# 4.8.0-0.ci-2023-07-15-003738

Created: 2023-07-15 00:37:45 +0000 UTC

Image Digest: `sha256:1aedaeb3b17a4600fe5e9f5201a75e0d20409113b1dad51ac01f8a54f7963ebf`


## Changes from 4.8.0-0.nightly-2023-08-31-044634

### Components

* Kubernetes 1.21.14
* Red Hat Enterprise Linux CoreOS upgraded from 48.84.202308010926-0 to 48.84.202307070009-0


### New images

* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [add46364](https://github.com/openshift/cloud-provider-aws/commit/add46364048c6601e08728a165bad4171f3db0c1) `sha256:c5ad4c8ee498eeeed89c8653832767302cc69db8bbaddaa89f192ba150eb70cd`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [70d0000d](https://github.com/openshift/cloud-provider-azure/commit/70d0000da879fa46afeffb1d5c6117caaecd6118) `sha256:c83f5f1f61ef5114d1d468ac847ca83f5c3192d9ee5a2019ced1af791e360237`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [70d0000d](https://github.com/openshift/cloud-provider-azure/commit/70d0000da879fa46afeffb1d5c6117caaecd6118) `sha256:7d7e645274793f17ee6640194b8ff74f7ffdb197c5452c7c94797466ebda03a5`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [8d1e0095](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/8d1e00952d27d04dd19907f7ee4b342a514e950b) `sha256:11d441b00818fb11e387ee4007aefe034bc2780fdc0c6c96e5fe03cfb2f4a469`
* [local-storage-static-provisioner](https://github.com/openshift/sig-storage-local-static-provisioner) git [e4a18e42](https://github.com/openshift/sig-storage-local-static-provisioner/commit/e4a18e4253505b6c38c77c3e35e7ab1629384a18) `sha256:e765333a4d91a8292db38cc59aadd524891c07d3f6df824230856f3d7c5c200d`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [5f6677f5](https://github.com/openshift/cloud-provider-openstack/commit/5f6677f5684f8b934ef573c0429b0c115624465a) `sha256:11d4adb089e3471329012d89543f6ce78bf7de9dd11a114ab3fc7aa3bdda926c`
* [ovirt-installer](https://github.com/openshift/installer) git [481d1aa6](https://github.com/openshift/installer/commit/481d1aa6897be61c4198d18c5e1f739cad6296a3) `sha256:fcb10de9a9cd3c460ecba6223d18d9012d89b7360243285144fc3d9ce54a2e98`


### Rebuilt images without code change

* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [f052c89e](https://github.com/openshift/aws-ebs-csi-driver/commit/f052c89e99c63497b15e5bd38e2a5a71036fdefa) `sha256:97204f097fc9f6fe2bec074429d37b630e6e5f9a14e1e9969fb92629f58fa40e`
* [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator) git [d1fe616c](https://github.com/openshift/aws-ebs-csi-driver-operator/commit/d1fe616c0da0edddb7019a64b0ad1136b36a5f26) `sha256:759823063f55173f380cb2c30d8ea9fe6b562238ef50fae35b0e1a414e5155cd`
* [aws-machine-controllers](https://github.com/openshift/cluster-api-provider-aws) git [0fae08ce](https://github.com/openshift/cluster-api-provider-aws/commit/0fae08ce8e72d491cc429f171421c140e8a324ac) `sha256:899483fccfce6825321e034f8d083963c708537810731fba4ab4e884a0ee5356`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [58ef8af8](https://github.com/openshift/aws-pod-identity-webhook/commit/58ef8af861317beceac26691d5c452af45ca0e4a) `sha256:666444a05386771fc6c20d79bc1de81fe92514915b288b760f916045012d88a3`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [2d461b39](https://github.com/openshift/azure-disk-csi-driver/commit/2d461b39bacc76f0b879f943015df4d2191f72f4) `sha256:135504bbe8c42c72383c5e7fcd185954193757d0afb26ba301fade75c01fb906`
* [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator) git [d3a3c298](https://github.com/openshift/azure-disk-csi-driver-operator/commit/d3a3c298c91371ccd37896857f623f4494dd78a6) `sha256:783af57812c2ccd4c81796bee4497bc35a302b03f152a19af42cead3fd101685`
* [azure-machine-controllers](https://github.com/openshift/cluster-api-provider-azure) git [e08bd81e](https://github.com/openshift/cluster-api-provider-azure/commit/e08bd81e7d595c41a7849b3e2046e5ed6d60592b) `sha256:1d6ebecb98dd18b6c2a5d1eafb098e0dcf2aff7d269f5b3f07abe9d341ddd44f`
* [baremetal-installer](https://github.com/openshift/installer) git [481d1aa6](https://github.com/openshift/installer/commit/481d1aa6897be61c4198d18c5e1f739cad6296a3) `sha256:52f2181e16986e18c1c9ee361b0b41895fc05c2067a3f02ce44dfe92ba266dd4`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [2dabef7e](https://github.com/openshift/cluster-api-provider-baremetal/commit/2dabef7e3dc39d29016b656b81d23d5a00e141ca) `sha256:bfef51d91a8fb1d9bf8807cdf96b65d2f989508705d59497c982e99faad41381`
* [baremetal-operator](https://github.com/openshift/baremetal-operator) git [5492cf52](https://github.com/openshift/baremetal-operator/commit/5492cf52309927ed6015340887b15ff10025d371) `sha256:7b6265a95545769baafef8e71ee53489465ed17fda9633faffde882c54298a31`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [c50d793c](https://github.com/openshift/baremetal-runtimecfg/commit/c50d793ca33bd7d476b2b770d4f5d317b79b865b) `sha256:0c59e45ec964e1bbd3ae2dd23076e8e7c3b4887db0a5de2d351b90096603566a`
* [cli](https://github.com/openshift/oc) git [acf4dd4b](https://github.com/openshift/oc/commit/acf4dd4b2aaadf546a6aeaa8c3eb7feffdd40171) `sha256:bb5e052770e5d3f384a95162724d3cd4e9c05e25505cb8f7d95840b16508244b`
* [cli-artifacts](https://github.com/openshift/oc) git [acf4dd4b](https://github.com/openshift/oc/commit/acf4dd4b2aaadf546a6aeaa8c3eb7feffdd40171) `sha256:5f5fd3ec41226012b21024d93d59272b309dada2c78a191e8cdfddd44a243bf0`
* [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator) git [a29b63fe](https://github.com/openshift/cloud-credential-operator/commit/a29b63fea17f8fea0b03a271fad02a97519da364) `sha256:86d3b849d35c3c179fc8639059f68f172b03796d3606961a67caaa170a86ed03`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [a180c2ab](https://github.com/openshift/cluster-authentication-operator/commit/a180c2ab5c9b09746e984f4f6459b4e8cc06de82) `sha256:25d89462aa05dc26bbf3ab1a80ae0ac6dd6e172aeee1d03e99e5911de610bf6b`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [7bbde4cc](https://github.com/openshift/kubernetes-autoscaler/commit/7bbde4cc4ddb1d0030f23b789b4bbf48ab3ef79d) `sha256:43b0b972f6854d04362c69f65659b810defba2f8ec5b7528bce3334c29f2942e`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [917d395f](https://github.com/openshift/cluster-autoscaler-operator/commit/917d395f0483ba1b0f516283d9247c585039347a) `sha256:086e01ba70dfffeca5a6b33f21558cbaaa4db7664945be404d026d298330490b`
* [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator) git [117d47a2](https://github.com/openshift/cluster-baremetal-operator/commit/117d47a29e9700088d81a3379a72a7d6d68668d1) `sha256:c8d582146b3a6dbea2bc987e94e691fba9f8a25f855fb6a503ffb4d68dba1d57`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [f32c0712](https://github.com/openshift/cluster-config-operator/commit/f32c07121bab6b6d37dee7bddd75ec9ae3973dc6) `sha256:b20430ebe20f3b502800859f6e4252c3d6840d873e58147efc793ed484c84a9d`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [07b3f810](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/07b3f81036401073d68eb1ef152b96ab5e5a2fc6) `sha256:7a0de13f8c469252c34affd417b6a4e85f49e7b3614efdb4ea8436444c567d48`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [fdb2ebec](https://github.com/openshift/cluster-dns-operator/commit/fdb2ebecdeb992444964f84fd0b5c17f37d80536) `sha256:aeb84e2c504860e1864a4cdfa1bf6368f86a905d683eecc95629c6f8174593da`
* [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator) git [90a030de](https://github.com/openshift/cluster-etcd-operator/commit/90a030deedba1cc3b713960029a814573445814b) `sha256:b97b8b929b7cb8b1ee8312e0f3cf77e55205a1142a7e04507a67a068bcdfe486`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [4aa1e6f3](https://github.com/openshift/cluster-image-registry-operator/commit/4aa1e6f3e0321df1109672d2d105de5a8b913cb5) `sha256:021f0e858a228f205ee4e3e7890e74964f5f0c448b37bdae6c8380271fc1b5f5`
* [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator) git [7163d38a](https://github.com/openshift/cluster-ingress-operator/commit/7163d38a50c505c1289bccf72d62b02e17d25c47) `sha256:9bcea1b6fb5351a729131ac370cc6958d05db98be63bdf6e84ead16b82419fc6`
* [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator) git [25c54939](https://github.com/openshift/cluster-kube-apiserver-operator/commit/25c54939bdd02bc8e68f1329fa3ebe16904b3282) `sha256:b8d97778f71a0a6c7088e018b2e0b466ba709343e563eb720e4956254cb87298`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [7fa48ebf](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/7fa48ebf34e8c810ce8cbe8b62a4e10a7326856c) `sha256:4d3278893b1a718e3e284bae71592091855af08bc2ebdd2e4d9fc12b12032760`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [1b3b3444](https://github.com/openshift/cluster-kube-scheduler-operator/commit/1b3b34440de93395c46c7a6526be9870e8914ce8) `sha256:69271ac3d87bfe96ca5f6911a634305b03eb7f673c37f1d391174a9e0e24325c`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [50c639cc](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/50c639cc7e318c1dab38a2869b928cf703a38515) `sha256:451981b21ec962d65b1d77edb64f98f606727c3368c6529198b3291d41827319`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [f0a396ee](https://github.com/openshift/cluster-machine-approver/commit/f0a396eee469a3ace9e473c0476a29d8983671eb) `sha256:302b75a7cc4f3875859bde680262a1ba043ad5e489cd291ddf9edb38329b70bf`
* [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator) git [30905ffe](https://github.com/openshift/cluster-monitoring-operator/commit/30905ffe24b1b3b1a332bf133285692a4194eb6e) `sha256:7c746b330c438e0d0a98bba7ff5f34ed2401789aaa075bcb3a6f55153b45031f`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [7f0e9b66](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/7f0e9b6659949421100469e3af399888cca7042e) `sha256:cc7a98825f2a14071a823ffa14619db22a7955a971275a503310a623b6d63c49`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [286c1577](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/286c157755c8120ce969c7c15f969737b46b1a0a) `sha256:9e6b76b64752af6d42ba33b4fb58c7fdf51ff11375f14b9e41ac3a00d2f2bc97`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [ec46ea5c](https://github.com/openshift/cluster-policy-controller/commit/ec46ea5ce3735fcb3d10290834f9ae5fb31148f0) `sha256:20201c73603d0e3ef298f4dad0c12d5d723b3214f00f965338a0f784c1350850`
* [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [2c97085f](https://github.com/openshift/cluster-storage-operator/commit/2c97085fae78fba46c2808bf03a0128180f2c1e4) `sha256:5940edb795dc7b16bfb6af6b02e4b1d63b15382122048c18291978e2b4d275f0`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [87835b73](https://github.com/openshift/cluster-update-keys/commit/87835b737f0a90a6259150746114f251241bf52e) `sha256:71b346961f1c97192154f36ff7b747996c305cfbd6d21a7bd018ef41fca69255`
* [cluster-version-operator](https://github.com/openshift/cluster-version-operator) git [c3bd0d0d](https://github.com/openshift/cluster-version-operator/commit/c3bd0d0d0b1837f1b8893ce24971b943c7fbeb18) `sha256:f7af34d5494f1a4b3867225c7eebef770feaf732c11e827eee810906db181470`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [0d221296](https://github.com/openshift/configmap-reload/commit/0d221296e3918abc3c1367a1e7c220baf000965a) `sha256:51a3bb5550527b36e9566b2ee6550366828f7388a572727c4fbe19edce3ee4b7`
* [console](https://github.com/openshift/console) git [64f942e4](https://github.com/openshift/console/commit/64f942e437c1d56e63f55105171a9fd15491d3fc) `sha256:07f1c1ff5e1f0b56671a528773c87a66faf89749782e90487ffafed0f20930e5`
* [console-operator](https://github.com/openshift/console-operator) git [2bee8bd9](https://github.com/openshift/console-operator/commit/2bee8bd9b1c9ad46015f4e0ff13b6b5ce09fd2b6) `sha256:60d3a2c7f652330490a7f5e1dfc79106daa6a5e2fe2c5e128e5837b3f3bc8749`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [71a8b346](https://github.com/openshift/containernetworking-plugins/commit/71a8b3469df865daf68cb893bfe313328d4be992) `sha256:24b9d0c0c23fc0e1918589619d2dc57a28e2aba76b438d29eae68f4860a5f287`
* [coredns](https://github.com/openshift/coredns) git [642b46ef](https://github.com/openshift/coredns/commit/642b46ef468d132d26c3f84a8bcb4b542d8df1e6) `sha256:77ae1e589d22dae5b890d43a01845ed0179350d9add22957c34433576ef890a9`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [5f6677f5](https://github.com/openshift/cloud-provider-openstack/commit/5f6677f5684f8b934ef573c0429b0c115624465a) `sha256:4dfc076f8593f2b84ed0222514ee2df631b2b1b1a969469206df20a0c9df20db`
* [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator) git [f6ffb0d7](https://github.com/openshift/csi-driver-manila-operator/commit/f6ffb0d7c2935db9d349f8dc1c51d9ea1b0df5ce) `sha256:08552e361ec2bfda960dc719d032abd81ffa85ac225611cd42d18266c24d9dad`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [f6f09a03](https://github.com/openshift/csi-driver-nfs/commit/f6f09a0322fc0d0107e769f2d5c784f99007f99a) `sha256:cca5e74a3fff78bb3130626b6b8ddb44ef1331cc79f0611c6ce9ee450a6be280`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [596da63e](https://github.com/openshift/csi-external-attacher/commit/596da63ecf2886a9bce19c08ad1120e123b498af) `sha256:74142490db5e3a5649faef418808b80357986882ae3c1ba55714ab0ed306f09e`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [3ea7e68a](https://github.com/openshift/csi-external-provisioner/commit/3ea7e68a518870d63c7da9485f8a69fa1555b452) `sha256:86e10b6d626c1f06c031e96eb1b8bb0229ee6ffa223957e1ad656446e9bf1586`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [b5dd2b39](https://github.com/openshift/csi-external-resizer/commit/b5dd2b39e9dfb83addd0c07654c3b9119e24cb36) `sha256:237ff0f90f63c17fb338f63a95164bfae1e704c631ee6b4ed567f119d3d2b05e`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [1e2cca95](https://github.com/openshift/csi-external-snapshotter/commit/1e2cca95999057e16fcfee07e8068f7a77f2e164) `sha256:d0cc053ca7fed69875efd52d356ba9226ab268d4cbd6abaf82b576ba6f579992`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [a29b1153](https://github.com/openshift/csi-livenessprobe/commit/a29b1153451d6ffa6fbcb1dacbe25639c2523488) `sha256:90e484073db0a10ba792e6e910f47acbd5526c61ca7edbd35c454397de8b825b`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [0519730f](https://github.com/openshift/csi-node-driver-registrar/commit/0519730f75f89c11f1ee07c7f81b0bcae1ddf705) `sha256:d9cc978a8d810c93a63b88b58bd4d0baecead335a2c359b11735a3f18877ab40`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [1e2cca95](https://github.com/openshift/csi-external-snapshotter/commit/1e2cca95999057e16fcfee07e8068f7a77f2e164) `sha256:27f6c622f7a5261fa0d7bdb5295d2cb23a2bf2bd3e159a8b1a6fb8d2e0dd6228`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [1e2cca95](https://github.com/openshift/csi-external-snapshotter/commit/1e2cca95999057e16fcfee07e8068f7a77f2e164) `sha256:89a13d0a01c0b4e1049e769e64f5f125bbbc96da1d9bc64b39a9c47ff3f0f3a6`
* [deployer](https://github.com/openshift/oc) git [acf4dd4b](https://github.com/openshift/oc/commit/acf4dd4b2aaadf546a6aeaa8c3eb7feffdd40171) `sha256:76a773db3e602dc948f7c546fa64975278da5f352a7a341dd121b9673e6032c8`
* [docker-builder](https://github.com/openshift/builder) git [dc2c0061](https://github.com/openshift/builder/commit/dc2c0061e5db06d96bac966bdfe2603fe7bbfa06) `sha256:16d7dd1e4be40de4fc35271f6beb14362cad2770e21152b79d5ba8c814ad5032`
* [docker-registry](https://github.com/openshift/image-registry) git [bc68848b](https://github.com/openshift/image-registry/commit/bc68848bf1e6fe91378510a0b0ef30cfcb6ec39e) `sha256:f72d75c655a31f9c6605ffde126c1537f9092141e9042e05882ade57d4f7b39f`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [076a9209](https://github.com/openshift/driver-toolkit/commit/076a9209048c7d478f59084409c2dca5e3a6f2d8) `sha256:0085a57fb8443cb457cee9f3ae87588ebb2a8b8c06be17d2ea2253127680177d`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [016bea1a](https://github.com/openshift/egress-router-cni/commit/016bea1a6f5ec53aab8e936f4120c32a05322027) `sha256:9b4052876bc70988b754b764dde75fd48cc5356caa6ce1813a57e1c47bf1b2c4`
* [etcd](https://github.com/openshift/etcd) git [ab17755d](https://github.com/openshift/etcd/commit/ab17755dee96d4bd12daec2fdb3764939a10fae0) `sha256:54c8dc1a95442db2b9277d1b55c97a2d5a58bf9aac43d14e86217f06b90d925b`
* [gcp-machine-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [34db56eb](https://github.com/openshift/cluster-api-provider-gcp/commit/34db56ebf7a8a46828f5830d42b26f9d2bdd0db1) `sha256:c31aacd223e23b7cbef66e7a66bafd94ff35924cfc3698505103175c084848fe`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [3978a210](https://github.com/openshift/gcp-pd-csi-driver/commit/3978a2100d6ff938db2a0cf8d962ce9dce0c6e4c) `sha256:81e05d653d956b95fb09b1f068b39055841ea4dc67c6557638120f19710d9bf8`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [35ebe860](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/35ebe86003c339821d3a36186a66f8ef86049932) `sha256:d75c8842393c104060930c142cfcfdd279815cfc719bb3d6c2d333e69d7da0f5`
* [grafana](https://github.com/openshift/grafana) git [7156d02c](https://github.com/openshift/grafana/commit/7156d02c9b5c715460a650e32eacdd6996f4ce4f) `sha256:6977096dd1c27f1dc6914deaa94f2f4dd57f0ba9d0ac344e1cf3f01b592a77c3`
* [haproxy-router](https://github.com/openshift/router) git [d0d63803](https://github.com/openshift/router/commit/d0d63803fbefba67f09df0edb271199623659ca8) `sha256:cd368dfb6647ffcb86c47037ec3c7dba96fb8837043a4c31c4bc33154ad5a90f`
* [insights-operator](https://github.com/openshift/insights-operator) git [53425de1](https://github.com/openshift/insights-operator/commit/53425de1f7fbd79fd785f4260f40def8a6eec7b9) `sha256:de2ed7dc263bd8152018cdc1b6428bbafb4eb0cc10fd951be20f240e376913f9`
* [installer](https://github.com/openshift/installer) git [481d1aa6](https://github.com/openshift/installer/commit/481d1aa6897be61c4198d18c5e1f739cad6296a3) `sha256:2701b2e381cbdd525e7d319d93af788b7eef341418576bd0337307780e5fb330`
* [installer-artifacts](https://github.com/openshift/installer) git [481d1aa6](https://github.com/openshift/installer/commit/481d1aa6897be61c4198d18c5e1f739cad6296a3) `sha256:642e583e898404ee4b6446b2e5a8b5ee8fc772bfa91abf21a1d6cf4bfd451146`
* [ironic](https://github.com/openshift/ironic-image) git [4ed2e4b5](https://github.com/openshift/ironic-image/commit/4ed2e4b56c1eb82573b859b0499bb5141113bad0) `sha256:303e6153f380dfbe002e556442a855e6bdd4178973826f44a8ca56565381231b`
* [ironic-hardware-inventory-recorder](https://github.com/openshift/ironic-hardware-inventory-recorder-image) git [b3ecae8d](https://github.com/openshift/ironic-hardware-inventory-recorder-image/commit/b3ecae8d1c6cd84a8784cf3dd17532797af7b724) `sha256:1237e8748313171bfd83e3f6805e01a161c918094b5a505c7fdb74065a383898`
* [ironic-inspector](https://github.com/openshift/ironic-inspector-image) git [08761ed5](https://github.com/openshift/ironic-inspector-image/commit/08761ed526b7817de7c92e0d621698404fca7a05) `sha256:def268f1316c4fa40afffddb07fc643e1063217d441929ec117185fa66269712`
* [ironic-ipa-downloader](https://github.com/openshift/ironic-ipa-downloader) git [aa13ca35](https://github.com/openshift/ironic-ipa-downloader/commit/aa13ca35ba38f2ceadb5e98ddc9e8ad0b875bb96) `sha256:5c124eb90485bbcf1285951468e0af0d96f072880ec7851634b658cb6a3a9c0f`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [dceaf133](https://github.com/openshift/ironic-rhcos-downloader/commit/dceaf1333634a4aea3f211849e81a6247160122b) `sha256:7444301fef25eba3c4b637c737ae2c6f50c49981512f5d88cc3c844d68e0d231`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [d2e40e34](https://github.com/openshift/ironic-static-ip-manager/commit/d2e40e34f8284d0ac7c4e9133b537baeac07b408) `sha256:f0fc26835d3e69066f3ddcacbfb49c868a3ada0887ea0aef6f7b824cb931b9d9`
* [jenkins](https://github.com/openshift/jenkins) git [ebd42a7f](https://github.com/openshift/jenkins/commit/ebd42a7ff41efdd6d50d1e28c047438e9375d562) `sha256:f19ace9f9743a2c87c8e719d46bfdb3d42870183f9eef9aca7459294501b0a62`
* [jenkins-agent-base](https://github.com/openshift/jenkins) git [ebd42a7f](https://github.com/openshift/jenkins/commit/ebd42a7ff41efdd6d50d1e28c047438e9375d562) `sha256:186537221a72af85edf37ce94167930f3f4fc8f4ea458a0266daefb2ae436e45`
* [jenkins-agent-maven](https://github.com/openshift/jenkins) git [ebd42a7f](https://github.com/openshift/jenkins/commit/ebd42a7ff41efdd6d50d1e28c047438e9375d562) `sha256:f11289db008c2e4863f07803d5bd119ad0c5f8b2741161921811c78860909ae6`
* [jenkins-agent-nodejs](https://github.com/openshift/jenkins) git [ebd42a7f](https://github.com/openshift/jenkins/commit/ebd42a7ff41efdd6d50d1e28c047438e9375d562) `sha256:5bd8942ba704ebf912eefdc80b1f2e1f3a053dc87b5cbbf9fb7503ad4f7657b4`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [bfffea3b](https://github.com/openshift/k8s-prometheus-adapter/commit/bfffea3bf70fc5203814886f6483a569f2f22c87) `sha256:64e160a9f0a6106314956be27c5c1258a35a7c111c50e48c363a0c3847030739`
* [keepalived-ipfailover](https://github.com/openshift/images) git [ad38e116](https://github.com/openshift/images/commit/ad38e116f3533e0e78621a2887d8b70cde7cba31) `sha256:5db8d7c214dff3c2cdc4910481c9210761c4b786f176adec151a1bf79293e193`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [813c3da7](https://github.com/openshift/kube-rbac-proxy/commit/813c3da7222a4ccc95ef3827cd54b0ce93a8cbe5) `sha256:3869910c1e208b125bdecd4ac2d8b2cae42efe221c704491b86aa9b18ce95a65`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [94716629](https://github.com/openshift/kube-state-metrics/commit/947166293195d115500d4479c0c40c8c01a25ad0) `sha256:b4d24a2f4e35652e78220c02dbd97c1592397f9f31ce39fa96bd4d17f03936e5`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [38e0105c](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/38e0105c9fc5367a2e0bd22446b10a1f65fcb416) `sha256:1c36e52047e9b2856749764ef7bea9b736e55709ddf279ca18e60850f9927615`
* [kuryr-cni](https://github.com/openshift/kuryr-kubernetes) git [ddd2c3ad](https://github.com/openshift/kuryr-kubernetes/commit/ddd2c3adeac4d31711a7949c347f444ee4fdce6d) `sha256:34f5d841f3396cb911e80f3a561432eecdb347bbd518a76eb9238adc3e358892`
* [kuryr-controller](https://github.com/openshift/kuryr-kubernetes) git [ddd2c3ad](https://github.com/openshift/kuryr-kubernetes/commit/ddd2c3adeac4d31711a7949c347f444ee4fdce6d) `sha256:1382b2b4bfeb5874b45c1a2ad31fa38a6126b455b1d18d052d88ae0dc9ad7833`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [9542e5ac](https://github.com/openshift/cluster-api-provider-libvirt/commit/9542e5ac08b7731a37d20c881695aab904201c22) `sha256:2e89c9c23954b75e61664a5cfcca7f9c6d8db49145550583eaf9982632070374`
* [machine-api-operator](https://github.com/openshift/machine-api-operator) git [edc3e864](https://github.com/openshift/machine-api-operator/commit/edc3e864006486a7a85e2e5e4297e307339e9f0e) `sha256:8d2fb7a6a867bf32151d80fa8f88699ea0c597e7b393248d0880cf388c8dd831`
* [machine-config-operator](https://github.com/openshift/machine-config-operator) git [38ffe753](https://github.com/openshift/machine-config-operator/commit/38ffe7535a180e6fa145d40c4f0f918e681e836e) `sha256:fa04d2ed618d6db3c231a8d0358cf5877c2e51d54bde671ed31bd109c014bd47`
* machine-os-content `sha256:43e4ee59f48ce53df72430ac6c5ffb4e1fcacb1c96ca16cc682876bcd2a1bb78`
* [mdns-publisher](https://github.com/openshift/mdns-publisher) git [1c707a28](https://github.com/openshift/mdns-publisher/commit/1c707a28e88b42780fb37fad4532be7220acd1c5) `sha256:a0f54116942c3f38ffa6bc51ea82b0778bc99272d51b7f91fe302dd669c8f1fb`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [64645feb](https://github.com/openshift/multus-admission-controller/commit/64645febe4129a794b1291d0a375a7b2bb7fba39) `sha256:cc6c27173b61f995c0c563a91431aadf06ce7166a46f2cc30ccd52344439f34d`
* [multus-cni](https://github.com/openshift/multus-cni) git [73d0cfed](https://github.com/openshift/multus-cni/commit/73d0cfedfff518269f7184615e120afc1406a466) `sha256:cbf39953edd95cd284f4dce415474bd4913f4e77a9d848cf9087efefffe74b85`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [187ad91f](https://github.com/openshift/multus-networkpolicy/commit/187ad91f119ff6b73610922012e7af4e704c5e93) `sha256:9a41d3da9fff516247550305dbb73be939c1e3a574ee7bc5804677e9c3a7a9ba`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [64807ab7](https://github.com/openshift/route-override-cni/commit/64807ab77cf97eb69d4202f25840e921290b3e12) `sha256:27831c527c4f3fa1afbe3b3031c871f01909a1ea383f5eb13fc7beeb1c1f5309`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [90e1e394](https://github.com/openshift/whereabouts-cni/commit/90e1e394907abea5a97a7cd68d5a91afe87a8913) `sha256:fceb7caa9f3cbf840b84ec80f6202c79b45a8d56befbeb98e2fe779cefa6dbf8`
* [must-gather](https://github.com/openshift/must-gather) git [7e55480f](https://github.com/openshift/must-gather/commit/7e55480fddf089ec9707f02f6644be9f1200b2a2) `sha256:d95ddfecf9cbaf00849d6edcfeefbc2d349bd527587b3ed622fd4fc93a3c347f`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [c8812eeb](https://github.com/openshift/network-metrics-daemon/commit/c8812eeb9aa3b535a843407704478454a0ab8c7d) `sha256:ff44063b67e7069bf96e782f464a92bc1204fdcfc0b2b951c26ef60dcfe9b7d9`
* [network-tools](https://github.com/openshift/network-tools) git [5ac3739e](https://github.com/openshift/network-tools/commit/5ac3739e4382eb10cdd9209c8947096997fe38a2) `sha256:49c16a5b03eb30da6bfe4f36a511c62d29db386dede361607e0e4c9bd82d6466`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [961db5cc](https://github.com/openshift/oauth-apiserver/commit/961db5cc19f78cb73c628c5219a0c5a6dbde7a3e) `sha256:bdc40dc98f6ef415c9f97308fff1101e3ab273858f772968b3283b5125561667`
* [oauth-server](https://github.com/openshift/oauth-server) git [374e2ee3](https://github.com/openshift/oauth-server/commit/374e2ee38a1910c6d56172e9d4ec1828c4dea1be) `sha256:daa162e3d03194ed3f82123bfb43aade0e21a5988eeb0b001dac3665480f41cf`
* [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [c2325113](https://github.com/openshift/openshift-apiserver/commit/c23251132914110cc8deed896c415192c02259bb) `sha256:9fe41bf827ffb71e56ef84c791d23c9b015fa980c61f05ed9b949d7fbe8965a0`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [69a83a3f](https://github.com/openshift/openshift-controller-manager/commit/69a83a3f3c290519692a66fd5ffe89586eb1b4b9) `sha256:69c2569cd56bf314e8bfd21d7475e564584b828d144c117432d158a6d3cc2248`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [10142914](https://github.com/openshift/openshift-state-metrics/commit/101429149266e2c86a41b82baf47a033c9a93b02) `sha256:a00540f5813be23c71dde7d96acdd8b4d52f445ad710415ed1b983166f16cf36`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [5f6677f5](https://github.com/openshift/cloud-provider-openstack/commit/5f6677f5684f8b934ef573c0429b0c115624465a) `sha256:72ef2a7808ca04cb0ec46bb9a18541f1ce992f4cde6c348543139c1d9fc8d69e`
* [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator) git [d431a72b](https://github.com/openshift/openstack-cinder-csi-driver-operator/commit/d431a72bce1aa5ce8d1e5cf7ba810ccaabacb5bb) `sha256:3709f7ce24415f395d4c828db638a938ce8b7d3703005a34cbf0d60a6a87d4c1`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [3f3d7d1f](https://github.com/operator-framework/operator-marketplace/commit/3f3d7d1f9e914aff08d2ca2b5663358c8b611656) `sha256:8f56e003b5be79cb21466afbe0d7890a17cb34288dd9c2996698eacb688ad2af`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [c57863f2](https://github.com/openshift/ovirt-csi-driver/commit/c57863f25ec68b34f3928e02b9b750cfcef3c99c) `sha256:101183271dc754a579a443fcc9332e5abe6cce429a18401fc14329c8fad63de9`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [3bab77ba](https://github.com/openshift/ovirt-csi-driver-operator/commit/3bab77baee7a006b7a96bea737828979d77cda9d) `sha256:79fc813d88496a74f2a5137362c7cf52334d20972c5e2f568c81e326dcf93cb4`
* [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [368223b8](https://github.com/openshift/cluster-api-provider-ovirt/commit/368223b8507596055a33b731a7942aab82f59ce0) `sha256:a195a1a2065ab751713870faf1eb57eafec4e076376cd2fa4155dc669413b998`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [2faeb405](https://github.com/openshift/prom-label-proxy/commit/2faeb4050010914d6b55da38bffb44b95702e052) `sha256:30c97178960cc004aaae10337e9ccbe7a1e74367b5ca639da029c1f72a38d821`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [7b5ac874](https://github.com/openshift/prometheus-alertmanager/commit/7b5ac8741d87542c43d002aef3b881d7f8065133) `sha256:352a2cae3e90a08bb395766dbd6e630decddab7878249dc0a34ab66506a485f4`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [9ad2cf90](https://github.com/openshift/node_exporter/commit/9ad2cf906b9c0c44110401f121dc5cf7d657acca) `sha256:c1021dc394b85106de5a7744a20330194358a74ad71ad2078613dac699682442`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [b66c4506](https://github.com/openshift/service-ca-operator/commit/b66c45062dd1c4fc4ce7de2f587647522af60e11) `sha256:dd1cd4d7b1f2d097eaa965bc5e2fe7ebfe333d6cbaeabc7879283af1a88dbf4e`
* [telemeter](https://github.com/openshift/telemeter) git [eabad556](https://github.com/openshift/telemeter/commit/eabad556e8759422b85b2f27248c52626245f1ba) `sha256:232c61a8d80a8b49df85171709d18047bfdd2756500019348bb6bb4e4800ac28`
* [tests](https://github.com/openshift/origin) git [2eb86450](https://github.com/openshift/origin/commit/2eb86450ff251951d9aabda446cb4fd19e9e3b62) `sha256:7e6239a0ffa16d73909753dfadb9f2ee54fa13e72d458ef61cdf13e74f38dde6`
* [thanos](https://github.com/openshift/thanos) git [f7c1227d](https://github.com/openshift/thanos/commit/f7c1227d2009f439d4200e305246659ebea299f8) `sha256:1a805d1aed8f5e4801c036fa6260e7dc9b868fa8ce282516fbd69ac24bad5f3f`
* [tools](https://github.com/openshift/oc) git [acf4dd4b](https://github.com/openshift/oc/commit/acf4dd4b2aaadf546a6aeaa8c3eb7feffdd40171) `sha256:9b16b5715a4a70d277bbee490cb4cd44c83290bee010678ac55f86fb73975353`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [dd5345eb](https://github.com/openshift/vmware-vsphere-csi-driver/commit/dd5345eb7ed3c68eff6619ca434b5e83083f5bc9) `sha256:d04a8cdc23047fe83f22ccfc22ee57a80c51022239a18a0d98e264799b887c5d`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [18cd9873](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/18cd9873078206f26d25ecf18893ba0864c0cf62) `sha256:eb9e84d76248840f0dd2b38a2e63221c378d74d8e689244c84fbbaa124fd80ef`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [dd5345eb](https://github.com/openshift/vmware-vsphere-csi-driver/commit/dd5345eb7ed3c68eff6619ca434b5e83083f5bc9) `sha256:4596ddb3a9509913c7c010b7421df806f0b52720605fc8b1122d0d41bc13ae37`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [9ff99650](https://github.com/openshift/vsphere-problem-detector/commit/9ff996502f4cb87c89985cdaff346754d645b988) `sha256:59a94be8f898dd6b715e2efdd824aa347289800f1f060f695dee9ab8e6de543b`


### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/)

* [OCPBUGS-24975](https://issues.redhat.com/browse/OCPBUGS-24975): Updating ose-cluster-bootstrap-container image to be consistent with ART [#103](https://github.com/openshift/cluster-bootstrap/pull/103)
* [OCPBUGS-24975](https://issues.redhat.com/browse/OCPBUGS-24975): Updating ose-cluster-bootstrap-container image to be consistent with ART [#102](https://github.com/openshift/cluster-bootstrap/pull/102)
* [OCPBUGS-19235](https://issues.redhat.com/browse/OCPBUGS-19235): Updating ose-cluster-bootstrap images to be consistent with ART [#100](https://github.com/openshift/cluster-bootstrap/pull/100)
* [OCPBUGS-16504](https://issues.redhat.com/browse/OCPBUGS-16504): bump(*): vendor update [#99](https://github.com/openshift/cluster-bootstrap/pull/99)
* Updating ose-cluster-bootstrap images to be consistent with ART [#88](https://github.com/openshift/cluster-bootstrap/pull/88)
* Updating ose-cluster-bootstrap images to be consistent with ART [#82](https://github.com/openshift/cluster-bootstrap/pull/82)
* [OCPBUGS-3505](https://issues.redhat.com/browse/OCPBUGS-3505): Waiting for 2 masters in HA mode case [#71](https://github.com/openshift/cluster-bootstrap/pull/71)
* [OCPBUGS-6234](https://issues.redhat.com/browse/OCPBUGS-6234): Bump dependencies and image [#74](https://github.com/openshift/cluster-bootstrap/pull/74)
* Add API team to reviewers [#75](https://github.com/openshift/cluster-bootstrap/pull/75)
* Add API team to the OWNERS [#73](https://github.com/openshift/cluster-bootstrap/pull/73)
* [Bug 2006945](https://bugzilla.redhat.com/show_bug.cgi?id=2006945): extend hardcoded restmapper for cluster-bootstrap to avoid crashlooping bootstrap kube-apiserver [#64](https://github.com/openshift/cluster-bootstrap/pull/64)
* update golang version [#65](https://github.com/openshift/cluster-bootstrap/pull/65)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/1af395b7881d951a824858f5d393357609bddbf0...)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/)

* [OCPBUGS-32525](https://issues.redhat.com/browse/OCPBUGS-32525): Check every MachineConfigPool for IPsec plugin existence [#2349](https://github.com/openshift/cluster-network-operator/pull/2349)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#2364](https://github.com/openshift/cluster-network-operator/pull/2364)
* [OCPBUGS-33080](https://issues.redhat.com/browse/OCPBUGS-33080): Update EQoS CRD to latest [#2362](https://github.com/openshift/cluster-network-operator/pull/2362)
* [SDN-4726](https://issues.redhat.com/browse/SDN-4726): Reapply "Merge pull request #2330 from pperiyasamy/block-sdn-upgrade" [#2361](https://github.com/openshift/cluster-network-operator/pull/2361)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#2354](https://github.com/openshift/cluster-network-operator/pull/2354)
* Revert #2330 "SDN-4726: Block upgrade for openshift-sdn" [#2356](https://github.com/openshift/cluster-network-operator/pull/2356)
* [SDN-4434](https://issues.redhat.com/browse/SDN-4434): Network diagnostics scheduling [#2339](https://github.com/openshift/cluster-network-operator/pull/2339)
* [SDN-4726](https://issues.redhat.com/browse/SDN-4726): Block upgrade for openshift-sdn [#2330](https://github.com/openshift/cluster-network-operator/pull/2330)
* [SDN-4114](https://issues.redhat.com/browse/SDN-4114): Add iptables-alerter daemonset [#2329](https://github.com/openshift/cluster-network-operator/pull/2329)
* [OCPBUGS-31528](https://issues.redhat.com/browse/OCPBUGS-31528): infraconfig: handle vSphere UPI by not updating any fields [#2327](https://github.com/openshift/cluster-network-operator/pull/2327)
* [SDN-4163](https://issues.redhat.com/browse/SDN-4163): Improved prometheus rule for ipsec metric [#2346](https://github.com/openshift/cluster-network-operator/pull/2346)
* [OCPBUGS-32402](https://issues.redhat.com/browse/OCPBUGS-32402): Fix wait logic for IPsec certificate signing request [#2342](https://github.com/openshift/cluster-network-operator/pull/2342)
* [SDN-4688](https://issues.redhat.com/browse/SDN-4688): ANP: Add RBAC for cluster-manager [#2338](https://github.com/openshift/cluster-network-operator/pull/2338)
* [OCPBUGS-32347](https://issues.redhat.com/browse/OCPBUGS-32347): Improve IPsec MachineConfig readiness check [#2341](https://github.com/openshift/cluster-network-operator/pull/2341)
* [SDN-4163](https://issues.redhat.com/browse/SDN-4163): Add ipsec state to telemetry [#2270](https://github.com/openshift/cluster-network-operator/pull/2270)
* [OCPBUGS-22969](https://issues.redhat.com/browse/OCPBUGS-22969): Use v1 for flowcontrol API [#2095](https://github.com/openshift/cluster-network-operator/pull/2095)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#2340](https://github.com/openshift/cluster-network-operator/pull/2340)
* [SDN-4519](https://issues.redhat.com/browse/SDN-4519): Configure CNO as per new API changes for join and transit switch subnet [#2318](https://github.com/openshift/cluster-network-operator/pull/2318)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#2334](https://github.com/openshift/cluster-network-operator/pull/2334)
* [NP-956](https://issues.redhat.com/browse/NP-956): Remove managed cluster checking for live migration [#2321](https://github.com/openshift/cluster-network-operator/pull/2321)
* [OCPBUGS-26408](https://issues.redhat.com/browse/OCPBUGS-26408): automountServiceAccountToken:false hosted CP pods [#2306](https://github.com/openshift/cluster-network-operator/pull/2306)
* [SDN-4596](https://issues.redhat.com/browse/SDN-4596): Update (B)ANP CRDs; prepare for GA [#2328](https://github.com/openshift/cluster-network-operator/pull/2328)
* [SDN-4500](https://issues.redhat.com/browse/SDN-4500): Add write permission for EgressQoS status [#2319](https://github.com/openshift/cluster-network-operator/pull/2319)
* [SDN-4607](https://issues.redhat.com/browse/SDN-4607): Allow HyperShift ability to set ConfigMap through env var [#2309](https://github.com/openshift/cluster-network-operator/pull/2309)
* [OCPBUGS-22995](https://issues.redhat.com/browse/OCPBUGS-22995): Tighten the permissions on whereabouts.conf [#2106](https://github.com/openshift/cluster-network-operator/pull/2106)
* [OCPBUGS-24690](https://issues.redhat.com/browse/OCPBUGS-24690): Fully disable network-node-identity on ROKS [#2313](https://github.com/openshift/cluster-network-operator/pull/2313)
* [SDN-4598](https://issues.redhat.com/browse/SDN-4598): Set runAsUser to env variable if it is set [#2307](https://github.com/openshift/cluster-network-operator/pull/2307)
* [OCPBUGS-30103](https://issues.redhat.com/browse/OCPBUGS-30103): ensure local networking deployments within hypershift use the client side load balancer to be resilient to control plane node failures [#2288](https://github.com/openshift/cluster-network-operator/pull/2288)
* [OCPBUGS-30831](https://issues.redhat.com/browse/OCPBUGS-30831): Updating cluster-network-operator-container image to be consistent with ART for 4.16 [#2308](https://github.com/openshift/cluster-network-operator/pull/2308)
* [OCPBUGS-30299](https://issues.redhat.com/browse/OCPBUGS-30299): Fix managed cluster detection on ARO [#2299](https://github.com/openshift/cluster-network-operator/pull/2299)
* [OPNET-358](https://issues.redhat.com/browse/OPNET-358), [OPNET-360](https://issues.redhat.com/browse/OPNET-360): Allow VIP mutation in Infra CR [#2130](https://github.com/openshift/cluster-network-operator/pull/2130)
* [OCPBUGS-29288](https://issues.redhat.com/browse/OCPBUGS-29288): Ensure proper deprecation for the default field manager [#2274](https://github.com/openshift/cluster-network-operator/pull/2274)
* [OCPBUGS-24380](https://issues.redhat.com/browse/OCPBUGS-24380), [OCPBUGS-24381](https://issues.redhat.com/browse/OCPBUGS-24381), [OCPBUGS-24382](https://issues.redhat.com/browse/OCPBUGS-24382): Update APBExternalRoute, EgressFirewall, EgressQoS permissions for ovnkube pods [#2262](https://github.com/openshift/cluster-network-operator/pull/2262)
* [OCPBUGS-25764](https://issues.redhat.com/browse/OCPBUGS-25764): memory-trim-on-compaction is enabled by default [#2260](https://github.com/openshift/cluster-network-operator/pull/2260)
* [OCPBUGS-23788](https://issues.redhat.com/browse/OCPBUGS-23788): Only allow valid values for gatewayConfig.ipForwarding [#2127](https://github.com/openshift/cluster-network-operator/pull/2127)
* [OCPBUGS-29341](https://issues.redhat.com/browse/OCPBUGS-29341): Run dhcp-daemon pods as system-node-critical priority [#2280](https://github.com/openshift/cluster-network-operator/pull/2280)
* [OCPBUGS-24690](https://issues.redhat.com/browse/OCPBUGS-24690): Disable network-node-identity on ROKS [#2197](https://github.com/openshift/cluster-network-operator/pull/2197)
* [OCPBUGS-26492](https://issues.redhat.com/browse/OCPBUGS-26492): Not set CNO to degraded if API server returns conflict error [#2192](https://github.com/openshift/cluster-network-operator/pull/2192)
* [OCPBUGS-24214](https://issues.redhat.com/browse/OCPBUGS-24214): Add ownership annotations [#2120](https://github.com/openshift/cluster-network-operator/pull/2120)
* [OCPBUGS-24601](https://issues.redhat.com/browse/OCPBUGS-24601): Add minReadySeconds to network-node-identity [#2151](https://github.com/openshift/cluster-network-operator/pull/2151)
* [OCPBUGS-29305](https://issues.redhat.com/browse/OCPBUGS-29305): ipsec: fix openssl typo [#2269](https://github.com/openshift/cluster-network-operator/pull/2269)
* [OCPBUGS-28920](https://issues.redhat.com/browse/OCPBUGS-28920): Update ingressconfig_controller to use field Manager [#2259](https://github.com/openshift/cluster-network-operator/pull/2259)
* NO-JIRA: Remove ILB from CNCC [#2182](https://github.com/openshift/cluster-network-operator/pull/2182)
* [OCPBUGS-27222](https://issues.redhat.com/browse/OCPBUGS-27222): Fix CloudPrivateIPConfig CRD in common [#2249](https://github.com/openshift/cluster-network-operator/pull/2249)
* [OCPBUGS-24976](https://issues.redhat.com/browse/OCPBUGS-24976): Updating cluster-network-operator-container image to be consistent with ART for 4.16 [#2233](https://github.com/openshift/cluster-network-operator/pull/2233)
* [OCPBUGS-28676](https://issues.redhat.com/browse/OCPBUGS-28676): Remove libreswan rpm existence checks [#2238](https://github.com/openshift/cluster-network-operator/pull/2238)
* [OCPBUGS-29099](https://issues.redhat.com/browse/OCPBUGS-29099): Add hostNetwork:true to cni-sysctl-allowlist ds [#2237](https://github.com/openshift/cluster-network-operator/pull/2237)
* [OCPBUGS-24436](https://issues.redhat.com/browse/OCPBUGS-24436): Add probes to node-network-identity [#2148](https://github.com/openshift/cluster-network-operator/pull/2148)
* [OCPBUGS-24299](https://issues.redhat.com/browse/OCPBUGS-24299): network-node-identity mounts secrets with mode 0640 [#2142](https://github.com/openshift/cluster-network-operator/pull/2142)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#2224](https://github.com/openshift/cluster-network-operator/pull/2224)
* [NP-874](https://issues.redhat.com/browse/NP-874), [OCPBUGS-27222](https://issues.redhat.com/browse/OCPBUGS-27222): Bump openshift API [#2246](https://github.com/openshift/cluster-network-operator/pull/2246)
* [OCPBUGS-24383](https://issues.redhat.com/browse/OCPBUGS-24383): Limit write permissions for egressservices [#2171](https://github.com/openshift/cluster-network-operator/pull/2171)
* [NP-903](https://issues.redhat.com/browse/NP-903): Only allows live migration on standalone managed clusters [#2236](https://github.com/openshift/cluster-network-operator/pull/2236)
* [OCPBUGS-19551](https://issues.redhat.com/browse/OCPBUGS-19551): ovnkube: simplify northd threading and SNO templating [#2234](https://github.com/openshift/cluster-network-operator/pull/2234)
* [OCPBUGS-24976](https://issues.redhat.com/browse/OCPBUGS-24976): Updating cluster-network-operator-container image to be consistent with ART [#2156](https://github.com/openshift/cluster-network-operator/pull/2156)
* [OCPBUGS-25079](https://issues.redhat.com/browse/OCPBUGS-25079): Prevent NoRunningOvnControlPlane alert getting fired continuously [#2208](https://github.com/openshift/cluster-network-operator/pull/2208)
* NO-JIRA: add kyrtapz as reviewer and approver [#2226](https://github.com/openshift/cluster-network-operator/pull/2226)
* [OCPBUGS-27823](https://issues.redhat.com/browse/OCPBUGS-27823): Not update migration conditions when any MCP is updating [#2213](https://github.com/openshift/cluster-network-operator/pull/2213)
* [OCPBUGS-26986](https://issues.redhat.com/browse/OCPBUGS-26986): Add ConfigMap mount to the whereabouts-reconciler [#2209](https://github.com/openshift/cluster-network-operator/pull/2209)
* [SDN-3708](https://issues.redhat.com/browse/SDN-3708): Support configurable masquerade subnet in ovn-k [#1807](https://github.com/openshift/cluster-network-operator/pull/1807)
* [OCPBUGS-26952](https://issues.redhat.com/browse/OCPBUGS-26952): Deploy CNO IPsec MC even if user already have one [#2201](https://github.com/openshift/cluster-network-operator/pull/2201)
* [OCPBUGS-27264](https://issues.redhat.com/browse/OCPBUGS-27264): Only reconcile on Node updates with Label changes [#2206](https://github.com/openshift/cluster-network-operator/pull/2206)
* NO-JIRA: Fix jira component info [#2199](https://github.com/openshift/cluster-network-operator/pull/2199)
* [SDN-4166](https://issues.redhat.com/browse/SDN-4166): Enable N-S IPsec [#2191](https://github.com/openshift/cluster-network-operator/pull/2191)
* [OCPBUGS-24379](https://issues.redhat.com/browse/OCPBUGS-24379): Remove egressip write permissions from ovn-kubernetes-node [#2170](https://github.com/openshift/cluster-network-operator/pull/2170)
* [OCPBUGS-24635](https://issues.redhat.com/browse/OCPBUGS-24635): network node identity: tolarate all taints [#2153](https://github.com/openshift/cluster-network-operator/pull/2153)
* [OCPBUGS-25207](https://issues.redhat.com/browse/OCPBUGS-25207): Render IPsec MachineConfig after cluster settles with MachineConfigs [#2187](https://github.com/openshift/cluster-network-operator/pull/2187)
* [OCPBUGS-25688](https://issues.redhat.com/browse/OCPBUGS-25688): remove microshift folder, since CNO doesn't manage it [#2173](https://github.com/openshift/cluster-network-operator/pull/2173)
* [OCPBUGS-25669](https://issues.redhat.com/browse/OCPBUGS-25669): Update ovn-k managed control-plane RBAC [#2169](https://github.com/openshift/cluster-network-operator/pull/2169)
* [OCPBUGS-25760](https://issues.redhat.com/browse/OCPBUGS-25760): Keep the live migration annotation consistant with the enhancement doc [#2179](https://github.com/openshift/cluster-network-operator/pull/2179)
* [OCPBUGS-19635](https://issues.redhat.com/browse/OCPBUGS-19635): OVN-K in SNO deployment mode: fix Lease override for CM [#2070](https://github.com/openshift/cluster-network-operator/pull/2070)
* [SDN-4227](https://issues.redhat.com/browse/SDN-4227): Use specific permissions for CNCC in GCP [#2069](https://github.com/openshift/cluster-network-operator/pull/2069)
* [OCPBUGS-24693](https://issues.redhat.com/browse/OCPBUGS-24693): HyperShift, network-node-identity: Check the deployment in the management cluster [#2166](https://github.com/openshift/cluster-network-operator/pull/2166)
* [OCPBUGS-24176](https://issues.redhat.com/browse/OCPBUGS-24176): Ignore invalid PEM blocks [#2178](https://github.com/openshift/cluster-network-operator/pull/2178)
* [OCPBUGS-25337](https://issues.redhat.com/browse/OCPBUGS-25337): Avoid removal of ipsec-host daemonset when node is NotReady [#2161](https://github.com/openshift/cluster-network-operator/pull/2161)
* [HOSTEDCP-1308](https://issues.redhat.com/browse/HOSTEDCP-1308): remove service account token mount in cloud-network-con… [#2165](https://github.com/openshift/cluster-network-operator/pull/2165)
* [OCPBUGS-23729](https://issues.redhat.com/browse/OCPBUGS-23729): Set replicas of Multus admission controller according to Hypershift ControllerAvailabilityPolicy [#2159](https://github.com/openshift/cluster-network-operator/pull/2159)
* [OCPBUGS-24036](https://issues.redhat.com/browse/OCPBUGS-24036): remove all managed fields used by old manager [#2114](https://github.com/openshift/cluster-network-operator/pull/2114)
* [OCPBUGS-23199](https://issues.redhat.com/browse/OCPBUGS-23199): add env var in whereabouts-reconciler daemonset [#2160](https://github.com/openshift/cluster-network-operator/pull/2160)
* [OCPBUGS-19830](https://issues.redhat.com/browse/OCPBUGS-19830): fix whereabouts conformance test failures [#2103](https://github.com/openshift/cluster-network-operator/pull/2103)
* [OCPBUGS-24650](https://issues.redhat.com/browse/OCPBUGS-24650), [SDN-4308](https://issues.redhat.com/browse/SDN-4308): Set enable-multi-external-gateway flag in ovnkube.conf [#2149](https://github.com/openshift/cluster-network-operator/pull/2149)
* [OCPBUGS-19817](https://issues.redhat.com/browse/OCPBUGS-19817), [SDN-4162](https://issues.redhat.com/browse/SDN-4162): Upgrade IPsec with single daemonset pod [#2087](https://github.com/openshift/cluster-network-operator/pull/2087)
* [NP-615](https://issues.redhat.com/browse/NP-615): Live migration [#2091](https://github.com/openshift/cluster-network-operator/pull/2091)
* [OCPBUGS-23161](https://issues.redhat.com/browse/OCPBUGS-23161): Set logging for controller-runtime [#2129](https://github.com/openshift/cluster-network-operator/pull/2129)
* [SDN-4061](https://issues.redhat.com/browse/SDN-4061): Remove interconnect upgrade logic, single-zone YAMLs and everything related to OVNK centralized architecture [#2101](https://github.com/openshift/cluster-network-operator/pull/2101)
* [OCPVE-779](https://issues.redhat.com/browse/OCPVE-779): Annotate credentials request manifests [#2105](https://github.com/openshift/cluster-network-operator/pull/2105)
* [NP-615](https://issues.redhat.com/browse/NP-615): Bump github.com/openshift/api [#2138](https://github.com/openshift/cluster-network-operator/pull/2138)
* [SDN-4308](https://issues.redhat.com/browse/SDN-4308): Update status merge for APBRoute and EgressFirewall. [#2132](https://github.com/openshift/cluster-network-operator/pull/2132)
* [OCPBUGS-22710](https://issues.redhat.com/browse/OCPBUGS-22710): Add apbroute/status patch rights for ovnkube-node to update status [#2139](https://github.com/openshift/cluster-network-operator/pull/2139)
* [NETOBSERV-1047](https://issues.redhat.com/browse/NETOBSERV-1047): Add a cluster monitoring dashboard for ovn [#1871](https://github.com/openshift/cluster-network-operator/pull/1871)
* [OCPBUGS-21924](https://issues.redhat.com/browse/OCPBUGS-21924): Bump library-go [#2082](https://github.com/openshift/cluster-network-operator/pull/2082)
* [SDN-4101](https://issues.redhat.com/browse/SDN-4101): Remove HyperShift API dependency, Bump kubernetes dependencies [#2128](https://github.com/openshift/cluster-network-operator/pull/2128)
* NO ISSUE: add ownership of the proxy-ca [#2111](https://github.com/openshift/cluster-network-operator/pull/2111)
* [OCPBUGS-22869](https://issues.redhat.com/browse/OCPBUGS-22869): hypershift, hosted clusters: enable multi-homing and multi-net features [#2113](https://github.com/openshift/cluster-network-operator/pull/2113)
* [OCPBUGS-23082](https://issues.redhat.com/browse/OCPBUGS-23082): set automountServiceAccountToken to false for hypershift managed network-node-identity deploy [#2100](https://github.com/openshift/cluster-network-operator/pull/2100)
* [OCPBUGS-21924](https://issues.redhat.com/browse/OCPBUGS-21924): Bump golang.org/x/net to v0.17.0 [#2068](https://github.com/openshift/cluster-network-operator/pull/2068)
* [OCPBUGS-18088](https://issues.redhat.com/browse/OCPBUGS-18088), [OCPBUGS-18089](https://issues.redhat.com/browse/OCPBUGS-18089): ovnkube: container scripts cleanup [v2] [#2060](https://github.com/openshift/cluster-network-operator/pull/2060)
* [OCPBUGS-11179](https://issues.redhat.com/browse/OCPBUGS-11179): change CNO to use custom ServiceAccount [#2084](https://github.com/openshift/cluster-network-operator/pull/2084)
* two replicas for CM instead of 3 [#2052](https://github.com/openshift/cluster-network-operator/pull/2052)
* [OCPBUGS-15817](https://issues.redhat.com/browse/OCPBUGS-15817): Egress router: request at least 100 milliCPU [#2077](https://github.com/openshift/cluster-network-operator/pull/2077)
* [OCPBUGS-18785](https://issues.redhat.com/browse/OCPBUGS-18785): SDN controller manifest: add node name from downward kapi to sdn controller [#2047](https://github.com/openshift/cluster-network-operator/pull/2047)
* [OCPBUGS-19370](https://issues.redhat.com/browse/OCPBUGS-19370): Added HCP label to CNO pods [#2048](https://github.com/openshift/cluster-network-operator/pull/2048)
* [OCPBUGS-15220](https://issues.redhat.com/browse/OCPBUGS-15220): Add zone node preference to multus-admission-controller [#1795](https://github.com/openshift/cluster-network-operator/pull/1795)
* multinetworkpolicy: allow Neighbor Discovery Protocol traffic [#2010](https://github.com/openshift/cluster-network-operator/pull/2010)
* [OCPBUGS-18569](https://issues.redhat.com/browse/OCPBUGS-18569): hypershift: adjust backoff on infrastructure name retry [#1986](https://github.com/openshift/cluster-network-operator/pull/1986)
* [OCPBUGS-20533](https://issues.redhat.com/browse/OCPBUGS-20533): Revisit cipher suits for multus-admission-controller's rbac-proxy [#2074](https://github.com/openshift/cluster-network-operator/pull/2074)
* [OCPBUGS-10652](https://issues.redhat.com/browse/OCPBUGS-10652): ovnkube: disable conntrack on hybrid overlay VXLAN ports [#1819](https://github.com/openshift/cluster-network-operator/pull/1819)
* Make APB External Route namespace selector mandatory for a dynamic hop [#1929](https://github.com/openshift/cluster-network-operator/pull/1929)
* [OCPBUGS-20519](https://issues.redhat.com/browse/OCPBUGS-20519): hosted cluster upgrade failure from 4.13 stable to 4.14 [#2065](https://github.com/openshift/cluster-network-operator/pull/2065)
* Revert "Merge pull request #2037 from dcbw/db-script-cleanup" [#2058](https://github.com/openshift/cluster-network-operator/pull/2058)
* [OCPBUGS-18392](https://issues.redhat.com/browse/OCPBUGS-18392): notify when /etc/openvswitch path changes [#1989](https://github.com/openshift/cluster-network-operator/pull/1989)
* [OCPBUGS-18088](https://issues.redhat.com/browse/OCPBUGS-18088), [OCPBUGS-18089](https://issues.redhat.com/browse/OCPBUGS-18089): ovnkube: container scripts cleanup [#2037](https://github.com/openshift/cluster-network-operator/pull/2037)
* Remove ability to deploy with Kuryr [#2056](https://github.com/openshift/cluster-network-operator/pull/2056)
* [OCPBUGS-20104](https://issues.redhat.com/browse/OCPBUGS-20104): Don't run network node identity as root [#2051](https://github.com/openshift/cluster-network-operator/pull/2051)
* [OCPBUGS-20076](https://issues.redhat.com/browse/OCPBUGS-20076): Multus should determine kubeconfig path [#2049](https://github.com/openshift/cluster-network-operator/pull/2049)
* Revert Kuryr MTU fixes [#2038](https://github.com/openshift/cluster-network-operator/pull/2038)
* Fix MTU miscalculation [#1778](https://github.com/openshift/cluster-network-operator/pull/1778)
* [OCPBUGS-19918](https://issues.redhat.com/browse/OCPBUGS-19918): get ipsecStatus from host daemonset [#2042](https://github.com/openshift/cluster-network-operator/pull/2042)
* Network metrics daemon: change priority class to openshift-user-critical [#2044](https://github.com/openshift/cluster-network-operator/pull/2044)
* [OCPBUGS-14819](https://issues.redhat.com/browse/OCPBUGS-14819): HyperShift: Use the local konnectivity proxy when checking proxy readiness [#1985](https://github.com/openshift/cluster-network-operator/pull/1985)
* [OCPBUGS-19861](https://issues.redhat.com/browse/OCPBUGS-19861): Multus per-node certificates should have 24h duration [#2039](https://github.com/openshift/cluster-network-operator/pull/2039)
* [OCPBUGS-19418](https://issues.redhat.com/browse/OCPBUGS-19418): Relax conditions to get IC upgrade started [#2018](https://github.com/openshift/cluster-network-operator/pull/2018)
* [OCPBUGS-18396](https://issues.redhat.com/browse/OCPBUGS-18396): Fix config status MTU migration not being updated [#2021](https://github.com/openshift/cluster-network-operator/pull/2021)
* [OCPBUGS-19705](https://issues.redhat.com/browse/OCPBUGS-19705): Use port 9108 for ovnkube-control-plane metrics [#2031](https://github.com/openshift/cluster-network-operator/pull/2031)
* [OCPBUGS-19715](https://issues.redhat.com/browse/OCPBUGS-19715): Do not enable node admission webhook if the CNI is not OVN-Kubernetes [#2030](https://github.com/openshift/cluster-network-operator/pull/2030)
* [OCPBUGS-17391](https://issues.redhat.com/browse/OCPBUGS-17391): remove prestop hooks for northd, sbdbd and nbdb [#1978](https://github.com/openshift/cluster-network-operator/pull/1978)
* [OCPBUGS-19625](https://issues.redhat.com/browse/OCPBUGS-19625): Multus per-node certificate request [#2009](https://github.com/openshift/cluster-network-operator/pull/2009)
* [OCPBUGS-19377](https://issues.redhat.com/browse/OCPBUGS-19377): Kuryr: Fix deriving MTU from previous config [#2007](https://github.com/openshift/cluster-network-operator/pull/2007)
* [OCPBUGS-19648](https://issues.redhat.com/browse/OCPBUGS-19648): Network identity: node-specific certificate in ovnkube-node, admission webhook [#1983](https://github.com/openshift/cluster-network-operator/pull/1983)
* [OCPBUGS-19550](https://issues.redhat.com/browse/OCPBUGS-19550): multus: set MULTUS_NODE_NAME to filter pods to local node [#2020](https://github.com/openshift/cluster-network-operator/pull/2020)
* [OCPBUGS-19018](https://issues.redhat.com/browse/OCPBUGS-19018): use $CPE_NAME to find the OS major version [#2003](https://github.com/openshift/cluster-network-operator/pull/2003)
* [OCPBUGS-19494](https://issues.redhat.com/browse/OCPBUGS-19494): ipsec: remove preStop from host [#2015](https://github.com/openshift/cluster-network-operator/pull/2015)
* [OCPBUGS-18114](https://issues.redhat.com/browse/OCPBUGS-18114): Update node selector in various YAMLs [#1845](https://github.com/openshift/cluster-network-operator/pull/1845)
* Limit OVN-Kubernetes permissions [#1982](https://github.com/openshift/cluster-network-operator/pull/1982)
* [OCPBUGS-18892](https://issues.redhat.com/browse/OCPBUGS-18892): make ipsec.service required [#1999](https://github.com/openshift/cluster-network-operator/pull/1999)
* [OCPBUGS-19236](https://issues.redhat.com/browse/OCPBUGS-19236): Updating cluster-network-operator images to be consistent with ART [#2006](https://github.com/openshift/cluster-network-operator/pull/2006)
* separate libovsdblogs from main ovnkube-master logs [#1938](https://github.com/openshift/cluster-network-operator/pull/1938)
* [OCPBUGS-15201](https://issues.redhat.com/browse/OCPBUGS-15201): Disable weak SSH cipher suites [#1981](https://github.com/openshift/cluster-network-operator/pull/1981)
* [OCPBUGS-18676](https://issues.redhat.com/browse/OCPBUGS-18676): ovnkube: set northd backoff-interval and use a single thread to save CPU [#1990](https://github.com/openshift/cluster-network-operator/pull/1990)
* [OCPBUGS-17380](https://issues.redhat.com/browse/OCPBUGS-17380): ipsec: fix oopsy from 2e3fc8e7a0 [#1996](https://github.com/openshift/cluster-network-operator/pull/1996)
* [OCPBUGS-18517](https://issues.redhat.com/browse/OCPBUGS-18517): Kuryr: Set MTU on Bootstrap, not Render phase [#1988](https://github.com/openshift/cluster-network-operator/pull/1988)
* [OCPBUGS-18135](https://issues.redhat.com/browse/OCPBUGS-18135): IBMCloud specific: patch out management workload for dataplane component thats needed for bootstrapping [#1955](https://github.com/openshift/cluster-network-operator/pull/1955)
* move IPsec to host [#1849](https://github.com/openshift/cluster-network-operator/pull/1849)
* [OCPBUGS-17916](https://issues.redhat.com/browse/OCPBUGS-17916): Fix IC configmap lookup in pod_status.go [#1954](https://github.com/openshift/cluster-network-operator/pull/1954)
* [OCPBUGS-17677](https://issues.redhat.com/browse/OCPBUGS-17677): [Azure]CNCC failed to assign egressIP to NIC for Azure Workload Identity Cluster [#1980](https://github.com/openshift/cluster-network-operator/pull/1980)
* [OCPBUGS-18363](https://issues.redhat.com/browse/OCPBUGS-18363): Add '/etc/cni/multus/net.d' into volumemount in multus pod [#1979](https://github.com/openshift/cluster-network-operator/pull/1979)
* [OCPBUGS-18175](https://issues.redhat.com/browse/OCPBUGS-18175): Fix bond-cni's default directory in multus manifest [#1953](https://github.com/openshift/cluster-network-operator/pull/1953)
* [OCPBUGS-17782](https://issues.redhat.com/browse/OCPBUGS-17782), [SDN-3664](https://issues.redhat.com/browse/SDN-3664): Join ovnkube-controller and ovnkube-node container for multizone setup [#1971](https://github.com/openshift/cluster-network-operator/pull/1971)
* [OCPBUGS-16051](https://issues.redhat.com/browse/OCPBUGS-16051), [OCPBUGS-3176](https://issues.redhat.com/browse/OCPBUGS-3176): Enables IP Forwarding config in CNO [#1952](https://github.com/openshift/cluster-network-operator/pull/1952)
* [OCPBUGS-17257](https://issues.redhat.com/browse/OCPBUGS-17257): CVE-2023-3978: golang.org/x/net/html: Cross site scripting [#1935](https://github.com/openshift/cluster-network-operator/pull/1935)
* [OCPBUGS-17677](https://issues.redhat.com/browse/OCPBUGS-17677): [Azure] Add granular permission for assigning egressIP to NIC to Azure CredentialsRequest for workload identity. [#1949](https://github.com/openshift/cluster-network-operator/pull/1949)
* [OCPBUGS-17964](https://issues.redhat.com/browse/OCPBUGS-17964): ovn-k, managed: Align join subnet configuration [#1962](https://github.com/openshift/cluster-network-operator/pull/1962)
* [SDN-4024](https://issues.redhat.com/browse/SDN-4024): Add ANP Feature Gate [#1859](https://github.com/openshift/cluster-network-operator/pull/1859)
* [SDN-4057](https://issues.redhat.com/browse/SDN-4057): hypershift: Allow ovnkube-master and ovnkube-node to have different images [#1942](https://github.com/openshift/cluster-network-operator/pull/1942)
* Remove certificatesigningrequests/update permission from ovnkubenode [#1934](https://github.com/openshift/cluster-network-operator/pull/1934)
* Add rolling update for managed ovnkube-control-plane [#1944](https://github.com/openshift/cluster-network-operator/pull/1944)
* IC & openshift + hypershift [#1874](https://github.com/openshift/cluster-network-operator/pull/1874)
* [OCPBUGS-16019](https://issues.redhat.com/browse/OCPBUGS-16019): prevent creation of multiple cni-sysctl-allowlist-ds pods [#1904](https://github.com/openshift/cluster-network-operator/pull/1904)
* [OCPBUGS-10765](https://issues.redhat.com/browse/OCPBUGS-10765): make MAXLOGFILES a real variable and work for self-hosted [#1931](https://github.com/openshift/cluster-network-operator/pull/1931)
* Multus thick plugin support [#1915](https://github.com/openshift/cluster-network-operator/pull/1915)
* OVN-Kubernetes ipsec: create the CSR with a random name [#1928](https://github.com/openshift/cluster-network-operator/pull/1928)
* [CCO-294](https://issues.redhat.com/browse/CCO-294): Switch azure credentials request to use explicit permissions [#1922](https://github.com/openshift/cluster-network-operator/pull/1922)
* OVN-Kubernetes: Add status subresource permissions for setting labels and annotations [#1896](https://github.com/openshift/cluster-network-operator/pull/1896)
* [SDN-3223](https://issues.redhat.com/browse/SDN-3223): Use encapsulation=true for IBM Cloud [#1800](https://github.com/openshift/cluster-network-operator/pull/1800)
* [Bug 16136](https://bugzilla.redhat.com/show_bug.cgi?id=16136): change whereabouts ip reconciler exec [#1890](https://github.com/openshift/cluster-network-operator/pull/1890)
* Add OpenStack platform to list of allowed dual-stack clusters [#1697](https://github.com/openshift/cluster-network-operator/pull/1697)
* [OCPBUGS-15945](https://issues.redhat.com/browse/OCPBUGS-15945): Stop using utilruntime.PanicHandlers to handle reconciliation panics [#1893](https://github.com/openshift/cluster-network-operator/pull/1893)
* [HOSTEDCP-1063](https://issues.redhat.com/browse/HOSTEDCP-1063): allow webhooks in hosted clusters to reach multus-admission-controller service [#1879](https://github.com/openshift/cluster-network-operator/pull/1879)
* [OCPBUGS-15961](https://issues.redhat.com/browse/OCPBUGS-15961): FIPS related CNO changes [#1901](https://github.com/openshift/cluster-network-operator/pull/1901)
* [OCPBUGS-10765](https://issues.redhat.com/browse/OCPBUGS-10765): Revert "Revert "OCPBUGS-10765: Remove oldest ovn acl log files when f… [#1876](https://github.com/openshift/cluster-network-operator/pull/1876)
* ovn-k: Configure dns service namespace and name [#1912](https://github.com/openshift/cluster-network-operator/pull/1912)
* [OCPBUGS-15544](https://issues.redhat.com/browse/OCPBUGS-15544): Enable multi-external-gateway feature by default for managed and hosted clusters [#1887](https://github.com/openshift/cluster-network-operator/pull/1887)
* [OCPBUGS-15918](https://issues.redhat.com/browse/OCPBUGS-15918): Skip rendering 0.0.0.0/0 for cluster proxy status [#1903](https://github.com/openshift/cluster-network-operator/pull/1903)
* Change rhel7/8 to rhel8/9 [#1870](https://github.com/openshift/cluster-network-operator/pull/1870)
* Enable EgressService controller [#1848](https://github.com/openshift/cluster-network-operator/pull/1848)
* Edited multus-admission-controller deployment config to not add autom… [#1767](https://github.com/openshift/cluster-network-operator/pull/1767)
* [OCPBUGS-15794](https://issues.redhat.com/browse/OCPBUGS-15794): fix: add missing annotation for workload partitioning [#1866](https://github.com/openshift/cluster-network-operator/pull/1866)
* [OCPBUGS-15544](https://issues.redhat.com/browse/OCPBUGS-15544): Add adminpolicybasedexternalroutes rights for ovnkube-node. [#1867](https://github.com/openshift/cluster-network-operator/pull/1867)
* Revert "Remove oldest ovn acl log files when file limit exceeded" #1873 [#1873](https://github.com/openshift/cluster-network-operator/pull/1873)
* [OCPBUGS-10765](https://issues.redhat.com/browse/OCPBUGS-10765): Remove oldest ovn acl log files when file limit exceeded [#1868](https://github.com/openshift/cluster-network-operator/pull/1868)
* kube-proxy config overriding updates [#1831](https://github.com/openshift/cluster-network-operator/pull/1831)
* [OCPBUGS-15282](https://issues.redhat.com/browse/OCPBUGS-15282): Add release version annotation to whereabouts-reconciler [#1851](https://github.com/openshift/cluster-network-operator/pull/1851)
* [CCO-356](https://issues.redhat.com/browse/CCO-356): Add Infrastructures permission to CNCC cluster role [#1843](https://github.com/openshift/cluster-network-operator/pull/1843)
* Add multi-networkpolicies support for OVN [#1796](https://github.com/openshift/cluster-network-operator/pull/1796)
* Add support for AdminPolicyBasedExternalRoute CRD and controller's RBAC [#1765](https://github.com/openshift/cluster-network-operator/pull/1765)
* [OCPBUGS-15138](https://issues.redhat.com/browse/OCPBUGS-15138): Add kubernetes.io/os nodeSelector to wherebouts reconciler DS [#1841](https://github.com/openshift/cluster-network-operator/pull/1841)
* [OCPBUGS-14988](https://issues.redhat.com/browse/OCPBUGS-14988), [SDN-3901](https://issues.redhat.com/browse/SDN-3901): Rebase to kube 1.27 [#1826](https://github.com/openshift/cluster-network-operator/pull/1826)
* [CCO-358](https://issues.redhat.com/browse/CCO-358): Manifest changes necessary to support Azure Workload Identity [#1755](https://github.com/openshift/cluster-network-operator/pull/1755)
* [OCPBUGS-14714](https://issues.redhat.com/browse/OCPBUGS-14714): Do not rely on ControlPlaneTopology do determine if running in HyperShift [#1835](https://github.com/openshift/cluster-network-operator/pull/1835)
* [OCPBUGS-11882](https://issues.redhat.com/browse/OCPBUGS-11882): Added another volume to safe-to-evict-local-volume annotation [#1830](https://github.com/openshift/cluster-network-operator/pull/1830)
* [OCPBUGS-14833](https://issues.redhat.com/browse/OCPBUGS-14833): Fixes lint issues [#1834](https://github.com/openshift/cluster-network-operator/pull/1834)
* [OCPBUGS-14384](https://issues.redhat.com/browse/OCPBUGS-14384): Remove nodeSelector for architecture in whereabouts daemonset [#1828](https://github.com/openshift/cluster-network-operator/pull/1828)
* [OCPBUGS-11882](https://issues.redhat.com/browse/OCPBUGS-11882): Added safe-to-evict annotation to ovnkube-master and multus admission controller components [#1822](https://github.com/openshift/cluster-network-operator/pull/1822)
* [OCPBUGS-13922](https://issues.redhat.com/browse/OCPBUGS-13922): Revert "Do not set the operator as available before updating the network config" [#1818](https://github.com/openshift/cluster-network-operator/pull/1818)
* [OCPBUGS-11448](https://issues.redhat.com/browse/OCPBUGS-11448): add Hypershift release-image annotation to multus [#1770](https://github.com/openshift/cluster-network-operator/pull/1770)
* [OCPBUGS-10937](https://issues.redhat.com/browse/OCPBUGS-10937): multus-admission-controller mounts secret with mode 0640 [#1752](https://github.com/openshift/cluster-network-operator/pull/1752)
* [OCPBUGS-13219](https://issues.redhat.com/browse/OCPBUGS-13219): Use `IfNotPresent` instead of `Always` in OVNK upgrades pre-puller [#1803](https://github.com/openshift/cluster-network-operator/pull/1803)
* [OCPBUGS-5027](https://issues.redhat.com/browse/OCPBUGS-5027): Make the operator degraded on panic [#1786](https://github.com/openshift/cluster-network-operator/pull/1786)
* [OCPBUGS-12856](https://issues.redhat.com/browse/OCPBUGS-12856): Support Device Plugin Resources For Smart NIC and DPU Hosts [#1721](https://github.com/openshift/cluster-network-operator/pull/1721)
* Updating cluster-network-operator images to be consistent with ART [#1790](https://github.com/openshift/cluster-network-operator/pull/1790)
* [OCPBUGS-11565](https://issues.redhat.com/browse/OCPBUGS-11565): High API requests due to allowlist and operconfig reconcilers running too often [#1788](https://github.com/openshift/cluster-network-operator/pull/1788)
* [OCPBUGS-8070](https://issues.redhat.com/browse/OCPBUGS-8070): Depreciate legacy field manager [#1763](https://github.com/openshift/cluster-network-operator/pull/1763)
* [OCPBUGS-11550](https://issues.redhat.com/browse/OCPBUGS-11550): AUTH: update cluster-reader to include k8s.ovn.org [#1791](https://github.com/openshift/cluster-network-operator/pull/1791)
* [OCPBUGS-10009](https://issues.redhat.com/browse/OCPBUGS-10009): HyperShift: Support HostedControlPlane node selector [#1736](https://github.com/openshift/cluster-network-operator/pull/1736)
* [OCPBUGS-11046](https://issues.redhat.com/browse/OCPBUGS-11046): fix reconciliation process of the allowlist controller [#1792](https://github.com/openshift/cluster-network-operator/pull/1792)
* [OCPBUGS-1341](https://issues.redhat.com/browse/OCPBUGS-1341): Enhance check controller to remove old check objects [#1649](https://github.com/openshift/cluster-network-operator/pull/1649)
* [OCPBUGS-11046](https://issues.redhat.com/browse/OCPBUGS-11046): Fix allowlist ds template [#1773](https://github.com/openshift/cluster-network-operator/pull/1773)
* [OCPBUGS-10647](https://issues.redhat.com/browse/OCPBUGS-10647): multus-admission-controller should not run as root under Hypershift [#1745](https://github.com/openshift/cluster-network-operator/pull/1745)
* [OCPBUGS-9174](https://issues.redhat.com/browse/OCPBUGS-9174): The cluster-readers group should be able to get net-attach-defs [#1343](https://github.com/openshift/cluster-network-operator/pull/1343)
* Updating cluster-network-operator images to be consistent with ART [#1768](https://github.com/openshift/cluster-network-operator/pull/1768)
* [OCPBUGS-9964](https://issues.redhat.com/browse/OCPBUGS-9964): Split out konnectivity certs [#1734](https://github.com/openshift/cluster-network-operator/pull/1734)
* [SDN-3444](https://issues.redhat.com/browse/SDN-3444): Add runbook url for SBDB connectivity alert [#1553](https://github.com/openshift/cluster-network-operator/pull/1553)
* [OCPBUGS-7777](https://issues.redhat.com/browse/OCPBUGS-7777): use --template instead of -a for 'oc observe' [#1760](https://github.com/openshift/cluster-network-operator/pull/1760)
* Fix tier label, privileged, HOSTNAME/NODENAME in whereabouts reconciler [#1735](https://github.com/openshift/cluster-network-operator/pull/1735)
* [OCPBUGS-10433](https://issues.redhat.com/browse/OCPBUGS-10433): Hypershift: Add RollingUpdate parameters to multus-admission-controller [#1740](https://github.com/openshift/cluster-network-operator/pull/1740)
* ovn-kube: move back to unsuffixed RHEL9 images [#1747](https://github.com/openshift/cluster-network-operator/pull/1747)
* Updating cluster-network-operator images to be consistent with ART [#1732](https://github.com/openshift/cluster-network-operator/pull/1732)
* [OCPBUGS-10649](https://issues.redhat.com/browse/OCPBUGS-10649): HyperShift: Add POD_NAME env to ovnkube-node [#1748](https://github.com/openshift/cluster-network-operator/pull/1748)
* [OCPBUGS-10031](https://issues.redhat.com/browse/OCPBUGS-10031): operConfig reconcile can return nil error on failure [#1744](https://github.com/openshift/cluster-network-operator/pull/1744)
* Set OVN-K north/south bound stale alerts severity to critical [#1668](https://github.com/openshift/cluster-network-operator/pull/1668)
* [OCPBUGS-8707](https://issues.redhat.com/browse/OCPBUGS-8707): Point libreswan to proper nss location [#1727](https://github.com/openshift/cluster-network-operator/pull/1727)
* Whereabouts should implement the reconciliation controller [#1693](https://github.com/openshift/cluster-network-operator/pull/1693)
* add/update some UTs around clusternetwork change [#1725](https://github.com/openshift/cluster-network-operator/pull/1725)
* [OCPBUGS-9931](https://issues.redhat.com/browse/OCPBUGS-9931): Enable configuration of node healthz server on ovnkube [#1715](https://github.com/openshift/cluster-network-operator/pull/1715)
* [OCPBUGS-8692](https://issues.redhat.com/browse/OCPBUGS-8692): HyperShift: Set affinity, tolerations and co-location for all hcp resources created by CNO [#1728](https://github.com/openshift/cluster-network-operator/pull/1728)
* Cno 4.13 kubernetes 1.26 [#1708](https://github.com/openshift/cluster-network-operator/pull/1708)
* use annotation on the daemonset to update hybrid overlay [#1709](https://github.com/openshift/cluster-network-operator/pull/1709)
* Remove the ovn-kind-cno.sh script [#1710](https://github.com/openshift/cluster-network-operator/pull/1710)
* [SDN-3597](https://issues.redhat.com/browse/SDN-3597): OVN-K alerts: add OVS overflow alerts [#1630](https://github.com/openshift/cluster-network-operator/pull/1630)
* [SDN-3730](https://issues.redhat.com/browse/SDN-3730): OVN IC: migrate master alerts to cluster manager [#1716](https://github.com/openshift/cluster-network-operator/pull/1716)
* Allow cidr expansion [#1707](https://github.com/openshift/cluster-network-operator/pull/1707)
* Enables nodeSelector to be used in egress firewall rule [#1720](https://github.com/openshift/cluster-network-operator/pull/1720)
* Add ovnk alert for resource retry failure [#1674](https://github.com/openshift/cluster-network-operator/pull/1674)
* [OCPBUGS-6730](https://issues.redhat.com/browse/OCPBUGS-6730), [SDN-3221](https://issues.redhat.com/browse/SDN-3221): ovn-kubernetes: use RHEL9-based images [#1712](https://github.com/openshift/cluster-network-operator/pull/1712)
* [OCPBUGS-4343](https://issues.redhat.com/browse/OCPBUGS-4343): update apf configuration to use v1beta3 [#1633](https://github.com/openshift/cluster-network-operator/pull/1633)
* Jira OCPBUGS-7774: Print RawCNIConfig in its string representation [#1718](https://github.com/openshift/cluster-network-operator/pull/1718)
* [OCPBUGS-6235](https://issues.redhat.com/browse/OCPBUGS-6235): Updating cluster-network-operator images to be consistent with ART [#1656](https://github.com/openshift/cluster-network-operator/pull/1656)
* Allow updates to pods [#1717](https://github.com/openshift/cluster-network-operator/pull/1717)
* [OCPBUGS-5559](https://issues.redhat.com/browse/OCPBUGS-5559): add default noProxy config for Azure [#1672](https://github.com/openshift/cluster-network-operator/pull/1672)
* always create env.sh when run_vs_existing_cluster [#1711](https://github.com/openshift/cluster-network-operator/pull/1711)
* [OCPBUGS-7354](https://issues.redhat.com/browse/OCPBUGS-7354): Revert "Revert "OCPBUGS-5842: Use pods oc vs host"" [#1714](https://github.com/openshift/cluster-network-operator/pull/1714)
* ovn-k, multi-homing: enable the feature [#1699](https://github.com/openshift/cluster-network-operator/pull/1699)
* Revert "OCPBUGS-5842: Use pods oc vs host" [#1713](https://github.com/openshift/cluster-network-operator/pull/1713)
* [OCPBUGS-5842](https://issues.redhat.com/browse/OCPBUGS-5842): Use pods oc vs host [#1681](https://github.com/openshift/cluster-network-operator/pull/1681)
* [OCPBUGS-4417](https://issues.redhat.com/browse/OCPBUGS-4417): Added missing API field podref to OverlappingRangeIPReservation CRD [#1677](https://github.com/openshift/cluster-network-operator/pull/1677)
* [OCPBUGS-6651](https://issues.redhat.com/browse/OCPBUGS-6651): HyperShift: Add .hypershift.local to no proxy list [#1692](https://github.com/openshift/cluster-network-operator/pull/1692)
* [OCPBUGS-6651](https://issues.redhat.com/browse/OCPBUGS-6651): HyperShift: Do not use proxy for internal routes [#1694](https://github.com/openshift/cluster-network-operator/pull/1694)
* remove TLS_RSA_WITH_AES_128_CBC_SHA256 cipher [#1680](https://github.com/openshift/cluster-network-operator/pull/1680)
* ovn-kubernetes: Allow node_mgmt_port_netdev_flags for non-DPU modes [#1676](https://github.com/openshift/cluster-network-operator/pull/1676)
* [OCPBUGS-3272](https://issues.redhat.com/browse/OCPBUGS-3272): Unhealthy Readiness Probe failing ci [#1665](https://github.com/openshift/cluster-network-operator/pull/1665)
* [OCPBUGS-5306](https://issues.redhat.com/browse/OCPBUGS-5306): ovn-kubernetes: ignore NB/SB readiness checks and dbchecker when not RAFT member [#1673](https://github.com/openshift/cluster-network-operator/pull/1673)
* [OCPBUGS-5802](https://issues.redhat.com/browse/OCPBUGS-5802): Update github.com/Masterminds/sprig to v3 [#1679](https://github.com/openshift/cluster-network-operator/pull/1679)
* [OCPBUGS-5306](https://issues.redhat.com/browse/OCPBUGS-5306): OVN-Kubernetes: Stop sorting master node addresses [#1675](https://github.com/openshift/cluster-network-operator/pull/1675)
* Allow SDN migration from Kuryr to OVNKubernetes [#1639](https://github.com/openshift/cluster-network-operator/pull/1639)
* update 'make install.tools' for golangci-lint [#1670](https://github.com/openshift/cluster-network-operator/pull/1670)
* Fix CNO crashing when Kuryr without MTU is set [#1669](https://github.com/openshift/cluster-network-operator/pull/1669)
* [OCPBUGS-2947](https://issues.redhat.com/browse/OCPBUGS-2947): Disable the drop-icmp container 'oc' pprof webserver on Azure [#1607](https://github.com/openshift/cluster-network-operator/pull/1607)
* [OCPBUGS-4350](https://issues.redhat.com/browse/OCPBUGS-4350): Fix handling of deployment and statefulset updates [#1648](https://github.com/openshift/cluster-network-operator/pull/1648)
* [OCPBUGS-2532](https://issues.redhat.com/browse/OCPBUGS-2532): Fix default disable-udp-aggregation value on s390x [#1655](https://github.com/openshift/cluster-network-operator/pull/1655)
* Fix info log formatting [#1650](https://github.com/openshift/cluster-network-operator/pull/1650)
* Support RHOBS monitoring for HyperShift [#1644](https://github.com/openshift/cluster-network-operator/pull/1644)
* [OCPBUGS-3916](https://issues.redhat.com/browse/OCPBUGS-3916): SDN alerts: Add `$labels.node` to `SDNPodNotRady` metric [#1637](https://github.com/openshift/cluster-network-operator/pull/1637)
* The allowlist daemonset should set a priority class. [#1647](https://github.com/openshift/cluster-network-operator/pull/1647)
* Bug OCPBUGS-736: Kuryr: If set use MTU from Config for svc net [#1586](https://github.com/openshift/cluster-network-operator/pull/1586)
* [OCPBUGS-3883](https://issues.redhat.com/browse/OCPBUGS-3883): HyperShift: Co-locate OVN-Kubernetes master with other hcp pods [#1627](https://github.com/openshift/cluster-network-operator/pull/1627)
* [OCPBUGS-2532](https://issues.redhat.com/browse/OCPBUGS-2532): Disable UDP aggregation on s390x [#1629](https://github.com/openshift/cluster-network-operator/pull/1629)
* Jira OCPBUGS-3777: IPsec: Fix broken counter++ expression [#1623](https://github.com/openshift/cluster-network-operator/pull/1623)
* [OCPBUGS-3114](https://issues.redhat.com/browse/OCPBUGS-3114): HyperShift: Do not accept empty infrastructure name [#1611](https://github.com/openshift/cluster-network-operator/pull/1611)
* HyperShift: Fix typo in control-plane-component label value [#1626](https://github.com/openshift/cluster-network-operator/pull/1626)
* Remove references to the hosts kubeconfig [#1612](https://github.com/openshift/cluster-network-operator/pull/1612)
* [OCPBUGS-3744](https://issues.redhat.com/browse/OCPBUGS-3744): SDN: /var/run mount cleanup [#1625](https://github.com/openshift/cluster-network-operator/pull/1625)
* [OCPBUGS-3460](https://issues.redhat.com/browse/OCPBUGS-3460): CNI binary copy should account for the possibility of symlinks [#1614](https://github.com/openshift/cluster-network-operator/pull/1614)
* [OCPBUGS-2598](https://issues.redhat.com/browse/OCPBUGS-2598): ipsec: Run ovs-monitor-ipsec in the foreground and change probes [#1606](https://github.com/openshift/cluster-network-operator/pull/1606)
* [SDN-3508](https://issues.redhat.com/browse/SDN-3508): HyperShift: Render cncc with proxy settings of the management cluster [#1577](https://github.com/openshift/cluster-network-operator/pull/1577)
* [NP-607](https://issues.redhat.com/browse/NP-607): update microshift ovnk manifests [#1589](https://github.com/openshift/cluster-network-operator/pull/1589)
* [Bug 1896533](https://bugzilla.redhat.com/show_bug.cgi?id=1896533): moved SetDegraded call out of object loop to process all items first [#1600](https://github.com/openshift/cluster-network-operator/pull/1600)
* [OCPBUGS-2362](https://issues.redhat.com/browse/OCPBUGS-2362): Prefer oldest nodes, harden new alerts and revert setting new OVN-K alerts to info [#1579](https://github.com/openshift/cluster-network-operator/pull/1579)
* fixed typo in comment [#1597](https://github.com/openshift/cluster-network-operator/pull/1597)
* Jira OCPBUGS-1736: Always set PROXY variables for CNCC [#1576](https://github.com/openshift/cluster-network-operator/pull/1576)
* Remove the allow_ra sysctl for ipv4 from default systl whitelist [#1590](https://github.com/openshift/cluster-network-operator/pull/1590)
* [SDN-2591](https://issues.redhat.com/browse/SDN-2591): allow hybrid overlay to be enabled post install [#1584](https://github.com/openshift/cluster-network-operator/pull/1584)
* [SDN-3515](https://issues.redhat.com/browse/SDN-3515): HyperShift: multus admission controller: expose metrics over HTTPs [#1583](https://github.com/openshift/cluster-network-operator/pull/1583)
* rebase to k8s v1.25.0 [#1571](https://github.com/openshift/cluster-network-operator/pull/1571)
* Bug OCPBUGS-2328: Fix for index out of range error [#1588](https://github.com/openshift/cluster-network-operator/pull/1588)
* Add sysctl whitelist controller [#1573](https://github.com/openshift/cluster-network-operator/pull/1573)
* Kuryr: Add missing keystoneauth options [#1581](https://github.com/openshift/cluster-network-operator/pull/1581)
* [OCPBUGS-1341](https://issues.redhat.com/browse/OCPBUGS-1341): Set owner reference for pod network connectivity check [#1566](https://github.com/openshift/cluster-network-operator/pull/1566)
* ovn-k, managed: pass join-subnet to control-plane [#1582](https://github.com/openshift/cluster-network-operator/pull/1582)
* [OCPBUGS-1083](https://issues.redhat.com/browse/OCPBUGS-1083): Move OVNK alert level to info [#1564](https://github.com/openshift/cluster-network-operator/pull/1564)
* Pass enable-udp-aggregation=true to ovn-kubernetes [#1533](https://github.com/openshift/cluster-network-operator/pull/1533)
* [OCPBUGS-1038](https://issues.redhat.com/browse/OCPBUGS-1038): Multus IPAM detection should honor conflists [#1570](https://github.com/openshift/cluster-network-operator/pull/1570)
* egress_ip: remove redundant config [#1568](https://github.com/openshift/cluster-network-operator/pull/1568)
* [OCPBUGS-1515](https://issues.redhat.com/browse/OCPBUGS-1515): Use custom uint128 type when validating v6InternalSubnet [#1561](https://github.com/openshift/cluster-network-operator/pull/1561)
* [SDN-3283](https://issues.redhat.com/browse/SDN-3283): HyperShift: Use a socks-proxy in ovnkube-master to allow for node heath checks [#1539](https://github.com/openshift/cluster-network-operator/pull/1539)
* Bug: OCPBUGS-736: Kuryr: Use machine net MTU to create service net [#1545](https://github.com/openshift/cluster-network-operator/pull/1545)
* Migrate Egress IP configuration during SDN migration and rollback [#1536](https://github.com/openshift/cluster-network-operator/pull/1536)
* Allow empty vSphere status field in VIP sync [#1558](https://github.com/openshift/cluster-network-operator/pull/1558)
* microshift: update ovnk manifests [#1552](https://github.com/openshift/cluster-network-operator/pull/1552)
* Add ovn-kubernetes-microshift to image-stream [#1556](https://github.com/openshift/cluster-network-operator/pull/1556)
* Migrate Multicast configuration during SDN migration and rollback [#1543](https://github.com/openshift/cluster-network-operator/pull/1543)
* OVN-K: add patch/update service permissions to controller [#1554](https://github.com/openshift/cluster-network-operator/pull/1554)
* Add controller to synchronize the API and Ingress VIP fields [#1519](https://github.com/openshift/cluster-network-operator/pull/1519)
* Bug SDN-3458: HyperShift: Differentiate resources deployed by different CNO instances in status manager [#1541](https://github.com/openshift/cluster-network-operator/pull/1541)
* OVN-K alerts: first tranche [#1526](https://github.com/openshift/cluster-network-operator/pull/1526)
* [SDN-3432](https://issues.redhat.com/browse/SDN-3432): Add alert for OVNKubernetesControllerDisconnectedSouthboundDatabase [#1548](https://github.com/openshift/cluster-network-operator/pull/1548)
* Add vSphere platform to allow dual-stack cluster [#1518](https://github.com/openshift/cluster-network-operator/pull/1518)
* [OKD-49](https://issues.redhat.com/browse/OKD-49): Adds support for scos to multus [#1544](https://github.com/openshift/cluster-network-operator/pull/1544)
* [Bug 1894268](https://bugzilla.redhat.com/show_bug.cgi?id=1894268): Allow users to specify ovnkube join subnet [#1508](https://github.com/openshift/cluster-network-operator/pull/1508)
* Bug OCPBUGS-917: Add EgressQoS DstCIDR format validation [#1492](https://github.com/openshift/cluster-network-operator/pull/1492)
* Multus admission controller: Wait for token in Hypershift [#1546](https://github.com/openshift/cluster-network-operator/pull/1546)
* Use fixed name for creating EgressFirewall CRs [#1540](https://github.com/openshift/cluster-network-operator/pull/1540)
* Migrate Egress Firewall Configuration during SDN migration and Rollback [#1534](https://github.com/openshift/cluster-network-operator/pull/1534)
* hypershift: set multus controller priority appropriate for hosted clusters [#1538](https://github.com/openshift/cluster-network-operator/pull/1538)
* [Bug 2094068](https://bugzilla.redhat.com/show_bug.cgi?id=2094068): Add northboundstale alert runbook [#1482](https://github.com/openshift/cluster-network-operator/pull/1482)
* microshift: compact ovn databases periodically [#1537](https://github.com/openshift/cluster-network-operator/pull/1537)
* Hypershift: Allow configuring hostname and labels on the route [#1531](https://github.com/openshift/cluster-network-operator/pull/1531)
* Multus admission controller changes for hypershift [#1516](https://github.com/openshift/cluster-network-operator/pull/1516)
* HyperShift: Move CNCC to the controll-plane namespace [#1525](https://github.com/openshift/cluster-network-operator/pull/1525)
* Bug OCPBUGS-216: Kuryr: Bump timeoutSeconds for livenessProbe [#1528](https://github.com/openshift/cluster-network-operator/pull/1528)
* Add missing runbook links for OVN-kubernetes alerts [#1523](https://github.com/openshift/cluster-network-operator/pull/1523)
* [Bug 2103680](https://bugzilla.redhat.com/show_bug.cgi?id=2103680): avoid overrriding disableNetworkDiagnostics on reconciliation [#1527](https://github.com/openshift/cluster-network-operator/pull/1527)
* Render CRDs for both OSDN and OVNK during migration [#1521](https://github.com/openshift/cluster-network-operator/pull/1521)
* Configure ignored namespaces into multus-admission-controller [#1515](https://github.com/openshift/cluster-network-operator/pull/1515)
* Add microshift ovnk manifests [#1517](https://github.com/openshift/cluster-network-operator/pull/1517)
* [Bug 2116982](https://bugzilla.redhat.com/show_bug.cgi?id=2116982): multus-admission-controller SNO number of replicas [#1524](https://github.com/openshift/cluster-network-operator/pull/1524)
* Enable the cloud-network-config-controller for OpenStack [#1505](https://github.com/openshift/cluster-network-operator/pull/1505)
* multi-networkpolicy: Enable on SR-IOV networks [#1443](https://github.com/openshift/cluster-network-operator/pull/1443)
* Updating cluster-network-operator images to be consistent with ART [#1507](https://github.com/openshift/cluster-network-operator/pull/1507)
* Add configmap list/watch rights to cloud-network-config-controller [#1511](https://github.com/openshift/cluster-network-operator/pull/1511)
* The Multus admission controller should run as a deployment [#1514](https://github.com/openshift/cluster-network-operator/pull/1514)
* [Bug 2108232](https://bugzilla.redhat.com/show_bug.cgi?id=2108232): Revert "Bug 2085089: Pass enable-udp-aggregation=true to ovn-kubernetes" [#1510](https://github.com/openshift/cluster-network-operator/pull/1510)
* [Bug 2100601](https://bugzilla.redhat.com/show_bug.cgi?id=2100601): Update CNO to config EgressIP timeout for ovnk [#1498](https://github.com/openshift/cluster-network-operator/pull/1498)
* [Bug 2060079](https://bugzilla.redhat.com/show_bug.cgi?id=2060079): Enhance sensitivity of SDN alert NodeProxyApplySlow [#1491](https://github.com/openshift/cluster-network-operator/pull/1491)
* [Bug 2103590](https://bugzilla.redhat.com/show_bug.cgi?id=2103590): Add init container to ensure that Status.podIP is set before postStart hooks run [#1503](https://github.com/openshift/cluster-network-operator/pull/1503)
* remove @squeed from owners [#1497](https://github.com/openshift/cluster-network-operator/pull/1497)
* [Bug 2085089](https://bugzilla.redhat.com/show_bug.cgi?id=2085089): Pass enable-udp-aggregation=true to ovn-kubernetes [#1489](https://github.com/openshift/cluster-network-operator/pull/1489)
* [Bug 2089681](https://bugzilla.redhat.com/show_bug.cgi?id=2089681): Disable EgressIP reachability check in hypershift deployments [#1485](https://github.com/openshift/cluster-network-operator/pull/1485)
* [Bug 2084062](https://bugzilla.redhat.com/show_bug.cgi?id=2084062): Make northd probe interval default to 10 seconds [#1494](https://github.com/openshift/cluster-network-operator/pull/1494)
* [Bug 2100079](https://bugzilla.redhat.com/show_bug.cgi?id=2100079): Update sdn-controller perms for "configmapsleases" leaderelection [#1496](https://github.com/openshift/cluster-network-operator/pull/1496)
* [Bug 2099357](https://bugzilla.redhat.com/show_bug.cgi?id=2099357): k8s 1.24 bump: add RBAC coordination leases for ovn-k master [#1490](https://github.com/openshift/cluster-network-operator/pull/1490)
* [Bug 2094071](https://bugzilla.redhat.com/show_bug.cgi?id=2094071): Add southboundStale alert runbook [#1481](https://github.com/openshift/cluster-network-operator/pull/1481)
* [Bug 2095772](https://bugzilla.redhat.com/show_bug.cgi?id=2095772): bindata: managed: reduce memory requests to align with observed usage [#1479](https://github.com/openshift/cluster-network-operator/pull/1479)
* [Bug 2095756](https://bugzilla.redhat.com/show_bug.cgi?id=2095756): client: register types during init, not later [#1483](https://github.com/openshift/cluster-network-operator/pull/1483)
* [Bug 2090336](https://bugzilla.redhat.com/show_bug.cgi?id=2090336): Multus should log at a verbose log level (without a logfile) [#1474](https://github.com/openshift/cluster-network-operator/pull/1474)
* [Bug 2092047](https://bugzilla.redhat.com/show_bug.cgi?id=2092047): cncc: add RBAC coordination.k8s.io leases [#1461](https://github.com/openshift/cluster-network-operator/pull/1461)
* [Bug 2089805](https://bugzilla.redhat.com/show_bug.cgi?id=2089805): Enable config duration for OVN-Kubernetes [#1455](https://github.com/openshift/cluster-network-operator/pull/1455)
* [Bug 2090437](https://bugzilla.redhat.com/show_bug.cgi?id=2090437): Bump CNO to k8s 1.24 [#1459](https://github.com/openshift/cluster-network-operator/pull/1459)
* [Bug 2073452](https://bugzilla.redhat.com/show_bug.cgi?id=2073452): Copying CNI binaries should be an atomic operation. [#1472](https://github.com/openshift/cluster-network-operator/pull/1472)
* [Bug 2092495](https://bugzilla.redhat.com/show_bug.cgi?id=2092495): ovn: use up to 4 northd threads in non-SNO clusters [#1471](https://github.com/openshift/cluster-network-operator/pull/1471)
* [Bug 2091167](https://bugzilla.redhat.com/show_bug.cgi?id=2091167): incorrectly setting rbac role for certificatesigningrequests [#1463](https://github.com/openshift/cluster-network-operator/pull/1463)
* Revert "Copying CNI binaries should be an atomic operation." [#1466](https://github.com/openshift/cluster-network-operator/pull/1466)
* [Bug 2073452](https://bugzilla.redhat.com/show_bug.cgi?id=2073452): Copying CNI binaries should be an atomic operation. [#1462](https://github.com/openshift/cluster-network-operator/pull/1462)
* [Bug 2076776](https://bugzilla.redhat.com/show_bug.cgi?id=2076776): remove patch permissions from ovnkube-node service account [#1450](https://github.com/openshift/cluster-network-operator/pull/1450)
* [Bug 2089968](https://bugzilla.redhat.com/show_bug.cgi?id=2089968): ensures type: Directory for multus host paths [#1453](https://github.com/openshift/cluster-network-operator/pull/1453)
* [Bug 2090343](https://bugzilla.redhat.com/show_bug.cgi?id=2090343): [temporary] Adds multus debug logging [#1456](https://github.com/openshift/cluster-network-operator/pull/1456)
* [Bug 2087942](https://bugzilla.redhat.com/show_bug.cgi?id=2087942): bump to go 1.18, lint improvements [#1451](https://github.com/openshift/cluster-network-operator/pull/1451)
* [Bug 2086461](https://bugzilla.redhat.com/show_bug.cgi?id=2086461): Hypershift: Also add default for Azure mtu [#1454](https://github.com/openshift/cluster-network-operator/pull/1454)
* [Bug 2086461](https://bugzilla.redhat.com/show_bug.cgi?id=2086461): AWS: Use hardcoded MTU to speed up cluster creation [#1441](https://github.com/openshift/cluster-network-operator/pull/1441)
* [Bug 2087556](https://bugzilla.redhat.com/show_bug.cgi?id=2087556): Fix rendering DPU manifests [#1448](https://github.com/openshift/cluster-network-operator/pull/1448)
* [Bug 2086506](https://bugzilla.redhat.com/show_bug.cgi?id=2086506): hypershift: respect statefulset when upgrading ovnk [#1447](https://github.com/openshift/cluster-network-operator/pull/1447)
* [Bug 2087135](https://bugzilla.redhat.com/show_bug.cgi?id=2087135): Fixing Hypershift nodeport flow [#1440](https://github.com/openshift/cluster-network-operator/pull/1440)
* [Bug 2086544](https://bugzilla.redhat.com/show_bug.cgi?id=2086544): Stop passing hosted cluster token as a parameter to ovnkube-master [#1446](https://github.com/openshift/cluster-network-operator/pull/1446)
* [Bug 2086437](https://bugzilla.redhat.com/show_bug.cgi?id=2086437): Enable EgressQoS controller [#1430](https://github.com/openshift/cluster-network-operator/pull/1430)
* [Bug 2086143](https://bugzilla.redhat.com/show_bug.cgi?id=2086143): Status controller: use a label, rather than watching all objects [#1431](https://github.com/openshift/cluster-network-operator/pull/1431)
* [Bug 2082235](https://bugzilla.redhat.com/show_bug.cgi?id=2082235): manifests: Add in service, service-cert, and ServiceMonitor [#1433](https://github.com/openshift/cluster-network-operator/pull/1433)
* [Bug 2023295](https://bugzilla.redhat.com/show_bug.cgi?id=2023295): Cleanup CNO relatedObjects [#1432](https://github.com/openshift/cluster-network-operator/pull/1432)
* [Bug 2079422](https://bugzilla.redhat.com/show_bug.cgi?id=2079422): Bump PodDisruptionBudget to v1 [#1427](https://github.com/openshift/cluster-network-operator/pull/1427)
* Re-reconcile network on configmap, stop watching all configmaps in proxy controllers [#1416](https://github.com/openshift/cluster-network-operator/pull/1416)
* hypershift: add ovnkube-node-proxy container in ovnkube-node ds [#1408](https://github.com/openshift/cluster-network-operator/pull/1408)
* Hypershift: enable TLS for ovnkube-master metrics [#1423](https://github.com/openshift/cluster-network-operator/pull/1423)
* Add gm metric record to use for telemetry exposure [#1425](https://github.com/openshift/cluster-network-operator/pull/1425)
* Revert "ovn: reduce SB<->ovn-controller inactivity probe to 30 seconds" [#1428](https://github.com/openshift/cluster-network-operator/pull/1428)
* [Bug 2082611](https://bugzilla.redhat.com/show_bug.cgi?id=2082611): Limit Kuryr pods permissions [#1367](https://github.com/openshift/cluster-network-operator/pull/1367)
* [Bug 2076877](https://bugzilla.redhat.com/show_bug.cgi?id=2076877): Bump FlowScema apiVersion to v1beta2 [#1419](https://github.com/openshift/cluster-network-operator/pull/1419)
* bindata/network-diagnostics, cloud-network-config-controller: comply to restricted pod security level [#1406](https://github.com/openshift/cluster-network-operator/pull/1406)
* Remove ObjectMeta.ClusterName usage [#1421](https://github.com/openshift/cluster-network-operator/pull/1421)
* Hypershift: Fix ovnkube-master priority class and set resource requests on token-minter [#1420](https://github.com/openshift/cluster-network-operator/pull/1420)
* add more sysctls to the multus allowlist [#1411](https://github.com/openshift/cluster-network-operator/pull/1411)
* ovn: fix northd preStop command handling [#1414](https://github.com/openshift/cluster-network-operator/pull/1414)
* Add control-plane-component label to ovnkube-master for hypershift [#1422](https://github.com/openshift/cluster-network-operator/pull/1422)
* Add link to runbook urls [#1417](https://github.com/openshift/cluster-network-operator/pull/1417)
* Hypershift: Copy all CNO conditions to HostedControlPlane status [#1415](https://github.com/openshift/cluster-network-operator/pull/1415)
* ovn: reduce SB<->ovn-controller inactivity probe to 30 seconds [#1412](https://github.com/openshift/cluster-network-operator/pull/1412)
* [Bug 2075475](https://bugzilla.redhat.com/show_bug.cgi?id=2075475): Add default-route field to egress-router k8s.v1.cni.cncf.io/networks [#1390](https://github.com/openshift/cluster-network-operator/pull/1390)
* OCPVE-106 Customize rollout strategy to fix SNO upgrade [#1392](https://github.com/openshift/cluster-network-operator/pull/1392)
* [Bug 2080255](https://bugzilla.redhat.com/show_bug.cgi?id=2080255): SDN: Re-add list/watch/get permissions for nodes needed for EgressIP [#1409](https://github.com/openshift/cluster-network-operator/pull/1409)
* [Bug 2071859](https://bugzilla.redhat.com/show_bug.cgi?id=2071859): Switch dnsPolicy to Default for OVN hostNetwork pods [#1395](https://github.com/openshift/cluster-network-operator/pull/1395)
* Revert "Revert ipsec: Allow enablement/disablement at runtime" [#1384](https://github.com/openshift/cluster-network-operator/pull/1384)
* ovnkube: export OVS metrics along with OVN metrics [#1393](https://github.com/openshift/cluster-network-operator/pull/1393)
* [Bug 2078910](https://bugzilla.redhat.com/show_bug.cgi?id=2078910): Correct runbook_url field location within schema [#1396](https://github.com/openshift/cluster-network-operator/pull/1396)
* Adds dougbtv to owners as approver and reviewer [#1397](https://github.com/openshift/cluster-network-operator/pull/1397)
* [Bug 2072215](https://bugzilla.redhat.com/show_bug.cgi?id=2072215): Make the use of the ip-reconciler cronjob opt-in by detecting IPAM type usage [#1369](https://github.com/openshift/cluster-network-operator/pull/1369)
* ovn-kube hypershift: fix pipefailure that prevents HA startup [#1394](https://github.com/openshift/cluster-network-operator/pull/1394)
* [Bug 2063123](https://bugzilla.redhat.com/show_bug.cgi?id=2063123): Drop Node update permission for sdn-node [#1350](https://github.com/openshift/cluster-network-operator/pull/1350)
* OVN-K alert: Increase severity and add runbook_url for NoRunningOvnMa… [#1327](https://github.com/openshift/cluster-network-operator/pull/1327)
* Remove Kuryr mutating DNS webhook [#1363](https://github.com/openshift/cluster-network-operator/pull/1363)
* raise the alert NoOvnMasterLeader to critical and add the runbook url [#1328](https://github.com/openshift/cluster-network-operator/pull/1328)
* [Bug 2072710](https://bugzilla.redhat.com/show_bug.cgi?id=2072710): Make northd probe interval default to 10 seconds [#1386](https://github.com/openshift/cluster-network-operator/pull/1386)
* hypershift: get control plane replicas from hcp [#1385](https://github.com/openshift/cluster-network-operator/pull/1385)
* [Bug 2072766](https://bugzilla.redhat.com/show_bug.cgi?id=2072766): Reserve port TCP/9104 for cluster-network-operator [#1378](https://github.com/openshift/cluster-network-operator/pull/1378)
* Multus: split pod/status rbac [#1340](https://github.com/openshift/cluster-network-operator/pull/1340)
* add runbook link for NodeWithoutOVNKubeNodePodRunning and V4SubnetAll… [#1366](https://github.com/openshift/cluster-network-operator/pull/1366)
* OVN: remove detecing db_ip via kapi [#1368](https://github.com/openshift/cluster-network-operator/pull/1368)
* Hypershift: Respect publishing strategy of OVN southbound database service [#1349](https://github.com/openshift/cluster-network-operator/pull/1349)
* Proxyconfig: Add a knob for Hypershift to enable proxying internal apiserver address [#1381](https://github.com/openshift/cluster-network-operator/pull/1381)
* [Bug 1983056](https://bugzilla.redhat.com/show_bug.cgi?id=1983056): Kuryr: Update CRD from upstream [#1360](https://github.com/openshift/cluster-network-operator/pull/1360)
* hypershift: disable TLS for ovnk master metrics [#1382](https://github.com/openshift/cluster-network-operator/pull/1382)
* hypershift: enable publishNotReadyAddress explicitly for ovnk-master service [#1372](https://github.com/openshift/cluster-network-operator/pull/1372)
* [Bug 2070047](https://bugzilla.redhat.com/show_bug.cgi?id=2070047): Bump max value of hist quantile for kuryr_cni_request_duration [#1359](https://github.com/openshift/cluster-network-operator/pull/1359)
* Don't return err with empty relatedClusterObject annotation [#1379](https://github.com/openshift/cluster-network-operator/pull/1379)
* hypershift: enable ovnk-master metrics in management cluster [#1374](https://github.com/openshift/cluster-network-operator/pull/1374)
* Use (un)setProgressing for pod status update [#1376](https://github.com/openshift/cluster-network-operator/pull/1376)
* Use the hosted cluster token explicitly [#1370](https://github.com/openshift/cluster-network-operator/pull/1370)
* HyperShift: Watch StatefulSets in the management cluster [#1364](https://github.com/openshift/cluster-network-operator/pull/1364)
* Exclude openshift-kube-apiserver and openshift-apiserver service/endpoints from connectivity checks in hypershift [#1375](https://github.com/openshift/cluster-network-operator/pull/1375)
* Run ovnkube-master statefulset pods in parallel [#1361](https://github.com/openshift/cluster-network-operator/pull/1361)
* Add ibm-cloud-managed annotations to 02-cncc-credentials.yaml, this is required in HyperShift [#1358](https://github.com/openshift/cluster-network-operator/pull/1358)
* Add ipsec daemonset for hypershift managed cluster [#1356](https://github.com/openshift/cluster-network-operator/pull/1356)
* Add statefulset in status manager [#1345](https://github.com/openshift/cluster-network-operator/pull/1345)
* hypershift ovnk route status [#1341](https://github.com/openshift/cluster-network-operator/pull/1341)
* Add tuning cni sysctl allowlist to nodes [#1347](https://github.com/openshift/cluster-network-operator/pull/1347)
* [Bug 2058368](https://bugzilla.redhat.com/show_bug.cgi?id=2058368): move enable memory trimming to readiness prob [#1365](https://github.com/openshift/cluster-network-operator/pull/1365)
* Add ovnkube-node initContainer to make sure sbdb is up before running other containers [#1354](https://github.com/openshift/cluster-network-operator/pull/1354)
* Vendor: pull in hypershift [#1346](https://github.com/openshift/cluster-network-operator/pull/1346)
* Hypershift: Use token minter instead of a kubeconfig in ovn-kubernetes master [#1344](https://github.com/openshift/cluster-network-operator/pull/1344)
* Add an option to define the client name for in-cluster config [#1342](https://github.com/openshift/cluster-network-operator/pull/1342)
* Add ovnkube manifests for hypershift [#1329](https://github.com/openshift/cluster-network-operator/pull/1329)
* network, bootstrap: don't get apiserver from the environment [#1339](https://github.com/openshift/cluster-network-operator/pull/1339)
* Fix MTU detection for multi path default routes [#1338](https://github.com/openshift/cluster-network-operator/pull/1338)
* Multi cluster support in CNO [#1319](https://github.com/openshift/cluster-network-operator/pull/1319)
* Fix golang image version in Dockerfile [#1330](https://github.com/openshift/cluster-network-operator/pull/1330)
* Remove empty selector from the mtu prober job. [#1331](https://github.com/openshift/cluster-network-operator/pull/1331)
* Switch to server-side apply [#1304](https://github.com/openshift/cluster-network-operator/pull/1304)
* Probe MTU from a Job, rather than directly in the CNO [#1313](https://github.com/openshift/cluster-network-operator/pull/1313)
* [Bug 2058368](https://bugzilla.redhat.com/show_bug.cgi?id=2058368): Move memory-trimming-on-compaction out of dbchecker to nbdb/sbdb [#1320](https://github.com/openshift/cluster-network-operator/pull/1320)
* Fix group for CVO override used for running CNO locally [#1314](https://github.com/openshift/cluster-network-operator/pull/1314)
* [Bug 2058671](https://bugzilla.redhat.com/show_bug.cgi?id=2058671): ip reconciler: auto clean failed jobs [#1318](https://github.com/openshift/cluster-network-operator/pull/1318)
* [Bug 2037721](https://bugzilla.redhat.com/show_bug.cgi?id=2037721): Do not apply OVN-Kubernetes `PodDisruptionBudget` on single-node clusters [#1307](https://github.com/openshift/cluster-network-operator/pull/1307)
* ovn: stop spawning the ovn-nbctl daemon [#1315](https://github.com/openshift/cluster-network-operator/pull/1315)
* [Bug 1944264](https://bugzilla.redhat.com/show_bug.cgi?id=1944264): ovnkube: gracefully terminate databases from preStop [#1312](https://github.com/openshift/cluster-network-operator/pull/1312)
* [Bug 2044227](https://bugzilla.redhat.com/show_bug.cgi?id=2044227): Add rolling update strategy for Kuryr-CNI. [#1311](https://github.com/openshift/cluster-network-operator/pull/1311)
* [Bug 2032559](https://bugzilla.redhat.com/show_bug.cgi?id=2032559): Block DualStack migration for unsupported cluster types [#1257](https://github.com/openshift/cluster-network-operator/pull/1257)
* [Bug 2010361](https://bugzilla.redhat.com/show_bug.cgi?id=2010361): SDN alerts: conform to monitoring team style guide [#1248](https://github.com/openshift/cluster-network-operator/pull/1248)
* Update project owners [#1309](https://github.com/openshift/cluster-network-operator/pull/1309)
* [Bug 2048575](https://bugzilla.redhat.com/show_bug.cgi?id=2048575): The Whereabouts ip-reconciler should use api-int load balancer [#1302](https://github.com/openshift/cluster-network-operator/pull/1302)
* [Bug 2048793](https://bugzilla.redhat.com/show_bug.cgi?id=2048793): Kuryr: Decrease vif_annotation_timeout [#1293](https://github.com/openshift/cluster-network-operator/pull/1293)
* [Bug 2049613](https://bugzilla.redhat.com/show_bug.cgi?id=2049613): Use a separate configmap for mtu migration config to avoid pod restart [#1299](https://github.com/openshift/cluster-network-operator/pull/1299)
* Fix bond cni source directory path [#1295](https://github.com/openshift/cluster-network-operator/pull/1295)
* Updating cluster-network-operator images to be consistent with ART [#1294](https://github.com/openshift/cluster-network-operator/pull/1294)
* [Bug 2041546](https://bugzilla.redhat.com/show_bug.cgi?id=2041546): ovn-kubernetes: set RAFT election timer at RAFT cluster creation time [#1282](https://github.com/openshift/cluster-network-operator/pull/1282)
* [Bug 2034484](https://bugzilla.redhat.com/show_bug.cgi?id=2034484): Upgrade library-go version [#1247](https://github.com/openshift/cluster-network-operator/pull/1247)
* [Bug 2042796](https://bugzilla.redhat.com/show_bug.cgi?id=2042796): whereabouts, reconciler: disable retries on failure [#1290](https://github.com/openshift/cluster-network-operator/pull/1290)
* [Bug 2039345](https://bugzilla.redhat.com/show_bug.cgi?id=2039345): Verify against mininimal IPv6 MTU value for clusters with IPv6 networks [#1276](https://github.com/openshift/cluster-network-operator/pull/1276)
* [Bug 2034155](https://bugzilla.redhat.com/show_bug.cgi?id=2034155): Adds back --disable-snat-multiple-gws [#1254](https://github.com/openshift/cluster-network-operator/pull/1254)
* [Bug 2039321](https://bugzilla.redhat.com/show_bug.cgi?id=2039321): SDN: Expose controller metrics for collection [#1250](https://github.com/openshift/cluster-network-operator/pull/1250)
* clean up OWNERS [#1287](https://github.com/openshift/cluster-network-operator/pull/1287)
* [Bug 2041989](https://bugzilla.redhat.com/show_bug.cgi?id=2041989): no CredentialsRequests in ibm-cloud-managed [#1280](https://github.com/openshift/cluster-network-operator/pull/1280)
* [Bug 2035459](https://bugzilla.redhat.com/show_bug.cgi?id=2035459): modify cluster-network-features for OpenshiftSDN [#1251](https://github.com/openshift/cluster-network-operator/pull/1251)
* [Bug 1896533](https://bugzilla.redhat.com/show_bug.cgi?id=1896533): Nonexistent Namespaces Degradation logging message [#1128](https://github.com/openshift/cluster-network-operator/pull/1128)
* [Bug 2038732](https://bugzilla.redhat.com/show_bug.cgi?id=2038732): Add egress* patch credentials for ovnkube-master [#1285](https://github.com/openshift/cluster-network-operator/pull/1285)
* [Bug 2041329](https://bugzilla.redhat.com/show_bug.cgi?id=2041329): cncc: add serviceAccountNames to CredentialsRequests [#1283](https://github.com/openshift/cluster-network-operator/pull/1283)
* [Bug 2010663](https://bugzilla.redhat.com/show_bug.cgi?id=2010663): OVN-K alerts: conform to monitoring team style guide [#1246](https://github.com/openshift/cluster-network-operator/pull/1246)
* [Bug 2021191](https://bugzilla.redhat.com/show_bug.cgi?id=2021191): Project admins should be able to list net-attach-defs in their namespaces [#1226](https://github.com/openshift/cluster-network-operator/pull/1226)
* BUG 2034413: cncc: create Cloud CredentialsRequest in /manifests [#1277](https://github.com/openshift/cluster-network-operator/pull/1277)
* [Bug 2034460](https://bugzilla.redhat.com/show_bug.cgi?id=2034460): cncc: handle advanced AWS and Azure configurations [#1275](https://github.com/openshift/cluster-network-operator/pull/1275)
* [Bug 2034153](https://bugzilla.redhat.com/show_bug.cgi?id=2034153): Fix MTU migration verification for OpenShiftSDN [#1259](https://github.com/openshift/cluster-network-operator/pull/1259)
* [Bug 1943363](https://bugzilla.redhat.com/show_bug.cgi?id=1943363): ovn: try to gracefully terminate ovn-northd [#1221](https://github.com/openshift/cluster-network-operator/pull/1221)
* [Bug 2018093](https://bugzilla.redhat.com/show_bug.cgi?id=2018093): Kuryr: Add resource requests for pods [#1269](https://github.com/openshift/cluster-network-operator/pull/1269)
* [Bug 2036861](https://bugzilla.redhat.com/show_bug.cgi?id=2036861): multitenant - Add openshift-kube-apiserver-operator to global namespaces [#1272](https://github.com/openshift/cluster-network-operator/pull/1272)
* [Bug 2035093](https://bugzilla.redhat.com/show_bug.cgi?id=2035093): Cloud network config controller: Fix for Hypershift [#1268](https://github.com/openshift/cluster-network-operator/pull/1268)
* [Bug 2034398](https://bugzilla.redhat.com/show_bug.cgi?id=2034398): Whereabouts CRD should include a "podref" field. [#1262](https://github.com/openshift/cluster-network-operator/pull/1262)
* [Bug 2034517](https://bugzilla.redhat.com/show_bug.cgi?id=2034517): watch and apply changes of the ovs-flows-config configmap [#1231](https://github.com/openshift/cluster-network-operator/pull/1231)
* [Bug 2034322](https://bugzilla.redhat.com/show_bug.cgi?id=2034322): Move infrastructure bootstrap to its own package [#1261](https://github.com/openshift/cluster-network-operator/pull/1261)
* [Bug 2033422](https://bugzilla.redhat.com/show_bug.cgi?id=2033422): bootstrapOVNGatewayConfig should only be called once [#1258](https://github.com/openshift/cluster-network-operator/pull/1258)
* Add MTU migration support for OVNKubernetes and OpenshiftSDN [#1241](https://github.com/openshift/cluster-network-operator/pull/1241)
* Cloud network config controller - CNO deployment [#1112](https://github.com/openshift/cluster-network-operator/pull/1112)
* [Bug 2022144](https://bugzilla.redhat.com/show_bug.cgi?id=2022144): sbdb and nbdb containers leave pid around if they restarted or crashed [#1256](https://github.com/openshift/cluster-network-operator/pull/1256)
* OVN-K alerts: Fix incorrect metric name reference [#1237](https://github.com/openshift/cluster-network-operator/pull/1237)
* Pod networking on DPU host in Infra and Tenant clusters [#1249](https://github.com/openshift/cluster-network-operator/pull/1249)
* OVN-K: Enable OVN metrics to be consumed by ServiceMonitor [#1236](https://github.com/openshift/cluster-network-operator/pull/1236)
* Bump openshift/build-machinery-go [#1253](https://github.com/openshift/cluster-network-operator/pull/1253)
* SDN 2316: Use GatewayConfig in OVN-K to set gateway modes [#1209](https://github.com/openshift/cluster-network-operator/pull/1209)
* Add CNI to DPU and enable Kube-Proxy on DPU [#1220](https://github.com/openshift/cluster-network-operator/pull/1220)
* [NETOBSERV-31](https://issues.redhat.com/browse/NETOBSERV-31): Expose CNI type features as a config-map [#1204](https://github.com/openshift/cluster-network-operator/pull/1204)
* Bump openshift/api module [#1242](https://github.com/openshift/cluster-network-operator/pull/1242)
* The ip-reconciler should not restart on failures. [#1238](https://github.com/openshift/cluster-network-operator/pull/1238)
* SDN: Do not tolerate a controller failure during upgrade [#1213](https://github.com/openshift/cluster-network-operator/pull/1213)
* Set upgrade strategy on kube-proxy [#1214](https://github.com/openshift/cluster-network-operator/pull/1214)
* openshift-sdn/daemonset: Mount /host/opt/cni/bin at /host-cni-bin [#1172](https://github.com/openshift/cluster-network-operator/pull/1172)
* Specific SDN controller alert [#1206](https://github.com/openshift/cluster-network-operator/pull/1206)
* update for ART [#1233](https://github.com/openshift/cluster-network-operator/pull/1233)
* bindata/network: specify pod-security levels via labels not annotations [#1224](https://github.com/openshift/cluster-network-operator/pull/1224)
* Add bond-cni [#1205](https://github.com/openshift/cluster-network-operator/pull/1205)
* [Bug 1961509](https://bugzilla.redhat.com/show_bug.cgi?id=1961509): DHCP Daemon should have memory and CPU limits set [#1218](https://github.com/openshift/cluster-network-operator/pull/1218)
* Add ip6tables NOTRACK rules for udp/6081 [#1222](https://github.com/openshift/cluster-network-operator/pull/1222)
* [Bug 1962206](https://bugzilla.redhat.com/show_bug.cgi?id=1962206): DHCP daemon should have maxunavailable for upgrade strategy [#1219](https://github.com/openshift/cluster-network-operator/pull/1219)
* [Bug 1976399](https://bugzilla.redhat.com/show_bug.cgi?id=1976399): Raft election timer: move the logic to ovndbchecker [#1161](https://github.com/openshift/cluster-network-operator/pull/1161)
* [Bug 2009078](https://bugzilla.redhat.com/show_bug.cgi?id=2009078): Remove NetworkPodsCrashLooping alert for ovn-kubernetes [#1212](https://github.com/openshift/cluster-network-operator/pull/1212)
* [Bug 1914053](https://bugzilla.redhat.com/show_bug.cgi?id=1914053): whereabouts: add ip-reconciler cronjob [#1207](https://github.com/openshift/cluster-network-operator/pull/1207)
* Add Kuryr to be able to create events objects. [#1210](https://github.com/openshift/cluster-network-operator/pull/1210)
* fix a typo in a field name [#1208](https://github.com/openshift/cluster-network-operator/pull/1208)
* podsecurity: enforce privileged for network namespaces [#1203](https://github.com/openshift/cluster-network-operator/pull/1203)
* [Bug 1988483](https://bugzilla.redhat.com/show_bug.cgi?id=1988483): OVN drop icmp frag from other nodes on Azure cluster [#1132](https://github.com/openshift/cluster-network-operator/pull/1132)
* [Bug 1985486](https://bugzilla.redhat.com/show_bug.cgi?id=1985486): Use proxy to connect to OSP cloud [#1173](https://github.com/openshift/cluster-network-operator/pull/1173)
* Updating cluster-network-operator images to be consistent with ART [#1198](https://github.com/openshift/cluster-network-operator/pull/1198)
* [Bug 2003676](https://bugzilla.redhat.com/show_bug.cgi?id=2003676): Restrict serving SDN metrics to loopback only [#1197](https://github.com/openshift/cluster-network-operator/pull/1197)
* [Bug 2002713](https://bugzilla.redhat.com/show_bug.cgi?id=2002713): Add millisecond resolution to OVN logs [#1196](https://github.com/openshift/cluster-network-operator/pull/1196)
* [Bug 1939435](https://bugzilla.redhat.com/show_bug.cgi?id=1939435): proxyconfig - accept IPv6 address literals for noProxy [#1191](https://github.com/openshift/cluster-network-operator/pull/1191)
* [Bug 1986061](https://bugzilla.redhat.com/show_bug.cgi?id=1986061): Monitor openshift-network-diagnostics namespace [#1190](https://github.com/openshift/cluster-network-operator/pull/1190)
* [Bug 1960101](https://bugzilla.redhat.com/show_bug.cgi?id=1960101): Fix update-codegen hack, pull in changes from openshift/api, bump k8.io deps to v0.22.1 [#1140](https://github.com/openshift/cluster-network-operator/pull/1140)
* [Bug 1997050](https://bugzilla.redhat.com/show_bug.cgi?id=1997050): Fix panic with unknown networks [#1188](https://github.com/openshift/cluster-network-operator/pull/1188)
* [Bug 1998508](https://bugzilla.redhat.com/show_bug.cgi?id=1998508): Fix the install-time "waiting for other operators" statuses [#1192](https://github.com/openshift/cluster-network-operator/pull/1192)
* [Bug 1990631](https://bugzilla.redhat.com/show_bug.cgi?id=1990631): ovnkube: use ovn-nbctl daemon monitor mode to restart and log issues [#1182](https://github.com/openshift/cluster-network-operator/pull/1182)
* [Bug 1914398](https://bugzilla.redhat.com/show_bug.cgi?id=1914398): Changed pod user to non-root [#1124](https://github.com/openshift/cluster-network-operator/pull/1124)
* [Bug 1991551](https://bugzilla.redhat.com/show_bug.cgi?id=1991551): allow sdn (and others) to use new events.k8s.io API [#1177](https://github.com/openshift/cluster-network-operator/pull/1177)
* [Bug 1989246](https://bugzilla.redhat.com/show_bug.cgi?id=1989246): use new default leader election values to handle apiserver rollout on SNO [#1175](https://github.com/openshift/cluster-network-operator/pull/1175)
* [Bug 1992507](https://bugzilla.redhat.com/show_bug.cgi?id=1992507): Use prometheus rule annotations comply with the OpenShift alerting guidelines [#1181](https://github.com/openshift/cluster-network-operator/pull/1181)
* [Bug 1989734](https://bugzilla.redhat.com/show_bug.cgi?id=1989734): Whereabouts should have RBAC for leases [#1174](https://github.com/openshift/cluster-network-operator/pull/1174)
* [Bug 1984049](https://bugzilla.redhat.com/show_bug.cgi?id=1984049): Slow OVN Recovery on SNO [#1159](https://github.com/openshift/cluster-network-operator/pull/1159)
* [Bug 1990725](https://bugzilla.redhat.com/show_bug.cgi?id=1990725): Add missing node name into KuryrSDNPodNotReady Alert [#1176](https://github.com/openshift/cluster-network-operator/pull/1176)
* [Bug 1987019](https://bugzilla.redhat.com/show_bug.cgi?id=1987019): Support external control plane topology [#1158](https://github.com/openshift/cluster-network-operator/pull/1158)
* Docs: add architecture overview, remove outdated HACKING guide. [#1078](https://github.com/openshift/cluster-network-operator/pull/1078)
* Remove valadas from owners [#1081](https://github.com/openshift/cluster-network-operator/pull/1081)
* [Bug 1989122](https://bugzilla.redhat.com/show_bug.cgi?id=1989122): let openshift-sdn use EndpointSliceProxying [#1166](https://github.com/openshift/cluster-network-operator/pull/1166)
* Updating cluster-network-operator images to be consistent with ART [#1136](https://github.com/openshift/cluster-network-operator/pull/1136)
* [Bug 1981055](https://bugzilla.redhat.com/show_bug.cgi?id=1981055): ovnkube-master handle 60 seconds downtime of API server gracefully in SNO [#1154](https://github.com/openshift/cluster-network-operator/pull/1154)
* [Bug 1985033](https://bugzilla.redhat.com/show_bug.cgi?id=1985033): Make inactivity_probe configurable [#1165](https://github.com/openshift/cluster-network-operator/pull/1165)
* [Bug 1984449](https://bugzilla.redhat.com/show_bug.cgi?id=1984449): Change to use mountPath: /host [#1160](https://github.com/openshift/cluster-network-operator/pull/1160)
* [Bug 1961757](https://bugzilla.redhat.com/show_bug.cgi?id=1961757): ovnkube: set ovn-controller lflow cache limit to 1GB [#1147](https://github.com/openshift/cluster-network-operator/pull/1147)
* Revert: Add env variable OVS_SYS_LOG_LEVEL for ovn nodes to setup ovs syslog level [#1163](https://github.com/openshift/cluster-network-operator/pull/1163)
* [Bug 1981975](https://bugzilla.redhat.com/show_bug.cgi?id=1981975): Update service network status to reflect dual stack entries [#1155](https://github.com/openshift/cluster-network-operator/pull/1155)
* [Bug 1970985](https://bugzilla.redhat.com/show_bug.cgi?id=1970985): SDN-1955: Add pre-puller ds to reduce upgrade downtime [#1141](https://github.com/openshift/cluster-network-operator/pull/1141)
* [Bug 1961811](https://bugzilla.redhat.com/show_bug.cgi?id=1961811): Add a newline between user CAs and system CAs [#1156](https://github.com/openshift/cluster-network-operator/pull/1156)
* OVNKube: check if br-ex1 is available and pass it as a parameter [#1152](https://github.com/openshift/cluster-network-operator/pull/1152)
* Make egress IP and ICNI mutually exclusive when bootstrapping OVN-kube [#1145](https://github.com/openshift/cluster-network-operator/pull/1145)
* [Bug 1970129](https://bugzilla.redhat.com/show_bug.cgi?id=1970129): Add env variable OVS_SYS_LOG_LEVEL for ovn nodes to setup ovs syslog level [#1142](https://github.com/openshift/cluster-network-operator/pull/1142)
* Add alerts for issues with load balancers/ports. [#1148](https://github.com/openshift/cluster-network-operator/pull/1148)
* Include alerts for critical lbs [#1146](https://github.com/openshift/cluster-network-operator/pull/1146)
* Removing old kuryr-kubernetes CRDs [#989](https://github.com/openshift/cluster-network-operator/pull/989)
* [Bug 1962951](https://bugzilla.redhat.com/show_bug.cgi?id=1962951): enable ovs column diffs feature [#1101](https://github.com/openshift/cluster-network-operator/pull/1101)
* [Bug 1975016](https://bugzilla.redhat.com/show_bug.cgi?id=1975016): Kuryr: Store OpenStack credentials in a secret [#1139](https://github.com/openshift/cluster-network-operator/pull/1139)
* Add JacobTanenbaum to list of approvers [#1099](https://github.com/openshift/cluster-network-operator/pull/1099)
* Updating .ci-operator.yaml `build_root_image` from openshift/release [#1130](https://github.com/openshift/cluster-network-operator/pull/1130)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/f9c68257eb8edf3855f7ec4e6f5ad11dff77d3b3...)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/)

* Revert PAO and later changes [#330](https://github.com/openshift/cluster-node-tuning-operator/pull/330)
* [Bug 2017427](https://bugzilla.redhat.com/show_bug.cgi?id=2017427): tuned: add timeout and restarts [#282](https://github.com/openshift/cluster-node-tuning-operator/pull/282)
* Makefile cleanup, replace yq with yaml-patch from openshift/build-machinery-go [#274](https://github.com/openshift/cluster-node-tuning-operator/pull/274)
* [Bug 2016988](https://bugzilla.redhat.com/show_bug.cgi?id=2016988): openshift profile: fix malformed patch [#283](https://github.com/openshift/cluster-node-tuning-operator/pull/283)
* [Bug 2013321](https://bugzilla.redhat.com/show_bug.cgi?id=2013321): TuneD: workaround for high CPU utilization of [scheduler] plug-in. [#278](https://github.com/openshift/cluster-node-tuning-operator/pull/278)
* RBAC: tighten the rules and remove unnecessary listers. [#276](https://github.com/openshift/cluster-node-tuning-operator/pull/276)
* podsecurity: enforce privileged for openshift-cluster-node-tuning-operator namespace [#275](https://github.com/openshift/cluster-node-tuning-operator/pull/275)
* Updating cluster-node-tuning-operator images to be consistent with ART [#273](https://github.com/openshift/cluster-node-tuning-operator/pull/273)
* [Bug 2004508](https://bugzilla.redhat.com/show_bug.cgi?id=2004508): TuneD: Revert the ConfigParser changes. [#271](https://github.com/openshift/cluster-node-tuning-operator/pull/271)
* Updating cluster-node-tuning-operator images to be consistent with ART [#270](https://github.com/openshift/cluster-node-tuning-operator/pull/270)
* OWNERS: updating based on team changes. [#269](https://github.com/openshift/cluster-node-tuning-operator/pull/269)
* e2e tests: s/plugin/plug-in/ and TuneD renaming [#253](https://github.com/openshift/cluster-node-tuning-operator/pull/253)
* [Bug 1998247](https://bugzilla.redhat.com/show_bug.cgi?id=1998247): Reload when deps of recommended profile change. [#267](https://github.com/openshift/cluster-node-tuning-operator/pull/267)
* [Bug 1997486](https://bugzilla.redhat.com/show_bug.cgi?id=1997486): Ship the latest TuneD and stalld. [#265](https://github.com/openshift/cluster-node-tuning-operator/pull/265)
* [Bug 1994891](https://bugzilla.redhat.com/show_bug.cgi?id=1994891): Fix e2e tests after the recent 1.22.0 bump [#264](https://github.com/openshift/cluster-node-tuning-operator/pull/264)
* [Bug 1992560](https://bugzilla.redhat.com/show_bug.cgi?id=1992560): monitoring: comply with OpenShift alerting guidelines [#263](https://github.com/openshift/cluster-node-tuning-operator/pull/263)
* [Bug 1994891](https://bugzilla.redhat.com/show_bug.cgi?id=1994891): Bump vendor dependencies to k8s 1.22.0 [#261](https://github.com/openshift/cluster-node-tuning-operator/pull/261)
* [Bug 1985739](https://bugzilla.redhat.com/show_bug.cgi?id=1985739): Move OpenShift profile to TuneD. [#258](https://github.com/openshift/cluster-node-tuning-operator/pull/258)
* [Bug 1986477](https://bugzilla.redhat.com/show_bug.cgi?id=1986477): Handle kube-apiserver disruption more gracefully. [#256](https://github.com/openshift/cluster-node-tuning-operator/pull/256)
* scheduler: new option cgroup_ps_blacklist [#250](https://github.com/openshift/cluster-node-tuning-operator/pull/250)
* Address a race in the stalld e2e test. [#249](https://github.com/openshift/cluster-node-tuning-operator/pull/249)
* IBM Cloud manifest profile patch for operator deployment [#252](https://github.com/openshift/cluster-node-tuning-operator/pull/252)
* Ship the latest TuneD, adjust default Tuned CR. [#245](https://github.com/openshift/cluster-node-tuning-operator/pull/245)
* Updating to the latest stalld v1.13.0. [#246](https://github.com/openshift/cluster-node-tuning-operator/pull/246)
* openshift-tuned event-driven change processing [#243](https://github.com/openshift/cluster-node-tuning-operator/pull/243)
* Adjusting the OWNERS file due to team changes. [#244](https://github.com/openshift/cluster-node-tuning-operator/pull/244)
* Updating to the latest stalld v1.12.0. [#242](https://github.com/openshift/cluster-node-tuning-operator/pull/242)
* [Bug 1974277](https://bugzilla.redhat.com/show_bug.cgi?id=1974277): Fix conditional order for setting net device param. [#239](https://github.com/openshift/cluster-node-tuning-operator/pull/239)
* [Bug 1973154](https://bugzilla.redhat.com/show_bug.cgi?id=1973154): Switch back to NTO-shipped stalld. [#236](https://github.com/openshift/cluster-node-tuning-operator/pull/236)
* Updating cluster-node-tuning-operator images to be consistent with ART [#235](https://github.com/openshift/cluster-node-tuning-operator/pull/235)
* More precise description of MCP matching. [#219](https://github.com/openshift/cluster-node-tuning-operator/pull/219)
* Updating .ci-operator.yaml `build_root_image` from openshift/release [#234](https://github.com/openshift/cluster-node-tuning-operator/pull/234)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/9e185d59cfbb4dd083c0ae3c82014aea110697b3...)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/)

* [SO-121](https://issues.redhat.com/browse/SO-121): Syncing the library for only S2i Samples for OCP 4.16 [#543](https://github.com/openshift/cluster-samples-operator/pull/543)
* Revert "SO-121: Resync Libray for 4.16" [#542](https://github.com/openshift/cluster-samples-operator/pull/542)
* [SO-121](https://issues.redhat.com/browse/SO-121): Resync Libray for 4.16 [#540](https://github.com/openshift/cluster-samples-operator/pull/540)
* [OCPBUGS-31303](https://issues.redhat.com/browse/OCPBUGS-31303): bump K8s version to 29.2 [#536](https://github.com/openshift/cluster-samples-operator/pull/536)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#535](https://github.com/openshift/cluster-samples-operator/pull/535)
* [OCPBUGS-26992](https://issues.redhat.com/browse/OCPBUGS-26992): Align builder and base for Dockerfile.okd with Dockerfile [#531](https://github.com/openshift/cluster-samples-operator/pull/531)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#532](https://github.com/openshift/cluster-samples-operator/pull/532)
* [OCPBUGS-24787](https://issues.redhat.com/browse/OCPBUGS-24787): Updating ose-cluster-samples-operator-container image to be consistent with ART [#530](https://github.com/openshift/cluster-samples-operator/pull/530)
* [OCPBUGS-24787](https://issues.redhat.com/browse/OCPBUGS-24787): Updating ose-cluster-samples-operator-container image to be consistent with ART [#527](https://github.com/openshift/cluster-samples-operator/pull/527)
* [SO-119](https://issues.redhat.com/browse/SO-119): Fix mariadb import url in OKD [#525](https://github.com/openshift/cluster-samples-operator/pull/525)
* [SO-118](https://issues.redhat.com/browse/SO-118): Bumping the K8s to 28.2 and golang to 1.20 [#524](https://github.com/openshift/cluster-samples-operator/pull/524)
* [SO-117](https://issues.redhat.com/browse/SO-117): Library Sync for OCP release 4.15 [#522](https://github.com/openshift/cluster-samples-operator/pull/522)
* [OCPBUGS-22225](https://issues.redhat.com/browse/OCPBUGS-22225): Sync library to remove invalid dockerhub references for OKD [#519](https://github.com/openshift/cluster-samples-operator/pull/519)
* Use latest tag for network-tools imagestream [#518](https://github.com/openshift/cluster-samples-operator/pull/518)
* [OCPBUGS-18857](https://issues.redhat.com/browse/OCPBUGS-18857): Updating ose-cluster-samples-operator images to be consistent with ART [#517](https://github.com/openshift/cluster-samples-operator/pull/517)
* manifests: Drop explicit runlevel from CRD manifest [#515](https://github.com/openshift/cluster-samples-operator/pull/515)
* [OCPBUGS-16435](https://issues.redhat.com/browse/OCPBUGS-16435): Bump k8 to v0.27.2 for ocp 4.14 [#514](https://github.com/openshift/cluster-samples-operator/pull/514)
* [OCPBUGS-16403](https://issues.redhat.com/browse/OCPBUGS-16403): Update Cluster Sample Operator dependencies and libraries for OCP 4.14 [#511](https://github.com/openshift/cluster-samples-operator/pull/511)
* reconcile status when clusteroperator changes [#510](https://github.com/openshift/cluster-samples-operator/pull/510)
* [OCPBUGS-15754](https://issues.redhat.com/browse/OCPBUGS-15754): Update Jenkins and Jenkins Agent Base image versions [#504](https://github.com/openshift/cluster-samples-operator/pull/504)
* [OCPBUGS-14491](https://issues.redhat.com/browse/OCPBUGS-14491): Updating to use Jenkins 4.13 images [#502](https://github.com/openshift/cluster-samples-operator/pull/502)
* [OCPBUGS-12775](https://issues.redhat.com/browse/OCPBUGS-12775): Update Cluster Sample Operator dependencies and libraaies for OCP 4.14 [#500](https://github.com/openshift/cluster-samples-operator/pull/500)
* Updating ose-cluster-samples-operator images to be consistent with ART [#499](https://github.com/openshift/cluster-samples-operator/pull/499)
* [OCPBUGS-10910](https://issues.redhat.com/browse/OCPBUGS-10910): Add network tools imagestreams [#495](https://github.com/openshift/cluster-samples-operator/pull/495)
* Updating ose-cluster-samples-operator images to be consistent with ART [#493](https://github.com/openshift/cluster-samples-operator/pull/493)
* Fix jira component [#494](https://github.com/openshift/cluster-samples-operator/pull/494)
* update Jenkins to use v4.12 imagestreams [#491](https://github.com/openshift/cluster-samples-operator/pull/491)
* [OCPBUGS-855](https://issues.redhat.com/browse/OCPBUGS-855): When setting allowedRegistries urls the openshift-samples operator is degraded [#487](https://github.com/openshift/cluster-samples-operator/pull/487)
* [OCPBUGS-6811](https://issues.redhat.com/browse/OCPBUGS-6811): Update Cluster Sample Operator dependencies and libraries for OCP 4.13 [#485](https://github.com/openshift/cluster-samples-operator/pull/485)
* Change importMode to preserveOriginal for Openshift imagestreams [#482](https://github.com/openshift/cluster-samples-operator/pull/482)
* [OCPBUGS-6579](https://issues.redhat.com/browse/OCPBUGS-6579): update sample imagestreams with latest 4.11 image using specific image tag reference [#483](https://github.com/openshift/cluster-samples-operator/pull/483)
* [OCPBUGS-4357](https://issues.redhat.com/browse/OCPBUGS-4357): Bump k8s master [#476](https://github.com/openshift/cluster-samples-operator/pull/476)
* [OCPBUGS-4166](https://issues.redhat.com/browse/OCPBUGS-4166): Update Cluster Sample Operator dependencies and libraries for OCP 4.13 [#474](https://github.com/openshift/cluster-samples-operator/pull/474)
* [OCPBUGS-3426](https://issues.redhat.com/browse/OCPBUGS-3426): Update Cluster Sample Operator dependencies and libraries for OCP 4.12 [#471](https://github.com/openshift/cluster-samples-operator/pull/471)
* Updating ose-cluster-samples-operator images to be consistent with ART [#470](https://github.com/openshift/cluster-samples-operator/pull/470)
* Updating ose-cluster-samples-operator images to be consistent with ART [#465](https://github.com/openshift/cluster-samples-operator/pull/465)
* Add client certificate and key to service monitor [#464](https://github.com/openshift/cluster-samples-operator/pull/464)
* Updating ose-cluster-samples-operator images to be consistent with ART [#435](https://github.com/openshift/cluster-samples-operator/pull/435)
* [Bug 2086086](https://bugzilla.redhat.com/show_bug.cgi?id=2086086): Update Cluster Sample Operator dependencies and libraries for OCP 4.11 [#433](https://github.com/openshift/cluster-samples-operator/pull/433)
* update jenkins CPaaS image refs prior to 4.11 GA [#432](https://github.com/openshift/cluster-samples-operator/pull/432)
* [Bug 2086086](https://bugzilla.redhat.com/show_bug.cgi?id=2086086): Update Cluster Sample Operator dependencies and libraries for OCP 4.11 [#431](https://github.com/openshift/cluster-samples-operator/pull/431)
* [Bug 2095256](https://bugzilla.redhat.com/show_bug.cgi?id=2095256): Samples Owner needs to be Updated [#429](https://github.com/openshift/cluster-samples-operator/pull/429)
* [Bug 2086086](https://bugzilla.redhat.com/show_bug.cgi?id=2086086): Update Cluster Sample Operator dependencies and libraries for OCP 4.11 [#428](https://github.com/openshift/cluster-samples-operator/pull/428)
* [AUTH-133](https://issues.redhat.com/browse/AUTH-133): manifests/deployment: comply to restricted pod security level [#425](https://github.com/openshift/cluster-samples-operator/pull/425)
* Updating ose-cluster-samples-operator images to be consistent with ART [#426](https://github.com/openshift/cluster-samples-operator/pull/426)
* [JNKS-289](https://issues.redhat.com/browse/JNKS-289): pull in jenkins imagestream updates (add back maven/nodejs streams) [#422](https://github.com/openshift/cluster-samples-operator/pull/422)
* Jira SO-19: Make sure template and imagestream api version is groupified [#420](https://github.com/openshift/cluster-samples-operator/pull/420)
* [JNKS-287](https://issues.redhat.com/browse/JNKS-287): remove imagestream manifest refs; remove override of jenkins images with payload images [#416](https://github.com/openshift/cluster-samples-operator/pull/416)
* [Bug 2010364](https://bugzilla.redhat.com/show_bug.cgi?id=2010364): OpenShift Alerting Rules Style-Guide Compliance [#419](https://github.com/openshift/cluster-samples-operator/pull/419)
* [Bug 2067823](https://bugzilla.redhat.com/show_bug.cgi?id=2067823): Taking care of CVE-2022-21698 [#418](https://github.com/openshift/cluster-samples-operator/pull/418)
* [Bug 2064610](https://bugzilla.redhat.com/show_bug.cgi?id=2064610): Remove duplicate v1 from cakephp-mysql templates [#417](https://github.com/openshift/cluster-samples-operator/pull/417)
* manifests: Add capability.openshift.io/name [#414](https://github.com/openshift/cluster-samples-operator/pull/414)
* Updating ose-cluster-samples-operator images to be consistent with ART [#412](https://github.com/openshift/cluster-samples-operator/pull/412)
* [Bug 2027745](https://bugzilla.redhat.com/show_bug.cgi?id=2027745): Allowing ImageStream creation when config registry empty [#406](https://github.com/openshift/cluster-samples-operator/pull/406)
* [Bug 2033720](https://bugzilla.redhat.com/show_bug.cgi?id=2033720): Synching SSO library [#411](https://github.com/openshift/cluster-samples-operator/pull/411)
* upd rhel7 Dockerfile in case still used for rhel7 worker nodes [#410](https://github.com/openshift/cluster-samples-operator/pull/410)
* [Bug 2033720](https://bugzilla.redhat.com/show_bug.cgi?id=2033720): Bump k8 dependencies to v0.23.1 [#409](https://github.com/openshift/cluster-samples-operator/pull/409)
* [Bug 2033720](https://bugzilla.redhat.com/show_bug.cgi?id=2033720): Library synchronization for OCP 4.10 [#408](https://github.com/openshift/cluster-samples-operator/pull/408)
* [Bug 2027745](https://bugzilla.redhat.com/show_bug.cgi?id=2027745): Move openshift build-machinery-go dependency [#407](https://github.com/openshift/cluster-samples-operator/pull/407)
* Update OWNERS [#402](https://github.com/openshift/cluster-samples-operator/pull/402)
* Remove single node prod cluster profile annotation as it is not used [#405](https://github.com/openshift/cluster-samples-operator/pull/405)
* [Bug 2007757](https://bugzilla.redhat.com/show_bug.cgi?id=2007757): Including Template in must-gather related objects. [#399](https://github.com/openshift/cluster-samples-operator/pull/399)
* [Bug 2006947](https://bugzilla.redhat.com/show_bug.cgi?id=2006947): fix proxy portion of tbr inaccessible check [#397](https://github.com/openshift/cluster-samples-operator/pull/397)
* Updating ose-cluster-samples-operator images to be consistent with ART [#396](https://github.com/openshift/cluster-samples-operator/pull/396)
* [Bug 2002368](https://bugzilla.redhat.com/show_bug.cgi?id=2002368): acccount for image api returning invalid on imagestream create based on allowed/blocked registry settings [#394](https://github.com/openshift/cluster-samples-operator/pull/394)
* [Bug 2003683](https://bugzilla.redhat.com/show_bug.cgi?id=2003683): fix recently introduced panic when conflict errors occur [#395](https://github.com/openshift/cluster-samples-operator/pull/395)
* [Bug 1993840](https://bugzilla.redhat.com/show_bug.cgi?id=1993840): more avoiding immediate degraded on intermittent API errors [#391](https://github.com/openshift/cluster-samples-operator/pull/391)
* Updating ose-cluster-samples-operator images to be consistent with ART [#390](https://github.com/openshift/cluster-samples-operator/pull/390)
* add david peraza as approver, clean up reviewers [#389](https://github.com/openshift/cluster-samples-operator/pull/389)
* [BUILD-298](https://issues.redhat.com/browse/BUILD-298): Bump k8s to 1.22.1 [#388](https://github.com/openshift/cluster-samples-operator/pull/388)
* [Bug 1993840](https://bugzilla.redhat.com/show_bug.cgi?id=1993840): avoid immediate degraded on intermittent API errors; set reason/message when Available=false [#387](https://github.com/openshift/cluster-samples-operator/pull/387)
* [Bug 1995386](https://bugzilla.redhat.com/show_bug.cgi?id=1995386): don't return err in wait.Poll on net.DialTimeout err; tweak time intervals [#386](https://github.com/openshift/cluster-samples-operator/pull/386)
* [Bug 1990140](https://bugzilla.redhat.com/show_bug.cgi?id=1990140): add connection with timeout in TBR accessibility check to expedite 'disconnected' mode [#384](https://github.com/openshift/cluster-samples-operator/pull/384)
* [Bug 1990988](https://bugzilla.redhat.com/show_bug.cgi?id=1990988): Refreshing samples for OCP 4.9 [#381](https://github.com/openshift/cluster-samples-operator/pull/381)
* [Bug 1975539](https://bugzilla.redhat.com/show_bug.cgi?id=1975539): delete hello-openshift in payload imagestream via CVO annotation [#380](https://github.com/openshift/cluster-samples-operator/pull/380)
* Updating ose-cluster-samples-operator images to be consistent with ART [#378](https://github.com/openshift/cluster-samples-operator/pull/378)
* Updating .ci-operator.yaml `build_root_image` from openshift/release [#377](https://github.com/openshift/cluster-samples-operator/pull/377)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/31fb491fc14faed6ebbe41a526764947069ff0a2...)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/)

* no-jira: UPSTREAM <carry>: add native build to installer image [#1961](https://github.com/openshift/kubernetes/pull/1961)
* [API-1809](https://issues.redhat.com/browse/API-1809): Provide SCC access via RBAC [#1959](https://github.com/openshift/kubernetes/pull/1959)
* NO-JIRA: UPSTREAM: <carry>: Revert create readyz event for kubeapi server [#1957](https://github.com/openshift/kubernetes/pull/1957)
* [OCPBUGS-20097](https://issues.redhat.com/browse/OCPBUGS-20097): Migrate tools image to RHEL9 [#1954](https://github.com/openshift/kubernetes/pull/1954)
* [OCPBUGS-32296](https://issues.redhat.com/browse/OCPBUGS-32296): Bump K8s api to 1.29.4 [#1947](https://github.com/openshift/kubernetes/pull/1947)
* [OCPBUGS-22301](https://issues.redhat.com/browse/OCPBUGS-22301): UPSTREAM: <carry>: Fix garbage-collection for CRDs. [#1811](https://github.com/openshift/kubernetes/pull/1811)
* [OCPBUGS-26440](https://issues.redhat.com/browse/OCPBUGS-26440): UPSTREAM: <carry>: create readyz event for kubeapi server [#1914](https://github.com/openshift/kubernetes/pull/1914)
* UPSTREAM: <carry>: OCPEDGE-807: add support for cpu limits into management workloads [#1902](https://github.com/openshift/kubernetes/pull/1902)
* [CFE-910](https://issues.redhat.com/browse/CFE-910): RouteExternalCertificate validation in openshift-kube-apiserver custom resource validator [#1904](https://github.com/openshift/kubernetes/pull/1904)
* NO-JIRA: UPSTREAM: <carry>: featureset validation moved to CEL [#1944](https://github.com/openshift/kubernetes/pull/1944)
* [CFE-910](https://issues.redhat.com/browse/CFE-910): bump library-go [#1941](https://github.com/openshift/kubernetes/pull/1941)
* [OCPBUGS-11933](https://issues.redhat.com/browse/OCPBUGS-11933): UPSTREAM: <drop>: bump apiserver-library-go [#1910](https://github.com/openshift/kubernetes/pull/1910)
* [OCPBUGS-31663](https://issues.redhat.com/browse/OCPBUGS-31663): UPSTREAM: <carry>: add management workload check for guaranteed qos [#1928](https://github.com/openshift/kubernetes/pull/1928)
* [OCPBUGS-30957](https://issues.redhat.com/browse/OCPBUGS-30957): Use the right feature gate when updating uncertain … [#1919](https://github.com/openshift/kubernetes/pull/1919)
* [OCPBUGS-31384](https://issues.redhat.com/browse/OCPBUGS-31384): UPSTREAM: <carry>: allow type mutation for specific secrets [#1932](https://github.com/openshift/kubernetes/pull/1932)
* [OCPNODE-1886](https://issues.redhat.com/browse/OCPNODE-1886): Bump k8s 1.29.3 [#1925](https://github.com/openshift/kubernetes/pull/1925)
* [OCPBUGS-31384](https://issues.redhat.com/browse/OCPBUGS-31384): UPSTREAM: <carry>: allow type mutation for specific secrets [#1929](https://github.com/openshift/kubernetes/pull/1929)
* [OCPBUGS-31384](https://issues.redhat.com/browse/OCPBUGS-31384): UPSTREAM: <carry>: allow type mutation for specific secrets [#1924](https://github.com/openshift/kubernetes/pull/1924)
* [OCPBUGS-30767](https://issues.redhat.com/browse/OCPBUGS-30767): UPSTREAM: 124110: retry policy creation for CRD type checking E2E test [#1922](https://github.com/openshift/kubernetes/pull/1922)
* [OCPBUILD-13](https://issues.redhat.com/browse/OCPBUILD-13): UPSTREAM: <carry>: fix [sig-auth] ServiceAccounts no secret-based service account token should be auto-generated [#1909](https://github.com/openshift/kubernetes/pull/1909)
* [CFE-910](https://issues.redhat.com/browse/CFE-910): [o/k-apis] Add context to ObjectValidator; Consume FeatureGate(s) in kube-apiserver [#1852](https://github.com/openshift/kubernetes/pull/1852)
* UPSTREAM: <carry>: OCPBUGS-29520: fix cpu manager cpuset check [#1892](https://github.com/openshift/kubernetes/pull/1892)
* [OCPBUGS-30954](https://issues.redhat.com/browse/OCPBUGS-30954): Set up CEL IP/CIDR library from 4.14 onwards [#1911](https://github.com/openshift/kubernetes/pull/1911)
* [OCPBUGS-24481](https://issues.redhat.com/browse/OCPBUGS-24481): Enable SELinux tests [#1908](https://github.com/openshift/kubernetes/pull/1908)
* [MCO-392](https://issues.redhat.com/browse/MCO-392): openshift-hack/images/os: delete [#1805](https://github.com/openshift/kubernetes/pull/1805)
* [OCPBUGS-23900](https://issues.redhat.com/browse/OCPBUGS-23900): UPSTREAM: 123512: system:kube-scheduler: extend the RBAC with pods/finalizers [#1900](https://github.com/openshift/kubernetes/pull/1900)
* [OCPBUGS-10996](https://issues.redhat.com/browse/OCPBUGS-10996): Fix race condition between resizer and kubelet [#1899](https://github.com/openshift/kubernetes/pull/1899)
* [OCPBUGS-29437](https://issues.redhat.com/browse/OCPBUGS-29437): Upstream: <carry>: RPM: Split apiserver, scheduler, k-c-m, kubelet into subpackages [#1882](https://github.com/openshift/kubernetes/pull/1882)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Bump k8s to 1.29.2 [#1888](https://github.com/openshift/kubernetes/pull/1888)
* NO-JIRA: Clean carry patches [#1880](https://github.com/openshift/kubernetes/pull/1880)
* [OCPBUGS-29435](https://issues.redhat.com/browse/OCPBUGS-29435): UPSTREAM: 123165: Add AudienceMatchPolicy and support multiple audien… [#1881](https://github.com/openshift/kubernetes/pull/1881)
* [CORS-3191](https://issues.redhat.com/browse/CORS-3191): Add Dockerfile to buld kube-apiserver for openshift-install architectures [#1872](https://github.com/openshift/kubernetes/pull/1872)
* NO-JIRA: Revert "OCPBUGS-24404: add ignore for SAST scan" [#1870](https://github.com/openshift/kubernetes/pull/1870)
* [OCPBUGS-24404](https://issues.redhat.com/browse/OCPBUGS-24404): UPSTREAM <carry>: use snyk file [#1871](https://github.com/openshift/kubernetes/pull/1871)
* [OCPBUGS-26058](https://issues.redhat.com/browse/OCPBUGS-26058): UPSTREAM: <carry>: watch-termination: termination.log file with restricted permissions [#1841](https://github.com/openshift/kubernetes/pull/1841)
* [OCPBUGS-16760](https://issues.redhat.com/browse/OCPBUGS-16760): permanently disable NodeLogQuery e2e test [#1792](https://github.com/openshift/kubernetes/pull/1792)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Bump k8s to 1.29.1 [#1858](https://github.com/openshift/kubernetes/pull/1858)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Switch to golang 1.21 [#1845](https://github.com/openshift/kubernetes/pull/1845)
* [OCPBUGS-24606](https://issues.redhat.com/browse/OCPBUGS-24606): UPSTREAM: <carry>: Update management webhook pod admission logic [#1821](https://github.com/openshift/kubernetes/pull/1821)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): UPSTREAM: <carry>: update test rules [#1849](https://github.com/openshift/kubernetes/pull/1849)
* [OCPBUGS-17249](https://issues.redhat.com/browse/OCPBUGS-17249): UPSTREAM: <carry>: openshift-kube-apiserver: pod .spec.nodeName should not override project node selector in podNodeEnvironment admission plugin [#1787](https://github.com/openshift/kubernetes/pull/1787)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): UPSTREAM: 122683: Use v1beta1 endpoints when cleaning up ValidatingAdmissionPolicies [#1848](https://github.com/openshift/kubernetes/pull/1848)
* [OCPBUGS-23896](https://issues.redhat.com/browse/OCPBUGS-23896): Fix device uncertain errors on reboot [#1829](https://github.com/openshift/kubernetes/pull/1829)
* [OCPBUGS-24404](https://issues.redhat.com/browse/OCPBUGS-24404): add ignore for SAST scan [#1824](https://github.com/openshift/kubernetes/pull/1824)
* [AUTH-439](https://issues.redhat.com/browse/AUTH-439): loosen authentication.spec.type validation [#1770](https://github.com/openshift/kubernetes/pull/1770)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): UPSTREAM: 122643: Add a new neverTerminate job behavior just for upgrade [#1846](https://github.com/openshift/kubernetes/pull/1846)
* [OCPBUGS-26067](https://issues.redhat.com/browse/OCPBUGS-26067): Backport CEL IP and CIDR validations [#1828](https://github.com/openshift/kubernetes/pull/1828)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Bump k8s api to 1.29.0 [#1840](https://github.com/openshift/kubernetes/pull/1840)
* [OCPNODE-1895](https://issues.redhat.com/browse/OCPNODE-1895): temporarily disable reporting e2e text bugs [#1836](https://github.com/openshift/kubernetes/pull/1836)
* [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Rebase 1.29.0 [#1815](https://github.com/openshift/kubernetes/pull/1815)
* [CNF-8809](https://issues.redhat.com/browse/CNF-8809): admission: add new admission for handling shared cpus request [#1799](https://github.com/openshift/kubernetes/pull/1799)
* [CNF-8326](https://issues.redhat.com/browse/CNF-8326): advertise shared cpus for mixed cpus feature [#1795](https://github.com/openshift/kubernetes/pull/1795)
* [OCPBUGS-23565](https://issues.redhat.com/browse/OCPBUGS-23565): Update to kubernetes 1.28.4 [#1806](https://github.com/openshift/kubernetes/pull/1806)
* [OCPBUGS-23073](https://issues.redhat.com/browse/OCPBUGS-23073): .spec.numberOfUsersToReport is not correctly applied in some circumstances [#1794](https://github.com/openshift/kubernetes/pull/1794)
* [OCPBUGS-22724](https://issues.redhat.com/browse/OCPBUGS-22724): UPSTREAM: 121881: Use golang library instead of mklink [#1800](https://github.com/openshift/kubernetes/pull/1800)
* [OCPBUGS-16922](https://issues.redhat.com/browse/OCPBUGS-16922): Remove skip flag for e2e tests related to AdmissionWebhookMatchConditions [#1790](https://github.com/openshift/kubernetes/pull/1790)
* Update REBASE.openshift.md [#1788](https://github.com/openshift/kubernetes/pull/1788)
* [STOR-1278](https://issues.redhat.com/browse/STOR-1278): Fixes for SELinux mount context metrics [#1771](https://github.com/openshift/kubernetes/pull/1771)
* Update to Kubernetes v1.28.3 [#1776](https://github.com/openshift/kubernetes/pull/1776)
* openshift-hack: Fix sporadic 141 errors in build-rpms [#1769](https://github.com/openshift/kubernetes/pull/1769)
* UPSTREAM: <carry>: support for both icsp and idms objects [#1685](https://github.com/openshift/kubernetes/pull/1685)
* [OCPBUGS-21584](https://issues.redhat.com/browse/OCPBUGS-21584): UPSTREAM: 121128: [CVE-2023-39325] .: bump golang.org/x/net to v0.17.0 [#1757](https://github.com/openshift/kubernetes/pull/1757)
* Do not allow nodes to set forbidden openshift labels [#1735](https://github.com/openshift/kubernetes/pull/1735)
* [OCPBUGS-20096](https://issues.redhat.com/browse/OCPBUGS-20096): bump pause image to RHEL9 [#1734](https://github.com/openshift/kubernetes/pull/1734)
* Revert #1731 "Revert #1703 "Update builder & base images"" [#1732](https://github.com/openshift/kubernetes/pull/1732)
* Revert #1703 "Update builder & base images" [#1731](https://github.com/openshift/kubernetes/pull/1731)
* Update builder & base images [#1703](https://github.com/openshift/kubernetes/pull/1703)
* UPSTREAM: <drop>: bump(openshift/client-go,library-go,apiserver-library-go) [#1726](https://github.com/openshift/kubernetes/pull/1726)
* [OCPBUGS-19666](https://issues.redhat.com/browse/OCPBUGS-19666): kubelet/cm: use MkdirAll when creating cpuset to ignore file exists error [#1724](https://github.com/openshift/kubernetes/pull/1724)
* [OCPBUGS-17534](https://issues.redhat.com/browse/OCPBUGS-17534): UPSTREAM: <carry>: vendor: bump cadvisor and runc to 1.1.9 [#1711](https://github.com/openshift/kubernetes/pull/1711)
* UPSTREAM: 120817: e2e: bootstrap vsphere tests earlier [#1714](https://github.com/openshift/kubernetes/pull/1714)
* [OCPBUGS-19452](https://issues.redhat.com/browse/OCPBUGS-19452): UPSTREAM: 119317: change rolling update logic to exclude sunsetting nodes [#1716](https://github.com/openshift/kubernetes/pull/1716)
* Update to new openshift/* dependencies [#1704](https://github.com/openshift/kubernetes/pull/1704)
* [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Update to Kubernetes 1.28.1 [#1646](https://github.com/openshift/kubernetes/pull/1646)
* [OCPBUGS-16080](https://issues.redhat.com/browse/OCPBUGS-16080): UPSTREAM: <carry>: watch-termination: termination.log file [#1638](https://github.com/openshift/kubernetes/pull/1638)
* UPSTREAM: <carry>: disable test removed in 1.28 [#1698](https://github.com/openshift/kubernetes/pull/1698)
* <carry>: Export cpu stats of ovs.slice via prometheus [#1686](https://github.com/openshift/kubernetes/pull/1686)
* [OCPBUGS-17654](https://issues.redhat.com/browse/OCPBUGS-17654): cm: reorder setting of sched_load_balance for sandbox slice [#1665](https://github.com/openshift/kubernetes/pull/1665)
* [OCPBUGS-18608](https://issues.redhat.com/browse/OCPBUGS-18608): UPSTREAM: <carry>: Force using host go always and use host libriaries [#1688](https://github.com/openshift/kubernetes/pull/1688)
* [OCPBUGS-18149](https://issues.redhat.com/browse/OCPBUGS-18149): UPSTREAM: <carry>: retry etcd Unavailable errors [#1681](https://github.com/openshift/kubernetes/pull/1681)
* [OCPBUGS-18149](https://issues.redhat.com/browse/OCPBUGS-18149): UPSTREAM: <carry>: retry etcd Unavailable errors [#1676](https://github.com/openshift/kubernetes/pull/1676)
* [OCPBUGS-14301](https://issues.redhat.com/browse/OCPBUGS-14301): UPSTREAM: 117245: Fix TopologyAwareHint not working when zone label is added after Node creation [#1673](https://github.com/openshift/kubernetes/pull/1673)
* [OCPBUGS-14301](https://issues.redhat.com/browse/OCPBUGS-14301): UPSTREAM: 117249,118189: fix TopologyCache crashes [#1668](https://github.com/openshift/kubernetes/pull/1668)
* [OCPBUGS-7415](https://issues.redhat.com/browse/OCPBUGS-7415): grant user:full scope to self-SARs [#1493](https://github.com/openshift/kubernetes/pull/1493)
* UPSTREAM: 118280: Set all PSa labels in tests [#1663](https://github.com/openshift/kubernetes/pull/1663)
* [OCPBUGS-17119](https://issues.redhat.com/browse/OCPBUGS-17119): UPSTREAM: <drop>: bump apiserver-library-go for updated required-scc errors [#1661](https://github.com/openshift/kubernetes/pull/1661)
* [OCPBUGS-15726](https://issues.redhat.com/browse/OCPBUGS-15726): UPSTREAM: <carry>: merge v3 openapi discovery and specs for special groups [#1654](https://github.com/openshift/kubernetes/pull/1654)
* [OCPBUGS-16166](https://issues.redhat.com/browse/OCPBUGS-16166): Update to Kubernetes 1.27.4 [#1660](https://github.com/openshift/kubernetes/pull/1660)
* Update to Kubernetes 1.27.4 [#1653](https://github.com/openshift/kubernetes/pull/1653)
* [OCPBUGS-15726](https://issues.redhat.com/browse/OCPBUGS-15726): UPSTREAM: 118879: make apiservices.apiregistration.k8s.io discoverabl… [#1630](https://github.com/openshift/kubernetes/pull/1630)
* [OCPBUGS-16166](https://issues.redhat.com/browse/OCPBUGS-16166): Update to Kubernetes 1.27.4 [#1645](https://github.com/openshift/kubernetes/pull/1645)
* [OCPBUGS-15726](https://issues.redhat.com/browse/OCPBUGS-15726): UPSTREAM: 118881: fix openapi/v3 non local apiservices aggregation [#1629](https://github.com/openshift/kubernetes/pull/1629)
* UPSTREAM: <drop>: hack/update-vendor.sh [#1634](https://github.com/openshift/kubernetes/pull/1634)
* UPSTREAM: 119107: Stop using deprecated API [#1624](https://github.com/openshift/kubernetes/pull/1624)
* [OCPBUGS-13392](https://issues.redhat.com/browse/OCPBUGS-13392): UPSTREAM: 118915: remove legacy NetworkPolicy tests [#1623](https://github.com/openshift/kubernetes/pull/1623)
* UPSTREAM: <drop>: update openshift/api,openshift/apiserver-library-go [#1621](https://github.com/openshift/kubernetes/pull/1621)
* UPSTREAM: <carry>: when only this kube-apiserver can fulfill the kube… [#1616](https://github.com/openshift/kubernetes/pull/1616)
* Update to Kubernetes 1.27.3 [#1609](https://github.com/openshift/kubernetes/pull/1609)
* UPSTREAM: <carry>: STOR-1270: Admission plugin to deny deletion of storages.operator.openshift.io [#1550](https://github.com/openshift/kubernetes/pull/1550)
* [OCPBUGS-7181](https://issues.redhat.com/browse/OCPBUGS-7181): UPSTREAM: <drop>: bump apiserver-library-go [#1605](https://github.com/openshift/kubernetes/pull/1605)
* [STOR-1263](https://issues.redhat.com/browse/STOR-1263): Add csimock tests [#1595](https://github.com/openshift/kubernetes/pull/1595)
* [OCPBUGS-4053](https://issues.redhat.com/browse/OCPBUGS-4053): UPSTREAM: 118383: bump cadvisor for upstream patch 3301 [#1594](https://github.com/openshift/kubernetes/pull/1594)
* Update test wrapper to match new k8s [#1584](https://github.com/openshift/kubernetes/pull/1584)
* [STOR-1263](https://issues.redhat.com/browse/STOR-1263): Bump to k8s 1.27.2 [#1583](https://github.com/openshift/kubernetes/pull/1583)
* `cherry-pick`: #117785 from `k/k` - disable external IPs on e2e net tests [#1581](https://github.com/openshift/kubernetes/pull/1581)
* UPSTREAM: 117893:  When expecting pods count only active ones [#1577](https://github.com/openshift/kubernetes/pull/1577)
* [OCPBUGS-13854](https://issues.redhat.com/browse/OCPBUGS-13854): UPSTREAM: 117371: kubelet: Don't reference the pod manager interface directly from components [#1578](https://github.com/openshift/kubernetes/pull/1578)
* [OCPBUGS-11652](https://issues.redhat.com/browse/OCPBUGS-11652): UPSTREAM: <carry>: Extend NodeLogQuery feature [#1579](https://github.com/openshift/kubernetes/pull/1579)
* [OCPBUGS-13148](https://issues.redhat.com/browse/OCPBUGS-13148): kubelet/cm: disable cpu load balancing on slices when using static cpu manager policy [#1573](https://github.com/openshift/kubernetes/pull/1573)
* UPSTREAM: <carry>: move test rules from origin [#1574](https://github.com/openshift/kubernetes/pull/1574)
* [OCPBUGS-11143](https://issues.redhat.com/browse/OCPBUGS-11143): Azure: move to kube-proxy LB probes, don't detach masters when unready [#1569](https://github.com/openshift/kubernetes/pull/1569)
* [OCPBUGS-10048](https://issues.redhat.com/browse/OCPBUGS-10048): UPSTREAM: <carry>: add conditional shutdown response header [#1555](https://github.com/openshift/kubernetes/pull/1555)
* [OCPBUGS-2474](https://issues.redhat.com/browse/OCPBUGS-2474): UPSTREAM: 116995: kubelet: Ensure pods that have not started track pendingUpdate [#1561](https://github.com/openshift/kubernetes/pull/1561)
* [STOR-1263](https://issues.redhat.com/browse/STOR-1263): Update to Kubernetes 1.27.1 [#1558](https://github.com/openshift/kubernetes/pull/1558)
* [OCPBUGS-10829](https://issues.redhat.com/browse/OCPBUGS-10829): UPSTREAM: 117310: kube-aggregator: correctly use client-go TLS cache with custom dialer [#1548](https://github.com/openshift/kubernetes/pull/1548)
* UPSTREAM: <carry>: add shutdown annotation to response header [#1537](https://github.com/openshift/kubernetes/pull/1537)
* UPSTREAM: <carry>: OCPNODE-1548,OCPNODE-1584: disable load balancing on created cgroups when managed is enabled [#1518](https://github.com/openshift/kubernetes/pull/1518)
* Add wrapper which will allow running o/k tests as external binary in origin [#1485](https://github.com/openshift/kubernetes/pull/1485)
* [OCPBUGS-7267](https://issues.redhat.com/browse/OCPBUGS-7267): More fixes to SCC PSa extractor [#1482](https://github.com/openshift/kubernetes/pull/1482)
* [OCPBUGS-10048](https://issues.redhat.com/browse/OCPBUGS-10048): UPSTREAM: 115328: apiserver: annotate early (server not ready) and late (during shutdown) requests [#1456](https://github.com/openshift/kubernetes/pull/1456)
* [OCPBUGS-8220](https://issues.redhat.com/browse/OCPBUGS-8220): CSI Inline Volume admission plugin does not log object name correctly [#1499](https://github.com/openshift/kubernetes/pull/1499)
* [OCPBUGS-8092](https://issues.redhat.com/browse/OCPBUGS-8092): Fix mounted volume expansion tests [#1498](https://github.com/openshift/kubernetes/pull/1498)
* UPSTREAM: <carry>: update rebase doc [#1464](https://github.com/openshift/kubernetes/pull/1464)
* Bump to k8s 1.26.2 [#1494](https://github.com/openshift/kubernetes/pull/1494)
* [AUTH-336](https://issues.redhat.com/browse/AUTH-336): UPSTREAM: <carry>: PSa metrics: unset ocp_namespace on non-platform n… [#1489](https://github.com/openshift/kubernetes/pull/1489)
* Bump to k8s 1.26.1 [#1479](https://github.com/openshift/kubernetes/pull/1479)
* [OCPBUGS-7267](https://issues.redhat.com/browse/OCPBUGS-7267): add SeccompProfile to Pod and Container accessors/mutators [#1490](https://github.com/openshift/kubernetes/pull/1490)
* UPSTREAM: <drop>: OCPBUGS-5991: Kube APIServer panics in admission controller [#1488](https://github.com/openshift/kubernetes/pull/1488)
* [CNF-5901](https://issues.redhat.com/browse/CNF-5901): admission hook change for workload partition on all clusters [#1312](https://github.com/openshift/kubernetes/pull/1312)
* UPSTREAM: 113799: tests: network: Prefer internal IPs first [#1446](https://github.com/openshift/kubernetes/pull/1446)
* UPSTREAM: 115863: Remove global framework variable [#1480](https://github.com/openshift/kubernetes/pull/1480)
* UPSTREAM: <carry>: add new approvers [#1458](https://github.com/openshift/kubernetes/pull/1458)
* [OCPBUGS-7555](https://issues.redhat.com/browse/OCPBUGS-7555): UPSTREAM: <carry>: add default kubelet sysctls within rpm [#1475](https://github.com/openshift/kubernetes/pull/1475)
* [AUTH-336](https://issues.redhat.com/browse/AUTH-336): UPSTREAM: <carry>: PSa metrics: log platform namespaces in audit denies [#1454](https://github.com/openshift/kubernetes/pull/1454)
* add icsp validation: reject one of icsp idms.itms resources [#1310](https://github.com/openshift/kubernetes/pull/1310)
* UPSTREAM: 114027: make GetSubnetPrefix IP family agnostic [#1469](https://github.com/openshift/kubernetes/pull/1469)
* disable tests dependent on StackDriver [#1466](https://github.com/openshift/kubernetes/pull/1466)
* UPSTREAM: 115484: Don't explicitly set image version in tests [#1465](https://github.com/openshift/kubernetes/pull/1465)
* UPSTREAM: 114994: kubelet: fix readiness probes with pod termination [#1450](https://github.com/openshift/kubernetes/pull/1450)
* [OCPBUGS-6030](https://issues.redhat.com/browse/OCPBUGS-6030): Rebase onto kube v1.26 [#1432](https://github.com/openshift/kubernetes/pull/1432)
* Fix the mutated PodSpec extractor for warns if no SCC matches [#1453](https://github.com/openshift/kubernetes/pull/1453)
* [OCPBUGS-4900](https://issues.redhat.com/browse/OCPBUGS-4900): remove in-tree volume limits test now that CSIMigration is GA [#1448](https://github.com/openshift/kubernetes/pull/1448)
* [OCPBUGS-4658](https://issues.redhat.com/browse/OCPBUGS-4658): Apply shared defaulters to CRD-based routes. [#1440](https://github.com/openshift/kubernetes/pull/1440)
* [OCPBUGS-4657](https://issues.redhat.com/browse/OCPBUGS-4657): Bump library-go. [#1431](https://github.com/openshift/kubernetes/pull/1431)
* UPSTREAM: <carry>: make the PSA workload admission warnings honor the… [#1393](https://github.com/openshift/kubernetes/pull/1393)
* UPSTREAM: <carry>: Ensure balanced brackets in annotated test names [#1410](https://github.com/openshift/kubernetes/pull/1410)
* [STOR-829](https://issues.redhat.com/browse/STOR-829): Add CSIInlineVolumeSecurity admission plugin [#1384](https://github.com/openshift/kubernetes/pull/1384)
* [OCPBUGS-3501](https://issues.redhat.com/browse/OCPBUGS-3501): UPSTREAM: <carry>: Add host assignment plugin for CRD-based routes. [#1419](https://github.com/openshift/kubernetes/pull/1419)
* UPSTREAM: <drop>: Bump openshift/api. [#1424](https://github.com/openshift/kubernetes/pull/1424)
* [OCPBUGS-3499](https://issues.redhat.com/browse/OCPBUGS-3499): UPSTREAM: <carry>: Add validation plugin for CRD-based route parity. [#1416](https://github.com/openshift/kubernetes/pull/1416)
* [Bug 2117374](https://bugzilla.redhat.com/show_bug.cgi?id=2117374): UPSTREAM: <drop>: update apiserver-library-go to add message about wo… [#1395](https://github.com/openshift/kubernetes/pull/1395)
* Bug OCPBUGS-2991: Disable expansion in SC, if driver does not support it [#1402](https://github.com/openshift/kubernetes/pull/1402)
* [OCPBUGS-3093](https://issues.redhat.com/browse/OCPBUGS-3093): Tag AWS security groups at creation [#1411](https://github.com/openshift/kubernetes/pull/1411)
* UPSTREAM: <drop>: Bump library-go. [#1406](https://github.com/openshift/kubernetes/pull/1406)
* [OCPBUGS-2946](https://issues.redhat.com/browse/OCPBUGS-2946): Revert: 1340: tag AWS security group at creation [#1401](https://github.com/openshift/kubernetes/pull/1401)
* [OCPBUGS-3084](https://issues.redhat.com/browse/OCPBUGS-3084): UPSTREAM: 113481: kubelet: fix pod log line corruption when using timestamps and long lines [#1404](https://github.com/openshift/kubernetes/pull/1404)
* [OCPBUGS-2774](https://issues.redhat.com/browse/OCPBUGS-2774): UPSTREAM: 112807 Fix Load balancer services with xTP local [#1400](https://github.com/openshift/kubernetes/pull/1400)
* UPSTREAM: 113208: Set default test timeouts first, only then modify the required ones [#1396](https://github.com/openshift/kubernetes/pull/1396)
* UPSTREAM: <carry>: Bug 2098054: tag AWS security group at creation [#1340](https://github.com/openshift/kubernetes/pull/1340)
* UPSTREAM: 113135: Wait for pod not running or gone in storage tests [#1394](https://github.com/openshift/kubernetes/pull/1394)
* Bump to k8s 1.25.2 [#1380](https://github.com/openshift/kubernetes/pull/1380)
* [Bug 2041317](https://bugzilla.redhat.com/show_bug.cgi?id=2041317): Fix replica calculation at start of HPA scaling policy period [#1391](https://github.com/openshift/kubernetes/pull/1391)
* UPSTREAM: <carry>: allow annotating with a specific suite [#1388](https://github.com/openshift/kubernetes/pull/1388)
* k8s 1.25.0 [#1360](https://github.com/openshift/kubernetes/pull/1360)
* UPSTREAM: <carry>: Dockerfile: use centos:stream9 [#1366](https://github.com/openshift/kubernetes/pull/1366)
* [OCPBUGS-718](https://issues.redhat.com/browse/OCPBUGS-718): UPSTREAM: 112267: aws: skip health rules if they are a subnet of the client rule [#1358](https://github.com/openshift/kubernetes/pull/1358)
* UPSTREAM: <carry>: optionally enable retry after until apiserver is ready [#1346](https://github.com/openshift/kubernetes/pull/1346)
* UPSTREAM: 110639: endpointslices: node missing on Pod scenario [#1359](https://github.com/openshift/kubernetes/pull/1359)
* UPSTREAM: <carry>: Update kubensenter to use exec instead of subprocess [#1350](https://github.com/openshift/kubernetes/pull/1350)
* UPSTREAM: 110039: Add readinessProbe to aggregated api service test [#1307](https://github.com/openshift/kubernetes/pull/1307)
* [Bug 2118318](https://bugzilla.redhat.com/show_bug.cgi?id=2118318): UPSTREAM: 110939: don't quota events.k8s.io events by default [#1344](https://github.com/openshift/kubernetes/pull/1344)
* UPSTREAM: 111789: Update Netpol e2e tests to use framework CreateName… [#1349](https://github.com/openshift/kubernetes/pull/1349)
* UPSTREAM: <carry>: Skip session affinity timeout tests [#1339](https://github.com/openshift/kubernetes/pull/1339)
* [Bug 2117569](https://bugzilla.redhat.com/show_bug.cgi?id=2117569): UPSTREAM: 110888: feat: fix a bug thaat not all event be ignored by gc controller [#1338](https://github.com/openshift/kubernetes/pull/1338)
* Add kubensenter to the openshift RPM [#1327](https://github.com/openshift/kubernetes/pull/1327)
* UPSTREAM: 111306: Make scheduling e2e tests run PSa-restricted pods [#1333](https://github.com/openshift/kubernetes/pull/1333)
* trt-393: add plugin name to caches not synchronized error [#1330](https://github.com/openshift/kubernetes/pull/1330)
* [Bug 2102383](https://bugzilla.redhat.com/show_bug.cgi?id=2102383): UPSTREAM: 89885: Fix panic in openstack.InstanceExistsByProviderID() [#1315](https://github.com/openshift/kubernetes/pull/1315)
* [Bug 2088606](https://bugzilla.redhat.com/show_bug.cgi?id=2088606): Overly loose admission check when configuring UpstreamResolvers or ForwardPlugin [#1247](https://github.com/openshift/kubernetes/pull/1247)
* [Bug 2081194](https://bugzilla.redhat.com/show_bug.cgi?id=2081194): UPSTREAM: <carry>: update list of deprecated apis [#1091](https://github.com/openshift/kubernetes/pull/1091)
* [Bug 2082773](https://bugzilla.redhat.com/show_bug.cgi?id=2082773): Fix resizing of ephemeral volumes [#1296](https://github.com/openshift/kubernetes/pull/1296)
* UPSTREAM: <carry>: Remove reserved CPUs from default set [#1295](https://github.com/openshift/kubernetes/pull/1295)
* [Bug 2094012](https://bugzilla.redhat.com/show_bug.cgi?id=2094012): UPSTREAM: 110652: fix: --chunk-size with selector returns missing result [#1303](https://github.com/openshift/kubernetes/pull/1303)
* [Bug 2063414](https://bugzilla.redhat.com/show_bug.cgi?id=2063414): UPSTREAM: 109441: kubelet: parseResolvConf: Handle "search ." [#1283](https://github.com/openshift/kubernetes/pull/1283)
* [Bug 2086519](https://bugzilla.redhat.com/show_bug.cgi?id=2086519): get SCC admission default securityContext.runAsNonRoot to true on positive UIDs [#1290](https://github.com/openshift/kubernetes/pull/1290)
* [Bug 2078778](https://bugzilla.redhat.com/show_bug.cgi?id=2078778): UPSTREAM: 110408: apiserver: printers should use int64 [#1288](https://github.com/openshift/kubernetes/pull/1288)
* [Bug 2089933](https://bugzilla.redhat.com/show_bug.cgi?id=2089933): Backport 110191 Re-enable Kubelet Pod Readiness Probes on Termination and Pod probes should be handled by pod worker [#1285](https://github.com/openshift/kubernetes/pull/1285)
* [Bug 2087685](https://bugzilla.redhat.com/show_bug.cgi?id=2087685): Worker Latency Profiles: Config node object validation for extreme profile transition [#1287](https://github.com/openshift/kubernetes/pull/1287)
* [Bug 2065749](https://bugzilla.redhat.com/show_bug.cgi?id=2065749): UPSTREAM: 109103: cpu/memory manager containerMap memory leak [#1229](https://github.com/openshift/kubernetes/pull/1229)
* [Bug 2094954](https://bugzilla.redhat.com/show_bug.cgi?id=2094954): UPSTREAM: 110258: Fix pod eviction ip [#1282](https://github.com/openshift/kubernetes/pull/1282)
* UPSTREAM: <carry>: provide unique reason for pod probe event during t… [#1281](https://github.com/openshift/kubernetes/pull/1281)
* [Bug 2086092](https://bugzilla.redhat.com/show_bug.cgi?id=2086092): UPSTREAM: 108284: fix: exclude non-ready nodes and deleted nodes from azure load balancers [#1261](https://github.com/openshift/kubernetes/pull/1261)
* Fixes probe readiness shutdowns [#1269](https://github.com/openshift/kubernetes/pull/1269)
* [Bug 2086092](https://bugzilla.redhat.com/show_bug.cgi?id=2086092): update kube to v1.24.0 [#1252](https://github.com/openshift/kubernetes/pull/1252)
* [Bug 2086519](https://bugzilla.redhat.com/show_bug.cgi?id=2086519): UPSTREAM: <carry>: e2e-framework: don't autosync PodSecurity labels [#1268](https://github.com/openshift/kubernetes/pull/1268)
* [Bug 2062459](https://bugzilla.redhat.com/show_bug.cgi?id=2062459): Identify if there are multiple schedulers running [#1251](https://github.com/openshift/kubernetes/pull/1251)
* [Bug 2075621](https://bugzilla.redhat.com/show_bug.cgi?id=2075621): UPSTREAM: 109487: Disable JobTrackingWithFinalizers due to unresolved bug [#1243](https://github.com/openshift/kubernetes/pull/1243)
* [Bug 1999325](https://bugzilla.redhat.com/show_bug.cgi?id=1999325): Backport 107821 and 107831 [#1225](https://github.com/openshift/kubernetes/pull/1225)
* UPSTREAM: 109283: test/e2e/*: use restricted policy by default, default existing tests to privileged [#1238](https://github.com/openshift/kubernetes/pull/1238)
* [Bug 2051985](https://bugzilla.redhat.com/show_bug.cgi?id=2051985): UPSTREAM: <carry>: An APIRequestCount without dots in the name can cause a panic [#1172](https://github.com/openshift/kubernetes/pull/1172)
* [Bug 2066865](https://bugzilla.redhat.com/show_bug.cgi?id=2066865): Skip azure topology tests [#1230](https://github.com/openshift/kubernetes/pull/1230)
* UPSTREAM: 106454: test/e2e: fix e2e tests for restricted policy [#1227](https://github.com/openshift/kubernetes/pull/1227)
* Revert "UPSTREAM: <carry>: Unskip OCP SDN related tests" [#1228](https://github.com/openshift/kubernetes/pull/1228)
* bump apiserver-library-go [#1218](https://github.com/openshift/kubernetes/pull/1218)
* UPSTREAM: <carry>: update list of deprecated apis [#1204](https://github.com/openshift/kubernetes/pull/1204)
* UPSTREAM: 106454: test/e2e: fix e2e tests for restricted policy [#1226](https://github.com/openshift/kubernetes/pull/1226)
* [Bug 1957668](https://bugzilla.redhat.com/show_bug.cgi?id=1957668): UPSTREAM: <carry>: use console-public config map for console redirect [#1110](https://github.com/openshift/kubernetes/pull/1110)
* UPSTREAM: 106454: test/e2e: fix e2e tests for restricted policy [#1212](https://github.com/openshift/kubernetes/pull/1212)
* [Bug 2022507](https://bugzilla.redhat.com/show_bug.cgi?id=2022507): Backport 108366: OutofCpu Fixes [#1199](https://github.com/openshift/kubernetes/pull/1199)
* [Bug 1945329](https://bugzilla.redhat.com/show_bug.cgi?id=1945329): enable should drop INVALID conntrack entries test [#897](https://github.com/openshift/kubernetes/pull/897)
* [Bug 2063938](https://bugzilla.redhat.com/show_bug.cgi?id=2063938): UPSTREAM: <carry>: use hardcoded rest mapper from library-go [#1215](https://github.com/openshift/kubernetes/pull/1215)
* [Bug 2062459](https://bugzilla.redhat.com/show_bug.cgi?id=2062459): Generate event when cache update is failed [#1210](https://github.com/openshift/kubernetes/pull/1210)
* UPSTREAM:<carry>:Unskip OCP SDN related tests [#1201](https://github.com/openshift/kubernetes/pull/1201)
* [Bug 2034958](https://bugzilla.redhat.com/show_bug.cgi?id=2034958): enable "Conntrack should be able to preserve UDP traffic when initial… [#1197](https://github.com/openshift/kubernetes/pull/1197)
* UPSTREAM: 106454: SQUASH: test/e2e: let e2e tests specify pod security admiss… [#1128](https://github.com/openshift/kubernetes/pull/1128)
* [Bug 2040715](https://bugzilla.redhat.com/show_bug.cgi?id=2040715): UPSTREAM: 108284: fix: exclude non-ready nodes from azure load balancer [#1190](https://github.com/openshift/kubernetes/pull/1190)
* UPSTREAM: <drop>: zero-diff to pick up tags for versions [#1193](https://github.com/openshift/kubernetes/pull/1193)
* [Bug 2040715](https://bugzilla.redhat.com/show_bug.cgi?id=2040715): upstream 108149: do not return early in the node informer when there is no change [#1184](https://github.com/openshift/kubernetes/pull/1184)
* [Bug 2040533](https://bugzilla.redhat.com/show_bug.cgi?id=2040533): UPSTREAM: <drop>: Ignore container notfound error while getPodstatuses [#1176](https://github.com/openshift/kubernetes/pull/1176)
* [Bug 2040533](https://bugzilla.redhat.com/show_bug.cgi?id=2040533): UPSTREAM: 107900: Pods that have terminated before starting should not block startup [#1157](https://github.com/openshift/kubernetes/pull/1157)
* UPSTREAM: 107847: service REST: Call Decorator(old) on update path [#1156](https://github.com/openshift/kubernetes/pull/1156)
* [Bug 1979671](https://bugzilla.redhat.com/show_bug.cgi?id=1979671): UPSTREAM <carry>: Remove pod warning annotation when workload partitioning is disabled [#977](https://github.com/openshift/kubernetes/pull/977)
* [Bug 2044824](https://bugzilla.redhat.com/show_bug.cgi?id=2044824): UPSTREAM: 107786: Ensure the execHostnameTest() compares hostnames [#1153](https://github.com/openshift/kubernetes/pull/1153)
* [Bug 2044347](https://bugzilla.redhat.com/show_bug.cgi?id=2044347): bump to k8s 1.23.3 [#1145](https://github.com/openshift/kubernetes/pull/1145)
* [Bug 2039539](https://bugzilla.redhat.com/show_bug.cgi?id=2039539): Revert "UPSTREAM: <drop>: revert upstream PR 106306" [#1143](https://github.com/openshift/kubernetes/pull/1143)
* [Bug 2041583](https://bugzilla.redhat.com/show_bug.cgi?id=2041583): UPSTREAM: <carry>: set correctly static pods CPUs when workload partitioning is disabled [#1136](https://github.com/openshift/kubernetes/pull/1136)
* [Bug 2040533](https://bugzilla.redhat.com/show_bug.cgi?id=2040533): UPSTREAM: 107695: kubelet: fix podstatus not containing pod full name [#1140](https://github.com/openshift/kubernetes/pull/1140)
* [Bug 2039539](https://bugzilla.redhat.com/show_bug.cgi?id=2039539): UPSTREAM: <drop>: revert upstream PR 106306 [#1130](https://github.com/openshift/kubernetes/pull/1130)
* [Bug 2022824](https://bugzilla.redhat.com/show_bug.cgi?id=2022824): Fix the leak of vSphere client sessions [#1104](https://github.com/openshift/kubernetes/pull/1104)
* [Bug 2042169](https://bugzilla.redhat.com/show_bug.cgi?id=2042169): UPSTREAM: <carry>: remove egressnetworkpolicies from gc ignored resources [#1123](https://github.com/openshift/kubernetes/pull/1123)
* [Bug 2040793](https://bugzilla.redhat.com/show_bug.cgi?id=2040793): Fix ordering issues with snapshot e2e [#1119](https://github.com/openshift/kubernetes/pull/1119)
* [Bug 2038968](https://bugzilla.redhat.com/show_bug.cgi?id=2038968): Restore upstream feature gates [#1112](https://github.com/openshift/kubernetes/pull/1112)
* [Bug 2004542](https://bugzilla.redhat.com/show_bug.cgi?id=2004542): UPSTREAM: 89885: SQUASH: Retry fetching clouds.conf [#1099](https://github.com/openshift/kubernetes/pull/1099)
* [Bug 2041641](https://bugzilla.redhat.com/show_bug.cgi?id=2041641): Backport k8s.io/utils fix for a memory leak within the inotify utilities [#1122](https://github.com/openshift/kubernetes/pull/1122)
* [Bug 2042493](https://bugzilla.redhat.com/show_bug.cgi?id=2042493): UPSTREAM 107564: kube-apiserver integration test: allow IPs with leading zeros on the API [#1124](https://github.com/openshift/kubernetes/pull/1124)
* [Bug 2039414](https://bugzilla.redhat.com/show_bug.cgi?id=2039414): UPSTREAM: <carry>: allows for switching KS to talk to Kube API over localhost-squash to other [#1121](https://github.com/openshift/kubernetes/pull/1121)
* [Bug 2042493](https://bugzilla.redhat.com/show_bug.cgi?id=2042493): UPSTREAM: <carry>: Fix conformance and serial tests by stopping node cordoning [#1129](https://github.com/openshift/kubernetes/pull/1129)
* [Bug 1933144](https://bugzilla.redhat.com/show_bug.cgi?id=1933144): hardens the aggregated API e2e tests in an HA setup [#1114](https://github.com/openshift/kubernetes/pull/1114)
* [Bug 2001442](https://bugzilla.redhat.com/show_bug.cgi?id=2001442): empty termination.log file for the kube-apiserver has too permissive mode [#1096](https://github.com/openshift/kubernetes/pull/1096)
* [Bug 2034705](https://bugzilla.redhat.com/show_bug.cgi?id=2034705): UPSTREAM 107136: Don't log vSphere configuration data in storage e2e tests [#1098](https://github.com/openshift/kubernetes/pull/1098)
* [Bug 2033751](https://bugzilla.redhat.com/show_bug.cgi?id=2033751): fix -rt builds and copy extensions into resulting image [#1106](https://github.com/openshift/kubernetes/pull/1106)
* [Bug 2033751](https://bugzilla.redhat.com/show_bug.cgi?id=2033751): Kube 1.23.0 rebase [#1087](https://github.com/openshift/kubernetes/pull/1087)
* Switch to go1.17 [#1080](https://github.com/openshift/kubernetes/pull/1080)
* [Bug 2021629](https://bugzilla.redhat.com/show_bug.cgi?id=2021629): UPSTREAM: <carry>: api request counts for current hour are incorrect [#1037](https://github.com/openshift/kubernetes/pull/1037)
* UPSTREAM: 105910: retry PV create in e2e-test on API quota failure [#1078](https://github.com/openshift/kubernetes/pull/1078)
* UPSTREAM: <drop>: revert to go1.16 [#1079](https://github.com/openshift/kubernetes/pull/1079)
* Updating openshift-enterprise-hyperkube images to be consistent with ART [#934](https://github.com/openshift/kubernetes/pull/934)
* UPSTREAM: <drop>: remove creation of openshift-infra ns and recycler SA [#1039](https://github.com/openshift/kubernetes/pull/1039)
* [Bug 2008532](https://bugzilla.redhat.com/show_bug.cgi?id=2008532): Fix subpath sources check [#1065](https://github.com/openshift/kubernetes/pull/1065)
* [Bug 2017276](https://bugzilla.redhat.com/show_bug.cgi?id=2017276): UPSTREAM: 105934: Don't guess SELinux support on error [#1052](https://github.com/openshift/kubernetes/pull/1052)
* Rebase Automation Script [#1040](https://github.com/openshift/kubernetes/pull/1040)
* Updating openshift-enterprise-pod images to be consistent with ART [#933](https://github.com/openshift/kubernetes/pull/933)
* UPSTREAM: <carry>: delay queuing deletion for PV to allow nodes some time to unmount [#1062](https://github.com/openshift/kubernetes/pull/1062)
* [Bug 1978528](https://bugzilla.redhat.com/show_bug.cgi?id=1978528): UPSTREAM: <carry>: bump cadvisor for 2957, 2999 and 2979 upstream patches [#1049](https://github.com/openshift/kubernetes/pull/1049)
* [Bug 2023779](https://bugzilla.redhat.com/show_bug.cgi?id=2023779): Fix patch 104847 [#1059](https://github.com/openshift/kubernetes/pull/1059)
* [Bug 2022811](https://bugzilla.redhat.com/show_bug.cgi?id=2022811): UPSTREAM: 106382: defer close the rotated log open [#1051](https://github.com/openshift/kubernetes/pull/1051)
* [Bug 2007495](https://bugzilla.redhat.com/show_bug.cgi?id=2007495): UPSTREAM: 105213: remove StartedPodsErrorsTotal metrice message [#988](https://github.com/openshift/kubernetes/pull/988)
* [Bug 2021936](https://bugzilla.redhat.com/show_bug.cgi?id=2021936): Read k8s version from hyperkube Dockerfile [#1038](https://github.com/openshift/kubernetes/pull/1038)
* [Bug 2002759](https://bugzilla.redhat.com/show_bug.cgi?id=2002759): UPSTREAM: <carry>: verify required http2 cipher suites [#1022](https://github.com/openshift/kubernetes/pull/1022)
* UPSTREAM: <carry>: update rebase doc [#1031](https://github.com/openshift/kubernetes/pull/1031)
* [Bug 2000216](https://bugzilla.redhat.com/show_bug.cgi?id=2000216): Image policy should mutate DeploymentConfigs, StatefulSets, and new CronJobs [#1014](https://github.com/openshift/kubernetes/pull/1014)
* [Bug 1970331](https://bugzilla.redhat.com/show_bug.cgi?id=1970331): UPSTREAM: <drop>: bump apiserver-library-go [#1017](https://github.com/openshift/kubernetes/pull/1017)
* [Bug 1990190](https://bugzilla.redhat.com/show_bug.cgi?id=1990190): Remove Error Message Check Dynamic PV Tests [#1011](https://github.com/openshift/kubernetes/pull/1011)
* [Bug 2011513](https://bugzilla.redhat.com/show_bug.cgi?id=2011513): kubelet: do not arbitrarily create a podSyncStatus for finished pods [#1007](https://github.com/openshift/kubernetes/pull/1007)
* UPSTREAM: <drop>: bump apiserver-library-go [#1008](https://github.com/openshift/kubernetes/pull/1008)
* [Bug 1997478](https://bugzilla.redhat.com/show_bug.cgi?id=1997478): Ensure terminal pods maintain terminal status [#999](https://github.com/openshift/kubernetes/pull/999)
* [Bug 2010348](https://bugzilla.redhat.com/show_bug.cgi?id=2010348): UPSTREAM: 105352: revert pie build mode [#993](https://github.com/openshift/kubernetes/pull/993)
* UPSTREAM: <carry>: allow SCC to be disabled on a per-namespace basis [#984](https://github.com/openshift/kubernetes/pull/984)
* [Bug 2000754](https://bugzilla.redhat.com/show_bug.cgi?id=2000754): UPSTREAM: 104865: e2e iperf2 change threshold to 10MBps = 80 Mbps [#980](https://github.com/openshift/kubernetes/pull/980)
* [Bug 1965368](https://bugzilla.redhat.com/show_bug.cgi?id=1965368): UPSTREAM: <drop>: bump(apiserver-library-go) [#971](https://github.com/openshift/kubernetes/pull/971)
* Remove Error Message for Unsupported Volume Test [#905](https://github.com/openshift/kubernetes/pull/905)
* Add CSI migration feature gates for vSphere and Azure File [#961](https://github.com/openshift/kubernetes/pull/961)
* etcd-client starts retrying transient errors from the etcd cluster [#959](https://github.com/openshift/kubernetes/pull/959)
* UPSTREAM: <carry>: openshift-hack/images/os/Dockerfile: Add io.openshift.build.versions, etc. [#963](https://github.com/openshift/kubernetes/pull/963)
* [Bug 2005182](https://bugzilla.redhat.com/show_bug.cgi?id=2005182): UPSTREAM: <carry>: update list of deprecated apis to be removed [#965](https://github.com/openshift/kubernetes/pull/965)
* [Bug 1999133](https://bugzilla.redhat.com/show_bug.cgi?id=1999133): kubelet: Handle UID reuse in pod worker [#938](https://github.com/openshift/kubernetes/pull/938)
* UPSTREAM: <carry>: add control plane to allowed roles [#957](https://github.com/openshift/kubernetes/pull/957)
* UPSTREAM: <drop>: bump openshift, k8s to 1.22.1 [#950](https://github.com/openshift/kubernetes/pull/950)
* [Bug 2003269](https://bugzilla.redhat.com/show_bug.cgi?id=2003269): UPSTREAM: 104817:  kubelet: Rejected pods should be filtered from admission [#948](https://github.com/openshift/kubernetes/pull/948)
* Bugzilla 2001763: UPSTREAM: <carry>: 104437: run etcd healthcheck in the background and… [#893](https://github.com/openshift/kubernetes/pull/893)
* UPSTREAM: 104314: legacy-cloud-providers: aws: Add support for consuming web identity credentials [#927](https://github.com/openshift/kubernetes/pull/927)
* [Bug 1996689](https://bugzilla.redhat.com/show_bug.cgi?id=1996689): Tighten up RestrictedEndpointsAdmission [#899](https://github.com/openshift/kubernetes/pull/899)
* [Bug 1996779](https://bugzilla.redhat.com/show_bug.cgi?id=1996779): Fix bug with goroutine capturing loop variable [#904](https://github.com/openshift/kubernetes/pull/904)
* [Bug 2000451](https://bugzilla.redhat.com/show_bug.cgi?id=2000451): UPSTREAM: <drop>: Disable broken sig-storage test [#925](https://github.com/openshift/kubernetes/pull/925)
* [Bug 1994643](https://bugzilla.redhat.com/show_bug.cgi?id=1994643): UPSTREAM: 104630: remove server option startup-send-retry-after-until… [#922](https://github.com/openshift/kubernetes/pull/922)
* [Bug 1992016](https://bugzilla.redhat.com/show_bug.cgi?id=1992016): UPSTREAM: <carry>: add OPENSHIFT_MAX_HOUSEKEEPING_INTERVAL_DURATION and OPENSHIFT_EVICTION_MONITORING_PERIOD_DURATION [#909](https://github.com/openshift/kubernetes/pull/909)
* [Bug 1994927](https://bugzilla.redhat.com/show_bug.cgi?id=1994927): Revert "Remove Endpoints write access from aggregated edit role" [#908](https://github.com/openshift/kubernetes/pull/908)
* [Bug 1997657](https://bugzilla.redhat.com/show_bug.cgi?id=1997657): UPSTREAM: 104577: kubelet: Admission must exclude completed pods and avoid races [#920](https://github.com/openshift/kubernetes/pull/920)
* [Bug 1948089](https://bugzilla.redhat.com/show_bug.cgi?id=1948089): openshift-apiserver should not set Available=False APIServicesAvailable on update [#915](https://github.com/openshift/kubernetes/pull/915)
* [Bug 1986003](https://bugzilla.redhat.com/show_bug.cgi?id=1986003): Rebase 1.22.1 [#916](https://github.com/openshift/kubernetes/pull/916)
* [Bug 1994643](https://bugzilla.redhat.com/show_bug.cgi?id=1994643): UPSTREAM: <carry>: sets X-OpenShift-Internal-If-Not-Ready HTTP Header for GC and Namespace controllers [#907](https://github.com/openshift/kubernetes/pull/907)
* [Bug 1994643](https://bugzilla.redhat.com/show_bug.cgi?id=1994643): UPSTREAM: <carry>: send Retry-After when not ready with a caller opt in [#906](https://github.com/openshift/kubernetes/pull/906)
* [Bug 1993980](https://bugzilla.redhat.com/show_bug.cgi?id=1993980): UPSTREAM: 104529: [1.22] vendor: bump runc to 1.0.2 [#910](https://github.com/openshift/kubernetes/pull/910)
* [Bug 1948089](https://bugzilla.redhat.com/show_bug.cgi?id=1948089): openshift-apiserver should not set Available=False APIServicesAvailable on update [#903](https://github.com/openshift/kubernetes/pull/903)
* [Bug 1986307](https://bugzilla.redhat.com/show_bug.cgi?id=1986307): UPSTREAM: <carry>: re-enable networking tests [#885](https://github.com/openshift/kubernetes/pull/885)
* [Bug 1995804](https://bugzilla.redhat.com/show_bug.cgi?id=1995804): UPSTREAM: <carry>: rename termination events to use lifecycleSignals [#896](https://github.com/openshift/kubernetes/pull/896)
* [Bug 1950993](https://bugzilla.redhat.com/show_bug.cgi?id=1950993): UPSTREAM: <drop>: bump cadvisor for 2868 and 2925 upstream patches [#892](https://github.com/openshift/kubernetes/pull/892)
* [Bug 1997465](https://bugzilla.redhat.com/show_bug.cgi?id=1997465): UPSTREAM: 104466: bump k8s.io/util to get fix for LRU cache [#898](https://github.com/openshift/kubernetes/pull/898)
* [Bug 1994643](https://bugzilla.redhat.com/show_bug.cgi?id=1994643): UPSTREAM: 104281: send retry-after until the apiserver is ready [#889](https://github.com/openshift/kubernetes/pull/889)
* [Bug 1982868](https://bugzilla.redhat.com/show_bug.cgi?id=1982868): UPSTREAM: <carry>: admission/managementcpusoverride: cover the roll-back case [#877](https://github.com/openshift/kubernetes/pull/877)
* [Bug 1986306](https://bugzilla.redhat.com/show_bug.cgi?id=1986306): Kubectl client kubectl wait should ignore not found error with --for=delete [#891](https://github.com/openshift/kubernetes/pull/891)
* [Bug 1994643](https://bugzilla.redhat.com/show_bug.cgi?id=1994643): UPSTREAM: <carry>: use lifeCycleSignals for isTerminating [#887](https://github.com/openshift/kubernetes/pull/887)
* [Bug 1980118](https://bugzilla.redhat.com/show_bug.cgi?id=1980118): UPSTREAM: <carry>: drop the warning to use --keep-annotations [#860](https://github.com/openshift/kubernetes/pull/860)
* [Bug 1992900](https://bugzilla.redhat.com/show_bug.cgi?id=1992900): Fix build with multiple GOFLAGS [#886](https://github.com/openshift/kubernetes/pull/886)
* [Bug 1986003](https://bugzilla.redhat.com/show_bug.cgi?id=1986003): Bump k8s.io to 1.22.0-rc.0 [#862](https://github.com/openshift/kubernetes/pull/862)
* UPSTREAM: <carry>: prevent the kubecontrollermanager service-ca from getting less secure [#853](https://github.com/openshift/kubernetes/pull/853)
* [Bug 1981477](https://bugzilla.redhat.com/show_bug.cgi?id=1981477): Do not throw error when we can't get canonical path [#817](https://github.com/openshift/kubernetes/pull/817)
* UPSTREAM: <carry>: add a way to inject a vulnerable, legacy service-c… [#852](https://github.com/openshift/kubernetes/pull/852)
* produce events for readyz going true [#807](https://github.com/openshift/kubernetes/pull/807)
* UPSTREAM: <drop>: remove the openshift authenticator from the apiserver [#822](https://github.com/openshift/kubernetes/pull/822)
* UPSTREAM: <drop>: bump(apiserver-library-go) [#846](https://github.com/openshift/kubernetes/pull/846)
* UPSTREAM: <carry>: add CSI migration feature gates for GCE PD and Azure Disk [#831](https://github.com/openshift/kubernetes/pull/831)
* UPSTREAM: 103385: Fix Multi-AZ test [#837](https://github.com/openshift/kubernetes/pull/837)
* [Bug 1977920](https://bugzilla.redhat.com/show_bug.cgi?id=1977920): Ensure scc compatibility with BoundServiceAccountTokenVolume [#841](https://github.com/openshift/kubernetes/pull/841)
* UPSTREAM: 103050: Bug 1975325: Fix NodeAuthenticator tests in dual stack [#823](https://github.com/openshift/kubernetes/pull/823)
* Updating openshift-enterprise-hyperkube images to be consistent with ART [#814](https://github.com/openshift/kubernetes/pull/814)
* [Bug 1976379](https://bugzilla.redhat.com/show_bug.cgi?id=1976379): UPSTREAM: <carry>: Reject the pod creation when we can not decide the cluster type [#832](https://github.com/openshift/kubernetes/pull/832)
* Updating openshift-enterprise-pod images to be consistent with ART [#812](https://github.com/openshift/kubernetes/pull/812)
* UPSTREAM: <carry>: update rebase doc [#824](https://github.com/openshift/kubernetes/pull/824)
* [Bug 1975283](https://bugzilla.redhat.com/show_bug.cgi?id=1975283): update Multi-AZ Cluster Volumes test name [#825](https://github.com/openshift/kubernetes/pull/825)
* UPSTREAM: <carry>: update rebase doc [#818](https://github.com/openshift/kubernetes/pull/818)
* UPSTREAM: <carry>: crd: add ClusterOperator condition message table column [#810](https://github.com/openshift/kubernetes/pull/810)
* [Bug 1971745](https://bugzilla.redhat.com/show_bug.cgi?id=1971745): only chown if non-windows machine with projected volumes [#804](https://github.com/openshift/kubernetes/pull/804)
* [Full changelog](https://github.com/openshift/kubernetes/compare/8b969e704241724b962a28da47f0224d09985959...)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/)

* [OCPBUGS-24791](https://issues.redhat.com/browse/OCPBUGS-24791): Updating golang-github-openshift-oauth-proxy-container image to be consistent with ART [#270](https://github.com/openshift/oauth-proxy/pull/270)
* [OCPBUGS-21718](https://issues.redhat.com/browse/OCPBUGS-21718): go.mod: bump golang.org/x/net to v0.17.0 [#266](https://github.com/openshift/oauth-proxy/pull/266)
* [OCPBUGS-18858](https://issues.redhat.com/browse/OCPBUGS-18858): Updating golang-github-openshift-oauth-proxy images to be consistent with ART [#265](https://github.com/openshift/oauth-proxy/pull/265)
* [OCPBUGS-16459](https://issues.redhat.com/browse/OCPBUGS-16459): bump kube and lib-go to get rid of goproxy dep [#260](https://github.com/openshift/oauth-proxy/pull/260)
* fix route apiVersion [#257](https://github.com/openshift/oauth-proxy/pull/257)
* Updating golang-github-openshift-oauth-proxy images to be consistent with ART [#251](https://github.com/openshift/oauth-proxy/pull/251)
* [APPSRE-7970](https://issues.redhat.com/browse/APPSRE-7970): Add support for configuring upstream timeout [#258](https://github.com/openshift/oauth-proxy/pull/258)
* [OCPBUGS-14033](https://issues.redhat.com/browse/OCPBUGS-14033): Handle TERM signal gracefully [#255](https://github.com/openshift/oauth-proxy/pull/255)
* [AUTH-373](https://issues.redhat.com/browse/AUTH-373): add audit-ID headers to TokenReview and SAR requests [#252](https://github.com/openshift/oauth-proxy/pull/252)
* Update logo [#245](https://github.com/openshift/oauth-proxy/pull/245)
* fix json examples for --openshift-delegate-urls [#203](https://github.com/openshift/oauth-proxy/pull/203)
* Use resourceName in Openshift SAR rule [#243](https://github.com/openshift/oauth-proxy/pull/243)
* Updating golang-github-openshift-oauth-proxy images to be consistent with ART [#241](https://github.com/openshift/oauth-proxy/pull/241)
* [Bug 2026860](https://bugzilla.redhat.com/show_bug.cgi?id=2026860): ocp provider: don't fail client creation if oauth-server cert is not present [#238](https://github.com/openshift/oauth-proxy/pull/238)
* Golang bump 1.17 [#235](https://github.com/openshift/oauth-proxy/pull/235)
* [Bug 1966298](https://bugzilla.redhat.com/show_bug.cgi?id=1966298): Update golang.org/x/net [#223](https://github.com/openshift/oauth-proxy/pull/223)
* [Bug 1986810](https://bugzilla.redhat.com/show_bug.cgi?id=1986810): trust the oauth-server when constructing a client to OpenShift [#220](https://github.com/openshift/oauth-proxy/pull/220)
* [Bug 1980235](https://bugzilla.redhat.com/show_bug.cgi?id=1980235): deprecate version [#218](https://github.com/openshift/oauth-proxy/pull/218)
* Updating golang-github-openshift-oauth-proxy images to be consistent with ART [#216](https://github.com/openshift/oauth-proxy/pull/216)
* Updating .ci-operator.yaml `build_root_image` from openshift/release [#215](https://github.com/openshift/oauth-proxy/pull/215)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/3fc0d89b2607808927f5b48168342f5dc3a1a271...)


### [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/)

* [OSASINFRA-3437](https://issues.redhat.com/browse/OSASINFRA-3437): Rebase on CAPO v0.10 [#305](https://github.com/openshift/cluster-api-provider-openstack/pull/305)
* [OCPBUGS-31277](https://issues.redhat.com/browse/OCPBUGS-31277): Updating openstack-cluster-api-controllers-container image to be consistent with ART for 4.16 [#301](https://github.com/openshift/cluster-api-provider-openstack/pull/301)
* 🐛 Persist API FloatingIP immediately on creation [#1831](https://github.com/openshift/cluster-api-provider-openstack/pull/1831)
* :bug: Fix patching OpenstackMachine's immutable spec during reconcile [#1819](https://github.com/openshift/cluster-api-provider-openstack/pull/1819)
* ✨ Add flags for configuring rate limits [#1817](https://github.com/openshift/cluster-api-provider-openstack/pull/1817)
* :bug: Fix potential panic during instance create [#1806](https://github.com/openshift/cluster-api-provider-openstack/pull/1806)
* 🐛 Revert "Move FloatingIP to Bastion spec" [#1783](https://github.com/openshift/cluster-api-provider-openstack/pull/1783)
* 🌱 Import CAPI v1.6.0 [#1780](https://github.com/openshift/cluster-api-provider-openstack/pull/1780)
* 🌱 Bump version artifacts for release-0.9 [#1775](https://github.com/openshift/cluster-api-provider-openstack/pull/1775)
* 🐛 Verify success of parsing OpenStack cloud cacert [#1770](https://github.com/openshift/cluster-api-provider-openstack/pull/1770)
* 📖 Fix network-related docs for API v1alpha7 [#1764](https://github.com/openshift/cluster-api-provider-openstack/pull/1764)
* 🌱 Remove Containerfile and Dockerfile experimental [#1760](https://github.com/openshift/cluster-api-provider-openstack/pull/1760)
* 🌱 Fix log message typo [#1758](https://github.com/openshift/cluster-api-provider-openstack/pull/1758)
* 🐛  Update e2e testing image of CAPI version from 1.5.0 to 1.5.1 [#1754](https://github.com/openshift/cluster-api-provider-openstack/pull/1754)
* 🐛Fix missing endpoint type in OpenStack endpoint clients configuration [#1744](https://github.com/openshift/cluster-api-provider-openstack/pull/1744)
* ✨remove flavor check to relief restrictions to CPU [#1745](https://github.com/openshift/cluster-api-provider-openstack/pull/1745)
* ⚠️ Move FloatingIP to Bastion spec [#1739](https://github.com/openshift/cluster-api-provider-openstack/pull/1739)
* ⚠️  Bump Go to 1.20.10 [#1740](https://github.com/openshift/cluster-api-provider-openstack/pull/1740)
* ✨ Add ephemeral storage support to the AdditionalBlockDevices [#1696](https://github.com/openshift/cluster-api-provider-openstack/pull/1696)
* ✨ Use kustomize new syntax for patches [#1735](https://github.com/openshift/cluster-api-provider-openstack/pull/1735)
* ✨ Add cache on provider scope [#1688](https://github.com/openshift/cluster-api-provider-openstack/pull/1688)
* 🌱 deps: Bump dependencies [#1733](https://github.com/openshift/cluster-api-provider-openstack/pull/1733)
* 🌱 Enable k8s upgrade in self hosted test [#1732](https://github.com/openshift/cluster-api-provider-openstack/pull/1732)
* 🌱 Use k8s v1.28 in tests [#1723](https://github.com/openshift/cluster-api-provider-openstack/pull/1723)
* 🐛 Don't remove BYO api server loadbalancer floating IP [#1728](https://github.com/openshift/cluster-api-provider-openstack/pull/1728)
* 🌱 Replace kustomize vars with replacements [#1726](https://github.com/openshift/cluster-api-provider-openstack/pull/1726)
* 🌱 e2e: dump cinder volumes [#1722](https://github.com/openshift/cluster-api-provider-openstack/pull/1722)
* 🌱 Ignore go workspaces [#1724](https://github.com/openshift/cluster-api-provider-openstack/pull/1724)
* 🌱 E2e: Use pre-build node images [#1699](https://github.com/openshift/cluster-api-provider-openstack/pull/1699)
* ✨ Add option to customize private network MTU [#1701](https://github.com/openshift/cluster-api-provider-openstack/pull/1701)
* :seedling: ci: bump Flatcar tested version [#1713](https://github.com/openshift/cluster-api-provider-openstack/pull/1713)
* 🌱 ci: Several CI fixes [#1718](https://github.com/openshift/cluster-api-provider-openstack/pull/1718)
* ✨ Add server name for the Machine InternalDNS [#1715](https://github.com/openshift/cluster-api-provider-openstack/pull/1715)
* 🌱 Bump devstack image to ubuntu 22.04 [#1716](https://github.com/openshift/cluster-api-provider-openstack/pull/1716)
* 🌱 Add explicit dependency on github.com/golang/mock/mockgen/model [#1712](https://github.com/openshift/cluster-api-provider-openstack/pull/1712)
* 🌱 Allow custom KUBEBUILDER_ASSETS_DIR in tests [#1710](https://github.com/openshift/cluster-api-provider-openstack/pull/1710)
* 🌱 Ignore vendor directories in boilerplate check [#1709](https://github.com/openshift/cluster-api-provider-openstack/pull/1709)
* 🌱 Build setup-envtest in hack/tools [#1707](https://github.com/openshift/cluster-api-provider-openstack/pull/1707)
* 🌱 Bump ginkgo [#1705](https://github.com/openshift/cluster-api-provider-openstack/pull/1705)
* :sparkles: Additional data volumes for machines [#1668](https://github.com/openshift/cluster-api-provider-openstack/pull/1668)
* 🌱 gitignore: ignore vendor/ directory [#1690](https://github.com/openshift/cluster-api-provider-openstack/pull/1690)
* 🌱 Move webhook CA injection into webhook resource [#1686](https://github.com/openshift/cluster-api-provider-openstack/pull/1686)
* Update Gophercloud to 1.7.0 [#1682](https://github.com/openshift/cluster-api-provider-openstack/pull/1682)
* 🐛 Only delete all ports when deleting cluster network [#1680](https://github.com/openshift/cluster-api-provider-openstack/pull/1680)
* :book: Clarify release notes content for releases and pre-releases [#1678](https://github.com/openshift/cluster-api-provider-openstack/pull/1678)
* 🌱 Remove defaulter-gen [#1677](https://github.com/openshift/cluster-api-provider-openstack/pull/1677)
* :book:  doc/development: add devstack notes [#1569](https://github.com/openshift/cluster-api-provider-openstack/pull/1569)
* 🌱 Add test for getOrCreate [#1673](https://github.com/openshift/cluster-api-provider-openstack/pull/1673)
* Set failure only on instance error when no nodeRef [#1637](https://github.com/openshift/cluster-api-provider-openstack/pull/1637)
* 🌱Fix various issues with CRD generation [#1669](https://github.com/openshift/cluster-api-provider-openstack/pull/1669)
* ✨Allow changing allowAllInClusterTraffic in a deployed cluster [#1663](https://github.com/openshift/cluster-api-provider-openstack/pull/1663)
* avoid duplicate error event [#1655](https://github.com/openshift/cluster-api-provider-openstack/pull/1655)
* 🌱Bump CAPI to v1.5.1 [#1666](https://github.com/openshift/cluster-api-provider-openstack/pull/1666)
* 🌱Structured logging migration of instance.go, service.go, floatingip.go, and securitygroups.go [#1631](https://github.com/openshift/cluster-api-provider-openstack/pull/1631)
* Fix v1alpha6 -> v1alpha7 idempotence [#1626](https://github.com/openshift/cluster-api-provider-openstack/pull/1626)
* 🐛 Don't fail when deleting non-existing port [#1660](https://github.com/openshift/cluster-api-provider-openstack/pull/1660)
* 🐛 Fix panic on delete before cluster is initialised [#1657](https://github.com/openshift/cluster-api-provider-openstack/pull/1657)
* 🐛Fix failing clusterctl upgrade test (second attempt) [#1661](https://github.com/openshift/cluster-api-provider-openstack/pull/1661)
* 🐛Fix failing clusterctl upgrade test [#1659](https://github.com/openshift/cluster-api-provider-openstack/pull/1659)
* 🌱 Bump golangci-lint to 1.54.2 [#1652](https://github.com/openshift/cluster-api-provider-openstack/pull/1652)
* 🐛 fix port cleanup when using CAPO-created cluster network [#1651](https://github.com/openshift/cluster-api-provider-openstack/pull/1651)
* :bug: Fix Port Leaks [#1648](https://github.com/openshift/cluster-api-provider-openstack/pull/1648)
* 🌱 Update verbosity levels in instance.go [#1635](https://github.com/openshift/cluster-api-provider-openstack/pull/1635)
* 📖 Fix APIVersion to use existing router with OpenStackCluster [#1638](https://github.com/openshift/cluster-api-provider-openstack/pull/1638)
* 🌱 Migrate pkg/cloud/services/networking/network.go and router.go to structured logging [#1624](https://github.com/openshift/cluster-api-provider-openstack/pull/1624)
* 🐛  Fix application credential support in env.rc [#1646](https://github.com/openshift/cluster-api-provider-openstack/pull/1646)
* 🌱Remove APIServerLoadBalancer.Provider Up Conversion [#1642](https://github.com/openshift/cluster-api-provider-openstack/pull/1642)
* 🌱Migrate controllers/openstackcluster_controller.go to structured logging [#1630](https://github.com/openshift/cluster-api-provider-openstack/pull/1630)
* :seedling: Migrating /pkg/cloud/services/loadbalancer/loadbalancer.go and /controllers/openstackmachine_controller.go to structured logging [#1621](https://github.com/openshift/cluster-api-provider-openstack/pull/1621)
* ✨ Add `--version` flag [#1641](https://github.com/openshift/cluster-api-provider-openstack/pull/1641)
* ✨ Add support to IPv6 in Machine's status [#1633](https://github.com/openshift/cluster-api-provider-openstack/pull/1633)
* 🌱 chore: use capo cluster agent for API requests [#1614](https://github.com/openshift/cluster-api-provider-openstack/pull/1614)
* ✨ Update to CAPI 1.5 [#1600](https://github.com/openshift/cluster-api-provider-openstack/pull/1600)
* 🌱 Simplify types of Instance.SecurityGroup and Instance.Networks [#1625](https://github.com/openshift/cluster-api-provider-openstack/pull/1625)
* remove subnet from the output in `kubectl get` [#1609](https://github.com/openshift/cluster-api-provider-openstack/pull/1609)
* :sparkles: Allow Use of Public CAs [#1610](https://github.com/openshift/cluster-api-provider-openstack/pull/1610)
* :seedling: ci: bump flatcar to latest stable [#1607](https://github.com/openshift/cluster-api-provider-openstack/pull/1607)
* 📖 Add link to book in README [#1602](https://github.com/openshift/cluster-api-provider-openstack/pull/1602)
* 🌱 Add metadata for release 0.8 [#1601](https://github.com/openshift/cluster-api-provider-openstack/pull/1601)
* ⚠️ Update NetworkStatus ready for dual stack [#1577](https://github.com/openshift/cluster-api-provider-openstack/pull/1577)
* 🌱 E2e: Unify machine log collection [#1595](https://github.com/openshift/cluster-api-provider-openstack/pull/1595)
* 🌱 E2e: Bump the tested Kubernetes versions [#1594](https://github.com/openshift/cluster-api-provider-openstack/pull/1594)
* 🌱 E2e: Implement LogCollector interface [#1581](https://github.com/openshift/cluster-api-provider-openstack/pull/1581)
* ✨ Allowing update of OpenstackCluster API server fixed IP [#1590](https://github.com/openshift/cluster-api-provider-openstack/pull/1590)
* :sparkles: Add additional sec group rule for additionalPorts of LB [#1592](https://github.com/openshift/cluster-api-provider-openstack/pull/1592)
* do not set failure reason/message when LB not created [#1591](https://github.com/openshift/cluster-api-provider-openstack/pull/1591)
* 🌱 Replace github.com/pkg/errors [#1585](https://github.com/openshift/cluster-api-provider-openstack/pull/1585)
* 🌱 dependencies: Bump Go stdlib [#1584](https://github.com/openshift/cluster-api-provider-openstack/pull/1584)
* 🐛 Fix deadlock [#1579](https://github.com/openshift/cluster-api-provider-openstack/pull/1579)
* 🌱 Bump Kubernetes version used in e2e tests [#1571](https://github.com/openshift/cluster-api-provider-openstack/pull/1571)
* ⚠️ Remove ProjectID from PortOpts [#1575](https://github.com/openshift/cluster-api-provider-openstack/pull/1575)
* 🐛 Always filter cluster subnets by cluster network ID [#1572](https://github.com/openshift/cluster-api-provider-openstack/pull/1572)
* 🌱 E2e: Bump clusterctl upgrade to start from v0.7.2 [#1568](https://github.com/openshift/cluster-api-provider-openstack/pull/1568)
* :warning: Transform `Profile` into an interface [#1560](https://github.com/openshift/cluster-api-provider-openstack/pull/1560)
* 🌱 Set provider ID through kubelet in ubuntu templates [#1551](https://github.com/openshift/cluster-api-provider-openstack/pull/1551)
* ⚠️Remove last uses of TenantID and pagination filters [#1563](https://github.com/openshift/cluster-api-provider-openstack/pull/1563)
* :seedling: Deprecate v1alpha5 [#1561](https://github.com/openshift/cluster-api-provider-openstack/pull/1561)
* :seedling: bump docker distribution to 2.8.2+incompatible [#1562](https://github.com/openshift/cluster-api-provider-openstack/pull/1562)
* ⚠️ Replace SubnetParam with SubnetFilter [#1559](https://github.com/openshift/cluster-api-provider-openstack/pull/1559)
* ⚠️ Replace SecurityGroupParam with SecurityGroupFilter [#1557](https://github.com/openshift/cluster-api-provider-openstack/pull/1557)
* 🌱Remove unused fields from ExternalNetwork [#1555](https://github.com/openshift/cluster-api-provider-openstack/pull/1555)
* 🌱Remove PortOpts from Network [#1550](https://github.com/openshift/cluster-api-provider-openstack/pull/1550)
* 🌱 Reduce the Bastion status to only fields which are used [#1546](https://github.com/openshift/cluster-api-provider-openstack/pull/1546)
* ⚠️ Remove PortOpts.SecurityGroups [#1516](https://github.com/openshift/cluster-api-provider-openstack/pull/1516)
* Use dl.k8s.io instead of kubernetes-release bucket [#1542](https://github.com/openshift/cluster-api-provider-openstack/pull/1542)
* Fix OWNERS_ALIASES syntax error [#1543](https://github.com/openshift/cluster-api-provider-openstack/pull/1543)
* Update external approvers [#1536](https://github.com/openshift/cluster-api-provider-openstack/pull/1536)
* ⚠️ Remove Networks [#1518](https://github.com/openshift/cluster-api-provider-openstack/pull/1518)
* Add lentzi90 to cluster-api-openstack-maintainers [#1537](https://github.com/openshift/cluster-api-provider-openstack/pull/1537)
* ⚠️ Remove v1alpha3 and v1alpha4 [#1527](https://github.com/openshift/cluster-api-provider-openstack/pull/1527)
* Update linter to v1.52.2 [#1534](https://github.com/openshift/cluster-api-provider-openstack/pull/1534)
* 🌱 Remove creation of 2 Events for the same event [#1531](https://github.com/openshift/cluster-api-provider-openstack/pull/1531)
* 🐛 Patch: Backport Provider to v1alpha6 [#1530](https://github.com/openshift/cluster-api-provider-openstack/pull/1530)
* 🐛 Improve `env.rc` and `create_cloud_conf.sh` templates [#1381](https://github.com/openshift/cluster-api-provider-openstack/pull/1381)
* ✨ Support propagate uplink status [#1481](https://github.com/openshift/cluster-api-provider-openstack/pull/1481)
* ✨Infer port network from subnet [#1519](https://github.com/openshift/cluster-api-provider-openstack/pull/1519)
* :seedling: ci: bump flatcar to latest major stable [#1524](https://github.com/openshift/cluster-api-provider-openstack/pull/1524)
* 🌱 bump docker to 20.10.24+incompatible [#1525](https://github.com/openshift/cluster-api-provider-openstack/pull/1525)
* :warning: flatcar: make external-cloud-provider-flatcar the default one [#1522](https://github.com/openshift/cluster-api-provider-openstack/pull/1522)
* :seedling: pull cluster-api@v1.4.1 [#1521](https://github.com/openshift/cluster-api-provider-openstack/pull/1521)
* ⚠️ Deprecate In-tree Cloud Provider [#1514](https://github.com/openshift/cluster-api-provider-openstack/pull/1514)
* 🌱 Bump gophercloud to v1.3.0 [#1520](https://github.com/openshift/cluster-api-provider-openstack/pull/1520)
* :sparkles:  Add RouterName for use existing router [#1370](https://github.com/openshift/cluster-api-provider-openstack/pull/1370)
* Restore APIServerLoadBalancer.Provider on up-conversion [#1517](https://github.com/openshift/cluster-api-provider-openstack/pull/1517)
* 📖 Document removal of OpenStackMachineSpec.Subnet [#1515](https://github.com/openshift/cluster-api-provider-openstack/pull/1515)
* 🌱 Un-pointer PortOpts.SecurityGroups [#1511](https://github.com/openshift/cluster-api-provider-openstack/pull/1511)
* ✨Add Octavia OVN Provider Support [#1501](https://github.com/openshift/cluster-api-provider-openstack/pull/1501)
* Add dulek to reviewers [#1512](https://github.com/openshift/cluster-api-provider-openstack/pull/1512)
* ⚠️Remove OpenStackMachineSpec.Subnet [#1504](https://github.com/openshift/cluster-api-provider-openstack/pull/1504)
* 🌱 Add fuzzy conversion tests for v1alpha6 [#1509](https://github.com/openshift/cluster-api-provider-openstack/pull/1509)
* :book: docs/configuration: add Flatcar to OS section [#1503](https://github.com/openshift/cluster-api-provider-openstack/pull/1503)
* :bug: e2e: refresh packages list before install containerd [#1507](https://github.com/openshift/cluster-api-provider-openstack/pull/1507)
* :sparkles: templates: add flatcar template [#1444](https://github.com/openshift/cluster-api-provider-openstack/pull/1444)
* 📖 Add documentation for creating local test environments [#1500](https://github.com/openshift/cluster-api-provider-openstack/pull/1500)
* 🐛 fix: allow using multiattach volume types [#1498](https://github.com/openshift/cluster-api-provider-openstack/pull/1498)
* ⚠️ Add v1alpha7 [#1497](https://github.com/openshift/cluster-api-provider-openstack/pull/1497)
* ✨ Support value specs for Ports [#1452](https://github.com/openshift/cluster-api-provider-openstack/pull/1452)
* fix: fix typo of worker rules and controller rules [#1492](https://github.com/openshift/cluster-api-provider-openstack/pull/1492)
* 🐛 Switch to "4" instead of "ipip" for rules [#1489](https://github.com/openshift/cluster-api-provider-openstack/pull/1489)
* :bug: Fix Provisioning to Unavailable AZs [#1479](https://github.com/openshift/cluster-api-provider-openstack/pull/1479)
* 🐛 uplift golang and x/net [#1482](https://github.com/openshift/cluster-api-provider-openstack/pull/1482)
* Fix "internal ip doesn't exist (yet)" in e2e logs [#1474](https://github.com/openshift/cluster-api-provider-openstack/pull/1474)
* Remove the resource and machine tickers from e2e tests [#1471](https://github.com/openshift/cluster-api-provider-openstack/pull/1471)
* Fix boilerplate linter [#1473](https://github.com/openshift/cluster-api-provider-openstack/pull/1473)
* Download golangci-lint instead of building it [#1470](https://github.com/openshift/cluster-api-provider-openstack/pull/1470)
* 🌱 Bump gophercloud to v1.2.0 [#1463](https://github.com/openshift/cluster-api-provider-openstack/pull/1463)
* 📖 Add documentation about --ca-cert flag [#1467](https://github.com/openshift/cluster-api-provider-openstack/pull/1467)
* 🐛 Return from reconciler after adding finalizer [#1464](https://github.com/openshift/cluster-api-provider-openstack/pull/1464)
* ✨ Add Tags to API-Loadbalancer resources [#1457](https://github.com/openshift/cluster-api-provider-openstack/pull/1457)
* 🐛 Fix Tilt by adding CAPO label in tilt-provider.json [#1430](https://github.com/openshift/cluster-api-provider-openstack/pull/1430)
* Add e2e remediation tests [#1380](https://github.com/openshift/cluster-api-provider-openstack/pull/1380)
* 🌱 Add e2e self hosted test [#1428](https://github.com/openshift/cluster-api-provider-openstack/pull/1428)
* Envtest mocks [#1236](https://github.com/openshift/cluster-api-provider-openstack/pull/1236)
* 🌱 Bump ginkgo to v2.7.0 and sync with hack/tools [#1460](https://github.com/openshift/cluster-api-provider-openstack/pull/1460)
* check flavor and reject CPUs less than 2 [#1451](https://github.com/openshift/cluster-api-provider-openstack/pull/1451)
* ✨ add explicit securitycontext to controller [#1461](https://github.com/openshift/cluster-api-provider-openstack/pull/1461)
* 📖 fix path for taggin and serverMetadata in OpenstackMachineTemplates [#1454](https://github.com/openshift/cluster-api-provider-openstack/pull/1454)
* ✨ Add ca-cert flag to supply a default ca certificate for each requests [#1440](https://github.com/openshift/cluster-api-provider-openstack/pull/1440)
* 🌱 Use newer containerd in e2e tests [#1456](https://github.com/openshift/cluster-api-provider-openstack/pull/1456)
* 🌱 E2e: Use plain ubuntu cloud image [#1441](https://github.com/openshift/cluster-api-provider-openstack/pull/1441)
* 🐛 fix nil-pointer in initial reconciliation loop with empty status field [#1445](https://github.com/openshift/cluster-api-provider-openstack/pull/1445)
* 🌱Add log to provide more info in case error happen [#1443](https://github.com/openshift/cluster-api-provider-openstack/pull/1443)
* 🌱Be more robust when checking gophercloud errors in IsNotFound [#1432](https://github.com/openshift/cluster-api-provider-openstack/pull/1432)
* 🐛 uplift x/net to 0.4.0 [#1427](https://github.com/openshift/cluster-api-provider-openstack/pull/1427)
* 🌱Bump CAPI to v1.3.1 [#1424](https://github.com/openshift/cluster-api-provider-openstack/pull/1424)
* ✨Add lentzi90 to reviewers [#1421](https://github.com/openshift/cluster-api-provider-openstack/pull/1421)
* :book: Fix spelling errors on docs [#1418](https://github.com/openshift/cluster-api-provider-openstack/pull/1418)
* 🌱 e2e: Change logging to avoid use of By [#1417](https://github.com/openshift/cluster-api-provider-openstack/pull/1417)
* 🌱 Remove It block from clusterctl upgrade [#1412](https://github.com/openshift/cluster-api-provider-openstack/pull/1412)
* ✨ Bump CAPI to v1.3.0 [#1406](https://github.com/openshift/cluster-api-provider-openstack/pull/1406)
* 🌱Release 0.7 patches [#1405](https://github.com/openshift/cluster-api-provider-openstack/pull/1405)
* 🐛 Update Ubuntu, CirrOS & Amphora image [#1408](https://github.com/openshift/cluster-api-provider-openstack/pull/1408)
* 🌱 Add e2e clusterctl upgrade tests [#1371](https://github.com/openshift/cluster-api-provider-openstack/pull/1371)
* 🌱 Bump Gophercloud to v1.1.0 [#1402](https://github.com/openshift/cluster-api-provider-openstack/pull/1402)
* 🌱 scripts: replace apt with apt-get [#1401](https://github.com/openshift/cluster-api-provider-openstack/pull/1401)
* 🌱 Tag current e2e tests as PR-Blocking [#1390](https://github.com/openshift/cluster-api-provider-openstack/pull/1390)
* 🐛 Allow UDP traffic over nodeports [#1396](https://github.com/openshift/cluster-api-provider-openstack/pull/1396)
* 🌱Ensure we capture early devstack logs [#1399](https://github.com/openshift/cluster-api-provider-openstack/pull/1399)
* 🐛 Don't enable router-ovn service in CI deployments [#1400](https://github.com/openshift/cluster-api-provider-openstack/pull/1400)
* 🐛 Decrease initial backoff for Floating IP operations [#1386](https://github.com/openshift/cluster-api-provider-openstack/pull/1386)
* 🐛 Fix Octavia versions endpoint [#1385](https://github.com/openshift/cluster-api-provider-openstack/pull/1385)
* 🐛 openstackmachine: do not set transient error message and reason [#1301](https://github.com/openshift/cluster-api-provider-openstack/pull/1301)
* 🐛 fix: improve load balancer health checks [#1375](https://github.com/openshift/cluster-api-provider-openstack/pull/1375)
* 🌱 Synchronize versions between Makefile, Containerfile, e2e and go.mod [#1369](https://github.com/openshift/cluster-api-provider-openstack/pull/1369)
* :book: Add more infomation to run e2e test in locally [#1362](https://github.com/openshift/cluster-api-provider-openstack/pull/1362)
* Fix accesIPv4 checking [#1366](https://github.com/openshift/cluster-api-provider-openstack/pull/1366)
* switch version from float to int [#1281](https://github.com/openshift/cluster-api-provider-openstack/pull/1281)
* 🌱 CI: Clean openstack volumes [#1364](https://github.com/openshift/cluster-api-provider-openstack/pull/1364)
* 🌱 Bump CAPI to v1.2.4 [#1361](https://github.com/openshift/cluster-api-provider-openstack/pull/1361)
* ✨ Enable additional linters and metalinter checks. Fix findings [#1359](https://github.com/openshift/cluster-api-provider-openstack/pull/1359)
* 🌱 Remove unnecessary mock import aliases [#1357](https://github.com/openshift/cluster-api-provider-openstack/pull/1357)
* 🐛 Don't require cinder when not using volumes [#1353](https://github.com/openshift/cluster-api-provider-openstack/pull/1353)
* 🌱 Add the cluster templates back [#1354](https://github.com/openshift/cluster-api-provider-openstack/pull/1354)
* 🌱 Update golangci-lint (v1.46.2 -> v1.50.0), remove deprecated linters [#1342](https://github.com/openshift/cluster-api-provider-openstack/pull/1342)
* 🐛 Don't require an InstanceSpec for DeleteInstance [#1350](https://github.com/openshift/cluster-api-provider-openstack/pull/1350)
* ci: Pin to the yoga version of openstackclient [#1352](https://github.com/openshift/cluster-api-provider-openstack/pull/1352)
* ✨ Allow for omitting AZ from control plane nodes [#1318](https://github.com/openshift/cluster-api-provider-openstack/pull/1318)
* 🌱 Group Makefile targets [#1343](https://github.com/openshift/cluster-api-provider-openstack/pull/1343)
* doc: update calico location [#1338](https://github.com/openshift/cluster-api-provider-openstack/pull/1338)
* update doc to make it more clear [#1335](https://github.com/openshift/cluster-api-provider-openstack/pull/1335)
* 🐛 fix nilpointer during clusterctl move [#1340](https://github.com/openshift/cluster-api-provider-openstack/pull/1340)
* update k8s to 1.25 [#1330](https://github.com/openshift/cluster-api-provider-openstack/pull/1330)
* 🌱 remove apricote from reviewers [#1333](https://github.com/openshift/cluster-api-provider-openstack/pull/1333)
* 📖 update README to include Yoga [#1331](https://github.com/openshift/cluster-api-provider-openstack/pull/1331)
* update devstack release [#1329](https://github.com/openshift/cluster-api-provider-openstack/pull/1329)
* 🌱 add merge strategy markers [#1325](https://github.com/openshift/cluster-api-provider-openstack/pull/1325)
* 🌱 gce-project.sh: loop over all GCP zones during instance creation [#1324](https://github.com/openshift/cluster-api-provider-openstack/pull/1324)
* :bug: Add security groups to ports only [#1319](https://github.com/openshift/cluster-api-provider-openstack/pull/1319)
* 📖 Update PlantUML version (1.2020.16 -> 1.2022.6) [#1321](https://github.com/openshift/cluster-api-provider-openstack/pull/1321)
* ✨ Conditions for OpenStackMachines [#1288](https://github.com/openshift/cluster-api-provider-openstack/pull/1288)
* 🐛 Fix go1.19 linting errors [#1313](https://github.com/openshift/cluster-api-provider-openstack/pull/1313)
* 🌱 Ensure that python and pip is installed for e2e and conformance tests [#1309](https://github.com/openshift/cluster-api-provider-openstack/pull/1309)
* not assign floating ip when there are multiple controller nodes [#1276](https://github.com/openshift/cluster-api-provider-openstack/pull/1276)
* 🐛 Update calico manifest for e2e testing [#1307](https://github.com/openshift/cluster-api-provider-openstack/pull/1307)
* ✨ Add re-creation of bastion host on change [#1303](https://github.com/openshift/cluster-api-provider-openstack/pull/1303)
* e2e test: add more dump output [#1304](https://github.com/openshift/cluster-api-provider-openstack/pull/1304)
* 🐛 Fix conformance tests [#1305](https://github.com/openshift/cluster-api-provider-openstack/pull/1305)
* refactory sec group code (for additional CNI support) [#1299](https://github.com/openshift/cluster-api-provider-openstack/pull/1299)
* 🌱 Bump CAPI to v1.2.0 [#1302](https://github.com/openshift/cluster-api-provider-openstack/pull/1302)
* 🌱 Set ginkgo.timeout in our kubetest config [#1297](https://github.com/openshift/cluster-api-provider-openstack/pull/1297)
* 🌱 bump to capi v1.2.0-rc.0 [#1295](https://github.com/openshift/cluster-api-provider-openstack/pull/1295)
* 🌱 only reconcile loadbalancer member if machine is control-plane [#1294](https://github.com/openshift/cluster-api-provider-openstack/pull/1294)
* ✨ Enable JSON Logging [#1296](https://github.com/openshift/cluster-api-provider-openstack/pull/1296)
* replace "4" with "ipip" [#1290](https://github.com/openshift/cluster-api-provider-openstack/pull/1290)
* ✨ Bump to CAPI v1.2.0-beta.1 [#1283](https://github.com/openshift/cluster-api-provider-openstack/pull/1283)
* 🐛 Fix logger arguments [#1284](https://github.com/openshift/cluster-api-provider-openstack/pull/1284)
* Fix generation of e2e-templates when running conformance tests [#1287](https://github.com/openshift/cluster-api-provider-openstack/pull/1287)
* 📖 add v1alpha6 breaking changes book page [#1285](https://github.com/openshift/cluster-api-provider-openstack/pull/1285)
* 🌱 Generate cluster templates with kustomize [#1271](https://github.com/openshift/cluster-api-provider-openstack/pull/1271)
* 🐛 delete port left over by err openstackmachine [#1260](https://github.com/openshift/cluster-api-provider-openstack/pull/1260)
* Add Age column for osc/osm [#1279](https://github.com/openshift/cluster-api-provider-openstack/pull/1279)
* ✨ Add v1alpha6 API types [#1272](https://github.com/openshift/cluster-api-provider-openstack/pull/1272)
* use 1.24 as test env [#1277](https://github.com/openshift/cluster-api-provider-openstack/pull/1277)
* update doc to reflect latest version, add helm link [#1275](https://github.com/openshift/cluster-api-provider-openstack/pull/1275)
* nit:make event to log for already associated FIP [#1268](https://github.com/openshift/cluster-api-provider-openstack/pull/1268)
* 📖 Instance create timeout is in minutes [#1267](https://github.com/openshift/cluster-api-provider-openstack/pull/1267)
* 🐛 Make failure domain optional for OpenStackMachine [#1263](https://github.com/openshift/cluster-api-provider-openstack/pull/1263)
* ✨ Feature: restrict API Server LB access via IPs [#1247](https://github.com/openshift/cluster-api-provider-openstack/pull/1247)
* :sparkles: bump golangci-lint version to v1.46.2 [#1258](https://github.com/openshift/cluster-api-provider-openstack/pull/1258)
* cleanup: remove used file [#1243](https://github.com/openshift/cluster-api-provider-openstack/pull/1243)
* Passing security groups by specifying more options in addition to UUIDs on ports [#1246](https://github.com/openshift/cluster-api-provider-openstack/pull/1246)
* 🐛 implement conversion for OpenStackClusterTemplate CRD [#1249](https://github.com/openshift/cluster-api-provider-openstack/pull/1249)
* refactory test code (reuse existing function) [#1194](https://github.com/openshift/cluster-api-provider-openstack/pull/1194)
* 🏃 Add tests for cluster controller [#1199](https://github.com/openshift/cluster-api-provider-openstack/pull/1199)
* 🐛 remove webhooks for old APIversion v1alpha4 [#1240](https://github.com/openshift/cluster-api-provider-openstack/pull/1240)
* 🌱 Fix ginkgo warnings [#1239](https://github.com/openshift/cluster-api-provider-openstack/pull/1239)
* 🌱 Remove macaptain from cluster-api-openstack-reviewers [#1237](https://github.com/openshift/cluster-api-provider-openstack/pull/1237)
* move chrischdi to emeritus_approvers [#1233](https://github.com/openshift/cluster-api-provider-openstack/pull/1233)
* :bug: Fix nil pointer reference during bastion deletion [#1231](https://github.com/openshift/cluster-api-provider-openstack/pull/1231)
* :seedling: Update RELEASE.md process for release branches [#1228](https://github.com/openshift/cluster-api-provider-openstack/pull/1228)
* 🏃 update PR icon template to match CAPI [#1229](https://github.com/openshift/cluster-api-provider-openstack/pull/1229)
* 📖 allow up to 20 tabs in book [#1224](https://github.com/openshift/cluster-api-provider-openstack/pull/1224)
* 🌱 Add release 0.6.x to metadata.yaml [#1226](https://github.com/openshift/cluster-api-provider-openstack/pull/1226)
* 🐛Don't set ImageRef on server when booting from volume [#1225](https://github.com/openshift/cluster-api-provider-openstack/pull/1225)
* 🐛Fix conversion of boot from volume images [#1223](https://github.com/openshift/cluster-api-provider-openstack/pull/1223)
* 🐛 always wait for active Loadbalancer after getOrCreate [#1200](https://github.com/openshift/cluster-api-provider-openstack/pull/1200)
* 📖 Document CRD changes from v1alpha4 to v1alpha5 [#1216](https://github.com/openshift/cluster-api-provider-openstack/pull/1216)
* 🐛 controllers/openstackcluster_controller.go fix nil pointer and dump openstack ports [#1217](https://github.com/openshift/cluster-api-provider-openstack/pull/1217)
* Improve log message [#1202](https://github.com/openshift/cluster-api-provider-openstack/pull/1202)
* 🐛  bump CAPI to v1.1.3 [#1209](https://github.com/openshift/cluster-api-provider-openstack/pull/1209)
* 🏃Remove prankul88 as a reviewer [#1213](https://github.com/openshift/cluster-api-provider-openstack/pull/1213)
* 🏃 Add apricote as a reviewer [#1212](https://github.com/openshift/cluster-api-provider-openstack/pull/1212)
* 📖 replace dead link for cloud.conf details [#1211](https://github.com/openshift/cluster-api-provider-openstack/pull/1211)
* ⚠️ rename v1beta1 to v1alpha5 [#1198](https://github.com/openshift/cluster-api-provider-openstack/pull/1198)
* address CVE-2022-27191 [#1204](https://github.com/openshift/cluster-api-provider-openstack/pull/1204)
* ✨ Support Application Credential auth [#1189](https://github.com/openshift/cluster-api-provider-openstack/pull/1189)
* ✨Refactor CreateInstance and CreateBastion [#1191](https://github.com/openshift/cluster-api-provider-openstack/pull/1191)
* ⚠️ move loadbalancer opts to struct [#1187](https://github.com/openshift/cluster-api-provider-openstack/pull/1187)
* 🏃 Explain mutability of bastion configuration in CRD [#1190](https://github.com/openshift/cluster-api-provider-openstack/pull/1190)
* 🏃 Enable controller tests [#1183](https://github.com/openshift/cluster-api-provider-openstack/pull/1183)
* 🐛 Install sshuttle using pip instead of from source [#1185](https://github.com/openshift/cluster-api-provider-openstack/pull/1185)
* 🏃 Add Scopes to pass data to services [#1178](https://github.com/openshift/cluster-api-provider-openstack/pull/1178)
* 🐛 Address CVE-2022-21698 [#1182](https://github.com/openshift/cluster-api-provider-openstack/pull/1182)
* 🐛 upgrade golangci-lint for go 1.18 support [#1184](https://github.com/openshift/cluster-api-provider-openstack/pull/1184)
* ✨Export GetFloatingIP [#1179](https://github.com/openshift/cluster-api-provider-openstack/pull/1179)
* Add unit test for trunk [#1172](https://github.com/openshift/cluster-api-provider-openstack/pull/1172)
* 📖update doc to talk about microversion [#1161](https://github.com/openshift/cluster-api-provider-openstack/pull/1161)
* 🐛 Fix event target of floating ip operations [#1177](https://github.com/openshift/cluster-api-provider-openstack/pull/1177)
* Fix flaky UT on gate [#1175](https://github.com/openshift/cluster-api-provider-openstack/pull/1175)
* Remove `internal` AZ special handling [#1168](https://github.com/openshift/cluster-api-provider-openstack/pull/1168)
* 🐛 Clean up removed AvailabilityZones from `OpenStackCluster.status.failureDomains` [#1165](https://github.com/openshift/cluster-api-provider-openstack/pull/1165)
* 📖 add info about office hours to README and Book [#1167](https://github.com/openshift/cluster-api-provider-openstack/pull/1167)
* move CI to xena [#1158](https://github.com/openshift/cluster-api-provider-openstack/pull/1158)
* 🐛 api/v1beta1/openstackmachine_types.go: change errorReason/errorMessage to failureReason/failureMessage [#1150](https://github.com/openshift/cluster-api-provider-openstack/pull/1150)
* ✨Remove FIXME (adjust the comment and code both) [#1157](https://github.com/openshift/cluster-api-provider-openstack/pull/1157)
* 🐛 containerfile: Bump Go version [#1156](https://github.com/openshift/cluster-api-provider-openstack/pull/1156)
* 🏃 devstack: Allow empty private SSH key [#1144](https://github.com/openshift/cluster-api-provider-openstack/pull/1144)
* Make hidekazuna emeritus [#1152](https://github.com/openshift/cluster-api-provider-openstack/pull/1152)
* Avoid set failMessage when bastion creation failed [#1138](https://github.com/openshift/cluster-api-provider-openstack/pull/1138)
* 🏃 OWNERS: satisfy the maintainers tool [#1123](https://github.com/openshift/cluster-api-provider-openstack/pull/1123)
* manager.yaml: enable metrics endpoint [#1141](https://github.com/openshift/cluster-api-provider-openstack/pull/1141)
* 📖 Document external repositories referencing CAPO owners [#1142](https://github.com/openshift/cluster-api-provider-openstack/pull/1142)
* bump CAPI to v1.1.0 [#1137](https://github.com/openshift/cluster-api-provider-openstack/pull/1137)
* Add test for trunk feature [#1128](https://github.com/openshift/cluster-api-provider-openstack/pull/1128)
* 🐛Bump CAPI to v1.0.4 [#1136](https://github.com/openshift/cluster-api-provider-openstack/pull/1136)
* ✨  Ensure trunk deletion [#1125](https://github.com/openshift/cluster-api-provider-openstack/pull/1125)
* ✨Service interface load balancer [#1119](https://github.com/openshift/cluster-api-provider-openstack/pull/1119)
* 🐛 Prevent creation of floating IPs when reconcile load balancer in non ACTIVE state [#1115](https://github.com/openshift/cluster-api-provider-openstack/pull/1115)
* Remove duplicate tags before making API calls [#1112](https://github.com/openshift/cluster-api-provider-openstack/pull/1112)
* iamemilio resigns as a reviewer [#1113](https://github.com/openshift/cluster-api-provider-openstack/pull/1113)
* Document running CI devstack on CentOS [#1108](https://github.com/openshift/cluster-api-provider-openstack/pull/1108)
* ✨Cinder AZ and volume type support [#1030](https://github.com/openshift/cluster-api-provider-openstack/pull/1030)
* ✨  improve log entry for ReplaceAllAttributesTags [#1110](https://github.com/openshift/cluster-api-provider-openstack/pull/1110)
* 🐛  Avoid replacing tags when no tags are provided. [#1107](https://github.com/openshift/cluster-api-provider-openstack/pull/1107)
* Delete trunk on failure [#1095](https://github.com/openshift/cluster-api-provider-openstack/pull/1095)
* Allow image uuid to be used in instanceSpec [#1101](https://github.com/openshift/cluster-api-provider-openstack/pull/1101)
* 📖nit: update doc to include spec [#1102](https://github.com/openshift/cluster-api-provider-openstack/pull/1102)
* 🐛update log to make it clear (LB member  instead of LB) [#1104](https://github.com/openshift/cluster-api-provider-openstack/pull/1104)
* 🐛 loadbalancer service: fix metric name for member list [#1097](https://github.com/openshift/cluster-api-provider-openstack/pull/1097)
* 🏃 Migrate CI to Wallaby [#1091](https://github.com/openshift/cluster-api-provider-openstack/pull/1091)
* Fail fast without create port at all [#1094](https://github.com/openshift/cluster-api-provider-openstack/pull/1094)
* 🐛 fix loadbalancer service to reconcile all ports instead of returning at the first [#1089](https://github.com/openshift/cluster-api-provider-openstack/pull/1089)
* Update .golangci.yml [#1090](https://github.com/openshift/cluster-api-provider-openstack/pull/1090)
* :book: Update documentation according to clusterctl sub command changes [#1088](https://github.com/openshift/cluster-api-provider-openstack/pull/1088)
* 🌱 Standardize api import aliases [#1082](https://github.com/openshift/cluster-api-provider-openstack/pull/1082)
* Update OWNERS file [#1084](https://github.com/openshift/cluster-api-provider-openstack/pull/1084)
* 🏃Fix generated clouds.yaml for local e2e tests [#1069](https://github.com/openshift/cluster-api-provider-openstack/pull/1069)
* 🏃Add new maintainers and reviewers [#1083](https://github.com/openshift/cluster-api-provider-openstack/pull/1083)
* :sparkles: Port rework [#1059](https://github.com/openshift/cluster-api-provider-openstack/pull/1059)
* 🏃 Fix SECURITY_CONTACTS [#1080](https://github.com/openshift/cluster-api-provider-openstack/pull/1080)
* ✨ Allow webhook changes to OpenStackCluster.Spec.Bastion [#1070](https://github.com/openshift/cluster-api-provider-openstack/pull/1070)
* images: use k8s-staging-test-infra/gcb-docker-gcloud [#1068](https://github.com/openshift/cluster-api-provider-openstack/pull/1068)
* 🐛Cleanup ports [#1063](https://github.com/openshift/cluster-api-provider-openstack/pull/1063)
* :sparkles:  Add tags on security groups created by capo [#1053](https://github.com/openshift/cluster-api-provider-openstack/pull/1053)
* 🐛Fix conversion of IdentityRef converting between v1alpha4 and v1beta1 [#1066](https://github.com/openshift/cluster-api-provider-openstack/pull/1066)
* 📖 Update configuration document [#1056](https://github.com/openshift/cluster-api-provider-openstack/pull/1056)
* ✨Add unit tests for compute service [#1061](https://github.com/openshift/cluster-api-provider-openstack/pull/1061)
* 🐛update logic to support more instance state [#909](https://github.com/openshift/cluster-api-provider-openstack/pull/909)
* 🏃 Delete unused annotation [#1057](https://github.com/openshift/cluster-api-provider-openstack/pull/1057)
* 🐛Fixes for running E2E tests locally against devstack on OpenStack [#1048](https://github.com/openshift/cluster-api-provider-openstack/pull/1048)
* 🏃 Fix conversion-gen in Makefile [#1052](https://github.com/openshift/cluster-api-provider-openstack/pull/1052)
* 📖 Update version support [#1055](https://github.com/openshift/cluster-api-provider-openstack/pull/1055)
* 🏃 Move sbueringer to emeritus maintainers [#1058](https://github.com/openshift/cluster-api-provider-openstack/pull/1058)
* ✨ Bump golangci-lint to 1.43.0 [#1042](https://github.com/openshift/cluster-api-provider-openstack/pull/1042)
* 📖 Update RELEASE document [#1051](https://github.com/openshift/cluster-api-provider-openstack/pull/1051)
* 📖 Fix yaml example [#1050](https://github.com/openshift/cluster-api-provider-openstack/pull/1050)
* ✨ Add v1beta1 API types [#1047](https://github.com/openshift/cluster-api-provider-openstack/pull/1047)
* 🐛Pull Calico from quay.io instead of docker.io [#1049](https://github.com/openshift/cluster-api-provider-openstack/pull/1049)
* ✨ Update CAPI to v1beta1 [#1041](https://github.com/openshift/cluster-api-provider-openstack/pull/1041)
* ✨ Remove ensure kind binary script from repository [#1036](https://github.com/openshift/cluster-api-provider-openstack/pull/1036)
* 🐛 Fix image push in Makefile for image-push jobs [#1039](https://github.com/openshift/cluster-api-provider-openstack/pull/1039)
* ✨E2E error logging improvements [#1032](https://github.com/openshift/cluster-api-provider-openstack/pull/1032)
* Check trunk support before enabling trunk at port level [#1014](https://github.com/openshift/cluster-api-provider-openstack/pull/1014)
* ✨ Change default branch to "main" [#1031](https://github.com/openshift/cluster-api-provider-openstack/pull/1031)
* ✨ Add tags to portOpts [#1027](https://github.com/openshift/cluster-api-provider-openstack/pull/1027)
* ✨Devstack on openstack and multi-AZ support [#1026](https://github.com/openshift/cluster-api-provider-openstack/pull/1026)
* 🏃 Add unit tests for getOrCreatePort func [#1020](https://github.com/openshift/cluster-api-provider-openstack/pull/1020)
* Port Tagging Regression [#1016](https://github.com/openshift/cluster-api-provider-openstack/pull/1016)
* 🐛 Fix typo in delete server log [#1025](https://github.com/openshift/cluster-api-provider-openstack/pull/1025)
* 📖 Fix typo in OPENSTACK_CLOUD_CACERT_B64 example [#1018](https://github.com/openshift/cluster-api-provider-openstack/pull/1018)
* ✨ controllers: replace context.TODO with real context objects [#1019](https://github.com/openshift/cluster-api-provider-openstack/pull/1019)
* 🏃update e2e container to latest cluster-api [#1010](https://github.com/openshift/cluster-api-provider-openstack/pull/1010)
* ✨Return all NodeAddresses in OpenStackMachine.Status.Addresses [#1004](https://github.com/openshift/cluster-api-provider-openstack/pull/1004)
* 🏃 Bump calico from v3.18.1 to v3.20.1 [#1015](https://github.com/openshift/cluster-api-provider-openstack/pull/1015)
* 🐛 Don't make unnecessary REST API calls in getServerNetworks [#994](https://github.com/openshift/cluster-api-provider-openstack/pull/994)
* ✨Allow update for some param only first time update [#1012](https://github.com/openshift/cluster-api-provider-openstack/pull/1012)
* ✨Add webhook of openstackcluster, no update allowed for now [#1006](https://github.com/openshift/cluster-api-provider-openstack/pull/1006)
* 🏃 Standardize metrics in networking package [#1003](https://github.com/openshift/cluster-api-provider-openstack/pull/1003)
* :sparkles: Allow clusters without a floating IP for the API server [#973](https://github.com/openshift/cluster-api-provider-openstack/pull/973)
* :sparkles: Implement allowAllInClusterTraffic flag [#998](https://github.com/openshift/cluster-api-provider-openstack/pull/998)
* 🏃 Move deletePorts back to compute package [#1002](https://github.com/openshift/cluster-api-provider-openstack/pull/1002)
* ✨Add InstanceStatus.AvailabilityZone() [#992](https://github.com/openshift/cluster-api-provider-openstack/pull/992)
* 📖 Add book link to README [#996](https://github.com/openshift/cluster-api-provider-openstack/pull/996)
* 🏃 Refactor all network client calls into networking package [#950](https://github.com/openshift/cluster-api-provider-openstack/pull/950)
* :bug: Add alpha3 Resources to Scheme [#985](https://github.com/openshift/cluster-api-provider-openstack/pull/985)
* ⚠️ Don't overwrite openstackcluster.status.network on reconciliation [#989](https://github.com/openshift/cluster-api-provider-openstack/pull/989)
* ✨Document running E2E tests locally [#982](https://github.com/openshift/cluster-api-provider-openstack/pull/982)
* :bug: Fix Conversion from alpha3 to alpha4 [#986](https://github.com/openshift/cluster-api-provider-openstack/pull/986)
* ✨Enhancements for running E2E tests locally [#981](https://github.com/openshift/cluster-api-provider-openstack/pull/981)
* only use loadbalaner reference if needed [#978](https://github.com/openshift/cluster-api-provider-openstack/pull/978)
* ✨ Allow Trunk configuration at a Port level [#934](https://github.com/openshift/cluster-api-provider-openstack/pull/934)
* fix gate lint issue [#980](https://github.com/openshift/cluster-api-provider-openstack/pull/980)
* Update flavor usage of e2e test [#977](https://github.com/openshift/cluster-api-provider-openstack/pull/977)
* Add gc for error instance's port [#975](https://github.com/openshift/cluster-api-provider-openstack/pull/975)
* :sparkles: Refactor: Don't use infrav1.Instance internally [#971](https://github.com/openshift/cluster-api-provider-openstack/pull/971)
* ✨ Cleanup and refactor InstanceExists and DeleteInstance [#960](https://github.com/openshift/cluster-api-provider-openstack/pull/960)
* getOrCreatePort: add support to configure port Profile [#964](https://github.com/openshift/cluster-api-provider-openstack/pull/964)
* update from v1alpha3 to v1alpha4 in Makefile [#970](https://github.com/openshift/cluster-api-provider-openstack/pull/970)
* 🏃Return error if instance go error [#967](https://github.com/openshift/cluster-api-provider-openstack/pull/967)
* 🐛 bump controller-runtime to 0.9.6 to fix webhook tls errors [#969](https://github.com/openshift/cluster-api-provider-openstack/pull/969)
* 📖Add port security doc [#958](https://github.com/openshift/cluster-api-provider-openstack/pull/958)
* 📖 Add netlify.toml to publish our book [#963](https://github.com/openshift/cluster-api-provider-openstack/pull/963)
* 🐛 ignore Conflict status in order to make instance able to detach interface [#962](https://github.com/openshift/cluster-api-provider-openstack/pull/962)
* 📖Fix broken link [#957](https://github.com/openshift/cluster-api-provider-openstack/pull/957)
* 🐛 Fix failure to create server with specified tags [#924](https://github.com/openshift/cluster-api-provider-openstack/pull/924)
* ✨ Apply Port Security to Ports [#921](https://github.com/openshift/cluster-api-provider-openstack/pull/921)
* ✨ Add webhook readiness and health checks [#955](https://github.com/openshift/cluster-api-provider-openstack/pull/955)
* 🐛 openstackcluster reconciliation: reset .Status.failureMessage and .Status.FailureReason on success [#953](https://github.com/openshift/cluster-api-provider-openstack/pull/953)
* ✨ Do not update fip if its already mapped correct [#947](https://github.com/openshift/cluster-api-provider-openstack/pull/947)
* ✨ Add mock client and 2 tests for networking package [#935](https://github.com/openshift/cluster-api-provider-openstack/pull/935)
* 📖  improve release documentation [#946](https://github.com/openshift/cluster-api-provider-openstack/pull/946)
* ✨ Fix Webhook names for OpenStackMachineTemplate and OpenStackCluster [#945](https://github.com/openshift/cluster-api-provider-openstack/pull/945)
* ✨ Add OpenStackClusterTemplates Type [#933](https://github.com/openshift/cluster-api-provider-openstack/pull/933)
* 📖 Adjust README.md to fit v0.4.0 and bump k8s to v1.21.3 [#944](https://github.com/openshift/cluster-api-provider-openstack/pull/944)
* ✨ Add conversion for SecretReference to string [#937](https://github.com/openshift/cluster-api-provider-openstack/pull/937)
* 🐛 Wait for ports creation in ports e2e test [#938](https://github.com/openshift/cluster-api-provider-openstack/pull/938)
* Use the kubernetesversions package of the cluster-api repo again [#905](https://github.com/openshift/cluster-api-provider-openstack/pull/905)
* 🐛 Remove the ttl flag from sshuttle invocation [#941](https://github.com/openshift/cluster-api-provider-openstack/pull/941)
* Revert "reassociate Floating IP if first associate fails" [#939](https://github.com/openshift/cluster-api-provider-openstack/pull/939)
* Add failure fields in OpestackCluster status section [#893](https://github.com/openshift/cluster-api-provider-openstack/pull/893)
* ✨ Add GET gophercloud metrics [#932](https://github.com/openshift/cluster-api-provider-openstack/pull/932)
* reassociate Floating IP if first associate fails [#930](https://github.com/openshift/cluster-api-provider-openstack/pull/930)
* ✨ add description and tag to floating ips [#925](https://github.com/openshift/cluster-api-provider-openstack/pull/925)
* 🏃 sync linter settings with cluster-api repo and fix findings [#923](https://github.com/openshift/cluster-api-provider-openstack/pull/923)
* Rename master to main [#928](https://github.com/openshift/cluster-api-provider-openstack/pull/928)
* 🏃 use amphora image from GCS in e2e tests [#922](https://github.com/openshift/cluster-api-provider-openstack/pull/922)
* ✨Update CAPI to v0.4.0 [#919](https://github.com/openshift/cluster-api-provider-openstack/pull/919)
* 📖 Upgrading a cluster without LBaaS is not supported [#915](https://github.com/openshift/cluster-api-provider-openstack/pull/915)
* 🐛 Don't log nil error when AuthInfo is not set [#916](https://github.com/openshift/cluster-api-provider-openstack/pull/916)
* 🏃 Add test for custom port options feature [#908](https://github.com/openshift/cluster-api-provider-openstack/pull/908)
* 🐛 fixup release targets and update doc accordingly [#903](https://github.com/openshift/cluster-api-provider-openstack/pull/903)
* 🐛 Fix doc about external cloud provider [#904](https://github.com/openshift/cluster-api-provider-openstack/pull/904)
* Add resource shortNames [#894](https://github.com/openshift/cluster-api-provider-openstack/pull/894)
* 🐛 fix release staging target [#902](https://github.com/openshift/cluster-api-provider-openstack/pull/902)
* ✨ Upgrade CAPI to v0.4.0-beta.0 [#901](https://github.com/openshift/cluster-api-provider-openstack/pull/901)
* 📖 Document custom ports feature [#900](https://github.com/openshift/cluster-api-provider-openstack/pull/900)
* :sparkles: add predicates.ResourceIsNotExternallyManaged to cluster controller [#897](https://github.com/openshift/cluster-api-provider-openstack/pull/897)
* ✨ Add feature to create ports with custom options [#876](https://github.com/openshift/cluster-api-provider-openstack/pull/876)
* Fix error logging for OpenStack instance creation [#891](https://github.com/openshift/cluster-api-provider-openstack/pull/891)
* 🐛 Fix event of associate/disassociate floating IP [#880](https://github.com/openshift/cluster-api-provider-openstack/pull/880)
* Add some events related to load balancer [#869](https://github.com/openshift/cluster-api-provider-openstack/pull/869)
* honor server group ID parm [#881](https://github.com/openshift/cluster-api-provider-openstack/pull/881)
* Add metrics of gophercloud (POST,UPDATE and DELETE) actions [#863](https://github.com/openshift/cluster-api-provider-openstack/pull/863)
* 🏃 Validate OpenStackMachineTemplate spec.template.spec immutability [#872](https://github.com/openshift/cluster-api-provider-openstack/pull/872)
* 🏃 Refactor: use Service struct field more [#871](https://github.com/openshift/cluster-api-provider-openstack/pull/871)
* Add seanschneeweiss as reviewer [#874](https://github.com/openshift/cluster-api-provider-openstack/pull/874)
* Add chrischdi as reviewer [#873](https://github.com/openshift/cluster-api-provider-openstack/pull/873)
* 🏃 Add some events and refactor related to instance [#862](https://github.com/openshift/cluster-api-provider-openstack/pull/862)
* Add more logs for LB creation [#867](https://github.com/openshift/cluster-api-provider-openstack/pull/867)
* 📖 Add doc related to log level [#866](https://github.com/openshift/cluster-api-provider-openstack/pull/866)
* Upgrade to latest CAPI version (2021-05-07) [#861](https://github.com/openshift/cluster-api-provider-openstack/pull/861)
* ✨ api/v1alpha4 remove obsolete UserDataSecret field [#865](https://github.com/openshift/cluster-api-provider-openstack/pull/865)
* ✨ Add gophercloud request logs, fix contexts [#860](https://github.com/openshift/cluster-api-provider-openstack/pull/860)
* ✨ adjust loadbalancer wait.Backoff [#853](https://github.com/openshift/cluster-api-provider-openstack/pull/853)
* 🐛 Fix polling deleting instance [#852](https://github.com/openshift/cluster-api-provider-openstack/pull/852)
* set image param as optional for boot from volume [#851](https://github.com/openshift/cluster-api-provider-openstack/pull/851)
* Delete watching Status when deleting [#846](https://github.com/openshift/cluster-api-provider-openstack/pull/846)
* bump tests to Kubernetes 1.20.6 [#849](https://github.com/openshift/cluster-api-provider-openstack/pull/849)
* Wait for instance delete [#845](https://github.com/openshift/cluster-api-provider-openstack/pull/845)
* Cleanup docs changes [#838](https://github.com/openshift/cluster-api-provider-openstack/pull/838)
* 📖 add documentation about postsubmit and nightly images/manifests [#836](https://github.com/openshift/cluster-api-provider-openstack/pull/836)
* 📖Add book build process [#822](https://github.com/openshift/cluster-api-provider-openstack/pull/822)
* 🐛 do not propagate the cloud field to clientconfig.AuthOptions [#829](https://github.com/openshift/cluster-api-provider-openstack/pull/829)
* 🐛 fix conversion-gen [#827](https://github.com/openshift/cluster-api-provider-openstack/pull/827)
* 🏃 Refactor/cleanup load balancer related code [#835](https://github.com/openshift/cluster-api-provider-openstack/pull/835)
* 🏃 Optimize devstack setup on GCP, add a script to setup a devstack on AWS [#800](https://github.com/openshift/cluster-api-provider-openstack/pull/800)
* 🏃 upgrade to latest CAPI version and upgrade/cleanup some other deps [#833](https://github.com/openshift/cluster-api-provider-openstack/pull/833)
* 🏃 Refactor: event consistency [#828](https://github.com/openshift/cluster-api-provider-openstack/pull/828)
* 🐛 fix path of uploaded artifacts [#830](https://github.com/openshift/cluster-api-provider-openstack/pull/830)
* 🏃 publish nightly artifacts [#819](https://github.com/openshift/cluster-api-provider-openstack/pull/819)
* 🏃 Reorder function variables [#820](https://github.com/openshift/cluster-api-provider-openstack/pull/820)
* 🏃 Refactor: Make getLoadBalancerName function [#823](https://github.com/openshift/cluster-api-provider-openstack/pull/823)
* 📖 Remove note about CI [#821](https://github.com/openshift/cluster-api-provider-openstack/pull/821)
* 📖 Update supported version of k8s in Readme [#818](https://github.com/openshift/cluster-api-provider-openstack/pull/818)
* 🏃  Test openstack key in our e2e tests [#815](https://github.com/openshift/cluster-api-provider-openstack/pull/815)
* 🏃 Remove neutron lbaas support [#813](https://github.com/openshift/cluster-api-provider-openstack/pull/813)
* 🐛 Delete bastion if basion.enabled=false [#817](https://github.com/openshift/cluster-api-provider-openstack/pull/817)
* 🏃 Improve ci script patching [#812](https://github.com/openshift/cluster-api-provider-openstack/pull/812)
* 🏃 Add e2e tests for all flavors [#798](https://github.com/openshift/cluster-api-provider-openstack/pull/798)
* fix post-cluster-api-provider-openstack-push-images and add post-submit manifests [#811](https://github.com/openshift/cluster-api-provider-openstack/pull/811)
* 🐛 Fix configuration.md about bastion [#810](https://github.com/openshift/cluster-api-provider-openstack/pull/810)
* 🐛 fix post-cluster-api-provider-openstack-push-images [#809](https://github.com/openshift/cluster-api-provider-openstack/pull/809)
* 🏃 Update golangci-lint and fix most of the linter issues [#797](https://github.com/openshift/cluster-api-provider-openstack/pull/797)
* 📖 Update links for filing new issue [#807](https://github.com/openshift/cluster-api-provider-openstack/pull/807)
* 🏃 Remove unused release note section in the PR template [#806](https://github.com/openshift/cluster-api-provider-openstack/pull/806)
* 🐛 fix conversion gen [#805](https://github.com/openshift/cluster-api-provider-openstack/pull/805)
* 🏃 Implement conformance test via e2e test framework [#782](https://github.com/openshift/cluster-api-provider-openstack/pull/782)
* 🏃 Bump ginkgo version [#803](https://github.com/openshift/cluster-api-provider-openstack/pull/803)
* 🐛 InstanceExists should not do substring search on name [#799](https://github.com/openshift/cluster-api-provider-openstack/pull/799)
* 🐛  Make conversion-gen output location explicit [#802](https://github.com/openshift/cluster-api-provider-openstack/pull/802)
* 🏃 update yq commands to support yq V4 [#792](https://github.com/openshift/cluster-api-provider-openstack/pull/792)
* 🏃 Remove useOctavia from nonha template [#795](https://github.com/openshift/cluster-api-provider-openstack/pull/795)
* 🏃 Remove disablePortSecurity: false from template [#793](https://github.com/openshift/cluster-api-provider-openstack/pull/793)
* 🏃 goimports: fix import order, add local-prefix to linter [#791](https://github.com/openshift/cluster-api-provider-openstack/pull/791)
* Update development guide [#789](https://github.com/openshift/cluster-api-provider-openstack/pull/789)
* 🏃 Add todos to PR template [#786](https://github.com/openshift/cluster-api-provider-openstack/pull/786)
* ✨ pkg/cloud/services/networking/securitygroups.go reimplement reconcilation [#773](https://github.com/openshift/cluster-api-provider-openstack/pull/773)
* ✨ Update klog dependency to v2 [#779](https://github.com/openshift/cluster-api-provider-openstack/pull/779)
* 🏃 migrate conformance test to Prow [#759](https://github.com/openshift/cluster-api-provider-openstack/pull/759)
* 📖  Update configuration doc [#781](https://github.com/openshift/cluster-api-provider-openstack/pull/781)
* Initial impl v1alpha4 [#748](https://github.com/openshift/cluster-api-provider-openstack/pull/748)
* Add support for failureDomain (AZ) for bastion [#757](https://github.com/openshift/cluster-api-provider-openstack/pull/757)
* 🐛Remove start.sh and restart.sh [#761](https://github.com/openshift/cluster-api-provider-openstack/pull/761)
* Fix gate issue (test failure) [#767](https://github.com/openshift/cluster-api-provider-openstack/pull/767)
* 🏃 Update OWNERS files [#766](https://github.com/openshift/cluster-api-provider-openstack/pull/766)
* Fix a doc typo [#762](https://github.com/openshift/cluster-api-provider-openstack/pull/762)
* 🏃 Update pull request template to use /hold per default [#758](https://github.com/openshift/cluster-api-provider-openstack/pull/758)
* :sparkles: AccessSubnetUUID: we can specify source subnet for access IP address [#756](https://github.com/openshift/cluster-api-provider-openstack/pull/756)
* 🐛 use APIServerFloatingIP instead of ControlPlaneEndpoint.Host for LB [#755](https://github.com/openshift/cluster-api-provider-openstack/pull/755)
* Refactory network functions (router.go==>network.go) [#751](https://github.com/openshift/cluster-api-provider-openstack/pull/751)
* 📖 improve RELEASE.md [#747](https://github.com/openshift/cluster-api-provider-openstack/pull/747)
* Fix clusterctl config command [#744](https://github.com/openshift/cluster-api-provider-openstack/pull/744)
* Update sync logic [#736](https://github.com/openshift/cluster-api-provider-openstack/pull/736)
* Fix LoadBalancerMember creation [#737](https://github.com/openshift/cluster-api-provider-openstack/pull/737)
* 🐛 fix rbac aggregation manager role [#743](https://github.com/openshift/cluster-api-provider-openstack/pull/743)
* 🐛  Pass GOPROXY environment variable to Docker image build [#740](https://github.com/openshift/cluster-api-provider-openstack/pull/740)
* 🐛 Add NAMESPACE variable in cluster templates. [#739](https://github.com/openshift/cluster-api-provider-openstack/pull/739)
* 🏃 Revert Merge pull request #725 [#733](https://github.com/openshift/cluster-api-provider-openstack/pull/733)
* 🏃Remove unnecessary field in manager.yaml [#729](https://github.com/openshift/cluster-api-provider-openstack/pull/729)
* Specify --metrics-bind-addr for CAPO manager [#725](https://github.com/openshift/cluster-api-provider-openstack/pull/725)
* update openstack provider format from // to /// [#727](https://github.com/openshift/cluster-api-provider-openstack/pull/727)
* 🏃 Bump CAPI to v0.3.12 [#724](https://github.com/openshift/cluster-api-provider-openstack/pull/724)
* 🐛Ignore not found error when remove router interface [#720](https://github.com/openshift/cluster-api-provider-openstack/pull/720)
* 📖 Add instructions to use cluster template with load-balancer [#703](https://github.com/openshift/cluster-api-provider-openstack/pull/703)
* Fix ca-file path in env.rc [#716](https://github.com/openshift/cluster-api-provider-openstack/pull/716)
* move from 0.3.1 to 0.3.3 in the CI test [#686](https://github.com/openshift/cluster-api-provider-openstack/pull/686)
* :bug: Fix domain_name and domain_id usage in env.rc [#714](https://github.com/openshift/cluster-api-provider-openstack/pull/714)
* 🏃 Refactor loadbalancer package [#710](https://github.com/openshift/cluster-api-provider-openstack/pull/710)
* 🏃Refactor create, delete instance [#711](https://github.com/openshift/cluster-api-provider-openstack/pull/711)
* 🏃 Move ncdc to emeritus status [#708](https://github.com/openshift/cluster-api-provider-openstack/pull/708)
* :bug: Add SecurityGroup to Loadbalancerport when not using octavia [#700](https://github.com/openshift/cluster-api-provider-openstack/pull/700)
* 🐛 Fix SecurityGroupInUse error [#705](https://github.com/openshift/cluster-api-provider-openstack/pull/705)
* Fix nil pointer error for Network [#693](https://github.com/openshift/cluster-api-provider-openstack/pull/693)
* 🏃 Add OpenStack version to bug report template [#696](https://github.com/openshift/cluster-api-provider-openstack/pull/696)
* 📖 fix getting log [#697](https://github.com/openshift/cluster-api-provider-openstack/pull/697)
* 🐛 Delete spec.disableServerTags of OpenStackCluster [#692](https://github.com/openshift/cluster-api-provider-openstack/pull/692)
* ✨ Align flag names with upstream Kubernetes components [#690](https://github.com/openshift/cluster-api-provider-openstack/pull/690)
* update Make method to avoid mismatch [#688](https://github.com/openshift/cluster-api-provider-openstack/pull/688)
* move to capi 0.3.11 [#683](https://github.com/openshift/cluster-api-provider-openstack/pull/683)
* Add cluster-template-external-cloud-provider.yaml into release doc [#682](https://github.com/openshift/cluster-api-provider-openstack/pull/682)
* Add openstack ussuri into support list [#586](https://github.com/openshift/cluster-api-provider-openstack/pull/586)
* Switch CI from U to V release [#680](https://github.com/openshift/cluster-api-provider-openstack/pull/680)
* Move log to creating place [#673](https://github.com/openshift/cluster-api-provider-openstack/pull/673)
* set openstack cluster status for Bastion [#671](https://github.com/openshift/cluster-api-provider-openstack/pull/671)
* 📖  Update how to retrieve kubeconfig [#677](https://github.com/openshift/cluster-api-provider-openstack/pull/677)
* ✨ Add support for Tilt [#666](https://github.com/openshift/cluster-api-provider-openstack/pull/666)
* nit: remove duplicate blanks [#672](https://github.com/openshift/cluster-api-provider-openstack/pull/672)
* 🐛 Fix to delete only automatically created floating IPs [#669](https://github.com/openshift/cluster-api-provider-openstack/pull/669)
* fix location for env.rc file [#665](https://github.com/openshift/cluster-api-provider-openstack/pull/665)
* Add doc update for boot from volume case [#664](https://github.com/openshift/cluster-api-provider-openstack/pull/664)
* Add root volume support (put root volume into instance create param) [#662](https://github.com/openshift/cluster-api-provider-openstack/pull/662)
* 🐛 Update reference to the latest version of CAPO v0.3.1 [#656](https://github.com/openshift/cluster-api-provider-openstack/pull/656)
* Remove USE_PYTHON3 [#660](https://github.com/openshift/cluster-api-provider-openstack/pull/660)
* ✨ Delete automatically created floating IP when deleting cluster [#653](https://github.com/openshift/cluster-api-provider-openstack/pull/653)
* 🏃 Cleanup unused variables [#657](https://github.com/openshift/cluster-api-provider-openstack/pull/657)
* 🏃 Delete spec.kubeadmConfigSpec.ntp.servers in cluster-template-without-lb.yaml [#659](https://github.com/openshift/cluster-api-provider-openstack/pull/659)
* 🏃 Bump Go to v1.13.15 in conformance pr job [#658](https://github.com/openshift/cluster-api-provider-openstack/pull/658)
* 🐛 Fix event message about port ID with associate Floating IP [#655](https://github.com/openshift/cluster-api-provider-openstack/pull/655)
* Remove unnecessary colon [#654](https://github.com/openshift/cluster-api-provider-openstack/pull/654)
* ✨ My594 revised #590 #594 wrong parameter for a user provider network [#610](https://github.com/openshift/cluster-api-provider-openstack/pull/610)
* 📖 Update calico version in documentation [#652](https://github.com/openshift/cluster-api-provider-openstack/pull/652)
* Add openStackMachine.Status.Addresses value [#648](https://github.com/openshift/cluster-api-provider-openstack/pull/648)
* 🏃 Bump CAPI to v0.3.10 [#650](https://github.com/openshift/cluster-api-provider-openstack/pull/650)
* ✨ Add events deleting resources [#645](https://github.com/openshift/cluster-api-provider-openstack/pull/645)
* Add doc for how to move a cluster [#630](https://github.com/openshift/cluster-api-provider-openstack/pull/630)
* 📖 Update external cloud provider URL [#646](https://github.com/openshift/cluster-api-provider-openstack/pull/646)
* Update configuration document [#644](https://github.com/openshift/cluster-api-provider-openstack/pull/644)
* 🏃 Bump Go to 1.13.15 [#640](https://github.com/openshift/cluster-api-provider-openstack/pull/640)
* Add force move of secret cloud config [#636](https://github.com/openshift/cluster-api-provider-openstack/pull/636)
* update cluster-api to 0.3.9 [#639](https://github.com/openshift/cluster-api-provider-openstack/pull/639)
* Refactor creating/deleting instance [#641](https://github.com/openshift/cluster-api-provider-openstack/pull/641)
* Add version into log [#638](https://github.com/openshift/cluster-api-provider-openstack/pull/638)
* default concurrent reconcile from 1 to 10 [#637](https://github.com/openshift/cluster-api-provider-openstack/pull/637)
* ✨ Add bastion host to login the nodes and update non HA template [#619](https://github.com/openshift/cluster-api-provider-openstack/pull/619)
* CI: Wget kubernetes binary be quiet [#632](https://github.com/openshift/cluster-api-provider-openstack/pull/632)
* 📖 Fix Link for external openstack template [#629](https://github.com/openshift/cluster-api-provider-openstack/pull/629)
* Add tags to status [#617](https://github.com/openshift/cluster-api-provider-openstack/pull/617)
* cleanup keys params [#625](https://github.com/openshift/cluster-api-provider-openstack/pull/625)
* nit: update name of `get` output for openstackmachine [#624](https://github.com/openshift/cluster-api-provider-openstack/pull/624)
* 🏃 Add CAPO version to github issue template [#623](https://github.com/openshift/cluster-api-provider-openstack/pull/623)
* 🐛 Fix get openstackcluster to show ENDPOINT value [#620](https://github.com/openshift/cluster-api-provider-openstack/pull/620)
* Rename to capoerrors [#618](https://github.com/openshift/cluster-api-provider-openstack/pull/618)
* Remove Tag creation for ports and add description for it [#596](https://github.com/openshift/cluster-api-provider-openstack/pull/596)
* Add application cred usage [#599](https://github.com/openshift/cluster-api-provider-openstack/pull/599)
* switch to no-admin for CI test [#606](https://github.com/openshift/cluster-api-provider-openstack/pull/606)
* 🐛 Fix e2e test Kubernetes official binaries version [#616](https://github.com/openshift/cluster-api-provider-openstack/pull/616)
* 🏃 Update template for the external cloud provider [#611](https://github.com/openshift/cluster-api-provider-openstack/pull/611)
* update openstack CI test version from T => U [#605](https://github.com/openshift/cluster-api-provider-openstack/pull/605)
* ✨ Use OpenStack key pair instead of KubeadmConfig spec [#607](https://github.com/openshift/cluster-api-provider-openstack/pull/607)
* 🏃 e2e test uses official Kubernetes version [#613](https://github.com/openshift/cluster-api-provider-openstack/pull/613)
* 🏃 Bump Cluster-API to v0.3.8 [#615](https://github.com/openshift/cluster-api-provider-openstack/pull/615)
* Update e2e test and document of non lb case [#608](https://github.com/openshift/cluster-api-provider-openstack/pull/608)
* ✨Add external network discovery [#573](https://github.com/openshift/cluster-api-provider-openstack/pull/573)
* nit: replace return with exit [#602](https://github.com/openshift/cluster-api-provider-openstack/pull/602)
* 📖 Add reference to the external cloud provider doc [#600](https://github.com/openshift/cluster-api-provider-openstack/pull/600)
* 🐛Update mtu size in Makefile [#598](https://github.com/openshift/cluster-api-provider-openstack/pull/598)
* 🏃 Add hidekazuna to reviewer [#597](https://github.com/openshift/cluster-api-provider-openstack/pull/597)
* ✨ Use external cloud provider [#595](https://github.com/openshift/cluster-api-provider-openstack/pull/595)
* Add more logs for debug purpose [#593](https://github.com/openshift/cluster-api-provider-openstack/pull/593)
* nit: Add default egress rule description [#585](https://github.com/openshift/cluster-api-provider-openstack/pull/585)
* Add event for seucrity group [#592](https://github.com/openshift/cluster-api-provider-openstack/pull/592)
* report error if security group not exist [#583](https://github.com/openshift/cluster-api-provider-openstack/pull/583)
* Add doc tip for floating ip [#575](https://github.com/openshift/cluster-api-provider-openstack/pull/575)
* 📖 Update Required Configuration [#576](https://github.com/openshift/cluster-api-provider-openstack/pull/576)
* 🐛 Fix README.md [#579](https://github.com/openshift/cluster-api-provider-openstack/pull/579)
* ignore router get return 404  error [#571](https://github.com/openshift/cluster-api-provider-openstack/pull/571)
* Add generated security groups automatically [#563](https://github.com/openshift/cluster-api-provider-openstack/pull/563)
* 🐛 Invoke KUSTOMIZE in release-manifests [#569](https://github.com/openshift/cluster-api-provider-openstack/pull/569)
* 🐛 Show openstackcluster ENDPOINT [#570](https://github.com/openshift/cluster-api-provider-openstack/pull/570)
* update doc about ssh security group [#564](https://github.com/openshift/cluster-api-provider-openstack/pull/564)
* Remove APIServerLoadBalancerAdditionalPorts [#561](https://github.com/openshift/cluster-api-provider-openstack/pull/561)
* 🐛 Fix auto generate security groups [#555](https://github.com/openshift/cluster-api-provider-openstack/pull/555)
* Make DisablePortSecurity compatible with platforms not using the port… [#560](https://github.com/openshift/cluster-api-provider-openstack/pull/560)
* 🏃 Update support for CAPI v0.3.5 [#552](https://github.com/openshift/cluster-api-provider-openstack/pull/552)
* 🐛 enable managedAPIServerLoadBalancer w/ existing network [#548](https://github.com/openshift/cluster-api-provider-openstack/pull/548)
* 🐛 Set up OPENSTACK_CLOUD environment variable in env.rc [#550](https://github.com/openshift/cluster-api-provider-openstack/pull/550)
* reviewers: remove flaper87 [#549](https://github.com/openshift/cluster-api-provider-openstack/pull/549)
* 📖 Update Configuration doc [#545](https://github.com/openshift/cluster-api-provider-openstack/pull/545)
* Add additional info when error occur [#541](https://github.com/openshift/cluster-api-provider-openstack/pull/541)
* 🐛  e2e test: switch to -bazel folder because bin folder has been removed [#540](https://github.com/openshift/cluster-api-provider-openstack/pull/540)
* 🐛 remove docker-build from build test [#542](https://github.com/openshift/cluster-api-provider-openstack/pull/542)
* Add availability zone to be used by controller plane [#537](https://github.com/openshift/cluster-api-provider-openstack/pull/537)
* 🏃 Pr add prow test scripts [#539](https://github.com/openshift/cluster-api-provider-openstack/pull/539)
* 🐛 Fix updating to Cluster API v0.3.3 [#538](https://github.com/openshift/cluster-api-provider-openstack/pull/538)
* 🐛 Fix cluster-template.yaml [#534](https://github.com/openshift/cluster-api-provider-openstack/pull/534)
* Add 1.18 support into list [#536](https://github.com/openshift/cluster-api-provider-openstack/pull/536)
* 🏃 Add Stein to v1alpha3 tested version [#535](https://github.com/openshift/cluster-api-provider-openstack/pull/535)
* 🏃 Add Zuul jobs for e2e conformance tests [#491](https://github.com/openshift/cluster-api-provider-openstack/pull/491)
* 🐛  use sec groups from the current project, wait for lb from last reconcile [#523](https://github.com/openshift/cluster-api-provider-openstack/pull/523)
* 🏃 Update to cluster-api v0.3.3, controller-tools v0.2.8 and controller-runtime v0.5.2 [#532](https://github.com/openshift/cluster-api-provider-openstack/pull/532)
* ✨ Delete router/network/subnet [#522](https://github.com/openshift/cluster-api-provider-openstack/pull/522)
* ✨ Add ServerGroupID to OpenStackMachineSpec [#531](https://github.com/openshift/cluster-api-provider-openstack/pull/531)
* Fix cacert issue [#527](https://github.com/openshift/cluster-api-provider-openstack/pull/527)
* avoid basename usage to avoid source action failure [#529](https://github.com/openshift/cluster-api-provider-openstack/pull/529)
* Revert "Add kuryr support" [#221](https://github.com/openshift/cluster-api-provider-openstack/pull/221)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/77840b9a431880b15ee05d4a3f327b7ff2a682e8...)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/)

* [OCPBUGS-33080](https://issues.redhat.com/browse/OCPBUGS-33080): Downstream Merge May 2nd 2024 [#2152](https://github.com/openshift/ovn-kubernetes/pull/2152)
* [OCPBUGS-32925](https://issues.redhat.com/browse/OCPBUGS-32925), [OCPBUGS-32985](https://issues.redhat.com/browse/OCPBUGS-32985): Dockerfile: Bump OVS to 3.3.0-2 [#2142](https://github.com/openshift/ovn-kubernetes/pull/2142)
* [OCPBUGS-32985](https://issues.redhat.com/browse/OCPBUGS-32985), [SDN-4436](https://issues.redhat.com/browse/SDN-4436): Dockerfile.base: Bump OVN to ovn24.03-24.03.1-36.el9fdp [#2126](https://github.com/openshift/ovn-kubernetes/pull/2126)
* [OCPBUGS-31419](https://issues.redhat.com/browse/OCPBUGS-31419), [OCPBUGS-32461](https://issues.redhat.com/browse/OCPBUGS-32461), [SDN-4243](https://issues.redhat.com/browse/SDN-4243): Downstream Merge 22nd April 2024 [#2136](https://github.com/openshift/ovn-kubernetes/pull/2136)
* [SDN-4458](https://issues.redhat.com/browse/SDN-4458): Do per-pod MCS/metadata blocking with nftables rather than iptables [#1946](https://github.com/openshift/ovn-kubernetes/pull/1946)
* [SDN-4606](https://issues.redhat.com/browse/SDN-4606), [SDN-4688](https://issues.redhat.com/browse/SDN-4688): Downstream Merge April 18th 2024 [#2132](https://github.com/openshift/ovn-kubernetes/pull/2132)
* [OCPBUGS-31419](https://issues.redhat.com/browse/OCPBUGS-31419): [DownstreamMerge] 4-16-24 [#2129](https://github.com/openshift/ovn-kubernetes/pull/2129)
* [SDN-4403](https://issues.redhat.com/browse/SDN-4403): Downstream merge 20240415 [#2124](https://github.com/openshift/ovn-kubernetes/pull/2124)
* [OCPBUGS-25889](https://issues.redhat.com/browse/OCPBUGS-25889), [OCPBUGS-29952](https://issues.redhat.com/browse/OCPBUGS-29952), [SDN-3931](https://issues.redhat.com/browse/SDN-3931): Downstream merge 12 04 24 [#2120](https://github.com/openshift/ovn-kubernetes/pull/2120)
* [OCPBUGS-27093](https://issues.redhat.com/browse/OCPBUGS-27093), [OCPBUGS-29511](https://issues.redhat.com/browse/OCPBUGS-29511), [SDN-4157](https://issues.redhat.com/browse/SDN-4157): [DownstreamMerge] 4 April 2024 [#2110](https://github.com/openshift/ovn-kubernetes/pull/2110)
* [SDN-4157](https://issues.redhat.com/browse/SDN-4157): DownstreamMerge 25th march 2024 [#2100](https://github.com/openshift/ovn-kubernetes/pull/2100)
* [OCPBUGS-31557](https://issues.redhat.com/browse/OCPBUGS-31557): Revert "Remove unnecessary rhel8 build layer" [#2104](https://github.com/openshift/ovn-kubernetes/pull/2104)
* [OCPBUGS-24007](https://issues.redhat.com/browse/OCPBUGS-24007): Remove unnecessary rhel8 build layer [#2083](https://github.com/openshift/ovn-kubernetes/pull/2083)
* [OCPBUGS-27821](https://issues.redhat.com/browse/OCPBUGS-27821): [DownstreamMerge] 3-8-24 [#2093](https://github.com/openshift/ovn-kubernetes/pull/2093)
* [OCPBUGS-29350](https://issues.redhat.com/browse/OCPBUGS-29350), [OCPBUGS-29389](https://issues.redhat.com/browse/OCPBUGS-29389), [SDN-4542](https://issues.redhat.com/browse/SDN-4542): Downstream Merge 29th Feb 2024 [#2089](https://github.com/openshift/ovn-kubernetes/pull/2089)
* [OCPBUGS-17207](https://issues.redhat.com/browse/OCPBUGS-17207), [OCPBUGS-28742](https://issues.redhat.com/browse/OCPBUGS-28742): Downstream Merge 22nd Feb 2024 [#2081](https://github.com/openshift/ovn-kubernetes/pull/2081)
* [OCPBUGS-12876](https://issues.redhat.com/browse/OCPBUGS-12876), [OCPBUGS-13665](https://issues.redhat.com/browse/OCPBUGS-13665), [OCPBUGS-23519](https://issues.redhat.com/browse/OCPBUGS-23519), [OCPBUGS-28724](https://issues.redhat.com/browse/OCPBUGS-28724): Downstream Merge 15th Feb 2024 [#2073](https://github.com/openshift/ovn-kubernetes/pull/2073)
* [OCPBUGS-27093](https://issues.redhat.com/browse/OCPBUGS-27093): Dockerfile: Bump OVN to ovn-23.09.0-112.el9fdp [#2066](https://github.com/openshift/ovn-kubernetes/pull/2066)
* [OCPBUGS-27853](https://issues.redhat.com/browse/OCPBUGS-27853): [DownstreamMerge] 9 Feb 2024 [#2063](https://github.com/openshift/ovn-kubernetes/pull/2063)
* [OCPBUGS-20336](https://issues.redhat.com/browse/OCPBUGS-20336), [OCPBUGS-28558](https://issues.redhat.com/browse/OCPBUGS-28558): [DownstreamMerge] 7 Feb 2024 [#2057](https://github.com/openshift/ovn-kubernetes/pull/2057)
* [USHIFT-2256](https://issues.redhat.com/browse/USHIFT-2256): updating ovn kubernetes microshift image to golang-1.21 [#2051](https://github.com/openshift/ovn-kubernetes/pull/2051)
* [OCPBUGS-20209](https://issues.redhat.com/browse/OCPBUGS-20209), [OCPBUGS-20220](https://issues.redhat.com/browse/OCPBUGS-20220), [OCPBUGS-22923](https://issues.redhat.com/browse/OCPBUGS-22923), [OCPBUGS-24271](https://issues.redhat.com/browse/OCPBUGS-24271), [OCPBUGS-26979](https://issues.redhat.com/browse/OCPBUGS-26979), [OCPBUGS-27215](https://issues.redhat.com/browse/OCPBUGS-27215): Downstream Merge 2nd Feb 2024 [#2048](https://github.com/openshift/ovn-kubernetes/pull/2048)
* [OCPBUGS-22221](https://issues.redhat.com/browse/OCPBUGS-22221), [OCPBUGS-24219](https://issues.redhat.com/browse/OCPBUGS-24219), [OCPBUGS-25670](https://issues.redhat.com/browse/OCPBUGS-25670): Downstream Merge 31st Jan 2024 [#2038](https://github.com/openshift/ovn-kubernetes/pull/2038)
* [OCPBUGS-27933](https://issues.redhat.com/browse/OCPBUGS-27933): Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.16 [#2027](https://github.com/openshift/ovn-kubernetes/pull/2027)
* [OCPBUGS-23430](https://issues.redhat.com/browse/OCPBUGS-23430), [OCPBUGS-24363](https://issues.redhat.com/browse/OCPBUGS-24363), [OCPBUGS-26023](https://issues.redhat.com/browse/OCPBUGS-26023), [OCPBUGS-27211](https://issues.redhat.com/browse/OCPBUGS-27211): [DownstreamMerge] Merge 1-16-24 [#2018](https://github.com/openshift/ovn-kubernetes/pull/2018)
* [OCPBUGS-27285](https://issues.redhat.com/browse/OCPBUGS-27285): Dockerfile: Bump OVS to openvswitch3.1-3.1.0-73.el9fdp [#1995](https://github.com/openshift/ovn-kubernetes/pull/1995)
* [OCPBUGS-25030](https://issues.redhat.com/browse/OCPBUGS-25030): Updating ovn-kubernetes-microshift-container image to be consistent with ART [#1979](https://github.com/openshift/ovn-kubernetes/pull/1979)
* [OCPBUGS-18716](https://issues.redhat.com/browse/OCPBUGS-18716): [DownstreamMerge] 1-5-24 [#2010](https://github.com/openshift/ovn-kubernetes/pull/2010)
* [OCPBUGS-24965](https://issues.redhat.com/browse/OCPBUGS-24965): Updating ose-ovn-kubernetes-base-container image to be consistent with ART [#1978](https://github.com/openshift/ovn-kubernetes/pull/1978)
* [OCPBUGS-25810](https://issues.redhat.com/browse/OCPBUGS-25810): CARRY: Updates owners and adds Surya [#2000](https://github.com/openshift/ovn-kubernetes/pull/2000)
* [OCPBUGS-25032](https://issues.redhat.com/browse/OCPBUGS-25032): Updating ose-ovn-kubernetes-container image to be consistent with ART [#1980](https://github.com/openshift/ovn-kubernetes/pull/1980)
* [OCPBUGS-24055](https://issues.redhat.com/browse/OCPBUGS-24055), [OCPBUGS-25394](https://issues.redhat.com/browse/OCPBUGS-25394), [SDN-4194](https://issues.redhat.com/browse/SDN-4194): [DownstreamMerge] 14 Dec 2023 [#1990](https://github.com/openshift/ovn-kubernetes/pull/1990)
* [OCPBUGS-24322](https://issues.redhat.com/browse/OCPBUGS-24322), [OCPBUGS-25357](https://issues.redhat.com/browse/OCPBUGS-25357): Dockerfile: Bump OVN to ovn-23.09.0-91.el9fdp [#1986](https://github.com/openshift/ovn-kubernetes/pull/1986)
* [OCPBUGS-22847](https://issues.redhat.com/browse/OCPBUGS-22847): Downstream merge 12-7-23 [#1976](https://github.com/openshift/ovn-kubernetes/pull/1976)
* [NP-618](https://issues.redhat.com/browse/NP-618), [OCPBUGS-22847](https://issues.redhat.com/browse/OCPBUGS-22847), [SDN-4124](https://issues.redhat.com/browse/SDN-4124), [SDN-4149](https://issues.redhat.com/browse/SDN-4149), [SDN-4150](https://issues.redhat.com/browse/SDN-4150): [DownstreamMerge] 1 Dec 2023 [#1965](https://github.com/openshift/ovn-kubernetes/pull/1965)
* [OCPBUGS-24014](https://issues.redhat.com/browse/OCPBUGS-24014): Downstream merge 28th November 2023 [#1962](https://github.com/openshift/ovn-kubernetes/pull/1962)
* [OCPBUGS-21773](https://issues.redhat.com/browse/OCPBUGS-21773): Downstream Merge 22nd November 2023 [#1958](https://github.com/openshift/ovn-kubernetes/pull/1958)
* [NHE-805](https://issues.redhat.com/browse/NHE-805), [OCPBUGS-19050](https://issues.redhat.com/browse/OCPBUGS-19050), [OCPBUGS-22691](https://issues.redhat.com/browse/OCPBUGS-22691), [OCPBUGS-22767](https://issues.redhat.com/browse/OCPBUGS-22767), [SDN-4173](https://issues.redhat.com/browse/SDN-4173): [DownstreamMerge] 11 November 2023 [#1952](https://github.com/openshift/ovn-kubernetes/pull/1952)
* [OCPBUGS-16634](https://issues.redhat.com/browse/OCPBUGS-16634), [OCPBUGS-19635](https://issues.redhat.com/browse/OCPBUGS-19635), [OCPBUGS-20210](https://issues.redhat.com/browse/OCPBUGS-20210): Downstream Merge 24th October 2023 [#1942](https://github.com/openshift/ovn-kubernetes/pull/1942)
* [OCPBUGS-11710](https://issues.redhat.com/browse/OCPBUGS-11710): Downstream Merge 18th Oct 2023 [#1939](https://github.com/openshift/ovn-kubernetes/pull/1939)
* [OCPBUGS-15538](https://issues.redhat.com/browse/OCPBUGS-15538), [OCPBUGS-19961](https://issues.redhat.com/browse/OCPBUGS-19961): Downstream merge 2023-10-10 [#1935](https://github.com/openshift/ovn-kubernetes/pull/1935)
* [OCPBUGS-14787](https://issues.redhat.com/browse/OCPBUGS-14787): Dockerfile: stop installing CNI plugins RPM [#1702](https://github.com/openshift/ovn-kubernetes/pull/1702)
* [OCPBUGS-19289](https://issues.redhat.com/browse/OCPBUGS-19289): Updating ose-ovn-kubernetes images to be consistent with ART [#1884](https://github.com/openshift/ovn-kubernetes/pull/1884)
* [OCPBUGS-20178](https://issues.redhat.com/browse/OCPBUGS-20178), [OCPBUGS-20238](https://issues.redhat.com/browse/OCPBUGS-20238): Downstream merge 2023-10-09 [#1931](https://github.com/openshift/ovn-kubernetes/pull/1931)
* [OCPBUGS-16217](https://issues.redhat.com/browse/OCPBUGS-16217), [OCPBUGS-18071](https://issues.redhat.com/browse/OCPBUGS-18071), [OCPBUGS-18598](https://issues.redhat.com/browse/OCPBUGS-18598), [OCPBUGS-19698](https://issues.redhat.com/browse/OCPBUGS-19698): DownStream Merge 4th October 2023 [#1923](https://github.com/openshift/ovn-kubernetes/pull/1923)
* [OCPBUGS-19900](https://issues.redhat.com/browse/OCPBUGS-19900): DownStream Merge: 29th-September-2023 [#1919](https://github.com/openshift/ovn-kubernetes/pull/1919)
* [OCPBUGS-18317](https://issues.redhat.com/browse/OCPBUGS-18317): DownStream Merge: 28th-September-2023 [#1917](https://github.com/openshift/ovn-kubernetes/pull/1917)
* [OCPBUGS-18162](https://issues.redhat.com/browse/OCPBUGS-18162), [OCPBUGS-19792](https://issues.redhat.com/browse/OCPBUGS-19792), [OCPBUGS-19836](https://issues.redhat.com/browse/OCPBUGS-19836): [DownstreamMerge] 9-27-23 [#1911](https://github.com/openshift/ovn-kubernetes/pull/1911)
* [OCPBUGS-17455](https://issues.redhat.com/browse/OCPBUGS-17455), [OCPBUGS-17641](https://issues.redhat.com/browse/OCPBUGS-17641), [OCPBUGS-18352](https://issues.redhat.com/browse/OCPBUGS-18352), [OCPBUGS-18549](https://issues.redhat.com/browse/OCPBUGS-18549), [OCPBUGS-19456](https://issues.redhat.com/browse/OCPBUGS-19456): [DownstreamMerge] 9-26-23 [#1907](https://github.com/openshift/ovn-kubernetes/pull/1907)
* [OCPBUGS-19013](https://issues.redhat.com/browse/OCPBUGS-19013): Dockerfile: Copy ovnkube-trace file for RHEL8 platform [#1887](https://github.com/openshift/ovn-kubernetes/pull/1887)
* [OCPBUGS-19501](https://issues.redhat.com/browse/OCPBUGS-19501): Add additonal certificate acceptance condition feature in ovnkube-ide… [#1895](https://github.com/openshift/ovn-kubernetes/pull/1895)
* Add ovnkube-identity binary to the downstream image [#1897](https://github.com/openshift/ovn-kubernetes/pull/1897)
* [OCPBUGS-19288](https://issues.redhat.com/browse/OCPBUGS-19288): Updating ovn-kubernetes-microshift images to be consistent with ART [#1883](https://github.com/openshift/ovn-kubernetes/pull/1883)
* [OCPBUGS-19278](https://issues.redhat.com/browse/OCPBUGS-19278): Updating ovn-kubernetes-base images to be consistent with ART [#1882](https://github.com/openshift/ovn-kubernetes/pull/1882)
* [OCPBUGS-16641](https://issues.redhat.com/browse/OCPBUGS-16641), [OCPBUGS-18572](https://issues.redhat.com/browse/OCPBUGS-18572), [OCPBUGS-19331](https://issues.redhat.com/browse/OCPBUGS-19331): [DownstreamMerge] 9-18-23 [#1885](https://github.com/openshift/ovn-kubernetes/pull/1885)
* [OCPBUGS-19004](https://issues.redhat.com/browse/OCPBUGS-19004), [OCPBUGS-19010](https://issues.redhat.com/browse/OCPBUGS-19010): Dockerfile: bump OVN to ovn23.09-23.09.0-beta.31.el9fdp [#1875](https://github.com/openshift/ovn-kubernetes/pull/1875)
* OCPBUGS-18895,OCPBUGS-14549,OCPBUGS-18402 [DownstreamMerge] 9-11-23 [#1868](https://github.com/openshift/ovn-kubernetes/pull/1868)
* [OCPBUGS-18467](https://issues.redhat.com/browse/OCPBUGS-18467): Fix OVN SNATing on GR by enabling gateway_mtu on rtoe port of GR [#1854](https://github.com/openshift/ovn-kubernetes/pull/1854)
* [OCPBUGS-14709](https://issues.redhat.com/browse/OCPBUGS-14709), [OCPBUGS-16617](https://issues.redhat.com/browse/OCPBUGS-16617), [OCPBUGS-18603](https://issues.redhat.com/browse/OCPBUGS-18603): Bump to OVN 23.09 [#1842](https://github.com/openshift/ovn-kubernetes/pull/1842)
* [OCPBUGS-18378](https://issues.redhat.com/browse/OCPBUGS-18378): LGW: Fix the precedence of rules in FORWARD chain [#1851](https://github.com/openshift/ovn-kubernetes/pull/1851)
* [OCPBUGS-17773](https://issues.redhat.com/browse/OCPBUGS-17773): Perf increases to pod deletion [#1847](https://github.com/openshift/ovn-kubernetes/pull/1847)
* [OCPBUGS-17731](https://issues.redhat.com/browse/OCPBUGS-17731): move clearInitialNodeNetworkUnavailableCondition to clustermanager [#1839](https://github.com/openshift/ovn-kubernetes/pull/1839)
* [OCPBUGS-18110](https://issues.redhat.com/browse/OCPBUGS-18110): Fix encap port configuration for remote chassis [#1836](https://github.com/openshift/ovn-kubernetes/pull/1836)
* [OCPBUGS-17406](https://issues.redhat.com/browse/OCPBUGS-17406), [OCPBUGS-17844](https://issues.redhat.com/browse/OCPBUGS-17844), [OCPBUGS-17970](https://issues.redhat.com/browse/OCPBUGS-17970): [DownstreamMerge] 24 Aug 2023 [#1833](https://github.com/openshift/ovn-kubernetes/pull/1833)
* [OCPBUGS-17867](https://issues.redhat.com/browse/OCPBUGS-17867): CARRY: Removes restriction for ip scope universe on node ips [#1822](https://github.com/openshift/ovn-kubernetes/pull/1822)
* 8-16-23 [#1820](https://github.com/openshift/ovn-kubernetes/pull/1820)
* [OCPBUGS-17666](https://issues.redhat.com/browse/OCPBUGS-17666): Downstream Merge august 15th 2023 [#1817](https://github.com/openshift/ovn-kubernetes/pull/1817)
* Downstream Merge 2023-8-10 [#1813](https://github.com/openshift/ovn-kubernetes/pull/1813)
* [OCPBUGS-17147](https://issues.redhat.com/browse/OCPBUGS-17147): [DownstreamMerge] 8 Aug 2023 [#1803](https://github.com/openshift/ovn-kubernetes/pull/1803)
* Downstream Merge 2023-08-03 [#1798](https://github.com/openshift/ovn-kubernetes/pull/1798)
* 8-1-23 [#1795](https://github.com/openshift/ovn-kubernetes/pull/1795)
* [OCPBUGS-16767](https://issues.redhat.com/browse/OCPBUGS-16767), [SDN-3507](https://issues.redhat.com/browse/SDN-3507), [SDN-3733](https://issues.redhat.com/browse/SDN-3733): [DownstreamMerge] 7-27-23 [#1789](https://github.com/openshift/ovn-kubernetes/pull/1789)
* [OCPBUGS-15811](https://issues.redhat.com/browse/OCPBUGS-15811): SDN-3733: Downstream Merge: 25th July 2023 [#1784](https://github.com/openshift/ovn-kubernetes/pull/1784)
* [OCPBUGS-10650](https://issues.redhat.com/browse/OCPBUGS-10650), [OCPBUGS-12747](https://issues.redhat.com/browse/OCPBUGS-12747), [OCPBUGS-16413](https://issues.redhat.com/browse/OCPBUGS-16413), [SDN-3732](https://issues.redhat.com/browse/SDN-3732), [SDN-3733](https://issues.redhat.com/browse/SDN-3733): [DownstreamMerge] 7-19-23 [#1750](https://github.com/openshift/ovn-kubernetes/pull/1750)
* Dockerfile: build both RHEL8 and RHEL9 shims [#1760](https://github.com/openshift/ovn-kubernetes/pull/1760)
* [SDN-3733](https://issues.redhat.com/browse/SDN-3733): [DownstreamMerge] 7-13-23 [#1757](https://github.com/openshift/ovn-kubernetes/pull/1757)
* 11 jul 23 [#1752](https://github.com/openshift/ovn-kubernetes/pull/1752)
* 07 jul 23 [#1747](https://github.com/openshift/ovn-kubernetes/pull/1747)
* [SDN-3993](https://issues.redhat.com/browse/SDN-3993): [DownstreamMerge] 06 jul 23 [#1742](https://github.com/openshift/ovn-kubernetes/pull/1742)
* [OCPBUGS-14632](https://issues.redhat.com/browse/OCPBUGS-14632): [DownstreamMerge] 30 jun 23 [#1729](https://github.com/openshift/ovn-kubernetes/pull/1729)
* [OCPBUGS-15127](https://issues.redhat.com/browse/OCPBUGS-15127): Dockerfile: bump to ovn 23.03.0-69 (for LB templates) and ovs 3.1.0-32 (upgrade perf) [#1710](https://github.com/openshift/ovn-kubernetes/pull/1710)
* [OCPBUGS-15523](https://issues.redhat.com/browse/OCPBUGS-15523): [DownstreamMerge] 6-27-23 [#1726](https://github.com/openshift/ovn-kubernetes/pull/1726)
* [OCPBUGS-15227](https://issues.redhat.com/browse/OCPBUGS-15227): [DownstreamMerge] 6-21-23 [#1718](https://github.com/openshift/ovn-kubernetes/pull/1718)
* [OCPBUGS-15226](https://issues.redhat.com/browse/OCPBUGS-15226): EgressIP: do not patch the status if the object no longer exists [#1717](https://github.com/openshift/ovn-kubernetes/pull/1717)
* 6-18-2023 [#1714](https://github.com/openshift/ovn-kubernetes/pull/1714)
* [OCPBUGS-14769](https://issues.redhat.com/browse/OCPBUGS-14769), [SDN-3885](https://issues.redhat.com/browse/SDN-3885): Downstream Merge 13th June 2023 [#1707](https://github.com/openshift/ovn-kubernetes/pull/1707)
* [OCPBUGS-10592](https://issues.redhat.com/browse/OCPBUGS-10592), [OCPBUGS-10841](https://issues.redhat.com/browse/OCPBUGS-10841), [OCPBUGS-11180](https://issues.redhat.com/browse/OCPBUGS-11180), [OCPBUGS-12747](https://issues.redhat.com/browse/OCPBUGS-12747), [OCPBUGS-1715](https://issues.redhat.com/browse/OCPBUGS-1715), [OCPBUGS-4370](https://issues.redhat.com/browse/OCPBUGS-4370), [OCPBUGS-4485](https://issues.redhat.com/browse/OCPBUGS-4485), [SDN-3733](https://issues.redhat.com/browse/SDN-3733), [SDN-3838](https://issues.redhat.com/browse/SDN-3838), [SDN-3840](https://issues.redhat.com/browse/SDN-3840): Downstream Merge 6th June 2023 [#1697](https://github.com/openshift/ovn-kubernetes/pull/1697)
* [OCPBUGS-12352](https://issues.redhat.com/browse/OCPBUGS-12352): Updating ovn-kubernetes-base images to be consistent with ART [#1700](https://github.com/openshift/ovn-kubernetes/pull/1700)
* [OCPBUGS-14636](https://issues.redhat.com/browse/OCPBUGS-14636): Fix Downstream Unit Tests [#1696](https://github.com/openshift/ovn-kubernetes/pull/1696)
* [OCPBUGS-12800](https://issues.redhat.com/browse/OCPBUGS-12800), [OCPBUGS-13863](https://issues.redhat.com/browse/OCPBUGS-13863), [OCPBUGS-14286](https://issues.redhat.com/browse/OCPBUGS-14286), [OCPBUGS-14449](https://issues.redhat.com/browse/OCPBUGS-14449), [OCPBUGS-4485](https://issues.redhat.com/browse/OCPBUGS-4485), [SDN-3555](https://issues.redhat.com/browse/SDN-3555), [SDN-3790](https://issues.redhat.com/browse/SDN-3790): Downstream Merge 1st June [#1692](https://github.com/openshift/ovn-kubernetes/pull/1692)
* [OCPBUGS-9825](https://issues.redhat.com/browse/OCPBUGS-9825): LoadBalancer Templates Merge Downstream: 25th May 2023 [#1683](https://github.com/openshift/ovn-kubernetes/pull/1683)
* [OCPBUGS-6013](https://issues.redhat.com/browse/OCPBUGS-6013): Call SyncEndpoints from AddService [#1671](https://github.com/openshift/ovn-kubernetes/pull/1671)
* [OCPBUGS-13716](https://issues.redhat.com/browse/OCPBUGS-13716): Use ovsver and ovnver to infer the short version numbers for ovs and ovn [#1664](https://github.com/openshift/ovn-kubernetes/pull/1664)
* [OCPBUGS-12971](https://issues.redhat.com/browse/OCPBUGS-12971): Fix bug that resulted in routes not be restored to a new vnic [#1665](https://github.com/openshift/ovn-kubernetes/pull/1665)
* [OCPBUGS-11567](https://issues.redhat.com/browse/OCPBUGS-11567): Check the status of a pod before trying to get its ip [#1663](https://github.com/openshift/ovn-kubernetes/pull/1663)
* [OCPBUGS-11716](https://issues.redhat.com/browse/OCPBUGS-11716): [release-4.14] Use loadbalancer.Name as client index [#1652](https://github.com/openshift/ovn-kubernetes/pull/1652)
* [OCPBUGS-11534](https://issues.redhat.com/browse/OCPBUGS-11534): Stack migration [#1643](https://github.com/openshift/ovn-kubernetes/pull/1643)
* Remove no-longer-used rhel9-specific dockerfiles [#1635](https://github.com/openshift/ovn-kubernetes/pull/1635)
* [OCPBUGS-283](https://issues.redhat.com/browse/OCPBUGS-283), [OCPBUGS-3176](https://issues.redhat.com/browse/OCPBUGS-3176): Downstream merge 3rd April 2023 [#1626](https://github.com/openshift/ovn-kubernetes/pull/1626)
* Updating ovn-kubernetes-microshift images to be consistent with ART [#1620](https://github.com/openshift/ovn-kubernetes/pull/1620)
* [OCPBUGS-6947](https://issues.redhat.com/browse/OCPBUGS-6947): CARRY: use "prefer local" for annotated services [#1622](https://github.com/openshift/ovn-kubernetes/pull/1622)
* [OCPBUGS-10839](https://issues.redhat.com/browse/OCPBUGS-10839), [OCPBUGS-10962](https://issues.redhat.com/browse/OCPBUGS-10962): [DownstreamMerge] 28 March 2023 [#1611](https://github.com/openshift/ovn-kubernetes/pull/1611)
* [OCPBUGS-10485](https://issues.redhat.com/browse/OCPBUGS-10485): Bump OVS to 3.1.0-10 [#1613](https://github.com/openshift/ovn-kubernetes/pull/1613)
* node: small downstream CARRY patch cleanup [#1549](https://github.com/openshift/ovn-kubernetes/pull/1549)
* [OCPBUGS-10889](https://issues.redhat.com/browse/OCPBUGS-10889), [OCPBUGS-8473](https://issues.redhat.com/browse/OCPBUGS-8473): Downstream Merge [27-mar-2023] [#1608](https://github.com/openshift/ovn-kubernetes/pull/1608)
* [OCPBUGS-7932](https://issues.redhat.com/browse/OCPBUGS-7932), [OCPBUGS-7988](https://issues.redhat.com/browse/OCPBUGS-7988), [OCPBUGS-8080](https://issues.redhat.com/browse/OCPBUGS-8080), [OCPBUGS-8278](https://issues.redhat.com/browse/OCPBUGS-8278), [OCPBUGS-8280](https://issues.redhat.com/browse/OCPBUGS-8280), [OCPBUGS-9990](https://issues.redhat.com/browse/OCPBUGS-9990): Downstream Merge [10-mar-2023] [#1574](https://github.com/openshift/ovn-kubernetes/pull/1574)
* Dockerfiles: copy RHEL-9 bits over top of unused RHEL8 bits [#1553](https://github.com/openshift/ovn-kubernetes/pull/1553)
* [OCPBUGS-10395](https://issues.redhat.com/browse/OCPBUGS-10395): Bump OVN to disable CT flush [#1590](https://github.com/openshift/ovn-kubernetes/pull/1590)
* Updating ovn-kubernetes-microshift images to be consistent with ART [#1576](https://github.com/openshift/ovn-kubernetes/pull/1576)
* Updating ose-ovn-kubernetes images to be consistent with ART [#1578](https://github.com/openshift/ovn-kubernetes/pull/1578)
* Updating ovn-kubernetes-base images to be consistent with ART [#1575](https://github.com/openshift/ovn-kubernetes/pull/1575)
* [OCPBUGS-8222](https://issues.redhat.com/browse/OCPBUGS-8222), [OCPBUGS-8397](https://issues.redhat.com/browse/OCPBUGS-8397), [OCPBUGS-8464](https://issues.redhat.com/browse/OCPBUGS-8464): [DownstreamMerge] 7 Mar 2023 [#1556](https://github.com/openshift/ovn-kubernetes/pull/1556)
* [OCPBUGS-7952](https://issues.redhat.com/browse/OCPBUGS-7952): Dockerfile: bump to ovn23.03-23.03.0-4.el9fdp for RHEL9 [#1554](https://github.com/openshift/ovn-kubernetes/pull/1554)
* [OCPBUGS-5889](https://issues.redhat.com/browse/OCPBUGS-5889): [DownstreamMerge] 2023-03-03 [#1552](https://github.com/openshift/ovn-kubernetes/pull/1552)
* Removal of small code delta from upstream [#1548](https://github.com/openshift/ovn-kubernetes/pull/1548)
* rhel9: bump to ovn23.03-23.03.0-preview.4 [#1550](https://github.com/openshift/ovn-kubernetes/pull/1550)
* Downstream Merge [March 2nd 2023] [#1551](https://github.com/openshift/ovn-kubernetes/pull/1551)
* 2-28-23 [#1546](https://github.com/openshift/ovn-kubernetes/pull/1546)
* OCPBUGS-2663, Bug 2091780, OCPBUGS-6739: Downstream merge 2023-02-20 [#1533](https://github.com/openshift/ovn-kubernetes/pull/1533)
* rhel9: bump to openvswitch3.1-3.1.0-2.el9fdp [#1544](https://github.com/openshift/ovn-kubernetes/pull/1544)
* [OCPBUGS-7296](https://issues.redhat.com/browse/OCPBUGS-7296): Remove ICNIv1 from ovn-kubernetes [#1531](https://github.com/openshift/ovn-kubernetes/pull/1531)
* Dockerfiles: switch to dnf [#1539](https://github.com/openshift/ovn-kubernetes/pull/1539)
* iptables package is missing in microshift image [#1530](https://github.com/openshift/ovn-kubernetes/pull/1530)
* Updating ovn-kubernetes-microshift images to be consistent with ART [#1443](https://github.com/openshift/ovn-kubernetes/pull/1443)
* rhel9: no longer need to use iptables wrappers [#1526](https://github.com/openshift/ovn-kubernetes/pull/1526)
* cleanup: drop redundant selinux-policy install in onvkube dockerfiles [#1525](https://github.com/openshift/ovn-kubernetes/pull/1525)
* iptables: use container iptables, not the host's [#1481](https://github.com/openshift/ovn-kubernetes/pull/1481)
* rhel9: oc RPM does the kubectl symlink [#1523](https://github.com/openshift/ovn-kubernetes/pull/1523)
* rhel9: no longer need python3-pyOpenSSL [#1519](https://github.com/openshift/ovn-kubernetes/pull/1519)
* rhel9: remove stray `oc` install [#1518](https://github.com/openshift/ovn-kubernetes/pull/1518)
* Add RHEL9 image Dockerfiles [#1495](https://github.com/openshift/ovn-kubernetes/pull/1495)
* Downstream merge 2023-02-07 [#1510](https://github.com/openshift/ovn-kubernetes/pull/1510)
* [OCPBUGS-6953](https://issues.redhat.com/browse/OCPBUGS-6953), [OCPBUGS-6955](https://issues.redhat.com/browse/OCPBUGS-6955): [Downstream Merge 6th Feb 2023] [#1509](https://github.com/openshift/ovn-kubernetes/pull/1509)
* [OCPBUGS-4909](https://issues.redhat.com/browse/OCPBUGS-4909): Dockerfile: bump OVN to 22.12.0-18 [#1487](https://github.com/openshift/ovn-kubernetes/pull/1487)
* Bug 2078222, OCPBUGS-4119, OCPBUGS-5930, OCPBUGS-4425: [DownstreamMerge] 1-31-23 [#1496](https://github.com/openshift/ovn-kubernetes/pull/1496)
* Bug 2047299, OCPBUGS-2337: [DownstreamMerge] 13 Jan 2023 [#1474](https://github.com/openshift/ovn-kubernetes/pull/1474)
* [Bug 2041746](https://bugzilla.redhat.com/show_bug.cgi?id=2041746): Bump OVN to 22.12.0-4 [#1468](https://github.com/openshift/ovn-kubernetes/pull/1468)
* [Bug 2075548](https://bugzilla.redhat.com/show_bug.cgi?id=2075548): [DownstreamMerge] 09 Jan 2023 [#1466](https://github.com/openshift/ovn-kubernetes/pull/1466)
* 15 Dec 2022 [#1454](https://github.com/openshift/ovn-kubernetes/pull/1454)
* Updating ose-ovn-kubernetes images to be consistent with ART [#1430](https://github.com/openshift/ovn-kubernetes/pull/1430)
* [OCPBUGS-4825](https://issues.redhat.com/browse/OCPBUGS-4825): [DownstreamMerge] 12-14-22 [#1449](https://github.com/openshift/ovn-kubernetes/pull/1449)
* [OCPBUGS-4659](https://issues.redhat.com/browse/OCPBUGS-4659): [DownstreamMerge] - 12-12-22 [#1437](https://github.com/openshift/ovn-kubernetes/pull/1437)
* Updating ovn-kubernetes-base images to be consistent with ART [#1431](https://github.com/openshift/ovn-kubernetes/pull/1431)
* Fix product build issue with more straight forward bash [#1432](https://github.com/openshift/ovn-kubernetes/pull/1432)
* [OCPBUGS-4502](https://issues.redhat.com/browse/OCPBUGS-4502): Downstream Merge 7th-December-2022 [Support service session affinity timeout] [#1418](https://github.com/openshift/ovn-kubernetes/pull/1418)
* [OCBUGS-4502](https://issues.redhat.com/browse/OCBUGS-4502): Dockerfile: bump OVN to 22.09.0-25 [#1424](https://github.com/openshift/ovn-kubernetes/pull/1424)
* Update base image of Dockerfile [#1239](https://github.com/openshift/ovn-kubernetes/pull/1239)
* [OCPBUGS-3739](https://issues.redhat.com/browse/OCPBUGS-3739): [DownstreamMerge] 12-02-22 [#1410](https://github.com/openshift/ovn-kubernetes/pull/1410)
* [OCPBUGS-2319](https://issues.redhat.com/browse/OCPBUGS-2319): [DownstreamMerge] 11-30-22 [#1405](https://github.com/openshift/ovn-kubernetes/pull/1405)
* [OCPBUGS-799](https://issues.redhat.com/browse/OCPBUGS-799): Bump OVN to 22.09.0-22 [#1403](https://github.com/openshift/ovn-kubernetes/pull/1403)
* Bug OCPBUGS-1352: [DownstreamMerge] 11-18-22 [#1400](https://github.com/openshift/ovn-kubernetes/pull/1400)
* [Bug 2092567](https://bugzilla.redhat.com/show_bug.cgi?id=2092567): [Downstream Merge] 16/11/2022 [#1381](https://github.com/openshift/ovn-kubernetes/pull/1381)
* [OCPBUGS-3797](https://issues.redhat.com/browse/OCPBUGS-3797): [4.13] Dockerfile: bump OVS to 2.17.0-62.el8fdp [#1362](https://github.com/openshift/ovn-kubernetes/pull/1362)
* [OCPBUGS-3292](https://issues.redhat.com/browse/OCPBUGS-3292): downstream windows fixes [#1377](https://github.com/openshift/ovn-kubernetes/pull/1377)
* Update images to be consistent with ART [#1371](https://github.com/openshift/ovn-kubernetes/pull/1371)
* Downstream merge 11-08-2022 [#1364](https://github.com/openshift/ovn-kubernetes/pull/1364)
* EIP: remove downstream's duplicate node delete test [#1358](https://github.com/openshift/ovn-kubernetes/pull/1358)
* [SDN-3589](https://issues.redhat.com/browse/SDN-3589): downstream merge 11-02-2022 [#1355](https://github.com/openshift/ovn-kubernetes/pull/1355)
* [OCPBUGS-2770](https://issues.redhat.com/browse/OCPBUGS-2770): Allow empty nexthop in L3GatewayConfig node annotation [#1337](https://github.com/openshift/ovn-kubernetes/pull/1337)
* [OCPBUGS-2569](https://issues.redhat.com/browse/OCPBUGS-2569): Fix netpol races [#1323](https://github.com/openshift/ovn-kubernetes/pull/1323)
* [OCPBUGS-1427](https://issues.redhat.com/browse/OCPBUGS-1427): Ignore non-ready endpoints when processing endpointslices [#1330](https://github.com/openshift/ovn-kubernetes/pull/1330)
* [OCPBUGS-2826](https://issues.redhat.com/browse/OCPBUGS-2826): ovnkube-trace: Fix ofproto/trace for IPv6 [#1338](https://github.com/openshift/ovn-kubernetes/pull/1338)
* [OCPBUGS-1520](https://issues.redhat.com/browse/OCPBUGS-1520): Fixes SNAT-ing Logic for EgressIPs [#1331](https://github.com/openshift/ovn-kubernetes/pull/1331)
* [OCPBUGS-1520](https://issues.redhat.com/browse/OCPBUGS-1520): Prioritize adding events to handlers for shared resources [#1333](https://github.com/openshift/ovn-kubernetes/pull/1333)
* [OCPBUGS-1643](https://issues.redhat.com/browse/OCPBUGS-1643): Add logging verbosity to configuring OVN logs [#1324](https://github.com/openshift/ovn-kubernetes/pull/1324)
* [OCPBUGS-2175](https://issues.redhat.com/browse/OCPBUGS-2175): Allocate Hybrid Overlay IP on node updates too [#1319](https://github.com/openshift/ovn-kubernetes/pull/1319)
* [OCPBUGS-2004](https://issues.redhat.com/browse/OCPBUGS-2004): egress IP: fix log when gRPC connection fails [#1304](https://github.com/openshift/ovn-kubernetes/pull/1304)
* [OCPBUGS-2176](https://issues.redhat.com/browse/OCPBUGS-2176): add endpointSlice informer in master process [#1302](https://github.com/openshift/ovn-kubernetes/pull/1302)
* [OCPBUGS-2085](https://issues.redhat.com/browse/OCPBUGS-2085): CARRY: Dockerfile.base: bump to openvswitch2.17.0-37.4.el8fdp [#1298](https://github.com/openshift/ovn-kubernetes/pull/1298)
* [OCPBUGS-1705](https://issues.redhat.com/browse/OCPBUGS-1705): Don't use ACL names ever! [#1300](https://github.com/openshift/ovn-kubernetes/pull/1300)
* Dockerfile: bump to ovn22.09-22.09.0-5.el8fdp [#1284](https://github.com/openshift/ovn-kubernetes/pull/1284)
* 9-23-22 b - dualstack fixed [#1289](https://github.com/openshift/ovn-kubernetes/pull/1289)
* [OCPBUGS-1705](https://issues.redhat.com/browse/OCPBUGS-1705): Trim ACL names according to RFC1123 [#1281](https://github.com/openshift/ovn-kubernetes/pull/1281)
* [OCPBUGS-1553](https://issues.redhat.com/browse/OCPBUGS-1553): Dockerfile: bump to openvswitch2.17.0-37.4.el8fdp [#1273](https://github.com/openshift/ovn-kubernetes/pull/1273)
* Use iptables-restore to add MCS/metadata blocking in the pod [#1262](https://github.com/openshift/ovn-kubernetes/pull/1262)
* 9-12-22 merge [#1267](https://github.com/openshift/ovn-kubernetes/pull/1267)
* 9-7-22 merge [#1264](https://github.com/openshift/ovn-kubernetes/pull/1264)
* 9-2-22 merge [#1263](https://github.com/openshift/ovn-kubernetes/pull/1263)
* [OCPBUGS-165](https://issues.redhat.com/browse/OCPBUGS-165): [DownstreamMerge] 8-29-2022 merge [#1255](https://github.com/openshift/ovn-kubernetes/pull/1255)
* 8-25-2022 [#1253](https://github.com/openshift/ovn-kubernetes/pull/1253)
* revert endpoints [#1248](https://github.com/openshift/ovn-kubernetes/pull/1248)
* 8-8-2022 [#1237](https://github.com/openshift/ovn-kubernetes/pull/1237)
* Fix ovn version in Dockerfile.base [#1236](https://github.com/openshift/ovn-kubernetes/pull/1236)
* Introduce ovn-kubernetes-{base|singlenode} images [#1213](https://github.com/openshift/ovn-kubernetes/pull/1213)
* [Bug 2109945](https://bugzilla.redhat.com/show_bug.cgi?id=2109945): [Downstream Merge: 04-08-2022] [#1231](https://github.com/openshift/ovn-kubernetes/pull/1231)
* [Bug 2111534](https://bugzilla.redhat.com/show_bug.cgi?id=2111534): Downstream Merge: 27-07-2022 [#1214](https://github.com/openshift/ovn-kubernetes/pull/1214)
* Updating ose-ovn-kubernetes images to be consistent with ART [#1174](https://github.com/openshift/ovn-kubernetes/pull/1174)
* [Bug 2111733](https://bugzilla.redhat.com/show_bug.cgi?id=2111733): Bump OVN to 22.06.0-27 [#1222](https://github.com/openshift/ovn-kubernetes/pull/1222)
* [OCPBUGSM-45393](https://issues.redhat.com/browse/OCPBUGSM-45393): Bug 2078691: [Downstream Merge] 22-07-2022 [#1210](https://github.com/openshift/ovn-kubernetes/pull/1210)
* 4.12 initial merge from upstream: 7-18-22 [#1205](https://github.com/openshift/ovn-kubernetes/pull/1205)
* [Bug 2106862](https://bugzilla.redhat.com/show_bug.cgi?id=2106862): Append the SNAT rule in management chain [#1199](https://github.com/openshift/ovn-kubernetes/pull/1199)
* [Bug 2095444](https://bugzilla.redhat.com/show_bug.cgi?id=2095444): EGW: Clean Stale Conntrack Entries [#1189](https://github.com/openshift/ovn-kubernetes/pull/1189)
* [Bug 2106298](https://bugzilla.redhat.com/show_bug.cgi?id=2106298): populate sock address for ovndb connection in unix mode [#1188](https://github.com/openshift/ovn-kubernetes/pull/1188)
* [Bug 2100507](https://bugzilla.redhat.com/show_bug.cgi?id=2100507): Remove redundant log lines in obj_retry.go [#1162](https://github.com/openshift/ovn-kubernetes/pull/1162)
* [Bug 2097243](https://bugzilla.redhat.com/show_bug.cgi?id=2097243): Fix egressips for pods recreated with same name [#1169](https://github.com/openshift/ovn-kubernetes/pull/1169)
* [Bug 2097221](https://bugzilla.redhat.com/show_bug.cgi?id=2097221): Dockerfile: bump to ovn22.06-22.06.0-7.el8fdp [#1170](https://github.com/openshift/ovn-kubernetes/pull/1170)
* [Bug 2091238](https://bugzilla.redhat.com/show_bug.cgi?id=2091238): Fix Panic in Network Policy deletion [#1166](https://github.com/openshift/ovn-kubernetes/pull/1166)
* [Bug 2100220](https://bugzilla.redhat.com/show_bug.cgi?id=2100220): Fix completed pods releasing IP address on update [#1158](https://github.com/openshift/ovn-kubernetes/pull/1158)
* [Bug 2089807](https://bugzilla.redhat.com/show_bug.cgi?id=2089807): Release Leader election lock on errors [#1167](https://github.com/openshift/ovn-kubernetes/pull/1167)
* [Bug 2100249](https://bugzilla.redhat.com/show_bug.cgi?id=2100249): Revert "Bug 2082599: add upper bound to number of failed attempts" [#1161](https://github.com/openshift/ovn-kubernetes/pull/1161)
* [Bug 2085089](https://bugzilla.redhat.com/show_bug.cgi?id=2085089): Add support for enabling UDP packet aggregation on veth interfaces [#1129](https://github.com/openshift/ovn-kubernetes/pull/1129)
* [Bug 2099755](https://bugzilla.redhat.com/show_bug.cgi?id=2099755): Add new EgressIP config option "egressip-reachability-total-timeout" [#1156](https://github.com/openshift/ovn-kubernetes/pull/1156)
* [Bug 2073378](https://bugzilla.redhat.com/show_bug.cgi?id=2073378): Add node name into egress ip status for the removal [#1114](https://github.com/openshift/ovn-kubernetes/pull/1114)
* [Bug 2079012](https://bugzilla.redhat.com/show_bug.cgi?id=2079012): Fix egressIP object deletion if the node is deleted first [#1143](https://github.com/openshift/ovn-kubernetes/pull/1143)
* [Bug 2089392](https://bugzilla.redhat.com/show_bug.cgi?id=2089392): Update logging for specific policy when creating it [#1145](https://github.com/openshift/ovn-kubernetes/pull/1145)
* [Bug 2082599](https://bugzilla.redhat.com/show_bug.cgi?id=2082599): add upper bound to number of failed attempts [#1147](https://github.com/openshift/ovn-kubernetes/pull/1147)
* [Bug 2094088](https://bugzilla.redhat.com/show_bug.cgi?id=2094088): Fixes Updating non-default columns as well as libovsdb fixes for empty values [#1146](https://github.com/openshift/ovn-kubernetes/pull/1146)
* [release 4.11] Bug 2092579: pods: deleteLogicalPort should not fail if port is already deleted [#1123](https://github.com/openshift/ovn-kubernetes/pull/1123)
* [Bug 2092889](https://bugzilla.redhat.com/show_bug.cgi?id=2092889): update all egress ACLs' direction to "from-lport" [#1128](https://github.com/openshift/ovn-kubernetes/pull/1128)
* [Bug 2089716](https://bugzilla.redhat.com/show_bug.cgi?id=2089716): Downstream fix for OVN-Kube node cardinality [#1135](https://github.com/openshift/ovn-kubernetes/pull/1135)
* [Bug 2095113](https://bugzilla.redhat.com/show_bug.cgi?id=2095113): Dockerfile: bump to openvswitch2.17-2.17.0-22.el8fdp [#1117](https://github.com/openshift/ovn-kubernetes/pull/1117)
* [Bug 2094039](https://bugzilla.redhat.com/show_bug.cgi?id=2094039): egressIP: node retrieval failure is not respected, causes panic [#1130](https://github.com/openshift/ovn-kubernetes/pull/1130)
* [Bug 2093396](https://bugzilla.redhat.com/show_bug.cgi?id=2093396): Remove node-tainting for too-small MTU [#1127](https://github.com/openshift/ovn-kubernetes/pull/1127)
* [Bug 2091634](https://bugzilla.redhat.com/show_bug.cgi?id=2091634): Use ovs-appctl dpctl/* instead of ovs-dpctl [#1118](https://github.com/openshift/ovn-kubernetes/pull/1118)
* [Bug 2091990](https://bugzilla.redhat.com/show_bug.cgi?id=2091990): fix lflow-cache-limit-kb ovs external-id [#1116](https://github.com/openshift/ovn-kubernetes/pull/1116)
* [Bug 2070674](https://bugzilla.redhat.com/show_bug.cgi?id=2070674): improve performance of service sync [#1110](https://github.com/openshift/ovn-kubernetes/pull/1110)
* [Bug 2092473](https://bugzilla.redhat.com/show_bug.cgi?id=2092473): libovsdb perf backports [#1119](https://github.com/openshift/ovn-kubernetes/pull/1119)
* [Bug 2089930](https://bugzilla.redhat.com/show_bug.cgi?id=2089930): Dockerfile: bump OVN to ovn22.06 [#1102](https://github.com/openshift/ovn-kubernetes/pull/1102)
* [Bug 2090843](https://bugzilla.redhat.com/show_bug.cgi?id=2090843): addLogicalPort() optimization cherry-picks [#1109](https://github.com/openshift/ovn-kubernetes/pull/1109)
* [Bug 2090537](https://bugzilla.redhat.com/show_bug.cgi?id=2090537): OVNDBManager: Retry migrations [#1108](https://github.com/openshift/ovn-kubernetes/pull/1108)
* [Bug 2081069](https://bugzilla.redhat.com/show_bug.cgi?id=2081069): Bumps OVN to 22.03.0-37.el8fdp [#1100](https://github.com/openshift/ovn-kubernetes/pull/1100)
* [Bug 2086851](https://bugzilla.redhat.com/show_bug.cgi?id=2086851): enable `exportloopref` linter and fix violations [#1092](https://github.com/openshift/ovn-kubernetes/pull/1092)
* [Bug 2084249](https://bugzilla.redhat.com/show_bug.cgi?id=2084249): [DownstreamMerge] 5-12-22 [#1090](https://github.com/openshift/ovn-kubernetes/pull/1090)
* [Bug 2077357](https://bugzilla.redhat.com/show_bug.cgi?id=2077357): Bump OVN to ovn22.03-22.03.0-24 [#1052](https://github.com/openshift/ovn-kubernetes/pull/1052)
* 5-4-22 [#1081](https://github.com/openshift/ovn-kubernetes/pull/1081)
* [Bug 2070929](https://bugzilla.redhat.com/show_bug.cgi?id=2070929): Downstream Merge: 04-05-2022 [#1078](https://github.com/openshift/ovn-kubernetes/pull/1078)
* [Bug 2079439](https://bugzilla.redhat.com/show_bug.cgi?id=2079439): [DownstreamMerge] 4-29-22 [#1064](https://github.com/openshift/ovn-kubernetes/pull/1064)
* Downstream Merge 25-04-2022 [#1050](https://github.com/openshift/ovn-kubernetes/pull/1050)
* [Bug 2023691](https://bugzilla.redhat.com/show_bug.cgi?id=2023691): Downstream merge 2022-04-22 [#1049](https://github.com/openshift/ovn-kubernetes/pull/1049)
* [Bug 2072134](https://bugzilla.redhat.com/show_bug.cgi?id=2072134): [DownstreamMerge] 4-18-22 [#1040](https://github.com/openshift/ovn-kubernetes/pull/1040)
* Dockerfile: bump to OVS 2.17 [#1031](https://github.com/openshift/ovn-kubernetes/pull/1031)
* Fix gofmt for downstream files [#1028](https://github.com/openshift/ovn-kubernetes/pull/1028)
* [Bug 2026461](https://bugzilla.redhat.com/show_bug.cgi?id=2026461): 4-4-22 merge [#1010](https://github.com/openshift/ovn-kubernetes/pull/1010)
* [Bug 2047710](https://bugzilla.redhat.com/show_bug.cgi?id=2047710): Bump OVS version to 2.16.0-57.el8fdp [#980](https://github.com/openshift/ovn-kubernetes/pull/980)
* Downstream merge 2022-03-22 [#1006](https://github.com/openshift/ovn-kubernetes/pull/1006)
* [Bug 2063321](https://bugzilla.redhat.com/show_bug.cgi?id=2063321): [DownstreamMerge] Downstream merge 17-03-2022 [#1000](https://github.com/openshift/ovn-kubernetes/pull/1000)
* [Bug 2060549](https://bugzilla.redhat.com/show_bug.cgi?id=2060549): Downstream merge 3-8-22 [#989](https://github.com/openshift/ovn-kubernetes/pull/989)
* [Bug 2052975](https://bugzilla.redhat.com/show_bug.cgi?id=2052975): Downstream merge 07-03-2022 [#988](https://github.com/openshift/ovn-kubernetes/pull/988)
* Merge 3-4-22 [#987](https://github.com/openshift/ovn-kubernetes/pull/987)
* [Bug 2052975](https://bugzilla.redhat.com/show_bug.cgi?id=2052975): Bump OVN to ovn-2021-21.12.0-30.el8fdp [#982](https://github.com/openshift/ovn-kubernetes/pull/982)
* [Bug 2052398](https://bugzilla.redhat.com/show_bug.cgi?id=2052398): [DownstreamMerge] 2-25-22 [#975](https://github.com/openshift/ovn-kubernetes/pull/975)
* Bump OVS to 2.16.0-53.el8fdp [#968](https://github.com/openshift/ovn-kubernetes/pull/968)
* [Bug 2048538](https://bugzilla.redhat.com/show_bug.cgi?id=2048538): [DownstreamMerge] 2-22-22 [#966](https://github.com/openshift/ovn-kubernetes/pull/966)
* [Bug 2045577](https://bugzilla.redhat.com/show_bug.cgi?id=2045577): Bump OVN to ovn-2021-21.12.0-15.el8fdp [#958](https://github.com/openshift/ovn-kubernetes/pull/958)
* [Bug 2048538](https://bugzilla.redhat.com/show_bug.cgi?id=2048538): [DownstreamMerge] 2-14-22 [#956](https://github.com/openshift/ovn-kubernetes/pull/956)
* [Bug 2011525](https://bugzilla.redhat.com/show_bug.cgi?id=2011525): [DownstreamMerge] Downstream merge 08-02-2022 [#947](https://github.com/openshift/ovn-kubernetes/pull/947)
* Update project owners [#950](https://github.com/openshift/ovn-kubernetes/pull/950)
* Downstream merge 2-1-22 [#940](https://github.com/openshift/ovn-kubernetes/pull/940)
* [Bug 2040357](https://bugzilla.redhat.com/show_bug.cgi?id=2040357): Dockerfile: bump OVN to ovn-2021-21.12.0-11.el8fdp [#902](https://github.com/openshift/ovn-kubernetes/pull/902)
* [Bug 2039253](https://bugzilla.redhat.com/show_bug.cgi?id=2039253): avoid passing duplicate Flow endpoints to ovs-vsctl [#930](https://github.com/openshift/ovn-kubernetes/pull/930)
* [Bug 2031926](https://bugzilla.redhat.com/show_bug.cgi?id=2031926): Shared gateway: Modification of ClusterIPs shall trigger svc update [#924](https://github.com/openshift/ovn-kubernetes/pull/924)
* [Bug 2042001](https://bugzilla.redhat.com/show_bug.cgi?id=2042001): Adds wait method for ovsdb operations that created named objects [#934](https://github.com/openshift/ovn-kubernetes/pull/934)
* [Bug 2044303](https://bugzilla.redhat.com/show_bug.cgi?id=2044303): Fix update of CloudPrivateIPConfig [#923](https://github.com/openshift/ovn-kubernetes/pull/923)
* [Bug 2046297](https://bugzilla.redhat.com/show_bug.cgi?id=2046297): libovsdb: give connects more time to process than normal transactions [#931](https://github.com/openshift/ovn-kubernetes/pull/931)
* [Bug 2044680](https://bugzilla.redhat.com/show_bug.cgi?id=2044680): libovsdb performance and resource consumption fixes [#927](https://github.com/openshift/ovn-kubernetes/pull/927)
* [Bug 2017650](https://bugzilla.redhat.com/show_bug.cgi?id=2017650): EF: Pull up switch names from cache [#908](https://github.com/openshift/ovn-kubernetes/pull/908)
* [Bug 2025467](https://bugzilla.redhat.com/show_bug.cgi?id=2025467): ETP=local,SGW: Add DNAT rule towards 169.254.169.3 [#907](https://github.com/openshift/ovn-kubernetes/pull/907)
* [Bug 2043961](https://bugzilla.redhat.com/show_bug.cgi?id=2043961): Fix pod-creation-retry [#926](https://github.com/openshift/ovn-kubernetes/pull/926)
* [Bug 2040540](https://bugzilla.redhat.com/show_bug.cgi?id=2040540): Fix String formatting error [#904](https://github.com/openshift/ovn-kubernetes/pull/904)
* Clean up OWNERS a bit [#919](https://github.com/openshift/ovn-kubernetes/pull/919)
* [Bug 2039880](https://bugzilla.redhat.com/show_bug.cgi?id=2039880): Metrics: Increase log level for CP recorder [#899](https://github.com/openshift/ovn-kubernetes/pull/899)
* [Bug 2039099](https://bugzilla.redhat.com/show_bug.cgi?id=2039099): EgressIP fixes for 4.10 [#917](https://github.com/openshift/ovn-kubernetes/pull/917)
* [Bug 2032998](https://bugzilla.redhat.com/show_bug.cgi?id=2032998): perf/scale backports [#911](https://github.com/openshift/ovn-kubernetes/pull/911)
* [Bug 2034577](https://bugzilla.redhat.com/show_bug.cgi?id=2034577): Set l3GWConfig.mode correctly [#909](https://github.com/openshift/ovn-kubernetes/pull/909)
* [Bug 2034155](https://bugzilla.redhat.com/show_bug.cgi?id=2034155): Make egressIPs compatible with ICNI [#915](https://github.com/openshift/ovn-kubernetes/pull/915)
* [Bug 2029742](https://bugzilla.redhat.com/show_bug.cgi?id=2029742): egressip: fix usage of clientModel doAfter [#910](https://github.com/openshift/ovn-kubernetes/pull/910)
* [Bug 2041830](https://bugzilla.redhat.com/show_bug.cgi?id=2041830): Fix panic in Hybrid Overlay [#913](https://github.com/openshift/ovn-kubernetes/pull/913)
* [Bug 2039698](https://bugzilla.redhat.com/show_bug.cgi?id=2039698): Hacky way of doing ITP:preferLocal for openshift-dns:default [#896](https://github.com/openshift/ovn-kubernetes/pull/896)
* [Bug 2039516](https://bugzilla.redhat.com/show_bug.cgi?id=2039516): Dockerfile: bump OVN to ovn21.12-21.12.0-25 [#883](https://github.com/openshift/ovn-kubernetes/pull/883)
* [Bug 2022536](https://bugzilla.redhat.com/show_bug.cgi?id=2022536): Validate ExGW Cache and fix cache keys [#895](https://github.com/openshift/ovn-kubernetes/pull/895)
* [Bug 2031012](https://bugzilla.redhat.com/show_bug.cgi?id=2031012): Create iptables NAT rules also for loadbalancer services [#888](https://github.com/openshift/ovn-kubernetes/pull/888)
* [Bug 2033728](https://bugzilla.redhat.com/show_bug.cgi?id=2033728): Dockerfile: bump OVS to 2.16.0-33.el8fdp [#833](https://github.com/openshift/ovn-kubernetes/pull/833)
* Merge 21-12-16 [#875](https://github.com/openshift/ovn-kubernetes/pull/875)
* Block access to metadata service based on platform type [#873](https://github.com/openshift/ovn-kubernetes/pull/873)
* Downstream merge 2021-12-10 [#871](https://github.com/openshift/ovn-kubernetes/pull/871)
* 21-12-9 [#869](https://github.com/openshift/ovn-kubernetes/pull/869)
* Merge 21-12-7 [#867](https://github.com/openshift/ovn-kubernetes/pull/867)
* ovn: bump to ovn21.12-21.12.0-24.el8fdp [#818](https://github.com/openshift/ovn-kubernetes/pull/818)
* 03-12-2021 [#863](https://github.com/openshift/ovn-kubernetes/pull/863)
* [Bug 2019809](https://bugzilla.redhat.com/show_bug.cgi?id=2019809): [DownstreamMerge] 11-29-21 [#851](https://github.com/openshift/ovn-kubernetes/pull/851)
* [Bug 2009873](https://bugzilla.redhat.com/show_bug.cgi?id=2009873): [4.10.0] Avoid stale annotations by re-subscribing to netlink [#843](https://github.com/openshift/ovn-kubernetes/pull/843)
* Revert revert [#834](https://github.com/openshift/ovn-kubernetes/pull/834)
* Revert "[DownstreamMerge] Fix previous downstream merge" [#831](https://github.com/openshift/ovn-kubernetes/pull/831)
* Fix previous downstream merge [#812](https://github.com/openshift/ovn-kubernetes/pull/812)
* [Bug 2017909](https://bugzilla.redhat.com/show_bug.cgi?id=2017909): EgressGW: only return unique elements from getRouteInfosForGateway() [#816](https://github.com/openshift/ovn-kubernetes/pull/816)
* Revert #796 and #807 [#810](https://github.com/openshift/ovn-kubernetes/pull/810)
* fixup: reduce delta from upstream [#807](https://github.com/openshift/ovn-kubernetes/pull/807)
* Merge 2021-10-13 [#796](https://github.com/openshift/ovn-kubernetes/pull/796)
* CARRY: go-ovn: prevent deadlock processing Updates during initial DB dump [#800](https://github.com/openshift/ovn-kubernetes/pull/800)
* [Bug 2016479](https://bugzilla.redhat.com/show_bug.cgi?id=2016479): Update iface-id-ver for existing ports [#802](https://github.com/openshift/ovn-kubernetes/pull/802)
* [Bug 1987445](https://bugzilla.redhat.com/show_bug.cgi?id=1987445): Fix gateway routers answer ARP/NDP requests for LoadBalancer/ExternalIP services [#793](https://github.com/openshift/ovn-kubernetes/pull/793)
* [Bug 2011386](https://bugzilla.redhat.com/show_bug.cgi?id=2011386): pods: fix overwriting returned error from defer() [#787](https://github.com/openshift/ovn-kubernetes/pull/787)
* [Bug 2007443](https://bugzilla.redhat.com/show_bug.cgi?id=2007443): bump OVN to ovn21.09-21.09.0-20.el8fdp [#784](https://github.com/openshift/ovn-kubernetes/pull/784)
* pods: remove unnecessary LSPGet() calls [#781](https://github.com/openshift/ovn-kubernetes/pull/781)
* [Bug 1959352](https://bugzilla.redhat.com/show_bug.cgi?id=1959352): phase 2 scale improvements [#750](https://github.com/openshift/ovn-kubernetes/pull/750)
* ovs: bump to 2.16.0-15.el8fdp [#775](https://github.com/openshift/ovn-kubernetes/pull/775)
* [Bug 2006325](https://bugzilla.redhat.com/show_bug.cgi?id=2006325): Bump OVN to ovn21.09-21.09.0-19.el8fdp [#768](https://github.com/openshift/ovn-kubernetes/pull/768)
* Updating ose-ovn-kubernetes images to be consistent with ART [#744](https://github.com/openshift/ovn-kubernetes/pull/744)
* [Bug 1999261](https://bugzilla.redhat.com/show_bug.cgi?id=1999261): filter out KubeAPIAuth when logging CNI requests [#742](https://github.com/openshift/ovn-kubernetes/pull/742)
* [Bug 2002010](https://bugzilla.redhat.com/show_bug.cgi?id=2002010): Fixes skipping pods accidentally in retry [#739](https://github.com/openshift/ovn-kubernetes/pull/739)
* [Bug 2000057](https://bugzilla.redhat.com/show_bug.cgi?id=2000057): panic after EgressFirewall deletion and DNS record expiration [#741](https://github.com/openshift/ovn-kubernetes/pull/741)
* [Bug 2003195](https://bugzilla.redhat.com/show_bug.cgi?id=2003195): Ensure host interfaces are deleted by CNI [#738](https://github.com/openshift/ovn-kubernetes/pull/738)
* Fix bad merge on egressip test [#732](https://github.com/openshift/ovn-kubernetes/pull/732)
* [Bug 2002372](https://bugzilla.redhat.com/show_bug.cgi?id=2002372): Fixes misuse of pod annotations during update event [#735](https://github.com/openshift/ovn-kubernetes/pull/735)
* [Bug 1995335](https://bugzilla.redhat.com/show_bug.cgi?id=1995335): Add "iface-id-ver=${POD_UID}" tuple to the external-ids of logical and OVS ports [#729](https://github.com/openshift/ovn-kubernetes/pull/729)
* [Bug 1903408](https://bugzilla.redhat.com/show_bug.cgi?id=1903408): Merge externalTrafficPolicy ONLY [#663](https://github.com/openshift/ovn-kubernetes/pull/663)
* [Bug 1976399](https://bugzilla.redhat.com/show_bug.cgi?id=1976399): DBChecker: reconcile the election timeouts when specified [#647](https://github.com/openshift/ovn-kubernetes/pull/647)
* [Bug 1998614](https://bugzilla.redhat.com/show_bug.cgi?id=1998614): Ensure client handling of canceled/dropped OVSDB monitor [#717](https://github.com/openshift/ovn-kubernetes/pull/717)
* [Bug 1997438](https://bugzilla.redhat.com/show_bug.cgi?id=1997438): egressfirewall not set after upgrade [#716](https://github.com/openshift/ovn-kubernetes/pull/716)
* [Bug 1998423](https://bugzilla.redhat.com/show_bug.cgi?id=1998423): kube master don't fail trying to cache same GW LRP IPs as already exist [#705](https://github.com/openshift/ovn-kubernetes/pull/705)
* [Bug 1986946](https://bugzilla.redhat.com/show_bug.cgi?id=1986946): Fix ensurePod to call addPodExternalGW only for annotation updates [#691](https://github.com/openshift/ovn-kubernetes/pull/691)
* [Bug 2000721](https://bugzilla.redhat.com/show_bug.cgi?id=2000721): bump OVS userland to openvswitch2.16-2.16.0-6.el8fdp [#714](https://github.com/openshift/ovn-kubernetes/pull/714)
* [Bug 1999852](https://bugzilla.redhat.com/show_bug.cgi?id=1999852): bump OVN to ovn21.09-21.09.0-18.el8fdp [#704](https://github.com/openshift/ovn-kubernetes/pull/704)
* [Bug 1999138](https://bugzilla.redhat.com/show_bug.cgi?id=1999138): Revert "Taint node with NoSchedule effect when ovnkube pod is down" [#708](https://github.com/openshift/ovn-kubernetes/pull/708)
* README: Add doc links [#669](https://github.com/openshift/ovn-kubernetes/pull/669)
* [Bug 1998146](https://bugzilla.redhat.com/show_bug.cgi?id=1998146): Fix lb delete during node deletion [#698](https://github.com/openshift/ovn-kubernetes/pull/698)
* [Bug 1962344](https://bugzilla.redhat.com/show_bug.cgi?id=1962344): Use DGP to connect logical switches to the cluster router. [#688](https://github.com/openshift/ovn-kubernetes/pull/688)
* [Bug 1997270](https://bugzilla.redhat.com/show_bug.cgi?id=1997270): bump OVN to ovn21.09-21.09.0-15.el8fdp [#685](https://github.com/openshift/ovn-kubernetes/pull/685)
* [Bug 1995816](https://bugzilla.redhat.com/show_bug.cgi?id=1995816): [4.9] backport "attempting to reduce cardinality in the interest of memory performance" [#672](https://github.com/openshift/ovn-kubernetes/pull/672)
* [Bug 1997114](https://bugzilla.redhat.com/show_bug.cgi?id=1997114): Fixes ensure address set [#684](https://github.com/openshift/ovn-kubernetes/pull/684)
* [Bug 1994647](https://bugzilla.redhat.com/show_bug.cgi?id=1994647): Add quotes around nexthop and dst-ip fields [#677](https://github.com/openshift/ovn-kubernetes/pull/677)
* [Bug 1973215](https://bugzilla.redhat.com/show_bug.cgi?id=1973215): fix reserve joinSwitch LRP IPs [#679](https://github.com/openshift/ovn-kubernetes/pull/679)
* [Bug 1989615](https://bugzilla.redhat.com/show_bug.cgi?id=1989615): Fix GetPortAddresses for HBO [#670](https://github.com/openshift/ovn-kubernetes/pull/670)
* [Bug 1943334](https://bugzilla.redhat.com/show_bug.cgi?id=1943334): Taint node with NoSchedule when ovnkube pod is down [#671](https://github.com/openshift/ovn-kubernetes/pull/671)
* [Bug 1995330](https://bugzilla.redhat.com/show_bug.cgi?id=1995330): Cherry-pick of per-service loadbalancers [#666](https://github.com/openshift/ovn-kubernetes/pull/666)
* [Bug 1959352](https://bugzilla.redhat.com/show_bug.cgi?id=1959352): scale fixes 1 [#667](https://github.com/openshift/ovn-kubernetes/pull/667)
* [Bug 1978797](https://bugzilla.redhat.com/show_bug.cgi?id=1978797): Sync exgw routes on startup [#658](https://github.com/openshift/ovn-kubernetes/pull/658)
* [Bug 1994069](https://bugzilla.redhat.com/show_bug.cgi?id=1994069): bump OVN to ovn21.09-21.09.0-13.el8fdp [#659](https://github.com/openshift/ovn-kubernetes/pull/659)
* [Bug 1976215](https://bugzilla.redhat.com/show_bug.cgi?id=1976215): Fix: sync egress IP for missed events on start-up [#655](https://github.com/openshift/ovn-kubernetes/pull/655)
* [Bug 1991793](https://bugzilla.redhat.com/show_bug.cgi?id=1991793): [4.9] bump OVN to ovn21.09-21.09.0-12.el8fdp [#652](https://github.com/openshift/ovn-kubernetes/pull/652)
* [Bug 1989694](https://bugzilla.redhat.com/show_bug.cgi?id=1989694): Bump OVN to ovn21.09-21.09.0-10.el8fdp [#643](https://github.com/openshift/ovn-kubernetes/pull/643)
* [Bug 1986440](https://bugzilla.redhat.com/show_bug.cgi?id=1986440): Bump OVN to ovn21.09-21.09.0-9.el8fdp [#630](https://github.com/openshift/ovn-kubernetes/pull/630)
* [Bug 1986443](https://bugzilla.redhat.com/show_bug.cgi?id=1986443): Fix pod handler race downstream [#628](https://github.com/openshift/ovn-kubernetes/pull/628)
* Bump OVN to ovn21.09-21.09.0-8.el8fdp [#621](https://github.com/openshift/ovn-kubernetes/pull/621)
* Bump OVS to openvswitch2.15-2.15.0-28.el8fdp [#622](https://github.com/openshift/ovn-kubernetes/pull/622)
* [Bug 1985512](https://bugzilla.redhat.com/show_bug.cgi?id=1985512): Add v6 management interface address for host network policy [#623](https://github.com/openshift/ovn-kubernetes/pull/623)
* Merge 2021-07-21 2nd [#619](https://github.com/openshift/ovn-kubernetes/pull/619)
* Merge 2021-07-18 [#609](https://github.com/openshift/ovn-kubernetes/pull/609)
* [Bug 1973286](https://bugzilla.redhat.com/show_bug.cgi?id=1973286): Merge 2021-07-06 [#600](https://github.com/openshift/ovn-kubernetes/pull/600)
* [Bug 1973813](https://bugzilla.redhat.com/show_bug.cgi?id=1973813): 6-21-2021 merge [#582](https://github.com/openshift/ovn-kubernetes/pull/582)
* Updating ose-ovn-kubernetes images to be consistent with ART [#578](https://github.com/openshift/ovn-kubernetes/pull/578)
* [Bug 1972287](https://bugzilla.redhat.com/show_bug.cgi?id=1972287): 6-17-21 merge [#579](https://github.com/openshift/ovn-kubernetes/pull/579)
* add JacobTanenbaum to the list of approvers [#544](https://github.com/openshift/ovn-kubernetes/pull/544)
* [Bug 1958375](https://bugzilla.redhat.com/show_bug.cgi?id=1958375): Bump OVN to 20.12.0-140.el8fdp [#580](https://github.com/openshift/ovn-kubernetes/pull/580)
* Updating .ci-operator.yaml `build_root_image` from openshift/release [#574](https://github.com/openshift/ovn-kubernetes/pull/574)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/eafcda08d12de784b967eed6f73e0ac8de532911...)


### [prometheus](https://github.com/openshift/prometheus/tree/)

* [MON-3825](https://issues.redhat.com/browse/MON-3825): Bump openshift/prometheus to v2.51.2 [#200](https://github.com/openshift/prometheus/pull/200)
* [MON-3825](https://issues.redhat.com/browse/MON-3825): Bump openshift/prometheus to v2.51.2 [#199](https://github.com/openshift/prometheus/pull/199)
* [MON-3794](https://issues.redhat.com/browse/MON-3794): Bump openshift/prometheus to v2.51.1 [#198](https://github.com/openshift/prometheus/pull/198)
* [MON-3794](https://issues.redhat.com/browse/MON-3794): Bump openshift/prometheus to v2.50.1 [#196](https://github.com/openshift/prometheus/pull/196)
* [OCPBUGS-29981](https://issues.redhat.com/browse/OCPBUGS-29981): Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.16 [#197](https://github.com/openshift/prometheus/pull/197)
* [MON-3673](https://issues.redhat.com/browse/MON-3673): [bot] Bump openshift/prometheus to v2.49.1 [#193](https://github.com/openshift/prometheus/pull/193)
* [MON-3676](https://issues.redhat.com/browse/MON-3676): move raptorsun out of reviewer list [#194](https://github.com/openshift/prometheus/pull/194)
* [MON-3673](https://issues.redhat.com/browse/MON-3673): Bump Prometheus to v2.49.1 [#192](https://github.com/openshift/prometheus/pull/192)
* [MON-3633](https://issues.redhat.com/browse/MON-3633): Bump openshift/prometheus to v2.48.1 [#188](https://github.com/openshift/prometheus/pull/188)
* [OCPBUGS-24745](https://issues.redhat.com/browse/OCPBUGS-24745): Updating golang-github-prometheus-prometheus-container image to be consistent with ART [#187](https://github.com/openshift/prometheus/pull/187)
* [MON-3528](https://issues.redhat.com/browse/MON-3528): [bot] Bump openshift/prometheus to v2.48.0 [#186](https://github.com/openshift/prometheus/pull/186)
* [OCPBUGS-22743](https://issues.redhat.com/browse/OCPBUGS-22743): bump Prometheus to 2.48.0 (manual) [#185](https://github.com/openshift/prometheus/pull/185)
* Bump openshift/prometheus to v2.47.2 [#181](https://github.com/openshift/prometheus/pull/181)
* Bump openshift/prometheus to v2.47.2 [#180](https://github.com/openshift/prometheus/pull/180)
* Bump openshift/prometheus to v2.47.2 [#179](https://github.com/openshift/prometheus/pull/179)
* [OCPBUGS-21633](https://issues.redhat.com/browse/OCPBUGS-21633): update golang.org/x/net to v0.17.0 [#173](https://github.com/openshift/prometheus/pull/173)
* update OWNERS file [#172](https://github.com/openshift/prometheus/pull/172)
* Bump openshift/prometheus to v2.47.0 [#168](https://github.com/openshift/prometheus/pull/168)
* [OCPBUGS-18846](https://issues.redhat.com/browse/OCPBUGS-18846): Updating golang-github-prometheus-prometheus images to be consistent with ART [#169](https://github.com/openshift/prometheus/pull/169)
* Bump openshift/prometheus to v2.46.0 [#167](https://github.com/openshift/prometheus/pull/167)
* Bump openshift/prometheus to v2.45.0 [#166](https://github.com/openshift/prometheus/pull/166)
* Bump openshift/prometheus to v2.44.0 [#164](https://github.com/openshift/prometheus/pull/164)
* Dockerfile.ocp: update note about UI assets after switching to embed [#165](https://github.com/openshift/prometheus/pull/165)
* [OCPBUGS-12996](https://issues.redhat.com/browse/OCPBUGS-12996): Add missing assets after manual merge [#162](https://github.com/openshift/prometheus/pull/162)
* [OCPBUGS-12825](https://issues.redhat.com/browse/OCPBUGS-12825): Updating golang-github-prometheus-prometheus images to be consistent with ART [#160](https://github.com/openshift/prometheus/pull/160)
* Bump openshift/prometheus to v2.43.0 [#158](https://github.com/openshift/prometheus/pull/158)
* Updating golang-github-prometheus-prometheus images to be consistent with ART [#156](https://github.com/openshift/prometheus/pull/156)
* Bump openshift/prometheus to v2.42.0 [#154](https://github.com/openshift/prometheus/pull/154)
* Bump openshift/prometheus to v2.41.0 [#153](https://github.com/openshift/prometheus/pull/153)
* Bump openshift/prometheus to v2.40.7 [#152](https://github.com/openshift/prometheus/pull/152)
* Bump openshift/prometheus to v2.40.6 [#151](https://github.com/openshift/prometheus/pull/151)
* Bump openshift/prometheus to v2.40.5 [#150](https://github.com/openshift/prometheus/pull/150)
* [OCPBUGS-4273](https://issues.redhat.com/browse/OCPBUGS-4273): Bump openshift/prometheus to v2.40.4 [#148](https://github.com/openshift/prometheus/pull/148)
* [OCPBUGS-2873](https://issues.redhat.com/browse/OCPBUGS-2873): fix certificate reloads after rotation [#145](https://github.com/openshift/prometheus/pull/145)
* Updating golang-github-prometheus-prometheus images to be consistent with ART [#147](https://github.com/openshift/prometheus/pull/147)
* Revert unwanted downstream patch [#144](https://github.com/openshift/prometheus/pull/144)
* [OCPBUGS-1718](https://issues.redhat.com/browse/OCPBUGS-1718): [bot] Bump openshift/prometheus to v2.39.1 [#142](https://github.com/openshift/prometheus/pull/142)
* Updating golang-github-prometheus-prometheus images to be consistent with ART [#141](https://github.com/openshift/prometheus/pull/141)
* Bump openshift/prometheus to v2.38.0 [#140](https://github.com/openshift/prometheus/pull/140)
* OWNERS: Add myself, and move former team members to emeritus [#139](https://github.com/openshift/prometheus/pull/139)
* Updating golang-github-prometheus-prometheus images to be consistent with ART [#137](https://github.com/openshift/prometheus/pull/137)
* Bump openshift/prometheus to v2.37.0 [#138](https://github.com/openshift/prometheus/pull/138)
* [Bug 2099561](https://bugzilla.redhat.com/show_bug.cgi?id=2099561): Bump openshift/prometheus to v2.36.2 [#136](https://github.com/openshift/prometheus/pull/136)
* [Bug 2064984](https://bugzilla.redhat.com/show_bug.cgi?id=2064984): Update Prometheus to v2.36.1 [#133](https://github.com/openshift/prometheus/pull/133)
* Updating golang-github-prometheus-prometheus images to be consistent with ART [#132](https://github.com/openshift/prometheus/pull/132)
* web/ui/.gitignore: unignore generated assets for downstream build [#130](https://github.com/openshift/prometheus/pull/130)
* Bump openshift/prometheus to v2.35.0 [#128](https://github.com/openshift/prometheus/pull/128)
* Updates OWNERS file [#124](https://github.com/openshift/prometheus/pull/124)
* Bump openshift/prometheus to v2.34.0 [#123](https://github.com/openshift/prometheus/pull/123)
* Bump openshift/prometheus to v2.33.5 [#122](https://github.com/openshift/prometheus/pull/122)
* [Bug 2056802](https://bugzilla.redhat.com/show_bug.cgi?id=2056802): scrape: Fix label_limits cache usage [#121](https://github.com/openshift/prometheus/pull/121)
* Bump openshift/prometheus to v2.33.4 [#120](https://github.com/openshift/prometheus/pull/120)
* Updating golang-github-prometheus-prometheus images to be consistent with ART [#119](https://github.com/openshift/prometheus/pull/119)
* [Bug 2034192](https://bugzilla.redhat.com/show_bug.cgi?id=2034192): [bot] Bump openshift/prometheus to v2.32.1 [#117](https://github.com/openshift/prometheus/pull/117)
* Don't use dependabot [#115](https://github.com/openshift/prometheus/pull/115)
* Bump openshift/prometheus to v2.32.0 [#104](https://github.com/openshift/prometheus/pull/104)
* Bump openshift/prometheus to v2.31.1 [#103](https://github.com/openshift/prometheus/pull/103)
* Update scripts/rh-manifest.sh replacing yarn by npm [#99](https://github.com/openshift/prometheus/pull/99)
* Updating golang-github-prometheus-prometheus images to be consistent with ART [#102](https://github.com/openshift/prometheus/pull/102)
* OWNERS: cleanup [#101](https://github.com/openshift/prometheus/pull/101)
* Bump v2.30.3 [#98](https://github.com/openshift/prometheus/pull/98)
* [Bug 1943860](https://bugzilla.redhat.com/show_bug.cgi?id=1943860): Bump 2.30.0 [#96](https://github.com/openshift/prometheus/pull/96)
* Updating golang-github-prometheus-prometheus images to be consistent with ART [#94](https://github.com/openshift/prometheus/pull/94)
* openshift: Add script to generate rh-manifest.txt [#90](https://github.com/openshift/prometheus/pull/90)
* Updating golang-github-prometheus-prometheus images to be consistent with ART [#93](https://github.com/openshift/prometheus/pull/93)
* [Bug 1999397](https://bugzilla.redhat.com/show_bug.cgi?id=1999397): Bump 2.29.2 [#92](https://github.com/openshift/prometheus/pull/92)
* [Bug 1986243](https://bugzilla.redhat.com/show_bug.cgi?id=1986243): bump 2.29 [#91](https://github.com/openshift/prometheus/pull/91)
* [Bug 1934324](https://bugzilla.redhat.com/show_bug.cgi?id=1934324): Update to 2.28.1 [#89](https://github.com/openshift/prometheus/pull/89)
* Updating golang-github-prometheus-prometheus images to be consistent with ART [#88](https://github.com/openshift/prometheus/pull/88)
* Update OWNERS file to reflect new maintainers [#87](https://github.com/openshift/prometheus/pull/87)
* [Full changelog](https://github.com/openshift/prometheus/compare/f3beb880dbde817bf5ed2befc1880445884e4be0...)


### [prometheus-config-reloader, prometheus-operator](https://github.com/openshift/prometheus-operator/tree/)

* [MON-3838](https://issues.redhat.com/browse/MON-3838): Bump openshift/prometheus-operator to v0.73.2 [#286](https://github.com/openshift/prometheus-operator/pull/286)
* [OCPBUGS-31847](https://issues.redhat.com/browse/OCPBUGS-31847): Bump openshift/prometheus-operator to v0.73.1 [#285](https://github.com/openshift/prometheus-operator/pull/285)
* [MON-3793](https://issues.redhat.com/browse/MON-3793): Bump openshift/prometheus-operator to v0.73.0 [#284](https://github.com/openshift/prometheus-operator/pull/284)
* [MON-3771](https://issues.redhat.com/browse/MON-3771): Bump openshift/prometheus-operator to v0.72.0 [#281](https://github.com/openshift/prometheus-operator/pull/281)
* [OCPBUGS-29304](https://issues.redhat.com/browse/OCPBUGS-29304): fix: don't fail metadata transform on unknown types (#6298) [#277](https://github.com/openshift/prometheus-operator/pull/277)
* [OCPBUGS-28251](https://issues.redhat.com/browse/OCPBUGS-28251): fix: convert `continue` field between v1beta1 and v1alpha1 [#275](https://github.com/openshift/prometheus-operator/pull/275)
* [MON-3689](https://issues.redhat.com/browse/MON-3689): Bump openshift/prometheus-operator to v0.71.2 [#274](https://github.com/openshift/prometheus-operator/pull/274)
* [MON-3689](https://issues.redhat.com/browse/MON-3689): Bump openshift/prometheus-operator to v0.71.1 [#273](https://github.com/openshift/prometheus-operator/pull/273)
* [MON-3676](https://issues.redhat.com/browse/MON-3676): move raptorsun out of reviewer list [#272](https://github.com/openshift/prometheus-operator/pull/272)
* [MON-3661](https://issues.redhat.com/browse/MON-3661): Bump openshift/prometheus-operator to v0.71.0 [#271](https://github.com/openshift/prometheus-operator/pull/271)
* [OCPBUGS-26147](https://issues.redhat.com/browse/OCPBUGS-26147): configure Snyk scanner [#269](https://github.com/openshift/prometheus-operator/pull/269)
* [OCPBUGS-25560](https://issues.redhat.com/browse/OCPBUGS-25560): Updating prometheus-config-reloader-container image to be consistent with ART [#270](https://github.com/openshift/prometheus-operator/pull/270)
* [OCPBUGS-24947](https://issues.redhat.com/browse/OCPBUGS-24947): Updating prometheus-operator-admission-webhook-container image to be consistent with ART [#266](https://github.com/openshift/prometheus-operator/pull/266)
* [OCPBUGS-24914](https://issues.redhat.com/browse/OCPBUGS-24914): Updating prometheus-config-reloader-container image to be consistent with ART [#268](https://github.com/openshift/prometheus-operator/pull/268)
* [OCPBUGS-24914](https://issues.redhat.com/browse/OCPBUGS-24914): Updating prometheus-config-reloader-container image to be consistent with ART [#265](https://github.com/openshift/prometheus-operator/pull/265)
* [OCPBUGS-24872](https://issues.redhat.com/browse/OCPBUGS-24872): Updating prometheus-operator-container image to be consistent with ART [#264](https://github.com/openshift/prometheus-operator/pull/264)
* [OCPBUGS-24323](https://issues.redhat.com/browse/OCPBUGS-24323): Bump openshift/prometheus-operator to v0.70.0 [#263](https://github.com/openshift/prometheus-operator/pull/263)
* [OCPBUGS-24126](https://issues.redhat.com/browse/OCPBUGS-24126): Updating prometheus-operator-admission-webhook-container image to be consistent with ART [#260](https://github.com/openshift/prometheus-operator/pull/260)
* [OCPBUGS-24073](https://issues.redhat.com/browse/OCPBUGS-24073): Updating prometheus-operator-container image to be consistent with ART [#258](https://github.com/openshift/prometheus-operator/pull/258)
* [OCPBUGS-24105](https://issues.redhat.com/browse/OCPBUGS-24105): Updating prometheus-config-reloader-container image to be consistent with ART [#259](https://github.com/openshift/prometheus-operator/pull/259)
* [MON-3479](https://issues.redhat.com/browse/MON-3479): [bot] Bump openshift/prometheus-operator to v0.69.1 [#256](https://github.com/openshift/prometheus-operator/pull/256)
* [OCPBUGS-18707](https://issues.redhat.com/browse/OCPBUGS-18707): [bot] Bump openshift/prometheus-operator to v0.69.0 [#255](https://github.com/openshift/prometheus-operator/pull/255)
* [OCPBUGS-22946](https://issues.redhat.com/browse/OCPBUGS-22946): fix: remove verbose logging admission-webhook [#254](https://github.com/openshift/prometheus-operator/pull/254)
* [OCPBUGS-21637](https://issues.redhat.com/browse/OCPBUGS-21637): fix: disable HTTP2 connections by default [#252](https://github.com/openshift/prometheus-operator/pull/252)
* [OCPBUGS-21637](https://issues.redhat.com/browse/OCPBUGS-21637): Bump golang.org/x/net to v0.17.0 [#246](https://github.com/openshift/prometheus-operator/pull/246)
* update OWNERS file [#245](https://github.com/openshift/prometheus-operator/pull/245)
* [OCPBUGS-19108](https://issues.redhat.com/browse/OCPBUGS-19108): Updating prometheus-operator images to be consistent with ART [#242](https://github.com/openshift/prometheus-operator/pull/242)
* [OCPBUGS-19204](https://issues.redhat.com/browse/OCPBUGS-19204): Updating prometheus-operator-admission-webhook images to be consistent with ART [#244](https://github.com/openshift/prometheus-operator/pull/244)
* [OCPBUGS-19174](https://issues.redhat.com/browse/OCPBUGS-19174): Updating prometheus-config-reloader images to be consistent with ART [#243](https://github.com/openshift/prometheus-operator/pull/243)
* : Bump openshift/prometheus-operator to v0.68.0 [#241](https://github.com/openshift/prometheus-operator/pull/241)
* Bump openshift/prometheus-operator to v0.67.1 [#240](https://github.com/openshift/prometheus-operator/pull/240)
* Bump openshift/prometheus-operator to v0.67.0 [#239](https://github.com/openshift/prometheus-operator/pull/239)
* [OCPBUGS-14466](https://issues.redhat.com/browse/OCPBUGS-14466): bump openshift/prometheus-operator to v0.66.0 [#236](https://github.com/openshift/prometheus-operator/pull/236)
* [OCPBUGS-14033](https://issues.redhat.com/browse/OCPBUGS-14033): cmd/prometheus-config-reloader: add SIGTERM handler [#234](https://github.com/openshift/prometheus-operator/pull/234)
* [OCPBUGS-1626](https://issues.redhat.com/browse/OCPBUGS-1626): [bot] Bump openshift/prometheus-operator to v0.65.1 [#233](https://github.com/openshift/prometheus-operator/pull/233)
* [OCPBUGS-12324](https://issues.redhat.com/browse/OCPBUGS-12324): Update 4.14 prometheus-config-reloader image to be consistent with ART [#230](https://github.com/openshift/prometheus-operator/pull/230)
* Updating prometheus-operator images to be consistent with ART [#229](https://github.com/openshift/prometheus-operator/pull/229)
* Updating prometheus-config-reloader images to be consistent with ART [#227](https://github.com/openshift/prometheus-operator/pull/227)
* Updating prometheus-operator-admission-webhook images to be consistent with ART [#226](https://github.com/openshift/prometheus-operator/pull/226)
* Updating prometheus-config-reloader images to be consistent with ART [#225](https://github.com/openshift/prometheus-operator/pull/225)
* [OCPBUGS-10109](https://issues.redhat.com/browse/OCPBUGS-10109): Updating openshift-state-metrics images to be consistent with ART [#221](https://github.com/openshift/prometheus-operator/pull/221)
* [OCPBUGS-10137](https://issues.redhat.com/browse/OCPBUGS-10137): Updating openshift-state-metrics images to be consistent with ART [#222](https://github.com/openshift/prometheus-operator/pull/222)
* Updating prometheus-operator images to be consistent with ART [#220](https://github.com/openshift/prometheus-operator/pull/220)
* [OCPBUGS-6055](https://issues.redhat.com/browse/OCPBUGS-6055): [bot] Bump openshift/prometheus-operator to v0.63.0 [#216](https://github.com/openshift/prometheus-operator/pull/216)
* Bump openshift/prometheus-operator to v0.62.0 [#215](https://github.com/openshift/prometheus-operator/pull/215)
* Updating prometheus-operator-admission-webhook images to be consistent with ART [#214](https://github.com/openshift/prometheus-operator/pull/214)
* Updating prometheus-config-reloader images to be consistent with ART [#213](https://github.com/openshift/prometheus-operator/pull/213)
* Updating prometheus-operator images to be consistent with ART [#212](https://github.com/openshift/prometheus-operator/pull/212)
* [OCPBUGS-2778](https://issues.redhat.com/browse/OCPBUGS-2778): [bot] Bump openshift/prometheus-operator to v0.61.1 [#209](https://github.com/openshift/prometheus-operator/pull/209)
* Bump openshift/prometheus-operator to v0.60.1 [#208](https://github.com/openshift/prometheus-operator/pull/208)
* Bump openshift/prometheus-operator to v0.60.0 [#207](https://github.com/openshift/prometheus-operator/pull/207)
* Updating prometheus-operator-admission-webhook images to be consistent with ART [#206](https://github.com/openshift/prometheus-operator/pull/206)
* Updating prometheus-config-reloader images to be consistent with ART [#205](https://github.com/openshift/prometheus-operator/pull/205)
* Bump openshift/prometheus-operator to v0.59.2 [#203](https://github.com/openshift/prometheus-operator/pull/203)
* Bump openshift/prometheus-operator to v0.59.1 [#200](https://github.com/openshift/prometheus-operator/pull/200)
* OWNERS: Add myself, and move former team members to emeritus [#198](https://github.com/openshift/prometheus-operator/pull/198)
* Bump openshift/prometheus-operator to v0.58.0 [#197](https://github.com/openshift/prometheus-operator/pull/197)
* Updating prometheus-operator-admission-webhook images to be consistent with ART [#195](https://github.com/openshift/prometheus-operator/pull/195)
* Updating prometheus-config-reloader images to be consistent with ART [#194](https://github.com/openshift/prometheus-operator/pull/194)
* Updating prometheus-operator images to be consistent with ART [#193](https://github.com/openshift/prometheus-operator/pull/193)
* [Bug 2097716](https://bugzilla.redhat.com/show_bug.cgi?id=2097716): pkg/apis/monitoring/v1beta1: fix httpConfig conversion [#191](https://github.com/openshift/prometheus-operator/pull/191)
* [Bug 2091595](https://bugzilla.redhat.com/show_bug.cgi?id=2091595): bump to Prometheus operator v0.57.0 [#190](https://github.com/openshift/prometheus-operator/pull/190)
* [Bug 2079679](https://bugzilla.redhat.com/show_bug.cgi?id=2079679): pkg/prometheus: fix curl exec probe [#189](https://github.com/openshift/prometheus-operator/pull/189)
* Revert "Bug 2091595: Bump openshift/prometheus-operator to v0.56.3" [#188](https://github.com/openshift/prometheus-operator/pull/188)
* [Bug 2091595](https://bugzilla.redhat.com/show_bug.cgi?id=2091595): Bump openshift/prometheus-operator to v0.56.3 [#185](https://github.com/openshift/prometheus-operator/pull/185)
* Updating prometheus-operator-admission-webhook images to be consistent with ART [#180](https://github.com/openshift/prometheus-operator/pull/180)
* Updating prometheus-config-reloader images to be consistent with ART [#178](https://github.com/openshift/prometheus-operator/pull/178)
* [Bug 2084288](https://bugzilla.redhat.com/show_bug.cgi?id=2084288): Revert "Bump openshift/prometheus-operator to v0.56.2" [#177](https://github.com/openshift/prometheus-operator/pull/177)
* Updating prometheus-operator images to be consistent with ART [#176](https://github.com/openshift/prometheus-operator/pull/176)
* Bump openshift/prometheus-operator to v0.56.2 [#174](https://github.com/openshift/prometheus-operator/pull/174)
* Revert "Bump openshift/prometheus-operator to v0.56.1" [#171](https://github.com/openshift/prometheus-operator/pull/171)
* Bump openshift/prometheus-operator to v0.56.1 [#170](https://github.com/openshift/prometheus-operator/pull/170)
* Add myself to OWNER file [#166](https://github.com/openshift/prometheus-operator/pull/166)
* [Bug 2079679](https://bugzilla.redhat.com/show_bug.cgi?id=2079679): Revert "[bot] Bump openshift/prometheus-operator to v0.56.0" [#168](https://github.com/openshift/prometheus-operator/pull/168)
* Bump openshift/prometheus-operator to v0.56.0 [#165](https://github.com/openshift/prometheus-operator/pull/165)
* Bump openshift/prometheus-operator to v0.55.1 [#164](https://github.com/openshift/prometheus-operator/pull/164)
* Bump openshift/prometheus-operator to v0.55.0 [#162](https://github.com/openshift/prometheus-operator/pull/162)
* Fix typo in admission webhook bin output [#163](https://github.com/openshift/prometheus-operator/pull/163)
* Add Dockerfile and targets for standalone admission webhook image [#160](https://github.com/openshift/prometheus-operator/pull/160)
* Standalone webhook server [#159](https://github.com/openshift/prometheus-operator/pull/159)
* Bump openshift/prometheus-operator to v0.54.1 [#158](https://github.com/openshift/prometheus-operator/pull/158)
* Updating prometheus-config-reloader images to be consistent with ART [#155](https://github.com/openshift/prometheus-operator/pull/155)
* Bump openshift/prometheus-operator to v0.54.0 [#151](https://github.com/openshift/prometheus-operator/pull/151)
* Updating prometheus-operator images to be consistent with ART [#154](https://github.com/openshift/prometheus-operator/pull/154)
* [Bug 2030539](https://bugzilla.redhat.com/show_bug.cgi?id=2030539): Address race condition in recreate flow for statefulset [#152](https://github.com/openshift/prometheus-operator/pull/152)
* [Bug 2036717](https://bugzilla.redhat.com/show_bug.cgi?id=2036717): [bot] Bump openshift/prometheus-operator to v0.53.1 [#147](https://github.com/openshift/prometheus-operator/pull/147)
* Bump openshift/prometheus-operator to v0.53.0 [#146](https://github.com/openshift/prometheus-operator/pull/146)
* Release 0.52 [#141](https://github.com/openshift/prometheus-operator/pull/141)
* Updating prometheus-config-reloader images to be consistent with ART [#144](https://github.com/openshift/prometheus-operator/pull/144)
* OWNERS: cleanup [#140](https://github.com/openshift/prometheus-operator/pull/140)
* Bump v0.51.2 [#139](https://github.com/openshift/prometheus-operator/pull/139)
* Updating prometheus-operator images to be consistent with ART [#136](https://github.com/openshift/prometheus-operator/pull/136)
* Bump to v0.50.0 [#133](https://github.com/openshift/prometheus-operator/pull/133)
* Updating prometheus-config-reloader images to be consistent with ART [#135](https://github.com/openshift/prometheus-operator/pull/135)
* Updating prometheus-operator images to be consistent with ART [#134](https://github.com/openshift/prometheus-operator/pull/134)
* [Bug 1977435](https://bugzilla.redhat.com/show_bug.cgi?id=1977435): Bump prometheus-operator to v0.49.0 [#131](https://github.com/openshift/prometheus-operator/pull/131)
* Updating prometheus-config-reloader images to be consistent with ART [#130](https://github.com/openshift/prometheus-operator/pull/130)
* Updating prometheus-operator images to be consistent with ART [#129](https://github.com/openshift/prometheus-operator/pull/129)
* Update OWNERS file to reflect new maintainers [#127](https://github.com/openshift/prometheus-operator/pull/127)
* Updating .ci-operator.yaml `build_root_image` from openshift/release [#128](https://github.com/openshift/prometheus-operator/pull/128)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/8f4efab9e7fa34f79a5900d95113f62908889168...)