kubernetes/pull/86344)
* Fix local cluster do not work with non-intree external cloud provider issue [#86870](https://github.com/openshift/kubernetes/pull/86870)
* Remove ineffective calls in toUnstructured [#86512](https://github.com/openshift/kubernetes/pull/86512)
* Log mvcc revision compaction as warning [#84602](https://github.com/openshift/kubernetes/pull/84602)
* Break volumerestrictions Filter plugins dependency on predicates package [#86850](https://github.com/openshift/kubernetes/pull/86850)
* Perform dead storage removal linearly [#86514](https://github.com/openshift/kubernetes/pull/86514)
* Cleanup deprecated scheduler functions/files [#86822](https://github.com/openshift/kubernetes/pull/86822)
* Return when removePod failed [#85561](https://github.com/openshift/kubernetes/pull/85561)
* remove unused code and use framework [#86831](https://github.com/openshift/kubernetes/pull/86831)
* clarify apiserver bind-address flag usage [#86830](https://github.com/openshift/kubernetes/pull/86830)
* Break DS controller dependency on scheduler predicates and predicate errors [#86730](https://github.com/openshift/kubernetes/pull/86730)
* Break volumebinding Filter plugins dependency on predicates package [#86742](https://github.com/openshift/kubernetes/pull/86742)
* fix: correct the mentioned endpointslice manage label name. [#86829](https://github.com/openshift/kubernetes/pull/86829)
* publishing: Update to go@1.13.4 for kubernetes-1.16 [#86704](https://github.com/openshift/kubernetes/pull/86704)
* remove unused code test/e2e/framework/google_compute.go [#86796](https://github.com/openshift/kubernetes/pull/86796)
* kubeadm: use bind-address instead of address to configure the http probes [#86493](https://github.com/openshift/kubernetes/pull/86493)
* Cleanup SetPredicatesOrderingDuringTest due to deprecation of predicates [#86820](https://github.com/openshift/kubernetes/pull/86820)
* Cleanup unused parameter of NewGenericScheduler [#86819](https://github.com/openshift/kubernetes/pull/86819)
* prevent blocking wait in cert reloading [#86383](https://github.com/openshift/kubernetes/pull/86383)
* Kubemark - adding private cluster check [#86815](https://github.com/openshift/kubernetes/pull/86815)
* deprecate scheduling_algorithm_predicate_evaluation_seconds and sched… [#86584](https://github.com/openshift/kubernetes/pull/86584)
* remove unnecessary code in client-go test [#86660](https://github.com/openshift/kubernetes/pull/86660)
* update comments of some funs in scheduling_queue [#86785](https://github.com/openshift/kubernetes/pull/86785)
* Define algorithm providers in terms of plugins [#86673](https://github.com/openshift/kubernetes/pull/86673)
* kube-proxy: add some interface type assertions [#86665](https://github.com/openshift/kubernetes/pull/86665)
* Don't paginate in listwatch [#86790](https://github.com/openshift/kubernetes/pull/86790)
* if no cycle dependency , use framework in test/e2e_node/ [#86768](https://github.com/openshift/kubernetes/pull/86768)
* CHANGELOG-1.17: add note about service CIDR bug [#86759](https://github.com/openshift/kubernetes/pull/86759)
* Deprecate scheduling_duration_seconds Summary metric [#86586](https://github.com/openshift/kubernetes/pull/86586)
* Define workloads specs by YAML [#86160](https://github.com/openshift/kubernetes/pull/86160)
* Minor nit in error message about feature gate stage [#86757](https://github.com/openshift/kubernetes/pull/86757)
* Add instructions about how to bring up e2e test cluster [#85836](https://github.com/openshift/kubernetes/pull/85836)
* silence usage when required flag is not passed [#86693](https://github.com/openshift/kubernetes/pull/86693)
* kubeadm: tolerate whitespace when validating user CA PEMs [#86705](https://github.com/openshift/kubernetes/pull/86705)
* Fix staticcheck failures of test/integration/replicationcontroller [#86745](https://github.com/openshift/kubernetes/pull/86745)
* Scheduler handles pod annotation updates during scheduling more gracefully [#86230](https://github.com/openshift/kubernetes/pull/86230)
* Remove todos for verification of “allowed to post CSR” and "allowed to auto approve CSR" for bootstraptoken group [#86598](https://github.com/openshift/kubernetes/pull/86598)
* Postpone flag warning log to just before it be used [#86750](https://github.com/openshift/kubernetes/pull/86750)
* Move resource-based priority functions to their Score plugins [#86725](https://github.com/openshift/kubernetes/pull/86725)
* Metrics stability framework cleanup [#86723](https://github.com/openshift/kubernetes/pull/86723)
* Move WaitForFailure() to the test [#86732](https://github.com/openshift/kubernetes/pull/86732)
* Add backoff retries and client config for Azure cloud provider [#86719](https://github.com/openshift/kubernetes/pull/86719)
* e2e:remove func of framework/replicaset to e2e/upgrades/apps/replicas… [#86661](https://github.com/openshift/kubernetes/pull/86661)
* e2e:remove unused func in /test/e2e/framework/autoscaling/autoscaling… [#86657](https://github.com/openshift/kubernetes/pull/86657)
* Add apierrors as alias for k8s.io/apimachinery/pkg/api/errors [#85078](https://github.com/openshift/kubernetes/pull/85078)
* Output test description in TestPreemption [#86737](https://github.com/openshift/kubernetes/pull/86737)
* Remove Delete/CreateSyncInNamespace() [#86731](https://github.com/openshift/kubernetes/pull/86731)
* Fix staticcheck failures of test/integration/scale test/integration/serviceaccount test/integration/serving test/integration/volume [#86716](https://github.com/openshift/kubernetes/pull/86716)
* Add debugging message to know the pod status [#86733](https://github.com/openshift/kubernetes/pull/86733)
* Add error handling for Register() call [#86736](https://github.com/openshift/kubernetes/pull/86736)
* Fixing regex for kubernetes version in kubeadm [#86609](https://github.com/openshift/kubernetes/pull/86609)
* Count dropped requests except system previledged group requests. [#86521](https://github.com/openshift/kubernetes/pull/86521)
* Come out of loop when omitempty is true [#86618](https://github.com/openshift/kubernetes/pull/86618)
* Fix unit test to run in non-gce environments [#86713](https://github.com/openshift/kubernetes/pull/86713)
* refactor (pod log) container valiate [#86621](https://github.com/openshift/kubernetes/pull/86621)
* Fix staticcheck failures for test/images [#81895](https://github.com/openshift/kubernetes/pull/81895)
* Add alias of api/errors in endpointslice.go [#86655](https://github.com/openshift/kubernetes/pull/86655)
* Add ipv6 examples for network policy API [#86511](https://github.com/openshift/kubernetes/pull/86511)
* Fix ensureStaticIP if name for existed address was changed [#86452](https://github.com/openshift/kubernetes/pull/86452)
* Move podtopologyspread priority logic to its Score plugin [#86684](https://github.com/openshift/kubernetes/pull/86684)
* e2e: move funs of framework/gpu to e2e_node [#86062](https://github.com/openshift/kubernetes/pull/86062)
* validation.go: don't clamp the CIDR size calculations [#86553](https://github.com/openshift/kubernetes/pull/86553)
* alias kubeadmutil for k8s.io/kubernetes/cmd/kubeadm/app/util [#86688](https://github.com/openshift/kubernetes/pull/86688)
* remove unused code in test/e2e/apps/deployment [#86634](https://github.com/openshift/kubernetes/pull/86634)
* Fix a typo in interpodaffinity score plugin [#86681](https://github.com/openshift/kubernetes/pull/86681)
* Azure cloud provider should not retry on bad request [#86685](https://github.com/openshift/kubernetes/pull/86685)
* feat(scheduling): implement azure, cinder, ebs and gce as filter plugin [#86662](https://github.com/openshift/kubernetes/pull/86662)
* move funcs from test/e2e/framework/job to test/e2e/apps [#86640](https://github.com/openshift/kubernetes/pull/86640)
* Change log level to 3 when --random-fully is not supported [#86583](https://github.com/openshift/kubernetes/pull/86583)
* Cleanup testapi after it has been removed [#86650](https://github.com/openshift/kubernetes/pull/86650)
* Move CheckNodeUnschedulable predicate to its filter plugin [#86625](https://github.com/openshift/kubernetes/pull/86625)
* Move pod topology spread predicate logic to its filter plugin [#86659](https://github.com/openshift/kubernetes/pull/86659)
* Move ServiceAntiAffinityPriority to score plugin [#86638](https://github.com/openshift/kubernetes/pull/86638)
* feat(scheduling): move csi volume predicates to csi filter plugin [#86635](https://github.com/openshift/kubernetes/pull/86635)
* Optimize error messages when updating openapi spec [#86533](https://github.com/openshift/kubernetes/pull/86533)
* e2e: move funs of framework/pv to e2e/storage [#86283](https://github.com/openshift/kubernetes/pull/86283)
* move funcs in replicaset to autoscaling_utils [#86541](https://github.com/openshift/kubernetes/pull/86541)
* Fixing Potential Race Condition in EndpointSlice Controller. [#85703](https://github.com/openshift/kubernetes/pull/85703)
* Unify aliases for "k8s.io/apimachinery/pkg/api/errors" [#85123](https://github.com/openshift/kubernetes/pull/85123)
* move func EnableAndDisableInternalLB from test/e2e/framework/service … [#86639](https://github.com/openshift/kubernetes/pull/86639)
* Fix nil pointer dereference in the azure provider [#85975](https://github.com/openshift/kubernetes/pull/85975)
* fix: azure disk could not mounted on Standard_DC4s/DC2s instances [#86612](https://github.com/openshift/kubernetes/pull/86612)
* Use Deployment in sample-apiserver examples [#86152](https://github.com/openshift/kubernetes/pull/86152)
* Updating minor grammar error. [#86615](https://github.com/openshift/kubernetes/pull/86615)
* Move VolumeZone predicate to its Filter plugin [#86623](https://github.com/openshift/kubernetes/pull/86623)
* Deprecate scheduler predicate and priority factory registration and associated types [#86614](https://github.com/openshift/kubernetes/pull/86614)
* Remove unused function NewMetricExporter from e2e test [#86570](https://github.com/openshift/kubernetes/pull/86570)
* add extra group and usage check for bootstraptoken [#86573](https://github.com/openshift/kubernetes/pull/86573)
* Added scheduler algorithm provider registrey. [#86591](https://github.com/openshift/kubernetes/pull/86591)
* move NoDiskConflict predicate to its filter plugin [#86601](https://github.com/openshift/kubernetes/pull/86601)
* Move ResourceLimitsPriority to its Score plugin [#86580](https://github.com/openshift/kubernetes/pull/86580)
* move nodepreferavoidpods to score plugin [#86599](https://github.com/openshift/kubernetes/pull/86599)
* Return typed errors for Azure client interfaces [#86555](https://github.com/openshift/kubernetes/pull/86555)
* e2e: move funs of framework/deployment/fixtures.go to e2e/apps/deploy… [#86466](https://github.com/openshift/kubernetes/pull/86466)
* feat: implement node affinity priority as score plugin [#86595](https://github.com/openshift/kubernetes/pull/86595)
* Delete unused function from e2e test autoscaling_utils.go [#86568](https://github.com/openshift/kubernetes/pull/86568)
* Move RequestedToCapacityRatio to plugins/noderesources [#86589](https://github.com/openshift/kubernetes/pull/86589)
* Cleanup scheduler's in-tree plugins registry naming [#86593](https://github.com/openshift/kubernetes/pull/86593)
* Clean up kube-apiserver reference document [#86588](https://github.com/openshift/kubernetes/pull/86588)
* "Move Taint and toleration priority to its Score plugin" [#86585](https://github.com/openshift/kubernetes/pull/86585)
* fix: remove totalNumNodes from priority metadata [#86577](https://github.com/openshift/kubernetes/pull/86577)
* introduce checker for  the result of nodeInfo.Node() [#86542](https://github.com/openshift/kubernetes/pull/86542)
* On OpenRC ServiceIsActive should not report true if no such service exists [#86508](https://github.com/openshift/kubernetes/pull/86508)
* change print log for unity when during kubeadm init [#86567](https://github.com/openshift/kubernetes/pull/86567)
* fix kubectl run help image name [#86565](https://github.com/openshift/kubernetes/pull/86565)
* Move volumebinding predicate to its filter plugin [#86530](https://github.com/openshift/kubernetes/pull/86530)
* Fix staticcheck failures for pkg/proxy/... [#81886](https://github.com/openshift/kubernetes/pull/81886)
* Restore IPAllocator ipv4 range handling [#86534](https://github.com/openshift/kubernetes/pull/86534)
* Support AlwaysCheckAllPredicates in the scheduler framework. [#86496](https://github.com/openshift/kubernetes/pull/86496)
* feat: implement image locality as score plugin [#86548](https://github.com/openshift/kubernetes/pull/86548)
* update fluentd to 1.8.0 / fixed gemfile / fixed shellcheck [#86433](https://github.com/openshift/kubernetes/pull/86433)
* Change Azure global rate limit to per client [#86515](https://github.com/openshift/kubernetes/pull/86515)
* e2e: move funs of framework/statefulset to e2e/apps & e2e/upgrades [#86169](https://github.com/openshift/kubernetes/pull/86169)
* kubeadm: re-enable kubelet version check test in preflight [#86519](https://github.com/openshift/kubernetes/pull/86519)
* fix azure cloud provider bug when lb specified in other resource group [#86502](https://github.com/openshift/kubernetes/pull/86502)
* Bump k8s.io/utils version [#86346](https://github.com/openshift/kubernetes/pull/86346)
* Add unit tests for pkg azure/auth [#86470](https://github.com/openshift/kubernetes/pull/86470)
* swap over kube-apiserver manifest to use livez and readyz [#85868](https://github.com/openshift/kubernetes/pull/85868)
* Cleanup failedPredicateMap from generic_scheduler.go [#86498](https://github.com/openshift/kubernetes/pull/86498)
* Make e2e scale updates unconditional [#86321](https://github.com/openshift/kubernetes/pull/86321)
* Sample apiserver: Avoid etcd listening on DNS result for "localhost" [#86389](https://github.com/openshift/kubernetes/pull/86389)
* chore: port azure disk csi code to azure cloud provider [#86385](https://github.com/openshift/kubernetes/pull/86385)
* apiserver: add localhost to alternateDNS certificate field if BindAddress is "::" [#86490](https://github.com/openshift/kubernetes/pull/86490)
* hack/local-up-cluster: modify cloud provider launch to work with aws [#86473](https://github.com/openshift/kubernetes/pull/86473)
* move inter pod affinity predicate logic to its Filter plugin [#86459](https://github.com/openshift/kubernetes/pull/86459)
* Fix golint failure not contained in .golint_failures [#86416](https://github.com/openshift/kubernetes/pull/86416)
* Remove DefaultConvert functions [#86382](https://github.com/openshift/kubernetes/pull/86382)
* Remove alwaysCheckAllPredicates from NewGenericScheduler [#86369](https://github.com/openshift/kubernetes/pull/86369)
* kms: use negative cachesize value to disable caching [#86294](https://github.com/openshift/kubernetes/pull/86294)
* Bump Ginkgo to support building on riscv64 arch [#86013](https://github.com/openshift/kubernetes/pull/86013)
* Expect NodeUnpublish calls when NodePublish is called [#86397](https://github.com/openshift/kubernetes/pull/86397)
* Add a config option to azure cloud provider for the pre-configured loadbalancers [#86338](https://github.com/openshift/kubernetes/pull/86338)
* Update Windows subnet mask calculation for compatibility with future VNIC changes [#86453](https://github.com/openshift/kubernetes/pull/86453)
* Promote StartupProbe to beta for 1.18 [#83437](https://github.com/openshift/kubernetes/pull/83437)
* Revert "Merge pull request #86376 from xieyanker/kubemark_deployment" [#86464](https://github.com/openshift/kubernetes/pull/86464)
* Move NodeLabel priority logic to its Score and Filter plugin [#86446](https://github.com/openshift/kubernetes/pull/86446)
* InterPodAffinity Priority as Score plugin [#86399](https://github.com/openshift/kubernetes/pull/86399)
* fix incompatible AAD token [#86412](https://github.com/openshift/kubernetes/pull/86412)
* e2e: move funs of framework/job to e2e/upgrades/apps/job [#86109](https://github.com/openshift/kubernetes/pull/86109)
* Add support for GOBIN to generate-groups.sh. [#85302](https://github.com/openshift/kubernetes/pull/85302)
* Fix validation for metav1 fuzz targets. [#84480](https://github.com/openshift/kubernetes/pull/84480)
* Update etcd-version-monitor readme and yaml file. [#84146](https://github.com/openshift/kubernetes/pull/84146)
* change CounterVec to use Counter in the Kubelet's Pod Lifecycle Event… [#86167](https://github.com/openshift/kubernetes/pull/86167)
* Revert pull request #85879 "hollow-node use remote CRI" [#86425](https://github.com/openshift/kubernetes/pull/86425)
* rename _count to _total in a few metrics [#86415](https://github.com/openshift/kubernetes/pull/86415)
* improves watch and report e2e [#86354](https://github.com/openshift/kubernetes/pull/86354)
* Simplify volume zone checker codes [#84611](https://github.com/openshift/kubernetes/pull/84611)
* Isolate kubectl test-cmd plugin tests [#86411](https://github.com/openshift/kubernetes/pull/86411)
* kubectl apply refactor [#86361](https://github.com/openshift/kubernetes/pull/86361)
* test/e2e_node/:use framework.Equal() instead of using gomega.Expect(b… [#86156](https://github.com/openshift/kubernetes/pull/86156)
* Wait for resizing condition [#86396](https://github.com/openshift/kubernetes/pull/86396)
* Allocate map when out parameter points to nil map [#86395](https://github.com/openshift/kubernetes/pull/86395)
* remove personal kind.yaml that was added accidentally [#86392](https://github.com/openshift/kubernetes/pull/86392)
* Add debugging for delete grace period e2e flake [#86315](https://github.com/openshift/kubernetes/pull/86315)
* e2e: move funs of framework/metrics to e2e_node [#86119](https://github.com/openshift/kubernetes/pull/86119)
* change kubemark from ReplicationController to Deployment [#86376](https://github.com/openshift/kubernetes/pull/86376)
* Add test cases for a helper function in controller manager [#78380](https://github.com/openshift/kubernetes/pull/78380)
* networkPolicy ipv6 unit tests validation [#86298](https://github.com/openshift/kubernetes/pull/86298)
* Revert "promote e2e tests for taint-tolerations in predicates" [#86386](https://github.com/openshift/kubernetes/pull/86386)
* hollow-node use remote CRI [#85879](https://github.com/openshift/kubernetes/pull/85879)
* fix: azure data disk should use same key as os disk by default [#86351](https://github.com/openshift/kubernetes/pull/86351)
* Move added info and status stack trace to the end of line. [#86234](https://github.com/openshift/kubernetes/pull/86234)
* Allow show hidden metrics in kube-proxy [#85279](https://github.com/openshift/kubernetes/pull/85279)
* Deprecate PredicateMetadata [#86289](https://github.com/openshift/kubernetes/pull/86289)
* Remove stale comment re making apiserver common names dynamic [#85754](https://github.com/openshift/kubernetes/pull/85754)
* Remove cluster-monitoring [#85512](https://github.com/openshift/kubernetes/pull/85512)
* Split cronjob tests, so they don't interfere [#86348](https://github.com/openshift/kubernetes/pull/86348)
* Set core_pattern to an absolute path. [#86329](https://github.com/openshift/kubernetes/pull/86329)
* Use private master IP in GCE kubemark tests [#86316](https://github.com/openshift/kubernetes/pull/86316)
* Cloud node controller: Only call once into cloud provider [#85735](https://github.com/openshift/kubernetes/pull/85735)
* Fix uncertain mounts [#82492](https://github.com/openshift/kubernetes/pull/82492)
* Register nodeports and noderesources prefilters [#86284](https://github.com/openshift/kubernetes/pull/86284)
* auth: add metrics to token cache [#86265](https://github.com/openshift/kubernetes/pull/86265)
* support configuration of kube-proxy IPVS tcp,tcpfin,udp timeout [#85517](https://github.com/openshift/kubernetes/pull/85517)
* wardle example e2e [#84735](https://github.com/openshift/kubernetes/pull/84735)
* Update CPUManager stored state semantics [#84462](https://github.com/openshift/kubernetes/pull/84462)
* Refactor `kubectl proxy` command to have similar design pattern as other kubectl commands. [#82971](https://github.com/openshift/kubernetes/pull/82971)
* promote e2e tests for taint-tolerations in predicates [#83652](https://github.com/openshift/kubernetes/pull/83652)
* Be more agressive acquiring the iptables lock [#85771](https://github.com/openshift/kubernetes/pull/85771)
* fix static check in kubectl/pkg/cmd/annotate. [#86040](https://github.com/openshift/kubernetes/pull/86040)
* Fix golint issues in pkg/util/sysctl/testing [#85016](https://github.com/openshift/kubernetes/pull/85016)
* Declare constants in pods test as const [#84425](https://github.com/openshift/kubernetes/pull/84425)
* Fix up the sub-test style [#86319](https://github.com/openshift/kubernetes/pull/86319)
* Check FileInfo against nil during walk of container dir path [#86277](https://github.com/openshift/kubernetes/pull/86277)
* Make cloud provider caching TTL configurable [#86266](https://github.com/openshift/kubernetes/pull/86266)
* test/e2e/: use framework.Equal() replace gomega.Expect(...).To(gomega… [#86148](https://github.com/openshift/kubernetes/pull/86148)
* Adding new job completed event [#86142](https://github.com/openshift/kubernetes/pull/86142)
* fix misspelling in comment [#86303](https://github.com/openshift/kubernetes/pull/86303)
* Move service affinity predicate logic to its plugin. [#86264](https://github.com/openshift/kubernetes/pull/86264)
* Change example in can-i to apps instead of extensions [#86261](https://github.com/openshift/kubernetes/pull/86261)
* AWS: Don't report deletion of attached volume as warning [#86250](https://github.com/openshift/kubernetes/pull/86250)
* Upload containerd logs to stackdriver [#86221](https://github.com/openshift/kubernetes/pull/86221)
* test/e2e: move funcs from test/e2e/pod to other folders [#86199](https://github.com/openshift/kubernetes/pull/86199)
* e2e: remove unused method in e2e/framework/log [#86113](https://github.com/openshift/kubernetes/pull/86113)
* move test/e2e/framework/lifecycle/ test/framework/cloud/gcp [#86098](https://github.com/openshift/kubernetes/pull/86098)
* e2e: move funs of framework/deviceplugin to e2e_node [#86061](https://github.com/openshift/kubernetes/pull/86061)
* Ensuring EndpointSlices are not used for Windows kube-proxy implementations [#86016](https://github.com/openshift/kubernetes/pull/86016)
* Fix NetworkPolicy PolicyTypes validation [#85747](https://github.com/openshift/kubernetes/pull/85747)
* tests: Removes [LinuxOnly] tag from a few tests [#85453](https://github.com/openshift/kubernetes/pull/85453)
* fix staticcheck faulures in 'cmd' pkg [#81928](https://github.com/openshift/kubernetes/pull/81928)
* cri_stats_provider: do not consider exited containers when calculating cpu usage [#83504](https://github.com/openshift/kubernetes/pull/83504)
* Mark top flakes [#86327](https://github.com/openshift/kubernetes/pull/86327)
* Add UID precondition to kubelet pod status patch updates [#86320](https://github.com/openshift/kubernetes/pull/86320)
* Mark GCEPD test flaky [#86313](https://github.com/openshift/kubernetes/pull/86313)
* Disable excessive logging in scheduler plugins [#86309](https://github.com/openshift/kubernetes/pull/86309)
* Fix internal loadbalancer configuration failure when subnet name too long [#86276](https://github.com/openshift/kubernetes/pull/86276)
* Remove old-style conversions registration [#85891](https://github.com/openshift/kubernetes/pull/85891)
* Fix staticcheck failures of test/e2e/manifest [#86238](https://github.com/openshift/kubernetes/pull/86238)
* PodFitsResources Predicate Metadata as prefilter [#86249](https://github.com/openshift/kubernetes/pull/86249)
* e2e: support long CSI driver names [#86000](https://github.com/openshift/kubernetes/pull/86000)
* Update go version in go.mod to 1.13 [#86269](https://github.com/openshift/kubernetes/pull/86269)
* doc: remove Draven from test package reviewers [#86240](https://github.com/openshift/kubernetes/pull/86240)
* Move EvenPodsSpread metadata computation logic as a PreFilter Plugin [#86205](https://github.com/openshift/kubernetes/pull/86205)
* Wrap host ports metadata in a prefilter [#86224](https://github.com/openshift/kubernetes/pull/86224)
* Promote SataQiu to an approver of test and test/e2e/framework [#86190](https://github.com/openshift/kubernetes/pull/86190)
* Remove ability to re-enable serving deprecated APIs [#85903](https://github.com/openshift/kubernetes/pull/85903)
* Fix build break - Hyperkube image needs kubelet/kubectl [#86258](https://github.com/openshift/kubernetes/pull/86258)
* Remove use of testapi package [#86256](https://github.com/openshift/kubernetes/pull/86256)
* Compatibility tests for default provider and mandatory filters [#86254](https://github.com/openshift/kubernetes/pull/86254)
* move funcs from test/e2e/framework to test/e2e/apps [#86193](https://github.com/openshift/kubernetes/pull/86193)
* Guarantee ClearState will fully clear a collector [#86213](https://github.com/openshift/kubernetes/pull/86213)
* make test framework easier to re-use [#86177](https://github.com/openshift/kubernetes/pull/86177)
* add getting Storage Quantity to ResourceList [#83302](https://github.com/openshift/kubernetes/pull/83302)
* kubeadm: add basic validation around kubelet.conf parsing [#86216](https://github.com/openshift/kubernetes/pull/86216)
* Remove priority execution path from prioritizeNodes in generic_scheduler [#86129](https://github.com/openshift/kubernetes/pull/86129)
* Remove daemonset controller's dependency on scheduler metadata [#86229](https://github.com/openshift/kubernetes/pull/86229)
* Clean up conformance tar test data [#86232](https://github.com/openshift/kubernetes/pull/86232)
* Deprecate scheduler's FailureReason [#86228](https://github.com/openshift/kubernetes/pull/86228)
* Wrap InterPodAffinity predicate metadata as a Prefilter [#86175](https://github.com/openshift/kubernetes/pull/86175)
* Do not swallow timeout in manageReplicas [#86140](https://github.com/openshift/kubernetes/pull/86140)
* Remove unnecessary nil check in if statement in nodelease controller [#85789](https://github.com/openshift/kubernetes/pull/85789)
* Fix a bug in port-forward: named port not working with service [#85511](https://github.com/openshift/kubernetes/pull/85511)
* kubectl change podSecurityPolicy group [#85406](https://github.com/openshift/kubernetes/pull/85406)
* drop KUBE_TIMEOUT in test/cmd/kubeadm.sh [#85718](https://github.com/openshift/kubernetes/pull/85718)
* e2e: move funs of framework/service to e2e/network [#86159](https://github.com/openshift/kubernetes/pull/86159)
* Add an interface to return scheduler framework instance [#86218](https://github.com/openshift/kubernetes/pull/86218)
* Extend authorization benchmark [#86117](https://github.com/openshift/kubernetes/pull/86117)
* Ensuring kube-proxy does not mutate shared EndpointSlices [#86092](https://github.com/openshift/kubernetes/pull/86092)
* code-generator: expose pluralExceptions via flag [#86212](https://github.com/openshift/kubernetes/pull/86212)
* kubeadm: persist dns replica count on upgrade [#85837](https://github.com/openshift/kubernetes/pull/85837)
* add @hwdef as a reviewer of hack [#86204](https://github.com/openshift/kubernetes/pull/86204)
* kubectl oidc auth-provider: include cluster address in cache key [#86020](https://github.com/openshift/kubernetes/pull/86020)
* fix log format string [#86178](https://github.com/openshift/kubernetes/pull/86178)
* Sync the status of static Pods [#84951](https://github.com/openshift/kubernetes/pull/84951)
* Make sure critical pod in the preemption test is always cleaned up. [#86180](https://github.com/openshift/kubernetes/pull/86180)
* Increase Burst limit for discovery client [#86168](https://github.com/openshift/kubernetes/pull/86168)
* Fix func VerifyLatencyWithinThreshold() to local [#85522](https://github.com/openshift/kubernetes/pull/85522)
* e2e: move funs of framework/kubelet to e2e/scheduling [#86110](https://github.com/openshift/kubernetes/pull/86110)
* e2e: remove unused method in e2e/framework/autoscaling. [#86059](https://github.com/openshift/kubernetes/pull/86059)
* Reduce visibility of prometheus libs [#85287](https://github.com/openshift/kubernetes/pull/85287)
* test/e2e/storage : use framework.Equal() replace gomega.Expect(...).To(gomega.BeTrue(),...) [#86147](https://github.com/openshift/kubernetes/pull/86147)
* Added alejandrox1 to test/approvers [#86136](https://github.com/openshift/kubernetes/pull/86136)
* Fix staticcheck failures of e2e/storage/utils e2e/storage/vsphere [#86112](https://github.com/openshift/kubernetes/pull/86112)
* Clalify how to contribute to kubectl book [#83525](https://github.com/openshift/kubernetes/pull/83525)
* e2e storage: improve instructions for external driver testing [#86077](https://github.com/openshift/kubernetes/pull/86077)
* client-go: update INSTALL.md to include semver tags [#85995](https://github.com/openshift/kubernetes/pull/85995)
* Eliminate running paths of Predicates in scheduler [#86133](https://github.com/openshift/kubernetes/pull/86133)
* Revert "Add an option to specify kubelet flags for heapster node." [#86154](https://github.com/openshift/kubernetes/pull/86154)
* Configurable HorizontalPodAutoscaler [#74525](https://github.com/openshift/kubernetes/pull/74525)
* Rename Azure driver to Azure Disk driver in e2e test [#85621](https://github.com/openshift/kubernetes/pull/85621)
* Make error message and service event message more clear [#86078](https://github.com/openshift/kubernetes/pull/86078)
* Fix staticcheck failures of e2e/storage/drivers e2e/storage/testsuites [#86057](https://github.com/openshift/kubernetes/pull/86057)
* change FakeWatcher.Stopped to be a private field [#86120](https://github.com/openshift/kubernetes/pull/86120)
* update RBAC rules in e2e aggregator test [#86084](https://github.com/openshift/kubernetes/pull/86084)
* Dump namespace if the namespace could not be cleaned up [#85542](https://github.com/openshift/kubernetes/pull/85542)
* SafeSysctlWhitelist: add net.ipv4.ping_group_range (allow ping without CAP_NET_RAW) [#85463](https://github.com/openshift/kubernetes/pull/85463)
* [pkg/auth/nodeidentifier/default_test.go]: fix testing error message typo [#85452](https://github.com/openshift/kubernetes/pull/85452)
* share authentication lookups [#85242](https://github.com/openshift/kubernetes/pull/85242)
* invoke getTypedVersion() instead of direct runtime call [#84191](https://github.com/openshift/kubernetes/pull/84191)
* Added e2e test to verify zone support across datacenters [#75583](https://github.com/openshift/kubernetes/pull/75583)
* Revert "staging/publishing: temporarily disable publishing tags" [#86099](https://github.com/openshift/kubernetes/pull/86099)
* Add kind/flake issue template [#86096](https://github.com/openshift/kubernetes/pull/86096)
* optimize some log config [#85838](https://github.com/openshift/kubernetes/pull/85838)
* Remove the derprecated API RawRegister from stability framework [#85446](https://github.com/openshift/kubernetes/pull/85446)
* Report api request throttling at v=3 [#80649](https://github.com/openshift/kubernetes/pull/80649)
* Fix inter-pod affinity scheduler benchmarks [#86028](https://github.com/openshift/kubernetes/pull/86028)
* Update API compatibility data for v1.17.0 [#86105](https://github.com/openshift/kubernetes/pull/86105)
* fix potential memory leak issue in processing watch request [#85410](https://github.com/openshift/kubernetes/pull/85410)
* Verify kubelet & kube-proxy recovery on Windows nodes [#84886](https://github.com/openshift/kubernetes/pull/84886)
* Update v1.17.0 CHANGELOG to match final draft [#86090](https://github.com/openshift/kubernetes/pull/86090)
* Optimize required pod affinity (2) [#86046](https://github.com/openshift/kubernetes/pull/86046)
* updated fluentd to 1.7.4 + plugin updates and switch to debian buster [#86039](https://github.com/openshift/kubernetes/pull/86039)
* Sets HostNetwork to False for tests which do not require it [#78731](https://github.com/openshift/kubernetes/pull/78731)
* Increasing LoadBalancerPollTimeout from 15 to 22 minutes [#86085](https://github.com/openshift/kubernetes/pull/86085)
* e2e: move funs of framework/deployment to e2e/apps [#86050](https://github.com/openshift/kubernetes/pull/86050)
* Return all scheduler predicate failures instead of the first one [#86022](https://github.com/openshift/kubernetes/pull/86022)
* Include cloud/gcp tests in e2e.test [#85962](https://github.com/openshift/kubernetes/pull/85962)
* kubectl/drain: add option skip-wait-for-delete-timeout [#85577](https://github.com/openshift/kubernetes/pull/85577)
* Turn off kubelet deprecated metrics [#83841](https://github.com/openshift/kubernetes/pull/83841)
* refactor: move unwanted console output out of versiongetter API [#85032](https://github.com/openshift/kubernetes/pull/85032)
* slim down some lister expansions [#85899](https://github.com/openshift/kubernetes/pull/85899)
* Kubelet cert TTL via GaugeFunc [#85874](https://github.com/openshift/kubernetes/pull/85874)
* Add serathius to metrics-server OWNERS file [#86065](https://github.com/openshift/kubernetes/pull/86065)
* Bind metadata-agent containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes [#83363](https://github.com/openshift/kubernetes/pull/83363)
* Bind metrics-server containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes [#83362](https://github.com/openshift/kubernetes/pull/83362)
* Fix IPv6 addresses lost issue in pure ipv6 vsphere environment [#86001](https://github.com/openshift/kubernetes/pull/86001)
* Update checks.go [#85857](https://github.com/openshift/kubernetes/pull/85857)
* Fix broken SELinux detection [#86027](https://github.com/openshift/kubernetes/pull/86027)
* Fix staticcheck failures of test/e2e/storage [#85906](https://github.com/openshift/kubernetes/pull/85906)
* Provider/Azure: Add cache for VMSS. [#85885](https://github.com/openshift/kubernetes/pull/85885)
* Refactor and optimize preferred (anti) pod affinity [#85959](https://github.com/openshift/kubernetes/pull/85959)
* fix staticcheck in test/integration/apiserver [#85676](https://github.com/openshift/kubernetes/pull/85676)
* ping kmsplugin gentely when in good state [#85828](https://github.com/openshift/kubernetes/pull/85828)
* kubelet: guarantee at most only one cinfo per containerID [#86009](https://github.com/openshift/kubernetes/pull/86009)
* fix staticcheck in test/e2e/network/ [#85893](https://github.com/openshift/kubernetes/pull/85893)
* kubelet: rename HTTPGetter interface [#85001](https://github.com/openshift/kubernetes/pull/85001)
* move KubectlCmd out of utils into its own package [#84613](https://github.com/openshift/kubernetes/pull/84613)
* modify dockerID to containerID [#85170](https://github.com/openshift/kubernetes/pull/85170)
* Two bugfixes in installTunneler [#76741](https://github.com/openshift/kubernetes/pull/76741)
* staging/publishing: temporarily disable publishing tags [#86008](https://github.com/openshift/kubernetes/pull/86008)
* correct  invalid  urls [#85709](https://github.com/openshift/kubernetes/pull/85709)
* Add current chairs to component base approvers [#85971](https://github.com/openshift/kubernetes/pull/85971)
* fix staticcheck in   test/e2e/cloud/ [#85751](https://github.com/openshift/kubernetes/pull/85751)
* Update go-winio module version from 0.4.11 to 0.4.14 [#85739](https://github.com/openshift/kubernetes/pull/85739)
* Add an option to specify kubelet flags for heapster node. [#85797](https://github.com/openshift/kubernetes/pull/85797)
* kubeadm: Throw an error if the currentContext does not exists [#85953](https://github.com/openshift/kubernetes/pull/85953)
* Provide a mechanism to enable hidden metrics in stable collector [#85845](https://github.com/openshift/kubernetes/pull/85845)
* Fix LoadBalancer rule checking so that no unexpected LoadBalancer updates are made [#85990](https://github.com/openshift/kubernetes/pull/85990)
* Disable broken pd e2e test [#85973](https://github.com/openshift/kubernetes/pull/85973)
* Replace the hostname in the fluentd config file even if the file exists [#85827](https://github.com/openshift/kubernetes/pull/85827)
* e2e storage: public API for testsuites, support CSIInlineVolume type for generic resource [#85540](https://github.com/openshift/kubernetes/pull/85540)
* Increase test coverage for ComponentConfigs and add tests for kubeproxyconfiguration [#84688](https://github.com/openshift/kubernetes/pull/84688)
* When running `kubectl drain` in dry-run, list warnings and pods that would be deleted. [#82660](https://github.com/openshift/kubernetes/pull/82660)
* Fix bug in apiserver service cidr split [#85968](https://github.com/openshift/kubernetes/pull/85968)
* Deflake kubectl custom printing test [#85967](https://github.com/openshift/kubernetes/pull/85967)
* Revert "kubeadm: don't check if image exists before pulling" [#85965](https://github.com/openshift/kubernetes/pull/85965)
* Convert ExpectEqual(err, nil) to ExpectNoError(err) [#85934](https://github.com/openshift/kubernetes/pull/85934)
* Rename PodDisruptionsAllowed to DisruptionsAllowed in type PodDisruptionBudgetStatus [#85863](https://github.com/openshift/kubernetes/pull/85863)
* increase LRU cache size 8x for authorization webhook [#85957](https://github.com/openshift/kubernetes/pull/85957)
* Refactor kubelet component config lenient path decoding [#85945](https://github.com/openshift/kubernetes/pull/85945)
* fix staticcheck in pkg/printers [#85790](https://github.com/openshift/kubernetes/pull/85790)
* test/e2e/auth: Fix static check failures [#85780](https://github.com/openshift/kubernetes/pull/85780)
* Remove nodes slice in loop of takeByTopology [#85706](https://github.com/openshift/kubernetes/pull/85706)
* Typecheck support for verifying providerless build [#85457](https://github.com/openshift/kubernetes/pull/85457)
* Run all csi-hostpath containers as privileged [#85947](https://github.com/openshift/kubernetes/pull/85947)
* Perf benchmarks for preferred (anti)pod affinity [#85872](https://github.com/openshift/kubernetes/pull/85872)
* fix staticcheck errors in legacy-cloud-providers/azure [#82315](https://github.com/openshift/kubernetes/pull/82315)
* Nominate liu-cong to be sig-scheduling reviewer. [#85756](https://github.com/openshift/kubernetes/pull/85756)
* Fix waiting for logexporter log fetching processes [#85913](https://github.com/openshift/kubernetes/pull/85913)
* fix golint check in test/e2e_node/runner/remote [#85890](https://github.com/openshift/kubernetes/pull/85890)
* fix: typo Snapshoting to Snapshotting [#85935](https://github.com/openshift/kubernetes/pull/85935)
* Revert "Use ExpectEqual test/e2e_node" [#85931](https://github.com/openshift/kubernetes/pull/85931)
* Update GCE Windows startup scripts for plugin-based authentication [#85466](https://github.com/openshift/kubernetes/pull/85466)
* remove max pods from e2e test [#85916](https://github.com/openshift/kubernetes/pull/85916)
* scheduler benchmark: allow to override bench prefix [#85915](https://github.com/openshift/kubernetes/pull/85915)
* Deleted extra 'phase' in command example [#85907](https://github.com/openshift/kubernetes/pull/85907)
* Clean up cluster-service label from calico-policy-controller [#85290](https://github.com/openshift/kubernetes/pull/85290)
* Utilize Context with timeout in gce_instances.go [#85875](https://github.com/openshift/kubernetes/pull/85875)
* kubectl/drain: add disable-eviction option [#85571](https://github.com/openshift/kubernetes/pull/85571)
* Create kubemark cluster as private [#85905](https://github.com/openshift/kubernetes/pull/85905)
* handle registry merge error [#85590](https://github.com/openshift/kubernetes/pull/85590)
* pkg/master: Fix static check failures [#85634](https://github.com/openshift/kubernetes/pull/85634)
* Enhance error message for failed controlplane init [#85843](https://github.com/openshift/kubernetes/pull/85843)
* cmd/kube-controller-manager: fix staticcheck warning [#84624](https://github.com/openshift/kubernetes/pull/84624)
* Make APIService.spec.service optional in the openapi v2 spec [#85728](https://github.com/openshift/kubernetes/pull/85728)
* Fix staticcheck failures of test/e2e/upgrade [#85853](https://github.com/openshift/kubernetes/pull/85853)
* Use ExpectEqual test/e2e_node [#85787](https://github.com/openshift/kubernetes/pull/85787)
* use ExpectEqual of framework in test/e2e/storage [#85770](https://github.com/openshift/kubernetes/pull/85770)
* add PredicateFunc for configmap [#85844](https://github.com/openshift/kubernetes/pull/85844)
* Fix golint issues in test/e2e/lifecycle/ [#85744](https://github.com/openshift/kubernetes/pull/85744)
* Partially avoid LabelSelectorAsSelector overhead in anti-pod affinity calculation [#85862](https://github.com/openshift/kubernetes/pull/85862)
* add pod info when failing to add pod to unschedulableQ [#85470](https://github.com/openshift/kubernetes/pull/85470)
* update CRI(LinuxContainerResources ) to support hugepages [#83614](https://github.com/openshift/kubernetes/pull/83614)
* kubeadm: Group centric component configs [#85639](https://github.com/openshift/kubernetes/pull/85639)
* Utilize Context with timeout in GCE operations [#85581](https://github.com/openshift/kubernetes/pull/85581)
* Fix golint issues in pkg/apis/batch/validation [#85071](https://github.com/openshift/kubernetes/pull/85071)
* fix: replace TrimLeft with TrimPrefix and TrimRight with TrimSuffix [#85800](https://github.com/openshift/kubernetes/pull/85800)
* Fix golint issues in pkg/registry/.../storage [#85046](https://github.com/openshift/kubernetes/pull/85046)
* Prune internal clients from CRD apiserver [#84005](https://github.com/openshift/kubernetes/pull/84005)
* Switch addon resizer to 1.8.7 [#85793](https://github.com/openshift/kubernetes/pull/85793)
* Included FSType in CSI volumes [#85293](https://github.com/openshift/kubernetes/pull/85293)
* Revert "Fix shellcheck failure in log-dump/log-dump.sh" [#85858](https://github.com/openshift/kubernetes/pull/85858)
* Deflake delete grace period e2e [#85849](https://github.com/openshift/kubernetes/pull/85849)
* Deflake pod readiness e2e [#85847](https://github.com/openshift/kubernetes/pull/85847)
* Cleanup metav1 conversions [#85729](https://github.com/openshift/kubernetes/pull/85729)
* Replace nginx image with agnhost in sig-node pods tests [#84788](https://github.com/openshift/kubernetes/pull/84788)
* Start and stop the scheduling queue consistently [#85820](https://github.com/openshift/kubernetes/pull/85820)
* kubelet: add certificate rotation error metric [#84614](https://github.com/openshift/kubernetes/pull/84614)
* Fix golint failures of test/e2e_node/remote [#85749](https://github.com/openshift/kubernetes/pull/85749)
* Use expect equal test e2e upgrades [#85781](https://github.com/openshift/kubernetes/pull/85781)
* add err handling in gce/gci [#82720](https://github.com/openshift/kubernetes/pull/82720)
* fix unit test in hostport_manager_test.go [#83289](https://github.com/openshift/kubernetes/pull/83289)
* Use GCS bucket for crictl on windows. [#85825](https://github.com/openshift/kubernetes/pull/85825)
* Kubeadm: upgrade apply & upgrade node always overwrite Kubeadm-env file [#85412](https://github.com/openshift/kubernetes/pull/85412)
* Add API for clear descriptor status [#85714](https://github.com/openshift/kubernetes/pull/85714)
* Refactor custom collector unit test [#85680](https://github.com/openshift/kubernetes/pull/85680)
* Reduce unnecessary Set in updateAllocatedDevices [#85688](https://github.com/openshift/kubernetes/pull/85688)
* upgrade api-version to fix azure file AuthorizationFailure [#85475](https://github.com/openshift/kubernetes/pull/85475)
* Add defaulting and validation logic for EncryptionConfiguration type. [#85363](https://github.com/openshift/kubernetes/pull/85363)
* Ensure webhook backend requests are not artificially rate-limited [#85810](https://github.com/openshift/kubernetes/pull/85810)
* kubeadm: default etcd address based on the IP family [#85745](https://github.com/openshift/kubernetes/pull/85745)
* kubeadm: set cluster name on the controller manager [#85817](https://github.com/openshift/kubernetes/pull/85817)
* Update number of scheduler perf benchmarks to be more representative [#85808](https://github.com/openshift/kubernetes/pull/85808)
* kubectl/drain: Add context support [#85574](https://github.com/openshift/kubernetes/pull/85574)
* Add containerd windows support on GCE for test. [#85396](https://github.com/openshift/kubernetes/pull/85396)
* Log error when writing checkpoint fails [#85760](https://github.com/openshift/kubernetes/pull/85760)
* Enable mutation detection in test-cmd/test-integration/test-e2e-node, improve memory impact [#85350](https://github.com/openshift/kubernetes/pull/85350)
* Fix iscsi refcounter in the case of no Block iscsi volumes [#85705](https://github.com/openshift/kubernetes/pull/85705)
* Setting kubemark node labels [#85717](https://github.com/openshift/kubernetes/pull/85717)
* fix broken link:https://kubernetes.io/docs/concepts/overview/object-m… [#85629](https://github.com/openshift/kubernetes/pull/85629)
* Fix AWS eventual consistency of AttachDisk [#85675](https://github.com/openshift/kubernetes/pull/85675)
* Make elasticsearch discovery supports IPv6 [#85543](https://github.com/openshift/kubernetes/pull/85543)
* kubeadm: Improve resiliency in CreateOrMutateConfigMap [#85763](https://github.com/openshift/kubernetes/pull/85763)
* Bump Cluster Autoscaler version to 1.17.0 [#85610](https://github.com/openshift/kubernetes/pull/85610)
* Optimize UpdateNodeInfoSnapshot [#85738](https://github.com/openshift/kubernetes/pull/85738)
* kubeadm: simplify discover/token and add detailed unit tests [#85468](https://github.com/openshift/kubernetes/pull/85468)
* Add kind/deprecation to pull request template [#85713](https://github.com/openshift/kubernetes/pull/85713)
* fix: padded base64 encoded docker auth field [#85687](https://github.com/openshift/kubernetes/pull/85687)
* Switch TableGenerator/TableConvertor interfaces to metav1 [#85644](https://github.com/openshift/kubernetes/pull/85644)
* Fix device plugin generator script [#85473](https://github.com/openshift/kubernetes/pull/85473)
* fix the defect in the shell scripts [#85274](https://github.com/openshift/kubernetes/pull/85274)
* apiextensions: filter required nullable to workaround kubectl validation [#85722](https://github.com/openshift/kubernetes/pull/85722)
* Fxing kubemark node labels [#85716](https://github.com/openshift/kubernetes/pull/85716)
* use ExpectEqual of framework in test/e2e/autoscaling/ [#85711](https://github.com/openshift/kubernetes/pull/85711)
* use framework  refactor code in test/e2e/common [#85671](https://github.com/openshift/kubernetes/pull/85671)
* e2e: use log functions of core framework on pv, testfiles and volume sub packages [#85666](https://github.com/openshift/kubernetes/pull/85666)
* use framework in  test/e2e/cloud/ [#85664](https://github.com/openshift/kubernetes/pull/85664)
* Variables collide with imported package name [#84921](https://github.com/openshift/kubernetes/pull/84921)
* catch the exception raised in Remove-HnsPolicyList [#85704](https://github.com/openshift/kubernetes/pull/85704)
* Fix shellcheck failure in cluster/log-dump/log-dump.sh [#83604](https://github.com/openshift/kubernetes/pull/83604)
* Adding KubeProxyConfigMap19 checking in test-e2e-kubeadm [#85628](https://github.com/openshift/kubernetes/pull/85628)
* Update cadvisor dependency to v0.35.0 [#85698](https://github.com/openshift/kubernetes/pull/85698)
* remove redundant definition of the defaultProvider in the scheduler [#85695](https://github.com/openshift/kubernetes/pull/85695)
* stop spamming the log on failures with full objects [#85700](https://github.com/openshift/kubernetes/pull/85700)
* Fix benchmark artifact parsing. [#85513](https://github.com/openshift/kubernetes/pull/85513)
* Export scheduler.Snapshot function [#85689](https://github.com/openshift/kubernetes/pull/85689)
* Fix PVC condition check for offline resizing [#85297](https://github.com/openshift/kubernetes/pull/85297)
* fix kubelet failed to start on setting hugetlb limits [#84854](https://github.com/openshift/kubernetes/pull/84854)
* golint fixes for /pkg/util/iptables/testing [#85562](https://github.com/openshift/kubernetes/pull/85562)
* correct invalid urls in CHANGELOG file [#85684](https://github.com/openshift/kubernetes/pull/85684)
* don't error if set-resources patch is empty [#85490](https://github.com/openshift/kubernetes/pull/85490)
* Print nominated pods when dumping scheduler cached NodeInfo [#85526](https://github.com/openshift/kubernetes/pull/85526)
* add test coverage with kubectl get components [#85595](https://github.com/openshift/kubernetes/pull/85595)
* Bumped the number of times a node tries to lookup itself [#81880](https://github.com/openshift/kubernetes/pull/81880)
* Fix golint failures for pkg/registry/apps/replicaset [#85172](https://github.com/openshift/kubernetes/pull/85172)
* use ExpectEqual in /e2e/auth [#85323](https://github.com/openshift/kubernetes/pull/85323)
* Fix golint issues in test/e2e_node [#84901](https://github.com/openshift/kubernetes/pull/84901)
* Track collectors by fqName [#85640](https://github.com/openshift/kubernetes/pull/85640)
* decrease test pv controller resync period to try to deflake api update conflicts [#85620](https://github.com/openshift/kubernetes/pull/85620)
* fix staticcheck  failures in test/e2e/windows [#83714](https://github.com/openshift/kubernetes/pull/83714)
* Enable update-bazel.sh outside of GOPATH [#85657](https://github.com/openshift/kubernetes/pull/85657)
* add applyto tests for controller configs [#85654](https://github.com/openshift/kubernetes/pull/85654)
* Fix resource version precondition on pod delete [#85516](https://github.com/openshift/kubernetes/pull/85516)
* fix kube-apiserver poststarthook additions to avoid duplicating them [#85651](https://github.com/openshift/kubernetes/pull/85651)
* Enable snapshottable e2e test for csi pd driver [#85371](https://github.com/openshift/kubernetes/pull/85371)
* test/e2e/apimachinery: fix staticcheck warning [#85469](https://github.com/openshift/kubernetes/pull/85469)
* Switch storage version to use v1.CSINode in 1.18 [#84477](https://github.com/openshift/kubernetes/pull/84477)
* modify the error url of autoscaler [#85626](https://github.com/openshift/kubernetes/pull/85626)
* kubeadm: add a upgrade health check that deploys a Job [#81319](https://github.com/openshift/kubernetes/pull/81319)
* Fix attach/detach metric failure [#85619](https://github.com/openshift/kubernetes/pull/85619)
* kubeadm: don't check if image exists before pulling [#85603](https://github.com/openshift/kubernetes/pull/85603)
* Remove e2e/framework/profile_gatherer.go [#85304](https://github.com/openshift/kubernetes/pull/85304)
* Migrate Kubemark to distroless [#84728](https://github.com/openshift/kubernetes/pull/84728)
* check service status value returned by EnsureLoadBalancer [#85521](https://github.com/openshift/kubernetes/pull/85521)
* fix broken link : https://github.com/kubernetes/community/blob/master/contributors/devel/container-runtime-interface.md [#85534](https://github.com/openshift/kubernetes/pull/85534)
* Add RainbowMango to owner list of metrics stability framework. [#85622](https://github.com/openshift/kubernetes/pull/85622)
* Provided a mechanism to re-register hidden metrics [#85444](https://github.com/openshift/kubernetes/pull/85444)
* Add support for new dual-stack flags for kubernetes-controller-manager in kubeadm [#85609](https://github.com/openshift/kubernetes/pull/85609)
* ignore image err when docker image has been cleaned up [#84401](https://github.com/openshift/kubernetes/pull/84401)
* Fix HTTP readiness/liveness probes using NodePort [#85611](https://github.com/openshift/kubernetes/pull/85611)
* Fix golint issues in pkg/kubelet/events/event.go [#85451](https://github.com/openshift/kubernetes/pull/85451)
* fix 1-12 number urls [#85496](https://github.com/openshift/kubernetes/pull/85496)
* fix broken link :https://github.com/kubernetes/community/blob/master/… [#85533](https://github.com/openshift/kubernetes/pull/85533)
* fix etcd version check error on ARM [#85601](https://github.com/openshift/kubernetes/pull/85601)
* Revert "remove redundant `source` in shell" [#85582](https://github.com/openshift/kubernetes/pull/85582)
* Cleanup conversions in kubectl [#85556](https://github.com/openshift/kubernetes/pull/85556)
* Set default value for TEST_CLUSTER_LOG_LEVEL and KUBE_GCE_INSTANCE_PREFIX [#85508](https://github.com/openshift/kubernetes/pull/85508)
* Support Azure Stack dynamic environments [#85432](https://github.com/openshift/kubernetes/pull/85432)
* e2e: move LogFailedContainers out of e2e test framework util.go [#85200](https://github.com/openshift/kubernetes/pull/85200)
* stop-kubemark.sh add namespace [#85537](https://github.com/openshift/kubernetes/pull/85537)
* Deep copying EndpointSlices in reconciler before modifying them [#85368](https://github.com/openshift/kubernetes/pull/85368)
* Fix GKE upgrade test. [#85555](https://github.com/openshift/kubernetes/pull/85555)
* Revert "kube-proxy: check KUBE-MARK-DROP" [#85527](https://github.com/openshift/kubernetes/pull/85527)
* Set node cidr mask size ipv4/ipv6 config [#85500](https://github.com/openshift/kubernetes/pull/85500)
* Output port as number in error message [#85558](https://github.com/openshift/kubernetes/pull/85558)
* fix kubemark output error [#85502](https://github.com/openshift/kubernetes/pull/85502)
* rest: retry on connection refused and apiserver shutdown [#75368](https://github.com/openshift/kubernetes/pull/75368)
* Add cofyc as owner of pkg/volume/local [#85493](https://github.com/openshift/kubernetes/pull/85493)
* Fix lint in /pkg/util/iptables [#85440](https://github.com/openshift/kubernetes/pull/85440)
* Plumb test state through to fake volume host creation for error handling [#85426](https://github.com/openshift/kubernetes/pull/85426)
* use context to check client closed instead of http.CloseNotifier in processing watch request [#85408](https://github.com/openshift/kubernetes/pull/85408)
* added yliaog to OWNERS [#85404](https://github.com/openshift/kubernetes/pull/85404)
* Test writing configurations with numeric names [#85401](https://github.com/openshift/kubernetes/pull/85401)
* proxier: improve node topology event handler logic [#85345](https://github.com/openshift/kubernetes/pull/85345)
* remove redundant `source` in shell [#85340](https://github.com/openshift/kubernetes/pull/85340)
* kubeadm: reset raises warnings if it cannot delete folders [#85265](https://github.com/openshift/kubernetes/pull/85265)
* Move suites.go to e2e package [#85235](https://github.com/openshift/kubernetes/pull/85235)
* Wait for kubelet & kube-proxy to be ready on Windows node within 10s [#85228](https://github.com/openshift/kubernetes/pull/85228)
* add ut for scheduler framework [#85188](https://github.com/openshift/kubernetes/pull/85188)
* [k8s.io/sample-controller/controller.go]: fixup minor typo [#84327](https://github.com/openshift/kubernetes/pull/84327)
* Initialize FeatureGate map for KubeProxy config. #1929 [#85524](https://github.com/openshift/kubernetes/pull/85524)
* Remove metric be hidden log temporarily [#85402](https://github.com/openshift/kubernetes/pull/85402)
* Fill in default node cidr mask size when dual stack is not enabled [#85494](https://github.com/openshift/kubernetes/pull/85494)
* apiextensions: fix items+type logic in API due to broken go-openapi validation [#85223](https://github.com/openshift/kubernetes/pull/85223)
* Fix providerless [#85456](https://github.com/openshift/kubernetes/pull/85456)
* Plumb authorization webhook version from CLI to config [#85441](https://github.com/openshift/kubernetes/pull/85441)
* Flip CSIMigrationAWS flag to be beta and off by default [#85237](https://github.com/openshift/kubernetes/pull/85237)
* Addon Manager: Fix parsing KUBECTL_EXTRA_PRUNE_WHITELIST [#85344](https://github.com/openshift/kubernetes/pull/85344)
* Turn off apiserver deprecated metrics [#83837](https://github.com/openshift/kubernetes/pull/83837)
* apiextensions: freeze and document supported v1.16 OpenAPI formats [#85381](https://github.com/openshift/kubernetes/pull/85381)
* cache.Expiring: fix stress test: it's not doing anything [#85386](https://github.com/openshift/kubernetes/pull/85386)
* update images to Debian buster, detect iptables mode [#82966](https://github.com/openshift/kubernetes/pull/82966)
* e2e: promote CRD defaulting test to conformance test [#84861](https://github.com/openshift/kubernetes/pull/84861)
* Add IPv6 support to kubenet hostport [#80854](https://github.com/openshift/kubernetes/pull/80854)
* Add CSI migration logic for EBS storageclass zone/zones/topology [#85251](https://github.com/openshift/kubernetes/pull/85251)
* fix terrible bug and inline GC for expiring cache [#85370](https://github.com/openshift/kubernetes/pull/85370)
* apiextensions: validate list-type and map-type "atomic" [#84722](https://github.com/openshift/kubernetes/pull/84722)
* Skip Node printing in kubectl column test [#85377](https://github.com/openshift/kubernetes/pull/85377)
* Add single-item list/watch to delegated authentication reader role [#85375](https://github.com/openshift/kubernetes/pull/85375)
* [kube controller manager] add comments for compatibility [#85367](https://github.com/openshift/kubernetes/pull/85367)
* kubeadm: Use only stdout when calling kubelet for its version [#85351](https://github.com/openshift/kubernetes/pull/85351)
* Disabling EndpointSlice feature gate by default [#85365](https://github.com/openshift/kubernetes/pull/85365)
* Flip CSIMigration and CSIMigrationGCE to Beta [#85231](https://github.com/openshift/kubernetes/pull/85231)
* Fix label mutation in endpoints controller [#85361](https://github.com/openshift/kubernetes/pull/85361)
* kubeadm: use the right name for the no validator function [#85348](https://github.com/openshift/kubernetes/pull/85348)
* Reverting managed-by-setup annotation [#85359](https://github.com/openshift/kubernetes/pull/85359)
* service topology: remove redundant API validation for local external traffic policy [#85346](https://github.com/openshift/kubernetes/pull/85346)
* Increase cache size for EndpointSlices. [#85339](https://github.com/openshift/kubernetes/pull/85339)
* Remove pkg/util/mount (moved out of tree) [#85305](https://github.com/openshift/kubernetes/pull/85305)
* Check error return from closing connection [#85284](https://github.com/openshift/kubernetes/pull/85284)
* Turn off scheduler metrics that have been deprecated [#83838](https://github.com/openshift/kubernetes/pull/83838)
* pager.go: don't set ResourceVersion on subsequent List calls [#85272](https://github.com/openshift/kubernetes/pull/85272)
* Update inline volume translated PV Name to be unique per disk so that staging paths are unique [#84754](https://github.com/openshift/kubernetes/pull/84754)
* Service Topology implementation [#72046](https://github.com/openshift/kubernetes/pull/72046)
* Revert "Enable snapshot e2e test for csi pd driver" [#85322](https://github.com/openshift/kubernetes/pull/85322)
* Brushed up fairqueuing package [#85259](https://github.com/openshift/kubernetes/pull/85259)
* Move RegisterNodeFlags() to e2e_node test [#84875](https://github.com/openshift/kubernetes/pull/84875)
* Allow multiple node cidr masks in kube-controller-manager [#79993](https://github.com/openshift/kubernetes/pull/79993)
* Dualstack downward api [#83123](https://github.com/openshift/kubernetes/pull/83123)
* modify error output in cniNetworkPlugin [#83896](https://github.com/openshift/kubernetes/pull/83896)
* update github.com/vishvananda/netlink to v1.0.0 [#83576](https://github.com/openshift/kubernetes/pull/83576)
* CSI Migration phase 2: disable probing of in-tree plugins [#83098](https://github.com/openshift/kubernetes/pull/83098)
* Separate staging/publish and unstaging/unpublish logics for block [#74026](https://github.com/openshift/kubernetes/pull/74026)
* Avoid constructing table printer on every componentstatus request [#85309](https://github.com/openshift/kubernetes/pull/85309)
* Use CSINodes v1 API in scheduler [#85298](https://github.com/openshift/kubernetes/pull/85298)
* Renamed FeatureGate RequestManagement to APIPriorityAndFairness [#85260](https://github.com/openshift/kubernetes/pull/85260)
* Move test inputs for EncryptionConfiguration tests into testdata. [#85249](https://github.com/openshift/kubernetes/pull/85249)
* Enable snapshot e2e test for csi pd driver [#85169](https://github.com/openshift/kubernetes/pull/85169)
* let standalone npd use kubelet credentials [#85014](https://github.com/openshift/kubernetes/pull/85014)
* Refactor mapper/unmapper of block volume [#84747](https://github.com/openshift/kubernetes/pull/84747)
* Add an expiring cache for the caching token authenticator [#84424](https://github.com/openshift/kubernetes/pull/84424)
* Improve iptables logging [#84295](https://github.com/openshift/kubernetes/pull/84295)
* Update dependency vmware/govmomi to v0.20.3 [#83505](https://github.com/openshift/kubernetes/pull/83505)
* Ensuring EndpointSlice controller does not start when feature gate or API are disabled [#85301](https://github.com/openshift/kubernetes/pull/85301)
* Fix --resource-version handling in kubectl [#85285](https://github.com/openshift/kubernetes/pull/85285)
* Correct the checking of robinIndex [#85257](https://github.com/openshift/kubernetes/pull/85257)
* Specify a port range to ILB firewall rule create. [#85252](https://github.com/openshift/kubernetes/pull/85252)
* Continue removing file in ManagerImpl#removeContents [#85147](https://github.com/openshift/kubernetes/pull/85147)
* Enable Priority and Fairness to discriminate on target namespace [#84900](https://github.com/openshift/kubernetes/pull/84900)
* Add support for --runtime-config=api/beta=false, --feature-gates=AllBeta=false [#84304](https://github.com/openshift/kubernetes/pull/84304)
* tests: Adds large requests tests [#83680](https://github.com/openshift/kubernetes/pull/83680)
* pkg/util/iptables: add Dan Winship to approvers [#83491](https://github.com/openshift/kubernetes/pull/83491)
* tests: Fixes tests for Windows (containerd, RunAsUserName) [#83058](https://github.com/openshift/kubernetes/pull/83058)
* Updating kube-proxy to support new EndpointSlice address types [#85246](https://github.com/openshift/kubernetes/pull/85246)
* Add TODOs for removing invalid e2e dependencies [#85230](https://github.com/openshift/kubernetes/pull/85230)
* Add comments to explain golang.org replace directives [#85175](https://github.com/openshift/kubernetes/pull/85175)
* pkg/kubeapiserver: fix staticcheck warning [#85117](https://github.com/openshift/kubernetes/pull/85117)
* Move json,yaml,jsonpath printers to correct locations [#84752](https://github.com/openshift/kubernetes/pull/84752)
* pkg/client: fix staticcheck warning [#84674](https://github.com/openshift/kubernetes/pull/84674)
* Refactor block volume's descriptor lock logic [#84660](https://github.com/openshift/kubernetes/pull/84660)
* refactor apparmor utils in e2e [#84439](https://github.com/openshift/kubernetes/pull/84439)
* Drop job from scale description [#84227](https://github.com/openshift/kubernetes/pull/84227)
* Initial Implementation for kubetestgen for Conformance. [#83964](https://github.com/openshift/kubernetes/pull/83964)
* Rename PluginConfigArgs to AlgorithmConfigArgs [#85294](https://github.com/openshift/kubernetes/pull/85294)
* add table convertor to componentstatus [#85174](https://github.com/openshift/kubernetes/pull/85174)
* Strip nullable for Server-side apply [#85162](https://github.com/openshift/kubernetes/pull/85162)
* Fix a CM panic when ipam tries to lock an out of range pre existing cidr [#84732](https://github.com/openshift/kubernetes/pull/84732)
* Move pod bindVolumes behind RunPermitPlugins [#84859](https://github.com/openshift/kubernetes/pull/84859)
* Add unit test to catch scheduler's node order evaluation regressions [#84335](https://github.com/openshift/kubernetes/pull/84335)
* Tests/agnhost guestbook replacement [#84046](https://github.com/openshift/kubernetes/pull/84046)
* kubeadm: add retry to etcd calls [#85201](https://github.com/openshift/kubernetes/pull/85201)
* add DeleteOptions conversion [#85077](https://github.com/openshift/kubernetes/pull/85077)
* Include *intstr.IntOrString in API compatibility test fixtures [#85258](https://github.com/openshift/kubernetes/pull/85258)
* Azure : filter disks with ToBeDetached flag [#84958](https://github.com/openshift/kubernetes/pull/84958)
* azure: remove disk locks per vm during attach/detach [#85115](https://github.com/openshift/kubernetes/pull/85115)
* Fix missing resource version when updating the scale subresource of custom resource [#80572](https://github.com/openshift/kubernetes/pull/80572)
* bump CSI version to 1.2.0 [#84832](https://github.com/openshift/kubernetes/pull/84832)
* Adds Windows build information as a label on the node [#84472](https://github.com/openshift/kubernetes/pull/84472)
* Turn off proxy metrics that have been deprecated [#83839](https://github.com/openshift/kubernetes/pull/83839)
* Convert existing PVs to use volume topology in VolumeBinderPredicate [#83394](https://github.com/openshift/kubernetes/pull/83394)
* Check for terminated reason appropriate for containerD and dockershim [#82878](https://github.com/openshift/kubernetes/pull/82878)
* Additional mount comments [#82031](https://github.com/openshift/kubernetes/pull/82031)
* Update structured-merge-diff to latest version [#85227](https://github.com/openshift/kubernetes/pull/85227)
* Added fair queuing for server requests [#85192](https://github.com/openshift/kubernetes/pull/85192)
* Move functions from e2e/framework/util.go Part-4 [#85149](https://github.com/openshift/kubernetes/pull/85149)
* modify istio url:https://istio.io/news/2018/announcing-0.8/ [#85129](https://github.com/openshift/kubernetes/pull/85129)
* Add translation logic for EBS storage class fstype parameter [#85010](https://github.com/openshift/kubernetes/pull/85010)
* Update bucket for scheduler framework latency histograms. [#85236](https://github.com/openshift/kubernetes/pull/85236)
* guard kubeadm dependencies on k8s.io/kubernetes [#85229](https://github.com/openshift/kubernetes/pull/85229)
* Wait for terminating pods to be deleted [#85226](https://github.com/openshift/kubernetes/pull/85226)
* Retire mount.Exec for k8s.io/utils/exec [#85153](https://github.com/openshift/kubernetes/pull/85153)
* Promote service load balancer finalizer to GA [#85023](https://github.com/openshift/kubernetes/pull/85023)
* Refactored PriorityLevelConfiguration [#84771](https://github.com/openshift/kubernetes/pull/84771)
* Promoting EndpointSlices to beta [#84390](https://github.com/openshift/kubernetes/pull/84390)
* Windows: Fixes termination-file mounting support for containerd [#83057](https://github.com/openshift/kubernetes/pull/83057)
* Revert #76586, restructure LICENSES file generation [#85220](https://github.com/openshift/kubernetes/pull/85220)
* Increase cache size for leases [#85219](https://github.com/openshift/kubernetes/pull/85219)
* fixed golint errors in pkg/apis/extensions register.go and types.go [#85217](https://github.com/openshift/kubernetes/pull/85217)
* Add Reset() API to stability framework [#85202](https://github.com/openshift/kubernetes/pull/85202)
* fix wrong link [#85194](https://github.com/openshift/kubernetes/pull/85194)
* report cache misses in cached token authenticator benchmark [#85152](https://github.com/openshift/kubernetes/pull/85152)
* dynamic reload cluster authentication info for aggregated API servers [#85004](https://github.com/openshift/kubernetes/pull/85004)
* Use log functions of core framework on e2e/storage/utils [#85180](https://github.com/openshift/kubernetes/pull/85180)
* fix vmss dirty cache issue [#85158](https://github.com/openshift/kubernetes/pull/85158)
* Store topology spread constraints in metadata with labels.Selector [#85157](https://github.com/openshift/kubernetes/pull/85157)
* Remove nested retries [#85156](https://github.com/openshift/kubernetes/pull/85156)
* scheduler: make algorithm source an option [#85151](https://github.com/openshift/kubernetes/pull/85151)
* Promote apiserver.config.k8s.io/v1, kind=WebhookAdmissionConfiguration [#85138](https://github.com/openshift/kubernetes/pull/85138)
* Bumps CoreDNS to 1.6.5 and updates manifest for kube-up [#85109](https://github.com/openshift/kubernetes/pull/85109)
* Bump CoreDNS version to 1.6.5 and update manifest [#85108](https://github.com/openshift/kubernetes/pull/85108)
* Promote apiserver.config.k8s.io/v1, kind=ResourceQuotaConfiguration [#85099](https://github.com/openshift/kubernetes/pull/85099)
* Promote apiserver.config.k8s.io/v1, kind=AdmissionConfiguration [#85098](https://github.com/openshift/kubernetes/pull/85098)
* Remove unused func and struct from pod.go [#84892](https://github.com/openshift/kubernetes/pull/84892)
* Allow show hidden metrics in kube-apiserver [#84292](https://github.com/openshift/kubernetes/pull/84292)
* Add startupProbe result handling to kuberuntime [#84279](https://github.com/openshift/kubernetes/pull/84279)
* Adding e2e tests covering EndpointSlice and Endpoints Controllers [#84208](https://github.com/openshift/kubernetes/pull/84208)
* feat: graduate ResourceQuotaScopeSelectors to GA - part2 [#82690](https://github.com/openshift/kubernetes/pull/82690)
* Pass InformerFactory/SharedLister instead of individual informers/listers in scheduler config logic [#85150](https://github.com/openshift/kubernetes/pull/85150)
* kubeadm: Amend the hyperkube deprecation change [#85137](https://github.com/openshift/kubernetes/pull/85137)
* Remove unused function from e2e framework rest.go [#85119](https://github.com/openshift/kubernetes/pull/85119)
* kubeadm: alpha certs command should read in-cluster config [#85091](https://github.com/openshift/kubernetes/pull/85091)
* Reorder stackdriver setup in windows startup script [#85084](https://github.com/openshift/kubernetes/pull/85084)
* pkg/credentialprovider: fix staticcheck warning [#85075](https://github.com/openshift/kubernetes/pull/85075)
* Windep [#85018](https://github.com/openshift/kubernetes/pull/85018)
* Ensure that Node lease has OwnerReference set [#84998](https://github.com/openshift/kubernetes/pull/84998)
* Remove resource constraints [#84975](https://github.com/openshift/kubernetes/pull/84975)
* Splitting IP address type into IPv4 and IPv6 for EndpointSlices [#84971](https://github.com/openshift/kubernetes/pull/84971)
* update to version 7.3.2 [#84934](https://github.com/openshift/kubernetes/pull/84934)
* Skip GetPodNetworkStatus when CNI not yet initialized [#84649](https://github.com/openshift/kubernetes/pull/84649)
* Promote PodProcessNamespaceSharing feature to GA [#84356](https://github.com/openshift/kubernetes/pull/84356)
* Fix incorrect message on describe netpol [#84194](https://github.com/openshift/kubernetes/pull/84194)
* kubeadm: enable kubelet client certificate rotation on primary CP nodes [#84118](https://github.com/openshift/kubernetes/pull/84118)
* add RequiresExactMatch for label.Selector [#85048](https://github.com/openshift/kubernetes/pull/85048)
* Hide metrics that have been deprecated [#83836](https://github.com/openshift/kubernetes/pull/83836)
* Clarify startupProbe e2e tests [#84291](https://github.com/openshift/kubernetes/pull/84291)
* vsphere: check if volume exists before create [#84211](https://github.com/openshift/kubernetes/pull/84211)
* Fix #76093, restructure LICENSES file generation [#76586](https://github.com/openshift/kubernetes/pull/76586)
* test/e2e: Reduce need to use local kubectl [#84042](https://github.com/openshift/kubernetes/pull/84042)
* Relax namespace restriction for critical pods [#76310](https://github.com/openshift/kubernetes/pull/76310)
* kubeadm: component configs versioned [#79223](https://github.com/openshift/kubernetes/pull/79223)
* Add scheduler plugin execution duration metric. [#84522](https://github.com/openshift/kubernetes/pull/84522)
* Updated NewSnapshot interface to accept a NodeInfoMap [#85139](https://github.com/openshift/kubernetes/pull/85139)
* Quick steps for generating hyperkube image [#85120](https://github.com/openshift/kubernetes/pull/85120)
* Merging selectors used for spreading into one [#85106](https://github.com/openshift/kubernetes/pull/85106)
* Removed unused method from e2e test framework [#85100](https://github.com/openshift/kubernetes/pull/85100)
* Handle error return from allocatePodResources [#85047](https://github.com/openshift/kubernetes/pull/85047)
* proxy/ipvs: only get local addresses once per sync [#84924](https://github.com/openshift/kubernetes/pull/84924)
* Moving WindowsRunAsUserName to beta [#84882](https://github.com/openshift/kubernetes/pull/84882)
* remove system validators package from kubeadm and use k8s.io/system-validators [#84718](https://github.com/openshift/kubernetes/pull/84718)
* Fix startup probe test by checking updated values [#84179](https://github.com/openshift/kubernetes/pull/84179)
* Promote volume limits to GA [#83568](https://github.com/openshift/kubernetes/pull/83568)
* Check that endpoint has subset before accessing first subset [#84862](https://github.com/openshift/kubernetes/pull/84862)
* e2e: Fix error where pods not logged [#84837](https://github.com/openshift/kubernetes/pull/84837)
* remove global variable dependency from admission plugins [#84813](https://github.com/openshift/kubernetes/pull/84813)
* Eliminate couple unnecessary conversions [#85135](https://github.com/openshift/kubernetes/pull/85135)
* client-go/tools: Docs: Clarify what's "old" core/v1 and what's "new" events/v1beta1 [#85134](https://github.com/openshift/kubernetes/pull/85134)
* Change Configurator.Create to Return a Scheduler [#85049](https://github.com/openshift/kubernetes/pull/85049)
* - Delete backing string set from a threadSafeMap index when the string set length reaches 0. [#84970](https://github.com/openshift/kubernetes/pull/84970)
* cmd:fix staticcheck warning [#84672](https://github.com/openshift/kubernetes/pull/84672)
* Fix golint issues in pkg/registry/core/service/storage [#85059](https://github.com/openshift/kubernetes/pull/85059)
* publishing: bump go versions in rules [#85088](https://github.com/openshift/kubernetes/pull/85088)
* Remove unnecessary judgment [#84957](https://github.com/openshift/kubernetes/pull/84957)
* switch delegated authnz to v1 APIs [#84768](https://github.com/openshift/kubernetes/pull/84768)
* Remove plugin watching of deprecated directory and CSI v0 support in accordance with deprecation policy [#84533](https://github.com/openshift/kubernetes/pull/84533)
* adjust token cache benchmarks to get more accurate behavior [#84423](https://github.com/openshift/kubernetes/pull/84423)
* Adding new label to indicate what is managing an EndpointSlice [#83965](https://github.com/openshift/kubernetes/pull/83965)
* Fix a racing issue in client-go UpdateTransportConfig [#80284](https://github.com/openshift/kubernetes/pull/80284)
* fix wrong typo stoageMap to storageMap [#82078](https://github.com/openshift/kubernetes/pull/82078)
* Fix storage e2e clean up [#83653](https://github.com/openshift/kubernetes/pull/83653)
* Enable VolumeSnapshotDataSource Feature Gate and update e2e tests for VolumeSnapshot CRD v1beta1 [#80058](https://github.com/openshift/kubernetes/pull/80058)
* Add appProtocol to EndpointSlice.Port [#83815](https://github.com/openshift/kubernetes/pull/83815)
* Plumb configured acceptContentType to client config [#85095](https://github.com/openshift/kubernetes/pull/85095)
* kubeadm: alpha certs should skip missing files [#85092](https://github.com/openshift/kubernetes/pull/85092)
* Add MetadataProducerFactory for predicates [#85012](https://github.com/openshift/kubernetes/pull/85012)
* added nodeSelector: beta.kubernetes.io/os: linux [#84826](https://github.com/openshift/kubernetes/pull/84826)
* Print progress updates to stdout and publish to URL [#84524](https://github.com/openshift/kubernetes/pull/84524)
* Fix a typo in pkg/controller [#85067](https://github.com/openshift/kubernetes/pull/85067)
* kubeadm: remove the deprecated "--cri-socket" flag for "upgrade apply" [#85044](https://github.com/openshift/kubernetes/pull/85044)
* fix kubectl diff panic [#85035](https://github.com/openshift/kubernetes/pull/85035)
* scheduler: improve some comments and validation messages [#84639](https://github.com/openshift/kubernetes/pull/84639)
* Remove leftover factory directory [#84996](https://github.com/openshift/kubernetes/pull/84996)
* kubeadm: Deprecate hyperkube use [#85094](https://github.com/openshift/kubernetes/pull/85094)
* close scheduler kube-apiserver [#85090](https://github.com/openshift/kubernetes/pull/85090)
* Fix RS expectations for recreate case [#82572](https://github.com/openshift/kubernetes/pull/82572)
* Fixed error check in graceful shutdown test [#84796](https://github.com/openshift/kubernetes/pull/84796)
* Support specifying a custom subnet for ILB ip in GCE [#82257](https://github.com/openshift/kubernetes/pull/82257)
* Fix watch negotiation when using a non-default mime type in the client [#84692](https://github.com/openshift/kubernetes/pull/84692)
* Stop register to prom registry [#84135](https://github.com/openshift/kubernetes/pull/84135)
* migrate kubelet custom metrics to stability framework part 2 [#84987](https://github.com/openshift/kubernetes/pull/84987)
* migrate kubelet custom metrics to stability framework part 1 [#84907](https://github.com/openshift/kubernetes/pull/84907)
* Refactor kubelet ut with metrics testutil [#83664](https://github.com/openshift/kubernetes/pull/83664)
* Fix golint errors in pkg/apis/apps [#84243](https://github.com/openshift/kubernetes/pull/84243)
* Removes pkg/registry/core/secret/storage from golint failures [#83914](https://github.com/openshift/kubernetes/pull/83914)
* kubeadm: use the secure ports for kube-scheduler and kcm health checks [#85043](https://github.com/openshift/kubernetes/pull/85043)
* clean up PriorityFunction [#84948](https://github.com/openshift/kubernetes/pull/84948)
* kubeadm: always use a short timeout for clientset creation [#84648](https://github.com/openshift/kubernetes/pull/84648)
* Mirror owner [#84485](https://github.com/openshift/kubernetes/pull/84485)
* Move password retrieval to openstack_test.go [#84992](https://github.com/openshift/kubernetes/pull/84992)
* Fix golint issues in pkg/apis/policy [#85042](https://github.com/openshift/kubernetes/pull/85042)
* Fix golint issues in pkg/apis/authorization [#85037](https://github.com/openshift/kubernetes/pull/85037)
* Move functions from e2e/framework/util.go Part-3 [#85008](https://github.com/openshift/kubernetes/pull/85008)
* Remove potential Goroutine leak in kubeadm wait.go [#85017](https://github.com/openshift/kubernetes/pull/85017)
* Enable verify-import-aliases check in CI [#85009](https://github.com/openshift/kubernetes/pull/85009)
* Set default percentageOfNodesToScore in kube-scheduler back to "adaptive" [#85030](https://github.com/openshift/kubernetes/pull/85030)
* kubeadm: fix skipped etcd upgrade on secondary CP nodes [#85024](https://github.com/openshift/kubernetes/pull/85024)
* feat(scheduler): convert InterPodAffinity to score plugin [#84973](https://github.com/openshift/kubernetes/pull/84973)
* pkg/apis: fix staticcheck warning [#84673](https://github.com/openshift/kubernetes/pull/84673)
* fix race condition when delete azure disk right after that attach azure disk [#84917](https://github.com/openshift/kubernetes/pull/84917)
* Update test logic to simulate NodeReady/False and NodeReady/Unknown events correctly [#84883](https://github.com/openshift/kubernetes/pull/84883)
* fix apiserver to advertise IPv6 endpoints if bound to IPv6 [#84727](https://github.com/openshift/kubernetes/pull/84727)
* Feature: Flowcontrol rest storage implementation [#84708](https://github.com/openshift/kubernetes/pull/84708)
* Only put un-filtered pod in podDeleteList [#84562](https://github.com/openshift/kubernetes/pull/84562)
* Enable cAdvisor ProcessMetrics collecting [#84331](https://github.com/openshift/kubernetes/pull/84331)
* bump json-iterator dependency [#83840](https://github.com/openshift/kubernetes/pull/83840)
* Remove unused function from e2e framework util.go [#85002](https://github.com/openshift/kubernetes/pull/85002)
* Set TypeSetter in get print flags, like we do everywhere else [#84612](https://github.com/openshift/kubernetes/pull/84612)
* Let token create help with joining a master [#84591](https://github.com/openshift/kubernetes/pull/84591)
* Restrict visibility of prometheus packages [#84302](https://github.com/openshift/kubernetes/pull/84302)
* Fix typo in docstring of DeepEqual [#83385](https://github.com/openshift/kubernetes/pull/83385)
* Promote Node Instance Type Label to GA [#82049](https://github.com/openshift/kubernetes/pull/82049)
* Refactor mount fakes [#81423](https://github.com/openshift/kubernetes/pull/81423)
* Autogenerate autoscaling/v2beta2 conversions [#84989](https://github.com/openshift/kubernetes/pull/84989)
* Fix json patch limit check [#84963](https://github.com/openshift/kubernetes/pull/84963)
* Revert changes to WaitForStableCluster in scheduler e2e test [#84988](https://github.com/openshift/kubernetes/pull/84988)
* Fixing docker fake client - InspectExec [#84983](https://github.com/openshift/kubernetes/pull/84983)
* Bumping up log level for not updated node [#84933](https://github.com/openshift/kubernetes/pull/84933)
* Retain CoreDNS corefile when migration fails in kubeadm [#84523](https://github.com/openshift/kubernetes/pull/84523)
* Promote node lease to GA [#84351](https://github.com/openshift/kubernetes/pull/84351)
* Traverse resources before giving no name error [#84006](https://github.com/openshift/kubernetes/pull/84006)
* Do some Kubectl optimizations suggested by the golangci linter [#78676](https://github.com/openshift/kubernetes/pull/78676)
* Add envs for configuring hollow-node resource usage. [#84773](https://github.com/openshift/kubernetes/pull/84773)
* Add reclaim policy to kubectl get storage class result [#84299](https://github.com/openshift/kubernetes/pull/84299)
* Unmount subpath should only scan the first level of files/directories [#82698](https://github.com/openshift/kubernetes/pull/82698)
* Migrate custom collector for kube-scheduler [#84896](https://github.com/openshift/kubernetes/pull/84896)
* Fix the import aliase nodev1beta1 [#84942](https://github.com/openshift/kubernetes/pull/84942)
* Aggregate mulitple ServiceAffinity custom priorities to a single score plugin. [#84738](https://github.com/openshift/kubernetes/pull/84738)
* fix: return NodeScore in even pods spread priority [#84952](https://github.com/openshift/kubernetes/pull/84952)
* Pin kube-openapi vendor to 30be4d16710a [#84911](https://github.com/openshift/kubernetes/pull/84911)
* delete unused func in latencies.go [#84897](https://github.com/openshift/kubernetes/pull/84897)
* Promote Node Zone/Region Topology Labels to GA [#81431](https://github.com/openshift/kubernetes/pull/81431)
* Set go version in fluentd-elasticsearch addon [#84939](https://github.com/openshift/kubernetes/pull/84939)
* Move functions from e2e/framework/util.go Part-2 [#84868](https://github.com/openshift/kubernetes/pull/84868)
* allow a verifyoptionsfunc to indicate that no certpool is available [#84864](https://github.com/openshift/kubernetes/pull/84864)
* Use framework.ExpectEqual() in unit test [#84843](https://github.com/openshift/kubernetes/pull/84843)
* Refactor: use existing function to  simplify check for IPv6 in kubelet [#84711](https://github.com/openshift/kubernetes/pull/84711)
* Stop Watching when there is encoding error [#84693](https://github.com/openshift/kubernetes/pull/84693)
* Setting Hostname from Pods on EndpointSlice to match Endpoints behavior. [#84207](https://github.com/openshift/kubernetes/pull/84207)
* Limiting the scope of new kubectl get e2e tests to decrease flakiness [#84941](https://github.com/openshift/kubernetes/pull/84941)
* e2e_kubeadm: fix missing suite --test* flags [#84937](https://github.com/openshift/kubernetes/pull/84937)
* provide functionality for custom collector testing [#84919](https://github.com/openshift/kubernetes/pull/84919)
* panic in featuregate if a requested feature is unknown [#84865](https://github.com/openshift/kubernetes/pull/84865)
* refactor autoscaling utils in e2e [#84510](https://github.com/openshift/kubernetes/pull/84510)
* feat(scheduler): remove deprecated pattern in scheduler priority [#84905](https://github.com/openshift/kubernetes/pull/84905)
* Make test-cmd effective again [#84871](https://github.com/openshift/kubernetes/pull/84871)
* Update WaitForStableCluster to wait for only system pods to exist [#84806](https://github.com/openshift/kubernetes/pull/84806)
* e2e: move KubectlVersion out of e2e test framework util.go [#84630](https://github.com/openshift/kubernetes/pull/84630)
* remove reference to promhttp in kubelet [#84393](https://github.com/openshift/kubernetes/pull/84393)
* Remove unused skip functions [#84881](https://github.com/openshift/kubernetes/pull/84881)
* Eliminate couple default conversions [#84860](https://github.com/openshift/kubernetes/pull/84860)
* pkg/controller: fix staticcheck warning [#84763](https://github.com/openshift/kubernetes/pull/84763)
* Remove hack/e2e.go [#84696](https://github.com/openshift/kubernetes/pull/84696)
* Script based hyperkube to avoid dependencies [#84662](https://github.com/openshift/kubernetes/pull/84662)
* Migrate CheckServiceAffinity custom predicate to Filter plugin [#84635](https://github.com/openshift/kubernetes/pull/84635)
* Fixes crd per-version validation field path [#84560](https://github.com/openshift/kubernetes/pull/84560)
* Cancel context when RunPermitPlugins finishes [#84337](https://github.com/openshift/kubernetes/pull/84337)
* fix string trim func isBackendPoolOnSameLB in azure [#83953](https://github.com/openshift/kubernetes/pull/83953)
* fix account key getting logic in azure [#83952](https://github.com/openshift/kubernetes/pull/83952)
* Add deprecation warning for alpha.service-controller.kubernetes.io/exclude-balancer in v1.16 CHANGELOG [#83118](https://github.com/openshift/kubernetes/pull/83118)
* use controller to publish cluster authentication info [#82705](https://github.com/openshift/kubernetes/pull/82705)
* Avoid listing pods in NodeLifecycleController [#81167](https://github.com/openshift/kubernetes/pull/81167)
* kubeadm: fix an issue with the kube-proxy container env. variables [#84888](https://github.com/openshift/kubernetes/pull/84888)
* delete EqualPriority priority function, and make registering it a no op [#84873](https://github.com/openshift/kubernetes/pull/84873)
* Fix migration tranlation library for ebs [#84844](https://github.com/openshift/kubernetes/pull/84844)
* Remove Framework dependency on nodeinfo snapshot [#84834](https://github.com/openshift/kubernetes/pull/84834)
* Support comments in hack/.golint_failures [#84772](https://github.com/openshift/kubernetes/pull/84772)
* Fix golint issues in test/e2e_kubeadm [#84750](https://github.com/openshift/kubernetes/pull/84750)
* Fix golint issues in pkg/controller/volume/persistentvolume/options [#84748](https://github.com/openshift/kubernetes/pull/84748)
* feat: update interpod affinity priority with map reduce pattern [#84669](https://github.com/openshift/kubernetes/pull/84669)
* Rename ILB FirewallRules to be consistent with other resource names. [#84622](https://github.com/openshift/kubernetes/pull/84622)
* Updating EndpointSlices to use PublishNotReadyAddresses from Services. [#84573](https://github.com/openshift/kubernetes/pull/84573)
* Handle bazel >= 0.25 in stable metric static analysis [#84378](https://github.com/openshift/kubernetes/pull/84378)
* Building peer-finder Image on s390x [#84370](https://github.com/openshift/kubernetes/pull/84370)
* Change wardle.k8s.io to wardle.example.com [#81670](https://github.com/openshift/kubernetes/pull/81670)
* added --reserved-cpus kubelet command option [#83592](https://github.com/openshift/kubernetes/pull/83592)
* Dump GKE windows test logs via diagnostics tool [#83517](https://github.com/openshift/kubernetes/pull/83517)
* add service selector cache in endpoint and endpointSlice controller [#84280](https://github.com/openshift/kubernetes/pull/84280)
* Avoid going back in time in Reflector relist (revived) [#83520](https://github.com/openshift/kubernetes/pull/83520)
* update to use go1.13.4 [#82809](https://github.com/openshift/kubernetes/pull/82809)
* tests: Fixes minor agnhost error [#84825](https://github.com/openshift/kubernetes/pull/84825)
* Feature: Validates partial path for flow-schema's non-resource-url rules [#84706](https://github.com/openshift/kubernetes/pull/84706)
* Grab init containers logs in e2e tests [#84600](https://github.com/openshift/kubernetes/pull/84600)
* Fix bug in TopologyManager hint generation after kubelet restart [#84525](https://github.com/openshift/kubernetes/pull/84525)
* Revert "enabling fluentd on kubemark" [#84858](https://github.com/openshift/kubernetes/pull/84858)
* Correct spelling mistakes [#84836](https://github.com/openshift/kubernetes/pull/84836)
* Write scheduler configuration from config file [#84812](https://github.com/openshift/kubernetes/pull/84812)
* Modify the status code number to HTTP status semantics [#84807](https://github.com/openshift/kubernetes/pull/84807)
* Ensure health probes are created for local traffic policy UDP services on Azure [#84802](https://github.com/openshift/kubernetes/pull/84802)
* Add sig-scalability-approvers/reviewers as kubemark approvers/reviewers [#84774](https://github.com/openshift/kubernetes/pull/84774)
* Move out const strings in pkg/scheduler/api/well_known_labels.go [#84746](https://github.com/openshift/kubernetes/pull/84746)
* Promote CRD defaulting to GA [#84713](https://github.com/openshift/kubernetes/pull/84713)
* Fix typo in admission webhook [#84517](https://github.com/openshift/kubernetes/pull/84517)
* feat: convert selector spread priority to score plugin [#84845](https://github.com/openshift/kubernetes/pull/84845)
* e2e: Provide more helpful error output for failing test [#84838](https://github.com/openshift/kubernetes/pull/84838)
* Provide a mechanism for custom collectors to use the metrics stability framework [#83062](https://github.com/openshift/kubernetes/pull/83062)
* Enable profiling by default in the scheduler [#84835](https://github.com/openshift/kubernetes/pull/84835)
* Tracking nodes with pods with affinity [#84824](https://github.com/openshift/kubernetes/pull/84824)
* Aggregate mulitple NodePreference custom priorities to a single score plugin. [#84816](https://github.com/openshift/kubernetes/pull/84816)
* Validate scheduler configuration from config file [#84815](https://github.com/openshift/kubernetes/pull/84815)
* Make GCE PD Access Mode reflect readonly status when translating an inline read only volume [#84809](https://github.com/openshift/kubernetes/pull/84809)
* Fix panic on configmap and lease lock implementations [#84801](https://github.com/openshift/kubernetes/pull/84801)
* Use time.Until instead of t.Sub(time.Now()) [#84781](https://github.com/openshift/kubernetes/pull/84781)
* Mark rbac v1beta1 and v1alpha1 deprecated [#84758](https://github.com/openshift/kubernetes/pull/84758)
* Fix golint issues in pkg/kubeapiserver [#84723](https://github.com/openshift/kubernetes/pull/84723)
* Add benchmark test to compare EvenPodsSpreadPriority and SelectorSpreadingPriority [#84606](https://github.com/openshift/kubernetes/pull/84606)
* Move functions from e2e/framework/util.go [#84471](https://github.com/openshift/kubernetes/pull/84471)
* Fix typo in k8s.io/client-go/tools/cache/index.go [#84139](https://github.com/openshift/kubernetes/pull/84139)
* Adding e2e test to ensure kubectl get output is using custom columns when desired [#83748](https://github.com/openshift/kubernetes/pull/83748)
* Change Scheduler ComponentConfig fields to nilable pointers [#83619](https://github.com/openshift/kubernetes/pull/83619)
* very minor grammar fix in 10-kubeadm.conf ('generate' instead of 'generates') [#80136](https://github.com/openshift/kubernetes/pull/80136)
* change directory permissions from 0755 to 0750 [#76407](https://github.com/openshift/kubernetes/pull/76407)
* Revert "Make writing file via container in tests sync for real this time by enclosing multiple commands in quotes" [#84745](https://github.com/openshift/kubernetes/pull/84745)
* Isolate configuration of etcd related parameters into a separate function. [#84744](https://github.com/openshift/kubernetes/pull/84744)
* Update the event handler for deleting pods to reject the waiting pod [#84578](https://github.com/openshift/kubernetes/pull/84578)
* Move funcs of suites.go to e2e.go [#84499](https://github.com/openshift/kubernetes/pull/84499)
* Fix a double lock in test/utils [#84489](https://github.com/openshift/kubernetes/pull/84489)
* Adding initial EndpointSlice metrics. [#83257](https://github.com/openshift/kubernetes/pull/83257)
* Convert multiple node label predicates to be a single filter plugin [#84795](https://github.com/openshift/kubernetes/pull/84795)
* Build: Use a better filter on find [#84761](https://github.com/openshift/kubernetes/pull/84761)
* Set user agent for e2e consistently [#84725](https://github.com/openshift/kubernetes/pull/84725)
* remove github.com/pborman/uuid [#84770](https://github.com/openshift/kubernetes/pull/84770)
* Autogenerate missing conversions for corev1 options types [#84670](https://github.com/openshift/kubernetes/pull/84670)
* fix golint failures of kubernetes/pkg/security/apparmor [#84111](https://github.com/openshift/kubernetes/pull/84111)
* expose PredicateMetadataProducer in generic scheduler [#84785](https://github.com/openshift/kubernetes/pull/84785)
* Adding owners file for Endpoint controller utils [#84527](https://github.com/openshift/kubernetes/pull/84527)
* Fix a TaintBasedEviction integration test flake [#84766](https://github.com/openshift/kubernetes/pull/84766)
* Add lenient decoding path for v1alpha1 kube-scheduler config [#84129](https://github.com/openshift/kubernetes/pull/84129)
* add azure disk encryption(SSE+CMK) support [#84605](https://github.com/openshift/kubernetes/pull/84605)
* Move funcs of node_util to cloud/gcp. [#84412](https://github.com/openshift/kubernetes/pull/84412)
* Base Infrastructure for adding Merge() API to TopologyManager Policies [#84721](https://github.com/openshift/kubernetes/pull/84721)
* Use log functions of core framework on test/e2e/framework/kubelet [#84640](https://github.com/openshift/kubernetes/pull/84640)
* Switch debugger configuration fields to pointers [#84739](https://github.com/openshift/kubernetes/pull/84739)
* remove cfssl dependencies [#84677](https://github.com/openshift/kubernetes/pull/84677)
* Reduce node update frequency [#84007](https://github.com/openshift/kubernetes/pull/84007)
* CSI Topology ga [#83474](https://github.com/openshift/kubernetes/pull/83474)
* tests: Adds guestbook app subcommand in agnhost [#83055](https://github.com/openshift/kubernetes/pull/83055)
* Validate custom priority policy config. [#84646](https://github.com/openshift/kubernetes/pull/84646)
* reject pods when under disk pressure [#84415](https://github.com/openshift/kubernetes/pull/84415)
* Enabling fluentd on kubemark [#83897](https://github.com/openshift/kubernetes/pull/83897)
* Refactor the process to get ip address of loopback interface [#84712](https://github.com/openshift/kubernetes/pull/84712)
* Add a kubelet serving cert age metric [#84534](https://github.com/openshift/kubernetes/pull/84534)
* Handle namespace deletion more gracefully in built-in controllers [#84123](https://github.com/openshift/kubernetes/pull/84123)
* Bump shellcheck to v0.7.0 [#84249](https://github.com/openshift/kubernetes/pull/84249)
* Remove Alpha feature MountContainers [#84365](https://github.com/openshift/kubernetes/pull/84365)
* NodeLifecycleController - MarkPodsNotReady retry fix [#84445](https://github.com/openshift/kubernetes/pull/84445)
* fix log and note :cidr mask size must be <= node mask [#84637](https://github.com/openshift/kubernetes/pull/84637)
* kube-proxy: ensure KUBE-MARK-DROP exists [#84422](https://github.com/openshift/kubernetes/pull/84422)
* Fix a data race in registrytest [#84487](https://github.com/openshift/kubernetes/pull/84487)
* feat: remove suspendedDaemonPods from daemon controller [#84323](https://github.com/openshift/kubernetes/pull/84323)
* Make k8s.io/kubernetes dependency policy explicit [#84558](https://github.com/openshift/kubernetes/pull/84558)
* Fix a double lock bug in staging/.../apiserver [#84483](https://github.com/openshift/kubernetes/pull/84483)
* deprecate cleanup-ipvs flag [#83832](https://github.com/openshift/kubernetes/pull/83832)
* Apiserver flowcontrol api models [#83671](https://github.com/openshift/kubernetes/pull/83671)
* test/e2e: AddOrUpdateAvoidPodOnNode/RemoveAvoidPodsOffNode: retry when conflict hit during annotation update [#84513](https://github.com/openshift/kubernetes/pull/84513)
* Scheduler Policy API Refactoring [#83578](https://github.com/openshift/kubernetes/pull/83578)
* Add linux selector to kube-proxy yaml. [#84666](https://github.com/openshift/kubernetes/pull/84666)
* Fixes error in go_pkg() [#84664](https://github.com/openshift/kubernetes/pull/84664)
* Make writing file via container in tests sync for real this time by enclosing multiple commands in quotes [#84656](https://github.com/openshift/kubernetes/pull/84656)
* Moves test to new print_flags_test.go [#84621](https://github.com/openshift/kubernetes/pull/84621)
* Move funcs of create.go to e2e/storage [#84463](https://github.com/openshift/kubernetes/pull/84463)
* refactor(*): fix comparison to bool constant, return redundant [#84440](https://github.com/openshift/kubernetes/pull/84440)
* delete unused cache [#84408](https://github.com/openshift/kubernetes/pull/84408)
* Traverse OwnerReference maps more efficiently [#84060](https://github.com/openshift/kubernetes/pull/84060)
* Refactor tests for configure-helper.sh by moving environment config to testdata. [#84579](https://github.com/openshift/kubernetes/pull/84579)
* Move json/yaml printer tests to correct location [#84618](https://github.com/openshift/kubernetes/pull/84618)
* Update k8s.io/utils dependency to latest [#84604](https://github.com/openshift/kubernetes/pull/84604)
* cmd/kubeadm/app: fix staticcheck warning [#84626](https://github.com/openshift/kubernetes/pull/84626)
* Move small test back to printers_test.go [#84619](https://github.com/openshift/kubernetes/pull/84619)
* Cleanup clientcmd api conversions [#84503](https://github.com/openshift/kubernetes/pull/84503)
* Remove prom from metrics validation [#84500](https://github.com/openshift/kubernetes/pull/84500)
* Fixed bug in TopologyManager with SingleNUMANode Policy [#83777](https://github.com/openshift/kubernetes/pull/83777)
* publishing: fix typo in rules [#84631](https://github.com/openshift/kubernetes/pull/84631)
* Cleaned up and reorder skip functions from e2e framework [#84384](https://github.com/openshift/kubernetes/pull/84384)
* Rename test/data directory to testdata [#84617](https://github.com/openshift/kubernetes/pull/84617)
* Support local filesystem volume with block source reconstruction and add related e2e tests [#84218](https://github.com/openshift/kubernetes/pull/84218)
* If an iptables proxier sync fails, retry after iptablesSyncPeriod [#83387](https://github.com/openshift/kubernetes/pull/83387)
* Move CheckLimitsForResolvConf to Kubelet#syncLoop [#84253](https://github.com/openshift/kubernetes/pull/84253)
* Add davidz627 as owner of pkg/volume/csi [#84572](https://github.com/openshift/kubernetes/pull/84572)
* Migrate EvenPodsSpread priority implementation  as Score plugin with map/reduce style [#84262](https://github.com/openshift/kubernetes/pull/84262)
* Use log functions of core framework on test/e2e/freamwork/psp.go [#84509](https://github.com/openshift/kubernetes/pull/84509)
* Ensure EndpointSlice exist if Endpoint is found [#84421](https://github.com/openshift/kubernetes/pull/84421)
* Add serathius to sig-instrumentation-reviewers [#84592](https://github.com/openshift/kubernetes/pull/84592)
* publishing: add rules for 1.17 and remove for 1.13 [#84588](https://github.com/openshift/kubernetes/pull/84588)
* kubeadm: remove ObjectMeta from output.BootstrapTooken [#84286](https://github.com/openshift/kubernetes/pull/84286)
* feat: make prioritizeNodes private function of genericScheduler [#84589](https://github.com/openshift/kubernetes/pull/84589)
* Enable strict serializer in kubelet [#83204](https://github.com/openshift/kubernetes/pull/83204)
* Don't use hardcoded /go GOPATH in benchmark-dockerized.sh [#84593](https://github.com/openshift/kubernetes/pull/84593)
* cleanup: Update comments of SearchMountPoints/GetMountRefs [#84413](https://github.com/openshift/kubernetes/pull/84413)
* propagate proxy env var to kube-proxy [#84559](https://github.com/openshift/kubernetes/pull/84559)
* Separate e2enetwork from e2e core framework [#84379](https://github.com/openshift/kubernetes/pull/84379)
* Dynamic SNI certificates [#84303](https://github.com/openshift/kubernetes/pull/84303)
* Optionally run e2e pod as privileged for SELinux [#83727](https://github.com/openshift/kubernetes/pull/83727)
* Change DescribeItem() to local func [#84427](https://github.com/openshift/kubernetes/pull/84427)
* fix cpumanager reconcileState without sourceready [#81344](https://github.com/openshift/kubernetes/pull/81344)
* Update Azure/azure-sdk-for-go [#84543](https://github.com/openshift/kubernetes/pull/84543)
* Moves kubectl get subcommand to staging [#84540](https://github.com/openshift/kubernetes/pull/84540)
* switched to use the pause image served from gcr [#84538](https://github.com/openshift/kubernetes/pull/84538)
* Add conformance-behavior-approvers to OWNERS_ALIASES [#84531](https://github.com/openshift/kubernetes/pull/84531)
* test refactor: move test specific functions from rc_util.go [#84495](https://github.com/openshift/kubernetes/pull/84495)
* Force file sync after writing file via container in test [#84491](https://github.com/openshift/kubernetes/pull/84491)
* Fixing EndpointSlice port validation [#84481](https://github.com/openshift/kubernetes/pull/84481)
* tests: Extends agnhost netexec udp buffers [#84045](https://github.com/openshift/kubernetes/pull/84045)
* Add scheduler cache size metrics [#83508](https://github.com/openshift/kubernetes/pull/83508)
* Move the common logic of checking for kms-plugin's version into gRPC client interceptor. [#84387](https://github.com/openshift/kubernetes/pull/84387)
* Add lenient decoding path for v1alpha1 kube-proxy config [#84143](https://github.com/openshift/kubernetes/pull/84143)
* Change unit test fixtures to be compatible with FIPS-enabled compilers [#84561](https://github.com/openshift/kubernetes/pull/84561)
* Adds some basic READMEs to some of the test images [#84362](https://github.com/openshift/kubernetes/pull/84362)
* RequestedToCapacityRatio as score plugin [#84520](https://github.com/openshift/kubernetes/pull/84520)
* delete nodeinfo "getter" [#84553](https://github.com/openshift/kubernetes/pull/84553)
* Fix golint issues in pkg/credentialprovider/gcp [#84478](https://github.com/openshift/kubernetes/pull/84478)
* Apply feature gates in scheduler policy api compatibility test [#84190](https://github.com/openshift/kubernetes/pull/84190)
* Expose filteredNodes to func PriorityMetadataProducer [#84542](https://github.com/openshift/kubernetes/pull/84542)
* Update default etcd server to 3.4.3 [#84329](https://github.com/openshift/kubernetes/pull/84329)
* Add Scheduler validation check for redeclared policy configs [#83963](https://github.com/openshift/kubernetes/pull/83963)
* Move funcs of framework to common runtimeclass. [#84411](https://github.com/openshift/kubernetes/pull/84411)
* download cni plugin from gcs bucket [#84496](https://github.com/openshift/kubernetes/pull/84496)
* move funcs of expect.go to e2e/common [#84410](https://github.com/openshift/kubernetes/pull/84410)
* Priorities use SharedLister interface instead of NodeInfo Map [#84449](https://github.com/openshift/kubernetes/pull/84449)
* Improve e2e HostExec utility [#84444](https://github.com/openshift/kubernetes/pull/84444)
* Migrate couple manual conversions to the new AddConversionFunc() way [#84464](https://github.com/openshift/kubernetes/pull/84464)
* Use DNS_SERVER_IP as --cluster-dns in all cases. [#84383](https://github.com/openshift/kubernetes/pull/84383)
* Predicates use SharedLister interface instead of NodeInfo Map [#84389](https://github.com/openshift/kubernetes/pull/84389)
* e2e: share /dev with host in hostpath driver deployment [#84501](https://github.com/openshift/kubernetes/pull/84501)
* Make sure score plugins are executed when no prioritizer configured [#84506](https://github.com/openshift/kubernetes/pull/84506)
* Prevent 2 goroutines in test from being leaked if proxy hangs [#84484](https://github.com/openshift/kubernetes/pull/84484)
* Fix bug of kubelet enable-cadvisor-json-endpoints flag [#83881](https://github.com/openshift/kubernetes/pull/83881)
* improve error handling in cloud node controller [#84469](https://github.com/openshift/kubernetes/pull/84469)
* Uncomment interpod affinity integration tests [#84450](https://github.com/openshift/kubernetes/pull/84450)
* Remove prometheus addon [#83442](https://github.com/openshift/kubernetes/pull/83442)
* e2e storage: bump revision of sidecars and driver [#83957](https://github.com/openshift/kubernetes/pull/83957)
* Allow unsafe read from cache for Azure [#83685](https://github.com/openshift/kubernetes/pull/83685)
* Provide a mechanism for GaugeFunc to use the metrics stability framework [#83830](https://github.com/openshift/kubernetes/pull/83830)
* removed powershell-yaml module dependency [#84434](https://github.com/openshift/kubernetes/pull/84434)
* kubeadm-validators: bump the latest validated Docker version to 19.03 [#84476](https://github.com/openshift/kubernetes/pull/84476)
* Remove predicates.NodeInfo dependency from kubelet [#84294](https://github.com/openshift/kubernetes/pull/84294)
* Feature-gate RuntimeClass informer starts [#84275](https://github.com/openshift/kubernetes/pull/84275)
* kubeadm: always mount a flex volume path for the controller-manager [#84468](https://github.com/openshift/kubernetes/pull/84468)
* Add event for pvc in case node expansion fails [#84301](https://github.com/openshift/kubernetes/pull/84301)
* Adds x-kubernetes-map-type annotation as a CRD API extension [#84113](https://github.com/openshift/kubernetes/pull/84113)
* framework: Fix a goroutine leak bug in resource_usage_gatherer.go [#83925](https://github.com/openshift/kubernetes/pull/83925)
* add a fallback for kube-scheduler  when events.k8s.io is disabled [#83692](https://github.com/openshift/kubernetes/pull/83692)
* Make e2eservice.CheckAffinity wait longer, to avoid flakes [#84238](https://github.com/openshift/kubernetes/pull/84238)
* make ClaimProvisionTimeout a var [#84140](https://github.com/openshift/kubernetes/pull/84140)
* Remove prometheus references in test/integration [#84283](https://github.com/openshift/kubernetes/pull/84283)
* Migrate components to EndpointsLeases leader election lock [#84084](https://github.com/openshift/kubernetes/pull/84084)
* Run snapshot before PreFilter plugins when schedule begins [#84437](https://github.com/openshift/kubernetes/pull/84437)
* Change FuzzTime to FuzzTimeStrict for naming consistency [#84409](https://github.com/openshift/kubernetes/pull/84409)
* Fix metrics may be hidden in current minor release issue [#84395](https://github.com/openshift/kubernetes/pull/84395)
* Add fuzz targets for Duration, MicroTime, and Time [#84168](https://github.com/openshift/kubernetes/pull/84168)
* Convert NodeLabelPresence custom predicate to filter plugin. [#84297](https://github.com/openshift/kubernetes/pull/84297)
* fix staticcheck failures in test/e2e/common directory [#83711](https://github.com/openshift/kubernetes/pull/83711)
* Cleanup conversions registrations [#84288](https://github.com/openshift/kubernetes/pull/84288)
* Add updated v0.6.0 stable PD driver specs - enable block tests for PD [#84312](https://github.com/openshift/kubernetes/pull/84312)
* Support local volume block mode reconstruction [#84173](https://github.com/openshift/kubernetes/pull/84173)
* Made all scheduler Node and Pod list/lookups from the snapshot [#84293](https://github.com/openshift/kubernetes/pull/84293)
* Pass list of files through stdin to avoid hitting ARG_MAX on some env… [#81592](https://github.com/openshift/kubernetes/pull/81592)
* kubeadm: remove commented test [#84309](https://github.com/openshift/kubernetes/pull/84309)
* Fixing EndpointSlice kubectl output [#82603](https://github.com/openshift/kubernetes/pull/82603)
* rename scheduler fake listers [#84328](https://github.com/openshift/kubernetes/pull/84328)
* set config.BindAddress to IPv4 address "127.0.0.1" if not specified [#83822](https://github.com/openshift/kubernetes/pull/83822)
* CSI: modify detach timeout to match attach timeout [#84321](https://github.com/openshift/kubernetes/pull/84321)
* Add note on the applicability of --grace-period flag [#84316](https://github.com/openshift/kubernetes/pull/84316)
* typos in old changelogs releases [#83563](https://github.com/openshift/kubernetes/pull/83563)
* Require exact match when calling Get method within fake clientset [#82794](https://github.com/openshift/kubernetes/pull/82794)
* Fix incorrect "whitespaces" plural [#84325](https://github.com/openshift/kubernetes/pull/84325)
* Update etcd client to v3.4.3 in k8s v1.17 [#83987](https://github.com/openshift/kubernetes/pull/83987)
* Fix deployment e2e test at scale [#84339](https://github.com/openshift/kubernetes/pull/84339)
* Remove deprecated CSI RBAC roles [#84282](https://github.com/openshift/kubernetes/pull/84282)
* remove reference to promhttp in etcd-version-monitor [#84221](https://github.com/openshift/kubernetes/pull/84221)
* Ensure script saves results even when tests fail [#84166](https://github.com/openshift/kubernetes/pull/84166)
* Refactor kubelet collector test [#83713](https://github.com/openshift/kubernetes/pull/83713)
* Move PokeUDP() to e2e service subpkg [#84313](https://github.com/openshift/kubernetes/pull/84313)
* Feature-gate CSINode and CSIDriver informer starts [#84273](https://github.com/openshift/kubernetes/pull/84273)
* Refactor remaining metric tests [#84305](https://github.com/openshift/kubernetes/pull/84305)
* Forbid label updates by nodes through pod/status [#84260](https://github.com/openshift/kubernetes/pull/84260)
* Move TranslateIPv4ToIPv6() to e2e scheduling test [#84258](https://github.com/openshift/kubernetes/pull/84258)
* Dynamic serving certificates [#84200](https://github.com/openshift/kubernetes/pull/84200)
* Adding FQDN address type for EndpointSlice [#84091](https://github.com/openshift/kubernetes/pull/84091)
* Removes kubectl get dependency on Kubernetes core [#84062](https://github.com/openshift/kubernetes/pull/84062)
* Prune inactive owners from pkg/* misc api-machinery related OWNERS files [#83864](https://github.com/openshift/kubernetes/pull/83864)
* Prefer CRD v1 for internal clients [#84276](https://github.com/openshift/kubernetes/pull/84276)
* Prune inactive members from cluster/* OWNERS files. [#83863](https://github.com/openshift/kubernetes/pull/83863)
* Fix service sanity check after jig.ChangeServiceType [#84289](https://github.com/openshift/kubernetes/pull/84289)
* Do not list apiextensions.k8s.io/v1beta1 in discovery when disabled [#84277](https://github.com/openshift/kubernetes/pull/84277)
* Feature-gate PDB informer starts [#84274](https://github.com/openshift/kubernetes/pull/84274)
* Remove wrappers around storage-related listers in the predicate [#84192](https://github.com/openshift/kubernetes/pull/84192)
* refactored counter_test to use assert statements and renamed variable… [#84117](https://github.com/openshift/kubernetes/pull/84117)
* Add permit_wait_duration_seconds metric for scheduler. [#84011](https://github.com/openshift/kubernetes/pull/84011)
* cleanup util code [#84083](https://github.com/openshift/kubernetes/pull/84083)
* Clean-up and additional test cases for socket-mask unit test. [#78938](https://github.com/openshift/kubernetes/pull/78938)
* Add an event to pvc when node expand successfully [#84137](https://github.com/openshift/kubernetes/pull/84137)
* feat: remove WaitForCacheSync from scheduler factory [#84268](https://github.com/openshift/kubernetes/pull/84268)
* Fix base image discrepancy when building kubemark images [#84231](https://github.com/openshift/kubernetes/pull/84231)
* Pod GC controller - use node lister [#82365](https://github.com/openshift/kubernetes/pull/82365)
* Move CreatePodOrFail() to e2e network test [#84255](https://github.com/openshift/kubernetes/pull/84255)
* Optimize interpod affinity priority function [#84264](https://github.com/openshift/kubernetes/pull/84264)
* Move funcs of networking_utils to e2e network [#84261](https://github.com/openshift/kubernetes/pull/84261)
* Fix static failure for package: staging/src/k8s.io/code-generator [#81708](https://github.com/openshift/kubernetes/pull/81708)
* Follow-up of #71136: Switch system priority class usage to versioned (v1) api [#76362](https://github.com/openshift/kubernetes/pull/76362)
* Use v1 CRD deletion endpoints in e2e tests [#84235](https://github.com/openshift/kubernetes/pull/84235)
* Autogenerate conversions for decoding parameters [#83709](https://github.com/openshift/kubernetes/pull/83709)
* add option to skip verifying kubelet certificates for logs [#84251](https://github.com/openshift/kubernetes/pull/84251)
* remove hostnetwork from hostpath csi manifest [#84098](https://github.com/openshift/kubernetes/pull/84098)
* Fix Typos in pkg/kubelet/dockershim/docker_service.go [#83986](https://github.com/openshift/kubernetes/pull/83986)
* Prune inactive owners from autoscaling related OWNERS files. [#83856](https://github.com/openshift/kubernetes/pull/83856)
* Benchmark for authn cache [#83797](https://github.com/openshift/kubernetes/pull/83797)
* Fix crash in kubectl drain [#83795](https://github.com/openshift/kubernetes/pull/83795)
* move nodeinfo/snapshot.go into its own package [#84197](https://github.com/openshift/kubernetes/pull/84197)
* fixed node search starting point [#84232](https://github.com/openshift/kubernetes/pull/84232)
* Fix and clean up timeouts for networking tests in large clusters [#84229](https://github.com/openshift/kubernetes/pull/84229)
* Addon Manager: Fix bug in generate_prune_whitelist_flags [#84228](https://github.com/openshift/kubernetes/pull/84228)
* Revert "move hostPID tests to common" [#84212](https://github.com/openshift/kubernetes/pull/84212)
* Separate scheduler listers into their own package [#84193](https://github.com/openshift/kubernetes/pull/84193)
* Comment out an e2eservice sanity check for now [#84188](https://github.com/openshift/kubernetes/pull/84188)
* storage: Deleting a namespace while spec.finalizers pending should not error [#84122](https://github.com/openshift/kubernetes/pull/84122)
* Prune inactive members from OWNERS_ALIASES. [#83866](https://github.com/openshift/kubernetes/pull/83866)
* Prune inactive owners from api-approver owned OWNERS files. [#83865](https://github.com/openshift/kubernetes/pull/83865)
* Prune inactive owners from cloud-provider related OWNERS files. [#83852](https://github.com/openshift/kubernetes/pull/83852)
* Dynamic cert file ca bundle [#83579](https://github.com/openshift/kubernetes/pull/83579)
* feat(scheduler): graduate ScheduleDaemonSetPods to GA [#82795](https://github.com/openshift/kubernetes/pull/82795)
* Fix retry logic in DisruptionController [#82152](https://github.com/openshift/kubernetes/pull/82152)
* shuffle sharding package for priority and fairness [#83665](https://github.com/openshift/kubernetes/pull/83665)
* Microoptimization in SelectorFrom*Set [#84182](https://github.com/openshift/kubernetes/pull/84182)
* This adds context from for cloud calls for Kubelet. [#83931](https://github.com/openshift/kubernetes/pull/83931)
* Few improvements to Cloud NAT [#81073](https://github.com/openshift/kubernetes/pull/81073)
* Lower AWS DescribeVolume frequency [#84181](https://github.com/openshift/kubernetes/pull/84181)
* Move GoTemplatePrinter tests to correct location [#84023](https://github.com/openshift/kubernetes/pull/84023)
* kubectl drain: avoid leaking goroutines [#83967](https://github.com/openshift/kubernetes/pull/83967)
* Introduce http handler to metrics stability framework [#83722](https://github.com/openshift/kubernetes/pull/83722)
* Plumb dynamic SNI certificates [#83627](https://github.com/openshift/kubernetes/pull/83627)
* Add a metric to track number of scheduler binding and prioritizing goroutines [#83535](https://github.com/openshift/kubernetes/pull/83535)
* nodeipam-controller:fix static check failures [#82145](https://github.com/openshift/kubernetes/pull/82145)
* Add mtls support to add/remove-replica [#81075](https://github.com/openshift/kubernetes/pull/81075)
* Prune inactive owners from staging/src/k8s.io/client-go/* OWNERS files. [#83857](https://github.com/openshift/kubernetes/pull/83857)
* Upgrade all node pools for gke upgrade test. [#84174](https://github.com/openshift/kubernetes/pull/84174)
* Fix windows performance counter error on Non-English environemnt [#84156](https://github.com/openshift/kubernetes/pull/84156)
* Check PV volumeMode in kubelet even when block feature is off [#84048](https://github.com/openshift/kubernetes/pull/84048)
* Fix golint errors in pkg/controller/service [#83645](https://github.com/openshift/kubernetes/pull/83645)
* remove ipallocator in favor of k/utils net package [#83422](https://github.com/openshift/kubernetes/pull/83422)
* kubelet: Record preemptions similarly to evictions [#84120](https://github.com/openshift/kubernetes/pull/84120)
* Extract PodPhase map outside Less func [#84075](https://github.com/openshift/kubernetes/pull/84075)
* feat: remove CheckNodeMemoryPressure/DiskPressure/PIDPressure/Condition [#84152](https://github.com/openshift/kubernetes/pull/84152)
* etcd health check key should have proper prefix [#84167](https://github.com/openshift/kubernetes/pull/84167)
* set default value of KUBE_MASTER_URL to empty in e2e test [#84150](https://github.com/openshift/kubernetes/pull/84150)
* Log the error before calling closeFn [#83971](https://github.com/openshift/kubernetes/pull/83971)
* Fix sanity-checking of LoadBalancer services in e2eservice.TestJig [#84159](https://github.com/openshift/kubernetes/pull/84159)
* [migration phase 1] Add filter plugin for cloud provider storage predicate [#84148](https://github.com/openshift/kubernetes/pull/84148)
* Add block feature gate checks to PV controller [#84049](https://github.com/openshift/kubernetes/pull/84049)
* Issue 83458:Changed the return check for GetNodeInfo [#83983](https://github.com/openshift/kubernetes/pull/83983)
* Bugfix kube-proxy README file to list ipvs modules, closes #83676 [#83677](https://github.com/openshift/kubernetes/pull/83677)
* Flush data cache during unmount device for GCE-PD in Windows [#83591](https://github.com/openshift/kubernetes/pull/83591)
* Fix double counting issue for request metrics on timeout. [#83427](https://github.com/openshift/kubernetes/pull/83427)
* tests: Simplifies image pulling tests [#83398](https://github.com/openshift/kubernetes/pull/83398)
* Move hostPID tests to common [#83368](https://github.com/openshift/kubernetes/pull/83368)
* Push context up to cloud node controller. [#83872](https://github.com/openshift/kubernetes/pull/83872)
* Remove the assumption of pod cidr of /24 in the gce window node start… [#83585](https://github.com/openshift/kubernetes/pull/83585)
* scheduler: make getVolumeLimits a function instead of a method [#83310](https://github.com/openshift/kubernetes/pull/83310)
* Close the file after reading in verifydependencies#main [#84108](https://github.com/openshift/kubernetes/pull/84108)
* Return an error when zone info is not found. [#84138](https://github.com/openshift/kubernetes/pull/84138)
* Allow users to use custom tags [#83497](https://github.com/openshift/kubernetes/pull/83497)
* rename FilterPlugin NodeResources [#84121](https://github.com/openshift/kubernetes/pull/84121)
* Move LaunchHostExecPod() to e2e network [#84090](https://github.com/openshift/kubernetes/pull/84090)
* Create microbenchmarks for ToUnstructured/FromUnstructured. [#84082](https://github.com/openshift/kubernetes/pull/84082)
* Remove CSINode from scheduler cache. [#84017](https://github.com/openshift/kubernetes/pull/84017)
* LeastRequestedPriority/MostRequestedPriority/BalancedResourceAllocation as Score plugins [#84074](https://github.com/openshift/kubernetes/pull/84074)
* feat(scheduler): replace several algorithm listers with client listers [#84099](https://github.com/openshift/kubernetes/pull/84099)
* Refactor scheduler's framework permit API [#83756](https://github.com/openshift/kubernetes/pull/83756)
* Added a new `--sort-by` flag to kubectl api-resources command [#81971](https://github.com/openshift/kubernetes/pull/81971)
* feat: implement node unschedulable as a filter plugin [#84047](https://github.com/openshift/kubernetes/pull/84047)
* remove usage of the test/test_owners.* files [#84070](https://github.com/openshift/kubernetes/pull/84070)
* Add kubectlPath flag to e2e_node.test [#82308](https://github.com/openshift/kubernetes/pull/82308)
* Clarify the role for SupportedSizeRange [#84094](https://github.com/openshift/kubernetes/pull/84094)
* Add note about addon-manager image location [#84092](https://github.com/openshift/kubernetes/pull/84092)
* Migrate EvenPodsSpread Predicate to Filter plugin [#84066](https://github.com/openshift/kubernetes/pull/84066)
* Update to use go1.12.12 [#84064](https://github.com/openshift/kubernetes/pull/84064)
* Amending the GMSA e2e test to allow it to run against Windows-only clusters [#83805](https://github.com/openshift/kubernetes/pull/83805)
* A go-fuzz target for Serializer.Encode/Decode, tested with go-fuzz [#83750](https://github.com/openshift/kubernetes/pull/83750)
* feat: update taint nodes by condition to GA [#82703](https://github.com/openshift/kubernetes/pull/82703)
* Use frameworkHandle to get listers [#84034](https://github.com/openshift/kubernetes/pull/84034)
* Update glbc.manifest to v1.6.1 [#84018](https://github.com/openshift/kubernetes/pull/84018)
* Make node tree order part of the snapshot [#84014](https://github.com/openshift/kubernetes/pull/84014)
* Convert error messages to use event recorder [#83934](https://github.com/openshift/kubernetes/pull/83934)
* more e2eservice.TestJig cleanups [#83549](https://github.com/openshift/kubernetes/pull/83549)
* fix Security Context should run with an image specified user ID [#82817](https://github.com/openshift/kubernetes/pull/82817)
* Compact memory before requesting huge pages [#82656](https://github.com/openshift/kubernetes/pull/82656)
* Update Cluster Autoscaler version to 1.16.2 [#84038](https://github.com/openshift/kubernetes/pull/84038)
* [migration phase 1] MatchInterPodAffinity as filter plugin [#83982](https://github.com/openshift/kubernetes/pull/83982)
* feat: several cleanups in the scheduling package [#84073](https://github.com/openshift/kubernetes/pull/84073)
* Fix indent in cherry_pick_pull script [#84055](https://github.com/openshift/kubernetes/pull/84055)
* GeneralPredicate as framework plugin config [#84054](https://github.com/openshift/kubernetes/pull/84054)
* Don't use CachingObject if the number of watchers is small [#84043](https://github.com/openshift/kubernetes/pull/84043)
* Update release notes for 1.14.8 to reflect AWS bugfix [#84019](https://github.com/openshift/kubernetes/pull/84019)
* cleanup unnecessary func parameters in genericScheduler methods [#84015](https://github.com/openshift/kubernetes/pull/84015)
* [migration phase 1] CSIMaxVolumeLimitChecker as filter plugin [#83894](https://github.com/openshift/kubernetes/pull/83894)
* Prune inactive owners from cmd/kube-controller-manager/OWNERS. [#83853](https://github.com/openshift/kubernetes/pull/83853)
* Refactor test/integration/master/ with metric [#83833](https://github.com/openshift/kubernetes/pull/83833)
* Remove direct references to prometheus from transformation_testcase.go [#83831](https://github.com/openshift/kubernetes/pull/83831)
* Use single kms-plugin mock in unit and integration tests. [#83811](https://github.com/openshift/kubernetes/pull/83811)
* test/e2e: move some tests from cluster-lifecycle to cloud-provider-gcp [#83744](https://github.com/openshift/kubernetes/pull/83744)
* Prefer to delete doubled-up pods of a ReplicaSet [#80004](https://github.com/openshift/kubernetes/pull/80004)
* Plumbing for dynamic apiserver serving certificates [#83580](https://github.com/openshift/kubernetes/pull/83580)
* Promote WatchBookmarks feature to GA [#83195](https://github.com/openshift/kubernetes/pull/83195)
* add myself to typecheck / go-srcimporter owners, move rmmh to emeritus [#84020](https://github.com/openshift/kubernetes/pull/84020)
* feat(scheduler): implement node affinity as score plugin [#83998](https://github.com/openshift/kubernetes/pull/83998)
* Ensure TaintBasedEviction int test not rely on TaintNodeByConditions [#84036](https://github.com/openshift/kubernetes/pull/84036)
* Change node name to env value of HOSTNAME_OVERRIDE [#84008](https://github.com/openshift/kubernetes/pull/84008)
* stop removing cni directories as they aren't installed by kubeadm [#83950](https://github.com/openshift/kubernetes/pull/83950)
* Fix AWS block volume reconstruction to be like file [#83466](https://github.com/openshift/kubernetes/pull/83466)
* Fix shellcheck failures in cluster/validate-cluster.sh [#81345](https://github.com/openshift/kubernetes/pull/81345)
* Move CreateNginxPod() to specific e2e [#84025](https://github.com/openshift/kubernetes/pull/84025)
* Revert "kubeadm: enable kubelet certificate rotation on primary CP nodes" [#84012](https://github.com/openshift/kubernetes/pull/84012)
* Swtich nodelifecyclecontroller to coordination/v1 [#83989](https://github.com/openshift/kubernetes/pull/83989)
* Update Calico to v3.8.3 [#83976](https://github.com/openshift/kubernetes/pull/83976)
* Dynamic cert kube apiserver wiring [#83555](https://github.com/openshift/kubernetes/pull/83555)
* Sending non-blocking audit events to a webhook is retried on any error [#83238](https://github.com/openshift/kubernetes/pull/83238)
* feat(scheduler): use context in scheduler package [#82072](https://github.com/openshift/kubernetes/pull/82072)
* move service helpers to k8s.io/cloud-provider [#81348](https://github.com/openshift/kubernetes/pull/81348)
* make sure filters are executed when no predicates configured [#84028](https://github.com/openshift/kubernetes/pull/84028)
* e2e: remove duplicated test specs [#84002](https://github.com/openshift/kubernetes/pull/84002)
* Move Initialized() to e2e framework util [#83812](https://github.com/openshift/kubernetes/pull/83812)
* Update comment for syncHandler [#82455](https://github.com/openshift/kubernetes/pull/82455)
* tests: Replaces Redis image with Agnhost [#81358](https://github.com/openshift/kubernetes/pull/81358)
* set backup value to ensure connections against kubelets eventually close [#75190](https://github.com/openshift/kubernetes/pull/75190)
* kubeadm: enhance certs check-expiration to show the expiration info of related CAs [#83932](https://github.com/openshift/kubernetes/pull/83932)
* choose a more unique request timeout default [#78541](https://github.com/openshift/kubernetes/pull/78541)
* Add incoming pod metrics to scheduler queue. [#83577](https://github.com/openshift/kubernetes/pull/83577)
* Insecure backend proxy [#83419](https://github.com/openshift/kubernetes/pull/83419)
* Amend CHANGELOG-1.16.md for v1.16.2 [#83979](https://github.com/openshift/kubernetes/pull/83979)
* Updated COS version to M77 and includes fixes to ensure scalability tests pass [#83974](https://github.com/openshift/kubernetes/pull/83974)
* Bump bbolt to v1.3.3 [#83970](https://github.com/openshift/kubernetes/pull/83970)
* Remove update-storage-objects.sh [#83969](https://github.com/openshift/kubernetes/pull/83969)
* Fix proto.Merge of IntOrString type [#83956](https://github.com/openshift/kubernetes/pull/83956)
* feat(scheduler): implement NodePreferAvoidPods as score plugin [#83893](https://github.com/openshift/kubernetes/pull/83893)
* add tombstones handle for pdb [#83951](https://github.com/openshift/kubernetes/pull/83951)
* kubeadm: use strings in TestTokenOutput [#83949](https://github.com/openshift/kubernetes/pull/83949)
* Disable local block volume reconstruction test [#83946](https://github.com/openshift/kubernetes/pull/83946)
* Fix memory and timer leak in work queue [#83945](https://github.com/openshift/kubernetes/pull/83945)
* Add crictl windows binaries to workspace [#83944](https://github.com/openshift/kubernetes/pull/83944)
* fix: scheduler perf test with pod informer [#83935](https://github.com/openshift/kubernetes/pull/83935)
* release: lib: revert docker_registry to constant k8s.gcr.io [#83924](https://github.com/openshift/kubernetes/pull/83924)
* Move scheduler cache ListNodes interface to snapshot [#83921](https://github.com/openshift/kubernetes/pull/83921)
* Fix DeltaFIFO Replace method to prevent SharedIndexInformers from missing notifications [#83911](https://github.com/openshift/kubernetes/pull/83911)
* Support dynamically set log level for kube-scheduler [#83910](https://github.com/openshift/kubernetes/pull/83910)
* bump metrics server version to v0.3.6 [#83907](https://github.com/openshift/kubernetes/pull/83907)
* remove duplicate code [#83902](https://github.com/openshift/kubernetes/pull/83902)
* Add information from Lease to kubectl describe node [#83899](https://github.com/openshift/kubernetes/pull/83899)
* Clean up for component-base/metrics [#83828](https://github.com/openshift/kubernetes/pull/83828)
* Rewrite printer tests [#83802](https://github.com/openshift/kubernetes/pull/83802)
* Fix link to moved Docker image [#80437](https://github.com/openshift/kubernetes/pull/80437)
* Rename dashboard-controller.yaml to dashboard-deployment.yaml [#80137](https://github.com/openshift/kubernetes/pull/80137)
* Fix broken link in sample-controller [#81952](https://github.com/openshift/kubernetes/pull/81952)
* Check error return from snapshot Restore [#83867](https://github.com/openshift/kubernetes/pull/83867)
* Prune inactive owners from pkg/controller/* network related OWNERS files [#83862](https://github.com/openshift/kubernetes/pull/83862)
* Prune inactive owners from pkg/kubelet/* network related OWNERS files. [#83861](https://github.com/openshift/kubernetes/pull/83861)
* fix kubectl delete semantic error [#83825](https://github.com/openshift/kubernetes/pull/83825)
* Move jbeda to emeritus status. [#83819](https://github.com/openshift/kubernetes/pull/83819)
* Remove test_verify from e2e framework package [#83816](https://github.com/openshift/kubernetes/pull/83816)
* Hash keys used in cached token authenticator [#83796](https://github.com/openshift/kubernetes/pull/83796)
* Isolate the logic related to the configuration of kube-apiserver into a separate script. [#83753](https://github.com/openshift/kubernetes/pull/83753)
* Don't log about deleting non-existent affinity entries in userspace OnEndpointsAdd [#83644](https://github.com/openshift/kubernetes/pull/83644)
* Add metrics for scheduler framework. [#83569](https://github.com/openshift/kubernetes/pull/83569)
* Improve IPVS Module loader logic [#83553](https://github.com/openshift/kubernetes/pull/83553)
* Fix kube-proxy healthz server for proxier sync loop changes [#83498](https://github.com/openshift/kubernetes/pull/83498)
* Clean up sig-auth OWNERS_ALIASES [#83486](https://github.com/openshift/kubernetes/pull/83486)
* Migrate etcd version monitor to metrics stability framework [#83283](https://github.com/openshift/kubernetes/pull/83283)
* Reworking kube-proxy to only compute endpointChanges on apply [#83206](https://github.com/openshift/kubernetes/pull/83206)
* add fuzzing targets for sig-yaml and yaml.v2 [#83978](https://github.com/openshift/kubernetes/pull/83978)
* fix rbd info when return warning information [#75588](https://github.com/openshift/kubernetes/pull/75588)
* Upgrade to etcd server 3.3.17 [#83804](https://github.com/openshift/kubernetes/pull/83804)
* Using pointers to pod in node lifecycle controller [#83780](https://github.com/openshift/kubernetes/pull/83780)
* Improve efficiency of csiMountMgr.GetAttributes [#83747](https://github.com/openshift/kubernetes/pull/83747)
* Remove direct reference to prometheus from aws [#83278](https://github.com/openshift/kubernetes/pull/83278)
* Adds --prefix flag to the kubectl log command [#76471](https://github.com/openshift/kubernetes/pull/76471)
* Change XPN firewall change msg. Should be required by security admin [#71674](https://github.com/openshift/kubernetes/pull/71674)
* E2E tests for dualstack phase2 [#80725](https://github.com/openshift/kubernetes/pull/80725)
* Prune inactive owners from pkg/volume/* OWNERS files. [#83859](https://github.com/openshift/kubernetes/pull/83859)
* Prune inactive reviewers from staging/src/k8s.io/apiserver/* OWNERS files. [#83858](https://github.com/openshift/kubernetes/pull/83858)
* Prune inactive owners from pkg/credentialprovider/* OWNERS files. [#83860](https://github.com/openshift/kubernetes/pull/83860)
* Remove prometheus reference from storage [#83678](https://github.com/openshift/kubernetes/pull/83678)
* fix inconsistent comment in device plugin api [#83757](https://github.com/openshift/kubernetes/pull/83757)
* Prune inactive owners from staging/src/k8s.io/sample-controller/OWNERS. [#83855](https://github.com/openshift/kubernetes/pull/83855)
* Add CHANGELOG-1.17.md to CHANGELOG.md [#83827](https://github.com/openshift/kubernetes/pull/83827)
* [migration phase 1] VolumeZoneChecker as filter plugin [#83843](https://github.com/openshift/kubernetes/pull/83843)
* Prune inactive owners from test/e2e/framework/providers/vsphere/OWNERS. [#83854](https://github.com/openshift/kubernetes/pull/83854)
* [migration phase 1] PodFitsHostPorts as filter plugin [#83659](https://github.com/openshift/kubernetes/pull/83659)
* Add warning when --certificate-key is set and --control-plane is not. [#83661](https://github.com/openshift/kubernetes/pull/83661)
* feat: implement imagelocality as a score plugin [#83849](https://github.com/openshift/kubernetes/pull/83849)
* [migration phase 1] PodFitsResources as framework plugin [#83650](https://github.com/openshift/kubernetes/pull/83650)
* Move Factory Package to Scheduler [#83573](https://github.com/openshift/kubernetes/pull/83573)
* Rename e2e framework functions used locally [#83817](https://github.com/openshift/kubernetes/pull/83817)
* Move Sortable List into its own package [#83558](https://github.com/openshift/kubernetes/pull/83558)
* local-up-cluster kube-proxy terminated error [#82413](https://github.com/openshift/kubernetes/pull/82413)
* Fix attachment of just detached AWS volumes [#83567](https://github.com/openshift/kubernetes/pull/83567)
* [migration phase 1] PodMatchNodeSelector/NodAffinity as filter plugin [#83660](https://github.com/openshift/kubernetes/pull/83660)
* Rename Generate[Read|Write]FileCmd()s on e2e framework [#83808](https://github.com/openshift/kubernetes/pull/83808)
* Upgrade to etcd client 3.3.17 [#83801](https://github.com/openshift/kubernetes/pull/83801)
* [migration phase 1] NoDiskConflict as filter plugin [#83731](https://github.com/openshift/kubernetes/pull/83731)
* Move PodPreemptor to Scheduler [#83389](https://github.com/openshift/kubernetes/pull/83389)
* Remove duplicated log. [#81594](https://github.com/openshift/kubernetes/pull/81594)
* Fix package name of psp on e2e framework [#83793](https://github.com/openshift/kubernetes/pull/83793)
* apiextensions: fix panic with x-kuberentes-int-or-string in CRDs [#83787](https://github.com/openshift/kubernetes/pull/83787)
* dynamic delegated authn header reload [#83459](https://github.com/openshift/kubernetes/pull/83459)
* Improve 'No resource limits' message [#83749](https://github.com/openshift/kubernetes/pull/83749)
* feat(scheduler): expand node score range to [0, 100] [#83522](https://github.com/openshift/kubernetes/pull/83522)
* Mark 'wait until preStop hook completes the process' flaky [#83792](https://github.com/openshift/kubernetes/pull/83792)
* bump k8s.io/utils to pickup bug fix for rangesize func [#83785](https://github.com/openshift/kubernetes/pull/83785)
* tag test that taints a node as disruptive [#83647](https://github.com/openshift/kubernetes/pull/83647)
* Eliminate direct references to prometheus from apiserver admission [#83610](https://github.com/openshift/kubernetes/pull/83610)
* Add RainbowMango to reviewers for component-base/metrics [#83772](https://github.com/openshift/kubernetes/pull/83772)
* Address staticcheck failures for test/e2e/lifecycle/bootstrap [#83702](https://github.com/openshift/kubernetes/pull/83702)
* feat: change the `pod_preemption_victims` to Histogram [#83603](https://github.com/openshift/kubernetes/pull/83603)
* [migration phase 1] Implement CheckVolumeBinding as a filter plugin [#83764](https://github.com/openshift/kubernetes/pull/83764)
* feat(scheduler): expose SharedInformerFactory to the framework handle [#83663](https://github.com/openshift/kubernetes/pull/83663)
* Revert #83735: Update etcd client to 3.3.16 [#83763](https://github.com/openshift/kubernetes/pull/83763)
* Add more tracing steps in generic_scheduler [#83539](https://github.com/openshift/kubernetes/pull/83539)
* Kubemark node labels [#83736](https://github.com/openshift/kubernetes/pull/83736)
* [migration phase 1] PodFitsHost as filter plugin [#83662](https://github.com/openshift/kubernetes/pull/83662)
* Topology manager aligns pods of all QoS classes. [#83492](https://github.com/openshift/kubernetes/pull/83492)
* Implemented taints and tolerations priority function as a Score plugin [#83601](https://github.com/openshift/kubernetes/pull/83601)
* kubelet e2e: run resource monitor only if the actual number of nodes is small [#83755](https://github.com/openshift/kubernetes/pull/83755)
* fix unsafe JSON construction [#81158](https://github.com/openshift/kubernetes/pull/81158)
* kubeadm: add warning about 'upgrade apply/plan --config' [#83530](https://github.com/openshift/kubernetes/pull/83530)
* Add sig-node-approvers alias [#83746](https://github.com/openshift/kubernetes/pull/83746)
* Drop framework.GetReadySchedulableNodesOrDie [#83729](https://github.com/openshift/kubernetes/pull/83729)
* Fixed bug in TopologyManager with SingleNUMANode Policy [#83697](https://github.com/openshift/kubernetes/pull/83697)
* [migration phase 1] Make scheduler cache, volume binder and listers available when registering default plugins [#83694](https://github.com/openshift/kubernetes/pull/83694)
* Adding per-pod metrics for scheduler. [#83674](https://github.com/openshift/kubernetes/pull/83674)
* Audit of test/* OWNERS files [#83587](https://github.com/openshift/kubernetes/pull/83587)
* feat(apiserver): add user-agent and remote info into trace log for endpoints handlers. [#83237](https://github.com/openshift/kubernetes/pull/83237)
* Minor cleanup meta v1/v1beta1 and register DeleteOptions [#82921](https://github.com/openshift/kubernetes/pull/82921)
* Validation: len is measured in bytes [#80880](https://github.com/openshift/kubernetes/pull/80880)
* Validate container status in e2e pod status checks [#82491](https://github.com/openshift/kubernetes/pull/82491)
* Update etcd client to 3.3.16 [#83735](https://github.com/openshift/kubernetes/pull/83735)
* Use latest node-cache version with stubdomain fix. [#83707](https://github.com/openshift/kubernetes/pull/83707)
* Remove e2e/common package usage in volumemode testsuite [#83609](https://github.com/openshift/kubernetes/pull/83609)
* Move external facing kubelet apis to staging [#83551](https://github.com/openshift/kubernetes/pull/83551)
* Fix init order during starup for dynamic kubelet config [#83184](https://github.com/openshift/kubernetes/pull/83184)
* Remove direct references to prometheus/testutil from kubelet/metrics [#83704](https://github.com/openshift/kubernetes/pull/83704)
* fix static check failures [#81940](https://github.com/openshift/kubernetes/pull/81940)
* Introduce sig-instrumentation aliases in OWNERS_ALISES and simplify OWNERS files [#83718](https://github.com/openshift/kubernetes/pull/83718)
* Improve negotiate media type [#83583](https://github.com/openshift/kubernetes/pull/83583)
* Clean up dynamic client pre-flight check [#82652](https://github.com/openshift/kubernetes/pull/82652)
* kubeadm: remove OutputFlagSpecified from PrintFlags [#83720](https://github.com/openshift/kubernetes/pull/83720)
* Use log functions of core framework on testsuites/topology.go [#83667](https://github.com/openshift/kubernetes/pull/83667)
* Promote VolumeSubpathEnvExpansion feature gate to GA [#82578](https://github.com/openshift/kubernetes/pull/82578)
* kubeadm: preserve order of user specified apiserver authorization-mode [#82616](https://github.com/openshift/kubernetes/pull/82616)
* openstack: Don't Delete LB in Case of Security Group Reconciliation Errors [#82264](https://github.com/openshift/kubernetes/pull/82264)
* Switch admission webhook config manager to v1 [#80883](https://github.com/openshift/kubernetes/pull/80883)
* Remove the no-op plugin [#83686](https://github.com/openshift/kubernetes/pull/83686)
* Introduce testutils.CollectAndCompare for metrics test [#83699](https://github.com/openshift/kubernetes/pull/83699)
* Replace deprecated methods in the logic involved in the construction of gRPC connection to kms-plugin. [#83595](https://github.com/openshift/kubernetes/pull/83595)
* Address `staticcheck` failures for `test/e2e/node/...` [#83681](https://github.com/openshift/kubernetes/pull/83681)
* Structured output for 'kubeadm token list' [#78764](https://github.com/openshift/kubernetes/pull/78764)
* Use consistent short name for receivers [#83615](https://github.com/openshift/kubernetes/pull/83615)
* Remove stale comment about resyncPeriod [#83543](https://github.com/openshift/kubernetes/pull/83543)
* Update test/e2e/storage for new GetReadySchedulableNodes stuff [#83480](https://github.com/openshift/kubernetes/pull/83480)
* Enable strict serializer in kube-proxy [#82927](https://github.com/openshift/kubernetes/pull/82927)
* feat: update scheduling queue with options [#81263](https://github.com/openshift/kubernetes/pull/81263)
* Clean up TODOs [#83447](https://github.com/openshift/kubernetes/pull/83447)
* increase auth cache size [#83643](https://github.com/openshift/kubernetes/pull/83643)
* replace iteration with hashmap in *state_of_world [#82123](https://github.com/openshift/kubernetes/pull/82123)
* Add podCgroup to process kill events to allow for correlation [#83625](https://github.com/openshift/kubernetes/pull/83625)
* Migrate prometheus bucket functionality to metrics stability framework for apiserver [#82630](https://github.com/openshift/kubernetes/pull/82630)
* pkg/apis/policy: Fix "informatio" -> "information" comment typo [#83638](https://github.com/openshift/kubernetes/pull/83638)
* Refactor scheduler metric test with testutils [#83611](https://github.com/openshift/kubernetes/pull/83611)
* Add RepairVolumeHandle to the csi translation struct [#83593](https://github.com/openshift/kubernetes/pull/83593)
* Complete output of docker info [#83556](https://github.com/openshift/kubernetes/pull/83556)
* Log the error return from store.Delete [#83536](https://github.com/openshift/kubernetes/pull/83536)
* Up minimum go version to 1.12.4 [#83596](https://github.com/openshift/kubernetes/pull/83596)
* Added PredicateMetadata and PriorityMetadata to framework's CycleState [#83537](https://github.com/openshift/kubernetes/pull/83537)
* CHANGELOG-1.16.md: add note about etcd client bug with IPv6 addresses [#83641](https://github.com/openshift/kubernetes/pull/83641)
* move util/metrics to component-base [#81797](https://github.com/openshift/kubernetes/pull/81797)
* feat(e2e): refactor hard-coded provision size [#78306](https://github.com/openshift/kubernetes/pull/78306)
* Remove unused method reciever for CSITranslator [#83626](https://github.com/openshift/kubernetes/pull/83626)
* Making iptables probability more granular in kube-proxy. [#83599](https://github.com/openshift/kubernetes/pull/83599)
* feat(scheduler): refactor predicateMetadata into a collection of sub types [#83286](https://github.com/openshift/kubernetes/pull/83286)
* Fix EndpointSliceController service deletion processing [#82996](https://github.com/openshift/kubernetes/pull/82996)
* Fix wrong comments and inaccurate logs in endpointslice_controller [#82865](https://github.com/openshift/kubernetes/pull/82865)
* kubectl: remove usage info from bad flag msg, only print help tip [#82423](https://github.com/openshift/kubernetes/pull/82423)
* Fix Container exit message lost due to FallbackToLogsOnError is not compatible with ContainerCannotRun [#81280](https://github.com/openshift/kubernetes/pull/81280)
* Added alejandrox1 as test/* reviewer [#83616](https://github.com/openshift/kubernetes/pull/83616)
* Move privilege e2e test to common [#83211](https://github.com/openshift/kubernetes/pull/83211)
* Fix log level for runtime error in kubelet.go [#78720](https://github.com/openshift/kubernetes/pull/78720)
* correct the return information in scheduler.go [#78461](https://github.com/openshift/kubernetes/pull/78461)
* Only kill process where killing failed during previous iterations [#83296](https://github.com/openshift/kubernetes/pull/83296)
* cmd: fix spelling mistake [#83605](https://github.com/openshift/kubernetes/pull/83605)
* Eliminate direct references to prometheus from kubelet [#83499](https://github.com/openshift/kubernetes/pull/83499)
* Bump dependency opencontainers/runc@v1.0.0-rc9 [#83527](https://github.com/openshift/kubernetes/pull/83527)
* Expose Shutdown func for EventBroadcaster [#83489](https://github.com/openshift/kubernetes/pull/83489)
* Fix block volume reconstruction [#83451](https://github.com/openshift/kubernetes/pull/83451)
* kubeadm: enable kubelet certificate rotation on primary CP nodes [#83339](https://github.com/openshift/kubernetes/pull/83339)
* Mark startupProbe test as NodeAlphaFeature and fix podClient [#83570](https://github.com/openshift/kubernetes/pull/83570)
* Verify metadata schema when decoding unstructured objects in resource builder [#83552](https://github.com/openshift/kubernetes/pull/83552)
* Refactored e2e-test-framework util.go [#83510](https://github.com/openshift/kubernetes/pull/83510)
* Add known issue to release notes for 1.14.7 [#83414](https://github.com/openshift/kubernetes/pull/83414)
* Removal of kubernetes error dependencies [#83090](https://github.com/openshift/kubernetes/pull/83090)
* feat(scheduler): expose kubernetes client in the framework handle [#82432](https://github.com/openshift/kubernetes/pull/82432)
* Check whether mirror pod is ciritical in managerImpl#evictPod [#83325](https://github.com/openshift/kubernetes/pull/83325)
* Introduce testutil package to support metrics testing [#83299](https://github.com/openshift/kubernetes/pull/83299)
* Initial deprecation of kubeadm v1beta1 apis [#83276](https://github.com/openshift/kubernetes/pull/83276)
* Log error from AddIndexers in NewAttachDetachController [#83597](https://github.com/openshift/kubernetes/pull/83597)
* Fix typo in API server help for shutdown-delay-duration [#83121](https://github.com/openshift/kubernetes/pull/83121)
* remove trailing dots from the parsed searches from host resolv.conf [#83069](https://github.com/openshift/kubernetes/pull/83069)
* Fix misleading kube-proxy logs about IPversion mismatch [#83534](https://github.com/openshift/kubernetes/pull/83534)
* kubeadm: fix wrong default value for the "upgrade node --certificate-renewal" flag [#83528](https://github.com/openshift/kubernetes/pull/83528)
* refactor: v1 event expansion. [#83106](https://github.com/openshift/kubernetes/pull/83106)
* Fix golint failures of pkg/kubelet/status/... [#82968](https://github.com/openshift/kubernetes/pull/82968)
* IP validates if a string is a valid IP address [#83104](https://github.com/openshift/kubernetes/pull/83104)
* Fix volume scheduling error handling [#83540](https://github.com/openshift/kubernetes/pull/83540)
* Show the complete docker info command [#83548](https://github.com/openshift/kubernetes/pull/83548)
* remove the repeat word in documents [#83495](https://github.com/openshift/kubernetes/pull/83495)
* Overriding CA file should override skip TLS and CA data [#83547](https://github.com/openshift/kubernetes/pull/83547)
* spelling error 'doen't' [#78411](https://github.com/openshift/kubernetes/pull/78411)
* fix golint errors for pkg/master [#83297](https://github.com/openshift/kubernetes/pull/83297)
* Requesting Review/Approve privileges for cluster/OWNERS [#83516](https://github.com/openshift/kubernetes/pull/83516)
* [migration phase 1] Implement PodToleratesNodeTaint as a filter plugin [#83460](https://github.com/openshift/kubernetes/pull/83460)
* Remove hyperkube from release artifacts [#83454](https://github.com/openshift/kubernetes/pull/83454)
* Fix golint issues in pkg/util/env [#78357](https://github.com/openshift/kubernetes/pull/78357)
* Switch from admission-control flag to enable-admission-plugins [#83366](https://github.com/openshift/kubernetes/pull/83366)
* Move heap into its own internal package [#83233](https://github.com/openshift/kubernetes/pull/83233)
* [server-side apply] Cap the number of managedFields entries for updates at 10 [#81816](https://github.com/openshift/kubernetes/pull/81816)
* add mtaufen to cluster/gce owners [#83518](https://github.com/openshift/kubernetes/pull/83518)
* Delegate topology hint gen to CPU manager policy [#83043](https://github.com/openshift/kubernetes/pull/83043)
* Ginkgo update + stack fix [#82176](https://github.com/openshift/kubernetes/pull/82176)
* Fix `test/integration/kubelet` staticcheck failures [#81885](https://github.com/openshift/kubernetes/pull/81885)
* refactor tlsConfig creation for secure serving [#83500](https://github.com/openshift/kubernetes/pull/83500)
* check that N job pods succeeded instead of exactly N pods existing a… [#83456](https://github.com/openshift/kubernetes/pull/83456)
* Dedupe logging for PD SetUpAt and added a slow SetVolumeOwnership warning [#83426](https://github.com/openshift/kubernetes/pull/83426)
* iptables.Monitor: don't be fooled by "could not get lock" errors [#83402](https://github.com/openshift/kubernetes/pull/83402)
* Fix help text in kubectl top -h [#83247](https://github.com/openshift/kubernetes/pull/83247)
* Add jpbetz as reviewer of api-machinery code [#82662](https://github.com/openshift/kubernetes/pull/82662)
* Cleanup reflection usage in framework creation [#83506](https://github.com/openshift/kubernetes/pull/83506)
* Modified the name of the Extensions method in the scheduler's framework. [#83502](https://github.com/openshift/kubernetes/pull/83502)
* remove Get/Set node condition dependency for the ccm controllers [#83501](https://github.com/openshift/kubernetes/pull/83501)
* Update nodelocaldns yaml to use image with custom Stubdomains support [#82845](https://github.com/openshift/kubernetes/pull/82845)
* Kubeadm: allow users to use 127.0.0.1 as advertise address [#83475](https://github.com/openshift/kubernetes/pull/83475)
* Avoid unnecessary identifier computations [#83452](https://github.com/openshift/kubernetes/pull/83452)
* feat(scheduler): scale the extender output in generic scheduler [#83490](https://github.com/openshift/kubernetes/pull/83490)
* Add klueska as reviewer for CPUManager and devicemanager [#83468](https://github.com/openshift/kubernetes/pull/83468)
* feat(scheduler): rename PluginContext to CycleState [#83430](https://github.com/openshift/kubernetes/pull/83430)
* Check the return value from store.Update [#83420](https://github.com/openshift/kubernetes/pull/83420)
* Enable strict serializer in kube-scheduler [#83030](https://github.com/openshift/kubernetes/pull/83030)
* Return proper error message when BindPodVolumes fails [#83343](https://github.com/openshift/kubernetes/pull/83343)
* kubeadm: add 1.18 entry in the etcd map [#83314](https://github.com/openshift/kubernetes/pull/83314)
* add ability to authenticators for dynamic update of certs for delegated authn [#82371](https://github.com/openshift/kubernetes/pull/82371)
* fixed typos in kubectl book [#81457](https://github.com/openshift/kubernetes/pull/81457)
* Use pod + nsenter instead of SSH in block volume tests [#83108](https://github.com/openshift/kubernetes/pull/83108)
* Prune should respect namespace option [#83084](https://github.com/openshift/kubernetes/pull/83084)
* Fix shellcheck failures of cluster/addons/addon-manager/kube-addons.sh [#82237](https://github.com/openshift/kubernetes/pull/82237)
* fixed a typo in kubectl book [#81420](https://github.com/openshift/kubernetes/pull/81420)
* removed duplicated kubectl get [#79852](https://github.com/openshift/kubernetes/pull/79852)
* feat(scheduler): use reflect to reduce the similar pattern [#83243](https://github.com/openshift/kubernetes/pull/83243)
* removed extra hyphen in kubectl book [#79844](https://github.com/openshift/kubernetes/pull/79844)
* Refactor scheduler.New so that all framework-related parameters are options [#83418](https://github.com/openshift/kubernetes/pull/83418)
* add ability to pre-configure poststarthooks for apiservers [#82077](https://github.com/openshift/kubernetes/pull/82077)
* Ability to set up additional, bigger nodes during tests [#83352](https://github.com/openshift/kubernetes/pull/83352)
* Reset default namespace deletion timeout to 5 minutes [#83432](https://github.com/openshift/kubernetes/pull/83432)
* Remove runtime.VersionedObject from universal apimachinery [#70734](https://github.com/openshift/kubernetes/pull/70734)
* fix metrics-server rbac [#83405](https://github.com/openshift/kubernetes/pull/83405)
* Move PodConditionUpdater to Scheduler [#83342](https://github.com/openshift/kubernetes/pull/83342)
* Only detecting stale connections for UDP ports in kube-proxy [#83208](https://github.com/openshift/kubernetes/pull/83208)
* Make resourceVersion parameter semantics consistent across all storage.Interface implementations [#72170](https://github.com/openshift/kubernetes/pull/72170)
* limit yaml/json decode size [#83261](https://github.com/openshift/kubernetes/pull/83261)
* Fix sig-node test by adding back the numNodes [#83376](https://github.com/openshift/kubernetes/pull/83376)
* Upgrade Calico to 3.8.2 [#83258](https://github.com/openshift/kubernetes/pull/83258)
* Remove block volume capability from GCE PD CSI Driver because not supported in v0.5.2 [#83409](https://github.com/openshift/kubernetes/pull/83409)
* Bump version of event-exporter and prometheus-to-sd. [#83396](https://github.com/openshift/kubernetes/pull/83396)
* Kubeadm DualStack Support for List of Service IPs [#82473](https://github.com/openshift/kubernetes/pull/82473)
* Adding pods to DeletePods and MarkPodsReady methods parameters [#83320](https://github.com/openshift/kubernetes/pull/83320)
* feat(scheduler): remove MaxPriority in the scheduler api [#83386](https://github.com/openshift/kubernetes/pull/83386)
* Bump nfs provisioner version to v2.2.2 [#83383](https://github.com/openshift/kubernetes/pull/83383)
* Revert "Revert "Revert "[Re-Apply][Distroless] Convert the GCE manifests for master containers.""" [#83390](https://github.com/openshift/kubernetes/pull/83390)
* fix wrong test in generic-resources.sh [#83355](https://github.com/openshift/kubernetes/pull/83355)
* Run block tests for gce-pd csi driver. Improve skip block test function name [#83381](https://github.com/openshift/kubernetes/pull/83381)
* Revert "Bugfix: remove PV dir when umount raw block device" [#83379](https://github.com/openshift/kubernetes/pull/83379)
* Add link to release notes documentation to PR template [#83049](https://github.com/openshift/kubernetes/pull/83049)
* kubeadm: add test to detect panics when given certain feature gates [#83369](https://github.com/openshift/kubernetes/pull/83369)
* reuse Equal [#83109](https://github.com/openshift/kubernetes/pull/83109)
* .github: add guineveresaenger and mrbobbytables as reviewers [#83370](https://github.com/openshift/kubernetes/pull/83370)
* Use pod + nsenter instead of SSH in mount propagation tests [#82424](https://github.com/openshift/kubernetes/pull/82424)
* A consistent interface for plugin extended functionality [#83365](https://github.com/openshift/kubernetes/pull/83365)
* Don't leak a go routine on panic [#83333](https://github.com/openshift/kubernetes/pull/83333)
* Refactor scheduler extender-related API fields [#83262](https://github.com/openshift/kubernetes/pull/83262)
* Fix staticcheck failures in `test/utils/...` [#81904](https://github.com/openshift/kubernetes/pull/81904)
* Explicitly handle returned error values in admission metrics_test [#82105](https://github.com/openshift/kubernetes/pull/82105)
* Cache serializations across watchers [#81914](https://github.com/openshift/kubernetes/pull/81914)
* Update symlink warning [#83350](https://github.com/openshift/kubernetes/pull/83350)
* Improve error message for projected tokens when API is not enabled [#83192](https://github.com/openshift/kubernetes/pull/83192)
* explain why finalizers are not processed in order [#83110](https://github.com/openshift/kubernetes/pull/83110)
* Use imageutils instead of hardcoded image paths [#81093](https://github.com/openshift/kubernetes/pull/81093)
* Update e2e testing nodePort service listening on same port but different protocols [#81419](https://github.com/openshift/kubernetes/pull/81419)
* Revert "Revert "[Re-Apply][Distroless] Convert the GCE manifests for master containers."" [#78466](https://github.com/openshift/kubernetes/pull/78466)
* e2e: on aws, tag volumes we want the cluster to mount [#83301](https://github.com/openshift/kubernetes/pull/83301)
* use log functions of core framework [#83148](https://github.com/openshift/kubernetes/pull/83148)
* Fixed issue with duplicate containerPorts in different address families [#82374](https://github.com/openshift/kubernetes/pull/82374)
* Allow ipv6 urls in GetPortURL() [#83331](https://github.com/openshift/kubernetes/pull/83331)
* test/e2e: Delete test namespaces asynchronously [#82439](https://github.com/openshift/kubernetes/pull/82439)
* Add nil checks for Azure CSI translation [#83249](https://github.com/openshift/kubernetes/pull/83249)
* Use $STACKDRIVER_ENDPOINT to set exporter sd endpoint [#83205](https://github.com/openshift/kubernetes/pull/83205)
* Merge attach and detach common func [#80420](https://github.com/openshift/kubernetes/pull/80420)
* Remove deprecated scalability tests [#83322](https://github.com/openshift/kubernetes/pull/83322)
* Remove direct reference to prometheus from kubelet [#83279](https://github.com/openshift/kubernetes/pull/83279)
* Cleaned up skip* functions from framework/util.go [#83219](https://github.com/openshift/kubernetes/pull/83219)
* Mapping Layer - 2. Convert predicates/priorities configurations to a framework plugin one. [#83099](https://github.com/openshift/kubernetes/pull/83099)
* kubeadm: bump versions for v1.17 cycle [#83312](https://github.com/openshift/kubernetes/pull/83312)
* Adding fakeGetPodsAssignedToNode to node lifecycle controller tests [#83248](https://github.com/openshift/kubernetes/pull/83248)
* complete pkg/scheduler/util unit test [#82368](https://github.com/openshift/kubernetes/pull/82368)
* Fix host reuse for e2e tests [#83284](https://github.com/openshift/kubernetes/pull/83284)
* using short flags instead of validate [#83117](https://github.com/openshift/kubernetes/pull/83117)
* Refactor CSI Translation Library into a struct that is injected into various components to simplify unit testing [#82683](https://github.com/openshift/kubernetes/pull/82683)
* scheduler: change PredicateMetadata.AddPod to use *v1.Node insead of rich *schedulernodeinfo.NodeInfo [#83234](https://github.com/openshift/kubernetes/pull/83234)
* Fix aggressive VM calls for Azure VMSS [#83102](https://github.com/openshift/kubernetes/pull/83102)
* Remove direct reference to label [#83220](https://github.com/openshift/kubernetes/pull/83220)
* Remove direct reference to prometheus from openstack [#83269](https://github.com/openshift/kubernetes/pull/83269)
* Fix #80571: Update service controller to prevent orphaned public IP addresses [#82890](https://github.com/openshift/kubernetes/pull/82890)
* E2E: Add missing Bootstrap() call [#83255](https://github.com/openshift/kubernetes/pull/83255)
* using online file instead to fix NUMA nodes init [#83196](https://github.com/openshift/kubernetes/pull/83196)
* Always set content-type & nosniff [#72535](https://github.com/openshift/kubernetes/pull/72535)
* Apply currently parses the yaml object 3 times, please remove 2 [#83131](https://github.com/openshift/kubernetes/pull/83131)
* Deflake TestWatchBasedManager [#83250](https://github.com/openshift/kubernetes/pull/83250)
* Remove direct reference to prometheus.Label [#83223](https://github.com/openshift/kubernetes/pull/83223)
* replace bytes.Compare() with bytes.Equal() [#83071](https://github.com/openshift/kubernetes/pull/83071)
* scheduler:  add error handling for *podSpreadCache.removePod [#83231](https://github.com/openshift/kubernetes/pull/83231)
* Fix typos in KeyUsage constant names [#82511](https://github.com/openshift/kubernetes/pull/82511)
* Bugfix: remove PV dir when umount raw block device [#79784](https://github.com/openshift/kubernetes/pull/79784)
* Fix informer-gen to honor nonNamespaced tag [#80458](https://github.com/openshift/kubernetes/pull/80458)
* Use log functions of core framework on [r-u] [#81685](https://github.com/openshift/kubernetes/pull/81685)
* Add LinuxOnly tag to e2e testing session affinity [#82171](https://github.com/openshift/kubernetes/pull/82171)
* add logicalhan to reviewers for api-machinery directories [#82033](https://github.com/openshift/kubernetes/pull/82033)
* Update to use go1.12.10 [#83139](https://github.com/openshift/kubernetes/pull/83139)
* Update crictl to v1.16 [#82856](https://github.com/openshift/kubernetes/pull/82856)
* Improve fieldmanager tests and benchmarks [#82847](https://github.com/openshift/kubernetes/pull/82847)
* use vmss instance view expansion and azure-sdk-for-go v33.1.0 [#82496](https://github.com/openshift/kubernetes/pull/82496)
* Promote DNS e2e verifying PQDN resolution for cluster [#74977](https://github.com/openshift/kubernetes/pull/74977)
* add a known issue in 1.16 for kube-scheduler [#83201](https://github.com/openshift/kubernetes/pull/83201)
* add test to show generic pod count counts all pods [#83190](https://github.com/openshift/kubernetes/pull/83190)
* fix auth import statement in client-go [#82764](https://github.com/openshift/kubernetes/pull/82764)
* Promote lease API test to Conformance [#82632](https://github.com/openshift/kubernetes/pull/82632)
* Add e2e test for kubectl describe cronjob [#79814](https://github.com/openshift/kubernetes/pull/79814)
* feat(scheduler): consolidate ScoreWithNormalizePlugin into ScorePlugin [#83042](https://github.com/openshift/kubernetes/pull/83042)
* aws: sort addresses of multiple interfaces correctly [#80747](https://github.com/openshift/kubernetes/pull/80747)
* fix typo in pkg [#81916](https://github.com/openshift/kubernetes/pull/81916)
* migrate leader election to lease API [#81030](https://github.com/openshift/kubernetes/pull/81030)
* Bump addon-resizer to 1.8.6 [#83179](https://github.com/openshift/kubernetes/pull/83179)
* NodeLifecycleContorller - eviction processing refactor [#82884](https://github.com/openshift/kubernetes/pull/82884)
* Remove direct reference to prometheus.Label from metrics API. [#83159](https://github.com/openshift/kubernetes/pull/83159)
* Cleanup staticcheck issues for apiextension [#81989](https://github.com/openshift/kubernetes/pull/81989)
* Delete the redundant define test [#78563](https://github.com/openshift/kubernetes/pull/78563)
* Defer the removal of labelAlphaNodeRoleExcludeBalancer to 1.18 [#82855](https://github.com/openshift/kubernetes/pull/82855)
* Cleanup DumpAllNamespaceInfo() in e2e test [#82106](https://github.com/openshift/kubernetes/pull/82106)
* Mapping Layer - 1. A mapping from predicates/priorities to plugin configuration [#83080](https://github.com/openshift/kubernetes/pull/83080)
* Update go mod hcsshim version to fix the kube-proxy issue cannot access service by self nodeip:port  on windows [#83027](https://github.com/openshift/kubernetes/pull/83027)
* Handle stability level default better [#82957](https://github.com/openshift/kubernetes/pull/82957)
* remove apiserver loopback client QPS limit [#80465](https://github.com/openshift/kubernetes/pull/80465)
* kubeadm: update OWNERS for 1.16 [#83116](https://github.com/openshift/kubernetes/pull/83116)
* bump k8s.io/utils to pickup ipallocator changes [#83113](https://github.com/openshift/kubernetes/pull/83113)
* Stop building the kubernetes-test mondo tarball [#83093](https://github.com/openshift/kubernetes/pull/83093)
* Adding owners for EndpointSlice controller [#83079](https://github.com/openshift/kubernetes/pull/83079)
* Remove unnecessary traversal of pod.Status.Conditions [#83075](https://github.com/openshift/kubernetes/pull/83075)
* Adding lifecycle to RC, RCSet, Deployment, and Job testutils [#83067](https://github.com/openshift/kubernetes/pull/83067)
* fix the comments of default daemonset update strategy [#83047](https://github.com/openshift/kubernetes/pull/83047)
* Updating EndpointSliceCache sort function to be significantly faster. [#83035](https://github.com/openshift/kubernetes/pull/83035)
* Optimize GetControllerOf method and add a benchmark for it [#83022](https://github.com/openshift/kubernetes/pull/83022)
* Remove unused func GetPersistentVolumeClaimVolumeMode [#82994](https://github.com/openshift/kubernetes/pull/82994)
* Properly close the file in makeFile [#82991](https://github.com/openshift/kubernetes/pull/82991)
* Remove unnecessary sorting for highestSupportedVersion [#82972](https://github.com/openshift/kubernetes/pull/82972)
* Check error return from WaitForCacheSync [#82964](https://github.com/openshift/kubernetes/pull/82964)
* fix docker_build_opts bound variable [#82963](https://github.com/openshift/kubernetes/pull/82963)
* fix typos  in /test/e2e_node [#78418](https://github.com/openshift/kubernetes/pull/78418)
* Corrected the pod reporting and messages [#82932](https://github.com/openshift/kubernetes/pull/82932)
* simplify regexp with raw string [#82928](https://github.com/openshift/kubernetes/pull/82928)
* An interface that allows pre-filter plugins to update their pre-calculated status [#82912](https://github.com/openshift/kubernetes/pull/82912)
* Allow disruptive conformance tests and tag 2 as such [#82664](https://github.com/openshift/kubernetes/pull/82664)
* Fix bug The statefulset have duplicate revision after resource was up… [#82643](https://github.com/openshift/kubernetes/pull/82643)
* Move GetPodPriority from /scheduler/util to /api/pod [#82465](https://github.com/openshift/kubernetes/pull/82465)
* informer-gen: allow package names containing dots [#82410](https://github.com/openshift/kubernetes/pull/82410)
* Add authentication overall latency metrics [#82409](https://github.com/openshift/kubernetes/pull/82409)
* Add support for type checking Unstructured event objects via GVK to client-go's reflector [#82388](https://github.com/openshift/kubernetes/pull/82388)
* Harden kube-dns to run with less privileges. [#82347](https://github.com/openshift/kubernetes/pull/82347)
* migrate from framework.GetReadySchedulableNodesOrDie to e2enode.GetReadySchedulableNodes [#82291](https://github.com/openshift/kubernetes/pull/82291)
* Made some grammar edits to the README [#82157](https://github.com/openshift/kubernetes/pull/82157)
* fix: adding padding the encoded docker auth field [#82148](https://github.com/openshift/kubernetes/pull/82148)
* Update ConfigMap test [#82037](https://github.com/openshift/kubernetes/pull/82037)
* Propagate context to remote authorize/authenticate webhook calls [#83064](https://github.com/openshift/kubernetes/pull/83064)
* Fix the cluster role for typha horizontal scaler. [#83029](https://github.com/openshift/kubernetes/pull/83029)
* Clean up code about scheduler algorithm [#82990](https://github.com/openshift/kubernetes/pull/82990)
* fix(pkg): delete unused var or const [#82909](https://github.com/openshift/kubernetes/pull/82909)
* to use existing validating function [#83060](https://github.com/openshift/kubernetes/pull/83060)
* fix(test): delete unused unused var or const [#82910](https://github.com/openshift/kubernetes/pull/82910)
* hack/local-up-cluster.sh: ability to configure auth webhooks [#83008](https://github.com/openshift/kubernetes/pull/83008)
* cleanup unused function LookForStringInFile [#82998](https://github.com/openshift/kubernetes/pull/82998)
* Remove error check which is always false in RBDUtil#cleanOldRBDFile [#82976](https://github.com/openshift/kubernetes/pull/82976)
* use log func in test/e2e/apimachinery [#82717](https://github.com/openshift/kubernetes/pull/82717)
* cleanup test code in upgrades and autoscaling pkg [#81978](https://github.com/openshift/kubernetes/pull/81978)
* Use scheduler.New() Instead of factory.NewConfigFactory() in Integration Test scheduler_test.go [#81911](https://github.com/openshift/kubernetes/pull/81911)
* fix: remove reportingInstance field in eventKey. [#83018](https://github.com/openshift/kubernetes/pull/83018)
* Use log functions of core framework on test/e2e/autoscaling [#83010](https://github.com/openshift/kubernetes/pull/83010)
* Rename package socketmask to bitmask. [#83033](https://github.com/openshift/kubernetes/pull/83033)
* Add KUBE_COVER_REPORT_DIR to specify coverage output dir. [#83031](https://github.com/openshift/kubernetes/pull/83031)
* Use log functions of core framework on test/e2e/upgrades [#83013](https://github.com/openshift/kubernetes/pull/83013)
* Fix staticcheck failures for pkg/scheduler/... [#81744](https://github.com/openshift/kubernetes/pull/81744)
* Wrap promethues.Labels to stability framework. [#83019](https://github.com/openshift/kubernetes/pull/83019)
* Use ipv4 in wincat port forward [#83036](https://github.com/openshift/kubernetes/pull/83036)
* Come out of loop when RPC_STAGE_UNSTAGE_VOLUME is found [#82974](https://github.com/openshift/kubernetes/pull/82974)
* make namespace-lifecycle controller more responsive [#82802](https://github.com/openshift/kubernetes/pull/82802)
* auth/cloud-platform is a superset of devstorage. [#82801](https://github.com/openshift/kubernetes/pull/82801)
* pkg/kubelet: fix uint64 overflow when elapsed UsageCoreNanoSeconds exceeds 18446744073 [#82300](https://github.com/openshift/kubernetes/pull/82300)
* Copy PrettyPrintJSON to core framework [#82108](https://github.com/openshift/kubernetes/pull/82108)
* Add known issue for informer-gen for packages with dots [#83023](https://github.com/openshift/kubernetes/pull/83023)
* Revert "Updated COS version to M77" [#83021](https://github.com/openshift/kubernetes/pull/83021)
* Updated ContextData and PluginContext with Clone methods. [#82951](https://github.com/openshift/kubernetes/pull/82951)
* Add version logging to kubemark [#82629](https://github.com/openshift/kubernetes/pull/82629)
* feat: bump prometheus common to v0.1.0 [#79261](https://github.com/openshift/kubernetes/pull/79261)
* Fix pre pull of images in DiskPressure tests [#82654](https://github.com/openshift/kubernetes/pull/82654)
* Allow relaxing deleted pods checking in RC runner [#82029](https://github.com/openshift/kubernetes/pull/82029)
* Bump k8s.io/klog to v1.0.0 [#83014](https://github.com/openshift/kubernetes/pull/83014)
* Minor cleanup of jsonFallbackEncoder [#82984](https://github.com/openshift/kubernetes/pull/82984)
* Bump metrics-server version to v0.3.5 [#83015](https://github.com/openshift/kubernetes/pull/83015)
* Replace hyperkube with apiserver for binary path guess [#82947](https://github.com/openshift/kubernetes/pull/82947)
* Bind kubernetes dashboard containers to linux nodes to avoid Windows scheduling [#82975](https://github.com/openshift/kubernetes/pull/82975)
* fix map assignment to entry in nil map,when use --feature-gates in kubeadm [#82929](https://github.com/openshift/kubernetes/pull/82929)
* Fix possible fd leak and closing of dirs in doSafeMakeDir [#82873](https://github.com/openshift/kubernetes/pull/82873)
* Remove some unused codes in stateful_set_utils.go [#79129](https://github.com/openshift/kubernetes/pull/79129)
* Fixes static check failures in test/e2e_node/* [#81932](https://github.com/openshift/kubernetes/pull/81932)
* Add support for preemptible instances in node-e2e [#81512](https://github.com/openshift/kubernetes/pull/81512)
* storage E2E: test drivers must have DNS-1123 names [#82955](https://github.com/openshift/kubernetes/pull/82955)
* Use framework.ExpectNotEqual() [#82922](https://github.com/openshift/kubernetes/pull/82922)
* add volume topology e2es [#81819](https://github.com/openshift/kubernetes/pull/81819)
* Fixes static check failures in pkg/security/podsecuritypolicy/sysctl [#81933](https://github.com/openshift/kubernetes/pull/81933)
* Add benchmarks for yaml marshaling and unmarshaling [#78688](https://github.com/openshift/kubernetes/pull/78688)
* Use framework.ExpectNotEqual() [#82908](https://github.com/openshift/kubernetes/pull/82908)
* Refactor the scheduler's configuration logic. [#82896](https://github.com/openshift/kubernetes/pull/82896)
* Improve Scheduler Compatibility Test [#82735](https://github.com/openshift/kubernetes/pull/82735)
* fix shellcheck in cluster/gce/config-common.sh [#82357](https://github.com/openshift/kubernetes/pull/82357)
* Fix kubectl panic when handling invalid error. [#82914](https://github.com/openshift/kubernetes/pull/82914)
* Correct the error variable for releasing CIDR [#82797](https://github.com/openshift/kubernetes/pull/82797)
* Do not query the cloud if dynamic PV has all the labels [#82830](https://github.com/openshift/kubernetes/pull/82830)
* Move PodPriorityResolution e2e to integration [#80824](https://github.com/openshift/kubernetes/pull/80824)
* Fix golint failures of pkg/kubelet/qos [#78110](https://github.com/openshift/kubernetes/pull/78110)
* docs: add comments for action. [#82941](https://github.com/openshift/kubernetes/pull/82941)
* Fix reinvocation test flake by scoping webhooks and markers [#82807](https://github.com/openshift/kubernetes/pull/82807)
* WithAuthentication should wrap WithMaxInFlightLimit [#82206](https://github.com/openshift/kubernetes/pull/82206)
* add conditions for remaining object totals during ns termination [#82189](https://github.com/openshift/kubernetes/pull/82189)
* Move flag.Parse() from init() to TestMain() [#82742](https://github.com/openshift/kubernetes/pull/82742)
* update spelling mistakes [#82363](https://github.com/openshift/kubernetes/pull/82363)
* delete extra comma [#82164](https://github.com/openshift/kubernetes/pull/82164)
* Break out of loop when NodeHostName is found [#82848](https://github.com/openshift/kubernetes/pull/82848)
* No timeout when Kubelet Calling cni plugin [#71653](https://github.com/openshift/kubernetes/pull/71653)
* TokenCleaner#evalSecret should enqueue the key [#82887](https://github.com/openshift/kubernetes/pull/82887)
* Fixed a scheduler panic when using PodAffinity (k8s version >= 1.15) [#82841](https://github.com/openshift/kubernetes/pull/82841)
* Check the error return from AddPlugin [#82594](https://github.com/openshift/kubernetes/pull/82594)
* Clean up redundant post-finalizer deletions [#82882](https://github.com/openshift/kubernetes/pull/82882)
* Update 1.16 CHANGELOG with introduction of feature EvenPodsSpread [#82853](https://github.com/openshift/kubernetes/pull/82853)
* Fix typo in v1.16 CHANGELOG [#82867](https://github.com/openshift/kubernetes/pull/82867)
* delete unused var [#82858](https://github.com/openshift/kubernetes/pull/82858)
* Modified the Filter interface to pass in nodeinfo instead of node name. [#82842](https://github.com/openshift/kubernetes/pull/82842)
* Updated COS version to M77 [#82766](https://github.com/openshift/kubernetes/pull/82766)
* del unuse var in pkg/controller [#82740](https://github.com/openshift/kubernetes/pull/82740)
* Fix typo in kubectl docs [#81917](https://github.com/openshift/kubernetes/pull/81917)
* Add a couple simple conversions [#82832](https://github.com/openshift/kubernetes/pull/82832)
* Add .bazelversion file [#82700](https://github.com/openshift/kubernetes/pull/82700)
* removal of klog from validaters [#81818](https://github.com/openshift/kubernetes/pull/81818)
* Return error when failed to get storage class [#82810](https://github.com/openshift/kubernetes/pull/82810)
* fix compiling failure: execvp: /bin/bash: Argument list too long [#82777](https://github.com/openshift/kubernetes/pull/82777)
* replace $IMAGE_NAME with ${IMAGE_NAME} [#82725](https://github.com/openshift/kubernetes/pull/82725)
* add-err-handling-in-images/etcd/migrate [#82721](https://github.com/openshift/kubernetes/pull/82721)
* fix kubectl run --generator=xxx bug [#82726](https://github.com/openshift/kubernetes/pull/82726)
* replace 200 with http.StatusOK [#82644](https://github.com/openshift/kubernetes/pull/82644)
* fix regex for go file, make it more accurate [#82273](https://github.com/openshift/kubernetes/pull/82273)
* Updates to resolve shellcheck issues in hack/lib/test.sh [#81882](https://github.com/openshift/kubernetes/pull/81882)
* Only set ipv4/ipv6 routes when there is corresponding CIDR. [#82800](https://github.com/openshift/kubernetes/pull/82800)
* Update API compatibility data for v1.16.0 [#82839](https://github.com/openshift/kubernetes/pull/82839)
* Upgrade stackdriver-logging-agent image to 1.6.17 to fix CVEs. [#82624](https://github.com/openshift/kubernetes/pull/82624)
* exclude kms provider from health check [#82840](https://github.com/openshift/kubernetes/pull/82840)
* Convert TaintBasedEvictions e2e to integration test [#81856](https://github.com/openshift/kubernetes/pull/81856)
* fix emptyDir volumes pod should support shared volumes between containers [#82812](https://github.com/openshift/kubernetes/pull/82812)
* Drop hyperkube use from local-up-cluster.sh [#81268](https://github.com/openshift/kubernetes/pull/81268)
* Match label and fields selectors in ComponentStatus List API [#78438](https://github.com/openshift/kubernetes/pull/78438)
* Refactor and clean up e2e framework utils [#76411](https://github.com/openshift/kubernetes/pull/76411)
* feat(scheduler): use api server to watch scheduled pods [#82338](https://github.com/openshift/kubernetes/pull/82338)
* Fix Errorf arguments in tests [#82790](https://github.com/openshift/kubernetes/pull/82790)
* dockershim/network: fix panic for cni plugins in IPv4/IPv6 dual-stack mode [#82508](https://github.com/openshift/kubernetes/pull/82508)
* Split field manager with interface [#82553](https://github.com/openshift/kubernetes/pull/82553)
* Bump github.com/heketi/heketi to c2e2a4ab7ab9 [#82805](https://github.com/openshift/kubernetes/pull/82805)
* dump namespace object in e2e when it doesn't get deleted [#82803](https://github.com/openshift/kubernetes/pull/82803)
* remove pkg/version and some of redundant copies of it [#82096](https://github.com/openshift/kubernetes/pull/82096)
* fix pod infra containers oom-score-adj testing [#82772](https://github.com/openshift/kubernetes/pull/82772)
* drop firewalld monitoring, add better iptables monitor [#81517](https://github.com/openshift/kubernetes/pull/81517)
* Fix description of diff flags [#78197](https://github.com/openshift/kubernetes/pull/78197)
* Remove unnecessary (inefficient) manual conversions [#82780](https://github.com/openshift/kubernetes/pull/82780)
* Remove Unused Variables in scheduler api types [#82732](https://github.com/openshift/kubernetes/pull/82732)
* feat: cleanup several GA feature flags which should be removed in 1.17 [#82472](https://github.com/openshift/kubernetes/pull/82472)
* Azure cloud operation count metrics for azure cloud provider [#82574](https://github.com/openshift/kubernetes/pull/82574)
* Cleanup staticcheck for package cache [#82325](https://github.com/openshift/kubernetes/pull/82325)
* rm unnecessary `return` at the end of function [#82749](https://github.com/openshift/kubernetes/pull/82749)
* fix error package name [#82738](https://github.com/openshift/kubernetes/pull/82738)
* Migrate prometheus bucket functionality to kube-metrics for proxy metrics [#82736](https://github.com/openshift/kubernetes/pull/82736)
* Fix ipv6 ip allocation method for standard lb [#82597](https://github.com/openshift/kubernetes/pull/82597)
* Migrate prometheus bucket functionality for metrics stability framework [#82745](https://github.com/openshift/kubernetes/pull/82745)
* Adjust nginx lb timeout depending on the cluster size in tests [#82696](https://github.com/openshift/kubernetes/pull/82696)
* Allow upgrade test to run on all cloudproviders [#82760](https://github.com/openshift/kubernetes/pull/82760)
* validations: for negative PVC storage size don't report "must be >= 0" [#82759](https://github.com/openshift/kubernetes/pull/82759)
* reference cherry pick process in hack script [#82758](https://github.com/openshift/kubernetes/pull/82758)
* Fix shellcheck failure in gce/gci/flexvolume_node_setup.sh [#81061](https://github.com/openshift/kubernetes/pull/81061)
* Check the length of recorder.invocations [#82733](https://github.com/openshift/kubernetes/pull/82733)
* Allow v1 review versions in 1.17+ [#82707](https://github.com/openshift/kubernetes/pull/82707)
* optimize gc_controller.gcTerminated [#82356](https://github.com/openshift/kubernetes/pull/82356)
* Migrate prometheus bucket functionality to metrics stability framework for scheduler [#82741](https://github.com/openshift/kubernetes/pull/82741)
* expose and use an AddHealthChecks method directly on config [#82713](https://github.com/openshift/kubernetes/pull/82713)
* refactor: replace all calls to os.Exit() / CheckErr(). [#82243](https://github.com/openshift/kubernetes/pull/82243)
* fix static check failures in staging  pkg [#81944](https://github.com/openshift/kubernetes/pull/81944)
* add or fix some errors return statements and ineffassign [#82571](https://github.com/openshift/kubernetes/pull/82571)
* Migrate prometheus bucket functionality to kube-metrics for winkernel [#82737](https://github.com/openshift/kubernetes/pull/82737)
* use log funcs of core framework in the auth, kubectl and windows pkg [#81987](https://github.com/openshift/kubernetes/pull/81987)
* fix: azure disk detach failure if node not exists [#82640](https://github.com/openshift/kubernetes/pull/82640)
* use log func in test/e2e/network [#82691](https://github.com/openshift/kubernetes/pull/82691)
* apiextensions: add integration test for not publishing non-structural CRDs [#82661](https://github.com/openshift/kubernetes/pull/82661)
* Resolved cycle dependency in framework plugins registration [#82704](https://github.com/openshift/kubernetes/pull/82704)
* Skip e2e tests that require node independent volume for the drivers that don't support node independent volumes [#82678](https://github.com/openshift/kubernetes/pull/82678)
* Migrate prometheus bucket functionality to kube-metrics for volume [#82626](https://github.com/openshift/kubernetes/pull/82626)
* Add note on the role of BenchmarkSimpleCache [#82471](https://github.com/openshift/kubernetes/pull/82471)
* Verify the response audience matches one of apiAuds [#82208](https://github.com/openshift/kubernetes/pull/82208)
* Fix TestBlockMapperMapDeviceNotSupportAttach informer sync race [#82697](https://github.com/openshift/kubernetes/pull/82697)
* fix kubelet status http calls with truncation [#82669](https://github.com/openshift/kubernetes/pull/82669)
* Update golang scientific notation using hack/update-gofmt.sh [#82684](https://github.com/openshift/kubernetes/pull/82684)
* Fix static failure from package: staging/src/k8s.io/kube-aggregator [#81703](https://github.com/openshift/kubernetes/pull/81703)
* Modify the log of kube-proxy [#82521](https://github.com/openshift/kubernetes/pull/82521)
* Ensure conversions are registered for metainternalversion codecs [#82585](https://github.com/openshift/kubernetes/pull/82585)
* Migrate scheduler api types to sized integers [#82283](https://github.com/openshift/kubernetes/pull/82283)
* Skip publishing OpenAPI for nonstructural schemas [#82653](https://github.com/openshift/kubernetes/pull/82653)
* Fix iptables version detection code to handle RHEL 7 correctly [#82602](https://github.com/openshift/kubernetes/pull/82602)
* Take the context as the first argument of Schedule [#82119](https://github.com/openshift/kubernetes/pull/82119)
* Add johnbelamaric as conformance approver [#82600](https://github.com/openshift/kubernetes/pull/82600)
* Make API constants constant [#82599](https://github.com/openshift/kubernetes/pull/82599)
* Nominate alculquicondor to scheduler reviewers [#82500](https://github.com/openshift/kubernetes/pull/82500)
* use log functions of core framework [#81997](https://github.com/openshift/kubernetes/pull/81997)
* use log funcs of core framework in the scalability and cloud package [#81985](https://github.com/openshift/kubernetes/pull/81985)
* Adding lock to node data map [#82489](https://github.com/openshift/kubernetes/pull/82489)
* replace time.Now().Sub with time.Since [#82266](https://github.com/openshift/kubernetes/pull/82266)
* Propagate and honor http.ErrAbortHandler [#82588](https://github.com/openshift/kubernetes/pull/82588)
* Add wrapper for prometheus buckets functionality [#82583](https://github.com/openshift/kubernetes/pull/82583)
* Expose etcd metric port in tests [#82579](https://github.com/openshift/kubernetes/pull/82579)
* e2e: fix pause command in ProxyMode func [#82576](https://github.com/openshift/kubernetes/pull/82576)
* MOD:fix spelling errors [#82569](https://github.com/openshift/kubernetes/pull/82569)
* Refactor FieldManager tests to make them simpler [#82554](https://github.com/openshift/kubernetes/pull/82554)
* Fix EvaluatedNodes in ScheduleResult [#82156](https://github.com/openshift/kubernetes/pull/82156)
* Remove duplicate logging [#79758](https://github.com/openshift/kubernetes/pull/79758)
* Remove alpha message [#82548](https://github.com/openshift/kubernetes/pull/82548)
* keep the status error from envelope service [#82543](https://github.com/openshift/kubernetes/pull/82543)
* adding yastij as a reviewer for the runtimeclass admission controller [#82541](https://github.com/openshift/kubernetes/pull/82541)
* 'imagetag' -> 'image' in edit set command examples [#82535](https://github.com/openshift/kubernetes/pull/82535)
* Log all executed iscsiadm commands [#82528](https://github.com/openshift/kubernetes/pull/82528)
* Exec probes should not be unbounded [#82514](https://github.com/openshift/kubernetes/pull/82514)
* add line break in kubeadm upgrade logging message [#82513](https://github.com/openshift/kubernetes/pull/82513)
* Remove me from OWNERS for GCI [#82499](https://github.com/openshift/kubernetes/pull/82499)
* Avoid encoding from competing goroutines [#82498](https://github.com/openshift/kubernetes/pull/82498)
* Userinfo conversion [#82490](https://github.com/openshift/kubernetes/pull/82490)
* Fix ineffassign [#82486](https://github.com/openshift/kubernetes/pull/82486)
* log-dump: make logging clearer [#82485](https://github.com/openshift/kubernetes/pull/82485)
* The correct PluginConfig.Args is not passed to the corresponding PluginFactory in kube-scheduler when multiple PluginConfig items are defined [#82483](https://github.com/openshift/kubernetes/pull/82483)
* e2e_kubeadm: fix command flags description [#82481](https://github.com/openshift/kubernetes/pull/82481)
* endpoints: fix admission test types [#82478](https://github.com/openshift/kubernetes/pull/82478)
* test: add cases to test that no images present in node status. [#81647](https://github.com/openshift/kubernetes/pull/81647)
* fix some missing errors return statements [#82477](https://github.com/openshift/kubernetes/pull/82477)
* Add -x to du commands to not traverse other file systems [#82474](https://github.com/openshift/kubernetes/pull/82474)
* Add apigroup to the data source of pvc description [#82464](https://github.com/openshift/kubernetes/pull/82464)
* Return proper Kind in error for Cacher [#82461](https://github.com/openshift/kubernetes/pull/82461)
* Check cache is synced first before sleeping [#82446](https://github.com/openshift/kubernetes/pull/82446)
* fix indentation with 'kubectl describe node' [#82442](https://github.com/openshift/kubernetes/pull/82442)
* Encryption config: correctly handle overlapping providers [#82434](https://github.com/openshift/kubernetes/pull/82434)
* Added alejandrox1 as test/e2e/framework reviewer [#82433](https://github.com/openshift/kubernetes/pull/82433)
* kubelet: refactor server containerLogs test to table driven test [#82370](https://github.com/openshift/kubernetes/pull/82370)
* Clarify retry.RetryOnConflict docs [#82284](https://github.com/openshift/kubernetes/pull/82284)
* Error out when Scheduler PreBind plugins return Unschedulable [#82187](https://github.com/openshift/kubernetes/pull/82187)
* Break out of the loop when active endpoint is found [#82095](https://github.com/openshift/kubernetes/pull/82095)
* Break out of loop when finalizer is found [#82053](https://github.com/openshift/kubernetes/pull/82053)
* Added OWNERS file for Topology Manager [#81793](https://github.com/openshift/kubernetes/pull/81793)
* Fix a static check failure in controller-manager [#81667](https://github.com/openshift/kubernetes/pull/81667)
* Create LoadBalancer in nginx ingress tests [#82416](https://github.com/openshift/kubernetes/pull/82416)
* kubeadm: code clean up about kustomize [#82414](https://github.com/openshift/kubernetes/pull/82414)
* Fix reviewer typo. [#82411](https://github.com/openshift/kubernetes/pull/82411)
* Fix a typo in cmd/kube-apiserver. [#82391](https://github.com/openshift/kubernetes/pull/82391)
* Enable block tests for Cinder [#82367](https://github.com/openshift/kubernetes/pull/82367)
* Remove dead code used only in tests [#82360](https://github.com/openshift/kubernetes/pull/82360)
* Bump gonvml module and remove CGO dependency. [#82342](https://github.com/openshift/kubernetes/pull/82342)
* fix(scheduler): remove the defer function cost [#82330](https://github.com/openshift/kubernetes/pull/82330)
* don't start the cloud node controller if cloudprovider.Instances is not supported [#82329](https://github.com/openshift/kubernetes/pull/82329)
* test: fix azure disk e2e test failure [#82324](https://github.com/openshift/kubernetes/pull/82324)
* Repaire incorrect ip version event [#82317](https://github.com/openshift/kubernetes/pull/82317)
* Remove unused func IsProxyLocked [#82307](https://github.com/openshift/kubernetes/pull/82307)
* add identification for particular certificate controllers [#82279](https://github.com/openshift/kubernetes/pull/82279)
* Update security contacts for kubectl [#82261](https://github.com/openshift/kubernetes/pull/82261)
* Handle pod addition / removal errors [#82209](https://github.com/openshift/kubernetes/pull/82209)
* add myself to util metrics owners [#82032](https://github.com/openshift/kubernetes/pull/82032)
* volume scheduling: move metrics to a separate package to avoid import cycle [#82255](https://github.com/openshift/kubernetes/pull/82255)
* Don't require any resources in race test [#82245](https://github.com/openshift/kubernetes/pull/82245)
* Mark Ceph tests as serial [#82241](https://github.com/openshift/kubernetes/pull/82241)
* hack/boilerplate/bolierplate.py: format python file according to PEP8… [#82240](https://github.com/openshift/kubernetes/pull/82240)
* Fix golint failures of pkg/kubelet [#82233](https://github.com/openshift/kubernetes/pull/82233)
* Add debug info to kubectl e2e [#82224](https://github.com/openshift/kubernetes/pull/82224)
* Use Key() in Path composition [#82210](https://github.com/openshift/kubernetes/pull/82210)
* Early return after sending to errCh in Options#eventHandler [#82193](https://github.com/openshift/kubernetes/pull/82193)
* Move Update Apply conflict test to field manager test [#82175](https://github.com/openshift/kubernetes/pull/82175)
* Adding termination grace period to Deployment, RC, RCSet, and Job [#82170](https://github.com/openshift/kubernetes/pull/82170)
* Fix broken link. [#82161](https://github.com/openshift/kubernetes/pull/82161)
* Typo fix: binded -> bound [#82121](https://github.com/openshift/kubernetes/pull/82121)
* Fix sync pod log format [#82113](https://github.com/openshift/kubernetes/pull/82113)
* Cleanup cluster/images/conformance/go-runner test data after test done [#82064](https://github.com/openshift/kubernetes/pull/82064)
* Add a method to TestContext to check if is IPv6 [#82060](https://github.com/openshift/kubernetes/pull/82060)
* Rewrite tests for tableprinter.go [#82054](https://github.com/openshift/kubernetes/pull/82054)
* Use scheduler.New() Instead of factory.NewConfigFactory() in volumescheduling Integration Test [#82040](https://github.com/openshift/kubernetes/pull/82040)
* use log functions of core framework in the 'test/e2e/storage/*' [#81983](https://github.com/openshift/kubernetes/pull/81983)
* Use log functions of core framework on test/e2e/scheduling [#81982](https://github.com/openshift/kubernetes/pull/81982)
* cleanup test code in lifecycle, servicecatalog and ui package [#81980](https://github.com/openshift/kubernetes/pull/81980)
* clean up test code [#81974](https://github.com/openshift/kubernetes/pull/81974)
* Fixing contradictory log messages when AddPodToVolume encounters error [#81530](https://github.com/openshift/kubernetes/pull/81530)
* Add new flag for whitelisting node taints [#81043](https://github.com/openshift/kubernetes/pull/81043)
* Typo fix: EptyDir -> EmptyDir in pkg/api/pod/util.go [#81926](https://github.com/openshift/kubernetes/pull/81926)
* Remove Client#ClusterAvailable from interface [#81908](https://github.com/openshift/kubernetes/pull/81908)
* Fix typo in "EnableInfightQuotaHandler" apiserver option [#81867](https://github.com/openshift/kubernetes/pull/81867)
* Remove unnecessary factory layer [#81777](https://github.com/openshift/kubernetes/pull/81777)
* override stackdriver endpoint in event-exporter in test cluster [#81681](https://github.com/openshift/kubernetes/pull/81681)
* Deprecate default service IP CIDR [#81668](https://github.com/openshift/kubernetes/pull/81668)
* Continue with remaining volumeAttached's in VerifyVolumesAreAttached [#81613](https://github.com/openshift/kubernetes/pull/81613)
* more e2eservice.TestJig cleanups [#81479](https://github.com/openshift/kubernetes/pull/81479)
* Apply will fail with managed fields + tests [#81453](https://github.com/openshift/kubernetes/pull/81453)
* delete shared metrics (post metrics-stability migration) [#81432](https://github.com/openshift/kubernetes/pull/81432)
* Apply zero TerminationGracePeriodSeconds to preemption victims [#81384](https://github.com/openshift/kubernetes/pull/81384)
* e2e test: Label all nodes in pod anti-affinity test. [#80780](https://github.com/openshift/kubernetes/pull/80780)
* Fix shellcheck failure in test/image/image-util.sh [#80742](https://github.com/openshift/kubernetes/pull/80742)
* feat: use scheduler.New instead in createSchedulerConfigurator [#80697](https://github.com/openshift/kubernetes/pull/80697)
* feat: remove deprecated include uninitialized flag [#80337](https://github.com/openshift/kubernetes/pull/80337)
* Remove recursion in waitForVolumeDetachmentInternal [#79005](https://github.com/openshift/kubernetes/pull/79005)
* fix syntactic error in kuberuntime_manager.go [#74881](https://github.com/openshift/kubernetes/pull/74881)
* test: fix liveness pod [#82520](https://github.com/openshift/kubernetes/pull/82520)
* Update Cluster Autoscaler version to 1.16.0 [#82501](https://github.com/openshift/kubernetes/pull/82501)
* Prevent resultPod.Status.ContainerStatuses from being empty. [#82262](https://github.com/openshift/kubernetes/pull/82262)
* Update cluster autoscaler image to 1.16.0-beta.1 [#82430](https://github.com/openshift/kubernetes/pull/82430)
* Fix wrong command in e2e agnhost utility function [#82420](https://github.com/openshift/kubernetes/pull/82420)
* Fallback to schemaless apply behavior for custom resources with unhandled schemas [#82438](https://github.com/openshift/kubernetes/pull/82438)
* Add pre pull of e2e images after DiskPressure test [#82018](https://github.com/openshift/kubernetes/pull/82018)
* Improving GCE cluster up logic for EndpointSlice Controller [#82397](https://github.com/openshift/kubernetes/pull/82397)
* Update dev setup and client-go install instructions [#82425](https://github.com/openshift/kubernetes/pull/82425)
* Fix filter plugins are not been called during preemption [#81876](https://github.com/openshift/kubernetes/pull/81876)
* Adding a nil check in endpointslicecache [#82393](https://github.com/openshift/kubernetes/pull/82393)
* kubectl attach test: wait for input before proceeding [#79235](https://github.com/openshift/kubernetes/pull/79235)
* Starting EndpointSlice Controller when all Alpha gates are enabled in cluster up [#82380](https://github.com/openshift/kubernetes/pull/82380)
* Add dns capability to GCE window cluster [#82314](https://github.com/openshift/kubernetes/pull/82314)
* Use etcd image version suffixes in kubeadm [#82348](https://github.com/openshift/kubernetes/pull/82348)
* fix namespace termination conditions to be consistent and correct [#82288](https://github.com/openshift/kubernetes/pull/82288)
* Install and start logging agent based on kube env [#81300](https://github.com/openshift/kubernetes/pull/81300)
* kubelet e2e: defer the close to after the error check [#82335](https://github.com/openshift/kubernetes/pull/82335)
* kubeadm: Fetching kube-proxy's config map is now optional [#82248](https://github.com/openshift/kubernetes/pull/82248)
* fix sporadic failures in cni tests [#82337](https://github.com/openshift/kubernetes/pull/82337)
* bump metrics-server version to v0.3.4 [#82322](https://github.com/openshift/kubernetes/pull/82322)
* Fixing bugs related to Endpoint Slices [#82289](https://github.com/openshift/kubernetes/pull/82289)
* Update default etcd server to 3.3.15 for kubernetes 1.16 [#82199](https://github.com/openshift/kubernetes/pull/82199)
* Remove myself from reviewers across the repo [#82047](https://github.com/openshift/kubernetes/pull/82047)
* Make sure loadbalancer service is deleted before exiting the test [#82301](https://github.com/openshift/kubernetes/pull/82301)
* In GuaranteedUpdate, retry on a precondition check failure if we are working with cached data [#82303](https://github.com/openshift/kubernetes/pull/82303)
* e2e log: fix time stamp normalization in unit test [#82229](https://github.com/openshift/kubernetes/pull/82229)
* Add ready plugin to dns tests [#82274](https://github.com/openshift/kubernetes/pull/82274)
* Match webhook client auth with ports consistently [#82252](https://github.com/openshift/kubernetes/pull/82252)
* Ensure the KUBE-MARK-DROP chain in kube-proxy mode=ipvs [#82214](https://github.com/openshift/kubernetes/pull/82214)
* Remove symlink support from kubectl cp [#82143](https://github.com/openshift/kubernetes/pull/82143)
* Write the Stackdriver config separately from the installation. [#82142](https://github.com/openshift/kubernetes/pull/82142)
* fix ci-kubernetes-node-kubelet-serial which set PodPriority [#81825](https://github.com/openshift/kubernetes/pull/81825)
* Update NodeSSHHosts to support clusters with some public nodes [#82275](https://github.com/openshift/kubernetes/pull/82275)
* persistentvolume-controller: fix data race of non-deepcopied objects in fake client [#82239](https://github.com/openshift/kubernetes/pull/82239)
* Make iptables and ipvs modes of kube-proxy MASQUERADE --random-fully if possible [#78547](https://github.com/openshift/kubernetes/pull/78547)
* kubeadm: Form correct URL for IPv6 in HTTPProxy check [#82267](https://github.com/openshift/kubernetes/pull/82267)
* Register all volume plugins in kubemark [#82259](https://github.com/openshift/kubernetes/pull/82259)
* Allow typha-chpa to get apps/deployments [#82238](https://github.com/openshift/kubernetes/pull/82238)
* test(runtimeclass): add e2e tests for runtimeclass scheduling - Part3 [#81915](https://github.com/openshift/kubernetes/pull/81915)
* promote crd discovery e2e to conformance [#82198](https://github.com/openshift/kubernetes/pull/82198)
* Ensure backend is ready in listing webhook e2es [#82207](https://github.com/openshift/kubernetes/pull/82207)
* Kubectl: take pod overhead into account for node info [#81929](https://github.com/openshift/kubernetes/pull/81929)
* bump github.com/coreos/go-oidc dep to pick up nbf enforcement [#81413](https://github.com/openshift/kubernetes/pull/81413)
* Use CRD validation field in server-side apply [#77354](https://github.com/openshift/kubernetes/pull/77354)
* Make webhook/crd e2e tests behave in parallel and non-`--enable-aggregator-routing` test environments [#82200](https://github.com/openshift/kubernetes/pull/82200)
* Move HostUtil to pkg/volume/util/hostutil [#82024](https://github.com/openshift/kubernetes/pull/82024)
* agnhost: add /readyz endpoints to converter/webhook commands [#82185](https://github.com/openshift/kubernetes/pull/82185)
* Add support for konnectivity service to the etcd3 client. [#82048](https://github.com/openshift/kubernetes/pull/82048)
* update cAdvisor godeps to v0.34.0 release [#81972](https://github.com/openshift/kubernetes/pull/81972)
* Adding Kubectl Support for Endpoint Slices [#81795](https://github.com/openshift/kubernetes/pull/81795)
* Adding EndpointSlice RBAC for node-proxier/kube-proxy [#82153](https://github.com/openshift/kubernetes/pull/82153)
* Update NPD addon to use v0.7.1 [#82140](https://github.com/openshift/kubernetes/pull/82140)
* Adding EndpointsAdapter for apiserver EndpointSlice support [#82139](https://github.com/openshift/kubernetes/pull/82139)
* Add discovery docs crd e2e test [#82036](https://github.com/openshift/kubernetes/pull/82036)
* add a timeout for proxying discovery requests [#82146](https://github.com/openshift/kubernetes/pull/82146)
* Graduating Windows GMSA support to beta [#82110](https://github.com/openshift/kubernetes/pull/82110)
* Topology Manager Policy: single-numa-node [#82099](https://github.com/openshift/kubernetes/pull/82099)
* Disable tracking manged fields on scale sub-resource [#82045](https://github.com/openshift/kubernetes/pull/82045)
* Add UnschedulableAndUnresolvable status code [#82034](https://github.com/openshift/kubernetes/pull/82034)
* api: Loosens RunAsUserName validation [#82133](https://github.com/openshift/kubernetes/pull/82133)
* Fix out of bounds error in timeout tests [#82129](https://github.com/openshift/kubernetes/pull/82129)
* Bump CoreDNS version in Kubeadm to 1.6.2 [#82127](https://github.com/openshift/kubernetes/pull/82127)
* FlattenListVisitor now continues traversal on errors and returns an aggregate error [#82120](https://github.com/openshift/kubernetes/pull/82120)
* Migrate the e2e provisioner container image to a different location. [#82115](https://github.com/openshift/kubernetes/pull/82115)
* Adding an e2e test on GMSA support [#82109](https://github.com/openshift/kubernetes/pull/82109)
* Fix bug in CPUManager with setting topology for policies [#82104](https://github.com/openshift/kubernetes/pull/82104)
* kubeadm: fix a bug where the kubelet cert rotation was turned off [#82103](https://github.com/openshift/kubernetes/pull/82103)
* Enable the RuntimeClass admission controller on GCE & CI [#82094](https://github.com/openshift/kubernetes/pull/82094)
* Add the ability to migrate CoreDNS configmap in kube-up [#82093](https://github.com/openshift/kubernetes/pull/82093)
* dualstack: IPVS proxier [#82091](https://github.com/openshift/kubernetes/pull/82091)
* Use http/1.1 for apiserver->webhook clients [#82090](https://github.com/openshift/kubernetes/pull/82090)
* Move kubectl cp back to k/k [#82087](https://github.com/openshift/kubernetes/pull/82087)
* Tombstone the former Fields field by commenting the old entry [#82085](https://github.com/openshift/kubernetes/pull/82085)
* Update CRD godoc [#82055](https://github.com/openshift/kubernetes/pull/82055)
* Fixed comment to refer to the right int accessor for Quantity [#71815](https://github.com/openshift/kubernetes/pull/71815)
* Skip deleting custom resource instances that overlap with storage for built-in types [#82035](https://github.com/openshift/kubernetes/pull/82035)
* Rename mount.IsBind to mount.MakeBindOpts [#82028](https://github.com/openshift/kubernetes/pull/82028)
* e2e logging: disable brittle output test [#82014](https://github.com/openshift/kubernetes/pull/82014)
* Change the seven blanks to ` {7}` in the regex [#82007](https://github.com/openshift/kubernetes/pull/82007)
* Support GlobalAccess for gce Internal Loadbalancers [#81549](https://github.com/openshift/kubernetes/pull/81549)
* Fix Windows disk usage metric measurement [#81437](https://github.com/openshift/kubernetes/pull/81437)
* Add support for Topology Manager to Device Manager [#80570](https://github.com/openshift/kubernetes/pull/80570)
* Add startupProbe to health checks [#77807](https://github.com/openshift/kubernetes/pull/77807)
* add `/livez` endpoint for liveness probing on the kube-apiserver [#81969](https://github.com/openshift/kubernetes/pull/81969)
* Server side apply beta [#81956](https://github.com/openshift/kubernetes/pull/81956)
* Promote CRD e2e tests to conformance [#81864](https://github.com/openshift/kubernetes/pull/81864)
* Promote admission webhook e2e tests to conformance [#81857](https://github.com/openshift/kubernetes/pull/81857)
* Fix the rejected label semantics in webhook metrics, add a counter metrics for webhook rejection with details [#81399](https://github.com/openshift/kubernetes/pull/81399)
* Fix broken link to api-conventions doc. [#81770](https://github.com/openshift/kubernetes/pull/81770)
* Convert kubelet metrics(running_pod_count and running_container_count) from non-standard prometheus collectors to standard gauges [#81573](https://github.com/openshift/kubernetes/pull/81573)
* apiextensions: ignore path conflict and resolve definition conflict when merging openapi spec [#81436](https://github.com/openshift/kubernetes/pull/81436)
* Block etcd client creation until connection is up [#81435](https://github.com/openshift/kubernetes/pull/81435)
* serviceaccounts: Add JWT KeyIDs to tokens [#78502](https://github.com/openshift/kubernetes/pull/78502)
* Adding EndpointSlice support for kube-proxy ipvs and iptables proxiers [#81430](https://github.com/openshift/kubernetes/pull/81430)
* Azure support for dualstack LB services [#80485](https://github.com/openshift/kubernetes/pull/80485)
* Move Openstack provider to staging [#80027](https://github.com/openshift/kubernetes/pull/80027)
* Improve API documentation for ephemeral containers [#79614](https://github.com/openshift/kubernetes/pull/79614)
* Add namespace status conditions [#73405](https://github.com/openshift/kubernetes/pull/73405)
* Add discovery docs webhook e2e test [#82019](https://github.com/openshift/kubernetes/pull/82019)
* derive node CSR hashes from public keys [#81968](https://github.com/openshift/kubernetes/pull/81968)
* Promote VolumePVCDataSource to beta for 1.16 [#81792](https://github.com/openshift/kubernetes/pull/81792)
* Remove kubectl log [#78098](https://github.com/openshift/kubernetes/pull/78098)
* rm unnecessary judgement [#73944](https://github.com/openshift/kubernetes/pull/73944)
* storage: fix CSIInlineVolume round-trip test [#82012](https://github.com/openshift/kubernetes/pull/82012)
* Update kubectl polymorphic logs helper for ephemeral containers [#82010](https://github.com/openshift/kubernetes/pull/82010)
* ephemeral inline CSI volumes as beta [#82004](https://github.com/openshift/kubernetes/pull/82004)
* use DeletionHandlingMetaNamespaceKeyFunc from client-go in service_controller [#81601](https://github.com/openshift/kubernetes/pull/81601)
* Fixes all-namespaces flag being ignored by ToBuilder() in builder_flags.go [#81468](https://github.com/openshift/kubernetes/pull/81468)
* use log functions of core framework [#81996](https://github.com/openshift/kubernetes/pull/81996)
* fix test/e2e/gke_node_pools.go [#81993](https://github.com/openshift/kubernetes/pull/81993)
* Correct func name WithBuildMetadata [#81990](https://github.com/openshift/kubernetes/pull/81990)
* Use log functions of core framework on sub [p-s] [#81973](https://github.com/openshift/kubernetes/pull/81973)
* Cleanup client-go static analysis issues-phase 1 [#81947](https://github.com/openshift/kubernetes/pull/81947)
* Add NUMA Node awareness to the TopologyManager [#81722](https://github.com/openshift/kubernetes/pull/81722)
* fix: add kind parameter in azure disk CSI migration [#81633](https://github.com/openshift/kubernetes/pull/81633)
* migrate kube-proxy metrics to stability framework [#81626](https://github.com/openshift/kubernetes/pull/81626)
* migrate controller-manager metrics to stability framework [#81624](https://github.com/openshift/kubernetes/pull/81624)
* Add gen_openapi target to top-level Makefile. [#81168](https://github.com/openshift/kubernetes/pull/81168)
* Make nodeList schedulable [#81108](https://github.com/openshift/kubernetes/pull/81108)
* EndpointSlice Controller [#81048](https://github.com/openshift/kubernetes/pull/81048)
* don't delete KUBE-MARK-MASQ chain in iptables/ipvs proxier [#80514](https://github.com/openshift/kubernetes/pull/80514)
* Create C:\tmp if DNE [#80182](https://github.com/openshift/kubernetes/pull/80182)
* Phase 2 dualstack [#79386](https://github.com/openshift/kubernetes/pull/79386)
* migrate kubelet's metrics/probes & metrics endpoint to metrics stability framework [#81534](https://github.com/openshift/kubernetes/pull/81534)
* Add authentication metrics: failure, error count [#81509](https://github.com/openshift/kubernetes/pull/81509)
* Re-implement AWS test driver interfaces [#81486](https://github.com/openshift/kubernetes/pull/81486)
* Fix in kube-proxy for sctp ipset entries [#81477](https://github.com/openshift/kubernetes/pull/81477)
* Add e2e test for CSI volume limits [#80247](https://github.com/openshift/kubernetes/pull/80247)
* Add types to StatefulSetUpdateStrategyType constants [#81977](https://github.com/openshift/kubernetes/pull/81977)
* Bump the CRD feature gates to GA [#81965](https://github.com/openshift/kubernetes/pull/81965)
* Remove watching Endpoints of Headless Services [#81612](https://github.com/openshift/kubernetes/pull/81612)
* Adding Discovery API for EndpointSlice [#80766](https://github.com/openshift/kubernetes/pull/80766)
* Bump NPD version to v0.7.1 for GCI [#80726](https://github.com/openshift/kubernetes/pull/80726)
* ephemeral volume tests [#81960](https://github.com/openshift/kubernetes/pull/81960)
* Improve error message on server-side apply conflicts [#81958](https://github.com/openshift/kubernetes/pull/81958)
* fix: make kubeadm set defaults to kubelet configuration only when no values are set. [#81903](https://github.com/openshift/kubernetes/pull/81903)
* Clarify use of node-role labels within Kubernetes [#80238](https://github.com/openshift/kubernetes/pull/80238)
* enrich kubelet system oom event message info [#78174](https://github.com/openshift/kubernetes/pull/78174)
* e2e/network: add service hairpin test [#81955](https://github.com/openshift/kubernetes/pull/81955)
* schedule code clean: using string prefix instead of MarkDeprecated [#81954](https://github.com/openshift/kubernetes/pull/81954)
* Update the CPUManager to include NUMANodeID in its topology information [#81951](https://github.com/openshift/kubernetes/pull/81951)
* Use log functions of core framework on test/e2e/apps [#81935](https://github.com/openshift/kubernetes/pull/81935)
* migrate scheduler metrics to stability framework [#81576](https://github.com/openshift/kubernetes/pull/81576)
* remove dependency to pkg/features on service controller package [#81949](https://github.com/openshift/kubernetes/pull/81949)
* Cleanup ginkgo.Fail calls from the e2e test framework [#81948](https://github.com/openshift/kubernetes/pull/81948)
* add cache-control headers to kube-apiserver [#81946](https://github.com/openshift/kubernetes/pull/81946)
* Use preferred import packages for test/e2e [#81943](https://github.com/openshift/kubernetes/pull/81943)
* tests: Adds Windows RunAsUserName tests [#79539](https://github.com/openshift/kubernetes/pull/79539)
* Cleanup vsphere staticcheck issue [#81931](https://github.com/openshift/kubernetes/pull/81931)
* kubeadm: add support for Json6902 Patches [#81910](https://github.com/openshift/kubernetes/pull/81910)
* Compute webhook selectors and client once per webhookconfig revision [#81896](https://github.com/openshift/kubernetes/pull/81896)
* Update vendor k8s-cloud-provider and google API [#81871](https://github.com/openshift/kubernetes/pull/81871)
* delete lo network when TearDownPod to avoid CNI cache leak [#81828](https://github.com/openshift/kubernetes/pull/81828)
* Renaming strict policy to restricted policy [#81787](https://github.com/openshift/kubernetes/pull/81787)
* Add FieldsType field to ManagedFields to track content format [#81754](https://github.com/openshift/kubernetes/pull/81754)
* migrate kube-apiserver metrics to stability framework [#81531](https://github.com/openshift/kubernetes/pull/81531)
* Graduate Volume Expansion to Beta + e2e tests [#81467](https://github.com/openshift/kubernetes/pull/81467)
* Support Kubelet PluginWatcher in Windows [#81397](https://github.com/openshift/kubernetes/pull/81397)
* Factor PassiveClock out of clock.Clock [#80955](https://github.com/openshift/kubernetes/pull/80955)
* Print ephemeral containers in kubectl describe [#80847](https://github.com/openshift/kubernetes/pull/80847)
* Make container removal fail if platform-specific containers fail [#80320](https://github.com/openshift/kubernetes/pull/80320)
* Don't start tracking field management until object has been applied [#78738](https://github.com/openshift/kubernetes/pull/78738)
* Extending RequestedToCapacityRatio priority function to support resource bin packing of extended resources [#77688](https://github.com/openshift/kubernetes/pull/77688)
* Fix e2e DNS IPv6 CI [#81750](https://github.com/openshift/kubernetes/pull/81750)
* Promote service load balancer finalizer to Beta [#81691](https://github.com/openshift/kubernetes/pull/81691)
* Bump cluster proportional autoscaler to 1.7.1 [#81532](https://github.com/openshift/kubernetes/pull/81532)
* Refactoring pod related functions from pv_util to pod pkg [#80998](https://github.com/openshift/kubernetes/pull/80998)
* Add support for vSphere volume mount/attach on Windows [#80911](https://github.com/openshift/kubernetes/pull/80911)
* Allow kubectl to attach to ephemeral containers [#80644](https://github.com/openshift/kubernetes/pull/80644)
* aggregator/apiextensions: logs & metrics why OpenAPI spec is regenerated [#81786](https://github.com/openshift/kubernetes/pull/81786)
* Enable the RuntimeClass admission controller for scheduling [#81862](https://github.com/openshift/kubernetes/pull/81862)
* remove slice dependency from service_controller [#81844](https://github.com/openshift/kubernetes/pull/81844)
* Fix toleration comparison & merging logic [#81732](https://github.com/openshift/kubernetes/pull/81732)
* Add a helper function to decode scheduler plugin args [#80696](https://github.com/openshift/kubernetes/pull/80696)
* Windows dns config test [#74925](https://github.com/openshift/kubernetes/pull/74925)
* always set lastTransitionTime when crd condition changes [#69655](https://github.com/openshift/kubernetes/pull/69655)
* apiextensions: set 'metadata.generation: 1' on read from etcd if not set [#82005](https://github.com/openshift/kubernetes/pull/82005)
* Split defaultPrintHandler from handlerEntry in table printing [#81848](https://github.com/openshift/kubernetes/pull/81848)
* Move MakeFile/Dir from HostUtil to host_path vol [#81739](https://github.com/openshift/kubernetes/pull/81739)
* test images: Adds README containing image building process [#81662](https://github.com/openshift/kubernetes/pull/81662)
* move WaitForCacheSync to the sharedInformer package [#81527](https://github.com/openshift/kubernetes/pull/81527)
* Use iteration to make the GeneralPredicates code cleaner [#80814](https://github.com/openshift/kubernetes/pull/80814)
* kubeadm: fix upgrade checks [#81836](https://github.com/openshift/kubernetes/pull/81836)
* remove the ipvs checks from the preflight checks [#81791](https://github.com/openshift/kubernetes/pull/81791)
* Internalize mount.Interface.IsMountPointMatch [#81730](https://github.com/openshift/kubernetes/pull/81730)
* Fix flaky hugepages tests by decreasing page count [#81727](https://github.com/openshift/kubernetes/pull/81727)
* promote the remainingItemCount field to beta [#81682](https://github.com/openshift/kubernetes/pull/81682)
* Updated comments in wait.go [#81902](https://github.com/openshift/kubernetes/pull/81902)
* Utilize reflectorMutex in LastSyncResourceVersion [#81889](https://github.com/openshift/kubernetes/pull/81889)
* apiextension: promote CRD defaulting to beta [#81872](https://github.com/openshift/kubernetes/pull/81872)
* feat(scheduler): move node info snapshot out of internal package [#81840](https://github.com/openshift/kubernetes/pull/81840)
* fix typo in build/platforms.bzl [#81820](https://github.com/openshift/kubernetes/pull/81820)
* Move PrintPerfData to the test [#81849](https://github.com/openshift/kubernetes/pull/81849)
* Use log functions of core framework on sub [j-l] [#81814](https://github.com/openshift/kubernetes/pull/81814)
* v1beta1: bugfix in Event struct definition [#81359](https://github.com/openshift/kubernetes/pull/81359)
* Refactor `kubectl scale` to patch scale subresource [#81342](https://github.com/openshift/kubernetes/pull/81342)
* ephemeral mode check [#80568](https://github.com/openshift/kubernetes/pull/80568)
* e2e_kubeadm: use log functions of core framework [#81925](https://github.com/openshift/kubernetes/pull/81925)
* Correct comment in CertOrKeyExist [#81918](https://github.com/openshift/kubernetes/pull/81918)
* Use log functions of core framework on sub p* [#81855](https://github.com/openshift/kubernetes/pull/81855)
* apiextension: ratcheting validation of unpruned defaults [#81870](https://github.com/openshift/kubernetes/pull/81870)
* Failure logging [#80253](https://github.com/openshift/kubernetes/pull/80253)
* publishing: add missing deps for 1.16 branch [#81927](https://github.com/openshift/kubernetes/pull/81927)
* Use log functions of core framework on p* [#81809](https://github.com/openshift/kubernetes/pull/81809)
* Tolerate ending slash when running staticcheck [#81812](https://github.com/openshift/kubernetes/pull/81812)
* Add test for HTTPExtender.IsInterested [#81842](https://github.com/openshift/kubernetes/pull/81842)
* Mark v1beta1 webhooks/CRD types deprecated in favor of v1 [#81899](https://github.com/openshift/kubernetes/pull/81899)
* Split HostUtil functionality into its own files [#81794](https://github.com/openshift/kubernetes/pull/81794)
* Remove preliminarily committed OpenAPI packages [#81884](https://github.com/openshift/kubernetes/pull/81884)
* Use log functions of core framework on [c-n] [#81693](https://github.com/openshift/kubernetes/pull/81693)
* allow an apiserver to only serve http1 [#81860](https://github.com/openshift/kubernetes/pull/81860)
* Cleanup gce static analysis issues [#81771](https://github.com/openshift/kubernetes/pull/81771)
* Update runtime class admission plugin - Part2 [#81072](https://github.com/openshift/kubernetes/pull/81072)
* mutating webhook: audit log mutation existence and patch [#77824](https://github.com/openshift/kubernetes/pull/77824)
* Pick up *_test.go in verify-import-boss [#81752](https://github.com/openshift/kubernetes/pull/81752)
* tests: Skips Windows-unrelated tests on Windows [#80213](https://github.com/openshift/kubernetes/pull/80213)
* fix-typo-cmd/kubeadm/app/util/config/initconfiguration.go [#81821](https://github.com/openshift/kubernetes/pull/81821)
* Enables resizing of block volumes. [#81429](https://github.com/openshift/kubernetes/pull/81429)
* Bump vertical autoscaler to v0.8.1 [#81428](https://github.com/openshift/kubernetes/pull/81428)
* Set runtimeState when RuntimeReady is not set or false [#79873](https://github.com/openshift/kubernetes/pull/79873)
* apiextensions: complete default-under-metadata validation and storage pruning [#78829](https://github.com/openshift/kubernetes/pull/78829)
* Update PrintOptions to more appropriate GenerateOptions in some cases [#81847](https://github.com/openshift/kubernetes/pull/81847)
* Remove nsenter impl from pkg/vol/util [#81843](https://github.com/openshift/kubernetes/pull/81843)
* Moving podInformer to node controller scope [#81839](https://github.com/openshift/kubernetes/pull/81839)
* kube-proxy: improve logging around network programming latency SLI. [#81415](https://github.com/openshift/kubernetes/pull/81415)
* Add fast path to podFitsOnNode [#81346](https://github.com/openshift/kubernetes/pull/81346)
* Don't overwrite PVC with nil/empty object returned by failed Update [#81107](https://github.com/openshift/kubernetes/pull/81107)
* Remove unused aggregator ca key [#79908](https://github.com/openshift/kubernetes/pull/79908)
* Add ephemeral container to GetPodVolumeNames test [#81835](https://github.com/openshift/kubernetes/pull/81835)
* update scale client to support non-namespaced resources [#81507](https://github.com/openshift/kubernetes/pull/81507)
* Add dropDisbledFields() to service [#81826](https://github.com/openshift/kubernetes/pull/81826)
* Adding TooMany error type [#81815](https://github.com/openshift/kubernetes/pull/81815)
* check that the recorded event is not nil on refreshExistingEventSeries [#81780](https://github.com/openshift/kubernetes/pull/81780)
* Prepare admission and CRD e2e tests to be promoted to conformance [#81684](https://github.com/openshift/kubernetes/pull/81684)
* Use log functions of core framework on [d-i] [#81811](https://github.com/openshift/kubernetes/pull/81811)
* Drop Azure/go-autorest from pkg/controller [#81808](https://github.com/openshift/kubernetes/pull/81808)
* feat: update scheduling framework interface with camelcase [#81800](https://github.com/openshift/kubernetes/pull/81800)
* Cleanup: fix typo in flag help message [#81790](https://github.com/openshift/kubernetes/pull/81790)
* Fix windows kubectl log -f. [#81747](https://github.com/openshift/kubernetes/pull/81747)
* apimachinery: hide 'suppressing panic for copyResponse' error' in ReverseProxy [#81776](https://github.com/openshift/kubernetes/pull/81776)
* Remove dead code [#81768](https://github.com/openshift/kubernetes/pull/81768)
* Do not cleanup node lease namespace in e2e setup suite [#81767](https://github.com/openshift/kubernetes/pull/81767)
* simulate in-tree cloud provider removal with a build tag [#80353](https://github.com/openshift/kubernetes/pull/80353)
* Removed equivalence cache tests [#79828](https://github.com/openshift/kubernetes/pull/79828)
* Nominate hex108 as a scheduler reviewer [#81764](https://github.com/openshift/kubernetes/pull/81764)
* Add SataQiu to hack/ approvers [#81758](https://github.com/openshift/kubernetes/pull/81758)
* Skip spec.volumes mount/map test if no SSH [#81755](https://github.com/openshift/kubernetes/pull/81755)
* GCE/Windows: use "return" as "continue" for ForEach-Object [#81753](https://github.com/openshift/kubernetes/pull/81753)
* Finish implementation of stable metrics static analysis [#81510](https://github.com/openshift/kubernetes/pull/81510)
* mv HasMountRefs from mount pkg to vol/util [#81745](https://github.com/openshift/kubernetes/pull/81745)
* Remove decorateTable() from table generator [#81738](https://github.com/openshift/kubernetes/pull/81738)
* Close leaking files in `conformance/walk.go` [#81721](https://github.com/openshift/kubernetes/pull/81721)
* fix: azure disk name matching issue [#81720](https://github.com/openshift/kubernetes/pull/81720)
* Fix golint failures in pkg/proxy [#79846](https://github.com/openshift/kubernetes/pull/79846)
* fix cluster/images/conformance/go-runner/tar_test.go [#81718](https://github.com/openshift/kubernetes/pull/81718)
* Fix static check for test/e2e/framework [#81715](https://github.com/openshift/kubernetes/pull/81715)
* Check error return from Scheme.Convert [#81701](https://github.com/openshift/kubernetes/pull/81701)
* kubeadm: fix static check failures [#81656](https://github.com/openshift/kubernetes/pull/81656)
* Replace KubeDescribe with ginkgo.Describe in e2e/kubectl [#79910](https://github.com/openshift/kubernetes/pull/79910)
* Remove check for addIPv6Checks which evaluates to true [#81696](https://github.com/openshift/kubernetes/pull/81696)
* Use framework functions under test/e2e/node/ [#81695](https://github.com/openshift/kubernetes/pull/81695)
* volume-controller: fix static check failures [#81680](https://github.com/openshift/kubernetes/pull/81680)
* Update existing node lease with retry. [#81663](https://github.com/openshift/kubernetes/pull/81663)
* Update the PR template for latest 'additional documentation' enhancements [#81159](https://github.com/openshift/kubernetes/pull/81159)
* Use VisitContainers instead of directly accessing pod container fields [#81674](https://github.com/openshift/kubernetes/pull/81674)
* Make sure no op updates don't affect the resource version due to serverside apply [#81673](https://github.com/openshift/kubernetes/pull/81673)
* staticcheck follow-up to address late feedback [#81671](https://github.com/openshift/kubernetes/pull/81671)
* Fix CRD v1 release note [#81669](https://github.com/openshift/kubernetes/pull/81669)
* add reviewer of csi-translation-lib [#81664](https://github.com/openshift/kubernetes/pull/81664)
* Fix verb reporting in metrics [#81660](https://github.com/openshift/kubernetes/pull/81660)
* fixes a bug that connection refused error cannot be recognized correctly [#81634](https://github.com/openshift/kubernetes/pull/81634)
* Fix golint issues in pkg/apis/apps and pkg/apis/apps/validation [#81569](https://github.com/openshift/kubernetes/pull/81569)
* Move HandleFlags to e2e package [#81488](https://github.com/openshift/kubernetes/pull/81488)
* Fix raw extension openapi definition [#80773](https://github.com/openshift/kubernetes/pull/80773)
* aggregator: add myself to approvers [#81484](https://github.com/openshift/kubernetes/pull/81484)
* Add e2e test for Lease API [#81414](https://github.com/openshift/kubernetes/pull/81414)
* Cleanup Kubelet static analysis issues [#81206](https://github.com/openshift/kubernetes/pull/81206)
* Migrate shared metrics into component base [#81173](https://github.com/openshift/kubernetes/pull/81173)
* kubeadm: print the stack trace of an error for klog level v>=5 [#80937](https://github.com/openshift/kubernetes/pull/80937)
* iptables feature detection improvements [#80368](https://github.com/openshift/kubernetes/pull/80368)
* Log the error return from dir removal [#81631](https://github.com/openshift/kubernetes/pull/81631)
* Delete duplicate resource.Quantity.Copy() [#81627](https://github.com/openshift/kubernetes/pull/81627)
* kubeadm: support any Linux kernel version newer than 3.10 [#81623](https://github.com/openshift/kubernetes/pull/81623)
* moving ShuffleStrings to pkg/proxy [#81605](https://github.com/openshift/kubernetes/pull/81605)
* apiextensions: builder for v3 schemas [#81480](https://github.com/openshift/kubernetes/pull/81480)
* Drop GetPods from ActualStateOfWorld [#81529](https://github.com/openshift/kubernetes/pull/81529)
* Removing unnecessary code from node lifecycle controller [#81416](https://github.com/openshift/kubernetes/pull/81416)
* Compute container hash based on API content, not go type [#57741](https://github.com/openshift/kubernetes/pull/57741)
* populate object name for admission attributes when CREATE [#53185](https://github.com/openshift/kubernetes/pull/53185)
* kubeadm: kustomize-ux [#81458](https://github.com/openshift/kubernetes/pull/81458)
* rename healthz methodNames to be more consistent w/ present day usages [#81376](https://github.com/openshift/kubernetes/pull/81376)
* Promote e2e verifying different types of services and their behaviours [#77865](https://github.com/openshift/kubernetes/pull/77865)
* Dump the stacktrace while an error occurs [#80979](https://github.com/openshift/kubernetes/pull/80979)
* Fix cloud reported hostname being overridden if nodeIP set [#80003](https://github.com/openshift/kubernetes/pull/80003)
* Add 'apiserver_watch_events_sizes' [#80477](https://github.com/openshift/kubernetes/pull/80477)
* Remove NormalizeScore plugin set from config API. [#80930](https://github.com/openshift/kubernetes/pull/80930)
* Plumb context timeout to admission webhooks [#81602](https://github.com/openshift/kubernetes/pull/81602)
* Move RunNormalizeScorePlugins and ApplyScoreWeights into RunScorePlugins; Also add unit tests for RunScorePlugins. [#81614](https://github.com/openshift/kubernetes/pull/81614)
* Removed awk from kubeadm reset [#81494](https://github.com/openshift/kubernetes/pull/81494)
* Updating to etcd v3.3.15 [#81434](https://github.com/openshift/kubernetes/pull/81434)
* Split HumanReadablePrinter struct into generator and printer structs [#81404](https://github.com/openshift/kubernetes/pull/81404)
* Remove fail argument from ReadOrDie() [#81393](https://github.com/openshift/kubernetes/pull/81393)
* Mark Conditions in CustomResourceDefinitionStatus as optional [#64996](https://github.com/openshift/kubernetes/pull/64996)
* Set ProviderID when running kubemark node [#73393](https://github.com/openshift/kubernetes/pull/73393)
* fix: trim new line for azure storage account name [#81562](https://github.com/openshift/kubernetes/pull/81562)
* Make drain library more reusable [#80045](https://github.com/openshift/kubernetes/pull/80045)
* Update structured-merge-diff to latest version [#81561](https://github.com/openshift/kubernetes/pull/81561)
* Fix GCE typo in test output [#81551](https://github.com/openshift/kubernetes/pull/81551)
* Use non-default container port and scoped port vars in webhook e2e tests [#81541](https://github.com/openshift/kubernetes/pull/81541)
* Initialize flags to support extra flags [#81499](https://github.com/openshift/kubernetes/pull/81499)
* Add support for Ephemeral Containers to the kubelet [#59484](https://github.com/openshift/kubernetes/pull/59484)
* Demote HPA tests from release-blocking [#81537](https://github.com/openshift/kubernetes/pull/81537)
* Refactor NewXXXPlugin in framework_test to avoid package variables [#81460](https://github.com/openshift/kubernetes/pull/81460)
* Move ProxyRequest to kubelet e2e fw [#81389](https://github.com/openshift/kubernetes/pull/81389)
* tests: Fixes DNS tests for Windows [#81363](https://github.com/openshift/kubernetes/pull/81363)
* [fluentd/elasticsearch] updated fluentd to 1.6.3 [#80912](https://github.com/openshift/kubernetes/pull/80912)
* Speed up block volume e2e test by checking events [#81196](https://github.com/openshift/kubernetes/pull/81196)
* scheduler: internal data structure optimization [#81068](https://github.com/openshift/kubernetes/pull/81068)
* Remove cloud specific DNS check to make e2e Conformance eligible [#80682](https://github.com/openshift/kubernetes/pull/80682)
* Unstructed helpers: document lack of slice syntax [#78539](https://github.com/openshift/kubernetes/pull/78539)
* Add the ability to migrate CoreDNS configmap in kubeadm [#78033](https://github.com/openshift/kubernetes/pull/78033)
* Use TCP instead of ICMP to check outbound connectivity [#77794](https://github.com/openshift/kubernetes/pull/77794)
* implement request cancellation in token transport [#71757](https://github.com/openshift/kubernetes/pull/71757)
* Kubelet enabling to support pod-overhead [#79247](https://github.com/openshift/kubernetes/pull/79247)
* kubeadm: do not use github.com/blang/semver in app/preflight [#81622](https://github.com/openshift/kubernetes/pull/81622)
* Bump nfs-provisioner to include GetReference fix [#81620](https://github.com/openshift/kubernetes/pull/81620)
* Update Azure API versions in go imports [#81505](https://github.com/openshift/kubernetes/pull/81505)
* Leave Windows Defender enabled for clusters on GCE [#81625](https://github.com/openshift/kubernetes/pull/81625)
* Fix e2e for block volume expansion [#81611](https://github.com/openshift/kubernetes/pull/81611)
* Handle tcp dial timeout in webhook e2e test [#81540](https://github.com/openshift/kubernetes/pull/81540)
* Group managedFieldsEntries for update by manager name [#81524](https://github.com/openshift/kubernetes/pull/81524)
* Upgrade e2e tests to use CRD v1 APIs [#81497](https://github.com/openshift/kubernetes/pull/81497)
* fix: detach azure disk issue using dangling error [#81266](https://github.com/openshift/kubernetes/pull/81266)
* Add missed status code description in comment. [#81264](https://github.com/openshift/kubernetes/pull/81264)
* Add verify-staticcheck script [#81189](https://github.com/openshift/kubernetes/pull/81189)
* Test more replicas than spec. [#81019](https://github.com/openshift/kubernetes/pull/81019)
* Update GetTopologyHints() for TopologyManager Hint Providers to return a map [#80569](https://github.com/openshift/kubernetes/pull/80569)
* add delete to gaugeVec, histogramVec, summaryVec since kubelet requir… [#81608](https://github.com/openshift/kubernetes/pull/81608)
* Use v1 admissionregistration APIs in e2e [#81558](https://github.com/openshift/kubernetes/pull/81558)
* convert EndpointNamespace showing string rather than pointer [#81554](https://github.com/openshift/kubernetes/pull/81554)
* Add log.go back to core of e2e test framework [#81426](https://github.com/openshift/kubernetes/pull/81426)
* inject transformer prefix into metric [#80874](https://github.com/openshift/kubernetes/pull/80874)
* Check the error return from listener close [#81604](https://github.com/openshift/kubernetes/pull/81604)
* Replace self defined const StatusTooManyRequests with http.StatusTooM… [#81265](https://github.com/openshift/kubernetes/pull/81265)
* Fix Test for kubeadm/app/util/net.GetHostname [#81589](https://github.com/openshift/kubernetes/pull/81589)
* add CNI config validation to getDefaultCNINetwork [#80482](https://github.com/openshift/kubernetes/pull/80482)
* Fix flexvolume volumename issue [#80904](https://github.com/openshift/kubernetes/pull/80904)
* add delete to counterVec wrapper, since we require it in the kubelet [#81579](https://github.com/openshift/kubernetes/pull/81579)
* lock the mutation of the create boolean for safety [#81577](https://github.com/openshift/kubernetes/pull/81577)
* Prune OWNERS file [#80864](https://github.com/openshift/kubernetes/pull/80864)
* Add/delete load balancer backendPoodID in VMSS. [#81411](https://github.com/openshift/kubernetes/pull/81411)
* Remove boolean waitForComponentRestart which is always true in upgradeComponent [#81559](https://github.com/openshift/kubernetes/pull/81559)
* fix typo [#81572](https://github.com/openshift/kubernetes/pull/81572)
* Upgrade ConversionReview e2e test image to also support v1 [#81314](https://github.com/openshift/kubernetes/pull/81314)
* typecheck cleanup [#81547](https://github.com/openshift/kubernetes/pull/81547)
* Add benchmark for updates and get with/without server-side apply [#80944](https://github.com/openshift/kubernetes/pull/80944)
* partially cleanup hack/jenkins/... [#81545](https://github.com/openshift/kubernetes/pull/81545)
* check whether serviceCIDR contains clusterCIDR during ipam initialization [#80585](https://github.com/openshift/kubernetes/pull/80585)
* Don't track syncProxyRules runtime if not running [#81538](https://github.com/openshift/kubernetes/pull/81538)
* Add support for ConversionReview v1 [#81476](https://github.com/openshift/kubernetes/pull/81476)
* test images: Adds version and bind-tools to agnhost [#81008](https://github.com/openshift/kubernetes/pull/81008)
* Fix handling empty result when invoking kubectl get [#77681](https://github.com/openshift/kubernetes/pull/77681)
* Demote regular resource tracking tests from release-blocking [#81535](https://github.com/openshift/kubernetes/pull/81535)
* Taints and tolerations e2e test re-work [#81472](https://github.com/openshift/kubernetes/pull/81472)
* promote CRD to v1 [#79604](https://github.com/openshift/kubernetes/pull/79604)
* Only advertise supported patch types [#81515](https://github.com/openshift/kubernetes/pull/81515)
* Delete agnhost binary [#81514](https://github.com/openshift/kubernetes/pull/81514)
* Get location and subscriptionID from IMDS when useInstanceMetadata is true [#81500](https://github.com/openshift/kubernetes/pull/81500)
* cleanup: fix typos in error message in e2e test [#81470](https://github.com/openshift/kubernetes/pull/81470)
* remove defaultedInternalConfig from kubeadm [#81465](https://github.com/openshift/kubernetes/pull/81465)
* Flatten Scheduler Struct [#81207](https://github.com/openshift/kubernetes/pull/81207)
* Skip unused volumes in VolumeManager [#81163](https://github.com/openshift/kubernetes/pull/81163)
* Fix shellcheck failure in cluster/test-e2e.sh [#80971](https://github.com/openshift/kubernetes/pull/80971)
* Removes conflicting Quobyte tenant test from API validation [#80512](https://github.com/openshift/kubernetes/pull/80512)
* updated kubeadm reset wording to be more clear [#81495](https://github.com/openshift/kubernetes/pull/81495)
* kubeadm: use etcd's /health endpoint for it's liveness probe [#81385](https://github.com/openshift/kubernetes/pull/81385)
* Skip preprovisioned and inline volume tests if driver supports dynamic provisioning [#81375](https://github.com/openshift/kubernetes/pull/81375)
* Propagate error from NewEtcd [#81325](https://github.com/openshift/kubernetes/pull/81325)
* Bugfix/error config attachable plugin [#81456](https://github.com/openshift/kubernetes/pull/81456)
* Add e2e tests for CSI PVCDataSources [#80117](https://github.com/openshift/kubernetes/pull/80117)
* Add live list of pods to PVC protection controller to make sure it does not delete a PVC which is being used by a Pod [#80492](https://github.com/openshift/kubernetes/pull/80492)
* Dual-Stack Integration with Kubeadm [#79033](https://github.com/openshift/kubernetes/pull/79033)
* update go to 1.12.9 [#81489](https://github.com/openshift/kubernetes/pull/81489)
* Move ConfirmStatefulPodCount to e2e test [#81478](https://github.com/openshift/kubernetes/pull/81478)
* cleanup: fix typos in rbd_util.go [#81471](https://github.com/openshift/kubernetes/pull/81471)
* fix some typos in testing.go and recycle_test.go [#81444](https://github.com/openshift/kubernetes/pull/81444)
* Add http response code 301 and 503 to check. [#81347](https://github.com/openshift/kubernetes/pull/81347)
* Azure SDK updates (6/30/19) [#79574](https://github.com/openshift/kubernetes/pull/79574)
* buildPortsToEndpointsMap should use flattened value type [#81378](https://github.com/openshift/kubernetes/pull/81378)
* Fix event when Cinder volume can not be expanded when in-use [#81373](https://github.com/openshift/kubernetes/pull/81373)
* Extender bind should respect IsInterested [#79804](https://github.com/openshift/kubernetes/pull/79804)
* Add instruction for "Application Default Credentials" to run e2e tests locally [#81337](https://github.com/openshift/kubernetes/pull/81337)
* Use RWMutex in watchBasedManager [#81332](https://github.com/openshift/kubernetes/pull/81332)
* Scheduler should terminate on loosing leader lock [#81306](https://github.com/openshift/kubernetes/pull/81306)
* Provision vSphere volume as per selectedNode [#79931](https://github.com/openshift/kubernetes/pull/79931)
* Fix panic when errors are nil [#81463](https://github.com/openshift/kubernetes/pull/81463)
* Move GetGPUDevicePluginImage to the test [#81391](https://github.com/openshift/kubernetes/pull/81391)
* feat: cleanup pod critical pod annotations feature [#80342](https://github.com/openshift/kubernetes/pull/80342)
* Changes to make CPU Manager a Hint Provider for Topology Manager [#73920](https://github.com/openshift/kubernetes/pull/73920)
* [kubernetes/kubeadm] fix minor nil issues in kudeadm code [#81447](https://github.com/openshift/kubernetes/pull/81447)
* fix azure load balancer update dns label issue [#81262](https://github.com/openshift/kubernetes/pull/81262)
* change deprecatedVersion type to string for static analysis parsing ease [#81395](https://github.com/openshift/kubernetes/pull/81395)
* kubelet: add eviction counter to kubelet metrics [#81377](https://github.com/openshift/kubernetes/pull/81377)
* feat:  return error when score is out of range [#81015](https://github.com/openshift/kubernetes/pull/81015)
* Upgrade AdmissionReview e2e test image to also support v1 [#81271](https://github.com/openshift/kubernetes/pull/81271)
* Follow up #80734: update RSA keys to 2048 bits [#80801](https://github.com/openshift/kubernetes/pull/80801)
* add e2e test for cronjob failedJobsHistoryLimit [#78245](https://github.com/openshift/kubernetes/pull/78245)
* Add test for mismatched usage of filesystem/block volumes [#79796](https://github.com/openshift/kubernetes/pull/79796)
* fix shellcheck failures in hack/test-integration.sh and hack/verify-t… [#81424](https://github.com/openshift/kubernetes/pull/81424)
* Update to go 1.12.8 [#81390](https://github.com/openshift/kubernetes/pull/81390)
* Add admission e2e tests for untested stable operations [#81381](https://github.com/openshift/kubernetes/pull/81381)
* kube-proxy: do not export network programming latency for deleted Endpoints [#81361](https://github.com/openshift/kubernetes/pull/81361)
* Fix two race issues in schedule_queue [#81148](https://github.com/openshift/kubernetes/pull/81148)
* kubeadm: add v1.17 to the list versions that map to etcd version [#81386](https://github.com/openshift/kubernetes/pull/81386)
* Fix flaky test TestPreemptWithPermitPlugin [#81328](https://github.com/openshift/kubernetes/pull/81328)
* proxy/ipvs: test cleanLegacyService with real servers [#81309](https://github.com/openshift/kubernetes/pull/81309)
* Update CSI hostpathplugin to include cloning fix [#81304](https://github.com/openshift/kubernetes/pull/81304)
* Add CRD e2e tests for untested stable operations [#81240](https://github.com/openshift/kubernetes/pull/81240)
* Drop deprecated cadvisor metric labels [#80376](https://github.com/openshift/kubernetes/pull/80376)
* DO NOT publish openapi specs containing bad types [#79587](https://github.com/openshift/kubernetes/pull/79587)
* Check if options returning an error [#78775](https://github.com/openshift/kubernetes/pull/78775)
* bump go-grpc-prometheus to v1.2.0 [#81387](https://github.com/openshift/kubernetes/pull/81387)
* add missing import required by build scripts [#81335](https://github.com/openshift/kubernetes/pull/81335)
* remove iSCSI volume storage cleartext secrets in logs [#81215](https://github.com/openshift/kubernetes/pull/81215)
* feat: use named array instead of array in normalizing score [#80901](https://github.com/openshift/kubernetes/pull/80901)
* Fix default scheduler crash if scheduler extender filter returns a not found node [#79641](https://github.com/openshift/kubernetes/pull/79641)
* omit unused receiver name [#76365](https://github.com/openshift/kubernetes/pull/76365)
* Update golang/x/net dependency [#81394](https://github.com/openshift/kubernetes/pull/81394)
* Add service reachability polling to avoid flakiness [#81341](https://github.com/openshift/kubernetes/pull/81341)
* publishing: add rules for 1.16 and remove for 1.12 [#81287](https://github.com/openshift/kubernetes/pull/81287)
* [k8s.io/client-go]fix typo in eventseries_test.go method [#81331](https://github.com/openshift/kubernetes/pull/81331)
* Hide bearer token in logs [#81330](https://github.com/openshift/kubernetes/pull/81330)
* make consistent receiver name [#76472](https://github.com/openshift/kubernetes/pull/76472)
* add a test case for HostnameOverride [#72771](https://github.com/openshift/kubernetes/pull/72771)
* proxy/ipvs: remove unused constant rsGracefulDeletePeriod [#81312](https://github.com/openshift/kubernetes/pull/81312)
* add logicalhan as approver on component-base/metrics [#81307](https://github.com/openshift/kubernetes/pull/81307)
* Return 503 for custom resource requests during server start [#81244](https://github.com/openshift/kubernetes/pull/81244)
* Use the escalate verb for clusterroleaggregator rather than cluster-admin permissions [#81199](https://github.com/openshift/kubernetes/pull/81199)
* Rename MetricsForE2E for golint failure [#81099](https://github.com/openshift/kubernetes/pull/81099)
* Bump gengo to have set insert|delete return the set [#81372](https://github.com/openshift/kubernetes/pull/81372)
* Add code check for framework.ExpectEqual() [#80785](https://github.com/openshift/kubernetes/pull/80785)
* Update docs for service/endpoints port names [#80664](https://github.com/openshift/kubernetes/pull/80664)
* Fix code block for kubectl book. [#80285](https://github.com/openshift/kubernetes/pull/80285)
* Add DataSource to PVC describe [#76463](https://github.com/openshift/kubernetes/pull/76463)
* apiserver: Update a comment [#75253](https://github.com/openshift/kubernetes/pull/75253)
* Error code incorrectly hidden in recordEvent [#81305](https://github.com/openshift/kubernetes/pull/81305)
* Fix Azure client requests stuck issues on http.StatusTooManyRequests [#81279](https://github.com/openshift/kubernetes/pull/81279)
* Update to latest klog 0.4.0 [#81164](https://github.com/openshift/kubernetes/pull/81164)
* Remove algorithm.NodeLister from scheduler interface [#81151](https://github.com/openshift/kubernetes/pull/81151)
* fixup: correct file name in log message [#80985](https://github.com/openshift/kubernetes/pull/80985)
* Update csi-provisioner and snapshotter to get selflink fix [#81296](https://github.com/openshift/kubernetes/pull/81296)
* kubeadm: cleanup unnecessary slice initialization statements [#81275](https://github.com/openshift/kubernetes/pull/81275)
* Ensure tests which rely on SSH behavior are skipped if unavailable [#81087](https://github.com/openshift/kubernetes/pull/81087)
* Kubeadm: kustomize core [#80905](https://github.com/openshift/kubernetes/pull/80905)
* proxy/ipvs: refactor IPVS unit tests TestClusterIP and TestNodePort to use test tables [#80779](https://github.com/openshift/kubernetes/pull/80779)
* Fix spelling errors for messages [#81276](https://github.com/openshift/kubernetes/pull/81276)
* Add service annotation for specifying load balancer's pip with name. [#81213](https://github.com/openshift/kubernetes/pull/81213)
* Bump cadvisor to a latest commit [#81162](https://github.com/openshift/kubernetes/pull/81162)
* Introduce cache for speeding up APIServices lookup [#79999](https://github.com/openshift/kubernetes/pull/79999)
* changes the way `gc` detect that an object needs to be deleted [#81081](https://github.com/openshift/kubernetes/pull/81081)
* Add IPv6 support to e2e GlusterDynamicProvisioner [#81069](https://github.com/openshift/kubernetes/pull/81069)
* Fix logging message during unmounting [#81013](https://github.com/openshift/kubernetes/pull/81013)
* fix ipvs_svc deletion [#80942](https://github.com/openshift/kubernetes/pull/80942)
* Static analysis prototype [#80906](https://github.com/openshift/kubernetes/pull/80906)
* Use go standard library for common bit operations [#78587](https://github.com/openshift/kubernetes/pull/78587)
* Inline/simplify two used-only-once service test helper functions [#81291](https://github.com/openshift/kubernetes/pull/81291)
* Remove core dependency from endpoints e2e fw [#81235](https://github.com/openshift/kubernetes/pull/81235)
* Rename HostUtils.ExistsPath to PathExists [#81204](https://github.com/openshift/kubernetes/pull/81204)
* fix typos in kubelet.go [#80519](https://github.com/openshift/kubernetes/pull/80519)
* feat: remove several types in runtime serializer [#79263](https://github.com/openshift/kubernetes/pull/79263)
* Propagate error from NewREST [#80952](https://github.com/openshift/kubernetes/pull/80952)
* Runtimeclass scheduling api [#80825](https://github.com/openshift/kubernetes/pull/80825)
* Revert "Toleration priority function score computation" [#81295](https://github.com/openshift/kubernetes/pull/81295)
* cleanup: proxier.go error message fix [#81292](https://github.com/openshift/kubernetes/pull/81292)
* Remove runDeployment() from e2e test [#81251](https://github.com/openshift/kubernetes/pull/81251)
* expose ability to register native prometheus collectors [#81190](https://github.com/openshift/kubernetes/pull/81190)
* doc: add Draven as a reviewer to test package [#81252](https://github.com/openshift/kubernetes/pull/81252)
* doc: fix couple of issues for the doc of agnhost [#80842](https://github.com/openshift/kubernetes/pull/80842)
* Added info requested in review of #77636 [#80565](https://github.com/openshift/kubernetes/pull/80565)
* Make etcd world-executable in Docker image [#79722](https://github.com/openshift/kubernetes/pull/79722)
* kubeadm: change the permissions of generated CSR files from 0644 to 0600 [#81217](https://github.com/openshift/kubernetes/pull/81217)
* Fix conflicted cache when the requests are canceled by other Azure operations [#81282](https://github.com/openshift/kubernetes/pull/81282)
* Remove unused BusyBoxImage [#81241](https://github.com/openshift/kubernetes/pull/81241)
* kubelet: ensure stable order for images in node status [#79578](https://github.com/openshift/kubernetes/pull/79578)
* Fix node port service reachability test for nodes running on localhost [#81157](https://github.com/openshift/kubernetes/pull/81157)
* reduce kubelet getting node lease [#81174](https://github.com/openshift/kubernetes/pull/81174)
* Fix host path test clean up [#79978](https://github.com/openshift/kubernetes/pull/79978)
* Rename HostUtils.GetFSGroup to HostUtils.GetOwner [#81230](https://github.com/openshift/kubernetes/pull/81230)
* Return CR validation errors as field errors [#81212](https://github.com/openshift/kubernetes/pull/81212)
* Rename mount.NewOsExec to mount.NewOSExec [#81187](https://github.com/openshift/kubernetes/pull/81187)
* Fix for kube-proxy to wait for some duration for the node to be defined. [#77167](https://github.com/openshift/kubernetes/pull/77167)
* Remove core dependency from deployment e2e fw [#81231](https://github.com/openshift/kubernetes/pull/81231)
* Deprecate the hyperkube support for cloud-controller-manager [#81219](https://github.com/openshift/kubernetes/pull/81219)
* Add iptables restore failure metric [#81210](https://github.com/openshift/kubernetes/pull/81210)
* Limit v1 webhooks to None and NoneOnDryRun side effects classes [#81046](https://github.com/openshift/kubernetes/pull/81046)
* feat: add Patch method to ScaleInterface [#80699](https://github.com/openshift/kubernetes/pull/80699)
* Fix most linting issues in pkg/util/mount [#81180](https://github.com/openshift/kubernetes/pull/81180)
* Experimental ILB support [#81074](https://github.com/openshift/kubernetes/pull/81074)
* kubeadm: Fix some documentation errors [#81031](https://github.com/openshift/kubernetes/pull/81031)
* fix: switch to VM Update call in attach/detach disk operation [#81208](https://github.com/openshift/kubernetes/pull/81208)
* Record metrics when framework returns unschedulable error [#80416](https://github.com/openshift/kubernetes/pull/80416)
* Support cross resource group load balancer. [#81054](https://github.com/openshift/kubernetes/pull/81054)
* Remove printOnce() on e2e tests [#81203](https://github.com/openshift/kubernetes/pull/81203)
* Update test/OWNERS [#81176](https://github.com/openshift/kubernetes/pull/81176)
* Small fix for kubeadm version def.bzl [#81156](https://github.com/openshift/kubernetes/pull/81156)
* Remove unnecessary serializer override for CRD status, test proto requests on CRD status [#78715](https://github.com/openshift/kubernetes/pull/78715)
* Remove return value of mergeHealthChecks. Simplified HC equivalence check [#70384](https://github.com/openshift/kubernetes/pull/70384)
* Update the Windows server core 1809 image to July version 0709 [#81106](https://github.com/openshift/kubernetes/pull/81106)
* Fix Incorrect isKernelPid check [#81086](https://github.com/openshift/kubernetes/pull/81086)
* fix: use workqueue to speed up of volume binding tests [#80939](https://github.com/openshift/kubernetes/pull/80939)
* Lower verbosity level for some useful scheduler logs; Also add node resource info when pod is scheduled on node. [#80811](https://github.com/openshift/kubernetes/pull/80811)
* Promote resourceQuota e2e verifying 'object count quota' and 'quota scope' to Conformance [#78331](https://github.com/openshift/kubernetes/pull/78331)
* Incorrect docker daemon process name in container manager [#81083](https://github.com/openshift/kubernetes/pull/81083)
* Setup directories for Metrics validation and verification KEP [#80803](https://github.com/openshift/kubernetes/pull/80803)
* Use bigger keys for RSA-PSS, default for TLS 1.3 (Golang 1.13 requirement) [#80734](https://github.com/openshift/kubernetes/pull/80734)
* Changed IsCriticalPod to return true in case of static pods [#80491](https://github.com/openshift/kubernetes/pull/80491)
* Add integration test for ephemeral containers [#79216](https://github.com/openshift/kubernetes/pull/79216)
* Constant time password comparison [#81152](https://github.com/openshift/kubernetes/pull/81152)
* CRD validation refactor [#81105](https://github.com/openshift/kubernetes/pull/81105)
* remove dead code: pkg/api/resources [#81104](https://github.com/openshift/kubernetes/pull/81104)
* kubeadm: remove dependency on pkg/kubeapiserver/authorizer/modes [#81084](https://github.com/openshift/kubernetes/pull/81084)
* Add validation to ConfigMap patch test [#80787](https://github.com/openshift/kubernetes/pull/80787)
* Remove unused package //pkg/util/normalizer [#80526](https://github.com/openshift/kubernetes/pull/80526)
* Fixes missing path parameter to CRD restful container [#80074](https://github.com/openshift/kubernetes/pull/80074)
* Fixed a racing issue in scheduler UT [#79631](https://github.com/openshift/kubernetes/pull/79631)
* Update github.com/json-iterator/go dependency to fix emtpy byte marshaling [#81096](https://github.com/openshift/kubernetes/pull/81096)
* also deprecate --cloud-provider-gce-lb-src-cidrs flag in kube-apiserver [#81094](https://github.com/openshift/kubernetes/pull/81094)
* Fix a racing issue in FakeFilterPlugin [#81091](https://github.com/openshift/kubernetes/pull/81091)
* modify the spelling errors [#81059](https://github.com/openshift/kubernetes/pull/81059)
* Move volume scheduling integration tests into a separate pkg [#81050](https://github.com/openshift/kubernetes/pull/81050)
* Add verbose to reachability test commands [#81049](https://github.com/openshift/kubernetes/pull/81049)
* Add security notices to changelogs [#81044](https://github.com/openshift/kubernetes/pull/81044)
* Scope e2e webhooks to avoid cross-test interference [#81032](https://github.com/openshift/kubernetes/pull/81032)
* Drop cloud-controller-manager artifacts from k/k release [#81029](https://github.com/openshift/kubernetes/pull/81029)
* Refine TestFilterPlugin [#81006](https://github.com/openshift/kubernetes/pull/81006)
* Deprecate SelfLink and introduce feature gate to disable its propagation [#80978](https://github.com/openshift/kubernetes/pull/80978)
* Switch to k8s.io/utils/inotify [#80689](https://github.com/openshift/kubernetes/pull/80689)
* Update CleanupAndExit and OnServiceSynced field comment and bugfix panic params in the construct method [#80502](https://github.com/openshift/kubernetes/pull/80502)
* Fix symlinks in bazel-release [#80461](https://github.com/openshift/kubernetes/pull/80461)
* Optimize logic in EvenPodsSpread API validation [#80395](https://github.com/openshift/kubernetes/pull/80395)
* fix golint failures for pkg/volume/scaleio and pkg/volume/storageos [#79137](https://github.com/openshift/kubernetes/pull/79137)
* get rid of the redundancy field in kube-proxy option [#78204](https://github.com/openshift/kubernetes/pull/78204)
* Fix golint failures of pkg/registry/core/event [#78113](https://github.com/openshift/kubernetes/pull/78113)
* Reduce indents of resource_usage_gatherer [#81053](https://github.com/openshift/kubernetes/pull/81053)
* fix wrong spells in create_namespace.go [#81018](https://github.com/openshift/kubernetes/pull/81018)
* Add CHANGELOG-1.16.md to CHANGELOG.md [#80986](https://github.com/openshift/kubernetes/pull/80986)
* kubeadm e2e networking test for dual-stack podSubnet check. [#80947](https://github.com/openshift/kubernetes/pull/80947)
* Get network-proxy working with GCE. [#78543](https://github.com/openshift/kubernetes/pull/78543)
* Test webhooks with and without watch cache enabled [#79659](https://github.com/openshift/kubernetes/pull/79659)
* Moving e2e boilerplate to separate functions [#79909](https://github.com/openshift/kubernetes/pull/79909)
* kubeadm:  fix name of CA spell error [#81002](https://github.com/openshift/kubernetes/pull/81002)
* add options for name and namespace of leaderelection object [#80681](https://github.com/openshift/kubernetes/pull/80681)
* Fix error collides with imported package name [#80953](https://github.com/openshift/kubernetes/pull/80953)
* Return error returned by CSINode Get if initialization failed [#80935](https://github.com/openshift/kubernetes/pull/80935)
* feat: update multiple files in e2e node with framework helpers [#80843](https://github.com/openshift/kubernetes/pull/80843)
* Use framework.ExpectEqual() in test/e2e_node/[a-d] [#80790](https://github.com/openshift/kubernetes/pull/80790)
* Promote NodePort service creation e2e test to conformance [#80655](https://github.com/openshift/kubernetes/pull/80655)
* Promote taint-based eviction e2e tests to Conformance [#80654](https://github.com/openshift/kubernetes/pull/80654)
* Remove Configurator interface [#80590](https://github.com/openshift/kubernetes/pull/80590)
* Add doc that plugins in bind cycle should not use scheduler NodeInfoSnapshot [#80412](https://github.com/openshift/kubernetes/pull/80412)
* vender upgrade codedellemc/goscaleio to release v0.1.0 [#80321](https://github.com/openshift/kubernetes/pull/80321)
* Add trace to webhook invocations [#78610](https://github.com/openshift/kubernetes/pull/78610)
* Add ImageFSInfo, ContainerStats, and ListContainerStats impl for linux to dockershim [#80105](https://github.com/openshift/kubernetes/pull/80105)
* Fix golint pkg/kubelet/stats/client.go [#78345](https://github.com/openshift/kubernetes/pull/78345)
* Validate CSI Inline Migration unconditionally [#80945](https://github.com/openshift/kubernetes/pull/80945)
* fix: Use %q instead of %v in the scheduling framework [#80885](https://github.com/openshift/kubernetes/pull/80885)
* Bump log level of CSI driver de-registration to match registration handler [#80994](https://github.com/openshift/kubernetes/pull/80994)
* Fix volume reconstruction and add e2e tests [#75071](https://github.com/openshift/kubernetes/pull/75071)
* Use default skuname shared Azure Disk [#80837](https://github.com/openshift/kubernetes/pull/80837)
* cleanup: fix log message error in test case [#80995](https://github.com/openshift/kubernetes/pull/80995)
* cleanup: fix typo "contstruct" -> "construct" [#80992](https://github.com/openshift/kubernetes/pull/80992)
* Fix example urls [#80356](https://github.com/openshift/kubernetes/pull/80356)
* Add davidz627 to testing manfiests csi owners [#80991](https://github.com/openshift/kubernetes/pull/80991)
* Wait for pods to be running before eviction starts [#80879](https://github.com/openshift/kubernetes/pull/80879)
* Refactor kubectl retrieve logs test to use agnhost [#80516](https://github.com/openshift/kubernetes/pull/80516)
* Bump GCE PD CSI Driver testing manifests to v0.5.2-gke.0 for volume limits fix [#80990](https://github.com/openshift/kubernetes/pull/80990)
* kubeadm: use EnsureCertificateAuthorityIsEmbedded() for file discovery [#80966](https://github.com/openshift/kubernetes/pull/80966)
* cleanup: remove package csi duplicated error log [#80866](https://github.com/openshift/kubernetes/pull/80866)
* Remove duplicate scheduler anti-affinity preemption e2e [#80821](https://github.com/openshift/kubernetes/pull/80821)
* Don't delete service endpoints when a generic error occurs [#80273](https://github.com/openshift/kubernetes/pull/80273)
* Added import restrictions file to e2e framework [#80496](https://github.com/openshift/kubernetes/pull/80496)
* Use v1helper.GetPersistentVolumeClaimClass for compatibility [#80460](https://github.com/openshift/kubernetes/pull/80460)
* Propagate errors from DSW to pod events [#80369](https://github.com/openshift/kubernetes/pull/80369)
* Simplify checking in getMinTolerationTime [#79443](https://github.com/openshift/kubernetes/pull/79443)
* Fix golint failures in some pkg/kubelet packages [#75303](https://github.com/openshift/kubernetes/pull/75303)
* kubeadm: enable secure serving for the kube-scheduler [#80951](https://github.com/openshift/kubernetes/pull/80951)
* Refactor and clean up e2e framework utils, this patch handles test/e2e/framework/kubelet_stats.go file [#80706](https://github.com/openshift/kubernetes/pull/80706)
* Add ipv6 support to the e2e kubectl tests [#80610](https://github.com/openshift/kubernetes/pull/80610)
* Upgrade Calico to 3.7.4 [#80536](https://github.com/openshift/kubernetes/pull/80536)
* Move docker specific const to dockershim. [#80961](https://github.com/openshift/kubernetes/pull/80961)
* Disable gzip compression in core control plane components [#80919](https://github.com/openshift/kubernetes/pull/80919)
* kubeadm: add a defer to kubelet bootstrap token deletion [#80820](https://github.com/openshift/kubernetes/pull/80820)
* publishing: remove redundant rules for kubectl [#80893](https://github.com/openshift/kubernetes/pull/80893)
* `kubectl get` does not count binaryData keys on ConfigMap [#80827](https://github.com/openshift/kubernetes/pull/80827)
* kube-proxy: change buckets used by NetworkProgrammingLatency [#80218](https://github.com/openshift/kubernetes/pull/80218)
* Fix comment on dropPodStatusDisabledFields method [#80946](https://github.com/openshift/kubernetes/pull/80946)
* Test verify attach [#80446](https://github.com/openshift/kubernetes/pull/80446)
* feat: implement "post-filter" extension point for scheduling framework [#78097](https://github.com/openshift/kubernetes/pull/78097)
* Fix verify-generated-files to error on untracked files [#80936](https://github.com/openshift/kubernetes/pull/80936)
* Preserve existing ephemeral containers on update, validate ephemeral containers and overhead unconditionally [#80933](https://github.com/openshift/kubernetes/pull/80933)
* update generated files [#80932](https://github.com/openshift/kubernetes/pull/80932)
* increase timeout for maximum-startup-sequence-duration as a stopgap [#80928](https://github.com/openshift/kubernetes/pull/80928)
* Reduce GCE PD Attach Limits by 1 because Node Boot Disk counts as 1 attached disk [#80923](https://github.com/openshift/kubernetes/pull/80923)
* Remove recursion in csiAttacher#waitForVolumeAttachmentInternal [#79144](https://github.com/openshift/kubernetes/pull/79144)
* Handle NotImplemented error in service_controller. [#80660](https://github.com/openshift/kubernetes/pull/80660)
* Toleration priority function score computation [#80922](https://github.com/openshift/kubernetes/pull/80922)
* Fix admissionreview doc typos [#80884](https://github.com/openshift/kubernetes/pull/80884)
* Omit namespace when kubectl get is for the cluster [#80873](https://github.com/openshift/kubernetes/pull/80873)
* kubeadm: fix-certs-generation-for-external-etcd [#80867](https://github.com/openshift/kubernetes/pull/80867)
* csi: Fix socket extension comment [#78736](https://github.com/openshift/kubernetes/pull/78736)
* Fix reserved cgroup systemd [#78793](https://github.com/openshift/kubernetes/pull/78793)
* Unexport kubectl cmd profiling functions [#80920](https://github.com/openshift/kubernetes/pull/80920)
* Fix registry for prometheus-to-sd [#80902](https://github.com/openshift/kubernetes/pull/80902)
* kubeadm: simplified returns [#80894](https://github.com/openshift/kubernetes/pull/80894)
* Don't supress the node update error while logging [#80882](https://github.com/openshift/kubernetes/pull/80882)
* Fix shellcheck failures in hack/verify-test-featuregates.sh [#80505](https://github.com/openshift/kubernetes/pull/80505)
* informer-gen: correctly generate group packages when groups contain hyphens [#80440](https://github.com/openshift/kubernetes/pull/80440)
* Rename cacheWatcher#stop [#80788](https://github.com/openshift/kubernetes/pull/80788)
* handle joinControPlaneDoneTemp.Execute errors [#80891](https://github.com/openshift/kubernetes/pull/80891)
* Fix failing service e2e due to execPod unavailability [#80805](https://github.com/openshift/kubernetes/pull/80805)
* Add IPv6 support to preserve source pod IP test [#80595](https://github.com/openshift/kubernetes/pull/80595)
* kubeadm reset: replace Errorf with Warningf [#80862](https://github.com/openshift/kubernetes/pull/80862)
* Update kube-addon-manager to v9.0.2 [#80861](https://github.com/openshift/kubernetes/pull/80861)
* Add separate cache for CSINode [#80084](https://github.com/openshift/kubernetes/pull/80084)
* Move /pkg/kubectl/cmd/{command} to staging [#80876](https://github.com/openshift/kubernetes/pull/80876)
* Removed unsed return values of createResourceQuota [#80778](https://github.com/openshift/kubernetes/pull/80778)
* Determine system model to get credentials for windows nodes [#80764](https://github.com/openshift/kubernetes/pull/80764)
* Use raw bytes instead of nested map in metav1.Fields [#80730](https://github.com/openshift/kubernetes/pull/80730)
* Promote admissionreview to v1 [#80231](https://github.com/openshift/kubernetes/pull/80231)
* Even Pods Spread - 6. Integration Test [#80011](https://github.com/openshift/kubernetes/pull/80011)
* Only output json format from tests when building junit reports [#80863](https://github.com/openshift/kubernetes/pull/80863)
* Fix selflinks in tests [#80859](https://github.com/openshift/kubernetes/pull/80859)
* Add v9.0.2 to CHANGELOG.md [#80856](https://github.com/openshift/kubernetes/pull/80856)
* Typo fix: DaemonsSet->DaemonSet [#80860](https://github.com/openshift/kubernetes/pull/80860)
* Return early in ApplyScoreWeights if there are no scores [#80846](https://github.com/openshift/kubernetes/pull/80846)
* Make kubeadm join discovery wait for a finite time [#80804](https://github.com/openshift/kubernetes/pull/80804)
* Query nodes in Schedule only when there are no predicates [#80533](https://github.com/openshift/kubernetes/pull/80533)
* Corrected Cinder typos. [#80487](https://github.com/openshift/kubernetes/pull/80487)
* Fix selflinks in events tests [#80858](https://github.com/openshift/kubernetes/pull/80858)
* kubeadm: update the version constants for 1.16 [#80833](https://github.com/openshift/kubernetes/pull/80833)
* Device Plugin API change to include Topology Info in Devices [#74423](https://github.com/openshift/kubernetes/pull/74423)
* Updates to container manager and internal container lifecycle to accommodate TopologyManager [#74357](https://github.com/openshift/kubernetes/pull/74357)
* cleanup: log message typo fix [#80844](https://github.com/openshift/kubernetes/pull/80844)
* Nominate Abdullah Gharaibeh to scheduler maintainers. [#80835](https://github.com/openshift/kubernetes/pull/80835)
* add secret back to the workqueue with delay time, avoid expired bootstrap tokens not being deleted [#77713](https://github.com/openshift/kubernetes/pull/77713)
* Refactor and clean up e2e framework utils, this patch handles test/e2e/framework/psp_util.go file [#77534](https://github.com/openshift/kubernetes/pull/77534)
* feat: enhance Azure cloud provider code to support both AAD and ADFS authentication. [#80841](https://github.com/openshift/kubernetes/pull/80841)
* OWNERS: api-approvers should be approvers on cri-api [#80603](https://github.com/openshift/kubernetes/pull/80603)
* Add a field 'RequiredAccessModes' to the driver info object that is propagated to pvc creation [#80378](https://github.com/openshift/kubernetes/pull/80378)
* Fix wrong indentation in shell [#79827](https://github.com/openshift/kubernetes/pull/79827)
* kubelet: lookup node address for external provider if none is set [#75229](https://github.com/openshift/kubernetes/pull/75229)
* Fix shellcheck failures in test/cmd/{d,l}.*.sh [#79195](https://github.com/openshift/kubernetes/pull/79195)
* Fix some unreasonable places int csi ut [#80848](https://github.com/openshift/kubernetes/pull/80848)
* fix snapshotter rbac rules [#80816](https://github.com/openshift/kubernetes/pull/80816)
* fix kubemark e2e test script [#80427](https://github.com/openshift/kubernetes/pull/80427)
* Use reservoir sampling to select one host from priority list [#78009](https://github.com/openshift/kubernetes/pull/78009)
* do not return error, when the ds is not found [#80798](https://github.com/openshift/kubernetes/pull/80798)
* hostport: Don't masquerade localhost-to-localhost traffic [#80591](https://github.com/openshift/kubernetes/pull/80591)
* cleanup: remove duplicated logging error message in csi_mounter.go, also some typos. [#80522](https://github.com/openshift/kubernetes/pull/80522)
* Don't count unrelated volumes in scheduler predicate [#80360](https://github.com/openshift/kubernetes/pull/80360)
* e2e: Run ginkgo in foreground, elminiate wait & pgrep [#80796](https://github.com/openshift/kubernetes/pull/80796)
* Refactor pkg/kubectl/conditions.go to remove file [#80761](https://github.com/openshift/kubernetes/pull/80761)
* Move pod related functions in file test/e2e/framework/util.go to its sub directory [#80708](https://github.com/openshift/kubernetes/pull/80708)
* Add NormalizeScore extension point for scheduler framework. [#80383](https://github.com/openshift/kubernetes/pull/80383)
* scheduler: make ApplyFeatureGates() stateless [#80144](https://github.com/openshift/kubernetes/pull/80144)
* switch go tests to json output [#80822](https://github.com/openshift/kubernetes/pull/80822)
* Add GetKernelVersion to ipvs.KernelHandler interface [#80636](https://github.com/openshift/kubernetes/pull/80636)
* Convert e2e webhook tests to use v1 API [#80769](https://github.com/openshift/kubernetes/pull/80769)
* Log an error when kube-scheduler fails to update the condition of the pod [#80736](https://github.com/openshift/kubernetes/pull/80736)
* Fix registry for PrometheusDummyExporter [#80809](https://github.com/openshift/kubernetes/pull/80809)
* Move pkg/kubect/explain to staging [#80727](https://github.com/openshift/kubernetes/pull/80727)
* Fix unexpected line end in override flags [#80802](https://github.com/openshift/kubernetes/pull/80802)
* Use framework.ExpectEqual() under test/e2e_kubeadm [#80795](https://github.com/openshift/kubernetes/pull/80795)
* Refine watcher count calculation [#80792](https://github.com/openshift/kubernetes/pull/80792)
* apiextensions: check request scope against CRD scope correctly [#80750](https://github.com/openshift/kubernetes/pull/80750)
* Fix iscsi logout issues [#78941](https://github.com/openshift/kubernetes/pull/78941)
* Refactor pkg/kubectl/{scale.go|rollingupdater.go} for move to staging [#80772](https://github.com/openshift/kubernetes/pull/80772)
* Move pkg/kubectl/cmd/util/openapi/OWNERS to staging [#80765](https://github.com/openshift/kubernetes/pull/80765)
* split coredns dependency to decouple kubeadm and kube-up [#80749](https://github.com/openshift/kubernetes/pull/80749)
* report error message when reset scheduler metrics in e2e test [#80739](https://github.com/openshift/kubernetes/pull/80739)
* Fix tag for gogo/protobuf [#80732](https://github.com/openshift/kubernetes/pull/80732)
* Fix public IP not found issues for VMSS nodes [#80703](https://github.com/openshift/kubernetes/pull/80703)
* e2e_node: clean up non-recommended import [#80680](https://github.com/openshift/kubernetes/pull/80680)
* Un-[Slow] a bunch of networking tests [#80646](https://github.com/openshift/kubernetes/pull/80646)
* Update github.com/docker/distribution to v2.7.1 [#80721](https://github.com/openshift/kubernetes/pull/80721)
* TopologyManager: Fix rename best-effort policy files [#80683](https://github.com/openshift/kubernetes/pull/80683)
* kubeadm: delete bootstrap-kubelet.conf after TLS bootstrap [#80676](https://github.com/openshift/kubernetes/pull/80676)
* Move pkg/kubectl/proxy to staging [#80601](https://github.com/openshift/kubernetes/pull/80601)
* Propagate kubeadm dual-stack feature-gate to all k8s components [#80531](https://github.com/openshift/kubernetes/pull/80531)
* upgrade repo infra to f85734f673056977d8ba04b0386394b684ca2acb [#80755](https://github.com/openshift/kubernetes/pull/80755)
* Move pkg/kubectl/interfaces.go to testing [#80754](https://github.com/openshift/kubernetes/pull/80754)
* Pop expired watchers in case there is no update to cache [#80692](https://github.com/openshift/kubernetes/pull/80692)
* Fix kubeadm file discovery [#80675](https://github.com/openshift/kubernetes/pull/80675)
* Assign OWNERS for pod integration tests to sig-node [#80645](https://github.com/openshift/kubernetes/pull/80645)
* Move pkg/kubectl/generate to staging [#80679](https://github.com/openshift/kubernetes/pull/80679)
* Move pkg/kubectl/polymorphichelpers staging [#80678](https://github.com/openshift/kubernetes/pull/80678)
* Remove duplicated check in ObserveEventAfterAction [#80666](https://github.com/openshift/kubernetes/pull/80666)
* Store key in TimestampedEntry [#80658](https://github.com/openshift/kubernetes/pull/80658)
* fix typos in csi_attacher.go [#80612](https://github.com/openshift/kubernetes/pull/80612)
* Check whether metricObj can be converted to *v1beta2.MetricValueList [#80392](https://github.com/openshift/kubernetes/pull/80392)
* fix nil function invocation in client-go/tools/leaderelection [#78778](https://github.com/openshift/kubernetes/pull/78778)
* kubelet: add UID to kubelet_container_log_filesystem_used_bytes metric [#80657](https://github.com/openshift/kubernetes/pull/80657)
* Avoid echoing request URL in proxy error [#80641](https://github.com/openshift/kubernetes/pull/80641)
* Support passing `Args` for `newrc` function within `test/e2e` [#80615](https://github.com/openshift/kubernetes/pull/80615)
* Use ErrorChannel to communicate errors during parallel execution in interpod_afiinity [#80588](https://github.com/openshift/kubernetes/pull/80588)
* Move pkg/kubectl/metricsutil to staging [#80561](https://github.com/openshift/kubernetes/pull/80561)
* Unify secret and configmap triggers in cacher [#80521](https://github.com/openshift/kubernetes/pull/80521)
* update guide to make the command works as expected [#80424](https://github.com/openshift/kubernetes/pull/80424)
* Remove NodeLister from Scheduler Configurator [#80233](https://github.com/openshift/kubernetes/pull/80233)
* Fix go lint error for cache directory [#79963](https://github.com/openshift/kubernetes/pull/79963)
* Fix/Add comments on cadvisor implementations [#73829](https://github.com/openshift/kubernetes/pull/73829)
* Add e2e test for downward API with host network [#79751](https://github.com/openshift/kubernetes/pull/79751)
* quote container name in container already use error matching [#79623](https://github.com/openshift/kubernetes/pull/79623)
* Proactively remove init Containers in CPUManager static policy [#78762](https://github.com/openshift/kubernetes/pull/78762)
* Fix error case for ExtractFieldPathAsString [#78675](https://github.com/openshift/kubernetes/pull/78675)
* Fix error message of ListTargetHTTPSProxies [#75000](https://github.com/openshift/kubernetes/pull/75000)
* Fix 'concurrency' logs typo [#79956](https://github.com/openshift/kubernetes/pull/79956)
* fixed a typo in kubectl book [#79890](https://github.com/openshift/kubernetes/pull/79890)
* fixed a typo in kubectl book [#79561](https://github.com/openshift/kubernetes/pull/79561)
* Make the check strict to use ExpectNoError() [#78740](https://github.com/openshift/kubernetes/pull/78740)
* Delete the pods from unschedulable queue only when Add succeeds [#78632](https://github.com/openshift/kubernetes/pull/78632)
* document API guarentees and deprecation policies for cloud config files [#80606](https://github.com/openshift/kubernetes/pull/80606)
* Move pkg/kubectl/cmd/util and subdirs to staging [#80701](https://github.com/openshift/kubernetes/pull/80701)
* Use HTTPS as etcd-apiserver protocol when mTLS is enabled [#77561](https://github.com/openshift/kubernetes/pull/77561)
* Upgrade logexporter version. [#80709](https://github.com/openshift/kubernetes/pull/80709)
* kube-proxy in ipvs mode use ipvs to redirect traffic [#80688](https://github.com/openshift/kubernetes/pull/80688)
* Remove ExecutionHook API changelog entry [#80480](https://github.com/openshift/kubernetes/pull/80480)
* Move pkg/kubectl/apply and subdirectories to staging [#80695](https://github.com/openshift/kubernetes/pull/80695)
* Remove final file from pkg/kubectl/util [#80652](https://github.com/openshift/kubernetes/pull/80652)
* kubelet: change node-lease-renew-interval to 0.25 of lease-renew-duration [#80429](https://github.com/openshift/kubernetes/pull/80429)
* Kubeadm Networking Configuration E2E Tests [#80259](https://github.com/openshift/kubernetes/pull/80259)
* Move pkg/kubectl/cmd/util/openapi to staging [#80620](https://github.com/openshift/kubernetes/pull/80620)
* Rename 'preferred' TopologyManager policy to 'best-effort' [#80301](https://github.com/openshift/kubernetes/pull/80301)
* Move pkg/kubectl/version to staging [#80656](https://github.com/openshift/kubernetes/pull/80656)
* Update misleading comemnts for HandleCrash [#80350](https://github.com/openshift/kubernetes/pull/80350)
* Even Pods Spread - 5. Priority Core [#79063](https://github.com/openshift/kubernetes/pull/79063)
* Emit the nvidia driver version in gpu e2e test [#77100](https://github.com/openshift/kubernetes/pull/77100)
* Add message which shows how much CPU used [#80669](https://github.com/openshift/kubernetes/pull/80669)
* fix building test/e2e_node/ with bazel 0.28.1 [#80662](https://github.com/openshift/kubernetes/pull/80662)
* Fix error handling issue in kubeadm upgrade diff [#80648](https://github.com/openshift/kubernetes/pull/80648)
* Add simple pod updates batching to endpoint controller. [#80509](https://github.com/openshift/kubernetes/pull/80509)
* Check error return from GetPodKey [#80448](https://github.com/openshift/kubernetes/pull/80448)
* Send a reject message to permit plugin when preempting a WaitingPod [#80254](https://github.com/openshift/kubernetes/pull/80254)
* fix pv-controller sync check node affinity for scheduled claim [#79696](https://github.com/openshift/kubernetes/pull/79696)
* Retry metadata requests in get-credentials and valid-storage-scope [#80635](https://github.com/openshift/kubernetes/pull/80635)
* build: Add Release Engineering OWNERS [#80631](https://github.com/openshift/kubernetes/pull/80631)
* Follow up #80474: use correct format verb [#80619](https://github.com/openshift/kubernetes/pull/80619)
* Revert "e2e: Skip multi-node PV test when pods scheduled on the same node [#80578](https://github.com/openshift/kubernetes/pull/80578)
* Move pkg/kubectl/describe to staging [#80552](https://github.com/openshift/kubernetes/pull/80552)
* Remove unnecessary loop for lowering expectations [#79068](https://github.com/openshift/kubernetes/pull/79068)
* Bump kube-addon-manager's version to v9.0.2 [#80630](https://github.com/openshift/kubernetes/pull/80630)
* Moves pkg/kubectl/util/i18n to staging [#80608](https://github.com/openshift/kubernetes/pull/80608)
* kubeadm: handle ResetClusterStatusForNode errors [#80573](https://github.com/openshift/kubernetes/pull/80573)
* cleanup: log message typo fix [#80524](https://github.com/openshift/kubernetes/pull/80524)
* kubeadm: remove dependency on pkg/kubeapiserver/authorizer/modes [#80307](https://github.com/openshift/kubernetes/pull/80307)
* Don´t translate to IPv6 empty addresses [#80634](https://github.com/openshift/kubernetes/pull/80634)
* e2e_kubeadm: clean up non-recommended import [#80617](https://github.com/openshift/kubernetes/pull/80617)
* Bug fix: set enableTcpReset to true for Azure SLB load balancer rules [#80624](https://github.com/openshift/kubernetes/pull/80624)
* PVC protection controller: fix PVC leaks [#80476](https://github.com/openshift/kubernetes/pull/80476)
* Document and improve defaulting for MakePersistentVolume, dedupe some manual PV creations [#80543](https://github.com/openshift/kubernetes/pull/80543)
* Allow customize base image and released image registry [#80525](https://github.com/openshift/kubernetes/pull/80525)
* pkg/volume/portworx: Update vendor for libopenstorage/openstorage to v1.0.0 [#80495](https://github.com/openshift/kubernetes/pull/80495)
* fix wrong spells in events.go [#80520](https://github.com/openshift/kubernetes/pull/80520)
* fix kube-proxy manifest [#80566](https://github.com/openshift/kubernetes/pull/80566)
* Move pkg/kubectl/drain to staging [#80562](https://github.com/openshift/kubernetes/pull/80562)
* doc: nominate Draven to scheduler reviewers. [#80551](https://github.com/openshift/kubernetes/pull/80551)
* Promote job completion after failure e2e test to Conformance [#80550](https://github.com/openshift/kubernetes/pull/80550)
* Move some pkg/kubectl into polymorphichelpers [#80548](https://github.com/openshift/kubernetes/pull/80548)
* Promote job pod orphaning/adotion e2e test to Conformance [#80544](https://github.com/openshift/kubernetes/pull/80544)
* Fix detachment of deleted volumes [#80518](https://github.com/openshift/kubernetes/pull/80518)
* Refactor nested loop in getTPMapMatchingSpreadConstraints [#80503](https://github.com/openshift/kubernetes/pull/80503)
* Small Fix: Use correct format verb [#80474](https://github.com/openshift/kubernetes/pull/80474)
* Add ip family autodetection to the testing framework [#80398](https://github.com/openshift/kubernetes/pull/80398)
* Promote StatefulSet Replica scaling [#80150](https://github.com/openshift/kubernetes/pull/80150)
* persistent and ephemeral csi volumes [#79983](https://github.com/openshift/kubernetes/pull/79983)
* Added code for e2e tests for network policy. [#77593](https://github.com/openshift/kubernetes/pull/77593)
* Use new reverse protobuf marshalling [#77355](https://github.com/openshift/kubernetes/pull/77355)
* Remove unneeded directory [#80361](https://github.com/openshift/kubernetes/pull/80361)
* Fix golint failure in pkg/quota/v1/evaluator/core [#80094](https://github.com/openshift/kubernetes/pull/80094)
* Update csi hostpath driver in e2e [#79955](https://github.com/openshift/kubernetes/pull/79955)
* Fix nil pointer dereference error in volume_stat_calculator [#79851](https://github.com/openshift/kubernetes/pull/79851)
* Even Pods Spread - 4. Preemption Support [#79062](https://github.com/openshift/kubernetes/pull/79062)
* Refactor and clean up e2e framework utils, this patch handles test/e2e/framework/perf_util.go file [#77532](https://github.com/openshift/kubernetes/pull/77532)
* Fix leader election in kube-addon manager [#80575](https://github.com/openshift/kubernetes/pull/80575)
* cleanup: fix some log and error capitalizations [#80318](https://github.com/openshift/kubernetes/pull/80318)
* Move pkg/kubectl/apply.go to staging [#80558](https://github.com/openshift/kubernetes/pull/80558)
* fix typos in pv_controller.go [#80556](https://github.com/openshift/kubernetes/pull/80556)
* Move pkg/kubectl/apps to staging [#80554](https://github.com/openshift/kubernetes/pull/80554)
* Remove unwanted string converstion in metrics errors [#80347](https://github.com/openshift/kubernetes/pull/80347)
* cleanup: remove useless code [#80166](https://github.com/openshift/kubernetes/pull/80166)
* Fix es initial cluster formation & update es to 7.2.0 [#80421](https://github.com/openshift/kubernetes/pull/80421)
* Dedupe all Make PVC API object functions into the one MakePersistentVolumeClaim to rule them all [#80382](https://github.com/openshift/kubernetes/pull/80382)
* feat: use scheduler.New in daemonset integration test [#79417](https://github.com/openshift/kubernetes/pull/79417)
* use ExpectEqual in density_test.go [#80417](https://github.com/openshift/kubernetes/pull/80417)
* Fix typo in network policy ingress rule [#79425](https://github.com/openshift/kubernetes/pull/79425)
* Move pkg/kubectl/util to staging [#80540](https://github.com/openshift/kubernetes/pull/80540)
* fix: return empty string when status is nil [#80469](https://github.com/openshift/kubernetes/pull/80469)
* Add service reachability test util function [#79667](https://github.com/openshift/kubernetes/pull/79667)
* Precheck score plugins' weight when initializing [#80305](https://github.com/openshift/kubernetes/pull/80305)
* Even Pods Spread - 3. Predicates Core [#77828](https://github.com/openshift/kubernetes/pull/77828)
* kubeadm: add forgotten error check [#80529](https://github.com/openshift/kubernetes/pull/80529)
* Set the systemUUID for windows nodes [#80486](https://github.com/openshift/kubernetes/pull/80486)
* remove function apply-encryption-config in configure-helper [#80232](https://github.com/openshift/kubernetes/pull/80232)
* Use scheduler cache in affinity priority functions [#80220](https://github.com/openshift/kubernetes/pull/80220)
* Add new iSCSI refcounter [#80091](https://github.com/openshift/kubernetes/pull/80091)
* add protection for reserved API groups [#79992](https://github.com/openshift/kubernetes/pull/79992)
* proxy/ipvs: Only compute node ip addresses once per sync [#79444](https://github.com/openshift/kubernetes/pull/79444)
* Add migration shim for verifyvolumeattachment and bulk verify [#80443](https://github.com/openshift/kubernetes/pull/80443)
* Fix error override when saveVolumeData occurs error [#80451](https://github.com/openshift/kubernetes/pull/80451)
* ignore failed pods to not block rolling update daemonset [#78170](https://github.com/openshift/kubernetes/pull/78170)
* Fix retry issues when the nodes are under deleting on Azure [#80419](https://github.com/openshift/kubernetes/pull/80419)
* fix grammar error [#80478](https://github.com/openshift/kubernetes/pull/80478)
* Fix golint failure in pkg/util/netsh/testing/ [#80096](https://github.com/openshift/kubernetes/pull/80096)
* Add support for AWS EBS on windows [#79552](https://github.com/openshift/kubernetes/pull/79552)
* Even Pods Spread - 2. Calculating Predicates Metadata [#77760](https://github.com/openshift/kubernetes/pull/77760)
* Nominate Abdullah Gharaibeh to scheduler reviewers. [#80223](https://github.com/openshift/kubernetes/pull/80223)
* refactor: move service related functions in service pkg [#77155](https://github.com/openshift/kubernetes/pull/77155)
* Cleanup the TopologyManager socketmask abstraction [#80315](https://github.com/openshift/kubernetes/pull/80315)
* Update the cpumanager and topologymanager to error out if an invalid policy is given [#80294](https://github.com/openshift/kubernetes/pull/80294)
* Fix potential panic in nodeGetVolumeStatsV1 [#80459](https://github.com/openshift/kubernetes/pull/80459)
* Pod e2e for reading last line can flake if pod runs to completion [#80393](https://github.com/openshift/kubernetes/pull/80393)
* add link of kubeadm config doc [#80433](https://github.com/openshift/kubernetes/pull/80433)
* Add CSIDriver creation factory to e2e framework [#80375](https://github.com/openshift/kubernetes/pull/80375)
* Change default PVC AccessModes to RWO in test framework [#80377](https://github.com/openshift/kubernetes/pull/80377)
* GCP config: gke-exec-auth-plugin for ValidatingAdmissionWebhook [#79553](https://github.com/openshift/kubernetes/pull/79553)
* pkg/util/workqueue/prometheus: fix double registration [#77553](https://github.com/openshift/kubernetes/pull/77553)
* Refactors to kubectl CP command [#80436](https://github.com/openshift/kubernetes/pull/80436)
* Fixes 78001 The implementation of Filter extension for the new framework [#78477](https://github.com/openshift/kubernetes/pull/78477)
* Calling Unreserve plugin before recordSchedulingFailure in case of bi… [#80341](https://github.com/openshift/kubernetes/pull/80341)
* Add CPU usage nano cores for windows nodes [#80176](https://github.com/openshift/kubernetes/pull/80176)
* make client-go/util/retry more generic [#80402](https://github.com/openshift/kubernetes/pull/80402)
* Add Ephemeral Containers to the Kubernetes core API [#59416](https://github.com/openshift/kubernetes/pull/59416)
* Fix csi attacher unit tests using t.Run() [#80418](https://github.com/openshift/kubernetes/pull/80418)
* Bump smd [#80380](https://github.com/openshift/kubernetes/pull/80380)
* add ability for gce to bulk verify attached disks [#79897](https://github.com/openshift/kubernetes/pull/79897)
* Don't expect pod to stay up during node upgrade [#80276](https://github.com/openshift/kubernetes/pull/80276)
* kubeadm: remove dependency on pkg/util/procfs [#80296](https://github.com/openshift/kubernetes/pull/80296)
* Surface error returned by LoadConfig [#80331](https://github.com/openshift/kubernetes/pull/80331)
* Even Pods Spread - 1. API changes [#77327](https://github.com/openshift/kubernetes/pull/77327)
* Move kubectl scheme [#79408](https://github.com/openshift/kubernetes/pull/79408)
* bazel: add openapi generation for non-main spec and fix main spec [#80125](https://github.com/openshift/kubernetes/pull/80125)
* kubeadm should always fall back to client version when there is any internet issue [#80024](https://github.com/openshift/kubernetes/pull/80024)
* Promote existing E2Es for hostport/HostIP resolution to conformance [#78350](https://github.com/openshift/kubernetes/pull/78350)
* Move volume_expand tests to storage e2e testsuites [#78000](https://github.com/openshift/kubernetes/pull/78000)
* Return the error from validateOverhead in RuntimeClass#Validate [#79565](https://github.com/openshift/kubernetes/pull/79565)
* Correct test name for existing E2E related to backofflimit in jobs [#75632](https://github.com/openshift/kubernetes/pull/75632)
* Cleanup versioning serializer [#80362](https://github.com/openshift/kubernetes/pull/80362)
* fix parameterization of test error message [#80327](https://github.com/openshift/kubernetes/pull/80327)
* e2e test: Remove unnecessary return value check [#79921](https://github.com/openshift/kubernetes/pull/79921)
* remove sudo from storage tests [#80329](https://github.com/openshift/kubernetes/pull/80329)
* add new function to return partial list of found instances [#80180](https://github.com/openshift/kubernetes/pull/80180)
* Promote API metadata return value [#80153](https://github.com/openshift/kubernetes/pull/80153)
* Improve readability for image manager tests [#80104](https://github.com/openshift/kubernetes/pull/80104)
* Register Kubelet server metrics [#80324](https://github.com/openshift/kubernetes/pull/80324)
* Revert "feat: cleanup pod critical pod annotations feature" [#80277](https://github.com/openshift/kubernetes/pull/80277)
* Add OWNERS for generated openapi spec package [#80246](https://github.com/openshift/kubernetes/pull/80246)
* Cleanup kubelet authz tests & make explicit [#80234](https://github.com/openshift/kubernetes/pull/80234)
* Update deprecated diff.ObjectGoPrintDiff method [#80252](https://github.com/openshift/kubernetes/pull/80252)
* gce: configure: use 'amd64' in kube core images manifest [#80229](https://github.com/openshift/kubernetes/pull/80229)
* Rename TriggerPublisherFunc as IndexerFunc [#80300](https://github.com/openshift/kubernetes/pull/80300)
* Refactor and Move node related methods to framework/node package[1] [#79879](https://github.com/openshift/kubernetes/pull/79879)
* Fix golint failure in pkg/controller/volume/expand [#80088](https://github.com/openshift/kubernetes/pull/80088)
* Adding metrics to nfs driver [#75805](https://github.com/openshift/kubernetes/pull/75805)
* Skip unnecessary copy of Selector [#80230](https://github.com/openshift/kubernetes/pull/80230)
* make node lease renew interval more heuristic [#80173](https://github.com/openshift/kubernetes/pull/80173)
* Scheduler changes to introduce alpha support for Pod Overhead [#78319](https://github.com/openshift/kubernetes/pull/78319)
* build: bazel: release tars should use arch in the name [#80266](https://github.com/openshift/kubernetes/pull/80266)
* Skip unnecessary operations if diff is <= 0 [#80263](https://github.com/openshift/kubernetes/pull/80263)
* Revert "Promote pod autoscaling" [#80261](https://github.com/openshift/kubernetes/pull/80261)
* fix panic in ResourceLocation in case of empty pod ip list [#80260](https://github.com/openshift/kubernetes/pull/80260)
* Update structured-merge-diff version [#79551](https://github.com/openshift/kubernetes/pull/79551)
* Fixes TestScorePlugin flakiness. [#80256](https://github.com/openshift/kubernetes/pull/80256)
* Remove unnecessary string() from policy_none [#80235](https://github.com/openshift/kubernetes/pull/80235)
* Simplify trigger functions in cacher [#79793](https://github.com/openshift/kubernetes/pull/79793)
* Adds WindowsOptions.RunAsUserName field [#79489](https://github.com/openshift/kubernetes/pull/79489)
* Check error return from MetaNamespaceKeyFunc [#79060](https://github.com/openshift/kubernetes/pull/79060)
* Correct test name for existing E2E related to active deadline in jobs [#75629](https://github.com/openshift/kubernetes/pull/75629)
* kubeadm: get rid of dependency on pkg/util/node [#79477](https://github.com/openshift/kubernetes/pull/79477)
* Add Topology Manager Implementations based on Interfaces [#73580](https://github.com/openshift/kubernetes/pull/73580)
* Fix iSCSI storage plugin cleanup in block volumes [#79977](https://github.com/openshift/kubernetes/pull/79977)
* Add check to reduce orphaned volume [#79971](https://github.com/openshift/kubernetes/pull/79971)
* Add patch method for container images [#74703](https://github.com/openshift/kubernetes/pull/74703)
* Add passthrough for MountOptions for NodeStageVolume for CSI [#80191](https://github.com/openshift/kubernetes/pull/80191)
* Prune hub-type client/informer/lister from kube-aggregator [#79418](https://github.com/openshift/kubernetes/pull/79418)
* Update unit test with expected query parameters [#80236](https://github.com/openshift/kubernetes/pull/80236)
* Score plugin for the scheduling framework. [#79109](https://github.com/openshift/kubernetes/pull/79109)
* release: accept empty KUBE_DOCKER_IMAGE_TAG [#80185](https://github.com/openshift/kubernetes/pull/80185)
* Bump kube-openapi and structured-merge-diff [#80123](https://github.com/openshift/kubernetes/pull/80123)
* Promote pod autoscaling [#79954](https://github.com/openshift/kubernetes/pull/79954)
* v1.15.0 API compatibility data [#79544](https://github.com/openshift/kubernetes/pull/79544)
* Fix message of failed sync [#75260](https://github.com/openshift/kubernetes/pull/75260)
* Remove duplicate requestInfoResolver [#80206](https://github.com/openshift/kubernetes/pull/80206)
* kubectl/docs/book: bump lodash from 4.17.5 to 4.17.13 [#80167](https://github.com/openshift/kubernetes/pull/80167)
* More consistent env var handling in vsphere e2e test [#79945](https://github.com/openshift/kubernetes/pull/79945)
* Make taint.ToString() consistent with the reverse parsing logic [#79834](https://github.com/openshift/kubernetes/pull/79834)
* Check return value of LabelSelectorAsSelector in describe [#80183](https://github.com/openshift/kubernetes/pull/80183)
* Log warning if config labels deletion returns false [#79989](https://github.com/openshift/kubernetes/pull/79989)
* Add Policy None for Topology Manager [#79343](https://github.com/openshift/kubernetes/pull/79343)
* Avoid RbdDiskManager's DetachDisk function never be executed again [#79940](https://github.com/openshift/kubernetes/pull/79940)
* Support scaling HPA to/from zero pods for object/external metrics [#74526](https://github.com/openshift/kubernetes/pull/74526)
* Tolerate the case if `related` event cannot be found [#80200](https://github.com/openshift/kubernetes/pull/80200)
* kubeadm: fix the bug that bazel build does not respect hack/print-workspace-status.sh [#80165](https://github.com/openshift/kubernetes/pull/80165)
* Adds json struct tags to exposed API types [#80050](https://github.com/openshift/kubernetes/pull/80050)
* Add support for writing out of tree custom scheduler plugins [#78162](https://github.com/openshift/kubernetes/pull/78162)
* Fix no audit policy by default in hack/local-up-cluster.sh [#80189](https://github.com/openshift/kubernetes/pull/80189)
* Use docker official redis images [#80126](https://github.com/openshift/kubernetes/pull/80126)
* Fix error shadowing error for createPDWithRetry so failures return actual error [#80188](https://github.com/openshift/kubernetes/pull/80188)
* remove github.com/kardianos/osext [#80142](https://github.com/openshift/kubernetes/pull/80142)
* fix: rename RegisterPriorityFunction2 to RegisterPriorityMapReduceFunction [#80132](https://github.com/openshift/kubernetes/pull/80132)
* feat: use channel instead of mutex in scheduling predicates [#79777](https://github.com/openshift/kubernetes/pull/79777)
* Consolidate block and filesystem tests [#79730](https://github.com/openshift/kubernetes/pull/79730)
* Add Bind extension point to the scheduling framework [#79313](https://github.com/openshift/kubernetes/pull/79313)
* Improve windows home directory selection [#73923](https://github.com/openshift/kubernetes/pull/73923)
* Propagate error from creating cacher and storage decorators up [#80160](https://github.com/openshift/kubernetes/pull/80160)
* kubeadm/*/phases/init/certs,kubeconfig: add "kubernetes-version" flag [#80115](https://github.com/openshift/kubernetes/pull/80115)
* removed flaky watch code and added NewIndexerInformerWatcher for LimitRange test case [#76328](https://github.com/openshift/kubernetes/pull/76328)
* Adds kubeadm feature-gate for dual-stack (IPv6DualStack) [#80145](https://github.com/openshift/kubernetes/pull/80145)
* Refactored metrics-related functions from framework/metrics_util.go [#79753](https://github.com/openshift/kubernetes/pull/79753)
* Add `docs` section to pull request template [#79361](https://github.com/openshift/kubernetes/pull/79361)
* Break out of inner loop when newQuantity is negative in admissionRequirementList#subtract [#77686](https://github.com/openshift/kubernetes/pull/77686)
* Check error return from Update [#77323](https://github.com/openshift/kubernetes/pull/77323)
* Break out of loop when currentRevision is found in defaultStatefulSetControl#getStatefulSetRevisions [#78361](https://github.com/openshift/kubernetes/pull/78361)
* Fix (some) kubelet watches to propagate all options [#80162](https://github.com/openshift/kubernetes/pull/80162)
* Remove manual conversions for ListOptions [#80157](https://github.com/openshift/kubernetes/pull/80157)
* Bugfix: csi plugin supporting raw block that does not need attach mounted failed [#79920](https://github.com/openshift/kubernetes/pull/79920)
* Don't print non-error (blank lines in this case) to stdout [#78774](https://github.com/openshift/kubernetes/pull/78774)
* delivery event non blocking firstly [#76239](https://github.com/openshift/kubernetes/pull/76239)
* kubeadm: cleanup unnecessary k8sVer parameter for GetStaticPodSpecs [#80103](https://github.com/openshift/kubernetes/pull/80103)
* publishing: bump go versions for 1.13 and 1.14 [#80151](https://github.com/openshift/kubernetes/pull/80151)
* Add documentation about "non-zero requests" [#78263](https://github.com/openshift/kubernetes/pull/78263)
* Drop -r for variable within loop [#80141](https://github.com/openshift/kubernetes/pull/80141)
* cluster: configure: load images and add tags with no arch [#80054](https://github.com/openshift/kubernetes/pull/80054)
* proxy/ipvs: increase log level for graceful termination [#80100](https://github.com/openshift/kubernetes/pull/80100)
* Register WatchEvents metric [#80087](https://github.com/openshift/kubernetes/pull/80087)
* Update pd csi driver images to most recent stable [#80071](https://github.com/openshift/kubernetes/pull/80071)
* Move etcd/util to etcd3/ [#79645](https://github.com/openshift/kubernetes/pull/79645)
* Make service "no endpoints" test use agnhost connect [#80086](https://github.com/openshift/kubernetes/pull/80086)
* Fixes mount/unmount paths for migrated inline volumes [#80048](https://github.com/openshift/kubernetes/pull/80048)
* kubeadm: support fetching configuration from the original cluster for 'upgrade diff' [#80025](https://github.com/openshift/kubernetes/pull/80025)
* apiserver: wire OpenAPI into sample-apiserver [#79843](https://github.com/openshift/kubernetes/pull/79843)
* Add explicit warning for deprecation of Cinder and ScaleIO volume providers [#80099](https://github.com/openshift/kubernetes/pull/80099)
* release lib: docker save remove special name for amd64 [#80047](https://github.com/openshift/kubernetes/pull/80047)
* Wait for StackdriverLogging service to stop before restarting it. [#79447](https://github.com/openshift/kubernetes/pull/79447)
* Remove deprecated --containerized flag in kubelet [#80043](https://github.com/openshift/kubernetes/pull/80043)
* Stop testing containerized kubelet in e2e-node [#74177](https://github.com/openshift/kubernetes/pull/74177)
* Cloud provider AWS library should query instance by ID when possible [#78140](https://github.com/openshift/kubernetes/pull/78140)
* Remove support for etcd2 from cluster/images/etcd image [#80037](https://github.com/openshift/kubernetes/pull/80037)
* use klog.Error instead of klog.Errorf when had no format [#80033](https://github.com/openshift/kubernetes/pull/80033)
* Use Join instead of concat it manually in cephfs. [#79415](https://github.com/openshift/kubernetes/pull/79415)
* Close watcher early for volume detachment [#79113](https://github.com/openshift/kubernetes/pull/79113)
* Migrate scheduler to use v1beta1 Event API [#78447](https://github.com/openshift/kubernetes/pull/78447)
* Add josephburnett to podautoscaler OWNERS. [#80077](https://github.com/openshift/kubernetes/pull/80077)
* If volume in delete request does not exist, return success. [#79656](https://github.com/openshift/kubernetes/pull/79656)
* Promote WatchBookmarks to beta [#79786](https://github.com/openshift/kubernetes/pull/79786)
* Fix update-codegen.sh for staging repos to not rely on scripts being executable [#79081](https://github.com/openshift/kubernetes/pull/79081)
* tests: Fixes jessie-dnsutils image build [#80053](https://github.com/openshift/kubernetes/pull/80053)
* Avoid truncating long messages in docker test logs [#80046](https://github.com/openshift/kubernetes/pull/80046)
* feat: cleanup pod critical pod annotations feature [#79554](https://github.com/openshift/kubernetes/pull/79554)
* add myself and lbernail as IPVS approvers [#80067](https://github.com/openshift/kubernetes/pull/80067)
* improve error messages for verifydependency [#80060](https://github.com/openshift/kubernetes/pull/80060)
* Update to go 1.12.7 [#79966](https://github.com/openshift/kubernetes/pull/79966)
* Add davidz627 (David Zhu) to Approvers for OperationExecutor and GCE PD [#80049](https://github.com/openshift/kubernetes/pull/80049)
* mark dashboard tests [Feature:Dashboard] [#80044](https://github.com/openshift/kubernetes/pull/80044)
* update code documentation to reflect change in status [#79900](https://github.com/openshift/kubernetes/pull/79900)
* Check limits for resolve conf outside the loop [#78414](https://github.com/openshift/kubernetes/pull/78414)
* apiserver: add --shutdown-delay-duration to keep serving until LBs stop sending traffic [#74416](https://github.com/openshift/kubernetes/pull/74416)
* clean up: node dropDisabledFields [#79741](https://github.com/openshift/kubernetes/pull/79741)
* Pass desiredPods to CleanupPods [#79681](https://github.com/openshift/kubernetes/pull/79681)
* Promote admission webhook API to v1 [#79549](https://github.com/openshift/kubernetes/pull/79549)
* add "burst" validation check to code-generator [#79077](https://github.com/openshift/kubernetes/pull/79077)
* Limit the read length of ioutil.ReadAll in `pkg/kubelet` and `pkg/probe` [#76518](https://github.com/openshift/kubernetes/pull/76518)
* Cleanup: Audit log and error capitalization [#79566](https://github.com/openshift/kubernetes/pull/79566)
* Add new agnhost subcommand for a networking test [#79423](https://github.com/openshift/kubernetes/pull/79423)
* The garbage collector and quota counter should use the metadata client and protobuf to access resources [#78742](https://github.com/openshift/kubernetes/pull/78742)
* Call getKubeletSandboxes first in containerGC#evictSandboxes [#78368](https://github.com/openshift/kubernetes/pull/78368)
* Avoid unnecessary concatenation of errors [#77429](https://github.com/openshift/kubernetes/pull/77429)
* Remove unnecessary string() [#78558](https://github.com/openshift/kubernetes/pull/78558)
* add rbac for events.k8s.io apiGroup to system:kube-scheduler [#80030](https://github.com/openshift/kubernetes/pull/80030)
* Cleanup for dualstack e2e tests [#80001](https://github.com/openshift/kubernetes/pull/80001)
* Remove make-symlinks flag and corresponding code [#80017](https://github.com/openshift/kubernetes/pull/80017)
* chore: make some func as public in azure provider [#79981](https://github.com/openshift/kubernetes/pull/79981)
* Update CHANGELOG-1.14.md [#76979](https://github.com/openshift/kubernetes/pull/76979)
* Add support for HA kubemark [#80026](https://github.com/openshift/kubernetes/pull/80026)
* HPA incorrectly reported condition status [#79859](https://github.com/openshift/kubernetes/pull/79859)
* RuntimeClass-admission: fixup comment, simplify nested ifs [#79621](https://github.com/openshift/kubernetes/pull/79621)
* keep processing other nodes for the nil node error [#80018](https://github.com/openshift/kubernetes/pull/80018)
* Remove support for KUBEMARK_MASTER_COMPONENTS_QPS_LIMITS [#80015](https://github.com/openshift/kubernetes/pull/80015)
* Populate API version in synthetic authorization requests [#80007](https://github.com/openshift/kubernetes/pull/80007)
* Flush out current namespace when resources are not found [#79968](https://github.com/openshift/kubernetes/pull/79968)
* Add timestamps to the docker test logs [#79949](https://github.com/openshift/kubernetes/pull/79949)
* update code docs around old todo that is not going to happen [#79892](https://github.com/openshift/kubernetes/pull/79892)
* Return 400 on invalid patch requests [#79239](https://github.com/openshift/kubernetes/pull/79239)
* Trace step should be at the end of calls rather than the begin. [#78280](https://github.com/openshift/kubernetes/pull/78280)
* Use EPOLL_CLOEXEC to prevent fd leaks. [#74691](https://github.com/openshift/kubernetes/pull/74691)
* Fix projected volume test clean up [#79924](https://github.com/openshift/kubernetes/pull/79924)
* feat: use framework.ExpectNotEqual in e2e test [#79862](https://github.com/openshift/kubernetes/pull/79862)
* Remove unnecessay call to findNewReplicaSet [#79505](https://github.com/openshift/kubernetes/pull/79505)
* reference paths to bump dependencies [#79366](https://github.com/openshift/kubernetes/pull/79366)
* Update namespace controller to use the metadata client [#78744](https://github.com/openshift/kubernetes/pull/78744)
* add wojtek-t and yastij as approvers/reviewers for events package [#79998](https://github.com/openshift/kubernetes/pull/79998)
* Remove incorrect ampersand in front of AverageValue in describeHorizontalPodAutoscalerV2beta2 [#79960](https://github.com/openshift/kubernetes/pull/79960)
* promote bentheelder to build/ approver, move zmerlynn and jbeda to emeritus [#79947](https://github.com/openshift/kubernetes/pull/79947)
* fix: use schedulerCache instead of podlister in config factory [#79877](https://github.com/openshift/kubernetes/pull/79877)
* Short-circuit the evaluation of `cpuFraction` and `memoryFraction` [#79453](https://github.com/openshift/kubernetes/pull/79453)
* kubeadm: cleanup code about cobra [#79979](https://github.com/openshift/kubernetes/pull/79979)
* Add benchmarks for FieldManager handling [#79946](https://github.com/openshift/kubernetes/pull/79946)
* Ignore unschedulable pods [#79657](https://github.com/openshift/kubernetes/pull/79657)
* Avoid conflicts with other cobra auto completions [#70470](https://github.com/openshift/kubernetes/pull/70470)
* Migrate kubemark to e2e-up/e2e-down scripts [#78246](https://github.com/openshift/kubernetes/pull/78246)
* Remove dead code from csi_client [#79894](https://github.com/openshift/kubernetes/pull/79894)
* Hollow-node should use separate client for heartbeats [#79889](https://github.com/openshift/kubernetes/pull/79889)
* Deployment Controller - avoid unnecessary copying of pod objects in getPodMapForDeployment [#79937](https://github.com/openshift/kubernetes/pull/79937)
* Update caddy vendor dependency to v1.0.1 [#79128](https://github.com/openshift/kubernetes/pull/79128)
* Remove unwanted `else` block from statefulset controller. [#75922](https://github.com/openshift/kubernetes/pull/75922)
* cancel process node when error occurs [#79774](https://github.com/openshift/kubernetes/pull/79774)
* Address couple of issue on image build for ARM arch [#79692](https://github.com/openshift/kubernetes/pull/79692)
* serviceaccounts/token should return 405 instead of 404 [#78085](https://github.com/openshift/kubernetes/pull/78085)
* build_defs/pkg/make_deb.py needs python2 [#79807](https://github.com/openshift/kubernetes/pull/79807)
* Use ExpectEqual under e2e/apimachinery [#79685](https://github.com/openshift/kubernetes/pull/79685)
* Add e2e tests for ipv6 dual stack feature [#78801](https://github.com/openshift/kubernetes/pull/78801)
* unit tests for operationGenerator.GenerateUnmapVolumeFunc [#78267](https://github.com/openshift/kubernetes/pull/78267)
* Add micro-benchmark for DeploymentController.getPodMapForDeployment method [#79933](https://github.com/openshift/kubernetes/pull/79933)
* Update SECURITY_CONTACTS with current PSC [#78470](https://github.com/openshift/kubernetes/pull/78470)
* kubectl book: added a leading slash to apis path [#79932](https://github.com/openshift/kubernetes/pull/79932)
* feat: use framework.ExpectEqual instead of should [#79864](https://github.com/openshift/kubernetes/pull/79864)
* Remove unintended ampersand in front of in.Current.AverageValue [#79856](https://github.com/openshift/kubernetes/pull/79856)
* improve error msg for predicate meta data [#79532](https://github.com/openshift/kubernetes/pull/79532)
* Include event type in `kubectl get -w` output [#72416](https://github.com/openshift/kubernetes/pull/72416)
* Allow hack/lint-dependencies.sh to skip golang.org/x/... deps, verify in verify-vendor.sh [#79944](https://github.com/openshift/kubernetes/pull/79944)
* kubeadm: move klog.InitFlags into app/kubeadm.go [#79880](https://github.com/openshift/kubernetes/pull/79880)
* Output boolean for AllowPrivilegeEscalation [#79725](https://github.com/openshift/kubernetes/pull/79725)
* add warning logs for csr controllers [#77467](https://github.com/openshift/kubernetes/pull/77467)
* remove SSHTunnelList TODO [#76321](https://github.com/openshift/kubernetes/pull/76321)
* make kubectl --raw consistent for create, update, get, delete [#79724](https://github.com/openshift/kubernetes/pull/79724)
* change aws encryptedCheck to exponential backoff [#78601](https://github.com/openshift/kubernetes/pull/78601)
* delete TODO: remove when we stop supporting the legacy group version [#78473](https://github.com/openshift/kubernetes/pull/78473)
* kube-cross makefile add REGISTRY [#79911](https://github.com/openshift/kubernetes/pull/79911)
* Handle error return from http.NewRequest() [#79906](https://github.com/openshift/kubernetes/pull/79906)
* staging file fix lint error: receiver name should not be an underscor… [#79819](https://github.com/openshift/kubernetes/pull/79819)
* e2e: Skip multi-node PV test when pods scheduled on the same node [#78697](https://github.com/openshift/kubernetes/pull/78697)
* e2e: avoid mandatory command line flags [#75593](https://github.com/openshift/kubernetes/pull/75593)
* Revert Provide resource version in error if available [#79902](https://github.com/openshift/kubernetes/pull/79902)
* Replace HTTP compression with a more scoped impl, only use on responses > 128KB [#77449](https://github.com/openshift/kubernetes/pull/77449)
* apiaggregation available controller should only hit required endpoint [#79895](https://github.com/openshift/kubernetes/pull/79895)
* Remove use of HugePages feature flag in test [#79869](https://github.com/openshift/kubernetes/pull/79869)
* e2e: use framework.ExpectEqual() for test/e2e/lifecycle [#79860](https://github.com/openshift/kubernetes/pull/79860)
* apiserver: chain delegated PrepareRun [#79840](https://github.com/openshift/kubernetes/pull/79840)
* enable multipod e2es for intree volumes [#75895](https://github.com/openshift/kubernetes/pull/75895)
* Update Sig-Apps OWNERS to aliases in places that were missed in #76669 [#79168](https://github.com/openshift/kubernetes/pull/79168)
* fix: golint error of clientgo [#79817](https://github.com/openshift/kubernetes/pull/79817)
* Remove the TODO for container name matching [#79813](https://github.com/openshift/kubernetes/pull/79813)
* Remove duplicate error messages [#79790](https://github.com/openshift/kubernetes/pull/79790)
* correct the CHANGELOG-1.11.md [#79714](https://github.com/openshift/kubernetes/pull/79714)
* Making sure we handle error on http.NewRequest() in streamer [#79673](https://github.com/openshift/kubernetes/pull/79673)
* Removed diplicated info row in v1.12.7 [#79654](https://github.com/openshift/kubernetes/pull/79654)
* Remove unnecessary ETCD_CA_KEY check [#79626](https://github.com/openshift/kubernetes/pull/79626)
* Remove unnecessary variable declaration [#79531](https://github.com/openshift/kubernetes/pull/79531)
* apiserver: don't log stack trace on /healthz error [#79017](https://github.com/openshift/kubernetes/pull/79017)
* updated fluentd to 1.5.1, es & kibana to 7.1.1 [#79014](https://github.com/openshift/kubernetes/pull/79014)
* Replace syscall.Execve with exec.Command. [#76227](https://github.com/openshift/kubernetes/pull/76227)
* apiextensions: remove nullable roundtrip hacks after go-openapi gained support [#77772](https://github.com/openshift/kubernetes/pull/77772)
* Add node status report frequency to kubemark config [#79882](https://github.com/openshift/kubernetes/pull/79882)
* update CHANGELOG [#79815](https://github.com/openshift/kubernetes/pull/79815)
* client-go: update installation instructions to reflect v12.0.0 release [#79729](https://github.com/openshift/kubernetes/pull/79729)
* use ExpectEqual under e2e/autoscaling [#79765](https://github.com/openshift/kubernetes/pull/79765)
* Provide resource version in error if available [#79848](https://github.com/openshift/kubernetes/pull/79848)
* Remove panic in storage and add log [#79847](https://github.com/openshift/kubernetes/pull/79847)
* Populate DisruptedPods field for non-dry run [#79812](https://github.com/openshift/kubernetes/pull/79812)
* feat: use framework.ExpectEqual in upgrades and windows e2e test [#79756](https://github.com/openshift/kubernetes/pull/79756)
* Use ExpectEqual in e2e/scalability [#79842](https://github.com/openshift/kubernetes/pull/79842)
* Use ExpectEqual in e2e/common [#79769](https://github.com/openshift/kubernetes/pull/79769)
* Use ExpectEqual under apps [#79695](https://github.com/openshift/kubernetes/pull/79695)
* Audit profile test [#72206](https://github.com/openshift/kubernetes/pull/72206)
* Use framework.ExpectEqual() for e2e/cloud tests [#79821](https://github.com/openshift/kubernetes/pull/79821)
* Use ExpectEqual in e2e/auth [#79762](https://github.com/openshift/kubernetes/pull/79762)
* Use ExpectEqual in e2e/kubectl [#79699](https://github.com/openshift/kubernetes/pull/79699)
* add fakes for events package, add startEventWatcher to event interface [#79837](https://github.com/openshift/kubernetes/pull/79837)
* e2e: use framework.ExpectEqual() for test/e2e/node [#79792](https://github.com/openshift/kubernetes/pull/79792)
* e2e: use framework.ExpectEqual() for test/e2e/network [#79791](https://github.com/openshift/kubernetes/pull/79791)
* Use framework.ExpectEqual() under e2e/scheduling [#79781](https://github.com/openshift/kubernetes/pull/79781)
* feat: use framework.ExpectEqual in storage e2e test [#79755](https://github.com/openshift/kubernetes/pull/79755)
* feat: use framework.ExpectEqual in servicecatalog e2e test [#79754](https://github.com/openshift/kubernetes/pull/79754)
* correct kubectl cp argument order [#79845](https://github.com/openshift/kubernetes/pull/79845)
* consolidate etcd version per file [#79733](https://github.com/openshift/kubernetes/pull/79733)
* Add go-runner to the list of e2e test image targets [#79811](https://github.com/openshift/kubernetes/pull/79811)
* Fix descriptions of kubeadm [#79648](https://github.com/openshift/kubernetes/pull/79648)
* Closing stopCh when pod_store is not created [#79787](https://github.com/openshift/kubernetes/pull/79787)
* Update the comments on how to check disk conflict [#79098](https://github.com/openshift/kubernetes/pull/79098)
* Get the pdb of current version when conflict instead of relisting [#79736](https://github.com/openshift/kubernetes/pull/79736)
* kubeadm: run MemberAdd/Remove for etcd clients with exp-backoff retry [#79677](https://github.com/openshift/kubernetes/pull/79677)
* Add 'apiserver_watch_events_total' metric. [#78732](https://github.com/openshift/kubernetes/pull/78732)
* cleanup bespoke ipv6 checking in kubeadm [#79752](https://github.com/openshift/kubernetes/pull/79752)
* Update gophercloud vendor dependency to v0.1.0 [#79637](https://github.com/openshift/kubernetes/pull/79637)
* kubelet: fix ip reporting for downward api [#79700](https://github.com/openshift/kubernetes/pull/79700)
* Add feature gate and kubelet flags for Topology Manager [#74411](https://github.com/openshift/kubernetes/pull/74411)
* Edit google DNS hostname [#79731](https://github.com/openshift/kubernetes/pull/79731)
* call unreserve plugin before record event [#79639](https://github.com/openshift/kubernetes/pull/79639)
* Fix golint failure in pkg/kubelet/dockershim/network/cni [#79321](https://github.com/openshift/kubernetes/pull/79321)
* Add healthz check for KMS Providers on kube-apiserver. [#78540](https://github.com/openshift/kubernetes/pull/78540)
* Fix publishing x-kubernetes-preserve-unknown-fields working with kubectl [#79636](https://github.com/openshift/kubernetes/pull/79636)
* Updated github.com/gogo/protobuf from v0.5 SHA to v1.0.0 tag [#79306](https://github.com/openshift/kubernetes/pull/79306)
* consolidate coreDNS version to ease dependency bump [#79728](https://github.com/openshift/kubernetes/pull/79728)
* Add a metadata client to client-go that can read PartialObjectMetadata [#77819](https://github.com/openshift/kubernetes/pull/77819)
* fix: change default timeout value in csi plugin [#79529](https://github.com/openshift/kubernetes/pull/79529)
* Fix file permissions for non executable files [#79045](https://github.com/openshift/kubernetes/pull/79045)
* clean up redundant conditiontype ‘OutOfDisk’ [#72420](https://github.com/openshift/kubernetes/pull/72420)
* correct the CHANGELOG-1.12.md [#79705](https://github.com/openshift/kubernetes/pull/79705)
* kubeadm: add --control-plane-endpoint flag [#79270](https://github.com/openshift/kubernetes/pull/79270)
* Add MASTER_NODE_LABELS [#79703](https://github.com/openshift/kubernetes/pull/79703)
* Remove experimental note for ipvs in kube-proxy arguments [#78789](https://github.com/openshift/kubernetes/pull/78789)
* Fix HA setup logic [#79713](https://github.com/openshift/kubernetes/pull/79713)
* correct flag order in make-help [#79701](https://github.com/openshift/kubernetes/pull/79701)
* fix cp time stamp is in the future error [#73982](https://github.com/openshift/kubernetes/pull/73982)
* Don't use strategic merge patch on Node.Status.Addresses [#79391](https://github.com/openshift/kubernetes/pull/79391)
* Create a service account Getter when TokenRequest is enabled [#79675](https://github.com/openshift/kubernetes/pull/79675)
* kubelet: add allowed sysctl to KubeletConfiguration [#72974](https://github.com/openshift/kubernetes/pull/72974)
* ipv6 dual stack (Phase 1 - ALPHA) [#73977](https://github.com/openshift/kubernetes/pull/73977)
* Fix client-go request benchmark [#79480](https://github.com/openshift/kubernetes/pull/79480)
* Adds an optional golang runner to the conformance test image [#79284](https://github.com/openshift/kubernetes/pull/79284)
* Utilize RWMutex for efficient backoff operations [#79646](https://github.com/openshift/kubernetes/pull/79646)
* Save docker tag for releases in tarfile archive [#79497](https://github.com/openshift/kubernetes/pull/79497)
* Increase Network Policy tests coverage [#78177](https://github.com/openshift/kubernetes/pull/78177)
* correct the CHANGELOG-1.15.md [#79650](https://github.com/openshift/kubernetes/pull/79650)
* Omit obtaining the lock when adding Nodes in newNodeTree [#79642](https://github.com/openshift/kubernetes/pull/79642)
* Check the correct value of Quantity for non-v1.ResourceCPU resource in GetResourceRequest [#78627](https://github.com/openshift/kubernetes/pull/78627)
* Fix HPA feedback from writing status.replicas to spec.replicas. [#79035](https://github.com/openshift/kubernetes/pull/79035)
* Add public functions to define CSI external tests [#79647](https://github.com/openshift/kubernetes/pull/79647)
* Creating instance groups in parallel [#77271](https://github.com/openshift/kubernetes/pull/77271)
* kubeadm: prevent PSP blocking of upgrade image prepull [#77792](https://github.com/openshift/kubernetes/pull/77792)
* Make AuthorizeClientBearerToken actually return if authn or authz is nil [#79153](https://github.com/openshift/kubernetes/pull/79153)
* 🔗 fix the KEP-kube-scheduler link [#79471](https://github.com/openshift/kubernetes/pull/79471)
* e2e test: change from milli bytes to bytes in ephemeral-storage resource limits [#79322](https://github.com/openshift/kubernetes/pull/79322)
* Cleanup etcd directory - part 2 [#79594](https://github.com/openshift/kubernetes/pull/79594)
* vendor: bump CNI to v0.7.1 snapshot [#78908](https://github.com/openshift/kubernetes/pull/78908)
* Cleanup math/rand package usage [#71170](https://github.com/openshift/kubernetes/pull/71170)
* Allow version field in the title to be changeable [#72168](https://github.com/openshift/kubernetes/pull/72168)
* Azure API updates [#79583](https://github.com/openshift/kubernetes/pull/79583)
* Add mattjmcnaughton as sig-node-reviewer [#79562](https://github.com/openshift/kubernetes/pull/79562)
* Fix ordering settings in update bazel [#79560](https://github.com/openshift/kubernetes/pull/79560)
* Obtain readyzLock once in installReadyz to prevent double addition of readyz check [#79112](https://github.com/openshift/kubernetes/pull/79112)
* Fix possible fd leak and closing of dirs in doSafeMakeDir [#79534](https://github.com/openshift/kubernetes/pull/79534)
* Restore early return for podSpecHasContainer [#79387](https://github.com/openshift/kubernetes/pull/79387)
* fix: predicates read nodes from scheduler cache [#79076](https://github.com/openshift/kubernetes/pull/79076)
* Fix typos. [#78820](https://github.com/openshift/kubernetes/pull/78820)
* Only create one pod per node with gpus in E2E test [#77150](https://github.com/openshift/kubernetes/pull/77150)
* Add missing CSINodeInformer when creating ConfigFactoryArgs [#79524](https://github.com/openshift/kubernetes/pull/79524)
* New E2E proposal: Validate that all the pods are removed when the job is deleted [#76315](https://github.com/openshift/kubernetes/pull/76315)
* kubeadm: don't use the Docker SDK in util/system/docker_validator* [#79449](https://github.com/openshift/kubernetes/pull/79449)
* refactor: use controller.FilterActivePods in test/e2e/framework/util.go [#74847](https://github.com/openshift/kubernetes/pull/74847)
* Clear valueWatchers instead of removing every entry using a loop [#79599](https://github.com/openshift/kubernetes/pull/79599)
* Move population of expectedUIDs outside lock [#79592](https://github.com/openshift/kubernetes/pull/79592)
* Modify kube-up to support cluster without nodes. [#78727](https://github.com/openshift/kubernetes/pull/78727)
* Deprecate scalability tests (we use ClusterLoader already) [#79588](https://github.com/openshift/kubernetes/pull/79588)
* kubeadm: update OWNERS for 1.16 [#79218](https://github.com/openshift/kubernetes/pull/79218)
* Modify firewall rules names to make them shorter. [#78728](https://github.com/openshift/kubernetes/pull/78728)
* Remove selected IP from backup-volfile-servers list to avoid warning in mount logs. [#77795](https://github.com/openshift/kubernetes/pull/77795)
* Drop unnecessary claim parameter from PersistentVolumeController#updateBindVolumeToClaim [#79584](https://github.com/openshift/kubernetes/pull/79584)
* kubeadm: fix bug for --cri-socket flag processing logic [#79498](https://github.com/openshift/kubernetes/pull/79498)
* Simplify the check of presence of labels in createPods [#79591](https://github.com/openshift/kubernetes/pull/79591)
* Fix #74900 - kubectl logs --selector supports --tail=-1 [#74943](https://github.com/openshift/kubernetes/pull/74943)
* Revert "Skip ILB creation on GCE if neg annotation is present" [#79356](https://github.com/openshift/kubernetes/pull/79356)
* Fix TestUnreservePlugin flake [#79371](https://github.com/openshift/kubernetes/pull/79371)
* Fix a bug that StatefulSet applies the revision incorrectly [#78853](https://github.com/openshift/kubernetes/pull/78853)
* Cleanup etcd code [#79527](https://github.com/openshift/kubernetes/pull/79527)
* Update doc.go in staging/src/k8s.io/ [#79367](https://github.com/openshift/kubernetes/pull/79367)
* Fix AWS DHCP option set domain names causing garbled InternalDNS or Hostname addresses on Node [#79446](https://github.com/openshift/kubernetes/pull/79446)
* Runtimeclass admission [#78484](https://github.com/openshift/kubernetes/pull/78484)
* followup of 79262 to cleanup PodPriority leftover [#79374](https://github.com/openshift/kubernetes/pull/79374)
* fix hack/update-vendor.sh array expansion [#79543](https://github.com/openshift/kubernetes/pull/79543)
* tests: Fixes Windows image pulling tests [#79172](https://github.com/openshift/kubernetes/pull/79172)
* Move pkg/kubectl/validation to staging [#79442](https://github.com/openshift/kubernetes/pull/79442)
* iptables proxier: fix comments for LB IP traffic from local address [#78662](https://github.com/openshift/kubernetes/pull/78662)
* Remove internal object printing from kubectl [#79530](https://github.com/openshift/kubernetes/pull/79530)
* Fix cgroup hugetlb size prefix for kB [#78495](https://github.com/openshift/kubernetes/pull/78495)
* Completely remove initializers from k/k [#79504](https://github.com/openshift/kubernetes/pull/79504)
* suppress libseccomp pkg-config errors [#79502](https://github.com/openshift/kubernetes/